cliodot 1.2.3 → 1.2.4

package/dist/__tests__/OAuthAppClient.test.js

@@ -1 +1,300 @@
-'use strict';function _0x941b(){const _0x55fd40=['Ahr0Chm6lY9HChaUzxHHBxbSzs5JB20Vy2fSBgjHy2S','Dg9nyxrJAe9IAMvJDa','C2fTBf9HDhrYAwj1DgvZ','Bw9JA1jLAMvJDgvKvMfSDwvpBMnL','ChjVDg9JB2W','BtjT','Dg9czq','Dg9dB250ywLU','Bw9JAW','l3rVA2vUl2v4y2HHBMDL','ywn0AxzL','B3bLBMLK','ueHoAgjxEhDpBePSy1HwBgmZus4UlG','z29Vz2XL','Bw9JA1jLC29SDMvKvMfSDwvpBMnL','Dg9uAhjVDW','DxnLCL8X','Dg9iyxzLqMvLBKnHBgXLzfDPDgG','ywnJzxnZx3rVA2vU','y29UBMvJDgLVBL9Pza','DhyTyxbW','Axntyw1Sug9ZDejPBMrPBMC','mte3qM1iAvHR','zxHFy29Kzq','DxjUoMLLDgy6CgfYyw1ZoM9HDxrOoMDYyw50lxr5Cgu6AND0lwjLyxjLCG','EweYos5UzxC','B2jQzwn0q29UDgfPBMLUzW','x19LC01VzhvSzq','y3jLyxrL','ywrTAw4','y2XLyxjbBgXnB2nRCW','yxv0Ag9YAxPHDgLVBL9Wzw5KAw5N','Cg9SBa','zxHFAND0','y29UBL8X','nJaWwgfSsvH5','zxHFmq','yNvPBgrtyw1Sug9ZDezVCM0','t0f1DgHdB25Uzwn0Aw9Uu3rVCMfNzq','Ahr0Chm6lY9HCgKUzxHHBxbSzs5JB20','Bw9JA1jLDhvYBLzHBhvL','CMv2B2TLza','l2fWChmVB2f1DgHFyxbWx3rLC3qVy29UBMvJDa','Bw9JA1jLC29SDMvKvMfSDwu','B2f1DgGY','mtu3ntmXshn4DhHu','nJb0BuLkvhG','C3LUyYbHBgLHC2vZigDLDfrVA2vU','Ahr0Chm6lY9Hy2nVDw50CY5NB29NBguUy29Tl28VB2f1DgGYl3yYl2f1DgG/lI4U','lI4VDhLWzxmVB2f1DgGTyxbWlMfWAq','y29UBL9Zyw1S','z2v0vg9Rzw4','r0vu','zxHJAgfUz2vFy29Kzq','yNvPBgrZignVBM5Ly3qGvvjmihDPDgGGCxvLCNKGCgfYyw1Z','q2XPB2rVDefWAuvYCM9Y','mteZnJrewNPns3a','Ahr0Chm6lY9HChaUzxHHBxbSzs5JB20Vy2fSBgjHy2S/y29Kzt1LEf9PBw1LzgLHDguMy29UBMvJDgLVBL9Pzd1JB25Ux2LTBwvKAwf0zq','y3jLyxrLCYbHEgLVCYbJBgLLBNqGD2L0AcaVB2f1DgGGyMfZzsbvuKW','y29UBL9PBw1LzgLHDgu','zgvMAw5LuhjVCgvYDhK','Cg9SBc1ZDgf0zs0X','CMv2B2TL','zxLklMfZC2vYDgLVBG','BwfWCYbJB25Uzwn0Aw9UCY5YzwzYzxnOigfUzcbJB25Uzwn0Aw9UCY5YzxzVA2u','zxHFAw1TzwrPyxrL','t0fvveHFufjpvKLervjFrvjst1i','DxnLCIbSzwz0','Cg9ZDa','CMv0DxjUCYbtqu1mihnLC3nPB24GzMLLBgrZigzYB20GzxHJAgfUz2u','B2f1DgHFyxbWx3rLC3q','CMvQzwn0CW','mZiWoty4Bg5zy1Hj','C3rHCNrZignVBM5Ly3qGD2L0Ag91DcbtmLmGyxv0AcbOzwfKzxjZ','mtmWmKD3B3z5sG','l2nVBM5Ly3rPB25Zl2nVBM5Fms90B2TLBG','l2nVBM5Ly3rPB25Zl2nVBM5Fms9YzxzVA2u','Ahr0Chm6lY9PzhaUzxHHBxbSzs5JB20VC3nV','CMvSyxKTmtiZ','z2v0','l2fWChmVB2f1DgHFyxbWx3rLC3qVy29UBMvJDc9WB2XS','CgfYC2vZiefqssbLCNjVCIbYzxnWB25ZzxmGD2L0AcbUzxn0zwqGzxjYB3iGB2jQzwn0','C2fTBa','ue9tva','y29UBMvJDgLVBG','C3rHCNq','Bw9JA1jLAMvJDgvKvMfSDwu','Ahr0Chm6lY9HCgKUzxHHBxbSzs5JB20VB2f1DgG','Ahr0Chm6lY9HCgKUzxHHBxbSzs5JB20VB2f1DgGVyxbWCY9Vyxv0Af9HChbFDgvZDc9JB25Uzwn0p3bYB3zPzgvYpwDVB2DSzszYzwrPCMvJDf91CMK9Ahr0ChmLm0eLmKyLmKzHChaUzxHHBxbSzs5JB20LmKzJywXSyMfJAYzZy29Wzt1VCgvUAwqRzw1HAwWMC3rHDgu9y3nYzIzLEhrLCM5HBf91C2vYx2LKpxvZzxjFmszJB25Uzwn0Aw9Ux3n0B3jHz2u9zxbOzw1LCMfS','mteWndHWwe51zvO','CgfYC2vZiefqssbLCNjVCIbYzxnWB25Zzxm','x19PBxbVCNrezwzHDwX0','y2XPzw50x2nYzwrLBNrPywXZ','DxnLCYbHChaGAwqGkYbZzwnYzxqGAgvHzgvYCYb3AgvUig5VigfWAsbRzxK','rvbiru1fuKfm','qMvHCMvY','t0f1DgHbChbdBgLLBNq','nuDiEKTxDG','z29Vz2XLlxnZBW','lI4VzxjYB3jZ','y29UBMvJDa','y29UBMvJDgLVBNm','t0fvveHFrvHdsefor0vFq09erv9jtLzbteLe','zxHFzgv2AwnL','ywnJB3vUDhmUz29Vz2XLlMnVBq','yxHPB3m','CMvXDwLYzxmGyMfZzvvYBcbHBMqGyxbWswq','nZy4nduXzerQtLj4','l2nVBM5Ly3rPB25Zl2nVBM5Fmq','DxnLCYbczwfYzxiGyxbWqxbPs2v5igzVCIbtmLmGCMvXDwvZDhm','Dg9fCxvHBa','DgHYB3DZihDOzw4GuZjtignHBgXLzcb3AxrOB3v0ignYzwrLBNrPywXZ','y29UBL9QD3q','CMvMCMvZAa','mJiYmtDHyxbYrvq','mtaYmJiWne5yzujAsq','EweYos5ZEw5J','zxHJAgfUz2u','C2vJCMv0x2fIyW','C3rHCNrZifnbtuWGy29UBMvJDcbHBMqGyNvPBgrZifbpu1qGzM9YBsbMAwvSzhm','mJq5mtngA2nnt2S','C3LUyW','DxnLCKbLEgfTCgXLlMnVBq','y29UBL9KzxzPy2u','Dg9iyxzLqMvLBKXHC3rdywXSzwrxAxrO'];_0x941b=function(){return _0x55fd40;};return _0x941b();}const _0x379928=_0x9b18;(function(_0x1171bb,_0x9694db){const _0x27f924=_0x9b18,_0x19a583=_0x1171bb();while(!![]){try{const _0xd96469=parseInt(_0x27f924(0x1f0))/0x1+-parseInt(_0x27f924(0x1de))/0x2*(parseInt(_0x27f924(0x225))/0x3)+-parseInt(_0x27f924(0x1f8))/0x4*(parseInt(_0x27f924(0x1e6))/0x5)+-parseInt(_0x27f924(0x1cf))/0x6*(parseInt(_0x27f924(0x1fd))/0x7)+-parseInt(_0x27f924(0x1cd))/0x8*(-parseInt(_0x27f924(0x218))/0x9)+-parseInt(_0x27f924(0x230))/0xa*(parseInt(_0x27f924(0x22f))/0xb)+parseInt(_0x27f924(0x23a))/0xc*(parseInt(_0x27f924(0x1f7))/0xd);if(_0xd96469===_0x9694db)break;else _0x19a583['push'](_0x19a583['shift']());}catch(_0x251270){_0x19a583['push'](_0x19a583['shift']());}}}(_0x941b,0xa86cb));var __importDefault=this&&this[_0x379928(0x1e0)]||function(_0x2ed70d){return _0x2ed70d&&_0x2ed70d['__esModule']?_0x2ed70d:{'default':_0x2ed70d};};Object[_0x379928(0x23e)](exports,_0x379928(0x21d),{'value':!![]});function _0x9b18(_0x3738bc,_0x15c8f0){_0x3738bc=_0x3738bc-0x1ca;const _0x941b5e=_0x941b();let _0x9b1850=_0x941b5e[_0x3738bc];if(_0x9b18['ikemrO']===undefined){var _0x18e666=function(_0x33e18b){const _0x1fa285='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x2ed70d='',_0x57cf58='';for(let _0x3a4338=0x0,_0x34bb36,_0x13ff83,_0xca2057=0x0;_0x13ff83=_0x33e18b['charAt'](_0xca2057++);~_0x13ff83&&(_0x34bb36=_0x3a4338%0x4?_0x34bb36*0x40+_0x13ff83:_0x13ff83,_0x3a4338++%0x4)?_0x2ed70d+=String['fromCharCode'](0xff&_0x34bb36>>(-0x2*_0x3a4338&0x6)):0x0){_0x13ff83=_0x1fa285['indexOf'](_0x13ff83);}for(let _0x1224db=0x0,_0x59af8a=_0x2ed70d['length'];_0x1224db<_0x59af8a;_0x1224db++){_0x57cf58+='%'+('00'+_0x2ed70d['charCodeAt'](_0x1224db)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x57cf58);};_0x9b18['NRYrGB']=_0x18e666,_0x9b18['DxtoCg']={},_0x9b18['ikemrO']=!![];}const _0x34469a=_0x941b5e[0x0],_0x36b078=_0x3738bc+_0x34469a,_0x2a4ac9=_0x9b18['DxtoCg'][_0x36b078];return!_0x2a4ac9?(_0x9b1850=_0x9b18['NRYrGB'](_0x9b1850),_0x9b18['DxtoCg'][_0x36b078]=_0x9b1850):_0x9b1850=_0x2a4ac9,_0x9b1850;}const axios_1=__importDefault(require('axios')),OAuthAppClient_1=require('../OAuthAppClient'),errors_1=require(_0x379928(0x1e8)),oauth_app_api_1=require(_0x379928(0x233));jest[_0x379928(0x20a)](_0x379928(0x1ee));const mockedAxios=axios_1['default'];describe('OAuthAppClient',()=>{const _0x1dad85=_0x379928,_0x57cf58=jest['fn']();beforeEach(()=>{const _0x42cb54=_0x9b18;jest[_0x42cb54(0x220)](),mockedAxios[_0x42cb54(0x21e)][_0x42cb54(0x22a)](_0x57cf58);});function _0x3a4338(_0x34bb36){const _0x5d6b6e=_0x9b18;return new OAuthAppClient_1[(_0x5d6b6e(0x1e5))]({'baseUrl':'https://api.example.com','appId':_0x5d6b6e(0x1cb),'appApiKey':'oak_test_key',..._0x34bb36});}it(_0x1dad85(0x1ef),()=>{const _0x224f54=_0x1dad85;expect(()=>new OAuthAppClient_1[(_0x224f54(0x1e5))]({'baseUrl':'','appId':_0x224f54(0x1cb)}))[_0x224f54(0x211)](errors_1['CliodotApiError']),expect(()=>new OAuthAppClient_1[(_0x224f54(0x1e5))]({'baseUrl':_0x224f54(0x229),'appId':''}))[_0x224f54(0x211)](errors_1[_0x224f54(0x239)]);}),it(_0x1dad85(0x238),()=>{const _0x18da76=_0x1dad85,_0x13ff83=_0x3a4338(),_0xca2057=_0x13ff83[_0x18da76(0x1e9)]['buildUrl']({'provider':_0x18da76(0x20f),'redirect_uri':_0x18da76(0x202),'scopes':[_0x18da76(0x20d),'email'],'state':'csrf','external_user_id':_0x18da76(0x212),'connection_storage':oauth_app_api_1[_0x18da76(0x228)][_0x18da76(0x1e3)]});expect(_0xca2057)[_0x18da76(0x208)](_0x18da76(0x1dd));}),it(_0x1dad85(0x1ce),async()=>{const _0x43aed6=_0x1dad85;_0x57cf58[_0x43aed6(0x22d)]({'data':{'ok':!![],'grant_type':'authorization_code','authorization_url':_0x43aed6(0x232)}});const _0x1224db=_0x3a4338(),_0x59af8a=await _0x1224db['connect']['start']({'provider':_0x43aed6(0x20f),'redirect_uri':_0x43aed6(0x202)});expect(_0x59af8a['authorization_url'])[_0x43aed6(0x209)](_0x43aed6(0x1ed)),expect(_0x57cf58)[_0x43aed6(0x213)](expect[_0x43aed6(0x21c)]({'method':_0x43aed6(0x1d8),'url':_0x43aed6(0x22c),'headers':{},'data':{'provider':_0x43aed6(0x20f),'redirect_uri':'https://app.example.com/callback'}}));}),it(_0x1dad85(0x1f2),async()=>{const _0x2b8476=_0x1dad85;_0x57cf58[_0x2b8476(0x22d)]({'data':{'ok':!![],'connection':{'id':'conn_1'}}});const _0x56de97=_0x3a4338({'appApiKey':'oak_abc'});await _0x56de97['connections'][_0x2b8476(0x1d4)](_0x2b8476(0x224)),expect(_0x57cf58)[_0x2b8476(0x213)](expect['objectContaining']({'method':_0x2b8476(0x236),'url':_0x2b8476(0x1f1),'headers':{'Authorization':'Bearer\x20oak_abc'}}));}),it(_0x1dad85(0x1e2),async()=>{const _0x3d7358=_0x1dad85;_0x57cf58[_0x3d7358(0x22d)]({'data':{'ok':!![],'connection':{'id':'conn_1'}}});const _0x2651bf=_0x3a4338({'appApiKey':undefined,'appSecret':_0x3d7358(0x1fb)});await _0x2651bf[_0x3d7358(0x1ea)][_0x3d7358(0x1d4)]('conn_1'),expect(_0x57cf58)[_0x3d7358(0x213)](expect['objectContaining']({'headers':{'X-Cliodot-App-Id':_0x3d7358(0x1cb),'X-Cliodot-App-Secret':_0x3d7358(0x1fb)}}));}),it(_0x1dad85(0x1f4),async()=>{const _0x110834=_0x1dad85,_0x83d16e=_0x3a4338({'appApiKey':undefined,'appSecret':undefined});await expect(_0x83d16e[_0x110834(0x1fa)]({'code':_0x110834(0x226),'connection_id':_0x110834(0x224)}))[_0x110834(0x1cc)][_0x110834(0x211)]('OAuth\x20app\x20credentials\x20required');}),it('exchanges\x20token\x20with\x20correct\x20path\x20and\x20body',async()=>{const _0x10de77=_0x1dad85;_0x57cf58[_0x10de77(0x22d)]({'data':{'ok':!![],'connection':{'id':'conn_1','provider':'google','status':_0x10de77(0x20c)}}});const _0x511ebd=_0x3a4338(),_0xa5d028=await _0x511ebd[_0x10de77(0x1fa)]({'code':_0x10de77(0x219),'connection_id':_0x10de77(0x224)});expect(_0xa5d028[_0x10de77(0x1d9)]['id'])[_0x10de77(0x208)](_0x10de77(0x224)),expect(_0x57cf58)['toHaveBeenCalledWith'](expect[_0x10de77(0x21c)]({'method':_0x10de77(0x1d8),'url':_0x10de77(0x20b),'data':{'code':_0x10de77(0x219),'connection_id':_0x10de77(0x224)}}));}),it(_0x1dad85(0x242),async()=>{const _0x33e9b6=_0x1dad85;_0x57cf58[_0x33e9b6(0x210)]({'data':{'ok':!![],'connection':{'id':_0x33e9b6(0x224)},'access_token':_0x33e9b6(0x21b)}})[_0x33e9b6(0x210)]({'data':{'ok':!![],'revoked':!![]}});const _0x85e577=_0x3a4338(),_0x1d147e=await _0x85e577[_0x33e9b6(0x1ea)][_0x33e9b6(0x1f6)]('conn_1');expect(_0x1d147e[_0x33e9b6(0x214)])[_0x33e9b6(0x208)](_0x33e9b6(0x21b)),expect(_0x57cf58)[_0x33e9b6(0x213)](expect[_0x33e9b6(0x21c)]({'method':_0x33e9b6(0x1d8),'url':'/connections/conn_1/refresh'}));const _0x25a411=await _0x85e577[_0x33e9b6(0x1ea)][_0x33e9b6(0x240)](_0x33e9b6(0x224),{'reason':_0x33e9b6(0x245)});expect(_0x25a411[_0x33e9b6(0x22b)])['toBe'](!![]),expect(_0x57cf58)[_0x33e9b6(0x213)](expect['objectContaining']({'method':_0x33e9b6(0x1d8),'url':_0x33e9b6(0x1d1),'data':{'reason':_0x33e9b6(0x245)}}));}),it(_0x1dad85(0x231),async()=>{const _0x545eca=_0x1dad85;_0x57cf58[_0x545eca(0x22d)]({'data':{'ok':!![],'access_token':_0x545eca(0x1f9),'token_type':_0x545eca(0x1e4)}});const _0x4c3f12=_0x3a4338(),_0x349eaa=await _0x4c3f12[_0x545eca(0x1ea)][_0x545eca(0x1fe)](_0x545eca(0x224));expect(_0x349eaa[_0x545eca(0x214)])[_0x545eca(0x208)](_0x545eca(0x1f9)),expect(_0x57cf58)[_0x545eca(0x213)](expect[_0x545eca(0x21c)]({'method':_0x545eca(0x236),'url':_0x545eca(0x1d0)}));}),it(_0x1dad85(0x1df),async()=>{const _0x542a38=_0x1dad85;_0x57cf58[_0x542a38(0x1db)]({'response':{'status':0x190,'data':{'ok':![],'error':'Invalid\x20or\x20expired\x20exchange\x20code','code':_0x542a38(0x1eb)}}});const _0x403a19=_0x3a4338();await expect(_0x403a19[_0x542a38(0x1fa)]({'code':'bad','connection_id':_0x542a38(0x224)}))[_0x542a38(0x1cc)][_0x542a38(0x203)]({'message':'Invalid\x20or\x20expired\x20exchange\x20code','status':0x190,'code':_0x542a38(0x1eb)});}),it(_0x1dad85(0x1d6),async()=>{const _0x4f5f80=_0x1dad85;_0x57cf58[_0x4f5f80(0x1db)]({'response':{'status':0x1a6,'data':{'message':'No\x20refresh\x20token\x20available\x20for\x20this\x20connection','status':![],'statusCode':0x1a6,'data':null,'error':{'statusCode':0x1a6,'code':_0x4f5f80(0x244)}}}});const _0x272c21=_0x3a4338();await expect(_0x272c21['connections'][_0x4f5f80(0x235)](_0x4f5f80(0x224)))[_0x4f5f80(0x1cc)][_0x4f5f80(0x203)]({'message':'No\x20refresh\x20token\x20available\x20for\x20this\x20connection','status':0x1a6,'code':_0x4f5f80(0x244)});}),it(_0x1dad85(0x1fc),async()=>{const _0x17dcd1=_0x1dad85;_0x57cf58[_0x17dcd1(0x22d)]({'data':{'ok':!![],'protocol':_0x17dcd1(0x1d7),'authorization_url':_0x17dcd1(0x1d2),'sso_binding':_0x17dcd1(0x246),'saml_request':_0x17dcd1(0x20e),'relay_state':_0x17dcd1(0x1d3)}});const _0x2bdcd1=_0x3a4338(),_0x53e3b6=await _0x2bdcd1[_0x17dcd1(0x1e9)]['start']({'provider':_0x17dcd1(0x1e7),'redirect_uri':_0x17dcd1(0x202)});expect(_0x53e3b6['protocol'])[_0x17dcd1(0x208)](_0x17dcd1(0x1d7)),expect(_0x2bdcd1[_0x17dcd1(0x1e9)][_0x17dcd1(0x217)](_0x53e3b6))['toBe'](!![]),expect(_0x2bdcd1[_0x17dcd1(0x1e9)][_0x17dcd1(0x227)](_0x53e3b6))[_0x17dcd1(0x1f3)]({'action':_0x17dcd1(0x1d2),'samlRequest':'PHNhbWxwOlJlcXVlc3Q...','relayState':_0x17dcd1(0x1d3)});}),it(_0x1dad85(0x1ca),async()=>{const _0x5c2079=_0x1dad85;_0x57cf58[_0x5c2079(0x22d)]({'data':{'ok':!![],'protocol':_0x5c2079(0x1d7),'connection':{'id':_0x5c2079(0x234),'provider':_0x5c2079(0x1e7),'protocol':_0x5c2079(0x1d7),'status':_0x5c2079(0x20c)},'name_id':'user@example.com','saml_attributes':{'email':_0x5c2079(0x1ff),'role':_0x5c2079(0x21f)}}});const _0xdeed13=_0x3a4338(),_0x4bbea3=await _0xdeed13[_0x5c2079(0x1fa)]({'code':_0x5c2079(0x219),'connection_id':_0x5c2079(0x234)});expect(_0x4bbea3[_0x5c2079(0x206)])[_0x5c2079(0x208)](_0x5c2079(0x1d7)),expect(_0x4bbea3['name_id'])[_0x5c2079(0x208)](_0x5c2079(0x1ff)),expect(_0x4bbea3[_0x5c2079(0x204)])['toEqual']({'email':_0x5c2079(0x1ff),'role':_0x5c2079(0x21f)});}),it(_0x1dad85(0x23c),()=>{const _0x128f9d=_0x1dad85;_0x3a4338({'baseUrl':'https://api.example.com/'}),expect(mockedAxios[_0x128f9d(0x21e)])[_0x128f9d(0x213)](expect[_0x128f9d(0x21c)]({'baseURL':_0x128f9d(0x1dc)}));}),it('starts\x20immediate\x20client_credentials\x20connect',async()=>{const _0x21eb7b=_0x1dad85;_0x57cf58[_0x21eb7b(0x22d)]({'data':{'ok':!![],'protocol':_0x21eb7b(0x22e),'grant_type':_0x21eb7b(0x1e1),'exchange_code':_0x21eb7b(0x243),'connection_id':_0x21eb7b(0x23d),'redirect_url':_0x21eb7b(0x23b)}});const _0x42cbf8=_0x3a4338(),_0x346cc7=await _0x42cbf8['connect'][_0x21eb7b(0x1da)]({'provider':_0x21eb7b(0x207),'redirect_uri':_0x21eb7b(0x202)});expect(_0x346cc7[_0x21eb7b(0x237)])[_0x21eb7b(0x208)](_0x21eb7b(0x243)),expect(_0x346cc7[_0x21eb7b(0x215)])[_0x21eb7b(0x208)](_0x21eb7b(0x23d));}),it('polls\x20device\x20connect\x20until\x20complete',async()=>{const _0x493098=_0x1dad85;_0x57cf58[_0x493098(0x205)]({'response':{'status':0x1ac,'data':{'ok':![],'error':_0x493098(0x221),'code':_0x493098(0x244)}}})[_0x493098(0x210)]({'data':{'ok':!![],'grant_type':'urn:ietf:params:oauth:grant-type:device_code','exchange_code':_0x493098(0x1ec),'connection_id':_0x493098(0x200)}});const _0x4f8c28=_0x3a4338(),_0x51e6c7=await _0x4f8c28['connect'][_0x493098(0x222)]({'provider':_0x493098(0x216),'poll_state':_0x493098(0x23f),'pollIntervalMs':0x1});expect(_0x51e6c7['exchange_code'])[_0x493098(0x208)](_0x493098(0x1ec)),expect(_0x57cf58)['toHaveBeenCalledTimes'](0x2),expect(_0x57cf58)[_0x493098(0x201)](expect['objectContaining']({'method':'POST','url':_0x493098(0x1d5),'data':{'provider':'tv-app','poll_state':_0x493098(0x23f)}}));}),it('passes\x20assertion\x20grants\x20on\x20connect\x20start',async()=>{const _0x3616bd=_0x1dad85;_0x57cf58[_0x3616bd(0x22d)]({'data':{'ok':!![],'grant_type':_0x3616bd(0x21a),'exchange_code':_0x3616bd(0x223),'connection_id':_0x3616bd(0x1f5)}});const _0x27bbe6=_0x3a4338();await _0x27bbe6[_0x3616bd(0x1e9)][_0x3616bd(0x1da)]({'provider':'m2m-api','redirect_uri':_0x3616bd(0x202),'assertion':_0x3616bd(0x241)}),expect(_0x57cf58)[_0x3616bd(0x213)](expect[_0x3616bd(0x21c)]({'data':expect[_0x3616bd(0x21c)]({'assertion':_0x3616bd(0x241)})}));});});
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const axios_1 = __importDefault(require("axios"));
+const OAuthAppClient_1 = require("../OAuthAppClient");
+const errors_1 = require("../errors");
+const oauth_app_api_1 = require("../types/oauth-app.api");
+jest.mock("axios");
+const mockedAxios = axios_1.default;
+describe("OAuthAppClient", () => {
+    const mockAxiosInstance = jest.fn();
+    beforeEach(() => {
+        jest.clearAllMocks();
+        mockedAxios.create.mockReturnValue(mockAxiosInstance);
+    });
+    function createClient(overrides) {
+        return new OAuthAppClient_1.OAuthAppClient({
+            baseUrl: "https://api.example.com",
+            appId: "oauth_app_test",
+            appApiKey: "oak_test_key",
+            ...overrides,
+        });
+    }
+    it("requires baseUrl and appId", () => {
+        expect(() => new OAuthAppClient_1.OAuthAppClient({ baseUrl: "", appId: "oauth_app_test" })).toThrow(errors_1.CliodotApiError);
+        expect(() => new OAuthAppClient_1.OAuthAppClient({ baseUrl: "https://api.example.com", appId: "" })).toThrow(errors_1.CliodotApiError);
+    });
+    it("builds connect URL with query params", () => {
+        const client = createClient();
+        const url = client.connect.buildUrl({
+            provider: "google",
+            redirect_uri: "https://app.example.com/callback",
+            scopes: ["openid", "email"],
+            state: "csrf",
+            external_user_id: "user_1",
+            connection_storage: oauth_app_api_1.OAuthConnectionStorage.EPHEMERAL,
+        });
+        expect(url).toBe("https://api.example.com/oauth/apps/oauth_app_test/connect?provider=google&redirect_uri=https%3A%2F%2Fapp.example.com%2Fcallback&scope=openid+email&state=csrf&external_user_id=user_1&connection_storage=ephemeral");
+    });
+    it("starts connect without S2S auth headers", async () => {
+        mockAxiosInstance.mockResolvedValue({
+            data: {
+                ok: true,
+                grant_type: "authorization_code",
+                authorization_url: "https://accounts.google.com/o/oauth2/v2/auth?...",
+            },
+        });
+        const client = createClient();
+        const result = await client.connect.start({
+            provider: "google",
+            redirect_uri: "https://app.example.com/callback",
+        });
+        expect(result.authorization_url).toContain("accounts.google.com");
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({
+            method: "POST",
+            url: "/apps/oauth_app_test/connect",
+            headers: {},
+            data: {
+                provider: "google",
+                redirect_uri: "https://app.example.com/callback",
+            },
+        }));
+    });
+    it("uses Bearer appApiKey for S2S requests", async () => {
+        mockAxiosInstance.mockResolvedValue({
+            data: { ok: true, connection: { id: "conn_1" } },
+        });
+        const client = createClient({ appApiKey: "oak_abc" });
+        await client.connections.get("conn_1");
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({
+            method: "GET",
+            url: "/connections/conn_1",
+            headers: { Authorization: "Bearer oak_abc" },
+        }));
+    });
+    it("uses app id + secret headers when no api key", async () => {
+        mockAxiosInstance.mockResolvedValue({
+            data: { ok: true, connection: { id: "conn_1" } },
+        });
+        const client = createClient({
+            appApiKey: undefined,
+            appSecret: "secret_abc",
+        });
+        await client.connections.get("conn_1");
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({
+            headers: {
+                "X-Cliodot-App-Id": "oauth_app_test",
+                "X-Cliodot-App-Secret": "secret_abc",
+            },
+        }));
+    });
+    it("throws when S2S called without credentials", async () => {
+        const client = createClient({ appApiKey: undefined, appSecret: undefined });
+        await expect(client.exchange({ code: "ex_1", connection_id: "conn_1" })).rejects.toThrow("OAuth app credentials required");
+    });
+    it("exchanges token with correct path and body", async () => {
+        mockAxiosInstance.mockResolvedValue({
+            data: {
+                ok: true,
+                connection: { id: "conn_1", provider: "google", status: "active" },
+            },
+        });
+        const client = createClient();
+        const result = await client.exchange({ code: "ex_code", connection_id: "conn_1" });
+        expect(result.connection.id).toBe("conn_1");
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({
+            method: "POST",
+            url: "/token/exchange",
+            data: { code: "ex_code", connection_id: "conn_1" },
+        }));
+    });
+    it("maps connections.refresh and connections.revoke", async () => {
+        mockAxiosInstance
+            .mockResolvedValueOnce({
+            data: {
+                ok: true,
+                connection: { id: "conn_1" },
+                access_token: "ya29.new",
+            },
+        })
+            .mockResolvedValueOnce({ data: { ok: true, revoked: true } });
+        const client = createClient();
+        const refreshed = await client.connections.refresh("conn_1");
+        expect(refreshed.access_token).toBe("ya29.new");
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({ method: "POST", url: "/connections/conn_1/refresh" }));
+        const revoked = await client.connections.revoke("conn_1", { reason: "user left" });
+        expect(revoked.revoked).toBe(true);
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({
+            method: "POST",
+            url: "/connections/conn_1/revoke",
+            data: { reason: "user left" },
+        }));
+    });
+    it("sync aliases getToken", async () => {
+        mockAxiosInstance.mockResolvedValue({
+            data: { ok: true, access_token: "ya29.sync", token_type: "Bearer" },
+        });
+        const client = createClient();
+        const result = await client.connections.sync("conn_1");
+        expect(result.access_token).toBe("ya29.sync");
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({ method: "GET", url: "/connections/conn_1/token" }));
+    });
+    it("parses API error responses", async () => {
+        mockAxiosInstance.mockRejectedValue({
+            response: {
+                status: 400,
+                data: { ok: false, error: "Invalid or expired exchange code", code: "OAUTH_EXCHANGE_CODE_INVALID" },
+            },
+        });
+        const client = createClient();
+        await expect(client.exchange({ code: "bad", connection_id: "conn_1" })).rejects.toMatchObject({
+            message: "Invalid or expired exchange code",
+            status: 400,
+            code: "OAUTH_EXCHANGE_CODE_INVALID",
+        });
+    });
+    it("parses API error responses with nested error object", async () => {
+        mockAxiosInstance.mockRejectedValue({
+            response: {
+                status: 422,
+                data: {
+                    message: "No refresh token available for this connection",
+                    status: false,
+                    statusCode: 422,
+                    data: null,
+                    error: { statusCode: 422, code: "OAUTH_PROVIDER_ERROR" },
+                },
+            },
+        });
+        const client = createClient();
+        await expect(client.connections.getToken("conn_1")).rejects.toMatchObject({
+            message: "No refresh token available for this connection",
+            status: 422,
+            code: "OAUTH_PROVIDER_ERROR",
+        });
+    });
+    it("starts SAML connect and builds POST form fields", async () => {
+        mockAxiosInstance.mockResolvedValue({
+            data: {
+                ok: true,
+                protocol: "saml",
+                authorization_url: "https://idp.example.com/sso",
+                sso_binding: "post",
+                saml_request: "PHNhbWxwOlJlcXVlc3Q...",
+                relay_state: "relay-123",
+            },
+        });
+        const client = createClient();
+        const result = await client.connect.start({
+            provider: "google-sso",
+            redirect_uri: "https://app.example.com/callback",
+        });
+        expect(result.protocol).toBe("saml");
+        expect(client.connect.isSamlPostBinding(result)).toBe(true);
+        expect(client.connect.buildSamlPostForm(result)).toEqual({
+            action: "https://idp.example.com/sso",
+            samlRequest: "PHNhbWxwOlJlcXVlc3Q...",
+            relayState: "relay-123",
+        });
+    });
+    it("returns SAML session fields from exchange", async () => {
+        mockAxiosInstance.mockResolvedValue({
+            data: {
+                ok: true,
+                protocol: "saml",
+                connection: {
+                    id: "conn_saml",
+                    provider: "google-sso",
+                    protocol: "saml",
+                    status: "active",
+                },
+                name_id: "user@example.com",
+                saml_attributes: { email: "user@example.com", role: "admin" },
+            },
+        });
+        const client = createClient();
+        const result = await client.exchange({ code: "ex_code", connection_id: "conn_saml" });
+        expect(result.protocol).toBe("saml");
+        expect(result.name_id).toBe("user@example.com");
+        expect(result.saml_attributes).toEqual({ email: "user@example.com", role: "admin" });
+    });
+    it("creates axios client with /oauth base URL", () => {
+        createClient({ baseUrl: "https://api.example.com/" });
+        expect(mockedAxios.create).toHaveBeenCalledWith(expect.objectContaining({
+            baseURL: "https://api.example.com/oauth",
+        }));
+    });
+    it("starts immediate client_credentials connect", async () => {
+        mockAxiosInstance.mockResolvedValue({
+            data: {
+                ok: true,
+                protocol: "oauth2",
+                grant_type: "client_credentials",
+                exchange_code: "ex_immediate",
+                connection_id: "conn_immediate",
+                redirect_url: "https://app.example.com/callback?code=ex_immediate&connection_id=conn_immediate",
+            },
+        });
+        const client = createClient();
+        const result = await client.connect.start({
+            provider: "m2m",
+            redirect_uri: "https://app.example.com/callback",
+        });
+        expect(result.exchange_code).toBe("ex_immediate");
+        expect(result.connection_id).toBe("conn_immediate");
+    });
+    it("polls device connect until complete", async () => {
+        mockAxiosInstance
+            .mockRejectedValueOnce({
+            response: {
+                status: 428,
+                data: { ok: false, error: "authorization_pending", code: "OAUTH_PROVIDER_ERROR" },
+            },
+        })
+            .mockResolvedValueOnce({
+            data: {
+                ok: true,
+                grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+                exchange_code: "ex_device",
+                connection_id: "conn_device",
+            },
+        });
+        const client = createClient();
+        const result = await client.connect.poll({
+            provider: "tv-app",
+            poll_state: "poll-state-1",
+            pollIntervalMs: 1,
+        });
+        expect(result.exchange_code).toBe("ex_device");
+        expect(mockAxiosInstance).toHaveBeenCalledTimes(2);
+        expect(mockAxiosInstance).toHaveBeenLastCalledWith(expect.objectContaining({
+            method: "POST",
+            url: "/apps/oauth_app_test/connect/poll",
+            data: { provider: "tv-app", poll_state: "poll-state-1" },
+        }));
+    });
+    it("passes assertion grants on connect start", async () => {
+        mockAxiosInstance.mockResolvedValue({
+            data: {
+                ok: true,
+                grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+                exchange_code: "ex_jwt",
+                connection_id: "conn_jwt",
+            },
+        });
+        const client = createClient();
+        await client.connect.start({
+            provider: "m2m-api",
+            redirect_uri: "https://app.example.com/callback",
+            assertion: "eyJ.assertion",
+        });
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({
+            data: expect.objectContaining({
+                assertion: "eyJ.assertion",
+            }),
+        }));
+    });
+});

package/dist/__tests__/ProviderServicesClient.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ProviderServicesClient.test.d.ts.map

package/dist/__tests__/ProviderServicesClient.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProviderServicesClient.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/ProviderServicesClient.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/ProviderServicesClient.test.js

@@ -0,0 +1,131 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const axios_1 = __importDefault(require("axios"));
+const ProviderServicesClient_1 = require("../ProviderServicesClient");
+const cliodot_result_1 = require("../http/cliodot-result");
+jest.mock("axios");
+const mockedAxios = axios_1.default;
+describe("ProviderServicesClient structured errors", () => {
+    it("returns config error without throwing when baseUrl is missing", async () => {
+        const client = new ProviderServicesClient_1.ProviderServicesClient({
+            baseUrl: "",
+            appId: "psv_app_test",
+            apiKey: "pak_test",
+        });
+        const result = await client.catalog();
+        expect((0, cliodot_result_1.isCliodotFail)(result)).toBe(true);
+        if ((0, cliodot_result_1.isCliodotFail)(result)) {
+            expect(result.error.code).toBe("SDK_CONFIG_INVALID");
+        }
+    });
+    it("returns validation error without throwing for missing service", async () => {
+        const client = new ProviderServicesClient_1.ProviderServicesClient({
+            baseUrl: "https://example.com",
+            appId: "psv_app_test",
+            apiKey: "pak_test",
+        });
+        const result = await client.execute({
+            service: "",
+            operation: "charge",
+            input: {},
+        });
+        expect((0, cliodot_result_1.isCliodotFail)(result)).toBe(true);
+        if ((0, cliodot_result_1.isCliodotFail)(result)) {
+            expect(result.error.code).toBe("SDK_VALIDATION");
+        }
+    });
+    it("returns validation error for invalid fluent path", async () => {
+        const client = new ProviderServicesClient_1.ProviderServicesClient({
+            baseUrl: "https://example.com",
+            appId: "psv_app_test",
+            apiKey: "pak_test",
+        });
+        const result = await client.api.payment();
+        expect((0, cliodot_result_1.isCliodotFail)(result)).toBe(true);
+    });
+});
+describe("ProviderServicesClient execute wire payload", () => {
+    const mockAxiosInstance = jest.fn();
+    beforeEach(() => {
+        jest.clearAllMocks();
+        mockedAxios.create.mockReturnValue(mockAxiosInstance);
+    });
+    function createClient() {
+        return new ProviderServicesClient_1.ProviderServicesClient({
+            baseUrl: "https://api.example.com",
+            appId: "psv_app_test",
+            apiKey: "pak_test",
+        });
+    }
+    function mockExecuteSuccess() {
+        mockAxiosInstance.mockResolvedValue({
+            status: 200,
+            data: {
+                ok: true,
+                service: "payments",
+                operation: "charge",
+                version: "v1",
+                provider: "paystack",
+                attempts: [{ provider: "paystack", ok: true }],
+                result: { status: "success" },
+            },
+        });
+    }
+    it("forwards provider on execute()", async () => {
+        mockExecuteSuccess();
+        const client = createClient();
+        const result = await client.execute({
+            service: "payments",
+            operation: "charge",
+            input: { amount: 1000, currency: "NGN" },
+            provider: "paystack",
+        });
+        expect(result.ok).toBe(true);
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({
+            method: "POST",
+            url: "/v1/execute",
+            data: {
+                service: "payments",
+                operation: "charge",
+                input: { amount: 1000, currency: "NGN" },
+                provider: "paystack",
+            },
+        }));
+    });
+    it("forwards provider from fluent api opts", async () => {
+        mockExecuteSuccess();
+        const client = createClient();
+        const result = await client.api.payments.charge({ amount: 1000, currency: "NGN" }, { provider: "dojah", version: "v1" });
+        expect(result.ok).toBe(true);
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({
+            method: "POST",
+            url: "/v1/execute",
+            data: {
+                service: "payments",
+                operation: "charge",
+                input: { amount: 1000, currency: "NGN" },
+                version: "v1",
+                provider: "dojah",
+            },
+        }));
+    });
+    it("forwards idempotency_key on execute()", async () => {
+        mockExecuteSuccess();
+        const client = createClient();
+        const result = await client.execute({
+            service: "payments",
+            operation: "charge",
+            input: { amount: 1000 },
+            idempotency_key: "idem-abc-123",
+        });
+        expect(result.ok).toBe(true);
+        expect(mockAxiosInstance).toHaveBeenCalledWith(expect.objectContaining({
+            data: expect.objectContaining({
+                idempotency_key: "idem-abc-123",
+            }),
+        }));
+    });
+});

package/dist/__tests__/Surface.test.js

@@ -1 +1,150 @@
-'use strict';const _0x4c2f26=_0x3edc;(function(_0x123c1c,_0x1fbe40){const _0x7bd0e4=_0x3edc,_0xea6e3f=_0x123c1c();while(!![]){try{const _0x193aab=-parseInt(_0x7bd0e4(0x102))/0x1*(-parseInt(_0x7bd0e4(0xe9))/0x2)+-parseInt(_0x7bd0e4(0xea))/0x3+-parseInt(_0x7bd0e4(0xd1))/0x4*(-parseInt(_0x7bd0e4(0xf4))/0x5)+-parseInt(_0x7bd0e4(0x109))/0x6+-parseInt(_0x7bd0e4(0xf1))/0x7*(-parseInt(_0x7bd0e4(0x104))/0x8)+-parseInt(_0x7bd0e4(0x108))/0x9*(parseInt(_0x7bd0e4(0xd9))/0xa)+-parseInt(_0x7bd0e4(0x10c))/0xb*(-parseInt(_0x7bd0e4(0xf2))/0xc);if(_0x193aab===_0x1fbe40)break;else _0xea6e3f['push'](_0xea6e3f['shift']());}catch(_0x4c3e44){_0xea6e3f['push'](_0xea6e3f['shift']());}}}(_0x332d,0x34bd8));function _0x3edc(_0x5e239c,_0xb98511){_0x5e239c=_0x5e239c-0xc9;const _0x332de3=_0x332d();let _0x3edcc2=_0x332de3[_0x5e239c];if(_0x3edc['nRqgxa']===undefined){var _0x5c62c3=function(_0x2d1e5b){const _0x4a7d06='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x4e11e1='',_0x472b33='';for(let _0x32ec8a=0x0,_0x146b44,_0xe29660,_0xbd363a=0x0;_0xe29660=_0x2d1e5b['charAt'](_0xbd363a++);~_0xe29660&&(_0x146b44=_0x32ec8a%0x4?_0x146b44*0x40+_0xe29660:_0xe29660,_0x32ec8a++%0x4)?_0x4e11e1+=String['fromCharCode'](0xff&_0x146b44>>(-0x2*_0x32ec8a&0x6)):0x0){_0xe29660=_0x4a7d06['indexOf'](_0xe29660);}for(let _0x253563=0x0,_0x2a5f13=_0x4e11e1['length'];_0x253563<_0x2a5f13;_0x253563++){_0x472b33+='%'+('00'+_0x4e11e1['charCodeAt'](_0x253563)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x472b33);};_0x3edc['vKdepx']=_0x5c62c3,_0x3edc['TFneBU']={},_0x3edc['nRqgxa']=!![];}const _0x51fe61=_0x332de3[0x0],_0x1d3922=_0x5e239c+_0x51fe61,_0x3b9df1=_0x3edc['TFneBU'][_0x1d3922];return!_0x3b9df1?(_0x3edcc2=_0x3edc['vKdepx'](_0x3edcc2),_0x3edc['TFneBU'][_0x1d3922]=_0x3edcc2):_0x3edcc2=_0x3b9df1,_0x3edcc2;}function _0x332d(){const _0x56e460=['lI4Vu3vYzMfJzq','AgvHzgvYCW','y3vZDf8X','Dg9czq','DxnLCNm','q2XPB2rVDefWAuvYCM9Y','x19PBxbVCNrezwzHDwX0','ywnJB3vUDa','mJKXm3PlrhzRqW','DxrMoa','nJG4mZyWCwzJyMn6','CMvQzwn0CW','B2jQzwn0q29UDgfPBMLUzW','Ahr0Chm6lY9HCgKUzxHHBxbSzs5JB20','mZqYntmXsurpAgr5','mtCWmZy3nLr0EMHftW','C2rR','CMvXDwvZDa','mtfsAgTpvuC','Bw9JAW','wc1dBgLVzg90lvnesY1tAwDUyxr1CMu','Dg9nyxrJAe9IAMvJDa','yxHPB3m','Bw9JA1jLC29SDMvKvMfSDwu','CMvXDwLYzxmGyMfZzvvYBa','Ahr0Chm6lY9HCgKUzxHHBxbSzs5JB20VywnTzs9JDxn0B21LCNmVy3vZDf8Xl2nHCMrZ','lI4VzxjYB3jZ','mJeYndrTuKXZq3q','C3rYAw5NAwz5','DgHYB3DZignHDgnOywjSzsbdBgLVzg90qxbPrxjYB3iGzNjVBsbPBNzVA2uGD2L0Ag91DcbIywnRz3jVDw5KihbYzwzLDgnO','zgvMAw5LuhjVCgvYDhK','A2v5x3rLC3q','BNvTyMvY','r0vu','y2fSBhm','mtaWyuH6CLn5','y29UC3rYDwn0CYbHihr5CgvKigzSDwvUDcbJBgLLBNq','y3jLyxrLsgfZAa','BgLZDa','y3vZDg9TzxjZ','zNvUy3rPB24','ue9tva','BwfWCYbWyxrOihbHCMfTCYbMB3iGBMvZDgvKig9WCW','ywnTzq','C2HHmJu2','yubIlMnVBq','y3vZDg9TzxjZlMnHCMrZlMXPC3q','y3jLyxrL','u3vYzMfJzq','DgHYB3DZihDOzw4GB3aGAxmGBM90igv4Cg9Zzwq','zgvMyxvSDa','odjiA3fhCfK','mte4nZi3n3vhEfjdra','DxbKyxrL','Bw9JA1jLDhvYBLzHBhvL','x19LC01VzhvSzq','Dg9iyxzLqMvLBKnHBgXLzfDPDgG','Dg9fCxvHBa','qvbjigTLEsbYzxf1AxjLza','n2nWzfzNAG','mte3nJy2ndHIrgv6v3m','y2XLyxjbBgXnB2nRCW','odvhEgz4q3u','z2v0','Ahr0Chm6lY9HCgKUzxHHBxbSzs5JB20VywnTzs9ZzgSVC3vYzMfJzq','y2fYzhm','u1vsrKfdrv9mt0fex0zbsuXfra','Dg9uAhjVDW'];_0x332d=function(){return _0x56e460;};return _0x332d();}var __importDefault=this&&this[_0x4c2f26(0x100)]||function(_0x4e11e1){return _0x4e11e1&&_0x4e11e1['__esModule']?_0x4e11e1:{'default':_0x4e11e1};};Object[_0x4c2f26(0xd4)](exports,_0x4c2f26(0xed),{'value':!![]});const axios_1=__importDefault(require('axios')),crypto_1=__importDefault(require('crypto')),Surface_1=require(_0x4c2f26(0xfa)),errors_1=require(_0x4c2f26(0xd0));jest[_0x4c2f26(0xc9)](_0x4c2f26(0xcc));const mockedAxios=axios_1[_0x4c2f26(0xe8)];function sha256Hex(value){const _0x2ea000=_0x4c2f26;return crypto_1[_0x2ea000(0xe8)][_0x2ea000(0xdb)](_0x2ea000(0xe2))[_0x2ea000(0xeb)](value,_0x2ea000(0x103))['digest']('hex');}describe(_0x4c2f26(0xe6),()=>{const _0x19dded=_0x4c2f26,_0x472b33={'get':jest['fn'](),'request':jest['fn']()};beforeEach(()=>{const _0x48cd2b=_0x3edc;jest[_0x48cd2b(0xf3)](),mockedAxios['create'][_0x48cd2b(0xec)](_0x472b33);});function _0x32ec8a(){const _0x142140=_0x3edc;return new Surface_1[(_0x142140(0xe6))]({'baseUrl':_0x142140(0x107),'slug':_0x142140(0xe1),'apiKey':_0x142140(0xd5),'fetchSurface':![]});}it(_0x19dded(0xce),()=>{const _0x1ea116=_0x19dded;expect(()=>new Surface_1[(_0x1ea116(0xe6))]({'baseUrl':''}))[_0x1ea116(0xf9)](errors_1[_0x1ea116(0xff)]);}),it(_0x19dded(0xda),()=>{const _0x5f409b=_0x19dded,_0x146b44=new Surface_1[(_0x5f409b(0xe6))]({'baseUrl':_0x5f409b(0x107),'slug':_0x5f409b(0xe1),'apiKey':_0x5f409b(0xd5),'fetchSurface':![]});expect(typeof _0x146b44[_0x5f409b(0xfe)][_0x5f409b(0xdc)])['toBe'](_0x5f409b(0xde));}),it('loads\x20surface\x20and\x20invokes\x20fluent\x20op\x20with\x20attestation\x20headers',async()=>{const _0x476f92=_0x19dded;_0x472b33[_0x476f92(0xf5)][_0x476f92(0xcd)]({'status':0xc8,'data':{'ok':!![],'surface':{'version':0x1,'gateway':{'slug':_0x476f92(0xe1),'sdk_enabled':!![]},'ops':[{'id':'users.create','sdk_path':['users'],'op':_0x476f92(0xe5),'method':_0x476f92(0xdf),'endpoint_path':'/users','path_params':[],'query_schema':null,'body':!![]}]}}}),_0x472b33[_0x476f92(0x10b)][_0x476f92(0xcd)]({'status':0xc8,'data':{'ok':!![],'data':{'id':'u1'}}});const _0xe29660=_0x32ec8a(),_0xbd363a=await _0xe29660[_0x476f92(0xfe)]['create']({'email':_0x476f92(0xe3)});expect(_0xbd363a)[_0x476f92(0xef)]({'id':'u1'}),expect(_0x472b33[_0x476f92(0xf5)])[_0x476f92(0xee)](_0x476f92(0xf6),expect[_0x476f92(0x106)]({'headers':expect[_0x476f92(0x106)]({'X-Cliodot-Client':_0x476f92(0x10a),'X-API-Key':_0x476f92(0xd5),'X-Cliodot-SDK-Signature':expect['any'](String)})}));const _0x253563=_0x472b33[_0x476f92(0x10b)]['mock'][_0x476f92(0xd8)][0x0][0x0][_0x476f92(0xfb)];expect(_0x253563['X-Cliodot-Client'])[_0x476f92(0xfd)](_0x476f92(0x10a)),expect(_0x253563[_0x476f92(0xca)])[_0x476f92(0xef)](expect['any'](String));const _0x2a5f13=sha256Hex(JSON[_0x476f92(0xd2)]({'email':'a@b.com'}));expect(_0x2a5f13)['toHaveLength'](0x40);}),it(_0x19dded(0xd3),async()=>{const _0x473a6a=_0x19dded;_0x472b33[_0x473a6a(0xf5)][_0x473a6a(0xcd)]({'status':0x191,'data':{'ok':![],'error':_0x473a6a(0xf0)}});const _0x195d6c=_0x32ec8a();await expect(_0x195d6c[_0x473a6a(0xfe)][_0x473a6a(0xe5)]({'email':_0x473a6a(0xe3)}))[_0x473a6a(0x105)][_0x473a6a(0xcb)]({'name':_0x473a6a(0xff),'message':_0x473a6a(0xf0),'status':0x191,'code':_0x473a6a(0xf8)});}),it(_0x19dded(0xe7),async()=>{const _0x42d932=_0x19dded;_0x472b33[_0x42d932(0xf5)][_0x42d932(0xcd)]({'status':0xc8,'data':{'ok':!![],'surface':{'version':0x1,'gateway':{'slug':_0x42d932(0xe1),'sdk_enabled':!![]},'ops':[]}}});const _0x1ef774=_0x32ec8a();await expect(_0x1ef774[_0x42d932(0xfe)][_0x42d932(0x101)]())[_0x42d932(0x105)][_0x42d932(0xf9)]('SDK\x20operation\x20not\x20exposed:\x20users.account');}),it(_0x19dded(0xe0),async()=>{const _0x30aa43=_0x19dded;_0x472b33[_0x30aa43(0xf5)][_0x30aa43(0xcd)]({'status':0xc8,'data':{'ok':!![],'surface':{'version':0x1,'gateway':{'slug':_0x30aa43(0xe1),'sdk_enabled':!![]},'ops':[{'id':_0x30aa43(0xe4),'sdk_path':['customers','cards'],'op':_0x30aa43(0xdc),'method':_0x30aa43(0xd7),'endpoint_path':'/customers/{id}/cards','path_params':['id'],'query_schema':{'type':'object','properties':{'limit':{'type':_0x30aa43(0xd6)}}},'body':![]}]}}}),_0x472b33['request'][_0x30aa43(0xcd)]({'status':0xc8,'data':{'ok':!![],'data':[]}});const _0x56cd41=_0x32ec8a();await _0x56cd41[_0x30aa43(0xdd)][_0x30aa43(0xf7)][_0x30aa43(0xdc)](_0x30aa43(0xfc),{'limit':0x2}),expect(_0x472b33[_0x30aa43(0x10b)])[_0x30aa43(0xee)](expect['objectContaining']({'url':_0x30aa43(0xcf),'method':'GET','params':{'limit':0x2}}));});});
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const axios_1 = __importDefault(require("axios"));
+const crypto_1 = __importDefault(require("crypto"));
+const Surface_1 = require("../Surface");
+const errors_1 = require("../errors");
+jest.mock("axios");
+const mockedAxios = axios_1.default;
+function sha256Hex(value) {
+    return crypto_1.default.createHash("sha256").update(value, "utf8").digest("hex");
+}
+describe("Surface", () => {
+    const mockAxiosInstance = {
+        get: jest.fn(),
+        request: jest.fn(),
+    };
+    beforeEach(() => {
+        jest.clearAllMocks();
+        mockedAxios.create.mockReturnValue(mockAxiosInstance);
+    });
+    function createClient() {
+        return new Surface_1.Surface({
+            baseUrl: "https://api.example.com",
+            slug: "acme",
+            apiKey: "key_test",
+            fetchSurface: false,
+        });
+    }
+    it("requires baseUrl", () => {
+        expect(() => new Surface_1.Surface({ baseUrl: "" })).toThrow(errors_1.CliodotApiError);
+    });
+    it("constructs a typed fluent client", () => {
+        const api = new Surface_1.Surface({
+            baseUrl: "https://api.example.com",
+            slug: "acme",
+            apiKey: "key_test",
+            fetchSurface: false,
+        });
+        expect(typeof api.users.list).toBe("function");
+    });
+    it("loads surface and invokes fluent op with attestation headers", async () => {
+        mockAxiosInstance.get.mockResolvedValue({
+            status: 200,
+            data: {
+                ok: true,
+                surface: {
+                    version: 1,
+                    gateway: { slug: "acme", sdk_enabled: true },
+                    ops: [
+                        {
+                            id: "users.create",
+                            sdk_path: ["users"],
+                            op: "create",
+                            method: "POST",
+                            endpoint_path: "/users",
+                            path_params: [],
+                            query_schema: null,
+                            body: true,
+                        },
+                    ],
+                },
+            },
+        });
+        mockAxiosInstance.request.mockResolvedValue({
+            status: 200,
+            data: { ok: true, data: { id: "u1" } },
+        });
+        const api = createClient();
+        const result = await api.users.create({ email: "a@b.com" });
+        expect(result).toEqual({ id: "u1" });
+        expect(mockAxiosInstance.get).toHaveBeenCalledWith("https://api.example.com/acme/sdk/surface", expect.objectContaining({
+            headers: expect.objectContaining({
+                "X-Cliodot-Client": "sdk",
+                "X-API-Key": "key_test",
+                "X-Cliodot-SDK-Signature": expect.any(String),
+            }),
+        }));
+        const invokeHeaders = mockAxiosInstance.request.mock.calls[0][0].headers;
+        expect(invokeHeaders["X-Cliodot-Client"]).toBe("sdk");
+        expect(invokeHeaders["X-Cliodot-SDK-Signature"]).toEqual(expect.any(String));
+        const bodyHash = sha256Hex(JSON.stringify({ email: "a@b.com" }));
+        expect(bodyHash).toHaveLength(64);
+    });
+    it("throws catchable CliodotApiError from invoke without background prefetch", async () => {
+        mockAxiosInstance.get.mockResolvedValue({
+            status: 401,
+            data: { ok: false, error: "API key required" },
+        });
+        const api = createClient();
+        await expect(api.users.create({ email: "a@b.com" })).rejects.toMatchObject({
+            name: "CliodotApiError",
+            message: "API key required",
+            status: 401,
+            code: "SURFACE_LOAD_FAILED",
+        });
+    });
+    it("throws when op is not exposed", async () => {
+        mockAxiosInstance.get.mockResolvedValue({
+            status: 200,
+            data: {
+                ok: true,
+                surface: {
+                    version: 1,
+                    gateway: { slug: "acme", sdk_enabled: true },
+                    ops: [],
+                },
+            },
+        });
+        const api = createClient();
+        await expect(api.users.account()).rejects.toThrow("SDK operation not exposed: users.account");
+    });
+    it("maps path params for nested ops", async () => {
+        mockAxiosInstance.get.mockResolvedValue({
+            status: 200,
+            data: {
+                ok: true,
+                surface: {
+                    version: 1,
+                    gateway: { slug: "acme", sdk_enabled: true },
+                    ops: [
+                        {
+                            id: "customers.cards.list",
+                            sdk_path: ["customers", "cards"],
+                            op: "list",
+                            method: "GET",
+                            endpoint_path: "/customers/{id}/cards",
+                            path_params: ["id"],
+                            query_schema: { type: "object", properties: { limit: { type: "number" } } },
+                            body: false,
+                        },
+                    ],
+                },
+            },
+        });
+        mockAxiosInstance.request.mockResolvedValue({
+            status: 200,
+            data: { ok: true, data: [] },
+        });
+        const api = createClient();
+        await api.customers.cards.list("cust_1", { limit: 2 });
+        expect(mockAxiosInstance.request).toHaveBeenCalledWith(expect.objectContaining({
+            url: "https://api.example.com/acme/customers/cust_1/cards",
+            method: "GET",
+            params: { limit: 2 },
+        }));
+    });
+});