entity-client 1.0.16 → 1.0.17

package/dist/EntityAppServerApi.d.ts

@@ -73,6 +73,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -156,6 +157,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -242,6 +244,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -329,6 +332,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -418,6 +422,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -506,6 +511,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -596,6 +602,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -713,6 +720,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -799,6 +807,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -888,6 +897,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -976,6 +986,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -1065,6 +1076,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -1152,6 +1164,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -1239,6 +1252,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -1354,6 +1368,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -1446,6 +1461,7 @@ declare const EntityAppServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;

package/dist/EntityAppServerApi.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/EntityAppServerApi.ts"],
-  "sourcesContent": ["import { EntityServerApi } from \"./EntityServerApi.js\";\nimport {\n    AccountAppMixin,\n    BoardMixin,\n    EmailVerifyMixin,\n    OAuthMixin,\n    PasswordResetMixin,\n    TwoFactorMixin,\n} from \"./mixins/app/index.js\";\nimport {\n    AlimtalkMixin,\n    AppPushMixin,\n    FriendtalkMixin,\n    HolidaysMixin,\n    IdentityMixin,\n    LlmMixin,\n    OcrMixin,\n    PgMixin,\n    SmsMixin,\n    TaxinvoiceMixin,\n} from \"./mixins/app/plugins/index.js\";\n\nexport class EntityAppServerApi extends AlimtalkMixin(\n    FriendtalkMixin(\n        SmsMixin(\n            AppPushMixin(\n                PgMixin(\n                    TaxinvoiceMixin(\n                        OcrMixin(\n                            LlmMixin(\n                                IdentityMixin(\n                                    HolidaysMixin(\n                                        OAuthMixin(\n                                            TwoFactorMixin(\n                                                PasswordResetMixin(\n                                                    EmailVerifyMixin(\n                                                        BoardMixin(\n                                                            AccountAppMixin(\n                                                                EntityServerApi,\n                                                            ),\n                                                        ),\n                                                    ),\n                                                ),\n                                            ),\n                                        ),\n                                    ),\n                                ),\n                            ),\n                        ),\n                    ),\n                ),\n            ),\n        ),\n    ),\n) {}\n"],
+  "sourcesContent": ["import { EntityServerApi } from \"./EntityServerApi.js\";\r\nimport {\r\n    AccountAppMixin,\r\n    BoardMixin,\r\n    EmailVerifyMixin,\r\n    OAuthMixin,\r\n    PasswordResetMixin,\r\n    TwoFactorMixin,\r\n} from \"./mixins/app/index.js\";\r\nimport {\r\n    AlimtalkMixin,\r\n    AppPushMixin,\r\n    FriendtalkMixin,\r\n    HolidaysMixin,\r\n    IdentityMixin,\r\n    LlmMixin,\r\n    OcrMixin,\r\n    PgMixin,\r\n    SmsMixin,\r\n    TaxinvoiceMixin,\r\n} from \"./mixins/app/plugins/index.js\";\r\n\r\nexport class EntityAppServerApi extends AlimtalkMixin(\r\n    FriendtalkMixin(\r\n        SmsMixin(\r\n            AppPushMixin(\r\n                PgMixin(\r\n                    TaxinvoiceMixin(\r\n                        OcrMixin(\r\n                            LlmMixin(\r\n                                IdentityMixin(\r\n                                    HolidaysMixin(\r\n                                        OAuthMixin(\r\n                                            TwoFactorMixin(\r\n                                                PasswordResetMixin(\r\n                                                    EmailVerifyMixin(\r\n                                                        BoardMixin(\r\n                                                            AccountAppMixin(\r\n                                                                EntityServerApi,\r\n                                                            ),\r\n                                                        ),\r\n                                                    ),\r\n                                                ),\r\n                                            ),\r\n                                        ),\r\n                                    ),\r\n                                ),\r\n                            ),\r\n                        ),\r\n                    ),\r\n                ),\r\n            ),\r\n        ),\r\n    ),\r\n) {}\r\n"],
   "mappings": "AAAA,OAAS,mBAAAA,MAAuB,uBAChC,OACI,mBAAAC,EACA,cAAAC,EACA,oBAAAC,EACA,cAAAC,EACA,sBAAAC,EACA,kBAAAC,MACG,wBACP,OACI,iBAAAC,EACA,gBAAAC,EACA,mBAAAC,EACA,iBAAAC,EACA,iBAAAC,EACA,YAAAC,EACA,YAAAC,EACA,WAAAC,EACA,YAAAC,EACA,mBAAAC,MACG,gCAEA,MAAMC,UAA2BV,EACpCE,EACIM,EACIP,EACIM,EACIE,EACIH,EACID,EACID,EACID,EACIN,EACIE,EACID,EACIF,EACID,EACID,EACID,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CACJ,CAAE,CAAC",
   "names": ["EntityServerApi", "AccountAppMixin", "BoardMixin", "EmailVerifyMixin", "OAuthMixin", "PasswordResetMixin", "TwoFactorMixin", "AlimtalkMixin", "AppPushMixin", "FriendtalkMixin", "HolidaysMixin", "IdentityMixin", "LlmMixin", "OcrMixin", "PgMixin", "SmsMixin", "TaxinvoiceMixin", "EntityAppServerApi"]
 }

package/dist/EntityServerApi.d.ts

@@ -104,6 +104,7 @@ declare const EntityServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -189,6 +190,7 @@ declare const EntityServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -303,6 +305,7 @@ declare const EntityServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -394,6 +397,7 @@ declare const EntityServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -503,6 +507,7 @@ declare const EntityServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -647,6 +652,7 @@ declare const EntityServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -795,6 +801,7 @@ declare const EntityServerApi_base: {
         applyCsrfHealth(): void;
         readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
         get reqOpts(): import("./client/request.js").RequestOptions;
+        prepareRequest(_withAuth: boolean): Promise<void>;
         get http(): {
             get<T>(path: string, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
             post<T>(path: string, body?: unknown, withAuth?: boolean, extraHeaders?: Record<string, string>): Promise<T>;
@@ -809,6 +816,9 @@ declare const EntityServerApi_base: {
     };
 } & {
     new (...args: any[]): {
+        authBootstrapPromise: Promise<void> | null;
+        authBootstrapToken: string;
+        authBootstrapAnonymousCompleted: boolean;
         csrfRefresher: () => Promise<void>;
         checkHealth(bootstrapAuth?: boolean): Promise<{
             status: string;
@@ -817,6 +827,8 @@ declare const EntityServerApi_base: {
         }>;
         readCookie(name: string): string | null;
         ensurePublicAuthBootstrap(): Promise<void>;
+        ensureAuthenticatedRequestBootstrap(): Promise<void>;
+        prepareRequest(withAuth: boolean): Promise<void>;
         login(email: string, password: string): Promise<import("./index.js").AuthLoginResponse>;
         tokenRefresh(): Promise<{
             access_token: string;

package/dist/EntityServerApi.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/EntityServerApi.ts"],
-  "sourcesContent": ["/**\n * @file EntityServerApi.ts\n * entity-server core route\uC6A9 Mixin \uC870\uD569 \uD074\uB77C\uC774\uC5B8\uD2B8.\n *\n * \uC808(section)\uBCC4 \uAD6C\uD604:\n *   src/client/base.ts            \u2014 \uC0C1\uD0DC\u00B7\uC0DD\uC131\uC790\u00B7\uACF5\uD1B5 \uD5EC\uD37C\n *   src/mixins/server/*           \u2014 entity-server core route mixin\n *   src/mixins/app/*              \u2014 entity-app-server plugin mixin\n */\nimport { EntityServerClientBase } from \"./client/base.js\";\nimport {\n    AdminMixin,\n    AuthMixin,\n    EntityMixin,\n    FileMixin,\n    PushMixin,\n    SmtpMixin,\n    TransactionMixin,\n    UtilsMixin,\n} from \"./mixins/server/index.js\";\n\n// \u2500\u2500\u2500 Composed class \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport class EntityServerApi extends UtilsMixin(\n    TransactionMixin(\n        FileMixin(\n            SmtpMixin(\n                PushMixin(\n                    AdminMixin(EntityMixin(AuthMixin(EntityServerClientBase))),\n                ),\n            ),\n        ),\n    ),\n) {}\n"],
+  "sourcesContent": ["/**\r\n * @file EntityServerApi.ts\r\n * entity-server core route\uC6A9 Mixin \uC870\uD569 \uD074\uB77C\uC774\uC5B8\uD2B8.\r\n *\r\n * \uC808(section)\uBCC4 \uAD6C\uD604:\r\n *   src/client/base.ts            \u2014 \uC0C1\uD0DC\u00B7\uC0DD\uC131\uC790\u00B7\uACF5\uD1B5 \uD5EC\uD37C\r\n *   src/mixins/server/*           \u2014 entity-server core route mixin\r\n *   src/mixins/app/*              \u2014 entity-app-server plugin mixin\r\n */\r\nimport { EntityServerClientBase } from \"./client/base.js\";\r\nimport {\r\n    AdminMixin,\r\n    AuthMixin,\r\n    EntityMixin,\r\n    FileMixin,\r\n    PushMixin,\r\n    SmtpMixin,\r\n    TransactionMixin,\r\n    UtilsMixin,\r\n} from \"./mixins/server/index.js\";\r\n\r\n// \u2500\u2500\u2500 Composed class \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\r\nexport class EntityServerApi extends UtilsMixin(\r\n    TransactionMixin(\r\n        FileMixin(\r\n            SmtpMixin(\r\n                PushMixin(\r\n                    AdminMixin(EntityMixin(AuthMixin(EntityServerClientBase))),\r\n                ),\r\n            ),\r\n        ),\r\n    ),\r\n) {}\r\n"],
   "mappings": "AASA,OAAS,0BAAAA,MAA8B,mBACvC,OACI,cAAAC,EACA,aAAAC,EACA,eAAAC,EACA,aAAAC,EACA,aAAAC,EACA,aAAAC,EACA,oBAAAC,EACA,cAAAC,MACG,2BAIA,MAAMC,UAAwBD,EACjCD,EACIH,EACIE,EACID,EACIJ,EAAWE,EAAYD,EAAUF,CAAsB,CAAC,CAAC,CAC7D,CACJ,CACJ,CACJ,CACJ,CAAE,CAAC",
   "names": ["EntityServerClientBase", "AdminMixin", "AuthMixin", "EntityMixin", "FileMixin", "PushMixin", "SmtpMixin", "TransactionMixin", "UtilsMixin", "EntityServerApi"]
 }

package/dist/client/base.d.ts

@@ -104,6 +104,7 @@ export declare class EntityServerClientBase {
      */
     readRequestBody<T = Record<string, unknown>>(body: ArrayBuffer | Uint8Array | string | T | null | undefined, contentType?: string, requireEncrypted?: boolean): T;
     get reqOpts(): RequestOptions;
+    prepareRequest(_withAuth: boolean): Promise<void>;
     /**
      * 커스텀 라우트 직접 호출용 HTTP 네임스페이스.
      * 인증·암호화·HMAC 등 SDK 옵션이 그대로 적용됩니다.

package/dist/client/base.js

@@ -1,2 +1,2 @@
-import{readEnv as m}from"./utils.js";import{derivePacketKey as u,parseRequestBody as f}from"./packet.js";import{entityRequest as l}from"./request.js";const c="/v1/realtime";class y{baseUrl;token;anonymousPacketToken;apiKey;hmacSecret;encryptRequests;csrfEnabled;csrfHeaderName;csrfCookieName;csrfRefresher=null;activeTxId=null;keepSession;refreshBuffer;onTokenRefreshed;onSessionExpired;onHealthChange;sessionRefreshToken=null;refreshTimer=null;healthTickTimer=null;healthTickPromise=null;realtimeEnabled;realtimePath;realtimeAutoConnect;realtimeAutoReconnect;realtimeReconnectDelayMs;realtimeStatus;realtimeSocket=null;realtimeConnectPromise=null;realtimeReconnectTimer=null;realtimeShouldReconnect=!1;realtimeMessageListeners=new Set;realtimeStatusListeners=new Set;realtimeEventListeners=new Map;constructor(e={}){const t=m("VITE_ENTITY_SERVER_URL");this.baseUrl=(e.baseUrl??t??"").replace(/\/$/,""),this.token=e.token??"",this.anonymousPacketToken=e.anonymousPacketToken??"",this.apiKey=e.apiKey??"",this.hmacSecret=e.hmacSecret??"",this.encryptRequests=e.encryptRequests??!1,this.csrfEnabled=e.csrfEnabled??!1,this.csrfHeaderName=e.csrfHeaderName??"x-csrf-token",this.csrfCookieName=e.csrfCookieName??"_csrf",this.keepSession=e.keepSession??!1,this.refreshBuffer=e.refreshBuffer??60,this.onTokenRefreshed=e.onTokenRefreshed,this.onSessionExpired=e.onSessionExpired,this.onHealthChange=e.onHealthChange,this.realtimeEnabled=!1,this.realtimePath=c,this.realtimeAutoConnect=!0,this.realtimeAutoReconnect=!0,this.realtimeReconnectDelayMs=3e3,this.realtimeStatus="idle",this.applyRealtimeOptions(e.realtime),typeof e.healthTickInterval=="number"&&e.healthTickInterval>0&&Promise.resolve().then(()=>this.startHealthTick(e.healthTickInterval))}configure(e){typeof e.baseUrl=="string"&&(this.baseUrl=e.baseUrl.replace(/\/$/,"")),typeof e.token=="string"&&(this.token=e.token),typeof e.anonymousPacketToken=="string"&&(this.anonymousPacketToken=e.anonymousPacketToken),typeof e.encryptRequests=="boolean"&&(this.encryptRequests=e.encryptRequests),typeof e.csrfEnabled=="boolean"&&(this.csrfEnabled=e.csrfEnabled),typeof e.csrfHeaderName=="string"&&(this.csrfHeaderName=e.csrfHeaderName),typeof e.csrfCookieName=="string"&&(this.csrfCookieName=e.csrfCookieName),typeof e.apiKey=="string"&&(this.apiKey=e.apiKey),typeof e.hmacSecret=="string"&&(this.hmacSecret=e.hmacSecret),typeof e.keepSession=="boolean"&&(this.keepSession=e.keepSession),typeof e.refreshBuffer=="number"&&(this.refreshBuffer=e.refreshBuffer),e.onTokenRefreshed&&(this.onTokenRefreshed=e.onTokenRefreshed),e.onSessionExpired&&(this.onSessionExpired=e.onSessionExpired),e.onHealthChange&&(this.onHealthChange=e.onHealthChange),typeof e.realtime<"u"&&this.applyRealtimeOptions(e.realtime),typeof e.healthTickInterval=="number"&&e.healthTickInterval>0&&Promise.resolve().then(()=>this.startHealthTick(e.healthTickInterval))}setToken(e){if(this.token=e,!e){this.disconnectRealtime("token_cleared");return}this.realtimeEnabled&&this.realtimeAutoConnect&&this.connectRealtime().catch(()=>{})}setAnonymousPacketToken(e){this.anonymousPacketToken=e}setApiKey(e){this.apiKey=e}setHmacSecret(e){this.hmacSecret=e}setEncryptRequests(e){this.encryptRequests=e}setCsrfEnabled(e){this.csrfEnabled=e}addRealtimeListener(e){this.realtimeMessageListeners.add(e)}removeRealtimeListener(e){this.realtimeMessageListeners.delete(e)}addRealtimeStatusListener(e){this.realtimeStatusListeners.add(e)}removeRealtimeStatusListener(e){this.realtimeStatusListeners.delete(e)}addRealtimeEventListener(e,t){const s=String(e).trim();s&&(this.realtimeEventListeners.has(s)||this.realtimeEventListeners.set(s,new Set),this.realtimeEventListeners.get(s).add(t))}removeRealtimeEventListener(e,t){const s=String(e).trim();if(!s)return;const i=this.realtimeEventListeners.get(s);i&&(i.delete(t),i.size===0&&this.realtimeEventListeners.delete(s))}async connectRealtime(){if(!this.realtimeEnabled){this.setRealtimeStatus("disabled","realtime_disabled");return}if(!this.token)throw new Error("Cannot open realtime connection without access token.");if(typeof WebSocket>"u")throw new Error("WebSocket is not available in this environment.");if(this.realtimeSocket&&this.realtimeSocket.readyState===WebSocket.OPEN)return;if(this.realtimeSocket&&this.realtimeSocket.readyState===WebSocket.CONNECTING&&this.realtimeConnectPromise)return this.realtimeConnectPromise;this.clearRealtimeReconnectTimer(),this.realtimeShouldReconnect=this.realtimeAutoReconnect,this.setRealtimeStatus("connecting","connect_requested");const e=new WebSocket(this.buildRealtimeUrl());return this.realtimeSocket=e,this.realtimeConnectPromise=new Promise((t,s)=>{let i=!1;const r=()=>{i||(i=!0,this.realtimeConnectPromise=null,t())},n=a=>{i||(i=!0,this.realtimeConnectPromise=null,s(a))};e.addEventListener("open",()=>{this.setRealtimeStatus("open","socket_open"),r()}),e.addEventListener("message",a=>{this.handleRealtimeMessage(a.data)}),e.addEventListener("error",()=>{this.setRealtimeStatus("closed","socket_error",new Error("Realtime socket error."))}),e.addEventListener("close",a=>{this.realtimeSocket===e&&(this.realtimeSocket=null);const o=a.reason||"socket_closed",h=new Error(`Realtime socket closed (${a.code}${a.reason?`: ${a.reason}`:""}).`);this.setRealtimeStatus("closed",o,h),i||n(h),this.realtimeShouldReconnect&&this.realtimeEnabled&&this.realtimeAutoReconnect&&this.token&&this.scheduleRealtimeReconnect(o)})}),this.realtimeConnectPromise}disconnectRealtime(e="client_disconnect"){if(this.realtimeShouldReconnect=!1,this.clearRealtimeReconnectTimer(),this.realtimeSocket){const t=this.realtimeSocket;this.realtimeSocket=null;try{(t.readyState===WebSocket.OPEN||t.readyState===WebSocket.CONNECTING)&&t.close(1e3,e)}catch{}}this.realtimeConnectPromise=null,this.setRealtimeStatus(this.realtimeEnabled?"idle":"disabled",e)}sendRealtime(e){return!this.realtimeSocket||this.realtimeSocket.readyState!==WebSocket.OPEN?!1:(this.realtimeSocket.send(JSON.stringify(e)),!0)}subscribeRealtime(e){return this.sendRealtime({type:"subscribe",channel:"session",event:"session.subscribe",data:{subscriptions:e}})}unsubscribeRealtime(e){return this.sendRealtime({type:"unsubscribe",channel:"session",event:"session.unsubscribe",data:{subscriptions:e}})}startHealthTick(e=300*1e3){this.stopHealthTick();const t=()=>{this.healthTickPromise||(this.healthTickPromise=(this.csrfRefresher?this.csrfRefresher():Promise.resolve()).then(()=>{this.onHealthChange?.(!0)}).catch(()=>{this.onHealthChange?.(!1)}).finally(()=>{this.healthTickPromise=null}))};t(),this.healthTickTimer=setInterval(t,e)}stopHealthTick(){this.healthTickTimer!==null&&(clearInterval(this.healthTickTimer),this.healthTickTimer=null),this.healthTickPromise=null}scheduleKeepSession(e,t,s){this.clearRefreshTimer(),this.sessionRefreshToken=e;const i=Math.max((t-this.refreshBuffer)*1e3,0);this.refreshTimer=setTimeout(async()=>{if(this.sessionRefreshToken)try{const r=await s(this.sessionRefreshToken);this.onTokenRefreshed?.(r.access_token,r.expires_in),this.scheduleKeepSession(this.sessionRefreshToken,r.expires_in,s)}catch(r){this.clearRefreshTimer(),this.onSessionExpired?.(r instanceof Error?r:new Error(String(r)))}},i)}clearRefreshTimer(){this.refreshTimer!==null&&(clearTimeout(this.refreshTimer),this.refreshTimer=null)}stopKeepSession(){this.clearRefreshTimer(),this.sessionRefreshToken=null}applyRealtimeOptions(e){const t=typeof e=="boolean"?{enabled:e}:e??{};if(this.realtimeEnabled=t.enabled??!1,this.realtimePath=String(t.path??c).trim()||c,this.realtimeAutoConnect=t.autoConnect??!0,this.realtimeAutoReconnect=t.autoReconnect??!0,this.realtimeReconnectDelayMs=Math.max(250,t.reconnectDelayMs??3e3),!this.realtimeEnabled){this.disconnectRealtime("realtime_disabled");return}this.setRealtimeStatus("idle","realtime_enabled"),this.token&&this.realtimeAutoConnect&&this.connectRealtime().catch(()=>{})}buildRealtimeUrl(){const t=this.baseUrl||m("VITE_ENTITY_SERVER_URL")||""||(typeof window<"u"?window.location.origin:"");if(!t)throw new Error("Realtime connection requires baseUrl.");const s=new URL(this.realtimePath,t);return s.protocol=s.protocol==="https:"?"wss:":"ws:",s.searchParams.set("access_token",this.token),s.toString()}handleRealtimeMessage(e){if(typeof e!="string")return;let t;try{t=JSON.parse(e)}catch{return}for(const i of this.realtimeMessageListeners)i(t);const s=this.realtimeEventListeners.get(t.event);if(s)for(const i of s)i(t)}scheduleRealtimeReconnect(e){this.clearRealtimeReconnectTimer(),this.realtimeReconnectTimer=setTimeout(()=>{this.realtimeReconnectTimer=null,!(!this.realtimeEnabled||!this.token)&&(this.setRealtimeStatus("connecting",`${e}:reconnect`),this.connectRealtime().catch(()=>{}))},this.realtimeReconnectDelayMs)}clearRealtimeReconnectTimer(){this.realtimeReconnectTimer!==null&&(clearTimeout(this.realtimeReconnectTimer),this.realtimeReconnectTimer=null)}setRealtimeStatus(e,t,s){const i=this.realtimeStatus;if(!(i===e&&typeof t>"u"&&typeof s>"u")){this.realtimeStatus=e;for(const r of this.realtimeStatusListeners)r({status:e,previousStatus:i,...t?{reason:t}:{},...s?{error:s}:{}})}}applyCsrfHealth(){if(!(typeof document>"u")){for(const e of document.cookie.split(";")){const t=e.indexOf("=");if(!(t<0)&&e.substring(0,t).trim()===this.csrfCookieName){this.csrfEnabled=!!e.substring(t+1).trim();return}}this.csrfEnabled=!1}}readRequestBody(e,t="application/json",s=!1){const i=u(this.hmacSecret,this.token||this.anonymousPacketToken);return f(e,t,s,i)}get reqOpts(){return{baseUrl:this.baseUrl,token:this.token,anonymousPacketToken:this.anonymousPacketToken,apiKey:this.apiKey,hmacSecret:this.hmacSecret,encryptRequests:this.encryptRequests,csrfEnabled:this.csrfEnabled,csrfHeaderName:this.csrfHeaderName,csrfCookieName:this.csrfCookieName,refreshCsrfCookie:this.csrfEnabled?this.csrfRefresher:null,onAccessToken:e=>{this.token=e}}}get http(){const e=this;return{get(t,s=!0,i){return l(e.reqOpts,"GET",t,void 0,s,i,!1)},post(t,s,i=!0,r){return l(e.reqOpts,"POST",t,s,i,r,!1)},put(t,s,i=!0,r){return l(e.reqOpts,"PUT",t,s,i,r,!1)},patch(t,s,i=!0,r){return l(e.reqOpts,"PATCH",t,s,i,r,!1)},delete(t,s,i=!0,r){return l(e.reqOpts,"DELETE",t,s,i,r,!1)}}}request(e,t,s,i=!0,r){return l(this.reqOpts,e,t,s,i,r,!0)}async requestBinary(e,t,s,i=!0){const r={"Content-Type":"application/json"};i&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,...s!=null?{body:JSON.stringify(s)}:{},credentials:"include"});if(!n.ok){const a=await n.text(),o=new Error(`HTTP ${n.status}: ${a}`);throw o.status=n.status,o}return n.arrayBuffer()}async requestForm(e,t,s,i=!0){const r={};i&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,body:s,credentials:"include"}),a=await n.json();if(!a.ok){const o=new Error(a.message??`EntityServer error (HTTP ${n.status})`);throw o.status=n.status,o}return a}async requestFormBinary(e,t,s,i=!0){const r={};i&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,body:s,credentials:"include"});if(!n.ok){const a=await n.text(),o=new Error(`HTTP ${n.status}: ${a}`);throw o.status=n.status,o}return n.arrayBuffer()}}export{y as EntityServerClientBase};
+import{readEnv as m}from"./utils.js";import{derivePacketKey as u,parseRequestBody as f}from"./packet.js";import{entityRequest as l}from"./request.js";const c="/v1/realtime";class y{baseUrl;token;anonymousPacketToken;apiKey;hmacSecret;encryptRequests;csrfEnabled;csrfHeaderName;csrfCookieName;csrfRefresher=null;activeTxId=null;keepSession;refreshBuffer;onTokenRefreshed;onSessionExpired;onHealthChange;sessionRefreshToken=null;refreshTimer=null;healthTickTimer=null;healthTickPromise=null;realtimeEnabled;realtimePath;realtimeAutoConnect;realtimeAutoReconnect;realtimeReconnectDelayMs;realtimeStatus;realtimeSocket=null;realtimeConnectPromise=null;realtimeReconnectTimer=null;realtimeShouldReconnect=!1;realtimeMessageListeners=new Set;realtimeStatusListeners=new Set;realtimeEventListeners=new Map;constructor(e={}){const t=m("VITE_ENTITY_SERVER_URL");this.baseUrl=(e.baseUrl??t??"").replace(/\/$/,""),this.token=e.token??"",this.anonymousPacketToken=e.anonymousPacketToken??"",this.apiKey=e.apiKey??"",this.hmacSecret=e.hmacSecret??"",this.encryptRequests=e.encryptRequests??!1,this.csrfEnabled=e.csrfEnabled??!1,this.csrfHeaderName=e.csrfHeaderName??"x-csrf-token",this.csrfCookieName=e.csrfCookieName??"_csrf",this.keepSession=e.keepSession??!1,this.refreshBuffer=e.refreshBuffer??60,this.onTokenRefreshed=e.onTokenRefreshed,this.onSessionExpired=e.onSessionExpired,this.onHealthChange=e.onHealthChange,this.realtimeEnabled=!1,this.realtimePath=c,this.realtimeAutoConnect=!0,this.realtimeAutoReconnect=!0,this.realtimeReconnectDelayMs=3e3,this.realtimeStatus="idle",this.applyRealtimeOptions(e.realtime),typeof e.healthTickInterval=="number"&&e.healthTickInterval>0&&Promise.resolve().then(()=>this.startHealthTick(e.healthTickInterval))}configure(e){typeof e.baseUrl=="string"&&(this.baseUrl=e.baseUrl.replace(/\/$/,"")),typeof e.token=="string"&&(this.token=e.token),typeof e.anonymousPacketToken=="string"&&(this.anonymousPacketToken=e.anonymousPacketToken),typeof e.encryptRequests=="boolean"&&(this.encryptRequests=e.encryptRequests),typeof e.csrfEnabled=="boolean"&&(this.csrfEnabled=e.csrfEnabled),typeof e.csrfHeaderName=="string"&&(this.csrfHeaderName=e.csrfHeaderName),typeof e.csrfCookieName=="string"&&(this.csrfCookieName=e.csrfCookieName),typeof e.apiKey=="string"&&(this.apiKey=e.apiKey),typeof e.hmacSecret=="string"&&(this.hmacSecret=e.hmacSecret),typeof e.keepSession=="boolean"&&(this.keepSession=e.keepSession),typeof e.refreshBuffer=="number"&&(this.refreshBuffer=e.refreshBuffer),e.onTokenRefreshed&&(this.onTokenRefreshed=e.onTokenRefreshed),e.onSessionExpired&&(this.onSessionExpired=e.onSessionExpired),e.onHealthChange&&(this.onHealthChange=e.onHealthChange),typeof e.realtime<"u"&&this.applyRealtimeOptions(e.realtime),typeof e.healthTickInterval=="number"&&e.healthTickInterval>0&&Promise.resolve().then(()=>this.startHealthTick(e.healthTickInterval))}setToken(e){if(this.token=e,!e){this.disconnectRealtime("token_cleared");return}this.realtimeEnabled&&this.realtimeAutoConnect&&this.connectRealtime().catch(()=>{})}setAnonymousPacketToken(e){this.anonymousPacketToken=e}setApiKey(e){this.apiKey=e}setHmacSecret(e){this.hmacSecret=e}setEncryptRequests(e){this.encryptRequests=e}setCsrfEnabled(e){this.csrfEnabled=e}addRealtimeListener(e){this.realtimeMessageListeners.add(e)}removeRealtimeListener(e){this.realtimeMessageListeners.delete(e)}addRealtimeStatusListener(e){this.realtimeStatusListeners.add(e)}removeRealtimeStatusListener(e){this.realtimeStatusListeners.delete(e)}addRealtimeEventListener(e,t){const s=String(e).trim();s&&(this.realtimeEventListeners.has(s)||this.realtimeEventListeners.set(s,new Set),this.realtimeEventListeners.get(s).add(t))}removeRealtimeEventListener(e,t){const s=String(e).trim();if(!s)return;const i=this.realtimeEventListeners.get(s);i&&(i.delete(t),i.size===0&&this.realtimeEventListeners.delete(s))}async connectRealtime(){if(!this.realtimeEnabled){this.setRealtimeStatus("disabled","realtime_disabled");return}if(!this.token)throw new Error("Cannot open realtime connection without access token.");if(typeof WebSocket>"u")throw new Error("WebSocket is not available in this environment.");if(this.realtimeSocket&&this.realtimeSocket.readyState===WebSocket.OPEN)return;if(this.realtimeSocket&&this.realtimeSocket.readyState===WebSocket.CONNECTING&&this.realtimeConnectPromise)return this.realtimeConnectPromise;this.clearRealtimeReconnectTimer(),this.realtimeShouldReconnect=this.realtimeAutoReconnect,this.setRealtimeStatus("connecting","connect_requested");const e=new WebSocket(this.buildRealtimeUrl());return this.realtimeSocket=e,this.realtimeConnectPromise=new Promise((t,s)=>{let i=!1;const r=()=>{i||(i=!0,this.realtimeConnectPromise=null,t())},n=a=>{i||(i=!0,this.realtimeConnectPromise=null,s(a))};e.addEventListener("open",()=>{this.setRealtimeStatus("open","socket_open"),r()}),e.addEventListener("message",a=>{this.handleRealtimeMessage(a.data)}),e.addEventListener("error",()=>{this.setRealtimeStatus("closed","socket_error",new Error("Realtime socket error."))}),e.addEventListener("close",a=>{this.realtimeSocket===e&&(this.realtimeSocket=null);const o=a.reason||"socket_closed",h=new Error(`Realtime socket closed (${a.code}${a.reason?`: ${a.reason}`:""}).`);this.setRealtimeStatus("closed",o,h),i||n(h),this.realtimeShouldReconnect&&this.realtimeEnabled&&this.realtimeAutoReconnect&&this.token&&this.scheduleRealtimeReconnect(o)})}),this.realtimeConnectPromise}disconnectRealtime(e="client_disconnect"){if(this.realtimeShouldReconnect=!1,this.clearRealtimeReconnectTimer(),this.realtimeSocket){const t=this.realtimeSocket;this.realtimeSocket=null;try{(t.readyState===WebSocket.OPEN||t.readyState===WebSocket.CONNECTING)&&t.close(1e3,e)}catch{}}this.realtimeConnectPromise=null,this.setRealtimeStatus(this.realtimeEnabled?"idle":"disabled",e)}sendRealtime(e){return!this.realtimeSocket||this.realtimeSocket.readyState!==WebSocket.OPEN?!1:(this.realtimeSocket.send(JSON.stringify(e)),!0)}subscribeRealtime(e){return this.sendRealtime({type:"subscribe",channel:"session",event:"session.subscribe",data:{subscriptions:e}})}unsubscribeRealtime(e){return this.sendRealtime({type:"unsubscribe",channel:"session",event:"session.unsubscribe",data:{subscriptions:e}})}startHealthTick(e=300*1e3){this.stopHealthTick();const t=()=>{this.healthTickPromise||(this.healthTickPromise=(this.csrfRefresher?this.csrfRefresher():Promise.resolve()).then(()=>{this.onHealthChange?.(!0)}).catch(()=>{this.onHealthChange?.(!1)}).finally(()=>{this.healthTickPromise=null}))};t(),this.healthTickTimer=setInterval(t,e)}stopHealthTick(){this.healthTickTimer!==null&&(clearInterval(this.healthTickTimer),this.healthTickTimer=null),this.healthTickPromise=null}scheduleKeepSession(e,t,s){this.clearRefreshTimer(),this.sessionRefreshToken=e;const i=Math.max((t-this.refreshBuffer)*1e3,0);this.refreshTimer=setTimeout(async()=>{if(this.sessionRefreshToken)try{const r=await s(this.sessionRefreshToken);this.onTokenRefreshed?.(r.access_token,r.expires_in),this.scheduleKeepSession(this.sessionRefreshToken,r.expires_in,s)}catch(r){this.clearRefreshTimer(),this.onSessionExpired?.(r instanceof Error?r:new Error(String(r)))}},i)}clearRefreshTimer(){this.refreshTimer!==null&&(clearTimeout(this.refreshTimer),this.refreshTimer=null)}stopKeepSession(){this.clearRefreshTimer(),this.sessionRefreshToken=null}applyRealtimeOptions(e){const t=typeof e=="boolean"?{enabled:e}:e??{};if(this.realtimeEnabled=t.enabled??!1,this.realtimePath=String(t.path??c).trim()||c,this.realtimeAutoConnect=t.autoConnect??!0,this.realtimeAutoReconnect=t.autoReconnect??!0,this.realtimeReconnectDelayMs=Math.max(250,t.reconnectDelayMs??3e3),!this.realtimeEnabled){this.disconnectRealtime("realtime_disabled");return}this.setRealtimeStatus("idle","realtime_enabled"),this.token&&this.realtimeAutoConnect&&this.connectRealtime().catch(()=>{})}buildRealtimeUrl(){const t=this.baseUrl||m("VITE_ENTITY_SERVER_URL")||""||(typeof window<"u"?window.location.origin:"");if(!t)throw new Error("Realtime connection requires baseUrl.");const s=new URL(this.realtimePath,t);return s.protocol=s.protocol==="https:"?"wss:":"ws:",s.searchParams.set("access_token",this.token),s.toString()}handleRealtimeMessage(e){if(typeof e!="string")return;let t;try{t=JSON.parse(e)}catch{return}for(const i of this.realtimeMessageListeners)i(t);const s=this.realtimeEventListeners.get(t.event);if(s)for(const i of s)i(t)}scheduleRealtimeReconnect(e){this.clearRealtimeReconnectTimer(),this.realtimeReconnectTimer=setTimeout(()=>{this.realtimeReconnectTimer=null,!(!this.realtimeEnabled||!this.token)&&(this.setRealtimeStatus("connecting",`${e}:reconnect`),this.connectRealtime().catch(()=>{}))},this.realtimeReconnectDelayMs)}clearRealtimeReconnectTimer(){this.realtimeReconnectTimer!==null&&(clearTimeout(this.realtimeReconnectTimer),this.realtimeReconnectTimer=null)}setRealtimeStatus(e,t,s){const i=this.realtimeStatus;if(!(i===e&&typeof t>"u"&&typeof s>"u")){this.realtimeStatus=e;for(const r of this.realtimeStatusListeners)r({status:e,previousStatus:i,...t?{reason:t}:{},...s?{error:s}:{}})}}applyCsrfHealth(){if(!(typeof document>"u")){for(const e of document.cookie.split(";")){const t=e.indexOf("=");if(!(t<0)&&e.substring(0,t).trim()===this.csrfCookieName){this.csrfEnabled=!!e.substring(t+1).trim();return}}this.csrfEnabled=!1}}readRequestBody(e,t="application/json",s=!1){const i=u(this.hmacSecret,this.token||this.anonymousPacketToken);return f(e,t,s,i)}get reqOpts(){return{baseUrl:this.baseUrl,token:this.token,anonymousPacketToken:this.anonymousPacketToken,apiKey:this.apiKey,hmacSecret:this.hmacSecret,encryptRequests:this.encryptRequests,csrfEnabled:this.csrfEnabled,csrfHeaderName:this.csrfHeaderName,csrfCookieName:this.csrfCookieName,refreshCsrfCookie:this.csrfEnabled?this.csrfRefresher:null,onAccessToken:e=>{this.token=e}}}prepareRequest(e){return Promise.resolve()}get http(){const e=this;return{get(t,s=!0,i){return e.prepareRequest(s).then(()=>l(e.reqOpts,"GET",t,void 0,s,i,!0))},post(t,s,i=!0,r){return e.prepareRequest(i).then(()=>l(e.reqOpts,"POST",t,s,i,r,!0))},put(t,s,i=!0,r){return e.prepareRequest(i).then(()=>l(e.reqOpts,"PUT",t,s,i,r,!0))},patch(t,s,i=!0,r){return e.prepareRequest(i).then(()=>l(e.reqOpts,"PATCH",t,s,i,r,!0))},delete(t,s,i=!0,r){return e.prepareRequest(i).then(()=>l(e.reqOpts,"DELETE",t,s,i,r,!0))}}}request(e,t,s,i=!0,r){return this.prepareRequest(i).then(()=>l(this.reqOpts,e,t,s,i,r,!0))}async requestBinary(e,t,s,i=!0){await this.prepareRequest(i);const r={"Content-Type":"application/json"};i&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,...s!=null?{body:JSON.stringify(s)}:{},credentials:"include"});if(!n.ok){const a=await n.text(),o=new Error(`HTTP ${n.status}: ${a}`);throw o.status=n.status,o}return n.arrayBuffer()}async requestForm(e,t,s,i=!0){const r={};i&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,body:s,credentials:"include"}),a=await n.json();if(!a.ok){const o=new Error(a.message??`EntityServer error (HTTP ${n.status})`);throw o.status=n.status,o}return a}async requestFormBinary(e,t,s,i=!0){const r={};i&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,body:s,credentials:"include"});if(!n.ok){const a=await n.text(),o=new Error(`HTTP ${n.status}: ${a}`);throw o.status=n.status,o}return n.arrayBuffer()}}export{y as EntityServerClientBase};
 //# sourceMappingURL=base.js.map

package/dist/client/base.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/client/base.ts"],
-  "sourcesContent": ["import type {\n    EntityServerClientOptions,\n    RealtimeClientOptions,\n    RealtimeConnectionStatus,\n    RealtimeEnvelope,\n    RealtimeMessageListener,\n    RealtimeStatusListener,\n} from \"../types.js\";\nimport { readEnv } from \"./utils.js\";\nimport { derivePacketKey, parseRequestBody } from \"./packet.js\";\nimport { entityRequest, type RequestOptions } from \"./request.js\";\n\nconst REALTIME_DEFAULT_PATH = \"/v1/realtime\";\n\n// mixin \uD5EC\uD37C \uD0C0\uC785\nexport type GConstructor<T = object> = new (...args: any[]) => T;\n\nexport class EntityServerClientBase {\n    baseUrl: string;\n    token: string;\n    anonymousPacketToken: string;\n    apiKey: string;\n    hmacSecret: string;\n    encryptRequests: boolean;\n    csrfEnabled: boolean;\n    csrfHeaderName: string;\n    csrfCookieName: string;\n    /** @internal health \uC7AC\uD638\uCD9C\uB85C CSRF \uCFE0\uD0A4 \uAC31\uC2E0 (AuthMixin\uC5D0\uC11C \uC124\uC815) */\n    csrfRefresher: (() => Promise<void>) | null = null;\n    activeTxId: string | null = null;\n\n    // \uC138\uC158 \uC720\uC9C0 \uAD00\uB828\n    keepSession: boolean;\n    refreshBuffer: number;\n    onTokenRefreshed?: (accessToken: string, expiresIn: number) => void;\n    onSessionExpired?: (error: Error) => void;\n    onHealthChange?: (online: boolean) => void;\n    sessionRefreshToken: string | null = null;\n    refreshTimer: ReturnType<typeof setTimeout> | null = null;\n    healthTickTimer: ReturnType<typeof setInterval> | null = null;\n    healthTickPromise: Promise<unknown> | null = null;\n    realtimeEnabled: boolean;\n    realtimePath: string;\n    realtimeAutoConnect: boolean;\n    realtimeAutoReconnect: boolean;\n    realtimeReconnectDelayMs: number;\n    realtimeStatus: RealtimeConnectionStatus;\n    realtimeSocket: WebSocket | null = null;\n    realtimeConnectPromise: Promise<void> | null = null;\n    realtimeReconnectTimer: ReturnType<typeof setTimeout> | null = null;\n    realtimeShouldReconnect = false;\n    realtimeMessageListeners = new Set<RealtimeMessageListener>();\n    realtimeStatusListeners = new Set<RealtimeStatusListener>();\n    realtimeEventListeners = new Map<string, Set<RealtimeMessageListener>>();\n    // \u2500\u2500\u2500 \uCD08\uAE30\uD654 & \uC124\uC815 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    /**\n     * EntityServerClient \uC778\uC2A4\uD134\uC2A4\uB97C \uC0DD\uC131\uD569\uB2C8\uB2E4.\n     *\n     * \uAE30\uBCF8\uAC12:\n     * - `baseUrl`: `VITE_ENTITY_SERVER_URL` \uB610\uB294 \uC0C1\uB300 \uACBD\uB85C(`\"\"`)\n     */\n    constructor(options: EntityServerClientOptions = {}) {\n        const envBaseUrl = readEnv(\"VITE_ENTITY_SERVER_URL\");\n\n        this.baseUrl = (options.baseUrl ?? envBaseUrl ?? \"\").replace(/\\/$/, \"\");\n        this.token = options.token ?? \"\";\n        this.anonymousPacketToken = options.anonymousPacketToken ?? \"\";\n        this.apiKey = options.apiKey ?? \"\";\n        this.hmacSecret = options.hmacSecret ?? \"\";\n        this.encryptRequests = options.encryptRequests ?? false;\n        this.csrfEnabled = options.csrfEnabled ?? false;\n        this.csrfHeaderName = options.csrfHeaderName ?? \"x-csrf-token\";\n        this.csrfCookieName = options.csrfCookieName ?? \"_csrf\";\n        this.keepSession = options.keepSession ?? false;\n        this.refreshBuffer = options.refreshBuffer ?? 60;\n        this.onTokenRefreshed = options.onTokenRefreshed;\n        this.onSessionExpired = options.onSessionExpired;\n        this.onHealthChange = options.onHealthChange;\n        this.realtimeEnabled = false;\n        this.realtimePath = REALTIME_DEFAULT_PATH;\n        this.realtimeAutoConnect = true;\n        this.realtimeAutoReconnect = true;\n        this.realtimeReconnectDelayMs = 3000;\n        this.realtimeStatus = \"idle\";\n        this.applyRealtimeOptions(options.realtime);\n        if (\n            typeof options.healthTickInterval === \"number\" &&\n            options.healthTickInterval > 0\n        ) {\n            // csrfRefresher\uB294 AuthMixin\uC5D0\uC11C \uC124\uC815\uB418\uBBC0\uB85C \uB2E4\uC74C tick\uC5D0 \uC2DC\uC791\n            Promise.resolve().then(() =>\n                this.startHealthTick(options.healthTickInterval),\n            );\n        }\n    }\n\n    /** baseUrl, token, encryptRequests \uAC12\uC744 \uB7F0\uD0C0\uC784\uC5D0 \uAC31\uC2E0\uD569\uB2C8\uB2E4. */\n    configure(options: Partial<EntityServerClientOptions>): void {\n        if (typeof options.baseUrl === \"string\") {\n            this.baseUrl = options.baseUrl.replace(/\\/$/, \"\");\n        }\n        if (typeof options.token === \"string\") this.token = options.token;\n        if (typeof options.anonymousPacketToken === \"string\") {\n            this.anonymousPacketToken = options.anonymousPacketToken;\n        }\n        if (typeof options.encryptRequests === \"boolean\")\n            this.encryptRequests = options.encryptRequests;\n        if (typeof options.csrfEnabled === \"boolean\") {\n            this.csrfEnabled = options.csrfEnabled;\n        }\n        if (typeof options.csrfHeaderName === \"string\") {\n            this.csrfHeaderName = options.csrfHeaderName;\n        }\n        if (typeof options.csrfCookieName === \"string\") {\n            this.csrfCookieName = options.csrfCookieName;\n        }\n        if (typeof options.apiKey === \"string\") this.apiKey = options.apiKey;\n        if (typeof options.hmacSecret === \"string\")\n            this.hmacSecret = options.hmacSecret;\n        if (typeof options.keepSession === \"boolean\")\n            this.keepSession = options.keepSession;\n        if (typeof options.refreshBuffer === \"number\")\n            this.refreshBuffer = options.refreshBuffer;\n        if (options.onTokenRefreshed)\n            this.onTokenRefreshed = options.onTokenRefreshed;\n        if (options.onSessionExpired)\n            this.onSessionExpired = options.onSessionExpired;\n        if (options.onHealthChange)\n            this.onHealthChange = options.onHealthChange;\n        if (typeof options.realtime !== \"undefined\") {\n            this.applyRealtimeOptions(options.realtime);\n        }\n        if (\n            typeof options.healthTickInterval === \"number\" &&\n            options.healthTickInterval > 0\n        ) {\n            Promise.resolve().then(() =>\n                this.startHealthTick(options.healthTickInterval),\n            );\n        }\n    }\n\n    /** \uC778\uC99D \uC694\uCCAD\uC5D0 \uC0AC\uC6A9\uD560 JWT Access Token\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setToken(token: string): void {\n        this.token = token;\n        if (!token) {\n            this.disconnectRealtime(\"token_cleared\");\n            return;\n        }\n        if (this.realtimeEnabled && this.realtimeAutoConnect) {\n            void this.connectRealtime().catch(() => {});\n        }\n    }\n\n    /** \uC775\uBA85 \uD328\uD0B7 \uC554\uD638\uD654\uC6A9 \uD1A0\uD070\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setAnonymousPacketToken(token: string): void {\n        this.anonymousPacketToken = token;\n    }\n\n    /** HMAC \uC778\uC99D\uC6A9 API Key\uB97C \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setApiKey(apiKey: string): void {\n        this.apiKey = apiKey;\n    }\n\n    /** HMAC \uC778\uC99D\uC6A9 \uC2DC\uD06C\uB9BF\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setHmacSecret(secret: string): void {\n        this.hmacSecret = secret;\n    }\n\n    /** \uC554\uD638\uD654 \uC694\uCCAD \uD65C\uC131\uD654 \uC5EC\uBD80\uB97C \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setEncryptRequests(value: boolean): void {\n        this.encryptRequests = value;\n    }\n\n    setCsrfEnabled(enabled: boolean): void {\n        this.csrfEnabled = enabled;\n    }\n\n    addRealtimeListener(listener: RealtimeMessageListener): void {\n        this.realtimeMessageListeners.add(listener);\n    }\n\n    removeRealtimeListener(listener: RealtimeMessageListener): void {\n        this.realtimeMessageListeners.delete(listener);\n    }\n\n    addRealtimeStatusListener(listener: RealtimeStatusListener): void {\n        this.realtimeStatusListeners.add(listener);\n    }\n\n    removeRealtimeStatusListener(listener: RealtimeStatusListener): void {\n        this.realtimeStatusListeners.delete(listener);\n    }\n\n    addRealtimeEventListener(\n        eventName: string,\n        listener: RealtimeMessageListener,\n    ): void {\n        const key = String(eventName).trim();\n        if (!key) {\n            return;\n        }\n        if (!this.realtimeEventListeners.has(key)) {\n            this.realtimeEventListeners.set(key, new Set());\n        }\n        this.realtimeEventListeners.get(key)!.add(listener);\n    }\n\n    removeRealtimeEventListener(\n        eventName: string,\n        listener: RealtimeMessageListener,\n    ): void {\n        const key = String(eventName).trim();\n        if (!key) {\n            return;\n        }\n        const listeners = this.realtimeEventListeners.get(key);\n        if (!listeners) {\n            return;\n        }\n        listeners.delete(listener);\n        if (listeners.size === 0) {\n            this.realtimeEventListeners.delete(key);\n        }\n    }\n\n    async connectRealtime(): Promise<void> {\n        if (!this.realtimeEnabled) {\n            this.setRealtimeStatus(\"disabled\", \"realtime_disabled\");\n            return;\n        }\n\n        if (!this.token) {\n            throw new Error(\"Cannot open realtime connection without access token.\");\n        }\n\n        if (typeof WebSocket === \"undefined\") {\n            throw new Error(\"WebSocket is not available in this environment.\");\n        }\n\n        if (\n            this.realtimeSocket &&\n            this.realtimeSocket.readyState === WebSocket.OPEN\n        ) {\n            return;\n        }\n\n        if (\n            this.realtimeSocket &&\n            this.realtimeSocket.readyState === WebSocket.CONNECTING &&\n            this.realtimeConnectPromise\n        ) {\n            return this.realtimeConnectPromise;\n        }\n\n        this.clearRealtimeReconnectTimer();\n        this.realtimeShouldReconnect = this.realtimeAutoReconnect;\n        this.setRealtimeStatus(\"connecting\", \"connect_requested\");\n\n        const socket = new WebSocket(this.buildRealtimeUrl());\n        this.realtimeSocket = socket;\n\n        this.realtimeConnectPromise = new Promise<void>((resolve, reject) => {\n            let settled = false;\n\n            const finalizeResolve = () => {\n                if (settled) {\n                    return;\n                }\n                settled = true;\n                this.realtimeConnectPromise = null;\n                resolve();\n            };\n\n            const finalizeReject = (error: Error) => {\n                if (settled) {\n                    return;\n                }\n                settled = true;\n                this.realtimeConnectPromise = null;\n                reject(error);\n            };\n\n            socket.addEventListener(\"open\", () => {\n                this.setRealtimeStatus(\"open\", \"socket_open\");\n                finalizeResolve();\n            });\n\n            socket.addEventListener(\"message\", (event) => {\n                this.handleRealtimeMessage(event.data);\n            });\n\n            socket.addEventListener(\"error\", () => {\n                this.setRealtimeStatus(\n                    \"closed\",\n                    \"socket_error\",\n                    new Error(\"Realtime socket error.\"),\n                );\n            });\n\n            socket.addEventListener(\"close\", (event) => {\n                if (this.realtimeSocket === socket) {\n                    this.realtimeSocket = null;\n                }\n\n                const reason = event.reason || \"socket_closed\";\n                const error = new Error(\n                    `Realtime socket closed (${event.code}${event.reason ? `: ${event.reason}` : \"\"}).`,\n                );\n\n                this.setRealtimeStatus(\"closed\", reason, error);\n                if (!settled) {\n                    finalizeReject(error);\n                }\n\n                if (\n                    this.realtimeShouldReconnect &&\n                    this.realtimeEnabled &&\n                    this.realtimeAutoReconnect &&\n                    this.token\n                ) {\n                    this.scheduleRealtimeReconnect(reason);\n                }\n            });\n        });\n\n        return this.realtimeConnectPromise;\n    }\n\n    disconnectRealtime(reason = \"client_disconnect\"): void {\n        this.realtimeShouldReconnect = false;\n        this.clearRealtimeReconnectTimer();\n\n        if (this.realtimeSocket) {\n            const socket = this.realtimeSocket;\n            this.realtimeSocket = null;\n            try {\n                if (\n                    socket.readyState === WebSocket.OPEN ||\n                    socket.readyState === WebSocket.CONNECTING\n                ) {\n                    socket.close(1000, reason);\n                }\n            } catch {\n                // ignore close errors\n            }\n        }\n\n        this.realtimeConnectPromise = null;\n        this.setRealtimeStatus(\n            this.realtimeEnabled ? \"idle\" : \"disabled\",\n            reason,\n        );\n    }\n\n    sendRealtime(message: RealtimeEnvelope | Record<string, unknown>): boolean {\n        if (\n            !this.realtimeSocket ||\n            this.realtimeSocket.readyState !== WebSocket.OPEN\n        ) {\n            return false;\n        }\n\n        this.realtimeSocket.send(JSON.stringify(message));\n        return true;\n    }\n\n    subscribeRealtime(subscriptions: string[]): boolean {\n        return this.sendRealtime({\n            type: \"subscribe\",\n            channel: \"session\",\n            event: \"session.subscribe\",\n            data: { subscriptions },\n        });\n    }\n\n    unsubscribeRealtime(subscriptions: string[]): boolean {\n        return this.sendRealtime({\n            type: \"unsubscribe\",\n            channel: \"session\",\n            event: \"session.unsubscribe\",\n            data: { subscriptions },\n        });\n    }\n\n    /**\n     * \uC8FC\uAE30\uC801\uC73C\uB85C health \uCCB4\uD06C\uB97C \uC2E4\uD589\uD569\uB2C8\uB2E4.\n     * CSRF \uCFE0\uD0A4 \uAC31\uC2E0\uACFC \uC11C\uBC84 \uC0C1\uD0DC \uD655\uC778\uC744 \uC790\uB3D9\uD654\uD569\uB2C8\uB2E4.\n     * keepSession=true \uC774\uBA74 \uAC01 tick\uC5D0\uC11C \uC138\uC158 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uB3C4 \uD568\uAED8 \uC2DC\uB3C4\uD569\uB2C8\uB2E4.\n     *\n     * @param intervalMs \uD638\uCD9C \uC8FC\uAE30(ms). \uAE30\uBCF8\uAC12: 5\uBD84\n     */\n    startHealthTick(intervalMs: number = 5 * 60 * 1000): void {\n        this.stopHealthTick();\n        const tick = (): void => {\n            if (this.healthTickPromise) return;\n            this.healthTickPromise = (\n                this.csrfRefresher ? this.csrfRefresher() : Promise.resolve()\n            )\n                .then(() => {\n                    this.onHealthChange?.(true);\n                })\n                .catch(() => {\n                    this.onHealthChange?.(false);\n                })\n                .finally(() => {\n                    this.healthTickPromise = null;\n                });\n        };\n        tick(); // \uC989\uC2DC 1\uD68C \uC2E4\uD589\n        this.healthTickTimer = setInterval(tick, intervalMs);\n    }\n\n    /** health tick \uD0C0\uC774\uBA38\uB97C \uC911\uC9C0\uD569\uB2C8\uB2E4. */\n    stopHealthTick(): void {\n        if (this.healthTickTimer !== null) {\n            clearInterval(this.healthTickTimer);\n            this.healthTickTimer = null;\n        }\n        this.healthTickPromise = null;\n    }\n\n    // \u2500\u2500\u2500 \uC138\uC158 \uC720\uC9C0 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    /** @deprecated \uC138\uC158 \uC5F0\uC7A5\uC740 health tick \uAE30\uBC18 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uC73C\uB85C \uB300\uCCB4\uB418\uC5C8\uC2B5\uB2C8\uB2E4. */\n    scheduleKeepSession(\n        refreshToken: string,\n        expiresIn: number,\n        refreshFn: (\n            rt: string,\n        ) => Promise<{ access_token: string; expires_in: number }>,\n    ): void {\n        this.clearRefreshTimer();\n        this.sessionRefreshToken = refreshToken;\n        const delayMs = Math.max((expiresIn - this.refreshBuffer) * 1000, 0);\n        this.refreshTimer = setTimeout(async () => {\n            if (!this.sessionRefreshToken) return;\n            try {\n                const result = await refreshFn(this.sessionRefreshToken);\n                this.onTokenRefreshed?.(result.access_token, result.expires_in);\n                this.scheduleKeepSession(\n                    this.sessionRefreshToken,\n                    result.expires_in,\n                    refreshFn,\n                );\n            } catch (err) {\n                this.clearRefreshTimer();\n                this.onSessionExpired?.(\n                    err instanceof Error ? err : new Error(String(err)),\n                );\n            }\n        }, delayMs);\n    }\n\n    /** @deprecated \uC138\uC158 \uC5F0\uC7A5\uC740 health tick \uAE30\uBC18 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uC73C\uB85C \uB300\uCCB4\uB418\uC5C8\uC2B5\uB2C8\uB2E4. */\n    clearRefreshTimer(): void {\n        if (this.refreshTimer !== null) {\n            clearTimeout(this.refreshTimer);\n            this.refreshTimer = null;\n        }\n    }\n\n    /**\n     * \uC138\uC158 \uC790\uB3D9 \uC5F0\uC7A5\uC744 \uC911\uC9C0\uD569\uB2C8\uB2E4.\n     * `logout()` \uD638\uCD9C \uC2DC \uC790\uB3D9\uC73C\uB85C \uC911\uC9C0\uB418\uBA70, \uC9C1\uC811 \uD638\uCD9C\uC774 \uD544\uC694\uD55C \uACBD\uC6B0\uB294 \uB4DC\uBB45\uB2C8\uB2E4.\n     */\n    stopKeepSession(): void {\n        this.clearRefreshTimer();\n        this.sessionRefreshToken = null;\n    }\n\n    applyRealtimeOptions(options?: boolean | RealtimeClientOptions): void {\n        const normalized: RealtimeClientOptions =\n            typeof options === \"boolean\"\n                ? { enabled: options }\n                : (options ?? {});\n\n        this.realtimeEnabled = normalized.enabled ?? false;\n        this.realtimePath =\n            String(normalized.path ?? REALTIME_DEFAULT_PATH).trim() ||\n            REALTIME_DEFAULT_PATH;\n        this.realtimeAutoConnect = normalized.autoConnect ?? true;\n        this.realtimeAutoReconnect = normalized.autoReconnect ?? true;\n        this.realtimeReconnectDelayMs = Math.max(\n            250,\n            normalized.reconnectDelayMs ?? 3000,\n        );\n\n        if (!this.realtimeEnabled) {\n            this.disconnectRealtime(\"realtime_disabled\");\n            return;\n        }\n\n        this.setRealtimeStatus(\"idle\", \"realtime_enabled\");\n        if (this.token && this.realtimeAutoConnect) {\n            void this.connectRealtime().catch(() => {});\n        }\n    }\n\n    buildRealtimeUrl(): string {\n        const rawBaseUrl = this.baseUrl || readEnv(\"VITE_ENTITY_SERVER_URL\") || \"\";\n        const baseUrl = rawBaseUrl ||\n            (typeof window !== \"undefined\" ? window.location.origin : \"\");\n\n        if (!baseUrl) {\n            throw new Error(\"Realtime connection requires baseUrl.\");\n        }\n\n        const url = new URL(this.realtimePath, baseUrl);\n        url.protocol = url.protocol === \"https:\" ? \"wss:\" : \"ws:\";\n        url.searchParams.set(\"access_token\", this.token);\n        return url.toString();\n    }\n\n    handleRealtimeMessage(payload: unknown): void {\n        if (typeof payload !== \"string\") {\n            return;\n        }\n\n        let envelope: RealtimeEnvelope;\n        try {\n            envelope = JSON.parse(payload) as RealtimeEnvelope;\n        } catch {\n            return;\n        }\n\n        for (const listener of this.realtimeMessageListeners) {\n            listener(envelope);\n        }\n\n        const listeners = this.realtimeEventListeners.get(envelope.event);\n        if (listeners) {\n            for (const listener of listeners) {\n                listener(envelope);\n            }\n        }\n    }\n\n    scheduleRealtimeReconnect(reason: string): void {\n        this.clearRealtimeReconnectTimer();\n        this.realtimeReconnectTimer = setTimeout(() => {\n            this.realtimeReconnectTimer = null;\n            if (!this.realtimeEnabled || !this.token) {\n                return;\n            }\n            this.setRealtimeStatus(\"connecting\", `${reason}:reconnect`);\n            void this.connectRealtime().catch(() => {});\n        }, this.realtimeReconnectDelayMs);\n    }\n\n    clearRealtimeReconnectTimer(): void {\n        if (this.realtimeReconnectTimer !== null) {\n            clearTimeout(this.realtimeReconnectTimer);\n            this.realtimeReconnectTimer = null;\n        }\n    }\n\n    setRealtimeStatus(\n        status: RealtimeConnectionStatus,\n        reason?: string,\n        error?: Error,\n    ): void {\n        const previousStatus = this.realtimeStatus;\n        if (\n            previousStatus === status &&\n            typeof reason === \"undefined\" &&\n            typeof error === \"undefined\"\n        ) {\n            return;\n        }\n\n        this.realtimeStatus = status;\n        for (const listener of this.realtimeStatusListeners) {\n            listener({\n                status,\n                previousStatus,\n                ...(reason ? { reason } : {}),\n                ...(error ? { error } : {}),\n            });\n        }\n    }\n\n    applyCsrfHealth(): void {\n        if (typeof document === \"undefined\") return;\n        for (const chunk of document.cookie.split(\";\")) {\n            const idx = chunk.indexOf(\"=\");\n            if (idx < 0) continue;\n            if (chunk.substring(0, idx).trim() === this.csrfCookieName) {\n                this.csrfEnabled = !!chunk.substring(idx + 1).trim();\n                return;\n            }\n        }\n        this.csrfEnabled = false;\n    }\n\n    // \u2500\u2500\u2500 \uC694\uCCAD \uBCF8\uBB38 \uD30C\uC2F1 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    /**\n     * \uC694\uCCAD \uBC14\uB514\uB97C \uD30C\uC2F1\uD569\uB2C8\uB2E4.\n     * `application/octet-stream`\uC774\uBA74 XChaCha20-Poly1305 \uBCF5\uD638\uD654, \uADF8 \uC678\uB294 JSON \uD30C\uC2F1\uD569\uB2C8\uB2E4.\n     *\n     * @param requireEncrypted `true`\uC774\uBA74 \uC554\uD638\uD654\uB41C \uC694\uCCAD\uB9CC \uD5C8\uC6A9\uD569\uB2C8\uB2E4.\n     */\n    readRequestBody<T = Record<string, unknown>>(\n        body: ArrayBuffer | Uint8Array | string | T | null | undefined,\n        contentType = \"application/json\",\n        requireEncrypted = false,\n    ): T {\n        const key = derivePacketKey(\n            this.hmacSecret,\n            this.token || this.anonymousPacketToken,\n        );\n        return parseRequestBody<T>(body, contentType, requireEncrypted, key);\n    }\n\n    // \u2500\u2500\u2500 \uB0B4\uBD80 \uD5EC\uD37C \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    get reqOpts(): RequestOptions {\n        return {\n            baseUrl: this.baseUrl,\n            token: this.token,\n            anonymousPacketToken: this.anonymousPacketToken,\n            apiKey: this.apiKey,\n            hmacSecret: this.hmacSecret,\n            encryptRequests: this.encryptRequests,\n            csrfEnabled: this.csrfEnabled,\n            csrfHeaderName: this.csrfHeaderName,\n            csrfCookieName: this.csrfCookieName,\n            refreshCsrfCookie: this.csrfEnabled ? this.csrfRefresher : null,\n            onAccessToken: (token) => {\n                this.token = token;\n            },\n        };\n    }\n\n    /**\n     * \uCEE4\uC2A4\uD140 \uB77C\uC6B0\uD2B8 \uC9C1\uC811 \uD638\uCD9C\uC6A9 HTTP \uB124\uC784\uC2A4\uD398\uC774\uC2A4.\n     * \uC778\uC99D\u00B7\uC554\uD638\uD654\u00B7HMAC \uB4F1 SDK \uC635\uC158\uC774 \uADF8\uB300\uB85C \uC801\uC6A9\uB429\uB2C8\uB2E4.\n     *\n     * @example\n     * const res = await client.http.get<{ version: string }>(\"/api/v1/status\", false);\n     * const res = await client.http.post<MyResponse>(\"/api/v1/custom\", { key: \"value\" });\n     */\n    get http() {\n        // eslint-disable-next-line @typescript-eslint/no-this-alias\n        const self = this;\n        return {\n            get<T>(\n                path: string,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n            ): Promise<T> {\n                return entityRequest<T>(\n                    self.reqOpts,\n                    \"GET\",\n                    path,\n                    undefined,\n                    withAuth,\n                    extraHeaders,\n                    false,\n                );\n            },\n            post<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n            ): Promise<T> {\n                return entityRequest<T>(\n                    self.reqOpts,\n                    \"POST\",\n                    path,\n                    body,\n                    withAuth,\n                    extraHeaders,\n                    false,\n                );\n            },\n            put<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n            ): Promise<T> {\n                return entityRequest<T>(\n                    self.reqOpts,\n                    \"PUT\",\n                    path,\n                    body,\n                    withAuth,\n                    extraHeaders,\n                    false,\n                );\n            },\n            patch<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n            ): Promise<T> {\n                return entityRequest<T>(\n                    self.reqOpts,\n                    \"PATCH\",\n                    path,\n                    body,\n                    withAuth,\n                    extraHeaders,\n                    false,\n                );\n            },\n            delete<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n            ): Promise<T> {\n                return entityRequest<T>(\n                    self.reqOpts,\n                    \"DELETE\",\n                    path,\n                    body,\n                    withAuth,\n                    extraHeaders,\n                    false,\n                );\n            },\n        };\n    }\n\n    request<T>(\n        method: string,\n        path: string,\n        body?: unknown,\n        withAuth = true,\n        extraHeaders?: Record<string, string>,\n    ): Promise<T> {\n        return entityRequest<T>(\n            this.reqOpts,\n            method,\n            path,\n            body,\n            withAuth,\n            extraHeaders,\n            true,\n        );\n    }\n\n    /** PNG/\uBC14\uC774\uB108\uB9AC \uC751\uB2F5\uC744 ArrayBuffer\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. (QR, \uBC14\uCF54\uB4DC \uB4F1) */\n    async requestBinary(\n        method: string,\n        path: string,\n        body?: unknown,\n        withAuth = true,\n    ): Promise<ArrayBuffer> {\n        const headers: Record<string, string> = {\n            \"Content-Type\": \"application/json\",\n        };\n        if (withAuth && this.token)\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\n\n        const res = await fetch(this.baseUrl + path, {\n            method,\n            headers,\n            ...(body != null ? { body: JSON.stringify(body) } : {}),\n            credentials: \"include\",\n        });\n\n        if (!res.ok) {\n            const text = await res.text();\n            const err = new Error(`HTTP ${res.status}: ${text}`);\n            (err as { status?: number }).status = res.status;\n            throw err;\n        }\n\n        return res.arrayBuffer();\n    }\n\n    /** multipart/form-data \uC694\uCCAD\uC744 \uBCF4\uB0C5\uB2C8\uB2E4. (\uD30C\uC77C \uC5C5\uB85C\uB4DC \uB4F1) */\n    async requestForm<T>(\n        method: string,\n        path: string,\n        form: FormData,\n        withAuth = true,\n    ): Promise<T> {\n        const headers: Record<string, string> = {};\n        if (withAuth && this.token)\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\n\n        const res = await fetch(this.baseUrl + path, {\n            method,\n            headers,\n            body: form,\n            credentials: \"include\",\n        });\n\n        const data = (await res.json()) as { ok?: boolean; message?: string };\n        if (!data.ok) {\n            const err = new Error(\n                data.message ?? `EntityServer error (HTTP ${res.status})`,\n            );\n            (err as { status?: number }).status = res.status;\n            throw err;\n        }\n        return data as T;\n    }\n\n    /** multipart/form-data \uC694\uCCAD\uC744 \uBCF4\uB0B4\uACE0 \uBC14\uC774\uB108\uB9AC(ArrayBuffer)\uB97C \uBC18\uD658\uD569\uB2C8\uB2E4. */\n    async requestFormBinary(\n        method: string,\n        path: string,\n        form: FormData,\n        withAuth = true,\n    ): Promise<ArrayBuffer> {\n        const headers: Record<string, string> = {};\n        if (withAuth && this.token)\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\n\n        const res = await fetch(this.baseUrl + path, {\n            method,\n            headers,\n            body: form,\n            credentials: \"include\",\n        });\n\n        if (!res.ok) {\n            const text = await res.text();\n            const err = new Error(`HTTP ${res.status}: ${text}`);\n            (err as { status?: number }).status = res.status;\n            throw err;\n        }\n\n        return res.arrayBuffer();\n    }\n}\n"],
-  "mappings": "AAQA,OAAS,WAAAA,MAAe,aACxB,OAAS,mBAAAC,EAAiB,oBAAAC,MAAwB,cAClD,OAAS,iBAAAC,MAA0C,eAEnD,MAAMC,EAAwB,eAKvB,MAAMC,CAAuB,CAChC,QACA,MACA,qBACA,OACA,WACA,gBACA,YACA,eACA,eAEA,cAA8C,KAC9C,WAA4B,KAG5B,YACA,cACA,iBACA,iBACA,eACA,oBAAqC,KACrC,aAAqD,KACrD,gBAAyD,KACzD,kBAA6C,KAC7C,gBACA,aACA,oBACA,sBACA,yBACA,eACA,eAAmC,KACnC,uBAA+C,KAC/C,uBAA+D,KAC/D,wBAA0B,GAC1B,yBAA2B,IAAI,IAC/B,wBAA0B,IAAI,IAC9B,uBAAyB,IAAI,IAS7B,YAAYC,EAAqC,CAAC,EAAG,CACjD,MAAMC,EAAaP,EAAQ,wBAAwB,EAEnD,KAAK,SAAWM,EAAQ,SAAWC,GAAc,IAAI,QAAQ,MAAO,EAAE,EACtE,KAAK,MAAQD,EAAQ,OAAS,GAC9B,KAAK,qBAAuBA,EAAQ,sBAAwB,GAC5D,KAAK,OAASA,EAAQ,QAAU,GAChC,KAAK,WAAaA,EAAQ,YAAc,GACxC,KAAK,gBAAkBA,EAAQ,iBAAmB,GAClD,KAAK,YAAcA,EAAQ,aAAe,GAC1C,KAAK,eAAiBA,EAAQ,gBAAkB,eAChD,KAAK,eAAiBA,EAAQ,gBAAkB,QAChD,KAAK,YAAcA,EAAQ,aAAe,GAC1C,KAAK,cAAgBA,EAAQ,eAAiB,GAC9C,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,eAAiBA,EAAQ,eAC9B,KAAK,gBAAkB,GACvB,KAAK,aAAeF,EACpB,KAAK,oBAAsB,GAC3B,KAAK,sBAAwB,GAC7B,KAAK,yBAA2B,IAChC,KAAK,eAAiB,OACtB,KAAK,qBAAqBE,EAAQ,QAAQ,EAEtC,OAAOA,EAAQ,oBAAuB,UACtCA,EAAQ,mBAAqB,GAG7B,QAAQ,QAAQ,EAAE,KAAK,IACnB,KAAK,gBAAgBA,EAAQ,kBAAkB,CACnD,CAER,CAGA,UAAUA,EAAmD,CACrD,OAAOA,EAAQ,SAAY,WAC3B,KAAK,QAAUA,EAAQ,QAAQ,QAAQ,MAAO,EAAE,GAEhD,OAAOA,EAAQ,OAAU,WAAU,KAAK,MAAQA,EAAQ,OACxD,OAAOA,EAAQ,sBAAyB,WACxC,KAAK,qBAAuBA,EAAQ,sBAEpC,OAAOA,EAAQ,iBAAoB,YACnC,KAAK,gBAAkBA,EAAQ,iBAC/B,OAAOA,EAAQ,aAAgB,YAC/B,KAAK,YAAcA,EAAQ,aAE3B,OAAOA,EAAQ,gBAAmB,WAClC,KAAK,eAAiBA,EAAQ,gBAE9B,OAAOA,EAAQ,gBAAmB,WAClC,KAAK,eAAiBA,EAAQ,gBAE9B,OAAOA,EAAQ,QAAW,WAAU,KAAK,OAASA,EAAQ,QAC1D,OAAOA,EAAQ,YAAe,WAC9B,KAAK,WAAaA,EAAQ,YAC1B,OAAOA,EAAQ,aAAgB,YAC/B,KAAK,YAAcA,EAAQ,aAC3B,OAAOA,EAAQ,eAAkB,WACjC,KAAK,cAAgBA,EAAQ,eAC7BA,EAAQ,mBACR,KAAK,iBAAmBA,EAAQ,kBAChCA,EAAQ,mBACR,KAAK,iBAAmBA,EAAQ,kBAChCA,EAAQ,iBACR,KAAK,eAAiBA,EAAQ,gBAC9B,OAAOA,EAAQ,SAAa,KAC5B,KAAK,qBAAqBA,EAAQ,QAAQ,EAG1C,OAAOA,EAAQ,oBAAuB,UACtCA,EAAQ,mBAAqB,GAE7B,QAAQ,QAAQ,EAAE,KAAK,IACnB,KAAK,gBAAgBA,EAAQ,kBAAkB,CACnD,CAER,CAGA,SAASE,EAAqB,CAE1B,GADA,KAAK,MAAQA,EACT,CAACA,EAAO,CACR,KAAK,mBAAmB,eAAe,EACvC,MACJ,CACI,KAAK,iBAAmB,KAAK,qBACxB,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,CAElD,CAGA,wBAAwBA,EAAqB,CACzC,KAAK,qBAAuBA,CAChC,CAGA,UAAUC,EAAsB,CAC5B,KAAK,OAASA,CAClB,CAGA,cAAcC,EAAsB,CAChC,KAAK,WAAaA,CACtB,CAGA,mBAAmBC,EAAsB,CACrC,KAAK,gBAAkBA,CAC3B,CAEA,eAAeC,EAAwB,CACnC,KAAK,YAAcA,CACvB,CAEA,oBAAoBC,EAAyC,CACzD,KAAK,yBAAyB,IAAIA,CAAQ,CAC9C,CAEA,uBAAuBA,EAAyC,CAC5D,KAAK,yBAAyB,OAAOA,CAAQ,CACjD,CAEA,0BAA0BA,EAAwC,CAC9D,KAAK,wBAAwB,IAAIA,CAAQ,CAC7C,CAEA,6BAA6BA,EAAwC,CACjE,KAAK,wBAAwB,OAAOA,CAAQ,CAChD,CAEA,yBACIC,EACAD,EACI,CACJ,MAAME,EAAM,OAAOD,CAAS,EAAE,KAAK,EAC9BC,IAGA,KAAK,uBAAuB,IAAIA,CAAG,GACpC,KAAK,uBAAuB,IAAIA,EAAK,IAAI,GAAK,EAElD,KAAK,uBAAuB,IAAIA,CAAG,EAAG,IAAIF,CAAQ,EACtD,CAEA,4BACIC,EACAD,EACI,CACJ,MAAME,EAAM,OAAOD,CAAS,EAAE,KAAK,EACnC,GAAI,CAACC,EACD,OAEJ,MAAMC,EAAY,KAAK,uBAAuB,IAAID,CAAG,EAChDC,IAGLA,EAAU,OAAOH,CAAQ,EACrBG,EAAU,OAAS,GACnB,KAAK,uBAAuB,OAAOD,CAAG,EAE9C,CAEA,MAAM,iBAAiC,CACnC,GAAI,CAAC,KAAK,gBAAiB,CACvB,KAAK,kBAAkB,WAAY,mBAAmB,EACtD,MACJ,CAEA,GAAI,CAAC,KAAK,MACN,MAAM,IAAI,MAAM,uDAAuD,EAG3E,GAAI,OAAO,UAAc,IACrB,MAAM,IAAI,MAAM,iDAAiD,EAGrE,GACI,KAAK,gBACL,KAAK,eAAe,aAAe,UAAU,KAE7C,OAGJ,GACI,KAAK,gBACL,KAAK,eAAe,aAAe,UAAU,YAC7C,KAAK,uBAEL,OAAO,KAAK,uBAGhB,KAAK,4BAA4B,EACjC,KAAK,wBAA0B,KAAK,sBACpC,KAAK,kBAAkB,aAAc,mBAAmB,EAExD,MAAME,EAAS,IAAI,UAAU,KAAK,iBAAiB,CAAC,EACpD,YAAK,eAAiBA,EAEtB,KAAK,uBAAyB,IAAI,QAAc,CAACC,EAASC,IAAW,CACjE,IAAIC,EAAU,GAEd,MAAMC,EAAkB,IAAM,CACtBD,IAGJA,EAAU,GACV,KAAK,uBAAyB,KAC9BF,EAAQ,EACZ,EAEMI,EAAkBC,GAAiB,CACjCH,IAGJA,EAAU,GACV,KAAK,uBAAyB,KAC9BD,EAAOI,CAAK,EAChB,EAEAN,EAAO,iBAAiB,OAAQ,IAAM,CAClC,KAAK,kBAAkB,OAAQ,aAAa,EAC5CI,EAAgB,CACpB,CAAC,EAEDJ,EAAO,iBAAiB,UAAYO,GAAU,CAC1C,KAAK,sBAAsBA,EAAM,IAAI,CACzC,CAAC,EAEDP,EAAO,iBAAiB,QAAS,IAAM,CACnC,KAAK,kBACD,SACA,eACA,IAAI,MAAM,wBAAwB,CACtC,CACJ,CAAC,EAEDA,EAAO,iBAAiB,QAAUO,GAAU,CACpC,KAAK,iBAAmBP,IACxB,KAAK,eAAiB,MAG1B,MAAMQ,EAASD,EAAM,QAAU,gBACzBD,EAAQ,IAAI,MACd,2BAA2BC,EAAM,IAAI,GAAGA,EAAM,OAAS,KAAKA,EAAM,MAAM,GAAK,EAAE,IACnF,EAEA,KAAK,kBAAkB,SAAUC,EAAQF,CAAK,EACzCH,GACDE,EAAeC,CAAK,EAIpB,KAAK,yBACL,KAAK,iBACL,KAAK,uBACL,KAAK,OAEL,KAAK,0BAA0BE,CAAM,CAE7C,CAAC,CACL,CAAC,EAEM,KAAK,sBAChB,CAEA,mBAAmBA,EAAS,oBAA2B,CAInD,GAHA,KAAK,wBAA0B,GAC/B,KAAK,4BAA4B,EAE7B,KAAK,eAAgB,CACrB,MAAMR,EAAS,KAAK,eACpB,KAAK,eAAiB,KACtB,GAAI,EAEIA,EAAO,aAAe,UAAU,MAChCA,EAAO,aAAe,UAAU,aAEhCA,EAAO,MAAM,IAAMQ,CAAM,CAEjC,MAAQ,CAER,CACJ,CAEA,KAAK,uBAAyB,KAC9B,KAAK,kBACD,KAAK,gBAAkB,OAAS,WAChCA,CACJ,CACJ,CAEA,aAAaC,EAA8D,CACvE,MACI,CAAC,KAAK,gBACN,KAAK,eAAe,aAAe,UAAU,KAEtC,IAGX,KAAK,eAAe,KAAK,KAAK,UAAUA,CAAO,CAAC,EACzC,GACX,CAEA,kBAAkBC,EAAkC,CAChD,OAAO,KAAK,aAAa,CACrB,KAAM,YACN,QAAS,UACT,MAAO,oBACP,KAAM,CAAE,cAAAA,CAAc,CAC1B,CAAC,CACL,CAEA,oBAAoBA,EAAkC,CAClD,OAAO,KAAK,aAAa,CACrB,KAAM,cACN,QAAS,UACT,MAAO,sBACP,KAAM,CAAE,cAAAA,CAAc,CAC1B,CAAC,CACL,CASA,gBAAgBC,EAAqB,IAAS,IAAY,CACtD,KAAK,eAAe,EACpB,MAAMC,EAAO,IAAY,CACjB,KAAK,oBACT,KAAK,mBACD,KAAK,cAAgB,KAAK,cAAc,EAAI,QAAQ,QAAQ,GAE3D,KAAK,IAAM,CACR,KAAK,iBAAiB,EAAI,CAC9B,CAAC,EACA,MAAM,IAAM,CACT,KAAK,iBAAiB,EAAK,CAC/B,CAAC,EACA,QAAQ,IAAM,CACX,KAAK,kBAAoB,IAC7B,CAAC,EACT,EACAA,EAAK,EACL,KAAK,gBAAkB,YAAYA,EAAMD,CAAU,CACvD,CAGA,gBAAuB,CACf,KAAK,kBAAoB,OACzB,cAAc,KAAK,eAAe,EAClC,KAAK,gBAAkB,MAE3B,KAAK,kBAAoB,IAC7B,CAKA,oBACIE,EACAC,EACAC,EAGI,CACJ,KAAK,kBAAkB,EACvB,KAAK,oBAAsBF,EAC3B,MAAMG,EAAU,KAAK,KAAKF,EAAY,KAAK,eAAiB,IAAM,CAAC,EACnE,KAAK,aAAe,WAAW,SAAY,CACvC,GAAK,KAAK,oBACV,GAAI,CACA,MAAMG,EAAS,MAAMF,EAAU,KAAK,mBAAmB,EACvD,KAAK,mBAAmBE,EAAO,aAAcA,EAAO,UAAU,EAC9D,KAAK,oBACD,KAAK,oBACLA,EAAO,WACPF,CACJ,CACJ,OAASG,EAAK,CACV,KAAK,kBAAkB,EACvB,KAAK,mBACDA,aAAe,MAAQA,EAAM,IAAI,MAAM,OAAOA,CAAG,CAAC,CACtD,CACJ,CACJ,EAAGF,CAAO,CACd,CAGA,mBAA0B,CAClB,KAAK,eAAiB,OACtB,aAAa,KAAK,YAAY,EAC9B,KAAK,aAAe,KAE5B,CAMA,iBAAwB,CACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAsB,IAC/B,CAEA,qBAAqB3B,EAAiD,CAClE,MAAM8B,EACF,OAAO9B,GAAY,UACb,CAAE,QAASA,CAAQ,EAClBA,GAAW,CAAC,EAavB,GAXA,KAAK,gBAAkB8B,EAAW,SAAW,GAC7C,KAAK,aACD,OAAOA,EAAW,MAAQhC,CAAqB,EAAE,KAAK,GACtDA,EACJ,KAAK,oBAAsBgC,EAAW,aAAe,GACrD,KAAK,sBAAwBA,EAAW,eAAiB,GACzD,KAAK,yBAA2B,KAAK,IACjC,IACAA,EAAW,kBAAoB,GACnC,EAEI,CAAC,KAAK,gBAAiB,CACvB,KAAK,mBAAmB,mBAAmB,EAC3C,MACJ,CAEA,KAAK,kBAAkB,OAAQ,kBAAkB,EAC7C,KAAK,OAAS,KAAK,qBACd,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,CAElD,CAEA,kBAA2B,CAEvB,MAAMC,EADa,KAAK,SAAWrC,EAAQ,wBAAwB,GAAK,KAEnE,OAAO,OAAW,IAAc,OAAO,SAAS,OAAS,IAE9D,GAAI,CAACqC,EACD,MAAM,IAAI,MAAM,uCAAuC,EAG3D,MAAMC,EAAM,IAAI,IAAI,KAAK,aAAcD,CAAO,EAC9C,OAAAC,EAAI,SAAWA,EAAI,WAAa,SAAW,OAAS,MACpDA,EAAI,aAAa,IAAI,eAAgB,KAAK,KAAK,EACxCA,EAAI,SAAS,CACxB,CAEA,sBAAsBC,EAAwB,CAC1C,GAAI,OAAOA,GAAY,SACnB,OAGJ,IAAIC,EACJ,GAAI,CACAA,EAAW,KAAK,MAAMD,CAAO,CACjC,MAAQ,CACJ,MACJ,CAEA,UAAW1B,KAAY,KAAK,yBACxBA,EAAS2B,CAAQ,EAGrB,MAAMxB,EAAY,KAAK,uBAAuB,IAAIwB,EAAS,KAAK,EAChE,GAAIxB,EACA,UAAWH,KAAYG,EACnBH,EAAS2B,CAAQ,CAG7B,CAEA,0BAA0Bf,EAAsB,CAC5C,KAAK,4BAA4B,EACjC,KAAK,uBAAyB,WAAW,IAAM,CAC3C,KAAK,uBAAyB,KAC1B,GAAC,KAAK,iBAAmB,CAAC,KAAK,SAGnC,KAAK,kBAAkB,aAAc,GAAGA,CAAM,YAAY,EACrD,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,EAC9C,EAAG,KAAK,wBAAwB,CACpC,CAEA,6BAAoC,CAC5B,KAAK,yBAA2B,OAChC,aAAa,KAAK,sBAAsB,EACxC,KAAK,uBAAyB,KAEtC,CAEA,kBACIgB,EACAhB,EACAF,EACI,CACJ,MAAMmB,EAAiB,KAAK,eAC5B,GACI,EAAAA,IAAmBD,GACnB,OAAOhB,EAAW,KAClB,OAAOF,EAAU,KAKrB,MAAK,eAAiBkB,EACtB,UAAW5B,KAAY,KAAK,wBACxBA,EAAS,CACL,OAAA4B,EACA,eAAAC,EACA,GAAIjB,EAAS,CAAE,OAAAA,CAAO,EAAI,CAAC,EAC3B,GAAIF,EAAQ,CAAE,MAAAA,CAAM,EAAI,CAAC,CAC7B,CAAC,EAET,CAEA,iBAAwB,CACpB,GAAI,SAAO,SAAa,KACxB,WAAWoB,KAAS,SAAS,OAAO,MAAM,GAAG,EAAG,CAC5C,MAAMC,EAAMD,EAAM,QAAQ,GAAG,EAC7B,GAAI,EAAAC,EAAM,IACND,EAAM,UAAU,EAAGC,CAAG,EAAE,KAAK,IAAM,KAAK,eAAgB,CACxD,KAAK,YAAc,CAAC,CAACD,EAAM,UAAUC,EAAM,CAAC,EAAE,KAAK,EACnD,MACJ,CACJ,CACA,KAAK,YAAc,GACvB,CAUA,gBACIC,EACAC,EAAc,mBACdC,EAAmB,GAClB,CACD,MAAMhC,EAAMd,EACR,KAAK,WACL,KAAK,OAAS,KAAK,oBACvB,EACA,OAAOC,EAAoB2C,EAAMC,EAAaC,EAAkBhC,CAAG,CACvE,CAIA,IAAI,SAA0B,CAC1B,MAAO,CACH,QAAS,KAAK,QACd,MAAO,KAAK,MACZ,qBAAsB,KAAK,qBAC3B,OAAQ,KAAK,OACb,WAAY,KAAK,WACjB,gBAAiB,KAAK,gBACtB,YAAa,KAAK,YAClB,eAAgB,KAAK,eACrB,eAAgB,KAAK,eACrB,kBAAmB,KAAK,YAAc,KAAK,cAAgB,KAC3D,cAAgBP,GAAU,CACtB,KAAK,MAAQA,CACjB,CACJ,CACJ,CAUA,IAAI,MAAO,CAEP,MAAMwC,EAAO,KACb,MAAO,CACH,IACIC,EACAC,EAAW,GACXC,EACU,CACV,OAAOhD,EACH6C,EAAK,QACL,MACAC,EACA,OACAC,EACAC,EACA,EACJ,CACJ,EACA,KACIF,EACAJ,EACAK,EAAW,GACXC,EACU,CACV,OAAOhD,EACH6C,EAAK,QACL,OACAC,EACAJ,EACAK,EACAC,EACA,EACJ,CACJ,EACA,IACIF,EACAJ,EACAK,EAAW,GACXC,EACU,CACV,OAAOhD,EACH6C,EAAK,QACL,MACAC,EACAJ,EACAK,EACAC,EACA,EACJ,CACJ,EACA,MACIF,EACAJ,EACAK,EAAW,GACXC,EACU,CACV,OAAOhD,EACH6C,EAAK,QACL,QACAC,EACAJ,EACAK,EACAC,EACA,EACJ,CACJ,EACA,OACIF,EACAJ,EACAK,EAAW,GACXC,EACU,CACV,OAAOhD,EACH6C,EAAK,QACL,SACAC,EACAJ,EACAK,EACAC,EACA,EACJ,CACJ,CACJ,CACJ,CAEA,QACIC,EACAH,EACAJ,EACAK,EAAW,GACXC,EACU,CACV,OAAOhD,EACH,KAAK,QACLiD,EACAH,EACAJ,EACAK,EACAC,EACA,EACJ,CACJ,CAGA,MAAM,cACFC,EACAH,EACAJ,EACAK,EAAW,GACS,CACpB,MAAMG,EAAkC,CACpC,eAAgB,kBACpB,EACIH,GAAY,KAAK,QACjBG,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUL,EAAM,CACzC,OAAAG,EACA,QAAAC,EACA,GAAIR,GAAQ,KAAO,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAE,EAAI,CAAC,EACrD,YAAa,SACjB,CAAC,EAED,GAAI,CAACS,EAAI,GAAI,CACT,MAAMC,EAAO,MAAMD,EAAI,KAAK,EACtBnB,EAAM,IAAI,MAAM,QAAQmB,EAAI,MAAM,KAAKC,CAAI,EAAE,EACnD,MAACpB,EAA4B,OAASmB,EAAI,OACpCnB,CACV,CAEA,OAAOmB,EAAI,YAAY,CAC3B,CAGA,MAAM,YACFF,EACAH,EACAO,EACAN,EAAW,GACD,CACV,MAAMG,EAAkC,CAAC,EACrCH,GAAY,KAAK,QACjBG,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUL,EAAM,CACzC,OAAAG,EACA,QAAAC,EACA,KAAMG,EACN,YAAa,SACjB,CAAC,EAEKC,EAAQ,MAAMH,EAAI,KAAK,EAC7B,GAAI,CAACG,EAAK,GAAI,CACV,MAAMtB,EAAM,IAAI,MACZsB,EAAK,SAAW,4BAA4BH,EAAI,MAAM,GAC1D,EACA,MAACnB,EAA4B,OAASmB,EAAI,OACpCnB,CACV,CACA,OAAOsB,CACX,CAGA,MAAM,kBACFL,EACAH,EACAO,EACAN,EAAW,GACS,CACpB,MAAMG,EAAkC,CAAC,EACrCH,GAAY,KAAK,QACjBG,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUL,EAAM,CACzC,OAAAG,EACA,QAAAC,EACA,KAAMG,EACN,YAAa,SACjB,CAAC,EAED,GAAI,CAACF,EAAI,GAAI,CACT,MAAMC,EAAO,MAAMD,EAAI,KAAK,EACtBnB,EAAM,IAAI,MAAM,QAAQmB,EAAI,MAAM,KAAKC,CAAI,EAAE,EACnD,MAACpB,EAA4B,OAASmB,EAAI,OACpCnB,CACV,CAEA,OAAOmB,EAAI,YAAY,CAC3B,CACJ",
-  "names": ["readEnv", "derivePacketKey", "parseRequestBody", "entityRequest", "REALTIME_DEFAULT_PATH", "EntityServerClientBase", "options", "envBaseUrl", "token", "apiKey", "secret", "value", "enabled", "listener", "eventName", "key", "listeners", "socket", "resolve", "reject", "settled", "finalizeResolve", "finalizeReject", "error", "event", "reason", "message", "subscriptions", "intervalMs", "tick", "refreshToken", "expiresIn", "refreshFn", "delayMs", "result", "err", "normalized", "baseUrl", "url", "payload", "envelope", "status", "previousStatus", "chunk", "idx", "body", "contentType", "requireEncrypted", "self", "path", "withAuth", "extraHeaders", "method", "headers", "res", "text", "form", "data"]
+  "sourcesContent": ["import type {\r\n    EntityServerClientOptions,\r\n    RealtimeClientOptions,\r\n    RealtimeConnectionStatus,\r\n    RealtimeEnvelope,\r\n    RealtimeMessageListener,\r\n    RealtimeStatusListener,\r\n} from \"../types.js\";\r\nimport { readEnv } from \"./utils.js\";\r\nimport { derivePacketKey, parseRequestBody } from \"./packet.js\";\r\nimport { entityRequest, type RequestOptions } from \"./request.js\";\r\n\r\nconst REALTIME_DEFAULT_PATH = \"/v1/realtime\";\r\n\r\n// mixin \uD5EC\uD37C \uD0C0\uC785\r\nexport type GConstructor<T = object> = new (...args: any[]) => T;\r\n\r\nexport class EntityServerClientBase {\r\n    baseUrl: string;\r\n    token: string;\r\n    anonymousPacketToken: string;\r\n    apiKey: string;\r\n    hmacSecret: string;\r\n    encryptRequests: boolean;\r\n    csrfEnabled: boolean;\r\n    csrfHeaderName: string;\r\n    csrfCookieName: string;\r\n    /** @internal health \uC7AC\uD638\uCD9C\uB85C CSRF \uCFE0\uD0A4 \uAC31\uC2E0 (AuthMixin\uC5D0\uC11C \uC124\uC815) */\r\n    csrfRefresher: (() => Promise<void>) | null = null;\r\n    activeTxId: string | null = null;\r\n\r\n    // \uC138\uC158 \uC720\uC9C0 \uAD00\uB828\r\n    keepSession: boolean;\r\n    refreshBuffer: number;\r\n    onTokenRefreshed?: (accessToken: string, expiresIn: number) => void;\r\n    onSessionExpired?: (error: Error) => void;\r\n    onHealthChange?: (online: boolean) => void;\r\n    sessionRefreshToken: string | null = null;\r\n    refreshTimer: ReturnType<typeof setTimeout> | null = null;\r\n    healthTickTimer: ReturnType<typeof setInterval> | null = null;\r\n    healthTickPromise: Promise<unknown> | null = null;\r\n    realtimeEnabled: boolean;\r\n    realtimePath: string;\r\n    realtimeAutoConnect: boolean;\r\n    realtimeAutoReconnect: boolean;\r\n    realtimeReconnectDelayMs: number;\r\n    realtimeStatus: RealtimeConnectionStatus;\r\n    realtimeSocket: WebSocket | null = null;\r\n    realtimeConnectPromise: Promise<void> | null = null;\r\n    realtimeReconnectTimer: ReturnType<typeof setTimeout> | null = null;\r\n    realtimeShouldReconnect = false;\r\n    realtimeMessageListeners = new Set<RealtimeMessageListener>();\r\n    realtimeStatusListeners = new Set<RealtimeStatusListener>();\r\n    realtimeEventListeners = new Map<string, Set<RealtimeMessageListener>>();\r\n    // \u2500\u2500\u2500 \uCD08\uAE30\uD654 & \uC124\uC815 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\r\n    /**\r\n     * EntityServerClient \uC778\uC2A4\uD134\uC2A4\uB97C \uC0DD\uC131\uD569\uB2C8\uB2E4.\r\n     *\r\n     * \uAE30\uBCF8\uAC12:\r\n     * - `baseUrl`: `VITE_ENTITY_SERVER_URL` \uB610\uB294 \uC0C1\uB300 \uACBD\uB85C(`\"\"`)\r\n     */\r\n    constructor(options: EntityServerClientOptions = {}) {\r\n        const envBaseUrl = readEnv(\"VITE_ENTITY_SERVER_URL\");\r\n\r\n        this.baseUrl = (options.baseUrl ?? envBaseUrl ?? \"\").replace(/\\/$/, \"\");\r\n        this.token = options.token ?? \"\";\r\n        this.anonymousPacketToken = options.anonymousPacketToken ?? \"\";\r\n        this.apiKey = options.apiKey ?? \"\";\r\n        this.hmacSecret = options.hmacSecret ?? \"\";\r\n        this.encryptRequests = options.encryptRequests ?? false;\r\n        this.csrfEnabled = options.csrfEnabled ?? false;\r\n        this.csrfHeaderName = options.csrfHeaderName ?? \"x-csrf-token\";\r\n        this.csrfCookieName = options.csrfCookieName ?? \"_csrf\";\r\n        this.keepSession = options.keepSession ?? false;\r\n        this.refreshBuffer = options.refreshBuffer ?? 60;\r\n        this.onTokenRefreshed = options.onTokenRefreshed;\r\n        this.onSessionExpired = options.onSessionExpired;\r\n        this.onHealthChange = options.onHealthChange;\r\n        this.realtimeEnabled = false;\r\n        this.realtimePath = REALTIME_DEFAULT_PATH;\r\n        this.realtimeAutoConnect = true;\r\n        this.realtimeAutoReconnect = true;\r\n        this.realtimeReconnectDelayMs = 3000;\r\n        this.realtimeStatus = \"idle\";\r\n        this.applyRealtimeOptions(options.realtime);\r\n        if (\r\n            typeof options.healthTickInterval === \"number\" &&\r\n            options.healthTickInterval > 0\r\n        ) {\r\n            // csrfRefresher\uB294 AuthMixin\uC5D0\uC11C \uC124\uC815\uB418\uBBC0\uB85C \uB2E4\uC74C tick\uC5D0 \uC2DC\uC791\r\n            Promise.resolve().then(() =>\r\n                this.startHealthTick(options.healthTickInterval),\r\n            );\r\n        }\r\n    }\r\n\r\n    /** baseUrl, token, encryptRequests \uAC12\uC744 \uB7F0\uD0C0\uC784\uC5D0 \uAC31\uC2E0\uD569\uB2C8\uB2E4. */\r\n    configure(options: Partial<EntityServerClientOptions>): void {\r\n        if (typeof options.baseUrl === \"string\") {\r\n            this.baseUrl = options.baseUrl.replace(/\\/$/, \"\");\r\n        }\r\n        if (typeof options.token === \"string\") this.token = options.token;\r\n        if (typeof options.anonymousPacketToken === \"string\") {\r\n            this.anonymousPacketToken = options.anonymousPacketToken;\r\n        }\r\n        if (typeof options.encryptRequests === \"boolean\")\r\n            this.encryptRequests = options.encryptRequests;\r\n        if (typeof options.csrfEnabled === \"boolean\") {\r\n            this.csrfEnabled = options.csrfEnabled;\r\n        }\r\n        if (typeof options.csrfHeaderName === \"string\") {\r\n            this.csrfHeaderName = options.csrfHeaderName;\r\n        }\r\n        if (typeof options.csrfCookieName === \"string\") {\r\n            this.csrfCookieName = options.csrfCookieName;\r\n        }\r\n        if (typeof options.apiKey === \"string\") this.apiKey = options.apiKey;\r\n        if (typeof options.hmacSecret === \"string\")\r\n            this.hmacSecret = options.hmacSecret;\r\n        if (typeof options.keepSession === \"boolean\")\r\n            this.keepSession = options.keepSession;\r\n        if (typeof options.refreshBuffer === \"number\")\r\n            this.refreshBuffer = options.refreshBuffer;\r\n        if (options.onTokenRefreshed)\r\n            this.onTokenRefreshed = options.onTokenRefreshed;\r\n        if (options.onSessionExpired)\r\n            this.onSessionExpired = options.onSessionExpired;\r\n        if (options.onHealthChange)\r\n            this.onHealthChange = options.onHealthChange;\r\n        if (typeof options.realtime !== \"undefined\") {\r\n            this.applyRealtimeOptions(options.realtime);\r\n        }\r\n        if (\r\n            typeof options.healthTickInterval === \"number\" &&\r\n            options.healthTickInterval > 0\r\n        ) {\r\n            Promise.resolve().then(() =>\r\n                this.startHealthTick(options.healthTickInterval),\r\n            );\r\n        }\r\n    }\r\n\r\n    /** \uC778\uC99D \uC694\uCCAD\uC5D0 \uC0AC\uC6A9\uD560 JWT Access Token\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\r\n    setToken(token: string): void {\r\n        this.token = token;\r\n        if (!token) {\r\n            this.disconnectRealtime(\"token_cleared\");\r\n            return;\r\n        }\r\n        if (this.realtimeEnabled && this.realtimeAutoConnect) {\r\n            void this.connectRealtime().catch(() => {});\r\n        }\r\n    }\r\n\r\n    /** \uC775\uBA85 \uD328\uD0B7 \uC554\uD638\uD654\uC6A9 \uD1A0\uD070\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\r\n    setAnonymousPacketToken(token: string): void {\r\n        this.anonymousPacketToken = token;\r\n    }\r\n\r\n    /** HMAC \uC778\uC99D\uC6A9 API Key\uB97C \uC124\uC815\uD569\uB2C8\uB2E4. */\r\n    setApiKey(apiKey: string): void {\r\n        this.apiKey = apiKey;\r\n    }\r\n\r\n    /** HMAC \uC778\uC99D\uC6A9 \uC2DC\uD06C\uB9BF\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\r\n    setHmacSecret(secret: string): void {\r\n        this.hmacSecret = secret;\r\n    }\r\n\r\n    /** \uC554\uD638\uD654 \uC694\uCCAD \uD65C\uC131\uD654 \uC5EC\uBD80\uB97C \uC124\uC815\uD569\uB2C8\uB2E4. */\r\n    setEncryptRequests(value: boolean): void {\r\n        this.encryptRequests = value;\r\n    }\r\n\r\n    setCsrfEnabled(enabled: boolean): void {\r\n        this.csrfEnabled = enabled;\r\n    }\r\n\r\n    addRealtimeListener(listener: RealtimeMessageListener): void {\r\n        this.realtimeMessageListeners.add(listener);\r\n    }\r\n\r\n    removeRealtimeListener(listener: RealtimeMessageListener): void {\r\n        this.realtimeMessageListeners.delete(listener);\r\n    }\r\n\r\n    addRealtimeStatusListener(listener: RealtimeStatusListener): void {\r\n        this.realtimeStatusListeners.add(listener);\r\n    }\r\n\r\n    removeRealtimeStatusListener(listener: RealtimeStatusListener): void {\r\n        this.realtimeStatusListeners.delete(listener);\r\n    }\r\n\r\n    addRealtimeEventListener(\r\n        eventName: string,\r\n        listener: RealtimeMessageListener,\r\n    ): void {\r\n        const key = String(eventName).trim();\r\n        if (!key) {\r\n            return;\r\n        }\r\n        if (!this.realtimeEventListeners.has(key)) {\r\n            this.realtimeEventListeners.set(key, new Set());\r\n        }\r\n        this.realtimeEventListeners.get(key)!.add(listener);\r\n    }\r\n\r\n    removeRealtimeEventListener(\r\n        eventName: string,\r\n        listener: RealtimeMessageListener,\r\n    ): void {\r\n        const key = String(eventName).trim();\r\n        if (!key) {\r\n            return;\r\n        }\r\n        const listeners = this.realtimeEventListeners.get(key);\r\n        if (!listeners) {\r\n            return;\r\n        }\r\n        listeners.delete(listener);\r\n        if (listeners.size === 0) {\r\n            this.realtimeEventListeners.delete(key);\r\n        }\r\n    }\r\n\r\n    async connectRealtime(): Promise<void> {\r\n        if (!this.realtimeEnabled) {\r\n            this.setRealtimeStatus(\"disabled\", \"realtime_disabled\");\r\n            return;\r\n        }\r\n\r\n        if (!this.token) {\r\n            throw new Error(\r\n                \"Cannot open realtime connection without access token.\",\r\n            );\r\n        }\r\n\r\n        if (typeof WebSocket === \"undefined\") {\r\n            throw new Error(\"WebSocket is not available in this environment.\");\r\n        }\r\n\r\n        if (\r\n            this.realtimeSocket &&\r\n            this.realtimeSocket.readyState === WebSocket.OPEN\r\n        ) {\r\n            return;\r\n        }\r\n\r\n        if (\r\n            this.realtimeSocket &&\r\n            this.realtimeSocket.readyState === WebSocket.CONNECTING &&\r\n            this.realtimeConnectPromise\r\n        ) {\r\n            return this.realtimeConnectPromise;\r\n        }\r\n\r\n        this.clearRealtimeReconnectTimer();\r\n        this.realtimeShouldReconnect = this.realtimeAutoReconnect;\r\n        this.setRealtimeStatus(\"connecting\", \"connect_requested\");\r\n\r\n        const socket = new WebSocket(this.buildRealtimeUrl());\r\n        this.realtimeSocket = socket;\r\n\r\n        this.realtimeConnectPromise = new Promise<void>((resolve, reject) => {\r\n            let settled = false;\r\n\r\n            const finalizeResolve = () => {\r\n                if (settled) {\r\n                    return;\r\n                }\r\n                settled = true;\r\n                this.realtimeConnectPromise = null;\r\n                resolve();\r\n            };\r\n\r\n            const finalizeReject = (error: Error) => {\r\n                if (settled) {\r\n                    return;\r\n                }\r\n                settled = true;\r\n                this.realtimeConnectPromise = null;\r\n                reject(error);\r\n            };\r\n\r\n            socket.addEventListener(\"open\", () => {\r\n                this.setRealtimeStatus(\"open\", \"socket_open\");\r\n                finalizeResolve();\r\n            });\r\n\r\n            socket.addEventListener(\"message\", (event) => {\r\n                this.handleRealtimeMessage(event.data);\r\n            });\r\n\r\n            socket.addEventListener(\"error\", () => {\r\n                this.setRealtimeStatus(\r\n                    \"closed\",\r\n                    \"socket_error\",\r\n                    new Error(\"Realtime socket error.\"),\r\n                );\r\n            });\r\n\r\n            socket.addEventListener(\"close\", (event) => {\r\n                if (this.realtimeSocket === socket) {\r\n                    this.realtimeSocket = null;\r\n                }\r\n\r\n                const reason = event.reason || \"socket_closed\";\r\n                const error = new Error(\r\n                    `Realtime socket closed (${event.code}${event.reason ? `: ${event.reason}` : \"\"}).`,\r\n                );\r\n\r\n                this.setRealtimeStatus(\"closed\", reason, error);\r\n                if (!settled) {\r\n                    finalizeReject(error);\r\n                }\r\n\r\n                if (\r\n                    this.realtimeShouldReconnect &&\r\n                    this.realtimeEnabled &&\r\n                    this.realtimeAutoReconnect &&\r\n                    this.token\r\n                ) {\r\n                    this.scheduleRealtimeReconnect(reason);\r\n                }\r\n            });\r\n        });\r\n\r\n        return this.realtimeConnectPromise;\r\n    }\r\n\r\n    disconnectRealtime(reason = \"client_disconnect\"): void {\r\n        this.realtimeShouldReconnect = false;\r\n        this.clearRealtimeReconnectTimer();\r\n\r\n        if (this.realtimeSocket) {\r\n            const socket = this.realtimeSocket;\r\n            this.realtimeSocket = null;\r\n            try {\r\n                if (\r\n                    socket.readyState === WebSocket.OPEN ||\r\n                    socket.readyState === WebSocket.CONNECTING\r\n                ) {\r\n                    socket.close(1000, reason);\r\n                }\r\n            } catch {\r\n                // ignore close errors\r\n            }\r\n        }\r\n\r\n        this.realtimeConnectPromise = null;\r\n        this.setRealtimeStatus(\r\n            this.realtimeEnabled ? \"idle\" : \"disabled\",\r\n            reason,\r\n        );\r\n    }\r\n\r\n    sendRealtime(message: RealtimeEnvelope | Record<string, unknown>): boolean {\r\n        if (\r\n            !this.realtimeSocket ||\r\n            this.realtimeSocket.readyState !== WebSocket.OPEN\r\n        ) {\r\n            return false;\r\n        }\r\n\r\n        this.realtimeSocket.send(JSON.stringify(message));\r\n        return true;\r\n    }\r\n\r\n    subscribeRealtime(subscriptions: string[]): boolean {\r\n        return this.sendRealtime({\r\n            type: \"subscribe\",\r\n            channel: \"session\",\r\n            event: \"session.subscribe\",\r\n            data: { subscriptions },\r\n        });\r\n    }\r\n\r\n    unsubscribeRealtime(subscriptions: string[]): boolean {\r\n        return this.sendRealtime({\r\n            type: \"unsubscribe\",\r\n            channel: \"session\",\r\n            event: \"session.unsubscribe\",\r\n            data: { subscriptions },\r\n        });\r\n    }\r\n\r\n    /**\r\n     * \uC8FC\uAE30\uC801\uC73C\uB85C health \uCCB4\uD06C\uB97C \uC2E4\uD589\uD569\uB2C8\uB2E4.\r\n     * CSRF \uCFE0\uD0A4 \uAC31\uC2E0\uACFC \uC11C\uBC84 \uC0C1\uD0DC \uD655\uC778\uC744 \uC790\uB3D9\uD654\uD569\uB2C8\uB2E4.\r\n     * keepSession=true \uC774\uBA74 \uAC01 tick\uC5D0\uC11C \uC138\uC158 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uB3C4 \uD568\uAED8 \uC2DC\uB3C4\uD569\uB2C8\uB2E4.\r\n     *\r\n     * @param intervalMs \uD638\uCD9C \uC8FC\uAE30(ms). \uAE30\uBCF8\uAC12: 5\uBD84\r\n     */\r\n    startHealthTick(intervalMs: number = 5 * 60 * 1000): void {\r\n        this.stopHealthTick();\r\n        const tick = (): void => {\r\n            if (this.healthTickPromise) return;\r\n            this.healthTickPromise = (\r\n                this.csrfRefresher ? this.csrfRefresher() : Promise.resolve()\r\n            )\r\n                .then(() => {\r\n                    this.onHealthChange?.(true);\r\n                })\r\n                .catch(() => {\r\n                    this.onHealthChange?.(false);\r\n                })\r\n                .finally(() => {\r\n                    this.healthTickPromise = null;\r\n                });\r\n        };\r\n        tick(); // \uC989\uC2DC 1\uD68C \uC2E4\uD589\r\n        this.healthTickTimer = setInterval(tick, intervalMs);\r\n    }\r\n\r\n    /** health tick \uD0C0\uC774\uBA38\uB97C \uC911\uC9C0\uD569\uB2C8\uB2E4. */\r\n    stopHealthTick(): void {\r\n        if (this.healthTickTimer !== null) {\r\n            clearInterval(this.healthTickTimer);\r\n            this.healthTickTimer = null;\r\n        }\r\n        this.healthTickPromise = null;\r\n    }\r\n\r\n    // \u2500\u2500\u2500 \uC138\uC158 \uC720\uC9C0 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\r\n    /** @deprecated \uC138\uC158 \uC5F0\uC7A5\uC740 health tick \uAE30\uBC18 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uC73C\uB85C \uB300\uCCB4\uB418\uC5C8\uC2B5\uB2C8\uB2E4. */\r\n    scheduleKeepSession(\r\n        refreshToken: string,\r\n        expiresIn: number,\r\n        refreshFn: (\r\n            rt: string,\r\n        ) => Promise<{ access_token: string; expires_in: number }>,\r\n    ): void {\r\n        this.clearRefreshTimer();\r\n        this.sessionRefreshToken = refreshToken;\r\n        const delayMs = Math.max((expiresIn - this.refreshBuffer) * 1000, 0);\r\n        this.refreshTimer = setTimeout(async () => {\r\n            if (!this.sessionRefreshToken) return;\r\n            try {\r\n                const result = await refreshFn(this.sessionRefreshToken);\r\n                this.onTokenRefreshed?.(result.access_token, result.expires_in);\r\n                this.scheduleKeepSession(\r\n                    this.sessionRefreshToken,\r\n                    result.expires_in,\r\n                    refreshFn,\r\n                );\r\n            } catch (err) {\r\n                this.clearRefreshTimer();\r\n                this.onSessionExpired?.(\r\n                    err instanceof Error ? err : new Error(String(err)),\r\n                );\r\n            }\r\n        }, delayMs);\r\n    }\r\n\r\n    /** @deprecated \uC138\uC158 \uC5F0\uC7A5\uC740 health tick \uAE30\uBC18 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uC73C\uB85C \uB300\uCCB4\uB418\uC5C8\uC2B5\uB2C8\uB2E4. */\r\n    clearRefreshTimer(): void {\r\n        if (this.refreshTimer !== null) {\r\n            clearTimeout(this.refreshTimer);\r\n            this.refreshTimer = null;\r\n        }\r\n    }\r\n\r\n    /**\r\n     * \uC138\uC158 \uC790\uB3D9 \uC5F0\uC7A5\uC744 \uC911\uC9C0\uD569\uB2C8\uB2E4.\r\n     * `logout()` \uD638\uCD9C \uC2DC \uC790\uB3D9\uC73C\uB85C \uC911\uC9C0\uB418\uBA70, \uC9C1\uC811 \uD638\uCD9C\uC774 \uD544\uC694\uD55C \uACBD\uC6B0\uB294 \uB4DC\uBB45\uB2C8\uB2E4.\r\n     */\r\n    stopKeepSession(): void {\r\n        this.clearRefreshTimer();\r\n        this.sessionRefreshToken = null;\r\n    }\r\n\r\n    applyRealtimeOptions(options?: boolean | RealtimeClientOptions): void {\r\n        const normalized: RealtimeClientOptions =\r\n            typeof options === \"boolean\"\r\n                ? { enabled: options }\r\n                : (options ?? {});\r\n\r\n        this.realtimeEnabled = normalized.enabled ?? false;\r\n        this.realtimePath =\r\n            String(normalized.path ?? REALTIME_DEFAULT_PATH).trim() ||\r\n            REALTIME_DEFAULT_PATH;\r\n        this.realtimeAutoConnect = normalized.autoConnect ?? true;\r\n        this.realtimeAutoReconnect = normalized.autoReconnect ?? true;\r\n        this.realtimeReconnectDelayMs = Math.max(\r\n            250,\r\n            normalized.reconnectDelayMs ?? 3000,\r\n        );\r\n\r\n        if (!this.realtimeEnabled) {\r\n            this.disconnectRealtime(\"realtime_disabled\");\r\n            return;\r\n        }\r\n\r\n        this.setRealtimeStatus(\"idle\", \"realtime_enabled\");\r\n        if (this.token && this.realtimeAutoConnect) {\r\n            void this.connectRealtime().catch(() => {});\r\n        }\r\n    }\r\n\r\n    buildRealtimeUrl(): string {\r\n        const rawBaseUrl =\r\n            this.baseUrl || readEnv(\"VITE_ENTITY_SERVER_URL\") || \"\";\r\n        const baseUrl =\r\n            rawBaseUrl ||\r\n            (typeof window !== \"undefined\" ? window.location.origin : \"\");\r\n\r\n        if (!baseUrl) {\r\n            throw new Error(\"Realtime connection requires baseUrl.\");\r\n        }\r\n\r\n        const url = new URL(this.realtimePath, baseUrl);\r\n        url.protocol = url.protocol === \"https:\" ? \"wss:\" : \"ws:\";\r\n        url.searchParams.set(\"access_token\", this.token);\r\n        return url.toString();\r\n    }\r\n\r\n    handleRealtimeMessage(payload: unknown): void {\r\n        if (typeof payload !== \"string\") {\r\n            return;\r\n        }\r\n\r\n        let envelope: RealtimeEnvelope;\r\n        try {\r\n            envelope = JSON.parse(payload) as RealtimeEnvelope;\r\n        } catch {\r\n            return;\r\n        }\r\n\r\n        for (const listener of this.realtimeMessageListeners) {\r\n            listener(envelope);\r\n        }\r\n\r\n        const listeners = this.realtimeEventListeners.get(envelope.event);\r\n        if (listeners) {\r\n            for (const listener of listeners) {\r\n                listener(envelope);\r\n            }\r\n        }\r\n    }\r\n\r\n    scheduleRealtimeReconnect(reason: string): void {\r\n        this.clearRealtimeReconnectTimer();\r\n        this.realtimeReconnectTimer = setTimeout(() => {\r\n            this.realtimeReconnectTimer = null;\r\n            if (!this.realtimeEnabled || !this.token) {\r\n                return;\r\n            }\r\n            this.setRealtimeStatus(\"connecting\", `${reason}:reconnect`);\r\n            void this.connectRealtime().catch(() => {});\r\n        }, this.realtimeReconnectDelayMs);\r\n    }\r\n\r\n    clearRealtimeReconnectTimer(): void {\r\n        if (this.realtimeReconnectTimer !== null) {\r\n            clearTimeout(this.realtimeReconnectTimer);\r\n            this.realtimeReconnectTimer = null;\r\n        }\r\n    }\r\n\r\n    setRealtimeStatus(\r\n        status: RealtimeConnectionStatus,\r\n        reason?: string,\r\n        error?: Error,\r\n    ): void {\r\n        const previousStatus = this.realtimeStatus;\r\n        if (\r\n            previousStatus === status &&\r\n            typeof reason === \"undefined\" &&\r\n            typeof error === \"undefined\"\r\n        ) {\r\n            return;\r\n        }\r\n\r\n        this.realtimeStatus = status;\r\n        for (const listener of this.realtimeStatusListeners) {\r\n            listener({\r\n                status,\r\n                previousStatus,\r\n                ...(reason ? { reason } : {}),\r\n                ...(error ? { error } : {}),\r\n            });\r\n        }\r\n    }\r\n\r\n    applyCsrfHealth(): void {\r\n        if (typeof document === \"undefined\") return;\r\n        for (const chunk of document.cookie.split(\";\")) {\r\n            const idx = chunk.indexOf(\"=\");\r\n            if (idx < 0) continue;\r\n            if (chunk.substring(0, idx).trim() === this.csrfCookieName) {\r\n                this.csrfEnabled = !!chunk.substring(idx + 1).trim();\r\n                return;\r\n            }\r\n        }\r\n        this.csrfEnabled = false;\r\n    }\r\n\r\n    // \u2500\u2500\u2500 \uC694\uCCAD \uBCF8\uBB38 \uD30C\uC2F1 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\r\n    /**\r\n     * \uC694\uCCAD \uBC14\uB514\uB97C \uD30C\uC2F1\uD569\uB2C8\uB2E4.\r\n     * `application/octet-stream`\uC774\uBA74 XChaCha20-Poly1305 \uBCF5\uD638\uD654, \uADF8 \uC678\uB294 JSON \uD30C\uC2F1\uD569\uB2C8\uB2E4.\r\n     *\r\n     * @param requireEncrypted `true`\uC774\uBA74 \uC554\uD638\uD654\uB41C \uC694\uCCAD\uB9CC \uD5C8\uC6A9\uD569\uB2C8\uB2E4.\r\n     */\r\n    readRequestBody<T = Record<string, unknown>>(\r\n        body: ArrayBuffer | Uint8Array | string | T | null | undefined,\r\n        contentType = \"application/json\",\r\n        requireEncrypted = false,\r\n    ): T {\r\n        const key = derivePacketKey(\r\n            this.hmacSecret,\r\n            this.token || this.anonymousPacketToken,\r\n        );\r\n        return parseRequestBody<T>(body, contentType, requireEncrypted, key);\r\n    }\r\n\r\n    // \u2500\u2500\u2500 \uB0B4\uBD80 \uD5EC\uD37C \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\r\n\r\n    get reqOpts(): RequestOptions {\r\n        return {\r\n            baseUrl: this.baseUrl,\r\n            token: this.token,\r\n            anonymousPacketToken: this.anonymousPacketToken,\r\n            apiKey: this.apiKey,\r\n            hmacSecret: this.hmacSecret,\r\n            encryptRequests: this.encryptRequests,\r\n            csrfEnabled: this.csrfEnabled,\r\n            csrfHeaderName: this.csrfHeaderName,\r\n            csrfCookieName: this.csrfCookieName,\r\n            refreshCsrfCookie: this.csrfEnabled ? this.csrfRefresher : null,\r\n            onAccessToken: (token) => {\r\n                this.token = token;\r\n            },\r\n        };\r\n    }\r\n\r\n    // \uC778\uC99D \uC694\uCCAD \uC804\uC5D0 \uD544\uC694\uD55C \uD074\uB77C\uC774\uC5B8\uD2B8 \uC900\uBE44 \uC791\uC5C5\uC744 \uC218\uD589\uD569\uB2C8\uB2E4.\r\n    prepareRequest(_withAuth: boolean): Promise<void> {\r\n        return Promise.resolve();\r\n    }\r\n\r\n    /**\r\n     * \uCEE4\uC2A4\uD140 \uB77C\uC6B0\uD2B8 \uC9C1\uC811 \uD638\uCD9C\uC6A9 HTTP \uB124\uC784\uC2A4\uD398\uC774\uC2A4.\r\n     * \uC778\uC99D\u00B7\uC554\uD638\uD654\u00B7HMAC \uB4F1 SDK \uC635\uC158\uC774 \uADF8\uB300\uB85C \uC801\uC6A9\uB429\uB2C8\uB2E4.\r\n     *\r\n     * @example\r\n     * const res = await client.http.get<{ version: string }>(\"/api/v1/status\", false);\r\n     * const res = await client.http.post<MyResponse>(\"/api/v1/custom\", { key: \"value\" });\r\n     */\r\n    get http() {\r\n        // eslint-disable-next-line @typescript-eslint/no-this-alias\r\n        const self = this;\r\n        return {\r\n            get<T>(\r\n                path: string,\r\n                withAuth = true,\r\n                extraHeaders?: Record<string, string>,\r\n            ): Promise<T> {\r\n                return self\r\n                    .prepareRequest(withAuth)\r\n                    .then(() =>\r\n                        entityRequest<T>(\r\n                            self.reqOpts,\r\n                            \"GET\",\r\n                            path,\r\n                            undefined,\r\n                            withAuth,\r\n                            extraHeaders,\r\n                            true,\r\n                        ),\r\n                    );\r\n            },\r\n            post<T>(\r\n                path: string,\r\n                body?: unknown,\r\n                withAuth = true,\r\n                extraHeaders?: Record<string, string>,\r\n            ): Promise<T> {\r\n                return self\r\n                    .prepareRequest(withAuth)\r\n                    .then(() =>\r\n                        entityRequest<T>(\r\n                            self.reqOpts,\r\n                            \"POST\",\r\n                            path,\r\n                            body,\r\n                            withAuth,\r\n                            extraHeaders,\r\n                            true,\r\n                        ),\r\n                    );\r\n            },\r\n            put<T>(\r\n                path: string,\r\n                body?: unknown,\r\n                withAuth = true,\r\n                extraHeaders?: Record<string, string>,\r\n            ): Promise<T> {\r\n                return self\r\n                    .prepareRequest(withAuth)\r\n                    .then(() =>\r\n                        entityRequest<T>(\r\n                            self.reqOpts,\r\n                            \"PUT\",\r\n                            path,\r\n                            body,\r\n                            withAuth,\r\n                            extraHeaders,\r\n                            true,\r\n                        ),\r\n                    );\r\n            },\r\n            patch<T>(\r\n                path: string,\r\n                body?: unknown,\r\n                withAuth = true,\r\n                extraHeaders?: Record<string, string>,\r\n            ): Promise<T> {\r\n                return self\r\n                    .prepareRequest(withAuth)\r\n                    .then(() =>\r\n                        entityRequest<T>(\r\n                            self.reqOpts,\r\n                            \"PATCH\",\r\n                            path,\r\n                            body,\r\n                            withAuth,\r\n                            extraHeaders,\r\n                            true,\r\n                        ),\r\n                    );\r\n            },\r\n            delete<T>(\r\n                path: string,\r\n                body?: unknown,\r\n                withAuth = true,\r\n                extraHeaders?: Record<string, string>,\r\n            ): Promise<T> {\r\n                return self\r\n                    .prepareRequest(withAuth)\r\n                    .then(() =>\r\n                        entityRequest<T>(\r\n                            self.reqOpts,\r\n                            \"DELETE\",\r\n                            path,\r\n                            body,\r\n                            withAuth,\r\n                            extraHeaders,\r\n                            true,\r\n                        ),\r\n                    );\r\n            },\r\n        };\r\n    }\r\n\r\n    request<T>(\r\n        method: string,\r\n        path: string,\r\n        body?: unknown,\r\n        withAuth = true,\r\n        extraHeaders?: Record<string, string>,\r\n    ): Promise<T> {\r\n        return this.prepareRequest(withAuth).then(() =>\r\n            entityRequest<T>(\r\n                this.reqOpts,\r\n                method,\r\n                path,\r\n                body,\r\n                withAuth,\r\n                extraHeaders,\r\n                true,\r\n            ),\r\n        );\r\n    }\r\n\r\n    /** PNG/\uBC14\uC774\uB108\uB9AC \uC751\uB2F5\uC744 ArrayBuffer\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. (QR, \uBC14\uCF54\uB4DC \uB4F1) */\r\n    async requestBinary(\r\n        method: string,\r\n        path: string,\r\n        body?: unknown,\r\n        withAuth = true,\r\n    ): Promise<ArrayBuffer> {\r\n        await this.prepareRequest(withAuth);\r\n\r\n        const headers: Record<string, string> = {\r\n            \"Content-Type\": \"application/json\",\r\n        };\r\n        if (withAuth && this.token)\r\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\r\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\r\n\r\n        const res = await fetch(this.baseUrl + path, {\r\n            method,\r\n            headers,\r\n            ...(body != null ? { body: JSON.stringify(body) } : {}),\r\n            credentials: \"include\",\r\n        });\r\n\r\n        if (!res.ok) {\r\n            const text = await res.text();\r\n            const err = new Error(`HTTP ${res.status}: ${text}`);\r\n            (err as { status?: number }).status = res.status;\r\n            throw err;\r\n        }\r\n\r\n        return res.arrayBuffer();\r\n    }\r\n\r\n    /** multipart/form-data \uC694\uCCAD\uC744 \uBCF4\uB0C5\uB2C8\uB2E4. (\uD30C\uC77C \uC5C5\uB85C\uB4DC \uB4F1) */\r\n    async requestForm<T>(\r\n        method: string,\r\n        path: string,\r\n        form: FormData,\r\n        withAuth = true,\r\n    ): Promise<T> {\r\n        const headers: Record<string, string> = {};\r\n        if (withAuth && this.token)\r\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\r\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\r\n\r\n        const res = await fetch(this.baseUrl + path, {\r\n            method,\r\n            headers,\r\n            body: form,\r\n            credentials: \"include\",\r\n        });\r\n\r\n        const data = (await res.json()) as { ok?: boolean; message?: string };\r\n        if (!data.ok) {\r\n            const err = new Error(\r\n                data.message ?? `EntityServer error (HTTP ${res.status})`,\r\n            );\r\n            (err as { status?: number }).status = res.status;\r\n            throw err;\r\n        }\r\n        return data as T;\r\n    }\r\n\r\n    /** multipart/form-data \uC694\uCCAD\uC744 \uBCF4\uB0B4\uACE0 \uBC14\uC774\uB108\uB9AC(ArrayBuffer)\uB97C \uBC18\uD658\uD569\uB2C8\uB2E4. */\r\n    async requestFormBinary(\r\n        method: string,\r\n        path: string,\r\n        form: FormData,\r\n        withAuth = true,\r\n    ): Promise<ArrayBuffer> {\r\n        const headers: Record<string, string> = {};\r\n        if (withAuth && this.token)\r\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\r\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\r\n\r\n        const res = await fetch(this.baseUrl + path, {\r\n            method,\r\n            headers,\r\n            body: form,\r\n            credentials: \"include\",\r\n        });\r\n\r\n        if (!res.ok) {\r\n            const text = await res.text();\r\n            const err = new Error(`HTTP ${res.status}: ${text}`);\r\n            (err as { status?: number }).status = res.status;\r\n            throw err;\r\n        }\r\n\r\n        return res.arrayBuffer();\r\n    }\r\n}\r\n"],
+  "mappings": "AAQA,OAAS,WAAAA,MAAe,aACxB,OAAS,mBAAAC,EAAiB,oBAAAC,MAAwB,cAClD,OAAS,iBAAAC,MAA0C,eAEnD,MAAMC,EAAwB,eAKvB,MAAMC,CAAuB,CAChC,QACA,MACA,qBACA,OACA,WACA,gBACA,YACA,eACA,eAEA,cAA8C,KAC9C,WAA4B,KAG5B,YACA,cACA,iBACA,iBACA,eACA,oBAAqC,KACrC,aAAqD,KACrD,gBAAyD,KACzD,kBAA6C,KAC7C,gBACA,aACA,oBACA,sBACA,yBACA,eACA,eAAmC,KACnC,uBAA+C,KAC/C,uBAA+D,KAC/D,wBAA0B,GAC1B,yBAA2B,IAAI,IAC/B,wBAA0B,IAAI,IAC9B,uBAAyB,IAAI,IAS7B,YAAYC,EAAqC,CAAC,EAAG,CACjD,MAAMC,EAAaP,EAAQ,wBAAwB,EAEnD,KAAK,SAAWM,EAAQ,SAAWC,GAAc,IAAI,QAAQ,MAAO,EAAE,EACtE,KAAK,MAAQD,EAAQ,OAAS,GAC9B,KAAK,qBAAuBA,EAAQ,sBAAwB,GAC5D,KAAK,OAASA,EAAQ,QAAU,GAChC,KAAK,WAAaA,EAAQ,YAAc,GACxC,KAAK,gBAAkBA,EAAQ,iBAAmB,GAClD,KAAK,YAAcA,EAAQ,aAAe,GAC1C,KAAK,eAAiBA,EAAQ,gBAAkB,eAChD,KAAK,eAAiBA,EAAQ,gBAAkB,QAChD,KAAK,YAAcA,EAAQ,aAAe,GAC1C,KAAK,cAAgBA,EAAQ,eAAiB,GAC9C,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,eAAiBA,EAAQ,eAC9B,KAAK,gBAAkB,GACvB,KAAK,aAAeF,EACpB,KAAK,oBAAsB,GAC3B,KAAK,sBAAwB,GAC7B,KAAK,yBAA2B,IAChC,KAAK,eAAiB,OACtB,KAAK,qBAAqBE,EAAQ,QAAQ,EAEtC,OAAOA,EAAQ,oBAAuB,UACtCA,EAAQ,mBAAqB,GAG7B,QAAQ,QAAQ,EAAE,KAAK,IACnB,KAAK,gBAAgBA,EAAQ,kBAAkB,CACnD,CAER,CAGA,UAAUA,EAAmD,CACrD,OAAOA,EAAQ,SAAY,WAC3B,KAAK,QAAUA,EAAQ,QAAQ,QAAQ,MAAO,EAAE,GAEhD,OAAOA,EAAQ,OAAU,WAAU,KAAK,MAAQA,EAAQ,OACxD,OAAOA,EAAQ,sBAAyB,WACxC,KAAK,qBAAuBA,EAAQ,sBAEpC,OAAOA,EAAQ,iBAAoB,YACnC,KAAK,gBAAkBA,EAAQ,iBAC/B,OAAOA,EAAQ,aAAgB,YAC/B,KAAK,YAAcA,EAAQ,aAE3B,OAAOA,EAAQ,gBAAmB,WAClC,KAAK,eAAiBA,EAAQ,gBAE9B,OAAOA,EAAQ,gBAAmB,WAClC,KAAK,eAAiBA,EAAQ,gBAE9B,OAAOA,EAAQ,QAAW,WAAU,KAAK,OAASA,EAAQ,QAC1D,OAAOA,EAAQ,YAAe,WAC9B,KAAK,WAAaA,EAAQ,YAC1B,OAAOA,EAAQ,aAAgB,YAC/B,KAAK,YAAcA,EAAQ,aAC3B,OAAOA,EAAQ,eAAkB,WACjC,KAAK,cAAgBA,EAAQ,eAC7BA,EAAQ,mBACR,KAAK,iBAAmBA,EAAQ,kBAChCA,EAAQ,mBACR,KAAK,iBAAmBA,EAAQ,kBAChCA,EAAQ,iBACR,KAAK,eAAiBA,EAAQ,gBAC9B,OAAOA,EAAQ,SAAa,KAC5B,KAAK,qBAAqBA,EAAQ,QAAQ,EAG1C,OAAOA,EAAQ,oBAAuB,UACtCA,EAAQ,mBAAqB,GAE7B,QAAQ,QAAQ,EAAE,KAAK,IACnB,KAAK,gBAAgBA,EAAQ,kBAAkB,CACnD,CAER,CAGA,SAASE,EAAqB,CAE1B,GADA,KAAK,MAAQA,EACT,CAACA,EAAO,CACR,KAAK,mBAAmB,eAAe,EACvC,MACJ,CACI,KAAK,iBAAmB,KAAK,qBACxB,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,CAElD,CAGA,wBAAwBA,EAAqB,CACzC,KAAK,qBAAuBA,CAChC,CAGA,UAAUC,EAAsB,CAC5B,KAAK,OAASA,CAClB,CAGA,cAAcC,EAAsB,CAChC,KAAK,WAAaA,CACtB,CAGA,mBAAmBC,EAAsB,CACrC,KAAK,gBAAkBA,CAC3B,CAEA,eAAeC,EAAwB,CACnC,KAAK,YAAcA,CACvB,CAEA,oBAAoBC,EAAyC,CACzD,KAAK,yBAAyB,IAAIA,CAAQ,CAC9C,CAEA,uBAAuBA,EAAyC,CAC5D,KAAK,yBAAyB,OAAOA,CAAQ,CACjD,CAEA,0BAA0BA,EAAwC,CAC9D,KAAK,wBAAwB,IAAIA,CAAQ,CAC7C,CAEA,6BAA6BA,EAAwC,CACjE,KAAK,wBAAwB,OAAOA,CAAQ,CAChD,CAEA,yBACIC,EACAD,EACI,CACJ,MAAME,EAAM,OAAOD,CAAS,EAAE,KAAK,EAC9BC,IAGA,KAAK,uBAAuB,IAAIA,CAAG,GACpC,KAAK,uBAAuB,IAAIA,EAAK,IAAI,GAAK,EAElD,KAAK,uBAAuB,IAAIA,CAAG,EAAG,IAAIF,CAAQ,EACtD,CAEA,4BACIC,EACAD,EACI,CACJ,MAAME,EAAM,OAAOD,CAAS,EAAE,KAAK,EACnC,GAAI,CAACC,EACD,OAEJ,MAAMC,EAAY,KAAK,uBAAuB,IAAID,CAAG,EAChDC,IAGLA,EAAU,OAAOH,CAAQ,EACrBG,EAAU,OAAS,GACnB,KAAK,uBAAuB,OAAOD,CAAG,EAE9C,CAEA,MAAM,iBAAiC,CACnC,GAAI,CAAC,KAAK,gBAAiB,CACvB,KAAK,kBAAkB,WAAY,mBAAmB,EACtD,MACJ,CAEA,GAAI,CAAC,KAAK,MACN,MAAM,IAAI,MACN,uDACJ,EAGJ,GAAI,OAAO,UAAc,IACrB,MAAM,IAAI,MAAM,iDAAiD,EAGrE,GACI,KAAK,gBACL,KAAK,eAAe,aAAe,UAAU,KAE7C,OAGJ,GACI,KAAK,gBACL,KAAK,eAAe,aAAe,UAAU,YAC7C,KAAK,uBAEL,OAAO,KAAK,uBAGhB,KAAK,4BAA4B,EACjC,KAAK,wBAA0B,KAAK,sBACpC,KAAK,kBAAkB,aAAc,mBAAmB,EAExD,MAAME,EAAS,IAAI,UAAU,KAAK,iBAAiB,CAAC,EACpD,YAAK,eAAiBA,EAEtB,KAAK,uBAAyB,IAAI,QAAc,CAACC,EAASC,IAAW,CACjE,IAAIC,EAAU,GAEd,MAAMC,EAAkB,IAAM,CACtBD,IAGJA,EAAU,GACV,KAAK,uBAAyB,KAC9BF,EAAQ,EACZ,EAEMI,EAAkBC,GAAiB,CACjCH,IAGJA,EAAU,GACV,KAAK,uBAAyB,KAC9BD,EAAOI,CAAK,EAChB,EAEAN,EAAO,iBAAiB,OAAQ,IAAM,CAClC,KAAK,kBAAkB,OAAQ,aAAa,EAC5CI,EAAgB,CACpB,CAAC,EAEDJ,EAAO,iBAAiB,UAAYO,GAAU,CAC1C,KAAK,sBAAsBA,EAAM,IAAI,CACzC,CAAC,EAEDP,EAAO,iBAAiB,QAAS,IAAM,CACnC,KAAK,kBACD,SACA,eACA,IAAI,MAAM,wBAAwB,CACtC,CACJ,CAAC,EAEDA,EAAO,iBAAiB,QAAUO,GAAU,CACpC,KAAK,iBAAmBP,IACxB,KAAK,eAAiB,MAG1B,MAAMQ,EAASD,EAAM,QAAU,gBACzBD,EAAQ,IAAI,MACd,2BAA2BC,EAAM,IAAI,GAAGA,EAAM,OAAS,KAAKA,EAAM,MAAM,GAAK,EAAE,IACnF,EAEA,KAAK,kBAAkB,SAAUC,EAAQF,CAAK,EACzCH,GACDE,EAAeC,CAAK,EAIpB,KAAK,yBACL,KAAK,iBACL,KAAK,uBACL,KAAK,OAEL,KAAK,0BAA0BE,CAAM,CAE7C,CAAC,CACL,CAAC,EAEM,KAAK,sBAChB,CAEA,mBAAmBA,EAAS,oBAA2B,CAInD,GAHA,KAAK,wBAA0B,GAC/B,KAAK,4BAA4B,EAE7B,KAAK,eAAgB,CACrB,MAAMR,EAAS,KAAK,eACpB,KAAK,eAAiB,KACtB,GAAI,EAEIA,EAAO,aAAe,UAAU,MAChCA,EAAO,aAAe,UAAU,aAEhCA,EAAO,MAAM,IAAMQ,CAAM,CAEjC,MAAQ,CAER,CACJ,CAEA,KAAK,uBAAyB,KAC9B,KAAK,kBACD,KAAK,gBAAkB,OAAS,WAChCA,CACJ,CACJ,CAEA,aAAaC,EAA8D,CACvE,MACI,CAAC,KAAK,gBACN,KAAK,eAAe,aAAe,UAAU,KAEtC,IAGX,KAAK,eAAe,KAAK,KAAK,UAAUA,CAAO,CAAC,EACzC,GACX,CAEA,kBAAkBC,EAAkC,CAChD,OAAO,KAAK,aAAa,CACrB,KAAM,YACN,QAAS,UACT,MAAO,oBACP,KAAM,CAAE,cAAAA,CAAc,CAC1B,CAAC,CACL,CAEA,oBAAoBA,EAAkC,CAClD,OAAO,KAAK,aAAa,CACrB,KAAM,cACN,QAAS,UACT,MAAO,sBACP,KAAM,CAAE,cAAAA,CAAc,CAC1B,CAAC,CACL,CASA,gBAAgBC,EAAqB,IAAS,IAAY,CACtD,KAAK,eAAe,EACpB,MAAMC,EAAO,IAAY,CACjB,KAAK,oBACT,KAAK,mBACD,KAAK,cAAgB,KAAK,cAAc,EAAI,QAAQ,QAAQ,GAE3D,KAAK,IAAM,CACR,KAAK,iBAAiB,EAAI,CAC9B,CAAC,EACA,MAAM,IAAM,CACT,KAAK,iBAAiB,EAAK,CAC/B,CAAC,EACA,QAAQ,IAAM,CACX,KAAK,kBAAoB,IAC7B,CAAC,EACT,EACAA,EAAK,EACL,KAAK,gBAAkB,YAAYA,EAAMD,CAAU,CACvD,CAGA,gBAAuB,CACf,KAAK,kBAAoB,OACzB,cAAc,KAAK,eAAe,EAClC,KAAK,gBAAkB,MAE3B,KAAK,kBAAoB,IAC7B,CAKA,oBACIE,EACAC,EACAC,EAGI,CACJ,KAAK,kBAAkB,EACvB,KAAK,oBAAsBF,EAC3B,MAAMG,EAAU,KAAK,KAAKF,EAAY,KAAK,eAAiB,IAAM,CAAC,EACnE,KAAK,aAAe,WAAW,SAAY,CACvC,GAAK,KAAK,oBACV,GAAI,CACA,MAAMG,EAAS,MAAMF,EAAU,KAAK,mBAAmB,EACvD,KAAK,mBAAmBE,EAAO,aAAcA,EAAO,UAAU,EAC9D,KAAK,oBACD,KAAK,oBACLA,EAAO,WACPF,CACJ,CACJ,OAASG,EAAK,CACV,KAAK,kBAAkB,EACvB,KAAK,mBACDA,aAAe,MAAQA,EAAM,IAAI,MAAM,OAAOA,CAAG,CAAC,CACtD,CACJ,CACJ,EAAGF,CAAO,CACd,CAGA,mBAA0B,CAClB,KAAK,eAAiB,OACtB,aAAa,KAAK,YAAY,EAC9B,KAAK,aAAe,KAE5B,CAMA,iBAAwB,CACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAsB,IAC/B,CAEA,qBAAqB3B,EAAiD,CAClE,MAAM8B,EACF,OAAO9B,GAAY,UACb,CAAE,QAASA,CAAQ,EAClBA,GAAW,CAAC,EAavB,GAXA,KAAK,gBAAkB8B,EAAW,SAAW,GAC7C,KAAK,aACD,OAAOA,EAAW,MAAQhC,CAAqB,EAAE,KAAK,GACtDA,EACJ,KAAK,oBAAsBgC,EAAW,aAAe,GACrD,KAAK,sBAAwBA,EAAW,eAAiB,GACzD,KAAK,yBAA2B,KAAK,IACjC,IACAA,EAAW,kBAAoB,GACnC,EAEI,CAAC,KAAK,gBAAiB,CACvB,KAAK,mBAAmB,mBAAmB,EAC3C,MACJ,CAEA,KAAK,kBAAkB,OAAQ,kBAAkB,EAC7C,KAAK,OAAS,KAAK,qBACd,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,CAElD,CAEA,kBAA2B,CAGvB,MAAMC,EADF,KAAK,SAAWrC,EAAQ,wBAAwB,GAAK,KAGpD,OAAO,OAAW,IAAc,OAAO,SAAS,OAAS,IAE9D,GAAI,CAACqC,EACD,MAAM,IAAI,MAAM,uCAAuC,EAG3D,MAAMC,EAAM,IAAI,IAAI,KAAK,aAAcD,CAAO,EAC9C,OAAAC,EAAI,SAAWA,EAAI,WAAa,SAAW,OAAS,MACpDA,EAAI,aAAa,IAAI,eAAgB,KAAK,KAAK,EACxCA,EAAI,SAAS,CACxB,CAEA,sBAAsBC,EAAwB,CAC1C,GAAI,OAAOA,GAAY,SACnB,OAGJ,IAAIC,EACJ,GAAI,CACAA,EAAW,KAAK,MAAMD,CAAO,CACjC,MAAQ,CACJ,MACJ,CAEA,UAAW1B,KAAY,KAAK,yBACxBA,EAAS2B,CAAQ,EAGrB,MAAMxB,EAAY,KAAK,uBAAuB,IAAIwB,EAAS,KAAK,EAChE,GAAIxB,EACA,UAAWH,KAAYG,EACnBH,EAAS2B,CAAQ,CAG7B,CAEA,0BAA0Bf,EAAsB,CAC5C,KAAK,4BAA4B,EACjC,KAAK,uBAAyB,WAAW,IAAM,CAC3C,KAAK,uBAAyB,KAC1B,GAAC,KAAK,iBAAmB,CAAC,KAAK,SAGnC,KAAK,kBAAkB,aAAc,GAAGA,CAAM,YAAY,EACrD,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,EAC9C,EAAG,KAAK,wBAAwB,CACpC,CAEA,6BAAoC,CAC5B,KAAK,yBAA2B,OAChC,aAAa,KAAK,sBAAsB,EACxC,KAAK,uBAAyB,KAEtC,CAEA,kBACIgB,EACAhB,EACAF,EACI,CACJ,MAAMmB,EAAiB,KAAK,eAC5B,GACI,EAAAA,IAAmBD,GACnB,OAAOhB,EAAW,KAClB,OAAOF,EAAU,KAKrB,MAAK,eAAiBkB,EACtB,UAAW5B,KAAY,KAAK,wBACxBA,EAAS,CACL,OAAA4B,EACA,eAAAC,EACA,GAAIjB,EAAS,CAAE,OAAAA,CAAO,EAAI,CAAC,EAC3B,GAAIF,EAAQ,CAAE,MAAAA,CAAM,EAAI,CAAC,CAC7B,CAAC,EAET,CAEA,iBAAwB,CACpB,GAAI,SAAO,SAAa,KACxB,WAAWoB,KAAS,SAAS,OAAO,MAAM,GAAG,EAAG,CAC5C,MAAMC,EAAMD,EAAM,QAAQ,GAAG,EAC7B,GAAI,EAAAC,EAAM,IACND,EAAM,UAAU,EAAGC,CAAG,EAAE,KAAK,IAAM,KAAK,eAAgB,CACxD,KAAK,YAAc,CAAC,CAACD,EAAM,UAAUC,EAAM,CAAC,EAAE,KAAK,EACnD,MACJ,CACJ,CACA,KAAK,YAAc,GACvB,CAUA,gBACIC,EACAC,EAAc,mBACdC,EAAmB,GAClB,CACD,MAAMhC,EAAMd,EACR,KAAK,WACL,KAAK,OAAS,KAAK,oBACvB,EACA,OAAOC,EAAoB2C,EAAMC,EAAaC,EAAkBhC,CAAG,CACvE,CAIA,IAAI,SAA0B,CAC1B,MAAO,CACH,QAAS,KAAK,QACd,MAAO,KAAK,MACZ,qBAAsB,KAAK,qBAC3B,OAAQ,KAAK,OACb,WAAY,KAAK,WACjB,gBAAiB,KAAK,gBACtB,YAAa,KAAK,YAClB,eAAgB,KAAK,eACrB,eAAgB,KAAK,eACrB,kBAAmB,KAAK,YAAc,KAAK,cAAgB,KAC3D,cAAgBP,GAAU,CACtB,KAAK,MAAQA,CACjB,CACJ,CACJ,CAGA,eAAewC,EAAmC,CAC9C,OAAO,QAAQ,QAAQ,CAC3B,CAUA,IAAI,MAAO,CAEP,MAAMC,EAAO,KACb,MAAO,CACH,IACIC,EACAC,EAAW,GACXC,EACU,CACV,OAAOH,EACF,eAAeE,CAAQ,EACvB,KAAK,IACFhD,EACI8C,EAAK,QACL,MACAC,EACA,OACAC,EACAC,EACA,EACJ,CACJ,CACR,EACA,KACIF,EACAL,EACAM,EAAW,GACXC,EACU,CACV,OAAOH,EACF,eAAeE,CAAQ,EACvB,KAAK,IACFhD,EACI8C,EAAK,QACL,OACAC,EACAL,EACAM,EACAC,EACA,EACJ,CACJ,CACR,EACA,IACIF,EACAL,EACAM,EAAW,GACXC,EACU,CACV,OAAOH,EACF,eAAeE,CAAQ,EACvB,KAAK,IACFhD,EACI8C,EAAK,QACL,MACAC,EACAL,EACAM,EACAC,EACA,EACJ,CACJ,CACR,EACA,MACIF,EACAL,EACAM,EAAW,GACXC,EACU,CACV,OAAOH,EACF,eAAeE,CAAQ,EACvB,KAAK,IACFhD,EACI8C,EAAK,QACL,QACAC,EACAL,EACAM,EACAC,EACA,EACJ,CACJ,CACR,EACA,OACIF,EACAL,EACAM,EAAW,GACXC,EACU,CACV,OAAOH,EACF,eAAeE,CAAQ,EACvB,KAAK,IACFhD,EACI8C,EAAK,QACL,SACAC,EACAL,EACAM,EACAC,EACA,EACJ,CACJ,CACR,CACJ,CACJ,CAEA,QACIC,EACAH,EACAL,EACAM,EAAW,GACXC,EACU,CACV,OAAO,KAAK,eAAeD,CAAQ,EAAE,KAAK,IACtChD,EACI,KAAK,QACLkD,EACAH,EACAL,EACAM,EACAC,EACA,EACJ,CACJ,CACJ,CAGA,MAAM,cACFC,EACAH,EACAL,EACAM,EAAW,GACS,CACpB,MAAM,KAAK,eAAeA,CAAQ,EAElC,MAAMG,EAAkC,CACpC,eAAgB,kBACpB,EACIH,GAAY,KAAK,QACjBG,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUL,EAAM,CACzC,OAAAG,EACA,QAAAC,EACA,GAAIT,GAAQ,KAAO,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAE,EAAI,CAAC,EACrD,YAAa,SACjB,CAAC,EAED,GAAI,CAACU,EAAI,GAAI,CACT,MAAMC,EAAO,MAAMD,EAAI,KAAK,EACtBpB,EAAM,IAAI,MAAM,QAAQoB,EAAI,MAAM,KAAKC,CAAI,EAAE,EACnD,MAACrB,EAA4B,OAASoB,EAAI,OACpCpB,CACV,CAEA,OAAOoB,EAAI,YAAY,CAC3B,CAGA,MAAM,YACFF,EACAH,EACAO,EACAN,EAAW,GACD,CACV,MAAMG,EAAkC,CAAC,EACrCH,GAAY,KAAK,QACjBG,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUL,EAAM,CACzC,OAAAG,EACA,QAAAC,EACA,KAAMG,EACN,YAAa,SACjB,CAAC,EAEKC,EAAQ,MAAMH,EAAI,KAAK,EAC7B,GAAI,CAACG,EAAK,GAAI,CACV,MAAMvB,EAAM,IAAI,MACZuB,EAAK,SAAW,4BAA4BH,EAAI,MAAM,GAC1D,EACA,MAACpB,EAA4B,OAASoB,EAAI,OACpCpB,CACV,CACA,OAAOuB,CACX,CAGA,MAAM,kBACFL,EACAH,EACAO,EACAN,EAAW,GACS,CACpB,MAAMG,EAAkC,CAAC,EACrCH,GAAY,KAAK,QACjBG,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUL,EAAM,CACzC,OAAAG,EACA,QAAAC,EACA,KAAMG,EACN,YAAa,SACjB,CAAC,EAED,GAAI,CAACF,EAAI,GAAI,CACT,MAAMC,EAAO,MAAMD,EAAI,KAAK,EACtBpB,EAAM,IAAI,MAAM,QAAQoB,EAAI,MAAM,KAAKC,CAAI,EAAE,EACnD,MAACrB,EAA4B,OAASoB,EAAI,OACpCpB,CACV,CAEA,OAAOoB,EAAI,YAAY,CAC3B,CACJ",
+  "names": ["readEnv", "derivePacketKey", "parseRequestBody", "entityRequest", "REALTIME_DEFAULT_PATH", "EntityServerClientBase", "options", "envBaseUrl", "token", "apiKey", "secret", "value", "enabled", "listener", "eventName", "key", "listeners", "socket", "resolve", "reject", "settled", "finalizeResolve", "finalizeReject", "error", "event", "reason", "message", "subscriptions", "intervalMs", "tick", "refreshToken", "expiresIn", "refreshFn", "delayMs", "result", "err", "normalized", "baseUrl", "url", "payload", "envelope", "status", "previousStatus", "chunk", "idx", "body", "contentType", "requireEncrypted", "_withAuth", "self", "path", "withAuth", "extraHeaders", "method", "headers", "res", "text", "form", "data"]
 }

package/dist/client/hmac.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/client/hmac.ts"],
-  "sourcesContent": ["// @ts-ignore\nimport { sha256 } from \"@noble/hashes/sha2\";\n// @ts-ignore\nimport { hmac } from \"@noble/hashes/hmac\";\n\n/**\n * HMAC-SHA256 \uC11C\uBA85 \uD5E4\uB354\uB97C \uC0DD\uC131\uD569\uB2C8\uB2E4.\n *\n * \uC11C\uBA85 \uB300\uC0C1: `METHOD|PATH|TIMESTAMP|NONCE|BODY`\n *\n * @returns `X-API-Key`, `X-Timestamp`, `X-Nonce`, `X-Signature` \uD5E4\uB354 \uAC1D\uCCB4\n */\nexport function buildHmacHeaders(\n    method: string,\n    path: string,\n    bodyBytes: Uint8Array,\n    apiKey: string,\n    hmacSecret: string,\n): Record<string, string> {\n    const timestamp = String(Math.floor(Date.now() / 1000));\n    const nonce = crypto.randomUUID();\n\n    const prefix = new TextEncoder().encode(\n        `${method}|${path}|${timestamp}|${nonce}|`,\n    );\n    const payload = new Uint8Array(prefix.length + bodyBytes.length);\n    payload.set(prefix, 0);\n    payload.set(bodyBytes, prefix.length);\n\n    const sig = hmac(sha256, new TextEncoder().encode(hmacSecret), payload);\n    const signature = [...sig]\n        .map((b) => b.toString(16).padStart(2, \"0\"))\n        .join(\"\");\n\n    return {\n        \"X-API-Key\": apiKey,\n        \"X-Timestamp\": timestamp,\n        \"X-Nonce\": nonce,\n        \"X-Signature\": signature,\n    };\n}\n"],
+  "sourcesContent": ["// @ts-ignore\r\nimport { sha256 } from \"@noble/hashes/sha2\";\r\n// @ts-ignore\r\nimport { hmac } from \"@noble/hashes/hmac\";\r\n\r\n/**\r\n * HMAC-SHA256 \uC11C\uBA85 \uD5E4\uB354\uB97C \uC0DD\uC131\uD569\uB2C8\uB2E4.\r\n *\r\n * \uC11C\uBA85 \uB300\uC0C1: `METHOD|PATH|TIMESTAMP|NONCE|BODY`\r\n *\r\n * @returns `X-API-Key`, `X-Timestamp`, `X-Nonce`, `X-Signature` \uD5E4\uB354 \uAC1D\uCCB4\r\n */\r\nexport function buildHmacHeaders(\r\n    method: string,\r\n    path: string,\r\n    bodyBytes: Uint8Array,\r\n    apiKey: string,\r\n    hmacSecret: string,\r\n): Record<string, string> {\r\n    const timestamp = String(Math.floor(Date.now() / 1000));\r\n    const nonce = crypto.randomUUID();\r\n\r\n    const prefix = new TextEncoder().encode(\r\n        `${method}|${path}|${timestamp}|${nonce}|`,\r\n    );\r\n    const payload = new Uint8Array(prefix.length + bodyBytes.length);\r\n    payload.set(prefix, 0);\r\n    payload.set(bodyBytes, prefix.length);\r\n\r\n    const sig = hmac(sha256, new TextEncoder().encode(hmacSecret), payload);\r\n    const signature = [...sig]\r\n        .map((b) => b.toString(16).padStart(2, \"0\"))\r\n        .join(\"\");\r\n\r\n    return {\r\n        \"X-API-Key\": apiKey,\r\n        \"X-Timestamp\": timestamp,\r\n        \"X-Nonce\": nonce,\r\n        \"X-Signature\": signature,\r\n    };\r\n}\r\n"],
   "mappings": "AACA,OAAS,UAAAA,MAAc,qBAEvB,OAAS,QAAAC,MAAY,qBASd,SAASC,EACZC,EACAC,EACAC,EACAC,EACAC,EACsB,CACtB,MAAMC,EAAY,OAAO,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,CAAC,EAChDC,EAAQ,OAAO,WAAW,EAE1BC,EAAS,IAAI,YAAY,EAAE,OAC7B,GAAGP,CAAM,IAAIC,CAAI,IAAII,CAAS,IAAIC,CAAK,GAC3C,EACME,EAAU,IAAI,WAAWD,EAAO,OAASL,EAAU,MAAM,EAC/DM,EAAQ,IAAID,EAAQ,CAAC,EACrBC,EAAQ,IAAIN,EAAWK,EAAO,MAAM,EAGpC,MAAME,EAAY,CAAC,GADPX,EAAKD,EAAQ,IAAI,YAAY,EAAE,OAAOO,CAAU,EAAGI,CAAO,CAC7C,EACpB,IAAKE,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAC1C,KAAK,EAAE,EAEZ,MAAO,CACH,YAAaP,EACb,cAAeE,EACf,UAAWC,EACX,cAAeG,CACnB,CACJ",
   "names": ["sha256", "hmac", "buildHmacHeaders", "method", "path", "bodyBytes", "apiKey", "hmacSecret", "timestamp", "nonce", "prefix", "payload", "signature", "b"]
 }

package/dist/client/packet.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/client/packet.ts"],
-  "sourcesContent": ["import {\n    derivePacketKey as derivePacketKeyCore,\n    encryptPacket as encryptPacketCore,\n    decryptPacket as decryptPacketCore,\n} from \"../packet.js\";\n\n/**\n * \uD328\uD0B7 \uC554\uD638\uD654 \uD0A4\uB97C \uC720\uB3C4\uD569\uB2C8\uB2E4.\n * - HMAC \uBAA8\uB4DC (`hmacSecret` \uC720\uD6A8 \uC2DC): HKDF-SHA256(hmac_secret, \"entity-server:packet-encryption\")\n * - JWT  \uBAA8\uB4DC: HKDF-SHA256(jwt_token, \"entity-server:packet-encryption\")\n */\nexport function derivePacketKey(hmacSecret: string, token: string): Uint8Array {\n    return derivePacketKeyCore(hmacSecret || token);\n}\n\n/**\n * \uD3C9\uBB38 \uBC14\uC774\uD2B8\uB97C XChaCha20-Poly1305\uB85C \uC554\uD638\uD654\uD569\uB2C8\uB2E4.\n * \uD3EC\uB9F7: [random_magic:K][random_nonce:24][ciphertext+tag]\n * K = 2 + key[31] % 14 (\uD328\uD0B7 \uD0A4\uC5D0\uC11C \uC790\uB3D9 \uD30C\uC0DD)\n */\nexport function encryptPacket(\n    plaintext: Uint8Array,\n    key: Uint8Array,\n): Uint8Array {\n    return encryptPacketCore(plaintext, key);\n}\n\n/**\n * XChaCha20-Poly1305 \uD328\uD0B7\uC744 \uBCF5\uD638\uD654\uD574 JSON \uAC1D\uCCB4\uB85C \uBCC0\uD658\uD569\uB2C8\uB2E4.\n * \uD3EC\uB9F7: [magic:K][nonce:24][ciphertext+tag]\n * K = 2 + key[31] % 14 (\uD328\uD0B7 \uD0A4\uC5D0\uC11C \uC790\uB3D9 \uD30C\uC0DD)\n */\nexport function decryptPacket<T>(buffer: ArrayBuffer, key: Uint8Array): T {\n    const plaintext = decryptPacketCore(buffer, key);\n    return JSON.parse(new TextDecoder().decode(plaintext)) as T;\n}\n\n/**\n * \uC694\uCCAD \uBC14\uB514\uB97C \uD30C\uC2F1\uD569\uB2C8\uB2E4. `application/octet-stream`\uC774\uBA74 \uBCF5\uD638\uD654, \uADF8 \uC678\uB294 JSON \uD30C\uC2F1\uD569\uB2C8\uB2E4.\n *\n * @param requireEncrypted `true`\uC774\uBA74 \uC554\uD638\uD654\uB41C \uC694\uCCAD\uB9CC \uD5C8\uC6A9\uD569\uB2C8\uB2E4.\n */\nexport function parseRequestBody<T>(\n    body: ArrayBuffer | Uint8Array | string | T | null | undefined,\n    contentType: string,\n    requireEncrypted: boolean,\n    key: Uint8Array,\n): T {\n    const isEncrypted = contentType\n        .toLowerCase()\n        .includes(\"application/octet-stream\");\n\n    if (requireEncrypted && !isEncrypted) {\n        throw new Error(\n            \"Encrypted request required: Content-Type must be application/octet-stream\",\n        );\n    }\n\n    if (isEncrypted) {\n        if (body == null) throw new Error(\"Encrypted request body is empty\");\n        if (body instanceof ArrayBuffer) return decryptPacket<T>(body, key);\n        if (body instanceof Uint8Array) {\n            const sliced = body.buffer.slice(\n                body.byteOffset,\n                body.byteOffset + body.byteLength,\n            );\n            return decryptPacket<T>(sliced as ArrayBuffer, key);\n        }\n        throw new Error(\n            \"Encrypted request body must be ArrayBuffer or Uint8Array\",\n        );\n    }\n\n    if (body == null || body === \"\") return {} as T;\n    if (typeof body === \"string\") return JSON.parse(body) as T;\n    return body as T;\n}\n"],
+  "sourcesContent": ["import {\r\n    derivePacketKey as derivePacketKeyCore,\r\n    encryptPacket as encryptPacketCore,\r\n    decryptPacket as decryptPacketCore,\r\n} from \"../packet.js\";\r\n\r\n/**\r\n * \uD328\uD0B7 \uC554\uD638\uD654 \uD0A4\uB97C \uC720\uB3C4\uD569\uB2C8\uB2E4.\r\n * - HMAC \uBAA8\uB4DC (`hmacSecret` \uC720\uD6A8 \uC2DC): HKDF-SHA256(hmac_secret, \"entity-server:packet-encryption\")\r\n * - JWT  \uBAA8\uB4DC: HKDF-SHA256(jwt_token, \"entity-server:packet-encryption\")\r\n */\r\nexport function derivePacketKey(hmacSecret: string, token: string): Uint8Array {\r\n    return derivePacketKeyCore(hmacSecret || token);\r\n}\r\n\r\n/**\r\n * \uD3C9\uBB38 \uBC14\uC774\uD2B8\uB97C XChaCha20-Poly1305\uB85C \uC554\uD638\uD654\uD569\uB2C8\uB2E4.\r\n * \uD3EC\uB9F7: [random_magic:K][random_nonce:24][ciphertext+tag]\r\n * K = 2 + key[31] % 14 (\uD328\uD0B7 \uD0A4\uC5D0\uC11C \uC790\uB3D9 \uD30C\uC0DD)\r\n */\r\nexport function encryptPacket(\r\n    plaintext: Uint8Array,\r\n    key: Uint8Array,\r\n): Uint8Array {\r\n    return encryptPacketCore(plaintext, key);\r\n}\r\n\r\n/**\r\n * XChaCha20-Poly1305 \uD328\uD0B7\uC744 \uBCF5\uD638\uD654\uD574 JSON \uAC1D\uCCB4\uB85C \uBCC0\uD658\uD569\uB2C8\uB2E4.\r\n * \uD3EC\uB9F7: [magic:K][nonce:24][ciphertext+tag]\r\n * K = 2 + key[31] % 14 (\uD328\uD0B7 \uD0A4\uC5D0\uC11C \uC790\uB3D9 \uD30C\uC0DD)\r\n */\r\nexport function decryptPacket<T>(buffer: ArrayBuffer, key: Uint8Array): T {\r\n    const plaintext = decryptPacketCore(buffer, key);\r\n    return JSON.parse(new TextDecoder().decode(plaintext)) as T;\r\n}\r\n\r\n/**\r\n * \uC694\uCCAD \uBC14\uB514\uB97C \uD30C\uC2F1\uD569\uB2C8\uB2E4. `application/octet-stream`\uC774\uBA74 \uBCF5\uD638\uD654, \uADF8 \uC678\uB294 JSON \uD30C\uC2F1\uD569\uB2C8\uB2E4.\r\n *\r\n * @param requireEncrypted `true`\uC774\uBA74 \uC554\uD638\uD654\uB41C \uC694\uCCAD\uB9CC \uD5C8\uC6A9\uD569\uB2C8\uB2E4.\r\n */\r\nexport function parseRequestBody<T>(\r\n    body: ArrayBuffer | Uint8Array | string | T | null | undefined,\r\n    contentType: string,\r\n    requireEncrypted: boolean,\r\n    key: Uint8Array,\r\n): T {\r\n    const isEncrypted = contentType\r\n        .toLowerCase()\r\n        .includes(\"application/octet-stream\");\r\n\r\n    if (requireEncrypted && !isEncrypted) {\r\n        throw new Error(\r\n            \"Encrypted request required: Content-Type must be application/octet-stream\",\r\n        );\r\n    }\r\n\r\n    if (isEncrypted) {\r\n        if (body == null) throw new Error(\"Encrypted request body is empty\");\r\n        if (body instanceof ArrayBuffer) return decryptPacket<T>(body, key);\r\n        if (body instanceof Uint8Array) {\r\n            const sliced = body.buffer.slice(\r\n                body.byteOffset,\r\n                body.byteOffset + body.byteLength,\r\n            );\r\n            return decryptPacket<T>(sliced as ArrayBuffer, key);\r\n        }\r\n        throw new Error(\r\n            \"Encrypted request body must be ArrayBuffer or Uint8Array\",\r\n        );\r\n    }\r\n\r\n    if (body == null || body === \"\") return {} as T;\r\n    if (typeof body === \"string\") return JSON.parse(body) as T;\r\n    return body as T;\r\n}\r\n"],
   "mappings": "AAAA,OACI,mBAAmBA,EACnB,iBAAiBC,EACjB,iBAAiBC,MACd,eAOA,SAASC,EAAgBC,EAAoBC,EAA2B,CAC3E,OAAOL,EAAoBI,GAAcC,CAAK,CAClD,CAOO,SAASC,EACZC,EACAC,EACU,CACV,OAAOP,EAAkBM,EAAWC,CAAG,CAC3C,CAOO,SAASC,EAAiBC,EAAqBF,EAAoB,CACtE,MAAMD,EAAYL,EAAkBQ,EAAQF,CAAG,EAC/C,OAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAOD,CAAS,CAAC,CACzD,CAOO,SAASI,EACZC,EACAC,EACAC,EACAN,EACC,CACD,MAAMO,EAAcF,EACf,YAAY,EACZ,SAAS,0BAA0B,EAExC,GAAIC,GAAoB,CAACC,EACrB,MAAM,IAAI,MACN,2EACJ,EAGJ,GAAIA,EAAa,CACb,GAAIH,GAAQ,KAAM,MAAM,IAAI,MAAM,iCAAiC,EACnE,GAAIA,aAAgB,YAAa,OAAOH,EAAiBG,EAAMJ,CAAG,EAClE,GAAII,aAAgB,WAAY,CAC5B,MAAMI,EAASJ,EAAK,OAAO,MACvBA,EAAK,WACLA,EAAK,WAAaA,EAAK,UAC3B,EACA,OAAOH,EAAiBO,EAAuBR,CAAG,CACtD,CACA,MAAM,IAAI,MACN,0DACJ,CACJ,CAEA,OAAII,GAAQ,MAAQA,IAAS,GAAW,CAAC,EACrC,OAAOA,GAAS,SAAiB,KAAK,MAAMA,CAAI,EAC7CA,CACX",
   "names": ["derivePacketKeyCore", "encryptPacketCore", "decryptPacketCore", "derivePacketKey", "hmacSecret", "token", "encryptPacket", "plaintext", "key", "decryptPacket", "buffer", "parseRequestBody", "body", "contentType", "requireEncrypted", "isEncrypted", "sliced"]
 }