@authup/errors 1.0.0-beta.56 → 1.0.0-beta.58

package/dist/check.d.ts

@@ -12,13 +12,14 @@ export declare function isError(input: unknown): input is Error;
 /**
  * Duck-type guard for AuthupError.
  *
- * Fast path: input has the AuthupError marker in its `@instanceof` chain.
- * Subclass instances also accumulate this marker, so this guard matches any
- * AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).
+ * Fast path: input has the AuthupError marker in its `@instanceof` chain —
+ * as the native symbol (in-process) or its serialized string form
+ * (JSON-rehydrated). Subclass instances also accumulate this marker, so this
+ * guard matches any AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).
  *
  * Slow path: input is shape-compatible with AuthupError (BaseError + has
  * `issues: Issue[]`). Catches cases where the marker is missing — plain
- * objects rehydrated from JSON, older builds without the marker.
+ * objects rehydrated from JSON emitted by older builds without the chain.
  */
 export declare function isAuthupError(input: unknown): input is AuthupError;
 //# sourceMappingURL=check.d.ts.map

package/dist/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,CAEtD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAclE"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../src/check.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,CAEtD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAclE"}

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { BASE_ERROR_INSTANCE, BaseError, ErrorOptions, INSTANCEOF_PROPERTY, hasInstanceof, markInstanceof } from "@ebec/core";
+import { BASE_ERROR_INSTANCE, BaseError, ErrorOptions, INSTANCEOF_PROPERTY, hasInstanceof, markInstanceof, matchesInstanceof, serializeInstanceofChain } from "@ebec/core";
 import { Issue } from "validup";
 //#region src/types.d.ts
 type AuthupErrorOptions = ErrorOptions & {
@@ -16,7 +16,13 @@ declare class AuthupError extends BaseError {
   readonly issues: Issue[];
   readonly data?: Record<string, any>;
   constructor(input?: AuthupErrorInput);
+  /**
+   * `super.toJSON()` already emits the serialized marker chain, but the
+   * `data` spread runs after it — re-stamped last so a `data` key cannot
+   * displace the genuine chain.
+   */
   toJSON(): {
+    "@instanceof": string[];
     issues: Issue[];
     name: string;
     message: string;
@@ -145,13 +151,14 @@ declare function isError(input: unknown): input is Error;
 /**
  * Duck-type guard for AuthupError.
  *
- * Fast path: input has the AuthupError marker in its `@instanceof` chain.
- * Subclass instances also accumulate this marker, so this guard matches any
- * AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).
+ * Fast path: input has the AuthupError marker in its `@instanceof` chain —
+ * as the native symbol (in-process) or its serialized string form
+ * (JSON-rehydrated). Subclass instances also accumulate this marker, so this
+ * guard matches any AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).
  *
  * Slow path: input is shape-compatible with AuthupError (BaseError + has
  * `issues: Issue[]`). Catches cases where the marker is missing — plain
- * objects rehydrated from JSON, older builds without the marker.
+ * objects rehydrated from JSON emitted by older builds without the chain.
  */
 declare function isAuthupError(input: unknown): input is AuthupError;
 //#endregion
@@ -263,5 +270,5 @@ declare function httpStatusFromCode(code: string, fallback?: number): number;
  */
 declare function codeFromHttpStatus(status: number): ErrorCode;
 //#endregion
-export { AUTHUP_ERROR_INSTANCE, AUTH_HEADER_ERROR_INSTANCE, AuthHeaderError, AuthupEntityErrorInput, AuthupEntityErrorOptions, AuthupError, AuthupErrorInput, AuthupErrorOptions, BAD_REQUEST_ERROR_INSTANCE, BASE_ERROR_INSTANCE, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, BadRequestError, BearerTokenMalformedError, ENTITY_CONFLICT_ERROR_INSTANCE, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, ENTITY_INACTIVE_ERROR_INSTANCE, ENTITY_NOT_FOUND_ERROR_INSTANCE, ERROR_CODE_TO_STATUS, EntityConflictError, EntityCredentialsInvalidError, EntityInactiveError, EntityNotFoundError, ErrorCode, INSTANCEOF_PROPERTY, INTERNAL_ERROR_INSTANCE, InternalError, LOGIN_THROTTLED_ERROR_INSTANCE, LoginThrottledError, LoginThrottledErrorOptions, MFA_THROTTLED_ERROR_INSTANCE, MfaThrottledError, MfaThrottledErrorOptions, UNAUTHORIZED_ERROR_INSTANCE, UnauthorizedError, VALIDATION_ERROR_INSTANCE, ValidationError, codeFromHttpStatus, hasInstanceof, httpStatusFromCode, isAuthHeaderError, isAuthupError, isBadRequestError, isBearerTokenMalformedError, isEntityConflictError, isEntityCredentialsInvalidError, isEntityInactiveError, isEntityNotFoundError, isError, isInternalError, isLoginThrottledError, isMfaThrottledError, isUnauthorizedError, isValidationError, markInstanceof, normalizeError, serializeError };
+export { AUTHUP_ERROR_INSTANCE, AUTH_HEADER_ERROR_INSTANCE, AuthHeaderError, AuthupEntityErrorInput, AuthupEntityErrorOptions, AuthupError, AuthupErrorInput, AuthupErrorOptions, BAD_REQUEST_ERROR_INSTANCE, BASE_ERROR_INSTANCE, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, BadRequestError, BearerTokenMalformedError, ENTITY_CONFLICT_ERROR_INSTANCE, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, ENTITY_INACTIVE_ERROR_INSTANCE, ENTITY_NOT_FOUND_ERROR_INSTANCE, ERROR_CODE_TO_STATUS, EntityConflictError, EntityCredentialsInvalidError, EntityInactiveError, EntityNotFoundError, ErrorCode, INSTANCEOF_PROPERTY, INTERNAL_ERROR_INSTANCE, InternalError, LOGIN_THROTTLED_ERROR_INSTANCE, LoginThrottledError, LoginThrottledErrorOptions, MFA_THROTTLED_ERROR_INSTANCE, MfaThrottledError, MfaThrottledErrorOptions, UNAUTHORIZED_ERROR_INSTANCE, UnauthorizedError, VALIDATION_ERROR_INSTANCE, ValidationError, codeFromHttpStatus, hasInstanceof, httpStatusFromCode, isAuthHeaderError, isAuthupError, isBadRequestError, isBearerTokenMalformedError, isEntityConflictError, isEntityCredentialsInvalidError, isEntityInactiveError, isEntityNotFoundError, isError, isInternalError, isLoginThrottledError, isMfaThrottledError, isUnauthorizedError, isValidationError, markInstanceof, matchesInstanceof, normalizeError, serializeError, serializeInstanceofChain };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/module.ts","../src/built-in/unauthorized.ts","../src/built-in/auth-header.ts","../src/built-in/bad-request.ts","../src/built-in/bearer-token.ts","../src/built-in/validation.ts","../src/built-in/entity-conflict.ts","../src/built-in/entity-credentials-invalid.ts","../src/built-in/entity-inactive.ts","../src/built-in/entity-not-found.ts","../src/built-in/internal.ts","../src/built-in/login-throttled.ts","../src/built-in/mfa-throttled.ts","../src/built-in/check.ts","../src/check.ts","../src/constants.ts","../src/normalize.ts","../src/serialize.ts","../src/status.ts"],"mappings":";;;KASY,qBAAqB;EAC7B,OAAO;;KAGC,4BAA4B;KAE5B,2BAA2B;EACnC;;KAGQ,kCAAkC;;;cCRjC;cAEA,oBAAoB;WACb,QAAQ;WAER,OAAO;EAEX,YAAA,QAAQ;EAWX;;;;;;;;;;;cCjBA;cAEA,0BAA0B;EACvB,YAAA,iBAAiB;;;;cCJpB;cAEA,wBAAwB;EACrB,YAAA;SAQL,gBAAgB,eAAY;;;;cCV1B;cAEA,wBAAwB;EACrB,YAAA,iBAAiB;;;;cCJpB;cAEA,kCAAkC;EAC/B,YAAA;;;;cCFH;;;;;;;cAQA,wBAAwB;EACrB,YAAA,iBAAiB;;;;cCTpB;cAEA,4BAA4B;EACzB,YAAA,iBAAiB;;;;cCHpB;cAEA,sCAAsC;EACnC,YAAA,iBAAiB;;;;cCHpB;cAEA,4BAA4B;EACzB,YAAA,iBAAiB;;;;cCHpB;cAEA,4BAA4B;EACzB,YAAA,iBAAiB;;;;cCHpB;cAEA,sBAAsB;EACnB,YAAA,iBAAiB;;;;cCHpB;KAED,6BAA6B;;;;EAIrC;;cAGS,4BAA4B;EACzB,YAAA,QAAQ;;;;cCVX;KAED,2BAA2B;;;;EAInC;;cAGS,0BAA0B;EACvB,YAAA,QAAQ;;;;iBCCR,kBAAkB,iBAAiB,SAAS;iBAM5C,4BAA4B,iBAAiB,SAAS;iBAMtD,kBAAkB,iBAAiB,SAAS;iBAM5C,kBAAkB,iBAAiB,SAAS;iBAM5C,oBAAoB,iBAAiB,SAAS;iBAM9C,sBAAsB,iBAAiB,SAAS;iBAMhD,sBAAsB,iBAAiB,SAAS;iBAMhD,sBAAsB,iBAAiB,SAAS;iBAMhD,gCAAgC,iBAAiB,SAAS;iBAM1D,gBAAgB,iBAAiB,SAAS;iBAM1C,sBAAsB,iBAAiB,SAAS;iBAMhD,oBAAoB,iBAAiB,SAAS;;;;;;;;;;;;iBChE9C,QAAQ,iBAAiB,SAAS;;;;;;;;;;;;iBAelC,cAAc,iBAAiB,SAAS;;;aCjC5C;EAER;EACA;EAGA;EACA;EAGA;EAGA;EACA;EACA;EACA;EACA;EAGA;EACA;EACA;EACA;EACA;EACA;EACA;EAGA;EAGA;EACA;EAGA;EACA;EACA;EAGA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAGA;EACA;EACA;EAGA;EACA;EACA;;;;;;;;;;;;;iBCtDY,eAAe,iBAAiB;;;;;;;;;;;;;;;;iBCIhC,eAAe,OAAO,QAAQ;;;;;;;;;;;;;;;;cCAjC,sBAAsB,SAAS,QAAQ,UAAU;;;;;iBAkC9C,mBAAmB,cAAc;;;;;;;;;;;iBAcjC,mBAAmB,iBAAiB"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/types.ts","../src/module.ts","../src/built-in/unauthorized.ts","../src/built-in/auth-header.ts","../src/built-in/bad-request.ts","../src/built-in/bearer-token.ts","../src/built-in/validation.ts","../src/built-in/entity-conflict.ts","../src/built-in/entity-credentials-invalid.ts","../src/built-in/entity-inactive.ts","../src/built-in/entity-not-found.ts","../src/built-in/internal.ts","../src/built-in/login-throttled.ts","../src/built-in/mfa-throttled.ts","../src/built-in/check.ts","../src/check.ts","../src/constants.ts","../src/normalize.ts","../src/serialize.ts","../src/status.ts"],"mappings":";;;KASY,qBAAqB;EAC7B,OAAO;;KAGC,4BAA4B;KAE5B,2BAA2B;EACnC;;KAGQ,kCAAkC;;;cCHjC;cAEA,oBAAoB;WACb,QAAQ;WAER,OAAO;EAEX,YAAA,QAAQ;;;;;;EAgBX;;;;;;;;;;;;cC3BA;cAEA,0BAA0B;EACvB,YAAA,iBAAiB;;;;cCJpB;cAEA,wBAAwB;EACrB,YAAA;SAQL,gBAAgB,eAAY;;;;cCV1B;cAEA,wBAAwB;EACrB,YAAA,iBAAiB;;;;cCJpB;cAEA,kCAAkC;EAC/B,YAAA;;;;cCFH;;;;;;;cAQA,wBAAwB;EACrB,YAAA,iBAAiB;;;;cCTpB;cAEA,4BAA4B;EACzB,YAAA,iBAAiB;;;;cCHpB;cAEA,sCAAsC;EACnC,YAAA,iBAAiB;;;;cCHpB;cAEA,4BAA4B;EACzB,YAAA,iBAAiB;;;;cCHpB;cAEA,4BAA4B;EACzB,YAAA,iBAAiB;;;;cCHpB;cAEA,sBAAsB;EACnB,YAAA,iBAAiB;;;;cCHpB;KAED,6BAA6B;;;;EAIrC;;cAGS,4BAA4B;EACzB,YAAA,QAAQ;;;;cCVX;KAED,2BAA2B;;;;EAInC;;cAGS,0BAA0B;EACvB,YAAA,QAAQ;;;;iBCCR,kBAAkB,iBAAiB,SAAS;iBAM5C,4BAA4B,iBAAiB,SAAS;iBAMtD,kBAAkB,iBAAiB,SAAS;iBAM5C,kBAAkB,iBAAiB,SAAS;iBAM5C,oBAAoB,iBAAiB,SAAS;iBAM9C,sBAAsB,iBAAiB,SAAS;iBAMhD,sBAAsB,iBAAiB,SAAS;iBAMhD,sBAAsB,iBAAiB,SAAS;iBAMhD,gCAAgC,iBAAiB,SAAS;iBAM1D,gBAAgB,iBAAiB,SAAS;iBAM1C,sBAAsB,iBAAiB,SAAS;iBAMhD,oBAAoB,iBAAiB,SAAS;;;;;;;;;;;;iBChE9C,QAAQ,iBAAiB,SAAS;;;;;;;;;;;;;iBAgBlC,cAAc,iBAAiB,SAAS;;;aClC5C;EAER;EACA;EAGA;EACA;EAGA;EAGA;EACA;EACA;EACA;EACA;EAGA;EACA;EACA;EACA;EACA;EACA;EACA;EAGA;EAGA;EACA;EAGA;EACA;EACA;EAGA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAGA;EACA;EACA;EAGA;EACA;EACA;;;;;;;;;;;;;iBCtDY,eAAe,iBAAiB;;;;;;;;;;;;;;;;iBCIhC,eAAe,OAAO,QAAQ;;;;;;;;;;;;;;;;cCAjC,sBAAsB,SAAS,QAAQ,UAAU;;;;;iBAkC9C,mBAAmB,cAAc;;;;;;;;;;;iBAcjC,mBAAmB,iBAAiB"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { BASE_ERROR_INSTANCE, INSTANCEOF_PROPERTY, hasInstanceof, markInstanceof, } from '@ebec/core';
+export { BASE_ERROR_INSTANCE, INSTANCEOF_PROPERTY, hasInstanceof, markInstanceof, matchesInstanceof, serializeInstanceofChain, } from '@ebec/core';
 export * from './built-in';
 export * from './check';
 export * from './constants';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,cAAc,GACjB,MAAM,YAAY,CAAC;AACpB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,wBAAwB,GAC3B,MAAM,YAAY,CAAC;AACpB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { BASE_ERROR_INSTANCE, BaseError, INSTANCEOF_PROPERTY, hasInstanceof, hasInstanceof as hasInstanceof$1, isBaseError, isError as isError$1, isObject, markInstanceof, markInstanceof as markInstanceof$1 } from "@ebec/core";
+import { BASE_ERROR_INSTANCE, BaseError, INSTANCEOF_PROPERTY, INSTANCEOF_PROPERTY as INSTANCEOF_PROPERTY$1, hasInstanceof, isBaseError, isError as isError$1, isObject, markInstanceof, markInstanceof as markInstanceof$1, matchesInstanceof, matchesInstanceof as matchesInstanceof$1, serializeInstanceofChain, serializeInstanceofChain as serializeInstanceofChain$1 } from "@ebec/core";
 //#region src/constants.ts
 let ErrorCode = /* @__PURE__ */ function(ErrorCode) {
 	ErrorCode["BAD_REQUEST"] = "bad_request";
@@ -59,11 +59,17 @@ var AuthupError = class extends BaseError {
 		this.issues = [];
 		if (input && typeof input !== "string" && input.data) this.data = input.data;
 	}
+	/**
+	* `super.toJSON()` already emits the serialized marker chain, but the
+	* `data` spread runs after it — re-stamped last so a `data` key cannot
+	* displace the genuine chain.
+	*/
 	toJSON() {
 		return {
 			...super.toJSON(),
 			issues: this.issues,
-			...this.data ?? {}
+			...this.data ?? {},
+			[INSTANCEOF_PROPERTY$1]: serializeInstanceofChain$1(this)
 		};
 	}
 };
@@ -136,16 +142,17 @@ function isError(input) {
 /**
 * Duck-type guard for AuthupError.
 *
-* Fast path: input has the AuthupError marker in its `@instanceof` chain.
-* Subclass instances also accumulate this marker, so this guard matches any
-* AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).
+* Fast path: input has the AuthupError marker in its `@instanceof` chain —
+* as the native symbol (in-process) or its serialized string form
+* (JSON-rehydrated). Subclass instances also accumulate this marker, so this
+* guard matches any AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).
 *
 * Slow path: input is shape-compatible with AuthupError (BaseError + has
 * `issues: Issue[]`). Catches cases where the marker is missing — plain
-* objects rehydrated from JSON, older builds without the marker.
+* objects rehydrated from JSON emitted by older builds without the chain.
 */
 function isAuthupError(input) {
-	if (hasInstanceof$1(input, AUTHUP_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, AUTHUP_ERROR_INSTANCE)) return true;
 	if (!isBaseError(input)) return false;
 	if (!isObject(input)) return false;
 	return Array.isArray(input.issues);
@@ -276,62 +283,62 @@ var MfaThrottledError = class extends AuthupError {
 //#endregion
 //#region src/built-in/check.ts
 function isAuthHeaderError(input) {
-	if (hasInstanceof$1(input, AUTH_HEADER_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, AUTH_HEADER_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "unsupported_auth_header_type";
 }
 function isBearerTokenMalformedError(input) {
-	if (hasInstanceof$1(input, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "bearer_token_malformed";
 }
 function isBadRequestError(input) {
-	if (hasInstanceof$1(input, BAD_REQUEST_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, BAD_REQUEST_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "bad_request";
 }
 function isValidationError(input) {
-	if (hasInstanceof$1(input, VALIDATION_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, VALIDATION_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "bad_request";
 }
 function isUnauthorizedError(input) {
-	if (hasInstanceof$1(input, UNAUTHORIZED_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, UNAUTHORIZED_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "identity_unauthorized";
 }
 function isEntityNotFoundError(input) {
-	if (hasInstanceof$1(input, ENTITY_NOT_FOUND_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, ENTITY_NOT_FOUND_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "entity_not_found";
 }
 function isEntityConflictError(input) {
-	if (hasInstanceof$1(input, ENTITY_CONFLICT_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, ENTITY_CONFLICT_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "entity_conflict";
 }
 function isEntityInactiveError(input) {
-	if (hasInstanceof$1(input, ENTITY_INACTIVE_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, ENTITY_INACTIVE_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "entity_inactive";
 }
 function isEntityCredentialsInvalidError(input) {
-	if (hasInstanceof$1(input, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "invalid_credentials";
 }
 function isInternalError(input) {
-	if (hasInstanceof$1(input, INTERNAL_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, INTERNAL_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "internal_error";
 }
 function isLoginThrottledError(input) {
-	if (hasInstanceof$1(input, LOGIN_THROTTLED_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, LOGIN_THROTTLED_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "login_attempt_throttled";
 }
 function isMfaThrottledError(input) {
-	if (hasInstanceof$1(input, MFA_THROTTLED_ERROR_INSTANCE)) return true;
+	if (matchesInstanceof$1(input, MFA_THROTTLED_ERROR_INSTANCE)) return true;
 	if (!isAuthupError(input)) return false;
 	return input.code === "mfa_attempt_throttled";
 }
@@ -436,6 +443,6 @@ function codeFromHttpStatus(status) {
 	return "bad_request";
 }
 //#endregion
-export { AUTHUP_ERROR_INSTANCE, AUTH_HEADER_ERROR_INSTANCE, AuthHeaderError, AuthupError, BAD_REQUEST_ERROR_INSTANCE, BASE_ERROR_INSTANCE, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, BadRequestError, BearerTokenMalformedError, ENTITY_CONFLICT_ERROR_INSTANCE, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, ENTITY_INACTIVE_ERROR_INSTANCE, ENTITY_NOT_FOUND_ERROR_INSTANCE, ERROR_CODE_TO_STATUS, EntityConflictError, EntityCredentialsInvalidError, EntityInactiveError, EntityNotFoundError, ErrorCode, INSTANCEOF_PROPERTY, INTERNAL_ERROR_INSTANCE, InternalError, LOGIN_THROTTLED_ERROR_INSTANCE, LoginThrottledError, MFA_THROTTLED_ERROR_INSTANCE, MfaThrottledError, UNAUTHORIZED_ERROR_INSTANCE, UnauthorizedError, VALIDATION_ERROR_INSTANCE, ValidationError, codeFromHttpStatus, hasInstanceof, httpStatusFromCode, isAuthHeaderError, isAuthupError, isBadRequestError, isBearerTokenMalformedError, isEntityConflictError, isEntityCredentialsInvalidError, isEntityInactiveError, isEntityNotFoundError, isError, isInternalError, isLoginThrottledError, isMfaThrottledError, isUnauthorizedError, isValidationError, markInstanceof, normalizeError, serializeError };
+export { AUTHUP_ERROR_INSTANCE, AUTH_HEADER_ERROR_INSTANCE, AuthHeaderError, AuthupError, BAD_REQUEST_ERROR_INSTANCE, BASE_ERROR_INSTANCE, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, BadRequestError, BearerTokenMalformedError, ENTITY_CONFLICT_ERROR_INSTANCE, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, ENTITY_INACTIVE_ERROR_INSTANCE, ENTITY_NOT_FOUND_ERROR_INSTANCE, ERROR_CODE_TO_STATUS, EntityConflictError, EntityCredentialsInvalidError, EntityInactiveError, EntityNotFoundError, ErrorCode, INSTANCEOF_PROPERTY, INTERNAL_ERROR_INSTANCE, InternalError, LOGIN_THROTTLED_ERROR_INSTANCE, LoginThrottledError, MFA_THROTTLED_ERROR_INSTANCE, MfaThrottledError, UNAUTHORIZED_ERROR_INSTANCE, UnauthorizedError, VALIDATION_ERROR_INSTANCE, ValidationError, codeFromHttpStatus, hasInstanceof, httpStatusFromCode, isAuthHeaderError, isAuthupError, isBadRequestError, isBearerTokenMalformedError, isEntityConflictError, isEntityCredentialsInvalidError, isEntityInactiveError, isEntityNotFoundError, isError, isInternalError, isLoginThrottledError, isMfaThrottledError, isUnauthorizedError, isValidationError, markInstanceof, matchesInstanceof, normalizeError, serializeError, serializeInstanceofChain };
 
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["isRawError","hasInstanceof","hasInstanceof"],"sources":["../src/constants.ts","../src/module.ts","../src/built-in/unauthorized.ts","../src/built-in/auth-header.ts","../src/built-in/bad-request.ts","../src/built-in/bearer-token.ts","../src/check.ts","../src/built-in/validation.ts","../src/built-in/entity-conflict.ts","../src/built-in/entity-credentials-invalid.ts","../src/built-in/entity-inactive.ts","../src/built-in/entity-not-found.ts","../src/built-in/internal.ts","../src/built-in/login-throttled.ts","../src/built-in/mfa-throttled.ts","../src/built-in/check.ts","../src/normalize.ts","../src/serialize.ts","../src/status.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum ErrorCode {\n    // Generic\n    BAD_REQUEST = 'bad_request',\n    INTERNAL_ERROR = 'internal_error',\n\n    // HTTP Codes\n    HTTP_HEADER_AUTH_TYPE_UNSUPPORTED = 'unsupported_auth_header_type',\n    HTTP_BEARER_TOKEN_MALFORMED = 'bearer_token_malformed',\n\n    // Identity Auth\n    IDENTITY_UNAUTHORIZED = 'identity_unauthorized',\n\n    // Entity Codes\n    ENTITY_CREDENTIALS_INVALID = 'invalid_credentials',\n    ENTITY_INACTIVE = 'entity_inactive',\n    ENTITY_NOT_FOUND = 'entity_not_found',\n    ENTITY_CONFLICT = 'entity_conflict',\n    ENTITY_RELATION_INVALID = 'entity_relation_invalid',\n\n    // Identity Codes\n    REGISTRATION_DISABLED = 'registration_disabled',\n    PASSWORD_RECOVERY_DISABLED = 'password_recovery_disabled',\n    EMAIL_VERIFICATION_REQUIRED = 'email_verification_required',\n    RESET_TOKEN_EXPIRED = 'reset_token_expired',\n    LOGIN_ATTEMPT_THROTTLED = 'login_attempt_throttled',\n    MFA_ATTEMPT_THROTTLED = 'mfa_attempt_throttled',\n    MFA_NOT_CONFIGURABLE = 'mfa_not_configurable',\n\n    // Storage Codes\n    STORAGE_INSUFFICIENT = 'storage_insufficient',\n\n    // JWK Codes\n    JWK_INVALID = 'jwk_invalid',\n    JWK_NOT_FOUND = 'jwk_not_found',\n\n    // JWT Codes\n    JWT_INVALID = 'invalid_token',\n    JWT_INACTIVE = 'inactive_token',\n    JWT_EXPIRED = 'expired_token',\n\n    // Oauth2 Codes\n    OAUTH_REDIRECT_URI_MISMATCH = 'redirect_uri_mismatch',\n    OAUTH_CLIENT_INVALID = 'invalid_client',\n    OAUTH_CLIENT_UNAUTHORIZED = 'unauthorized_client',\n    OAUTH_GRANT_INVALID = 'invalid_grant',\n    OAUTH_GRANT_TYPE_UNSUPPORTED = 'unsupported_token_grant_type',\n    OAUTH_REQUEST_INVALID = 'invalid_request',\n    OAUTH_LOGIN_REQUIRED = 'login_required',\n    OAUTH_MFA_REQUIRED = 'mfa_required',\n    OAUTH_ACCESS_DENIED = 'access_denied',\n    OAUTH_INTERACTION_REQUIRED = 'interaction_required',\n    OAUTH_ACCOUNT_SELECTION_REQUIRED = 'account_selection_required',\n    OAUTH_CONSENT_REQUIRED = 'consent_required',\n    OAUTH_RESPONSE_TYPE_UNSUPPORTED = 'unsupported_response_type',\n    OAUTH_SCOPE_INVALID = 'invalid_scope',\n    OAUTH_SCOPE_INSUFFICIENT = 'insufficient_scope',\n\n    // Permission Codes\n    PERMISSION_NOT_FOUND = 'permission_not_found',\n    PERMISSION_DENIED = 'permission_denied',\n    PERMISSION_EVALUATION_FAILED = 'permission_evaluation_failed',\n\n    // Policy Codes\n    POLICY_EVALUATOR_NOT_FOUND = 'policy_evaluator_not_found',\n    POLICY_EVALUATOR_NOT_PROCESSABLE = 'policy_evaluator_not_processable',\n    POLICY_EVALUATOR_CONTEXT_INVALID = 'policy_evaluator_context_invalid',\n}\n","/*\n * Copyright (c) 2024-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AuthupErrorInput } from './types.ts';\nimport { BaseError, markInstanceof } from '@ebec/core';\nimport type { Issue } from 'validup';\n\nexport const AUTHUP_ERROR_INSTANCE = Symbol.for('@authup/errors/AuthupError');\n\nexport class AuthupError extends BaseError {\n    public readonly issues: Issue[];\n\n    public readonly data?: Record<string, any>;\n\n    constructor(input?: AuthupErrorInput) {\n        super(input);\n        markInstanceof(this, AUTHUP_ERROR_INSTANCE);\n\n        this.issues = [];\n\n        if (input && typeof input !== 'string' && input.data) {\n            this.data = input.data;\n        }\n    }\n\n    override toJSON() {\n        return {\n            ...super.toJSON(),\n            issues: this.issues,\n            ...(this.data ?? {}),\n        };\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const UNAUTHORIZED_ERROR_INSTANCE = Symbol.for('@authup/errors/UnauthorizedError');\n\nexport class UnauthorizedError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.IDENTITY_UNAUTHORIZED,\n            message: 'Authentication required.',\n            ...options,\n        });\n        markInstanceof(this, UNAUTHORIZED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { UnauthorizedError } from './unauthorized.ts';\n\nexport const AUTH_HEADER_ERROR_INSTANCE = Symbol.for('@authup/errors/AuthHeaderError');\n\nexport class AuthHeaderError extends UnauthorizedError {\n    constructor(message: string) {\n        super({\n            code: ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED,\n            message,\n        });\n        markInstanceof(this, AUTH_HEADER_ERROR_INSTANCE);\n    }\n\n    static unsupportedType(type: string) {\n        return new AuthHeaderError(`The authorization header type ${type} is not supported.`);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const BAD_REQUEST_ERROR_INSTANCE = Symbol.for('@authup/errors/BadRequestError');\n\nexport class BadRequestError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.BAD_REQUEST,\n            ...options,\n        });\n        markInstanceof(this, BAD_REQUEST_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { UnauthorizedError } from './unauthorized.ts';\n\nexport const BEARER_TOKEN_MALFORMED_ERROR_INSTANCE = Symbol.for('@authup/errors/BearerTokenMalformedError');\n\nexport class BearerTokenMalformedError extends UnauthorizedError {\n    constructor(message?: string) {\n        super({\n            code: ErrorCode.HTTP_BEARER_TOKEN_MALFORMED,\n            message: message ?? 'The Authorization header is malformed.',\n        });\n        markInstanceof(this, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    hasInstanceof,\n    isBaseError,\n    isObject,\n    isError as isRawError,\n} from '@ebec/core';\nimport type { AuthupError } from './module.ts';\nimport { AUTHUP_ERROR_INSTANCE } from './module.ts';\n\n/**\n * Duck-type guard for `Error`.\n *\n * Re-exports `@ebec/core`'s shape-based check: `input` matches when it\n * carries the standard `name` / `message` / `stack` triplet, regardless\n * of which realm or class hierarchy produced it. Use this instead of\n * `instanceof Error` for cross-realm boundaries (worker threads,\n * duplicate-module copies) where `instanceof` can yield false negatives.\n */\nexport function isError(input: unknown): input is Error {\n    return isRawError(input);\n}\n\n/**\n * Duck-type guard for AuthupError.\n *\n * Fast path: input has the AuthupError marker in its `@instanceof` chain.\n * Subclass instances also accumulate this marker, so this guard matches any\n * AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).\n *\n * Slow path: input is shape-compatible with AuthupError (BaseError + has\n * `issues: Issue[]`). Catches cases where the marker is missing — plain\n * objects rehydrated from JSON, older builds without the marker.\n */\nexport function isAuthupError(input: unknown): input is AuthupError {\n    if (hasInstanceof(input, AUTHUP_ERROR_INSTANCE)) {\n        return true;\n    }\n\n    if (!isBaseError(input)) {\n        return false;\n    }\n\n    if (!isObject(input)) {\n        return false;\n    }\n\n    return Array.isArray(input.issues);\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const VALIDATION_ERROR_INSTANCE = Symbol.for('@authup/errors/ValidationError');\n\n/**\n * A domain/business-rule violation raised by core logic. Deliberately NOT\n * named after an HTTP status: core code stays transport-agnostic, and the HTTP\n * adapter maps its `ErrorCode.BAD_REQUEST` to a 400 response\n * (`httpStatusFromCode`). Prefer this over `BadRequestError` in `core/**`.\n */\nexport class ValidationError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.BAD_REQUEST,\n            ...options,\n        });\n        markInstanceof(this, VALIDATION_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_CONFLICT_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityConflictError');\n\nexport class EntityConflictError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_CONFLICT,\n            message: entity ? `The ${entity} already exists.` : 'Entity already exists.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_CONFLICT_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityCredentialsInvalidError');\n\nexport class EntityCredentialsInvalidError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_CREDENTIALS_INVALID,\n            message: entity ? `The ${entity} credentials are invalid.` : 'Credentials are invalid.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_INACTIVE_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityInactiveError');\n\nexport class EntityInactiveError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_INACTIVE,\n            message: entity ? `The ${entity} is inactive.` : 'Entity is inactive.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_INACTIVE_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_NOT_FOUND_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityNotFoundError');\n\nexport class EntityNotFoundError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_NOT_FOUND,\n            message: entity ? `The ${entity} was not found.` : 'Entity not found.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_NOT_FOUND_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const INTERNAL_ERROR_INSTANCE = Symbol.for('@authup/errors/InternalError');\n\nexport class InternalError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.INTERNAL_ERROR,\n            message: 'An internal error occurred.',\n            ...options,\n        });\n        markInstanceof(this, INTERNAL_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const LOGIN_THROTTLED_ERROR_INSTANCE = Symbol.for('@authup/errors/LoginThrottledError');\n\nexport type LoginThrottledErrorOptions = AuthupErrorOptions & {\n    /**\n     * Seconds until the sliding throttle window can release the pair.\n     */\n    retryAfter?: number,\n};\n\nexport class LoginThrottledError extends AuthupError {\n    constructor(input?: LoginThrottledErrorOptions) {\n        const { retryAfter, ...rest } = input ?? {};\n        super({\n            code: ErrorCode.LOGIN_ATTEMPT_THROTTLED,\n            message: 'Too many failed login attempts. Please try again later.',\n            ...rest,\n            data: {\n                ...(typeof retryAfter === 'number' ? { retryAfter } : {}),\n                ...(rest.data ?? {}),\n            },\n        });\n        markInstanceof(this, LOGIN_THROTTLED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const MFA_THROTTLED_ERROR_INSTANCE = Symbol.for('@authup/errors/MfaThrottledError');\n\nexport type MfaThrottledErrorOptions = AuthupErrorOptions & {\n    /**\n     * Seconds until the exponential backoff releases the account.\n     */\n    retryAfter?: number,\n};\n\nexport class MfaThrottledError extends AuthupError {\n    constructor(input?: MfaThrottledErrorOptions) {\n        const { retryAfter, ...rest } = input ?? {};\n        super({\n            code: ErrorCode.MFA_ATTEMPT_THROTTLED,\n            message: 'Too many failed verification attempts. Please try again later.',\n            ...rest,\n            data: {\n                ...(typeof retryAfter === 'number' ? { retryAfter } : {}),\n                ...(rest.data ?? {}),\n            },\n        });\n        markInstanceof(this, MFA_THROTTLED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isAuthupError } from '../check.ts';\nimport { ErrorCode } from '../constants.ts';\nimport { hasInstanceof } from '@ebec/core';\nimport { AUTH_HEADER_ERROR_INSTANCE, type AuthHeaderError } from './auth-header.ts';\nimport { BAD_REQUEST_ERROR_INSTANCE, type BadRequestError } from './bad-request.ts';\nimport { VALIDATION_ERROR_INSTANCE, type ValidationError } from './validation.ts';\nimport { BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, type BearerTokenMalformedError } from './bearer-token.ts';\nimport { ENTITY_CONFLICT_ERROR_INSTANCE, type EntityConflictError } from './entity-conflict.ts';\nimport { ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, type EntityCredentialsInvalidError } from './entity-credentials-invalid.ts';\nimport { ENTITY_INACTIVE_ERROR_INSTANCE, type EntityInactiveError } from './entity-inactive.ts';\nimport { ENTITY_NOT_FOUND_ERROR_INSTANCE, type EntityNotFoundError } from './entity-not-found.ts';\nimport { INTERNAL_ERROR_INSTANCE, type InternalError } from './internal.ts';\nimport { LOGIN_THROTTLED_ERROR_INSTANCE, type LoginThrottledError } from './login-throttled.ts';\nimport { MFA_THROTTLED_ERROR_INSTANCE, type MfaThrottledError } from './mfa-throttled.ts';\nimport { UNAUTHORIZED_ERROR_INSTANCE, type UnauthorizedError } from './unauthorized.ts';\n\nexport function isAuthHeaderError(input: unknown): input is AuthHeaderError {\n    if (hasInstanceof(input, AUTH_HEADER_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED;\n}\n\nexport function isBearerTokenMalformedError(input: unknown): input is BearerTokenMalformedError {\n    if (hasInstanceof(input, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.HTTP_BEARER_TOKEN_MALFORMED;\n}\n\nexport function isBadRequestError(input: unknown): input is BadRequestError {\n    if (hasInstanceof(input, BAD_REQUEST_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.BAD_REQUEST;\n}\n\nexport function isValidationError(input: unknown): input is ValidationError {\n    if (hasInstanceof(input, VALIDATION_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.BAD_REQUEST;\n}\n\nexport function isUnauthorizedError(input: unknown): input is UnauthorizedError {\n    if (hasInstanceof(input, UNAUTHORIZED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.IDENTITY_UNAUTHORIZED;\n}\n\nexport function isEntityNotFoundError(input: unknown): input is EntityNotFoundError {\n    if (hasInstanceof(input, ENTITY_NOT_FOUND_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_NOT_FOUND;\n}\n\nexport function isEntityConflictError(input: unknown): input is EntityConflictError {\n    if (hasInstanceof(input, ENTITY_CONFLICT_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_CONFLICT;\n}\n\nexport function isEntityInactiveError(input: unknown): input is EntityInactiveError {\n    if (hasInstanceof(input, ENTITY_INACTIVE_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_INACTIVE;\n}\n\nexport function isEntityCredentialsInvalidError(input: unknown): input is EntityCredentialsInvalidError {\n    if (hasInstanceof(input, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_CREDENTIALS_INVALID;\n}\n\nexport function isInternalError(input: unknown): input is InternalError {\n    if (hasInstanceof(input, INTERNAL_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.INTERNAL_ERROR;\n}\n\nexport function isLoginThrottledError(input: unknown): input is LoginThrottledError {\n    if (hasInstanceof(input, LOGIN_THROTTLED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.LOGIN_ATTEMPT_THROTTLED;\n}\n\nexport function isMfaThrottledError(input: unknown): input is MfaThrottledError {\n    if (hasInstanceof(input, MFA_THROTTLED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.MFA_ATTEMPT_THROTTLED;\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isError } from './check.ts';\n\n/**\n * Normalize an arbitrary thrown value into an `Error` instance.\n *\n * Useful at error-pipeline boundaries (catch blocks, error middleware,\n * fallbacks) where TypeScript hands you `unknown` but downstream code\n * wants a real `Error` to inspect or rethrow. Duck-typed: any value\n * passing `isError` is returned as-is. Strings become `new Error(str)`;\n * any other value is stringified.\n */\nexport function normalizeError(input: unknown): Error {\n    if (isError(input)) {\n        return input;\n    }\n\n    if (typeof input === 'string') {\n        return new Error(input);\n    }\n\n    return new Error(String(input));\n}\n\n","/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { isObject } from '@ebec/core';\n\n/**\n * Convert an `Error` (or any value with a `toJSON()` method) into a\n * plain object suitable for embedding in a JSON response body.\n *\n * Calls `input.toJSON()` if present — preserves every attribute the\n * error chose to surface (`code`, `cause`, `errors`, `issues`, `data`,\n * AuthupError sub-class fields, ...). Falls back to spreading the\n * Error's enumerable own properties alongside the standard\n * `name` / `message` pair, so caller-attached fields survive.\n *\n * Pair with `normalizeError` to handle arbitrary thrown values:\n * `serializeError(normalizeError(e))`.\n */\nexport function serializeError(input: Error): Record<string, any> {\n    if ('toJSON' in input && typeof input.toJSON === 'function') {\n        const output = input.toJSON();\n        if (isObject(output)) {\n            return output;\n        }\n    }\n\n    return {\n        ...input,\n        name: input.name,\n        message: input.message,\n    };\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from './constants.ts';\n\n/**\n * Default mapping from `ErrorCode` to HTTP status. Adapters apply this and\n * may layer their own overrides on top. Codes not listed here fall back\n * to 400 (Bad Request) — which is the right default for \"validation /\n * malformed-request\" style errors.\n *\n * The mapping mirrors the HTTP statuses produced by the pre-refactor\n * `@ebec/http`-coupled error classes, with one intentional change:\n *\n * - `OAUTH_CLIENT_INVALID`: 400 → **401**, per RFC 6749 §5.2 (`invalid_client`\n *   responses should use 401). Surfaces as a behavior change in HTTP-level\n *   tests asserting `status: 400, code: OAUTH_CLIENT_INVALID`.\n */\nexport const ERROR_CODE_TO_STATUS: Readonly<Partial<Record<`${ErrorCode}`, number>>> = {\n    // 401\n    [ErrorCode.OAUTH_CLIENT_INVALID]: 401,\n    [ErrorCode.HTTP_BEARER_TOKEN_MALFORMED]: 401,\n    [ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED]: 401,\n    [ErrorCode.IDENTITY_UNAUTHORIZED]: 401,\n\n    // 403\n    [ErrorCode.PERMISSION_NOT_FOUND]: 403,\n    [ErrorCode.PERMISSION_DENIED]: 403,\n    [ErrorCode.PERMISSION_EVALUATION_FAILED]: 403,\n\n    // 404\n    [ErrorCode.ENTITY_NOT_FOUND]: 404,\n    [ErrorCode.JWK_NOT_FOUND]: 404,\n\n    // 409\n    [ErrorCode.ENTITY_CONFLICT]: 409,\n\n    // 429\n    [ErrorCode.LOGIN_ATTEMPT_THROTTLED]: 429,\n    [ErrorCode.MFA_ATTEMPT_THROTTLED]: 429,\n\n    // 500\n    [ErrorCode.INTERNAL_ERROR]: 500,\n\n    // 507\n    [ErrorCode.STORAGE_INSUFFICIENT]: 507,\n};\n\n/**\n * Resolve an HTTP status for a given error code. Unknown codes fall back\n * to `fallback` (default 400).\n */\nexport function httpStatusFromCode(code: string, fallback = 400): number {\n    return ERROR_CODE_TO_STATUS[code as `${ErrorCode}`] ?? fallback;\n}\n\n/**\n * Resolve a semantic `ErrorCode` for a foreign HTTP status. Used at the\n * boundary where a non-AuthupError (e.g. `@ebec/http` HTTPError thrown by\n * the framework, or a foreign service response) enters our system and\n * needs to be normalized into an `AuthupError` with an authup-vocabulary\n * code. Status is the only stable handshake across the two vocabularies.\n *\n * Default mapping covers the common HTTP statuses. Anything 5xx\n * collapses to `INTERNAL_ERROR`; unknown 4xx collapses to `BAD_REQUEST`.\n */\nexport function codeFromHttpStatus(status: number): ErrorCode {\n    if (status === 404) return ErrorCode.ENTITY_NOT_FOUND;\n    if (status === 409) return ErrorCode.ENTITY_CONFLICT;\n    if (status === 401) return ErrorCode.IDENTITY_UNAUTHORIZED;\n    if (status === 403) return ErrorCode.PERMISSION_DENIED;\n    if (status === 429) return ErrorCode.LOGIN_ATTEMPT_THROTTLED;\n    if (status === 507) return ErrorCode.STORAGE_INSUFFICIENT;\n    if (status >= 500) return ErrorCode.INTERNAL_ERROR;\n    return ErrorCode.BAD_REQUEST;\n}\n"],"mappings":";;AAOA,IAAY,YAAL,yBAAA,WAAA;CAEH,UAAA,iBAAA;CACA,UAAA,oBAAA;CAGA,UAAA,uCAAA;CACA,UAAA,iCAAA;CAGA,UAAA,2BAAA;CAGA,UAAA,gCAAA;CACA,UAAA,qBAAA;CACA,UAAA,sBAAA;CACA,UAAA,qBAAA;CACA,UAAA,6BAAA;CAGA,UAAA,2BAAA;CACA,UAAA,gCAAA;CACA,UAAA,iCAAA;CACA,UAAA,yBAAA;CACA,UAAA,6BAAA;CACA,UAAA,2BAAA;CACA,UAAA,0BAAA;CAGA,UAAA,0BAAA;CAGA,UAAA,iBAAA;CACA,UAAA,mBAAA;CAGA,UAAA,iBAAA;CACA,UAAA,kBAAA;CACA,UAAA,iBAAA;CAGA,UAAA,iCAAA;CACA,UAAA,0BAAA;CACA,UAAA,+BAAA;CACA,UAAA,yBAAA;CACA,UAAA,kCAAA;CACA,UAAA,2BAAA;CACA,UAAA,0BAAA;CACA,UAAA,wBAAA;CACA,UAAA,yBAAA;CACA,UAAA,gCAAA;CACA,UAAA,sCAAA;CACA,UAAA,4BAAA;CACA,UAAA,qCAAA;CACA,UAAA,yBAAA;CACA,UAAA,8BAAA;CAGA,UAAA,0BAAA;CACA,UAAA,uBAAA;CACA,UAAA,kCAAA;CAGA,UAAA,gCAAA;CACA,UAAA,sCAAA;CACA,UAAA,sCAAA;;AACJ,EAAA,CAAA,CAAA;;;AC9DA,MAAa,wBAAwB,OAAO,IAAI,4BAA4B;AAE5E,IAAa,cAAb,cAAiC,UAAU;CACvC;CAEA;CAEA,YAAY,OAA0B;EAClC,MAAM,KAAK;EACX,iBAAe,MAAM,qBAAqB;EAE1C,KAAK,SAAS,CAAC;EAEf,IAAI,SAAS,OAAO,UAAU,YAAY,MAAM,MAC5C,KAAK,OAAO,MAAM;CAE1B;CAEA,SAAkB;EACd,OAAO;GACH,GAAG,MAAM,OAAO;GAChB,QAAQ,KAAK;GACb,GAAI,KAAK,QAAQ,CAAC;EACtB;CACJ;AACJ;;;ACxBA,MAAa,8BAA8B,OAAO,IAAI,kCAAkC;AAExF,IAAa,oBAAb,cAAuC,YAAY;CAC/C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAJgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAKhG,CAAC;EACD,iBAAe,MAAM,2BAA2B;CACpD;AACJ;;;ACbA,MAAa,6BAA6B,OAAO,IAAI,gCAAgC;AAErF,IAAa,kBAAb,MAAa,wBAAwB,kBAAkB;CACnD,YAAY,SAAiB;EACzB,MAAM;GACF,MAAA;GACA;EACJ,CAAC;EACD,iBAAe,MAAM,0BAA0B;CACnD;CAEA,OAAO,gBAAgB,MAAc;EACjC,OAAO,IAAI,gBAAgB,iCAAiC,KAAK,mBAAmB;CACxF;AACJ;;;ACbA,MAAa,6BAA6B,OAAO,IAAI,gCAAgC;AAErF,IAAa,kBAAb,cAAqC,YAAY;CAC7C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,GAHgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAIhG,CAAC;EACD,iBAAe,MAAM,0BAA0B;CACnD;AACJ;;;ACZA,MAAa,wCAAwC,OAAO,IAAI,0CAA0C;AAE1G,IAAa,4BAAb,cAA+C,kBAAkB;CAC7D,YAAY,SAAkB;EAC1B,MAAM;GACF,MAAA;GACA,SAAS,WAAW;EACxB,CAAC;EACD,iBAAe,MAAM,qCAAqC;CAC9D;AACJ;;;;;;;;;;;;ACIA,SAAgB,QAAQ,OAAgC;CACpD,OAAOA,UAAW,KAAK;AAC3B;;;;;;;;;;;;AAaA,SAAgB,cAAc,OAAsC;CAChE,IAAIC,gBAAc,OAAO,qBAAqB,GAC1C,OAAO;CAGX,IAAI,CAAC,YAAY,KAAK,GAClB,OAAO;CAGX,IAAI,CAAC,SAAS,KAAK,GACf,OAAO;CAGX,OAAO,MAAM,QAAQ,MAAM,MAAM;AACrC;;;AC1CA,MAAa,4BAA4B,OAAO,IAAI,gCAAgC;;;;;;;AAQpF,IAAa,kBAAb,cAAqC,YAAY;CAC7C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,GAHgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAIhG,CAAC;EACD,iBAAe,MAAM,yBAAyB;CAClD;AACJ;;;ACjBA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAE7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,oBAAoB;GACpD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACbA,MAAa,4CAA4C,OAAO,IAAI,8CAA8C;AAElH,IAAa,gCAAb,cAAmD,YAAY;CAC3D,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,6BAA6B;GAC7D,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,yCAAyC;CAClE;AACJ;;;ACbA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAE7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,iBAAiB;GACjD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACbA,MAAa,kCAAkC,OAAO,IAAI,oCAAoC;AAE9F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,mBAAmB;GACnD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,+BAA+B;CACxD;AACJ;;;ACbA,MAAa,0BAA0B,OAAO,IAAI,8BAA8B;AAEhF,IAAa,gBAAb,cAAmC,YAAY;CAC3C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAJgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAKhG,CAAC;EACD,iBAAe,MAAM,uBAAuB;CAChD;AACJ;;;ACZA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAS7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAAoC;EAC5C,MAAM,EAAE,YAAY,GAAG,SAAS,SAAS,CAAC;EAC1C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAAG;GACH,MAAM;IACF,GAAI,OAAO,eAAe,WAAW,EAAE,WAAW,IAAI,CAAC;IACvD,GAAI,KAAK,QAAQ,CAAC;GACtB;EACJ,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACvBA,MAAa,+BAA+B,OAAO,IAAI,kCAAkC;AASzF,IAAa,oBAAb,cAAuC,YAAY;CAC/C,YAAY,OAAkC;EAC1C,MAAM,EAAE,YAAY,GAAG,SAAS,SAAS,CAAC;EAC1C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAAG;GACH,MAAM;IACF,GAAI,OAAO,eAAe,WAAW,EAAE,WAAW,IAAI,CAAC;IACvD,GAAI,KAAK,QAAQ,CAAC;GACtB;EACJ,CAAC;EACD,iBAAe,MAAM,4BAA4B;CACrD;AACJ;;;ACZA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIC,gBAAc,OAAO,0BAA0B,GAAG,OAAO;CAC7D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,4BAA4B,OAAoD;CAC5F,IAAIA,gBAAc,OAAO,qCAAqC,GAAG,OAAO;CACxE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIA,gBAAc,OAAO,0BAA0B,GAAG,OAAO;CAC7D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIA,gBAAc,OAAO,yBAAyB,GAAG,OAAO;CAC5D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,oBAAoB,OAA4C;CAC5E,IAAIA,gBAAc,OAAO,2BAA2B,GAAG,OAAO;CAC9D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,+BAA+B,GAAG,OAAO;CAClE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,8BAA8B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,8BAA8B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,gCAAgC,OAAwD;CACpG,IAAIA,gBAAc,OAAO,yCAAyC,GAAG,OAAO;CAC5E,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,gBAAgB,OAAwC;CACpE,IAAIA,gBAAc,OAAO,uBAAuB,GAAG,OAAO;CAC1D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,gBAAc,OAAO,8BAA8B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,oBAAoB,OAA4C;CAC5E,IAAIA,gBAAc,OAAO,4BAA4B,GAAG,OAAO;CAC/D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;;;;;;;;;;;;AC3EA,SAAgB,eAAe,OAAuB;CAClD,IAAI,QAAQ,KAAK,GACb,OAAO;CAGX,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,MAAM,KAAK;CAG1B,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC;AAClC;;;;;;;;;;;;;;;;ACNA,SAAgB,eAAe,OAAmC;CAC9D,IAAI,YAAY,SAAS,OAAO,MAAM,WAAW,YAAY;EACzD,MAAM,SAAS,MAAM,OAAO;EAC5B,IAAI,SAAS,MAAM,GACf,OAAO;CAEf;CAEA,OAAO;EACH,GAAG;EACH,MAAM,MAAM;EACZ,SAAS,MAAM;CACnB;AACJ;;;;;;;;;;;;;;;;ACbA,MAAa,uBAA0E;EAEjD,mBAAA;EACO,2BAAA;EACM,iCAAA;EACZ,0BAAA;EAGD,yBAAA;EACH,sBAAA;EACW,iCAAA;EAGZ,qBAAA;EACH,kBAAA;EAGE,oBAAA;EAGQ,4BAAA;EACF,0BAAA;EAGP,mBAAA;EAGM,yBAAA;AACtC;;;;;AAMA,SAAgB,mBAAmB,MAAc,WAAW,KAAa;CACrE,OAAO,qBAAqB,SAA2B;AAC3D;;;;;;;;;;;AAYA,SAAgB,mBAAmB,QAA2B;CAC1D,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,UAAU,KAAK,OAAA;CACnB,OAAA;AACJ"}
+{"version":3,"file":"index.mjs","names":["INSTANCEOF_PROPERTY","serializeInstanceofChain","isRawError","matchesInstanceof","matchesInstanceof"],"sources":["../src/constants.ts","../src/module.ts","../src/built-in/unauthorized.ts","../src/built-in/auth-header.ts","../src/built-in/bad-request.ts","../src/built-in/bearer-token.ts","../src/check.ts","../src/built-in/validation.ts","../src/built-in/entity-conflict.ts","../src/built-in/entity-credentials-invalid.ts","../src/built-in/entity-inactive.ts","../src/built-in/entity-not-found.ts","../src/built-in/internal.ts","../src/built-in/login-throttled.ts","../src/built-in/mfa-throttled.ts","../src/built-in/check.ts","../src/normalize.ts","../src/serialize.ts","../src/status.ts"],"sourcesContent":["/*\n * Copyright (c) 2022-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum ErrorCode {\n    // Generic\n    BAD_REQUEST = 'bad_request',\n    INTERNAL_ERROR = 'internal_error',\n\n    // HTTP Codes\n    HTTP_HEADER_AUTH_TYPE_UNSUPPORTED = 'unsupported_auth_header_type',\n    HTTP_BEARER_TOKEN_MALFORMED = 'bearer_token_malformed',\n\n    // Identity Auth\n    IDENTITY_UNAUTHORIZED = 'identity_unauthorized',\n\n    // Entity Codes\n    ENTITY_CREDENTIALS_INVALID = 'invalid_credentials',\n    ENTITY_INACTIVE = 'entity_inactive',\n    ENTITY_NOT_FOUND = 'entity_not_found',\n    ENTITY_CONFLICT = 'entity_conflict',\n    ENTITY_RELATION_INVALID = 'entity_relation_invalid',\n\n    // Identity Codes\n    REGISTRATION_DISABLED = 'registration_disabled',\n    PASSWORD_RECOVERY_DISABLED = 'password_recovery_disabled',\n    EMAIL_VERIFICATION_REQUIRED = 'email_verification_required',\n    RESET_TOKEN_EXPIRED = 'reset_token_expired',\n    LOGIN_ATTEMPT_THROTTLED = 'login_attempt_throttled',\n    MFA_ATTEMPT_THROTTLED = 'mfa_attempt_throttled',\n    MFA_NOT_CONFIGURABLE = 'mfa_not_configurable',\n\n    // Storage Codes\n    STORAGE_INSUFFICIENT = 'storage_insufficient',\n\n    // JWK Codes\n    JWK_INVALID = 'jwk_invalid',\n    JWK_NOT_FOUND = 'jwk_not_found',\n\n    // JWT Codes\n    JWT_INVALID = 'invalid_token',\n    JWT_INACTIVE = 'inactive_token',\n    JWT_EXPIRED = 'expired_token',\n\n    // Oauth2 Codes\n    OAUTH_REDIRECT_URI_MISMATCH = 'redirect_uri_mismatch',\n    OAUTH_CLIENT_INVALID = 'invalid_client',\n    OAUTH_CLIENT_UNAUTHORIZED = 'unauthorized_client',\n    OAUTH_GRANT_INVALID = 'invalid_grant',\n    OAUTH_GRANT_TYPE_UNSUPPORTED = 'unsupported_token_grant_type',\n    OAUTH_REQUEST_INVALID = 'invalid_request',\n    OAUTH_LOGIN_REQUIRED = 'login_required',\n    OAUTH_MFA_REQUIRED = 'mfa_required',\n    OAUTH_ACCESS_DENIED = 'access_denied',\n    OAUTH_INTERACTION_REQUIRED = 'interaction_required',\n    OAUTH_ACCOUNT_SELECTION_REQUIRED = 'account_selection_required',\n    OAUTH_CONSENT_REQUIRED = 'consent_required',\n    OAUTH_RESPONSE_TYPE_UNSUPPORTED = 'unsupported_response_type',\n    OAUTH_SCOPE_INVALID = 'invalid_scope',\n    OAUTH_SCOPE_INSUFFICIENT = 'insufficient_scope',\n\n    // Permission Codes\n    PERMISSION_NOT_FOUND = 'permission_not_found',\n    PERMISSION_DENIED = 'permission_denied',\n    PERMISSION_EVALUATION_FAILED = 'permission_evaluation_failed',\n\n    // Policy Codes\n    POLICY_EVALUATOR_NOT_FOUND = 'policy_evaluator_not_found',\n    POLICY_EVALUATOR_NOT_PROCESSABLE = 'policy_evaluator_not_processable',\n    POLICY_EVALUATOR_CONTEXT_INVALID = 'policy_evaluator_context_invalid',\n}\n","/*\n * Copyright (c) 2024-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AuthupErrorInput } from './types.ts';\nimport {\n    BaseError,\n    INSTANCEOF_PROPERTY,\n    markInstanceof,\n    serializeInstanceofChain,\n} from '@ebec/core';\nimport type { Issue } from 'validup';\n\nexport const AUTHUP_ERROR_INSTANCE = Symbol.for('@authup/errors/AuthupError');\n\nexport class AuthupError extends BaseError {\n    public readonly issues: Issue[];\n\n    public readonly data?: Record<string, any>;\n\n    constructor(input?: AuthupErrorInput) {\n        super(input);\n        markInstanceof(this, AUTHUP_ERROR_INSTANCE);\n\n        this.issues = [];\n\n        if (input && typeof input !== 'string' && input.data) {\n            this.data = input.data;\n        }\n    }\n\n    /**\n     * `super.toJSON()` already emits the serialized marker chain, but the\n     * `data` spread runs after it — re-stamped last so a `data` key cannot\n     * displace the genuine chain.\n     */\n    override toJSON() {\n        return {\n            ...super.toJSON(),\n            issues: this.issues,\n            ...(this.data ?? {}),\n            [INSTANCEOF_PROPERTY]: serializeInstanceofChain(this),\n        };\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const UNAUTHORIZED_ERROR_INSTANCE = Symbol.for('@authup/errors/UnauthorizedError');\n\nexport class UnauthorizedError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.IDENTITY_UNAUTHORIZED,\n            message: 'Authentication required.',\n            ...options,\n        });\n        markInstanceof(this, UNAUTHORIZED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { UnauthorizedError } from './unauthorized.ts';\n\nexport const AUTH_HEADER_ERROR_INSTANCE = Symbol.for('@authup/errors/AuthHeaderError');\n\nexport class AuthHeaderError extends UnauthorizedError {\n    constructor(message: string) {\n        super({\n            code: ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED,\n            message,\n        });\n        markInstanceof(this, AUTH_HEADER_ERROR_INSTANCE);\n    }\n\n    static unsupportedType(type: string) {\n        return new AuthHeaderError(`The authorization header type ${type} is not supported.`);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const BAD_REQUEST_ERROR_INSTANCE = Symbol.for('@authup/errors/BadRequestError');\n\nexport class BadRequestError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.BAD_REQUEST,\n            ...options,\n        });\n        markInstanceof(this, BAD_REQUEST_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2022-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { UnauthorizedError } from './unauthorized.ts';\n\nexport const BEARER_TOKEN_MALFORMED_ERROR_INSTANCE = Symbol.for('@authup/errors/BearerTokenMalformedError');\n\nexport class BearerTokenMalformedError extends UnauthorizedError {\n    constructor(message?: string) {\n        super({\n            code: ErrorCode.HTTP_BEARER_TOKEN_MALFORMED,\n            message: message ?? 'The Authorization header is malformed.',\n        });\n        markInstanceof(this, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    isBaseError,\n    isObject,\n    isError as isRawError,\n    matchesInstanceof,\n} from '@ebec/core';\nimport type { AuthupError } from './module.ts';\nimport { AUTHUP_ERROR_INSTANCE } from './module.ts';\n\n/**\n * Duck-type guard for `Error`.\n *\n * Re-exports `@ebec/core`'s shape-based check: `input` matches when it\n * carries the standard `name` / `message` / `stack` triplet, regardless\n * of which realm or class hierarchy produced it. Use this instead of\n * `instanceof Error` for cross-realm boundaries (worker threads,\n * duplicate-module copies) where `instanceof` can yield false negatives.\n */\nexport function isError(input: unknown): input is Error {\n    return isRawError(input);\n}\n\n/**\n * Duck-type guard for AuthupError.\n *\n * Fast path: input has the AuthupError marker in its `@instanceof` chain —\n * as the native symbol (in-process) or its serialized string form\n * (JSON-rehydrated). Subclass instances also accumulate this marker, so this\n * guard matches any AuthupError subclass (`OAuth2Error`, `JWTError`, etc.).\n *\n * Slow path: input is shape-compatible with AuthupError (BaseError + has\n * `issues: Issue[]`). Catches cases where the marker is missing — plain\n * objects rehydrated from JSON emitted by older builds without the chain.\n */\nexport function isAuthupError(input: unknown): input is AuthupError {\n    if (matchesInstanceof(input, AUTHUP_ERROR_INSTANCE)) {\n        return true;\n    }\n\n    if (!isBaseError(input)) {\n        return false;\n    }\n\n    if (!isObject(input)) {\n        return false;\n    }\n\n    return Array.isArray(input.issues);\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const VALIDATION_ERROR_INSTANCE = Symbol.for('@authup/errors/ValidationError');\n\n/**\n * A domain/business-rule violation raised by core logic. Deliberately NOT\n * named after an HTTP status: core code stays transport-agnostic, and the HTTP\n * adapter maps its `ErrorCode.BAD_REQUEST` to a 400 response\n * (`httpStatusFromCode`). Prefer this over `BadRequestError` in `core/**`.\n */\nexport class ValidationError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.BAD_REQUEST,\n            ...options,\n        });\n        markInstanceof(this, VALIDATION_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_CONFLICT_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityConflictError');\n\nexport class EntityConflictError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_CONFLICT,\n            message: entity ? `The ${entity} already exists.` : 'Entity already exists.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_CONFLICT_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityCredentialsInvalidError');\n\nexport class EntityCredentialsInvalidError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_CREDENTIALS_INVALID,\n            message: entity ? `The ${entity} credentials are invalid.` : 'Credentials are invalid.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_INACTIVE_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityInactiveError');\n\nexport class EntityInactiveError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_INACTIVE,\n            message: entity ? `The ${entity} is inactive.` : 'Entity is inactive.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_INACTIVE_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupEntityErrorOptions } from '../types.ts';\n\nexport const ENTITY_NOT_FOUND_ERROR_INSTANCE = Symbol.for('@authup/errors/EntityNotFoundError');\n\nexport class EntityNotFoundError extends AuthupError {\n    constructor(input?: string | AuthupEntityErrorOptions) {\n        const options: AuthupEntityErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        const { entity, ...rest } = options;\n        super({\n            code: ErrorCode.ENTITY_NOT_FOUND,\n            message: entity ? `The ${entity} was not found.` : 'Entity not found.',\n            ...rest,\n        });\n        markInstanceof(this, ENTITY_NOT_FOUND_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '../constants.ts';\nimport { markInstanceof } from '@ebec/core';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const INTERNAL_ERROR_INSTANCE = Symbol.for('@authup/errors/InternalError');\n\nexport class InternalError extends AuthupError {\n    constructor(input?: string | AuthupErrorOptions) {\n        const options: AuthupErrorOptions = typeof input === 'string' ? { message: input } : (input ?? {});\n        super({\n            code: ErrorCode.INTERNAL_ERROR,\n            message: 'An internal error occurred.',\n            ...options,\n        });\n        markInstanceof(this, INTERNAL_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const LOGIN_THROTTLED_ERROR_INSTANCE = Symbol.for('@authup/errors/LoginThrottledError');\n\nexport type LoginThrottledErrorOptions = AuthupErrorOptions & {\n    /**\n     * Seconds until the sliding throttle window can release the pair.\n     */\n    retryAfter?: number,\n};\n\nexport class LoginThrottledError extends AuthupError {\n    constructor(input?: LoginThrottledErrorOptions) {\n        const { retryAfter, ...rest } = input ?? {};\n        super({\n            code: ErrorCode.LOGIN_ATTEMPT_THROTTLED,\n            message: 'Too many failed login attempts. Please try again later.',\n            ...rest,\n            data: {\n                ...(typeof retryAfter === 'number' ? { retryAfter } : {}),\n                ...(rest.data ?? {}),\n            },\n        });\n        markInstanceof(this, LOGIN_THROTTLED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { markInstanceof } from '@ebec/core';\nimport { ErrorCode } from '../constants.ts';\nimport { AuthupError } from '../module.ts';\nimport type { AuthupErrorOptions } from '../types.ts';\n\nexport const MFA_THROTTLED_ERROR_INSTANCE = Symbol.for('@authup/errors/MfaThrottledError');\n\nexport type MfaThrottledErrorOptions = AuthupErrorOptions & {\n    /**\n     * Seconds until the exponential backoff releases the account.\n     */\n    retryAfter?: number,\n};\n\nexport class MfaThrottledError extends AuthupError {\n    constructor(input?: MfaThrottledErrorOptions) {\n        const { retryAfter, ...rest } = input ?? {};\n        super({\n            code: ErrorCode.MFA_ATTEMPT_THROTTLED,\n            message: 'Too many failed verification attempts. Please try again later.',\n            ...rest,\n            data: {\n                ...(typeof retryAfter === 'number' ? { retryAfter } : {}),\n                ...(rest.data ?? {}),\n            },\n        });\n        markInstanceof(this, MFA_THROTTLED_ERROR_INSTANCE);\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isAuthupError } from '../check.ts';\nimport { ErrorCode } from '../constants.ts';\nimport { matchesInstanceof } from '@ebec/core';\nimport { AUTH_HEADER_ERROR_INSTANCE, type AuthHeaderError } from './auth-header.ts';\nimport { BAD_REQUEST_ERROR_INSTANCE, type BadRequestError } from './bad-request.ts';\nimport { VALIDATION_ERROR_INSTANCE, type ValidationError } from './validation.ts';\nimport { BEARER_TOKEN_MALFORMED_ERROR_INSTANCE, type BearerTokenMalformedError } from './bearer-token.ts';\nimport { ENTITY_CONFLICT_ERROR_INSTANCE, type EntityConflictError } from './entity-conflict.ts';\nimport { ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE, type EntityCredentialsInvalidError } from './entity-credentials-invalid.ts';\nimport { ENTITY_INACTIVE_ERROR_INSTANCE, type EntityInactiveError } from './entity-inactive.ts';\nimport { ENTITY_NOT_FOUND_ERROR_INSTANCE, type EntityNotFoundError } from './entity-not-found.ts';\nimport { INTERNAL_ERROR_INSTANCE, type InternalError } from './internal.ts';\nimport { LOGIN_THROTTLED_ERROR_INSTANCE, type LoginThrottledError } from './login-throttled.ts';\nimport { MFA_THROTTLED_ERROR_INSTANCE, type MfaThrottledError } from './mfa-throttled.ts';\nimport { UNAUTHORIZED_ERROR_INSTANCE, type UnauthorizedError } from './unauthorized.ts';\n\nexport function isAuthHeaderError(input: unknown): input is AuthHeaderError {\n    if (matchesInstanceof(input, AUTH_HEADER_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED;\n}\n\nexport function isBearerTokenMalformedError(input: unknown): input is BearerTokenMalformedError {\n    if (matchesInstanceof(input, BEARER_TOKEN_MALFORMED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.HTTP_BEARER_TOKEN_MALFORMED;\n}\n\nexport function isBadRequestError(input: unknown): input is BadRequestError {\n    if (matchesInstanceof(input, BAD_REQUEST_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.BAD_REQUEST;\n}\n\nexport function isValidationError(input: unknown): input is ValidationError {\n    if (matchesInstanceof(input, VALIDATION_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.BAD_REQUEST;\n}\n\nexport function isUnauthorizedError(input: unknown): input is UnauthorizedError {\n    if (matchesInstanceof(input, UNAUTHORIZED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.IDENTITY_UNAUTHORIZED;\n}\n\nexport function isEntityNotFoundError(input: unknown): input is EntityNotFoundError {\n    if (matchesInstanceof(input, ENTITY_NOT_FOUND_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_NOT_FOUND;\n}\n\nexport function isEntityConflictError(input: unknown): input is EntityConflictError {\n    if (matchesInstanceof(input, ENTITY_CONFLICT_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_CONFLICT;\n}\n\nexport function isEntityInactiveError(input: unknown): input is EntityInactiveError {\n    if (matchesInstanceof(input, ENTITY_INACTIVE_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_INACTIVE;\n}\n\nexport function isEntityCredentialsInvalidError(input: unknown): input is EntityCredentialsInvalidError {\n    if (matchesInstanceof(input, ENTITY_CREDENTIALS_INVALID_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.ENTITY_CREDENTIALS_INVALID;\n}\n\nexport function isInternalError(input: unknown): input is InternalError {\n    if (matchesInstanceof(input, INTERNAL_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.INTERNAL_ERROR;\n}\n\nexport function isLoginThrottledError(input: unknown): input is LoginThrottledError {\n    if (matchesInstanceof(input, LOGIN_THROTTLED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.LOGIN_ATTEMPT_THROTTLED;\n}\n\nexport function isMfaThrottledError(input: unknown): input is MfaThrottledError {\n    if (matchesInstanceof(input, MFA_THROTTLED_ERROR_INSTANCE)) return true;\n    if (!isAuthupError(input)) return false;\n    return input.code === ErrorCode.MFA_ATTEMPT_THROTTLED;\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { isError } from './check.ts';\n\n/**\n * Normalize an arbitrary thrown value into an `Error` instance.\n *\n * Useful at error-pipeline boundaries (catch blocks, error middleware,\n * fallbacks) where TypeScript hands you `unknown` but downstream code\n * wants a real `Error` to inspect or rethrow. Duck-typed: any value\n * passing `isError` is returned as-is. Strings become `new Error(str)`;\n * any other value is stringified.\n */\nexport function normalizeError(input: unknown): Error {\n    if (isError(input)) {\n        return input;\n    }\n\n    if (typeof input === 'string') {\n        return new Error(input);\n    }\n\n    return new Error(String(input));\n}\n\n","/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { isObject } from '@ebec/core';\n\n/**\n * Convert an `Error` (or any value with a `toJSON()` method) into a\n * plain object suitable for embedding in a JSON response body.\n *\n * Calls `input.toJSON()` if present — preserves every attribute the\n * error chose to surface (`code`, `cause`, `errors`, `issues`, `data`,\n * AuthupError sub-class fields, ...). Falls back to spreading the\n * Error's enumerable own properties alongside the standard\n * `name` / `message` pair, so caller-attached fields survive.\n *\n * Pair with `normalizeError` to handle arbitrary thrown values:\n * `serializeError(normalizeError(e))`.\n */\nexport function serializeError(input: Error): Record<string, any> {\n    if ('toJSON' in input && typeof input.toJSON === 'function') {\n        const output = input.toJSON();\n        if (isObject(output)) {\n            return output;\n        }\n    }\n\n    return {\n        ...input,\n        name: input.name,\n        message: input.message,\n    };\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from './constants.ts';\n\n/**\n * Default mapping from `ErrorCode` to HTTP status. Adapters apply this and\n * may layer their own overrides on top. Codes not listed here fall back\n * to 400 (Bad Request) — which is the right default for \"validation /\n * malformed-request\" style errors.\n *\n * The mapping mirrors the HTTP statuses produced by the pre-refactor\n * `@ebec/http`-coupled error classes, with one intentional change:\n *\n * - `OAUTH_CLIENT_INVALID`: 400 → **401**, per RFC 6749 §5.2 (`invalid_client`\n *   responses should use 401). Surfaces as a behavior change in HTTP-level\n *   tests asserting `status: 400, code: OAUTH_CLIENT_INVALID`.\n */\nexport const ERROR_CODE_TO_STATUS: Readonly<Partial<Record<`${ErrorCode}`, number>>> = {\n    // 401\n    [ErrorCode.OAUTH_CLIENT_INVALID]: 401,\n    [ErrorCode.HTTP_BEARER_TOKEN_MALFORMED]: 401,\n    [ErrorCode.HTTP_HEADER_AUTH_TYPE_UNSUPPORTED]: 401,\n    [ErrorCode.IDENTITY_UNAUTHORIZED]: 401,\n\n    // 403\n    [ErrorCode.PERMISSION_NOT_FOUND]: 403,\n    [ErrorCode.PERMISSION_DENIED]: 403,\n    [ErrorCode.PERMISSION_EVALUATION_FAILED]: 403,\n\n    // 404\n    [ErrorCode.ENTITY_NOT_FOUND]: 404,\n    [ErrorCode.JWK_NOT_FOUND]: 404,\n\n    // 409\n    [ErrorCode.ENTITY_CONFLICT]: 409,\n\n    // 429\n    [ErrorCode.LOGIN_ATTEMPT_THROTTLED]: 429,\n    [ErrorCode.MFA_ATTEMPT_THROTTLED]: 429,\n\n    // 500\n    [ErrorCode.INTERNAL_ERROR]: 500,\n\n    // 507\n    [ErrorCode.STORAGE_INSUFFICIENT]: 507,\n};\n\n/**\n * Resolve an HTTP status for a given error code. Unknown codes fall back\n * to `fallback` (default 400).\n */\nexport function httpStatusFromCode(code: string, fallback = 400): number {\n    return ERROR_CODE_TO_STATUS[code as `${ErrorCode}`] ?? fallback;\n}\n\n/**\n * Resolve a semantic `ErrorCode` for a foreign HTTP status. Used at the\n * boundary where a non-AuthupError (e.g. `@ebec/http` HTTPError thrown by\n * the framework, or a foreign service response) enters our system and\n * needs to be normalized into an `AuthupError` with an authup-vocabulary\n * code. Status is the only stable handshake across the two vocabularies.\n *\n * Default mapping covers the common HTTP statuses. Anything 5xx\n * collapses to `INTERNAL_ERROR`; unknown 4xx collapses to `BAD_REQUEST`.\n */\nexport function codeFromHttpStatus(status: number): ErrorCode {\n    if (status === 404) return ErrorCode.ENTITY_NOT_FOUND;\n    if (status === 409) return ErrorCode.ENTITY_CONFLICT;\n    if (status === 401) return ErrorCode.IDENTITY_UNAUTHORIZED;\n    if (status === 403) return ErrorCode.PERMISSION_DENIED;\n    if (status === 429) return ErrorCode.LOGIN_ATTEMPT_THROTTLED;\n    if (status === 507) return ErrorCode.STORAGE_INSUFFICIENT;\n    if (status >= 500) return ErrorCode.INTERNAL_ERROR;\n    return ErrorCode.BAD_REQUEST;\n}\n"],"mappings":";;AAOA,IAAY,YAAL,yBAAA,WAAA;CAEH,UAAA,iBAAA;CACA,UAAA,oBAAA;CAGA,UAAA,uCAAA;CACA,UAAA,iCAAA;CAGA,UAAA,2BAAA;CAGA,UAAA,gCAAA;CACA,UAAA,qBAAA;CACA,UAAA,sBAAA;CACA,UAAA,qBAAA;CACA,UAAA,6BAAA;CAGA,UAAA,2BAAA;CACA,UAAA,gCAAA;CACA,UAAA,iCAAA;CACA,UAAA,yBAAA;CACA,UAAA,6BAAA;CACA,UAAA,2BAAA;CACA,UAAA,0BAAA;CAGA,UAAA,0BAAA;CAGA,UAAA,iBAAA;CACA,UAAA,mBAAA;CAGA,UAAA,iBAAA;CACA,UAAA,kBAAA;CACA,UAAA,iBAAA;CAGA,UAAA,iCAAA;CACA,UAAA,0BAAA;CACA,UAAA,+BAAA;CACA,UAAA,yBAAA;CACA,UAAA,kCAAA;CACA,UAAA,2BAAA;CACA,UAAA,0BAAA;CACA,UAAA,wBAAA;CACA,UAAA,yBAAA;CACA,UAAA,gCAAA;CACA,UAAA,sCAAA;CACA,UAAA,4BAAA;CACA,UAAA,qCAAA;CACA,UAAA,yBAAA;CACA,UAAA,8BAAA;CAGA,UAAA,0BAAA;CACA,UAAA,uBAAA;CACA,UAAA,kCAAA;CAGA,UAAA,gCAAA;CACA,UAAA,sCAAA;CACA,UAAA,sCAAA;;AACJ,EAAA,CAAA,CAAA;;;ACzDA,MAAa,wBAAwB,OAAO,IAAI,4BAA4B;AAE5E,IAAa,cAAb,cAAiC,UAAU;CACvC;CAEA;CAEA,YAAY,OAA0B;EAClC,MAAM,KAAK;EACX,iBAAe,MAAM,qBAAqB;EAE1C,KAAK,SAAS,CAAC;EAEf,IAAI,SAAS,OAAO,UAAU,YAAY,MAAM,MAC5C,KAAK,OAAO,MAAM;CAE1B;;;;;;CAOA,SAAkB;EACd,OAAO;GACH,GAAG,MAAM,OAAO;GAChB,QAAQ,KAAK;GACb,GAAI,KAAK,QAAQ,CAAC;IACjBA,wBAAsBC,2BAAyB,IAAI;EACxD;CACJ;AACJ;;;ACnCA,MAAa,8BAA8B,OAAO,IAAI,kCAAkC;AAExF,IAAa,oBAAb,cAAuC,YAAY;CAC/C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAJgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAKhG,CAAC;EACD,iBAAe,MAAM,2BAA2B;CACpD;AACJ;;;ACbA,MAAa,6BAA6B,OAAO,IAAI,gCAAgC;AAErF,IAAa,kBAAb,MAAa,wBAAwB,kBAAkB;CACnD,YAAY,SAAiB;EACzB,MAAM;GACF,MAAA;GACA;EACJ,CAAC;EACD,iBAAe,MAAM,0BAA0B;CACnD;CAEA,OAAO,gBAAgB,MAAc;EACjC,OAAO,IAAI,gBAAgB,iCAAiC,KAAK,mBAAmB;CACxF;AACJ;;;ACbA,MAAa,6BAA6B,OAAO,IAAI,gCAAgC;AAErF,IAAa,kBAAb,cAAqC,YAAY;CAC7C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,GAHgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAIhG,CAAC;EACD,iBAAe,MAAM,0BAA0B;CACnD;AACJ;;;ACZA,MAAa,wCAAwC,OAAO,IAAI,0CAA0C;AAE1G,IAAa,4BAAb,cAA+C,kBAAkB;CAC7D,YAAY,SAAkB;EAC1B,MAAM;GACF,MAAA;GACA,SAAS,WAAW;EACxB,CAAC;EACD,iBAAe,MAAM,qCAAqC;CAC9D;AACJ;;;;;;;;;;;;ACIA,SAAgB,QAAQ,OAAgC;CACpD,OAAOC,UAAW,KAAK;AAC3B;;;;;;;;;;;;;AAcA,SAAgB,cAAc,OAAsC;CAChE,IAAIC,oBAAkB,OAAO,qBAAqB,GAC9C,OAAO;CAGX,IAAI,CAAC,YAAY,KAAK,GAClB,OAAO;CAGX,IAAI,CAAC,SAAS,KAAK,GACf,OAAO;CAGX,OAAO,MAAM,QAAQ,MAAM,MAAM;AACrC;;;AC3CA,MAAa,4BAA4B,OAAO,IAAI,gCAAgC;;;;;;;AAQpF,IAAa,kBAAb,cAAqC,YAAY;CAC7C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,GAHgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAIhG,CAAC;EACD,iBAAe,MAAM,yBAAyB;CAClD;AACJ;;;ACjBA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAE7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,oBAAoB;GACpD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACbA,MAAa,4CAA4C,OAAO,IAAI,8CAA8C;AAElH,IAAa,gCAAb,cAAmD,YAAY;CAC3D,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,6BAA6B;GAC7D,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,yCAAyC;CAClE;AACJ;;;ACbA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAE7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,iBAAiB;GACjD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACbA,MAAa,kCAAkC,OAAO,IAAI,oCAAoC;AAE9F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAA2C;EAEnD,MAAM,EAAE,QAAQ,GAAG,SADuB,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAEtG,MAAM;GACF,MAAA;GACA,SAAS,SAAS,OAAO,OAAO,mBAAmB;GACnD,GAAG;EACP,CAAC;EACD,iBAAe,MAAM,+BAA+B;CACxD;AACJ;;;ACbA,MAAa,0BAA0B,OAAO,IAAI,8BAA8B;AAEhF,IAAa,gBAAb,cAAmC,YAAY;CAC3C,YAAY,OAAqC;EAE7C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAJgC,OAAO,UAAU,WAAW,EAAE,SAAS,MAAM,IAAK,SAAS,CAAC;EAKhG,CAAC;EACD,iBAAe,MAAM,uBAAuB;CAChD;AACJ;;;ACZA,MAAa,iCAAiC,OAAO,IAAI,oCAAoC;AAS7F,IAAa,sBAAb,cAAyC,YAAY;CACjD,YAAY,OAAoC;EAC5C,MAAM,EAAE,YAAY,GAAG,SAAS,SAAS,CAAC;EAC1C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAAG;GACH,MAAM;IACF,GAAI,OAAO,eAAe,WAAW,EAAE,WAAW,IAAI,CAAC;IACvD,GAAI,KAAK,QAAQ,CAAC;GACtB;EACJ,CAAC;EACD,iBAAe,MAAM,8BAA8B;CACvD;AACJ;;;ACvBA,MAAa,+BAA+B,OAAO,IAAI,kCAAkC;AASzF,IAAa,oBAAb,cAAuC,YAAY;CAC/C,YAAY,OAAkC;EAC1C,MAAM,EAAE,YAAY,GAAG,SAAS,SAAS,CAAC;EAC1C,MAAM;GACF,MAAA;GACA,SAAS;GACT,GAAG;GACH,MAAM;IACF,GAAI,OAAO,eAAe,WAAW,EAAE,WAAW,IAAI,CAAC;IACvD,GAAI,KAAK,QAAQ,CAAC;GACtB;EACJ,CAAC;EACD,iBAAe,MAAM,4BAA4B;CACrD;AACJ;;;ACZA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIC,oBAAkB,OAAO,0BAA0B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,4BAA4B,OAAoD;CAC5F,IAAIA,oBAAkB,OAAO,qCAAqC,GAAG,OAAO;CAC5E,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIA,oBAAkB,OAAO,0BAA0B,GAAG,OAAO;CACjE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,kBAAkB,OAA0C;CACxE,IAAIA,oBAAkB,OAAO,yBAAyB,GAAG,OAAO;CAChE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,oBAAoB,OAA4C;CAC5E,IAAIA,oBAAkB,OAAO,2BAA2B,GAAG,OAAO;CAClE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,oBAAkB,OAAO,+BAA+B,GAAG,OAAO;CACtE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,oBAAkB,OAAO,8BAA8B,GAAG,OAAO;CACrE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,oBAAkB,OAAO,8BAA8B,GAAG,OAAO;CACrE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,gCAAgC,OAAwD;CACpG,IAAIA,oBAAkB,OAAO,yCAAyC,GAAG,OAAO;CAChF,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,gBAAgB,OAAwC;CACpE,IAAIA,oBAAkB,OAAO,uBAAuB,GAAG,OAAO;CAC9D,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,sBAAsB,OAA8C;CAChF,IAAIA,oBAAkB,OAAO,8BAA8B,GAAG,OAAO;CACrE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;AAEA,SAAgB,oBAAoB,OAA4C;CAC5E,IAAIA,oBAAkB,OAAO,4BAA4B,GAAG,OAAO;CACnE,IAAI,CAAC,cAAc,KAAK,GAAG,OAAO;CAClC,OAAO,MAAM,SAAA;AACjB;;;;;;;;;;;;AC3EA,SAAgB,eAAe,OAAuB;CAClD,IAAI,QAAQ,KAAK,GACb,OAAO;CAGX,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,MAAM,KAAK;CAG1B,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC;AAClC;;;;;;;;;;;;;;;;ACNA,SAAgB,eAAe,OAAmC;CAC9D,IAAI,YAAY,SAAS,OAAO,MAAM,WAAW,YAAY;EACzD,MAAM,SAAS,MAAM,OAAO;EAC5B,IAAI,SAAS,MAAM,GACf,OAAO;CAEf;CAEA,OAAO;EACH,GAAG;EACH,MAAM,MAAM;EACZ,SAAS,MAAM;CACnB;AACJ;;;;;;;;;;;;;;;;ACbA,MAAa,uBAA0E;EAEjD,mBAAA;EACO,2BAAA;EACM,iCAAA;EACZ,0BAAA;EAGD,yBAAA;EACH,sBAAA;EACW,iCAAA;EAGZ,qBAAA;EACH,kBAAA;EAGE,oBAAA;EAGQ,4BAAA;EACF,0BAAA;EAGP,mBAAA;EAGM,yBAAA;AACtC;;;;;AAMA,SAAgB,mBAAmB,MAAc,WAAW,KAAa;CACrE,OAAO,qBAAqB,SAA2B;AAC3D;;;;;;;;;;;AAYA,SAAgB,mBAAmB,QAA2B;CAC1D,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,WAAW,KAAK,OAAA;CACpB,IAAI,UAAU,KAAK,OAAA;CACnB,OAAA;AACJ"}

package/dist/module.d.ts

@@ -6,7 +6,13 @@ export declare class AuthupError extends BaseError {
     readonly issues: Issue[];
     readonly data?: Record<string, any>;
     constructor(input?: AuthupErrorInput);
+    /**
+     * `super.toJSON()` already emits the serialized marker chain, but the
+     * `data` spread runs after it — re-stamped last so a `data` key cannot
+     * displace the genuine chain.
+     */
     toJSON(): {
+        "@instanceof": string[];
         issues: Issue[];
         name: string;
         message: string;

package/dist/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,SAAS,EAAkB,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,qBAAqB,eAA2C,CAAC;AAE9E,qBAAa,WAAY,SAAQ,SAAS;IACtC,SAAgB,MAAM,EAAE,KAAK,EAAE,CAAC;IAEhC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAE/B,KAAK,CAAC,EAAE,gBAAgB;IAW3B,MAAM;;;;;;;;CAOlB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EACH,SAAS,EAIZ,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,qBAAqB,eAA2C,CAAC;AAE9E,qBAAa,WAAY,SAAQ,SAAS;IACtC,SAAgB,MAAM,EAAE,KAAK,EAAE,CAAC;IAEhC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAE/B,KAAK,CAAC,EAAE,gBAAgB;IAWpC;;;;OAIG;IACM,MAAM;;;;;;;;;CAQlB"}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@authup/errors",
     "type": "module",
-    "version": "1.0.0-beta.56",
+    "version": "1.0.0-beta.58",
     "description": "Package containing error codes and basic error classes.",
     "license": "Apache-2.0",
     "exports": {
@@ -19,7 +19,8 @@
     "scripts": {
         "build:types": "tsc --emitDeclarationOnly -p tsconfig.build.json",
         "build:js": "tsdown",
-        "build": "rimraf ./dist && npm run build:js && npm run build:types"
+        "build": "rimraf ./dist && npm run build:js && npm run build:types",
+        "test": "cross-env NODE_ENV=test vitest run test/unit"
     },
     "engines": {
         "node": "^22.13.0 || ^23.5.0 || >=24.0.0"
@@ -49,8 +50,11 @@
     },
     "homepage": "https://github.com/authup/authup#readme",
     "dependencies": {
-        "@ebec/core": "^1.1.0",
-        "validup": "^0.5.1"
+        "@ebec/core": "^1.2.0",
+        "validup": "^1.0.0"
+    },
+    "devDependencies": {
+        "vitest": "^4.0.14"
     },
     "publishConfig": {
         "access": "public"