@descope/node-sdk 1.0.4-alpha.5 → 1.0.4-alpha.7

package/README.md

@@ -2,228 +2,23 @@
 
 Use the Descope NodeJS SDK for NodeJS/Express to quickly and easily add user authentication to your application or website.
 
+## Installing the SDK
 
-## ExpressStart with OTP Authentication
+Replace any instance of `<ProjectID>` in the code below with your company's Project ID, which can be found in the [Descope console](https://app.descope.com).
 
-This section will show you how to implement user authentication using a one-time password (OTP). A typical four step flow for OTP authentictaion is shown below.
+Run the following code in your project. These commands will add the Descope SDK for Node as a project dependency, and set the `DESCOPE_PROJECT_ID` variable to a valid \<ProjectID\>.
 
-```mermaid
-flowchart LR
-  signup[1. customer sign-up]-- customer gets OTP -->verify[3. customer verification]
-  signin[2. customer sign-in]-- customer gets OTP -->verify
-  verify-- access private API -->validate[4. session validation]
+```bash
+npm i --save @descope/node-sdk
 ```
 
-### Prerequisites
-
-Replace any instance of  `<ProjectID>` in the code below with your company's Project ID, which can be found in the [Descope console](https://app.descope.com).
-
-* Run the following commands in your project
-
-     These commands will add the Descope NodeJS SDK as a project dependency.
-
-     ```bash
-    npm i --save @descope/node-sdk
-     ```
-
-* Import and initialize the ExpresSDK for NodeJS client in your source code
-
-    ```javascript
-    import DescopeClient from '@descope/node-sdk';
-    const descopeClient = DescopeClient({ projectId: <ProjectID> });
-    ```
-    or
-
-    ```javascript
-    const sdk = require('@descope/node-sdk');
-    const descopeClient = sdk({ projectId: <ProjectID> });
-    ```
-
-### 1. Customer Sign-up
-
-In your sign-up route for OTP (for example, `myapp.com/signup`) generate a sign-up request and send the OTP verification code via the selected delivery method. In the example below an email is sent to "mytestmail@test.com". In additon, optional user data (for exmaple, a custom username in the code sample below) can be gathered during the sign-up process.
-
-```javascript
-await descopeClient.otp.signUp.email("mytestmail@test.com");
-```
-
-### 2. Customer Sign-in
-In your sign-in route for OTP (for exmaple, `myapp.com/login`) generate a sign-in request send the OTP verification code via the selected delivery method. In the example below an email is sent to "mytestmail@test.com".
-
-```javascript
-await descopeClient.otp.signIn.email("mytestmail@test.com");
-```
-
-### 3. Customer Verification
-
-In your verify customer route for OTP (for example, `myapp.com/verify`) verify the OTP from either a customer sign-up or sign-in. The VerifyCode function call will write the necessary tokens and cookies to the response writer (`w`), which will be used by the NodeJS client to validate each session interaction.
-
-```javascript
-const out = await descopeClient.otp.verify.email(identifier, code);
-if (out.data.cookies) {
-    res.set('Set-Cookie', out.data.cookies);
-}
-```
-
-### 4. Session Validation
-
-Session validation checks to see that the visitor to your website or application is who they say they are, by comparing the value in the validation variables against the session data that is already stored.
-
-```javascript
-const out = await descopeClient.validateSession(session_jwt, refresh_jwt);
-if (out?.cookies) {
-    res.set('Set-Cookie', out.cookies);
-}
-```
-
-## ExpressStart with MagicLink Authentication
-
-This section will help you implement user authentication using Magiclinks. A typical four step flow for OTP authentictaion is shown below.
-
-```mermaid
-flowchart LR
-  signup[1. customer sign-up]-- customer gets MagicLink -->verify[3. MagicLink verification]
-  signin[2. customer sign-in]-- customer gets MagicLink -->verify
-  verify-- access private API -->validate[4. session validation]
-```
-
-### Prerequisites
-
-Replace any instance of  `<ProjectID>` in the code below with your company's Project ID, which can be found in the [Descope console](https://app.descope.com).
-
-* Run the following commands in your project
-
-     These commands will add the Descope NodeJS SDK as a project dependency.
-
-     ```bash
-    npm i --save @descope/node-sdk
-     ```
-
-* Import and initialize the ExpresSDK for NodeJS client in your source code
-
-    ```javascript
-    import DescopeClient from '@descope/node-sdk';
-    const descopeClient = DescopeClient({ projectId: <ProjectID> });
-    ```
-    or
-
-    ```javascript
-    const sdk = require('@descope/node-sdk');
-    const descopeClient = sdk({ projectId: <ProjectID> });
-    ```
-
-### 1. Customer Sign-up
-
-In your sign-up route using magic link (for example, `myapp.com/signup`) generate a sign-up request and send the magic link via the selected delivery method. In the example below an email is sent to "mytestmail@test.com" containing the magic link and the link will automatically return back to the provided URL ("https://mydomain.com/verify"). In additon, optional user data (for exmaple, a custom username in the code sample below) can be gathered during the sign-up process.
-
-```javascript
-await descopeClient.magiclink.signUp.email("mytestmail@test.com", { name: "custom name" })
-```
-
-### 2. Customer Sign-in
-In your sign-in route using magic link (for exmaple, `myapp.com/login`) generate a sign-in request send the magic link via the selected delivery method. In the example below an email is sent to "mytestmail@test.com" containing the magic link and the link will automatically return back to the provided URL ("https://mydomain.com/verify"). 
-
-```javascript
-await descopeClient.magiclink.signIn.email("mytestmail@test.com")
-```
-
-### 3. Customer Verification
-
-In your verify customer route for magic link (for example, `mydomain.com/verify`) verify the token from either a customer sign-up or sign-in.
-
-```javascript
-const out = await descopeClient.magiclink.verify(token)
-if (out.data.cookies) {
-    res.set('Set-Cookie', out.data.cookies)
-}
-```
-
-### 4. Session Validation
-
-Session validation checks to see that the visitor to your website or application is who they say they are, by comparing the value in the validation variables against the session data that is already stored.
-
-```javascript
-const out = await descopeClient.validateSession(session_jwt, refresh_jwt)
-if (out?.cookies) {
-    res.set('Set-Cookie', out.cookies)
-}
-```
-
-## ExpressStart with OAuth Authentication
-
-In the example below, we assume using the Descope builtin oauth provider, in that case, we dont need to define any specific application details.
-
-### Prerequisites
-
-Replace any instance of  `<ProjectID>` in the code below with your company's Project ID, which can be found in the [Descope console](https://app.descope.com).
-
-* Run the following commands in your project
-
-     These commands will add the Descope NodeJS SDK as a project dependency.
-
-     ```bash
-    npm i --save @descope/node-sdk
-     ```
+## What do you want to implement?
 
-* Import and initialize the ExpresSDK for NodeJS client in your source code
+Click one of the following links to open the documentation for that specific functionality.
 
-    ```javascript
-    import DescopeClient from '@descope/node-sdk';
-    const descopeClient = DescopeClient({ projectId: <ProjectID> });
-    ```
-    or
-
-    ```javascript
-    const sdk = require('@descope/node-sdk');
-    const descopeClient = sdk({ projectId: <ProjectID> });
-    ```
-
-* Make sure to set the return url to exchange in the Descope Oauth authentication methods settings or use the start first argument.
-
-### 1. Customer Sign-up/Sign-In
-
-In your OAuth start flow (for example, `myapp.com/login-with-facebook`) generate a url to redirect the user to. In the example below the login 
-
-```javascript
-const out = await descopeClient.oauth.start.facebook();
-return out.data.url;
-```
-
-### 2. Customer Exchange
-
-In your exchange for any of the oauth provider (for example, `mydomain.com/exchange`) verify the code from the provider by using the exchange method. 
-
-```javascript
-const code = req.query.code
-const out = await descopeClient.oauth.exchnage(code);
-if (out.data.cookies) {
-    res.set('Set-Cookie', out.data.cookies);
-}
-```
-
-### 3. Session Validation
-
-Session validation checks to see that the visitor to your website or application is who they say they are, by comparing the value in the validation variables against the session data that is already stored.
-
-```javascript
-const out = await descopeClient.validateSession(session_jwt, refresh_jwt);
-if (out.cookies) {
-    res.set('Set-Cookie', out.cookies);
-}
-```
-
-### 4. Error handling 
-
-Each authentication function may return an error upon authentication failure or bad request. In case of an error, you will recieve an sdk response with `ok` equal to false and the error details are also included, such as the `errorCode` and the `errorDescription`. Needless to say, the `data` will be empty whenever an error occur.
-
-```javascript
-const out = await descopeClient.oauth.start.facebook();
-if (!out.ok) {
-    console.log(`an error has occured [code: ${out.errorCode}] with message: "${out.errorDescription}"`)
-} else {
-    ...
-}
-```
+- [x] [One time passwords (OTP)](./docs/otp.md)
+- [x] [Magic Links](./docs/magiclink.md)
+- [x] [OAuth/Social](./docs/oauth.md)
 
 ## Run the Examples
 
@@ -231,7 +26,7 @@ Instantly run the end-to-end ExpresSDK for NodeJS examples, as shown below. The
 
 ### Prerequisites
 
-Run the following commands in your project. Replace any instance of  `<ProjectID>` in the code below with your company's Project ID, which can be found in the [Descope console](https://app.descope.com).
+Run the following commands in your project. Replace any instance of `<ProjectID>` in the code below with your company's Project ID, which can be found in the [Descope console](https://app.descope.com).
 
 This commands will add the Descope NodeJS SDK as a project dependency, clone the SDK repository locally, and set the `DESCOPE_PROJECT_ID`.
 
@@ -245,26 +40,29 @@ export DESCOPE_PROJECT_ID=<ProjectID>
 **TL;DR**: Run `npm run quick`
 
 Run the following commands in the root of the project to build and run the examples.
+
 1. Run this to start the ES6 typescript module example
 
-    ```code bash
-    npm i
-    npm run build
-    cd examples/es6
-    npm i
-    npm start
-    ```
+   ```code bash
+   npm i && \
+   npm run build && \
+   cd examples/es6 && \
+   npm i && \
+   npm run generateCerts && \
+   npm start
+   ```
 
 2. Run this to start the commonjs example
 
-    ```code bash
-    npm i
-    npm run build
-    cd examples/commonjs
-    npm i
-    npm start
-    ```
+   ```code bash
+   npm i && \
+   npm run build && \
+   cd examples/commonjs && \
+   npm i && \
+   npm run generateCerts && \
+   npm start
+   ```
 
 ## License
 
-The Descope ExpresSDK for Go is licensed for use under the terms and conditions of the [MIT license Agreement](https://github.com/descope/go-sdk/blob/main/LICENSE).
+The Descope ExpresSDK for Node is licensed for use under the terms and conditions of the [MIT license Agreement](https://github.com/descope/node-sdk/blob/main/LICENSE).

package/dist/cjs/examples/es6/src/index.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cjs/index.cjs.js

@@ -1,2 +1,2 @@
-"use strict";var e=require("tslib"),t=require("@descope/core-js-sdk"),i=require("jose"),r=require("node-fetch");function o(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var s=o(t),n=o(r);const a=(e,t)=>`${e}=${t};`,d=t=>(...i)=>e.__awaiter(void 0,void 0,void 0,(function*(){var e;const r=yield t(...i);if(!r.data)return r;let{sessionJwt:o,refreshJwt:s}=r.data,n=a("DS",o);return s?n+=a("DSR",s):(n+=(null===(e=r.response)||void 0===e?void 0:e.headers.get("set-cookie"))||"",s=((e,t)=>{const i=null==e?void 0:e.match(RegExp(`(?:^|;\\s*)${t}=([^;]*)`));return i?i[1]:null})(n,"DSR")),Object.assign(Object.assign({},r),{data:Object.assign(Object.assign({},r.data),{refreshJwt:s,cookies:n})})})),l=(e,t,i)=>{if(!e)return;const r="string"==typeof t?t.split("."):t,o=r.shift()||"";if(0===r.length||"*"===o){const t=t=>{if(!t||"function"!=typeof e[t])throw Error(`cannot wrap value at key "${t.toString()}"`);e[t]=i(e[t])};"*"===o?Object.keys(e).forEach(t):t(o)}else l(e[o],r,i)};globalThis.fetch||(globalThis.fetch=n.default,globalThis.Headers=r.Headers,globalThis.Request=r.Request,globalThis.Response=r.Response);const c=(...t)=>{const r=s.default(...t);var o,n;o=r,n=d,["otp.verify.*","magicLink.verify","magicLink.crossDevice.signUp.*","magicLink.crossDevice.signIn.*","oauth.exchange","saml.exchange","totp.verify","webauthn.signIn.finish","webauthn.signUp.finish","refresh"].forEach((e=>l(o,e,n)));const{projectId:a,logger:c}=t[0],u={};return Object.assign(Object.assign({},r),{getKey(t){return e.__awaiter(this,void 0,void 0,(function*(){if(!(null==t?void 0:t.kid))throw Error("header.kid must not be empty");if(u[t.kid])return u[t.kid];if(Object.assign(u,yield e.__awaiter(void 0,void 0,void 0,(function*(){const t=(yield r.httpClient.get(`keys/${a}`).then((e=>e.json())))||[];return(yield Promise.all(t.map((t=>e.__awaiter(void 0,void 0,void 0,(function*(){return[t.kid,yield i.importJWK(t)]})))))).reduce(((e,[t,i])=>t?Object.assign(Object.assign({},e),{[t.toString()]:i}):e),{})}))),!u[t.kid])throw Error("failed to fetch matching key");return u[t.kid]}))},validateToken(t){return e.__awaiter(this,void 0,void 0,(function*(){return{token:(yield i.jwtVerify(t,this.getKey,{algorithms:["ES384"]})).payload}}))},validateSession(t,i){return e.__awaiter(this,void 0,void 0,(function*(){if(!t)throw Error("session token must not be empty");try{return yield this.validateToken(t)}catch(e){try{return yield this.validateToken(i),(yield this.refresh(i)).data}catch(e){throw null==c||c.error("failed to validate refresh token",e),Error("could not validate tokens")}}}))}})};c.DeliveryMethods=s.default.DeliveryMethods,module.exports=c;
+"use strict";var e=require("@descope/core-js-sdk"),t=require("jose"),s=require("node-fetch"),o=require("tslib");function r(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var a=r(e),n=r(s);const i=(e,t,s)=>`${e}=${t}; Domain=${(null==s?void 0:s.cookieDomain)||""}; Max-Age=${(null==s?void 0:s.cookieMaxAge)||""}; Path=${(null==s?void 0:s.cookiePath)||"/"}; HttpOnly; SameSite=Strict`,c=e=>async(...t)=>{var s,r,a;const n=await e(...t);if(!n.data)return n;let c=n.data,{sessionJwt:l,refreshJwt:d}=c,u=o.__rest(c,["sessionJwt","refreshJwt"]);const h=[i("DS",l,u)];return d?h.push(i("DSR",d,u)):(null===(s=n.response)||void 0===s?void 0:s.headers.get("set-cookie"))&&(d=((e,t)=>{const s=null==e?void 0:e.match(RegExp(`(?:^|;\\s*)${t}=([^;]*)`));return s?s[1]:null})(null===(r=n.response)||void 0===r?void 0:r.headers.get("set-cookie"),"DSR"),h.push(null===(a=n.response)||void 0===a?void 0:a.headers.get("set-cookie"))),Object.assign(Object.assign({},n),{data:Object.assign(Object.assign({},n.data),{refreshJwt:d,cookies:h})})},l=(e,t,s)=>{if(!e)return;const o="string"==typeof t?t.split("."):t,r=o.shift()||"";if(0===o.length||"*"===r){const t=t=>{if(!t||"function"!=typeof e[t])throw Error(`cannot wrap value at key "${t.toString()}"`);e[t]=s(e[t])};"*"===r?Object.keys(e).forEach(t):t(r)}else l(e[r],o,s)};function d(e,t,s){var o,r;const a=s?null===(r=null===(o=e.token.tenants)||void 0===o?void 0:o[s])||void 0===r?void 0:r[t]:e.token[t];return Array.isArray(a)?a:[]}globalThis.fetch||(globalThis.fetch=n.default,globalThis.Headers=s.Headers,globalThis.Request=s.Request,globalThis.Response=s.Response);const u=(...e)=>{const s=[...e];s[0].hooks=s[0].hooks||{};const o=s[0].hooks.beforeRequest;s[0].hooks.beforeRequest=e=>{var t;const s=e;return s.headers=Object.assign(Object.assign({},s.headers),{"x-descope-sdk-name":"nodejs","x-descope-sdk-node-version":(null===(t=null===process||void 0===process?void 0:process.versions)||void 0===t?void 0:t.node)||"","x-descope-sdk-version":"1.0.4-alpha.7"}),(null==o?void 0:o(s))||s};const r=a.default(...s);var n,i;n=r,i=c,["otp.verify.*","magicLink.verify","magicLink.crossDevice.signUp.*","magicLink.crossDevice.signIn.*","oauth.exchange","saml.exchange","totp.verify","webauthn.signIn.finish","webauthn.signUp.finish","refresh"].forEach((e=>l(n,e,i)));const{projectId:u,logger:h}=e[0],v={},f=Object.assign(Object.assign({},r),{async getKey(e){if(!(null==e?void 0:e.kid))throw Error("header.kid must not be empty");if(v[e.kid])return v[e.kid];if(Object.assign(v,await(async()=>{const e=await r.httpClient.get(`v1/keys/${u}`).then((e=>e.json()));return Array.isArray(e)?(await Promise.all(e.map((async e=>[e.kid,await t.importJWK(e)])))).reduce(((e,[t,s])=>t?Object.assign(Object.assign({},e),{[t.toString()]:s}):e),{}):{}})()),!v[e.kid])throw Error("failed to fetch matching key");return v[e.kid]},validateJwt:async e=>({jwt:e,token:(await t.jwtVerify(e,f.getKey,{issuer:u,clockTolerance:5})).payload}),async validateSession(e,t){var s,o;if(!e&&!t)throw Error("both refresh token and session token are empty");if(e)try{return await f.validateJwt(e)}catch(e){if(!t)throw null==h||h.error("failed to validate session token and no refresh token provided",e),Error("could not validate tokens")}if(t)try{await f.validateJwt(t);const e=await f.refresh(t);if(e.ok){return await f.validateJwt(null===(s=e.data)||void 0===s?void 0:s.sessionJwt)}throw Error(null===(o=e.error)||void 0===o?void 0:o.message)}catch(e){throw null==h||h.error("failed to validate refresh token",e),Error("could not validate tokens")}throw Error("could not validate token")},async exchangeAccessKey(e){if(!e)throw Error("access key must not be empty");let t;try{t=await f.accessKey.exchange(e)}catch(e){throw null==h||h.error("failed to exchange access key",e),Error("could not exchange access key")}const{sessionJwt:s}=t.data;if(!s)throw null==h||h.error("failed to parse exchange access key response"),Error("could not exchange access key");try{return await f.validateJwt(s)}catch(e){throw null==h||h.error("failed to parse jwt from access key",e),Error("could not exchange access key")}},validatePermissions:(e,t)=>f.validateTenantPermissions(e,null,t),validateTenantPermissions(e,t,s){const o=d(e,"permissions",t);return s.every((e=>o.includes(e)))},validateRoles:(e,t)=>f.validateTenantRoles(e,null,t),validateTenantRoles(e,t,s){const o=d(e,"roles",t);return s.every((e=>o.includes(e)))}});return f};u.DeliveryMethods=a.default.DeliveryMethods,u.RefreshTokenCookieName="DSR",u.SessionTokenCookieName="DS",module.exports=u;
 //# sourceMappingURL=index.cjs.js.map

package/dist/cjs/index.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs.js","sources":["../../lib/constants.ts","../../lib/helpers.ts","../../lib/index.ts"],"sourcesContent":["// eslint-disable-next-line import/prefer-default-export\nexport const refreshTokenCookieName = 'DSR'\nexport const sessionTokenCookieName = 'DS'\n","import type { SdkResponse } from '@descope/core-js-sdk'\nimport { refreshTokenCookieName, sessionTokenCookieName } from './constants'\n\nconst generateCookie = (name: string, value: string) => `${name}=${value};`\n\nconst getCookieValue = (cookie: string | null | undefined, name: string) => {\n  const match = cookie?.match(RegExp(`(?:^|;\\\\s*)${name}=([^;]*)`))\n  return match ? match[1] : null\n}\n\n// eslint-disable-next-line import/prefer-default-export\nexport const withCookie =\n  <T extends Array<any>, U extends Promise<SdkResponse>>(fn: (...args: T) => U) =>\n  async (...args: T): Promise<SdkResponse> => {\n    const resp = await fn(...args)\n\n    if (!resp.data) {\n      return resp\n    }\n\n    // eslint-disable-next-line prefer-const\n    let { sessionJwt, refreshJwt } = resp.data\n    let cookies = generateCookie(sessionTokenCookieName, sessionJwt)\n\n    if (!refreshJwt) {\n      cookies += resp.response?.headers.get('set-cookie') || ''\n      refreshJwt = getCookieValue(cookies, refreshTokenCookieName)\n    } else {\n      cookies += generateCookie(refreshTokenCookieName, refreshJwt)\n    }\n\n    return { ...resp, data: { ...resp.data, refreshJwt, cookies } }\n  }\n\nexport const wrapWith = <T extends Record<string, any>>(\n  obj: T,\n  path: string | string[],\n  wrappingFn: Function,\n  // eslint-disable-next-line consistent-return\n): void => {\n  if (!obj) return\n\n  const pathSections = typeof path === 'string' ? path.split('.') : path\n  const section = pathSections.shift() || ('' as keyof T)\n\n  if (pathSections.length === 0 || section === '*') {\n    const wrap = (key: keyof T) => {\n      if (key && typeof obj[key] === 'function') {\n        // eslint-disable-next-line no-param-reassign\n        obj[key] = wrappingFn(obj[key])\n      } else {\n        throw Error(`cannot wrap value at key \"${key.toString()}\"`)\n      }\n    }\n    if (section === '*') {\n      Object.keys(obj).forEach(wrap)\n    } else {\n      wrap(section)\n    }\n  } else {\n    wrapWith(obj[section], pathSections, wrappingFn)\n  }\n}\n\nexport const bulkWrapWith = (\n  obj: Parameters<typeof wrapWith>[0],\n  paths: string[],\n  wrappingFn: Parameters<typeof wrapWith>[2],\n) => paths.forEach((path: string) => wrapWith(obj, path, wrappingFn))\n","import createSdk from '@descope/core-js-sdk'\nimport { KeyLike, jwtVerify, JWK, JWTHeaderParameters, importJWK } from 'jose'\nimport fetch, { Headers, Response, Request } from 'node-fetch'\nimport { bulkWrapWith, withCookie } from './helpers'\nimport { AuthenticationInfo } from './types'\n\nif (!globalThis.fetch) {\n  // @ts-ignore\n  globalThis.fetch = fetch\n  // @ts-ignore\n  globalThis.Headers = Headers\n  // @ts-ignore\n  globalThis.Request = Request\n  // @ts-ignore\n  globalThis.Response = Response\n}\n\nconst sdk = (...args: Parameters<typeof createSdk>) => {\n  const coreSdk = createSdk(...args)\n\n  bulkWrapWith(\n    coreSdk,\n    [\n      'otp.verify.*',\n      'magicLink.verify',\n      'magicLink.crossDevice.signUp.*',\n      'magicLink.crossDevice.signIn.*',\n      'oauth.exchange',\n      'saml.exchange',\n      'totp.verify',\n      'webauthn.signIn.finish',\n      'webauthn.signUp.finish',\n      'refresh',\n    ],\n    withCookie,\n  )\n\n  const { projectId, logger } = args[0]\n\n  const keys: Record<string, KeyLike | Uint8Array> = {}\n\n  const fetchKeys = async () => {\n    const publicKeys: JWK[] =\n      (await coreSdk.httpClient.get(`keys/${projectId}`).then((resp) => resp.json())) || []\n    const kidJwksPairs = await Promise.all(\n      publicKeys.map(async (key) => [key.kid, await importJWK(key)]),\n    )\n\n    return kidJwksPairs.reduce(\n      (acc, [kid, jwk]) => (kid ? { ...acc, [kid.toString()]: jwk } : acc),\n      {},\n    )\n  }\n\n  return {\n    ...coreSdk,\n\n    async getKey(header: JWTHeaderParameters): Promise<KeyLike | Uint8Array> {\n      if (!header?.kid) throw Error('header.kid must not be empty')\n\n      if (keys[header.kid]) return keys[header.kid]\n\n      // do we need to fetch once or every time?\n      Object.assign(keys, await fetchKeys())\n\n      if (!keys[header.kid]) throw Error('failed to fetch matching key')\n\n      return keys[header.kid]\n    },\n\n    async validateToken(token: string): Promise<AuthenticationInfo> {\n      const res = await jwtVerify(token, this.getKey, { algorithms: ['ES384'] })\n\n      return { token: res.payload }\n    },\n\n    async validateSession(\n      sessionToken: string,\n      refreshToken: string,\n    ): Promise<AuthenticationInfo | undefined> {\n      if (!sessionToken) throw Error('session token must not be empty')\n\n      try {\n        const token = await this.validateToken(sessionToken)\n        return token\n      } catch (error) {\n        try {\n          await this.validateToken(refreshToken)\n\n          return (await this.refresh(refreshToken)).data\n        } catch (refreshTokenErr) {\n          logger?.error('failed to validate refresh token', refreshTokenErr)\n\n          throw Error('could not validate tokens')\n        }\n      }\n    },\n  }\n}\n\nconst sdkWithAttributes = sdk as typeof sdk & { DeliveryMethods: typeof createSdk.DeliveryMethods }\n\nsdkWithAttributes.DeliveryMethods = createSdk.DeliveryMethods\n\nexport default sdkWithAttributes\n\nexport type { DeliveryMethod, OAuthProvider } from '@descope/core-js-sdk'\n"],"names":["generateCookie","name","value","withCookie","fn","args","__awaiter","resp","data","sessionJwt","refreshJwt","cookies","_a","response","headers","get","cookie","match","RegExp","getCookieValue","Object","assign","wrapWith","obj","path","wrappingFn","pathSections","split","section","shift","length","wrap","key","Error","toString","keys","forEach","globalThis","fetch","Headers","Request","Response","sdkWithAttributes","coreSdk","createSdk","projectId","logger","getKey","header","kid","publicKeys","httpClient","then","json","Promise","all","map","importJWK","reduce","acc","jwk","validateToken","token","jwtVerify","this","algorithms","payload","validateSession","sessionToken","refreshToken","error","refresh","refreshTokenErr","DeliveryMethods"],"mappings":"0MACO,MCEDA,EAAiB,CAACC,EAAcC,IAAkB,GAAGD,KAAQC,KAQtDC,EAC4CC,GACvD,IAAUC,IAAiCC,EAAAA,eAAA,OAAA,OAAA,GAAA,kBACzC,MAAMC,QAAaH,KAAMC,GAEzB,IAAKE,EAAKC,KACR,OAAOD,EAIT,IAAIE,WAAEA,EAAUC,WAAEA,GAAeH,EAAKC,KAClCG,EAAUX,EDpBoB,KCoBmBS,GASrD,OAPKC,EAIHC,GAAWX,ED3BqB,MC2BkBU,IAHlDC,IAAwB,QAAbC,EAAAL,EAAKM,gBAAQ,IAAAD,OAAA,EAAAA,EAAEE,QAAQC,IAAI,gBAAiB,GACvDL,EArBiB,EAACM,EAAmCf,KACzD,MAAMgB,EAAQD,eAAAA,EAAQC,MAAMC,OAAO,cAAcjB,cACjD,OAAOgB,EAAQA,EAAM,GAAK,IAAI,EAmBbE,CAAeR,EDzBI,QC8BtBS,OAAAC,OAAAD,OAAAC,OAAA,CAAA,EAAAd,GAAM,CAAAC,KAAWY,OAAAC,OAAAD,OAAAC,OAAA,GAAAd,EAAKC,MAAM,CAAAE,aAAYC,aACtD,IAEWW,EAAW,CACtBC,EACAC,EACAC,KAGA,IAAKF,EAAK,OAEV,MAAMG,EAA+B,iBAATF,EAAoBA,EAAKG,MAAM,KAAOH,EAC5DI,EAAUF,EAAaG,SAAY,GAEzC,GAA4B,IAAxBH,EAAaI,QAA4B,MAAZF,EAAiB,CAChD,MAAMG,EAAQC,IACZ,IAAIA,GAA2B,mBAAbT,EAAIS,GAIpB,MAAMC,MAAM,6BAA6BD,EAAIE,eAF7CX,EAAIS,GAAOP,EAAWF,EAAIS,GAG3B,EAEa,MAAZJ,EACFR,OAAOe,KAAKZ,GAAKa,QAAQL,GAEzBA,EAAKH,EAER,MACCN,EAASC,EAAIK,GAAUF,EAAcD,EACtC,ECvDEY,WAAWC,QAEdD,WAAWC,MAAQA,UAEnBD,WAAWE,QAAUA,UAErBF,WAAWG,QAAUA,UAErBH,WAAWI,SAAWA,YAGxB,MAmFMC,EAnFM,IAAIrC,KACd,MAAMsC,EAAUC,EAAAA,WAAavC,GD8CH,IAC1BkB,EAEAE,EAFAF,EC5CEoB,ED8CFlB,ECjCEtB,EAZA,CACE,eACA,mBACA,iCACA,iCACA,iBACA,gBACA,cACA,yBACA,yBACA,WDoCKiC,SAASZ,GAAiBF,EAASC,EAAKC,EAAMC,KC/BvD,MAAMoB,UAAEA,EAASC,OAAEA,GAAWzC,EAAK,GAE7B8B,EAA6C,CAAA,EAenD,OAAAf,OAAAC,OAAAD,OAAAC,OAAA,CAAA,EACKsB,GAAO,CAEJI,OAAOC,sDACX,KAAKA,aAAA,EAAAA,EAAQC,KAAK,MAAMhB,MAAM,gCAE9B,GAAIE,EAAKa,EAAOC,KAAM,OAAOd,EAAKa,EAAOC,KAKzC,GAFA7B,OAAOC,OAAOc,QAtBW7B,iBAAA,OAAA,OAAA,GAAA,YAC3B,MAAM4C,SACGP,EAAQQ,WAAWpC,IAAI,QAAQ8B,KAAaO,MAAM7C,GAASA,EAAK8C,WAAY,GAKrF,aAJ2BC,QAAQC,IACjCL,EAAWM,KAAWxB,GAAO1B,EAAAA,eAAA,OAAA,OAAA,GAAA,YAAC,MAAA,CAAC0B,EAAIiB,UAAWQ,EAASA,UAACzB,GAAK,QAG3C0B,QAClB,CAACC,GAAMV,EAAKW,KAAUX,EAAW7B,OAAAC,OAAAD,OAAAC,OAAA,CAAA,EAAAsC,IAAK,CAACV,EAAIf,YAAa0B,IAAQD,GAChE,CAAE,EAEN,MAaSxB,EAAKa,EAAOC,KAAM,MAAMhB,MAAM,gCAEnC,OAAOE,EAAKa,EAAOC,OACpB,EAEKY,cAAcC,sDAGlB,MAAO,CAAEA,aAFSC,YAAUD,EAAOE,KAAKjB,OAAQ,CAAEkB,WAAY,CAAC,YAE3CC,WACrB,EAEKC,gBACJC,EACAC,sDAEA,IAAKD,EAAc,MAAMnC,MAAM,mCAE/B,IAEE,aADoB+B,KAAKH,cAAcO,EAYxC,CAVC,MAAOE,GACP,IAGE,aAFMN,KAAKH,cAAcQ,UAEXL,KAAKO,QAAQF,IAAe7D,IAK3C,CAJC,MAAOgE,GAGP,MAFA1B,SAAAA,EAAQwB,MAAM,mCAAoCE,GAE5CvC,MAAM,4BACb,CACF,IACF,GACF,EAKHS,EAAkB+B,gBAAkB7B,EAAAA,QAAU6B"}
+{"version":3,"file":"index.cjs.js","sources":["../../lib/constants.ts","../../lib/helpers.ts","../../lib/index.ts"],"sourcesContent":["// eslint-disable-next-line import/prefer-default-export\n/** Refresh JWT cookie name */\nexport const refreshTokenCookieName = 'DSR';\n/** Session JWT cookie name */\nexport const sessionTokenCookieName = 'DS';\n/** The key of the tenants claims in the claims map */\nexport const authorizedTenantsClaimName = 'tenants';\n/** The key of the permissions claims in the claims map either under tenant or top level */\nexport const permissionsClaimName = 'permissions';\n/** The key of the roles claims in the claims map either under tenant or top level */\nexport const rolesClaimName = 'roles';\n","import type { ResponseData, SdkResponse } from '@descope/core-js-sdk';\nimport { AuthenticationInfo } from './types';\nimport {\n  refreshTokenCookieName,\n  sessionTokenCookieName,\n  authorizedTenantsClaimName,\n} from './constants';\n\n/**\n * Generate a cookie string from given parameters\n * @param name name of the cookie\n * @param value value of cookie that must be already encoded\n * @param options any options to put on the cookie like cookieDomain, cookieMaxAge, cookiePath\n * @returns Cookie string with all options on the string\n */\nconst generateCookie = (name: string, value: string, options?: Record<string, string | number>) =>\n  `${name}=${value}; Domain=${options?.cookieDomain || ''}; Max-Age=${\n    options?.cookieMaxAge || ''\n  }; Path=${options?.cookiePath || '/'}; HttpOnly; SameSite=Strict`;\n\n/**\n * Parse the cookie string and return the value of the cookie\n * @param cookie the raw cookie string\n * @param name the name of the cookie to get value for\n * @returns the value of the given cookie\n */\nconst getCookieValue = (cookie: string | null | undefined, name: string) => {\n  const match = cookie?.match(RegExp(`(?:^|;\\\\s*)${name}=([^;]*)`));\n  return match ? match[1] : null;\n};\n\n// eslint-disable-next-line import/prefer-default-export\n/**\n * Add cookie generation to core-js functions.\n * @param fn the function we are wrapping\n * @returns Wrapped function with cookie generation\n */\nexport const withCookie =\n  <T extends Array<any>, U extends Promise<SdkResponse<ResponseData>>>(fn: (...args: T) => U) =>\n  async (...args: T): Promise<SdkResponse<ResponseData>> => {\n    const resp = await fn(...args);\n\n    // istanbul ignore next\n    if (!resp.data) {\n      return resp;\n    }\n\n    // eslint-disable-next-line prefer-const\n    let { sessionJwt, refreshJwt, ...rest } = resp.data;\n    const cookies = [generateCookie(sessionTokenCookieName, sessionJwt, rest)];\n\n    if (!refreshJwt) {\n      if (resp.response?.headers.get('set-cookie')) {\n        refreshJwt = getCookieValue(\n          resp.response?.headers.get('set-cookie'),\n          refreshTokenCookieName,\n        );\n        cookies.push(resp.response?.headers.get('set-cookie')!);\n      }\n    } else {\n      cookies.push(generateCookie(refreshTokenCookieName, refreshJwt, rest));\n    }\n\n    return { ...resp, data: { ...resp.data, refreshJwt, cookies } };\n  };\n\n/**\n * Wrap given object internal functions (can be deep inside the object) with the given wrapping function\n * @param obj we will deep wrap functions inside this object based on the given path\n * @param path the path of internal objects to walk before wrapping the final result. Path is collection of parts separated by '.' that support '*' to say all of the keys for the part.\n * @param wrappingFn function to wrap with\n * @returns void, we update the functions in place\n */\nexport const wrapWith = <T extends Record<string, any>>(\n  obj: T,\n  path: string | string[],\n  wrappingFn: Function,\n  // eslint-disable-next-line consistent-return\n): void => {\n  if (!obj) return;\n\n  const pathSections = typeof path === 'string' ? path.split('.') : path;\n  const section = pathSections.shift() || ('' as keyof T);\n\n  if (pathSections.length === 0 || section === '*') {\n    const wrap = (key: keyof T) => {\n      if (key && typeof obj[key] === 'function') {\n        // eslint-disable-next-line no-param-reassign\n        obj[key] = wrappingFn(obj[key]);\n      } else {\n        // istanbul ignore next\n        throw Error(`cannot wrap value at key \"${key.toString()}\"`);\n      }\n    };\n    if (section === '*') {\n      Object.keys(obj).forEach(wrap);\n    } else {\n      wrap(section);\n    }\n  } else {\n    wrapWith(obj[section], pathSections, wrappingFn);\n  }\n};\n\n/**\n * Wrap given object internal functions (can be deep inside the object) with the given wrapping function based on multiple paths.\n * @param obj we will deep wrap functions inside this object based on the given paths\n * @param paths multiple paths of internal objects to walk before wrapping the final result. Path is collection of parts separated by '.' that support '*' to say all of the keys for the part.\n * @param wrappingFn function to wrap with\n * @returns void, we update the functions in place\n */\nexport const bulkWrapWith = (\n  obj: Parameters<typeof wrapWith>[0],\n  paths: string[],\n  wrappingFn: Parameters<typeof wrapWith>[2],\n) => paths.forEach((path: string) => wrapWith(obj, path, wrappingFn));\n\n/**\n * Get the claim (used for permissions or roles) for a given tenant or top level if tenant is empty\n * @param authInfo The parsed authentication info from the JWT\n * @param claim name of the claim\n * @param tenant tenant to retrieve the claim for\n * @returns\n */\nexport function getAuthorizationClaimItems(\n  authInfo: AuthenticationInfo,\n  claim: string,\n  tenant?: string,\n): string[] {\n  const value = tenant\n    ? authInfo.token[authorizedTenantsClaimName]?.[tenant]?.[claim]\n    : authInfo.token[claim];\n  return Array.isArray(value) ? value : [];\n}\n","import createSdk, {\n  SdkResponse,\n  ExchangeAccessKeyResponse,\n  RequestConfig,\n} from '@descope/core-js-sdk';\nimport { KeyLike, jwtVerify, JWK, JWTHeaderParameters, importJWK } from 'jose';\nimport fetch, { Headers, Response, Request } from 'node-fetch';\nimport { bulkWrapWith, withCookie, getAuthorizationClaimItems } from './helpers';\nimport { AuthenticationInfo } from './types';\nimport {\n  refreshTokenCookieName,\n  sessionTokenCookieName,\n  permissionsClaimName,\n  rolesClaimName,\n} from './constants';\n\ndeclare const BUILD_VERSION: string;\n\n/* istanbul ignore next */\nif (!globalThis.fetch) {\n  // @ts-ignore\n  globalThis.fetch = fetch;\n  // @ts-ignore\n  globalThis.Headers = Headers;\n  // @ts-ignore\n  globalThis.Request = Request;\n  // @ts-ignore\n  globalThis.Response = Response;\n}\n\nconst nodeSdk = (...args: Parameters<typeof createSdk>) => {\n  const funcArgs: typeof args = [...args];\n  funcArgs[0].hooks = funcArgs[0].hooks || {};\n  const origBeforeRequest = funcArgs[0].hooks.beforeRequest;\n  funcArgs[0].hooks.beforeRequest = (config: RequestConfig) => {\n    const conf = config;\n    conf.headers = {\n      ...conf.headers,\n      'x-descope-sdk-name': 'nodejs',\n      'x-descope-sdk-node-version': process?.versions?.node || '',\n      'x-descope-sdk-version': BUILD_VERSION,\n    };\n    return origBeforeRequest?.(conf) || conf;\n  };\n  const coreSdk = createSdk(...funcArgs);\n\n  bulkWrapWith(\n    coreSdk,\n    [\n      'otp.verify.*',\n      'magicLink.verify',\n      'magicLink.crossDevice.signUp.*',\n      'magicLink.crossDevice.signIn.*',\n      'oauth.exchange',\n      'saml.exchange',\n      'totp.verify',\n      'webauthn.signIn.finish',\n      'webauthn.signUp.finish',\n      'refresh',\n    ],\n    withCookie,\n  );\n\n  const { projectId, logger } = args[0];\n\n  const keys: Record<string, KeyLike | Uint8Array> = {};\n\n  /** Fetch the public keys (JWKs) from Descope for the configured project */\n  const fetchKeys = async () => {\n    const publicKeys: JWK[] = await coreSdk.httpClient\n      .get(`v1/keys/${projectId}`)\n      .then((resp) => resp.json());\n    if (!Array.isArray(publicKeys)) return {};\n    const kidJwksPairs = await Promise.all(\n      publicKeys.map(async (key) => [key.kid, await importJWK(key)]),\n    );\n\n    return kidJwksPairs.reduce(\n      (acc, [kid, jwk]) => (kid ? { ...acc, [kid.toString()]: jwk } : acc),\n      {},\n    );\n  };\n\n  const sdk = {\n    ...coreSdk,\n\n    /** Get the key that can validate the given JWT KID in the header. Can retrieve the public key from local cache or from Descope. */\n    async getKey(header: JWTHeaderParameters): Promise<KeyLike | Uint8Array> {\n      if (!header?.kid) throw Error('header.kid must not be empty');\n\n      if (keys[header.kid]) return keys[header.kid];\n\n      // do we need to fetch once or every time?\n      Object.assign(keys, await fetchKeys());\n\n      if (!keys[header.kid]) throw Error('failed to fetch matching key');\n\n      return keys[header.kid];\n    },\n\n    /**\n     * Validate the given JWT with the right key and make sure the issuer is correct\n     * @param jwt the JWT string to parse and validate\n     * @returns AuthenticationInfo with the parsed token and JWT. Will throw an error if validation fails.\n     */\n    async validateJwt(jwt: string): Promise<AuthenticationInfo> {\n      // Do not hard-code the algo because library does not support `None` so all are valid\n      const res = await jwtVerify(jwt, sdk.getKey, { issuer: projectId, clockTolerance: 5 });\n\n      return { jwt, token: res.payload };\n    },\n\n    /**\n     * Validate session based on at least one of session and refresh JWTs. You must provide at least one of them.\n     *\n     * @param sessionToken session JWT\n     * @param refreshToken refresh JWT\n     * @returns AuthenticationInfo promise or throws Error if there is an issue with JWTs\n     */\n    async validateSession(\n      sessionToken?: string,\n      refreshToken?: string,\n    ): Promise<AuthenticationInfo> {\n      if (!sessionToken && !refreshToken)\n        throw Error('both refresh token and session token are empty');\n\n      if (sessionToken) {\n        try {\n          const token = await sdk.validateJwt(sessionToken);\n          return token;\n        } catch (error) {\n          if (!refreshToken) {\n            logger?.error('failed to validate session token and no refresh token provided', error);\n            throw Error('could not validate tokens');\n          }\n        }\n      }\n      if (refreshToken) {\n        try {\n          await sdk.validateJwt(refreshToken);\n          const jwtResp = await sdk.refresh(refreshToken);\n          if (jwtResp.ok) {\n            const token = await sdk.validateJwt(jwtResp.data?.sessionJwt);\n            return token;\n          }\n          throw Error(jwtResp.error?.message);\n        } catch (refreshTokenErr) {\n          logger?.error('failed to validate refresh token', refreshTokenErr);\n          throw Error('could not validate tokens');\n        }\n      }\n      /* istanbul ignore next */\n      throw Error('could not validate token');\n    },\n\n    /**\n     * Exchange API key (access key) for a session key\n     * @param accessKey access key to exchange for a session JWT\n     * @returns AuthneticationInfo with session JWT data\n     */\n    async exchangeAccessKey(accessKey: string): Promise<AuthenticationInfo> {\n      if (!accessKey) throw Error('access key must not be empty');\n\n      let resp: SdkResponse<ExchangeAccessKeyResponse>;\n      try {\n        resp = await sdk.accessKey.exchange(accessKey);\n      } catch (error) {\n        logger?.error('failed to exchange access key', error);\n        throw Error('could not exchange access key');\n      }\n\n      const { sessionJwt } = resp.data;\n      if (!sessionJwt) {\n        logger?.error('failed to parse exchange access key response');\n        throw Error('could not exchange access key');\n      }\n\n      try {\n        const token = await sdk.validateJwt(sessionJwt);\n        return token;\n      } catch (error) {\n        logger?.error('failed to parse jwt from access key', error);\n        throw Error('could not exchange access key');\n      }\n    },\n\n    /**\n     * Make sure that all given permissions exist on the parsed JWT top level claims\n     * @param authInfo JWT parsed info\n     * @param permissions list of permissions to make sure they exist on te JWT claims\n     * @returns true if all permissions exist, false otherwise\n     */\n    validatePermissions(authInfo: AuthenticationInfo, permissions: string[]): boolean {\n      return sdk.validateTenantPermissions(authInfo, null, permissions);\n    },\n\n    /**\n     * Make sure that all given permissions exist on the parsed JWT tenant claims\n     * @param authInfo JWT parsed info\n     * @param permissions list of permissions to make sure they exist on te JWT claims\n     * @returns true if all permissions exist, false otherwise\n     */\n    validateTenantPermissions(\n      authInfo: AuthenticationInfo,\n      tenant: string,\n      permissions: string[],\n    ): boolean {\n      const granted = getAuthorizationClaimItems(authInfo, permissionsClaimName, tenant);\n      return permissions.every((perm) => granted.includes(perm));\n    },\n\n    /**\n     * Make sure that all given roles exist on the parsed JWT top level claims\n     * @param authInfo JWT parsed info\n     * @param roles list of roles to make sure they exist on te JWT claims\n     * @returns true if all roles exist, false otherwise\n     */\n    validateRoles(authInfo: AuthenticationInfo, roles: string[]): boolean {\n      return sdk.validateTenantRoles(authInfo, null, roles);\n    },\n\n    /**\n     * Make sure that all given roles exist on the parsed JWT tenant claims\n     * @param authInfo JWT parsed info\n     * @param roles list of roles to make sure they exist on te JWT claims\n     * @returns true if all roles exist, false otherwise\n     */\n    validateTenantRoles(authInfo: AuthenticationInfo, tenant: string, roles: string[]): boolean {\n      const membership = getAuthorizationClaimItems(authInfo, rolesClaimName, tenant);\n      return roles.every((role) => membership.includes(role));\n    },\n  };\n\n  return sdk;\n};\n\n/** Descope SDK client with delivery methods enum.\n *\n * Please see full documentation at {@link https://docs.descope.com/guides Descope Docs}\n * @example Usage\n *\n * ```js\n * import descopeSdk from '@descope/node-sdk';\n *\n * const myProjectId = 'xxx';\n * const sdk = descopeSdk({ projectId: myProjectId });\n *\n * const userIdentifier = 'identifier';\n * sdk.otp.signIn.email(userIdentifier);\n * const jwtResponse = sdk.otp.verify.email(userIdentifier, codeFromEmail);\n * ```\n */\nconst sdkWithAttributes = nodeSdk as typeof nodeSdk & {\n  DeliveryMethods: typeof createSdk.DeliveryMethods;\n  RefreshTokenCookieName: typeof refreshTokenCookieName;\n  SessionTokenCookieName: typeof sessionTokenCookieName;\n};\n\nsdkWithAttributes.DeliveryMethods = createSdk.DeliveryMethods;\nsdkWithAttributes.RefreshTokenCookieName = refreshTokenCookieName;\nsdkWithAttributes.SessionTokenCookieName = sessionTokenCookieName;\n\nexport default sdkWithAttributes;\n\nexport type { DeliveryMethod, OAuthProvider } from '@descope/core-js-sdk';\n"],"names":["generateCookie","name","value","options","cookieDomain","cookieMaxAge","cookiePath","withCookie","fn","async","args","resp","data","_d","sessionJwt","refreshJwt","rest","__rest","cookies","push","_a","response","headers","get","cookie","match","RegExp","getCookieValue","_b","_c","Object","assign","wrapWith","obj","path","wrappingFn","pathSections","split","section","shift","length","wrap","key","Error","toString","keys","forEach","getAuthorizationClaimItems","authInfo","claim","tenant","token","Array","isArray","globalThis","fetch","Headers","Request","Response","sdkWithAttributes","funcArgs","hooks","origBeforeRequest","beforeRequest","config","conf","process","versions","node","coreSdk","createSdk","projectId","logger","sdk","header","kid","publicKeys","httpClient","then","json","Promise","all","map","importJWK","reduce","acc","jwk","fetchKeys","jwt","jwtVerify","getKey","issuer","clockTolerance","payload","sessionToken","refreshToken","validateJwt","error","jwtResp","refresh","ok","message","refreshTokenErr","accessKey","exchange","validatePermissions","permissions","validateTenantPermissions","granted","every","perm","includes","validateRoles","roles","validateTenantRoles","membership","role","DeliveryMethods","RefreshTokenCookieName","SessionTokenCookieName"],"mappings":"0MAEO,MCaDA,EAAiB,CAACC,EAAcC,EAAeC,IACnD,GAAGF,KAAQC,cAAiBC,aAAA,EAAAA,EAASC,eAAgB,gBACnDD,aAAA,EAAAA,EAASE,eAAgB,aACjBF,aAAA,EAAAA,EAASG,aAAc,iCAmBtBC,EAC0DC,GACrEC,SAAUC,eACR,MAAMC,QAAaH,KAAME,GAGzB,IAAKC,EAAKC,KACR,OAAOD,EAIT,IAAIE,EAAsCF,EAAKC,MAA3CE,WAAEA,EAAUC,WAAEA,KAAeC,EAA7BC,EAAAA,OAAAJ,EAAA,CAAA,aAAA,eACJ,MAAMK,EAAU,CAAClB,ED7CiB,KC6CsBc,EAAYE,IAcpE,OAZKD,EASHG,EAAQC,KAAKnB,ED1DmB,MC0DoBe,EAAYC,KAR/C,QAAbI,EAAAT,EAAKU,gBAAQ,IAAAD,OAAA,EAAAA,EAAEE,QAAQC,IAAI,iBAC7BR,EA3Be,EAACS,EAAmCvB,KACzD,MAAMwB,EAAQD,eAAAA,EAAQC,MAAMC,OAAO,cAAczB,cACjD,OAAOwB,EAAQA,EAAM,GAAK,IAAI,EAyBXE,CACE,QAAbC,EAAAjB,EAAKU,gBAAQ,IAAAO,OAAA,EAAAA,EAAEN,QAAQC,IAAI,cDpDC,OCuD9BL,EAAQC,KAAoB,QAAfU,EAAAlB,EAAKU,gBAAU,IAAAQ,OAAA,EAAAA,EAAAP,QAAQC,IAAI,gBAMhCO,OAAAC,OAAAD,OAAAC,OAAA,CAAA,EAAApB,GAAM,CAAAC,KAAWkB,OAAAC,OAAAD,OAAAC,OAAA,GAAApB,EAAKC,MAAM,CAAAG,aAAYG,aAAY,EAUvDc,EAAW,CACtBC,EACAC,EACAC,KAGA,IAAKF,EAAK,OAEV,MAAMG,EAA+B,iBAATF,EAAoBA,EAAKG,MAAM,KAAOH,EAC5DI,EAAUF,EAAaG,SAAY,GAEzC,GAA4B,IAAxBH,EAAaI,QAA4B,MAAZF,EAAiB,CAChD,MAAMG,EAAQC,IACZ,IAAIA,GAA2B,mBAAbT,EAAIS,GAKpB,MAAMC,MAAM,6BAA6BD,EAAIE,eAH7CX,EAAIS,GAAOP,EAAWF,EAAIS,GAI3B,EAEa,MAAZJ,EACFR,OAAOe,KAAKZ,GAAKa,QAAQL,GAEzBA,EAAKH,EAER,MACCN,EAASC,EAAIK,GAAUF,EAAcD,EACtC,WAuBaY,EACdC,EACAC,EACAC,WAEA,MAAMhD,EAAQgD,EAC0C,QAApDtB,EAA6C,QAA7CR,EAAA4B,EAASG,MAAgC,eAAI,IAAA/B,OAAA,EAAAA,EAAA8B,UAAO,IAAAtB,OAAA,EAAAA,EAAGqB,GACvDD,EAASG,MAAMF,GACnB,OAAOG,MAAMC,QAAQnD,GAASA,EAAQ,EACxC,CClHKoD,WAAWC,QAEdD,WAAWC,MAAQA,UAEnBD,WAAWE,QAAUA,UAErBF,WAAWG,QAAUA,UAErBH,WAAWI,SAAWA,YAGxB,MA8NMC,EA9NU,IAAIjD,KAClB,MAAMkD,EAAwB,IAAIlD,GAClCkD,EAAS,GAAGC,MAAQD,EAAS,GAAGC,OAAS,GACzC,MAAMC,EAAoBF,EAAS,GAAGC,MAAME,cAC5CH,EAAS,GAAGC,MAAME,cAAiBC,UACjC,MAAMC,EAAOD,EAOb,OANAC,EAAK3C,QACAQ,OAAAC,OAAAD,OAAAC,OAAA,GAAAkC,EAAK3C,SACR,CAAA,qBAAsB,SACtB,8BAAiD,QAAnBF,EAAO,OAAP8C,cAAO,IAAPA,aAAO,EAAPA,QAASC,gBAAU,IAAA/C,OAAA,EAAAA,EAAAgD,OAAQ,GACzD,wBAAyB,mBAEpBN,aAAiB,EAAjBA,EAAoBG,KAASA,CAAI,EAE1C,MAAMI,EAAUC,EAAAA,WAAaV,GDmEH,IAC1B3B,EAEAE,EAFAF,ECjEEoC,EDmEFlC,ECtDE5B,EAZA,CACE,eACA,mBACA,iCACA,iCACA,iBACA,gBACA,cACA,yBACA,yBACA,WDyDKuC,SAASZ,GAAiBF,EAASC,EAAKC,EAAMC,KCpDvD,MAAMoC,UAAEA,EAASC,OAAEA,GAAW9D,EAAK,GAE7BmC,EAA6C,CAAA,EAkB7C4B,iCACDJ,GAAO,CAGV5D,aAAaiE,GACX,KAAKA,aAAA,EAAAA,EAAQC,KAAK,MAAMhC,MAAM,gCAE9B,GAAIE,EAAK6B,EAAOC,KAAM,OAAO9B,EAAK6B,EAAOC,KAKzC,GAFA7C,OAAOC,OAAOc,OAzBApC,WAChB,MAAMmE,QAA0BP,EAAQQ,WACrCtD,IAAI,WAAWgD,KACfO,MAAMnE,GAASA,EAAKoE,SACvB,OAAK3B,MAAMC,QAAQuB,UACQI,QAAQC,IACjCL,EAAWM,KAAIzE,MAAOiC,GAAQ,CAACA,EAAIiC,UAAWQ,EAAAA,UAAUzC,QAGtC0C,QAClB,CAACC,GAAMV,EAAKW,KAAUX,EAAW7C,OAAAC,OAAAD,OAAAC,OAAA,CAAA,EAAAsD,IAAK,CAACV,EAAI/B,YAAa0C,IAAQD,GAChE,CAAE,GAPmC,EAQtC,EAa2BE,KAErB1C,EAAK6B,EAAOC,KAAM,MAAMhC,MAAM,gCAEnC,OAAOE,EAAK6B,EAAOC,IACpB,EAODlE,YAAiB,MAAC+E,IAIT,CAAEA,MAAKrC,aAFIsC,YAAUD,EAAKf,EAAIiB,OAAQ,CAAEC,OAAQpB,EAAWqB,eAAgB,KAEzDC,UAU3BpF,sBACEqF,EACAC,WAEA,IAAKD,IAAiBC,EACpB,MAAMpD,MAAM,kDAEd,GAAImD,EACF,IAEE,aADoBrB,EAAIuB,YAAYF,EAOrC,CALC,MAAOG,GACP,IAAKF,EAEH,MADAvB,SAAAA,EAAQyB,MAAM,iEAAkEA,GAC1EtD,MAAM,4BAEf,CAEH,GAAIoD,EACF,UACQtB,EAAIuB,YAAYD,GACtB,MAAMG,QAAgBzB,EAAI0B,QAAQJ,GAClC,GAAIG,EAAQE,GAAI,CAEd,aADoB3B,EAAIuB,YAA0B,QAAd5E,EAAA8E,EAAQtF,YAAM,IAAAQ,OAAA,EAAAA,EAAAN,WAEnD,CACD,MAAM6B,MAAmB,QAAbf,EAAAsE,EAAQD,aAAK,IAAArE,OAAA,EAAAA,EAAEyE,QAI5B,CAHC,MAAOC,GAEP,MADA9B,SAAAA,EAAQyB,MAAM,mCAAoCK,GAC5C3D,MAAM,4BACb,CAGH,MAAMA,MAAM,2BACb,EAODlC,wBAAwB8F,GACtB,IAAKA,EAAW,MAAM5D,MAAM,gCAE5B,IAAIhC,EACJ,IACEA,QAAa8D,EAAI8B,UAAUC,SAASD,EAIrC,CAHC,MAAON,GAEP,MADAzB,SAAAA,EAAQyB,MAAM,gCAAiCA,GACzCtD,MAAM,gCACb,CAED,MAAM7B,WAAEA,GAAeH,EAAKC,KAC5B,IAAKE,EAEH,MADA0D,SAAAA,EAAQyB,MAAM,gDACRtD,MAAM,iCAGd,IAEE,aADoB8B,EAAIuB,YAAYlF,EAKrC,CAHC,MAAOmF,GAEP,MADAzB,SAAAA,EAAQyB,MAAM,sCAAuCA,GAC/CtD,MAAM,gCACb,CACF,EAQD8D,oBAAmB,CAACzD,EAA8B0D,IACzCjC,EAAIkC,0BAA0B3D,EAAU,KAAM0D,GASvDC,0BACE3D,EACAE,EACAwD,GAEA,MAAME,EAAU7D,EAA2BC,EFvMb,cEuM6CE,GAC3E,OAAOwD,EAAYG,OAAOC,GAASF,EAAQG,SAASD,IACrD,EAQDE,cAAa,CAAChE,EAA8BiE,IACnCxC,EAAIyC,oBAAoBlE,EAAU,KAAMiE,GASjDC,oBAAoBlE,EAA8BE,EAAgB+D,GAChE,MAAME,EAAapE,EAA2BC,EF1NtB,QE0NgDE,GACxE,OAAO+D,EAAMJ,OAAOO,GAASD,EAAWJ,SAASK,IAClD,IAGH,OAAO3C,CAAG,EAyBZd,EAAkB0D,gBAAkB/C,EAAS,QAAC+C,gBAC9C1D,EAAkB2D,uBFjQoB,MEkQtC3D,EAAkB4D,uBFhQoB"}

package/dist/examples/es6/src/index.d.ts

@@ -0,0 +1 @@
+export {};