@cloudauth/core 0.1.0

package/dist/test/factories.js

@@ -0,0 +1,110 @@
+let nextId = 1;
+let idCounter = 1;
+function nextStr(prefix) {
+    const n = idCounter++;
+    return `${prefix}_${String(n)}`;
+}
+export function resetIds() {
+    nextId = 1;
+    idCounter = 1;
+}
+export function createUser(overrides) {
+    return {
+        email: `user_${String(nextId)}@example.com`,
+        emailVerified: true,
+        name: `Test User ${String(nextId)}`,
+        image: null,
+        ...overrides,
+    };
+}
+export function createAccount(userId, overrides) {
+    return {
+        userId,
+        provider: 'google',
+        providerAccountId: `google_${String(nextId)}`,
+        accessToken: null,
+        refreshToken: null,
+        idToken: null,
+        scope: null,
+        tokenType: null,
+        expiresAt: null,
+        ...overrides,
+    };
+}
+export function createSession(userId, tokenHash, overrides) {
+    return {
+        userId,
+        tokenHash,
+        expiresAt: new Date(Date.now() + 86_400_000),
+        ipAddress: null,
+        userAgent: null,
+        ...overrides,
+    };
+}
+export function createOAuthState(overrides) {
+    return {
+        stateHash: nextStr('state_hash'),
+        codeVerifier: nextStr('code_verifier'),
+        provider: 'google',
+        callbackUrl: null,
+        errorUrl: null,
+        expiresAt: new Date(Date.now() + 600_000),
+        ...overrides,
+    };
+}
+export function buildUser(overrides) {
+    return {
+        id: nextStr('user'),
+        email: nextStr('email') + '@example.com',
+        emailVerified: true,
+        name: nextStr('Test User'),
+        image: null,
+        createdAt: new Date(),
+        updatedAt: new Date(),
+        ...overrides,
+    };
+}
+export function buildAccount(userId, overrides) {
+    return {
+        id: nextStr('account'),
+        userId,
+        provider: 'google',
+        providerAccountId: nextStr('google'),
+        accessToken: null,
+        refreshToken: null,
+        idToken: null,
+        scope: null,
+        tokenType: null,
+        expiresAt: null,
+        createdAt: new Date(),
+        updatedAt: new Date(),
+        ...overrides,
+    };
+}
+export function buildSession(userId, overrides) {
+    return {
+        id: nextStr('session'),
+        userId,
+        tokenHash: nextStr('token_hash'),
+        expiresAt: new Date(Date.now() + 86_400_000),
+        ipAddress: null,
+        userAgent: null,
+        createdAt: new Date(),
+        updatedAt: new Date(),
+        ...overrides,
+    };
+}
+export function buildOAuthState(overrides) {
+    return {
+        id: nextStr('state'),
+        stateHash: nextStr('state_hash'),
+        codeVerifier: nextStr('code_verifier'),
+        provider: 'google',
+        callbackUrl: null,
+        errorUrl: null,
+        expiresAt: new Date(Date.now() + 600_000),
+        createdAt: new Date(),
+        ...overrides,
+    };
+}
+//# sourceMappingURL=factories.js.map

package/dist/test/factories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.js","sourceRoot":"","sources":["../../src/test/factories.ts"],"names":[],"mappings":"AAWA,IAAI,MAAM,GAAG,CAAC,CAAA;AACd,IAAI,SAAS,GAAG,CAAC,CAAA;AAEjB,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,CAAC,GAAG,SAAS,EAAE,CAAA;IACrB,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,MAAM,GAAG,CAAC,CAAA;IACV,SAAS,GAAG,CAAC,CAAA;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAoC;IAC7D,OAAO;QACL,KAAK,EAAE,QAAQ,MAAM,CAAC,MAAM,CAAC,cAAc;QAC3C,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,aAAa,MAAM,CAAC,MAAM,CAAC,EAAE;QACnC,KAAK,EAAE,IAAI;QACX,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,SAAuC;IAEvC,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,QAAQ;QAClB,iBAAiB,EAAE,UAAU,MAAM,CAAC,MAAM,CAAC,EAAE;QAC7C,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,SAAiB,EACjB,SAAuC;IAEvC,OAAO;QACL,MAAM;QACN,SAAS;QACT,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAC5C,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,SAA0C;IAE1C,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC;QAChC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC;QACtC,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACzC,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,SAAyB;IACjD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,cAAc;QACxC,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC;QAC1B,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,SAA4B;IACvE,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC;QACtB,MAAM;QACN,QAAQ,EAAE,QAAQ;QAClB,iBAAiB,EAAE,OAAO,CAAC,QAAQ,CAAC;QACpC,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,SAA4B;IACvE,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC;QACtB,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC;QAChC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAC5C,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAA+B;IAC7D,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC;QAChC,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC;QACtC,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACzC,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,GAAG,SAAS;KACb,CAAA;AACH,CAAC"}

package/dist/test/index.d.ts

@@ -0,0 +1,6 @@
+export { createUser, createAccount, createSession, createOAuthState, buildUser, buildAccount, buildSession, buildOAuthState, resetIds, } from './factories.js';
+export type { MockProviderConfig } from './mock-provider.js';
+export { createMockProvider, createMockTokenSet } from './mock-provider.js';
+export type { AdapterConformanceOptions } from './adapter-conformance.js';
+export { runAdapterConformanceTests } from './adapter-conformance.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/test/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,QAAQ,GACT,MAAM,gBAAgB,CAAA;AAEvB,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAE3E,YAAY,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAA;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/test/index.js

@@ -0,0 +1,4 @@
+export { createUser, createAccount, createSession, createOAuthState, buildUser, buildAccount, buildSession, buildOAuthState, resetIds, } from './factories.js';
+export { createMockProvider, createMockTokenSet } from './mock-provider.js';
+export { runAdapterConformanceTests } from './adapter-conformance.js';
+//# sourceMappingURL=index.js.map

package/dist/test/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,QAAQ,GACT,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAG3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/test/mock-provider.d.ts

@@ -0,0 +1,34 @@
+import type { TokenSet } from '../types.js';
+export interface MockProviderConfig {
+    tokenEndpoint: string;
+    userinfoEndpoint: string;
+    defaultProfile?: Record<string, unknown>;
+    tokenResponse?: Record<string, unknown>;
+    tokenError?: {
+        status: number;
+        body: string;
+    };
+    userinfoError?: {
+        status: number;
+        body: string;
+    };
+    tokenDelay?: number;
+    userinfoDelay?: number;
+    tokenNetworkError?: boolean;
+    userinfoNetworkError?: boolean;
+}
+/**
+ * Creates a mock OAuth provider server for testing.
+ * Intercepts fetch calls to simulate provider HTTP endpoints.
+ */
+export declare function createMockProvider(config: MockProviderConfig): {
+    intercept: () => void;
+    restore: () => void;
+    getRequests: () => {
+        url: string;
+        method: string;
+        body?: string;
+    }[];
+};
+export declare function createMockTokenSet(overrides?: Partial<TokenSet>): TokenSet;
+//# sourceMappingURL=mock-provider.d.ts.map

package/dist/test/mock-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-provider.d.ts","sourceRoot":"","sources":["../../src/test/mock-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7C,aAAa,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAChD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG;IAC9D,SAAS,EAAE,MAAM,IAAI,CAAA;IACrB,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,WAAW,EAAE,MAAM;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACpE,CA0FA;AAED,wBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAU1E"}

package/dist/test/mock-provider.js

@@ -0,0 +1,99 @@
+/**
+ * Creates a mock OAuth provider server for testing.
+ * Intercepts fetch calls to simulate provider HTTP endpoints.
+ */
+export function createMockProvider(config) {
+    const requests = [];
+    const originalFetch = globalThis.fetch;
+    const mockFetch = async (input, init) => {
+        const url = typeof input === 'string'
+            ? input
+            : input instanceof URL
+                ? input.href
+                : 'url' in input
+                    ? input.url
+                    : String(input);
+        const method = init?.method ?? 'GET';
+        requests.push({ url, method, body: init?.body });
+        // Handle token endpoint requests
+        if (url === config.tokenEndpoint) {
+            if (config.tokenNetworkError) {
+                throw new TypeError('Network error simulating token endpoint failure');
+            }
+            if (config.tokenError) {
+                await delay(config.tokenDelay ?? 0);
+                return new Response(config.tokenError.body, {
+                    status: config.tokenError.status,
+                    headers: { 'Content-Type': 'application/json' },
+                });
+            }
+            await delay(config.tokenDelay ?? 0);
+            const tokenData = config.tokenResponse ?? {
+                access_token: 'mock_access_token',
+                refresh_token: 'mock_refresh_token',
+                id_token: 'mock_id_token',
+                token_type: 'Bearer',
+                expires_in: 3600,
+                scope: 'openid email profile',
+            };
+            return new Response(JSON.stringify(tokenData), {
+                status: 200,
+                headers: { 'Content-Type': 'application/json' },
+            });
+        }
+        // Handle userinfo endpoint requests
+        if (url === config.userinfoEndpoint) {
+            if (config.userinfoNetworkError) {
+                throw new TypeError('Network error simulating userinfo endpoint failure');
+            }
+            if (config.userinfoError) {
+                await delay(config.userinfoDelay ?? 0);
+                return new Response(config.userinfoError.body, {
+                    status: config.userinfoError.status,
+                    headers: { 'Content-Type': 'application/json' },
+                });
+            }
+            await delay(config.userinfoDelay ?? 0);
+            const profileData = config.defaultProfile ?? {
+                sub: 'mock_provider_account_id',
+                email: 'mock@example.com',
+                email_verified: true,
+                name: 'Mock User',
+                picture: 'https://example.com/avatar.png',
+                provider: 'mock',
+            };
+            return new Response(JSON.stringify(profileData), {
+                status: 200,
+                headers: { 'Content-Type': 'application/json' },
+            });
+        }
+        // Pass through for other requests
+        return originalFetch(input, init);
+    };
+    return {
+        intercept() {
+            globalThis.fetch = mockFetch;
+        },
+        restore() {
+            globalThis.fetch = originalFetch;
+        },
+        getRequests() {
+            return [...requests];
+        },
+    };
+}
+export function createMockTokenSet(overrides) {
+    return {
+        accessToken: 'mock_access_token',
+        refreshToken: 'mock_refresh_token',
+        idToken: 'mock_id_token',
+        scope: 'openid email profile',
+        tokenType: 'Bearer',
+        expiresAt: 3600,
+        ...overrides,
+    };
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=mock-provider.js.map

package/dist/test/mock-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-provider.js","sourceRoot":"","sources":["../../src/test/mock-provider.ts"],"names":[],"mappings":"AAeA;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAK3D,MAAM,QAAQ,GAAqD,EAAE,CAAA;IACrE,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAA;IAEtC,MAAM,SAAS,GAAG,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAqB,EAAE;QAC1F,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,KAAK,YAAY,GAAG;gBACpB,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,KAAK,IAAI,KAAK;oBACd,CAAC,CAAC,KAAK,CAAC,GAAG;oBACX,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,KAAK,CAAA;QAEpC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAA0B,EAAE,CAAC,CAAA;QAEtE,iCAAiC;QACjC,IAAI,GAAG,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAA;YACxE,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAA;gBACnC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE;oBAC1C,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;oBAChC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAA;YACnC,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,IAAI;gBACxC,YAAY,EAAE,mBAAmB;gBACjC,aAAa,EAAE,oBAAoB;gBACnC,QAAQ,EAAE,eAAe;gBACzB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,sBAAsB;aAC9B,CAAA;YACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;gBAC7C,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAA;QACJ,CAAC;QAED,oCAAoC;QACpC,IAAI,GAAG,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAChC,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAA;YAC3E,CAAC;YAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzB,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,CAAA;gBACtC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE;oBAC7C,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM;oBACnC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,CAAA;YACtC,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,IAAI;gBAC3C,GAAG,EAAE,0BAA0B;gBAC/B,KAAK,EAAE,kBAAkB;gBACzB,cAAc,EAAE,IAAI;gBACpB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,gCAAgC;gBACzC,QAAQ,EAAE,MAAM;aACjB,CAAA;YACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE;gBAC/C,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAA;QACJ,CAAC;QAED,kCAAkC;QAClC,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACnC,CAAC,CAAA;IAED,OAAO;QACL,SAAS;YACP,UAAU,CAAC,KAAK,GAAG,SAAS,CAAA;QAC9B,CAAC;QACD,OAAO;YACL,UAAU,CAAC,KAAK,GAAG,aAAa,CAAA;QAClC,CAAC;QACD,WAAW;YACT,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAA;QACtB,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAA6B;IAC9D,OAAO;QACL,WAAW,EAAE,mBAAmB;QAChC,YAAY,EAAE,oBAAoB;QAClC,OAAO,EAAE,eAAe;QACxB,KAAK,EAAE,sBAAsB;QAC7B,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI;QACf,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC"}

package/dist/test/rate-limiter.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rate-limiter.test.d.ts.map

package/dist/test/rate-limiter.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.test.d.ts","sourceRoot":"","sources":["../../src/test/rate-limiter.test.ts"],"names":[],"mappings":""}

package/dist/test/rate-limiter.test.js

@@ -0,0 +1,38 @@
+import { describe, it, expect } from 'vitest';
+import { inMemoryRateLimiter } from '../rate-limiter.js';
+describe('inMemoryRateLimiter', () => {
+    it('should allow requests within the limit', async () => {
+        const limiter = inMemoryRateLimiter();
+        const result = await limiter.check('test-key', 5, 60_000);
+        expect(result.allowed).toBe(true);
+        expect(result.remaining).toBe(4);
+    });
+    it('should block requests exceeding the limit', async () => {
+        const limiter = inMemoryRateLimiter();
+        for (let i = 0; i < 3; i++) {
+            await limiter.check('block-key', 3, 60_000);
+        }
+        const result = await limiter.check('block-key', 3, 60_000);
+        expect(result.allowed).toBe(false);
+        expect(result.remaining).toBe(0);
+    });
+    it('should track different keys independently', async () => {
+        const limiter = inMemoryRateLimiter();
+        await limiter.check('key-a', 1, 60_000);
+        const a2 = await limiter.check('key-a', 1, 60_000);
+        expect(a2.allowed).toBe(false);
+        const b1 = await limiter.check('key-b', 1, 60_000);
+        expect(b1.allowed).toBe(true);
+    });
+    it('should reset after the window expires', async () => {
+        const limiter = inMemoryRateLimiter();
+        await limiter.check('window-key', 1, 50);
+        const result = await limiter.check('window-key', 1, 50);
+        expect(result.allowed).toBe(false);
+        // Wait for window to expire
+        await new Promise((resolve) => setTimeout(resolve, 60));
+        const after = await limiter.check('window-key', 1, 50);
+        expect(after.allowed).toBe(true);
+    }, 10_000);
+});
+//# sourceMappingURL=rate-limiter.test.js.map

package/dist/test/rate-limiter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.test.js","sourceRoot":"","sources":["../../src/test/rate-limiter.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAExD,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAA;QACrC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;QACzD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAA;QAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;QAC7C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;QAC1D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAA;QAErC,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;QACvC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;QAClD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAE9B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;QAClD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAA;QAErC,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAExC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAElC,4BAA4B;QAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC,EAAE,MAAM,CAAC,CAAA;AACZ,CAAC,CAAC,CAAA"}

package/dist/test/url.test.d 2.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=url.test.d.ts.map

package/dist/test/url.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=url.test.d.ts.map

package/dist/test/url.test.d.ts 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.test.d.ts","sourceRoot":"","sources":["../../src/test/url.test.ts"],"names":[],"mappings":""}

package/dist/test/url.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.test.d.ts","sourceRoot":"","sources":["../../src/test/url.test.ts"],"names":[],"mappings":""}

package/dist/test/url.test.js

@@ -0,0 +1,40 @@
+import { describe, it, expect } from 'vitest';
+import { isTrustedOrigin, buildCallbackURL } from '../url.js';
+describe('isTrustedOrigin', () => {
+    const trustedOrigins = ['https://app.example.com', 'https://admin.example.com'];
+    it('should accept URLs matching trusted origins', () => {
+        expect(isTrustedOrigin('https://app.example.com/dashboard', trustedOrigins)).toBe(true);
+        expect(isTrustedOrigin('https://app.example.com/auth/callback', trustedOrigins)).toBe(true);
+        expect(isTrustedOrigin('https://admin.example.com/users', trustedOrigins)).toBe(true);
+    });
+    it('should reject URLs from untrusted origins', () => {
+        expect(isTrustedOrigin('https://evil.com/steal', trustedOrigins)).toBe(false);
+        expect(isTrustedOrigin('http://app.example.com', trustedOrigins)).toBe(false);
+    });
+    it('should reject malformed URLs', () => {
+        expect(isTrustedOrigin('not-a-url', trustedOrigins)).toBe(false);
+        expect(isTrustedOrigin('', trustedOrigins)).toBe(false);
+    });
+    it('should return false for empty trusted origins', () => {
+        expect(isTrustedOrigin('https://app.example.com', [])).toBe(false);
+    });
+});
+describe('buildCallbackURL', () => {
+    it('should build a simple callback URL', () => {
+        const result = buildCallbackURL('https://app.example.com', '/auth/callback');
+        expect(result).toBe('https://app.example.com/auth/callback');
+    });
+    it('should handle base URL with trailing slash', () => {
+        const result = buildCallbackURL('https://app.example.com/', '/auth/callback');
+        expect(result).toBe('https://app.example.com/auth/callback');
+    });
+    it('should handle path without leading slash', () => {
+        const result = buildCallbackURL('https://app.example.com', 'auth/callback');
+        expect(result).toBe('https://app.example.com/auth/callback');
+    });
+    it('should preserve query parameters', () => {
+        const result = buildCallbackURL('https://app.example.com', '/callback?provider=google');
+        expect(result).toBe('https://app.example.com/callback?provider=google');
+    });
+});
+//# sourceMappingURL=url.test.js.map

package/dist/test/url.test.js 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.test.js","sourceRoot":"","sources":["../../src/test/url.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAE7D,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,cAAc,GAAG,CAAC,yBAAyB,EAAE,2BAA2B,CAAC,CAAA;IAE/E,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,eAAe,CAAC,mCAAmC,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvF,MAAM,CAAC,eAAe,CAAC,uCAAuC,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3F,MAAM,CAAC,eAAe,CAAC,iCAAiC,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,eAAe,CAAC,wBAAwB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,CAAC,eAAe,CAAC,wBAAwB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChE,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,eAAe,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,CAAA;QAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAA;QAC7E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAA;QAC3E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,yBAAyB,EAAE,2BAA2B,CAAC,CAAA;QACvF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/test/url.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.test.js","sourceRoot":"","sources":["../../src/test/url.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAE7D,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,cAAc,GAAG,CAAC,yBAAyB,EAAE,2BAA2B,CAAC,CAAA;IAE/E,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,eAAe,CAAC,mCAAmC,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvF,MAAM,CAAC,eAAe,CAAC,uCAAuC,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3F,MAAM,CAAC,eAAe,CAAC,iCAAiC,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,eAAe,CAAC,wBAAwB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,CAAC,eAAe,CAAC,wBAAwB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChE,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,eAAe,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,CAAA;QAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAA;QAC7E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAA;QAC3E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,yBAAyB,EAAE,2BAA2B,CAAC,CAAA;QACvF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/types.d.ts

@@ -0,0 +1,109 @@
+export interface User {
+    id: string;
+    email: string | null;
+    emailVerified: boolean;
+    name: string | null;
+    image: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface Account {
+    id: string;
+    userId: string;
+    provider: string;
+    providerAccountId: string;
+    accessToken: string | null;
+    refreshToken: string | null;
+    idToken: string | null;
+    scope: string | null;
+    tokenType: string | null;
+    expiresAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface Session {
+    id: string;
+    userId: string;
+    tokenHash: string;
+    expiresAt: Date;
+    ipAddress: string | null;
+    userAgent: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface SessionWithUser {
+    session: Session;
+    user: User;
+}
+export interface OAuthState {
+    id: string;
+    stateHash: string;
+    codeVerifier: string;
+    provider: string;
+    callbackUrl: string | null;
+    errorUrl: string | null;
+    expiresAt: Date;
+    createdAt: Date;
+}
+export interface ProviderProfile {
+    provider: string;
+    providerAccountId: string;
+    email?: string;
+    emailVerified?: boolean;
+    name?: string;
+    image?: string;
+    raw?: unknown;
+}
+export interface TokenSet {
+    accessToken: string;
+    refreshToken?: string;
+    idToken?: string;
+    scope?: string;
+    tokenType?: string;
+    expiresAt?: number;
+}
+export interface CreateUserInput {
+    email: string | null;
+    emailVerified: boolean;
+    name: string | null;
+    image: string | null;
+}
+export interface UpdateUserInput {
+    email?: string | null;
+    emailVerified?: boolean;
+    name?: string | null;
+    image?: string | null;
+}
+export interface CreateAccountInput {
+    userId: string;
+    provider: string;
+    providerAccountId: string;
+    accessToken?: string | null;
+    refreshToken?: string | null;
+    idToken?: string | null;
+    scope?: string | null;
+    tokenType?: string | null;
+    expiresAt?: Date | null;
+}
+export interface CreateSessionInput {
+    userId: string;
+    tokenHash: string;
+    expiresAt: Date;
+    ipAddress?: string | null;
+    userAgent?: string | null;
+}
+export interface UpdateSessionInput {
+    tokenHash?: string;
+    expiresAt?: Date;
+    ipAddress?: string | null;
+    userAgent?: string | null;
+}
+export interface CreateOAuthStateInput {
+    stateHash: string;
+    codeVerifier: string;
+    provider: string;
+    callbackUrl?: string | null;
+    errorUrl?: string | null;
+    expiresAt: Date;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,aAAa,EAAE,OAAO,CAAA;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,IAAI,CAAA;CACX;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAID,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,aAAa,EAAE,OAAO,CAAA;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,IAAI,CAAA;CAChB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/url.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Check if a URL's origin is in the list of trusted origins.
+ * Returns false if the URL is malformed or trustedOrigins is empty.
+ */
+export declare function isTrustedOrigin(url: string, trustedOrigins: string[]): boolean;
+/**
+ * Build a callback URL from a base URL and path.
+ * Ensures no double slashes and trailing slashes are cleaned.
+ */
+export declare function buildCallbackURL(baseURL: string, path: string): string;
+//# sourceMappingURL=url.d.ts.map

package/dist/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../src/url.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAoB9E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAItE"}

package/dist/url.js

@@ -0,0 +1,35 @@
+/**
+ * Check if a URL's origin is in the list of trusted origins.
+ * Returns false if the URL is malformed or trustedOrigins is empty.
+ */
+export function isTrustedOrigin(url, trustedOrigins) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return false;
+    }
+    if (trustedOrigins.length === 0) {
+        return false;
+    }
+    return trustedOrigins.some((origin) => {
+        try {
+            const trusted = new URL(origin);
+            return parsed.origin === trusted.origin;
+        }
+        catch {
+            return false;
+        }
+    });
+}
+/**
+ * Build a callback URL from a base URL and path.
+ * Ensures no double slashes and trailing slashes are cleaned.
+ */
+export function buildCallbackURL(baseURL, path) {
+    const base = baseURL.replace(/\/+$/, '');
+    const cleanPath = path.startsWith('/') ? path : `/${path}`;
+    return `${base}${cleanPath}`;
+}
+//# sourceMappingURL=url.js.map

package/dist/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../src/url.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,cAAwB;IACnE,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;YAC/B,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAA;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAY;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;IAC1D,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,CAAA;AAC9B,CAAC"}

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@cloudauth/core",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./test": {
+      "types": "./dist/test/index.d.ts",
+      "import": "./dist/test/index.js",
+      "default": "./dist/test/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage"
+  }
+}