@ankhorage/contracts 13.0.1 → 15.0.0

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,eAAO,MAAM,qBAAqB,yCAA0C,CAAC;AAC7E,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,eAAO,MAAM,mBAAmB,6FAMtB,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACxE,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEnE,eAAO,MAAM,uBAAuB,8MAoB1B,CAAC;AACX,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChF,MAAM,MAAM,mBAAmB,GAAG,wBAAwB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE3E,eAAO,MAAM,wBAAwB,+BAAgC,CAAC;AACtE,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClF,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE7E,eAAO,MAAM,wCAAwC,gDAG3C,CAAC;AACX,MAAM,MAAM,8BAA8B,GACxC,CAAC,OAAO,wCAAwC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,eAAO,MAAM,oCAAoC,+BAAgC,CAAC;AAClF,MAAM,MAAM,8BAA8B,GAAG,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnG,eAAO,MAAM,+BAA+B,8BAA+B,CAAC;AAC5E,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1F,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,+FAA+F;IAC/F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;IACrD,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;IACrD,iGAAiG;IACjG,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,yBAAyB,GACnC,8BAA8B,GAAG,iCAAiC,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC7C,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAC7D;AAED,qGAAqG;AACrG,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACnD,QAAQ,CAAC,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,iBAAiB;;;;;;;CAOK,CAAC;AAEpC,wBAAgB,eAAe,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,cAAc,CAErE;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,eAAe,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,eAAe,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,mBAAmB,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,uFAAuF;IACvF,cAAc,CAAC,EAAE,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,uBAAuB,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,aAAa,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,GAAG,CAAC,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,CAAC,KAAK,GAAG,IAAI,IAC/B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,CAAC,EAAE,KAAK,CAAC;CACd,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,gBAAgB,CAAC;CACzB,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,cAAc,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,uBAAuB,+EAO1B,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB,2WAgBzB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,eAAO,MAAM,yCAAyC,kDAG5C,CAAC;AACX,MAAM,MAAM,oCAAoC,GAC9C,CAAC,OAAO,yCAAyC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,eAAO,MAAM,+BAA+B,qEAGlC,CAAC;AACX,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3F,eAAO,MAAM,gCAAgC,sDAGnC,CAAC;AACX,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5F,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,2BAA2B,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,6BAA6B,CAAC;CACrC,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEN,MAAM,MAAM,8BAA8B,GACtC;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,oCAAoC,CAAC;CAC9C,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,uBAAuB,CAAC;CAChC,CAAC;AAEN,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,8BAA8B,CAAC;CAC1C;AAED,MAAM,MAAM,yBAAyB,GACjC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,WAAW,CAAC;CACtB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,MAAM,EAAE,2BAA2B,CAAC;CACrC,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEN,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,SAAS,EAAE,SAAS,CAAC,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAE7C,kBAAkB,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACvF,qBAAqB,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACnG;AAED,MAAM,WAAW,uBAAuB;IACtC,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;IACxC,cAAc,EAAE,OAAO,CAAC;IACxB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC;IACrB,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAElC,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEnD,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IACtD,cAAc,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IAE3D,oBAAoB,CAAC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,SAAS,CAAC,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;CACrE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,eAAO,MAAM,qBAAqB,yCAA0C,CAAC;AAC7E,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,eAAO,MAAM,mBAAmB,6FAMtB,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACxE,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEnE,eAAO,MAAM,uBAAuB,8MAoB1B,CAAC;AACX,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChF,MAAM,MAAM,mBAAmB,GAAG,wBAAwB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE3E,eAAO,MAAM,wBAAwB,+BAAgC,CAAC;AACtE,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClF,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE7E,eAAO,MAAM,wCAAwC,gDAG3C,CAAC;AACX,MAAM,MAAM,8BAA8B,GACxC,CAAC,OAAO,wCAAwC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,eAAO,MAAM,oCAAoC,+BAAgC,CAAC;AAClF,MAAM,MAAM,8BAA8B,GAAG,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnG,eAAO,MAAM,+BAA+B,8BAA+B,CAAC;AAC5E,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1F,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,+FAA+F;IAC/F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;IACrD,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;IACrD,iGAAiG;IACjG,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,yBAAyB,GACnC,8BAA8B,GAAG,iCAAiC,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAC7D;AAED,qGAAqG;AACrG,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACnD,QAAQ,CAAC,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,iBAAiB;;;;;;;CAOK,CAAC;AAEpC,wBAAgB,eAAe,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,cAAc,CAErE;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,eAAe,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,eAAe,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,mBAAmB,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,uFAAuF;IACvF,cAAc,CAAC,EAAE,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,uBAAuB,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,aAAa,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,GAAG,CAAC,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,CAAC,KAAK,GAAG,IAAI,IAC/B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,CAAC,EAAE,KAAK,CAAC;CACd,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,gBAAgB,CAAC;CACzB,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,cAAc,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,uBAAuB,+EAO1B,CAAC;AACX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB,2WAgBzB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,eAAO,MAAM,yCAAyC,kDAG5C,CAAC;AACX,MAAM,MAAM,oCAAoC,GAC9C,CAAC,OAAO,yCAAyC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,eAAO,MAAM,+BAA+B,qEAGlC,CAAC;AACX,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3F,eAAO,MAAM,gCAAgC,sDAGnC,CAAC;AACX,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5F,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,2BAA2B,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,6BAA6B,CAAC;CACrC,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEN,MAAM,MAAM,8BAA8B,GACtC;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,oCAAoC,CAAC;CAC9C,GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,uBAAuB,CAAC;CAChC,CAAC;AAEN,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,8BAA8B,CAAC;CAC1C;AAED,MAAM,MAAM,yBAAyB,GACjC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,WAAW,CAAC;CACtB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,MAAM,EAAE,2BAA2B,CAAC;CACrC,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEN,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,SAAS,EAAE,SAAS,CAAC,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAE7C,kBAAkB,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACvF,qBAAqB,CAAC,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACnG;AAED,MAAM,WAAW,uBAAuB;IACtC,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;IACxC,cAAc,EAAE,OAAO,CAAC;IACxB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC;IACrB,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAElC,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEnD,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IACtD,cAAc,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IAE3D,oBAAoB,CAAC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,SAAS,CAAC,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;CACrE"}

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;AAG7E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,qBAAqB;IACxB,UAAU;IACV,aAAa;IACb,WAAW;IACX,UAAU;CACF,CAAC;AAIX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO;IACP,OAAO;IACP,WAAW;IACX,SAAS;IACT,UAAU;IACV,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,UAAU;IACV,UAAU;IACV,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;CACE,CAAC;AAIX,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,kBAAkB,CAAU,CAAC;AAItE,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,mBAAmB;IACnB,cAAc;CACN,CAAC;AAIX,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGlF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,UAAU,EAAE,KAAK,CAAU,CAAC;AAgE5E,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,UAAU;IACxB,mBAAmB,EAAE,iBAAiB;IACtC,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,SAAS;CACK,CAAC;AAEpC,MAAM,UAAU,eAAe,CAAC,IAAqB;IACnD,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,iBAAiB,CAAC,EAAE,CAAC;AAC5C,CAAC;AA2GD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO;IACP,WAAW;IACX,UAAU;IACV,UAAU;IACV,SAAS;IACT,SAAS;CACD,CAAC;AAGX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,iCAAiC;IACjC,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,4BAA4B;IAC5B,sBAAsB;IACtB,eAAe;IACf,4BAA4B;IAC5B,yBAAyB;IACzB,gBAAgB;CACR,CAAC;AAUX,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,gBAAgB;IAChB,mBAAmB;CACX,CAAC;AAIX,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,GAAG,yCAAyC;IAC5C,iBAAiB;CACT,CAAC;AAGX,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,qBAAqB;IACrB,kBAAkB;CACV,CAAC","sourcesContent":["import type { AppDeployEnvironmentId, AppDeployTargetId } from './deploy';\nimport type { SecretRef } from './secrets';\nimport type { IconSpec } from './types';\n\nexport const AUTH_IDENTIFIER_KINDS = ['email', 'phone', 'username'] as const;\nexport type AuthIdentifierKind = (typeof AUTH_IDENTIFIER_KINDS)[number];\n\nexport const AUTH_SIGN_UP_FIELDS = [\n  ...AUTH_IDENTIFIER_KINDS,\n  'password',\n  'displayName',\n  'firstName',\n  'lastName',\n] as const;\nexport type KnownAuthSignUpField = (typeof AUTH_SIGN_UP_FIELDS)[number];\nexport type AuthSignUpField = KnownAuthSignUpField | (string & {});\n\nexport const AUTH_OAUTH_PROVIDER_IDS = [\n  'apple',\n  'azure',\n  'bitbucket',\n  'discord',\n  'facebook',\n  'figma',\n  'github',\n  'gitlab',\n  'google',\n  'kakao',\n  'keycloak',\n  'linkedin',\n  'notion',\n  'slack',\n  'spotify',\n  'twitch',\n  'twitter',\n  'workos',\n  'zoom',\n] as const;\nexport type KnownAuthOAuthProviderId = (typeof AUTH_OAUTH_PROVIDER_IDS)[number];\nexport type AuthOAuthProviderId = KnownAuthOAuthProviderId | (string & {});\n\nexport const AUTH_OAUTH_TRANSPORT_IDS = ['brokeredRedirect'] as const;\nexport type KnownAuthOAuthTransportId = (typeof AUTH_OAUTH_TRANSPORT_IDS)[number];\nexport type AuthOAuthTransportId = KnownAuthOAuthTransportId | (string & {});\n\nexport const AUTH_OAUTH_SETUP_FIELD_PERSISTENCE_KINDS = [\n  'trustedCredential',\n  'publicConfig',\n] as const;\nexport type AuthOAuthSetupFieldPersistence =\n  (typeof AUTH_OAUTH_SETUP_FIELD_PERSISTENCE_KINDS)[number];\n\nexport const AUTH_OAUTH_SETUP_FIELD_SENSITIVITIES = ['public', 'secret'] as const;\nexport type AuthOAuthSetupFieldSensitivity = (typeof AUTH_OAUTH_SETUP_FIELD_SENSITIVITIES)[number];\n\nexport const AUTH_OAUTH_SETUP_CALLBACK_ROLES = ['provider', 'app'] as const;\nexport type AuthOAuthSetupCallbackRole = (typeof AUTH_OAUTH_SETUP_CALLBACK_ROLES)[number];\n\nexport interface AuthOAuthSetupFieldRequirement {\n  readonly kind: 'field';\n  /** Adapter-owned stable key. The contract does not prescribe provider-specific field names. */\n  readonly key: string;\n  readonly label: string;\n  readonly required: boolean;\n  readonly sensitivity: AuthOAuthSetupFieldSensitivity;\n  readonly persistence: AuthOAuthSetupFieldPersistence;\n  /** Present only when a field belongs to one application target rather than the backend setup. */\n  readonly target?: AppDeployTargetId;\n  readonly description?: string;\n}\n\nexport interface AuthOAuthSetupCallbackRequirement {\n  readonly kind: 'callback';\n  readonly role: AuthOAuthSetupCallbackRole;\n  readonly label: string;\n  readonly required: boolean;\n  /** App callbacks may be target-specific; provider/backend callbacks normally omit this. */\n  readonly target?: AppDeployTargetId;\n  readonly description?: string;\n}\n\nexport type AuthOAuthSetupRequirement =\n  AuthOAuthSetupFieldRequirement | AuthOAuthSetupCallbackRequirement;\n\n/**\n * Adapter-neutral description of the OAuth setup Studio or Doctor should surface for one\n * provider/transport/environment combination. It contains requirements only, never credential\n * values, tokens, callback authorization data, or other secret material.\n */\nexport interface AuthOAuthSetupPlan {\n  readonly provider: AuthOAuthProviderId;\n  readonly transport: AuthOAuthTransportId;\n  readonly environment: AppDeployEnvironmentId;\n  /** Enabled application targets considered while deriving this plan. */\n  readonly targets: readonly AppDeployTargetId[];\n  readonly requirements: readonly AuthOAuthSetupRequirement[];\n}\n\n/** Backend-owned setup capabilities used by administration planning, separate from runtime OAuth. */\nexport interface AuthOAuthSetupCapabilities {\n  readonly providers: readonly AuthOAuthProviderId[];\n  readonly transports: readonly AuthOAuthTransportId[];\n}\n\nexport interface AuthIdentifier {\n  kind: AuthIdentifierKind;\n  value: string;\n}\n\nexport interface AuthFlowConfig {\n  signInRoute: string;\n  signUpRoute?: string;\n  signOutRoute?: string;\n  forgotPasswordRoute?: string;\n  otpRoute?: string;\n  postSignInRoute: string;\n  unauthorizedRoute?: string;\n}\n\nexport const DEFAULT_AUTH_FLOW = {\n  signInRoute: 'sign-in',\n  signUpRoute: 'sign-up',\n  signOutRoute: 'sign-out',\n  forgotPasswordRoute: 'forgot-password',\n  postSignInRoute: '/',\n  unauthorizedRoute: 'sign-in',\n} as const satisfies AuthFlowConfig;\n\nexport function resolveAuthFlow(flow?: AuthFlowConfig): AuthFlowConfig {\n  return { ...(flow ?? DEFAULT_AUTH_FLOW) };\n}\n\nexport interface AuthSignInConfig {\n  identifiers: AuthIdentifierKind[];\n}\n\nexport interface AuthSignUpConfig {\n  requiredFields: AuthSignUpField[];\n  optionalFields?: AuthSignUpField[];\n}\n\nexport interface AuthOAuthProviderConfig {\n  id: AuthOAuthProviderId;\n  label?: string;\n  enabled?: boolean;\n  scopes?: string[];\n  queryParams?: Record<string, string>;\n  icon?: IconSpec;\n  /** Logical server-side secret reference; raw credentials must never be stored here. */\n  credentialsRef?: SecretRef;\n}\n\nexport interface AuthOAuthConfig {\n  enabled: boolean;\n  callbackRoute: string;\n  providers: AuthOAuthProviderConfig[];\n}\n\nexport interface AuthProviderConfig {\n  provider: string;\n  signIn: AuthSignInConfig;\n  signUp?: AuthSignUpConfig;\n  oauth?: AuthOAuthConfig;\n  passwordReset?: {\n    enabled: boolean;\n  };\n  otp?: {\n    enabled: boolean;\n  };\n}\n\nexport interface AuthUser {\n  id: string;\n  email?: string;\n  phone?: string;\n  username?: string;\n  displayName?: string;\n  avatarUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface AuthSession {\n  accessToken: string;\n  refreshToken?: string;\n  expiresAt?: number;\n  tokenType?: string;\n  user: AuthUser;\n}\n\nexport interface AuthAdapterError {\n  code: string;\n  message: string;\n  cause?: unknown;\n}\n\nexport type AuthResult<TData = void> =\n  | {\n      ok: true;\n      data?: TData;\n    }\n  | {\n      ok: false;\n      error: AuthAdapterError;\n    };\n\nexport interface SignInInput {\n  identifier: AuthIdentifier;\n  password?: string;\n  otp?: string;\n  redirectTo?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface SignUpInput {\n  identifier: AuthIdentifier;\n  password?: string;\n  profile?: Record<string, unknown>;\n  redirectTo?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface SignOutInput {\n  allDevices?: boolean;\n}\n\nexport interface PasswordResetInput {\n  identifier: AuthIdentifier;\n  redirectTo?: string;\n}\n\nexport interface VerifyOtpInput {\n  identifier: AuthIdentifier;\n  token: string;\n  redirectTo?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport const AUTH_OAUTH_ERROR_STAGES = [\n  'start',\n  'transport',\n  'callback',\n  'exchange',\n  'session',\n  'profile',\n] as const;\nexport type AuthOAuthErrorStage = (typeof AUTH_OAUTH_ERROR_STAGES)[number];\n\nexport const AUTH_OAUTH_ERROR_CODES = [\n  'oauth_unavailable',\n  'provider_disabled',\n  'provider_misconfigured',\n  'invalid_redirect_uri',\n  'authorization_failed',\n  'authorization_attempt_not_found',\n  'invalid_callback',\n  'state_mismatch',\n  'pkce_mismatch',\n  'callback_already_completed',\n  'code_exchange_failed',\n  'network_error',\n  'session_persistence_failed',\n  'profile_creation_failed',\n  'provider_error',\n] as const;\nexport type AuthOAuthErrorCode = (typeof AUTH_OAUTH_ERROR_CODES)[number];\n\nexport interface AuthOAuthError extends AuthAdapterError {\n  code: AuthOAuthErrorCode;\n  stage: AuthOAuthErrorStage;\n  provider?: AuthOAuthProviderId;\n  recoverable: boolean;\n}\n\nexport const AUTH_OAUTH_TRANSPORT_CANCELLATION_REASONS = [\n  'user_cancelled',\n  'browser_dismissed',\n] as const;\nexport type AuthOAuthTransportCancellationReason =\n  (typeof AUTH_OAUTH_TRANSPORT_CANCELLATION_REASONS)[number];\n\nexport const AUTH_OAUTH_CANCELLATION_REASONS = [\n  ...AUTH_OAUTH_TRANSPORT_CANCELLATION_REASONS,\n  'provider_denied',\n] as const;\nexport type AuthOAuthCancellationReason = (typeof AUTH_OAUTH_CANCELLATION_REASONS)[number];\n\nexport const AUTH_OAUTH_TRANSPORT_ERROR_CODES = [\n  'browser_unavailable',\n  'transport_failed',\n] as const;\nexport type AuthOAuthTransportErrorCode = (typeof AUTH_OAUTH_TRANSPORT_ERROR_CODES)[number];\n\nexport interface AuthOAuthTransportError {\n  code: AuthOAuthTransportErrorCode;\n  message: string;\n  cause?: unknown;\n}\n\nexport interface StartOAuthAuthorizationInput {\n  provider: AuthOAuthProviderId;\n  redirectUri: string;\n  scopes?: readonly string[];\n  queryParams?: Readonly<Record<string, string>>;\n}\n\nexport interface AuthOAuthAuthorizationRequest {\n  attemptId: string;\n  provider: AuthOAuthProviderId;\n  authorizationUrl: string;\n  redirectUri: string;\n}\n\nexport type AuthOAuthStartResult =\n  | {\n      ok: true;\n      data: AuthOAuthAuthorizationRequest;\n    }\n  | {\n      ok: false;\n      error: AuthOAuthError;\n    };\n\nexport type AuthOAuthAuthorizationResponse =\n  | {\n      type: 'callback';\n      url: string;\n    }\n  | {\n      type: 'cancelled';\n      reason: AuthOAuthTransportCancellationReason;\n    }\n  | {\n      type: 'error';\n      error: AuthOAuthTransportError;\n    };\n\nexport interface CompleteOAuthAuthorizationInput {\n  attemptId: string;\n  response: AuthOAuthAuthorizationResponse;\n}\n\nexport type AuthOAuthCompletionResult =\n  | {\n      ok: true;\n      status: 'authenticated';\n      provider: AuthOAuthProviderId;\n      session: AuthSession;\n    }\n  | {\n      ok: false;\n      status: 'cancelled';\n      provider: AuthOAuthProviderId;\n      reason: AuthOAuthCancellationReason;\n    }\n  | {\n      ok: false;\n      status: 'error';\n      error: AuthOAuthError;\n    };\n\nexport interface AuthOAuthCapabilities {\n  /** Enabled providers for which start and callback completion are operational. */\n  providers: readonly [AuthOAuthProviderId, ...AuthOAuthProviderId[]];\n}\n\nexport interface AuthOAuthAdapter {\n  readonly capabilities: AuthOAuthCapabilities;\n\n  startAuthorization(input: StartOAuthAuthorizationInput): Promise<AuthOAuthStartResult>;\n  completeAuthorization(input: CompleteOAuthAuthorizationInput): Promise<AuthOAuthCompletionResult>;\n}\n\nexport interface AuthAdapterCapabilities {\n  signInIdentifiers: AuthIdentifierKind[];\n  supportsSignUp: boolean;\n  supportsPasswordReset: boolean;\n  supportsOtp: boolean;\n  supportsSessionRefresh: boolean;\n}\n\nexport interface AuthAdapter {\n  readonly capabilities?: AuthAdapterCapabilities;\n  /**\n   * Presence is the canonical OAuth capability signal. When present, both authorization start and\n   * callback completion are mandatory and operational for every advertised provider.\n   */\n  readonly oauth?: AuthOAuthAdapter;\n\n  signIn(input: SignInInput): Promise<AuthResult<AuthSession>>;\n  signUp(input: SignUpInput): Promise<AuthResult<AuthSession | AuthUser>>;\n  signOut(input?: SignOutInput): Promise<AuthResult>;\n\n  getSession(): Promise<AuthResult<AuthSession | null>>;\n  refreshSession?(): Promise<AuthResult<AuthSession | null>>;\n\n  requestPasswordReset?(input: PasswordResetInput): Promise<AuthResult>;\n  verifyOtp?(input: VerifyOtpInput): Promise<AuthResult<AuthSession>>;\n}\n"]}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAU,CAAC;AAG7E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,qBAAqB;IACxB,UAAU;IACV,aAAa;IACb,WAAW;IACX,UAAU;CACF,CAAC;AAIX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO;IACP,OAAO;IACP,WAAW;IACX,SAAS;IACT,UAAU;IACV,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,UAAU;IACV,UAAU;IACV,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;CACE,CAAC;AAIX,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,kBAAkB,CAAU,CAAC;AAItE,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,mBAAmB;IACnB,cAAc;CACN,CAAC;AAIX,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGlF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,UAAU,EAAE,KAAK,CAAU,CAAC;AAgE5E,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,UAAU;IACxB,mBAAmB,EAAE,iBAAiB;IACtC,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,SAAS;CACK,CAAC;AAEpC,MAAM,UAAU,eAAe,CAAC,IAAqB;IACnD,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,iBAAiB,CAAC,EAAE,CAAC;AAC5C,CAAC;AA2GD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO;IACP,WAAW;IACX,UAAU;IACV,UAAU;IACV,SAAS;IACT,SAAS;CACD,CAAC;AAGX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,sBAAsB;IACtB,sBAAsB;IACtB,iCAAiC;IACjC,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,4BAA4B;IAC5B,sBAAsB;IACtB,eAAe;IACf,4BAA4B;IAC5B,yBAAyB;IACzB,gBAAgB;CACR,CAAC;AAUX,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,gBAAgB;IAChB,mBAAmB;CACX,CAAC;AAIX,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,GAAG,yCAAyC;IAC5C,iBAAiB;CACT,CAAC;AAGX,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,qBAAqB;IACrB,kBAAkB;CACV,CAAC","sourcesContent":["import type { AppDeployTargetId } from './deploy';\nimport type { AppEnvironmentId } from './environments';\nimport type { SecretRef } from './secrets';\nimport type { IconSpec } from './types';\n\nexport const AUTH_IDENTIFIER_KINDS = ['email', 'phone', 'username'] as const;\nexport type AuthIdentifierKind = (typeof AUTH_IDENTIFIER_KINDS)[number];\n\nexport const AUTH_SIGN_UP_FIELDS = [\n  ...AUTH_IDENTIFIER_KINDS,\n  'password',\n  'displayName',\n  'firstName',\n  'lastName',\n] as const;\nexport type KnownAuthSignUpField = (typeof AUTH_SIGN_UP_FIELDS)[number];\nexport type AuthSignUpField = KnownAuthSignUpField | (string & {});\n\nexport const AUTH_OAUTH_PROVIDER_IDS = [\n  'apple',\n  'azure',\n  'bitbucket',\n  'discord',\n  'facebook',\n  'figma',\n  'github',\n  'gitlab',\n  'google',\n  'kakao',\n  'keycloak',\n  'linkedin',\n  'notion',\n  'slack',\n  'spotify',\n  'twitch',\n  'twitter',\n  'workos',\n  'zoom',\n] as const;\nexport type KnownAuthOAuthProviderId = (typeof AUTH_OAUTH_PROVIDER_IDS)[number];\nexport type AuthOAuthProviderId = KnownAuthOAuthProviderId | (string & {});\n\nexport const AUTH_OAUTH_TRANSPORT_IDS = ['brokeredRedirect'] as const;\nexport type KnownAuthOAuthTransportId = (typeof AUTH_OAUTH_TRANSPORT_IDS)[number];\nexport type AuthOAuthTransportId = KnownAuthOAuthTransportId | (string & {});\n\nexport const AUTH_OAUTH_SETUP_FIELD_PERSISTENCE_KINDS = [\n  'trustedCredential',\n  'publicConfig',\n] as const;\nexport type AuthOAuthSetupFieldPersistence =\n  (typeof AUTH_OAUTH_SETUP_FIELD_PERSISTENCE_KINDS)[number];\n\nexport const AUTH_OAUTH_SETUP_FIELD_SENSITIVITIES = ['public', 'secret'] as const;\nexport type AuthOAuthSetupFieldSensitivity = (typeof AUTH_OAUTH_SETUP_FIELD_SENSITIVITIES)[number];\n\nexport const AUTH_OAUTH_SETUP_CALLBACK_ROLES = ['provider', 'app'] as const;\nexport type AuthOAuthSetupCallbackRole = (typeof AUTH_OAUTH_SETUP_CALLBACK_ROLES)[number];\n\nexport interface AuthOAuthSetupFieldRequirement {\n  readonly kind: 'field';\n  /** Adapter-owned stable key. The contract does not prescribe provider-specific field names. */\n  readonly key: string;\n  readonly label: string;\n  readonly required: boolean;\n  readonly sensitivity: AuthOAuthSetupFieldSensitivity;\n  readonly persistence: AuthOAuthSetupFieldPersistence;\n  /** Present only when a field belongs to one application target rather than the backend setup. */\n  readonly target?: AppDeployTargetId;\n  readonly description?: string;\n}\n\nexport interface AuthOAuthSetupCallbackRequirement {\n  readonly kind: 'callback';\n  readonly role: AuthOAuthSetupCallbackRole;\n  readonly label: string;\n  readonly required: boolean;\n  /** App callbacks may be target-specific; provider/backend callbacks normally omit this. */\n  readonly target?: AppDeployTargetId;\n  readonly description?: string;\n}\n\nexport type AuthOAuthSetupRequirement =\n  AuthOAuthSetupFieldRequirement | AuthOAuthSetupCallbackRequirement;\n\n/**\n * Adapter-neutral description of the OAuth setup Studio or Doctor should surface for one\n * provider/transport/environment combination. It contains requirements only, never credential\n * values, tokens, callback authorization data, or other secret material.\n */\nexport interface AuthOAuthSetupPlan {\n  readonly provider: AuthOAuthProviderId;\n  readonly transport: AuthOAuthTransportId;\n  readonly environment: AppEnvironmentId;\n  /** Enabled application targets considered while deriving this plan. */\n  readonly targets: readonly AppDeployTargetId[];\n  readonly requirements: readonly AuthOAuthSetupRequirement[];\n}\n\n/** Backend-owned setup capabilities used by administration planning, separate from runtime OAuth. */\nexport interface AuthOAuthSetupCapabilities {\n  readonly providers: readonly AuthOAuthProviderId[];\n  readonly transports: readonly AuthOAuthTransportId[];\n}\n\nexport interface AuthIdentifier {\n  kind: AuthIdentifierKind;\n  value: string;\n}\n\nexport interface AuthFlowConfig {\n  signInRoute: string;\n  signUpRoute?: string;\n  signOutRoute?: string;\n  forgotPasswordRoute?: string;\n  otpRoute?: string;\n  postSignInRoute: string;\n  unauthorizedRoute?: string;\n}\n\nexport const DEFAULT_AUTH_FLOW = {\n  signInRoute: 'sign-in',\n  signUpRoute: 'sign-up',\n  signOutRoute: 'sign-out',\n  forgotPasswordRoute: 'forgot-password',\n  postSignInRoute: '/',\n  unauthorizedRoute: 'sign-in',\n} as const satisfies AuthFlowConfig;\n\nexport function resolveAuthFlow(flow?: AuthFlowConfig): AuthFlowConfig {\n  return { ...(flow ?? DEFAULT_AUTH_FLOW) };\n}\n\nexport interface AuthSignInConfig {\n  identifiers: AuthIdentifierKind[];\n}\n\nexport interface AuthSignUpConfig {\n  requiredFields: AuthSignUpField[];\n  optionalFields?: AuthSignUpField[];\n}\n\nexport interface AuthOAuthProviderConfig {\n  id: AuthOAuthProviderId;\n  label?: string;\n  enabled?: boolean;\n  scopes?: string[];\n  queryParams?: Record<string, string>;\n  icon?: IconSpec;\n  /** Logical server-side secret reference; raw credentials must never be stored here. */\n  credentialsRef?: SecretRef;\n}\n\nexport interface AuthOAuthConfig {\n  enabled: boolean;\n  callbackRoute: string;\n  providers: AuthOAuthProviderConfig[];\n}\n\nexport interface AuthProviderConfig {\n  provider: string;\n  signIn: AuthSignInConfig;\n  signUp?: AuthSignUpConfig;\n  oauth?: AuthOAuthConfig;\n  passwordReset?: {\n    enabled: boolean;\n  };\n  otp?: {\n    enabled: boolean;\n  };\n}\n\nexport interface AuthUser {\n  id: string;\n  email?: string;\n  phone?: string;\n  username?: string;\n  displayName?: string;\n  avatarUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface AuthSession {\n  accessToken: string;\n  refreshToken?: string;\n  expiresAt?: number;\n  tokenType?: string;\n  user: AuthUser;\n}\n\nexport interface AuthAdapterError {\n  code: string;\n  message: string;\n  cause?: unknown;\n}\n\nexport type AuthResult<TData = void> =\n  | {\n      ok: true;\n      data?: TData;\n    }\n  | {\n      ok: false;\n      error: AuthAdapterError;\n    };\n\nexport interface SignInInput {\n  identifier: AuthIdentifier;\n  password?: string;\n  otp?: string;\n  redirectTo?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface SignUpInput {\n  identifier: AuthIdentifier;\n  password?: string;\n  profile?: Record<string, unknown>;\n  redirectTo?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface SignOutInput {\n  allDevices?: boolean;\n}\n\nexport interface PasswordResetInput {\n  identifier: AuthIdentifier;\n  redirectTo?: string;\n}\n\nexport interface VerifyOtpInput {\n  identifier: AuthIdentifier;\n  token: string;\n  redirectTo?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport const AUTH_OAUTH_ERROR_STAGES = [\n  'start',\n  'transport',\n  'callback',\n  'exchange',\n  'session',\n  'profile',\n] as const;\nexport type AuthOAuthErrorStage = (typeof AUTH_OAUTH_ERROR_STAGES)[number];\n\nexport const AUTH_OAUTH_ERROR_CODES = [\n  'oauth_unavailable',\n  'provider_disabled',\n  'provider_misconfigured',\n  'invalid_redirect_uri',\n  'authorization_failed',\n  'authorization_attempt_not_found',\n  'invalid_callback',\n  'state_mismatch',\n  'pkce_mismatch',\n  'callback_already_completed',\n  'code_exchange_failed',\n  'network_error',\n  'session_persistence_failed',\n  'profile_creation_failed',\n  'provider_error',\n] as const;\nexport type AuthOAuthErrorCode = (typeof AUTH_OAUTH_ERROR_CODES)[number];\n\nexport interface AuthOAuthError extends AuthAdapterError {\n  code: AuthOAuthErrorCode;\n  stage: AuthOAuthErrorStage;\n  provider?: AuthOAuthProviderId;\n  recoverable: boolean;\n}\n\nexport const AUTH_OAUTH_TRANSPORT_CANCELLATION_REASONS = [\n  'user_cancelled',\n  'browser_dismissed',\n] as const;\nexport type AuthOAuthTransportCancellationReason =\n  (typeof AUTH_OAUTH_TRANSPORT_CANCELLATION_REASONS)[number];\n\nexport const AUTH_OAUTH_CANCELLATION_REASONS = [\n  ...AUTH_OAUTH_TRANSPORT_CANCELLATION_REASONS,\n  'provider_denied',\n] as const;\nexport type AuthOAuthCancellationReason = (typeof AUTH_OAUTH_CANCELLATION_REASONS)[number];\n\nexport const AUTH_OAUTH_TRANSPORT_ERROR_CODES = [\n  'browser_unavailable',\n  'transport_failed',\n] as const;\nexport type AuthOAuthTransportErrorCode = (typeof AUTH_OAUTH_TRANSPORT_ERROR_CODES)[number];\n\nexport interface AuthOAuthTransportError {\n  code: AuthOAuthTransportErrorCode;\n  message: string;\n  cause?: unknown;\n}\n\nexport interface StartOAuthAuthorizationInput {\n  provider: AuthOAuthProviderId;\n  redirectUri: string;\n  scopes?: readonly string[];\n  queryParams?: Readonly<Record<string, string>>;\n}\n\nexport interface AuthOAuthAuthorizationRequest {\n  attemptId: string;\n  provider: AuthOAuthProviderId;\n  authorizationUrl: string;\n  redirectUri: string;\n}\n\nexport type AuthOAuthStartResult =\n  | {\n      ok: true;\n      data: AuthOAuthAuthorizationRequest;\n    }\n  | {\n      ok: false;\n      error: AuthOAuthError;\n    };\n\nexport type AuthOAuthAuthorizationResponse =\n  | {\n      type: 'callback';\n      url: string;\n    }\n  | {\n      type: 'cancelled';\n      reason: AuthOAuthTransportCancellationReason;\n    }\n  | {\n      type: 'error';\n      error: AuthOAuthTransportError;\n    };\n\nexport interface CompleteOAuthAuthorizationInput {\n  attemptId: string;\n  response: AuthOAuthAuthorizationResponse;\n}\n\nexport type AuthOAuthCompletionResult =\n  | {\n      ok: true;\n      status: 'authenticated';\n      provider: AuthOAuthProviderId;\n      session: AuthSession;\n    }\n  | {\n      ok: false;\n      status: 'cancelled';\n      provider: AuthOAuthProviderId;\n      reason: AuthOAuthCancellationReason;\n    }\n  | {\n      ok: false;\n      status: 'error';\n      error: AuthOAuthError;\n    };\n\nexport interface AuthOAuthCapabilities {\n  /** Enabled providers for which start and callback completion are operational. */\n  providers: readonly [AuthOAuthProviderId, ...AuthOAuthProviderId[]];\n}\n\nexport interface AuthOAuthAdapter {\n  readonly capabilities: AuthOAuthCapabilities;\n\n  startAuthorization(input: StartOAuthAuthorizationInput): Promise<AuthOAuthStartResult>;\n  completeAuthorization(input: CompleteOAuthAuthorizationInput): Promise<AuthOAuthCompletionResult>;\n}\n\nexport interface AuthAdapterCapabilities {\n  signInIdentifiers: AuthIdentifierKind[];\n  supportsSignUp: boolean;\n  supportsPasswordReset: boolean;\n  supportsOtp: boolean;\n  supportsSessionRefresh: boolean;\n}\n\nexport interface AuthAdapter {\n  readonly capabilities?: AuthAdapterCapabilities;\n  /**\n   * Presence is the canonical OAuth capability signal. When present, both authorization start and\n   * callback completion are mandatory and operational for every advertised provider.\n   */\n  readonly oauth?: AuthOAuthAdapter;\n\n  signIn(input: SignInInput): Promise<AuthResult<AuthSession>>;\n  signUp(input: SignUpInput): Promise<AuthResult<AuthSession | AuthUser>>;\n  signOut(input?: SignOutInput): Promise<AuthResult>;\n\n  getSession(): Promise<AuthResult<AuthSession | null>>;\n  refreshSession?(): Promise<AuthResult<AuthSession | null>>;\n\n  requestPasswordReset?(input: PasswordResetInput): Promise<AuthResult>;\n  verifyOtp?(input: VerifyOtpInput): Promise<AuthResult<AuthSession>>;\n}\n"]}

package/dist/deploy.d.ts

@@ -1,14 +1,5 @@
 export declare const APP_DEPLOY_TARGET_IDS: readonly ["web", "android", "ios"];
 export type AppDeployTargetId = (typeof APP_DEPLOY_TARGET_IDS)[number];
-/**
- * Logical application environments shared across platform-specific planning.
- *
- * `local` maps to local Web, iOS development, and Android debug execution.
- * Environment-specific endpoints, signing material, and credentials are owned
- * by their dedicated deployment/infra configuration rather than this identity contract.
- */
-export declare const APP_DEPLOY_ENVIRONMENT_IDS: readonly ["local", "preview", "production"];
-export type AppDeployEnvironmentId = (typeof APP_DEPLOY_ENVIRONMENT_IDS)[number];
 export interface AppDeployProviderSelection {
     readonly build?: string;
     readonly publish?: string;

package/dist/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,oCAAqC,CAAC;AAExE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,6CAA8C,CAAC;AAEtF,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,wBAAwB,CAAC;CACzC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,oCAAqC,CAAC;AAExE,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC;CACjD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,wBAAwB,CAAC;CACzC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/deploy.js

@@ -1,11 +1,3 @@
 export const APP_DEPLOY_TARGET_IDS = ['web', 'android', 'ios'];
-/**
- * Logical application environments shared across platform-specific planning.
- *
- * `local` maps to local Web, iOS development, and Android debug execution.
- * Environment-specific endpoints, signing material, and credentials are owned
- * by their dedicated deployment/infra configuration rather than this identity contract.
- */
-export const APP_DEPLOY_ENVIRONMENT_IDS = ['local', 'preview', 'production'];
 export { isAppDeployManifest } from './appManifest/deploy';
 //# sourceMappingURL=deploy.js.map

package/dist/deploy.js.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AAIxE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAU,CAAC;AAwCtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC","sourcesContent":["export const APP_DEPLOY_TARGET_IDS = ['web', 'android', 'ios'] as const;\n\nexport type AppDeployTargetId = (typeof APP_DEPLOY_TARGET_IDS)[number];\n\n/**\n * Logical application environments shared across platform-specific planning.\n *\n * `local` maps to local Web, iOS development, and Android debug execution.\n * Environment-specific endpoints, signing material, and credentials are owned\n * by their dedicated deployment/infra configuration rather than this identity contract.\n */\nexport const APP_DEPLOY_ENVIRONMENT_IDS = ['local', 'preview', 'production'] as const;\n\nexport type AppDeployEnvironmentId = (typeof APP_DEPLOY_ENVIRONMENT_IDS)[number];\n\nexport interface AppDeployProviderSelection {\n  readonly build?: string;\n  readonly publish?: string;\n}\n\nexport interface AppDeployWebTargetConfig {\n  readonly enabled: boolean;\n  readonly providers?: AppDeployProviderSelection;\n}\n\nexport interface AppDeployAndroidTargetConfig {\n  readonly enabled: boolean;\n  readonly package: string;\n  /** Stable application URI scheme used for target-aware deep links such as OAuth callbacks. */\n  readonly scheme?: string;\n  readonly providers?: AppDeployProviderSelection;\n}\n\nexport interface AppDeployIosTargetConfig {\n  readonly enabled: boolean;\n  readonly bundleIdentifier: string;\n  /** Stable application URI scheme used for target-aware deep links such as OAuth callbacks. */\n  readonly scheme?: string;\n  readonly providers?: AppDeployProviderSelection;\n}\n\nexport interface AppDeployTargets {\n  readonly web?: AppDeployWebTargetConfig;\n  readonly android?: AppDeployAndroidTargetConfig;\n  readonly ios?: AppDeployIosTargetConfig;\n}\n\nexport interface AppDeployManifest {\n  readonly targets: AppDeployTargets;\n}\n\nexport { isAppDeployManifest } from './appManifest/deploy';\n"]}
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AAwCxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC","sourcesContent":["export const APP_DEPLOY_TARGET_IDS = ['web', 'android', 'ios'] as const;\n\nexport type AppDeployTargetId = (typeof APP_DEPLOY_TARGET_IDS)[number];\n\nexport interface AppDeployProviderSelection {\n  readonly build?: string;\n  readonly publish?: string;\n}\n\nexport interface AppDeployWebTargetConfig {\n  readonly enabled: boolean;\n  readonly providers?: AppDeployProviderSelection;\n}\n\nexport interface AppDeployAndroidTargetConfig {\n  readonly enabled: boolean;\n  readonly package: string;\n  /** Stable application URI scheme used for target-aware deep links such as OAuth callbacks. */\n  readonly scheme?: string;\n  readonly providers?: AppDeployProviderSelection;\n}\n\nexport interface AppDeployIosTargetConfig {\n  readonly enabled: boolean;\n  readonly bundleIdentifier: string;\n  /** Stable application URI scheme used for target-aware deep links such as OAuth callbacks. */\n  readonly scheme?: string;\n  readonly providers?: AppDeployProviderSelection;\n}\n\nexport interface AppDeployTargets {\n  readonly web?: AppDeployWebTargetConfig;\n  readonly android?: AppDeployAndroidTargetConfig;\n  readonly ios?: AppDeployIosTargetConfig;\n}\n\nexport interface AppDeployManifest {\n  readonly targets: AppDeployTargets;\n}\n\nexport { isAppDeployManifest } from './appManifest/deploy';\n"]}

package/dist/environments.d.ts

@@ -0,0 +1,4 @@
+/** Logical application environments shared by infrastructure and application shipment. */
+export declare const APP_ENVIRONMENT_IDS: readonly ["local", "preview", "production"];
+export type AppEnvironmentId = (typeof APP_ENVIRONMENT_IDS)[number];
+//# sourceMappingURL=environments.d.ts.map

package/dist/environments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environments.d.ts","sourceRoot":"","sources":["../src/environments.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,eAAO,MAAM,mBAAmB,6CAA8C,CAAC;AAE/E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/environments.js

@@ -0,0 +1,3 @@
+/** Logical application environments shared by infrastructure and application shipment. */
+export const APP_ENVIRONMENT_IDS = ['local', 'preview', 'production'];
+//# sourceMappingURL=environments.js.map

package/dist/environments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environments.js","sourceRoot":"","sources":["../src/environments.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAU,CAAC","sourcesContent":["/** Logical application environments shared by infrastructure and application shipment. */\nexport const APP_ENVIRONMENT_IDS = ['local', 'preview', 'production'] as const;\n\nexport type AppEnvironmentId = (typeof APP_ENVIRONMENT_IDS)[number];\n"]}

package/dist/index.d.ts

@@ -5,12 +5,13 @@ export * from './cli';
 export * from './data';
 export * from './db';
 export * from './deploy';
+export * from './environments';
+export * from './infra';
 export * from './media';
 export * from './navigator';
 export * from './repository';
 export * from './requirements';
 export * from './runtimeCallbacks';
-export * from './secretManifest';
 export * from './secrets';
 export * from './state';
 export * from './storage';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,OAAO,CAAC;AACtB,cAAc,QAAQ,CAAC;AACvB,cAAc,MAAM,CAAC;AACrB,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,OAAO,CAAC;AACtB,cAAc,QAAQ,CAAC;AACvB,cAAc,MAAM,CAAC;AACrB,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,MAAM,CAAC"}

package/dist/index.js

@@ -5,12 +5,13 @@ export * from './cli';
 export * from './data';
 export * from './db';
 export * from './deploy';
+export * from './environments';
+export * from './infra';
 export * from './media';
 export * from './navigator';
 export * from './repository';
 export * from './requirements';
 export * from './runtimeCallbacks';
-export * from './secretManifest';
 export * from './secrets';
 export * from './state';
 export * from './storage';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,OAAO,CAAC;AACtB,cAAc,QAAQ,CAAC;AACvB,cAAc,MAAM,CAAC;AACrB,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,MAAM,CAAC","sourcesContent":["export * from './appManifest';\nexport * from './auth';\nexport * from './bindings';\nexport * from './cli';\nexport * from './data';\nexport * from './db';\nexport * from './deploy';\nexport * from './media';\nexport * from './navigator';\nexport * from './repository';\nexport * from './requirements';\nexport * from './runtimeCallbacks';\nexport * from './secretManifest';\nexport * from './secrets';\nexport * from './state';\nexport * from './storage';\nexport * from './theme';\nexport * from './types';\nexport * from './ui';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,OAAO,CAAC;AACtB,cAAc,QAAQ,CAAC;AACvB,cAAc,MAAM,CAAC;AACrB,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,MAAM,CAAC","sourcesContent":["export * from './appManifest';\nexport * from './auth';\nexport * from './bindings';\nexport * from './cli';\nexport * from './data';\nexport * from './db';\nexport * from './deploy';\nexport * from './environments';\nexport * from './infra';\nexport * from './media';\nexport * from './navigator';\nexport * from './repository';\nexport * from './requirements';\nexport * from './runtimeCallbacks';\nexport * from './secrets';\nexport * from './state';\nexport * from './storage';\nexport * from './theme';\nexport * from './types';\nexport * from './ui';\n"]}

package/dist/infra/constants.d.ts

@@ -0,0 +1,91 @@
+/** One compatibility source for manifest types, validation, discovery and configuration UIs. */
+export declare const INFRA_RUNTIME_COMPATIBILITY: {
+    readonly minikube: readonly ["local"];
+    readonly k3s: readonly ["local", "hetzner"];
+    readonly 'docker-compose': readonly ["local", "hetzner"];
+};
+/** Canonical package identities. Capabilities describe ownership, not eight mandatory methods. */
+export declare const INFRA_ADAPTER_CATALOG: {
+    readonly local: {
+        readonly id: "local";
+        readonly package: "@ankhorage/local";
+        readonly kind: "compute";
+        readonly configVersion: 1;
+        readonly capabilities: readonly ["compute"];
+        readonly targets: readonly ["local-host"];
+        readonly dependencies: readonly [];
+    };
+    readonly hetzner: {
+        readonly id: "hetzner";
+        readonly package: "@ankhorage/hetzner";
+        readonly kind: "compute";
+        readonly configVersion: 1;
+        readonly capabilities: readonly ["compute"];
+        readonly targets: readonly ["ssh-host"];
+        readonly dependencies: readonly [];
+    };
+    readonly minikube: {
+        readonly id: "minikube";
+        readonly package: "@ankhorage/minikube";
+        readonly kind: "runtime";
+        readonly configVersion: 1;
+        readonly capabilities: readonly ["runtime", "workloads", "networking"];
+        readonly targets: readonly ["local-host"];
+        readonly dependencies: readonly ["compute"];
+    };
+    readonly k3s: {
+        readonly id: "k3s";
+        readonly package: "@ankhorage/k3s";
+        readonly kind: "runtime";
+        readonly configVersion: 1;
+        readonly capabilities: readonly ["runtime", "workloads", "networking"];
+        readonly targets: readonly ["local-host", "ssh-host"];
+        readonly dependencies: readonly ["compute"];
+    };
+    readonly 'docker-compose': {
+        readonly id: "docker-compose";
+        readonly package: "@ankhorage/docker-compose";
+        readonly kind: "runtime";
+        readonly configVersion: 1;
+        readonly capabilities: readonly ["runtime", "workloads", "networking"];
+        readonly targets: readonly ["local-host", "ssh-host"];
+        readonly dependencies: readonly ["compute"];
+    };
+    readonly supabase: {
+        readonly id: "supabase";
+        readonly package: "@ankhorage/supabase";
+        readonly kind: "service";
+        readonly configVersion: 1;
+        readonly capabilities: readonly ["database", "auth", "objectStorage"];
+        readonly targets: readonly [];
+        readonly dependencies: readonly ["workloads"];
+    };
+    readonly cerbos: {
+        readonly id: "cerbos";
+        readonly package: "@ankhorage/cerbos";
+        readonly kind: "service";
+        readonly configVersion: 1;
+        readonly capabilities: readonly ["authz"];
+        readonly targets: readonly [];
+        readonly dependencies: readonly ["workloads"];
+    };
+    readonly r2: {
+        readonly id: "r2";
+        readonly package: "@ankhorage/r2";
+        readonly kind: "service";
+        readonly configVersion: 1;
+        readonly capabilities: readonly ["objectStorage"];
+        readonly targets: readonly [];
+        readonly dependencies: readonly [];
+    };
+    readonly 'supabase-vault': {
+        readonly id: "supabase-vault";
+        readonly package: "@ankhorage/supabase-vault";
+        readonly kind: "service";
+        readonly configVersion: 1;
+        readonly capabilities: readonly ["secretStore"];
+        readonly targets: readonly [];
+        readonly dependencies: readonly ["database"];
+    };
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/infra/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/infra/constants.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,eAAO,MAAM,2BAA2B;;;;CAI9B,CAAC;AAEX,kGAAkG;AAClG,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkFxB,CAAC"}

package/dist/infra/constants.js

@@ -0,0 +1,91 @@
+/** One compatibility source for manifest types, validation, discovery and configuration UIs. */
+export const INFRA_RUNTIME_COMPATIBILITY = {
+    minikube: ['local'],
+    k3s: ['local', 'hetzner'],
+    'docker-compose': ['local', 'hetzner'],
+};
+/** Canonical package identities. Capabilities describe ownership, not eight mandatory methods. */
+export const INFRA_ADAPTER_CATALOG = {
+    local: {
+        id: 'local',
+        package: '@ankhorage/local',
+        kind: 'compute',
+        configVersion: 1,
+        capabilities: ['compute'],
+        targets: ['local-host'],
+        dependencies: [],
+    },
+    hetzner: {
+        id: 'hetzner',
+        package: '@ankhorage/hetzner',
+        kind: 'compute',
+        configVersion: 1,
+        capabilities: ['compute'],
+        targets: ['ssh-host'],
+        dependencies: [],
+    },
+    minikube: {
+        id: 'minikube',
+        package: '@ankhorage/minikube',
+        kind: 'runtime',
+        configVersion: 1,
+        capabilities: ['runtime', 'workloads', 'networking'],
+        targets: ['local-host'],
+        dependencies: ['compute'],
+    },
+    k3s: {
+        id: 'k3s',
+        package: '@ankhorage/k3s',
+        kind: 'runtime',
+        configVersion: 1,
+        capabilities: ['runtime', 'workloads', 'networking'],
+        targets: ['local-host', 'ssh-host'],
+        dependencies: ['compute'],
+    },
+    'docker-compose': {
+        id: 'docker-compose',
+        package: '@ankhorage/docker-compose',
+        kind: 'runtime',
+        configVersion: 1,
+        capabilities: ['runtime', 'workloads', 'networking'],
+        targets: ['local-host', 'ssh-host'],
+        dependencies: ['compute'],
+    },
+    supabase: {
+        id: 'supabase',
+        package: '@ankhorage/supabase',
+        kind: 'service',
+        configVersion: 1,
+        capabilities: ['database', 'auth', 'objectStorage'],
+        targets: [],
+        dependencies: ['workloads'],
+    },
+    cerbos: {
+        id: 'cerbos',
+        package: '@ankhorage/cerbos',
+        kind: 'service',
+        configVersion: 1,
+        capabilities: ['authz'],
+        targets: [],
+        dependencies: ['workloads'],
+    },
+    r2: {
+        id: 'r2',
+        package: '@ankhorage/r2',
+        kind: 'service',
+        configVersion: 1,
+        capabilities: ['objectStorage'],
+        targets: [],
+        dependencies: [],
+    },
+    'supabase-vault': {
+        id: 'supabase-vault',
+        package: '@ankhorage/supabase-vault',
+        kind: 'service',
+        configVersion: 1,
+        capabilities: ['secretStore'],
+        targets: [],
+        dependencies: ['database'],
+    },
+};
+//# sourceMappingURL=constants.js.map

package/dist/infra/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/infra/constants.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;IACzB,gBAAgB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;CAC9B,CAAC;AAEX,kGAAkG;AAClG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE;QACL,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC,SAAS,CAAC;QACzB,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,YAAY,EAAE,EAAE;KACjB;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,oBAAoB;QAC7B,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC,SAAS,CAAC;QACzB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,YAAY,EAAE,EAAE;KACjB;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC;QACpD,OAAO,EAAE,CAAC,YAAY,CAAC;QACvB,YAAY,EAAE,CAAC,SAAS,CAAC;KAC1B;IACD,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC;QACpD,OAAO,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC;QACnC,YAAY,EAAE,CAAC,SAAS,CAAC;KAC1B;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,2BAA2B;QACpC,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC;QACpD,OAAO,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC;QACnC,YAAY,EAAE,CAAC,SAAS,CAAC;KAC1B;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,CAAC;QACnD,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,CAAC,WAAW,CAAC;KAC5B;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC,OAAO,CAAC;QACvB,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,CAAC,WAAW,CAAC;KAC5B;IACD,EAAE,EAAE;QACF,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC,eAAe,CAAC;QAC/B,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,EAAE;KACjB;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,2BAA2B;QACpC,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,CAAC,UAAU,CAAC;KAC3B;CACO,CAAC","sourcesContent":["/** One compatibility source for manifest types, validation, discovery and configuration UIs. */\nexport const INFRA_RUNTIME_COMPATIBILITY = {\n  minikube: ['local'],\n  k3s: ['local', 'hetzner'],\n  'docker-compose': ['local', 'hetzner'],\n} as const;\n\n/** Canonical package identities. Capabilities describe ownership, not eight mandatory methods. */\nexport const INFRA_ADAPTER_CATALOG = {\n  local: {\n    id: 'local',\n    package: '@ankhorage/local',\n    kind: 'compute',\n    configVersion: 1,\n    capabilities: ['compute'],\n    targets: ['local-host'],\n    dependencies: [],\n  },\n  hetzner: {\n    id: 'hetzner',\n    package: '@ankhorage/hetzner',\n    kind: 'compute',\n    configVersion: 1,\n    capabilities: ['compute'],\n    targets: ['ssh-host'],\n    dependencies: [],\n  },\n  minikube: {\n    id: 'minikube',\n    package: '@ankhorage/minikube',\n    kind: 'runtime',\n    configVersion: 1,\n    capabilities: ['runtime', 'workloads', 'networking'],\n    targets: ['local-host'],\n    dependencies: ['compute'],\n  },\n  k3s: {\n    id: 'k3s',\n    package: '@ankhorage/k3s',\n    kind: 'runtime',\n    configVersion: 1,\n    capabilities: ['runtime', 'workloads', 'networking'],\n    targets: ['local-host', 'ssh-host'],\n    dependencies: ['compute'],\n  },\n  'docker-compose': {\n    id: 'docker-compose',\n    package: '@ankhorage/docker-compose',\n    kind: 'runtime',\n    configVersion: 1,\n    capabilities: ['runtime', 'workloads', 'networking'],\n    targets: ['local-host', 'ssh-host'],\n    dependencies: ['compute'],\n  },\n  supabase: {\n    id: 'supabase',\n    package: '@ankhorage/supabase',\n    kind: 'service',\n    configVersion: 1,\n    capabilities: ['database', 'auth', 'objectStorage'],\n    targets: [],\n    dependencies: ['workloads'],\n  },\n  cerbos: {\n    id: 'cerbos',\n    package: '@ankhorage/cerbos',\n    kind: 'service',\n    configVersion: 1,\n    capabilities: ['authz'],\n    targets: [],\n    dependencies: ['workloads'],\n  },\n  r2: {\n    id: 'r2',\n    package: '@ankhorage/r2',\n    kind: 'service',\n    configVersion: 1,\n    capabilities: ['objectStorage'],\n    targets: [],\n    dependencies: [],\n  },\n  'supabase-vault': {\n    id: 'supabase-vault',\n    package: '@ankhorage/supabase-vault',\n    kind: 'service',\n    configVersion: 1,\n    capabilities: ['secretStore'],\n    targets: [],\n    dependencies: ['database'],\n  },\n} as const;\n"]}

package/dist/infra/infraFields.d.ts

@@ -0,0 +1,12 @@
+/*** Primitive field rules for portable Infra configuration, shared by its exact-shape validators. */
+export declare const infraFields: {
+    optionalText: (value: unknown) => boolean;
+    strings: (value: unknown) => boolean;
+    optionalStrings: (value: unknown) => boolean;
+    positiveInteger: (value: unknown) => boolean;
+    nonnegativeInteger: (value: unknown) => boolean;
+    optionalPositiveInteger: (value: unknown) => boolean;
+    optionalNonnegativeInteger: (value: unknown) => boolean;
+    port: (value: unknown) => boolean;
+};
+//# sourceMappingURL=infraFields.d.ts.map

package/dist/infra/infraFields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infraFields.d.ts","sourceRoot":"","sources":["../../src/infra/infraFields.ts"],"names":[],"mappings":"AAGA,qGAAqG;AACrG,eAAO,MAAM,WAAW;0BACA,OAAO,KAAG,OAAO;qBACtB,OAAO,KAAG,OAAO;6BACT,OAAO,KAAG,OAAO;6BAEjB,OAAO,KAAG,OAAO;gCAEd,OAAO,KAAG,OAAO;qCAEZ,OAAO,KAAG,OAAO;wCAEd,OAAO,KAAG,OAAO;kBAEvC,OAAO,KAAG,OAAO;CAEhC,CAAC"}

package/dist/infra/infraFields.js

@@ -0,0 +1,14 @@
+import { isStringArray } from '@ankhorage/utility/array';
+import { isNonEmptyString } from '@ankhorage/utility/string';
+/*** Primitive field rules for portable Infra configuration, shared by its exact-shape validators. */
+export const infraFields = {
+    optionalText: (value) => value === undefined || isNonEmptyString(value),
+    strings: (value) => isStringArray(value) && value.every(isNonEmptyString),
+    optionalStrings: (value) => value === undefined || (isStringArray(value) && value.every(isNonEmptyString)),
+    positiveInteger: (value) => typeof value === 'number' && Number.isSafeInteger(value) && value > 0,
+    nonnegativeInteger: (value) => typeof value === 'number' && Number.isSafeInteger(value) && value >= 0,
+    optionalPositiveInteger: (value) => value === undefined || (typeof value === 'number' && Number.isSafeInteger(value) && value > 0),
+    optionalNonnegativeInteger: (value) => value === undefined || (typeof value === 'number' && Number.isSafeInteger(value) && value >= 0),
+    port: (value) => typeof value === 'number' && Number.isInteger(value) && value > 0 && value <= 65535,
+};
+//# sourceMappingURL=infraFields.js.map

package/dist/infra/infraFields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infraFields.js","sourceRoot":"","sources":["../../src/infra/infraFields.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,qGAAqG;AACrG,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY,EAAE,CAAC,KAAc,EAAW,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC;IACzF,OAAO,EAAE,CAAC,KAAc,EAAW,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC3F,eAAe,EAAE,CAAC,KAAc,EAAW,EAAE,CAC3C,KAAK,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChF,eAAe,EAAE,CAAC,KAAc,EAAW,EAAE,CAC3C,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;IACvE,kBAAkB,EAAE,CAAC,KAAc,EAAW,EAAE,CAC9C,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;IACxE,uBAAuB,EAAE,CAAC,KAAc,EAAW,EAAE,CACnD,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IAChG,0BAA0B,EAAE,CAAC,KAAc,EAAW,EAAE,CACtD,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACjG,IAAI,EAAE,CAAC,KAAc,EAAW,EAAE,CAChC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,KAAK;CACtF,CAAC","sourcesContent":["import { isStringArray } from '@ankhorage/utility/array';\nimport { isNonEmptyString } from '@ankhorage/utility/string';\n\n/*** Primitive field rules for portable Infra configuration, shared by its exact-shape validators. */\nexport const infraFields = {\n  optionalText: (value: unknown): boolean => value === undefined || isNonEmptyString(value),\n  strings: (value: unknown): boolean => isStringArray(value) && value.every(isNonEmptyString),\n  optionalStrings: (value: unknown): boolean =>\n    value === undefined || (isStringArray(value) && value.every(isNonEmptyString)),\n  positiveInteger: (value: unknown): boolean =>\n    typeof value === 'number' && Number.isSafeInteger(value) && value > 0,\n  nonnegativeInteger: (value: unknown): boolean =>\n    typeof value === 'number' && Number.isSafeInteger(value) && value >= 0,\n  optionalPositiveInteger: (value: unknown): boolean =>\n    value === undefined || (typeof value === 'number' && Number.isSafeInteger(value) && value > 0),\n  optionalNonnegativeInteger: (value: unknown): boolean =>\n    value === undefined || (typeof value === 'number' && Number.isSafeInteger(value) && value >= 0),\n  port: (value: unknown): boolean =>\n    typeof value === 'number' && Number.isInteger(value) && value > 0 && value <= 65535,\n};\n"]}

package/dist/infra/isInfraAdapterDescriptor.d.ts

@@ -0,0 +1,4 @@
+import type { InfraAdapterDescriptor } from '../types/infraAdapters';
+/*** Installed adapters must match the canonical identity, capabilities, targets and config version exactly. */
+export declare function isInfraAdapterDescriptor(value: unknown): value is InfraAdapterDescriptor;
+//# sourceMappingURL=isInfraAdapterDescriptor.d.ts.map

package/dist/infra/isInfraAdapterDescriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isInfraAdapterDescriptor.d.ts","sourceRoot":"","sources":["../../src/infra/isInfraAdapterDescriptor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAIrE,+GAA+G;AAC/G,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAoBxF"}

package/dist/infra/isInfraAdapterDescriptor.js

@@ -0,0 +1,31 @@
+import { isRecord } from '@ankhorage/utility/object';
+import { INFRA_ADAPTER_CATALOG } from './constants';
+import { isInfraShape } from './isInfraShape';
+/*** Installed adapters must match the canonical identity, capabilities, targets and config version exactly. */
+export function isInfraAdapterDescriptor(value) {
+    if (!isRecord(value))
+        return false;
+    const entry = Object.values(INFRA_ADAPTER_CATALOG).find((candidate) => candidate.id === value.id);
+    if (!entry)
+        return false;
+    return isInfraShape(value, {
+        id: (id) => id === entry.id,
+        package: (name) => name === entry.package,
+        kind: (kind) => kind === entry.kind,
+        configVersion: (version) => version === entry.configVersion,
+        capabilities: (items) => matchesCatalogList(items, entry.capabilities),
+        targets: (items) => matchesCatalogList(items, entry.targets),
+        dependencies: (items) => matchesCatalogList(items, entry.dependencies),
+        operations: (items) => items === undefined ||
+            (Array.isArray(items) &&
+                new Set(items).size === items.length &&
+                items.every((item) => ['suspend', 'resume', 'generate', 'diagnostics'].some((operation) => operation === item))),
+    });
+}
+/*** Canonical descriptor lists are ordered so JSON discovery and conformance are deterministic. */
+function matchesCatalogList(value, expected) {
+    return (Array.isArray(value) &&
+        value.length === expected.length &&
+        value.every((item, index) => item === expected.at(index)));
+}
+//# sourceMappingURL=isInfraAdapterDescriptor.js.map

package/dist/infra/isInfraAdapterDescriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isInfraAdapterDescriptor.js","sourceRoot":"","sources":["../../src/infra/isInfraAdapterDescriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAGrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,+GAA+G;AAC/G,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,YAAY,CAAC,KAAK,EAAE;QACzB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;QAC3B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO;QACzC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACnC,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC,aAAa;QAC3D,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC;QACtE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAC5D,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC;QACtE,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,KAAK,KAAK,SAAS;YACnB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACnB,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;gBACpC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAa,EAAE,EAAE,CAC5B,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,CACzF,CAAC;KACP,CAAC,CAAC;AACL,CAAC;AAED,mGAAmG;AACnG,SAAS,kBAAkB,CAAC,KAAc,EAAE,QAA2B;IACrE,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAChC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC","sourcesContent":["import { isRecord } from '@ankhorage/utility/object';\n\nimport type { InfraAdapterDescriptor } from '../types/infraAdapters';\nimport { INFRA_ADAPTER_CATALOG } from './constants';\nimport { isInfraShape } from './isInfraShape';\n\n/*** Installed adapters must match the canonical identity, capabilities, targets and config version exactly. */\nexport function isInfraAdapterDescriptor(value: unknown): value is InfraAdapterDescriptor {\n  if (!isRecord(value)) return false;\n  const entry = Object.values(INFRA_ADAPTER_CATALOG).find((candidate) => candidate.id === value.id);\n  if (!entry) return false;\n  return isInfraShape(value, {\n    id: (id) => id === entry.id,\n    package: (name) => name === entry.package,\n    kind: (kind) => kind === entry.kind,\n    configVersion: (version) => version === entry.configVersion,\n    capabilities: (items) => matchesCatalogList(items, entry.capabilities),\n    targets: (items) => matchesCatalogList(items, entry.targets),\n    dependencies: (items) => matchesCatalogList(items, entry.dependencies),\n    operations: (items) =>\n      items === undefined ||\n      (Array.isArray(items) &&\n        new Set(items).size === items.length &&\n        items.every((item: unknown) =>\n          ['suspend', 'resume', 'generate', 'diagnostics'].some((operation) => operation === item),\n        )),\n  });\n}\n\n/*** Canonical descriptor lists are ordered so JSON discovery and conformance are deterministic. */\nfunction matchesCatalogList(value: unknown, expected: readonly string[]): boolean {\n  return (\n    Array.isArray(value) &&\n    value.length === expected.length &&\n    value.every((item, index) => item === expected.at(index))\n  );\n}\n"]}

package/dist/infra/isInfraAuthSpec.d.ts

@@ -0,0 +1,4 @@
+import type { InfraAuthSpec } from '../types/infraManifest';
+/*** Preserve application auth configuration while rejecting nested authorization and unknown providers. */
+export declare function isInfraAuthSpec(value: unknown): value is InfraAuthSpec;
+//# sourceMappingURL=isInfraAuthSpec.d.ts.map

package/dist/infra/isInfraAuthSpec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isInfraAuthSpec.d.ts","sourceRoot":"","sources":["../../src/infra/isInfraAuthSpec.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAI5D,2GAA2G;AAC3G,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAgBtE"}

package/dist/infra/isInfraAuthSpec.js

@@ -0,0 +1,75 @@
+import { isStringArray } from '@ankhorage/utility/array';
+import { isRecordOf } from '@ankhorage/utility/object';
+import { isOptionalString } from '@ankhorage/utility/string';
+import { isIconSpec } from '../appManifest/icon';
+import { AUTH_OAUTH_PROVIDER_IDS } from '../auth';
+import { AUTH_PROFILE_CREATE_STRATEGIES, AUTH_PROFILE_PRIMARY_KEY_STRATEGIES, AUTH_PROFILE_UPDATE_STRATEGIES, AUTH_SCOPES, AUTH_SIGN_IN_IDENTIFIERS, AUTH_SIGN_UP_POLICIES, } from '../types';
+import { isInfraShape } from './isInfraShape';
+/*** Preserve application auth configuration while rejecting nested authorization and unknown providers. */
+export function isInfraAuthSpec(value) {
+    return isInfraShape(value, {
+        provider: (provider) => provider === 'supabase',
+        scope: (scope) => scope === undefined || AUTH_SCOPES.some((item) => item === scope),
+        flow: (flow) => flow === undefined || isAuthFlow(flow),
+        signIn: (signIn) => signIn === undefined ||
+            isInfraShape(signIn, {
+                identifiers: (ids) => Array.isArray(ids) &&
+                    ids.every((id) => AUTH_SIGN_IN_IDENTIFIERS.some((item) => item === id)),
+            }),
+        signUp: (signUp) => signUp === undefined || isAuthSignUp(signUp),
+        oauth: (oauth) => oauth === undefined || isAuthOAuth(oauth),
+        profile: (profile) => profile === undefined || isAuthProfile(profile),
+    });
+}
+/*** Auth routing intent stays separate from provider-runtime callbacks and Navigator topology. */
+function isAuthFlow(value) {
+    return isInfraShape(value, {
+        signInRoute: (route) => typeof route === 'string',
+        postSignInRoute: (route) => typeof route === 'string',
+        signUpRoute: isOptionalString,
+        signOutRoute: isOptionalString,
+        forgotPasswordRoute: isOptionalString,
+        otpRoute: isOptionalString,
+        unauthorizedRoute: isOptionalString,
+    });
+}
+/*** Validate sign-up field intent using the existing application auth contract. */
+function isAuthSignUp(value) {
+    return isInfraShape(value, {
+        requiredFields: isStringArray,
+        optionalFields: (fields) => fields === undefined || isStringArray(fields),
+        signUpPolicy: (policy) => policy === undefined || AUTH_SIGN_UP_POLICIES.some((item) => item === policy),
+    });
+}
+/*** OAuth references contain no credential payload. Custom OAuth identities remain application-owned. */
+function isAuthOAuth(value) {
+    return isInfraShape(value, {
+        enabled: (enabled) => typeof enabled === 'boolean',
+        callbackRoute: (route) => typeof route === 'string',
+        providers: (providers) => Array.isArray(providers) && providers.every(isAuthOAuthProvider),
+    });
+}
+/*** Validate OAuth display/config metadata, preserving explicitly extensible OAuth provider IDs. */
+function isAuthOAuthProvider(value) {
+    return isInfraShape(value, {
+        id: (id) => typeof id === 'string' &&
+            (AUTH_OAUTH_PROVIDER_IDS.some((item) => item === id) || id.length > 0),
+        label: isOptionalString,
+        enabled: (value) => value === undefined || typeof value === 'boolean',
+        scopes: (scopes) => scopes === undefined || isStringArray(scopes),
+        queryParams: (params) => params === undefined || isRecordOf(params, (entry) => typeof entry === 'string'),
+        icon: (icon) => icon === undefined || isIconSpec(icon),
+        credentialsRef: isOptionalString,
+    });
+}
+/*** Validate profile provisioning choices without inventing a new application profile model. */
+function isAuthProfile(value) {
+    return isInfraShape(value, {
+        fields: isStringArray,
+        table: isOptionalString,
+        primaryKey: (key) => key === undefined || AUTH_PROFILE_PRIMARY_KEY_STRATEGIES.some((item) => item === key),
+        createStrategy: (strategy) => strategy === undefined || AUTH_PROFILE_CREATE_STRATEGIES.some((item) => item === strategy),
+        updateStrategy: (strategy) => strategy === undefined || AUTH_PROFILE_UPDATE_STRATEGIES.some((item) => item === strategy),
+    });
+}
+//# sourceMappingURL=isInfraAuthSpec.js.map