entity-client 1.0.25 → 1.0.27

package/dist/EntityAppServerApi.d.ts

@@ -11,6 +11,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -99,6 +100,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -190,6 +192,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -282,6 +285,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -376,6 +380,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -469,6 +474,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -564,6 +570,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -686,6 +693,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -777,6 +785,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -871,6 +880,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -964,6 +974,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -1058,6 +1069,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -1150,6 +1162,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -1242,6 +1255,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -1363,6 +1377,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -1460,6 +1475,7 @@ declare const EntityAppServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;

package/dist/EntityServerApi.d.ts

@@ -42,6 +42,7 @@ declare const EntityServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -132,6 +133,7 @@ declare const EntityServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -284,6 +286,7 @@ declare const EntityServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -380,6 +383,7 @@ declare const EntityServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -494,6 +498,7 @@ declare const EntityServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -643,6 +648,7 @@ declare const EntityServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -796,6 +802,7 @@ declare const EntityServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;
@@ -918,6 +925,7 @@ declare const EntityServerApi_base: {
         apiKey: string;
         hmacSecret: string;
         encryptRequests: boolean;
+        debugPlainSecret: string;
         csrfEnabled: boolean;
         csrfHeaderName: string;
         csrfCookieName: string;

package/dist/client/base.d.ts

@@ -8,6 +8,8 @@ export declare class EntityServerClientBase {
     apiKey: string;
     hmacSecret: string;
     encryptRequests: boolean;
+    /** dev 디버그 평문 시크릿. 설정 시 요청을 평문 전송하고 `X-Debug-Plain` 헤더를 보낸다. */
+    debugPlainSecret: string;
     csrfEnabled: boolean;
     csrfHeaderName: string;
     csrfCookieName: string;

package/dist/client/base.js

@@ -1,2 +1,2 @@
-import{readEnv as m}from"./utils.js";import{derivePacketKey as u,parseRequestBody as f}from"./packet.js";import{entityRequest as l}from"./request.js";const c="/v1/realtime";class y{baseUrl;token;anonymousPacketToken;apiKey;hmacSecret;encryptRequests;csrfEnabled;csrfHeaderName;csrfCookieName;csrfRefresher=null;requestAbortControllers=new Map;activeTxId=null;initialHealthFired=!1;keepSession;refreshBuffer;onTokenRefreshed;onSessionExpired;onHealthChange;sessionRefreshToken=null;refreshTimer=null;healthTickTimer=null;healthTickPromise=null;realtimeEnabled;realtimePath;realtimeAutoReconnect;realtimeReconnectDelayMs;realtimeStatus;realtimeSocket=null;realtimeConnectPromise=null;realtimeReconnectTimer=null;realtimeShouldReconnect=!1;realtimeMessageListeners=new Set;realtimeStatusListeners=new Set;realtimeEventListeners=new Map;constructor(e={}){const t=m("VITE_ENTITY_SERVER_URL");this.baseUrl=(e.baseUrl??t??"").replace(/\/$/,""),this.token=e.token??"",this.anonymousPacketToken=e.anonymousPacketToken??"",this.apiKey=e.apiKey??"",this.hmacSecret=e.hmacSecret??"",this.encryptRequests=e.encryptRequests??!1,this.csrfEnabled=e.csrfEnabled??!1,this.csrfHeaderName=e.csrfHeaderName??"x-csrf-token",this.csrfCookieName=e.csrfCookieName??"_csrf",this.keepSession=e.keepSession??!1,this.refreshBuffer=e.refreshBuffer??60,this.onTokenRefreshed=e.onTokenRefreshed,this.onSessionExpired=e.onSessionExpired,this.onHealthChange=e.onHealthChange,this.realtimeEnabled=!1,this.realtimePath=c,this.realtimeAutoReconnect=!0,this.realtimeReconnectDelayMs=3e3,this.realtimeStatus="idle",this.applyRealtimeOptions(e.realtime),typeof e.healthTickInterval=="number"&&e.healthTickInterval>0&&Promise.resolve().then(()=>this.startHealthTick(e.healthTickInterval,!1)),this.fireInitialHealth()}configure(e){typeof e.baseUrl=="string"&&(this.baseUrl=e.baseUrl.replace(/\/$/,"")),typeof e.token=="string"&&(this.token=e.token),typeof e.anonymousPacketToken=="string"&&(this.anonymousPacketToken=e.anonymousPacketToken),typeof e.encryptRequests=="boolean"&&(this.encryptRequests=e.encryptRequests),typeof e.csrfEnabled=="boolean"&&(this.csrfEnabled=e.csrfEnabled),typeof e.csrfHeaderName=="string"&&(this.csrfHeaderName=e.csrfHeaderName),typeof e.csrfCookieName=="string"&&(this.csrfCookieName=e.csrfCookieName),typeof e.apiKey=="string"&&(this.apiKey=e.apiKey),typeof e.hmacSecret=="string"&&(this.hmacSecret=e.hmacSecret),typeof e.keepSession=="boolean"&&(this.keepSession=e.keepSession),typeof e.refreshBuffer=="number"&&(this.refreshBuffer=e.refreshBuffer),e.onTokenRefreshed&&(this.onTokenRefreshed=e.onTokenRefreshed),e.onSessionExpired&&(this.onSessionExpired=e.onSessionExpired),e.onHealthChange&&(this.onHealthChange=e.onHealthChange),typeof e.realtime<"u"&&this.applyRealtimeOptions(e.realtime),typeof e.healthTickInterval=="number"&&e.healthTickInterval>0&&Promise.resolve().then(()=>this.startHealthTick(e.healthTickInterval,!1)),this.fireInitialHealth()}fireInitialHealth(){if(this.initialHealthFired||typeof document>"u"||!this.baseUrl)return;this.initialHealthFired=!0;const e=this;typeof e.checkHealth=="function"&&Promise.resolve().then(()=>e.checkHealth(!1).catch(()=>{}))}setToken(e){this.token=e,this.syncRealtimeWithToken()}setAccessTokenFromResponse(e){this.token=e,this.syncRealtimeWithToken()}syncRealtimeWithToken(){if(!this.token){this.disconnectRealtime("token_cleared");return}!this.realtimeEnabled||typeof WebSocket>"u"||this.connectRealtime().catch(()=>{})}setAnonymousPacketToken(e){this.anonymousPacketToken=e}setApiKey(e){this.apiKey=e}setHmacSecret(e){this.hmacSecret=e}setEncryptRequests(e){this.encryptRequests=e}setCsrfEnabled(e){this.csrfEnabled=e}addRealtimeListener(e){this.realtimeMessageListeners.add(e)}removeRealtimeListener(e){this.realtimeMessageListeners.delete(e)}addRealtimeStatusListener(e){this.realtimeStatusListeners.add(e)}removeRealtimeStatusListener(e){this.realtimeStatusListeners.delete(e)}addRealtimeEventListener(e,t){const i=String(e).trim();i&&(this.realtimeEventListeners.has(i)||this.realtimeEventListeners.set(i,new Set),this.realtimeEventListeners.get(i).add(t))}removeRealtimeEventListener(e,t){const i=String(e).trim();if(!i)return;const s=this.realtimeEventListeners.get(i);s&&(s.delete(t),s.size===0&&this.realtimeEventListeners.delete(i))}async connectRealtime(){if(!this.realtimeEnabled){this.setRealtimeStatus("disabled","realtime_disabled");return}if(!this.token)throw new Error("Cannot open realtime connection without access token.");if(typeof WebSocket>"u")throw new Error("WebSocket is not available in this environment.");if(this.realtimeSocket&&this.realtimeSocket.readyState===WebSocket.OPEN)return;if(this.realtimeSocket&&this.realtimeSocket.readyState===WebSocket.CONNECTING&&this.realtimeConnectPromise)return this.realtimeConnectPromise;this.clearRealtimeReconnectTimer(),this.realtimeShouldReconnect=this.realtimeAutoReconnect,this.setRealtimeStatus("connecting","connect_requested");const e=new WebSocket(this.buildRealtimeUrl());return this.realtimeSocket=e,this.realtimeConnectPromise=new Promise((t,i)=>{let s=!1;const r=()=>{s||(s=!0,this.realtimeConnectPromise=null,t())},n=a=>{s||(s=!0,this.realtimeConnectPromise=null,i(a))};e.addEventListener("open",()=>{this.setRealtimeStatus("open","socket_open"),r()}),e.addEventListener("message",a=>{this.handleRealtimeMessage(a.data)}),e.addEventListener("error",()=>{this.setRealtimeStatus("closed","socket_error",new Error("Realtime socket error."))}),e.addEventListener("close",a=>{this.realtimeSocket===e&&(this.realtimeSocket=null);const o=a.reason||"socket_closed",h=new Error(`Realtime socket closed (${a.code}${a.reason?`: ${a.reason}`:""}).`);this.setRealtimeStatus("closed",o,h),s||n(h),this.realtimeShouldReconnect&&this.realtimeEnabled&&this.realtimeAutoReconnect&&this.token&&this.scheduleRealtimeReconnect(o)})}),this.realtimeConnectPromise}disconnectRealtime(e="client_disconnect"){if(this.realtimeShouldReconnect=!1,this.clearRealtimeReconnectTimer(),this.realtimeSocket){const t=this.realtimeSocket;this.realtimeSocket=null;try{(t.readyState===WebSocket.OPEN||t.readyState===WebSocket.CONNECTING)&&t.close(1e3,e)}catch{}}this.realtimeConnectPromise=null,this.setRealtimeStatus(this.realtimeEnabled?"idle":"disabled",e)}sendRealtime(e){return!this.realtimeSocket||this.realtimeSocket.readyState!==WebSocket.OPEN?!1:(this.realtimeSocket.send(JSON.stringify(e)),!0)}subscribeRealtime(e){return this.sendRealtime({type:"subscribe",channel:"session",event:"session.subscribe",data:{subscriptions:e}})}unsubscribeRealtime(e){return this.sendRealtime({type:"unsubscribe",channel:"session",event:"session.unsubscribe",data:{subscriptions:e}})}startHealthTick(e=300*1e3,t=!0){this.stopHealthTick();const i=()=>{this.healthTickPromise||(this.healthTickPromise=(this.csrfRefresher?this.csrfRefresher():Promise.resolve()).then(()=>{this.onHealthChange?.(!0)}).catch(()=>{this.onHealthChange?.(!1)}).finally(()=>{this.healthTickPromise=null}))};t&&i(),this.healthTickTimer=setInterval(i,e)}stopHealthTick(){this.healthTickTimer!==null&&(clearInterval(this.healthTickTimer),this.healthTickTimer=null),this.healthTickPromise=null}scheduleKeepSession(e,t,i){this.clearRefreshTimer(),this.sessionRefreshToken=e;const s=Math.max((t-this.refreshBuffer)*1e3,0);this.refreshTimer=setTimeout(async()=>{if(this.sessionRefreshToken)try{const r=await i(this.sessionRefreshToken);this.onTokenRefreshed?.(r.access_token,r.expires_in),this.scheduleKeepSession(this.sessionRefreshToken,r.expires_in,i)}catch(r){this.clearRefreshTimer(),this.onSessionExpired?.(r instanceof Error?r:new Error(String(r)))}},s)}clearRefreshTimer(){this.refreshTimer!==null&&(clearTimeout(this.refreshTimer),this.refreshTimer=null)}stopKeepSession(){this.clearRefreshTimer(),this.sessionRefreshToken=null}applyRealtimeOptions(e){const t=typeof e=="boolean"?{enabled:e}:e??{};if(this.realtimeEnabled=t.enabled??!1,this.realtimePath=String(t.path??c).trim()||c,this.realtimeAutoReconnect=t.autoReconnect??!0,this.realtimeReconnectDelayMs=Math.max(250,t.reconnectDelayMs??3e3),!this.realtimeEnabled){this.disconnectRealtime("realtime_disabled");return}this.setRealtimeStatus("idle","realtime_enabled")}buildRealtimeUrl(){const e=this.baseUrl||m("VITE_ENTITY_SERVER_URL")||"",t=typeof window<"u"?window.location.origin:"",i=e||t;if(!i)throw new Error("Realtime connection requires baseUrl.");const s=new URL(i,t||void 0),r=s.pathname==="/"?"":s.pathname.replace(/\/+$/,""),n=`/${this.realtimePath.replace(/^\/+/,"")}`;return s.pathname=`${r}${n}`||n,s.search="",s.hash="",s.protocol=s.protocol==="https:"?"wss:":"ws:",s.searchParams.set("access_token",this.token),s.toString()}handleRealtimeMessage(e){if(typeof e!="string")return;let t;try{t=JSON.parse(e)}catch{return}for(const s of this.realtimeMessageListeners)s(t);const i=this.realtimeEventListeners.get(t.event);if(i)for(const s of i)s(t)}scheduleRealtimeReconnect(e){this.clearRealtimeReconnectTimer(),this.realtimeReconnectTimer=setTimeout(()=>{this.realtimeReconnectTimer=null,!(!this.realtimeEnabled||!this.token)&&(this.setRealtimeStatus("connecting",`${e}:reconnect`),this.connectRealtime().catch(()=>{}))},this.realtimeReconnectDelayMs)}clearRealtimeReconnectTimer(){this.realtimeReconnectTimer!==null&&(clearTimeout(this.realtimeReconnectTimer),this.realtimeReconnectTimer=null)}setRealtimeStatus(e,t,i){const s=this.realtimeStatus;if(!(s===e&&typeof t>"u"&&typeof i>"u")){this.realtimeStatus=e;for(const r of this.realtimeStatusListeners)r({status:e,previousStatus:s,...t?{reason:t}:{},...i?{error:i}:{}})}}applyCsrfHealth(){if(!(typeof document>"u")){for(const e of document.cookie.split(";")){const t=e.indexOf("=");if(!(t<0)&&e.substring(0,t).trim()===this.csrfCookieName){this.csrfEnabled=!!e.substring(t+1).trim();return}}this.csrfEnabled=!1}}readRequestBody(e,t="application/json",i=!1){const s=u(this.hmacSecret,this.token||this.anonymousPacketToken);return f(e,t,i,s)}get reqOpts(){return{baseUrl:this.baseUrl,token:this.token,anonymousPacketToken:this.anonymousPacketToken,apiKey:this.apiKey,hmacSecret:this.hmacSecret,encryptRequests:this.encryptRequests,csrfEnabled:this.csrfEnabled,csrfHeaderName:this.csrfHeaderName,csrfCookieName:this.csrfCookieName,refreshCsrfCookie:this.csrfEnabled?this.csrfRefresher:null,requestAbortControllers:this.requestAbortControllers,onAccessToken:e=>{this.setAccessTokenFromResponse(e)}}}prepareRequest(e){return Promise.resolve()}get http(){const e=this;return{get(t,i=!0,s,r){return e.prepareRequest(i).then(()=>l(e.reqOpts,"GET",t,void 0,i,s,r??!0))},post(t,i,s=!0,r,n){return e.prepareRequest(s).then(()=>l(e.reqOpts,"POST",t,i,s,r,n??!0))},put(t,i,s=!0,r,n){return e.prepareRequest(s).then(()=>l(e.reqOpts,"PUT",t,i,s,r,n??!0))},patch(t,i,s=!0,r,n){return e.prepareRequest(s).then(()=>l(e.reqOpts,"PATCH",t,i,s,r,n??!0))},delete(t,i,s=!0,r,n){return e.prepareRequest(s).then(()=>l(e.reqOpts,"DELETE",t,i,s,r,n??!0))}}}request(e,t,i,s=!0,r,n){return this.prepareRequest(s).then(()=>l(this.reqOpts,e,t,i,s,r,n??!0))}async requestBinary(e,t,i,s=!0){await this.prepareRequest(s);const r={"Content-Type":"application/json"};s&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,...i!=null?{body:JSON.stringify(i)}:{},credentials:"include"});if(!n.ok){const a=await n.text(),o=new Error(`HTTP ${n.status}: ${a}`);throw o.status=n.status,o}return n.arrayBuffer()}async requestForm(e,t,i,s=!0){const r={};s&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,body:i,credentials:"include"}),a=await n.json();if(!a.ok){const o=new Error(a.message??`EntityServer error (HTTP ${n.status})`);throw o.status=n.status,o}return a}async requestFormBinary(e,t,i,s=!0){const r={};s&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,body:i,credentials:"include"});if(!n.ok){const a=await n.text(),o=new Error(`HTTP ${n.status}: ${a}`);throw o.status=n.status,o}return n.arrayBuffer()}}export{y as EntityServerClientBase};
+import{readEnv as m}from"./utils.js";import{derivePacketKey as u,parseRequestBody as f}from"./packet.js";import{entityRequest as l}from"./request.js";const c="/v1/realtime";class T{baseUrl;token;anonymousPacketToken;apiKey;hmacSecret;encryptRequests;debugPlainSecret;csrfEnabled;csrfHeaderName;csrfCookieName;csrfRefresher=null;requestAbortControllers=new Map;activeTxId=null;initialHealthFired=!1;keepSession;refreshBuffer;onTokenRefreshed;onSessionExpired;onHealthChange;sessionRefreshToken=null;refreshTimer=null;healthTickTimer=null;healthTickPromise=null;realtimeEnabled;realtimePath;realtimeAutoReconnect;realtimeReconnectDelayMs;realtimeStatus;realtimeSocket=null;realtimeConnectPromise=null;realtimeReconnectTimer=null;realtimeShouldReconnect=!1;realtimeMessageListeners=new Set;realtimeStatusListeners=new Set;realtimeEventListeners=new Map;constructor(e={}){const t=m("VITE_ENTITY_SERVER_URL");this.baseUrl=(e.baseUrl??t??"").replace(/\/$/,""),this.token=e.token??"",this.anonymousPacketToken=e.anonymousPacketToken??"",this.apiKey=e.apiKey??"",this.hmacSecret=e.hmacSecret??"",this.encryptRequests=e.encryptRequests??!1,this.debugPlainSecret=e.debugPlainSecret??"",this.csrfEnabled=e.csrfEnabled??!1,this.csrfHeaderName=e.csrfHeaderName??"x-csrf-token",this.csrfCookieName=e.csrfCookieName??"_csrf",this.keepSession=e.keepSession??!1,this.refreshBuffer=e.refreshBuffer??60,this.onTokenRefreshed=e.onTokenRefreshed,this.onSessionExpired=e.onSessionExpired,this.onHealthChange=e.onHealthChange,this.realtimeEnabled=!1,this.realtimePath=c,this.realtimeAutoReconnect=!0,this.realtimeReconnectDelayMs=3e3,this.realtimeStatus="idle",this.applyRealtimeOptions(e.realtime),typeof e.healthTickInterval=="number"&&e.healthTickInterval>0&&Promise.resolve().then(()=>this.startHealthTick(e.healthTickInterval,!1)),this.fireInitialHealth()}configure(e){typeof e.baseUrl=="string"&&(this.baseUrl=e.baseUrl.replace(/\/$/,"")),typeof e.token=="string"&&(this.token=e.token),typeof e.anonymousPacketToken=="string"&&(this.anonymousPacketToken=e.anonymousPacketToken),typeof e.encryptRequests=="boolean"&&(this.encryptRequests=e.encryptRequests),typeof e.debugPlainSecret=="string"&&(this.debugPlainSecret=e.debugPlainSecret),typeof e.csrfEnabled=="boolean"&&(this.csrfEnabled=e.csrfEnabled),typeof e.csrfHeaderName=="string"&&(this.csrfHeaderName=e.csrfHeaderName),typeof e.csrfCookieName=="string"&&(this.csrfCookieName=e.csrfCookieName),typeof e.apiKey=="string"&&(this.apiKey=e.apiKey),typeof e.hmacSecret=="string"&&(this.hmacSecret=e.hmacSecret),typeof e.keepSession=="boolean"&&(this.keepSession=e.keepSession),typeof e.refreshBuffer=="number"&&(this.refreshBuffer=e.refreshBuffer),e.onTokenRefreshed&&(this.onTokenRefreshed=e.onTokenRefreshed),e.onSessionExpired&&(this.onSessionExpired=e.onSessionExpired),e.onHealthChange&&(this.onHealthChange=e.onHealthChange),typeof e.realtime<"u"&&this.applyRealtimeOptions(e.realtime),typeof e.healthTickInterval=="number"&&e.healthTickInterval>0&&Promise.resolve().then(()=>this.startHealthTick(e.healthTickInterval,!1)),this.fireInitialHealth()}fireInitialHealth(){if(this.initialHealthFired||typeof document>"u"||!this.baseUrl)return;this.initialHealthFired=!0;const e=this;typeof e.checkHealth=="function"&&Promise.resolve().then(()=>e.checkHealth(!1).catch(()=>{}))}setToken(e){this.token=e,this.syncRealtimeWithToken()}setAccessTokenFromResponse(e){this.token=e,this.syncRealtimeWithToken()}syncRealtimeWithToken(){if(!this.token){this.disconnectRealtime("token_cleared");return}!this.realtimeEnabled||typeof WebSocket>"u"||this.connectRealtime().catch(()=>{})}setAnonymousPacketToken(e){this.anonymousPacketToken=e}setApiKey(e){this.apiKey=e}setHmacSecret(e){this.hmacSecret=e}setEncryptRequests(e){this.encryptRequests=e}setCsrfEnabled(e){this.csrfEnabled=e}addRealtimeListener(e){this.realtimeMessageListeners.add(e)}removeRealtimeListener(e){this.realtimeMessageListeners.delete(e)}addRealtimeStatusListener(e){this.realtimeStatusListeners.add(e)}removeRealtimeStatusListener(e){this.realtimeStatusListeners.delete(e)}addRealtimeEventListener(e,t){const i=String(e).trim();i&&(this.realtimeEventListeners.has(i)||this.realtimeEventListeners.set(i,new Set),this.realtimeEventListeners.get(i).add(t))}removeRealtimeEventListener(e,t){const i=String(e).trim();if(!i)return;const s=this.realtimeEventListeners.get(i);s&&(s.delete(t),s.size===0&&this.realtimeEventListeners.delete(i))}async connectRealtime(){if(!this.realtimeEnabled){this.setRealtimeStatus("disabled","realtime_disabled");return}if(!this.token)throw new Error("Cannot open realtime connection without access token.");if(typeof WebSocket>"u")throw new Error("WebSocket is not available in this environment.");if(this.realtimeSocket&&this.realtimeSocket.readyState===WebSocket.OPEN)return;if(this.realtimeSocket&&this.realtimeSocket.readyState===WebSocket.CONNECTING&&this.realtimeConnectPromise)return this.realtimeConnectPromise;this.clearRealtimeReconnectTimer(),this.realtimeShouldReconnect=this.realtimeAutoReconnect,this.setRealtimeStatus("connecting","connect_requested");const e=new WebSocket(this.buildRealtimeUrl());return this.realtimeSocket=e,this.realtimeConnectPromise=new Promise((t,i)=>{let s=!1;const r=()=>{s||(s=!0,this.realtimeConnectPromise=null,t())},n=a=>{s||(s=!0,this.realtimeConnectPromise=null,i(a))};e.addEventListener("open",()=>{this.setRealtimeStatus("open","socket_open"),r()}),e.addEventListener("message",a=>{this.handleRealtimeMessage(a.data)}),e.addEventListener("error",()=>{this.setRealtimeStatus("closed","socket_error",new Error("Realtime socket error."))}),e.addEventListener("close",a=>{this.realtimeSocket===e&&(this.realtimeSocket=null);const o=a.reason||"socket_closed",h=new Error(`Realtime socket closed (${a.code}${a.reason?`: ${a.reason}`:""}).`);this.setRealtimeStatus("closed",o,h),s||n(h),this.realtimeShouldReconnect&&this.realtimeEnabled&&this.realtimeAutoReconnect&&this.token&&this.scheduleRealtimeReconnect(o)})}),this.realtimeConnectPromise}disconnectRealtime(e="client_disconnect"){if(this.realtimeShouldReconnect=!1,this.clearRealtimeReconnectTimer(),this.realtimeSocket){const t=this.realtimeSocket;this.realtimeSocket=null;try{(t.readyState===WebSocket.OPEN||t.readyState===WebSocket.CONNECTING)&&t.close(1e3,e)}catch{}}this.realtimeConnectPromise=null,this.setRealtimeStatus(this.realtimeEnabled?"idle":"disabled",e)}sendRealtime(e){return!this.realtimeSocket||this.realtimeSocket.readyState!==WebSocket.OPEN?!1:(this.realtimeSocket.send(JSON.stringify(e)),!0)}subscribeRealtime(e){return this.sendRealtime({type:"subscribe",channel:"session",event:"session.subscribe",data:{subscriptions:e}})}unsubscribeRealtime(e){return this.sendRealtime({type:"unsubscribe",channel:"session",event:"session.unsubscribe",data:{subscriptions:e}})}startHealthTick(e=300*1e3,t=!0){this.stopHealthTick();const i=()=>{this.healthTickPromise||(this.healthTickPromise=(this.csrfRefresher?this.csrfRefresher():Promise.resolve()).then(()=>{this.onHealthChange?.(!0)}).catch(()=>{this.onHealthChange?.(!1)}).finally(()=>{this.healthTickPromise=null}))};t&&i(),this.healthTickTimer=setInterval(i,e)}stopHealthTick(){this.healthTickTimer!==null&&(clearInterval(this.healthTickTimer),this.healthTickTimer=null),this.healthTickPromise=null}scheduleKeepSession(e,t,i){this.clearRefreshTimer(),this.sessionRefreshToken=e;const s=Math.max((t-this.refreshBuffer)*1e3,0);this.refreshTimer=setTimeout(async()=>{if(this.sessionRefreshToken)try{const r=await i(this.sessionRefreshToken);this.onTokenRefreshed?.(r.access_token,r.expires_in),this.scheduleKeepSession(this.sessionRefreshToken,r.expires_in,i)}catch(r){this.clearRefreshTimer(),this.onSessionExpired?.(r instanceof Error?r:new Error(String(r)))}},s)}clearRefreshTimer(){this.refreshTimer!==null&&(clearTimeout(this.refreshTimer),this.refreshTimer=null)}stopKeepSession(){this.clearRefreshTimer(),this.sessionRefreshToken=null}applyRealtimeOptions(e){const t=typeof e=="boolean"?{enabled:e}:e??{};if(this.realtimeEnabled=t.enabled??!1,this.realtimePath=String(t.path??c).trim()||c,this.realtimeAutoReconnect=t.autoReconnect??!0,this.realtimeReconnectDelayMs=Math.max(250,t.reconnectDelayMs??3e3),!this.realtimeEnabled){this.disconnectRealtime("realtime_disabled");return}this.setRealtimeStatus("idle","realtime_enabled")}buildRealtimeUrl(){const e=this.baseUrl||m("VITE_ENTITY_SERVER_URL")||"",t=typeof window<"u"?window.location.origin:"",i=e||t;if(!i)throw new Error("Realtime connection requires baseUrl.");const s=new URL(i,t||void 0),r=s.pathname==="/"?"":s.pathname.replace(/\/+$/,""),n=`/${this.realtimePath.replace(/^\/+/,"")}`;return s.pathname=`${r}${n}`||n,s.search="",s.hash="",s.protocol=s.protocol==="https:"?"wss:":"ws:",s.searchParams.set("access_token",this.token),s.toString()}handleRealtimeMessage(e){if(typeof e!="string")return;let t;try{t=JSON.parse(e)}catch{return}for(const s of this.realtimeMessageListeners)s(t);const i=this.realtimeEventListeners.get(t.event);if(i)for(const s of i)s(t)}scheduleRealtimeReconnect(e){this.clearRealtimeReconnectTimer(),this.realtimeReconnectTimer=setTimeout(()=>{this.realtimeReconnectTimer=null,!(!this.realtimeEnabled||!this.token)&&(this.setRealtimeStatus("connecting",`${e}:reconnect`),this.connectRealtime().catch(()=>{}))},this.realtimeReconnectDelayMs)}clearRealtimeReconnectTimer(){this.realtimeReconnectTimer!==null&&(clearTimeout(this.realtimeReconnectTimer),this.realtimeReconnectTimer=null)}setRealtimeStatus(e,t,i){const s=this.realtimeStatus;if(!(s===e&&typeof t>"u"&&typeof i>"u")){this.realtimeStatus=e;for(const r of this.realtimeStatusListeners)r({status:e,previousStatus:s,...t?{reason:t}:{},...i?{error:i}:{}})}}applyCsrfHealth(){if(!(typeof document>"u")){for(const e of document.cookie.split(";")){const t=e.indexOf("=");if(!(t<0)&&e.substring(0,t).trim()===this.csrfCookieName){this.csrfEnabled=!!e.substring(t+1).trim();return}}this.csrfEnabled=!1}}readRequestBody(e,t="application/json",i=!1){const s=u(this.hmacSecret,this.token||this.anonymousPacketToken);return f(e,t,i,s)}get reqOpts(){return{baseUrl:this.baseUrl,token:this.token,anonymousPacketToken:this.anonymousPacketToken,apiKey:this.apiKey,hmacSecret:this.hmacSecret,encryptRequests:this.encryptRequests,csrfEnabled:this.csrfEnabled,csrfHeaderName:this.csrfHeaderName,csrfCookieName:this.csrfCookieName,refreshCsrfCookie:this.csrfEnabled?this.csrfRefresher:null,requestAbortControllers:this.requestAbortControllers,debugPlainSecret:this.debugPlainSecret,onAccessToken:e=>{this.setAccessTokenFromResponse(e)}}}prepareRequest(e){return Promise.resolve()}get http(){const e=this;return{get(t,i=!0,s,r){return e.prepareRequest(i).then(()=>l(e.reqOpts,"GET",t,void 0,i,s,r??!0))},post(t,i,s=!0,r,n){return e.prepareRequest(s).then(()=>l(e.reqOpts,"POST",t,i,s,r,n??!0))},put(t,i,s=!0,r,n){return e.prepareRequest(s).then(()=>l(e.reqOpts,"PUT",t,i,s,r,n??!0))},patch(t,i,s=!0,r,n){return e.prepareRequest(s).then(()=>l(e.reqOpts,"PATCH",t,i,s,r,n??!0))},delete(t,i,s=!0,r,n){return e.prepareRequest(s).then(()=>l(e.reqOpts,"DELETE",t,i,s,r,n??!0))}}}request(e,t,i,s=!0,r,n){return this.prepareRequest(s).then(()=>l(this.reqOpts,e,t,i,s,r,n??!0))}async requestBinary(e,t,i,s=!0){await this.prepareRequest(s);const r={"Content-Type":"application/json"};s&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,...i!=null?{body:JSON.stringify(i)}:{},credentials:"include"});if(!n.ok){const a=await n.text(),o=new Error(`HTTP ${n.status}: ${a}`);throw o.status=n.status,o}return n.arrayBuffer()}async requestForm(e,t,i,s=!0){const r={};s&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,body:i,credentials:"include"}),a=await n.json();if(!a.ok){const o=new Error(a.message??`EntityServer error (HTTP ${n.status})`);throw o.status=n.status,o}return a}async requestFormBinary(e,t,i,s=!0){const r={};s&&this.token&&(r.Authorization=`Bearer ${this.token}`),this.apiKey&&(r["X-API-Key"]=this.apiKey);const n=await fetch(this.baseUrl+t,{method:e,headers:r,body:i,credentials:"include"});if(!n.ok){const a=await n.text(),o=new Error(`HTTP ${n.status}: ${a}`);throw o.status=n.status,o}return n.arrayBuffer()}}export{T as EntityServerClientBase};
 //# sourceMappingURL=base.js.map

package/dist/client/base.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/client/base.ts"],
-  "sourcesContent": ["import type {\n    EntityServerClientOptions,\n    RealtimeClientOptions,\n    RealtimeConnectionStatus,\n    RealtimeEnvelope,\n    RealtimeMessageListener,\n    RealtimeStatusListener,\n} from \"../types.js\";\nimport { readEnv } from \"./utils.js\";\nimport { derivePacketKey, parseRequestBody } from \"./packet.js\";\nimport {\n    entityRequest,\n    type EntityRequestConfig,\n    type RequestOptions,\n} from \"./request.js\";\n\nconst REALTIME_DEFAULT_PATH = \"/v1/realtime\";\n\n// mixin \uD5EC\uD37C \uD0C0\uC785\nexport type GConstructor<T = object> = new (...args: any[]) => T;\n\nexport class EntityServerClientBase {\n    baseUrl: string;\n    token: string;\n    anonymousPacketToken: string;\n    apiKey: string;\n    hmacSecret: string;\n    encryptRequests: boolean;\n    csrfEnabled: boolean;\n    csrfHeaderName: string;\n    csrfCookieName: string;\n    /** @internal health \uC7AC\uD638\uCD9C\uB85C CSRF \uCFE0\uD0A4 \uAC31\uC2E0 (AuthMixin\uC5D0\uC11C \uC124\uC815) */\n    csrfRefresher: (() => Promise<void>) | null = null;\n    requestAbortControllers = new Map<string, AbortController>();\n    activeTxId: string | null = null;\n    /** @internal \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uCCAB \uAD6C\uC131 \uC2DC health 1\uD68C \uC790\uB3D9 \uD638\uCD9C\uD588\uB294\uC9C0 \uC5EC\uBD80 */\n    initialHealthFired = false;\n\n    // \uC138\uC158 \uC720\uC9C0 \uAD00\uB828\n    keepSession: boolean;\n    refreshBuffer: number;\n    onTokenRefreshed?: (accessToken: string, expiresIn: number) => void;\n    onSessionExpired?: (error: Error) => void;\n    onHealthChange?: (online: boolean) => void;\n    sessionRefreshToken: string | null = null;\n    refreshTimer: ReturnType<typeof setTimeout> | null = null;\n    healthTickTimer: ReturnType<typeof setInterval> | null = null;\n    healthTickPromise: Promise<unknown> | null = null;\n    realtimeEnabled: boolean;\n    realtimePath: string;\n    realtimeAutoReconnect: boolean;\n    realtimeReconnectDelayMs: number;\n    realtimeStatus: RealtimeConnectionStatus;\n    realtimeSocket: WebSocket | null = null;\n    realtimeConnectPromise: Promise<void> | null = null;\n    realtimeReconnectTimer: ReturnType<typeof setTimeout> | null = null;\n    realtimeShouldReconnect = false;\n    realtimeMessageListeners = new Set<RealtimeMessageListener>();\n    realtimeStatusListeners = new Set<RealtimeStatusListener>();\n    realtimeEventListeners = new Map<string, Set<RealtimeMessageListener>>();\n    // \u2500\u2500\u2500 \uCD08\uAE30\uD654 & \uC124\uC815 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    /**\n     * EntityServerClient \uC778\uC2A4\uD134\uC2A4\uB97C \uC0DD\uC131\uD569\uB2C8\uB2E4.\n     *\n     * \uAE30\uBCF8\uAC12:\n     * - `baseUrl`: `VITE_ENTITY_SERVER_URL` \uB610\uB294 \uC0C1\uB300 \uACBD\uB85C(`\"\"`)\n     */\n    constructor(options: EntityServerClientOptions = {}) {\n        const envBaseUrl = readEnv(\"VITE_ENTITY_SERVER_URL\");\n\n        this.baseUrl = (options.baseUrl ?? envBaseUrl ?? \"\").replace(/\\/$/, \"\");\n        this.token = options.token ?? \"\";\n        this.anonymousPacketToken = options.anonymousPacketToken ?? \"\";\n        this.apiKey = options.apiKey ?? \"\";\n        this.hmacSecret = options.hmacSecret ?? \"\";\n        this.encryptRequests = options.encryptRequests ?? false;\n        this.csrfEnabled = options.csrfEnabled ?? false;\n        this.csrfHeaderName = options.csrfHeaderName ?? \"x-csrf-token\";\n        this.csrfCookieName = options.csrfCookieName ?? \"_csrf\";\n        this.keepSession = options.keepSession ?? false;\n        this.refreshBuffer = options.refreshBuffer ?? 60;\n        this.onTokenRefreshed = options.onTokenRefreshed;\n        this.onSessionExpired = options.onSessionExpired;\n        this.onHealthChange = options.onHealthChange;\n        this.realtimeEnabled = false;\n        this.realtimePath = REALTIME_DEFAULT_PATH;\n        this.realtimeAutoReconnect = true;\n        this.realtimeReconnectDelayMs = 3000;\n        this.realtimeStatus = \"idle\";\n        this.applyRealtimeOptions(options.realtime);\n        if (\n            typeof options.healthTickInterval === \"number\" &&\n            options.healthTickInterval > 0\n        ) {\n            // csrfRefresher\uB294 AuthMixin\uC5D0\uC11C \uC124\uC815\uB418\uBBC0\uB85C \uB2E4\uC74C tick\uC5D0 \uC2DC\uC791\n            Promise.resolve().then(() =>\n                this.startHealthTick(options.healthTickInterval, false),\n            );\n        }\n\n        // baseUrl \uC774 \uC0DD\uC131 \uC2DC\uC810\uC5D0 \uC815\uD574\uC9C4 \uACBD\uC6B0(env \uB4F1) \uCCAB health \uB97C \uBCF4\uC7A5\uD55C\uB2E4.\n        this.fireInitialHealth();\n    }\n\n    /** baseUrl, token, encryptRequests \uAC12\uC744 \uB7F0\uD0C0\uC784\uC5D0 \uAC31\uC2E0\uD569\uB2C8\uB2E4. */\n    configure(options: Partial<EntityServerClientOptions>): void {\n        if (typeof options.baseUrl === \"string\") {\n            this.baseUrl = options.baseUrl.replace(/\\/$/, \"\");\n        }\n        if (typeof options.token === \"string\") this.token = options.token;\n        if (typeof options.anonymousPacketToken === \"string\") {\n            this.anonymousPacketToken = options.anonymousPacketToken;\n        }\n        if (typeof options.encryptRequests === \"boolean\")\n            this.encryptRequests = options.encryptRequests;\n        if (typeof options.csrfEnabled === \"boolean\") {\n            this.csrfEnabled = options.csrfEnabled;\n        }\n        if (typeof options.csrfHeaderName === \"string\") {\n            this.csrfHeaderName = options.csrfHeaderName;\n        }\n        if (typeof options.csrfCookieName === \"string\") {\n            this.csrfCookieName = options.csrfCookieName;\n        }\n        if (typeof options.apiKey === \"string\") this.apiKey = options.apiKey;\n        if (typeof options.hmacSecret === \"string\")\n            this.hmacSecret = options.hmacSecret;\n        if (typeof options.keepSession === \"boolean\")\n            this.keepSession = options.keepSession;\n        if (typeof options.refreshBuffer === \"number\")\n            this.refreshBuffer = options.refreshBuffer;\n        if (options.onTokenRefreshed)\n            this.onTokenRefreshed = options.onTokenRefreshed;\n        if (options.onSessionExpired)\n            this.onSessionExpired = options.onSessionExpired;\n        if (options.onHealthChange)\n            this.onHealthChange = options.onHealthChange;\n        if (typeof options.realtime !== \"undefined\") {\n            this.applyRealtimeOptions(options.realtime);\n        }\n        if (\n            typeof options.healthTickInterval === \"number\" &&\n            options.healthTickInterval > 0\n        ) {\n            Promise.resolve().then(() =>\n                this.startHealthTick(options.healthTickInterval, false),\n            );\n        }\n\n        // \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C baseUrl \uC774 \uC815\uD574\uC9C0\uBA74 \uCCAB \uB9C8\uC6B4\uD2B8 \uC2DC health \uB97C 1\uD68C \uC790\uB3D9 \uD638\uCD9C\uD55C\uB2E4.\n        this.fireInitialHealth();\n    }\n\n    /**\n     * \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uD074\uB77C\uC774\uC5B8\uD2B8\uAC00 \uCC98\uC74C \uAD6C\uC131\uB420 \uB54C `/v1/health` \uB97C 1\uD68C \uC790\uB3D9 \uD638\uCD9C\uD55C\uB2E4.\n     *\n     * CSRF\u00B7anon \uCFE0\uD0A4 \uBC1C\uAE09\uACFC \uD328\uD0B7 \uC554\uD638\uD654 \uD611\uC0C1(`X-Packet-Encryption`)\uC744 \uC571 \uC9C4\uC785 \uC989\uC2DC \uC120\uBC18\uC601\uD574,\n     * \uD504\uB7F0\uD2B8 \uB77C\uC6B0\uD2B8(`/login` \uB4F1)\uC640 \uBB34\uAD00\uD558\uAC8C \uD56D\uC0C1 health \uAC00 \uCD5C\uC18C 1\uD68C \uB3CC\uB3C4\uB85D \uBCF4\uC7A5\uD55C\uB2E4.\n     *\n     * @internal\n     */\n    fireInitialHealth(): void {\n        if (this.initialHealthFired) return;\n        if (typeof document === \"undefined\") return;\n        if (!this.baseUrl) return;\n        this.initialHealthFired = true;\n        const self = this as unknown as {\n            checkHealth?: (bootstrapAuth?: boolean) => Promise<unknown>;\n        };\n        if (typeof self.checkHealth !== \"function\") return;\n        Promise.resolve().then(() => self.checkHealth!(false).catch(() => {}));\n    }\n\n    /** \uC778\uC99D \uC694\uCCAD\uC5D0 \uC0AC\uC6A9\uD560 JWT Access Token\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setToken(token: string): void {\n        this.token = token;\n        this.syncRealtimeWithToken();\n    }\n\n    /** \uC751\uB2F5 \uD5E4\uB354\uB85C \uBC1B\uC740 access token \uAC31\uC2E0\uC744 \uBC18\uC601\uD55C\uB2E4. */\n    setAccessTokenFromResponse(token: string): void {\n        this.token = token;\n        this.syncRealtimeWithToken();\n    }\n\n    /** \uD1A0\uD070 \uBCC0\uACBD \uD6C4 realtime \uC5F0\uACB0 \uC0C1\uD0DC\uB97C \uB3D9\uAE30\uD654\uD55C\uB2E4. */\n    syncRealtimeWithToken(): void {\n        if (!this.token) {\n            this.disconnectRealtime(\"token_cleared\");\n            return;\n        }\n\n        if (!this.realtimeEnabled || typeof WebSocket === \"undefined\") {\n            return;\n        }\n\n        void this.connectRealtime().catch(() => {});\n    }\n\n    /** \uC775\uBA85 \uD328\uD0B7 \uC554\uD638\uD654\uC6A9 \uD1A0\uD070\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setAnonymousPacketToken(token: string): void {\n        this.anonymousPacketToken = token;\n    }\n\n    /** HMAC \uC778\uC99D\uC6A9 API Key\uB97C \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setApiKey(apiKey: string): void {\n        this.apiKey = apiKey;\n    }\n\n    /** HMAC \uC778\uC99D\uC6A9 \uC2DC\uD06C\uB9BF\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setHmacSecret(secret: string): void {\n        this.hmacSecret = secret;\n    }\n\n    /** \uC554\uD638\uD654 \uC694\uCCAD \uD65C\uC131\uD654 \uC5EC\uBD80\uB97C \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setEncryptRequests(value: boolean): void {\n        this.encryptRequests = value;\n    }\n\n    setCsrfEnabled(enabled: boolean): void {\n        this.csrfEnabled = enabled;\n    }\n\n    addRealtimeListener(listener: RealtimeMessageListener): void {\n        this.realtimeMessageListeners.add(listener);\n    }\n\n    removeRealtimeListener(listener: RealtimeMessageListener): void {\n        this.realtimeMessageListeners.delete(listener);\n    }\n\n    addRealtimeStatusListener(listener: RealtimeStatusListener): void {\n        this.realtimeStatusListeners.add(listener);\n    }\n\n    removeRealtimeStatusListener(listener: RealtimeStatusListener): void {\n        this.realtimeStatusListeners.delete(listener);\n    }\n\n    addRealtimeEventListener(\n        eventName: string,\n        listener: RealtimeMessageListener,\n    ): void {\n        const key = String(eventName).trim();\n        if (!key) {\n            return;\n        }\n        if (!this.realtimeEventListeners.has(key)) {\n            this.realtimeEventListeners.set(key, new Set());\n        }\n        this.realtimeEventListeners.get(key)!.add(listener);\n    }\n\n    removeRealtimeEventListener(\n        eventName: string,\n        listener: RealtimeMessageListener,\n    ): void {\n        const key = String(eventName).trim();\n        if (!key) {\n            return;\n        }\n        const listeners = this.realtimeEventListeners.get(key);\n        if (!listeners) {\n            return;\n        }\n        listeners.delete(listener);\n        if (listeners.size === 0) {\n            this.realtimeEventListeners.delete(key);\n        }\n    }\n\n    async connectRealtime(): Promise<void> {\n        if (!this.realtimeEnabled) {\n            this.setRealtimeStatus(\"disabled\", \"realtime_disabled\");\n            return;\n        }\n\n        if (!this.token) {\n            throw new Error(\n                \"Cannot open realtime connection without access token.\",\n            );\n        }\n\n        if (typeof WebSocket === \"undefined\") {\n            throw new Error(\"WebSocket is not available in this environment.\");\n        }\n\n        if (\n            this.realtimeSocket &&\n            this.realtimeSocket.readyState === WebSocket.OPEN\n        ) {\n            return;\n        }\n\n        if (\n            this.realtimeSocket &&\n            this.realtimeSocket.readyState === WebSocket.CONNECTING &&\n            this.realtimeConnectPromise\n        ) {\n            return this.realtimeConnectPromise;\n        }\n\n        this.clearRealtimeReconnectTimer();\n        this.realtimeShouldReconnect = this.realtimeAutoReconnect;\n        this.setRealtimeStatus(\"connecting\", \"connect_requested\");\n\n        const socket = new WebSocket(this.buildRealtimeUrl());\n        this.realtimeSocket = socket;\n\n        this.realtimeConnectPromise = new Promise<void>((resolve, reject) => {\n            let settled = false;\n\n            const finalizeResolve = () => {\n                if (settled) {\n                    return;\n                }\n                settled = true;\n                this.realtimeConnectPromise = null;\n                resolve();\n            };\n\n            const finalizeReject = (error: Error) => {\n                if (settled) {\n                    return;\n                }\n                settled = true;\n                this.realtimeConnectPromise = null;\n                reject(error);\n            };\n\n            socket.addEventListener(\"open\", () => {\n                this.setRealtimeStatus(\"open\", \"socket_open\");\n                finalizeResolve();\n            });\n\n            socket.addEventListener(\"message\", (event) => {\n                this.handleRealtimeMessage(event.data);\n            });\n\n            socket.addEventListener(\"error\", () => {\n                this.setRealtimeStatus(\n                    \"closed\",\n                    \"socket_error\",\n                    new Error(\"Realtime socket error.\"),\n                );\n            });\n\n            socket.addEventListener(\"close\", (event) => {\n                if (this.realtimeSocket === socket) {\n                    this.realtimeSocket = null;\n                }\n\n                const reason = event.reason || \"socket_closed\";\n                const error = new Error(\n                    `Realtime socket closed (${event.code}${event.reason ? `: ${event.reason}` : \"\"}).`,\n                );\n\n                this.setRealtimeStatus(\"closed\", reason, error);\n                if (!settled) {\n                    finalizeReject(error);\n                }\n\n                if (\n                    this.realtimeShouldReconnect &&\n                    this.realtimeEnabled &&\n                    this.realtimeAutoReconnect &&\n                    this.token\n                ) {\n                    this.scheduleRealtimeReconnect(reason);\n                }\n            });\n        });\n\n        return this.realtimeConnectPromise;\n    }\n\n    disconnectRealtime(reason = \"client_disconnect\"): void {\n        this.realtimeShouldReconnect = false;\n        this.clearRealtimeReconnectTimer();\n\n        if (this.realtimeSocket) {\n            const socket = this.realtimeSocket;\n            this.realtimeSocket = null;\n            try {\n                if (\n                    socket.readyState === WebSocket.OPEN ||\n                    socket.readyState === WebSocket.CONNECTING\n                ) {\n                    socket.close(1000, reason);\n                }\n            } catch {\n                // ignore close errors\n            }\n        }\n\n        this.realtimeConnectPromise = null;\n        this.setRealtimeStatus(\n            this.realtimeEnabled ? \"idle\" : \"disabled\",\n            reason,\n        );\n    }\n\n    sendRealtime(message: RealtimeEnvelope | Record<string, unknown>): boolean {\n        if (\n            !this.realtimeSocket ||\n            this.realtimeSocket.readyState !== WebSocket.OPEN\n        ) {\n            return false;\n        }\n\n        this.realtimeSocket.send(JSON.stringify(message));\n        return true;\n    }\n\n    subscribeRealtime(subscriptions: string[]): boolean {\n        return this.sendRealtime({\n            type: \"subscribe\",\n            channel: \"session\",\n            event: \"session.subscribe\",\n            data: { subscriptions },\n        });\n    }\n\n    unsubscribeRealtime(subscriptions: string[]): boolean {\n        return this.sendRealtime({\n            type: \"unsubscribe\",\n            channel: \"session\",\n            event: \"session.unsubscribe\",\n            data: { subscriptions },\n        });\n    }\n\n    /**\n     * \uC8FC\uAE30\uC801\uC73C\uB85C health \uCCB4\uD06C\uB97C \uC2E4\uD589\uD569\uB2C8\uB2E4.\n     * CSRF \uCFE0\uD0A4 \uAC31\uC2E0\uACFC \uC11C\uBC84 \uC0C1\uD0DC \uD655\uC778\uC744 \uC790\uB3D9\uD654\uD569\uB2C8\uB2E4.\n     * keepSession=true \uC774\uBA74 \uAC01 tick\uC5D0\uC11C \uC138\uC158 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uB3C4 \uD568\uAED8 \uC2DC\uB3C4\uD569\uB2C8\uB2E4.\n     *\n     * @param intervalMs \uD638\uCD9C \uC8FC\uAE30(ms). \uAE30\uBCF8\uAC12: 5\uBD84\n     * @param runImmediately true\uBA74 \uC2DC\uC791 \uC9C1\uD6C4 \uCCAB tick\uC744 \uC989\uC2DC \uC2E4\uD589\uD569\uB2C8\uB2E4.\n     */\n    startHealthTick(\n        intervalMs: number = 5 * 60 * 1000,\n        runImmediately = true,\n    ): void {\n        this.stopHealthTick();\n        const tick = (): void => {\n            if (this.healthTickPromise) return;\n            this.healthTickPromise = (\n                this.csrfRefresher ? this.csrfRefresher() : Promise.resolve()\n            )\n                .then(() => {\n                    this.onHealthChange?.(true);\n                })\n                .catch(() => {\n                    this.onHealthChange?.(false);\n                })\n                .finally(() => {\n                    this.healthTickPromise = null;\n                });\n        };\n        if (runImmediately) {\n            tick();\n        }\n        this.healthTickTimer = setInterval(tick, intervalMs);\n    }\n\n    /** health tick \uD0C0\uC774\uBA38\uB97C \uC911\uC9C0\uD569\uB2C8\uB2E4. */\n    stopHealthTick(): void {\n        if (this.healthTickTimer !== null) {\n            clearInterval(this.healthTickTimer);\n            this.healthTickTimer = null;\n        }\n        this.healthTickPromise = null;\n    }\n\n    // \u2500\u2500\u2500 \uC138\uC158 \uC720\uC9C0 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    /** @deprecated \uC138\uC158 \uC5F0\uC7A5\uC740 health tick \uAE30\uBC18 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uC73C\uB85C \uB300\uCCB4\uB418\uC5C8\uC2B5\uB2C8\uB2E4. */\n    scheduleKeepSession(\n        refreshToken: string,\n        expiresIn: number,\n        refreshFn: (\n            rt: string,\n        ) => Promise<{ access_token: string; expires_in: number }>,\n    ): void {\n        this.clearRefreshTimer();\n        this.sessionRefreshToken = refreshToken;\n        const delayMs = Math.max((expiresIn - this.refreshBuffer) * 1000, 0);\n        this.refreshTimer = setTimeout(async () => {\n            if (!this.sessionRefreshToken) return;\n            try {\n                const result = await refreshFn(this.sessionRefreshToken);\n                this.onTokenRefreshed?.(result.access_token, result.expires_in);\n                this.scheduleKeepSession(\n                    this.sessionRefreshToken,\n                    result.expires_in,\n                    refreshFn,\n                );\n            } catch (err) {\n                this.clearRefreshTimer();\n                this.onSessionExpired?.(\n                    err instanceof Error ? err : new Error(String(err)),\n                );\n            }\n        }, delayMs);\n    }\n\n    /** @deprecated \uC138\uC158 \uC5F0\uC7A5\uC740 health tick \uAE30\uBC18 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uC73C\uB85C \uB300\uCCB4\uB418\uC5C8\uC2B5\uB2C8\uB2E4. */\n    clearRefreshTimer(): void {\n        if (this.refreshTimer !== null) {\n            clearTimeout(this.refreshTimer);\n            this.refreshTimer = null;\n        }\n    }\n\n    /**\n     * \uC138\uC158 \uC790\uB3D9 \uC5F0\uC7A5\uC744 \uC911\uC9C0\uD569\uB2C8\uB2E4.\n     * `logout()` \uD638\uCD9C \uC2DC \uC790\uB3D9\uC73C\uB85C \uC911\uC9C0\uB418\uBA70, \uC9C1\uC811 \uD638\uCD9C\uC774 \uD544\uC694\uD55C \uACBD\uC6B0\uB294 \uB4DC\uBB45\uB2C8\uB2E4.\n     */\n    stopKeepSession(): void {\n        this.clearRefreshTimer();\n        this.sessionRefreshToken = null;\n    }\n\n    applyRealtimeOptions(options?: boolean | RealtimeClientOptions): void {\n        const normalized: RealtimeClientOptions =\n            typeof options === \"boolean\"\n                ? { enabled: options }\n                : (options ?? {});\n\n        this.realtimeEnabled = normalized.enabled ?? false;\n        this.realtimePath =\n            String(normalized.path ?? REALTIME_DEFAULT_PATH).trim() ||\n            REALTIME_DEFAULT_PATH;\n        this.realtimeAutoReconnect = normalized.autoReconnect ?? true;\n        this.realtimeReconnectDelayMs = Math.max(\n            250,\n            normalized.reconnectDelayMs ?? 3000,\n        );\n\n        if (!this.realtimeEnabled) {\n            this.disconnectRealtime(\"realtime_disabled\");\n            return;\n        }\n\n        this.setRealtimeStatus(\"idle\", \"realtime_enabled\");\n    }\n\n    buildRealtimeUrl(): string {\n        const rawBaseUrl =\n            this.baseUrl || readEnv(\"VITE_ENTITY_SERVER_URL\") || \"\";\n        const origin =\n            typeof window !== \"undefined\" ? window.location.origin : \"\";\n        const baseUrl = rawBaseUrl || origin;\n\n        if (!baseUrl) {\n            throw new Error(\"Realtime connection requires baseUrl.\");\n        }\n\n        const url = new URL(baseUrl, origin || undefined);\n        const basePath =\n            url.pathname === \"/\" ? \"\" : url.pathname.replace(/\\/+$/, \"\");\n        const realtimePath = `/${this.realtimePath.replace(/^\\/+/, \"\")}`;\n\n        url.pathname = `${basePath}${realtimePath}` || realtimePath;\n        url.search = \"\";\n        url.hash = \"\";\n        url.protocol = url.protocol === \"https:\" ? \"wss:\" : \"ws:\";\n        url.searchParams.set(\"access_token\", this.token);\n        return url.toString();\n    }\n\n    handleRealtimeMessage(payload: unknown): void {\n        if (typeof payload !== \"string\") {\n            return;\n        }\n\n        let envelope: RealtimeEnvelope;\n        try {\n            envelope = JSON.parse(payload) as RealtimeEnvelope;\n        } catch {\n            return;\n        }\n\n        for (const listener of this.realtimeMessageListeners) {\n            listener(envelope);\n        }\n\n        const listeners = this.realtimeEventListeners.get(envelope.event);\n        if (listeners) {\n            for (const listener of listeners) {\n                listener(envelope);\n            }\n        }\n    }\n\n    scheduleRealtimeReconnect(reason: string): void {\n        this.clearRealtimeReconnectTimer();\n        this.realtimeReconnectTimer = setTimeout(() => {\n            this.realtimeReconnectTimer = null;\n            if (!this.realtimeEnabled || !this.token) {\n                return;\n            }\n            this.setRealtimeStatus(\"connecting\", `${reason}:reconnect`);\n            void this.connectRealtime().catch(() => {});\n        }, this.realtimeReconnectDelayMs);\n    }\n\n    clearRealtimeReconnectTimer(): void {\n        if (this.realtimeReconnectTimer !== null) {\n            clearTimeout(this.realtimeReconnectTimer);\n            this.realtimeReconnectTimer = null;\n        }\n    }\n\n    setRealtimeStatus(\n        status: RealtimeConnectionStatus,\n        reason?: string,\n        error?: Error,\n    ): void {\n        const previousStatus = this.realtimeStatus;\n        if (\n            previousStatus === status &&\n            typeof reason === \"undefined\" &&\n            typeof error === \"undefined\"\n        ) {\n            return;\n        }\n\n        this.realtimeStatus = status;\n        for (const listener of this.realtimeStatusListeners) {\n            listener({\n                status,\n                previousStatus,\n                ...(reason ? { reason } : {}),\n                ...(error ? { error } : {}),\n            });\n        }\n    }\n\n    applyCsrfHealth(): void {\n        if (typeof document === \"undefined\") return;\n        for (const chunk of document.cookie.split(\";\")) {\n            const idx = chunk.indexOf(\"=\");\n            if (idx < 0) continue;\n            if (chunk.substring(0, idx).trim() === this.csrfCookieName) {\n                this.csrfEnabled = !!chunk.substring(idx + 1).trim();\n                return;\n            }\n        }\n        this.csrfEnabled = false;\n    }\n\n    // \u2500\u2500\u2500 \uC694\uCCAD \uBCF8\uBB38 \uD30C\uC2F1 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    /**\n     * \uC694\uCCAD \uBC14\uB514\uB97C \uD30C\uC2F1\uD569\uB2C8\uB2E4.\n     * `application/octet-stream`\uC774\uBA74 XChaCha20-Poly1305 \uBCF5\uD638\uD654, \uADF8 \uC678\uB294 JSON \uD30C\uC2F1\uD569\uB2C8\uB2E4.\n     *\n     * @param requireEncrypted `true`\uC774\uBA74 \uC554\uD638\uD654\uB41C \uC694\uCCAD\uB9CC \uD5C8\uC6A9\uD569\uB2C8\uB2E4.\n     */\n    readRequestBody<T = Record<string, unknown>>(\n        body: ArrayBuffer | Uint8Array | string | T | null | undefined,\n        contentType = \"application/json\",\n        requireEncrypted = false,\n    ): T {\n        const key = derivePacketKey(\n            this.hmacSecret,\n            this.token || this.anonymousPacketToken,\n        );\n        return parseRequestBody<T>(body, contentType, requireEncrypted, key);\n    }\n\n    // \u2500\u2500\u2500 \uB0B4\uBD80 \uD5EC\uD37C \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    get reqOpts(): RequestOptions {\n        return {\n            baseUrl: this.baseUrl,\n            token: this.token,\n            anonymousPacketToken: this.anonymousPacketToken,\n            apiKey: this.apiKey,\n            hmacSecret: this.hmacSecret,\n            encryptRequests: this.encryptRequests,\n            csrfEnabled: this.csrfEnabled,\n            csrfHeaderName: this.csrfHeaderName,\n            csrfCookieName: this.csrfCookieName,\n            refreshCsrfCookie: this.csrfEnabled ? this.csrfRefresher : null,\n            requestAbortControllers: this.requestAbortControllers,\n            onAccessToken: (token) => {\n                this.setAccessTokenFromResponse(token);\n            },\n        };\n    }\n\n    // \uC778\uC99D \uC694\uCCAD \uC804\uC5D0 \uD544\uC694\uD55C \uD074\uB77C\uC774\uC5B8\uD2B8 \uC900\uBE44 \uC791\uC5C5\uC744 \uC218\uD589\uD569\uB2C8\uB2E4.\n    prepareRequest(_withAuth: boolean): Promise<void> {\n        return Promise.resolve();\n    }\n\n    /**\n     * \uCEE4\uC2A4\uD140 \uB77C\uC6B0\uD2B8 \uC9C1\uC811 \uD638\uCD9C\uC6A9 HTTP \uB124\uC784\uC2A4\uD398\uC774\uC2A4.\n     * \uC778\uC99D\u00B7\uC554\uD638\uD654\u00B7HMAC \uB4F1 SDK \uC635\uC158\uC774 \uADF8\uB300\uB85C \uC801\uC6A9\uB429\uB2C8\uB2E4.\n     *\n     * @example\n     * const res = await client.http.get<{ version: string }>(\"/api/v1/status\", false);\n     * const res = await client.http.post<MyResponse>(\"/api/v1/custom\", { key: \"value\" });\n     */\n    get http() {\n        // eslint-disable-next-line @typescript-eslint/no-this-alias\n        const self = this;\n        return {\n            get<T>(\n                path: string,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"GET\",\n                            path,\n                            undefined,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n            post<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"POST\",\n                            path,\n                            body,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n            put<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"PUT\",\n                            path,\n                            body,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n            patch<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"PATCH\",\n                            path,\n                            body,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n            delete<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"DELETE\",\n                            path,\n                            body,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n        };\n    }\n\n    request<T>(\n        method: string,\n        path: string,\n        body?: unknown,\n        withAuth = true,\n        extraHeaders?: Record<string, string>,\n        requestConfig?: EntityRequestConfig,\n    ): Promise<T> {\n        return this.prepareRequest(withAuth).then(() =>\n            entityRequest<T>(\n                this.reqOpts,\n                method,\n                path,\n                body,\n                withAuth,\n                extraHeaders,\n                requestConfig ?? true,\n            ),\n        );\n    }\n\n    /** PNG/\uBC14\uC774\uB108\uB9AC \uC751\uB2F5\uC744 ArrayBuffer\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. (QR, \uBC14\uCF54\uB4DC \uB4F1) */\n    async requestBinary(\n        method: string,\n        path: string,\n        body?: unknown,\n        withAuth = true,\n    ): Promise<ArrayBuffer> {\n        await this.prepareRequest(withAuth);\n\n        const headers: Record<string, string> = {\n            \"Content-Type\": \"application/json\",\n        };\n        if (withAuth && this.token)\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\n\n        const res = await fetch(this.baseUrl + path, {\n            method,\n            headers,\n            ...(body != null ? { body: JSON.stringify(body) } : {}),\n            credentials: \"include\",\n        });\n\n        if (!res.ok) {\n            const text = await res.text();\n            const err = new Error(`HTTP ${res.status}: ${text}`);\n            (err as { status?: number }).status = res.status;\n            throw err;\n        }\n\n        return res.arrayBuffer();\n    }\n\n    /** multipart/form-data \uC694\uCCAD\uC744 \uBCF4\uB0C5\uB2C8\uB2E4. (\uD30C\uC77C \uC5C5\uB85C\uB4DC \uB4F1) */\n    async requestForm<T>(\n        method: string,\n        path: string,\n        form: FormData,\n        withAuth = true,\n    ): Promise<T> {\n        const headers: Record<string, string> = {};\n        if (withAuth && this.token)\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\n\n        const res = await fetch(this.baseUrl + path, {\n            method,\n            headers,\n            body: form,\n            credentials: \"include\",\n        });\n\n        const data = (await res.json()) as { ok?: boolean; message?: string };\n        if (!data.ok) {\n            const err = new Error(\n                data.message ?? `EntityServer error (HTTP ${res.status})`,\n            );\n            (err as { status?: number }).status = res.status;\n            throw err;\n        }\n        return data as T;\n    }\n\n    /** multipart/form-data \uC694\uCCAD\uC744 \uBCF4\uB0B4\uACE0 \uBC14\uC774\uB108\uB9AC(ArrayBuffer)\uB97C \uBC18\uD658\uD569\uB2C8\uB2E4. */\n    async requestFormBinary(\n        method: string,\n        path: string,\n        form: FormData,\n        withAuth = true,\n    ): Promise<ArrayBuffer> {\n        const headers: Record<string, string> = {};\n        if (withAuth && this.token)\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\n\n        const res = await fetch(this.baseUrl + path, {\n            method,\n            headers,\n            body: form,\n            credentials: \"include\",\n        });\n\n        if (!res.ok) {\n            const text = await res.text();\n            const err = new Error(`HTTP ${res.status}: ${text}`);\n            (err as { status?: number }).status = res.status;\n            throw err;\n        }\n\n        return res.arrayBuffer();\n    }\n}\n"],
-  "mappings": "AAQA,OAAS,WAAAA,MAAe,aACxB,OAAS,mBAAAC,EAAiB,oBAAAC,MAAwB,cAClD,OACI,iBAAAC,MAGG,eAEP,MAAMC,EAAwB,eAKvB,MAAMC,CAAuB,CAChC,QACA,MACA,qBACA,OACA,WACA,gBACA,YACA,eACA,eAEA,cAA8C,KAC9C,wBAA0B,IAAI,IAC9B,WAA4B,KAE5B,mBAAqB,GAGrB,YACA,cACA,iBACA,iBACA,eACA,oBAAqC,KACrC,aAAqD,KACrD,gBAAyD,KACzD,kBAA6C,KAC7C,gBACA,aACA,sBACA,yBACA,eACA,eAAmC,KACnC,uBAA+C,KAC/C,uBAA+D,KAC/D,wBAA0B,GAC1B,yBAA2B,IAAI,IAC/B,wBAA0B,IAAI,IAC9B,uBAAyB,IAAI,IAS7B,YAAYC,EAAqC,CAAC,EAAG,CACjD,MAAMC,EAAaP,EAAQ,wBAAwB,EAEnD,KAAK,SAAWM,EAAQ,SAAWC,GAAc,IAAI,QAAQ,MAAO,EAAE,EACtE,KAAK,MAAQD,EAAQ,OAAS,GAC9B,KAAK,qBAAuBA,EAAQ,sBAAwB,GAC5D,KAAK,OAASA,EAAQ,QAAU,GAChC,KAAK,WAAaA,EAAQ,YAAc,GACxC,KAAK,gBAAkBA,EAAQ,iBAAmB,GAClD,KAAK,YAAcA,EAAQ,aAAe,GAC1C,KAAK,eAAiBA,EAAQ,gBAAkB,eAChD,KAAK,eAAiBA,EAAQ,gBAAkB,QAChD,KAAK,YAAcA,EAAQ,aAAe,GAC1C,KAAK,cAAgBA,EAAQ,eAAiB,GAC9C,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,eAAiBA,EAAQ,eAC9B,KAAK,gBAAkB,GACvB,KAAK,aAAeF,EACpB,KAAK,sBAAwB,GAC7B,KAAK,yBAA2B,IAChC,KAAK,eAAiB,OACtB,KAAK,qBAAqBE,EAAQ,QAAQ,EAEtC,OAAOA,EAAQ,oBAAuB,UACtCA,EAAQ,mBAAqB,GAG7B,QAAQ,QAAQ,EAAE,KAAK,IACnB,KAAK,gBAAgBA,EAAQ,mBAAoB,EAAK,CAC1D,EAIJ,KAAK,kBAAkB,CAC3B,CAGA,UAAUA,EAAmD,CACrD,OAAOA,EAAQ,SAAY,WAC3B,KAAK,QAAUA,EAAQ,QAAQ,QAAQ,MAAO,EAAE,GAEhD,OAAOA,EAAQ,OAAU,WAAU,KAAK,MAAQA,EAAQ,OACxD,OAAOA,EAAQ,sBAAyB,WACxC,KAAK,qBAAuBA,EAAQ,sBAEpC,OAAOA,EAAQ,iBAAoB,YACnC,KAAK,gBAAkBA,EAAQ,iBAC/B,OAAOA,EAAQ,aAAgB,YAC/B,KAAK,YAAcA,EAAQ,aAE3B,OAAOA,EAAQ,gBAAmB,WAClC,KAAK,eAAiBA,EAAQ,gBAE9B,OAAOA,EAAQ,gBAAmB,WAClC,KAAK,eAAiBA,EAAQ,gBAE9B,OAAOA,EAAQ,QAAW,WAAU,KAAK,OAASA,EAAQ,QAC1D,OAAOA,EAAQ,YAAe,WAC9B,KAAK,WAAaA,EAAQ,YAC1B,OAAOA,EAAQ,aAAgB,YAC/B,KAAK,YAAcA,EAAQ,aAC3B,OAAOA,EAAQ,eAAkB,WACjC,KAAK,cAAgBA,EAAQ,eAC7BA,EAAQ,mBACR,KAAK,iBAAmBA,EAAQ,kBAChCA,EAAQ,mBACR,KAAK,iBAAmBA,EAAQ,kBAChCA,EAAQ,iBACR,KAAK,eAAiBA,EAAQ,gBAC9B,OAAOA,EAAQ,SAAa,KAC5B,KAAK,qBAAqBA,EAAQ,QAAQ,EAG1C,OAAOA,EAAQ,oBAAuB,UACtCA,EAAQ,mBAAqB,GAE7B,QAAQ,QAAQ,EAAE,KAAK,IACnB,KAAK,gBAAgBA,EAAQ,mBAAoB,EAAK,CAC1D,EAIJ,KAAK,kBAAkB,CAC3B,CAUA,mBAA0B,CAGtB,GAFI,KAAK,oBACL,OAAO,SAAa,KACpB,CAAC,KAAK,QAAS,OACnB,KAAK,mBAAqB,GAC1B,MAAME,EAAO,KAGT,OAAOA,EAAK,aAAgB,YAChC,QAAQ,QAAQ,EAAE,KAAK,IAAMA,EAAK,YAAa,EAAK,EAAE,MAAM,IAAM,CAAC,CAAC,CAAC,CACzE,CAGA,SAASC,EAAqB,CAC1B,KAAK,MAAQA,EACb,KAAK,sBAAsB,CAC/B,CAGA,2BAA2BA,EAAqB,CAC5C,KAAK,MAAQA,EACb,KAAK,sBAAsB,CAC/B,CAGA,uBAA8B,CAC1B,GAAI,CAAC,KAAK,MAAO,CACb,KAAK,mBAAmB,eAAe,EACvC,MACJ,CAEI,CAAC,KAAK,iBAAmB,OAAO,UAAc,KAI7C,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,CAC9C,CAGA,wBAAwBA,EAAqB,CACzC,KAAK,qBAAuBA,CAChC,CAGA,UAAUC,EAAsB,CAC5B,KAAK,OAASA,CAClB,CAGA,cAAcC,EAAsB,CAChC,KAAK,WAAaA,CACtB,CAGA,mBAAmBC,EAAsB,CACrC,KAAK,gBAAkBA,CAC3B,CAEA,eAAeC,EAAwB,CACnC,KAAK,YAAcA,CACvB,CAEA,oBAAoBC,EAAyC,CACzD,KAAK,yBAAyB,IAAIA,CAAQ,CAC9C,CAEA,uBAAuBA,EAAyC,CAC5D,KAAK,yBAAyB,OAAOA,CAAQ,CACjD,CAEA,0BAA0BA,EAAwC,CAC9D,KAAK,wBAAwB,IAAIA,CAAQ,CAC7C,CAEA,6BAA6BA,EAAwC,CACjE,KAAK,wBAAwB,OAAOA,CAAQ,CAChD,CAEA,yBACIC,EACAD,EACI,CACJ,MAAME,EAAM,OAAOD,CAAS,EAAE,KAAK,EAC9BC,IAGA,KAAK,uBAAuB,IAAIA,CAAG,GACpC,KAAK,uBAAuB,IAAIA,EAAK,IAAI,GAAK,EAElD,KAAK,uBAAuB,IAAIA,CAAG,EAAG,IAAIF,CAAQ,EACtD,CAEA,4BACIC,EACAD,EACI,CACJ,MAAME,EAAM,OAAOD,CAAS,EAAE,KAAK,EACnC,GAAI,CAACC,EACD,OAEJ,MAAMC,EAAY,KAAK,uBAAuB,IAAID,CAAG,EAChDC,IAGLA,EAAU,OAAOH,CAAQ,EACrBG,EAAU,OAAS,GACnB,KAAK,uBAAuB,OAAOD,CAAG,EAE9C,CAEA,MAAM,iBAAiC,CACnC,GAAI,CAAC,KAAK,gBAAiB,CACvB,KAAK,kBAAkB,WAAY,mBAAmB,EACtD,MACJ,CAEA,GAAI,CAAC,KAAK,MACN,MAAM,IAAI,MACN,uDACJ,EAGJ,GAAI,OAAO,UAAc,IACrB,MAAM,IAAI,MAAM,iDAAiD,EAGrE,GACI,KAAK,gBACL,KAAK,eAAe,aAAe,UAAU,KAE7C,OAGJ,GACI,KAAK,gBACL,KAAK,eAAe,aAAe,UAAU,YAC7C,KAAK,uBAEL,OAAO,KAAK,uBAGhB,KAAK,4BAA4B,EACjC,KAAK,wBAA0B,KAAK,sBACpC,KAAK,kBAAkB,aAAc,mBAAmB,EAExD,MAAME,EAAS,IAAI,UAAU,KAAK,iBAAiB,CAAC,EACpD,YAAK,eAAiBA,EAEtB,KAAK,uBAAyB,IAAI,QAAc,CAACC,EAASC,IAAW,CACjE,IAAIC,EAAU,GAEd,MAAMC,EAAkB,IAAM,CACtBD,IAGJA,EAAU,GACV,KAAK,uBAAyB,KAC9BF,EAAQ,EACZ,EAEMI,EAAkBC,GAAiB,CACjCH,IAGJA,EAAU,GACV,KAAK,uBAAyB,KAC9BD,EAAOI,CAAK,EAChB,EAEAN,EAAO,iBAAiB,OAAQ,IAAM,CAClC,KAAK,kBAAkB,OAAQ,aAAa,EAC5CI,EAAgB,CACpB,CAAC,EAEDJ,EAAO,iBAAiB,UAAYO,GAAU,CAC1C,KAAK,sBAAsBA,EAAM,IAAI,CACzC,CAAC,EAEDP,EAAO,iBAAiB,QAAS,IAAM,CACnC,KAAK,kBACD,SACA,eACA,IAAI,MAAM,wBAAwB,CACtC,CACJ,CAAC,EAEDA,EAAO,iBAAiB,QAAUO,GAAU,CACpC,KAAK,iBAAmBP,IACxB,KAAK,eAAiB,MAG1B,MAAMQ,EAASD,EAAM,QAAU,gBACzBD,EAAQ,IAAI,MACd,2BAA2BC,EAAM,IAAI,GAAGA,EAAM,OAAS,KAAKA,EAAM,MAAM,GAAK,EAAE,IACnF,EAEA,KAAK,kBAAkB,SAAUC,EAAQF,CAAK,EACzCH,GACDE,EAAeC,CAAK,EAIpB,KAAK,yBACL,KAAK,iBACL,KAAK,uBACL,KAAK,OAEL,KAAK,0BAA0BE,CAAM,CAE7C,CAAC,CACL,CAAC,EAEM,KAAK,sBAChB,CAEA,mBAAmBA,EAAS,oBAA2B,CAInD,GAHA,KAAK,wBAA0B,GAC/B,KAAK,4BAA4B,EAE7B,KAAK,eAAgB,CACrB,MAAMR,EAAS,KAAK,eACpB,KAAK,eAAiB,KACtB,GAAI,EAEIA,EAAO,aAAe,UAAU,MAChCA,EAAO,aAAe,UAAU,aAEhCA,EAAO,MAAM,IAAMQ,CAAM,CAEjC,MAAQ,CAER,CACJ,CAEA,KAAK,uBAAyB,KAC9B,KAAK,kBACD,KAAK,gBAAkB,OAAS,WAChCA,CACJ,CACJ,CAEA,aAAaC,EAA8D,CACvE,MACI,CAAC,KAAK,gBACN,KAAK,eAAe,aAAe,UAAU,KAEtC,IAGX,KAAK,eAAe,KAAK,KAAK,UAAUA,CAAO,CAAC,EACzC,GACX,CAEA,kBAAkBC,EAAkC,CAChD,OAAO,KAAK,aAAa,CACrB,KAAM,YACN,QAAS,UACT,MAAO,oBACP,KAAM,CAAE,cAAAA,CAAc,CAC1B,CAAC,CACL,CAEA,oBAAoBA,EAAkC,CAClD,OAAO,KAAK,aAAa,CACrB,KAAM,cACN,QAAS,UACT,MAAO,sBACP,KAAM,CAAE,cAAAA,CAAc,CAC1B,CAAC,CACL,CAUA,gBACIC,EAAqB,IAAS,IAC9BC,EAAiB,GACb,CACJ,KAAK,eAAe,EACpB,MAAMC,EAAO,IAAY,CACjB,KAAK,oBACT,KAAK,mBACD,KAAK,cAAgB,KAAK,cAAc,EAAI,QAAQ,QAAQ,GAE3D,KAAK,IAAM,CACR,KAAK,iBAAiB,EAAI,CAC9B,CAAC,EACA,MAAM,IAAM,CACT,KAAK,iBAAiB,EAAK,CAC/B,CAAC,EACA,QAAQ,IAAM,CACX,KAAK,kBAAoB,IAC7B,CAAC,EACT,EACID,GACAC,EAAK,EAET,KAAK,gBAAkB,YAAYA,EAAMF,CAAU,CACvD,CAGA,gBAAuB,CACf,KAAK,kBAAoB,OACzB,cAAc,KAAK,eAAe,EAClC,KAAK,gBAAkB,MAE3B,KAAK,kBAAoB,IAC7B,CAKA,oBACIG,EACAC,EACAC,EAGI,CACJ,KAAK,kBAAkB,EACvB,KAAK,oBAAsBF,EAC3B,MAAMG,EAAU,KAAK,KAAKF,EAAY,KAAK,eAAiB,IAAM,CAAC,EACnE,KAAK,aAAe,WAAW,SAAY,CACvC,GAAK,KAAK,oBACV,GAAI,CACA,MAAMG,EAAS,MAAMF,EAAU,KAAK,mBAAmB,EACvD,KAAK,mBAAmBE,EAAO,aAAcA,EAAO,UAAU,EAC9D,KAAK,oBACD,KAAK,oBACLA,EAAO,WACPF,CACJ,CACJ,OAASG,EAAK,CACV,KAAK,kBAAkB,EACvB,KAAK,mBACDA,aAAe,MAAQA,EAAM,IAAI,MAAM,OAAOA,CAAG,CAAC,CACtD,CACJ,CACJ,EAAGF,CAAO,CACd,CAGA,mBAA0B,CAClB,KAAK,eAAiB,OACtB,aAAa,KAAK,YAAY,EAC9B,KAAK,aAAe,KAE5B,CAMA,iBAAwB,CACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAsB,IAC/B,CAEA,qBAAqB7B,EAAiD,CAClE,MAAMgC,EACF,OAAOhC,GAAY,UACb,CAAE,QAASA,CAAQ,EAClBA,GAAW,CAAC,EAYvB,GAVA,KAAK,gBAAkBgC,EAAW,SAAW,GAC7C,KAAK,aACD,OAAOA,EAAW,MAAQlC,CAAqB,EAAE,KAAK,GACtDA,EACJ,KAAK,sBAAwBkC,EAAW,eAAiB,GACzD,KAAK,yBAA2B,KAAK,IACjC,IACAA,EAAW,kBAAoB,GACnC,EAEI,CAAC,KAAK,gBAAiB,CACvB,KAAK,mBAAmB,mBAAmB,EAC3C,MACJ,CAEA,KAAK,kBAAkB,OAAQ,kBAAkB,CACrD,CAEA,kBAA2B,CACvB,MAAMC,EACF,KAAK,SAAWvC,EAAQ,wBAAwB,GAAK,GACnDwC,EACF,OAAO,OAAW,IAAc,OAAO,SAAS,OAAS,GACvDC,EAAUF,GAAcC,EAE9B,GAAI,CAACC,EACD,MAAM,IAAI,MAAM,uCAAuC,EAG3D,MAAMC,EAAM,IAAI,IAAID,EAASD,GAAU,MAAS,EAC1CG,EACFD,EAAI,WAAa,IAAM,GAAKA,EAAI,SAAS,QAAQ,OAAQ,EAAE,EACzDE,EAAe,IAAI,KAAK,aAAa,QAAQ,OAAQ,EAAE,CAAC,GAE9D,OAAAF,EAAI,SAAW,GAAGC,CAAQ,GAAGC,CAAY,IAAMA,EAC/CF,EAAI,OAAS,GACbA,EAAI,KAAO,GACXA,EAAI,SAAWA,EAAI,WAAa,SAAW,OAAS,MACpDA,EAAI,aAAa,IAAI,eAAgB,KAAK,KAAK,EACxCA,EAAI,SAAS,CACxB,CAEA,sBAAsBG,EAAwB,CAC1C,GAAI,OAAOA,GAAY,SACnB,OAGJ,IAAIC,EACJ,GAAI,CACAA,EAAW,KAAK,MAAMD,CAAO,CACjC,MAAQ,CACJ,MACJ,CAEA,UAAW/B,KAAY,KAAK,yBACxBA,EAASgC,CAAQ,EAGrB,MAAM7B,EAAY,KAAK,uBAAuB,IAAI6B,EAAS,KAAK,EAChE,GAAI7B,EACA,UAAWH,KAAYG,EACnBH,EAASgC,CAAQ,CAG7B,CAEA,0BAA0BpB,EAAsB,CAC5C,KAAK,4BAA4B,EACjC,KAAK,uBAAyB,WAAW,IAAM,CAC3C,KAAK,uBAAyB,KAC1B,GAAC,KAAK,iBAAmB,CAAC,KAAK,SAGnC,KAAK,kBAAkB,aAAc,GAAGA,CAAM,YAAY,EACrD,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,EAC9C,EAAG,KAAK,wBAAwB,CACpC,CAEA,6BAAoC,CAC5B,KAAK,yBAA2B,OAChC,aAAa,KAAK,sBAAsB,EACxC,KAAK,uBAAyB,KAEtC,CAEA,kBACIqB,EACArB,EACAF,EACI,CACJ,MAAMwB,EAAiB,KAAK,eAC5B,GACI,EAAAA,IAAmBD,GACnB,OAAOrB,EAAW,KAClB,OAAOF,EAAU,KAKrB,MAAK,eAAiBuB,EACtB,UAAWjC,KAAY,KAAK,wBACxBA,EAAS,CACL,OAAAiC,EACA,eAAAC,EACA,GAAItB,EAAS,CAAE,OAAAA,CAAO,EAAI,CAAC,EAC3B,GAAIF,EAAQ,CAAE,MAAAA,CAAM,EAAI,CAAC,CAC7B,CAAC,EAET,CAEA,iBAAwB,CACpB,GAAI,SAAO,SAAa,KACxB,WAAWyB,KAAS,SAAS,OAAO,MAAM,GAAG,EAAG,CAC5C,MAAMC,EAAMD,EAAM,QAAQ,GAAG,EAC7B,GAAI,EAAAC,EAAM,IACND,EAAM,UAAU,EAAGC,CAAG,EAAE,KAAK,IAAM,KAAK,eAAgB,CACxD,KAAK,YAAc,CAAC,CAACD,EAAM,UAAUC,EAAM,CAAC,EAAE,KAAK,EACnD,MACJ,CACJ,CACA,KAAK,YAAc,GACvB,CAUA,gBACIC,EACAC,EAAc,mBACdC,EAAmB,GAClB,CACD,MAAMrC,EAAMf,EACR,KAAK,WACL,KAAK,OAAS,KAAK,oBACvB,EACA,OAAOC,EAAoBiD,EAAMC,EAAaC,EAAkBrC,CAAG,CACvE,CAIA,IAAI,SAA0B,CAC1B,MAAO,CACH,QAAS,KAAK,QACd,MAAO,KAAK,MACZ,qBAAsB,KAAK,qBAC3B,OAAQ,KAAK,OACb,WAAY,KAAK,WACjB,gBAAiB,KAAK,gBACtB,YAAa,KAAK,YAClB,eAAgB,KAAK,eACrB,eAAgB,KAAK,eACrB,kBAAmB,KAAK,YAAc,KAAK,cAAgB,KAC3D,wBAAyB,KAAK,wBAC9B,cAAgBP,GAAU,CACtB,KAAK,2BAA2BA,CAAK,CACzC,CACJ,CACJ,CAGA,eAAe6C,EAAmC,CAC9C,OAAO,QAAQ,QAAQ,CAC3B,CAUA,IAAI,MAAO,CAEP,MAAM9C,EAAO,KACb,MAAO,CACH,IACI+C,EACAC,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,MACA+C,EACA,OACAC,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,EACA,KACIH,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,OACA+C,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,EACA,IACIH,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,MACA+C,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,EACA,MACIH,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,QACA+C,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,EACA,OACIH,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,SACA+C,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,CACJ,CACJ,CAEA,QACIC,EACAJ,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAO,KAAK,eAAeF,CAAQ,EAAE,KAAK,IACtCrD,EACI,KAAK,QACLwD,EACAJ,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACJ,CAGA,MAAM,cACFC,EACAJ,EACAJ,EACAK,EAAW,GACS,CACpB,MAAM,KAAK,eAAeA,CAAQ,EAElC,MAAMI,EAAkC,CACpC,eAAgB,kBACpB,EACIJ,GAAY,KAAK,QACjBI,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUN,EAAM,CACzC,OAAAI,EACA,QAAAC,EACA,GAAIT,GAAQ,KAAO,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAE,EAAI,CAAC,EACrD,YAAa,SACjB,CAAC,EAED,GAAI,CAACU,EAAI,GAAI,CACT,MAAMC,EAAO,MAAMD,EAAI,KAAK,EACtBxB,EAAM,IAAI,MAAM,QAAQwB,EAAI,MAAM,KAAKC,CAAI,EAAE,EACnD,MAACzB,EAA4B,OAASwB,EAAI,OACpCxB,CACV,CAEA,OAAOwB,EAAI,YAAY,CAC3B,CAGA,MAAM,YACFF,EACAJ,EACAQ,EACAP,EAAW,GACD,CACV,MAAMI,EAAkC,CAAC,EACrCJ,GAAY,KAAK,QACjBI,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUN,EAAM,CACzC,OAAAI,EACA,QAAAC,EACA,KAAMG,EACN,YAAa,SACjB,CAAC,EAEKC,EAAQ,MAAMH,EAAI,KAAK,EAC7B,GAAI,CAACG,EAAK,GAAI,CACV,MAAM3B,EAAM,IAAI,MACZ2B,EAAK,SAAW,4BAA4BH,EAAI,MAAM,GAC1D,EACA,MAACxB,EAA4B,OAASwB,EAAI,OACpCxB,CACV,CACA,OAAO2B,CACX,CAGA,MAAM,kBACFL,EACAJ,EACAQ,EACAP,EAAW,GACS,CACpB,MAAMI,EAAkC,CAAC,EACrCJ,GAAY,KAAK,QACjBI,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUN,EAAM,CACzC,OAAAI,EACA,QAAAC,EACA,KAAMG,EACN,YAAa,SACjB,CAAC,EAED,GAAI,CAACF,EAAI,GAAI,CACT,MAAMC,EAAO,MAAMD,EAAI,KAAK,EACtBxB,EAAM,IAAI,MAAM,QAAQwB,EAAI,MAAM,KAAKC,CAAI,EAAE,EACnD,MAACzB,EAA4B,OAASwB,EAAI,OACpCxB,CACV,CAEA,OAAOwB,EAAI,YAAY,CAC3B,CACJ",
+  "sourcesContent": ["import type {\n    EntityServerClientOptions,\n    RealtimeClientOptions,\n    RealtimeConnectionStatus,\n    RealtimeEnvelope,\n    RealtimeMessageListener,\n    RealtimeStatusListener,\n} from \"../types.js\";\nimport { readEnv } from \"./utils.js\";\nimport { derivePacketKey, parseRequestBody } from \"./packet.js\";\nimport {\n    entityRequest,\n    type EntityRequestConfig,\n    type RequestOptions,\n} from \"./request.js\";\n\nconst REALTIME_DEFAULT_PATH = \"/v1/realtime\";\n\n// mixin \uD5EC\uD37C \uD0C0\uC785\nexport type GConstructor<T = object> = new (...args: any[]) => T;\n\nexport class EntityServerClientBase {\n    baseUrl: string;\n    token: string;\n    anonymousPacketToken: string;\n    apiKey: string;\n    hmacSecret: string;\n    encryptRequests: boolean;\n    /** dev \uB514\uBC84\uADF8 \uD3C9\uBB38 \uC2DC\uD06C\uB9BF. \uC124\uC815 \uC2DC \uC694\uCCAD\uC744 \uD3C9\uBB38 \uC804\uC1A1\uD558\uACE0 `X-Debug-Plain` \uD5E4\uB354\uB97C \uBCF4\uB0B8\uB2E4. */\n    debugPlainSecret: string;\n    csrfEnabled: boolean;\n    csrfHeaderName: string;\n    csrfCookieName: string;\n    /** @internal health \uC7AC\uD638\uCD9C\uB85C CSRF \uCFE0\uD0A4 \uAC31\uC2E0 (AuthMixin\uC5D0\uC11C \uC124\uC815) */\n    csrfRefresher: (() => Promise<void>) | null = null;\n    requestAbortControllers = new Map<string, AbortController>();\n    activeTxId: string | null = null;\n    /** @internal \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uCCAB \uAD6C\uC131 \uC2DC health 1\uD68C \uC790\uB3D9 \uD638\uCD9C\uD588\uB294\uC9C0 \uC5EC\uBD80 */\n    initialHealthFired = false;\n\n    // \uC138\uC158 \uC720\uC9C0 \uAD00\uB828\n    keepSession: boolean;\n    refreshBuffer: number;\n    onTokenRefreshed?: (accessToken: string, expiresIn: number) => void;\n    onSessionExpired?: (error: Error) => void;\n    onHealthChange?: (online: boolean) => void;\n    sessionRefreshToken: string | null = null;\n    refreshTimer: ReturnType<typeof setTimeout> | null = null;\n    healthTickTimer: ReturnType<typeof setInterval> | null = null;\n    healthTickPromise: Promise<unknown> | null = null;\n    realtimeEnabled: boolean;\n    realtimePath: string;\n    realtimeAutoReconnect: boolean;\n    realtimeReconnectDelayMs: number;\n    realtimeStatus: RealtimeConnectionStatus;\n    realtimeSocket: WebSocket | null = null;\n    realtimeConnectPromise: Promise<void> | null = null;\n    realtimeReconnectTimer: ReturnType<typeof setTimeout> | null = null;\n    realtimeShouldReconnect = false;\n    realtimeMessageListeners = new Set<RealtimeMessageListener>();\n    realtimeStatusListeners = new Set<RealtimeStatusListener>();\n    realtimeEventListeners = new Map<string, Set<RealtimeMessageListener>>();\n    // \u2500\u2500\u2500 \uCD08\uAE30\uD654 & \uC124\uC815 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    /**\n     * EntityServerClient \uC778\uC2A4\uD134\uC2A4\uB97C \uC0DD\uC131\uD569\uB2C8\uB2E4.\n     *\n     * \uAE30\uBCF8\uAC12:\n     * - `baseUrl`: `VITE_ENTITY_SERVER_URL` \uB610\uB294 \uC0C1\uB300 \uACBD\uB85C(`\"\"`)\n     */\n    constructor(options: EntityServerClientOptions = {}) {\n        const envBaseUrl = readEnv(\"VITE_ENTITY_SERVER_URL\");\n\n        this.baseUrl = (options.baseUrl ?? envBaseUrl ?? \"\").replace(/\\/$/, \"\");\n        this.token = options.token ?? \"\";\n        this.anonymousPacketToken = options.anonymousPacketToken ?? \"\";\n        this.apiKey = options.apiKey ?? \"\";\n        this.hmacSecret = options.hmacSecret ?? \"\";\n        this.encryptRequests = options.encryptRequests ?? false;\n        this.debugPlainSecret = options.debugPlainSecret ?? \"\";\n        this.csrfEnabled = options.csrfEnabled ?? false;\n        this.csrfHeaderName = options.csrfHeaderName ?? \"x-csrf-token\";\n        this.csrfCookieName = options.csrfCookieName ?? \"_csrf\";\n        this.keepSession = options.keepSession ?? false;\n        this.refreshBuffer = options.refreshBuffer ?? 60;\n        this.onTokenRefreshed = options.onTokenRefreshed;\n        this.onSessionExpired = options.onSessionExpired;\n        this.onHealthChange = options.onHealthChange;\n        this.realtimeEnabled = false;\n        this.realtimePath = REALTIME_DEFAULT_PATH;\n        this.realtimeAutoReconnect = true;\n        this.realtimeReconnectDelayMs = 3000;\n        this.realtimeStatus = \"idle\";\n        this.applyRealtimeOptions(options.realtime);\n        if (\n            typeof options.healthTickInterval === \"number\" &&\n            options.healthTickInterval > 0\n        ) {\n            // csrfRefresher\uB294 AuthMixin\uC5D0\uC11C \uC124\uC815\uB418\uBBC0\uB85C \uB2E4\uC74C tick\uC5D0 \uC2DC\uC791\n            Promise.resolve().then(() =>\n                this.startHealthTick(options.healthTickInterval, false),\n            );\n        }\n\n        // baseUrl \uC774 \uC0DD\uC131 \uC2DC\uC810\uC5D0 \uC815\uD574\uC9C4 \uACBD\uC6B0(env \uB4F1) \uCCAB health \uB97C \uBCF4\uC7A5\uD55C\uB2E4.\n        this.fireInitialHealth();\n    }\n\n    /** baseUrl, token, encryptRequests \uAC12\uC744 \uB7F0\uD0C0\uC784\uC5D0 \uAC31\uC2E0\uD569\uB2C8\uB2E4. */\n    configure(options: Partial<EntityServerClientOptions>): void {\n        if (typeof options.baseUrl === \"string\") {\n            this.baseUrl = options.baseUrl.replace(/\\/$/, \"\");\n        }\n        if (typeof options.token === \"string\") this.token = options.token;\n        if (typeof options.anonymousPacketToken === \"string\") {\n            this.anonymousPacketToken = options.anonymousPacketToken;\n        }\n        if (typeof options.encryptRequests === \"boolean\")\n            this.encryptRequests = options.encryptRequests;\n        if (typeof options.debugPlainSecret === \"string\")\n            this.debugPlainSecret = options.debugPlainSecret;\n        if (typeof options.csrfEnabled === \"boolean\") {\n            this.csrfEnabled = options.csrfEnabled;\n        }\n        if (typeof options.csrfHeaderName === \"string\") {\n            this.csrfHeaderName = options.csrfHeaderName;\n        }\n        if (typeof options.csrfCookieName === \"string\") {\n            this.csrfCookieName = options.csrfCookieName;\n        }\n        if (typeof options.apiKey === \"string\") this.apiKey = options.apiKey;\n        if (typeof options.hmacSecret === \"string\")\n            this.hmacSecret = options.hmacSecret;\n        if (typeof options.keepSession === \"boolean\")\n            this.keepSession = options.keepSession;\n        if (typeof options.refreshBuffer === \"number\")\n            this.refreshBuffer = options.refreshBuffer;\n        if (options.onTokenRefreshed)\n            this.onTokenRefreshed = options.onTokenRefreshed;\n        if (options.onSessionExpired)\n            this.onSessionExpired = options.onSessionExpired;\n        if (options.onHealthChange)\n            this.onHealthChange = options.onHealthChange;\n        if (typeof options.realtime !== \"undefined\") {\n            this.applyRealtimeOptions(options.realtime);\n        }\n        if (\n            typeof options.healthTickInterval === \"number\" &&\n            options.healthTickInterval > 0\n        ) {\n            Promise.resolve().then(() =>\n                this.startHealthTick(options.healthTickInterval, false),\n            );\n        }\n\n        // \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C baseUrl \uC774 \uC815\uD574\uC9C0\uBA74 \uCCAB \uB9C8\uC6B4\uD2B8 \uC2DC health \uB97C 1\uD68C \uC790\uB3D9 \uD638\uCD9C\uD55C\uB2E4.\n        this.fireInitialHealth();\n    }\n\n    /**\n     * \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uD074\uB77C\uC774\uC5B8\uD2B8\uAC00 \uCC98\uC74C \uAD6C\uC131\uB420 \uB54C `/v1/health` \uB97C 1\uD68C \uC790\uB3D9 \uD638\uCD9C\uD55C\uB2E4.\n     *\n     * CSRF\u00B7anon \uCFE0\uD0A4 \uBC1C\uAE09\uACFC \uD328\uD0B7 \uC554\uD638\uD654 \uD611\uC0C1(`X-Packet-Encryption`)\uC744 \uC571 \uC9C4\uC785 \uC989\uC2DC \uC120\uBC18\uC601\uD574,\n     * \uD504\uB7F0\uD2B8 \uB77C\uC6B0\uD2B8(`/login` \uB4F1)\uC640 \uBB34\uAD00\uD558\uAC8C \uD56D\uC0C1 health \uAC00 \uCD5C\uC18C 1\uD68C \uB3CC\uB3C4\uB85D \uBCF4\uC7A5\uD55C\uB2E4.\n     *\n     * @internal\n     */\n    fireInitialHealth(): void {\n        if (this.initialHealthFired) return;\n        if (typeof document === \"undefined\") return;\n        if (!this.baseUrl) return;\n        this.initialHealthFired = true;\n        const self = this as unknown as {\n            checkHealth?: (bootstrapAuth?: boolean) => Promise<unknown>;\n        };\n        if (typeof self.checkHealth !== \"function\") return;\n        Promise.resolve().then(() => self.checkHealth!(false).catch(() => {}));\n    }\n\n    /** \uC778\uC99D \uC694\uCCAD\uC5D0 \uC0AC\uC6A9\uD560 JWT Access Token\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setToken(token: string): void {\n        this.token = token;\n        this.syncRealtimeWithToken();\n    }\n\n    /** \uC751\uB2F5 \uD5E4\uB354\uB85C \uBC1B\uC740 access token \uAC31\uC2E0\uC744 \uBC18\uC601\uD55C\uB2E4. */\n    setAccessTokenFromResponse(token: string): void {\n        this.token = token;\n        this.syncRealtimeWithToken();\n    }\n\n    /** \uD1A0\uD070 \uBCC0\uACBD \uD6C4 realtime \uC5F0\uACB0 \uC0C1\uD0DC\uB97C \uB3D9\uAE30\uD654\uD55C\uB2E4. */\n    syncRealtimeWithToken(): void {\n        if (!this.token) {\n            this.disconnectRealtime(\"token_cleared\");\n            return;\n        }\n\n        if (!this.realtimeEnabled || typeof WebSocket === \"undefined\") {\n            return;\n        }\n\n        void this.connectRealtime().catch(() => {});\n    }\n\n    /** \uC775\uBA85 \uD328\uD0B7 \uC554\uD638\uD654\uC6A9 \uD1A0\uD070\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setAnonymousPacketToken(token: string): void {\n        this.anonymousPacketToken = token;\n    }\n\n    /** HMAC \uC778\uC99D\uC6A9 API Key\uB97C \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setApiKey(apiKey: string): void {\n        this.apiKey = apiKey;\n    }\n\n    /** HMAC \uC778\uC99D\uC6A9 \uC2DC\uD06C\uB9BF\uC744 \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setHmacSecret(secret: string): void {\n        this.hmacSecret = secret;\n    }\n\n    /** \uC554\uD638\uD654 \uC694\uCCAD \uD65C\uC131\uD654 \uC5EC\uBD80\uB97C \uC124\uC815\uD569\uB2C8\uB2E4. */\n    setEncryptRequests(value: boolean): void {\n        this.encryptRequests = value;\n    }\n\n    setCsrfEnabled(enabled: boolean): void {\n        this.csrfEnabled = enabled;\n    }\n\n    addRealtimeListener(listener: RealtimeMessageListener): void {\n        this.realtimeMessageListeners.add(listener);\n    }\n\n    removeRealtimeListener(listener: RealtimeMessageListener): void {\n        this.realtimeMessageListeners.delete(listener);\n    }\n\n    addRealtimeStatusListener(listener: RealtimeStatusListener): void {\n        this.realtimeStatusListeners.add(listener);\n    }\n\n    removeRealtimeStatusListener(listener: RealtimeStatusListener): void {\n        this.realtimeStatusListeners.delete(listener);\n    }\n\n    addRealtimeEventListener(\n        eventName: string,\n        listener: RealtimeMessageListener,\n    ): void {\n        const key = String(eventName).trim();\n        if (!key) {\n            return;\n        }\n        if (!this.realtimeEventListeners.has(key)) {\n            this.realtimeEventListeners.set(key, new Set());\n        }\n        this.realtimeEventListeners.get(key)!.add(listener);\n    }\n\n    removeRealtimeEventListener(\n        eventName: string,\n        listener: RealtimeMessageListener,\n    ): void {\n        const key = String(eventName).trim();\n        if (!key) {\n            return;\n        }\n        const listeners = this.realtimeEventListeners.get(key);\n        if (!listeners) {\n            return;\n        }\n        listeners.delete(listener);\n        if (listeners.size === 0) {\n            this.realtimeEventListeners.delete(key);\n        }\n    }\n\n    async connectRealtime(): Promise<void> {\n        if (!this.realtimeEnabled) {\n            this.setRealtimeStatus(\"disabled\", \"realtime_disabled\");\n            return;\n        }\n\n        if (!this.token) {\n            throw new Error(\n                \"Cannot open realtime connection without access token.\",\n            );\n        }\n\n        if (typeof WebSocket === \"undefined\") {\n            throw new Error(\"WebSocket is not available in this environment.\");\n        }\n\n        if (\n            this.realtimeSocket &&\n            this.realtimeSocket.readyState === WebSocket.OPEN\n        ) {\n            return;\n        }\n\n        if (\n            this.realtimeSocket &&\n            this.realtimeSocket.readyState === WebSocket.CONNECTING &&\n            this.realtimeConnectPromise\n        ) {\n            return this.realtimeConnectPromise;\n        }\n\n        this.clearRealtimeReconnectTimer();\n        this.realtimeShouldReconnect = this.realtimeAutoReconnect;\n        this.setRealtimeStatus(\"connecting\", \"connect_requested\");\n\n        const socket = new WebSocket(this.buildRealtimeUrl());\n        this.realtimeSocket = socket;\n\n        this.realtimeConnectPromise = new Promise<void>((resolve, reject) => {\n            let settled = false;\n\n            const finalizeResolve = () => {\n                if (settled) {\n                    return;\n                }\n                settled = true;\n                this.realtimeConnectPromise = null;\n                resolve();\n            };\n\n            const finalizeReject = (error: Error) => {\n                if (settled) {\n                    return;\n                }\n                settled = true;\n                this.realtimeConnectPromise = null;\n                reject(error);\n            };\n\n            socket.addEventListener(\"open\", () => {\n                this.setRealtimeStatus(\"open\", \"socket_open\");\n                finalizeResolve();\n            });\n\n            socket.addEventListener(\"message\", (event) => {\n                this.handleRealtimeMessage(event.data);\n            });\n\n            socket.addEventListener(\"error\", () => {\n                this.setRealtimeStatus(\n                    \"closed\",\n                    \"socket_error\",\n                    new Error(\"Realtime socket error.\"),\n                );\n            });\n\n            socket.addEventListener(\"close\", (event) => {\n                if (this.realtimeSocket === socket) {\n                    this.realtimeSocket = null;\n                }\n\n                const reason = event.reason || \"socket_closed\";\n                const error = new Error(\n                    `Realtime socket closed (${event.code}${event.reason ? `: ${event.reason}` : \"\"}).`,\n                );\n\n                this.setRealtimeStatus(\"closed\", reason, error);\n                if (!settled) {\n                    finalizeReject(error);\n                }\n\n                if (\n                    this.realtimeShouldReconnect &&\n                    this.realtimeEnabled &&\n                    this.realtimeAutoReconnect &&\n                    this.token\n                ) {\n                    this.scheduleRealtimeReconnect(reason);\n                }\n            });\n        });\n\n        return this.realtimeConnectPromise;\n    }\n\n    disconnectRealtime(reason = \"client_disconnect\"): void {\n        this.realtimeShouldReconnect = false;\n        this.clearRealtimeReconnectTimer();\n\n        if (this.realtimeSocket) {\n            const socket = this.realtimeSocket;\n            this.realtimeSocket = null;\n            try {\n                if (\n                    socket.readyState === WebSocket.OPEN ||\n                    socket.readyState === WebSocket.CONNECTING\n                ) {\n                    socket.close(1000, reason);\n                }\n            } catch {\n                // ignore close errors\n            }\n        }\n\n        this.realtimeConnectPromise = null;\n        this.setRealtimeStatus(\n            this.realtimeEnabled ? \"idle\" : \"disabled\",\n            reason,\n        );\n    }\n\n    sendRealtime(message: RealtimeEnvelope | Record<string, unknown>): boolean {\n        if (\n            !this.realtimeSocket ||\n            this.realtimeSocket.readyState !== WebSocket.OPEN\n        ) {\n            return false;\n        }\n\n        this.realtimeSocket.send(JSON.stringify(message));\n        return true;\n    }\n\n    subscribeRealtime(subscriptions: string[]): boolean {\n        return this.sendRealtime({\n            type: \"subscribe\",\n            channel: \"session\",\n            event: \"session.subscribe\",\n            data: { subscriptions },\n        });\n    }\n\n    unsubscribeRealtime(subscriptions: string[]): boolean {\n        return this.sendRealtime({\n            type: \"unsubscribe\",\n            channel: \"session\",\n            event: \"session.unsubscribe\",\n            data: { subscriptions },\n        });\n    }\n\n    /**\n     * \uC8FC\uAE30\uC801\uC73C\uB85C health \uCCB4\uD06C\uB97C \uC2E4\uD589\uD569\uB2C8\uB2E4.\n     * CSRF \uCFE0\uD0A4 \uAC31\uC2E0\uACFC \uC11C\uBC84 \uC0C1\uD0DC \uD655\uC778\uC744 \uC790\uB3D9\uD654\uD569\uB2C8\uB2E4.\n     * keepSession=true \uC774\uBA74 \uAC01 tick\uC5D0\uC11C \uC138\uC158 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uB3C4 \uD568\uAED8 \uC2DC\uB3C4\uD569\uB2C8\uB2E4.\n     *\n     * @param intervalMs \uD638\uCD9C \uC8FC\uAE30(ms). \uAE30\uBCF8\uAC12: 5\uBD84\n     * @param runImmediately true\uBA74 \uC2DC\uC791 \uC9C1\uD6C4 \uCCAB tick\uC744 \uC989\uC2DC \uC2E4\uD589\uD569\uB2C8\uB2E4.\n     */\n    startHealthTick(\n        intervalMs: number = 5 * 60 * 1000,\n        runImmediately = true,\n    ): void {\n        this.stopHealthTick();\n        const tick = (): void => {\n            if (this.healthTickPromise) return;\n            this.healthTickPromise = (\n                this.csrfRefresher ? this.csrfRefresher() : Promise.resolve()\n            )\n                .then(() => {\n                    this.onHealthChange?.(true);\n                })\n                .catch(() => {\n                    this.onHealthChange?.(false);\n                })\n                .finally(() => {\n                    this.healthTickPromise = null;\n                });\n        };\n        if (runImmediately) {\n            tick();\n        }\n        this.healthTickTimer = setInterval(tick, intervalMs);\n    }\n\n    /** health tick \uD0C0\uC774\uBA38\uB97C \uC911\uC9C0\uD569\uB2C8\uB2E4. */\n    stopHealthTick(): void {\n        if (this.healthTickTimer !== null) {\n            clearInterval(this.healthTickTimer);\n            this.healthTickTimer = null;\n        }\n        this.healthTickPromise = null;\n    }\n\n    // \u2500\u2500\u2500 \uC138\uC158 \uC720\uC9C0 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    /** @deprecated \uC138\uC158 \uC5F0\uC7A5\uC740 health tick \uAE30\uBC18 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uC73C\uB85C \uB300\uCCB4\uB418\uC5C8\uC2B5\uB2C8\uB2E4. */\n    scheduleKeepSession(\n        refreshToken: string,\n        expiresIn: number,\n        refreshFn: (\n            rt: string,\n        ) => Promise<{ access_token: string; expires_in: number }>,\n    ): void {\n        this.clearRefreshTimer();\n        this.sessionRefreshToken = refreshToken;\n        const delayMs = Math.max((expiresIn - this.refreshBuffer) * 1000, 0);\n        this.refreshTimer = setTimeout(async () => {\n            if (!this.sessionRefreshToken) return;\n            try {\n                const result = await refreshFn(this.sessionRefreshToken);\n                this.onTokenRefreshed?.(result.access_token, result.expires_in);\n                this.scheduleKeepSession(\n                    this.sessionRefreshToken,\n                    result.expires_in,\n                    refreshFn,\n                );\n            } catch (err) {\n                this.clearRefreshTimer();\n                this.onSessionExpired?.(\n                    err instanceof Error ? err : new Error(String(err)),\n                );\n            }\n        }, delayMs);\n    }\n\n    /** @deprecated \uC138\uC158 \uC5F0\uC7A5\uC740 health tick \uAE30\uBC18 \uBD80\uD2B8\uC2A4\uD2B8\uB7A9\uC73C\uB85C \uB300\uCCB4\uB418\uC5C8\uC2B5\uB2C8\uB2E4. */\n    clearRefreshTimer(): void {\n        if (this.refreshTimer !== null) {\n            clearTimeout(this.refreshTimer);\n            this.refreshTimer = null;\n        }\n    }\n\n    /**\n     * \uC138\uC158 \uC790\uB3D9 \uC5F0\uC7A5\uC744 \uC911\uC9C0\uD569\uB2C8\uB2E4.\n     * `logout()` \uD638\uCD9C \uC2DC \uC790\uB3D9\uC73C\uB85C \uC911\uC9C0\uB418\uBA70, \uC9C1\uC811 \uD638\uCD9C\uC774 \uD544\uC694\uD55C \uACBD\uC6B0\uB294 \uB4DC\uBB45\uB2C8\uB2E4.\n     */\n    stopKeepSession(): void {\n        this.clearRefreshTimer();\n        this.sessionRefreshToken = null;\n    }\n\n    applyRealtimeOptions(options?: boolean | RealtimeClientOptions): void {\n        const normalized: RealtimeClientOptions =\n            typeof options === \"boolean\"\n                ? { enabled: options }\n                : (options ?? {});\n\n        this.realtimeEnabled = normalized.enabled ?? false;\n        this.realtimePath =\n            String(normalized.path ?? REALTIME_DEFAULT_PATH).trim() ||\n            REALTIME_DEFAULT_PATH;\n        this.realtimeAutoReconnect = normalized.autoReconnect ?? true;\n        this.realtimeReconnectDelayMs = Math.max(\n            250,\n            normalized.reconnectDelayMs ?? 3000,\n        );\n\n        if (!this.realtimeEnabled) {\n            this.disconnectRealtime(\"realtime_disabled\");\n            return;\n        }\n\n        this.setRealtimeStatus(\"idle\", \"realtime_enabled\");\n    }\n\n    buildRealtimeUrl(): string {\n        const rawBaseUrl =\n            this.baseUrl || readEnv(\"VITE_ENTITY_SERVER_URL\") || \"\";\n        const origin =\n            typeof window !== \"undefined\" ? window.location.origin : \"\";\n        const baseUrl = rawBaseUrl || origin;\n\n        if (!baseUrl) {\n            throw new Error(\"Realtime connection requires baseUrl.\");\n        }\n\n        const url = new URL(baseUrl, origin || undefined);\n        const basePath =\n            url.pathname === \"/\" ? \"\" : url.pathname.replace(/\\/+$/, \"\");\n        const realtimePath = `/${this.realtimePath.replace(/^\\/+/, \"\")}`;\n\n        url.pathname = `${basePath}${realtimePath}` || realtimePath;\n        url.search = \"\";\n        url.hash = \"\";\n        url.protocol = url.protocol === \"https:\" ? \"wss:\" : \"ws:\";\n        url.searchParams.set(\"access_token\", this.token);\n        return url.toString();\n    }\n\n    handleRealtimeMessage(payload: unknown): void {\n        if (typeof payload !== \"string\") {\n            return;\n        }\n\n        let envelope: RealtimeEnvelope;\n        try {\n            envelope = JSON.parse(payload) as RealtimeEnvelope;\n        } catch {\n            return;\n        }\n\n        for (const listener of this.realtimeMessageListeners) {\n            listener(envelope);\n        }\n\n        const listeners = this.realtimeEventListeners.get(envelope.event);\n        if (listeners) {\n            for (const listener of listeners) {\n                listener(envelope);\n            }\n        }\n    }\n\n    scheduleRealtimeReconnect(reason: string): void {\n        this.clearRealtimeReconnectTimer();\n        this.realtimeReconnectTimer = setTimeout(() => {\n            this.realtimeReconnectTimer = null;\n            if (!this.realtimeEnabled || !this.token) {\n                return;\n            }\n            this.setRealtimeStatus(\"connecting\", `${reason}:reconnect`);\n            void this.connectRealtime().catch(() => {});\n        }, this.realtimeReconnectDelayMs);\n    }\n\n    clearRealtimeReconnectTimer(): void {\n        if (this.realtimeReconnectTimer !== null) {\n            clearTimeout(this.realtimeReconnectTimer);\n            this.realtimeReconnectTimer = null;\n        }\n    }\n\n    setRealtimeStatus(\n        status: RealtimeConnectionStatus,\n        reason?: string,\n        error?: Error,\n    ): void {\n        const previousStatus = this.realtimeStatus;\n        if (\n            previousStatus === status &&\n            typeof reason === \"undefined\" &&\n            typeof error === \"undefined\"\n        ) {\n            return;\n        }\n\n        this.realtimeStatus = status;\n        for (const listener of this.realtimeStatusListeners) {\n            listener({\n                status,\n                previousStatus,\n                ...(reason ? { reason } : {}),\n                ...(error ? { error } : {}),\n            });\n        }\n    }\n\n    applyCsrfHealth(): void {\n        if (typeof document === \"undefined\") return;\n        for (const chunk of document.cookie.split(\";\")) {\n            const idx = chunk.indexOf(\"=\");\n            if (idx < 0) continue;\n            if (chunk.substring(0, idx).trim() === this.csrfCookieName) {\n                this.csrfEnabled = !!chunk.substring(idx + 1).trim();\n                return;\n            }\n        }\n        this.csrfEnabled = false;\n    }\n\n    // \u2500\u2500\u2500 \uC694\uCCAD \uBCF8\uBB38 \uD30C\uC2F1 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    /**\n     * \uC694\uCCAD \uBC14\uB514\uB97C \uD30C\uC2F1\uD569\uB2C8\uB2E4.\n     * `application/octet-stream`\uC774\uBA74 XChaCha20-Poly1305 \uBCF5\uD638\uD654, \uADF8 \uC678\uB294 JSON \uD30C\uC2F1\uD569\uB2C8\uB2E4.\n     *\n     * @param requireEncrypted `true`\uC774\uBA74 \uC554\uD638\uD654\uB41C \uC694\uCCAD\uB9CC \uD5C8\uC6A9\uD569\uB2C8\uB2E4.\n     */\n    readRequestBody<T = Record<string, unknown>>(\n        body: ArrayBuffer | Uint8Array | string | T | null | undefined,\n        contentType = \"application/json\",\n        requireEncrypted = false,\n    ): T {\n        const key = derivePacketKey(\n            this.hmacSecret,\n            this.token || this.anonymousPacketToken,\n        );\n        return parseRequestBody<T>(body, contentType, requireEncrypted, key);\n    }\n\n    // \u2500\u2500\u2500 \uB0B4\uBD80 \uD5EC\uD37C \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n    get reqOpts(): RequestOptions {\n        return {\n            baseUrl: this.baseUrl,\n            token: this.token,\n            anonymousPacketToken: this.anonymousPacketToken,\n            apiKey: this.apiKey,\n            hmacSecret: this.hmacSecret,\n            encryptRequests: this.encryptRequests,\n            csrfEnabled: this.csrfEnabled,\n            csrfHeaderName: this.csrfHeaderName,\n            csrfCookieName: this.csrfCookieName,\n            refreshCsrfCookie: this.csrfEnabled ? this.csrfRefresher : null,\n            requestAbortControllers: this.requestAbortControllers,\n            debugPlainSecret: this.debugPlainSecret,\n            onAccessToken: (token) => {\n                this.setAccessTokenFromResponse(token);\n            },\n        };\n    }\n\n    // \uC778\uC99D \uC694\uCCAD \uC804\uC5D0 \uD544\uC694\uD55C \uD074\uB77C\uC774\uC5B8\uD2B8 \uC900\uBE44 \uC791\uC5C5\uC744 \uC218\uD589\uD569\uB2C8\uB2E4.\n    prepareRequest(_withAuth: boolean): Promise<void> {\n        return Promise.resolve();\n    }\n\n    /**\n     * \uCEE4\uC2A4\uD140 \uB77C\uC6B0\uD2B8 \uC9C1\uC811 \uD638\uCD9C\uC6A9 HTTP \uB124\uC784\uC2A4\uD398\uC774\uC2A4.\n     * \uC778\uC99D\u00B7\uC554\uD638\uD654\u00B7HMAC \uB4F1 SDK \uC635\uC158\uC774 \uADF8\uB300\uB85C \uC801\uC6A9\uB429\uB2C8\uB2E4.\n     *\n     * @example\n     * const res = await client.http.get<{ version: string }>(\"/api/v1/status\", false);\n     * const res = await client.http.post<MyResponse>(\"/api/v1/custom\", { key: \"value\" });\n     */\n    get http() {\n        // eslint-disable-next-line @typescript-eslint/no-this-alias\n        const self = this;\n        return {\n            get<T>(\n                path: string,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"GET\",\n                            path,\n                            undefined,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n            post<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"POST\",\n                            path,\n                            body,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n            put<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"PUT\",\n                            path,\n                            body,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n            patch<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"PATCH\",\n                            path,\n                            body,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n            delete<T>(\n                path: string,\n                body?: unknown,\n                withAuth = true,\n                extraHeaders?: Record<string, string>,\n                requestConfig?: EntityRequestConfig,\n            ): Promise<T> {\n                return self\n                    .prepareRequest(withAuth)\n                    .then(() =>\n                        entityRequest<T>(\n                            self.reqOpts,\n                            \"DELETE\",\n                            path,\n                            body,\n                            withAuth,\n                            extraHeaders,\n                            requestConfig ?? true,\n                        ),\n                    );\n            },\n        };\n    }\n\n    request<T>(\n        method: string,\n        path: string,\n        body?: unknown,\n        withAuth = true,\n        extraHeaders?: Record<string, string>,\n        requestConfig?: EntityRequestConfig,\n    ): Promise<T> {\n        return this.prepareRequest(withAuth).then(() =>\n            entityRequest<T>(\n                this.reqOpts,\n                method,\n                path,\n                body,\n                withAuth,\n                extraHeaders,\n                requestConfig ?? true,\n            ),\n        );\n    }\n\n    /** PNG/\uBC14\uC774\uB108\uB9AC \uC751\uB2F5\uC744 ArrayBuffer\uB85C \uBC18\uD658\uD569\uB2C8\uB2E4. (QR, \uBC14\uCF54\uB4DC \uB4F1) */\n    async requestBinary(\n        method: string,\n        path: string,\n        body?: unknown,\n        withAuth = true,\n    ): Promise<ArrayBuffer> {\n        await this.prepareRequest(withAuth);\n\n        const headers: Record<string, string> = {\n            \"Content-Type\": \"application/json\",\n        };\n        if (withAuth && this.token)\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\n\n        const res = await fetch(this.baseUrl + path, {\n            method,\n            headers,\n            ...(body != null ? { body: JSON.stringify(body) } : {}),\n            credentials: \"include\",\n        });\n\n        if (!res.ok) {\n            const text = await res.text();\n            const err = new Error(`HTTP ${res.status}: ${text}`);\n            (err as { status?: number }).status = res.status;\n            throw err;\n        }\n\n        return res.arrayBuffer();\n    }\n\n    /** multipart/form-data \uC694\uCCAD\uC744 \uBCF4\uB0C5\uB2C8\uB2E4. (\uD30C\uC77C \uC5C5\uB85C\uB4DC \uB4F1) */\n    async requestForm<T>(\n        method: string,\n        path: string,\n        form: FormData,\n        withAuth = true,\n    ): Promise<T> {\n        const headers: Record<string, string> = {};\n        if (withAuth && this.token)\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\n\n        const res = await fetch(this.baseUrl + path, {\n            method,\n            headers,\n            body: form,\n            credentials: \"include\",\n        });\n\n        const data = (await res.json()) as { ok?: boolean; message?: string };\n        if (!data.ok) {\n            const err = new Error(\n                data.message ?? `EntityServer error (HTTP ${res.status})`,\n            );\n            (err as { status?: number }).status = res.status;\n            throw err;\n        }\n        return data as T;\n    }\n\n    /** multipart/form-data \uC694\uCCAD\uC744 \uBCF4\uB0B4\uACE0 \uBC14\uC774\uB108\uB9AC(ArrayBuffer)\uB97C \uBC18\uD658\uD569\uB2C8\uB2E4. */\n    async requestFormBinary(\n        method: string,\n        path: string,\n        form: FormData,\n        withAuth = true,\n    ): Promise<ArrayBuffer> {\n        const headers: Record<string, string> = {};\n        if (withAuth && this.token)\n            headers[\"Authorization\"] = `Bearer ${this.token}`;\n        if (this.apiKey) headers[\"X-API-Key\"] = this.apiKey;\n\n        const res = await fetch(this.baseUrl + path, {\n            method,\n            headers,\n            body: form,\n            credentials: \"include\",\n        });\n\n        if (!res.ok) {\n            const text = await res.text();\n            const err = new Error(`HTTP ${res.status}: ${text}`);\n            (err as { status?: number }).status = res.status;\n            throw err;\n        }\n\n        return res.arrayBuffer();\n    }\n}\n"],
+  "mappings": "AAQA,OAAS,WAAAA,MAAe,aACxB,OAAS,mBAAAC,EAAiB,oBAAAC,MAAwB,cAClD,OACI,iBAAAC,MAGG,eAEP,MAAMC,EAAwB,eAKvB,MAAMC,CAAuB,CAChC,QACA,MACA,qBACA,OACA,WACA,gBAEA,iBACA,YACA,eACA,eAEA,cAA8C,KAC9C,wBAA0B,IAAI,IAC9B,WAA4B,KAE5B,mBAAqB,GAGrB,YACA,cACA,iBACA,iBACA,eACA,oBAAqC,KACrC,aAAqD,KACrD,gBAAyD,KACzD,kBAA6C,KAC7C,gBACA,aACA,sBACA,yBACA,eACA,eAAmC,KACnC,uBAA+C,KAC/C,uBAA+D,KAC/D,wBAA0B,GAC1B,yBAA2B,IAAI,IAC/B,wBAA0B,IAAI,IAC9B,uBAAyB,IAAI,IAS7B,YAAYC,EAAqC,CAAC,EAAG,CACjD,MAAMC,EAAaP,EAAQ,wBAAwB,EAEnD,KAAK,SAAWM,EAAQ,SAAWC,GAAc,IAAI,QAAQ,MAAO,EAAE,EACtE,KAAK,MAAQD,EAAQ,OAAS,GAC9B,KAAK,qBAAuBA,EAAQ,sBAAwB,GAC5D,KAAK,OAASA,EAAQ,QAAU,GAChC,KAAK,WAAaA,EAAQ,YAAc,GACxC,KAAK,gBAAkBA,EAAQ,iBAAmB,GAClD,KAAK,iBAAmBA,EAAQ,kBAAoB,GACpD,KAAK,YAAcA,EAAQ,aAAe,GAC1C,KAAK,eAAiBA,EAAQ,gBAAkB,eAChD,KAAK,eAAiBA,EAAQ,gBAAkB,QAChD,KAAK,YAAcA,EAAQ,aAAe,GAC1C,KAAK,cAAgBA,EAAQ,eAAiB,GAC9C,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,iBAAmBA,EAAQ,iBAChC,KAAK,eAAiBA,EAAQ,eAC9B,KAAK,gBAAkB,GACvB,KAAK,aAAeF,EACpB,KAAK,sBAAwB,GAC7B,KAAK,yBAA2B,IAChC,KAAK,eAAiB,OACtB,KAAK,qBAAqBE,EAAQ,QAAQ,EAEtC,OAAOA,EAAQ,oBAAuB,UACtCA,EAAQ,mBAAqB,GAG7B,QAAQ,QAAQ,EAAE,KAAK,IACnB,KAAK,gBAAgBA,EAAQ,mBAAoB,EAAK,CAC1D,EAIJ,KAAK,kBAAkB,CAC3B,CAGA,UAAUA,EAAmD,CACrD,OAAOA,EAAQ,SAAY,WAC3B,KAAK,QAAUA,EAAQ,QAAQ,QAAQ,MAAO,EAAE,GAEhD,OAAOA,EAAQ,OAAU,WAAU,KAAK,MAAQA,EAAQ,OACxD,OAAOA,EAAQ,sBAAyB,WACxC,KAAK,qBAAuBA,EAAQ,sBAEpC,OAAOA,EAAQ,iBAAoB,YACnC,KAAK,gBAAkBA,EAAQ,iBAC/B,OAAOA,EAAQ,kBAAqB,WACpC,KAAK,iBAAmBA,EAAQ,kBAChC,OAAOA,EAAQ,aAAgB,YAC/B,KAAK,YAAcA,EAAQ,aAE3B,OAAOA,EAAQ,gBAAmB,WAClC,KAAK,eAAiBA,EAAQ,gBAE9B,OAAOA,EAAQ,gBAAmB,WAClC,KAAK,eAAiBA,EAAQ,gBAE9B,OAAOA,EAAQ,QAAW,WAAU,KAAK,OAASA,EAAQ,QAC1D,OAAOA,EAAQ,YAAe,WAC9B,KAAK,WAAaA,EAAQ,YAC1B,OAAOA,EAAQ,aAAgB,YAC/B,KAAK,YAAcA,EAAQ,aAC3B,OAAOA,EAAQ,eAAkB,WACjC,KAAK,cAAgBA,EAAQ,eAC7BA,EAAQ,mBACR,KAAK,iBAAmBA,EAAQ,kBAChCA,EAAQ,mBACR,KAAK,iBAAmBA,EAAQ,kBAChCA,EAAQ,iBACR,KAAK,eAAiBA,EAAQ,gBAC9B,OAAOA,EAAQ,SAAa,KAC5B,KAAK,qBAAqBA,EAAQ,QAAQ,EAG1C,OAAOA,EAAQ,oBAAuB,UACtCA,EAAQ,mBAAqB,GAE7B,QAAQ,QAAQ,EAAE,KAAK,IACnB,KAAK,gBAAgBA,EAAQ,mBAAoB,EAAK,CAC1D,EAIJ,KAAK,kBAAkB,CAC3B,CAUA,mBAA0B,CAGtB,GAFI,KAAK,oBACL,OAAO,SAAa,KACpB,CAAC,KAAK,QAAS,OACnB,KAAK,mBAAqB,GAC1B,MAAME,EAAO,KAGT,OAAOA,EAAK,aAAgB,YAChC,QAAQ,QAAQ,EAAE,KAAK,IAAMA,EAAK,YAAa,EAAK,EAAE,MAAM,IAAM,CAAC,CAAC,CAAC,CACzE,CAGA,SAASC,EAAqB,CAC1B,KAAK,MAAQA,EACb,KAAK,sBAAsB,CAC/B,CAGA,2BAA2BA,EAAqB,CAC5C,KAAK,MAAQA,EACb,KAAK,sBAAsB,CAC/B,CAGA,uBAA8B,CAC1B,GAAI,CAAC,KAAK,MAAO,CACb,KAAK,mBAAmB,eAAe,EACvC,MACJ,CAEI,CAAC,KAAK,iBAAmB,OAAO,UAAc,KAI7C,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,CAC9C,CAGA,wBAAwBA,EAAqB,CACzC,KAAK,qBAAuBA,CAChC,CAGA,UAAUC,EAAsB,CAC5B,KAAK,OAASA,CAClB,CAGA,cAAcC,EAAsB,CAChC,KAAK,WAAaA,CACtB,CAGA,mBAAmBC,EAAsB,CACrC,KAAK,gBAAkBA,CAC3B,CAEA,eAAeC,EAAwB,CACnC,KAAK,YAAcA,CACvB,CAEA,oBAAoBC,EAAyC,CACzD,KAAK,yBAAyB,IAAIA,CAAQ,CAC9C,CAEA,uBAAuBA,EAAyC,CAC5D,KAAK,yBAAyB,OAAOA,CAAQ,CACjD,CAEA,0BAA0BA,EAAwC,CAC9D,KAAK,wBAAwB,IAAIA,CAAQ,CAC7C,CAEA,6BAA6BA,EAAwC,CACjE,KAAK,wBAAwB,OAAOA,CAAQ,CAChD,CAEA,yBACIC,EACAD,EACI,CACJ,MAAME,EAAM,OAAOD,CAAS,EAAE,KAAK,EAC9BC,IAGA,KAAK,uBAAuB,IAAIA,CAAG,GACpC,KAAK,uBAAuB,IAAIA,EAAK,IAAI,GAAK,EAElD,KAAK,uBAAuB,IAAIA,CAAG,EAAG,IAAIF,CAAQ,EACtD,CAEA,4BACIC,EACAD,EACI,CACJ,MAAME,EAAM,OAAOD,CAAS,EAAE,KAAK,EACnC,GAAI,CAACC,EACD,OAEJ,MAAMC,EAAY,KAAK,uBAAuB,IAAID,CAAG,EAChDC,IAGLA,EAAU,OAAOH,CAAQ,EACrBG,EAAU,OAAS,GACnB,KAAK,uBAAuB,OAAOD,CAAG,EAE9C,CAEA,MAAM,iBAAiC,CACnC,GAAI,CAAC,KAAK,gBAAiB,CACvB,KAAK,kBAAkB,WAAY,mBAAmB,EACtD,MACJ,CAEA,GAAI,CAAC,KAAK,MACN,MAAM,IAAI,MACN,uDACJ,EAGJ,GAAI,OAAO,UAAc,IACrB,MAAM,IAAI,MAAM,iDAAiD,EAGrE,GACI,KAAK,gBACL,KAAK,eAAe,aAAe,UAAU,KAE7C,OAGJ,GACI,KAAK,gBACL,KAAK,eAAe,aAAe,UAAU,YAC7C,KAAK,uBAEL,OAAO,KAAK,uBAGhB,KAAK,4BAA4B,EACjC,KAAK,wBAA0B,KAAK,sBACpC,KAAK,kBAAkB,aAAc,mBAAmB,EAExD,MAAME,EAAS,IAAI,UAAU,KAAK,iBAAiB,CAAC,EACpD,YAAK,eAAiBA,EAEtB,KAAK,uBAAyB,IAAI,QAAc,CAACC,EAASC,IAAW,CACjE,IAAIC,EAAU,GAEd,MAAMC,EAAkB,IAAM,CACtBD,IAGJA,EAAU,GACV,KAAK,uBAAyB,KAC9BF,EAAQ,EACZ,EAEMI,EAAkBC,GAAiB,CACjCH,IAGJA,EAAU,GACV,KAAK,uBAAyB,KAC9BD,EAAOI,CAAK,EAChB,EAEAN,EAAO,iBAAiB,OAAQ,IAAM,CAClC,KAAK,kBAAkB,OAAQ,aAAa,EAC5CI,EAAgB,CACpB,CAAC,EAEDJ,EAAO,iBAAiB,UAAYO,GAAU,CAC1C,KAAK,sBAAsBA,EAAM,IAAI,CACzC,CAAC,EAEDP,EAAO,iBAAiB,QAAS,IAAM,CACnC,KAAK,kBACD,SACA,eACA,IAAI,MAAM,wBAAwB,CACtC,CACJ,CAAC,EAEDA,EAAO,iBAAiB,QAAUO,GAAU,CACpC,KAAK,iBAAmBP,IACxB,KAAK,eAAiB,MAG1B,MAAMQ,EAASD,EAAM,QAAU,gBACzBD,EAAQ,IAAI,MACd,2BAA2BC,EAAM,IAAI,GAAGA,EAAM,OAAS,KAAKA,EAAM,MAAM,GAAK,EAAE,IACnF,EAEA,KAAK,kBAAkB,SAAUC,EAAQF,CAAK,EACzCH,GACDE,EAAeC,CAAK,EAIpB,KAAK,yBACL,KAAK,iBACL,KAAK,uBACL,KAAK,OAEL,KAAK,0BAA0BE,CAAM,CAE7C,CAAC,CACL,CAAC,EAEM,KAAK,sBAChB,CAEA,mBAAmBA,EAAS,oBAA2B,CAInD,GAHA,KAAK,wBAA0B,GAC/B,KAAK,4BAA4B,EAE7B,KAAK,eAAgB,CACrB,MAAMR,EAAS,KAAK,eACpB,KAAK,eAAiB,KACtB,GAAI,EAEIA,EAAO,aAAe,UAAU,MAChCA,EAAO,aAAe,UAAU,aAEhCA,EAAO,MAAM,IAAMQ,CAAM,CAEjC,MAAQ,CAER,CACJ,CAEA,KAAK,uBAAyB,KAC9B,KAAK,kBACD,KAAK,gBAAkB,OAAS,WAChCA,CACJ,CACJ,CAEA,aAAaC,EAA8D,CACvE,MACI,CAAC,KAAK,gBACN,KAAK,eAAe,aAAe,UAAU,KAEtC,IAGX,KAAK,eAAe,KAAK,KAAK,UAAUA,CAAO,CAAC,EACzC,GACX,CAEA,kBAAkBC,EAAkC,CAChD,OAAO,KAAK,aAAa,CACrB,KAAM,YACN,QAAS,UACT,MAAO,oBACP,KAAM,CAAE,cAAAA,CAAc,CAC1B,CAAC,CACL,CAEA,oBAAoBA,EAAkC,CAClD,OAAO,KAAK,aAAa,CACrB,KAAM,cACN,QAAS,UACT,MAAO,sBACP,KAAM,CAAE,cAAAA,CAAc,CAC1B,CAAC,CACL,CAUA,gBACIC,EAAqB,IAAS,IAC9BC,EAAiB,GACb,CACJ,KAAK,eAAe,EACpB,MAAMC,EAAO,IAAY,CACjB,KAAK,oBACT,KAAK,mBACD,KAAK,cAAgB,KAAK,cAAc,EAAI,QAAQ,QAAQ,GAE3D,KAAK,IAAM,CACR,KAAK,iBAAiB,EAAI,CAC9B,CAAC,EACA,MAAM,IAAM,CACT,KAAK,iBAAiB,EAAK,CAC/B,CAAC,EACA,QAAQ,IAAM,CACX,KAAK,kBAAoB,IAC7B,CAAC,EACT,EACID,GACAC,EAAK,EAET,KAAK,gBAAkB,YAAYA,EAAMF,CAAU,CACvD,CAGA,gBAAuB,CACf,KAAK,kBAAoB,OACzB,cAAc,KAAK,eAAe,EAClC,KAAK,gBAAkB,MAE3B,KAAK,kBAAoB,IAC7B,CAKA,oBACIG,EACAC,EACAC,EAGI,CACJ,KAAK,kBAAkB,EACvB,KAAK,oBAAsBF,EAC3B,MAAMG,EAAU,KAAK,KAAKF,EAAY,KAAK,eAAiB,IAAM,CAAC,EACnE,KAAK,aAAe,WAAW,SAAY,CACvC,GAAK,KAAK,oBACV,GAAI,CACA,MAAMG,EAAS,MAAMF,EAAU,KAAK,mBAAmB,EACvD,KAAK,mBAAmBE,EAAO,aAAcA,EAAO,UAAU,EAC9D,KAAK,oBACD,KAAK,oBACLA,EAAO,WACPF,CACJ,CACJ,OAASG,EAAK,CACV,KAAK,kBAAkB,EACvB,KAAK,mBACDA,aAAe,MAAQA,EAAM,IAAI,MAAM,OAAOA,CAAG,CAAC,CACtD,CACJ,CACJ,EAAGF,CAAO,CACd,CAGA,mBAA0B,CAClB,KAAK,eAAiB,OACtB,aAAa,KAAK,YAAY,EAC9B,KAAK,aAAe,KAE5B,CAMA,iBAAwB,CACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAsB,IAC/B,CAEA,qBAAqB7B,EAAiD,CAClE,MAAMgC,EACF,OAAOhC,GAAY,UACb,CAAE,QAASA,CAAQ,EAClBA,GAAW,CAAC,EAYvB,GAVA,KAAK,gBAAkBgC,EAAW,SAAW,GAC7C,KAAK,aACD,OAAOA,EAAW,MAAQlC,CAAqB,EAAE,KAAK,GACtDA,EACJ,KAAK,sBAAwBkC,EAAW,eAAiB,GACzD,KAAK,yBAA2B,KAAK,IACjC,IACAA,EAAW,kBAAoB,GACnC,EAEI,CAAC,KAAK,gBAAiB,CACvB,KAAK,mBAAmB,mBAAmB,EAC3C,MACJ,CAEA,KAAK,kBAAkB,OAAQ,kBAAkB,CACrD,CAEA,kBAA2B,CACvB,MAAMC,EACF,KAAK,SAAWvC,EAAQ,wBAAwB,GAAK,GACnDwC,EACF,OAAO,OAAW,IAAc,OAAO,SAAS,OAAS,GACvDC,EAAUF,GAAcC,EAE9B,GAAI,CAACC,EACD,MAAM,IAAI,MAAM,uCAAuC,EAG3D,MAAMC,EAAM,IAAI,IAAID,EAASD,GAAU,MAAS,EAC1CG,EACFD,EAAI,WAAa,IAAM,GAAKA,EAAI,SAAS,QAAQ,OAAQ,EAAE,EACzDE,EAAe,IAAI,KAAK,aAAa,QAAQ,OAAQ,EAAE,CAAC,GAE9D,OAAAF,EAAI,SAAW,GAAGC,CAAQ,GAAGC,CAAY,IAAMA,EAC/CF,EAAI,OAAS,GACbA,EAAI,KAAO,GACXA,EAAI,SAAWA,EAAI,WAAa,SAAW,OAAS,MACpDA,EAAI,aAAa,IAAI,eAAgB,KAAK,KAAK,EACxCA,EAAI,SAAS,CACxB,CAEA,sBAAsBG,EAAwB,CAC1C,GAAI,OAAOA,GAAY,SACnB,OAGJ,IAAIC,EACJ,GAAI,CACAA,EAAW,KAAK,MAAMD,CAAO,CACjC,MAAQ,CACJ,MACJ,CAEA,UAAW/B,KAAY,KAAK,yBACxBA,EAASgC,CAAQ,EAGrB,MAAM7B,EAAY,KAAK,uBAAuB,IAAI6B,EAAS,KAAK,EAChE,GAAI7B,EACA,UAAWH,KAAYG,EACnBH,EAASgC,CAAQ,CAG7B,CAEA,0BAA0BpB,EAAsB,CAC5C,KAAK,4BAA4B,EACjC,KAAK,uBAAyB,WAAW,IAAM,CAC3C,KAAK,uBAAyB,KAC1B,GAAC,KAAK,iBAAmB,CAAC,KAAK,SAGnC,KAAK,kBAAkB,aAAc,GAAGA,CAAM,YAAY,EACrD,KAAK,gBAAgB,EAAE,MAAM,IAAM,CAAC,CAAC,EAC9C,EAAG,KAAK,wBAAwB,CACpC,CAEA,6BAAoC,CAC5B,KAAK,yBAA2B,OAChC,aAAa,KAAK,sBAAsB,EACxC,KAAK,uBAAyB,KAEtC,CAEA,kBACIqB,EACArB,EACAF,EACI,CACJ,MAAMwB,EAAiB,KAAK,eAC5B,GACI,EAAAA,IAAmBD,GACnB,OAAOrB,EAAW,KAClB,OAAOF,EAAU,KAKrB,MAAK,eAAiBuB,EACtB,UAAWjC,KAAY,KAAK,wBACxBA,EAAS,CACL,OAAAiC,EACA,eAAAC,EACA,GAAItB,EAAS,CAAE,OAAAA,CAAO,EAAI,CAAC,EAC3B,GAAIF,EAAQ,CAAE,MAAAA,CAAM,EAAI,CAAC,CAC7B,CAAC,EAET,CAEA,iBAAwB,CACpB,GAAI,SAAO,SAAa,KACxB,WAAWyB,KAAS,SAAS,OAAO,MAAM,GAAG,EAAG,CAC5C,MAAMC,EAAMD,EAAM,QAAQ,GAAG,EAC7B,GAAI,EAAAC,EAAM,IACND,EAAM,UAAU,EAAGC,CAAG,EAAE,KAAK,IAAM,KAAK,eAAgB,CACxD,KAAK,YAAc,CAAC,CAACD,EAAM,UAAUC,EAAM,CAAC,EAAE,KAAK,EACnD,MACJ,CACJ,CACA,KAAK,YAAc,GACvB,CAUA,gBACIC,EACAC,EAAc,mBACdC,EAAmB,GAClB,CACD,MAAMrC,EAAMf,EACR,KAAK,WACL,KAAK,OAAS,KAAK,oBACvB,EACA,OAAOC,EAAoBiD,EAAMC,EAAaC,EAAkBrC,CAAG,CACvE,CAIA,IAAI,SAA0B,CAC1B,MAAO,CACH,QAAS,KAAK,QACd,MAAO,KAAK,MACZ,qBAAsB,KAAK,qBAC3B,OAAQ,KAAK,OACb,WAAY,KAAK,WACjB,gBAAiB,KAAK,gBACtB,YAAa,KAAK,YAClB,eAAgB,KAAK,eACrB,eAAgB,KAAK,eACrB,kBAAmB,KAAK,YAAc,KAAK,cAAgB,KAC3D,wBAAyB,KAAK,wBAC9B,iBAAkB,KAAK,iBACvB,cAAgBP,GAAU,CACtB,KAAK,2BAA2BA,CAAK,CACzC,CACJ,CACJ,CAGA,eAAe6C,EAAmC,CAC9C,OAAO,QAAQ,QAAQ,CAC3B,CAUA,IAAI,MAAO,CAEP,MAAM9C,EAAO,KACb,MAAO,CACH,IACI+C,EACAC,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,MACA+C,EACA,OACAC,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,EACA,KACIH,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,OACA+C,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,EACA,IACIH,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,MACA+C,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,EACA,MACIH,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,QACA+C,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,EACA,OACIH,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAOlD,EACF,eAAegD,CAAQ,EACvB,KAAK,IACFrD,EACIK,EAAK,QACL,SACA+C,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACR,CACJ,CACJ,CAEA,QACIC,EACAJ,EACAJ,EACAK,EAAW,GACXC,EACAC,EACU,CACV,OAAO,KAAK,eAAeF,CAAQ,EAAE,KAAK,IACtCrD,EACI,KAAK,QACLwD,EACAJ,EACAJ,EACAK,EACAC,EACAC,GAAiB,EACrB,CACJ,CACJ,CAGA,MAAM,cACFC,EACAJ,EACAJ,EACAK,EAAW,GACS,CACpB,MAAM,KAAK,eAAeA,CAAQ,EAElC,MAAMI,EAAkC,CACpC,eAAgB,kBACpB,EACIJ,GAAY,KAAK,QACjBI,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUN,EAAM,CACzC,OAAAI,EACA,QAAAC,EACA,GAAIT,GAAQ,KAAO,CAAE,KAAM,KAAK,UAAUA,CAAI,CAAE,EAAI,CAAC,EACrD,YAAa,SACjB,CAAC,EAED,GAAI,CAACU,EAAI,GAAI,CACT,MAAMC,EAAO,MAAMD,EAAI,KAAK,EACtBxB,EAAM,IAAI,MAAM,QAAQwB,EAAI,MAAM,KAAKC,CAAI,EAAE,EACnD,MAACzB,EAA4B,OAASwB,EAAI,OACpCxB,CACV,CAEA,OAAOwB,EAAI,YAAY,CAC3B,CAGA,MAAM,YACFF,EACAJ,EACAQ,EACAP,EAAW,GACD,CACV,MAAMI,EAAkC,CAAC,EACrCJ,GAAY,KAAK,QACjBI,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUN,EAAM,CACzC,OAAAI,EACA,QAAAC,EACA,KAAMG,EACN,YAAa,SACjB,CAAC,EAEKC,EAAQ,MAAMH,EAAI,KAAK,EAC7B,GAAI,CAACG,EAAK,GAAI,CACV,MAAM3B,EAAM,IAAI,MACZ2B,EAAK,SAAW,4BAA4BH,EAAI,MAAM,GAC1D,EACA,MAACxB,EAA4B,OAASwB,EAAI,OACpCxB,CACV,CACA,OAAO2B,CACX,CAGA,MAAM,kBACFL,EACAJ,EACAQ,EACAP,EAAW,GACS,CACpB,MAAMI,EAAkC,CAAC,EACrCJ,GAAY,KAAK,QACjBI,EAAQ,cAAmB,UAAU,KAAK,KAAK,IAC/C,KAAK,SAAQA,EAAQ,WAAW,EAAI,KAAK,QAE7C,MAAMC,EAAM,MAAM,MAAM,KAAK,QAAUN,EAAM,CACzC,OAAAI,EACA,QAAAC,EACA,KAAMG,EACN,YAAa,SACjB,CAAC,EAED,GAAI,CAACF,EAAI,GAAI,CACT,MAAMC,EAAO,MAAMD,EAAI,KAAK,EACtBxB,EAAM,IAAI,MAAM,QAAQwB,EAAI,MAAM,KAAKC,CAAI,EAAE,EACnD,MAACzB,EAA4B,OAASwB,EAAI,OACpCxB,CACV,CAEA,OAAOwB,EAAI,YAAY,CAC3B,CACJ",
   "names": ["readEnv", "derivePacketKey", "parseRequestBody", "entityRequest", "REALTIME_DEFAULT_PATH", "EntityServerClientBase", "options", "envBaseUrl", "self", "token", "apiKey", "secret", "value", "enabled", "listener", "eventName", "key", "listeners", "socket", "resolve", "reject", "settled", "finalizeResolve", "finalizeReject", "error", "event", "reason", "message", "subscriptions", "intervalMs", "runImmediately", "tick", "refreshToken", "expiresIn", "refreshFn", "delayMs", "result", "err", "normalized", "rawBaseUrl", "origin", "baseUrl", "url", "basePath", "realtimePath", "payload", "envelope", "status", "previousStatus", "chunk", "idx", "body", "contentType", "requireEncrypted", "_withAuth", "path", "withAuth", "extraHeaders", "requestConfig", "method", "headers", "res", "text", "form", "data"]
 }

package/dist/client/request.d.ts

@@ -11,6 +11,12 @@ export interface RequestOptions {
     refreshCsrfCookie: (() => Promise<void>) | null;
     onAccessToken?: (token: string) => void;
     requestAbortControllers: Map<string, AbortController>;
+    /**
+     * dev 디버그 평문 시크릿. 설정되면 요청을 암호화하지 않고(평문),
+     * `X-Debug-Plain` 헤더로 전송한다. 서버의 `DEBUG_PLAIN_SECRET` 과 일치하면
+     * 서버도 해당 요청/응답을 평문으로 처리한다(패킷 암호화 우회).
+     */
+    debugPlainSecret?: string;
 }
 export interface EntityRequestConfig {
     requireOkShape?: boolean;

package/dist/client/request.js

@@ -1,2 +1,2 @@
-import{derivePacketKey as U,encryptPacket as X,decryptPacket as z}from"./packet.js";import{buildHmacHeaders as _}from"./hmac.js";function F(e){switch(e.toUpperCase()){case"POST":case"PUT":case"PATCH":case"DELETE":return!0;default:return!1}}function Q(e,t,n){if(n.autoAbortKey===!1)return null;if(typeof n.autoAbortKey=="string"){const o=n.autoAbortKey.trim();return o||null}return F(e)?`${e.toUpperCase()} ${t}`:null}function V(e){const t=e.filter(s=>!!s);if(t.length===0)return;if(t.length===1)return t[0];if(typeof AbortSignal.any=="function")return AbortSignal.any(t);const n=new AbortController,o=()=>n.abort();for(const s of t){if(s.aborted){n.abort();break}s.addEventListener("abort",o,{once:!0})}return n.signal}function W(e,t,n,o){const s=Q(t,n,o);if(!s)return{signal:o.signal,abortKey:null,controller:null};e.requestAbortControllers.get(s)?.abort();const l=new AbortController;return e.requestAbortControllers.set(s,l),{signal:V([o.signal,l.signal]),abortKey:s,controller:l}}function Y(e,t,n){!t||!n||e.requestAbortControllers.get(t)===n&&e.requestAbortControllers.delete(t)}function Z(e){return e.hmacSecret||e.token||e.anonymousPacketToken}function ee(e,t,n){return e.hmacSecret?e.hmacSecret:t&&e.token||n}function te(e){return e?e.length<=8?`${e.slice(0,2)}...${e.slice(-2)}`:`${e.slice(0,4)}...${e.slice(-4)}`:""}function ne(e){typeof console>"u"||typeof console.error!="function"||console.error("[entity-client] packet decrypt failed",{method:e.method,path:e.path,withAuth:e.withAuth,status:e.status,contentType:e.contentType,responsePacketSource:te(e.responsePacketSource),tokenPresent:e.tokenPresent,anonymousPacketTokenPresent:e.anonymousPacketTokenPresent,hmacEnabled:e.hmacEnabled,error:e.error instanceof Error?{name:e.error.name,message:e.error.message,stack:e.error.stack}:e.error})}function re(e){return e!=="GET"&&e!=="HEAD"&&e!=="OPTIONS"}function E(e){if(typeof document>"u")return"";for(const t of document.cookie.split(";")){const n=t.indexOf("=");if(!(n<0)&&t.substring(0,n).trim()===e)return decodeURIComponent(t.substring(n+1).trim())}return""}function oe(e,t){return e===403&&/csrf/i.test(t)?!0:/csrf/i.test(t)&&/expired|token validation failed/i.test(t)}function se(e,t){return e===401&&/nonce already used/i.test(t)}async function $(e){if((e.headers.get("Content-Type")??"").includes("application/json")){const o=await e.json().catch(()=>null);if(o?.error)return{message:o.error,code:o.code,body:o};if(o?.message)return{message:o.message,code:o.code,body:o}}return{message:await e.text().catch(()=>"")||`HTTP ${e.status}`}}function w(e,t){const n=new Error(t.message);return n.status=e,t.code&&(n.code=t.code),t.body&&(n.details=t.body),n}async function ce(e,t,n,o,s=!0,l={},T=!0){const A=typeof T=="boolean"?{requireOkShape:T}:T,B=A.requireOkShape??!0,P=new Set(A.allowStatuses??[]),S=W(e,t,n,A),D=S.signal,{baseUrl:N,token:k,apiKey:q,hmacSecret:f,encryptRequests:j,csrfEnabled:v,csrfHeaderName:M,csrfCookieName:h,refreshCsrfCookie:p,onAccessToken:R}=e,g=e.anonymousPacketToken||E("anon_token"),y=s&&!!(q&&f),I=Z(e),O=ee(e,s,g),m=v&&re(t)&&!y;let u=m?E(h):"",x="application/json";const L=!y&&!!g;let a=null;if(o!=null)if(j&&!!I&&s&&t!=="GET"&&t!=="HEAD"){const i=U(f,k||g);a=X(new TextEncoder().encode(JSON.stringify(o)),i),x="application/octet-stream"}else a=JSON.stringify(o);const G=r=>{const i={...l},d=Object.keys(i).some(c=>c.toLowerCase()==="content-type");if(a!=null&&!d&&(i["Content-Type"]=x),!y&&s&&k&&(i.Authorization=`Bearer ${k}`),L&&(i["X-Packet-Token"]=g),m&&r&&(i[M]=r),y){const c=a instanceof Uint8Array?a:typeof a=="string"?new TextEncoder().encode(a):new Uint8Array(0);Object.assign(i,_(t,n,c,q,f))}return i};m&&!u&&p&&(await p(),u=E(h));const C=r=>fetch(N+n,{method:t,headers:G(r),...a!=null?{body:a}:{},credentials:"include",signal:D});try{let r=await C(u);if(!r.ok){const b=await $(r.clone());if(y&&se(r.status,b.message))r=await C(u);else if(m&&p&&oe(r.status,b.message))await p(),u=E(h),r=await C(u);else if(!P.has(r.status))throw w(r.status,b)}if(!r.ok&&!P.has(r.status))throw w(r.status,await $(r));const i=r.headers.get("X-Access-Token")?.trim()??"",d=r.headers.get("Content-Type")??"";if(d.includes("application/octet-stream")){const b=U(f,O),J=await r.arrayBuffer();let H;try{H=z(J,b)}catch(K){throw ne({method:t,path:n,withAuth:s,status:r.status,contentType:d,responsePacketSource:O,tokenPresent:!!k,anonymousPacketTokenPresent:!!g,hmacEnabled:!!f,error:K}),K}return i&&R?.(i),H}if(i&&R?.(i),!d.includes("application/json"))return await r.text();const c=await r.json();if(B&&!c.ok&&!P.has(r.status))throw w(r.status,{message:c.message??`EntityServer error (HTTP ${r.status})`,code:c.code,body:c});return c}finally{Y(e,S.abortKey,S.controller)}}export{ce as entityRequest};
+import{derivePacketKey as D,encryptPacket as z,decryptPacket as _}from"./packet.js";import{buildHmacHeaders as F}from"./hmac.js";function Q(e){switch(e.toUpperCase()){case"POST":case"PUT":case"PATCH":case"DELETE":return!0;default:return!1}}function V(e,t,n){if(n.autoAbortKey===!1)return null;if(typeof n.autoAbortKey=="string"){const o=n.autoAbortKey.trim();return o||null}return typeof window>"u"?null:Q(e)?`${e.toUpperCase()} ${t}`:null}function W(e){const t=e.filter(s=>!!s);if(t.length===0)return;if(t.length===1)return t[0];if(typeof AbortSignal.any=="function")return AbortSignal.any(t);const n=new AbortController,o=()=>n.abort();for(const s of t){if(s.aborted){n.abort();break}s.addEventListener("abort",o,{once:!0})}return n.signal}function Y(e,t,n,o){const s=V(t,n,o);if(!s)return{signal:o.signal,abortKey:null,controller:null};e.requestAbortControllers.get(s)?.abort();const l=new AbortController;return e.requestAbortControllers.set(s,l),{signal:W([o.signal,l.signal]),abortKey:s,controller:l}}function Z(e,t,n){!t||!n||e.requestAbortControllers.get(t)===n&&e.requestAbortControllers.delete(t)}function ee(e){return e.hmacSecret||e.token||e.anonymousPacketToken}function te(e,t,n){return e.hmacSecret?e.hmacSecret:t&&e.token||n}function ne(e){return e?e.length<=8?`${e.slice(0,2)}...${e.slice(-2)}`:`${e.slice(0,4)}...${e.slice(-4)}`:""}function re(e){typeof console>"u"||typeof console.error!="function"||console.error("[entity-client] packet decrypt failed",{method:e.method,path:e.path,withAuth:e.withAuth,status:e.status,contentType:e.contentType,responsePacketSource:ne(e.responsePacketSource),tokenPresent:e.tokenPresent,anonymousPacketTokenPresent:e.anonymousPacketTokenPresent,hmacEnabled:e.hmacEnabled,error:e.error instanceof Error?{name:e.error.name,message:e.error.message,stack:e.error.stack}:e.error})}function oe(e){return e!=="GET"&&e!=="HEAD"&&e!=="OPTIONS"}function E(e){if(typeof document>"u")return"";for(const t of document.cookie.split(";")){const n=t.indexOf("=");if(!(n<0)&&t.substring(0,n).trim()===e)return decodeURIComponent(t.substring(n+1).trim())}return""}function se(e,t){return e===403&&/csrf/i.test(t)?!0:/csrf/i.test(t)&&/expired|token validation failed/i.test(t)}function ie(e,t){return e===401&&/nonce already used/i.test(t)}async function $(e){if((e.headers.get("Content-Type")??"").includes("application/json")){const o=await e.json().catch(()=>null);if(o?.error)return{message:o.error,code:o.code,body:o};if(o?.message)return{message:o.message,code:o.code,body:o}}return{message:await e.text().catch(()=>"")||`HTTP ${e.status}`}}function q(e,t){const n=new Error(t.message);return n.status=e,t.code&&(n.code=t.code),t.body&&(n.details=t.body),n}async function ue(e,t,n,o,s=!0,l={},T=!0){const P=typeof T=="boolean"?{requireOkShape:T}:T,B=P.requireOkShape??!0,A=new Set(P.allowStatuses??[]),S=Y(e,t,n,P),N=S.signal,{baseUrl:j,token:k,apiKey:R,hmacSecret:f,encryptRequests:v,csrfEnabled:M,csrfHeaderName:I,csrfCookieName:h,refreshCsrfCookie:p,onAccessToken:O,debugPlainSecret:C}=e,g=e.anonymousPacketToken||E("anon_token"),y=s&&!!(R&&f),L=ee(e),x=te(e,s,g),m=M&&oe(t)&&!y;let u=m?E(h):"",H="application/json";const X=!y&&!!g;let a=null;if(o!=null)if(!C&&v&&!!L&&s&&t!=="GET"&&t!=="HEAD"){const i=D(f,k||g);a=z(new TextEncoder().encode(JSON.stringify(o)),i),H="application/octet-stream"}else a=JSON.stringify(o);const G=r=>{const i={...l},d=Object.keys(i).some(c=>c.toLowerCase()==="content-type");if(a!=null&&!d&&(i["Content-Type"]=H),!y&&s&&k&&(i.Authorization=`Bearer ${k}`),X&&(i["X-Packet-Token"]=g),C&&(i["X-Debug-Plain"]=C),m&&r&&(i[I]=r),y){const c=a instanceof Uint8Array?a:typeof a=="string"?new TextEncoder().encode(a):new Uint8Array(0);Object.assign(i,F(t,n,c,R,f))}return i};m&&!u&&p&&(await p(),u=E(h));const w=r=>fetch(j+n,{method:t,headers:G(r),...a!=null?{body:a}:{},credentials:"include",signal:N});try{let r=await w(u);if(!r.ok){const b=await $(r.clone());if(y&&ie(r.status,b.message))r=await w(u);else if(m&&p&&se(r.status,b.message))await p(),u=E(h),r=await w(u);else if(!A.has(r.status))throw q(r.status,b)}if(!r.ok&&!A.has(r.status))throw q(r.status,await $(r));const i=r.headers.get("X-Access-Token")?.trim()??"",d=r.headers.get("Content-Type")??"";if(d.includes("application/octet-stream")){const b=D(f,x),J=await r.arrayBuffer();let K;try{K=_(J,b)}catch(U){throw re({method:t,path:n,withAuth:s,status:r.status,contentType:d,responsePacketSource:x,tokenPresent:!!k,anonymousPacketTokenPresent:!!g,hmacEnabled:!!f,error:U}),U}return i&&O?.(i),K}if(i&&O?.(i),!d.includes("application/json"))return await r.text();const c=await r.json();if(B&&!c.ok&&!A.has(r.status))throw q(r.status,{message:c.message??`EntityServer error (HTTP ${r.status})`,code:c.code,body:c});return c}finally{Z(e,S.abortKey,S.controller)}}export{ue as entityRequest};
 //# sourceMappingURL=request.js.map