@cloudauth/core 0.1.0

package/dist/provider.d.ts

@@ -0,0 +1,19 @@
+import type { ProviderProfile, TokenSet } from './types.js';
+export interface AuthorizationParams {
+    state: string;
+    codeVerifier: string;
+    redirectUri: string;
+}
+export interface ExchangeCodeParams {
+    code: string;
+    codeVerifier: string;
+    redirectUri: string;
+}
+export interface AuthProvider {
+    id: string;
+    type: 'oauth' | 'oidc';
+    authorizationUrl(params: AuthorizationParams): URL;
+    exchangeCode(params: ExchangeCodeParams): Promise<TokenSet>;
+    getProfile(tokens: TokenSet): Promise<ProviderProfile>;
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE3D,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,OAAO,GAAG,MAAM,CAAA;IACtB,gBAAgB,CAAC,MAAM,EAAE,mBAAmB,GAAG,GAAG,CAAA;IAClD,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC3D,UAAU,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CACvD"}

package/dist/provider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":""}

package/dist/rate-limiter.d.ts

@@ -0,0 +1,33 @@
+export interface RateLimitResult {
+    allowed: boolean;
+    remaining: number;
+    resetAt: Date;
+}
+export interface RateLimiter {
+    check(key: string, limit: number, windowMs: number): Promise<RateLimitResult>;
+}
+/**
+ * In-memory sliding window rate limiter.
+ * Suitable for single-instance development, NOT for production multi-instance use.
+ * For production, provide a Redis/D1-based implementation.
+ */
+export declare function inMemoryRateLimiter(): RateLimiter;
+export declare const defaultRateLimits: {
+    readonly signIn: {
+        readonly limit: 10;
+        readonly windowMs: 60000;
+    };
+    readonly callback: {
+        readonly limit: 20;
+        readonly windowMs: 60000;
+    };
+    readonly logout: {
+        readonly limit: 30;
+        readonly windowMs: 60000;
+    };
+    readonly linkAccount: {
+        readonly limit: 5;
+        readonly windowMs: 60000;
+    };
+};
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,IAAI,CAAA;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CAC9E;AAMD;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,WAAW,CAqCjD;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;CAKpB,CAAA"}

package/dist/rate-limiter.js

@@ -0,0 +1,45 @@
+/**
+ * In-memory sliding window rate limiter.
+ * Suitable for single-instance development, NOT for production multi-instance use.
+ * For production, provide a Redis/D1-based implementation.
+ */
+export function inMemoryRateLimiter() {
+    const windows = new Map();
+    return {
+        check(key, limit, windowMs) {
+            return new Promise((resolve) => {
+                const now = Date.now();
+                let entry = windows.get(key);
+                if (!entry) {
+                    entry = { timestamps: [] };
+                    windows.set(key, entry);
+                }
+                // Remove timestamps outside the current window
+                const active = entry.timestamps.filter((ts) => now - ts < windowMs);
+                entry.timestamps = active;
+                if (active.length >= limit) {
+                    const oldest = active[0] ?? now;
+                    resolve({
+                        allowed: false,
+                        remaining: 0,
+                        resetAt: new Date(oldest + windowMs),
+                    });
+                    return;
+                }
+                active.push(now);
+                resolve({
+                    allowed: true,
+                    remaining: limit - active.length,
+                    resetAt: new Date(now + windowMs),
+                });
+            });
+        },
+    };
+}
+export const defaultRateLimits = {
+    signIn: { limit: 10, windowMs: 60_000 },
+    callback: { limit: 20, windowMs: 60_000 },
+    logout: { limit: 30, windowMs: 60_000 },
+    linkAccount: { limit: 5, windowMs: 60_000 },
+};
+//# sourceMappingURL=rate-limiter.js.map

package/dist/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;IAE9C,OAAO;QACL,KAAK,CAAC,GAAW,EAAE,KAAa,EAAE,QAAgB;YAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACtB,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAE5B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,KAAK,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;oBAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;gBACzB,CAAC;gBAED,+CAA+C;gBAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAA;gBACnE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAA;gBAEzB,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAA;oBAC/B,OAAO,CAAC;wBACN,OAAO,EAAE,KAAK;wBACd,SAAS,EAAE,CAAC;wBACZ,OAAO,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;qBACrC,CAAC,CAAA;oBACF,OAAM;gBACR,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAChB,OAAO,CAAC;oBACN,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM;oBAChC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC;iBAClC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IACvC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IACzC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;IACvC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE;CACnC,CAAA"}

package/dist/test/adapter-conformance.d.ts

@@ -0,0 +1,13 @@
+import type { AuthAdapter } from '../adapter.js';
+export interface AdapterConformanceOptions {
+    name: string;
+    createAdapter: () => AuthAdapter;
+    setup?: () => Promise<void>;
+    teardown?: () => Promise<void>;
+}
+/**
+ * Run the standard adapter conformance test suite.
+ * Any adapter implementation must pass all tests in this suite.
+ */
+export declare function runAdapterConformanceTests(options: AdapterConformanceOptions): void;
+//# sourceMappingURL=adapter-conformance.d.ts.map

package/dist/test/adapter-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-conformance.d.ts","sourceRoot":"","sources":["../../src/test/adapter-conformance.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAGhD,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,WAAW,CAAA;IAChC,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/B;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,CA2PnF"}

package/dist/test/adapter-conformance.js

@@ -0,0 +1,212 @@
+import { describe, it, expect, beforeAll, beforeEach, afterAll } from 'vitest';
+/**
+ * Run the standard adapter conformance test suite.
+ * Any adapter implementation must pass all tests in this suite.
+ */
+export function runAdapterConformanceTests(options) {
+    const { name, createAdapter, setup, teardown } = options;
+    describe(`Adapter conformance: ${name}`, () => {
+        let adapter;
+        const testUser = {
+            email: 'conformance@example.com',
+            emailVerified: true,
+            name: 'Conformance Test',
+            image: null,
+        };
+        beforeAll(async () => {
+            await setup?.();
+        });
+        beforeEach(() => {
+            adapter = createAdapter();
+        });
+        afterAll(async () => {
+            await teardown?.();
+        });
+        // --- User operations ---
+        it('should create and retrieve a user', async () => {
+            const user = await adapter.createUser(testUser);
+            expect(user.id).toBeDefined();
+            expect(user.email).toBe('conformance@example.com');
+            expect(user.emailVerified).toBe(true);
+            expect(user.name).toBe('Conformance Test');
+            const retrieved = await adapter.getUserById(user.id);
+            expect(retrieved).not.toBeNull();
+            if (retrieved) {
+                expect(retrieved.id).toBe(user.id);
+            }
+        });
+        it('should return null for non-existent user by id', async () => {
+            const result = await adapter.getUserById('non_existent_id');
+            expect(result).toBeNull();
+        });
+        it('should find user by email', async () => {
+            const user = await adapter.createUser(testUser);
+            const found = await adapter.getUserByEmail(user.email ?? '');
+            expect(found).not.toBeNull();
+            if (found) {
+                expect(found.id).toBe(user.id);
+            }
+        });
+        it('should return null for non-existent email', async () => {
+            const result = await adapter.getUserByEmail('nonexistent@example.com');
+            expect(result).toBeNull();
+        });
+        it('should partially update a user', async () => {
+            const user = await adapter.createUser(testUser);
+            const updated = await adapter.updateUser(user.id, { name: 'Updated Name' });
+            expect(updated.name).toBe('Updated Name');
+            expect(updated.email).toBe(user.email);
+        });
+        // --- Account operations ---
+        it('should create and retrieve an account', async () => {
+            const user = await adapter.createUser(testUser);
+            const account = await adapter.createAccount({
+                userId: user.id,
+                provider: 'google',
+                providerAccountId: 'google_123',
+            });
+            expect(account.id).toBeDefined();
+            expect(account.provider).toBe('google');
+            expect(account.providerAccountId).toBe('google_123');
+            const retrieved = await adapter.getAccount('google', 'google_123');
+            expect(retrieved).not.toBeNull();
+            if (retrieved) {
+                expect(retrieved.id).toBe(account.id);
+            }
+        });
+        it('should enforce unique (provider, providerAccountId)', async () => {
+            const user = await adapter.createUser(testUser);
+            await adapter.createAccount({
+                userId: user.id,
+                provider: 'google',
+                providerAccountId: 'unique_test_123',
+            });
+            await expect(adapter.createAccount({
+                userId: user.id,
+                provider: 'google',
+                providerAccountId: 'unique_test_123',
+            })).rejects.toThrow();
+        });
+        it('should get accounts by user id', async () => {
+            const user = await adapter.createUser(testUser);
+            await adapter.createAccount({
+                userId: user.id,
+                provider: 'google',
+                providerAccountId: 'google_1',
+            });
+            await adapter.createAccount({
+                userId: user.id,
+                provider: 'github',
+                providerAccountId: 'github_1',
+            });
+            const accounts = await adapter.getAccountsByUserId(user.id);
+            expect(accounts).toHaveLength(2);
+        });
+        it('should link an account to an existing user', async () => {
+            const user = await adapter.createUser(testUser);
+            const linked = await adapter.linkAccount(user.id, {
+                userId: user.id,
+                provider: 'github',
+                providerAccountId: 'github_linked',
+            });
+            expect(linked.userId).toBe(user.id);
+            expect(linked.provider).toBe('github');
+        });
+        it('should delete an account', async () => {
+            const user = await adapter.createUser(testUser);
+            const account = await adapter.createAccount({
+                userId: user.id,
+                provider: 'google',
+                providerAccountId: 'to_delete',
+            });
+            await adapter.deleteAccount(account.id);
+            const retrieved = await adapter.getAccount('google', 'to_delete');
+            expect(retrieved).toBeNull();
+        });
+        // --- Session operations ---
+        it('should create and retrieve a session with user', async () => {
+            const user = await adapter.createUser(testUser);
+            const session = await adapter.createSession({
+                userId: user.id,
+                tokenHash: 'session_hash_1',
+                expiresAt: new Date(Date.now() + 86_400_000),
+            });
+            expect(session.id).toBeDefined();
+            expect(session.tokenHash).toBe('session_hash_1');
+            const retrieved = await adapter.getSessionByTokenHash('session_hash_1');
+            expect(retrieved).not.toBeNull();
+            if (retrieved) {
+                expect(retrieved.session.id).toBe(session.id);
+                expect(retrieved.user.id).toBe(user.id);
+            }
+        });
+        it('should return null for unknown session token hash', async () => {
+            const result = await adapter.getSessionByTokenHash('unknown_hash');
+            expect(result).toBeNull();
+        });
+        it('should update a session', async () => {
+            const user = await adapter.createUser(testUser);
+            const session = await adapter.createSession({
+                userId: user.id,
+                tokenHash: 'session_to_update',
+                expiresAt: new Date(Date.now() + 86_400_000),
+            });
+            const newExpiry = new Date(Date.now() + 172_800_000);
+            const updated = await adapter.updateSession(session.id, {
+                expiresAt: newExpiry,
+            });
+            expect(updated.expiresAt.getTime()).toBe(newExpiry.getTime());
+        });
+        it('should delete a session', async () => {
+            const user = await adapter.createUser(testUser);
+            await adapter.createSession({
+                userId: user.id,
+                tokenHash: 'session_to_delete',
+                expiresAt: new Date(Date.now() + 86_400_000),
+            });
+            await adapter.deleteSession('session_to_delete');
+            const retrieved = await adapter.getSessionByTokenHash('session_to_delete');
+            expect(retrieved).toBeNull();
+        });
+        it('should delete only expired sessions', async () => {
+            const user = await adapter.createUser(testUser);
+            await adapter.createSession({
+                userId: user.id,
+                tokenHash: 'expired_session',
+                expiresAt: new Date(Date.now() - 86_400_000),
+            });
+            await adapter.createSession({
+                userId: user.id,
+                tokenHash: 'active_session',
+                expiresAt: new Date(Date.now() + 86_400_000),
+            });
+            await adapter.deleteExpiredSessions();
+            const expired = await adapter.getSessionByTokenHash('expired_session');
+            expect(expired).toBeNull();
+            const active = await adapter.getSessionByTokenHash('active_session');
+            expect(active).not.toBeNull();
+        });
+        // --- OAuth state operations ---
+        it('should create and consume OAuth state (single-use)', async () => {
+            const stateInput = {
+                stateHash: 'state_single_use',
+                codeVerifier: 'verifier_123',
+                provider: 'google',
+                expiresAt: new Date(Date.now() + 600_000),
+            };
+            await adapter.createOAuthState(stateInput);
+            const first = await adapter.consumeOAuthState('state_single_use');
+            expect(first).not.toBeNull();
+            if (first) {
+                expect(first.codeVerifier).toBe('verifier_123');
+            }
+            const second = await adapter.consumeOAuthState('state_single_use');
+            expect(second).toBeNull();
+        });
+        it('should return null for unknown OAuth state', async () => {
+            const result = await adapter.consumeOAuthState('unknown_state');
+            expect(result).toBeNull();
+        });
+    });
+}
+//# sourceMappingURL=adapter-conformance.js.map

package/dist/test/adapter-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-conformance.js","sourceRoot":"","sources":["../../src/test/adapter-conformance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AAW9E;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAkC;IAC3E,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAExD,QAAQ,CAAC,wBAAwB,IAAI,EAAE,EAAE,GAAG,EAAE;QAC5C,IAAI,OAAoB,CAAA;QAExB,MAAM,QAAQ,GAAoB;YAChC,KAAK,EAAE,yBAAyB;YAChC,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,IAAI;SACZ,CAAA;QAED,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,KAAK,EAAE,EAAE,CAAA;QACjB,CAAC,CAAC,CAAA;QAEF,UAAU,CAAC,GAAG,EAAE;YACd,OAAO,GAAG,aAAa,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;QAEF,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClB,MAAM,QAAQ,EAAE,EAAE,CAAA;QACpB,CAAC,CAAC,CAAA;QAEF,0BAA0B;QAE1B,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;YAClD,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;YAE1C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACpD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;YAChC,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACpC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAA;YAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;YAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC5B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAChC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAA;YACtE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;YAC3E,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACzC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,6BAA6B;QAE7B,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1C,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ;gBAClB,iBAAiB,EAAE,YAAY;aAChC,CAAC,CAAA;YAEF,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAChC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAEpD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;YAClE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;YAChC,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACvC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ;gBAClB,iBAAiB,EAAE,iBAAiB;aACrC,CAAC,CAAA;YAEF,MAAM,MAAM,CACV,OAAO,CAAC,aAAa,CAAC;gBACpB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ;gBAClB,iBAAiB,EAAE,iBAAiB;aACrC,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QACrB,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ;gBAClB,iBAAiB,EAAE,UAAU;aAC9B,CAAC,CAAA;YACF,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ;gBAClB,iBAAiB,EAAE,UAAU;aAC9B,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE;gBAChD,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ;gBAClB,iBAAiB,EAAE,eAAe;aACnC,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1C,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ;gBAClB,iBAAiB,EAAE,WAAW;aAC/B,CAAC,CAAA;YAEF,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAEvC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;YACjE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,6BAA6B;QAE7B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1C,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,gBAAgB;gBAC3B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;aAC7C,CAAC,CAAA;YAEF,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAChC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YAEhD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;YACvE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;YAChC,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;gBAC7C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACzC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAA;YAClE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1C,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,mBAAmB;gBAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;aAC7C,CAAC,CAAA;YAEF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAA;YACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE;gBACtD,SAAS,EAAE,SAAS;aACrB,CAAC,CAAA;YACF,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,mBAAmB;gBAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;aAC7C,CAAC,CAAA;YAEF,MAAM,OAAO,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAA;YAChD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAA;YAC1E,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAC/C,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,iBAAiB;gBAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;aAC7C,CAAC,CAAA;YACF,MAAM,OAAO,CAAC,aAAa,CAAC;gBAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,gBAAgB;gBAC3B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;aAC7C,CAAC,CAAA;YAEF,MAAM,OAAO,CAAC,qBAAqB,EAAE,CAAA;YAErC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAA;YACtE,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;YAE1B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;YACpE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC/B,CAAC,CAAC,CAAA;QAEF,iCAAiC;QAEjC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,UAAU,GAA0B;gBACxC,SAAS,EAAE,kBAAkB;gBAC7B,YAAY,EAAE,cAAc;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;aAC1C,CAAA;YAED,MAAM,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;YAE1C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;YACjE,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC5B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACjD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;YAClE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAA;YAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/test/cookies.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cookies.test.d.ts.map

package/dist/test/cookies.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.test.d.ts","sourceRoot":"","sources":["../../src/test/cookies.test.ts"],"names":[],"mappings":""}

package/dist/test/cookies.test.js

@@ -0,0 +1,83 @@
+import { describe, it, expect } from 'vitest';
+import { serializeCookie, parseCookie, signCookie, verifyCookie } from '../cookies.js';
+describe('serializeCookie', () => {
+    it('should serialize a simple cookie', () => {
+        const result = serializeCookie('name', 'value');
+        expect(result).toBe('name=value');
+    });
+    it('should serialize with options', () => {
+        const result = serializeCookie('session', 'abc123', {
+            maxAge: 3600,
+            path: '/',
+            secure: true,
+            httpOnly: true,
+            sameSite: 'lax',
+        });
+        expect(result).toContain('session=abc123');
+        expect(result).toContain('Max-Age=3600');
+        expect(result).toContain('Path=/');
+        expect(result).toContain('Secure');
+        expect(result).toContain('HttpOnly');
+        expect(result).toContain('SameSite=lax');
+    });
+    it('should encode special characters', () => {
+        const result = serializeCookie('session id', 'value with spaces');
+        expect(result).toContain(encodeURIComponent('session id'));
+        expect(result).toContain(encodeURIComponent('value with spaces'));
+    });
+});
+describe('parseCookie', () => {
+    it('should parse a simple cookie header', () => {
+        const result = parseCookie('name=value');
+        expect(result).toEqual({ name: 'value' });
+    });
+    it('should parse multiple cookies', () => {
+        const result = parseCookie('name=value; session=abc123');
+        expect(result).toEqual({ name: 'value', session: 'abc123' });
+    });
+    it('should ignore cookie attributes', () => {
+        const result = parseCookie('session=abc123; Path=/; Secure; HttpOnly');
+        expect(result).toEqual({ session: 'abc123' });
+    });
+    it('should trim whitespace', () => {
+        const result = parseCookie('  name  =  value  ;  session=abc123  ');
+        expect(result).toEqual({ name: 'value', session: 'abc123' });
+    });
+    it('should handle empty header', () => {
+        const result = parseCookie('');
+        expect(result).toEqual({});
+    });
+});
+describe('signCookie and verifyCookie', () => {
+    const secret = 'test-secret-that-is-at-least-32-characters-long!!';
+    it('should sign and verify a cookie value', async () => {
+        const signed = await signCookie('session_token_123', secret);
+        expect(signed).toContain('session_token_123.');
+        const verified = await verifyCookie(signed, secret);
+        expect(verified).toBe('session_token_123');
+    });
+    it('should reject tampered cookies', async () => {
+        const signed = await signCookie('session_token_123', secret);
+        // Tamper with the signature
+        const tampered = signed.replace(/[^.\n]+$/, 'tampered_signature');
+        const verified = await verifyCookie(tampered, secret);
+        expect(verified).toBeNull();
+    });
+    it('should return null for malformed cookies', async () => {
+        const verified = await verifyCookie('no-separator', secret);
+        expect(verified).toBeNull();
+        const verified2 = await verifyCookie('.', secret);
+        expect(verified2).toBeNull();
+    });
+    it('should fail verification with wrong secret', async () => {
+        const signed = await signCookie('session_token', secret);
+        const verified = await verifyCookie(signed, 'different-secret-value!!!!!');
+        expect(verified).toBeNull();
+    });
+    it('should produce different signatures for different values', async () => {
+        const signed1 = await signCookie('token_a', secret);
+        const signed2 = await signCookie('token_b', secret);
+        expect(signed1).not.toBe(signed2);
+    });
+});
+//# sourceMappingURL=cookies.test.js.map

package/dist/test/cookies.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookies.test.js","sourceRoot":"","sources":["../../src/test/cookies.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEtF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE;YAClD,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA;QACjE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAA;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,WAAW,CAAC,4BAA4B,CAAC,CAAA;QACxD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,MAAM,GAAG,WAAW,CAAC,0CAA0C,CAAC,CAAA;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,uCAAuC,CAAC,CAAA;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,MAAM,MAAM,GAAG,mDAAmD,CAAA;IAElE,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAA;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;QAE9C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAA;QAE5D,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;QACjE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACrD,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAA;QAE3B,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACjD,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAA;QAC1E,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACnD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/test/crypto.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=crypto.test.d.ts.map

package/dist/test/crypto.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.test.d.ts","sourceRoot":"","sources":["../../src/test/crypto.test.ts"],"names":[],"mappings":""}

package/dist/test/crypto.test.js

@@ -0,0 +1,84 @@
+import { describe, it, expect } from 'vitest';
+import { generateSessionToken, hashToken, generateCodeVerifier, generateCodeChallenge, constantTimeEqual, } from '../crypto.js';
+describe('generateSessionToken', () => {
+    it('should generate a base64url string', () => {
+        const token = generateSessionToken();
+        expect(token).toBeTruthy();
+        expect(typeof token).toBe('string');
+        // base64url should only contain alphanumeric, hyphen, underscore
+        expect(/^[A-Za-z0-9\-_]+$/.test(token)).toBe(true);
+    });
+    it('should generate 256-bit tokens (43 chars base64url without padding)', () => {
+        const token = generateSessionToken();
+        // 32 bytes → 43 base64url chars (without padding)
+        expect(token.length).toBe(43);
+    });
+    it('should generate unique tokens on each call', () => {
+        const tokens = new Set(Array.from({ length: 100 }, () => generateSessionToken()));
+        expect(tokens.size).toBe(100);
+    });
+});
+describe('hashToken', () => {
+    it('should produce a hex string', async () => {
+        const hash = await hashToken('test-token');
+        expect(hash).toBeTruthy();
+        expect(typeof hash).toBe('string');
+        // hex string should be 64 chars (SHA-256)
+        expect(hash.length).toBe(64);
+        expect(/^[0-9a-f]+$/.test(hash)).toBe(true);
+    });
+    it('should produce deterministic hashes', async () => {
+        const hash1 = await hashToken('same-token');
+        const hash2 = await hashToken('same-token');
+        expect(hash1).toBe(hash2);
+    });
+    it('should produce different hashes for different inputs', async () => {
+        const hash1 = await hashToken('token-a');
+        const hash2 = await hashToken('token-b');
+        expect(hash1).not.toBe(hash2);
+    });
+});
+describe('generateCodeVerifier', () => {
+    it('should generate a base64url string', () => {
+        const verifier = generateCodeVerifier();
+        expect(verifier).toBeTruthy();
+        expect(/^[A-Za-z0-9\-_]+$/.test(verifier)).toBe(true);
+    });
+    it('should generate unique verifiers', () => {
+        const verifiers = new Set(Array.from({ length: 100 }, () => generateCodeVerifier()));
+        expect(verifiers.size).toBe(100);
+    });
+});
+describe('generateCodeChallenge', () => {
+    it('should produce a base64url string from a verifier', async () => {
+        const verifier = generateCodeVerifier();
+        const challenge = await generateCodeChallenge(verifier);
+        expect(challenge).toBeTruthy();
+        expect(/^[A-Za-z0-9\-_]+$/.test(challenge)).toBe(true);
+    });
+    it('should produce deterministic challenges for same verifier', async () => {
+        const verifier = 'same-verifier-value';
+        const challenge1 = await generateCodeChallenge(verifier);
+        const challenge2 = await generateCodeChallenge(verifier);
+        expect(challenge1).toBe(challenge2);
+    });
+});
+describe('constantTimeEqual', () => {
+    it('should return true for equal strings', () => {
+        expect(constantTimeEqual('hello', 'hello')).toBe(true);
+        expect(constantTimeEqual('', '')).toBe(true);
+        expect(constantTimeEqual('a', 'a')).toBe(true);
+    });
+    it('should return false for different strings', () => {
+        expect(constantTimeEqual('hello', 'world')).toBe(false);
+        expect(constantTimeEqual('a', 'b')).toBe(false);
+    });
+    it('should return false for different length strings', () => {
+        expect(constantTimeEqual('abc', 'abcd')).toBe(false);
+        expect(constantTimeEqual('', 'a')).toBe(false);
+    });
+    it('should return false for similar strings', () => {
+        expect(constantTimeEqual('token_a', 'token_b')).toBe(false);
+    });
+});
+//# sourceMappingURL=crypto.test.js.map

package/dist/test/crypto.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.test.js","sourceRoot":"","sources":["../../src/test/crypto.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,oBAAoB,EACpB,SAAS,EACT,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,cAAc,CAAA;AAErB,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAA;QAC1B,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,iEAAiE;QACjE,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;QACpC,kDAAkD;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAA;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAA;QACzB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClC,0CAA0C;QAC1C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5B,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAA;QACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAA;QAC7B,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAA;QACvC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QACvD,MAAM,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAA;QAC9B,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,QAAQ,GAAG,qBAAqB,CAAA;QACtC,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QACxD,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QACxD,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtD,MAAM,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvD,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpD,MAAM,CAAC,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/test/encryption.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=encryption.test.d.ts.map

package/dist/test/encryption.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.test.d.ts","sourceRoot":"","sources":["../../src/test/encryption.test.ts"],"names":[],"mappings":""}

package/dist/test/encryption.test.js

@@ -0,0 +1,34 @@
+import { describe, it, expect } from 'vitest';
+import { encrypt, decrypt } from '../encryption.js';
+const SECRET = 'test-encryption-secret-that-is-long-enough-for-testing!';
+describe('encrypt and decrypt', () => {
+    it('should encrypt and decrypt a string', async () => {
+        const original = 'hello world';
+        const encoded = await encrypt(original, SECRET);
+        expect(encoded).toBeTruthy();
+        expect(encoded).not.toBe(original);
+        const decoded = await decrypt(encoded, SECRET);
+        expect(decoded).toBe(original);
+    });
+    it('should produce different outputs for the same input (salt + iv)', async () => {
+        const out1 = await encrypt('same text', SECRET);
+        const out2 = await encrypt('same text', SECRET);
+        expect(out1).not.toBe(out2);
+    });
+    it('should fail decryption with wrong secret', async () => {
+        const encoded = await encrypt('secret data', SECRET);
+        await expect(decrypt(encoded, 'wrong-secret-that-is-completely-different!!')).rejects.toThrow();
+    });
+    it('should handle empty string', async () => {
+        const encoded = await encrypt('', SECRET);
+        const decoded = await decrypt(encoded, SECRET);
+        expect(decoded).toBe('');
+    });
+    it('should handle long strings', async () => {
+        const long = 'a'.repeat(10_000);
+        const encoded = await encrypt(long, SECRET);
+        const decoded = await decrypt(encoded, SECRET);
+        expect(decoded).toBe(long);
+    });
+});
+//# sourceMappingURL=encryption.test.js.map

package/dist/test/encryption.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.test.js","sourceRoot":"","sources":["../../src/test/encryption.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAEnD,MAAM,MAAM,GAAG,yDAAyD,CAAA;AAExE,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,QAAQ,GAAG,aAAa,CAAA;QAC9B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC/C,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAA;QAC5B,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAElC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC/C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;QACpD,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,6CAA6C,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACjG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/test/factories.d.ts

@@ -0,0 +1,11 @@
+import type { User, Account, Session, OAuthState, CreateUserInput, CreateAccountInput, CreateSessionInput, CreateOAuthStateInput } from '../types.js';
+export declare function resetIds(): void;
+export declare function createUser(overrides?: Partial<CreateUserInput>): CreateUserInput;
+export declare function createAccount(userId: string, overrides?: Partial<CreateAccountInput>): CreateAccountInput;
+export declare function createSession(userId: string, tokenHash: string, overrides?: Partial<CreateSessionInput>): CreateSessionInput;
+export declare function createOAuthState(overrides?: Partial<CreateOAuthStateInput>): CreateOAuthStateInput;
+export declare function buildUser(overrides?: Partial<User>): User;
+export declare function buildAccount(userId: string, overrides?: Partial<Account>): Account;
+export declare function buildSession(userId: string, overrides?: Partial<Session>): Session;
+export declare function buildOAuthState(overrides?: Partial<OAuthState>): OAuthState;
+//# sourceMappingURL=factories.d.ts.map

package/dist/test/factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.d.ts","sourceRoot":"","sources":["../../src/test/factories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,IAAI,EACJ,OAAO,EACP,OAAO,EACP,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACtB,MAAM,aAAa,CAAA;AAUpB,wBAAgB,QAAQ,IAAI,IAAI,CAG/B;AAED,wBAAgB,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAQhF;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACtC,kBAAkB,CAapB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACtC,kBAAkB,CASpB;AAED,wBAAgB,gBAAgB,CAC9B,SAAS,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,GACzC,qBAAqB,CAUvB;AAED,wBAAgB,SAAS,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAWzD;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAgBlF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAYlF;AAED,wBAAgB,eAAe,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAY3E"}