@betterportal/auth-workos 0.0.1

package/README.md

@@ -0,0 +1,18 @@
+# BetterPortal WorkOS Auth Service
+
+WorkOS AuthKit provider for BetterPortal. The service redirects users to WorkOS, exchanges the callback code server-side with the WorkOS Node SDK, issues BetterPortal tokens, and refreshes BP tokens from the WorkOS refresh token.
+
+Per-app service config requires:
+
+- `clientId`
+- `apiKey`
+
+Optional config:
+
+- `provider` defaults to `authkit`
+- `connectionId`, `organizationId`, `domainHint`
+- `scopes`
+- `loginRedirectPath`, `logoutRedirectPath`
+- `roleClaimPath` defaults to `roles`
+
+Registry org: `betterportal`.

package/bsb-plugin.json

@@ -0,0 +1,23 @@
+{
+  "nodejs": [
+    {
+      "id": "service-betterportal-auth-workos",
+      "name": "service.betterportal.auth.workos",
+      "basePath": "./",
+      "description": "BetterPortal WorkOS auth service",
+      "tags": [
+        "betterportal",
+        "auth",
+        "workos"
+      ],
+      "documentation": [
+        "./README.md"
+      ],
+      "pluginPath": "src/plugins/service-betterportal-auth-workos/",
+      "image": "./betterportal-logo.png",
+      "links": {
+        "github": "git+https://github.com/BetterCorp/BetterPortal.git"
+      }
+    }
+  ]
+}

package/lib/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./plugins/service-betterportal-auth-workos/index.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qDAAqD,CAAC"}

package/lib/index.js

@@ -0,0 +1,2 @@
+export * from "./plugins/service-betterportal-auth-workos/index.js";
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qDAAqD,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/.bp-generated/registry.d.ts

@@ -0,0 +1,3 @@
+import type { BetterPortalRegistry } from "@betterportal/framework";
+export declare const registry: BetterPortalRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/.bp-generated/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/plugins/service-betterportal-auth-workos/.bp-generated/registry.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,eAAO,MAAM,QAAQ,EAAE,oBAoFtB,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/.bp-generated/registry.js

@@ -0,0 +1,97 @@
+// AUTO-GENERATED by BetterPortal codegen - DO NOT EDIT
+import * as loginRoute from "../bp-routes/login/index.js";
+import * as loginGETRoute from "../bp-routes/login/GET.js";
+import * as loginBootstrap1PageGET from "../bp-routes/login/_theme.bootstrap1/GET.js";
+import * as loginBootstrap1BackgroundMonitorGET from "../bp-routes/login/_theme.bootstrap1/_background.monitor.GET.js";
+import * as loginBootstrap1NavProfileGET from "../bp-routes/login/_theme.bootstrap1/_nav.profile.GET.js";
+import * as loginEmbeddedBackgroundMonitorGET from "../bp-routes/login/_theme.embedded/_background.monitor.GET.js";
+import * as logoutRoute from "../bp-routes/logout/index.js";
+import * as logoutGETRoute from "../bp-routes/logout/GET.js";
+import * as refreshRoute from "../bp-routes/refresh/index.js";
+import * as refreshPOSTRoute from "../bp-routes/refresh/POST.js";
+export const registry = {
+    routes: [
+        {
+            viewId: "login.index",
+            path: "/login",
+            methods: ["GET"],
+            paramNames: [],
+            schemas: {
+                response: loginGETRoute.ResponseSchema,
+                query: loginGETRoute.QuerySchema,
+                headers: loginGETRoute.HeadersSchema
+            },
+            methodRoutes: { GET: { method: "GET", schemas: {
+                        response: loginGETRoute.ResponseSchema,
+                        query: loginGETRoute.QuerySchema,
+                        headers: loginGETRoute.HeadersSchema
+                    }, handler: loginGETRoute.default } },
+            handlers: { GET: loginGETRoute.default },
+            title: loginRoute.title,
+            description: loginRoute.description,
+            auth: loginRoute.auth,
+            role: loginRoute.role,
+            dependencies: loginRoute.dependencies,
+            chrome: loginRoute.chrome,
+            cacheHints: loginRoute.cacheHints,
+            demoScenarios: [],
+            themeRenderers: {
+                "bootstrap1": {
+                    pages: [{ rendererId: "default", type: "page", method: "GET", render: loginBootstrap1PageGET.render }],
+                    components: [],
+                    fragments: [{ rendererId: "background.monitor", type: "fragment", method: "GET", fragmentLocation: "background", fragmentId: "monitor", render: loginBootstrap1BackgroundMonitorGET.render }, { rendererId: "nav.profile", type: "fragment", method: "GET", fragmentLocation: "nav", fragmentId: "profile", render: loginBootstrap1NavProfileGET.render }]
+                },
+                "embedded": {
+                    pages: [],
+                    components: [],
+                    fragments: [{ rendererId: "background.monitor", type: "fragment", method: "GET", fragmentLocation: "background", fragmentId: "monitor", render: loginEmbeddedBackgroundMonitorGET.render }]
+                }
+            }
+        },
+        {
+            viewId: "logout.index",
+            path: "/logout",
+            methods: ["GET"],
+            paramNames: [],
+            schemas: {
+                response: logoutGETRoute.ResponseSchema,
+                query: logoutGETRoute.QuerySchema
+            },
+            methodRoutes: { GET: { method: "GET", schemas: {
+                        response: logoutGETRoute.ResponseSchema,
+                        query: logoutGETRoute.QuerySchema
+                    }, handler: logoutGETRoute.default } },
+            handlers: { GET: logoutGETRoute.default },
+            title: logoutRoute.title,
+            description: logoutRoute.description,
+            auth: logoutRoute.auth,
+            role: logoutRoute.role,
+            cacheHints: logoutRoute.cacheHints,
+            demoScenarios: [],
+            themeRenderers: {}
+        },
+        {
+            viewId: "refresh.index",
+            path: "/refresh",
+            methods: ["POST"],
+            paramNames: [],
+            schemas: {
+                response: refreshPOSTRoute.ResponseSchema,
+                request: refreshPOSTRoute.RequestSchema
+            },
+            methodRoutes: { POST: { method: "POST", schemas: {
+                        response: refreshPOSTRoute.ResponseSchema,
+                        request: refreshPOSTRoute.RequestSchema
+                    }, handler: refreshPOSTRoute.default } },
+            handlers: { POST: refreshPOSTRoute.default },
+            title: refreshRoute.title,
+            description: refreshRoute.description,
+            auth: refreshRoute.auth,
+            role: refreshRoute.role,
+            cacheHints: refreshRoute.cacheHints,
+            demoScenarios: [],
+            themeRenderers: {}
+        }
+    ]
+};
+//# sourceMappingURL=registry.js.map

package/lib/plugins/service-betterportal-auth-workos/.bp-generated/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/plugins/service-betterportal-auth-workos/.bp-generated/registry.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,OAAO,KAAK,UAAU,MAAM,6BAA6B,CAAC;AAC1D,OAAO,KAAK,aAAa,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,sBAAsB,MAAM,6CAA6C,CAAC;AACtF,OAAO,KAAK,mCAAmC,MAAM,iEAAiE,CAAC;AACvH,OAAO,KAAK,4BAA4B,MAAM,0DAA0D,CAAC;AACzG,OAAO,KAAK,iCAAiC,MAAM,+DAA+D,CAAC;AACnH,OAAO,KAAK,WAAW,MAAM,8BAA8B,CAAC;AAC5D,OAAO,KAAK,cAAc,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,YAAY,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,gBAAgB,MAAM,8BAA8B,CAAC;AAGjE,MAAM,CAAC,MAAM,QAAQ,GAAyB;IAC5C,MAAM,EAAE;QACN;YACE,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,KAAK,CAAC;YAChB,UAAU,EAAE,EAAE;YACd,OAAO,EAAE;gBACP,QAAQ,EAAE,aAAa,CAAC,cAAc;gBACtC,KAAK,EAAE,aAAa,CAAC,WAAW;gBAChC,OAAO,EAAE,aAAa,CAAC,aAAa;aACrC;YACD,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;wBAC7C,QAAQ,EAAE,aAAa,CAAC,cAAc;wBACtC,KAAK,EAAE,aAAa,CAAC,WAAW;wBAChC,OAAO,EAAE,aAAa,CAAC,aAAa;qBACrC,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,EAAE;YACrC,QAAQ,EAAE,EAAE,GAAG,EAAE,aAAa,CAAC,OAAO,EAAE;YACxC,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,aAAa,EAAE,EAAE;YACjB,cAAc,EAAE;gBACd,YAAY,EAAE;oBACZ,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,MAAM,EAAE,CAAC;oBACtG,UAAU,EAAE,EAAE;oBACd,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,mCAAmC,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,CAAC,MAAM,EAAE,CAAC;iBAC3V;gBACD,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE;oBACT,UAAU,EAAE,EAAE;oBACd,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,iCAAiC,CAAC,MAAM,EAAE,CAAC;iBAC5L;aACF;SACF;QACD;YACE,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,KAAK,CAAC;YAChB,UAAU,EAAE,EAAE;YACd,OAAO,EAAE;gBACP,QAAQ,EAAE,cAAc,CAAC,cAAc;gBACvC,KAAK,EAAE,cAAc,CAAC,WAAW;aAClC;YACD,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;wBAC7C,QAAQ,EAAE,cAAc,CAAC,cAAc;wBACvC,KAAK,EAAE,cAAc,CAAC,WAAW;qBAClC,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,EAAE;YACtC,QAAQ,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,OAAO,EAAE;YACzC,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,aAAa,EAAE,EAAE;YACjB,cAAc,EAAE,EAAE;SACnB;QACD;YACE,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,UAAU,EAAE,EAAE;YACd,OAAO,EAAE;gBACP,QAAQ,EAAE,gBAAgB,CAAC,cAAc;gBACzC,OAAO,EAAE,gBAAgB,CAAC,aAAa;aACxC;YACD,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;wBAC/C,QAAQ,EAAE,gBAAgB,CAAC,cAAc;wBACzC,OAAO,EAAE,gBAAgB,CAAC,aAAa;qBACxC,EAAE,OAAO,EAAE,gBAAgB,CAAC,OAAO,EAAE,EAAE;YACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,OAAO,EAAE;YAC5C,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,aAAa,EAAE,EAAE;YACjB,cAAc,EAAE,EAAE;SACnB;KACF;CACF,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/GET.d.ts

@@ -0,0 +1,3 @@
+export { ResponseSchema, QuerySchema, HeadersSchema } from "./route.impl.js";
+export { handleGet as default } from "./route.impl.js";
+//# sourceMappingURL=GET.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,MAAM,iBAAiB,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/GET.js

@@ -0,0 +1,3 @@
+export { ResponseSchema, QuerySchema, HeadersSchema } from "./route.impl.js";
+export { handleGet as default } from "./route.impl.js";
+//# sourceMappingURL=GET.js.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,MAAM,iBAAiB,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/GET.d.ts

@@ -0,0 +1,5 @@
+/** @jsxImportSource jsx-htmx */
+import type { HtmlRenderable } from "@betterportal/framework";
+import type { ResponseData } from "../route.impl.js";
+export declare function render(data: ResponseData): HtmlRenderable;
+//# sourceMappingURL=GET.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.d.ts","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/GET.tsx"],"names":[],"mappings":"AAAA,gCAAgC;AAEhC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,wBAAgB,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CAyFzD"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/GET.js

@@ -0,0 +1,61 @@
+import { jsx as _jsx, jsxs as _jsxs } from "jsx-htmx/jsx-runtime";
+import { js } from "jsx-htmx";
+export function render(data) {
+    const next = data.nextUrl || "/";
+    if (data.loggedOut) {
+        return (_jsx("div", { class: "container py-5", style: "max-width: 420px;", children: _jsx("div", { class: "card border-0 shadow-sm", children: _jsxs("div", { class: "card-body text-center", children: [_jsx("h3", { class: "card-title mb-1", children: "Signed out" }), _jsx("p", { class: "text-secondary small mb-4", children: "You have been signed out." }), _jsx("a", { class: "btn btn-primary w-100", href: next, children: "Continue" })] }) }) }));
+    }
+    const redirectUrl = data.authorizationUrl || (data.alreadyLoggedIn || data.signedIn ? next : "");
+    return (_jsxs("main", { class: "bp-workos-shell", "data-redirect-url": redirectUrl, "data-mode": data.status, children: [_jsxs("section", { class: "bp-workos-panel", children: [_jsx("div", { class: "bp-workos-mark", "aria-hidden": "true", children: "W" }), _jsx("h1", { children: "Sign in" }), _jsx("p", { class: "bp-workos-copy", children: "Continue with WorkOS." }), data.status === "error" ? (_jsx("div", { class: "alert alert-danger mb-0", role: "alert", children: data.message || "WorkOS sign in failed." })) : (_jsx("a", { class: "btn btn-primary w-100", href: redirectUrl || next, children: "Continue" }))] }), _jsx("script", { children: js(() => {
+                    const root = document.currentScript?.closest(".bp-workos-shell");
+                    const url = root?.dataset.redirectUrl;
+                    if (!url || root?.dataset.mode === "error")
+                        return;
+                    const link = document.createElement("a");
+                    link.href = url;
+                    document.body.appendChild(link);
+                    link.click();
+                    link.remove();
+                }) }), _jsx("style", { children: `
+          .bp-workos-shell {
+            min-height: 100vh;
+            width: 100%;
+            display: grid;
+            place-items: center;
+            padding: 24px;
+            background: linear-gradient(180deg, #f8fafc 0%, #eef2f7 100%);
+            color: #111827;
+          }
+          .bp-workos-panel {
+            width: min(420px, 100%);
+            border: 1px solid rgba(15, 23, 42, 0.1);
+            border-radius: 8px;
+            background: rgba(255, 255, 255, 0.96);
+            padding: 32px;
+            box-shadow: 0 24px 70px rgba(15, 23, 42, 0.16);
+          }
+          .bp-workos-mark {
+            width: 44px;
+            height: 44px;
+            display: grid;
+            place-items: center;
+            border-radius: 8px;
+            background: #111827;
+            color: #fff;
+            font-weight: 700;
+            margin-bottom: 18px;
+          }
+          .bp-workos-panel h1 {
+            margin: 0 0 6px;
+            font-size: 26px;
+            line-height: 1.2;
+            font-weight: 700;
+          }
+          .bp-workos-copy {
+            margin: 0 0 24px;
+            color: #64748b;
+            font-size: 14px;
+          }
+        ` })] }));
+}
+//# sourceMappingURL=GET.js.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/GET.tsx"],"names":[],"mappings":";AAGA,OAAO,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAG9B,MAAM,UAAU,MAAM,CAAC,IAAkB;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC;IACjC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,CACL,cAAK,KAAK,EAAC,gBAAgB,EAAC,KAAK,EAAC,mBAAmB,YACnD,cAAK,KAAK,EAAC,yBAAyB,YAClC,eAAK,KAAK,EAAC,uBAAuB,aAChC,aAAI,KAAK,EAAC,iBAAiB,2BAAgB,EAC3C,YAAG,KAAK,EAAC,2BAA2B,0CAA8B,EAClE,YAAG,KAAK,EAAC,uBAAuB,EAAC,IAAI,EAAE,IAAI,yBAAc,IACrD,GACF,GACF,CACP,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEjG,OAAO,CACL,gBAAM,KAAK,EAAC,iBAAiB,uBAAoB,WAAW,eAAa,IAAI,CAAC,MAAM,aAClF,mBAAS,KAAK,EAAC,iBAAiB,aAC9B,cAAK,KAAK,EAAC,gBAAgB,iBAAa,MAAM,kBAAQ,EACtD,mCAAgB,EAChB,YAAG,KAAK,EAAC,gBAAgB,sCAA0B,EAClD,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CACzB,cAAK,KAAK,EAAC,yBAAyB,EAAC,IAAI,EAAC,OAAO,YAAE,IAAI,CAAC,OAAO,IAAI,wBAAwB,GAAO,CACnG,CAAC,CAAC,CAAC,CACF,YAAG,KAAK,EAAC,uBAAuB,EAAC,IAAI,EAAE,WAAW,IAAI,IAAI,yBAEtD,CACL,IACO,EACV,2BACG,EAAE,CAAC,GAAG,EAAE;oBACP,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,kBAAkB,CAAuB,CAAC;oBACvF,MAAM,GAAG,GAAG,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC;oBACtC,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,OAAO;wBAAE,OAAO;oBACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;oBACzC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;oBAChB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;oBAChC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,CAAC,CAAC,GACK,EACT,0BACG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAwCA,GACK,IACH,CACR,CAAC;AACJ,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_background.monitor.GET.d.ts

@@ -0,0 +1,5 @@
+/** @jsxImportSource jsx-htmx */
+import type { HtmlRenderable } from "@betterportal/framework";
+import type { ResponseData } from "../route.impl.js";
+export declare function render(_data: ResponseData): HtmlRenderable;
+//# sourceMappingURL=_background.monitor.GET.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_background.monitor.GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_background.monitor.GET.d.ts","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_background.monitor.GET.tsx"],"names":[],"mappings":"AAAA,gCAAgC;AAEhC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,wBAAgB,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAE1D"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_background.monitor.GET.js

@@ -0,0 +1,5 @@
+import { jsx as _jsx } from "jsx-htmx/jsx-runtime";
+export function render(_data) {
+    return _jsx("div", {});
+}
+//# sourceMappingURL=_background.monitor.GET.js.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_background.monitor.GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_background.monitor.GET.js","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_background.monitor.GET.tsx"],"names":[],"mappings":";AAKA,MAAM,UAAU,MAAM,CAAC,KAAmB;IACxC,OAAO,eAAW,CAAC;AACrB,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_nav.profile.GET.d.ts

@@ -0,0 +1,5 @@
+/** @jsxImportSource jsx-htmx */
+import type { HtmlRenderable } from "@betterportal/framework";
+import type { ResponseData } from "../route.impl.js";
+export declare function render(data: ResponseData): HtmlRenderable;
+//# sourceMappingURL=_nav.profile.GET.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_nav.profile.GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_nav.profile.GET.d.ts","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_nav.profile.GET.tsx"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,wBAAgB,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CA4BzD"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_nav.profile.GET.js

@@ -0,0 +1,10 @@
+import { jsx as _jsx, jsxs as _jsxs } from "jsx-htmx/jsx-runtime";
+export function render(data) {
+    if (!data.alreadyLoggedIn || !data.user) {
+        return (_jsx("a", { class: "btn btn-sm btn-primary", href: "/login", children: "Sign in" }));
+    }
+    const displayName = data.user.name || data.user.email || data.user.id || "Account";
+    const detail = data.user.email || data.user.id || displayName;
+    return (_jsxs("div", { class: "dropdown", children: [_jsx("button", { class: "btn btn-sm btn-light dropdown-toggle", type: "button", "data-bs-toggle": "dropdown", "aria-expanded": "false", children: displayName }), _jsxs("ul", { class: "dropdown-menu dropdown-menu-end", children: [_jsx("li", { children: _jsx("h6", { class: "dropdown-header", children: detail }) }), _jsx("li", { children: _jsx("hr", { class: "dropdown-divider" }) }), _jsx("li", { children: _jsx("a", { class: "dropdown-item", href: "/login?action=logout", children: "Logout" }) })] })] }));
+}
+//# sourceMappingURL=_nav.profile.GET.js.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_nav.profile.GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_nav.profile.GET.js","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.bootstrap1/_nav.profile.GET.tsx"],"names":[],"mappings":";AAIA,MAAM,UAAU,MAAM,CAAC,IAAkB;IACvC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CACL,YAAG,KAAK,EAAC,wBAAwB,EAAC,IAAI,EAAC,QAAQ,wBAE3C,CACL,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,WAAW,CAAC;IAE9D,OAAO,CACL,eAAK,KAAK,EAAC,UAAU,aACnB,iBAAQ,KAAK,EAAC,sCAAsC,EAAC,IAAI,EAAC,QAAQ,oBAAgB,UAAU,mBAAe,OAAO,YAC/G,WAAW,GACL,EACT,cAAI,KAAK,EAAC,iCAAiC,aACzC,uBAAI,aAAI,KAAK,EAAC,iBAAiB,YAAE,MAAM,GAAM,GAAK,EAClD,uBAAI,aAAI,KAAK,EAAC,kBAAkB,GAAG,GAAK,EACxC,uBACI,YAAG,KAAK,EAAC,eAAe,EAAC,IAAI,EAAC,sBAAsB,uBAEhD,GACH,IACF,IACD,CACP,CAAC;AACJ,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.embedded/_background.monitor.GET.d.ts

@@ -0,0 +1,3 @@
+/** @jsxImportSource jsx-htmx */
+export { render } from "../_theme.bootstrap1/_background.monitor.GET.js";
+//# sourceMappingURL=_background.monitor.GET.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.embedded/_background.monitor.GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_background.monitor.GET.d.ts","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.embedded/_background.monitor.GET.tsx"],"names":[],"mappings":"AAAA,gCAAgC;AAEhC,OAAO,EAAE,MAAM,EAAE,MAAM,iDAAiD,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.embedded/_background.monitor.GET.js

@@ -0,0 +1,3 @@
+/** @jsxImportSource jsx-htmx */
+export { render } from "../_theme.bootstrap1/_background.monitor.GET.js";
+//# sourceMappingURL=_background.monitor.GET.js.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.embedded/_background.monitor.GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_background.monitor.GET.js","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/_theme.embedded/_background.monitor.GET.tsx"],"names":[],"mappings":"AAAA,gCAAgC;AAEhC,OAAO,EAAE,MAAM,EAAE,MAAM,iDAAiD,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/index.d.ts

@@ -0,0 +1,2 @@
+export { title, description, auth, role, dependencies, chrome, cacheHints } from "./route.impl.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/index.js

@@ -0,0 +1,2 @@
+export { title, description, auth, role, dependencies, chrome, cacheHints } from "./route.impl.js";
+//# sourceMappingURL=index.js.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/route.impl.d.ts

@@ -0,0 +1,60 @@
+import * as av from "anyvali";
+import type { Infer } from "anyvali";
+import { type ApiAuthRequirement, type BetterPortalRouteChrome, type CacheHints } from "@betterportal/framework";
+export declare const QuerySchema: av.ObjectSchema<{
+    action: av.OptionalSchema<av.StringSchema>;
+    code: av.OptionalSchema<av.StringSchema>;
+    state: av.OptionalSchema<av.StringSchema>;
+    next: av.OptionalSchema<av.StringSchema>;
+    redirect: av.OptionalSchema<av.StringSchema>;
+    error: av.OptionalSchema<av.StringSchema>;
+    error_description: av.OptionalSchema<av.StringSchema>;
+}>;
+export declare const HeadersSchema: av.ObjectSchema<{}>;
+export declare const ResponseSchema: av.ObjectSchema<{
+    status: av.EnumSchema<readonly ["ok", "error"]>;
+    message: av.OptionalSchema<av.StringSchema>;
+    authorizationUrl: av.OptionalSchema<av.StringSchema>;
+    alreadyLoggedIn: av.OptionalSchema<av.BoolSchema>;
+    loggedOut: av.OptionalSchema<av.BoolSchema>;
+    signedIn: av.OptionalSchema<av.BoolSchema>;
+    nextUrl: av.OptionalSchema<av.StringSchema>;
+    user: av.OptionalSchema<av.ObjectSchema<{
+        id: av.OptionalSchema<av.StringSchema>;
+        name: av.OptionalSchema<av.StringSchema>;
+        email: av.OptionalSchema<av.StringSchema>;
+        picture: av.OptionalSchema<av.StringSchema>;
+    }>>;
+}>;
+export type ResponseData = Infer<typeof ResponseSchema>;
+export declare const title = "WorkOS Login";
+export declare const description = "Authenticate with WorkOS AuthKit and store BetterPortal auth headers.";
+export declare const role = "auth.login";
+export declare const dependencies: string[];
+export declare const chrome: BetterPortalRouteChrome;
+export declare const auth: ApiAuthRequirement;
+export declare const cacheHints: CacheHints;
+export declare const handleGet: import("@betterportal/framework").RouteHandler<Record<string, string>, {
+    action?: string | undefined;
+    code?: string | undefined;
+    state?: string | undefined;
+    next?: string | undefined;
+    redirect?: string | undefined;
+    error?: string | undefined;
+    error_description?: string | undefined;
+}, {}, Record<string, unknown>, {
+    status: "error" | "ok";
+    message?: string | undefined;
+    authorizationUrl?: string | undefined;
+    alreadyLoggedIn?: boolean | undefined;
+    loggedOut?: boolean | undefined;
+    signedIn?: boolean | undefined;
+    nextUrl?: string | undefined;
+    user?: {
+        id?: string | undefined;
+        name?: string | undefined;
+        email?: string | undefined;
+        picture?: string | undefined;
+    } | undefined;
+}, unknown, Record<string, unknown>>;
+//# sourceMappingURL=route.impl.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/route.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.impl.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/route.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,UAAU,EAChB,MAAM,yBAAyB,CAAC;AAQjC,eAAO,MAAM,WAAW;;;;;;;;EAQI,CAAC;AAE7B,eAAO,MAAM,aAAa,qBAA0C,CAAC;AAErE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;EAcC,CAAC;AAC7B,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAExD,eAAO,MAAM,KAAK,iBAAiB,CAAC;AACpC,eAAO,MAAM,WAAW,0EAA0E,CAAC;AACnG,eAAO,MAAM,IAAI,eAAe,CAAC;AACjC,eAAO,MAAM,YAAY,UAAoC,CAAC;AAC9D,eAAO,MAAM,MAAM,EAAE,uBAA8C,CAAC;AACpE,eAAO,MAAM,IAAI,EAAE,kBAAyD,CAAC;AAC7E,eAAO,MAAM,UAAU,EAAE,UAA0C,CAAC;AAmBpE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;oCA2GrB,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/route.impl.js

@@ -0,0 +1,154 @@
+import * as av from "anyvali";
+import { createHandler } from "@betterportal/framework";
+import { resolveWorkOSAppConfig, rolesFromWorkOSAccessToken, secondsUntilJwtExpiry } from "../../index.js";
+export const QuerySchema = av.object({
+    action: av.optional(av.string()),
+    code: av.optional(av.string()),
+    state: av.optional(av.string()),
+    next: av.optional(av.string()),
+    redirect: av.optional(av.string()),
+    error: av.optional(av.string()),
+    error_description: av.optional(av.string())
+}, { unknownKeys: "strip" });
+export const HeadersSchema = av.object({}, { unknownKeys: "strip" });
+export const ResponseSchema = av.object({
+    status: av.enum_(["ok", "error"]),
+    message: av.optional(av.string()),
+    authorizationUrl: av.optional(av.string()),
+    alreadyLoggedIn: av.optional(av.bool()),
+    loggedOut: av.optional(av.bool()),
+    signedIn: av.optional(av.bool()),
+    nextUrl: av.optional(av.string()),
+    user: av.optional(av.object({
+        id: av.optional(av.string()),
+        name: av.optional(av.string()),
+        email: av.optional(av.string()),
+        picture: av.optional(av.string())
+    }, { unknownKeys: "strip" }))
+}, { unknownKeys: "strip" });
+export const title = "WorkOS Login";
+export const description = "Authenticate with WorkOS AuthKit and store BetterPortal auth headers.";
+export const role = "auth.login";
+export const dependencies = ["logout.index", "refresh.index"];
+export const chrome = { fullScreen: true };
+export const auth = { required: false, permissions: [] };
+export const cacheHints = { ttlSeconds: 0, varyBy: [] };
+function pluginFrom(ctx) {
+    const plugin = ctx.plugin;
+    if (!plugin)
+        throw new Error("WorkOS plugin not available on handler context");
+    return plugin;
+}
+function normalizeRedirect(raw) {
+    const redirect = raw?.trim();
+    if (!redirect)
+        return "/";
+    if (redirect.startsWith("http://") || redirect.startsWith("https://"))
+        return redirect;
+    return redirect.startsWith("/") ? redirect : `/${redirect}`;
+}
+function firstString(...values) {
+    return values.find((value) => typeof value === "string" && value.trim().length > 0)?.trim();
+}
+export const handleGet = createHandler({ response: ResponseSchema, query: QuerySchema, headers: HeadersSchema }, async (ctx) => {
+    const query = ctx.query;
+    const config = resolveWorkOSAppConfig(ctx.config);
+    const nextUrl = normalizeRedirect(query.state ?? query.next ?? query.redirect ?? config?.loginRedirectPath);
+    if (query.action === "logout") {
+        ctx.bpHeaders?.remove("Authorization");
+        ctx.bpHeaders?.remove("X-BP-Refresh");
+        if (ctx.serviceId)
+            ctx.responseHeaders?.set("HX-Trigger", `bp:fragments:${ctx.serviceId}`);
+        return {
+            status: "ok",
+            message: "Signed out.",
+            loggedOut: true,
+            nextUrl: normalizeRedirect(config?.logoutRedirectPath)
+        };
+    }
+    if (!config) {
+        return { status: "error", message: "WorkOS config is missing clientId or apiKey.", nextUrl };
+    }
+    if (query.error) {
+        return {
+            status: "error",
+            message: query.error_description || query.error,
+            nextUrl
+        };
+    }
+    if (query.code) {
+        try {
+            const auth = await pluginFrom(ctx).authenticateWithCode(config, query.code);
+            const roles = rolesFromWorkOSAccessToken(auth.accessToken, config.roleClaimPath ?? "roles");
+            const issued = pluginFrom(ctx).issueTokenPair({
+                sub: auth.user.id,
+                tenantId: ctx.tenant.id,
+                appId: ctx.app.id,
+                roles,
+                authProvider: "workos",
+                providerSubject: auth.user.id,
+                provider: {
+                    accountId: auth.user.id,
+                    scope: auth.organizationId ? `organization:${auth.organizationId}` : undefined
+                },
+                name: firstString(auth.user.name, [auth.user.firstName, auth.user.lastName].filter(Boolean).join(" ")),
+                email: auth.user.email,
+                picture: auth.user.profilePictureUrl ?? undefined
+            }, { includeRefreshToken: false });
+            ctx.bpHeaders?.set("Authorization", `Bearer ${issued.accessToken}`, {
+                locked: true,
+                expiresInSeconds: issued.accessTokenExpiresInSeconds,
+                refreshPath: "/refresh",
+                refreshBeforeSeconds: 60
+            });
+            ctx.bpHeaders?.set("X-BP-Refresh", auth.refreshToken, {
+                locked: true,
+                scopeToOwner: true,
+                expiresInSeconds: secondsUntilJwtExpiry(auth.accessToken)
+            });
+            ctx.responseHeaders?.set("HX-Redirect", nextUrl);
+            if (ctx.serviceId)
+                ctx.responseHeaders?.set("HX-Trigger", `bp:fragments:${ctx.serviceId}`);
+            return {
+                status: "ok",
+                message: "Signed in.",
+                signedIn: true,
+                nextUrl,
+                user: {
+                    id: auth.user.id,
+                    name: firstString(auth.user.name, [auth.user.firstName, auth.user.lastName].filter(Boolean).join(" ")),
+                    email: auth.user.email,
+                    picture: auth.user.profilePictureUrl ?? undefined
+                }
+            };
+        }
+        catch (error) {
+            ctx.obs?.error(error);
+            return { status: "error", message: `WorkOS sign in failed: ${error.message}`, nextUrl };
+        }
+    }
+    if (ctx.user) {
+        return {
+            status: "ok",
+            message: "Already signed in.",
+            alreadyLoggedIn: true,
+            nextUrl,
+            user: {
+                id: ctx.user.sub,
+                name: ctx.user.name,
+                email: ctx.user.email,
+                picture: ctx.user.picture
+            }
+        };
+    }
+    const redirectUri = ctx.uiRouteUrl?.("login.index", { absolute: true }) ??
+        ctx.routeUrl?.("login.index", { absolute: true }) ??
+        "/login";
+    return {
+        status: "ok",
+        message: "Continue to WorkOS.",
+        authorizationUrl: pluginFrom(ctx).getAuthorizationUrl(config, { redirectUri, state: nextUrl }),
+        nextUrl
+    };
+});
+//# sourceMappingURL=route.impl.js.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/login/route.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.impl.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/login/route.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EACL,aAAa,EAId,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAChC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAC9B,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAC/B,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAC9B,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAClC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAC/B,iBAAiB,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;CAC5C,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,OAAO,CAAU,CAAC;IAC1C,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACjC,gBAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAC1C,eAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IACvC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IACjC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACjC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;QAC1B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QAC9B,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;KAClC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;CAC9B,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,KAAK,GAAG,cAAc,CAAC;AACpC,MAAM,CAAC,MAAM,WAAW,GAAG,uEAAuE,CAAC;AACnG,MAAM,CAAC,MAAM,IAAI,GAAG,YAAY,CAAC;AACjC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,MAAM,GAA4B,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACpE,MAAM,CAAC,MAAM,IAAI,GAAuB,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAe,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAEpE,SAAS,UAAU,CAAC,GAAyB;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAA4B,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAuB;IAChD,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC1B,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvF,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,MAAwC;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAC/G,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CACpC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,EACxE,KAAK,EAAE,GAAG,EAAE,EAAE;IACZ,MAAM,KAAK,GAAG,GAAG,CAAC,KAAkC,CAAC;IACrD,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAE5G,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9B,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QACvC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,SAAS;YAAE,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,YAAY,EAAE,gBAAgB,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3F,OAAO;YACL,MAAM,EAAE,IAAa;YACrB,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,CAAC;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,OAAgB,EAAE,OAAO,EAAE,8CAA8C,EAAE,OAAO,EAAE,CAAC;IACxG,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,OAAgB;YACxB,OAAO,EAAE,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,KAAK;YAC/C,OAAO;SACR,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5E,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;gBAC5C,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;gBACvB,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE;gBACjB,KAAK;gBACL,YAAY,EAAE,QAAQ;gBACtB,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC7B,QAAQ,EAAE;oBACR,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;oBACvB,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS;iBAC/E;gBACD,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtG,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;gBACtB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,SAAS;aAClD,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;YACnC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,eAAe,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;gBAClE,MAAM,EAAE,IAAI;gBACZ,gBAAgB,EAAE,MAAM,CAAC,2BAA2B;gBACpD,WAAW,EAAE,UAAU;gBACvB,oBAAoB,EAAE,EAAE;aACzB,CAAC,CAAC;YACH,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE;gBACpD,MAAM,EAAE,IAAI;gBACZ,YAAY,EAAE,IAAI;gBAClB,gBAAgB,EAAE,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC;aAC1D,CAAC,CAAC;YACH,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,GAAG,CAAC,SAAS;gBAAE,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,YAAY,EAAE,gBAAgB,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3F,OAAO;gBACL,MAAM,EAAE,IAAa;gBACrB,OAAO,EAAE,YAAY;gBACrB,QAAQ,EAAE,IAAI;gBACd,OAAO;gBACP,IAAI,EAAE;oBACJ,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;oBAChB,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACtG,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;oBACtB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,SAAS;iBAClD;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,OAAgB,EAAE,OAAO,EAAE,0BAA2B,KAAe,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC;QAC9G,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,IAAa;YACrB,OAAO,EAAE,oBAAoB;YAC7B,eAAe,EAAE,IAAI;YACrB,OAAO;YACP,IAAI,EAAE;gBACJ,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK;gBACrB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;aAC1B;SACF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GACf,GAAG,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACnD,GAAG,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACjD,QAAQ,CAAC;IACX,OAAO;QACL,MAAM,EAAE,IAAa;QACrB,OAAO,EAAE,qBAAqB;QAC9B,gBAAgB,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC9F,OAAO;KACR,CAAC;AACJ,CAAC,CACF,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/logout/GET.d.ts

@@ -0,0 +1,3 @@
+export { ResponseSchema, QuerySchema } from "./route.impl.js";
+export { handleGet as default } from "./route.impl.js";
+//# sourceMappingURL=GET.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/logout/GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/logout/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,MAAM,iBAAiB,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/logout/GET.js

@@ -0,0 +1,3 @@
+export { ResponseSchema, QuerySchema } from "./route.impl.js";
+export { handleGet as default } from "./route.impl.js";
+//# sourceMappingURL=GET.js.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/logout/GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/logout/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,MAAM,iBAAiB,CAAC"}

package/lib/plugins/service-betterportal-auth-workos/bp-routes/logout/index.d.ts

@@ -0,0 +1,2 @@
+export { title, description, auth, role, cacheHints } from "./route.impl.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/plugins/service-betterportal-auth-workos/bp-routes/logout/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-workos/bp-routes/logout/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC"}