quickbase-js 1.1.0 → 2.0.0-alpha.2

package/dist/auth/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Authentication module exports
+ */
+export type { AuthStrategy, AuthContext, CachedToken } from './types.js';
+export { UserTokenStrategy } from './user-token.js';
+export { TempTokenStrategy } from './temp-token.js';
+export { SsoTokenStrategy } from './sso-token.js';
+export { TokenCache } from './token-cache.js';
+import type { AuthConfig } from '../core/types.js';
+import type { AuthStrategy, AuthContext } from './types.js';
+/**
+ * Factory function to create the appropriate auth strategy
+ */
+export declare function createAuthStrategy(authConfig: AuthConfig, context: AuthContext): AuthStrategy;
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK5D;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,WAAW,GACnB,YAAY,CAiBd"}

package/dist/auth/index.js

@@ -0,0 +1,29 @@
+/**
+ * Authentication module exports
+ */
+export { UserTokenStrategy } from './user-token.js';
+export { TempTokenStrategy } from './temp-token.js';
+export { SsoTokenStrategy } from './sso-token.js';
+export { TokenCache } from './token-cache.js';
+import { UserTokenStrategy } from './user-token.js';
+import { TempTokenStrategy } from './temp-token.js';
+import { SsoTokenStrategy } from './sso-token.js';
+/**
+ * Factory function to create the appropriate auth strategy
+ */
+export function createAuthStrategy(authConfig, context) {
+    switch (authConfig.type) {
+        case 'user-token':
+            return new UserTokenStrategy(authConfig.userToken, context);
+        case 'temp-token':
+            return new TempTokenStrategy(authConfig.userToken, context, {
+                appToken: authConfig.appToken,
+                tokenLifespanMs: authConfig.tokenLifespanMs,
+            });
+        case 'sso':
+            return new SsoTokenStrategy(authConfig.samlToken, context);
+        default:
+            throw new Error(`Unknown auth type: ${authConfig.type}`);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAsB,EACtB,OAAoB;IAEpB,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,YAAY;YACf,OAAO,IAAI,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE9D,KAAK,YAAY;YACf,OAAO,IAAI,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE;gBAC1D,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,eAAe,EAAE,UAAU,CAAC,eAAe;aAC5C,CAAC,CAAC;QAEL,KAAK,KAAK;YACR,OAAO,IAAI,gBAAgB,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE7D;YACE,MAAM,IAAI,KAAK,CAAC,sBAAuB,UAA+B,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC"}

package/dist/auth/sso-token.d.ts

@@ -0,0 +1,28 @@
+/**
+ * SSO Token Authentication Strategy
+ *
+ * Exchanges a SAML token for a QuickBase temporary token via OAuth token exchange.
+ */
+import type { AuthStrategy, AuthContext } from './types.js';
+export declare class SsoTokenStrategy implements AuthStrategy {
+    private readonly samlToken;
+    private readonly realm;
+    private readonly baseUrl;
+    private readonly fetchApi;
+    private readonly logger;
+    private readonly cache;
+    /**
+     * Track pending SSO token exchange to deduplicate concurrent requests
+     */
+    private pendingExchange;
+    constructor(samlToken: string, context: AuthContext, options?: {
+        tokenLifespanMs?: number;
+    });
+    private get cacheKey();
+    getToken(_dbid?: string): Promise<string>;
+    private exchangeToken;
+    getAuthorizationHeader(token: string): string;
+    handleAuthError(_dbid?: string): Promise<boolean>;
+    invalidate(_dbid?: string): void;
+}
+//# sourceMappingURL=sso-token.d.ts.map

package/dist/auth/sso-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso-token.d.ts","sourceRoot":"","sources":["../../src/auth/sso-token.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAM5D,qBAAa,gBAAiB,YAAW,YAAY;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC;;OAEG;IACH,OAAO,CAAC,eAAe,CAAgC;gBAGrD,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE;IAaxC,OAAO,KAAK,QAAQ,GAEnB;IAEK,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YA2BjC,aAAa;IA+C3B,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIvC,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAevD,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;CAIjC"}

package/dist/auth/sso-token.js

@@ -0,0 +1,108 @@
+/**
+ * SSO Token Authentication Strategy
+ *
+ * Exchanges a SAML token for a QuickBase temporary token via OAuth token exchange.
+ */
+import { TokenCache } from './token-cache.js';
+import { DEFAULT_CONFIG } from '../core/types.js';
+import { AuthenticationError } from '../core/errors.js';
+export class SsoTokenStrategy {
+    samlToken;
+    realm;
+    baseUrl;
+    fetchApi;
+    logger;
+    cache;
+    /**
+     * Track pending SSO token exchange to deduplicate concurrent requests
+     */
+    pendingExchange = null;
+    constructor(samlToken, context, options) {
+        this.samlToken = samlToken;
+        this.realm = context.realm;
+        this.baseUrl = context.baseUrl;
+        this.fetchApi = context.fetchApi;
+        this.logger = context.logger;
+        // SSO tokens are global, not per-dbid, so we use a single cache key
+        this.cache = new TokenCache(options?.tokenLifespanMs ?? DEFAULT_CONFIG.tempTokenLifespanMs);
+    }
+    get cacheKey() {
+        return '__sso__';
+    }
+    async getToken(_dbid) {
+        // Check cache first
+        const cachedToken = this.cache.get(this.cacheKey);
+        if (cachedToken) {
+            this.logger.token('cache-hit');
+            return cachedToken;
+        }
+        this.logger.token('cache-miss');
+        // Check if there's already an exchange in progress
+        if (this.pendingExchange) {
+            this.logger.debug('Waiting for existing SSO token exchange');
+            return this.pendingExchange;
+        }
+        // Exchange SAML token for QuickBase token
+        const exchangePromise = this.exchangeToken();
+        this.pendingExchange = exchangePromise;
+        try {
+            return await exchangePromise;
+        }
+        finally {
+            this.pendingExchange = null;
+        }
+    }
+    async exchangeToken() {
+        this.logger.token('fetch');
+        const url = `${this.baseUrl}/auth/oauth/token`;
+        const body = new URLSearchParams({
+            grant_type: 'urn:ietf:params:oauth:grant-type:token-exchange',
+            requested_token_type: 'urn:quickbase:params:oauth:token-type:temp_token',
+            subject_token: this.samlToken,
+            subject_token_type: 'urn:ietf:params:oauth:token-type:saml2',
+        });
+        const response = await this.fetchApi(url, {
+            method: 'POST',
+            headers: {
+                'QB-Realm-Hostname': `${this.realm}.quickbase.com`,
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new AuthenticationError(`SSO token exchange failed: ${response.status} ${errorText}`, { rayId: response.headers.get('qb-api-ray') || undefined });
+        }
+        const data = await response.json();
+        const token = data.access_token;
+        if (!token) {
+            throw new AuthenticationError('No access_token in SSO exchange response');
+        }
+        // Cache the token
+        this.cache.set(this.cacheKey, token);
+        this.logger.debug('Cached new SSO token');
+        return token;
+    }
+    getAuthorizationHeader(token) {
+        return `QB-TEMP-TOKEN ${token}`;
+    }
+    async handleAuthError(_dbid) {
+        // Invalidate the cached token
+        this.invalidate();
+        // Try to exchange for a new token
+        try {
+            this.logger.token('refresh');
+            await this.getToken();
+            return true;
+        }
+        catch (error) {
+            this.logger.error('Failed to refresh SSO token', error);
+            return false;
+        }
+    }
+    invalidate(_dbid) {
+        this.logger.token('expire');
+        this.cache.clear();
+    }
+}
+//# sourceMappingURL=sso-token.js.map

package/dist/auth/sso-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso-token.js","sourceRoot":"","sources":["../../src/auth/sso-token.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,OAAO,gBAAgB;IACV,SAAS,CAAS;IAClB,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,QAAQ,CAAe;IACvB,MAAM,CAAS;IACf,KAAK,CAAa;IAEnC;;OAEG;IACK,eAAe,GAA2B,IAAI,CAAC;IAEvD,YACE,SAAiB,EACjB,OAAoB,EACpB,OAAsC;QAEtC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,oEAAoE;QACpE,IAAI,CAAC,KAAK,GAAG,IAAI,UAAU,CACzB,OAAO,EAAE,eAAe,IAAI,cAAc,CAAC,mBAAmB,CAC/D,CAAC;IACJ,CAAC;IAED,IAAY,QAAQ;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAc;QAC3B,oBAAoB;QACpB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC/B,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEhC,mDAAmD;QACnD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9B,CAAC;QAED,0CAA0C;QAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAEvC,IAAI,CAAC;YACH,OAAO,MAAM,eAAe,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE3B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,mBAAmB,CAAC;QAE/C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,iDAAiD;YAC7D,oBAAoB,EAAE,kDAAkD;YACxE,aAAa,EAAE,IAAI,CAAC,SAAS;YAC7B,kBAAkB,EAAE,wCAAwC;SAC7D,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YACxC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,mBAAmB,EAAE,GAAG,IAAI,CAAC,KAAK,gBAAgB;gBAClD,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,mBAAmB,CAC3B,8BAA8B,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,EAC5D,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAI/B,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,mBAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC5E,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAE1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sBAAsB,CAAC,KAAa;QAClC,OAAO,iBAAiB,KAAK,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAc;QAClC,8BAA8B;QAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;QAElB,kCAAkC;QAClC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,UAAU,CAAC,KAAc;QACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/auth/temp-token.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Temporary Token Authentication Strategy
+ *
+ * Fetches database-specific temporary tokens from the QuickBase API.
+ * Tokens are cached and automatically refreshed when expired.
+ */
+import type { AuthStrategy, AuthContext } from './types.js';
+export declare class TempTokenStrategy implements AuthStrategy {
+    private readonly userToken?;
+    private readonly appToken?;
+    private readonly realm;
+    private readonly baseUrl;
+    private readonly fetchApi;
+    private readonly logger;
+    private readonly cache;
+    /**
+     * Track pending token fetches to deduplicate concurrent requests
+     * This prevents multiple simultaneous API calls for the same dbid
+     */
+    private readonly pendingFetches;
+    constructor(userToken: string | undefined, context: AuthContext, options?: {
+        appToken?: string;
+        tokenLifespanMs?: number;
+    });
+    getToken(dbid?: string): Promise<string>;
+    private fetchToken;
+    getAuthorizationHeader(token: string): string;
+    handleAuthError(dbid?: string): Promise<boolean>;
+    invalidate(dbid?: string): void;
+}
+//# sourceMappingURL=temp-token.d.ts.map

package/dist/auth/temp-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temp-token.d.ts","sourceRoot":"","sources":["../../src/auth/temp-token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAM5D,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IAEnC;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsC;gBAGnE,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE;IAarD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAiChC,UAAU;IA2CxB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIvC,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBtD,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;CAShC"}

package/dist/auth/temp-token.js

@@ -0,0 +1,121 @@
+/**
+ * Temporary Token Authentication Strategy
+ *
+ * Fetches database-specific temporary tokens from the QuickBase API.
+ * Tokens are cached and automatically refreshed when expired.
+ */
+import { TokenCache } from './token-cache.js';
+import { DEFAULT_CONFIG } from '../core/types.js';
+import { AuthenticationError } from '../core/errors.js';
+export class TempTokenStrategy {
+    userToken;
+    appToken;
+    realm;
+    baseUrl;
+    fetchApi;
+    logger;
+    cache;
+    /**
+     * Track pending token fetches to deduplicate concurrent requests
+     * This prevents multiple simultaneous API calls for the same dbid
+     */
+    pendingFetches = new Map();
+    constructor(userToken, context, options) {
+        this.userToken = userToken;
+        this.appToken = options?.appToken;
+        this.realm = context.realm;
+        this.baseUrl = context.baseUrl;
+        this.fetchApi = context.fetchApi;
+        this.logger = context.logger;
+        this.cache = new TokenCache(options?.tokenLifespanMs ?? DEFAULT_CONFIG.tempTokenLifespanMs);
+    }
+    async getToken(dbid) {
+        if (!dbid) {
+            throw new Error('Database ID (dbid) is required for temporary token authentication');
+        }
+        // Check cache first
+        const cachedToken = this.cache.get(dbid);
+        if (cachedToken) {
+            this.logger.token('cache-hit', dbid);
+            return cachedToken;
+        }
+        this.logger.token('cache-miss', dbid);
+        // Check if there's already a fetch in progress for this dbid
+        const pendingFetch = this.pendingFetches.get(dbid);
+        if (pendingFetch) {
+            this.logger.debug(`Waiting for existing token fetch for dbid: ${dbid}`);
+            return pendingFetch;
+        }
+        // Fetch new token
+        const fetchPromise = this.fetchToken(dbid);
+        this.pendingFetches.set(dbid, fetchPromise);
+        try {
+            const token = await fetchPromise;
+            return token;
+        }
+        finally {
+            this.pendingFetches.delete(dbid);
+        }
+    }
+    async fetchToken(dbid) {
+        this.logger.token('fetch', dbid);
+        const url = `${this.baseUrl}/auth/temporary/${dbid}`;
+        const headers = {
+            'QB-Realm-Hostname': `${this.realm}.quickbase.com`,
+            'Authorization': `QB-USER-TOKEN ${this.userToken}`,
+            'Content-Type': 'application/json',
+        };
+        if (this.appToken) {
+            headers['QB-App-Token'] = this.appToken;
+        }
+        const response = await this.fetchApi(url, {
+            method: 'GET',
+            headers,
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new AuthenticationError(`Failed to fetch temporary token for ${dbid}: ${response.status} ${errorText}`, { rayId: response.headers.get('qb-api-ray') || undefined });
+        }
+        const data = await response.json();
+        const token = data.temporaryAuthorization;
+        if (!token) {
+            throw new AuthenticationError(`No temporary token in response for ${dbid}`);
+        }
+        // Cache the token
+        this.cache.set(dbid, token);
+        this.logger.debug(`Cached new token for dbid: ${dbid}`);
+        return token;
+    }
+    getAuthorizationHeader(token) {
+        return `QB-TEMP-TOKEN ${token}`;
+    }
+    async handleAuthError(dbid) {
+        if (!dbid) {
+            this.logger.debug('Auth error without dbid - cannot refresh temp token');
+            return false;
+        }
+        // Invalidate the cached token
+        this.invalidate(dbid);
+        // Try to fetch a new token
+        try {
+            this.logger.token('refresh', dbid);
+            await this.getToken(dbid);
+            return true;
+        }
+        catch (error) {
+            this.logger.error(`Failed to refresh temp token for ${dbid}`, error);
+            return false;
+        }
+    }
+    invalidate(dbid) {
+        if (dbid) {
+            this.logger.token('expire', dbid);
+            this.cache.delete(dbid);
+        }
+        else {
+            // Invalidate all tokens
+            this.cache.clear();
+        }
+    }
+}
+//# sourceMappingURL=temp-token.js.map

package/dist/auth/temp-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"temp-token.js","sourceRoot":"","sources":["../../src/auth/temp-token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,OAAO,iBAAiB;IACX,SAAS,CAAU;IACnB,QAAQ,CAAU;IAClB,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,QAAQ,CAAe;IACvB,MAAM,CAAS;IACf,KAAK,CAAa;IAEnC;;;OAGG;IACc,cAAc,GAAG,IAAI,GAAG,EAA2B,CAAC;IAErE,YACE,SAA6B,EAC7B,OAAoB,EACpB,OAAyD;QAEzD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,UAAU,CACzB,OAAO,EAAE,eAAe,IAAI,cAAc,CAAC,mBAAmB,CAC/D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAa;QAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,oBAAoB;QACpB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACrC,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAEtC,6DAA6D;QAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;YACxE,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,kBAAkB;QAClB,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAY;QACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAEjC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,mBAAmB,IAAI,EAAE,CAAC;QACrD,MAAM,OAAO,GAA2B;YACtC,mBAAmB,EAAE,GAAG,IAAI,CAAC,KAAK,gBAAgB;YAClD,eAAe,EAAE,iBAAiB,IAAI,CAAC,SAAS,EAAE;YAClD,cAAc,EAAE,kBAAkB;SACnC,CAAC;QAEF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YACxC,MAAM,EAAE,KAAK;YACb,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,mBAAmB,CAC3B,uCAAuC,IAAI,KAAK,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,EAC9E,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyC,CAAC;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC;QAE1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,mBAAmB,CAC3B,sCAAsC,IAAI,EAAE,CAC7C,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;QAExD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sBAAsB,CAAC,KAAa;QAClC,OAAO,iBAAiB,KAAK,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAa;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtB,2BAA2B;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACnC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,UAAU,CAAC,IAAa;QACtB,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,wBAAwB;YACxB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;CACF"}

package/dist/auth/token-cache.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Token cache with TTL support
+ *
+ * Manages cached temporary tokens with expiration handling.
+ * Tokens are stored per-dbid since QuickBase temp tokens are database-specific.
+ */
+export declare class TokenCache {
+    private readonly cache;
+    private readonly defaultLifespanMs;
+    constructor(defaultLifespanMs: number);
+    /**
+     * Get a cached token if it exists and is not expired
+     */
+    get(dbid: string): string | null;
+    /**
+     * Store a token with optional custom lifespan
+     */
+    set(dbid: string, token: string, lifespanMs?: number): void;
+    /**
+     * Remove a specific token from cache
+     */
+    delete(dbid: string): boolean;
+    /**
+     * Clear all cached tokens
+     */
+    clear(): void;
+    /**
+     * Check if a token exists and is valid
+     */
+    has(dbid: string): boolean;
+    /**
+     * Get time until token expires (in ms), or null if not cached
+     */
+    getTimeToExpiry(dbid: string): number | null;
+    /**
+     * Get the number of cached tokens
+     */
+    get size(): number;
+    /**
+     * Remove expired entries from cache
+     */
+    private cleanup;
+}
+//# sourceMappingURL=token-cache.d.ts.map

package/dist/auth/token-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-cache.d.ts","sourceRoot":"","sources":["../../src/auth/token-cache.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;gBAE/B,iBAAiB,EAAE,MAAM;IAIrC;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAehC;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAK3D;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI7B;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAS5C;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAIjB;IAED;;OAEG;IACH,OAAO,CAAC,OAAO;CAQhB"}

package/dist/auth/token-cache.js

@@ -0,0 +1,84 @@
+/**
+ * Token cache with TTL support
+ *
+ * Manages cached temporary tokens with expiration handling.
+ * Tokens are stored per-dbid since QuickBase temp tokens are database-specific.
+ */
+export class TokenCache {
+    cache = new Map();
+    defaultLifespanMs;
+    constructor(defaultLifespanMs) {
+        this.defaultLifespanMs = defaultLifespanMs;
+    }
+    /**
+     * Get a cached token if it exists and is not expired
+     */
+    get(dbid) {
+        const entry = this.cache.get(dbid);
+        if (!entry) {
+            return null;
+        }
+        // Check if token is expired (with 10 second buffer)
+        if (Date.now() >= entry.expiresAt - 10000) {
+            this.cache.delete(dbid);
+            return null;
+        }
+        return entry.token;
+    }
+    /**
+     * Store a token with optional custom lifespan
+     */
+    set(dbid, token, lifespanMs) {
+        const expiresAt = Date.now() + (lifespanMs ?? this.defaultLifespanMs);
+        this.cache.set(dbid, { token, expiresAt });
+    }
+    /**
+     * Remove a specific token from cache
+     */
+    delete(dbid) {
+        return this.cache.delete(dbid);
+    }
+    /**
+     * Clear all cached tokens
+     */
+    clear() {
+        this.cache.clear();
+    }
+    /**
+     * Check if a token exists and is valid
+     */
+    has(dbid) {
+        return this.get(dbid) !== null;
+    }
+    /**
+     * Get time until token expires (in ms), or null if not cached
+     */
+    getTimeToExpiry(dbid) {
+        const entry = this.cache.get(dbid);
+        if (!entry) {
+            return null;
+        }
+        const ttl = entry.expiresAt - Date.now();
+        return ttl > 0 ? ttl : null;
+    }
+    /**
+     * Get the number of cached tokens
+     */
+    get size() {
+        // Clean up expired entries first
+        this.cleanup();
+        return this.cache.size;
+    }
+    /**
+     * Remove expired entries from cache
+     */
+    cleanup() {
+        const now = Date.now();
+        for (const [dbid, entry] of this.cache) {
+            if (now >= entry.expiresAt) {
+                this.cache.delete(dbid);
+            }
+        }
+    }
+}
+//# sourceMappingURL=token-cache.js.map

package/dist/auth/token-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-cache.js","sourceRoot":"","sources":["../../src/auth/token-cache.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,OAAO,UAAU;IACJ,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,iBAAiB,CAAS;IAE3C,YAAY,iBAAyB;QACnC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oDAAoD;QACpD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,UAAmB;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAY;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,iCAAiC;QACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/auth/types.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Authentication strategy types
+ */
+import type { Logger } from '../core/logger.js';
+/**
+ * Interface that all auth strategies must implement
+ */
+export interface AuthStrategy {
+    /**
+     * Get a valid token for the given database ID
+     * @param dbid - The database ID (required for temp tokens)
+     */
+    getToken(dbid?: string): Promise<string>;
+    /**
+     * Get the authorization header value
+     */
+    getAuthorizationHeader(token: string): string;
+    /**
+     * Handle authentication errors (e.g., refresh token on 401)
+     * @returns true if token was refreshed and request should be retried
+     */
+    handleAuthError(dbid?: string): Promise<boolean>;
+    /**
+     * Invalidate cached tokens (if applicable)
+     */
+    invalidate(dbid?: string): void;
+}
+/**
+ * Context passed to auth strategy constructors
+ */
+export interface AuthContext {
+    realm: string;
+    baseUrl: string;
+    fetchApi: typeof fetch;
+    logger: Logger;
+}
+/**
+ * Token cache entry
+ */
+export interface CachedToken {
+    token: string;
+    expiresAt: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEzC;;OAEG;IACH,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAE9C;;;OAGG;IACH,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjD;;OAEG;IACH,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,KAAK,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/auth/types.js

@@ -0,0 +1,5 @@
+/**
+ * Authentication strategy types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/auth/user-token.d.ts

@@ -0,0 +1,17 @@
+/**
+ * User Token Authentication Strategy
+ *
+ * Simplest auth method - uses a persistent user token directly.
+ * Token is passed in the Authorization header as "QB-USER-TOKEN {token}"
+ */
+import type { AuthStrategy, AuthContext } from './types.js';
+export declare class UserTokenStrategy implements AuthStrategy {
+    private readonly userToken;
+    private readonly logger;
+    constructor(userToken: string, context: AuthContext);
+    getToken(_dbid?: string): Promise<string>;
+    getAuthorizationHeader(token: string): string;
+    handleAuthError(_dbid?: string): Promise<boolean>;
+    invalidate(_dbid?: string): void;
+}
+//# sourceMappingURL=user-token.d.ts.map

package/dist/auth/user-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-token.d.ts","sourceRoot":"","sources":["../../src/auth/user-token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG5D,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW;IAK7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK/C,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIvC,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMvD,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;CAGjC"}

package/dist/auth/user-token.js

@@ -0,0 +1,30 @@
+/**
+ * User Token Authentication Strategy
+ *
+ * Simplest auth method - uses a persistent user token directly.
+ * Token is passed in the Authorization header as "QB-USER-TOKEN {token}"
+ */
+export class UserTokenStrategy {
+    userToken;
+    logger;
+    constructor(userToken, context) {
+        this.userToken = userToken;
+        this.logger = context.logger;
+    }
+    async getToken(_dbid) {
+        // User tokens don't change, just return the configured token
+        return this.userToken;
+    }
+    getAuthorizationHeader(token) {
+        return `QB-USER-TOKEN ${token}`;
+    }
+    async handleAuthError(_dbid) {
+        // User tokens can't be refreshed - if auth fails, it's a permanent failure
+        this.logger.debug('Auth error with user token - cannot refresh');
+        return false;
+    }
+    invalidate(_dbid) {
+        // No-op for user tokens - they don't have cached state
+    }
+}
+//# sourceMappingURL=user-token.js.map

package/dist/auth/user-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-token.js","sourceRoot":"","sources":["../../src/auth/user-token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,OAAO,iBAAiB;IACX,SAAS,CAAS;IAClB,MAAM,CAAS;IAEhC,YAAY,SAAiB,EAAE,OAAoB;QACjD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAc;QAC3B,6DAA6D;QAC7D,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,sBAAsB,CAAC,KAAa;QAClC,OAAO,iBAAiB,KAAK,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAc;QAClC,2EAA2E;QAC3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,KAAc;QACvB,uDAAuD;IACzD,CAAC;CACF"}

package/dist/client/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Client module exports
+ */
+export type { RequestOptions, RequestExecutorOptions } from './request.js';
+export { executeRequest, createRequestExecutor } from './request.js';
+export type { Throttle } from './throttle.js';
+export { SlidingWindowThrottle, NoOpThrottle, createThrottle } from './throttle.js';
+export type { RetryOptions } from './retry.js';
+export { calculateBackoffDelay, getRetryDelay, extractRateLimitInfo, sleep, isRetryableStatus, executeWithRetry, } from './retry.js';
+export type { PaginationOptions, PaginationMetadata, PaginatedResponse, PaginationType, RequestExecutor, PaginatedRequestExecutor, } from './pagination.js';
+export { PaginatedRequest, createPaginatedRequest, detectPaginationType, hasMorePages, findDataKey, isPaginatedResponse, } from './pagination.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErE,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpF,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,KAAK,EACL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,mBAAmB,GACpB,MAAM,iBAAiB,CAAC"}

package/dist/client/index.js

@@ -0,0 +1,8 @@
+/**
+ * Client module exports
+ */
+export { executeRequest, createRequestExecutor } from './request.js';
+export { SlidingWindowThrottle, NoOpThrottle, createThrottle } from './throttle.js';
+export { calculateBackoffDelay, getRetryDelay, extractRateLimitInfo, sleep, isRetryableStatus, executeWithRetry, } from './retry.js';
+export { PaginatedRequest, createPaginatedRequest, detectPaginationType, hasMorePages, findDataKey, isPaginatedResponse, } from './pagination.js';
+//# sourceMappingURL=index.js.map