itd-api 0.9.2 → 0.9.3

package/dist/events/index.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_url = require("../shared/url-Doc0XXW_.cjs");
+const require_url = require("../shared/url-D6wsXm1T.cjs");
 const require_errors = require("../shared/errors-BmP3TKoW.cjs");
 const require_redact = require("../shared/redact-lAmck1Z6.cjs");
-const require_events = require("../shared/events-BsRm_Fba.cjs");
+const require_events = require("../shared/events-C1FudmSe.cjs");
 exports.DEFAULT_BASE_URL = require_url.DEFAULT_BASE_URL;
 exports.EventChannel = require_events.EventChannel;
 exports.EventChannelStatus = require_url.EventChannelStatus;

package/dist/events/index.d.cts

@@ -1,3 +1,3 @@
-import { $ as isItdStateError, A as ItdErrorKind, B as ItdStateError, Bt as RuntimeMode, C as ItdApiError, D as ItdConfigError, E as ItdAuthError, F as ItdNetworkError, Ft as RuntimeOptions, H as ItdValidationError, Ht as systemClock, I as ItdNotFoundError, K as isItdError, P as ItdForbiddenError, R as ItdRateLimitError, S as ItdAbortError, T as ItdApiErrorKind, U as isItdApiError, V as ItdTimeoutError, Vt as ItdClock, W as isItdAuthError, Z as isItdRateLimitError, a as NotificationEvent, at as bearerToken, c as NotificationSettings, cn as EventChannelStatus, ct as Listener, et as isItdValidationError, ft as LIBRARY_VERSION, hn as NotificationType, i as formatNotificationText, it as anonymousAuth, k as ItdError, lt as Unsubscribe, mn as Loose, n as canonicalNotificationType, nt as AuthIdentity, o as normalizeNotification, ot as tokenProvider, r as isKnownNotificationType, rt as AuthProvider, s as Notification, t as resolveNotificationUrl, tt as ClientConnection, ut as DEFAULT_BASE_URL, xt as Logger, yt as ClientHooks, z as ItdServerError } from "../shared/url-Dbj6V6fk.cjs";
-import { $ as EventTransportContext, A as EventHandler, B as NotificationEventContext, C as EventChannelDeps, D as EventSession, E as EventEnqueueOptions, F as EventSequentializer, G as NotificationOfType, H as NotificationEventOfType, I as EventTypeGuard, J as NotificationUpdateOrigin, K as NotificationUpdate, L as runEventMiddleware, M as EventMiddlewareObject, N as EventNext, O as EventSyncReason, P as EventPredicate, Q as EventTransport, R as EventContext, S as EventChannel, T as EventChannelOptions, U as NotificationEventSelector, V as NotificationEventFilter, W as NotificationEventsUpdate, X as UnknownNotificationUpdate, Y as NotificationUpdateType, Z as UnreadCountUpdate, _ as createNotificationEventsClient, a as WebSocketTransportOptions, b as NotificationEventsOptions, c as EventErrorContext, d as EventMiddlewareLike, et as EventTransportFrame, f as EventRouteTable, g as NotificationEventsClientOptions, h as NotificationEventsClient, i as WebSocketTransport, j as EventMiddleware, k as ReconnectOptions, l as EventFilter, m as EventRouter, n as WebSocketLike, o as EventComposer, p as EventRouteSelector, q as NotificationUpdateOfType, r as WebSocketOpenFailureClassifier, s as EventErrorBoundary, t as WebSocketImplementationOptions, tt as UnauthorizedStreamError, u as EventMiddlewareGroup, v as NotificationEvents, w as EventChannelEvents, x as NotificationEventsTransport, y as NotificationEventsMap, z as NotificationContext } from "../shared/events-BCn5LRnT.cjs";
+import { $ as isItdStateError, A as ItdErrorKind, B as ItdStateError, Bt as RuntimeMode, C as ItdApiError, D as ItdConfigError, E as ItdAuthError, F as ItdNetworkError, Ft as RuntimeOptions, H as ItdValidationError, Ht as systemClock, I as ItdNotFoundError, K as isItdError, P as ItdForbiddenError, R as ItdRateLimitError, S as ItdAbortError, T as ItdApiErrorKind, U as isItdApiError, V as ItdTimeoutError, Vt as ItdClock, W as isItdAuthError, Z as isItdRateLimitError, a as NotificationEvent, at as bearerToken, c as NotificationSettings, cn as EventChannelStatus, ct as Listener, et as isItdValidationError, ft as LIBRARY_VERSION, hn as NotificationType, i as formatNotificationText, it as anonymousAuth, k as ItdError, lt as Unsubscribe, mn as Loose, n as canonicalNotificationType, nt as AuthIdentity, o as normalizeNotification, ot as tokenProvider, r as isKnownNotificationType, rt as AuthProvider, s as Notification, t as resolveNotificationUrl, tt as ClientConnection, ut as DEFAULT_BASE_URL, xt as Logger, yt as ClientHooks, z as ItdServerError } from "../shared/url-DubjkRR9.cjs";
+import { $ as EventTransportContext, A as EventHandler, B as NotificationEventContext, C as EventChannelDeps, D as EventSession, E as EventEnqueueOptions, F as EventSequentializer, G as NotificationOfType, H as NotificationEventOfType, I as EventTypeGuard, J as NotificationUpdateOrigin, K as NotificationUpdate, L as runEventMiddleware, M as EventMiddlewareObject, N as EventNext, O as EventSyncReason, P as EventPredicate, Q as EventTransport, R as EventContext, S as EventChannel, T as EventChannelOptions, U as NotificationEventSelector, V as NotificationEventFilter, W as NotificationEventsUpdate, X as UnknownNotificationUpdate, Y as NotificationUpdateType, Z as UnreadCountUpdate, _ as createNotificationEventsClient, a as WebSocketTransportOptions, b as NotificationEventsOptions, c as EventErrorContext, d as EventMiddlewareLike, et as EventTransportFrame, f as EventRouteTable, g as NotificationEventsClientOptions, h as NotificationEventsClient, i as WebSocketTransport, j as EventMiddleware, k as ReconnectOptions, l as EventFilter, m as EventRouter, n as WebSocketLike, o as EventComposer, p as EventRouteSelector, q as NotificationUpdateOfType, r as WebSocketOpenFailureClassifier, s as EventErrorBoundary, t as WebSocketImplementationOptions, tt as UnauthorizedStreamError, u as EventMiddlewareGroup, v as NotificationEvents, w as EventChannelEvents, x as NotificationEventsTransport, y as NotificationEventsMap, z as NotificationContext } from "../shared/events-BPxBF0gQ.cjs";
 export { type AuthIdentity, type AuthProvider, type ClientConnection, type ClientHooks, DEFAULT_BASE_URL, EventChannel, type EventChannelDeps, type EventChannelEvents, type EventChannelOptions, EventChannelStatus, EventComposer, type EventContext, type EventEnqueueOptions, type EventErrorBoundary, type EventErrorContext, type EventFilter, type EventHandler, type EventMiddleware, type EventMiddlewareGroup, type EventMiddlewareLike, type EventMiddlewareObject, type EventNext, type EventPredicate, type EventRouteSelector, type EventRouteTable, EventRouter, type EventSequentializer, type EventSession, type EventSyncReason, type EventTransport, type EventTransportContext, type EventTransportFrame, type EventTypeGuard, ItdAbortError, ItdApiError, ItdApiErrorKind, ItdAuthError, type ItdClock, ItdConfigError, ItdError, ItdErrorKind, ItdForbiddenError, ItdNetworkError, ItdNotFoundError, ItdRateLimitError, ItdServerError, ItdStateError, ItdTimeoutError, ItdValidationError, LIBRARY_VERSION, type Listener, type Logger, type Loose, type Notification, type NotificationContext, type NotificationEvent, type NotificationEventContext, type NotificationEventFilter, type NotificationEventOfType, type NotificationEventSelector, NotificationEvents, NotificationEventsClient, type NotificationEventsClientOptions, type NotificationEventsMap, type NotificationEventsOptions, NotificationEventsTransport, type NotificationEventsUpdate, type NotificationOfType, type NotificationSettings, NotificationType, type NotificationUpdate, type NotificationUpdateOfType, NotificationUpdateOrigin, NotificationUpdateType, type ReconnectOptions, RuntimeMode, type RuntimeOptions, UnauthorizedStreamError, type UnknownNotificationUpdate, type UnreadCountUpdate, type Unsubscribe, type WebSocketImplementationOptions, type WebSocketLike, type WebSocketOpenFailureClassifier, WebSocketTransport, type WebSocketTransportOptions, anonymousAuth, bearerToken, canonicalNotificationType, createNotificationEventsClient, formatNotificationText, isItdApiError, isItdAuthError, isItdError, isItdRateLimitError, isItdStateError, isItdValidationError, isKnownNotificationType, normalizeNotification, resolveNotificationUrl, runEventMiddleware, systemClock, tokenProvider };

package/dist/events/index.d.ts

@@ -1,3 +1,3 @@
-import { $ as isItdStateError, A as ItdErrorKind, B as ItdStateError, Bt as RuntimeMode, C as ItdApiError, D as ItdConfigError, E as ItdAuthError, F as ItdNetworkError, Ft as RuntimeOptions, H as ItdValidationError, Ht as systemClock, I as ItdNotFoundError, K as isItdError, P as ItdForbiddenError, R as ItdRateLimitError, S as ItdAbortError, T as ItdApiErrorKind, U as isItdApiError, V as ItdTimeoutError, Vt as ItdClock, W as isItdAuthError, Z as isItdRateLimitError, a as NotificationEvent, at as bearerToken, c as NotificationSettings, cn as EventChannelStatus, ct as Listener, et as isItdValidationError, ft as LIBRARY_VERSION, hn as NotificationType, i as formatNotificationText, it as anonymousAuth, k as ItdError, lt as Unsubscribe, mn as Loose, n as canonicalNotificationType, nt as AuthIdentity, o as normalizeNotification, ot as tokenProvider, r as isKnownNotificationType, rt as AuthProvider, s as Notification, t as resolveNotificationUrl, tt as ClientConnection, ut as DEFAULT_BASE_URL, xt as Logger, yt as ClientHooks, z as ItdServerError } from "../shared/url-Dbj6V6fk.js";
-import { $ as EventTransportContext, A as EventHandler, B as NotificationEventContext, C as EventChannelDeps, D as EventSession, E as EventEnqueueOptions, F as EventSequentializer, G as NotificationOfType, H as NotificationEventOfType, I as EventTypeGuard, J as NotificationUpdateOrigin, K as NotificationUpdate, L as runEventMiddleware, M as EventMiddlewareObject, N as EventNext, O as EventSyncReason, P as EventPredicate, Q as EventTransport, R as EventContext, S as EventChannel, T as EventChannelOptions, U as NotificationEventSelector, V as NotificationEventFilter, W as NotificationEventsUpdate, X as UnknownNotificationUpdate, Y as NotificationUpdateType, Z as UnreadCountUpdate, _ as createNotificationEventsClient, a as WebSocketTransportOptions, b as NotificationEventsOptions, c as EventErrorContext, d as EventMiddlewareLike, et as EventTransportFrame, f as EventRouteTable, g as NotificationEventsClientOptions, h as NotificationEventsClient, i as WebSocketTransport, j as EventMiddleware, k as ReconnectOptions, l as EventFilter, m as EventRouter, n as WebSocketLike, o as EventComposer, p as EventRouteSelector, q as NotificationUpdateOfType, r as WebSocketOpenFailureClassifier, s as EventErrorBoundary, t as WebSocketImplementationOptions, tt as UnauthorizedStreamError, u as EventMiddlewareGroup, v as NotificationEvents, w as EventChannelEvents, x as NotificationEventsTransport, y as NotificationEventsMap, z as NotificationContext } from "../shared/events-t1uGgpkf.js";
+import { $ as isItdStateError, A as ItdErrorKind, B as ItdStateError, Bt as RuntimeMode, C as ItdApiError, D as ItdConfigError, E as ItdAuthError, F as ItdNetworkError, Ft as RuntimeOptions, H as ItdValidationError, Ht as systemClock, I as ItdNotFoundError, K as isItdError, P as ItdForbiddenError, R as ItdRateLimitError, S as ItdAbortError, T as ItdApiErrorKind, U as isItdApiError, V as ItdTimeoutError, Vt as ItdClock, W as isItdAuthError, Z as isItdRateLimitError, a as NotificationEvent, at as bearerToken, c as NotificationSettings, cn as EventChannelStatus, ct as Listener, et as isItdValidationError, ft as LIBRARY_VERSION, hn as NotificationType, i as formatNotificationText, it as anonymousAuth, k as ItdError, lt as Unsubscribe, mn as Loose, n as canonicalNotificationType, nt as AuthIdentity, o as normalizeNotification, ot as tokenProvider, r as isKnownNotificationType, rt as AuthProvider, s as Notification, t as resolveNotificationUrl, tt as ClientConnection, ut as DEFAULT_BASE_URL, xt as Logger, yt as ClientHooks, z as ItdServerError } from "../shared/url-DubjkRR9.js";
+import { $ as EventTransportContext, A as EventHandler, B as NotificationEventContext, C as EventChannelDeps, D as EventSession, E as EventEnqueueOptions, F as EventSequentializer, G as NotificationOfType, H as NotificationEventOfType, I as EventTypeGuard, J as NotificationUpdateOrigin, K as NotificationUpdate, L as runEventMiddleware, M as EventMiddlewareObject, N as EventNext, O as EventSyncReason, P as EventPredicate, Q as EventTransport, R as EventContext, S as EventChannel, T as EventChannelOptions, U as NotificationEventSelector, V as NotificationEventFilter, W as NotificationEventsUpdate, X as UnknownNotificationUpdate, Y as NotificationUpdateType, Z as UnreadCountUpdate, _ as createNotificationEventsClient, a as WebSocketTransportOptions, b as NotificationEventsOptions, c as EventErrorContext, d as EventMiddlewareLike, et as EventTransportFrame, f as EventRouteTable, g as NotificationEventsClientOptions, h as NotificationEventsClient, i as WebSocketTransport, j as EventMiddleware, k as ReconnectOptions, l as EventFilter, m as EventRouter, n as WebSocketLike, o as EventComposer, p as EventRouteSelector, q as NotificationUpdateOfType, r as WebSocketOpenFailureClassifier, s as EventErrorBoundary, t as WebSocketImplementationOptions, tt as UnauthorizedStreamError, u as EventMiddlewareGroup, v as NotificationEvents, w as EventChannelEvents, x as NotificationEventsTransport, y as NotificationEventsMap, z as NotificationContext } from "../shared/events-DnwfcLxS.js";
 export { type AuthIdentity, type AuthProvider, type ClientConnection, type ClientHooks, DEFAULT_BASE_URL, EventChannel, type EventChannelDeps, type EventChannelEvents, type EventChannelOptions, EventChannelStatus, EventComposer, type EventContext, type EventEnqueueOptions, type EventErrorBoundary, type EventErrorContext, type EventFilter, type EventHandler, type EventMiddleware, type EventMiddlewareGroup, type EventMiddlewareLike, type EventMiddlewareObject, type EventNext, type EventPredicate, type EventRouteSelector, type EventRouteTable, EventRouter, type EventSequentializer, type EventSession, type EventSyncReason, type EventTransport, type EventTransportContext, type EventTransportFrame, type EventTypeGuard, ItdAbortError, ItdApiError, ItdApiErrorKind, ItdAuthError, type ItdClock, ItdConfigError, ItdError, ItdErrorKind, ItdForbiddenError, ItdNetworkError, ItdNotFoundError, ItdRateLimitError, ItdServerError, ItdStateError, ItdTimeoutError, ItdValidationError, LIBRARY_VERSION, type Listener, type Logger, type Loose, type Notification, type NotificationContext, type NotificationEvent, type NotificationEventContext, type NotificationEventFilter, type NotificationEventOfType, type NotificationEventSelector, NotificationEvents, NotificationEventsClient, type NotificationEventsClientOptions, type NotificationEventsMap, type NotificationEventsOptions, NotificationEventsTransport, type NotificationEventsUpdate, type NotificationOfType, type NotificationSettings, NotificationType, type NotificationUpdate, type NotificationUpdateOfType, NotificationUpdateOrigin, NotificationUpdateType, type ReconnectOptions, RuntimeMode, type RuntimeOptions, UnauthorizedStreamError, type UnknownNotificationUpdate, type UnreadCountUpdate, type Unsubscribe, type WebSocketImplementationOptions, type WebSocketLike, type WebSocketOpenFailureClassifier, WebSocketTransport, type WebSocketTransportOptions, anonymousAuth, bearerToken, canonicalNotificationType, createNotificationEventsClient, formatNotificationText, isItdApiError, isItdAuthError, isItdError, isItdRateLimitError, isItdStateError, isItdValidationError, isKnownNotificationType, normalizeNotification, resolveNotificationUrl, runEventMiddleware, systemClock, tokenProvider };

package/dist/events/index.js

@@ -1,5 +1,5 @@
-import { S as NotificationType, a as tokenProvider, c as normalizeNotification, d as canonicalNotificationType, et as DEFAULT_BASE_URL, f as isKnownNotificationType, g as EventChannelStatus, i as bearerToken, it as LIBRARY_VERSION, lt as systemClock, n as formatNotificationText, r as anonymousAuth, t as resolveNotificationUrl } from "../shared/url-i2f-X1hX.js";
+import { S as NotificationType, a as tokenProvider, c as normalizeNotification, d as canonicalNotificationType, et as DEFAULT_BASE_URL, f as isKnownNotificationType, g as EventChannelStatus, i as bearerToken, it as LIBRARY_VERSION, lt as systemClock, n as formatNotificationText, r as anonymousAuth, t as resolveNotificationUrl } from "../shared/url-3Ts6EEHQ.js";
 import { A as isItdStateError, C as isItdError, O as isItdRateLimitError, _ as ItdStateError, a as ItdConfigError, b as isItdApiError, c as ItdErrorKind, d as ItdForbiddenError, f as ItdNetworkError, g as ItdServerError, h as ItdRateLimitError, i as ItdAuthError, j as isItdValidationError, n as ItdApiError, p as ItdNotFoundError, r as ItdApiErrorKind, s as ItdError, t as ItdAbortError, v as ItdTimeoutError, x as isItdAuthError, y as ItdValidationError } from "../shared/errors-GI10kZxk.js";
 import { v as RuntimeMode } from "../shared/redact-DJV0XM3n.js";
-import { a as WebSocketTransport, c as NotificationEventsTransport, d as NotificationUpdateOrigin, f as NotificationUpdateType, h as runEventMiddleware, i as createNotificationEventsClient, m as UnauthorizedStreamError, n as EventRouter, p as EventChannel, r as NotificationEventsClient, s as NotificationEvents, t as EventComposer } from "../shared/events-BIBO2Jif.js";
+import { a as WebSocketTransport, c as NotificationEventsTransport, d as NotificationUpdateOrigin, f as NotificationUpdateType, h as runEventMiddleware, i as createNotificationEventsClient, m as UnauthorizedStreamError, n as EventRouter, p as EventChannel, r as NotificationEventsClient, s as NotificationEvents, t as EventComposer } from "../shared/events-BzjI6pn5.js";
 export { DEFAULT_BASE_URL, EventChannel, EventChannelStatus, EventComposer, EventRouter, ItdAbortError, ItdApiError, ItdApiErrorKind, ItdAuthError, ItdConfigError, ItdError, ItdErrorKind, ItdForbiddenError, ItdNetworkError, ItdNotFoundError, ItdRateLimitError, ItdServerError, ItdStateError, ItdTimeoutError, ItdValidationError, LIBRARY_VERSION, NotificationEvents, NotificationEventsClient, NotificationEventsTransport, NotificationType, NotificationUpdateOrigin, NotificationUpdateType, RuntimeMode, UnauthorizedStreamError, WebSocketTransport, anonymousAuth, bearerToken, canonicalNotificationType, createNotificationEventsClient, formatNotificationText, isItdApiError, isItdAuthError, isItdError, isItdRateLimitError, isItdStateError, isItdValidationError, isKnownNotificationType, normalizeNotification, resolveNotificationUrl, runEventMiddleware, systemClock, tokenProvider };

package/dist/index.cjs

@@ -1,10 +1,10 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_url = require("./shared/url-Doc0XXW_.cjs");
+const require_url = require("./shared/url-D6wsXm1T.cjs");
 const require_errors = require("./shared/errors-BmP3TKoW.cjs");
 const require_redact = require("./shared/redact-lAmck1Z6.cjs");
-const require_render = require("./shared/render-DqVzx68r.cjs");
+const require_render = require("./shared/render-Omy1drH1.cjs");
 const require_options = require("./shared/options-DjEtbVaf.cjs");
-const require_events = require("./shared/events-BsRm_Fba.cjs");
+const require_events = require("./shared/events-C1FudmSe.cjs");
 const require_key_value_store = require("./shared/key-value-store-B5GYVEYZ.cjs");
 const require_storage = require("./shared/storage-CZJZoaz9.cjs");
 const require_multi_storage = require("./shared/multi-storage-s-fPtjoy.cjs");
@@ -75,38 +75,34 @@ function decodeBase64Url(segment) {
 	const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));
 	return new TextDecoder().decode(bytes);
 }
-/**
-* Читает `sub` и `sid` из полезной нагрузки JWT.
-*
-* Подпись не проверяется — ключа для проверки у клиента нет. Прочитанные значения служат
-* лишь метками для разделения локального состояния и не дают доступа: его определяет сервер.
-*/
-function readTokenIdentity(token) {
+/** Читает полезную нагрузку JWT без проверки подписи. */
+function readTokenPayload(token) {
 	try {
 		const payload = token.split(".")[1];
-		if (!payload) return {};
+		if (!payload) return void 0;
 		const parsed = JSON.parse(decodeBase64Url(payload));
-		if (typeof parsed !== "object" || parsed === null) return {};
-		const { sub, sid } = parsed;
-		return {
-			...typeof sub === "string" && sub.length > 0 ? { subject: sub } : {},
-			...typeof sid === "string" && sid.length > 0 ? { sessionId: sid } : {}
-		};
+		if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return void 0;
+		return parsed;
 	} catch {
-		return {};
+		return;
 	}
 }
-/**
-* Читает `sub` из полезной нагрузки JWT.
-*
-* @returns идентификатор владельца токена; `undefined`, если токен не JWT, повреждён
-* или поля `sub` в нём нет
-*/
-function readTokenSubject(token) {
-	return readTokenIdentity(token).subject;
+/** Читает используемые клиентом поля JWT за один раз. */
+function readTokenMetadata(token) {
+	const payload = readTokenPayload(token);
+	if (!payload) return {};
+	const { sub, sid, exp } = payload;
+	const expiresAt = typeof exp === "number" && Number.isFinite(exp) ? exp * 1e3 : void 0;
+	return {
+		...typeof sub === "string" && sub.length > 0 ? { subject: sub } : {},
+		...typeof sid === "string" && sid.length > 0 ? { sessionId: sid } : {},
+		...expiresAt !== void 0 && Number.isFinite(expiresAt) ? { expiresAt } : {}
+	};
 }
 //#endregion
 //#region src/session/auth.ts
+/** Запас до истечения токена на очередь и выполнение запроса. */
+const ACCESS_TOKEN_REFRESH_LEEWAY_MS = 3e4;
 /**
 * Проверяет форму `auth` и сообщает о типичных ошибках понятным текстом.
 *
@@ -306,7 +302,7 @@ var AuthManager = class {
 	* старте читают хранилище один раз и не заводят каждый свой `deviceId`.
 	*/
 	#loading = null;
-	/** Общий промис обновления: к нему присоединяются все, кто получил 401. */
+	/** Текущее обновление: к нему присоединяются запросы той же ревизии. */
 	#refreshing = null;
 	/** Общий промис входа по логину и паролю. */
 	#signingIn = null;
@@ -316,6 +312,7 @@ var AuthManager = class {
 	#externalToken;
 	/** Идентификаторы последнего токена внешнего источника для синхронных потребителей. */
 	#externalIdentity;
+	#tokenMetadata;
 	/**
 	* Идентификатор устройства.
 	*
@@ -329,9 +326,7 @@ var AuthManager = class {
 	* Счётчик смен владельца авторизации.
 	*
 	* Растёт при каждой операции, которая заменяет или очищает сессию извне: `clear`,
-	* `setSession`, `setAccessToken`, вход. `#performRefresh` снимает его значение перед
-	* сетевым запросом и сверяет перед записью — иначе запоздавший ответ обновления мог бы
-	* воскресить уже очищенную сессию поверх `signOut`.
+	* `setSession`, `setAccessToken`, вход. Refresh сверяет снимок до и после сетевого запроса.
 	*/
 	#authEpoch = 0;
 	#externalReadGeneration = 0;
@@ -364,6 +359,7 @@ var AuthManager = class {
 		this.#disposed = true;
 		this.#externalReadGeneration += 1;
 		this.#invalidateInFlight();
+		this.#tokenMetadata = void 0;
 		this.#emitter.removeAllListeners();
 	}
 	/**
@@ -424,12 +420,25 @@ var AuthManager = class {
 		return this.#session?.accessToken ?? null;
 	}
 	#identityForToken(accessToken) {
-		const token = accessToken ? readTokenIdentity(accessToken) : {};
+		const token = this.#metadataForToken(accessToken);
 		return {
 			...token.subject ? { userId: token.subject } : {},
 			...token.sessionId ? { sessionId: token.sessionId } : {}
 		};
 	}
+	#metadataForToken(accessToken) {
+		if (!accessToken) {
+			this.#tokenMetadata = void 0;
+			return {};
+		}
+		if (this.#tokenMetadata?.accessToken === accessToken) return this.#tokenMetadata.value;
+		const value = readTokenMetadata(accessToken);
+		this.#tokenMetadata = {
+			accessToken,
+			value
+		};
+		return value;
+	}
 	async #readExternalToken(getToken) {
 		this.#assertActive();
 		const generation = ++this.#externalReadGeneration;
@@ -476,15 +485,33 @@ var AuthManager = class {
 		if (this.#jar.has("is_auth", this.#config.baseUrl)) return true;
 		return Boolean(this.#session?.refreshToken);
 	}
-	/**
-	* Готовит состояние авторизации до входа запроса в очередь. Стадия `auth_preparation`.
-	*
-	* Загрузка хранилища, внешний источник токена и отложенный вход асинхронны, поэтому
-	* обязаны завершиться до захвата слота очереди.
-	*/
+	/** Готовит внутреннюю сессию до retry исходного запроса. */
+	async preflight(allowRefresh) {
+		this.#assertActive();
+		let accessToken = (await this.#loadSession())?.accessToken;
+		if (!accessToken) {
+			const auth = this.#config.auth;
+			if (typeof auth === "object" && auth !== null && "email" in auth) accessToken = await this.#signInWithCredentials(auth) ?? void 0;
+		}
+		if (!accessToken || !allowRefresh || !this.#config.autoRefresh) return;
+		const expiresAt = this.#metadataForToken(accessToken).expiresAt;
+		if (expiresAt === void 0 || expiresAt > this.#config.clock.now() + ACCESS_TOKEN_REFRESH_LEEWAY_MS || !this.#hasRefreshSession()) return;
+		try {
+			await this.#refreshDeduplicated({
+				epoch: this.#authEpoch,
+				accessToken
+			});
+		} catch (error) {
+			this.#emitter.emit("authError", { error });
+			throw error;
+		}
+	}
+	/** Перед каждой попыткой перечитывает внешний источник токена. */
 	async prepare() {
 		this.#assertActive();
-		await this.token();
+		if ((await this.#loadSession())?.accessToken) return;
+		const auth = this.#config.auth;
+		if (typeof auth === "object" && auth !== null && "getToken" in auth) await this.#readExternalToken(() => auth.getToken());
 	}
 	/**
 	* Заголовки уже подготовленной авторизации без чтения storage или вызова внешнего источника.
@@ -631,7 +658,7 @@ var AuthManager = class {
 	async getUserId() {
 		this.#assertActive();
 		const session = await this.#loadSession();
-		return session?.accessToken ? readTokenSubject(session.accessToken) : void 0;
+		return session?.accessToken ? this.#identityForToken(session.accessToken).userId : void 0;
 	}
 	/** Заменяет сессию и связанные с ней cookie целиком. */
 	async setSession(session) {
@@ -734,24 +761,30 @@ var AuthManager = class {
 		this.#persistence = pending.catch(() => {});
 		return pending;
 	}
-	/**
-	* Обновление с дедупликацией.
-	*
-	* Все, кто пришёл, пока обновление уже идёт, получают его результат, а не запускают своё.
-	*/
-	#refreshDeduplicated() {
-		if (this.#refreshing) return this.#refreshing;
-		const promise = this.#performRefresh().finally(() => {
-			this.#refreshing = null;
+	/** Дедуплицирует refresh одной ревизии; следующая ждёт завершения предыдущей. */
+	#refreshDeduplicated(expectation = { epoch: this.#authEpoch }) {
+		const current = this.#refreshing;
+		if (current) {
+			if (current.epoch === expectation.epoch) return current.promise;
+			return current.promise.then(() => this.#refreshDeduplicated(expectation), () => this.#refreshDeduplicated(expectation));
+		}
+		const promise = this.#performRefresh(expectation).finally(() => {
+			if (this.#refreshing?.promise === promise) this.#refreshing = null;
 		});
-		this.#refreshing = promise;
+		this.#refreshing = {
+			epoch: expectation.epoch,
+			promise
+		};
 		return promise;
 	}
-	async #performRefresh() {
+	#matchesRefreshExpectation(expectation) {
+		return this.#authEpoch === expectation.epoch && (expectation.accessToken === void 0 || this.#session?.accessToken === expectation.accessToken);
+	}
+	async #performRefresh(expectation) {
 		this.#assertActive();
 		await this.#loadSession();
+		if (!this.#matchesRefreshExpectation(expectation)) return this.#currentAccessToken();
 		if (!this.#hasRefreshSession()) return this.#reloginOrNull();
-		const epoch = this.#authEpoch;
 		const flowCookies = this.#jar.clone();
 		try {
 			const accessToken = await this.#http.execute(AUTH_REFRESH, {
@@ -760,7 +793,7 @@ var AuthManager = class {
 				skipAuthRefresh: true,
 				cookieJar: flowCookies
 			});
-			if (this.#authEpoch !== epoch) return this.#session?.accessToken ?? null;
+			if (!this.#matchesRefreshExpectation(expectation)) return this.#session?.accessToken ?? null;
 			this.#jar.replaceWith(flowCookies);
 			const rotated = this.#jar.getValue(require_redact.REFRESH_COOKIE, this.#config.baseUrl + require_redact.REFRESH_COOKIE_PATH);
 			this.#transitionAuth(accessToken, false);
@@ -772,10 +805,11 @@ var AuthManager = class {
 			});
 			this.#emitter.emit("tokens", { accessToken });
 			await saved;
+			if (this.#authEpoch !== expectation.epoch) return this.#currentAccessToken();
 			return accessToken;
 		} catch (error) {
+			if (this.#authEpoch !== expectation.epoch) return this.#currentAccessToken();
 			if (error instanceof require_errors.ItdAuthError) {
-				if (this.#authEpoch !== epoch) return this.#session?.accessToken ?? null;
 				this.#invalidateInFlight();
 				const clearedRevision = this.#authEpoch;
 				this.#transitionAuth(void 0);