@adcp/sdk 6.7.0 → 6.9.0

package/dist/lib/schemas-data/3.0/sponsored-intelligence/si-send-message-response.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.0.5/sponsored-intelligence/si-send-message-response.json",
+  "$id": "/schemas/3.0.6/sponsored-intelligence/si-send-message-response.json",
   "title": "SI Send Message Response",
   "description": "Brand agent's response to a user message",
   "x-status": "experimental",
@@ -20,13 +20,13 @@
           "description": "Conversational message from brand agent"
         },
         "surface": {
-          "$ref": "/schemas/3.0.5/a2ui/surface.json",
+          "$ref": "/schemas/3.0.6/a2ui/surface.json",
           "description": "A2UI surface with interactive components"
         },
         "ui_elements": {
           "type": "array",
           "items": {
-            "$ref": "/schemas/3.0.5/sponsored-intelligence/si-ui-element.json"
+            "$ref": "/schemas/3.0.6/sponsored-intelligence/si-ui-element.json"
           },
           "description": "Visual components to render (DEPRECATED: use surface instead)",
           "deprecated": true
@@ -39,7 +39,7 @@
       "description": "MCP resource URI for hosts with MCP Apps support (e.g., ui://si/session-abc123)"
     },
     "session_status": {
-      "$ref": "/schemas/3.0.5/enums/si-session-status.json",
+      "$ref": "/schemas/3.0.6/enums/si-session-status.json",
       "description": "Current session status. On a successful response, one of: active, pending_handoff, or complete. Terminated sessions return error codes (SESSION_NOT_FOUND or SESSION_TERMINATED) instead of a success response."
     },
     "handoff": {
@@ -105,14 +105,14 @@
     "errors": {
       "type": "array",
       "items": {
-        "$ref": "/schemas/3.0.5/core/error.json"
+        "$ref": "/schemas/3.0.6/core/error.json"
       }
     },
     "context": {
-      "$ref": "/schemas/3.0.5/core/context.json"
+      "$ref": "/schemas/3.0.6/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.0.5/core/ext.json"
+      "$ref": "/schemas/3.0.6/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.0/sponsored-intelligence/si-terminate-session-request.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.0.5/sponsored-intelligence/si-terminate-session-request.json",
+  "$id": "/schemas/3.0.6/sponsored-intelligence/si-terminate-session-request.json",
   "title": "SI Terminate Session Request",
   "description": "Request to terminate an SI session. Naturally idempotent — `session_id` is the dedup boundary, and terminating an already-terminated session is a no-op that returns the same terminal state. No `idempotency_key` is needed on this request.",
   "x-status": "experimental",
@@ -63,10 +63,10 @@
       "additionalProperties": true
     },
     "context": {
-      "$ref": "/schemas/3.0.5/core/context.json"
+      "$ref": "/schemas/3.0.6/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.0.5/core/ext.json"
+      "$ref": "/schemas/3.0.6/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.0/sponsored-intelligence/si-terminate-session-response.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.0.5/sponsored-intelligence/si-terminate-session-response.json",
+  "$id": "/schemas/3.0.6/sponsored-intelligence/si-terminate-session-response.json",
   "title": "SI Terminate Session Response",
   "description": "Confirmation of session termination",
   "x-status": "experimental",
@@ -16,7 +16,7 @@
       "description": "Whether session was successfully terminated"
     },
     "session_status": {
-      "$ref": "/schemas/3.0.5/enums/si-session-status.json",
+      "$ref": "/schemas/3.0.6/enums/si-session-status.json",
       "description": "Resulting session state. 'complete' for handoff_transaction/handoff_complete, 'terminated' for user_exit/session_timeout/host_terminated."
     },
     "acp_handoff": {
@@ -68,14 +68,14 @@
     "errors": {
       "type": "array",
       "items": {
-        "$ref": "/schemas/3.0.5/core/error.json"
+        "$ref": "/schemas/3.0.6/core/error.json"
       }
     },
     "context": {
-      "$ref": "/schemas/3.0.5/core/context.json"
+      "$ref": "/schemas/3.0.6/core/context.json"
     },
     "ext": {
-      "$ref": "/schemas/3.0.5/core/ext.json"
+      "$ref": "/schemas/3.0.6/core/ext.json"
     }
   },
   "required": [

package/dist/lib/schemas-data/3.0/sponsored-intelligence/si-ui-element.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "/schemas/3.0.5/sponsored-intelligence/si-ui-element.json",
+  "$id": "/schemas/3.0.6/sponsored-intelligence/si-ui-element.json",
   "title": "SI UI Element",
   "description": "Standard visual component that brand returns and host renders",
   "x-status": "experimental",

package/dist/lib/schemas-data/v2.5/_provenance.json

@@ -4,5 +4,5 @@
   "source_sha": "4e553ad955f83b49c7d221ab5c3ff78237ad02e3",
   "source_tarball_sha256": "580656d6466ef9f0d1119985e6726c2efea718dc671e2ad30957fcb2fd54af0f",
   "upstream_adcp_version": "2.5.3",
-  "synced_at": "2026-05-03T10:58:39.796Z"
+  "synced_at": "2026-05-03T23:15:03.611Z"
 }

package/dist/lib/server/account-mode.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Account-mode primitives for sandbox-authority enforcement of
+ * `comply_test_controller` and other test-only surfaces.
+ *
+ * The hard rule: under no circumstances should the comply test
+ * controller (or any test-only surface) operate on a `live`-mode
+ * account. The flag must live on the resolved account, not on a
+ * process-level env var — env vars are operator-error-prone proxies
+ * for what is fundamentally an authority decision per principal.
+ *
+ * This module ships the type + helpers; auto-wiring into
+ * `createAdcpServerFromPlatform`'s `complyTest` path lands in a
+ * follow-up alongside mock-mode routing (#1435 Phase 2).
+ *
+ * @public
+ */
+/**
+ * Three operationally distinct account modes:
+ *
+ *   - `live`: production traffic. Adopter's upstream is truth. Test-only
+ *     surfaces (comply controller, force_*, simulate_*) are denied.
+ *   - `sandbox`: adopter's own test account. Their code path runs against
+ *     their test infrastructure. Test-only surfaces are allowed.
+ *   - `mock`: SDK-routed-to-mock-server. Adopter's code is bypassed; the
+ *     SDK forwards to the mock upstream backend. Test-only surfaces are
+ *     allowed.
+ *
+ * Default when unspecified: `live`. A missing or unknown `mode` reads
+ * as production, fail-closed for any test-only dispatch.
+ *
+ * See `docs/proposals/lifecycle-state-and-sandbox-authority.md` for the
+ * full three-mode design and Phase 1/2/3 rollout.
+ */
+export type AccountMode = 'live' | 'sandbox' | 'mock';
+/**
+ * Reads `mode` off any account-shaped value, with back-compat for
+ * the legacy `sandbox: boolean` field. Returns the explicit mode if
+ * present; otherwise infers `'sandbox'` from `sandbox === true`;
+ * otherwise `'live'`.
+ *
+ * Adopters that have not yet migrated to the `mode` field continue to
+ * work — `account.sandbox === true` reads as sandbox mode through this
+ * helper. New code should prefer `mode` directly.
+ *
+ * Prototype-pollution defense: both `mode` and `sandbox` are read via
+ * `Object.hasOwn` rather than bare property access. Bare access traverses
+ * the prototype chain, so an attacker who reaches a `__proto__`-via-merge
+ * sink upstream (reachable in MCP envelope handling and similar deep-merge
+ * sites) could stamp `Object.prototype.mode = 'sandbox'` and silently
+ * downgrade every account's gate to a no-op. The own-property check makes
+ * the gate immune to that class of attack regardless of upstream hardening.
+ */
+export declare function getAccountMode(account: unknown): AccountMode;
+/**
+ * Predicate: is the account in a non-production mode that admits
+ * test-only surfaces (comply controller, force_*, simulate_*)?
+ *
+ * Returns `true` for `mode === 'sandbox' | 'mock'` (or legacy
+ * `sandbox: true`); `false` for `mode === 'live'` or any account
+ * shape that doesn't carry the field.
+ */
+export declare function isSandboxOrMockAccount(account: unknown): boolean;
+/**
+ * Throws an `AdcpError('PERMISSION_DENIED')` if the account is not in
+ * a non-production mode. Use to gate dispatch of test-only surfaces.
+ *
+ * Fail-closed semantics:
+ *   - `account === undefined` (no resolved account): throws.
+ *   - `account.mode === 'live'` or unspecified + no `sandbox: true`:
+ *     throws.
+ *   - `account.mode === 'sandbox' | 'mock'` (or legacy `sandbox: true`):
+ *     no-op, dispatch proceeds.
+ *
+ * The `details` payload carries `{ scope: 'sandbox-gate', tool? }` so
+ * dashboards can distinguish gate-rejections from other permission
+ * denials.
+ *
+ * **Resolver discipline.** The strength of this gate depends entirely on
+ * how the adopter's `AccountStore.resolve` constructs its return value.
+ * Resolvers MUST NOT spread untrusted input (request body, headers,
+ * `ctx_metadata`, query params) into the resolved account — doing so lets
+ * a buyer self-promote to `mode: 'sandbox'` and unlock test-only surfaces
+ * on a live principal. Source `mode` (and `sandbox`) from a trusted store
+ * keyed by the authenticated principal; never from request data.
+ *
+ * **opts.message must be a static string literal.** The message is echoed
+ * on the wire inside the error envelope. Interpolating user-controlled
+ * values into it creates a reflection sink (PII leakage, log injection,
+ * downstream HTML rendering). Pick from a fixed set of messages keyed by
+ * `tool` if you need variants.
+ *
+ * @param account The resolved account (typically `ctx.account` inside
+ *   a tool dispatch). Pass `undefined` if no account resolved — the
+ *   helper fails closed.
+ * @param opts.tool Optional tool name to surface in the error details
+ *   (e.g., `'comply_test_controller'`).
+ * @param opts.message Optional override for the user-facing message.
+ *   MUST be a static string literal — see "opts.message" note above.
+ *
+ * @example
+ *   import { assertSandboxAccount } from '@adcp/sdk/server';
+ *
+ *   sandboxGate: input => {
+ *     const account = await resolveAccount(input);
+ *     assertSandboxAccount(account, { tool: 'comply_test_controller' });
+ *     return true;
+ *   }
+ */
+export declare function assertSandboxAccount(account: unknown, opts?: {
+    tool?: string;
+    message?: string;
+}): void;
+//# sourceMappingURL=account-mode.d.ts.map

package/dist/lib/server/account-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-mode.d.ts","sourceRoot":"","sources":["../../../src/lib/server/account-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAEtD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CAW5D;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAGhE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,IAAI,CAU3G"}

package/dist/lib/server/account-mode.js

@@ -0,0 +1,125 @@
+"use strict";
+/**
+ * Account-mode primitives for sandbox-authority enforcement of
+ * `comply_test_controller` and other test-only surfaces.
+ *
+ * The hard rule: under no circumstances should the comply test
+ * controller (or any test-only surface) operate on a `live`-mode
+ * account. The flag must live on the resolved account, not on a
+ * process-level env var — env vars are operator-error-prone proxies
+ * for what is fundamentally an authority decision per principal.
+ *
+ * This module ships the type + helpers; auto-wiring into
+ * `createAdcpServerFromPlatform`'s `complyTest` path lands in a
+ * follow-up alongside mock-mode routing (#1435 Phase 2).
+ *
+ * @public
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAccountMode = getAccountMode;
+exports.isSandboxOrMockAccount = isSandboxOrMockAccount;
+exports.assertSandboxAccount = assertSandboxAccount;
+const async_outcome_1 = require("./decisioning/async-outcome");
+/**
+ * Reads `mode` off any account-shaped value, with back-compat for
+ * the legacy `sandbox: boolean` field. Returns the explicit mode if
+ * present; otherwise infers `'sandbox'` from `sandbox === true`;
+ * otherwise `'live'`.
+ *
+ * Adopters that have not yet migrated to the `mode` field continue to
+ * work — `account.sandbox === true` reads as sandbox mode through this
+ * helper. New code should prefer `mode` directly.
+ *
+ * Prototype-pollution defense: both `mode` and `sandbox` are read via
+ * `Object.hasOwn` rather than bare property access. Bare access traverses
+ * the prototype chain, so an attacker who reaches a `__proto__`-via-merge
+ * sink upstream (reachable in MCP envelope handling and similar deep-merge
+ * sites) could stamp `Object.prototype.mode = 'sandbox'` and silently
+ * downgrade every account's gate to a no-op. The own-property check makes
+ * the gate immune to that class of attack regardless of upstream hardening.
+ */
+function getAccountMode(account) {
+    if (account == null || typeof account !== 'object')
+        return 'live';
+    if (Object.hasOwn(account, 'mode')) {
+        const mode = account.mode;
+        if (mode === 'live' || mode === 'sandbox' || mode === 'mock')
+            return mode;
+    }
+    // Back-compat: legacy `sandbox: true` flag reads as `sandbox` mode.
+    if (Object.hasOwn(account, 'sandbox') && account.sandbox === true) {
+        return 'sandbox';
+    }
+    return 'live';
+}
+/**
+ * Predicate: is the account in a non-production mode that admits
+ * test-only surfaces (comply controller, force_*, simulate_*)?
+ *
+ * Returns `true` for `mode === 'sandbox' | 'mock'` (or legacy
+ * `sandbox: true`); `false` for `mode === 'live'` or any account
+ * shape that doesn't carry the field.
+ */
+function isSandboxOrMockAccount(account) {
+    const mode = getAccountMode(account);
+    return mode === 'sandbox' || mode === 'mock';
+}
+/**
+ * Throws an `AdcpError('PERMISSION_DENIED')` if the account is not in
+ * a non-production mode. Use to gate dispatch of test-only surfaces.
+ *
+ * Fail-closed semantics:
+ *   - `account === undefined` (no resolved account): throws.
+ *   - `account.mode === 'live'` or unspecified + no `sandbox: true`:
+ *     throws.
+ *   - `account.mode === 'sandbox' | 'mock'` (or legacy `sandbox: true`):
+ *     no-op, dispatch proceeds.
+ *
+ * The `details` payload carries `{ scope: 'sandbox-gate', tool? }` so
+ * dashboards can distinguish gate-rejections from other permission
+ * denials.
+ *
+ * **Resolver discipline.** The strength of this gate depends entirely on
+ * how the adopter's `AccountStore.resolve` constructs its return value.
+ * Resolvers MUST NOT spread untrusted input (request body, headers,
+ * `ctx_metadata`, query params) into the resolved account — doing so lets
+ * a buyer self-promote to `mode: 'sandbox'` and unlock test-only surfaces
+ * on a live principal. Source `mode` (and `sandbox`) from a trusted store
+ * keyed by the authenticated principal; never from request data.
+ *
+ * **opts.message must be a static string literal.** The message is echoed
+ * on the wire inside the error envelope. Interpolating user-controlled
+ * values into it creates a reflection sink (PII leakage, log injection,
+ * downstream HTML rendering). Pick from a fixed set of messages keyed by
+ * `tool` if you need variants.
+ *
+ * @param account The resolved account (typically `ctx.account` inside
+ *   a tool dispatch). Pass `undefined` if no account resolved — the
+ *   helper fails closed.
+ * @param opts.tool Optional tool name to surface in the error details
+ *   (e.g., `'comply_test_controller'`).
+ * @param opts.message Optional override for the user-facing message.
+ *   MUST be a static string literal — see "opts.message" note above.
+ *
+ * @example
+ *   import { assertSandboxAccount } from '@adcp/sdk/server';
+ *
+ *   sandboxGate: input => {
+ *     const account = await resolveAccount(input);
+ *     assertSandboxAccount(account, { tool: 'comply_test_controller' });
+ *     return true;
+ *   }
+ */
+function assertSandboxAccount(account, opts = {}) {
+    if (isSandboxOrMockAccount(account))
+        return;
+    throw new async_outcome_1.AdcpError('PERMISSION_DENIED', {
+        message: opts.message ?? 'Test-only surface requires a sandbox or mock account; resolved account is in live mode.',
+        details: {
+            scope: 'sandbox-gate',
+            reason: 'sandbox-or-mock-required',
+            ...(opts.tool && { tool: opts.tool }),
+        },
+    });
+}
+//# sourceMappingURL=account-mode.js.map

package/dist/lib/server/account-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-mode.js","sourceRoot":"","sources":["../../../src/lib/server/account-mode.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;AAyCH,wCAWC;AAUD,wDAGC;AAgDD,oDAUC;AAzHD,+DAAwD;AAqBxD;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,cAAc,CAAC,OAAgB;IAC7C,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAI,OAA8B,CAAC,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IACD,oEAAoE;IACpE,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAK,OAAiC,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CAAC,OAAgB;IACrD,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,SAAgB,oBAAoB,CAAC,OAAgB,EAAE,OAA4C,EAAE;IACnG,IAAI,sBAAsB,CAAC,OAAO,CAAC;QAAE,OAAO;IAC5C,MAAM,IAAI,yBAAS,CAAC,mBAAmB,EAAE;QACvC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,yFAAyF;QAClH,OAAO,EAAE;YACP,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,0BAA0B;YAClC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SACtC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/server/adcp-server.js

@@ -31,6 +31,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ADCP_CAPABILITIES = exports.ADCP_STATE_STORE = exports.ADCP_SDK_SERVER = exports.ADCP_SERVER_BRAND = void 0;
 exports.getSdkServer = getSdkServer;
 exports.isAdcpServer = isAdcpServer;
+exports.setSdkServerInstructions = setSdkServerInstructions;
+exports.wrapInitializeHandler = wrapInitializeHandler;
 exports.listRegisteredToolNames = listRegisteredToolNames;
 exports.wrapMcpServer = wrapMcpServer;
 const version_1 = require("../version");
@@ -110,6 +112,45 @@ function isAdcpServer(value) {
         exports.ADCP_SDK_SERVER in value &&
         typeof value.dispatchTestRequest === 'function');
 }
+/**
+ * Write the instructions string onto the low-level SDK server backing
+ * `mcpServer`. Called by the async-function-form instructions hook to
+ * inject the resolved string just before the MCP `initialize` response.
+ *
+ * @internal
+ * @remarks Pokes an SDK private field — see the "Private-field access" note above.
+ */
+function setSdkServerInstructions(mcpServer, value) {
+    const priv = mcpServer;
+    if (priv.server) {
+        priv.server._instructions = value;
+    }
+}
+/**
+ * Wrap the `initialize` request handler on `mcpServer` so that `wrapper`
+ * runs (and can await async work) before the original handler responds.
+ * The wrapper receives the original handler as its first argument and must
+ * call it to complete the handshake.
+ *
+ * The wrapper is invoked once per MCP `initialize` call on this server
+ * instance. Under `serve({ reuseAgent: false })` the server is created
+ * fresh per request, so the wrapper fires once per session. Under
+ * `reuseAgent: true` the `ADCP_INSTRUCTIONS_FN` check in `serve.ts`
+ * blocks the combination before the wrapper can be called a second time.
+ *
+ * @internal
+ * @remarks Pokes an SDK private field — see the "Private-field access" note above.
+ */
+function wrapInitializeHandler(mcpServer, wrapper) {
+    const priv = mcpServer;
+    const handlers = priv.server?._requestHandlers;
+    if (!handlers)
+        return;
+    const orig = handlers.get('initialize');
+    if (!orig)
+        return;
+    handlers.set('initialize', (req, extra) => wrapper(orig, req, extra));
+}
 function getRegisteredTool(server, name) {
     return server._registeredTools?.[name];
 }

package/dist/lib/server/adcp-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"adcp-server.js","sourceRoot":"","sources":["../../../src/lib/server/adcp-server.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AAmUH,oCAGC;AAOD,oCAOC;AAwCD,0DAGC;AAsBD,sCAoEC;AApdD,wCAA0C;AA0I1C;;;;;;;;;;;;;;;;;;;GAmBG;AACU,QAAA,iBAAiB,GAAkB,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAgH5E;;;;;;;;GAQG;AACU,QAAA,eAAe,GAAkB,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAEnF;;;;;;;;;GASG;AACU,QAAA,gBAAgB,GAAkB,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAErF;;;;;;;;;;GAUG;AACU,QAAA,iBAAiB,GAAkB,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAOxF;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,MAA8B;IACzD,MAAM,SAAS,GAAI,MAAiD,CAAC,uBAAe,CAAC,CAAC;IACtF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,KAAK,IAAI,IAAI;QACb,OAAO,KAAK,KAAK,QAAQ;QACzB,uBAAe,IAAK,KAAsC;QAC1D,OAAQ,KAAoB,CAAC,mBAAmB,KAAK,UAAU,CAChE,CAAC;AACJ,CAAC;AA4BD,SAAS,iBAAiB,CAAC,MAAiB,EAAE,IAAY;IACxD,OAAQ,MAAuC,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CAAC,MAAiB;IACvD,MAAM,UAAU,GAAI,MAAuC,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAiB,EACjB,MAAc;IAEd,OAAQ,MAAuC,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,aAAa,CAC3B,KAAqC,EACrC,UAAoC,EACpC,cAAsB,sBAAY;IAElC,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,KAAkB,CAAC;IAC/B,MAAM,kBAAkB,GAA4B,UAAU,IAAI;QAChE,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,KAAK,CACb,6GAA6G;gBAC3G,+GAA+G,CAClH,CAAC;QACJ,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAwB,EAAE,MAA8B,EAA6B,EAAE;QAC7G,MAAM,KAAK,GAA0E;YACnF,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;SACrC,CAAC;QACF,IAAI,MAAM,EAAE,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEvD,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA2D,CAAC;YAChG,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,qBAAqB,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,EAAE,OAA0B,EAA4B,EAAE;QAC5E,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,KAAK,GAAqD;YAC9D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM;SACvD,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACxD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAoB,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,OAAO,GAAuB;QAClC,CAAC,uBAAe,CAAC,EAAE,GAAG;QACtB,OAAO,CAAC,SAAS;YACf,gEAAgE;YAChE,kEAAkE;YAClE,OAAO,GAAG,CAAC,OAAO,CAAC,SAA2D,CAAC,CAAC;QAClF,CAAC;QACD,KAAK;YACH,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,UAAU,EAAE,kBAAkB;QAC9B,uEAAuE;QACvE,kEAAkE;QAClE,mBAAmB,EAAE,QAAqD;QAC1E,MAAM;QACN,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW;KAClC,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"adcp-server.js","sourceRoot":"","sources":["../../../src/lib/server/adcp-server.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AAmUH,oCAGC;AAOD,oCAOC;AAwCD,4DAKC;AAiBD,sDAcC;AAcD,0DAGC;AAsBD,sCAoEC;AAtgBD,wCAA0C;AA0I1C;;;;;;;;;;;;;;;;;;;GAmBG;AACU,QAAA,iBAAiB,GAAkB,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAgH5E;;;;;;;;GAQG;AACU,QAAA,eAAe,GAAkB,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAEnF;;;;;;;;;GASG;AACU,QAAA,gBAAgB,GAAkB,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAErF;;;;;;;;;;GAUG;AACU,QAAA,iBAAiB,GAAkB,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAOxF;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,MAA8B;IACzD,MAAM,SAAS,GAAI,MAAiD,CAAC,uBAAe,CAAC,CAAC;IACtF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,KAAK,IAAI,IAAI;QACb,OAAO,KAAK,KAAK,QAAQ;QACzB,uBAAe,IAAK,KAAsC;QAC1D,OAAQ,KAAoB,CAAC,mBAAmB,KAAK,UAAU,CAChE,CAAC;AACJ,CAAC;AAgCD;;;;;;;GAOG;AACH,SAAgB,wBAAwB,CAAC,SAAoB,EAAE,KAAyB;IACtF,MAAM,IAAI,GAAG,SAAyC,CAAC;IACvD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,qBAAqB,CACnC,SAAoB,EACpB,OAI+B;IAE/B,MAAM,IAAI,GAAG,SAAyC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAiB,EAAE,IAAY;IACxD,OAAQ,MAAuC,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CAAC,MAAiB;IACvD,MAAM,UAAU,GAAI,MAAuC,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACnF,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAiB,EACjB,MAAc;IAEd,OAAQ,MAAuC,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,aAAa,CAC3B,KAAqC,EACrC,UAAoC,EACpC,cAAsB,sBAAY;IAElC,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,KAAkB,CAAC;IAC/B,MAAM,kBAAkB,GAA4B,UAAU,IAAI;QAChE,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,KAAK,CACb,6GAA6G;gBAC3G,+GAA+G,CAClH,CAAC;QACJ,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAwB,EAAE,MAA8B,EAA6B,EAAE;QAC7G,MAAM,KAAK,GAA0E;YACnF,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;SACrC,CAAC;QACF,IAAI,MAAM,EAAE,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEvD,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA2D,CAAC;YAChG,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,qBAAqB,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,EAAE,OAA0B,EAA4B,EAAE;QAC5E,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,KAAK,GAAqD;YAC9D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM;SACvD,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACxD,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAoB,CAAC;IACtE,CAAC,CAAC;IACF,MAAM,OAAO,GAAuB;QAClC,CAAC,uBAAe,CAAC,EAAE,GAAG;QACtB,OAAO,CAAC,SAAS;YACf,gEAAgE;YAChE,kEAAkE;YAClE,OAAO,GAAG,CAAC,OAAO,CAAC,SAA2D,CAAC,CAAC;QAClF,CAAC;QACD,KAAK;YACH,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,UAAU,EAAE,kBAAkB;QAC9B,uEAAuE;QACvE,kEAAkE;QAClE,mBAAmB,EAAE,QAAqD;QAC1E,MAAM;QACN,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW;KAClC,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/server/auth.d.ts

@@ -86,6 +86,41 @@ export interface AuthPrincipal {
      * elsewhere on the request.
      */
     credential?: AdcpCredential;
+    /**
+     * Adopter-provided extension data. Stamp this in your `verifyApiKey.verify`
+     * callback (or any custom `authenticate` function) to carry pre-hash data
+     * derived from the raw token — prefix patterns, tenant IDs, test-kit flags —
+     * that you can't recover from the hashed `key_id` in `credential`.
+     *
+     * `serve()` propagates this into `req.auth.extra` and from there to
+     * `BuyerAgentResolveInput.extra`, where `BuyerAgentRegistry.bearerOnly` and
+     * `mixed` factories forward it as the second argument to `resolveByCredential`.
+     *
+     * Do NOT put raw token values, passwords, or other secrets here. Treat it
+     * with the same care as `credential` fields — avoid logging, and never
+     * include in thrown `Error` messages (the framework may project
+     * `err.message` into `error.details.reason` on the wire).
+     *
+     * @example
+     * ```ts
+     * verifyApiKey({
+     *   verify: token => {
+     *     if (!DEMO_PATTERN.test(token)) return null;
+     *     return { principal: `static:demo:${token}`, extra: { demo_token: token } };
+     *   },
+     * })
+     * // Then in bearerOnly:
+     * BuyerAgentRegistry.bearerOnly({
+     *   resolveByCredential: (cred, extra) => {
+     *     const token = extra?.demo_token as string | undefined;
+     *     return token?.startsWith('demo-billing-passthrough-')
+     *       ? Promise.resolve(demoAgent)
+     *       : Promise.resolve(null);
+     *   },
+     * })
+     * ```
+     */
+    extra?: Record<string, unknown>;
     [key: string]: unknown;
 }
 /**

package/dist/lib/server/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/lib/server/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAE5D,OAAO,EAAiC,KAAK,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,MAAM,CAAC;AAC7F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkBhE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,mBASjC,CAAC;AAEH,8EAA8E;AAC9E,eAAO,MAAM,mCAAmC,KAAK,CAAC;AAEtD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,6GAA6G;IAC7G,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,8FAA8F;IAC9F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,IAAI,CAAC;AAE9C;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,eAAe,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEvF;;;;;;GAMG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAMjE;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,OAAO,MAAqD,CAAC;AAE/F;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,EAAE,OAAO,MAAsD,CAAC;AAEhG;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,OAAO,MAA4D,CAAC;AAE7G;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,IAAI,EAAE,MAAM,CAAC;IACb,2GAA2G;IAC3G,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,4HAA4H;AAC5H,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,eAAe,GAAG,mBAAmB,GAAG,SAAS,CAE5F;AAOD;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAG/E;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAElF;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAGhF;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAErF;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CActE;AAMD,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrC;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;CAC9D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,aAAa,CA0CxE;AAMD,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,mBAAmB,KAAK,MAAM,CAAC,CAAC;IACrH,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;CAC5D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,aAAa,CAwFxE;AA0BD;;;;;;GAMG;AACH,wBAAgB,KAAK,CAAC,GAAG,cAAc,EAAE,aAAa,EAAE,GAAG,aAAa,CA+BvE;AAMD,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,iBAAiB,GAAG,eAAe,GAAG,oBAAoB,CAAC;IACnE,kCAAkC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,MAAM,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,eAAe,EACrB,GAAG,EAAE,cAAc,EACnB,OAAO,GAAE,0BAA+B,GACvC,IAAI,CA2BN;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,yBAAyB,GAAG,IAAI,CAgB1F"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/lib/server/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAE5D,OAAO,EAAiC,KAAK,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,MAAM,CAAC;AAC7F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAkBhE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,mBASjC,CAAC;AAEH,8EAA8E;AAC9E,eAAO,MAAM,mCAAmC,KAAK,CAAC;AAEtD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,6GAA6G;IAC7G,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,8FAA8F;IAC9F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,IAAI,CAAC;AAE9C;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,eAAe,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEvF;;;;;;GAMG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAMjE;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,OAAO,MAAqD,CAAC;AAE/F;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,EAAE,OAAO,MAAsD,CAAC;AAEhG;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,OAAO,MAA4D,CAAC;AAE7G;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,IAAI,EAAE,MAAM,CAAC;IACb,2GAA2G;IAC3G,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,4HAA4H;AAC5H,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,eAAe,GAAG,mBAAmB,GAAG,SAAS,CAE5F;AAOD;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAG/E;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAElF;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAGhF;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAErF;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CActE;AAMD,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACrC;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;CAC9D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,aAAa,CA0CxE;AAMD,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,mBAAmB,KAAK,MAAM,CAAC,CAAC;IACrH,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;CAC5D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,aAAa,CAwFxE;AA0BD;;;;;;GAMG;AACH,wBAAgB,KAAK,CAAC,GAAG,cAAc,EAAE,aAAa,EAAE,GAAG,aAAa,CA+BvE;AAMD,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,iBAAiB,GAAG,eAAe,GAAG,oBAAoB,CAAC;IACnE,kCAAkC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,MAAM,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,eAAe,EACrB,GAAG,EAAE,cAAc,EACnB,OAAO,GAAE,0BAA+B,GACvC,IAAI,CA2BN;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,yBAAyB,GAAG,IAAI,CAgB1F"}

package/dist/lib/server/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/lib/server/auth.ts"],"names":[],"mappings":";;;AA0MA,wDAEC;AAUD,oEAGC;AAMD,8DAEC;AAMD,sEAGC;AAKD,oEAEC;AAWD,gDAcC;AAiCD,oCA0CC;AA8DD,oCAwFC;AAiCD,sBA+BC;AAgDD,kDA+BC;AAQD,kEAgBC;AArnBD,6CAAyC;AACzC,+BAA6F;AAE7F,8CAA0D;AAG1D;;;;;;;;;;;GAWG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,8EAA8E;AACjE,QAAA,mCAAmC,GAAG,EAAE,CAAC;AAoEtD;;;;;;GAMG;AACH,MAAa,SAAU,SAAQ,KAAK;IACzB,aAAa,CAAS;IAC/B,YAAY,aAAqB,EAAE,OAA6B;QAC9D,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS;YAAG,IAAoC,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAChG,CAAC;CACF;AARD,8BAQC;AAED;;;;;;;;GAQG;AACU,QAAA,mBAAmB,GAAkB,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAE/F;;;;;;;;;;;GAWG;AACU,QAAA,mBAAmB,GAAkB,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AAEhG;;;;;;GAMG;AACU,QAAA,0BAA0B,GAAkB,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;AAgB7G,4HAA4H;AAC5H,SAAgB,sBAAsB,CAAC,GAAoB;IACzD,OAAQ,GAAgF,CAAC,kCAA0B,CAAC,CAAC;AACvH,CAAC;AAOD;;GAEG;AACH,SAAgB,4BAA4B,CAAC,IAAmB;IAC7D,IAAsC,CAAC,2BAAmB,CAAC,GAAG,IAAI,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,IAA+B;IACvE,OAAO,CAAC,CAAC,IAAI,IAAK,IAAsC,CAAC,2BAAmB,CAAC,KAAK,IAAI,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,SAAgB,6BAA6B,CAAC,IAAmB;IAC9D,IAAsC,CAAC,2BAAmB,CAAC,GAAG,IAAI,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,4BAA4B,CAAC,IAA+B;IAC1E,OAAO,CAAC,CAAC,IAAI,IAAK,IAAsC,CAAC,2BAAmB,CAAC,KAAK,IAAI,CAAC;AACzF,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,GAAoB;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3E,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;QACrC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAoBD;;;;;;;;;;;;GAYG;AACH,SAAgB,YAAY,CAAC,OAA4B;IACvD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,mEAAmE;QACnE,kEAAkE;QAClE,mCAAmC;QACnC,EAAE;QACF,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,gBAAgB,GAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7F,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC;YACrC,OAAO;gBACL,GAAG,OAAO;gBACV,KAAK;gBACL,UAAU,EAAE,gBAAgB;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO;gBACL,GAAG,MAAM;gBACT,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;gBAC5B,UAAU,EAAE,gBAAgB;aAC7B,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AA2CD;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,YAAY,CAAC,OAA4B;IACvD,MAAM,IAAI,GAAG,IAAA,yBAAkB,EAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC;IAC5D,MAAM,iBAAiB,GAAuC;QAC5D,UAAU,EAAE,8BAAsB,CAAC,KAAK,EAAE;QAC1C,cAAc,EAAE,2CAAmC;QACnD,GAAG,OAAO,CAAC,UAAU;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;IACF,MAAM,mBAAmB,GAAiC,YAAY;QACpE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,GAAG,iBAAiB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAkB,EAAE,CAAC;IACnE,OAAO,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,OAAmB,CAAC;QACxB,IAAI,aAA+B,CAAC;QACpC,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,gEAAgE;gBAChE,kEAAkE;gBAClE,yDAAyD;gBACzD,2DAA2D;gBAC3D,gEAAgE;gBAChE,gCAAgC;gBAChC,MAAM,GAAG,GAAwB,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC7E,QAAQ,GAAI,OAAO,CAAC,QAAmE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kEAAkE;gBAClE,sEAAsE;gBACtE,MAAM,IAAI,SAAS,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,aAAa,GAAG,EAAE,GAAG,iBAAiB,EAAE,QAAQ,EAAE,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,mBAAuC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC;YACH,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,gBAAS,EAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4EAA4E;YAC5E,iEAAiE;YACjE,MAAM,IAAI,SAAS,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,SAAS,CAAC,qBAAqB,EAAE;oBACzC,KAAK,EAAE,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,oCAAoC;QACpC,EAAE;QACF,kEAAkE;QAClE,+DAA+D;QAC/D,mEAAmE;QACnE,4BAA4B;QAC5B,MAAM,mBAAmB,GACvB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;gBACzD,CAAC,CAAC,OAAO,CAAC,GAAG;gBACb,CAAC,CAAC,SAAS,CAAC;QAClB,MAAM,SAAS,GAAkB;YAC/B,SAAS,EAAE,mBAAmB,IAAI,SAAS;YAC3C,KAAK;YACL,MAAM;YACN,MAAM,EAAE,OAAO;YACf,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBACvC,UAAU,EAAE;oBACV,IAAI,EAAE,OAAgB;oBACtB,SAAS,EAAE,mBAAmB;oBAC9B,MAAM;oBACN,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;iBACpE;aACF,CAAC;SACH,CAAC;QACF,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,SAAS,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,OAAmB;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,GAAI,OAAO,CAAC,KAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,GAAG,GAAI,OAA0C,CAAC,GAAG,CAAC;IAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAgB,KAAK,CAAC,GAAG,cAA+B;IACtD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,yEAAyE;gBACvE,mEAAmE;gBACnE,6EAA6E,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAkB,KAAK,EAAC,GAAG,EAAC,EAAE;QAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAsCD;;;;;;;;;GASG;AACH,SAAgB,mBAAmB,CACjC,IAAqB,EACrB,GAAmB,EACnB,UAAsC,EAAE;IAExC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,UAAU,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,qBAAqB,GAAG,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC;IACnE,oEAAoE;IACpE,sEAAsE;IACtE,qEAAqE;IACrE,oDAAoD;IACpD,IAAI,qBAAqB,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,UAAU,YAAY,CAAC,OAAO,CAAC,cAAe,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,UAAU,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,gBAAgB;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC1G,IAAI,OAAO,CAAC,gBAAgB;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE1G,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE;QACnC,cAAc,EAAE,kBAAkB;QAClC,kBAAkB,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACpD,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;QACzF,iBAAiB,EAAE,OAAO,CAAC,gBAAgB,IAAI,0BAA0B;KAC1E,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,2BAA2B,CAAC,GAAY;IACtD,0EAA0E;IAC1E,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAW,CAAC;IACnC,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,OAAO,IAAI,IAAI,IAAI,IAAI,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,IAAI,OAAO,YAAY,8BAAqB;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,GAAI,OAA+B,CAAC,KAAK,CAAC;QACjD,IAAI,EAAE,CAAC;IACT,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,wEAAwE;IACxE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/lib/server/auth.ts"],"names":[],"mappings":";;;AA6OA,wDAEC;AAUD,oEAGC;AAMD,8DAEC;AAMD,sEAGC;AAKD,oEAEC;AAWD,gDAcC;AAiCD,oCA0CC;AA8DD,oCAwFC;AAiCD,sBA+BC;AAgDD,kDA+BC;AAQD,kEAgBC;AAxpBD,6CAAyC;AACzC,+BAA6F;AAE7F,8CAA0D;AAG1D;;;;;;;;;;;GAWG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,8EAA8E;AACjE,QAAA,mCAAmC,GAAG,EAAE,CAAC;AAuGtD;;;;;;GAMG;AACH,MAAa,SAAU,SAAQ,KAAK;IACzB,aAAa,CAAS;IAC/B,YAAY,aAAqB,EAAE,OAA6B;QAC9D,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS;YAAG,IAAoC,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAChG,CAAC;CACF;AARD,8BAQC;AAED;;;;;;;;GAQG;AACU,QAAA,mBAAmB,GAAkB,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAE/F;;;;;;;;;;;GAWG;AACU,QAAA,mBAAmB,GAAkB,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AAEhG;;;;;;GAMG;AACU,QAAA,0BAA0B,GAAkB,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;AAgB7G,4HAA4H;AAC5H,SAAgB,sBAAsB,CAAC,GAAoB;IACzD,OAAQ,GAAgF,CAAC,kCAA0B,CAAC,CAAC;AACvH,CAAC;AAOD;;GAEG;AACH,SAAgB,4BAA4B,CAAC,IAAmB;IAC7D,IAAsC,CAAC,2BAAmB,CAAC,GAAG,IAAI,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,IAA+B;IACvE,OAAO,CAAC,CAAC,IAAI,IAAK,IAAsC,CAAC,2BAAmB,CAAC,KAAK,IAAI,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,SAAgB,6BAA6B,CAAC,IAAmB;IAC9D,IAAsC,CAAC,2BAAmB,CAAC,GAAG,IAAI,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,4BAA4B,CAAC,IAA+B;IAC1E,OAAO,CAAC,CAAC,IAAI,IAAK,IAAsC,CAAC,2BAAmB,CAAC,KAAK,IAAI,CAAC;AACzF,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,GAAoB;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3E,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;QACrC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAoBD;;;;;;;;;;;;GAYG;AACH,SAAgB,YAAY,CAAC,OAA4B;IACvD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,mEAAmE;QACnE,kEAAkE;QAClE,mCAAmC;QACnC,EAAE;QACF,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,gBAAgB,GAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7F,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC;YACrC,OAAO;gBACL,GAAG,OAAO;gBACV,KAAK;gBACL,UAAU,EAAE,gBAAgB;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO;gBACL,GAAG,MAAM;gBACT,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;gBAC5B,UAAU,EAAE,gBAAgB;aAC7B,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AA2CD;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,YAAY,CAAC,OAA4B;IACvD,MAAM,IAAI,GAAG,IAAA,yBAAkB,EAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC;IAC5D,MAAM,iBAAiB,GAAuC;QAC5D,UAAU,EAAE,8BAAsB,CAAC,KAAK,EAAE;QAC1C,cAAc,EAAE,2CAAmC;QACnD,GAAG,OAAO,CAAC,UAAU;QACrB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;IACF,MAAM,mBAAmB,GAAiC,YAAY;QACpE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,GAAG,iBAAiB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAkB,EAAE,CAAC;IACnE,OAAO,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,OAAmB,CAAC;QACxB,IAAI,aAA+B,CAAC;QACpC,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,gEAAgE;gBAChE,kEAAkE;gBAClE,yDAAyD;gBACzD,2DAA2D;gBAC3D,gEAAgE;gBAChE,gCAAgC;gBAChC,MAAM,GAAG,GAAwB,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC7E,QAAQ,GAAI,OAAO,CAAC,QAAmE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kEAAkE;gBAClE,sEAAsE;gBACtE,MAAM,IAAI,SAAS,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,aAAa,GAAG,EAAE,GAAG,iBAAiB,EAAE,QAAQ,EAAE,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,mBAAuC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC;YACH,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,gBAAS,EAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4EAA4E;YAC5E,iEAAiE;YACjE,MAAM,IAAI,SAAS,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,SAAS,CAAC,qBAAqB,EAAE;oBACzC,KAAK,EAAE,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,oCAAoC;QACpC,EAAE;QACF,kEAAkE;QAClE,+DAA+D;QAC/D,mEAAmE;QACnE,4BAA4B;QAC5B,MAAM,mBAAmB,GACvB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;gBACzD,CAAC,CAAC,OAAO,CAAC,GAAG;gBACb,CAAC,CAAC,SAAS,CAAC;QAClB,MAAM,SAAS,GAAkB;YAC/B,SAAS,EAAE,mBAAmB,IAAI,SAAS;YAC3C,KAAK;YACL,MAAM;YACN,MAAM,EAAE,OAAO;YACf,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBACvC,UAAU,EAAE;oBACV,IAAI,EAAE,OAAgB;oBACtB,SAAS,EAAE,mBAAmB;oBAC9B,MAAM;oBACN,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;iBACpE;aACF,CAAC;SACH,CAAC;QACF,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,SAAS,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,OAAmB;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,GAAI,OAAO,CAAC,KAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,GAAG,GAAI,OAA0C,CAAC,GAAG,CAAC;IAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAgB,KAAK,CAAC,GAAG,cAA+B;IACtD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,yEAAyE;gBACvE,mEAAmE;gBACnE,6EAA6E,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAkB,KAAK,EAAC,GAAG,EAAC,EAAE;QAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAsCD;;;;;;;;;GASG;AACH,SAAgB,mBAAmB,CACjC,IAAqB,EACrB,GAAmB,EACnB,UAAsC,EAAE;IAExC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,UAAU,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,qBAAqB,GAAG,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC;IACnE,oEAAoE;IACpE,sEAAsE;IACtE,qEAAqE;IACrE,oDAAoD;IACpD,IAAI,qBAAqB,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,UAAU,YAAY,CAAC,OAAO,CAAC,cAAe,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,UAAU,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,gBAAgB;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC1G,IAAI,OAAO,CAAC,gBAAgB;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE1G,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE;QACnC,cAAc,EAAE,kBAAkB;QAClC,kBAAkB,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACpD,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;QACzF,iBAAiB,EAAE,OAAO,CAAC,gBAAgB,IAAI,0BAA0B;KAC1E,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,2BAA2B,CAAC,GAAY;IACtD,0EAA0E;IAC1E,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAW,CAAC;IACnC,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,OAAO,IAAI,IAAI,IAAI,IAAI,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,IAAI,OAAO,YAAY,8BAAqB;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,GAAI,OAA+B,CAAC,KAAK,CAAC;QACjD,IAAI,EAAE,CAAC;IACT,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,wEAAwE;IACxE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC"}

package/dist/lib/server/create-adcp-server.d.ts

@@ -802,19 +802,31 @@ export interface SessionContext {
     readonly agent?: BuyerAgent;
 }
 /**
- * Behavior when a function-form `instructions` callback throws.
+ * Behavior when a function-form `instructions` callback throws or its
+ * returned Promise rejects.
  *
  * - `'skip'` (default) — log server-side, treat as `undefined` (no
  *   instructions). Right for prose-of-flavor (brand manifests, marketing
  *   copy) where a registry fetch failure must not kill the buyer's session.
- * - `'fail'` — rethrow. The MCP `initialize` handshake then fails at the
- *   transport layer (this is NOT an `adcp_error` envelope — it kills the
- *   session). Right for adopters whose instructions carry load-bearing
- *   policy where stale/missing guidance is worse than a connection retry.
+ * - `'fail'` — rethrow (sync) / re-reject (async). The MCP `initialize`
+ *   handshake then fails at the transport layer (this is NOT an
+ *   `adcp_error` envelope — it kills the session). Right for adopters
+ *   whose instructions carry load-bearing policy where stale/missing
+ *   guidance is worse than a connection retry.
  *
  * @public
  */
 export type OnInstructionsError = 'skip' | 'fail';
+/**
+ * A value that is either `T` directly or a `Promise<T>`.
+ *
+ * Used in callback signatures that support both synchronous and asynchronous
+ * returns (e.g. `instructions`), so adopters can return either a plain
+ * string or an `async` function without separate overloads.
+ *
+ * @public
+ */
+export type MaybePromise<T> = T | Promise<T>;
 /**
  * Shape of the preTransport function attached by `createAdcpServer` when
  * `signedRequests` is configured. Returns `true` if the middleware has already
@@ -1097,14 +1109,19 @@ export interface AdcpServerConfig<TAccount = unknown> {
      * }));
      * ```
      *
-     * **Async return is not yet supported.** Function MUST return `string |
-     * undefined` synchronously. A returned `Promise` throws `ConfigurationError`.
-     * Pre-resolve before invoking `createAdcpServer` if you need to fetch.
+     * **Async functions are supported.** The framework awaits the returned
+     * Promise during MCP `initialize` — the session does not proceed until
+     * the promise settles. A slow fetch adds session-establishment latency,
+     * not per-tool latency; add a timeout inside your function if needed
+     * (e.g. `Promise.race([fetchProse(), timeout(2000)])`). A rejected
+     * promise is governed by `onInstructionsError`: `'skip'` (default) logs
+     * and sends no instructions; `'fail'` causes the `initialize` handshake
+     * to fail, dropping the session.
      *
      * @see SessionContext
      * @see onInstructionsError
      */
-    instructions?: string | ((ctx: SessionContext) => string | undefined);
+    instructions?: string | ((ctx: SessionContext) => MaybePromise<string | undefined>);
     /**
      * Behavior when a function-form `instructions` callback throws. Defaults
      * to `'skip'` — best-effort prose (brand manifests, marketing copy)