@eva_solutions/auth-sdk 0.0.0-stage → 3.0.0-dev-20261109133200

package/dist/error-messages-CGpW1fsg.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Mensajes de error del SDK — fuente de verdad centralizada.
+ * Standalone: NO importa de config.ts (evita ciclo de dependencias).
+ * La validación runtime de overrides vive en config.ts (usa Zod).
+ */
+interface EvaErrorMessages {
+  /** Auth requerida (middleware 401 sin token). */
+  authRequired: string;
+  /** Token inválido (signature/format). */
+  tokenInvalid: string;
+  /** Token expirado. */
+  tokenExpired: string;
+  /** Claims del token no cumplen schema extra. */
+  tokenClaimsInvalid: string;
+  /** Token de acceso/refresh no presente en cookies. */
+  tokenNotFound: string;
+  /** Verify falló después de refresh exitoso. Soporta placeholder {0} para el inner error. */
+  verifyFailedAfterRefresh: string;
+  /** Refresh OK pero servidor no devolvió tokens. */
+  refreshNoNewTokens: string;
+  /** Refresh token falló. */
+  refreshFailed: string;
+  /** Login con credenciales inválidas. */
+  loginFailed: string;
+  /** Registro falló. */
+  registrationFailed: string;
+  /** Logout falló. */
+  logoutFailed: string;
+  /** JSON malformado en body. */
+  invalidJsonBody: string;
+  /** Schema validation falló sobre teléfono. */
+  invalidPhone: string;
+  /** Body de PATCH /me vacío o inválido. */
+  invalidUpdateBody: string;
+  /** sessionId malformado en /sessions/:id. */
+  sessionInvalid: string;
+  /** Mutación con `Origin` fuera de los orígenes permitidos (403). */
+  originNotAllowed: string;
+  /** Error interno (500) cuando se expone al cliente. */
+  internalError: string;
+}
+/**
+ * Defaults regression-locked: strings exactos que el SDK escribe hoy.
+ * Frozen para prevenir mutación accidental entre tests/requests.
+ */
+declare const DEFAULT_ERROR_MESSAGES: Readonly<EvaErrorMessages>;
+export { EvaErrorMessages as n, DEFAULT_ERROR_MESSAGES as t };
+//# sourceMappingURL=error-messages-CGpW1fsg.d.ts.map

package/dist/error-messages-CGpW1fsg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-messages-CGpW1fsg.d.ts","names":[],"sources":["../src/error-messages.ts"],"mappings":";;;;;UAMiB;;EAGf;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAGA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAGA;;;;;;cAOW,wBAAwB,SAAS"}

package/dist/event-codes-BBJHon-I.cjs

@@ -0,0 +1,48 @@
+// ../auth-contracts/dist/event-codes.js
+/**
+* PURE module: it must never reference `zod` or any schema module of this package (see
+* `constants.ts`). It is apart from `constants.ts` on purpose: the catalog grows with every
+* feature and the SDK `react` entry imports `constants.ts` (header names), so keeping the event
+* codes here keeps them out of the browser bundle.
+*/
+/**
+* Event codes of the webhooks the service emits. Each key is the upper-case form of its value
+* (`user.created` -> `USER_CREATED`); the catalog is closed and the API owns what triggers each one.
+*/
+const EVENT_CODES = {
+	USER_CREATED: "user.created",
+	USER_VERIFIED: "user.verified",
+	USER_LOGIN_SUCCESS: "user.login_success",
+	USER_LOGIN_FAILED: "user.login_failed",
+	SESSION_CREATED: "session.created",
+	SESSION_DELETED: "session.deleted",
+	SESSION_DELETED_ALL: "session.deleted_all",
+	USER_PROFILE_UPDATED: "user.profile_updated",
+	USER_DELETED: "user.deleted",
+	USER_RESTORED: "user.restored",
+	USER_HARD_DELETED: "user.hard_deleted",
+	EMPRESA_CREATED: "empresa.created",
+	EMPRESA_MEMBER_ADDED: "empresa.member_added",
+	EMPRESA_MEMBER_REMOVED: "empresa.member_removed",
+	EMPRESA_BRANCH_CREATED: "empresa.branch_created",
+	EMPRESA_UPDATED: "empresa.updated",
+	EMPRESA_DEACTIVATED: "empresa.deactivated",
+	EMPRESA_REACTIVATED: "empresa.reactivated",
+	EMPRESA_MEMBER_ROLE_CHANGED: "empresa.member_role_changed",
+	EMPRESA_BRANCH_UPDATED: "empresa.branch_updated",
+	EMPRESA_BRANCH_DEACTIVATED: "empresa.branch_deactivated",
+	EMPRESA_PRODUCT_CHANGED: "empresa.product_changed",
+	GRUPO_UPDATED: "grupo.updated",
+	GRUPO_MEMBER_ADDED: "grupo.member_added",
+	GRUPO_MEMBER_REMOVED: "grupo.member_removed",
+	AUTORIZACION_GRANTED: "autorizacion.granted",
+	AUTORIZACION_REVOKED: "autorizacion.revoked"
+};
+Object.defineProperty(exports, "EVENT_CODES", {
+	enumerable: true,
+	get: function() {
+		return EVENT_CODES;
+	}
+});
+
+//# sourceMappingURL=event-codes-BBJHon-I.cjs.map

package/dist/event-codes-BBJHon-I.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-codes-BBJHon-I.cjs","names":[],"sources":["../../auth-contracts/dist/event-codes.js"],"sourcesContent":["// src/event-codes.ts\n/**\n* PURE module: it must never reference `zod` or any schema module of this package (see\n* `constants.ts`). It is apart from `constants.ts` on purpose: the catalog grows with every\n* feature and the SDK `react` entry imports `constants.ts` (header names), so keeping the event\n* codes here keeps them out of the browser bundle.\n*/\n/**\n* Event codes of the webhooks the service emits. Each key is the upper-case form of its value\n* (`user.created` -> `USER_CREATED`); the catalog is closed and the API owns what triggers each one.\n*/\nconst EVENT_CODES = {\n\tUSER_CREATED: \"user.created\",\n\tUSER_VERIFIED: \"user.verified\",\n\tUSER_LOGIN_SUCCESS: \"user.login_success\",\n\tUSER_LOGIN_FAILED: \"user.login_failed\",\n\tSESSION_CREATED: \"session.created\",\n\tSESSION_DELETED: \"session.deleted\",\n\tSESSION_DELETED_ALL: \"session.deleted_all\",\n\tUSER_PROFILE_UPDATED: \"user.profile_updated\",\n\tUSER_DELETED: \"user.deleted\",\n\tUSER_RESTORED: \"user.restored\",\n\tUSER_HARD_DELETED: \"user.hard_deleted\",\n\tEMPRESA_CREATED: \"empresa.created\",\n\tEMPRESA_MEMBER_ADDED: \"empresa.member_added\",\n\tEMPRESA_MEMBER_REMOVED: \"empresa.member_removed\",\n\tEMPRESA_BRANCH_CREATED: \"empresa.branch_created\",\n\tEMPRESA_UPDATED: \"empresa.updated\",\n\tEMPRESA_DEACTIVATED: \"empresa.deactivated\",\n\tEMPRESA_REACTIVATED: \"empresa.reactivated\",\n\tEMPRESA_MEMBER_ROLE_CHANGED: \"empresa.member_role_changed\",\n\tEMPRESA_BRANCH_UPDATED: \"empresa.branch_updated\",\n\tEMPRESA_BRANCH_DEACTIVATED: \"empresa.branch_deactivated\",\n\tEMPRESA_PRODUCT_CHANGED: \"empresa.product_changed\",\n\tGRUPO_UPDATED: \"grupo.updated\",\n\tGRUPO_MEMBER_ADDED: \"grupo.member_added\",\n\tGRUPO_MEMBER_REMOVED: \"grupo.member_removed\",\n\tAUTORIZACION_GRANTED: \"autorizacion.granted\",\n\tAUTORIZACION_REVOKED: \"autorizacion.revoked\"\n};\nexport { EVENT_CODES };\n\n//# sourceMappingURL=event-codes.js.map"],"mappings":";;;;;;;;;;;AAWA,MAAM,cAAc;CACnB,cAAc;CACd,eAAe;CACf,oBAAoB;CACpB,mBAAmB;CACnB,iBAAiB;CACjB,iBAAiB;CACjB,qBAAqB;CACrB,sBAAsB;CACtB,cAAc;CACd,eAAe;CACf,mBAAmB;CACnB,iBAAiB;CACjB,sBAAsB;CACtB,wBAAwB;CACxB,wBAAwB;CACxB,iBAAiB;CACjB,qBAAqB;CACrB,qBAAqB;CACrB,6BAA6B;CAC7B,wBAAwB;CACxB,4BAA4B;CAC5B,yBAAyB;CACzB,eAAe;CACf,oBAAoB;CACpB,sBAAsB;CACtB,sBAAsB;CACtB,sBAAsB;AACvB"}

package/dist/event-codes-BgcJWsov.d.cts

@@ -0,0 +1,42 @@
+/**
+ * PURE module: it must never reference `zod` or any schema module of this package (see
+ * `constants.ts`). It is apart from `constants.ts` on purpose: the catalog grows with every
+ * feature and the SDK `react` entry imports `constants.ts` (header names), so keeping the event
+ * codes here keeps them out of the browser bundle.
+ */
+/**
+ * Event codes of the webhooks the service emits. Each key is the upper-case form of its value
+ * (`user.created` -> `USER_CREATED`); the catalog is closed and the API owns what triggers each one.
+ */
+declare const EVENT_CODES: {
+  readonly USER_CREATED: "user.created";
+  readonly USER_VERIFIED: "user.verified";
+  readonly USER_LOGIN_SUCCESS: "user.login_success";
+  readonly USER_LOGIN_FAILED: "user.login_failed";
+  readonly SESSION_CREATED: "session.created";
+  readonly SESSION_DELETED: "session.deleted";
+  readonly SESSION_DELETED_ALL: "session.deleted_all";
+  readonly USER_PROFILE_UPDATED: "user.profile_updated";
+  readonly USER_DELETED: "user.deleted";
+  readonly USER_RESTORED: "user.restored";
+  readonly USER_HARD_DELETED: "user.hard_deleted";
+  readonly EMPRESA_CREATED: "empresa.created";
+  readonly EMPRESA_MEMBER_ADDED: "empresa.member_added";
+  readonly EMPRESA_MEMBER_REMOVED: "empresa.member_removed";
+  readonly EMPRESA_BRANCH_CREATED: "empresa.branch_created";
+  readonly EMPRESA_UPDATED: "empresa.updated";
+  readonly EMPRESA_DEACTIVATED: "empresa.deactivated";
+  readonly EMPRESA_REACTIVATED: "empresa.reactivated";
+  readonly EMPRESA_MEMBER_ROLE_CHANGED: "empresa.member_role_changed";
+  readonly EMPRESA_BRANCH_UPDATED: "empresa.branch_updated";
+  readonly EMPRESA_BRANCH_DEACTIVATED: "empresa.branch_deactivated";
+  readonly EMPRESA_PRODUCT_CHANGED: "empresa.product_changed";
+  readonly GRUPO_UPDATED: "grupo.updated";
+  readonly GRUPO_MEMBER_ADDED: "grupo.member_added";
+  readonly GRUPO_MEMBER_REMOVED: "grupo.member_removed";
+  readonly AUTORIZACION_GRANTED: "autorizacion.granted";
+  readonly AUTORIZACION_REVOKED: "autorizacion.revoked";
+};
+type EventCode = (typeof EVENT_CODES)[keyof typeof EVENT_CODES];
+export { EventCode as n, EVENT_CODES as t };
+//# sourceMappingURL=event-codes-BgcJWsov.d.cts.map

package/dist/event-codes-BgcJWsov.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-codes-BgcJWsov.d.cts","names":[],"sources":["../../auth-contracts/dist/event-codes.d.ts"],"mappings":";;;;;;;;;;cAUc;WACH;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;KAEN,oBAAoB,0BAA0B"}

package/dist/event-codes-BgcJWsov.d.ts

@@ -0,0 +1,42 @@
+/**
+ * PURE module: it must never reference `zod` or any schema module of this package (see
+ * `constants.ts`). It is apart from `constants.ts` on purpose: the catalog grows with every
+ * feature and the SDK `react` entry imports `constants.ts` (header names), so keeping the event
+ * codes here keeps them out of the browser bundle.
+ */
+/**
+ * Event codes of the webhooks the service emits. Each key is the upper-case form of its value
+ * (`user.created` -> `USER_CREATED`); the catalog is closed and the API owns what triggers each one.
+ */
+declare const EVENT_CODES: {
+  readonly USER_CREATED: "user.created";
+  readonly USER_VERIFIED: "user.verified";
+  readonly USER_LOGIN_SUCCESS: "user.login_success";
+  readonly USER_LOGIN_FAILED: "user.login_failed";
+  readonly SESSION_CREATED: "session.created";
+  readonly SESSION_DELETED: "session.deleted";
+  readonly SESSION_DELETED_ALL: "session.deleted_all";
+  readonly USER_PROFILE_UPDATED: "user.profile_updated";
+  readonly USER_DELETED: "user.deleted";
+  readonly USER_RESTORED: "user.restored";
+  readonly USER_HARD_DELETED: "user.hard_deleted";
+  readonly EMPRESA_CREATED: "empresa.created";
+  readonly EMPRESA_MEMBER_ADDED: "empresa.member_added";
+  readonly EMPRESA_MEMBER_REMOVED: "empresa.member_removed";
+  readonly EMPRESA_BRANCH_CREATED: "empresa.branch_created";
+  readonly EMPRESA_UPDATED: "empresa.updated";
+  readonly EMPRESA_DEACTIVATED: "empresa.deactivated";
+  readonly EMPRESA_REACTIVATED: "empresa.reactivated";
+  readonly EMPRESA_MEMBER_ROLE_CHANGED: "empresa.member_role_changed";
+  readonly EMPRESA_BRANCH_UPDATED: "empresa.branch_updated";
+  readonly EMPRESA_BRANCH_DEACTIVATED: "empresa.branch_deactivated";
+  readonly EMPRESA_PRODUCT_CHANGED: "empresa.product_changed";
+  readonly GRUPO_UPDATED: "grupo.updated";
+  readonly GRUPO_MEMBER_ADDED: "grupo.member_added";
+  readonly GRUPO_MEMBER_REMOVED: "grupo.member_removed";
+  readonly AUTORIZACION_GRANTED: "autorizacion.granted";
+  readonly AUTORIZACION_REVOKED: "autorizacion.revoked";
+};
+type EventCode = (typeof EVENT_CODES)[keyof typeof EVENT_CODES];
+export { EventCode as n, EVENT_CODES as t };
+//# sourceMappingURL=event-codes-BgcJWsov.d.ts.map

package/dist/event-codes-BgcJWsov.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-codes-BgcJWsov.d.ts","names":[],"sources":["../../auth-contracts/dist/event-codes.d.ts"],"mappings":";;;;;;;;;;cAUc;WACH;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;KAEN,oBAAoB,0BAA0B"}

package/dist/event-codes-DR5_VlaR.js

@@ -0,0 +1,43 @@
+// ../auth-contracts/dist/event-codes.js
+/**
+* PURE module: it must never reference `zod` or any schema module of this package (see
+* `constants.ts`). It is apart from `constants.ts` on purpose: the catalog grows with every
+* feature and the SDK `react` entry imports `constants.ts` (header names), so keeping the event
+* codes here keeps them out of the browser bundle.
+*/
+/**
+* Event codes of the webhooks the service emits. Each key is the upper-case form of its value
+* (`user.created` -> `USER_CREATED`); the catalog is closed and the API owns what triggers each one.
+*/
+const EVENT_CODES = {
+	USER_CREATED: "user.created",
+	USER_VERIFIED: "user.verified",
+	USER_LOGIN_SUCCESS: "user.login_success",
+	USER_LOGIN_FAILED: "user.login_failed",
+	SESSION_CREATED: "session.created",
+	SESSION_DELETED: "session.deleted",
+	SESSION_DELETED_ALL: "session.deleted_all",
+	USER_PROFILE_UPDATED: "user.profile_updated",
+	USER_DELETED: "user.deleted",
+	USER_RESTORED: "user.restored",
+	USER_HARD_DELETED: "user.hard_deleted",
+	EMPRESA_CREATED: "empresa.created",
+	EMPRESA_MEMBER_ADDED: "empresa.member_added",
+	EMPRESA_MEMBER_REMOVED: "empresa.member_removed",
+	EMPRESA_BRANCH_CREATED: "empresa.branch_created",
+	EMPRESA_UPDATED: "empresa.updated",
+	EMPRESA_DEACTIVATED: "empresa.deactivated",
+	EMPRESA_REACTIVATED: "empresa.reactivated",
+	EMPRESA_MEMBER_ROLE_CHANGED: "empresa.member_role_changed",
+	EMPRESA_BRANCH_UPDATED: "empresa.branch_updated",
+	EMPRESA_BRANCH_DEACTIVATED: "empresa.branch_deactivated",
+	EMPRESA_PRODUCT_CHANGED: "empresa.product_changed",
+	GRUPO_UPDATED: "grupo.updated",
+	GRUPO_MEMBER_ADDED: "grupo.member_added",
+	GRUPO_MEMBER_REMOVED: "grupo.member_removed",
+	AUTORIZACION_GRANTED: "autorizacion.granted",
+	AUTORIZACION_REVOKED: "autorizacion.revoked"
+};
+export { EVENT_CODES as t };
+
+//# sourceMappingURL=event-codes-DR5_VlaR.js.map

package/dist/event-codes-DR5_VlaR.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-codes-DR5_VlaR.js","names":[],"sources":["../../auth-contracts/dist/event-codes.js"],"sourcesContent":["// src/event-codes.ts\n/**\n* PURE module: it must never reference `zod` or any schema module of this package (see\n* `constants.ts`). It is apart from `constants.ts` on purpose: the catalog grows with every\n* feature and the SDK `react` entry imports `constants.ts` (header names), so keeping the event\n* codes here keeps them out of the browser bundle.\n*/\n/**\n* Event codes of the webhooks the service emits. Each key is the upper-case form of its value\n* (`user.created` -> `USER_CREATED`); the catalog is closed and the API owns what triggers each one.\n*/\nconst EVENT_CODES = {\n\tUSER_CREATED: \"user.created\",\n\tUSER_VERIFIED: \"user.verified\",\n\tUSER_LOGIN_SUCCESS: \"user.login_success\",\n\tUSER_LOGIN_FAILED: \"user.login_failed\",\n\tSESSION_CREATED: \"session.created\",\n\tSESSION_DELETED: \"session.deleted\",\n\tSESSION_DELETED_ALL: \"session.deleted_all\",\n\tUSER_PROFILE_UPDATED: \"user.profile_updated\",\n\tUSER_DELETED: \"user.deleted\",\n\tUSER_RESTORED: \"user.restored\",\n\tUSER_HARD_DELETED: \"user.hard_deleted\",\n\tEMPRESA_CREATED: \"empresa.created\",\n\tEMPRESA_MEMBER_ADDED: \"empresa.member_added\",\n\tEMPRESA_MEMBER_REMOVED: \"empresa.member_removed\",\n\tEMPRESA_BRANCH_CREATED: \"empresa.branch_created\",\n\tEMPRESA_UPDATED: \"empresa.updated\",\n\tEMPRESA_DEACTIVATED: \"empresa.deactivated\",\n\tEMPRESA_REACTIVATED: \"empresa.reactivated\",\n\tEMPRESA_MEMBER_ROLE_CHANGED: \"empresa.member_role_changed\",\n\tEMPRESA_BRANCH_UPDATED: \"empresa.branch_updated\",\n\tEMPRESA_BRANCH_DEACTIVATED: \"empresa.branch_deactivated\",\n\tEMPRESA_PRODUCT_CHANGED: \"empresa.product_changed\",\n\tGRUPO_UPDATED: \"grupo.updated\",\n\tGRUPO_MEMBER_ADDED: \"grupo.member_added\",\n\tGRUPO_MEMBER_REMOVED: \"grupo.member_removed\",\n\tAUTORIZACION_GRANTED: \"autorizacion.granted\",\n\tAUTORIZACION_REVOKED: \"autorizacion.revoked\"\n};\nexport { EVENT_CODES };\n\n//# sourceMappingURL=event-codes.js.map"],"mappings":";;;;;;;;;;;AAWA,MAAM,cAAc;CACnB,cAAc;CACd,eAAe;CACf,oBAAoB;CACpB,mBAAmB;CACnB,iBAAiB;CACjB,iBAAiB;CACjB,qBAAqB;CACrB,sBAAsB;CACtB,cAAc;CACd,eAAe;CACf,mBAAmB;CACnB,iBAAiB;CACjB,sBAAsB;CACtB,wBAAwB;CACxB,wBAAwB;CACxB,iBAAiB;CACjB,qBAAqB;CACrB,qBAAqB;CACrB,6BAA6B;CAC7B,wBAAwB;CACxB,4BAA4B;CAC5B,yBAAyB;CACzB,eAAe;CACf,oBAAoB;CACpB,sBAAsB;CACtB,sBAAsB;CACtB,sBAAsB;AACvB"}

package/dist/generic/index.cjs

@@ -0,0 +1,91 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_constants = require("../constants-CcbhOaAP.cjs");
+const require_jwt = require("../jwt-BBNqk0TV.cjs");
+const require_cookies = require("../cookies-DCIcr7uy.cjs");
+const require_http_client = require("../http-client-BVF3iktR.cjs");
+const require_refresh_dedup = require("../refresh-dedup-CLdACQXR.cjs");
+const require_parse_error_response = require("../parse-error-response-6qOQS5y9.cjs");
+const require_constants$1 = require("../constants-BE1_9Tod.cjs");
+// src/generic/verify.ts
+const client = require_http_client.createHttpClient();
+/**
+* Verifica una Request (cookies, JWT y auto-refresh) y devuelve un `Result`; los rechazos de
+* autenticación (401) no lanzan.
+*
+* @throws Error de configuración (`name === 'EvaAuthConfigError'`) si `authUrl` no fue
+*   configurada con `configureEvaAuth({ authUrl })` y la request trae algún token: se necesita
+*   para el JWKS o el refresh. El consumidor debe responder 500, nunca 401 ni limpiar cookies.
+*   También lanza si falta `product` y la request trae un header `cookie` (se necesita para nombrar
+*   las cookies de sesión). Una request sin header `cookie` devuelve `auth_required` (401) sin leer
+*   la configuración.
+*/
+async function verifyRequest(request, opts = {}) {
+	if (opts.errorMessages !== void 0) require_parse_error_response.validateErrorMessagesInput(opts.errorMessages);
+	const messages = require_parse_error_response.resolveErrorMessages(opts.errorMessages, require_parse_error_response.getErrorMessages());
+	const cookieHeader = request.headers.get("cookie");
+	const { accessToken, refreshToken } = require_cookies.readTokensFromCookies(cookieHeader);
+	if (accessToken) {
+		const result = await require_jwt.verifyAccessToken(accessToken, { extraClaimsSchema: opts.extraClaimsSchema });
+		if (result.ok) return {
+			ok: true,
+			data: { payload: result.data }
+		};
+	}
+	if (!refreshToken) return {
+		ok: false,
+		error: {
+			kind: "sdk",
+			reason: "auth_required",
+			message: messages.authRequired,
+			status: 401
+		}
+	};
+	const refreshResult = await require_refresh_dedup.deduplicateRefresh(refreshToken, () => client.refresh({ refreshToken }));
+	if (!refreshResult.ok) return {
+		ok: false,
+		error: refreshResult.error
+	};
+	const { tokens } = refreshResult.data;
+	if (!tokens) return {
+		ok: false,
+		error: {
+			kind: "sdk",
+			reason: "refresh_no_tokens",
+			message: messages.refreshNoNewTokens,
+			status: 401
+		}
+	};
+	const verifyResult = await require_jwt.verifyAccessToken(tokens.accessToken, { extraClaimsSchema: opts.extraClaimsSchema });
+	if (!verifyResult.ok) {
+		const innerMessage = typeof verifyResult.error === "object" && verifyResult.error !== null && "message" in verifyResult.error ? verifyResult.error.message : String(verifyResult.error);
+		return {
+			ok: false,
+			error: {
+				kind: "sdk",
+				reason: "verify_failed",
+				message: require_parse_error_response.formatMessage(messages.verifyFailedAfterRefresh, innerMessage),
+				status: 401
+			}
+		};
+	}
+	return {
+		ok: true,
+		data: {
+			payload: verifyResult.data,
+			newCookies: require_cookies.setTokenCookies(tokens)
+		}
+	};
+}
+exports.COOKIE_MAX_AGE = require_constants$1.COOKIE_MAX_AGE;
+exports.DEFAULT_ERROR_MESSAGES = require_parse_error_response.DEFAULT_ERROR_MESSAGES;
+exports.HEADERS = require_constants.HEADERS;
+exports.clearTokenCookies = require_cookies.clearTokenCookies;
+exports.configureEvaAuth = require_parse_error_response.configureEvaAuth;
+exports.getAuthUrl = require_parse_error_response.getAuthUrl;
+exports.getCookieDomain = require_parse_error_response.getCookieDomain;
+exports.getCookieNames = require_constants$1.getCookieNames;
+exports.readTokensFromCookies = require_cookies.readTokensFromCookies;
+exports.setTokenCookies = require_cookies.setTokenCookies;
+exports.verifyRequest = verifyRequest;
+
+//# sourceMappingURL=index.cjs.map

package/dist/generic/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["createHttpClient","resolveErrorMessages","getErrorMessages","readTokensFromCookies","verifyAccessToken","deduplicateRefresh","formatMessage","setTokenCookies"],"sources":["../../src/generic/verify.ts"],"sourcesContent":["import type { ZodType } from 'zod'\nimport { verifyAccessToken } from '../jwt'\nimport { readTokensFromCookies, setTokenCookies } from '../cookies'\nimport { createHttpClient } from '../http-client'\nimport { deduplicateRefresh } from '../refresh-dedup'\nimport type { EvaTokenPayload, Result, EvaSdkError } from '../types'\nimport {\n  resolveErrorMessages,\n  formatMessage,\n  type EvaErrorMessages,\n} from '../error-messages'\nimport { getErrorMessages, validateErrorMessagesInput } from '../config'\n\nexport type VerifyRequestOptions<TExtra extends Record<string, unknown>> = {\n  extraClaimsSchema?: ZodType<TExtra>\n  errorMessages?: Partial<EvaErrorMessages>\n}\n\ntype VerifyResult<TExtra extends Record<string, unknown>> = {\n  payload: EvaTokenPayload<TExtra>\n  newCookies?: string[]\n}\n\nconst client = createHttpClient()\n\n/**\n * Verifica una Request (cookies, JWT y auto-refresh) y devuelve un `Result`; los rechazos de\n * autenticación (401) no lanzan.\n *\n * @throws Error de configuración (`name === 'EvaAuthConfigError'`) si `authUrl` no fue\n *   configurada con `configureEvaAuth({ authUrl })` y la request trae algún token: se necesita\n *   para el JWKS o el refresh. El consumidor debe responder 500, nunca 401 ni limpiar cookies.\n *   También lanza si falta `product` y la request trae un header `cookie` (se necesita para nombrar\n *   las cookies de sesión). Una request sin header `cookie` devuelve `auth_required` (401) sin leer\n *   la configuración.\n */\nexport async function verifyRequest<\n  TExtra extends Record<string, unknown> = {},\n>(\n  request: Request,\n  opts: VerifyRequestOptions<TExtra> = {},\n): Promise<Result<VerifyResult<TExtra>>> {\n  if (opts.errorMessages !== undefined) {\n    validateErrorMessagesInput(opts.errorMessages)\n  }\n\n  const messages = resolveErrorMessages(opts.errorMessages, getErrorMessages())\n  const cookieHeader = request.headers.get('cookie')\n  const { accessToken, refreshToken } = readTokensFromCookies(cookieHeader)\n\n  if (accessToken) {\n    const result = await verifyAccessToken<TExtra>(accessToken, {\n      extraClaimsSchema: opts.extraClaimsSchema,\n    })\n    if (result.ok) return { ok: true, data: { payload: result.data } }\n  }\n\n  // Path: no hay accessToken válido ni refreshToken → auth_required (REQ-SDK-01)\n  if (!refreshToken) {\n    return {\n      ok: false,\n      error: {\n        kind: 'sdk',\n        reason: 'auth_required',\n        message: messages.authRequired,\n        status: 401,\n      } satisfies EvaSdkError,\n    }\n  }\n\n  const refreshResult = await deduplicateRefresh(refreshToken, () =>\n    client.refresh({ refreshToken }),\n  )\n\n  if (!refreshResult.ok) {\n    // Refresh falló con error del API — propagar el error tal cual (EvaApiError o EvaSdkError)\n    return { ok: false, error: refreshResult.error }\n  }\n\n  const { tokens } = refreshResult.data\n\n  // Path: refresh OK pero no hay tokens nuevos → refresh_no_tokens (REQ-SDK-03)\n  if (!tokens) {\n    return {\n      ok: false,\n      error: {\n        kind: 'sdk',\n        reason: 'refresh_no_tokens',\n        message: messages.refreshNoNewTokens,\n        status: 401,\n      } satisfies EvaSdkError,\n    }\n  }\n\n  const verifyResult = await verifyAccessToken<TExtra>(tokens.accessToken, {\n    extraClaimsSchema: opts.extraClaimsSchema,\n  })\n\n  // Path: verify post-refresh falló → verify_failed (REQ-SDK-04, REQ-SDK-05)\n  if (!verifyResult.ok) {\n    // Obtener mensaje del error (EvaSdkError tiene .message; compatibilidad defensiva para mocks)\n    const innerMessage =\n      typeof verifyResult.error === 'object' &&\n      verifyResult.error !== null &&\n      'message' in verifyResult.error\n        ? (verifyResult.error as { message: string }).message\n        : String(verifyResult.error)\n    return {\n      ok: false,\n      error: {\n        kind: 'sdk',\n        reason: 'verify_failed',\n        message: formatMessage(messages.verifyFailedAfterRefresh, innerMessage),\n        status: 401,\n      } satisfies EvaSdkError,\n    }\n  }\n\n  return {\n    ok: true,\n    data: {\n      payload: verifyResult.data,\n      newCookies: setTokenCookies(tokens),\n    },\n  }\n}\n"],"mappings":";;;;;;;;;AAuBA,MAAM,SAASA,oBAAAA,iBAAiB;;;;;;;;;;;;AAahC,eAAsB,cAGpB,SACA,OAAqC,CAAC,GACC;CACvC,IAAI,KAAK,kBAAkB,KAAA,GACzB,6BAAA,2BAA2B,KAAK,aAAa;CAG/C,MAAM,WAAWC,6BAAAA,qBAAqB,KAAK,eAAeC,6BAAAA,iBAAiB,CAAC;CAC5E,MAAM,eAAe,QAAQ,QAAQ,IAAI,QAAQ;CACjD,MAAM,EAAE,aAAa,iBAAiBC,gBAAAA,sBAAsB,YAAY;CAExE,IAAI,aAAa;EACf,MAAM,SAAS,MAAMC,YAAAA,kBAA0B,aAAa,EAC1D,mBAAmB,KAAK,kBAC1B,CAAC;EACD,IAAI,OAAO,IAAI,OAAO;GAAE,IAAI;GAAM,MAAM,EAAE,SAAS,OAAO,KAAK;EAAE;CACnE;CAGA,IAAI,CAAC,cACH,OAAO;EACL,IAAI;EACJ,OAAO;GACL,MAAM;GACN,QAAQ;GACR,SAAS,SAAS;GAClB,QAAQ;EACV;CACF;CAGF,MAAM,gBAAgB,MAAMC,sBAAAA,mBAAmB,oBAC7C,OAAO,QAAQ,EAAE,aAAa,CAAC,CACjC;CAEA,IAAI,CAAC,cAAc,IAEjB,OAAO;EAAE,IAAI;EAAO,OAAO,cAAc;CAAM;CAGjD,MAAM,EAAE,WAAW,cAAc;CAGjC,IAAI,CAAC,QACH,OAAO;EACL,IAAI;EACJ,OAAO;GACL,MAAM;GACN,QAAQ;GACR,SAAS,SAAS;GAClB,QAAQ;EACV;CACF;CAGF,MAAM,eAAe,MAAMD,YAAAA,kBAA0B,OAAO,aAAa,EACvE,mBAAmB,KAAK,kBAC1B,CAAC;CAGD,IAAI,CAAC,aAAa,IAAI;EAEpB,MAAM,eACJ,OAAO,aAAa,UAAU,YAC9B,aAAa,UAAU,QACvB,aAAa,aAAa,QACrB,aAAa,MAA8B,UAC5C,OAAO,aAAa,KAAK;EAC/B,OAAO;GACL,IAAI;GACJ,OAAO;IACL,MAAM;IACN,QAAQ;IACR,SAASE,6BAAAA,cAAc,SAAS,0BAA0B,YAAY;IACtE,QAAQ;GACV;EACF;CACF;CAEA,OAAO;EACL,IAAI;EACJ,MAAM;GACJ,SAAS,aAAa;GACtB,YAAYC,gBAAAA,gBAAgB,MAAM;EACpC;CACF;AACF"}

package/dist/generic/index.d.cts

@@ -0,0 +1,27 @@
+import { xi as HEADERS } from "../index-CZru7c5T.cjs";
+import { c as EvaTokenPayload, d as Result } from "../types-Ci0Jq0xB.cjs";
+import { n as EvaErrorMessages, t as DEFAULT_ERROR_MESSAGES } from "../error-messages-CGpW1fsg.cjs";
+import { a as COOKIE_MAX_AGE, c as clearTokenCookies, i as getCookieDomain, l as readTokensFromCookies, n as configureEvaAuth, r as getAuthUrl, s as getCookieNames, t as ConfigureEvaAuthOptions, u as setTokenCookies } from "../config-3avoUa9e.cjs";
+import { ZodType } from "zod";
+type VerifyRequestOptions<TExtra extends Record<string, unknown>> = {
+  extraClaimsSchema?: ZodType<TExtra>;
+  errorMessages?: Partial<EvaErrorMessages>;
+};
+type VerifyResult<TExtra extends Record<string, unknown>> = {
+  payload: EvaTokenPayload<TExtra>;
+  newCookies?: string[];
+};
+/**
+ * Verifica una Request (cookies, JWT y auto-refresh) y devuelve un `Result`; los rechazos de
+ * autenticación (401) no lanzan.
+ *
+ * @throws Error de configuración (`name === 'EvaAuthConfigError'`) si `authUrl` no fue
+ *   configurada con `configureEvaAuth({ authUrl })` y la request trae algún token: se necesita
+ *   para el JWKS o el refresh. El consumidor debe responder 500, nunca 401 ni limpiar cookies.
+ *   También lanza si falta `product` y la request trae un header `cookie` (se necesita para nombrar
+ *   las cookies de sesión). Una request sin header `cookie` devuelve `auth_required` (401) sin leer
+ *   la configuración.
+ */
+declare function verifyRequest<TExtra extends Record<string, unknown> = {}>(request: Request, opts?: VerifyRequestOptions<TExtra>): Promise<Result<VerifyResult<TExtra>>>;
+export { COOKIE_MAX_AGE, type ConfigureEvaAuthOptions, DEFAULT_ERROR_MESSAGES, type EvaErrorMessages, HEADERS, type VerifyRequestOptions, clearTokenCookies, configureEvaAuth, getAuthUrl, getCookieDomain, getCookieNames, readTokensFromCookies, setTokenCookies, verifyRequest };
+//# sourceMappingURL=index.d.cts.map

package/dist/generic/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/generic/verify.ts"],"mappings":";;;;;KAaY,qBAAqB,eAAe;EAC9C,oBAAoB,QAAQ;EAC5B,gBAAgB,QAAQ;;KAGrB,aAAa,eAAe;EAC/B,SAAS,gBAAgB;EACzB;;;;;;;;;;;;;iBAgBoB,cACpB,eAAe,8BAEf,SAAS,SACT,OAAM,qBAAqB,UAC1B,QAAQ,OAAO,aAAa"}

package/dist/generic/index.d.ts

@@ -0,0 +1,27 @@
+import { xi as HEADERS } from "../index-CZru7c5T.js";
+import { c as EvaTokenPayload, d as Result } from "../types-CEABh1Zf.js";
+import { n as EvaErrorMessages, t as DEFAULT_ERROR_MESSAGES } from "../error-messages-CGpW1fsg.js";
+import { a as COOKIE_MAX_AGE, c as clearTokenCookies, i as getCookieDomain, l as readTokensFromCookies, n as configureEvaAuth, r as getAuthUrl, s as getCookieNames, t as ConfigureEvaAuthOptions, u as setTokenCookies } from "../config-COX7rGAP.js";
+import { ZodType } from "zod";
+type VerifyRequestOptions<TExtra extends Record<string, unknown>> = {
+  extraClaimsSchema?: ZodType<TExtra>;
+  errorMessages?: Partial<EvaErrorMessages>;
+};
+type VerifyResult<TExtra extends Record<string, unknown>> = {
+  payload: EvaTokenPayload<TExtra>;
+  newCookies?: string[];
+};
+/**
+ * Verifica una Request (cookies, JWT y auto-refresh) y devuelve un `Result`; los rechazos de
+ * autenticación (401) no lanzan.
+ *
+ * @throws Error de configuración (`name === 'EvaAuthConfigError'`) si `authUrl` no fue
+ *   configurada con `configureEvaAuth({ authUrl })` y la request trae algún token: se necesita
+ *   para el JWKS o el refresh. El consumidor debe responder 500, nunca 401 ni limpiar cookies.
+ *   También lanza si falta `product` y la request trae un header `cookie` (se necesita para nombrar
+ *   las cookies de sesión). Una request sin header `cookie` devuelve `auth_required` (401) sin leer
+ *   la configuración.
+ */
+declare function verifyRequest<TExtra extends Record<string, unknown> = {}>(request: Request, opts?: VerifyRequestOptions<TExtra>): Promise<Result<VerifyResult<TExtra>>>;
+export { COOKIE_MAX_AGE, type ConfigureEvaAuthOptions, DEFAULT_ERROR_MESSAGES, type EvaErrorMessages, HEADERS, type VerifyRequestOptions, clearTokenCookies, configureEvaAuth, getAuthUrl, getCookieDomain, getCookieNames, readTokensFromCookies, setTokenCookies, verifyRequest };
+//# sourceMappingURL=index.d.ts.map

package/dist/generic/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/generic/verify.ts"],"mappings":";;;;;KAaY,qBAAqB,eAAe;EAC9C,oBAAoB,QAAQ;EAC5B,gBAAgB,QAAQ;;KAGrB,aAAa,eAAe;EAC/B,SAAS,gBAAgB;EACzB;;;;;;;;;;;;;iBAgBoB,cACpB,eAAe,8BAEf,SAAS,SACT,OAAM,qBAAqB,UAC1B,QAAQ,OAAO,aAAa"}

package/dist/generic/index.js

@@ -0,0 +1,80 @@
+import { a as HEADERS } from "../constants-rNuD5qJn.js";
+import { t as verifyAccessToken } from "../jwt-DhqgH94B.js";
+import { i as setTokenCookies, n as readTokensFromCookies, t as clearTokenCookies } from "../cookies-DKEC7AWv.js";
+import { t as createHttpClient } from "../http-client-Da0-OMfc.js";
+import { t as deduplicateRefresh } from "../refresh-dedup-CKaHHe7m.js";
+import { a as getErrorMessages, d as DEFAULT_ERROR_MESSAGES, f as formatMessage, i as getCookieDomain, l as validateErrorMessagesInput, n as configureEvaAuth, p as resolveErrorMessages, r as getAuthUrl } from "../parse-error-response-BM9-kjs0.js";
+import { i as getCookieNames, t as COOKIE_MAX_AGE } from "../constants-BY7QZokc.js";
+// src/generic/verify.ts
+const client = createHttpClient();
+/**
+* Verifica una Request (cookies, JWT y auto-refresh) y devuelve un `Result`; los rechazos de
+* autenticación (401) no lanzan.
+*
+* @throws Error de configuración (`name === 'EvaAuthConfigError'`) si `authUrl` no fue
+*   configurada con `configureEvaAuth({ authUrl })` y la request trae algún token: se necesita
+*   para el JWKS o el refresh. El consumidor debe responder 500, nunca 401 ni limpiar cookies.
+*   También lanza si falta `product` y la request trae un header `cookie` (se necesita para nombrar
+*   las cookies de sesión). Una request sin header `cookie` devuelve `auth_required` (401) sin leer
+*   la configuración.
+*/
+async function verifyRequest(request, opts = {}) {
+	if (opts.errorMessages !== void 0) validateErrorMessagesInput(opts.errorMessages);
+	const messages = resolveErrorMessages(opts.errorMessages, getErrorMessages());
+	const cookieHeader = request.headers.get("cookie");
+	const { accessToken, refreshToken } = readTokensFromCookies(cookieHeader);
+	if (accessToken) {
+		const result = await verifyAccessToken(accessToken, { extraClaimsSchema: opts.extraClaimsSchema });
+		if (result.ok) return {
+			ok: true,
+			data: { payload: result.data }
+		};
+	}
+	if (!refreshToken) return {
+		ok: false,
+		error: {
+			kind: "sdk",
+			reason: "auth_required",
+			message: messages.authRequired,
+			status: 401
+		}
+	};
+	const refreshResult = await deduplicateRefresh(refreshToken, () => client.refresh({ refreshToken }));
+	if (!refreshResult.ok) return {
+		ok: false,
+		error: refreshResult.error
+	};
+	const { tokens } = refreshResult.data;
+	if (!tokens) return {
+		ok: false,
+		error: {
+			kind: "sdk",
+			reason: "refresh_no_tokens",
+			message: messages.refreshNoNewTokens,
+			status: 401
+		}
+	};
+	const verifyResult = await verifyAccessToken(tokens.accessToken, { extraClaimsSchema: opts.extraClaimsSchema });
+	if (!verifyResult.ok) {
+		const innerMessage = typeof verifyResult.error === "object" && verifyResult.error !== null && "message" in verifyResult.error ? verifyResult.error.message : String(verifyResult.error);
+		return {
+			ok: false,
+			error: {
+				kind: "sdk",
+				reason: "verify_failed",
+				message: formatMessage(messages.verifyFailedAfterRefresh, innerMessage),
+				status: 401
+			}
+		};
+	}
+	return {
+		ok: true,
+		data: {
+			payload: verifyResult.data,
+			newCookies: setTokenCookies(tokens)
+		}
+	};
+}
+export { COOKIE_MAX_AGE, DEFAULT_ERROR_MESSAGES, HEADERS, clearTokenCookies, configureEvaAuth, getAuthUrl, getCookieDomain, getCookieNames, readTokensFromCookies, setTokenCookies, verifyRequest };
+
+//# sourceMappingURL=index.js.map

package/dist/generic/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../src/generic/verify.ts"],"sourcesContent":["import type { ZodType } from 'zod'\nimport { verifyAccessToken } from '../jwt'\nimport { readTokensFromCookies, setTokenCookies } from '../cookies'\nimport { createHttpClient } from '../http-client'\nimport { deduplicateRefresh } from '../refresh-dedup'\nimport type { EvaTokenPayload, Result, EvaSdkError } from '../types'\nimport {\n  resolveErrorMessages,\n  formatMessage,\n  type EvaErrorMessages,\n} from '../error-messages'\nimport { getErrorMessages, validateErrorMessagesInput } from '../config'\n\nexport type VerifyRequestOptions<TExtra extends Record<string, unknown>> = {\n  extraClaimsSchema?: ZodType<TExtra>\n  errorMessages?: Partial<EvaErrorMessages>\n}\n\ntype VerifyResult<TExtra extends Record<string, unknown>> = {\n  payload: EvaTokenPayload<TExtra>\n  newCookies?: string[]\n}\n\nconst client = createHttpClient()\n\n/**\n * Verifica una Request (cookies, JWT y auto-refresh) y devuelve un `Result`; los rechazos de\n * autenticación (401) no lanzan.\n *\n * @throws Error de configuración (`name === 'EvaAuthConfigError'`) si `authUrl` no fue\n *   configurada con `configureEvaAuth({ authUrl })` y la request trae algún token: se necesita\n *   para el JWKS o el refresh. El consumidor debe responder 500, nunca 401 ni limpiar cookies.\n *   También lanza si falta `product` y la request trae un header `cookie` (se necesita para nombrar\n *   las cookies de sesión). Una request sin header `cookie` devuelve `auth_required` (401) sin leer\n *   la configuración.\n */\nexport async function verifyRequest<\n  TExtra extends Record<string, unknown> = {},\n>(\n  request: Request,\n  opts: VerifyRequestOptions<TExtra> = {},\n): Promise<Result<VerifyResult<TExtra>>> {\n  if (opts.errorMessages !== undefined) {\n    validateErrorMessagesInput(opts.errorMessages)\n  }\n\n  const messages = resolveErrorMessages(opts.errorMessages, getErrorMessages())\n  const cookieHeader = request.headers.get('cookie')\n  const { accessToken, refreshToken } = readTokensFromCookies(cookieHeader)\n\n  if (accessToken) {\n    const result = await verifyAccessToken<TExtra>(accessToken, {\n      extraClaimsSchema: opts.extraClaimsSchema,\n    })\n    if (result.ok) return { ok: true, data: { payload: result.data } }\n  }\n\n  // Path: no hay accessToken válido ni refreshToken → auth_required (REQ-SDK-01)\n  if (!refreshToken) {\n    return {\n      ok: false,\n      error: {\n        kind: 'sdk',\n        reason: 'auth_required',\n        message: messages.authRequired,\n        status: 401,\n      } satisfies EvaSdkError,\n    }\n  }\n\n  const refreshResult = await deduplicateRefresh(refreshToken, () =>\n    client.refresh({ refreshToken }),\n  )\n\n  if (!refreshResult.ok) {\n    // Refresh falló con error del API — propagar el error tal cual (EvaApiError o EvaSdkError)\n    return { ok: false, error: refreshResult.error }\n  }\n\n  const { tokens } = refreshResult.data\n\n  // Path: refresh OK pero no hay tokens nuevos → refresh_no_tokens (REQ-SDK-03)\n  if (!tokens) {\n    return {\n      ok: false,\n      error: {\n        kind: 'sdk',\n        reason: 'refresh_no_tokens',\n        message: messages.refreshNoNewTokens,\n        status: 401,\n      } satisfies EvaSdkError,\n    }\n  }\n\n  const verifyResult = await verifyAccessToken<TExtra>(tokens.accessToken, {\n    extraClaimsSchema: opts.extraClaimsSchema,\n  })\n\n  // Path: verify post-refresh falló → verify_failed (REQ-SDK-04, REQ-SDK-05)\n  if (!verifyResult.ok) {\n    // Obtener mensaje del error (EvaSdkError tiene .message; compatibilidad defensiva para mocks)\n    const innerMessage =\n      typeof verifyResult.error === 'object' &&\n      verifyResult.error !== null &&\n      'message' in verifyResult.error\n        ? (verifyResult.error as { message: string }).message\n        : String(verifyResult.error)\n    return {\n      ok: false,\n      error: {\n        kind: 'sdk',\n        reason: 'verify_failed',\n        message: formatMessage(messages.verifyFailedAfterRefresh, innerMessage),\n        status: 401,\n      } satisfies EvaSdkError,\n    }\n  }\n\n  return {\n    ok: true,\n    data: {\n      payload: verifyResult.data,\n      newCookies: setTokenCookies(tokens),\n    },\n  }\n}\n"],"mappings":";;;;;;;;AAuBA,MAAM,SAAS,iBAAiB;;;;;;;;;;;;AAahC,eAAsB,cAGpB,SACA,OAAqC,CAAC,GACC;CACvC,IAAI,KAAK,kBAAkB,KAAA,GACzB,2BAA2B,KAAK,aAAa;CAG/C,MAAM,WAAW,qBAAqB,KAAK,eAAe,iBAAiB,CAAC;CAC5E,MAAM,eAAe,QAAQ,QAAQ,IAAI,QAAQ;CACjD,MAAM,EAAE,aAAa,iBAAiB,sBAAsB,YAAY;CAExE,IAAI,aAAa;EACf,MAAM,SAAS,MAAM,kBAA0B,aAAa,EAC1D,mBAAmB,KAAK,kBAC1B,CAAC;EACD,IAAI,OAAO,IAAI,OAAO;GAAE,IAAI;GAAM,MAAM,EAAE,SAAS,OAAO,KAAK;EAAE;CACnE;CAGA,IAAI,CAAC,cACH,OAAO;EACL,IAAI;EACJ,OAAO;GACL,MAAM;GACN,QAAQ;GACR,SAAS,SAAS;GAClB,QAAQ;EACV;CACF;CAGF,MAAM,gBAAgB,MAAM,mBAAmB,oBAC7C,OAAO,QAAQ,EAAE,aAAa,CAAC,CACjC;CAEA,IAAI,CAAC,cAAc,IAEjB,OAAO;EAAE,IAAI;EAAO,OAAO,cAAc;CAAM;CAGjD,MAAM,EAAE,WAAW,cAAc;CAGjC,IAAI,CAAC,QACH,OAAO;EACL,IAAI;EACJ,OAAO;GACL,MAAM;GACN,QAAQ;GACR,SAAS,SAAS;GAClB,QAAQ;EACV;CACF;CAGF,MAAM,eAAe,MAAM,kBAA0B,OAAO,aAAa,EACvE,mBAAmB,KAAK,kBAC1B,CAAC;CAGD,IAAI,CAAC,aAAa,IAAI;EAEpB,MAAM,eACJ,OAAO,aAAa,UAAU,YAC9B,aAAa,UAAU,QACvB,aAAa,aAAa,QACrB,aAAa,MAA8B,UAC5C,OAAO,aAAa,KAAK;EAC/B,OAAO;GACL,IAAI;GACJ,OAAO;IACL,MAAM;IACN,QAAQ;IACR,SAAS,cAAc,SAAS,0BAA0B,YAAY;IACtE,QAAQ;GACV;EACF;CACF;CAEA,OAAO;EACL,IAAI;EACJ,MAAM;GACJ,SAAS,aAAa;GACtB,YAAY,gBAAgB,MAAM;EACpC;CACF;AACF"}