@authup/errors 1.0.0-beta.52 → 1.0.0-beta.53

package/dist/built-in/check.d.ts

@@ -1,19 +1,25 @@
 import { type AuthHeaderError } from './auth-header.ts';
 import { type BadRequestError } from './bad-request.ts';
+import { type ValidationError } from './validation.ts';
 import { type BearerTokenMalformedError } from './bearer-token.ts';
 import { type EntityConflictError } from './entity-conflict.ts';
 import { type EntityCredentialsInvalidError } from './entity-credentials-invalid.ts';
 import { type EntityInactiveError } from './entity-inactive.ts';
 import { type EntityNotFoundError } from './entity-not-found.ts';
 import { type InternalError } from './internal.ts';
+import { type LoginThrottledError } from './login-throttled.ts';
+import { type MfaThrottledError } from './mfa-throttled.ts';
 import { type UnauthorizedError } from './unauthorized.ts';
 export declare function isAuthHeaderError(input: unknown): input is AuthHeaderError;
 export declare function isBearerTokenMalformedError(input: unknown): input is BearerTokenMalformedError;
 export declare function isBadRequestError(input: unknown): input is BadRequestError;
+export declare function isValidationError(input: unknown): input is ValidationError;
 export declare function isUnauthorizedError(input: unknown): input is UnauthorizedError;
 export declare function isEntityNotFoundError(input: unknown): input is EntityNotFoundError;
 export declare function isEntityConflictError(input: unknown): input is EntityConflictError;
 export declare function isEntityInactiveError(input: unknown): input is EntityInactiveError;
 export declare function isEntityCredentialsInvalidError(input: unknown): input is EntityCredentialsInvalidError;
 export declare function isInternalError(input: unknown): input is InternalError;
+export declare function isLoginThrottledError(input: unknown): input is LoginThrottledError;
+export declare function isMfaThrottledError(input: unknown): input is MfaThrottledError;
 //# sourceMappingURL=check.d.ts.map

package/dist/built-in/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/built-in/check.ts"],"names":[],"mappings":"AAUA,OAAO,EAA8B,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAA8B,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAyC,KAAK,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC1G,OAAO,EAAkC,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAA6C,KAAK,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChI,OAAO,EAAkC,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAmC,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAClG,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAA+B,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAExF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAI1E;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,yBAAyB,CAI9F;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAI1E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAI9E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAIlF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAIlF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAIlF;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,6BAA6B,CAItG;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAItE"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/built-in/check.ts"],"names":[],"mappings":"AAUA,OAAO,EAA8B,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAA8B,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAA6B,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAyC,KAAK,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC1G,OAAO,EAAkC,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAA6C,KAAK,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChI,OAAO,EAAkC,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAmC,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAClG,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAkC,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAgC,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAA+B,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAExF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAI1E;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,yBAAyB,CAI9F;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAI1E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAI1E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAI9E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAIlF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAIlF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAIlF;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,6BAA6B,CAItG;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAItE;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAIlF;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAI9E"}

package/dist/built-in/index.d.ts

@@ -7,5 +7,8 @@ export * from './entity-credentials-invalid';
 export * from './entity-inactive';
 export * from './entity-not-found';
 export * from './internal';
+export * from './login-throttled';
+export * from './mfa-throttled';
 export * from './unauthorized';
+export * from './validation';
 //# sourceMappingURL=index.d.ts.map

package/dist/built-in/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/built-in/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/built-in/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/built-in/login-throttled.d.ts

@@ -0,0 +1,13 @@
+import { AuthupError } from '../module.ts';
+import type { AuthupErrorOptions } from '../types.ts';
+export declare const LOGIN_THROTTLED_ERROR_INSTANCE: unique symbol;
+export type LoginThrottledErrorOptions = AuthupErrorOptions & {
+    /**
+     * Seconds until the sliding throttle window can release the pair.
+     */
+    retryAfter?: number;
+};
+export declare class LoginThrottledError extends AuthupError {
+    constructor(input?: LoginThrottledErrorOptions);
+}
+//# sourceMappingURL=login-throttled.d.ts.map

package/dist/built-in/login-throttled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-throttled.d.ts","sourceRoot":"","sources":["../../src/built-in/login-throttled.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,eAAO,MAAM,8BAA8B,eAAmD,CAAC;AAE/F,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,GAAG;IAC1D;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,qBAAa,mBAAoB,SAAQ,WAAW;gBACpC,KAAK,CAAC,EAAE,0BAA0B;CAajD"}

package/dist/built-in/mfa-throttled.d.ts

@@ -0,0 +1,13 @@
+import { AuthupError } from '../module.ts';
+import type { AuthupErrorOptions } from '../types.ts';
+export declare const MFA_THROTTLED_ERROR_INSTANCE: unique symbol;
+export type MfaThrottledErrorOptions = AuthupErrorOptions & {
+    /**
+     * Seconds until the exponential backoff releases the account.
+     */
+    retryAfter?: number;
+};
+export declare class MfaThrottledError extends AuthupError {
+    constructor(input?: MfaThrottledErrorOptions);
+}
+//# sourceMappingURL=mfa-throttled.d.ts.map

package/dist/built-in/mfa-throttled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-throttled.d.ts","sourceRoot":"","sources":["../../src/built-in/mfa-throttled.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,eAAO,MAAM,4BAA4B,eAAiD,CAAC;AAE3F,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG;IACxD;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,qBAAa,iBAAkB,SAAQ,WAAW;gBAClC,KAAK,CAAC,EAAE,wBAAwB;CAa/C"}

package/dist/built-in/validation.d.ts

@@ -0,0 +1,13 @@
+import { AuthupError } from '../module.ts';
+import type { AuthupErrorOptions } from '../types.ts';
+export declare const VALIDATION_ERROR_INSTANCE: unique symbol;
+/**
+ * A domain/business-rule violation raised by core logic. Deliberately NOT
+ * named after an HTTP status: core code stays transport-agnostic, and the HTTP
+ * adapter maps its `ErrorCode.BAD_REQUEST` to a 400 response
+ * (`httpStatusFromCode`). Prefer this over `BadRequestError` in `core/**`.
+ */
+export declare class ValidationError extends AuthupError {
+    constructor(input?: string | AuthupErrorOptions);
+}
+//# sourceMappingURL=validation.d.ts.map

package/dist/built-in/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/built-in/validation.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,eAAO,MAAM,yBAAyB,eAA+C,CAAC;AAEtF;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,WAAW;gBAChC,KAAK,CAAC,EAAE,MAAM,GAAG,kBAAkB;CAQlD"}

package/dist/constants.d.ts

@@ -13,6 +13,9 @@ export declare enum ErrorCode {
     PASSWORD_RECOVERY_DISABLED = "password_recovery_disabled",
     EMAIL_VERIFICATION_REQUIRED = "email_verification_required",
     RESET_TOKEN_EXPIRED = "reset_token_expired",
+    LOGIN_ATTEMPT_THROTTLED = "login_attempt_throttled",
+    MFA_ATTEMPT_THROTTLED = "mfa_attempt_throttled",
+    MFA_NOT_CONFIGURABLE = "mfa_not_configurable",
     STORAGE_INSUFFICIENT = "storage_insufficient",
     JWK_INVALID = "jwk_invalid",
     JWK_NOT_FOUND = "jwk_not_found",
@@ -26,6 +29,8 @@ export declare enum ErrorCode {
     OAUTH_GRANT_TYPE_UNSUPPORTED = "unsupported_token_grant_type",
     OAUTH_REQUEST_INVALID = "invalid_request",
     OAUTH_LOGIN_REQUIRED = "login_required",
+    OAUTH_MFA_REQUIRED = "mfa_required",
+    OAUTH_ACCESS_DENIED = "access_denied",
     OAUTH_INTERACTION_REQUIRED = "interaction_required",
     OAUTH_ACCOUNT_SELECTION_REQUIRED = "account_selection_required",
     OAUTH_CONSENT_REQUIRED = "consent_required",

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,SAAS;IAEjB,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;IAGjC,iCAAiC,iCAAiC;IAClE,2BAA2B,2BAA2B;IAGtD,qBAAqB,0BAA0B;IAG/C,0BAA0B,wBAAwB;IAClD,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,eAAe,oBAAoB;IACnC,uBAAuB,4BAA4B;IAGnD,qBAAqB,0BAA0B;IAC/C,0BAA0B,+BAA+B;IACzD,2BAA2B,gCAAgC;IAC3D,mBAAmB,wBAAwB;IAG3C,oBAAoB,yBAAyB;IAG7C,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAG/B,WAAW,kBAAkB;IAC7B,YAAY,mBAAmB;IAC/B,WAAW,kBAAkB;IAG7B,2BAA2B,0BAA0B;IACrD,oBAAoB,mBAAmB;IACvC,yBAAyB,wBAAwB;IACjD,mBAAmB,kBAAkB;IACrC,4BAA4B,iCAAiC;IAC7D,qBAAqB,oBAAoB;IACzC,oBAAoB,mBAAmB;IACvC,0BAA0B,yBAAyB;IACnD,gCAAgC,+BAA+B;IAC/D,sBAAsB,qBAAqB;IAC3C,+BAA+B,8BAA8B;IAC7D,mBAAmB,kBAAkB;IACrC,wBAAwB,uBAAuB;IAG/C,oBAAoB,yBAAyB;IAC7C,iBAAiB,sBAAsB;IACvC,4BAA4B,iCAAiC;IAG7D,0BAA0B,+BAA+B;IACzD,gCAAgC,qCAAqC;IACrE,gCAAgC,qCAAqC;CACxE"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,SAAS;IAEjB,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;IAGjC,iCAAiC,iCAAiC;IAClE,2BAA2B,2BAA2B;IAGtD,qBAAqB,0BAA0B;IAG/C,0BAA0B,wBAAwB;IAClD,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,eAAe,oBAAoB;IACnC,uBAAuB,4BAA4B;IAGnD,qBAAqB,0BAA0B;IAC/C,0BAA0B,+BAA+B;IACzD,2BAA2B,gCAAgC;IAC3D,mBAAmB,wBAAwB;IAC3C,uBAAuB,4BAA4B;IACnD,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAG7C,oBAAoB,yBAAyB;IAG7C,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAG/B,WAAW,kBAAkB;IAC7B,YAAY,mBAAmB;IAC/B,WAAW,kBAAkB;IAG7B,2BAA2B,0BAA0B;IACrD,oBAAoB,mBAAmB;IACvC,yBAAyB,wBAAwB;IACjD,mBAAmB,kBAAkB;IACrC,4BAA4B,iCAAiC;IAC7D,qBAAqB,oBAAoB;IACzC,oBAAoB,mBAAmB;IACvC,kBAAkB,iBAAiB;IACnC,mBAAmB,kBAAkB;IACrC,0BAA0B,yBAAyB;IACnD,gCAAgC,+BAA+B;IAC/D,sBAAsB,qBAAqB;IAC3C,+BAA+B,8BAA8B;IAC7D,mBAAmB,kBAAkB;IACrC,wBAAwB,uBAAuB;IAG/C,oBAAoB,yBAAyB;IAC7C,iBAAiB,sBAAsB;IACvC,4BAA4B,iCAAiC;IAG7D,0BAA0B,+BAA+B;IACzD,gCAAgC,qCAAqC;IACrE,gCAAgC,qCAAqC;CACxE"}

package/dist/index.d.mts

@@ -51,6 +51,18 @@ declare class BearerTokenMalformedError extends UnauthorizedError {
   constructor(message?: string);
 }
 //#endregion
+//#region src/built-in/validation.d.ts
+declare const VALIDATION_ERROR_INSTANCE: unique symbol;
+/**
+ * A domain/business-rule violation raised by core logic. Deliberately NOT
+ * named after an HTTP status: core code stays transport-agnostic, and the HTTP
+ * adapter maps its `ErrorCode.BAD_REQUEST` to a 400 response
+ * (`httpStatusFromCode`). Prefer this over `BadRequestError` in `core/**`.
+ */
+declare class ValidationError extends AuthupError {
+  constructor(input?: string | AuthupErrorOptions);
+}
+//#endregion
 //#region src/built-in/entity-conflict.d.ts
 declare const ENTITY_CONFLICT_ERROR_INSTANCE: unique symbol;
 declare class EntityConflictError extends AuthupError {
@@ -81,16 +93,43 @@ declare class InternalError extends AuthupError {
   constructor(input?: string | AuthupErrorOptions);
 }
 //#endregion
+//#region src/built-in/login-throttled.d.ts
+declare const LOGIN_THROTTLED_ERROR_INSTANCE: unique symbol;
+type LoginThrottledErrorOptions = AuthupErrorOptions & {
+  /**
+   * Seconds until the sliding throttle window can release the pair.
+   */
+  retryAfter?: number;
+};
+declare class LoginThrottledError extends AuthupError {
+  constructor(input?: LoginThrottledErrorOptions);
+}
+//#endregion
+//#region src/built-in/mfa-throttled.d.ts
+declare const MFA_THROTTLED_ERROR_INSTANCE: unique symbol;
+type MfaThrottledErrorOptions = AuthupErrorOptions & {
+  /**
+   * Seconds until the exponential backoff releases the account.
+   */
+  retryAfter?: number;
+};
+declare class MfaThrottledError extends AuthupError {
+  constructor(input?: MfaThrottledErrorOptions);
+}
+//#endregion
 //#region src/built-in/check.d.ts
 declare function isAuthHeaderError(input: unknown): input is AuthHeaderError;
 declare function isBearerTokenMalformedError(input: unknown): input is BearerTokenMalformedError;
 declare function isBadRequestError(input: unknown): input is BadRequestError;
+declare function isValidationError(input: unknown): input is ValidationError;
 declare function isUnauthorizedError(input: unknown): input is UnauthorizedError;
 declare function isEntityNotFoundError(input: unknown): input is EntityNotFoundError;
 declare function isEntityConflictError(input: unknown): input is EntityConflictError;
 declare function isEntityInactiveError(input: unknown): input is EntityInactiveError;
 declare function isEntityCredentialsInvalidError(input: unknown): input is EntityCredentialsInvalidError;
 declare function isInternalError(input: unknown): input is InternalError;
+declare function isLoginThrottledError(input: unknown): input is LoginThrottledError;
+declare function isMfaThrottledError(input: unknown): input is MfaThrottledError;
 //#endregion
 //#region src/check.d.ts
 /**
@@ -132,6 +171,9 @@ declare enum ErrorCode {
   PASSWORD_RECOVERY_DISABLED = "password_recovery_disabled",
   EMAIL_VERIFICATION_REQUIRED = "email_verification_required",
   RESET_TOKEN_EXPIRED = "reset_token_expired",
+  LOGIN_ATTEMPT_THROTTLED = "login_attempt_throttled",
+  MFA_ATTEMPT_THROTTLED = "mfa_attempt_throttled",
+  MFA_NOT_CONFIGURABLE = "mfa_not_configurable",
   STORAGE_INSUFFICIENT = "storage_insufficient",
   JWK_INVALID = "jwk_invalid",
   JWK_NOT_FOUND = "jwk_not_found",
@@ -145,6 +187,8 @@ declare enum ErrorCode {
   OAUTH_GRANT_TYPE_UNSUPPORTED = "unsupported_token_grant_type",
   OAUTH_REQUEST_INVALID = "invalid_request",
   OAUTH_LOGIN_REQUIRED = "login_required",
+  OAUTH_MFA_REQUIRED = "mfa_required",
+  OAUTH_ACCESS_DENIED = "access_denied",
   OAUTH_INTERACTION_REQUIRED = "interaction_required",
   OAUTH_ACCOUNT_SELECTION_REQUIRED = "account_selection_required",
   OAUTH_CONSENT_REQUIRED = "consent_required",
@@ -219,5 +263,5 @@ declare function httpStatusFromCode(code: string, fallback?: number): number;
  */
 declare function codeFromHttpStatus(status: number): ErrorCode;
 //#endregion
-export { AUTHUP_ERROR_INSTANCE, AUTH_HEADER_ERROR_INSTANCE, AuthHeaderError, AuthupEntityErrorInput, AuthupEntityErrorOptions, AuthupError, AuthupErrorInput, AuthupErrorOptions, BAD_REQUEST_ERROR_INSTANCE, BASE_ERROR_INSTANCE, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, BadRequestError, BearerTokenMalformedError, ENTITY_CONFLICT_ERROR_INSTANCE, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, ENTITY_INACTIVE_ERROR_INSTANCE, ENTITY_NOT_FOUND_ERROR_INSTANCE, ERROR_CODE_TO_STATUS, EntityConflictError, EntityCredentialsInvalidError, EntityInactiveError, EntityNotFoundError, ErrorCode, INSTANCEOF_PROPERTY, INTERNAL_ERROR_INSTANCE, InternalError, UNAUTHORIZED_ERROR_INSTANCE, UnauthorizedError, codeFromHttpStatus, hasInstanceof, httpStatusFromCode, isAuthHeaderError, isAuthupError, isBadRequestError, isBearerTokenMalformedError, isEntityConflictError, isEntityCredentialsInvalidError, isEntityInactiveError, isEntityNotFoundError, isError, isInternalError, isUnauthorizedError, markInstanceof, normalizeError, serializeError };
+export { AUTHUP_ERROR_INSTANCE, AUTH_HEADER_ERROR_INSTANCE, AuthHeaderError, AuthupEntityErrorInput, AuthupEntityErrorOptions, AuthupError, AuthupErrorInput, AuthupErrorOptions, BAD_REQUEST_ERROR_INSTANCE, BASE_ERROR_INSTANCE, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, BadRequestError, BearerTokenMalformedError, ENTITY_CONFLICT_ERROR_INSTANCE, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, ENTITY_INACTIVE_ERROR_INSTANCE, ENTITY_NOT_FOUND_ERROR_INSTANCE, ERROR_CODE_TO_STATUS, EntityConflictError, EntityCredentialsInvalidError, EntityInactiveError, EntityNotFoundError, ErrorCode, INSTANCEOF_PROPERTY, INTERNAL_ERROR_INSTANCE, InternalError, LOGIN_THROTTLED_ERROR_INSTANCE, LoginThrottledError, LoginThrottledErrorOptions, MFA_THROTTLED_ERROR_INSTANCE, MfaThrottledError, MfaThrottledErrorOptions, UNAUTHORIZED_ERROR_INSTANCE, UnauthorizedError, VALIDATION_ERROR_INSTANCE, ValidationError, codeFromHttpStatus, hasInstanceof, httpStatusFromCode, isAuthHeaderError, isAuthupError, isBadRequestError, isBearerTokenMalformedError, isEntityConflictError, isEntityCredentialsInvalidError, isEntityInactiveError, isEntityNotFoundError, isError, isInternalError, isLoginThrottledError, isMfaThrottledError, isUnauthorizedError, isValidationError, markInstanceof, normalizeError, serializeError };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/module.ts","../src/built-in/unauthorized.ts","../src/built-in/auth-header.ts","../src/built-in/bad-request.ts","../src/built-in/bearer-token.ts","../src/built-in/entity-conflict.ts","../src/built-in/entity-credentials-invalid.ts","../src/built-in/entity-inactive.ts","../src/built-in/entity-not-found.ts","../src/built-in/internal.ts","../src/built-in/check.ts","../src/check.ts","../src/constants.ts","../src/normalize.ts","../src/serialize.ts","../src/status.ts"],"mappings":";;;KASY,qBAAqB;EAC7B,OAAO;;KAGC,4BAA4B;KAE5B,2BAA2B;EACnC;;KAGQ,kCAAkC;;;cCRjC;cAEA,oBAAoB;WACb,QAAQ;WAER,OAAO;cAEX,QAAQ;EAWX;;;;;;;;;;;cCjBA;cAEA,0BAA0B;cACvB,iBAAiB;;;;cCJpB;cAEA,wBAAwB;cACrB;SAQL,gBAAgB,eAAY;;;;cCV1B;cAEA,wBAAwB;cACrB,iBAAiB;;;;cCJpB;cAEA,kCAAkC;cAC/B;;;;cCFH;cAEA,4BAA4B;cACzB,iBAAiB;;;;cCHpB;cAEA,sCAAsC;cACnC,iBAAiB;;;;cCHpB;cAEA,4BAA4B;cACzB,iBAAiB;;;;cCHpB;cAEA,4BAA4B;cACzB,iBAAiB;;;;cCHpB;cAEA,sBAAsB;cACnB,iBAAiB;;;;iBCKjB,kBAAkB,iBAAiB,SAAS;iBAM5C,4BAA4B,iBAAiB,SAAS;iBAMtD,kBAAkB,iBAAiB,SAAS;iBAM5C,oBAAoB,iBAAiB,SAAS;iBAM9C,sBAAsB,iBAAiB,SAAS;iBAMhD,sBAAsB,iBAAiB,SAAS;iBAMhD,sBAAsB,iBAAiB,SAAS;iBAMhD,gCAAgC,iBAAiB,SAAS;iBAM1D,gBAAgB,iBAAiB,SAAS;;;;;;;;;;;;iBC3C1C,QAAQ,iBAAiB,SAAS;;;;;;;;;;;;iBAelC,cAAc,iBAAiB,SAAS;;;aCjC5C;EAER;EACA;EAGA;EACA;EAGA;EAGA;EACA;EACA;EACA;EACA;EAGA;EACA;EACA;EACA;EAGA;EAGA;EACA;EAGA;EACA;EACA;EAGA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAGA;EACA;EACA;EAGA;EACA;EACA;;;;;;;;;;;;;iBCjDY,eAAe,iBAAiB;;;;;;;;;;;;;;;;iBCIhC,eAAe,OAAO,QAAQ;;;;;;;;;;;;;;;;cCAjC,sBAAsB,SAAS,QAAQ,UAAU;;;;;iBA8B9C,mBAAmB,cAAc;;;;;;;;;;;iBAcjC,mBAAmB,iBAAiB"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/module.ts","../src/built-in/unauthorized.ts","../src/built-in/auth-header.ts","../src/built-in/bad-request.ts","../src/built-in/bearer-token.ts","../src/built-in/validation.ts","../src/built-in/entity-conflict.ts","../src/built-in/entity-credentials-invalid.ts","../src/built-in/entity-inactive.ts","../src/built-in/entity-not-found.ts","../src/built-in/internal.ts","../src/built-in/login-throttled.ts","../src/built-in/mfa-throttled.ts","../src/built-in/check.ts","../src/check.ts","../src/constants.ts","../src/normalize.ts","../src/serialize.ts","../src/status.ts"],"mappings":";;;KASY,qBAAqB;EAC7B,OAAO;;KAGC,4BAA4B;KAE5B,2BAA2B;EACnC;;KAGQ,kCAAkC;;;cCRjC;cAEA,oBAAoB;WACb,QAAQ;WAER,OAAO;cAEX,QAAQ;EAWX;;;;;;;;;;;cCjBA;cAEA,0BAA0B;cACvB,iBAAiB;;;;cCJpB;cAEA,wBAAwB;cACrB;SAQL,gBAAgB,eAAY;;;;cCV1B;cAEA,wBAAwB;cACrB,iBAAiB;;;;cCJpB;cAEA,kCAAkC;cAC/B;;;;cCFH;;;;;;;cAQA,wBAAwB;cACrB,iBAAiB;;;;cCTpB;cAEA,4BAA4B;cACzB,iBAAiB;;;;cCHpB;cAEA,sCAAsC;cACnC,iBAAiB;;;;cCHpB;cAEA,4BAA4B;cACzB,iBAAiB;;;;cCHpB;cAEA,4BAA4B;cACzB,iBAAiB;;;;cCHpB;cAEA,sBAAsB;cACnB,iBAAiB;;;;cCHpB;KAED,6BAA6B;;;;EAIrC;;cAGS,4BAA4B;cACzB,QAAQ;;;;cCVX;KAED,2BAA2B;;;;EAInC;;cAGS,0BAA0B;cACvB,QAAQ;;;;iBCCR,kBAAkB,iBAAiB,SAAS;iBAM5C,4BAA4B,iBAAiB,SAAS;iBAMtD,kBAAkB,iBAAiB,SAAS;iBAM5C,kBAAkB,iBAAiB,SAAS;iBAM5C,oBAAoB,iBAAiB,SAAS;iBAM9C,sBAAsB,iBAAiB,SAAS;iBAMhD,sBAAsB,iBAAiB,SAAS;iBAMhD,sBAAsB,iBAAiB,SAAS;iBAMhD,gCAAgC,iBAAiB,SAAS;iBAM1D,gBAAgB,iBAAiB,SAAS;iBAM1C,sBAAsB,iBAAiB,SAAS;iBAMhD,oBAAoB,iBAAiB,SAAS;;;;;;;;;;;;iBChE9C,QAAQ,iBAAiB,SAAS;;;;;;;;;;;;iBAelC,cAAc,iBAAiB,SAAS;;;aCjC5C;EAER;EACA;EAGA;EACA;EAGA;EAGA;EACA;EACA;EACA;EACA;EAGA;EACA;EACA;EACA;EACA;EACA;EACA;EAGA;EAGA;EACA;EAGA;EACA;EACA;EAGA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAGA;EACA;EACA;EAGA;EACA;EACA;;;;;;;;;;;;;iBCtDY,eAAe,iBAAiB;;;;;;;;;;;;;;;;iBCIhC,eAAe,OAAO,QAAQ;;;;;;;;;;;;;;;;cCAjC,sBAAsB,SAAS,QAAQ,UAAU;;;;;iBAkC9C,mBAAmB,cAAc;;;;;;;;;;;iBAcjC,mBAAmB,iBAAiB"}

package/dist/index.mjs

@@ -15,6 +15,9 @@ let ErrorCode = /* @__PURE__ */ function(ErrorCode) {
 	ErrorCode["PASSWORD_RECOVERY_DISABLED"] = "password_recovery_disabled";
 	ErrorCode["EMAIL_VERIFICATION_REQUIRED"] = "email_verification_required";
 	ErrorCode["RESET_TOKEN_EXPIRED"] = "reset_token_expired";
+	ErrorCode["LOGIN_ATTEMPT_THROTTLED"] = "login_attempt_throttled";
+	ErrorCode["MFA_ATTEMPT_THROTTLED"] = "mfa_attempt_throttled";
+	ErrorCode["MFA_NOT_CONFIGURABLE"] = "mfa_not_configurable";
 	ErrorCode["STORAGE_INSUFFICIENT"] = "storage_insufficient";
 	ErrorCode["JWK_INVALID"] = "jwk_invalid";
 	ErrorCode["JWK_NOT_FOUND"] = "jwk_not_found";
@@ -28,6 +31,8 @@ let ErrorCode = /* @__PURE__ */ function(ErrorCode) {
 	ErrorCode["OAUTH_GRANT_TYPE_UNSUPPORTED"] = "unsupported_token_grant_type";
 	ErrorCode["OAUTH_REQUEST_INVALID"] = "invalid_request";
 	ErrorCode["OAUTH_LOGIN_REQUIRED"] = "login_required";
+	ErrorCode["OAUTH_MFA_REQUIRED"] = "mfa_required";
+	ErrorCode["OAUTH_ACCESS_DENIED"] = "access_denied";
 	ErrorCode["OAUTH_INTERACTION_REQUIRED"] = "interaction_required";
 	ErrorCode["OAUTH_ACCOUNT_SELECTION_REQUIRED"] = "account_selection_required";
 	ErrorCode["OAUTH_CONSENT_REQUIRED"] = "consent_required";
@@ -146,6 +151,24 @@ function isAuthupError(input) {
 	return Array.isArray(input.issues);
 }
 //#endregion
+//#region src/built-in/validation.ts
+const VALIDATION_ERROR_INSTANCE = Symbol.for("@authup/errors/ValidationError");
+/**
+* A domain/business-rule violation raised by core logic. Deliberately NOT
+* named after an HTTP status: core code stays transport-agnostic, and the HTTP
+* adapter maps its `ErrorCode.BAD_REQUEST` to a 400 response
+* (`httpStatusFromCode`). Prefer this over `BadRequestError` in `core/**`.
+*/
+var ValidationError = class extends AuthupError {
+	constructor(input) {
+		super({
+			code: "bad_request",
+			...typeof input === "string" ? { message: input } : input ?? {}
+		});
+		markInstanceof$1(this, VALIDATION_ERROR_INSTANCE);
+	}
+};
+//#endregion
 //#region src/built-in/entity-conflict.ts
 const ENTITY_CONFLICT_ERROR_INSTANCE = Symbol.for("@authup/errors/EntityConflictError");
 var EntityConflictError = class extends AuthupError {
@@ -215,6 +238,42 @@ var InternalError = class extends AuthupError {
 	}
 };
 //#endregion
+//#region src/built-in/login-throttled.ts
+const LOGIN_THROTTLED_ERROR_INSTANCE = Symbol.for("@authup/errors/LoginThrottledError");
+var LoginThrottledError = class extends AuthupError {
+	constructor(input) {
+		const { retryAfter, ...rest } = input ?? {};
+		super({
+			code: "login_attempt_throttled",
+			message: "Too many failed login attempts. Please try again later.",
+			...rest,
+			data: {
+				...typeof retryAfter === "number" ? { retryAfter } : {},
+				...rest.data ?? {}
+			}
+		});
+		markInstanceof$1(this, LOGIN_THROTTLED_ERROR_INSTANCE);
+	}
+};
+//#endregion
+//#region src/built-in/mfa-throttled.ts
+const MFA_THROTTLED_ERROR_INSTANCE = Symbol.for("@authup/errors/MfaThrottledError");
+var MfaThrottledError = class extends AuthupError {
+	constructor(input) {
+		const { retryAfter, ...rest } = input ?? {};
+		super({
+			code: "mfa_attempt_throttled",
+			message: "Too many failed verification attempts. Please try again later.",
+			...rest,
+			data: {
+				...typeof retryAfter === "number" ? { retryAfter } : {},
+				...rest.data ?? {}
+			}
+		});
+		markInstanceof$1(this, MFA_THROTTLED_ERROR_INSTANCE);
+	}
+};
+//#endregion
 //#region src/built-in/check.ts
 function isAuthHeaderError(input) {
 	if (hasInstanceof$1(input, AUTH_HEADER_ERROR_INSTANCE)) return true;
@@ -231,6 +290,11 @@ function isBadRequestError(input) {
 	if (!isAuthupError(input)) return false;
 	return input.code === "bad_request";
 }
+function isValidationError(input) {
+	if (hasInstanceof$1(input, VALIDATION_ERROR_INSTANCE)) return true;
+	if (!isAuthupError(input)) return false;
+	return input.code === "bad_request";
+}
 function isUnauthorizedError(input) {
 	if (hasInstanceof$1(input, UNAUTHORIZED_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
@@ -261,6 +325,16 @@ function isInternalError(input) {
 	if (!isAuthupError(input)) return false;
 	return input.code === "internal_error";
 }
+function isLoginThrottledError(input) {
+	if (hasInstanceof$1(input, LOGIN_THROTTLED_ERROR_INSTANCE)) return true;
+	if (!isAuthupError(input)) return false;
+	return input.code === "login_attempt_throttled";
+}
+function isMfaThrottledError(input) {
+	if (hasInstanceof$1(input, MFA_THROTTLED_ERROR_INSTANCE)) return true;
+	if (!isAuthupError(input)) return false;
+	return input.code === "mfa_attempt_throttled";
+}
 //#endregion
 //#region src/normalize.ts
 /**
@@ -329,6 +403,8 @@ const ERROR_CODE_TO_STATUS = {
 	["entity_not_found"]: 404,
 	["jwk_not_found"]: 404,
 	["entity_conflict"]: 409,
+	["login_attempt_throttled"]: 429,
+	["mfa_attempt_throttled"]: 429,
 	["internal_error"]: 500,
 	["storage_insufficient"]: 507
 };
@@ -354,11 +430,12 @@ function codeFromHttpStatus(status) {
 	if (status === 409) return "entity_conflict";
 	if (status === 401) return "identity_unauthorized";
 	if (status === 403) return "permission_denied";
+	if (status === 429) return "login_attempt_throttled";
 	if (status === 507) return "storage_insufficient";
 	if (status >= 500) return "internal_error";
 	return "bad_request";
 }
 //#endregion
-export { AUTHUP_ERROR_INSTANCE, AUTH_HEADER_ERROR_INSTANCE, AuthHeaderError, AuthupError, BAD_REQUEST_ERROR_INSTANCE, BASE_ERROR_INSTANCE, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, BadRequestError, BearerTokenMalformedError, ENTITY_CONFLICT_ERROR_INSTANCE, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, ENTITY_INACTIVE_ERROR_INSTANCE, ENTITY_NOT_FOUND_ERROR_INSTANCE, ERROR_CODE_TO_STATUS, EntityConflictError, EntityCredentialsInvalidError, EntityInactiveError, EntityNotFoundError, ErrorCode, INSTANCEOF_PROPERTY, INTERNAL_ERROR_INSTANCE, InternalError, UNAUTHORIZED_ERROR_INSTANCE, UnauthorizedError, codeFromHttpStatus, hasInstanceof, httpStatusFromCode, isAuthHeaderError, isAuthupError, isBadRequestError, isBearerTokenMalformedError, isEntityConflictError, isEntityCredentialsInvalidError, isEntityInactiveError, isEntityNotFoundError, isError, isInternalError, isUnauthorizedError, markInstanceof, normalizeError, serializeError };
+export { AUTHUP_ERROR_INSTANCE, AUTH_HEADER_ERROR_INSTANCE, AuthHeaderError, AuthupError, BAD_REQUEST_ERROR_INSTANCE, BASE_ERROR_INSTANCE, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, BadRequestError, BearerTokenMalformedError, ENTITY_CONFLICT_ERROR_INSTANCE, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, ENTITY_INACTIVE_ERROR_INSTANCE, ENTITY_NOT_FOUND_ERROR_INSTANCE, ERROR_CODE_TO_STATUS, EntityConflictError, EntityCredentialsInvalidError, EntityInactiveError, EntityNotFoundError, ErrorCode, INSTANCEOF_PROPERTY, INTERNAL_ERROR_INSTANCE, InternalError, LOGIN_THROTTLED_ERROR_INSTANCE, LoginThrottledError, MFA_THROTTLED_ERROR_INSTANCE, MfaThrottledError, UNAUTHORIZED_ERROR_INSTANCE, UnauthorizedError, VALIDATION_ERROR_INSTANCE, ValidationError, codeFromHttpStatus, hasInstanceof, httpStatusFromCode, isAuthHeaderError, isAuthupError, isBadRequestError, isBearerTokenMalformedError, isEntityConflictError, isEntityCredentialsInvalidError, isEntityInactiveError, isEntityNotFoundError, isError, isInternalError, isLoginThrottledError, isMfaThrottledError, isUnauthorizedError, isValidationError, markInstanceof, normalizeError, serializeError };
 
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["isRawError","hasInstanceof","hasInstanceof"],"sources":["../src/constants.ts","../src/module.ts","../src/built-in/unauthorized.ts","../src/built-in/auth-header.ts","../src/built-in/bad-request.ts","../src/built-in/bearer-token.ts","../src/check.ts","../src/built-in/entity-conflict.ts","../src/built-in/entity-credentials-invalid.ts","../src/built-in/entity-inactive.ts","../src/built-in/entity-not-found.ts","../src/built-in/internal.ts","../src/built-in/check.ts","../src/normalize.ts","../src/serialize.ts","../src/status.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum ErrorCode {\n    // Generic\n    BAD_REQUEST = 'bad_request',\n    INTERNAL_ERROR = 'internal_error',\n\n    // HTTP Codes\n    HTTP_HEADER_AUTH_TYPE_UNSUPPORTED = 'unsupported_auth_header_type',\n    HTTP_BEARER_TOKEN_MALFORMED = 'bearer_token_malformed',\n\n    // Identity Auth\n    IDENTITY_UNAUTHORIZED = 'identity_unauthorized',\n\n    // Entity Codes\n    ENTITY_CREDENTIALS_INVALID = 'invalid_credentials',\n    ENTITY_INACTIVE = 'entity_inactive',\n    ENTITY_NOT_FOUND = 'entity_not_found',\n    ENTITY_CONFLICT = 'entity_conflict',\n    ENTITY_RELATION_INVALID = 'entity_relation_invalid',\n\n    // Identity Codes\n    REGISTRATION_DISABLED = 'registration_disabled',\n    PASSWORD_RECOVERY_DISABLED = 'password_recovery_disabled',\n    EMAIL_VERIFICATION_REQUIRED = 'email_verification_required',\n    RESET_TOKEN_EXPIRED = 'reset_token_expired',\n\n    // Storage Codes\n    STORAGE_INSUFFICIENT = 'storage_insufficient',\n\n    // JWK Codes\n    JWK_INVALID = 'jwk_invalid',\n    JWK_NOT_FOUND = 'jwk_not_found',\n\n    // JWT Codes\n    JWT_INVALID = 'invalid_token',\n    JWT_INACTIVE = 'inactive_token',\n    JWT_EXPIRED = 'expired_token',\n\n    // Oauth2 Codes\n    OAUTH_REDIRECT_URI_MISMATCH = 'redirect_uri_mismatch',\n    OAUTH_CLIENT_INVALID = 'invalid_client',\n    OAUTH_CLIENT_UNAUTHORIZED = 'unauthorized_client',\n    OAUTH_GRANT_INVALID = 'invalid_grant',\n    OAUTH_GRANT_TYPE_UNSUPPORTED = 'unsupported_token_grant_type',\n    OAUTH_REQUEST_INVALID = 'invalid_request',\n    OAUTH_LOGIN_REQUIRED = 'login_required',\n    OAUTH_INTERACTION_REQUIRED = 'interaction_required',\n    OAUTH_ACCOUNT_SELECTION_REQUIRED = 'account_selection_required',\n    OAUTH_CONSENT_REQUIRED = 'consent_required',\n    OAUTH_RESPONSE_TYPE_UNSUPPORTED = 'unsupported_response_type',\n    OAUTH_SCOPE_INVALID = 'invalid_scope',\n    OAUTH_SCOPE_INSUFFICIENT = 'insufficient_scope',\n\n    // Permission Codes\n    PERMISSION_NOT_FOUND = 'permission_not_found',\n    PERMISSION_DENIED = 'permission_denied',\n    PERMISSION_EVALUATION_FAILED = 'permission_evaluation_failed',\n\n    // Policy Codes\n    POLICY_EVALUATOR_NOT_FOUND = 'policy_evaluator_not_found',\n    POLICY_EVALUATOR_NOT_PROCESSABLE = 'policy_evaluator_not_processable',\n    POLICY_EVALUATOR_CONTEXT_INVALID = 'policy_evaluator_context_invalid',\n}\n","/*\n * Copyright (c) 2024-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AuthupErrorInput } from './types.ts';\nimport { BaseError, markInstanceof } from '@ebec/core';\nimport type { Issue } from 'validup';\n\nexport const AUTHUP_ERROR_INSTANCE = Symbol.for('@authup/errors/AuthupError');\n\nexport class AuthupError extends BaseError {\n    public readonly issues: Issue[];\n\n    public readonly data?: Record<string, any>;\n\n    constructor(input?: AuthupErrorInput) {\n        super(input);\n        markInstanceof(this, AUTHUP_ERROR_INSTANCE);\n\n        this.issues = [];\n\n        if (input && typeof input !== 'string' && input.data) {\n            this.data = input.data;\n        }\n    }\n\n    override toJSON() {\n        return {\n            ...super.toJSON(),\n            issues: this.issues,\n            ...(this.data ?? {}),\n        };\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const UNAUTHORIZED_ERROR_INSTANCE = Symbol.for('@authup/errors/UnauthorizedError');\n\nexport class UnauthorizedError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.IDENTITY_UNAUTHORIZED,\n            message: 'Authentication required.',\n            ...options,\n        });\n        markInstanceof(this, UNAUTHORIZED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { UnauthorizedError } from './unauthorized.ts';\n\nexport const AUTH_HEADER_ERROR_INSTANCE = Symbol.for('@authup/errors/AuthHeaderError');\n\nexport class AuthHeaderError extends UnauthorizedError {\n    constructor(message: string) {\n        super({\n            code: ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED,\n            message,\n        });\n        markInstanceof(this, AUTH_HEADER_ERROR_INSTANCE);\n    }\n\n    static unsupportedType(type: string) {\n        return new AuthHeaderError(`The authorization header type ${type} is not supported.`);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const BAD_REQUEST_ERROR_INSTANCE = Symbol.for('@authup/errors/BadRequestError');\n\nexport class BadRequestError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.BAD_REQUEST,\n            ...options,\n        });\n        markInstanceof(this, BAD_REQUEST_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { UnauthorizedError } from './unauthorized.ts';\n\nexport const BEARER_TOKEN_MALFORMED_ERROR_INSTANCE = Symbol.for('@authup/errors/BearerTokenMalformedError');\n\nexport class BearerTokenMalformedError extends UnauthorizedError {\n    constructor(message?: string) {\n        super({\n            code: ErrorCode.HTTP_BEARER_TOKEN_MALFORMED,\n            message: message ?? 'The Authorization header is malformed.',\n        });\n        markInstanceof(this, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    hasInstanceof,\n    isBaseError,\n    isObject,\n    isError as isRawError,\n} from '@ebec/core';\nimport type { AuthupError } from './module.ts';\nimport { AUTHUP_ERROR_INSTANCE } from './module.ts';\n\n/**\n * Duck-type guard for `Error`.\n *\n * Re-exports `@ebec/core`'s shape-based check: `input` matches when it\n * carries the standard `name` / `message` / `stack` triplet, regardless\n * of which realm or class hierarchy produced it. Use this instead of\n * `instanceof Error` for cross-realm boundaries (worker threads,\n * duplicate-module copies) where `instanceof` can yield false negatives.\n */\nexport function isError(input: unknown): input is Error {\n    return isRawError(input);\n}\n\n/**\n * Duck-type guard for AuthupError.\n *\n * Fast path: input has the AuthupError marker in its `@instanceof` chain.\n * Subclass instances also accumulate this marker, so this guard matches any\n * AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).\n *\n * Slow path: input is shape-compatible with AuthupError (BaseError + has\n * `issues: Issue[]`). Catches cases where the marker is missing — plain\n * objects rehydrated from JSON, older builds without the marker.\n */\nexport function isAuthupError(input: unknown): input is AuthupError {\n    if (hasInstanceof(input, AUTHUP_ERROR_INSTANCE)) {\n        return true;\n    }\n\n    if (!isBaseError(input)) {\n        return false;\n    }\n\n    if (!isObject(input)) {\n        return false;\n    }\n\n    return Array.isArray(input.issues);\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_CONFLICT_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityConflictError');\n\nexport class EntityConflictError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_CONFLICT,\n            message: entity ? `The ${entity} already exists.` : 'Entity already exists.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_CONFLICT_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityCredentialsInvalidError');\n\nexport class EntityCredentialsInvalidError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_CREDENTIALS_INVALID,\n            message: entity ? `The ${entity} credentials are invalid.` : 'Credentials are invalid.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_INACTIVE_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityInactiveError');\n\nexport class EntityInactiveError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_INACTIVE,\n            message: entity ? `The ${entity} is inactive.` : 'Entity is inactive.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_INACTIVE_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_NOT_FOUND_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityNotFoundError');\n\nexport class EntityNotFoundError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_NOT_FOUND,\n            message: entity ? `The ${entity} was not found.` : 'Entity not found.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_NOT_FOUND_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const INTERNAL_ERROR_INSTANCE = Symbol.for('@authup/errors/InternalError');\n\nexport class InternalError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.INTERNAL_ERROR,\n            message: 'An internal error occurred.',\n            ...options,\n        });\n        markInstanceof(this, INTERNAL_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isAuthupError } from '../check.ts';\nimport { ErrorCode } from '../constants.ts';\nimport { hasInstanceof } from '@ebec/core';\nimport { AUTH_HEADER_ERROR_INSTANCE, type AuthHeaderError } from './auth-header.ts';\nimport { BAD_REQUEST_ERROR_INSTANCE, type BadRequestError } from './bad-request.ts';\nimport { BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, type BearerTokenMalformedError } from './bearer-token.ts';\nimport { ENTITY_CONFLICT_ERROR_INSTANCE, type EntityConflictError } from './entity-conflict.ts';\nimport { ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, type EntityCredentialsInvalidError } from './entity-credentials-invalid.ts';\nimport { ENTITY_INACTIVE_ERROR_INSTANCE, type EntityInactiveError } from './entity-inactive.ts';\nimport { ENTITY_NOT_FOUND_ERROR_INSTANCE, type EntityNotFoundError } from './entity-not-found.ts';\nimport { INTERNAL_ERROR_INSTANCE, type InternalError } from './internal.ts';\nimport { UNAUTHORIZED_ERROR_INSTANCE, type UnauthorizedError } from './unauthorized.ts';\n\nexport function isAuthHeaderError(input: unknown): input is AuthHeaderError {\n    if (hasInstanceof(input, AUTH_HEADER_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED;\n}\n\nexport function isBearerTokenMalformedError(input: unknown): input is BearerTokenMalformedError {\n    if (hasInstanceof(input, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.HTTP_BEARER_TOKEN_MALFORMED;\n}\n\nexport function isBadRequestError(input: unknown): input is BadRequestError {\n    if (hasInstanceof(input, BAD_REQUEST_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.BAD_REQUEST;\n}\n\nexport function isUnauthorizedError(input: unknown): input is UnauthorizedError {\n    if (hasInstanceof(input, UNAUTHORIZED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.IDENTITY_UNAUTHORIZED;\n}\n\nexport function isEntityNotFoundError(input: unknown): input is EntityNotFoundError {\n    if (hasInstanceof(input, ENTITY_NOT_FOUND_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_NOT_FOUND;\n}\n\nexport function isEntityConflictError(input: unknown): input is EntityConflictError {\n    if (hasInstanceof(input, ENTITY_CONFLICT_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_CONFLICT;\n}\n\nexport function isEntityInactiveError(input: unknown): input is EntityInactiveError {\n    if (hasInstanceof(input, ENTITY_INACTIVE_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_INACTIVE;\n}\n\nexport function isEntityCredentialsInvalidError(input: unknown): input is EntityCredentialsInvalidError {\n    if (hasInstanceof(input, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_CREDENTIALS_INVALID;\n}\n\nexport function isInternalError(input: unknown): input is InternalError {\n    if (hasInstanceof(input, INTERNAL_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.INTERNAL_ERROR;\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isError } from './check.ts';\n\n/**\n * Normalize an arbitrary thrown value into an `Error` instance.\n *\n * Useful at error-pipeline boundaries (catch blocks, error middleware,\n * fallbacks) where TypeScript hands you `unknown` but downstream code\n * wants a real `Error` to inspect or rethrow. Duck-typed: any value\n * passing `isError` is returned as-is. Strings become `new Error(str)`;\n * any other value is stringified.\n */\nexport function normalizeError(input: unknown): Error {\n    if (isError(input)) {\n        return input;\n    }\n\n    if (typeof input === 'string') {\n        return new Error(input);\n    }\n\n    return new Error(String(input));\n}\n\n","/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { isObject } from '@ebec/core';\n\n/**\n * Convert an `Error` (or any value with a `toJSON()` method) into a\n * plain object suitable for embedding in a JSON response body.\n *\n * Calls `input.toJSON()` if present — preserves every attribute the\n * error chose to surface (`code`, `cause`, `errors`, `issues`, `data`,\n * AuthupError sub-class fields, ...). Falls back to spreading the\n * Error's enumerable own properties alongside the standard\n * `name` / `message` pair, so caller-attached fields survive.\n *\n * Pair with `normalizeError` to handle arbitrary thrown values:\n * `serializeError(normalizeError(e))`.\n */\nexport function serializeError(input: Error): Record<string, any> {\n    if ('toJSON' in input && typeof input.toJSON === 'function') {\n        const output = input.toJSON();\n        if (isObject(output)) {\n            return output;\n        }\n    }\n\n    return {\n        ...input,\n        name: input.name,\n        message: input.message,\n    };\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from './constants.ts';\n\n/**\n * Default mapping from `ErrorCode` to HTTP status. Adapters apply this and\n * may layer their own overrides on top. Codes not listed here fall back\n * to 400 (Bad Request) — which is the right default for \"validation /\n * malformed-request\" style errors.\n *\n * The mapping mirrors the HTTP statuses produced by the pre-refactor\n * `@ebec/http`-coupled error classes, with one intentional change:\n *\n * - `OAUTH_CLIENT_INVALID`: 400 → **401**, per RFC 6749 §5.2 (`invalid_client`\n *   responses should use 401). Surfaces as a behavior change in HTTP-level\n *   tests asserting `status: 400, code: OAUTH_CLIENT_INVALID`.\n */\nexport const ERROR_CODE_TO_STATUS: Readonly<Partial<Record<`${ErrorCode}`, number>>> = {\n    // 401\n    [ErrorCode.OAUTH_CLIENT_INVALID]: 401,\n    [ErrorCode.HTTP_BEARER_TOKEN_MALFORMED]: 401,\n    [ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED]: 401,\n    [ErrorCode.IDENTITY_UNAUTHORIZED]: 401,\n\n    // 403\n    [ErrorCode.PERMISSION_NOT_FOUND]: 403,\n    [ErrorCode.PERMISSION_DENIED]: 403,\n    [ErrorCode.PERMISSION_EVALUATION_FAILED]: 403,\n\n    // 404\n    [ErrorCode.ENTITY_NOT_FOUND]: 404,\n    [ErrorCode.JWK_NOT_FOUND]: 404,\n\n    // 409\n    [ErrorCode.ENTITY_CONFLICT]: 409,\n\n    // 500\n    [ErrorCode.INTERNAL_ERROR]: 500,\n\n    // 507\n    [ErrorCode.STORAGE_INSUFFICIENT]: 507,\n};\n\n/**\n * Resolve an HTTP status for a given error code. Unknown codes fall back\n * to `fallback` (default 400).\n */\nexport function httpStatusFromCode(code: string, fallback = 400): number {\n    return ERROR_CODE_TO_STATUS[code as `${ErrorCode}`] ?? fallback;\n}\n\n/**\n * Resolve a semantic `ErrorCode` for a foreign HTTP status. Used at the\n * boundary where a non-AuthupError (e.g. `@ebec/http` HTTPError thrown by\n * the framework, or a foreign service response) enters our system and\n * needs to be normalized into an `AuthupError` with an authup-vocabulary\n * code. Status is the only stable handshake across the two vocabularies.\n *\n * Default mapping covers the common HTTP statuses. Anything 5xx\n * collapses to `INTERNAL_ERROR`; unknown 4xx collapses to `BAD_REQUEST`.\n */\nexport function codeFromHttpStatus(status: number): ErrorCode {\n    if (status === 404) return ErrorCode.ENTITY_NOT_FOUND;\n    if (status === 409) return ErrorCode.ENTITY_CONFLICT;\n    if (status === 401) return ErrorCode.IDENTITY_UNAUTHORIZED;\n    if (status === 403) return ErrorCode.PERMISSION_DENIED;\n    if (status === 507) return ErrorCode.STORAGE_INSUFFICIENT;\n    if (status >= 500) return ErrorCode.INTERNAL_ERROR;\n    return ErrorCode.BAD_REQUEST;\n}\n"],"mappings":";;AAOA,IAAY,YAAL,yBAAA,WAAA;CAEH,UAAA,iBAAA;CACA,UAAA,oBAAA;CAGA,UAAA,uCAAA;CACA,UAAA,iCAAA;CAGA,UAAA,2BAAA;CAGA,UAAA,gCAAA;CACA,UAAA,qBAAA;CACA,UAAA,sBAAA;CACA,UAAA,qBAAA;CACA,UAAA,6BAAA;CAGA,UAAA,2BAAA;CACA,UAAA,gCAAA;CACA,UAAA,iCAAA;CACA,UAAA,yBAAA;CAGA,UAAA,0BAAA;CAGA,UAAA,iBAAA;CACA,UAAA,mBAAA;CAGA,UAAA,iBAAA;CACA,UAAA,kBAAA;CACA,UAAA,iBAAA;CAGA,UAAA,iCAAA;CACA,UAAA,0BAAA;CACA,UAAA,+BAAA;CACA,UAAA,yBAAA;CACA,UAAA,kCAAA;CACA,UAAA,2BAAA;CACA,UAAA,0BAAA;CACA,UAAA,gCAAA;CACA,UAAA,sCAAA;CACA,UAAA,4BAAA;CACA,UAAA,qCAAA;CACA,UAAA,yBAAA;CACA,UAAA,8BAAA;CAGA,UAAA,0BAAA;CACA,UAAA,uBAAA;CACA,UAAA,kCAAA;CAGA,UAAA,gCAAA;CACA,UAAA,sCAAA;CACA,UAAA,sCAAA;;AACJ,EAAA,CAAA,CAAA;;;ACzDA,MAAa,wBAAwB,OAAO,IAAI,4BAA4B;AAE5E,IAAa,cAAb,cAAiC,UAAU;CACvC;CAEA;CAEA,YAAY,OAA0B;EAClC,MAAM,KAAK;EACX,iBAAe,MAAM,qBAAqB;EAE1C,KAAK,SAAS,CAAC;EAEf,IAAI,SAAS,OAAO,UAAU,YAAY,MAAM,MAC5C,KAAK,OAAO,MAAM;CAE1B;CAEA,SAAkB;EACd,OAAO;GACH,GAAG,MAAM,OAAO;GAChB,QAAQ,KAAK;GACb,GAAI,KAAK,QAAQ,CAAC;EACtB;CACJ;AACJ;;;ACxBA,MAAa,8BAA8B,OAAO,IAAI,kCAAkC;AAExF,IAAa,oBAAb,cAAuC,YAAY;CAC/C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAJgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAKhG,CAAC;EACD,iBAAe,MAAM,2BAA2B;CACpD;AACJ;;;ACbA,MAAa,6BAA6B,OAAO,IAAI,gCAAgC;AAErF,IAAa,kBAAb,MAAa,wBAAwB,kBAAkB;CACnD,YAAY,SAAiB;EACzB,MAAM;GACF,MAAA;GACA;EACJ,CAAC;EACD,iBAAe,MAAM,0BAA0B;CACnD;CAEA,OAAO,gBAAgB,MAAc;EACjC,OAAO,IAAI,gBAAgB,iCAAiC,KAAK,mBAAmB;CACxF;AACJ;;;ACbA,MAAa,6BAA6B,OAAO,IAAI,gCAAgC;AAErF,IAAa,kBAAb,cAAqC,YAAY;CAC7C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,GAHgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAIhG,CAAC;EACD,iBAAe,MAAM,0BAA0B;CACnD;AACJ;;;ACZA,MAAa,wCAAwC,OAAO,IAAI,0CAA0C;AAE1G,IAAa,4BAAb,cAA+C,kBAAkB;CAC7D,YAAY,SAAkB;EAC1B,MAAM;GACF,MAAA;GACA,SAAS,WAAW;EACxB,CAAC;EACD,iBAAe,MAAM,qCAAqC;CAC9D;AACJ;;;;;;;;;;;;ACIA,SAAgB,QAAQ,OAAgC;CACpD,OAAOA,UAAW,KAAK;AAC3B;;;;;;;;;;;;AAaA,SAAgB,cAAc,OAAsC;CAChE,IAAIC,gBAAc,OAAO,qBAAqB,GAC1C,OAAO;CAGX,IAAI,CAAC,YAAY,KAAK,GAClB,OAAO;CAGX,IAAI,CAAC,SAAS,KAAK,GACf,OAAO;CAGX,OAAO,MAAM,QAAQ,MAAM,MAAM;AACrC;;;AC1CA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAE7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,oBAAoB;GACpD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACbA,MAAa,4CAA4C,OAAO,IAAI,8CAA8C;AAElH,IAAa,gCAAb,cAAmD,YAAY;CAC3D,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,6BAA6B;GAC7D,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,yCAAyC;CAClE;AACJ;;;ACbA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAE7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,iBAAiB;GACjD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACbA,MAAa,kCAAkC,OAAO,IAAI,oCAAoC;AAE9F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,mBAAmB;GACnD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,+BAA+B;CACxD;AACJ;;;ACbA,MAAa,0BAA0B,OAAO,IAAI,8BAA8B;AAEhF,IAAa,gBAAb,cAAmC,YAAY;CAC3C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAJgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAKhG,CAAC;EACD,iBAAe,MAAM,uBAAuB;CAChD;AACJ;;;ACJA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIC,gBAAc,OAAO,0BAA0B,GAAG,OAAO;CAC7D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,4BAA4B,OAAoD;CAC5F,IAAIA,gBAAc,OAAO,qCAAqC,GAAG,OAAO;CACxE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIA,gBAAc,OAAO,0BAA0B,GAAG,OAAO;CAC7D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,oBAAoB,OAA4C;CAC5E,IAAIA,gBAAc,OAAO,2BAA2B,GAAG,OAAO;CAC9D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,+BAA+B,GAAG,OAAO;CAClE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,8BAA8B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,8BAA8B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,gCAAgC,OAAwD;CACpG,IAAIA,gBAAc,OAAO,yCAAyC,GAAG,OAAO;CAC5E,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,gBAAgB,OAAwC;CACpE,IAAIA,gBAAc,OAAO,uBAAuB,GAAG,OAAO;CAC1D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;;;;;;;;;;;;ACtDA,SAAgB,eAAe,OAAuB;CAClD,IAAI,QAAQ,KAAK,GACb,OAAO;CAGX,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,MAAM,KAAK;CAG1B,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC;AAClC;;;;;;;;;;;;;;;;ACNA,SAAgB,eAAe,OAAmC;CAC9D,IAAI,YAAY,SAAS,OAAO,MAAM,WAAW,YAAY;EACzD,MAAM,SAAS,MAAM,OAAO;EAC5B,IAAI,SAAS,MAAM,GACf,OAAO;CAEf;CAEA,OAAO;EACH,GAAG;EACH,MAAM,MAAM;EACZ,SAAS,MAAM;CACnB;AACJ;;;;;;;;;;;;;;;;ACbA,MAAa,uBAA0E;qBAEjD;6BACO;mCACM;4BACZ;2BAGD;wBACH;mCACW;uBAGZ;oBACH;sBAGE;qBAGD;2BAGM;AACtC;;;;;AAMA,SAAgB,mBAAmB,MAAc,WAAW,KAAa;CACrE,OAAO,qBAAqB,SAA2B;AAC3D;;;;;;;;;;;AAYA,SAAgB,mBAAmB,QAA2B;CAC1D,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,UAAU,KAAK,OAAA;CACnB,OAAA;AACJ"}
+{"version":3,"file":"index.mjs","names":["isRawError","hasInstanceof","hasInstanceof"],"sources":["../src/constants.ts","../src/module.ts","../src/built-in/unauthorized.ts","../src/built-in/auth-header.ts","../src/built-in/bad-request.ts","../src/built-in/bearer-token.ts","../src/check.ts","../src/built-in/validation.ts","../src/built-in/entity-conflict.ts","../src/built-in/entity-credentials-invalid.ts","../src/built-in/entity-inactive.ts","../src/built-in/entity-not-found.ts","../src/built-in/internal.ts","../src/built-in/login-throttled.ts","../src/built-in/mfa-throttled.ts","../src/built-in/check.ts","../src/normalize.ts","../src/serialize.ts","../src/status.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum ErrorCode {\n    // Generic\n    BAD_REQUEST = 'bad_request',\n    INTERNAL_ERROR = 'internal_error',\n\n    // HTTP Codes\n    HTTP_HEADER_AUTH_TYPE_UNSUPPORTED = 'unsupported_auth_header_type',\n    HTTP_BEARER_TOKEN_MALFORMED = 'bearer_token_malformed',\n\n    // Identity Auth\n    IDENTITY_UNAUTHORIZED = 'identity_unauthorized',\n\n    // Entity Codes\n    ENTITY_CREDENTIALS_INVALID = 'invalid_credentials',\n    ENTITY_INACTIVE = 'entity_inactive',\n    ENTITY_NOT_FOUND = 'entity_not_found',\n    ENTITY_CONFLICT = 'entity_conflict',\n    ENTITY_RELATION_INVALID = 'entity_relation_invalid',\n\n    // Identity Codes\n    REGISTRATION_DISABLED = 'registration_disabled',\n    PASSWORD_RECOVERY_DISABLED = 'password_recovery_disabled',\n    EMAIL_VERIFICATION_REQUIRED = 'email_verification_required',\n    RESET_TOKEN_EXPIRED = 'reset_token_expired',\n    LOGIN_ATTEMPT_THROTTLED = 'login_attempt_throttled',\n    MFA_ATTEMPT_THROTTLED = 'mfa_attempt_throttled',\n    MFA_NOT_CONFIGURABLE = 'mfa_not_configurable',\n\n    // Storage Codes\n    STORAGE_INSUFFICIENT = 'storage_insufficient',\n\n    // JWK Codes\n    JWK_INVALID = 'jwk_invalid',\n    JWK_NOT_FOUND = 'jwk_not_found',\n\n    // JWT Codes\n    JWT_INVALID = 'invalid_token',\n    JWT_INACTIVE = 'inactive_token',\n    JWT_EXPIRED = 'expired_token',\n\n    // Oauth2 Codes\n    OAUTH_REDIRECT_URI_MISMATCH = 'redirect_uri_mismatch',\n    OAUTH_CLIENT_INVALID = 'invalid_client',\n    OAUTH_CLIENT_UNAUTHORIZED = 'unauthorized_client',\n    OAUTH_GRANT_INVALID = 'invalid_grant',\n    OAUTH_GRANT_TYPE_UNSUPPORTED = 'unsupported_token_grant_type',\n    OAUTH_REQUEST_INVALID = 'invalid_request',\n    OAUTH_LOGIN_REQUIRED = 'login_required',\n    OAUTH_MFA_REQUIRED = 'mfa_required',\n    OAUTH_ACCESS_DENIED = 'access_denied',\n    OAUTH_INTERACTION_REQUIRED = 'interaction_required',\n    OAUTH_ACCOUNT_SELECTION_REQUIRED = 'account_selection_required',\n    OAUTH_CONSENT_REQUIRED = 'consent_required',\n    OAUTH_RESPONSE_TYPE_UNSUPPORTED = 'unsupported_response_type',\n    OAUTH_SCOPE_INVALID = 'invalid_scope',\n    OAUTH_SCOPE_INSUFFICIENT = 'insufficient_scope',\n\n    // Permission Codes\n    PERMISSION_NOT_FOUND = 'permission_not_found',\n    PERMISSION_DENIED = 'permission_denied',\n    PERMISSION_EVALUATION_FAILED = 'permission_evaluation_failed',\n\n    // Policy Codes\n    POLICY_EVALUATOR_NOT_FOUND = 'policy_evaluator_not_found',\n    POLICY_EVALUATOR_NOT_PROCESSABLE = 'policy_evaluator_not_processable',\n    POLICY_EVALUATOR_CONTEXT_INVALID = 'policy_evaluator_context_invalid',\n}\n","/*\n * Copyright (c) 2024-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AuthupErrorInput } from './types.ts';\nimport { BaseError, markInstanceof } from '@ebec/core';\nimport type { Issue } from 'validup';\n\nexport const AUTHUP_ERROR_INSTANCE = Symbol.for('@authup/errors/AuthupError');\n\nexport class AuthupError extends BaseError {\n    public readonly issues: Issue[];\n\n    public readonly data?: Record<string, any>;\n\n    constructor(input?: AuthupErrorInput) {\n        super(input);\n        markInstanceof(this, AUTHUP_ERROR_INSTANCE);\n\n        this.issues = [];\n\n        if (input && typeof input !== 'string' && input.data) {\n            this.data = input.data;\n        }\n    }\n\n    override toJSON() {\n        return {\n            ...super.toJSON(),\n            issues: this.issues,\n            ...(this.data ?? {}),\n        };\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const UNAUTHORIZED_ERROR_INSTANCE = Symbol.for('@authup/errors/UnauthorizedError');\n\nexport class UnauthorizedError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.IDENTITY_UNAUTHORIZED,\n            message: 'Authentication required.',\n            ...options,\n        });\n        markInstanceof(this, UNAUTHORIZED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { UnauthorizedError } from './unauthorized.ts';\n\nexport const AUTH_HEADER_ERROR_INSTANCE = Symbol.for('@authup/errors/AuthHeaderError');\n\nexport class AuthHeaderError extends UnauthorizedError {\n    constructor(message: string) {\n        super({\n            code: ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED,\n            message,\n        });\n        markInstanceof(this, AUTH_HEADER_ERROR_INSTANCE);\n    }\n\n    static unsupportedType(type: string) {\n        return new AuthHeaderError(`The authorization header type ${type} is not supported.`);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const BAD_REQUEST_ERROR_INSTANCE = Symbol.for('@authup/errors/BadRequestError');\n\nexport class BadRequestError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.BAD_REQUEST,\n            ...options,\n        });\n        markInstanceof(this, BAD_REQUEST_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { UnauthorizedError } from './unauthorized.ts';\n\nexport const BEARER_TOKEN_MALFORMED_ERROR_INSTANCE = Symbol.for('@authup/errors/BearerTokenMalformedError');\n\nexport class BearerTokenMalformedError extends UnauthorizedError {\n    constructor(message?: string) {\n        super({\n            code: ErrorCode.HTTP_BEARER_TOKEN_MALFORMED,\n            message: message ?? 'The Authorization header is malformed.',\n        });\n        markInstanceof(this, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    hasInstanceof,\n    isBaseError,\n    isObject,\n    isError as isRawError,\n} from '@ebec/core';\nimport type { AuthupError } from './module.ts';\nimport { AUTHUP_ERROR_INSTANCE } from './module.ts';\n\n/**\n * Duck-type guard for `Error`.\n *\n * Re-exports `@ebec/core`'s shape-based check: `input` matches when it\n * carries the standard `name` / `message` / `stack` triplet, regardless\n * of which realm or class hierarchy produced it. Use this instead of\n * `instanceof Error` for cross-realm boundaries (worker threads,\n * duplicate-module copies) where `instanceof` can yield false negatives.\n */\nexport function isError(input: unknown): input is Error {\n    return isRawError(input);\n}\n\n/**\n * Duck-type guard for AuthupError.\n *\n * Fast path: input has the AuthupError marker in its `@instanceof` chain.\n * Subclass instances also accumulate this marker, so this guard matches any\n * AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).\n *\n * Slow path: input is shape-compatible with AuthupError (BaseError + has\n * `issues: Issue[]`). Catches cases where the marker is missing — plain\n * objects rehydrated from JSON, older builds without the marker.\n */\nexport function isAuthupError(input: unknown): input is AuthupError {\n    if (hasInstanceof(input, AUTHUP_ERROR_INSTANCE)) {\n        return true;\n    }\n\n    if (!isBaseError(input)) {\n        return false;\n    }\n\n    if (!isObject(input)) {\n        return false;\n    }\n\n    return Array.isArray(input.issues);\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const VALIDATION_ERROR_INSTANCE = Symbol.for('@authup/errors/ValidationError');\n\n/**\n * A domain/business-rule violation raised by core logic. Deliberately NOT\n * named after an HTTP status: core code stays transport-agnostic, and the HTTP\n * adapter maps its `ErrorCode.BAD_REQUEST` to a 400 response\n * (`httpStatusFromCode`). Prefer this over `BadRequestError` in `core/**`.\n */\nexport class ValidationError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.BAD_REQUEST,\n            ...options,\n        });\n        markInstanceof(this, VALIDATION_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_CONFLICT_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityConflictError');\n\nexport class EntityConflictError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_CONFLICT,\n            message: entity ? `The ${entity} already exists.` : 'Entity already exists.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_CONFLICT_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityCredentialsInvalidError');\n\nexport class EntityCredentialsInvalidError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_CREDENTIALS_INVALID,\n            message: entity ? `The ${entity} credentials are invalid.` : 'Credentials are invalid.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_INACTIVE_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityInactiveError');\n\nexport class EntityInactiveError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_INACTIVE,\n            message: entity ? `The ${entity} is inactive.` : 'Entity is inactive.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_INACTIVE_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_NOT_FOUND_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityNotFoundError');\n\nexport class EntityNotFoundError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_NOT_FOUND,\n            message: entity ? `The ${entity} was not found.` : 'Entity not found.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_NOT_FOUND_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const INTERNAL_ERROR_INSTANCE = Symbol.for('@authup/errors/InternalError');\n\nexport class InternalError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.INTERNAL_ERROR,\n            message: 'An internal error occurred.',\n            ...options,\n        });\n        markInstanceof(this, INTERNAL_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const LOGIN_THROTTLED_ERROR_INSTANCE = Symbol.for('@authup/errors/LoginThrottledError');\n\nexport type LoginThrottledErrorOptions = AuthupErrorOptions & {\n    /**\n     * Seconds until the sliding throttle window can release the pair.\n     */\n    retryAfter?: number,\n};\n\nexport class LoginThrottledError extends AuthupError {\n    constructor(input?: LoginThrottledErrorOptions) {\n        const { retryAfter, ...rest } = input ?? {};\n        super({\n            code: ErrorCode.LOGIN_ATTEMPT_THROTTLED,\n            message: 'Too many failed login attempts. Please try again later.',\n            ...rest,\n            data: {\n                ...(typeof retryAfter === 'number' ? { retryAfter } : {}),\n                ...(rest.data ?? {}),\n            },\n        });\n        markInstanceof(this, LOGIN_THROTTLED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const MFA_THROTTLED_ERROR_INSTANCE = Symbol.for('@authup/errors/MfaThrottledError');\n\nexport type MfaThrottledErrorOptions = AuthupErrorOptions & {\n    /**\n     * Seconds until the exponential backoff releases the account.\n     */\n    retryAfter?: number,\n};\n\nexport class MfaThrottledError extends AuthupError {\n    constructor(input?: MfaThrottledErrorOptions) {\n        const { retryAfter, ...rest } = input ?? {};\n        super({\n            code: ErrorCode.MFA_ATTEMPT_THROTTLED,\n            message: 'Too many failed verification attempts. Please try again later.',\n            ...rest,\n            data: {\n                ...(typeof retryAfter === 'number' ? { retryAfter } : {}),\n                ...(rest.data ?? {}),\n            },\n        });\n        markInstanceof(this, MFA_THROTTLED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isAuthupError } from '../check.ts';\nimport { ErrorCode } from '../constants.ts';\nimport { hasInstanceof } from '@ebec/core';\nimport { AUTH_HEADER_ERROR_INSTANCE, type AuthHeaderError } from './auth-header.ts';\nimport { BAD_REQUEST_ERROR_INSTANCE, type BadRequestError } from './bad-request.ts';\nimport { VALIDATION_ERROR_INSTANCE, type ValidationError } from './validation.ts';\nimport { BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, type BearerTokenMalformedError } from './bearer-token.ts';\nimport { ENTITY_CONFLICT_ERROR_INSTANCE, type EntityConflictError } from './entity-conflict.ts';\nimport { ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, type EntityCredentialsInvalidError } from './entity-credentials-invalid.ts';\nimport { ENTITY_INACTIVE_ERROR_INSTANCE, type EntityInactiveError } from './entity-inactive.ts';\nimport { ENTITY_NOT_FOUND_ERROR_INSTANCE, type EntityNotFoundError } from './entity-not-found.ts';\nimport { INTERNAL_ERROR_INSTANCE, type InternalError } from './internal.ts';\nimport { LOGIN_THROTTLED_ERROR_INSTANCE, type LoginThrottledError } from './login-throttled.ts';\nimport { MFA_THROTTLED_ERROR_INSTANCE, type MfaThrottledError } from './mfa-throttled.ts';\nimport { UNAUTHORIZED_ERROR_INSTANCE, type UnauthorizedError } from './unauthorized.ts';\n\nexport function isAuthHeaderError(input: unknown): input is AuthHeaderError {\n    if (hasInstanceof(input, AUTH_HEADER_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED;\n}\n\nexport function isBearerTokenMalformedError(input: unknown): input is BearerTokenMalformedError {\n    if (hasInstanceof(input, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.HTTP_BEARER_TOKEN_MALFORMED;\n}\n\nexport function isBadRequestError(input: unknown): input is BadRequestError {\n    if (hasInstanceof(input, BAD_REQUEST_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.BAD_REQUEST;\n}\n\nexport function isValidationError(input: unknown): input is ValidationError {\n    if (hasInstanceof(input, VALIDATION_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.BAD_REQUEST;\n}\n\nexport function isUnauthorizedError(input: unknown): input is UnauthorizedError {\n    if (hasInstanceof(input, UNAUTHORIZED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.IDENTITY_UNAUTHORIZED;\n}\n\nexport function isEntityNotFoundError(input: unknown): input is EntityNotFoundError {\n    if (hasInstanceof(input, ENTITY_NOT_FOUND_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_NOT_FOUND;\n}\n\nexport function isEntityConflictError(input: unknown): input is EntityConflictError {\n    if (hasInstanceof(input, ENTITY_CONFLICT_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_CONFLICT;\n}\n\nexport function isEntityInactiveError(input: unknown): input is EntityInactiveError {\n    if (hasInstanceof(input, ENTITY_INACTIVE_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_INACTIVE;\n}\n\nexport function isEntityCredentialsInvalidError(input: unknown): input is EntityCredentialsInvalidError {\n    if (hasInstanceof(input, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_CREDENTIALS_INVALID;\n}\n\nexport function isInternalError(input: unknown): input is InternalError {\n    if (hasInstanceof(input, INTERNAL_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.INTERNAL_ERROR;\n}\n\nexport function isLoginThrottledError(input: unknown): input is LoginThrottledError {\n    if (hasInstanceof(input, LOGIN_THROTTLED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.LOGIN_ATTEMPT_THROTTLED;\n}\n\nexport function isMfaThrottledError(input: unknown): input is MfaThrottledError {\n    if (hasInstanceof(input, MFA_THROTTLED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.MFA_ATTEMPT_THROTTLED;\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isError } from './check.ts';\n\n/**\n * Normalize an arbitrary thrown value into an `Error` instance.\n *\n * Useful at error-pipeline boundaries (catch blocks, error middleware,\n * fallbacks) where TypeScript hands you `unknown` but downstream code\n * wants a real `Error` to inspect or rethrow. Duck-typed: any value\n * passing `isError` is returned as-is. Strings become `new Error(str)`;\n * any other value is stringified.\n */\nexport function normalizeError(input: unknown): Error {\n    if (isError(input)) {\n        return input;\n    }\n\n    if (typeof input === 'string') {\n        return new Error(input);\n    }\n\n    return new Error(String(input));\n}\n\n","/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { isObject } from '@ebec/core';\n\n/**\n * Convert an `Error` (or any value with a `toJSON()` method) into a\n * plain object suitable for embedding in a JSON response body.\n *\n * Calls `input.toJSON()` if present — preserves every attribute the\n * error chose to surface (`code`, `cause`, `errors`, `issues`, `data`,\n * AuthupError sub-class fields, ...). Falls back to spreading the\n * Error's enumerable own properties alongside the standard\n * `name` / `message` pair, so caller-attached fields survive.\n *\n * Pair with `normalizeError` to handle arbitrary thrown values:\n * `serializeError(normalizeError(e))`.\n */\nexport function serializeError(input: Error): Record<string, any> {\n    if ('toJSON' in input && typeof input.toJSON === 'function') {\n        const output = input.toJSON();\n        if (isObject(output)) {\n            return output;\n        }\n    }\n\n    return {\n        ...input,\n        name: input.name,\n        message: input.message,\n    };\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from './constants.ts';\n\n/**\n * Default mapping from `ErrorCode` to HTTP status. Adapters apply this and\n * may layer their own overrides on top. Codes not listed here fall back\n * to 400 (Bad Request) — which is the right default for \"validation /\n * malformed-request\" style errors.\n *\n * The mapping mirrors the HTTP statuses produced by the pre-refactor\n * `@ebec/http`-coupled error classes, with one intentional change:\n *\n * - `OAUTH_CLIENT_INVALID`: 400 → **401**, per RFC 6749 §5.2 (`invalid_client`\n *   responses should use 401). Surfaces as a behavior change in HTTP-level\n *   tests asserting `status: 400, code: OAUTH_CLIENT_INVALID`.\n */\nexport const ERROR_CODE_TO_STATUS: Readonly<Partial<Record<`${ErrorCode}`, number>>> = {\n    // 401\n    [ErrorCode.OAUTH_CLIENT_INVALID]: 401,\n    [ErrorCode.HTTP_BEARER_TOKEN_MALFORMED]: 401,\n    [ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED]: 401,\n    [ErrorCode.IDENTITY_UNAUTHORIZED]: 401,\n\n    // 403\n    [ErrorCode.PERMISSION_NOT_FOUND]: 403,\n    [ErrorCode.PERMISSION_DENIED]: 403,\n    [ErrorCode.PERMISSION_EVALUATION_FAILED]: 403,\n\n    // 404\n    [ErrorCode.ENTITY_NOT_FOUND]: 404,\n    [ErrorCode.JWK_NOT_FOUND]: 404,\n\n    // 409\n    [ErrorCode.ENTITY_CONFLICT]: 409,\n\n    // 429\n    [ErrorCode.LOGIN_ATTEMPT_THROTTLED]: 429,\n    [ErrorCode.MFA_ATTEMPT_THROTTLED]: 429,\n\n    // 500\n    [ErrorCode.INTERNAL_ERROR]: 500,\n\n    // 507\n    [ErrorCode.STORAGE_INSUFFICIENT]: 507,\n};\n\n/**\n * Resolve an HTTP status for a given error code. Unknown codes fall back\n * to `fallback` (default 400).\n */\nexport function httpStatusFromCode(code: string, fallback = 400): number {\n    return ERROR_CODE_TO_STATUS[code as `${ErrorCode}`] ?? fallback;\n}\n\n/**\n * Resolve a semantic `ErrorCode` for a foreign HTTP status. Used at the\n * boundary where a non-AuthupError (e.g. `@ebec/http` HTTPError thrown by\n * the framework, or a foreign service response) enters our system and\n * needs to be normalized into an `AuthupError` with an authup-vocabulary\n * code. Status is the only stable handshake across the two vocabularies.\n *\n * Default mapping covers the common HTTP statuses. Anything 5xx\n * collapses to `INTERNAL_ERROR`; unknown 4xx collapses to `BAD_REQUEST`.\n */\nexport function codeFromHttpStatus(status: number): ErrorCode {\n    if (status === 404) return ErrorCode.ENTITY_NOT_FOUND;\n    if (status === 409) return ErrorCode.ENTITY_CONFLICT;\n    if (status === 401) return ErrorCode.IDENTITY_UNAUTHORIZED;\n    if (status === 403) return ErrorCode.PERMISSION_DENIED;\n    if (status === 429) return ErrorCode.LOGIN_ATTEMPT_THROTTLED;\n    if (status === 507) return ErrorCode.STORAGE_INSUFFICIENT;\n    if (status >= 500) return ErrorCode.INTERNAL_ERROR;\n    return ErrorCode.BAD_REQUEST;\n}\n"],"mappings":";;AAOA,IAAY,YAAL,yBAAA,WAAA;CAEH,UAAA,iBAAA;CACA,UAAA,oBAAA;CAGA,UAAA,uCAAA;CACA,UAAA,iCAAA;CAGA,UAAA,2BAAA;CAGA,UAAA,gCAAA;CACA,UAAA,qBAAA;CACA,UAAA,sBAAA;CACA,UAAA,qBAAA;CACA,UAAA,6BAAA;CAGA,UAAA,2BAAA;CACA,UAAA,gCAAA;CACA,UAAA,iCAAA;CACA,UAAA,yBAAA;CACA,UAAA,6BAAA;CACA,UAAA,2BAAA;CACA,UAAA,0BAAA;CAGA,UAAA,0BAAA;CAGA,UAAA,iBAAA;CACA,UAAA,mBAAA;CAGA,UAAA,iBAAA;CACA,UAAA,kBAAA;CACA,UAAA,iBAAA;CAGA,UAAA,iCAAA;CACA,UAAA,0BAAA;CACA,UAAA,+BAAA;CACA,UAAA,yBAAA;CACA,UAAA,kCAAA;CACA,UAAA,2BAAA;CACA,UAAA,0BAAA;CACA,UAAA,wBAAA;CACA,UAAA,yBAAA;CACA,UAAA,gCAAA;CACA,UAAA,sCAAA;CACA,UAAA,4BAAA;CACA,UAAA,qCAAA;CACA,UAAA,yBAAA;CACA,UAAA,8BAAA;CAGA,UAAA,0BAAA;CACA,UAAA,uBAAA;CACA,UAAA,kCAAA;CAGA,UAAA,gCAAA;CACA,UAAA,sCAAA;CACA,UAAA,sCAAA;;AACJ,EAAA,CAAA,CAAA;;;AC9DA,MAAa,wBAAwB,OAAO,IAAI,4BAA4B;AAE5E,IAAa,cAAb,cAAiC,UAAU;CACvC;CAEA;CAEA,YAAY,OAA0B;EAClC,MAAM,KAAK;EACX,iBAAe,MAAM,qBAAqB;EAE1C,KAAK,SAAS,CAAC;EAEf,IAAI,SAAS,OAAO,UAAU,YAAY,MAAM,MAC5C,KAAK,OAAO,MAAM;CAE1B;CAEA,SAAkB;EACd,OAAO;GACH,GAAG,MAAM,OAAO;GAChB,QAAQ,KAAK;GACb,GAAI,KAAK,QAAQ,CAAC;EACtB;CACJ;AACJ;;;ACxBA,MAAa,8BAA8B,OAAO,IAAI,kCAAkC;AAExF,IAAa,oBAAb,cAAuC,YAAY;CAC/C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAJgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAKhG,CAAC;EACD,iBAAe,MAAM,2BAA2B;CACpD;AACJ;;;ACbA,MAAa,6BAA6B,OAAO,IAAI,gCAAgC;AAErF,IAAa,kBAAb,MAAa,wBAAwB,kBAAkB;CACnD,YAAY,SAAiB;EACzB,MAAM;GACF,MAAA;GACA;EACJ,CAAC;EACD,iBAAe,MAAM,0BAA0B;CACnD;CAEA,OAAO,gBAAgB,MAAc;EACjC,OAAO,IAAI,gBAAgB,iCAAiC,KAAK,mBAAmB;CACxF;AACJ;;;ACbA,MAAa,6BAA6B,OAAO,IAAI,gCAAgC;AAErF,IAAa,kBAAb,cAAqC,YAAY;CAC7C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,GAHgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAIhG,CAAC;EACD,iBAAe,MAAM,0BAA0B;CACnD;AACJ;;;ACZA,MAAa,wCAAwC,OAAO,IAAI,0CAA0C;AAE1G,IAAa,4BAAb,cAA+C,kBAAkB;CAC7D,YAAY,SAAkB;EAC1B,MAAM;GACF,MAAA;GACA,SAAS,WAAW;EACxB,CAAC;EACD,iBAAe,MAAM,qCAAqC;CAC9D;AACJ;;;;;;;;;;;;ACIA,SAAgB,QAAQ,OAAgC;CACpD,OAAOA,UAAW,KAAK;AAC3B;;;;;;;;;;;;AAaA,SAAgB,cAAc,OAAsC;CAChE,IAAIC,gBAAc,OAAO,qBAAqB,GAC1C,OAAO;CAGX,IAAI,CAAC,YAAY,KAAK,GAClB,OAAO;CAGX,IAAI,CAAC,SAAS,KAAK,GACf,OAAO;CAGX,OAAO,MAAM,QAAQ,MAAM,MAAM;AACrC;;;AC1CA,MAAa,4BAA4B,OAAO,IAAI,gCAAgC;;;;;;;AAQpF,IAAa,kBAAb,cAAqC,YAAY;CAC7C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,GAHgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAIhG,CAAC;EACD,iBAAe,MAAM,yBAAyB;CAClD;AACJ;;;ACjBA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAE7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,oBAAoB;GACpD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACbA,MAAa,4CAA4C,OAAO,IAAI,8CAA8C;AAElH,IAAa,gCAAb,cAAmD,YAAY;CAC3D,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,6BAA6B;GAC7D,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,yCAAyC;CAClE;AACJ;;;ACbA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAE7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,iBAAiB;GACjD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACbA,MAAa,kCAAkC,OAAO,IAAI,oCAAoC;AAE9F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,mBAAmB;GACnD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,+BAA+B;CACxD;AACJ;;;ACbA,MAAa,0BAA0B,OAAO,IAAI,8BAA8B;AAEhF,IAAa,gBAAb,cAAmC,YAAY;CAC3C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAJgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAKhG,CAAC;EACD,iBAAe,MAAM,uBAAuB;CAChD;AACJ;;;ACZA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAS7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAAoC;EAC5C,MAAM,EAAE,YAAY,GAAG,SAAS,SAAS,CAAC;EAC1C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAAG;GACH,MAAM;IACF,GAAI,OAAO,eAAe,WAAW,EAAE,WAAW,IAAI,CAAC;IACvD,GAAI,KAAK,QAAQ,CAAC;GACtB;EACJ,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACvBA,MAAa,+BAA+B,OAAO,IAAI,kCAAkC;AASzF,IAAa,oBAAb,cAAuC,YAAY;CAC/C,YAAY,OAAkC;EAC1C,MAAM,EAAE,YAAY,GAAG,SAAS,SAAS,CAAC;EAC1C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAAG;GACH,MAAM;IACF,GAAI,OAAO,eAAe,WAAW,EAAE,WAAW,IAAI,CAAC;IACvD,GAAI,KAAK,QAAQ,CAAC;GACtB;EACJ,CAAC;EACD,iBAAe,MAAM,4BAA4B;CACrD;AACJ;;;ACZA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIC,gBAAc,OAAO,0BAA0B,GAAG,OAAO;CAC7D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,4BAA4B,OAAoD;CAC5F,IAAIA,gBAAc,OAAO,qCAAqC,GAAG,OAAO;CACxE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIA,gBAAc,OAAO,0BAA0B,GAAG,OAAO;CAC7D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIA,gBAAc,OAAO,yBAAyB,GAAG,OAAO;CAC5D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,oBAAoB,OAA4C;CAC5E,IAAIA,gBAAc,OAAO,2BAA2B,GAAG,OAAO;CAC9D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,+BAA+B,GAAG,OAAO;CAClE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,8BAA8B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,8BAA8B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,gCAAgC,OAAwD;CACpG,IAAIA,gBAAc,OAAO,yCAAyC,GAAG,OAAO;CAC5E,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,gBAAgB,OAAwC;CACpE,IAAIA,gBAAc,OAAO,uBAAuB,GAAG,OAAO;CAC1D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,8BAA8B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,oBAAoB,OAA4C;CAC5E,IAAIA,gBAAc,OAAO,4BAA4B,GAAG,OAAO;CAC/D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;;;;;;;;;;;;AC3EA,SAAgB,eAAe,OAAuB;CAClD,IAAI,QAAQ,KAAK,GACb,OAAO;CAGX,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,MAAM,KAAK;CAG1B,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC;AAClC;;;;;;;;;;;;;;;;ACNA,SAAgB,eAAe,OAAmC;CAC9D,IAAI,YAAY,SAAS,OAAO,MAAM,WAAW,YAAY;EACzD,MAAM,SAAS,MAAM,OAAO;EAC5B,IAAI,SAAS,MAAM,GACf,OAAO;CAEf;CAEA,OAAO;EACH,GAAG;EACH,MAAM,MAAM;EACZ,SAAS,MAAM;CACnB;AACJ;;;;;;;;;;;;;;;;ACbA,MAAa,uBAA0E;qBAEjD;6BACO;mCACM;4BACZ;2BAGD;wBACH;mCACW;uBAGZ;oBACH;sBAGE;8BAGQ;4BACF;qBAGP;2BAGM;AACtC;;;;;AAMA,SAAgB,mBAAmB,MAAc,WAAW,KAAa;CACrE,OAAO,qBAAqB,SAA2B;AAC3D;;;;;;;;;;;AAYA,SAAgB,mBAAmB,QAA2B;CAC1D,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,UAAU,KAAK,OAAA;CACnB,OAAA;AACJ"}

package/dist/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,CAwBlF,CAAC;AAEF;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAM,GAAG,MAAM,CAEvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAQ5D"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,CA4BlF,CAAC;AAEF;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAM,GAAG,MAAM,CAEvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAS5D"}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@authup/errors",
     "type": "module",
-    "version": "1.0.0-beta.52",
+    "version": "1.0.0-beta.53",
     "description": "Package containing error codes and basic error classes.",
     "license": "Apache-2.0",
     "exports": {