@aura-stack/auth 0.4.0 → 0.6.0

package/dist/chunk-PHFH2MGS.js

@@ -1,36 +0,0 @@
-import {
-  getErrorName,
-  toISOString
-} from "./chunk-QQVSRXGX.js";
-import {
-  expiredCookieAttributes,
-  getCookie
-} from "./chunk-5W4BRQYG.js";
-import {
-  secureApiHeaders
-} from "./chunk-EBAMFRB7.js";
-
-// src/actions/session/session.ts
-import { createEndpoint, HeadersBuilder } from "@aura-stack/router";
-var sessionAction = createEndpoint("GET", "/session", async (ctx) => {
-  const {
-    request,
-    context: { jose, cookies, logger }
-  } = ctx;
-  try {
-    const session = getCookie(request, cookies.sessionToken.name);
-    const decoded = await jose.decodeJWT(session);
-    logger?.log("AUTH_SESSION_VALID");
-    const { exp, iat, jti, nbf, ...user } = decoded;
-    const headers = new Headers(secureApiHeaders);
-    return Response.json({ user, expires: toISOString(exp * 1e3) }, { headers });
-  } catch (error) {
-    logger?.log("AUTH_SESSION_INVALID", { structuredData: { error_type: getErrorName(error) } });
-    const headers = new HeadersBuilder(secureApiHeaders).setCookie(cookies.sessionToken.name, "", expiredCookieAttributes).toHeaders();
-    return Response.json({ authenticated: false, message: "Unauthorized" }, { status: 401, headers });
-  }
-});
-
-export {
-  sessionAction
-};

package/dist/chunk-QQVSRXGX.js

@@ -1,149 +0,0 @@
-import {
-  isAuthInternalError,
-  isAuthSecurityError,
-  isOAuthProtocolError
-} from "./chunk-RRLIF4PQ.js";
-
-// src/utils.ts
-import { isInvalidZodSchemaError, isRouterError } from "@aura-stack/router";
-var toSnakeCase = (str) => {
-  return str.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2").toLowerCase().replace(/^_+/, "");
-};
-var toUpperCase = (str) => {
-  return str.toUpperCase();
-};
-var toCastCase = (obj, type = "snake") => {
-  return Object.entries(obj).reduce((previous, [key, value]) => {
-    const newKey = type === "snake" ? toSnakeCase(key) : toUpperCase(key);
-    return { ...previous, [newKey]: value };
-  }, {});
-};
-var equals = (a, b) => {
-  if (a === null || b === null || a === void 0 || b === void 0) return false;
-  return a === b;
-};
-var createErrorHandler = (logger) => {
-  return (error) => {
-    if (isRouterError(error)) {
-      const { message, status, statusText } = error;
-      logger?.log("ROUTER_INTERNAL_ERROR");
-      return Response.json({ type: "ROUTER_ERROR", code: "ROUTER_INTERNAL_ERROR", message }, { status, statusText });
-    }
-    if (isInvalidZodSchemaError(error)) {
-      logger?.log("INVALID_REQUEST");
-      return Response.json({ type: "ROUTER_ERROR", code: "INVALID_REQUEST", message: error.errors }, { status: 422 });
-    }
-    if (isOAuthProtocolError(error)) {
-      const { error: errorCode, message, type, errorURI } = error;
-      logger?.log("OAUTH_PROTOCOL_ERROR", {
-        structuredData: {
-          error: errorCode,
-          error_description: message,
-          error_uri: errorURI ?? ""
-        }
-      });
-      return Response.json(
-        {
-          type,
-          message
-        },
-        { status: 400 }
-      );
-    }
-    if (isAuthInternalError(error)) {
-      const { type, code, message } = error;
-      logger?.log("INVALID_OAUTH_CONFIGURATION", {
-        structuredData: {
-          error: code,
-          error_description: message
-        }
-      });
-      return Response.json(
-        {
-          type,
-          message
-        },
-        { status: 400 }
-      );
-    }
-    if (isAuthSecurityError(error)) {
-      const { type, code, message } = error;
-      logger?.log("INVALID_OAUTH_CONFIGURATION", {
-        structuredData: {
-          error: code,
-          error_description: message
-        }
-      });
-      return Response.json(
-        {
-          type,
-          code,
-          message
-        },
-        { status: 400 }
-      );
-    }
-    logger?.log("SERVER_ERROR");
-    return Response.json(
-      { type: "SERVER_ERROR", code: "SERVER_ERROR", message: "An unexpected error occurred" },
-      { status: 500 }
-    );
-  };
-};
-var getBaseURL = (request) => {
-  const url = new URL(request.url);
-  return `${url.origin}${url.pathname}`;
-};
-var toISOString = (date) => {
-  return new Date(date).toISOString();
-};
-var useSecureCookies = (request, trustedProxyHeaders) => {
-  return trustedProxyHeaders ? request.url.startsWith("https://") || request.headers.get("X-Forwarded-Proto") === "https" || (request.headers.get("Forwarded")?.includes("proto=https") ?? false) : request.url.startsWith("https://");
-};
-var formatZodError = (error) => {
-  if (!error.issues || error.issues.length === 0) {
-    return {};
-  }
-  return error.issues.reduce((previous, issue) => {
-    const key = issue.path.join(".");
-    return {
-      ...previous,
-      [key]: {
-        code: issue.code,
-        message: issue.message
-      }
-    };
-  }, {});
-};
-var extractPath = (url) => {
-  const pathRegex = /^https?:\/\/[a-zA-Z0-9_\-\.]+(:\d+)?(\/.*)$/;
-  const match = url.match(pathRegex);
-  return match && match[2] ? match[2] : "/";
-};
-var createStructuredData = (data, sdID = "metadata") => {
-  const entries = Object.entries(data);
-  if (entries.length === 0) return `[${sdID}]`;
-  const values = entries.map(([key, value]) => `${key}="${String(value).replace(/(["\\\]])/g, "\\$1")}"`).join(" ");
-  return `[${sdID} ${values}]`;
-};
-var getErrorName = (error) => {
-  if (error instanceof Error) {
-    return error.name;
-  }
-  return typeof error === "string" ? error : "UnknownError";
-};
-
-export {
-  toSnakeCase,
-  toUpperCase,
-  toCastCase,
-  equals,
-  createErrorHandler,
-  getBaseURL,
-  toISOString,
-  useSecureCookies,
-  formatZodError,
-  extractPath,
-  createStructuredData,
-  getErrorName
-};

package/dist/chunk-RRLIF4PQ.js

@@ -1,55 +0,0 @@
-// src/errors.ts
-var OAuthProtocolError = class extends Error {
-  type = "OAUTH_PROTOCOL_ERROR";
-  error;
-  errorURI;
-  constructor(error, description, errorURI, options) {
-    super(description, options);
-    this.error = error;
-    this.errorURI = errorURI;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var AuthInternalError = class extends Error {
-  type = "AUTH_INTERNAL_ERROR";
-  code;
-  constructor(code, message, options) {
-    super(message, options);
-    this.code = code;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var AuthSecurityError = class extends Error {
-  type = "AUTH_SECURITY_ERROR";
-  code;
-  constructor(code, message, options) {
-    super(message, options);
-    this.code = code;
-    this.name = new.target.name;
-    Error.captureStackTrace(this, new.target);
-  }
-};
-var isNativeError = (error) => {
-  return error instanceof Error;
-};
-var isOAuthProtocolError = (error) => {
-  return error instanceof OAuthProtocolError;
-};
-var isAuthInternalError = (error) => {
-  return error instanceof AuthInternalError;
-};
-var isAuthSecurityError = (error) => {
-  return error instanceof AuthSecurityError;
-};
-
-export {
-  OAuthProtocolError,
-  AuthInternalError,
-  AuthSecurityError,
-  isNativeError,
-  isOAuthProtocolError,
-  isAuthInternalError,
-  isAuthSecurityError
-};

package/dist/chunk-TM5IPSNF.js

@@ -1,113 +0,0 @@
-import {
-  spotify
-} from "./chunk-IPKO6UQN.js";
-import {
-  strava
-} from "./chunk-54CZPKR4.js";
-import {
-  x
-} from "./chunk-EEE7UM5T.js";
-import {
-  bitbucket
-} from "./chunk-4YHJ4IEQ.js";
-import {
-  discord
-} from "./chunk-OVHNRULD.js";
-import {
-  figma
-} from "./chunk-KMMAZFSJ.js";
-import {
-  github
-} from "./chunk-FW4W3REU.js";
-import {
-  gitlab
-} from "./chunk-5LZ7TOM3.js";
-import {
-  mailchimp
-} from "./chunk-LDU7A2JE.js";
-import {
-  pinterest
-} from "./chunk-E6G5YCI6.js";
-import {
-  OAuthEnvSchema,
-  OAuthProviderCredentialsSchema
-} from "./chunk-KJBAQZX2.js";
-import {
-  formatZodError
-} from "./chunk-QQVSRXGX.js";
-import {
-  env
-} from "./chunk-4MYWAOLG.js";
-import {
-  AuthInternalError
-} from "./chunk-RRLIF4PQ.js";
-
-// src/oauth/index.ts
-var builtInOAuthProviders = {
-  github,
-  bitbucket,
-  figma,
-  discord,
-  gitlab,
-  spotify,
-  x,
-  strava,
-  mailchimp,
-  pinterest
-};
-var defineOAuthEnvironment = (oauth) => {
-  const clientIdSuffix = `${oauth.toUpperCase()}_CLIENT_ID`;
-  const clientSecretSuffix = `${oauth.toUpperCase()}_CLIENT_SECRET`;
-  const loadEnvs = OAuthEnvSchema.safeParse({
-    clientId: env[`AURA_AUTH_${clientIdSuffix}`] ?? env[`AUTH_${clientIdSuffix}`] ?? env[`${clientIdSuffix}`],
-    clientSecret: env[`AURA_AUTH_${clientSecretSuffix}`] ?? env[`AUTH_${clientSecretSuffix}`] ?? env[`${clientSecretSuffix}`]
-  });
-  if (!loadEnvs.success) {
-    const msg = JSON.stringify(formatZodError(loadEnvs.error), null, 2);
-    throw new AuthInternalError("INVALID_ENVIRONMENT_CONFIGURATION", msg);
-  }
-  return loadEnvs.data;
-};
-var defineOAuthProviderConfig = (config) => {
-  if (typeof config === "string") {
-    const definition = defineOAuthEnvironment(config);
-    const oauthConfig = builtInOAuthProviders[config]();
-    const parsed2 = OAuthProviderCredentialsSchema.safeParse({ ...oauthConfig, ...definition });
-    if (!parsed2.success) {
-      const details = JSON.stringify(formatZodError(parsed2.error), null, 2);
-      throw new AuthInternalError(
-        "INVALID_OAUTH_PROVIDER_CONFIGURATION",
-        `Invalid configuration for OAuth provider "${config}": ${details}`
-      );
-    }
-    return parsed2.data;
-  }
-  const hasCredentials = config.clientId && config.clientSecret;
-  const envConfig = hasCredentials ? {} : defineOAuthEnvironment(config.id);
-  const parsed = OAuthProviderCredentialsSchema.safeParse({ ...envConfig, ...config });
-  if (!parsed.success) {
-    const details = JSON.stringify(formatZodError(parsed.error), null, 2);
-    throw new AuthInternalError(
-      "INVALID_OAUTH_PROVIDER_CONFIGURATION",
-      `Invalid configuration for OAuth provider "${config.id}": ${details}`
-    );
-  }
-  return parsed.data;
-};
-var createBuiltInOAuthProviders = (oauth = []) => {
-  return oauth.reduce((previous, config) => {
-    const oauthConfig = defineOAuthProviderConfig(config);
-    if (oauthConfig.id in previous) {
-      throw new AuthInternalError(
-        "DUPLICATED_OAUTH_PROVIDER_ID",
-        `Duplicate OAuth provider id "${oauthConfig.id}" found. Each provider must have a unique id.`
-      );
-    }
-    return { ...previous, [oauthConfig.id]: oauthConfig };
-  }, {});
-};
-
-export {
-  builtInOAuthProviders,
-  createBuiltInOAuthProviders
-};

package/dist/chunk-TZB6MUXN.js

@@ -1,78 +0,0 @@
-import {
-  fetchAsync
-} from "./chunk-ZNCZVF6U.js";
-import {
-  OAuthAccessToken,
-  OAuthAccessTokenErrorResponse,
-  OAuthAccessTokenResponse
-} from "./chunk-KJBAQZX2.js";
-import {
-  AuthInternalError,
-  OAuthProtocolError
-} from "./chunk-RRLIF4PQ.js";
-
-// src/actions/callback/access-token.ts
-var createAccessToken = async (oauthConfig, redirectURI, code, codeVerifier, logger) => {
-  const parsed = OAuthAccessToken.safeParse({ ...oauthConfig, redirectURI, code, codeVerifier });
-  if (!parsed.success) {
-    logger?.log("INVALID_OAUTH_CONFIGURATION");
-    throw new AuthInternalError("INVALID_OAUTH_CONFIGURATION", "The OAuth provider configuration is invalid.");
-  }
-  const { accessToken, clientId, clientSecret, code: codeParsed, redirectURI: redirectParsed } = parsed.data;
-  try {
-    logger?.log("OAUTH_ACCESS_TOKEN_REQUEST_INITIATED", {
-      structuredData: {
-        has_client_id: Boolean(clientId),
-        redirect_uri: redirectParsed,
-        grant_type: "authorization_code"
-      }
-    });
-    const response = await fetchAsync(accessToken, {
-      method: "POST",
-      headers: {
-        Accept: "application/json",
-        "Content-Type": "application/x-www-form-urlencoded"
-      },
-      body: new URLSearchParams({
-        client_id: clientId,
-        client_secret: clientSecret,
-        code: codeParsed,
-        redirect_uri: redirectParsed,
-        grant_type: "authorization_code",
-        code_verifier: codeVerifier
-      }).toString()
-    });
-    if (!response.ok) {
-      logger?.log("INVALID_OAUTH_ACCESS_TOKEN_RESPONSE");
-      throw new OAuthProtocolError("invalid_request", "Invalid access token response");
-    }
-    const json = await response.json();
-    const token = OAuthAccessTokenResponse.safeParse(json);
-    if (!token.success) {
-      const { success, data } = OAuthAccessTokenErrorResponse.safeParse(json);
-      if (!success) {
-        logger?.log("INVALID_OAUTH_ACCESS_TOKEN_RESPONSE");
-        throw new OAuthProtocolError("invalid_request", "Invalid access token response format");
-      }
-      logger?.log("OAUTH_ACCESS_TOKEN_ERROR", {
-        structuredData: {
-          error: data.error,
-          error_description: data.error_description ?? ""
-        }
-      });
-      throw new OAuthProtocolError("INVALID_ACCESS_TOKEN", "Failed to retrieve access token");
-    }
-    logger?.log("OAUTH_ACCESS_TOKEN_SUCCESS");
-    return token.data;
-  } catch (error) {
-    logger?.log("OAUTH_ACCESS_TOKEN_REQUEST_FAILED");
-    if (error instanceof Error) {
-      throw new OAuthProtocolError("server_error", "Failed to communicate with OAuth provider", "", { cause: error });
-    }
-    throw error;
-  }
-};
-
-export {
-  createAccessToken
-};

package/dist/chunk-VNCNJKS2.js

@@ -1,267 +0,0 @@
-// src/logger.ts
-var logMessages = {
-  ROUTER_INTERNAL_ERROR: {
-    facility: 10,
-    severity: "error",
-    msgId: "ROUTER_INTERNAL_ERROR",
-    message: "Unhandled router error while processing the request"
-  },
-  INVALID_REQUEST: {
-    facility: 10,
-    severity: "warning",
-    msgId: "INVALID_REQUEST",
-    message: "Request validation failed against the expected schema"
-  },
-  SERVER_ERROR: {
-    facility: 10,
-    severity: "error",
-    msgId: "SERVER_ERROR",
-    message: "Unexpected internal server error during authentication"
-  },
-  OAUTH_PROTOCOL_ERROR: {
-    facility: 10,
-    severity: "warning",
-    msgId: "OAUTH_PROTOCOL_ERROR",
-    message: "OAuth provider returned an invalid or unexpected protocol response"
-  },
-  OAUTH_AUTHORIZATION_ERROR: {
-    facility: 10,
-    severity: "error",
-    msgId: "OAUTH_AUTHORIZATION_ERROR",
-    message: "OAuth authorization request was rejected or failed"
-  },
-  INVALID_OAUTH_CONFIGURATION: {
-    facility: 10,
-    severity: "error",
-    msgId: "INVALID_OAUTH_CONFIGURATION",
-    message: "The OAuth provider configuration is invalid or incomplete"
-  },
-  OAUTH_ACCESS_TOKEN_REQUEST_INITIATED: {
-    facility: 10,
-    severity: "debug",
-    msgId: "OAUTH_ACCESS_TOKEN_REQUEST_INITIATED",
-    message: "Starting OAuth access token request to the provider"
-  },
-  INVALID_OAUTH_ACCESS_TOKEN_RESPONSE: {
-    facility: 10,
-    severity: "error",
-    msgId: "INVALID_OAUTH_ACCESS_TOKEN_RESPONSE",
-    message: "OAuth access token endpoint returned an invalid or malformed response"
-  },
-  OAUTH_ACCESS_TOKEN_ERROR: {
-    facility: 10,
-    severity: "error",
-    msgId: "OAUTH_ACCESS_TOKEN_ERROR",
-    message: "OAuth access token endpoint returned an error response"
-  },
-  OAUTH_ACCESS_TOKEN_SUCCESS: {
-    facility: 10,
-    severity: "info",
-    msgId: "OAUTH_ACCESS_TOKEN_SUCCESS",
-    message: "Successfully retrieved OAuth access token from the provider"
-  },
-  OAUTH_ACCESS_TOKEN_REQUEST_FAILED: {
-    facility: 10,
-    severity: "error",
-    msgId: "OAUTH_ACCESS_TOKEN_REQUEST_FAILED",
-    message: "Network or server error while requesting OAuth access token"
-  },
-  OAUTH_USERINFO_REQUEST_INITIATED: {
-    facility: 10,
-    severity: "debug",
-    msgId: "OAUTH_USERINFO_REQUEST_INITIATED",
-    message: "Starting OAuth userinfo request to the provider"
-  },
-  OAUTH_USERINFO_INVALID_RESPONSE: {
-    facility: 10,
-    severity: "error",
-    msgId: "OAUTH_USERINFO_INVALID_RESPONSE",
-    message: "OAuth userinfo endpoint returned an invalid or malformed response"
-  },
-  OAUTH_USERINFO_ERROR: {
-    facility: 10,
-    severity: "error",
-    msgId: "OAUTH_USERINFO_ERROR",
-    message: "OAuth userinfo endpoint returned an error response"
-  },
-  OAUTH_USERINFO_SUCCESS: {
-    facility: 10,
-    severity: "info",
-    msgId: "OAUTH_USERINFO_SUCCESS",
-    message: "Successfully retrieved user information from the OAuth provider"
-  },
-  OAUTH_USERINFO_REQUEST_FAILED: {
-    facility: 10,
-    severity: "error",
-    msgId: "OAUTH_USERINFO_REQUEST_FAILED",
-    message: "Network or server error while requesting user information from the OAuth provider"
-  },
-  OAUTH_CALLBACK_SUCCESS: {
-    facility: 4,
-    severity: "info",
-    msgId: "OAUTH_CALLBACK_SUCCESS",
-    message: "OAuth callback completed successfully and session was created"
-  },
-  MISMATCHING_STATE: {
-    facility: 4,
-    severity: "critical",
-    msgId: "MISMATCHING_STATE",
-    message: "OAuth response state parameter does not match the stored state value"
-  },
-  POTENTIAL_OPEN_REDIRECT_ATTACK_DETECTED: {
-    facility: 4,
-    severity: "critical",
-    msgId: "POTENTIAL_OPEN_REDIRECT_ATTACK_DETECTED",
-    message: "Blocked redirect to untrusted or external URL (potential open redirect attack)"
-  },
-  OPEN_REDIRECT_ATTACK: {
-    facility: 4,
-    severity: "warning",
-    msgId: "OPEN_REDIRECT_ATTACK",
-    message: "Detected redirect target that does not match the trusted origin"
-  },
-  SESSION_TOKEN_MISSING: {
-    facility: 4,
-    severity: "warning",
-    msgId: "SESSION_TOKEN_MISSING",
-    message: "Session cookie is missing from the request"
-  },
-  CSRF_TOKEN_MISSING: {
-    facility: 4,
-    severity: "warning",
-    msgId: "CSRF_TOKEN_MISSING",
-    message: "CSRF token cookie is missing from the request"
-  },
-  CSRF_HEADER_MISSING: {
-    facility: 4,
-    severity: "warning",
-    msgId: "CSRF_HEADER_MISSING",
-    message: "CSRF header is missing from the request"
-  },
-  CSRF_TOKEN_INVALID: {
-    facility: 4,
-    severity: "error",
-    msgId: "CSRF_TOKEN_INVALID",
-    message: "CSRF token verification failed or token is invalid"
-  },
-  SIGN_IN_INITIATED: {
-    facility: 4,
-    severity: "info",
-    msgId: "SIGN_IN_INITIATED",
-    message: "Starting OAuth sign-in flow for the selected provider"
-  },
-  SIGN_OUT_ATTEMPT: {
-    facility: 4,
-    severity: "debug",
-    msgId: "SIGN_OUT_ATTEMPT",
-    message: "Received sign-out request from client"
-  },
-  SIGN_OUT_CSRF_VERIFIED: {
-    facility: 4,
-    severity: "info",
-    msgId: "SIGN_OUT_CSRF_VERIFIED",
-    message: "CSRF token was successfully verified during sign-out"
-  },
-  SIGN_OUT_SUCCESS: {
-    facility: 4,
-    severity: "info",
-    msgId: "SIGN_OUT_SUCCESS",
-    message: "User session was cleared and sign-out completed successfully"
-  },
-  SIGN_OUT_REDIRECT: {
-    facility: 4,
-    severity: "debug",
-    msgId: "SIGN_OUT_REDIRECT",
-    message: "Redirecting client after successful sign-out"
-  },
-  AUTH_SESSION_VALID: {
-    facility: 4,
-    severity: "info",
-    msgId: "AUTH_SESSION_VALID",
-    message: "Session token is valid and user session was returned"
-  },
-  AUTH_SESSION_INVALID: {
-    facility: 4,
-    severity: "notice",
-    msgId: "AUTH_SESSION_INVALID",
-    message: "Session token is missing, expired, or invalid"
-  },
-  INVALID_JWT_TOKEN: {
-    facility: 4,
-    severity: "warning",
-    msgId: "INVALID_JWT_TOKEN",
-    message: "JWT session token failed validation during sign-out"
-  },
-  CSRF_TOKEN_REQUESTED: {
-    facility: 4,
-    severity: "debug",
-    msgId: "CSRF_TOKEN_REQUESTED",
-    message: "Client requested a CSRF token"
-  },
-  CSRF_TOKEN_ISSUED: {
-    facility: 4,
-    severity: "debug",
-    msgId: "CSRF_TOKEN_ISSUED",
-    message: "Issued a new CSRF token to the client"
-  },
-  INVALID_URL: {
-    facility: 10,
-    severity: "error",
-    msgId: "INVALID_URL",
-    message: "Derived origin URL is invalid or malformed"
-  },
-  COOKIE_HTTPONLY_DISABLED: {
-    facility: 10,
-    severity: "critical",
-    msgId: "COOKIE_HTTPONLY_DISABLED",
-    message: "Cookie is configured without HttpOnly. This allows JavaScript access via document.cookie and increases XSS exposure."
-  },
-  COOKIE_WILDCARD_DOMAIN: {
-    facility: 10,
-    severity: "critical",
-    msgId: "COOKIE_WILDCARD_DOMAIN",
-    message: "Cookie 'Domain' is set to a wildcard, which is insecure and should be avoided."
-  },
-  COOKIE_SECURE_DISABLED: {
-    facility: 10,
-    severity: "warning",
-    msgId: "COOKIE_SECURE_DISABLED",
-    message: "Cookie is configured with 'Secure' but the request is not HTTPS. The 'Secure' attribute will be ignored by the browser."
-  },
-  COOKIE_SAMESITE_NONE_WITHOUT_SECURE: {
-    facility: 10,
-    severity: "warning",
-    msgId: "COOKIE_SAMESITE_NONE_WITHOUT_SECURE",
-    message: "Cookie uses SameSite=None without Secure. Falling back to SameSite=Lax for safer defaults."
-  },
-  COOKIE_INSECURE_IN_PRODUCTION: {
-    facility: 10,
-    severity: "critical",
-    msgId: "COOKIE_INSECURE_IN_PRODUCTION",
-    message: "Cookies are being served over an insecure connection in production, which is a serious security risk."
-  },
-  COOKIE_HOST_STRATEGY_INSECURE: {
-    facility: 10,
-    severity: "critical",
-    msgId: "COOKIE_HOST_STRATEGY_INSECURE",
-    message: "__Host- cookies require a secure HTTPS context. Falling back to standard cookie settings."
-  },
-  UNTRUSTED_ORIGIN: {
-    facility: 10,
-    severity: "error",
-    msgId: "UNTRUSTED_ORIGIN",
-    message: "The constructed origin URL is not trusted."
-  }
-};
-var createLogEntry = (key, overrides) => {
-  const message = logMessages[key];
-  return {
-    ...message,
-    ...overrides
-  };
-};
-
-export {
-  logMessages,
-  createLogEntry
-};