@hexclave/js 1.0.41 → 1.0.43

package/dist/index-ZiEXZJBF.d.ts

@@ -0,0 +1,129 @@
+import { t as AsyncStoreProperty } from "./common-BDyEKSM6.js";
+import { inlineProductSchema } from "@hexclave/shared/dist/schema-fields";
+import * as yup from "yup";
+
+//#region src/lib/hexclave-app/customers/index.d.ts
+type InlineProduct = yup.InferType<typeof inlineProductSchema>;
+type Item = {
+  displayName: string;
+  /**
+   * May be negative.
+   */
+  quantity: number;
+  /**
+   * Equal to Math.max(0, quantity).
+   */
+  nonNegativeQuantity: number;
+};
+type ServerItem = Item & {
+  increaseQuantity(amount: number): Promise<void>;
+  /**
+   * Decreases the quantity by the given amount.
+   *
+   * Note that you may want to use tryDecreaseQuantity instead, as it will prevent the quantity from going below 0 in a race-condition-free way.
+   */
+  decreaseQuantity(amount: number): Promise<void>;
+  /**
+   * Decreases the quantity by the given amount and returns true if the result is non-negative; returns false and does nothing if the result would be negative.
+   *
+   * Most useful for pre-paid credits.
+   */
+  tryDecreaseQuantity(amount: number): Promise<boolean>;
+};
+type CustomerProduct = {
+  id: string | null;
+  quantity: number;
+  displayName: string;
+  customerType: "user" | "team" | "custom";
+  isServerOnly: boolean;
+  stackable: boolean; /** @deprecated Product ownership is independent of purchase type. Will be removed in a future version. */
+  type?: "one_time" | "subscription";
+  subscription: null | {
+    subscriptionId: string | null;
+    currentPeriodEnd: Date | null;
+    cancelAtPeriodEnd: boolean;
+    isCancelable: boolean;
+  };
+  switchOptions?: Array<{
+    productId: string;
+    displayName: string;
+    prices: InlineProduct["prices"];
+  }>;
+};
+type CustomerProductsList = CustomerProduct[] & {
+  nextCursor: string | null;
+};
+type CustomerProductsListOptions = {
+  cursor?: string;
+  limit?: number;
+};
+type CustomerProductsRequestOptions = ({
+  userId: string;
+} & CustomerProductsListOptions) | ({
+  teamId: string;
+} & CustomerProductsListOptions) | ({
+  customCustomerId: string;
+} & CustomerProductsListOptions);
+type CustomerInvoiceStatus = "draft" | "open" | "paid" | "uncollectible" | "void" | null;
+type CustomerInvoice = {
+  createdAt: Date;
+  status: CustomerInvoiceStatus;
+  amountTotal: number;
+  hostedInvoiceUrl: string | null;
+};
+type CustomerInvoicesList = CustomerInvoice[] & {
+  nextCursor: string | null;
+};
+type CustomerInvoicesListOptions = {
+  cursor?: string;
+  limit?: number;
+};
+type CustomerInvoicesRequestOptions = ({
+  userId: string;
+} & CustomerInvoicesListOptions) | ({
+  teamId: string;
+} & CustomerInvoicesListOptions);
+type CustomerDefaultPaymentMethod = {
+  id: string;
+  brand: string | null;
+  last4: string | null;
+  exp_month: number | null;
+  exp_year: number | null;
+} | null;
+type CustomerBilling = {
+  hasCustomer: boolean;
+  defaultPaymentMethod: CustomerDefaultPaymentMethod;
+};
+type CustomerPaymentMethodSetupIntent = {
+  clientSecret: string;
+  stripeAccountId: string;
+};
+type Customer<IsServer extends boolean = false> = {
+  readonly id: string;
+  createCheckoutUrl(options: ({
+    productId: string;
+    returnUrl?: string;
+  } | (IsServer extends true ? {
+    product: InlineProduct;
+    returnUrl?: string;
+  } : never))): Promise<string>;
+  createPaymentMethodSetupIntent(): Promise<CustomerPaymentMethodSetupIntent>;
+  setDefaultPaymentMethodFromSetupIntent(setupIntentId: string): Promise<CustomerDefaultPaymentMethod>;
+  switchSubscription(options: {
+    fromProductId: string;
+    toProductId: string;
+    priceId?: string;
+    quantity?: number;
+  }): Promise<void>;
+} & AsyncStoreProperty<"billing", [], CustomerBilling, false> & AsyncStoreProperty<"item", [itemId: string], IsServer extends true ? ServerItem : Item, false> & AsyncStoreProperty<"products", [options?: CustomerProductsListOptions], CustomerProductsList, true> & AsyncStoreProperty<"invoices", [options?: CustomerInvoicesListOptions], CustomerInvoicesList, true> & (IsServer extends true ? {
+  grantProduct(product: {
+    productId: string;
+    quantity?: number;
+  } | {
+    product: InlineProduct;
+    quantity?: number;
+  }): Promise<void>;
+} : {});
+//#endregion
+export { CustomerInvoiceStatus as a, CustomerInvoicesRequestOptions as c, CustomerProductsList as d, CustomerProductsListOptions as f, ServerItem as g, Item as h, CustomerInvoice as i, CustomerPaymentMethodSetupIntent as l, InlineProduct as m, CustomerBilling as n, CustomerInvoicesList as o, CustomerProductsRequestOptions as p, CustomerDefaultPaymentMethod as r, CustomerInvoicesListOptions as s, Customer as t, CustomerProduct as u };
+//# sourceMappingURL=index-ZiEXZJBF.d.ts.map

package/dist/index-ZiEXZJBF.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-ZiEXZJBF.d.ts","names":[],"sources":["../src/lib/hexclave-app/customers/index.ts"],"mappings":";;;;;KAQY,aAAA,GAAgB,GAAA,CAAI,SAAS,QAAQ,mBAAA;AAAA,KAErC,IAAA;EACV,WAAA;EAHuB;;;EAOvB,QAAA;EAP8B;;;EAW9B,mBAAA;AAAA;AAAA,KAGU,UAAA,GAAa,IAAA;EACvB,gBAAA,CAAiB,MAAA,WAAiB,OAAA;EAbpB;;;;;EAmBd,gBAAA,CAAiB,MAAA,WAAiB,OAAA;EAPxB;;;;;EAaV,mBAAA,CAAoB,MAAA,WAAiB,OAAA;AAAA;AAAA,KAG3B,eAAA;EACV,EAAA;EACA,QAAA;EACA,WAAA;EACA,YAAA;EACA,YAAA;EACA,SAAA,WAfiB;EAiBjB,IAAA;EACA,YAAA;IACE,cAAA;IACA,gBAAA,EAAkB,IAAA;IAClB,iBAAA;IACA,YAAA;EAAA;EAEF,aAAA,GAAgB,KAAA;IACd,SAAA;IACA,WAAA;IACA,MAAA,EAAQ,aAAA;EAAA;AAAA;AAAA,KAIA,oBAAA,GAAuB,eAAe;EAChD,UAAU;AAAA;AAAA,KAGA,2BAAA;EACV,MAAA;EACA,KAAK;AAAA;AAAA,KAGK,8BAAA;EACL,MAAA;AAAA,IAAmB,2BAAA;EACnB,MAAA;AAAA,IAAmB,2BAAA;EACnB,gBAAA;AAAA,IAA6B,2BAAA;AAAA,KAExB,qBAAA;AAAA,KAEA,eAAA;EACV,SAAA,EAAW,IAAA;EACX,MAAA,EAAQ,qBAAqB;EAC7B,WAAA;EACA,gBAAA;AAAA;AAAA,KAGU,oBAAA,GAAuB,eAAe;EAChD,UAAU;AAAA;AAAA,KAGA,2BAAA;EACV,MAAA;EACA,KAAK;AAAA;AAAA,KAGK,8BAAA;EACL,MAAA;AAAA,IAAmB,2BAAA;EACnB,MAAA;AAAA,IAAmB,2BAA2B;AAAA,KAEzC,4BAAA;EACV,EAAA;EACA,KAAA;EACA,KAAA;EACA,SAAA;EACA,QAAA;AAAA;AAAA,KAGU,eAAA;EACV,WAAA;EACA,oBAAA,EAAsB,4BAA4B;AAAA;AAAA,KAGxC,gCAAA;EACV,YAAA;EACA,eAAe;AAAA;AAAA,KAGL,QAAA;EAAA,SAEC,EAAA;EAET,iBAAA,CAAkB,OAAA;IACZ,SAAA;IAAmB,SAAA;EAAA,KACpB,QAAA;IAA0B,OAAA,EAAS,aAAA;IAAe,SAAA;EAAA,cACnD,OAAA;EAEJ,8BAAA,IAAkC,OAAA,CAAQ,gCAAA;EAE1C,sCAAA,CAAuC,aAAA,WAAwB,OAAA,CAAQ,4BAAA;EAEvE,kBAAA,CAAmB,OAAA;IAAW,aAAA;IAAuB,WAAA;IAAqB,OAAA;IAAkB,QAAA;EAAA,IAAsB,OAAA;AAAA,IAElH,kBAAA,gBAGA,eAAA,WAGA,kBAAA,UAEC,MAAA,WACD,QAAA,gBAAwB,UAAA,GAAa,IAAA,WAGrC,kBAAA,cAEC,OAAA,GAAU,2BAAA,GACX,oBAAA,UAGA,kBAAA,cAEC,OAAA,GAAU,2BAAA,GACX,oBAAA,WAGC,QAAA;EACD,YAAA,CACE,OAAA;IAAW,SAAA;IAAmB,QAAA;EAAA;IAAwB,OAAA,EAAS,aAAA;IAAe,QAAA;EAAA,IAC7E,OAAA;AAAA"}

package/dist/index-fOYcs4NH.d.ts

@@ -0,0 +1,53 @@
+import * as yup from "yup";
+import { IfAndOnlyIf, PrettifyType } from "@hexclave/shared/dist/utils/types";
+import { TeamApiKeysCrud, UserApiKeysCrud, teamApiKeysCreateInputSchema, userApiKeysCreateInputSchema } from "@hexclave/shared/dist/interface/crud/project-api-keys";
+
+//#region src/lib/hexclave-app/api-keys/index.d.ts
+type ApiKeyType = "user" | "team";
+type ApiKey<Type extends ApiKeyType = ApiKeyType, IsFirstView extends boolean = false> = {
+  id: string;
+  description: string;
+  expiresAt?: Date;
+  manuallyRevokedAt?: Date | null;
+  createdAt: Date;
+  value: IfAndOnlyIf<IsFirstView, true, string, {
+    lastFour: string;
+  }>;
+  update(options: ApiKeyUpdateOptions<Type>): Promise<void>;
+  revoke: () => Promise<void>;
+  isValid: () => boolean;
+  whyInvalid: () => "manually-revoked" | "expired" | null;
+} & (("user" extends Type ? {
+  type: "user";
+  userId: string;
+} : never) | ("team" extends Type ? {
+  type: "team";
+  teamId: string;
+} : never));
+type UserApiKeyFirstView = PrettifyType<ApiKey<"user", true>>;
+type UserApiKey = PrettifyType<ApiKey<"user", false>>;
+type TeamApiKeyFirstView = PrettifyType<ApiKey<"team", true>>;
+type TeamApiKey = PrettifyType<ApiKey<"team", false>>;
+type ApiKeyCreationOptions<Type extends ApiKeyType = ApiKeyType> = {
+  description: string;
+  expiresAt: Date | null;
+  /**
+   * Whether the API key should be considered public. A public API key will not be detected by the secret scanner, which
+   * automatically revokes API keys when it detects that they may have been exposed to the public.
+   */
+  isPublic?: boolean;
+};
+declare function apiKeyCreationOptionsToCrud(type: "user", userId: string, options: ApiKeyCreationOptions<"user">): Promise<yup.InferType<typeof userApiKeysCreateInputSchema>>;
+declare function apiKeyCreationOptionsToCrud(type: "team", teamId: string, options: ApiKeyCreationOptions<"team">): Promise<yup.InferType<typeof teamApiKeysCreateInputSchema>>;
+declare function apiKeyCreationOptionsToCrud(type: ApiKeyType, userIdOrTeamId: string, options: ApiKeyCreationOptions): Promise<yup.InferType<typeof userApiKeysCreateInputSchema> | yup.InferType<typeof teamApiKeysCreateInputSchema>>;
+type ApiKeyUpdateOptions<Type extends ApiKeyType = ApiKeyType> = {
+  description?: string;
+  expiresAt?: Date | null;
+  revoked?: boolean;
+};
+declare function apiKeyUpdateOptionsToCrud(type: "user", options: ApiKeyUpdateOptions<"user">): Promise<UserApiKeysCrud["Client"]["Update"]>;
+declare function apiKeyUpdateOptionsToCrud(type: "team", options: ApiKeyUpdateOptions<"team">): Promise<TeamApiKeysCrud["Client"]["Update"]>;
+declare function apiKeyUpdateOptionsToCrud(type: ApiKeyType, options: ApiKeyUpdateOptions): Promise<UserApiKeysCrud["Client"]["Update"] | TeamApiKeysCrud["Client"]["Update"]>;
+//#endregion
+export { TeamApiKey as a, UserApiKeyFirstView as c, ApiKeyUpdateOptions as i, apiKeyCreationOptionsToCrud as l, ApiKeyCreationOptions as n, TeamApiKeyFirstView as o, ApiKeyType as r, UserApiKey as s, ApiKey as t, apiKeyUpdateOptionsToCrud as u };
+//# sourceMappingURL=index-fOYcs4NH.d.ts.map

package/dist/{lib/hexclave-app/api-keys/index.d.ts.map → index-fOYcs4NH.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../../src/lib/hexclave-app/api-keys/index.ts"],"mappings":";;;;;KASY,UAAA;AAAA,KAEA,MAAA,cAAoB,UAAA,GAAa,UAAA;EAEvC,EAAA;EACA,WAAA;EACA,SAAA,GAAY,IAAA;EACZ,iBAAA,GAAoB,IAAA;EACpB,SAAA,EAAW,IAAA;EACX,KAAA,EAAO,WAAA,CAAY,WAAA;IAA6B,QAAA;EAAA;EAChD,MAAA,CAAO,OAAA,EAAS,mBAAA,CAAoB,IAAA,IAAQ,OAAA;EAC5C,MAAA,QAAc,OAAA;EACd,OAAA;EACA,UAAA;AAAA,qBAGgB,IAAA;EAAS,IAAA;EAAc,MAAA;AAAA,6BACvB,IAAA;EAAS,IAAA;EAAc,MAAA;AAAA;AAAA,KAGjC,mBAAA,GAAsB,YAAA,CAAa,MAAA;AAAA,KACnC,UAAA,GAAa,YAAA,CAAa,MAAA;AAAA,KAE1B,mBAAA,GAAsB,YAAA,CAAa,MAAA;AAAA,KACnC,UAAA,GAAa,YAAA,CAAa,MAAA;AAAA,KAE1B,qBAAA,cAAmC,UAAA,GAAa,UAAA;EAExD,WAAA;EACA,SAAA,EAAW,IAAA;EA3B0C;;;;EAgCrD,QAAA;AAAA;AAAA,iBAEY,2BAAA,CAA4B,IAAA,UAAc,MAAA,UAAgB,OAAA,EAAS,qBAAA,WAAgC,OAAA,CAAQ,GAAA,CAAI,SAAA,QAAiB,4BAAA;AAAA,iBAChI,2BAAA,CAA4B,IAAA,UAAc,MAAA,UAAgB,OAAA,EAAS,qBAAA,WAAgC,OAAA,CAAQ,GAAA,CAAI,SAAA,QAAiB,4BAAA;AAAA,iBAChI,2BAAA,CAA4B,IAAA,EAAM,UAAA,EAAY,cAAA,UAAwB,OAAA,EAAS,qBAAA,GAAwB,OAAA,CAAQ,GAAA,CAAI,SAAA,QAAiB,4BAAA,IAAgC,GAAA,CAAI,SAAA,QAAiB,4BAAA;AAAA,KAW7L,mBAAA,cAAiC,UAAA,GAAa,UAAA;EACxD,WAAA;EACA,SAAA,GAAY,IAAA;EACZ,OAAA;AAAA;AAAA,iBAEc,yBAAA,CAA0B,IAAA,UAAc,OAAA,EAAS,mBAAA,WAA8B,OAAA,CAAQ,eAAA;AAAA,iBACvF,yBAAA,CAA0B,IAAA,UAAc,OAAA,EAAS,mBAAA,WAA8B,OAAA,CAAQ,eAAA;AAAA,iBACvF,yBAAA,CAA0B,IAAA,EAAM,UAAA,EAAY,OAAA,EAAS,mBAAA,GAAsB,OAAA,CAAQ,eAAA,uBAAsC,eAAA"}
+{"version":3,"file":"index-fOYcs4NH.d.ts","names":[],"sources":["../src/lib/hexclave-app/api-keys/index.ts"],"mappings":";;;;;KASY,UAAA;AAAA,KAEA,MAAA,cAAoB,UAAA,GAAa,UAAA;EAEvC,EAAA;EACA,WAAA;EACA,SAAA,GAAY,IAAA;EACZ,iBAAA,GAAoB,IAAA;EACpB,SAAA,EAAW,IAAA;EACX,KAAA,EAAO,WAAA,CAAY,WAAA;IAA6B,QAAA;EAAA;EAChD,MAAA,CAAO,OAAA,EAAS,mBAAA,CAAoB,IAAA,IAAQ,OAAA;EAC5C,MAAA,QAAc,OAAA;EACd,OAAA;EACA,UAAA;AAAA,qBAGgB,IAAA;EAAS,IAAA;EAAc,MAAA;AAAA,6BACvB,IAAA;EAAS,IAAA;EAAc,MAAA;AAAA;AAAA,KAGjC,mBAAA,GAAsB,YAAY,CAAC,MAAA;AAAA,KACnC,UAAA,GAAa,YAAY,CAAC,MAAA;AAAA,KAE1B,mBAAA,GAAsB,YAAY,CAAC,MAAA;AAAA,KACnC,UAAA,GAAa,YAAY,CAAC,MAAA;AAAA,KAE1B,qBAAA,cAAmC,UAAA,GAAa,UAAA;EAExD,WAAA;EACA,SAAA,EAAW,IAAA;EA3B0C;;;;EAgCrD,QAAA;AAAA;AAAA,iBAEY,2BAAA,CAA4B,IAAA,UAAc,MAAA,UAAgB,OAAA,EAAS,qBAAA,WAAgC,OAAA,CAAQ,GAAA,CAAI,SAAA,QAAiB,4BAAA;AAAA,iBAChI,2BAAA,CAA4B,IAAA,UAAc,MAAA,UAAgB,OAAA,EAAS,qBAAA,WAAgC,OAAA,CAAQ,GAAA,CAAI,SAAA,QAAiB,4BAAA;AAAA,iBAChI,2BAAA,CAA4B,IAAA,EAAM,UAAA,EAAY,cAAA,UAAwB,OAAA,EAAS,qBAAA,GAAwB,OAAA,CAAQ,GAAA,CAAI,SAAA,QAAiB,4BAAA,IAAgC,GAAA,CAAI,SAAA,QAAiB,4BAAA;AAAA,KAW7L,mBAAA,cAAiC,UAAA,GAAa,UAAA;EACxD,WAAA;EACA,SAAA,GAAY,IAAA;EACZ,OAAA;AAAA;AAAA,iBAEc,yBAAA,CAA0B,IAAA,UAAc,OAAA,EAAS,mBAAA,WAA8B,OAAA,CAAQ,eAAA;AAAA,iBACvF,yBAAA,CAA0B,IAAA,UAAc,OAAA,EAAS,mBAAA,WAA8B,OAAA,CAAQ,eAAA;AAAA,iBACvF,yBAAA,CAA0B,IAAA,EAAM,UAAA,EAAY,OAAA,EAAS,mBAAA,GAAsB,OAAA,CAAQ,eAAA,uBAAsC,eAAA"}

package/dist/index-hYjsGKNc.d.ts

@@ -0,0 +1,66 @@
+//#region src/lib/hexclave-app/session-replays/index.d.ts
+type AdminSessionReplay = {
+  id: string;
+  projectUser: {
+    id: string;
+    displayName: string | null;
+    primaryEmail: string | null;
+  };
+  startedAt: Date;
+  lastEventAt: Date;
+  chunkCount: number;
+  eventCount: number;
+};
+type AdminSessionReplayChunk = {
+  id: string;
+  batchId: string;
+  sessionReplaySegmentId: string | null;
+  browserSessionId: string | null;
+  eventCount: number;
+  byteLength: number;
+  firstEventAt: Date;
+  lastEventAt: Date;
+  createdAt: Date;
+};
+type ListSessionReplaysOptions = {
+  limit?: number;
+  cursor?: string;
+  userIds?: string[];
+  teamIds?: string[];
+  durationMsMin?: number;
+  durationMsMax?: number;
+  lastEventAtFromMillis?: number;
+  lastEventAtToMillis?: number;
+  clickCountMin?: number;
+};
+type ListSessionReplaysResult = {
+  items: AdminSessionReplay[];
+  nextCursor: string | null;
+};
+type ListSessionReplayChunksOptions = {
+  limit?: number;
+  cursor?: string;
+};
+type ListSessionReplayChunksResult = {
+  items: AdminSessionReplayChunk[];
+  nextCursor: string | null;
+};
+type SessionReplayAllEventsResult = {
+  chunks: Array<{
+    id: string;
+    batchId: string;
+    sessionReplaySegmentId: string | null;
+    eventCount: number;
+    byteLength: number;
+    firstEventAt: Date;
+    lastEventAt: Date;
+    createdAt: Date;
+  }>;
+  chunkEvents: Array<{
+    chunkId: string;
+    events: unknown[];
+  }>;
+};
+//#endregion
+export { ListSessionReplaysOptions as a, ListSessionReplayChunksResult as i, AdminSessionReplayChunk as n, ListSessionReplaysResult as o, ListSessionReplayChunksOptions as r, SessionReplayAllEventsResult as s, AdminSessionReplay as t };
+//# sourceMappingURL=index-hYjsGKNc.d.ts.map

package/dist/index-hYjsGKNc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-hYjsGKNc.d.ts","names":[],"sources":["../src/lib/hexclave-app/session-replays/index.ts"],"mappings":";KAIY,kBAAA;EACV,EAAA;EACA,WAAA;IACE,EAAA;IACA,WAAA;IACA,YAAA;EAAA;EAEF,SAAA,EAAW,IAAA;EACX,WAAA,EAAa,IAAI;EACjB,UAAA;EACA,UAAA;AAAA;AAAA,KAGU,uBAAA;EACV,EAAA;EACA,OAAA;EACA,sBAAA;EACA,gBAAA;EACA,UAAA;EACA,UAAA;EACA,YAAA,EAAc,IAAA;EACd,WAAA,EAAa,IAAA;EACb,SAAA,EAAW,IAAA;AAAA;AAAA,KAGD,yBAAA;EACV,KAAA;EACA,MAAA;EACA,OAAA;EACA,OAAA;EACA,aAAA;EACA,aAAA;EACA,qBAAA;EACA,mBAAA;EACA,aAAA;AAAA;AAAA,KAGU,wBAAA;EACV,KAAA,EAAO,kBAAkB;EACzB,UAAA;AAAA;AAAA,KAGU,8BAAA;EACV,KAAA;EACA,MAAM;AAAA;AAAA,KAGI,6BAAA;EACV,KAAA,EAAO,uBAAuB;EAC9B,UAAA;AAAA;AAAA,KAGU,4BAAA;EACV,MAAA,EAAQ,KAAA;IACN,EAAA;IACA,OAAA;IACA,sBAAA;IACA,UAAA;IACA,UAAA;IACA,YAAA,EAAc,IAAA;IACd,WAAA,EAAa,IAAA;IACb,SAAA,EAAW,IAAA;EAAA;EAEb,WAAA,EAAa,KAAA;IACX,OAAA;IACA,MAAA;EAAA;AAAA"}

package/dist/index.d.ts

@@ -1,18 +1,13 @@
-import { GetCurrentUserOptions, HandlerUrlOptions, HandlerUrls, OAuthScopesOnSignIn, ResolvedHandlerUrls, hexclaveAppInternalsSymbol } from "./lib/hexclave-app/common.js";
-import { AdminEmailOutbox, AdminEmailOutboxRecipient, AdminEmailOutboxSimpleStatus, AdminEmailOutboxStatus, AdminSendAttemptError, AdminSentEmail } from "./lib/hexclave-app/email/index.js";
-import { InternalApiKey, InternalApiKeyBase, InternalApiKeyBaseCrudRead, InternalApiKeyCreateOptions, InternalApiKeyFirstView } from "./lib/hexclave-app/internal-api-keys/index.js";
-import { AdminProjectPermission, AdminProjectPermissionDefinition, AdminProjectPermissionDefinitionCreateOptions, AdminProjectPermissionDefinitionUpdateOptions, AdminTeamPermission, AdminTeamPermissionDefinition, AdminTeamPermissionDefinitionCreateOptions, AdminTeamPermissionDefinitionUpdateOptions } from "./lib/hexclave-app/permissions/index.js";
-import { PlanUsage, PlanUsageKind, PlanUsageNextPlanId, PlanUsagePlanId, PlanUsageRow } from "./lib/hexclave-app/plan-usage/index.js";
-import { Connection, OAuthConnection } from "./lib/hexclave-app/connected-accounts/index.js";
-import { ContactChannel, ServerContactChannel } from "./lib/hexclave-app/contact-channels/index.js";
-import { Auth, CurrentInternalServerUser, CurrentInternalUser, CurrentServerUser, CurrentUser, OAuthProvider, ServerOAuthProvider, ServerUser, User } from "./lib/hexclave-app/users/index.js";
-import { EditableTeamMemberProfile, ReceivedTeamInvitation, SentTeamInvitation, ServerListUsersOptions, ServerTeam, ServerTeamCreateOptions, ServerTeamMemberProfile, ServerTeamUpdateOptions, ServerTeamUser, Team, TeamCreateOptions, TeamInvitation, TeamMemberProfile, TeamUpdateOptions, TeamUser } from "./lib/hexclave-app/teams/index.js";
-import { HexclaveServerApp, HexclaveServerAppConstructor, HexclaveServerAppConstructorOptions, StackServerApp, StackServerAppConstructor, StackServerAppConstructorOptions } from "./lib/hexclave-app/apps/interfaces/server-app.js";
-import { EmailOutboxListOptions, EmailOutboxListResult, EmailOutboxUpdateOptions, HexclaveAdminApp, HexclaveAdminAppConstructor, HexclaveAdminAppConstructorOptions, StackAdminApp, StackAdminAppConstructor, StackAdminAppConstructorOptions } from "./lib/hexclave-app/apps/interfaces/admin-app.js";
-import { AdminDomainConfig, AdminEmailConfig, AdminOAuthProviderConfig, AdminProjectConfig, AdminProjectConfigUpdateOptions, OAuthProviderConfig, ProjectConfig } from "./lib/hexclave-app/project-configs/index.js";
-import { AdminOwnedProject, AdminProject, AdminProjectCreateOptions, AdminProjectUpdateOptions, Project, PushedConfigSource } from "./lib/hexclave-app/projects/index.js";
-import { HexclaveClientApp, HexclaveClientAppConstructor, HexclaveClientAppConstructorOptions, HexclaveClientAppJson, StackClientApp, StackClientAppConstructor, StackClientAppConstructorOptions, StackClientAppJson } from "./lib/hexclave-app/apps/interfaces/client-app.js";
-import { getPagePrompt } from "./lib/hexclave-app/url-targets.js";
+import { _ as ResolvedHandlerUrls, f as HandlerUrls, p as OAuthScopesOnSignIn, s as GetCurrentUserOptions, u as HandlerUrlOptions, y as hexclaveAppInternalsSymbol } from "./common-BDyEKSM6.js";
+import { S as AdminSentEmail, b as AdminEmailOutboxStatus, d as AdminEmailOutboxRecipient, t as AdminEmailOutbox, v as AdminEmailOutboxSimpleStatus, x as AdminSendAttemptError } from "./index-CBDR4cNg.js";
+import { a as InternalApiKeyFirstView, i as InternalApiKeyCreateOptions, n as InternalApiKeyBase, r as InternalApiKeyBaseCrudRead, t as InternalApiKey } from "./index-TUtJOdMm.js";
+import { a as AdminTeamPermission, c as AdminTeamPermissionDefinitionUpdateOptions, i as AdminProjectPermissionDefinitionUpdateOptions, n as AdminProjectPermissionDefinition, o as AdminTeamPermissionDefinition, r as AdminProjectPermissionDefinitionCreateOptions, s as AdminTeamPermissionDefinitionCreateOptions, t as AdminProjectPermission } from "./index-DSzMf-rS.js";
+import { a as PlanUsageRow, i as PlanUsagePlanId, n as PlanUsageKind, r as PlanUsageNextPlanId, t as PlanUsage } from "./index-D7Vdg30O.js";
+import { r as OAuthConnection, t as Connection } from "./index-ClBTM-St.js";
+import { i as ServerContactChannel, t as ContactChannel } from "./index-DN04TjLM.js";
+import { A as HexclaveServerApp, B as ServerListUsersOptions, C as HexclaveAdminAppConstructorOptions, D as StackAdminApp, F as StackServerAppConstructorOptions, G as ServerTeamUser, H as ServerTeamCreateOptions, I as EditableTeamMemberProfile, J as TeamInvitation, K as Team, L as ReceivedTeamInvitation, M as HexclaveServerAppConstructorOptions, N as StackServerApp, O as StackAdminAppConstructor, P as StackServerAppConstructor, Q as TeamUser, R as SentTeamInvitation, S as HexclaveAdminAppConstructor, St as User, U as ServerTeamMemberProfile, V as ServerTeam, W as ServerTeamUpdateOptions, Y as TeamMemberProfile, Z as TeamUpdateOptions, a as StackClientApp, b as EmailOutboxUpdateOptions, c as StackClientAppJson, ct as CurrentServerUser, d as AdminProjectCreateOptions, dt as OAuthProvider, f as AdminProjectUpdateOptions, gt as ServerUser, h as PushedConfigSource, ht as ServerOAuthProvider, i as HexclaveClientAppJson, it as Auth, j as HexclaveServerAppConstructor, k as StackAdminAppConstructorOptions, l as AdminOwnedProject, lt as CurrentUser, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, ot as CurrentInternalServerUser, p as Project, q as TeamCreateOptions, r as HexclaveClientAppConstructorOptions, s as StackClientAppConstructorOptions, st as CurrentInternalUser, t as HexclaveClientApp, u as AdminProject, v as EmailOutboxListOptions, x as HexclaveAdminApp, y as EmailOutboxListResult } from "./client-app-D8-Lm4RT.js";
+import { a as AdminProjectConfigUpdateOptions, i as AdminProjectConfig, n as AdminEmailConfig, o as OAuthProviderConfig, r as AdminOAuthProviderConfig, s as ProjectConfig, t as AdminDomainConfig } from "./index-Dq4xsW7_.js";
+import { r as getPagePrompt } from "./url-targets-BJgkwPGW.js";
 import { getConvexProvidersConfig } from "./integrations/convex.js";
 import { HexclaveConfig, StackConfig, defineHexclaveConfig, defineStackConfig } from "@hexclave/shared/config";
-export { AdminDomainConfig, AdminEmailConfig, AdminEmailOutbox, AdminEmailOutboxRecipient, AdminEmailOutboxSimpleStatus, AdminEmailOutboxStatus, AdminOAuthProviderConfig, AdminOwnedProject, AdminProject, AdminProjectConfig, AdminProjectConfigUpdateOptions, AdminProjectCreateOptions, AdminProjectPermission, AdminProjectPermissionDefinition, AdminProjectPermissionDefinitionCreateOptions, AdminProjectPermissionDefinitionUpdateOptions, AdminProjectUpdateOptions, AdminSendAttemptError, AdminSentEmail, AdminTeamPermission, AdminTeamPermissionDefinition, AdminTeamPermissionDefinitionCreateOptions, AdminTeamPermissionDefinitionUpdateOptions, Auth, Connection, ContactChannel, CurrentInternalServerUser, CurrentInternalUser, CurrentServerUser, CurrentUser, EditableTeamMemberProfile, EmailOutboxListOptions, EmailOutboxListResult, EmailOutboxUpdateOptions, GetCurrentUserOptions, GetCurrentUserOptions as GetUserOptions, HandlerUrlOptions, HandlerUrls, HexclaveAdminApp, HexclaveAdminAppConstructor, HexclaveAdminAppConstructorOptions, HexclaveClientApp, HexclaveClientAppConstructor, HexclaveClientAppConstructorOptions, HexclaveClientAppJson, type HexclaveConfig, HexclaveServerApp, HexclaveServerAppConstructor, HexclaveServerAppConstructorOptions, InternalApiKey, InternalApiKeyBase, InternalApiKeyBaseCrudRead, InternalApiKeyCreateOptions, InternalApiKeyFirstView, OAuthConnection, OAuthProvider, OAuthProviderConfig, OAuthScopesOnSignIn, PlanUsage, PlanUsageKind, PlanUsageNextPlanId, PlanUsagePlanId, PlanUsageRow, Project, ProjectConfig, PushedConfigSource, ReceivedTeamInvitation, ResolvedHandlerUrls, SentTeamInvitation, ServerContactChannel, ServerListUsersOptions, ServerOAuthProvider, ServerTeam, ServerTeamCreateOptions, ServerTeamMemberProfile, ServerTeamUpdateOptions, ServerTeamUser, ServerUser, StackAdminApp, StackAdminAppConstructor, StackAdminAppConstructorOptions, StackClientApp, StackClientAppConstructor, StackClientAppConstructorOptions, StackClientAppJson, type StackConfig, StackServerApp, StackServerAppConstructor, StackServerAppConstructorOptions, Team, TeamCreateOptions, TeamInvitation, TeamMemberProfile, TeamUpdateOptions, TeamUser, User, defineHexclaveConfig, defineStackConfig, getConvexProvidersConfig, getPagePrompt, hexclaveAppInternalsSymbol };
+export { type AdminDomainConfig, type AdminEmailConfig, type AdminEmailOutbox, type AdminEmailOutboxRecipient, type AdminEmailOutboxSimpleStatus, type AdminEmailOutboxStatus, type AdminOAuthProviderConfig, type AdminOwnedProject, type AdminProject, type AdminProjectConfig, type AdminProjectConfigUpdateOptions, type AdminProjectCreateOptions, type AdminProjectPermission, type AdminProjectPermissionDefinition, type AdminProjectPermissionDefinitionCreateOptions, type AdminProjectPermissionDefinitionUpdateOptions, type AdminProjectUpdateOptions, type AdminSendAttemptError, type AdminSentEmail, type AdminTeamPermission, type AdminTeamPermissionDefinition, type AdminTeamPermissionDefinitionCreateOptions, type AdminTeamPermissionDefinitionUpdateOptions, type Auth, type Connection, type ContactChannel, type CurrentInternalServerUser, type CurrentInternalUser, type CurrentServerUser, type CurrentUser, type EditableTeamMemberProfile, type EmailOutboxListOptions, type EmailOutboxListResult, type EmailOutboxUpdateOptions, type GetCurrentUserOptions, type GetCurrentUserOptions as GetUserOptions, type HandlerUrlOptions, type HandlerUrls, HexclaveAdminApp, type HexclaveAdminAppConstructor, type HexclaveAdminAppConstructorOptions, HexclaveClientApp, type HexclaveClientAppConstructor, type HexclaveClientAppConstructorOptions, type HexclaveClientAppJson, type HexclaveConfig, HexclaveServerApp, type HexclaveServerAppConstructor, type HexclaveServerAppConstructorOptions, type InternalApiKey, type InternalApiKeyBase, type InternalApiKeyBaseCrudRead, type InternalApiKeyCreateOptions, type InternalApiKeyFirstView, type OAuthConnection, type OAuthProvider, type OAuthProviderConfig, type OAuthScopesOnSignIn, type PlanUsage, type PlanUsageKind, type PlanUsageNextPlanId, type PlanUsagePlanId, type PlanUsageRow, type Project, type ProjectConfig, type PushedConfigSource, type ReceivedTeamInvitation, type ResolvedHandlerUrls, type SentTeamInvitation, type ServerContactChannel, type ServerListUsersOptions, type ServerOAuthProvider, type ServerTeam, type ServerTeamCreateOptions, type ServerTeamMemberProfile, type ServerTeamUpdateOptions, type ServerTeamUser, type ServerUser, StackAdminApp, type StackAdminAppConstructor, type StackAdminAppConstructorOptions, StackClientApp, type StackClientAppConstructor, type StackClientAppConstructorOptions, type StackClientAppJson, type StackConfig, StackServerApp, type StackServerAppConstructor, type StackServerAppConstructorOptions, type Team, type TeamCreateOptions, type TeamInvitation, type TeamMemberProfile, type TeamUpdateOptions, type TeamUser, type User, defineHexclaveConfig, defineStackConfig, getConvexProvidersConfig, getPagePrompt, hexclaveAppInternalsSymbol };

package/dist/index.js

@@ -1,30 +1,30 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_chunk = require('./chunk-BE-pF4vm.js');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let _hexclave_shared_config = require("@hexclave/shared/config");
 let __integrations_convex_js = require("./integrations/convex.js");
-
-Object.defineProperty(exports, 'defineHexclaveConfig', {
-  enumerable: true,
-  get: function () {
-    return _hexclave_shared_config.defineHexclaveConfig;
-  }
+Object.defineProperty(exports, "defineHexclaveConfig", {
+	enumerable: true,
+	get: function() {
+		return _hexclave_shared_config.defineHexclaveConfig;
+	}
 });
-Object.defineProperty(exports, 'defineStackConfig', {
-  enumerable: true,
-  get: function () {
-    return _hexclave_shared_config.defineStackConfig;
-  }
+Object.defineProperty(exports, "defineStackConfig", {
+	enumerable: true,
+	get: function() {
+		return _hexclave_shared_config.defineStackConfig;
+	}
 });
-Object.defineProperty(exports, 'getConvexProvidersConfig', {
-  enumerable: true,
-  get: function () {
-    return __integrations_convex_js.getConvexProvidersConfig;
-  }
+Object.defineProperty(exports, "getConvexProvidersConfig", {
+	enumerable: true,
+	get: function() {
+		return __integrations_convex_js.getConvexProvidersConfig;
+	}
 });
 var __lib_hexclave_app_index_js = require("./lib/hexclave-app/index.js");
-Object.keys(__lib_hexclave_app_index_js).forEach(function (k) {
-  if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
-    enumerable: true,
-    get: function () { return __lib_hexclave_app_index_js[k]; }
-  });
+Object.keys(__lib_hexclave_app_index_js).forEach(function(k) {
+	if (k !== "default" && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+		enumerable: true,
+		get: function() {
+			return __lib_hexclave_app_index_js[k];
+		}
+	});
 });

package/dist/integrations/convex/component/convex.config.d.ts

@@ -1,4 +1,4 @@
-import { n as FunctionReference } from "../../../storage-CKsyME2q.js";
+import { n as FunctionReference } from "../../../storage-CA867GtX.js";
 
 //#region ../../node_modules/.pnpm/convex@1.27.0_react@19.2.1/node_modules/convex/dist/cjs-types/server/components/index.d.ts
 interface ComponentExports {

package/dist/integrations/convex/component/convex.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"convex.config.d.ts","names":["AnyFunctionReference","FunctionReference","FunctionType","DefaultFunctionArgs","getFunctionAddress","FunctionHandle","Type","Args","ReturnType","createFunctionHandle","Promise","functionReference","ComponentExports","key","ComponentDefinition","Definition","Exports","InstalledComponent","use","definition","name","options","__exports","ComponentDefinitionExports","T","AppDefinition","constructor","exports","ImportedComponentDefinition","componentDefinitionPath","defaultName","defineComponent","defineApp","AnyInterfaceType","AnyComponentReference","Record","AnyChildComponents","componentsGeneric","AnyComponents"],"sources":["../../../../../../node_modules/.pnpm/convex@1.27.0_react@19.2.1/node_modules/convex/dist/cjs-types/server/components/index.d.ts","../../../../src/integrations/convex/component/convex.config.ts"],"x_google_ignoreList":[0],"mappings":";;;UA+BUY,gBAAAA;EAAAA,CACLC,GAAAA,WAAcZ,iBAAAA,uBAAwCW,gBAAAA;AAAAA;;;;;AA2BzD;;;KAlBUE,mBAAAA,iBAAoCF,gBAAAA;EAmBhBY;;;;;AAoB9B;;;EA9BEN,GAAAA,oBAAuBJ,mBAAAA,OAA0BK,UAAAA,EAAYJ,UAAAA,EAAYM,OAAAA;IACrED,IAAAA;EAAAA,IACAH,kBAAAA,CAAmBF,UAAAA;EAkCRQ;;;;;EA5BfD,SAAAA,EAAWN,OAAAA;AAAAA;AAAAA,KAEVO,0BAAAA,WAAqCT,mBAAAA,SAA4BU,CAAAA;;;;;;;;;;;cAwBxDP,kBAAAA,oBAAsCH,mBAAAA;EAChDY,WAAAA,CAAYP,UAAAA,EAAYJ,UAAAA,EAAYK,IAAAA;EAAAA,IAChCO,OAAAA,CAAAA,GAAWJ,0BAAAA,CAA2BR,UAAAA;AAAAA;;;;;;;;;;;;cChFxC,SAAA,EAAyC,mBAAA;AAAA"}
+{"version":3,"file":"convex.config.d.ts","names":["Type","FunctionType","Args","DefaultFunctionArgs","ReturnType","FunctionReference","functionReference","Promise","FunctionHandle","key","ComponentExports","Exports","use","Definition","ComponentDefinition","definition","name","options","InstalledComponent","__exports","T","constructor","exports","ComponentDefinitionExports","componentDefinitionPath","defaultName","AppDefinition","AnyInterfaceType","AnyFunctionReference","Record","AnyComponentReference","AnyChildComponents"],"sources":["../../../../../../node_modules/.pnpm/convex@1.27.0_react@19.2.1/node_modules/convex/dist/cjs-types/server/components/index.d.ts","../../../../src/integrations/convex/component/convex.config.ts"],"x_google_ignoreList":[0],"mappings":";;;UA+BU,gBAAA;EAAA,CACLS,GAAAA,WAAc,iBAAA,uBAAwC,gBAAgB;AAAA;;;;AA0BrD;AACpB;;;KAlBU,mBAAA,iBAAoC,gBAAA;EAmBhBW;;;;AAAuC;AAoBrE;;;EA9BER,GAAAA,oBAAuB,mBAAA,OAA0BG,UAAAA,EAAY,UAAA,EAAYE,OAAAA;IACrED,IAAAA;EAAAA,IACA,kBAAA,CAAmB,UAAA;EAkCR;;;;;EA5BfG,SAAAA,EAAW,OAAA;AAAA;AAAA,KAEV,0BAAA,WAAqC,mBAAA,SAA4B,CAAC;;;;;;AA0Bf;;;;;cAF1C,kBAAA,oBAAsC,mBAAA;EAChDE,WAAAA,CAAYN,UAAAA,EAAY,UAAA,EAAYC,IAAAA;EAAAA,IAChCM,OAAAA,IAAW,0BAAA,CAA2B,UAAA;AAAA;;;;;;;;;;;;cChFxC,SAAA,EAAyC,mBAAhC;AAAA"}

package/dist/integrations/convex/component/convex.config.js

@@ -1,9 +1,6 @@
-const require_chunk = require('../../../chunk-BE-pF4vm.js');
-let convex_server = require("convex/server");
-
 //#region src/integrations/convex/component/convex.config.ts
-const component = (0, convex_server.defineComponent)("stack_auth");
-
+const component = (0, require("convex/server").defineComponent)("stack_auth");
 //#endregion
 module.exports = component;
+
 //# sourceMappingURL=convex.config.js.map

package/dist/integrations/convex/component/convex.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"convex.config.js","names":[],"sources":["../../../../src/integrations/convex/component/convex.config.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { defineComponent } from \"convex/server\";\n\nconst component = defineComponent(\"stack_auth\");\n\nexport default component;\n"],"mappings":";;;;AAMA,MAAM,+CAA4B,aAAa"}
+{"version":3,"file":"convex.config.js","names":[],"sources":["../../../../src/integrations/convex/component/convex.config.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { defineComponent } from \"convex/server\";\n\nconst component = defineComponent(\"stack_auth\");\n\nexport default component;\n"],"mappings":";AAMA,MAAM,aAAA,0BAAA,CAAA,CAAA,gBAAA,CAA4B,YAAY"}

package/dist/integrations/convex.js

@@ -1,8 +1,6 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_chunk = require('../chunk-BE-pF4vm.js');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let _hexclave_shared_dist_utils_urls = require("@hexclave/shared/dist/utils/urls");
 let ___lib_hexclave_app_apps_implementations_common_js = require("../lib/hexclave-app/apps/implementations/common.js");
-
 //#region src/integrations/convex.ts
 function getConvexProvidersConfig(options) {
 	const baseUrl = options.baseUrl || ___lib_hexclave_app_apps_implementations_common_js.defaultBaseUrl;
@@ -19,7 +17,7 @@ function getConvexProvidersConfig(options) {
 		algorithm: "ES256"
 	}];
 }
-
 //#endregion
 exports.getConvexProvidersConfig = getConvexProvidersConfig;
+
 //# sourceMappingURL=convex.js.map

package/dist/integrations/convex.js.map

@@ -1 +1 @@
-{"version":3,"file":"convex.js","names":["defaultBaseUrl"],"sources":["../../src/integrations/convex.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { urlString } from \"@hexclave/shared/dist/utils/urls\";\nimport { defaultBaseUrl } from \"../lib/hexclave-app/apps/implementations/common\";\n\nexport function getConvexProvidersConfig(options: {\n  baseUrl?: string,\n  projectId: string,\n}) {\n  const baseUrl = options.baseUrl || defaultBaseUrl;\n  const projectId = options.projectId;\n  return [\n    {\n      type: \"customJwt\",\n      issuer: new URL(urlString`/api/v1/projects/${projectId}`, baseUrl),\n      jwks: new URL(urlString`/api/v1/projects/${projectId}/.well-known/jwks.json`, baseUrl),\n      algorithm: \"ES256\",\n    },\n    {\n      type: \"customJwt\",\n      issuer: new URL(urlString`/api/v1/projects-anonymous-users/${projectId}`, baseUrl),\n      jwks: new URL(urlString`/api/v1/projects/${projectId}/.well-known/jwks.json?include_anonymous=true`, baseUrl),\n      algorithm: \"ES256\",\n    },\n  ];\n}\n"],"mappings":";;;;;;AAOA,SAAgB,yBAAyB,SAGtC;CACD,MAAM,UAAU,QAAQ,WAAWA;CACnC,MAAM,YAAY,QAAQ;AAC1B,QAAO,CACL;EACE,MAAM;EACN,QAAQ,IAAI,IAAI,0CAAS,oBAAoB,aAAa,QAAQ;EAClE,MAAM,IAAI,IAAI,0CAAS,oBAAoB,UAAU,yBAAyB,QAAQ;EACtF,WAAW;EACZ,EACD;EACE,MAAM;EACN,QAAQ,IAAI,IAAI,0CAAS,oCAAoC,aAAa,QAAQ;EAClF,MAAM,IAAI,IAAI,0CAAS,oBAAoB,UAAU,gDAAgD,QAAQ;EAC7G,WAAW;EACZ,CACF"}
+{"version":3,"file":"convex.js","names":["defaultBaseUrl"],"sources":["../../src/integrations/convex.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { urlString } from \"@hexclave/shared/dist/utils/urls\";\nimport { defaultBaseUrl } from \"../lib/hexclave-app/apps/implementations/common\";\n\nexport function getConvexProvidersConfig(options: {\n  baseUrl?: string,\n  projectId: string,\n}) {\n  const baseUrl = options.baseUrl || defaultBaseUrl;\n  const projectId = options.projectId;\n  return [\n    {\n      type: \"customJwt\",\n      issuer: new URL(urlString`/api/v1/projects/${projectId}`, baseUrl),\n      jwks: new URL(urlString`/api/v1/projects/${projectId}/.well-known/jwks.json`, baseUrl),\n      algorithm: \"ES256\",\n    },\n    {\n      type: \"customJwt\",\n      issuer: new URL(urlString`/api/v1/projects-anonymous-users/${projectId}`, baseUrl),\n      jwks: new URL(urlString`/api/v1/projects/${projectId}/.well-known/jwks.json?include_anonymous=true`, baseUrl),\n      algorithm: \"ES256\",\n    },\n  ];\n}\n"],"mappings":";;;;AAOA,SAAgB,yBAAyB,SAGtC;CACD,MAAM,UAAU,QAAQ,WAAWA,mDAAAA;CACnC,MAAM,YAAY,QAAQ;CAC1B,OAAO,CACL;EACE,MAAM;EACN,QAAQ,IAAI,IAAI,iCAAA,SAAS,oBAAoB,aAAa,OAAO;EACjE,MAAM,IAAI,IAAI,iCAAA,SAAS,oBAAoB,UAAU,yBAAyB,OAAO;EACrF,WAAW;CACb,GACA;EACE,MAAM;EACN,QAAQ,IAAI,IAAI,iCAAA,SAAS,oCAAoC,aAAa,OAAO;EACjF,MAAM,IAAI,IAAI,iCAAA,SAAS,oBAAoB,UAAU,gDAAgD,OAAO;EAC5G,WAAW;CACb,CACF;AACF"}

package/dist/lib/auth.js

@@ -1,12 +1,10 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_chunk = require('../chunk-BE-pF4vm.js');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let _hexclave_shared_dist_utils_strings = require("@hexclave/shared/dist/utils/strings");
 let _hexclave_shared_dist_utils_errors = require("@hexclave/shared/dist/utils/errors");
 let _hexclave_shared = require("@hexclave/shared");
 let _hexclave_shared_dist_utils_results = require("@hexclave/shared/dist/utils/results");
 let ___utils_url_js = require("../utils/url.js");
 let __cookie_js = require("./cookie.js");
-
 //#region src/lib/auth.ts
 async function getNewOAuthProviderOrScopeUrl(iface, options, session) {
 	const { codeChallenge, state } = await (0, __cookie_js.saveVerifierAndState)();
@@ -125,8 +123,8 @@ async function callOAuthCallback(iface, redirectUrl, options) {
 		throw new _hexclave_shared_dist_utils_errors.HexclaveAssertionError("Error signing in during OAuth callback. Please try again.", { cause: e });
 	}
 }
-
 //#endregion
 exports.callOAuthCallback = callOAuthCallback;
 exports.getNewOAuthProviderOrScopeUrl = getNewOAuthProviderOrScopeUrl;
+
 //# sourceMappingURL=auth.js.map

package/dist/lib/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","names":["KnownErrors","HexclaveAssertionError","KnownError","Result"],"sources":["../../src/lib/auth.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { KnownError, KnownErrors, HexclaveClientInterface } from \"@hexclave/shared\";\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport { HexclaveAssertionError, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { deindent } from \"@hexclave/shared/dist/utils/strings\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { consumeVerifierAndStateCookie, saveVerifierAndState } from \"./cookie\";\nexport async function getNewOAuthProviderOrScopeUrl(\n  iface: HexclaveClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n): Promise<string> {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  return await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl, \"redirectUrl\"),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl, \"errorRedirectUrl\"),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href, \"afterCallbackRedirectUrl\"),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\ntype OAuthCallbackConsumptionResult =\n  | {\n    type: \"oauth-response\",\n    originalUrl: URL,\n    codeVerifier: string,\n    state: string,\n  }\n  | {\n    type: \"known-error\",\n    error: KnownError,\n  };\n\nconst oauthErrorParams = [\"error\", \"error_description\", \"errorCode\", \"message\", \"details\"] as const;\n\nfunction removeOAuthErrorParamsFromHistory(originalUrl: URL): void {\n  const newUrl = new URL(originalUrl);\n  for (const param of oauthErrorParams) {\n    newUrl.searchParams.delete(param);\n  }\n  window.history.replaceState({}, \"\", newUrl.toString());\n}\n\nfunction getProviderOAuthErrorFromUrl(originalUrl: URL): KnownError | null {\n  const providerError = originalUrl.searchParams.get(\"error\");\n  const providerErrorDescription = originalUrl.searchParams.get(\"error_description\");\n  if (providerError == null && providerErrorDescription == null) {\n    return null;\n  }\n\n  switch (providerError) {\n    case \"access_denied\":\n    case \"consent_required\": {\n      return new KnownErrors.OAuthProviderAccessDenied();\n    }\n    case \"server_error\":\n    case \"temporarily_unavailable\":\n    default: {\n      return new KnownErrors.OAuthProviderTemporarilyUnavailable();\n    }\n  }\n}\n\nfunction consumeOAuthCallbackQueryParams(options?: {\n  dontWarnAboutMissingQueryParams?: boolean,\n}): OAuthCallbackConsumptionResult | null {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  const knownErrorCode = originalUrl.searchParams.get(\"errorCode\");\n  const knownErrorMessage = originalUrl.searchParams.get(\"message\");\n  if (knownErrorCode && knownErrorMessage) {\n    const details = originalUrl.searchParams.get(\"details\");\n    let detailsJson = {};\n    if (details) {\n      try {\n        detailsJson = JSON.parse(details);\n      } catch (error) {\n        throw new HexclaveAssertionError(\"OAuth callback returned malformed known-error details\", {\n          details,\n          cause: error,\n        });\n      }\n    }\n\n    removeOAuthErrorParamsFromHistory(originalUrl);\n\n    return {\n      type: \"known-error\",\n      error: KnownError.fromJson({\n        code: knownErrorCode,\n        message: knownErrorMessage,\n        details: detailsJson,\n      }),\n    };\n  }\n\n  const providerOAuthError = getProviderOAuthErrorFromUrl(originalUrl);\n  if (providerOAuthError != null && !requiredParams.every(param => originalUrl.searchParams.has(param))) {\n    removeOAuthErrorParamsFromHistory(originalUrl);\n    return {\n      type: \"known-error\",\n      error: providerOAuthError,\n    };\n  }\n\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      if (!options?.dontWarnAboutMissingQueryParams) {\n        console.warn(new Error(`Missing required query parameter on OAuth callback: ${param}. Maybe you opened or reloaded the oauth-callback page from your history?`));\n      }\n      return null;\n    }\n  }\n\n  const expectedState = originalUrl.searchParams.get(\"state\") ?? throwErr(\"This should never happen; isn't state required above?\");\n  const cookieResult = consumeVerifierAndStateCookie(expectedState);\n\n  if (!cookieResult) {\n    // If the state can't be found in the cookies, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    console.warn(deindent`\n      Hexclave found an outer OAuth callback state in the query parameters, but not in cookies.\n\n      This could have multiple reasons:\n        - The cookie expired, because the OAuth flow took too long.\n        - The user's browser deleted the cookie, either manually or because of a very strict cookie policy.\n        - The cookie was already consumed by this page, and the user already logged in.\n        - You are using another OAuth client library with the same callback URL as Hexclave.\n        - The user opened the OAuth callback page from their history.\n\n      Either way, it is probably safe to ignore this warning unless you are debugging an OAuth issue.\n    `);\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return {\n    type: \"oauth-response\",\n    originalUrl,\n    codeVerifier: cookieResult.codeVerifier,\n    state: expectedState,\n  };\n}\n\nexport async function callOAuthCallback(\n  iface: HexclaveClientInterface,\n  redirectUrl: string,\n  options?: {\n    dontWarnAboutMissingQueryParams?: boolean,\n  },\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const consumed = consumeOAuthCallbackQueryParams(options);\n  if (!consumed) return Result.ok(undefined);\n  if (consumed.type === \"known-error\") {\n    throw consumed.error;\n  }\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback, and the only instance\n  // of callOAuthCallback that's running)\n  try {\n    return Result.ok(await iface.callOAuthCallback({\n      oauthParams: consumed.originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl, \"redirectUri\"),\n      codeVerifier: consumed.codeVerifier,\n      state: consumed.state,\n    }));\n  } catch (e) {\n    if (KnownError.isKnownError(e)) {\n      throw e;\n    }\n    throw new HexclaveAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";;;;;;;;;;AAWA,eAAsB,8BACpB,OACA,SAMA,SACiB;CACjB,MAAM,EAAE,eAAe,UAAU,6CAA4B;AAC7D,QAAO,MAAM,MAAM,YAAY;EAC7B,UAAU,QAAQ;EAClB,uDAAkC,QAAQ,aAAa,cAAc;EACrE,4DAAuC,QAAQ,kBAAkB,mBAAmB;EACpF,oEAA+C,OAAO,SAAS,MAAM,2BAA2B;EAChG;EACA;EACA,MAAM;EACN;EACA,eAAe,QAAQ;EACxB,CAAC;;AAoBJ,MAAM,mBAAmB;CAAC;CAAS;CAAqB;CAAa;CAAW;CAAU;AAE1F,SAAS,kCAAkC,aAAwB;CACjE,MAAM,SAAS,IAAI,IAAI,YAAY;AACnC,MAAK,MAAM,SAAS,iBAClB,QAAO,aAAa,OAAO,MAAM;AAEnC,QAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,OAAO,UAAU,CAAC;;AAGxD,SAAS,6BAA6B,aAAqC;CACzE,MAAM,gBAAgB,YAAY,aAAa,IAAI,QAAQ;CAC3D,MAAM,2BAA2B,YAAY,aAAa,IAAI,oBAAoB;AAClF,KAAI,iBAAiB,QAAQ,4BAA4B,KACvD,QAAO;AAGT,SAAQ,eAAR;EACE,KAAK;EACL,KAAK,mBACH,QAAO,IAAIA,6BAAY,2BAA2B;EAIpD,QACE,QAAO,IAAIA,6BAAY,qCAAqC;;;AAKlE,SAAS,gCAAgC,SAEC;CACxC,MAAM,iBAAiB,CAAC,QAAQ,QAAQ;CACxC,MAAM,cAAc,IAAI,IAAI,OAAO,SAAS,KAAK;CACjD,MAAM,iBAAiB,YAAY,aAAa,IAAI,YAAY;CAChE,MAAM,oBAAoB,YAAY,aAAa,IAAI,UAAU;AACjE,KAAI,kBAAkB,mBAAmB;EACvC,MAAM,UAAU,YAAY,aAAa,IAAI,UAAU;EACvD,IAAI,cAAc,EAAE;AACpB,MAAI,QACF,KAAI;AACF,iBAAc,KAAK,MAAM,QAAQ;WAC1B,OAAO;AACd,SAAM,IAAIC,0DAAuB,yDAAyD;IACxF;IACA,OAAO;IACR,CAAC;;AAIN,oCAAkC,YAAY;AAE9C,SAAO;GACL,MAAM;GACN,OAAOC,4BAAW,SAAS;IACzB,MAAM;IACN,SAAS;IACT,SAAS;IACV,CAAC;GACH;;CAGH,MAAM,qBAAqB,6BAA6B,YAAY;AACpE,KAAI,sBAAsB,QAAQ,CAAC,eAAe,OAAM,UAAS,YAAY,aAAa,IAAI,MAAM,CAAC,EAAE;AACrG,oCAAkC,YAAY;AAC9C,SAAO;GACL,MAAM;GACN,OAAO;GACR;;AAGH,MAAK,MAAM,SAAS,eAClB,KAAI,CAAC,YAAY,aAAa,IAAI,MAAM,EAAE;AACxC,MAAI,CAAC,SAAS,gCACZ,SAAQ,qBAAK,IAAI,MAAM,uDAAuD,MAAM,2EAA2E,CAAC;AAElK,SAAO;;CAIX,MAAM,gBAAgB,YAAY,aAAa,IAAI,QAAQ,qDAAa,wDAAwD;CAChI,MAAM,8DAA6C,cAAc;AAEjE,KAAI,CAAC,cAAc;AAGjB,UAAQ,KAAK,4CAAQ;;;;;;;;;;;MAWnB;AACF,SAAO;;CAIT,MAAM,SAAS,IAAI,IAAI,YAAY;AACnC,MAAK,MAAM,SAAS,eAClB,QAAO,aAAa,OAAO,MAAM;AASnC,QAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,OAAO,UAAU,CAAC;AAEtD,QAAO;EACL,MAAM;EACN;EACA,cAAc,aAAa;EAC3B,OAAO;EACR;;AAGH,eAAsB,kBACpB,OACA,aACA,SAGA;CAIA,MAAM,WAAW,gCAAgC,QAAQ;AACzD,KAAI,CAAC,SAAU,QAAOC,2CAAO,GAAG,OAAU;AAC1C,KAAI,SAAS,SAAS,cACpB,OAAM,SAAS;AAMjB,KAAI;AACF,SAAOA,2CAAO,GAAG,MAAM,MAAM,kBAAkB;GAC7C,aAAa,SAAS,YAAY;GAClC,uDAAkC,aAAa,cAAc;GAC7D,cAAc,SAAS;GACvB,OAAO,SAAS;GACjB,CAAC,CAAC;UACI,GAAG;AACV,MAAID,4BAAW,aAAa,EAAE,CAC5B,OAAM;AAER,QAAM,IAAID,0DAAuB,6DAA6D,EAAE,OAAO,GAAG,CAAC"}
+{"version":3,"file":"auth.js","names":["KnownErrors","HexclaveAssertionError","KnownError","Result"],"sources":["../../src/lib/auth.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { KnownError, KnownErrors, HexclaveClientInterface } from \"@hexclave/shared\";\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport { HexclaveAssertionError, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { deindent } from \"@hexclave/shared/dist/utils/strings\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { consumeVerifierAndStateCookie, saveVerifierAndState } from \"./cookie\";\nexport async function getNewOAuthProviderOrScopeUrl(\n  iface: HexclaveClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n): Promise<string> {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  return await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl, \"redirectUrl\"),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl, \"errorRedirectUrl\"),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href, \"afterCallbackRedirectUrl\"),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\ntype OAuthCallbackConsumptionResult =\n  | {\n    type: \"oauth-response\",\n    originalUrl: URL,\n    codeVerifier: string,\n    state: string,\n  }\n  | {\n    type: \"known-error\",\n    error: KnownError,\n  };\n\nconst oauthErrorParams = [\"error\", \"error_description\", \"errorCode\", \"message\", \"details\"] as const;\n\nfunction removeOAuthErrorParamsFromHistory(originalUrl: URL): void {\n  const newUrl = new URL(originalUrl);\n  for (const param of oauthErrorParams) {\n    newUrl.searchParams.delete(param);\n  }\n  window.history.replaceState({}, \"\", newUrl.toString());\n}\n\nfunction getProviderOAuthErrorFromUrl(originalUrl: URL): KnownError | null {\n  const providerError = originalUrl.searchParams.get(\"error\");\n  const providerErrorDescription = originalUrl.searchParams.get(\"error_description\");\n  if (providerError == null && providerErrorDescription == null) {\n    return null;\n  }\n\n  switch (providerError) {\n    case \"access_denied\":\n    case \"consent_required\": {\n      return new KnownErrors.OAuthProviderAccessDenied();\n    }\n    case \"server_error\":\n    case \"temporarily_unavailable\":\n    default: {\n      return new KnownErrors.OAuthProviderTemporarilyUnavailable();\n    }\n  }\n}\n\nfunction consumeOAuthCallbackQueryParams(options?: {\n  dontWarnAboutMissingQueryParams?: boolean,\n}): OAuthCallbackConsumptionResult | null {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  const knownErrorCode = originalUrl.searchParams.get(\"errorCode\");\n  const knownErrorMessage = originalUrl.searchParams.get(\"message\");\n  if (knownErrorCode && knownErrorMessage) {\n    const details = originalUrl.searchParams.get(\"details\");\n    let detailsJson = {};\n    if (details) {\n      try {\n        detailsJson = JSON.parse(details);\n      } catch (error) {\n        throw new HexclaveAssertionError(\"OAuth callback returned malformed known-error details\", {\n          details,\n          cause: error,\n        });\n      }\n    }\n\n    removeOAuthErrorParamsFromHistory(originalUrl);\n\n    return {\n      type: \"known-error\",\n      error: KnownError.fromJson({\n        code: knownErrorCode,\n        message: knownErrorMessage,\n        details: detailsJson,\n      }),\n    };\n  }\n\n  const providerOAuthError = getProviderOAuthErrorFromUrl(originalUrl);\n  if (providerOAuthError != null && !requiredParams.every(param => originalUrl.searchParams.has(param))) {\n    removeOAuthErrorParamsFromHistory(originalUrl);\n    return {\n      type: \"known-error\",\n      error: providerOAuthError,\n    };\n  }\n\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      if (!options?.dontWarnAboutMissingQueryParams) {\n        console.warn(new Error(`Missing required query parameter on OAuth callback: ${param}. Maybe you opened or reloaded the oauth-callback page from your history?`));\n      }\n      return null;\n    }\n  }\n\n  const expectedState = originalUrl.searchParams.get(\"state\") ?? throwErr(\"This should never happen; isn't state required above?\");\n  const cookieResult = consumeVerifierAndStateCookie(expectedState);\n\n  if (!cookieResult) {\n    // If the state can't be found in the cookies, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    console.warn(deindent`\n      Hexclave found an outer OAuth callback state in the query parameters, but not in cookies.\n\n      This could have multiple reasons:\n        - The cookie expired, because the OAuth flow took too long.\n        - The user's browser deleted the cookie, either manually or because of a very strict cookie policy.\n        - The cookie was already consumed by this page, and the user already logged in.\n        - You are using another OAuth client library with the same callback URL as Hexclave.\n        - The user opened the OAuth callback page from their history.\n\n      Either way, it is probably safe to ignore this warning unless you are debugging an OAuth issue.\n    `);\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return {\n    type: \"oauth-response\",\n    originalUrl,\n    codeVerifier: cookieResult.codeVerifier,\n    state: expectedState,\n  };\n}\n\nexport async function callOAuthCallback(\n  iface: HexclaveClientInterface,\n  redirectUrl: string,\n  options?: {\n    dontWarnAboutMissingQueryParams?: boolean,\n  },\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const consumed = consumeOAuthCallbackQueryParams(options);\n  if (!consumed) return Result.ok(undefined);\n  if (consumed.type === \"known-error\") {\n    throw consumed.error;\n  }\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback, and the only instance\n  // of callOAuthCallback that's running)\n  try {\n    return Result.ok(await iface.callOAuthCallback({\n      oauthParams: consumed.originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl, \"redirectUri\"),\n      codeVerifier: consumed.codeVerifier,\n      state: consumed.state,\n    }));\n  } catch (e) {\n    if (KnownError.isKnownError(e)) {\n      throw e;\n    }\n    throw new HexclaveAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";;;;;;;;AAWA,eAAsB,8BACpB,OACA,SAMA,SACiB;CACjB,MAAM,EAAE,eAAe,UAAU,OAAA,GAAA,YAAA,qBAAA,CAA2B;CAC5D,OAAO,MAAM,MAAM,YAAY;EAC7B,UAAU,QAAQ;EAClB,cAAA,GAAA,gBAAA,qBAAA,CAAkC,QAAQ,aAAa,aAAa;EACpE,mBAAA,GAAA,gBAAA,qBAAA,CAAuC,QAAQ,kBAAkB,kBAAkB;EACnF,2BAAA,GAAA,gBAAA,qBAAA,CAA+C,OAAO,SAAS,MAAM,0BAA0B;EAC/F;EACA;EACA,MAAM;EACN;EACA,eAAe,QAAQ;CACzB,CAAC;AACH;AAmBA,MAAM,mBAAmB;CAAC;CAAS;CAAqB;CAAa;CAAW;AAAS;AAEzF,SAAS,kCAAkC,aAAwB;CACjE,MAAM,SAAS,IAAI,IAAI,WAAW;CAClC,KAAK,MAAM,SAAS,kBAClB,OAAO,aAAa,OAAO,KAAK;CAElC,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;AACvD;AAEA,SAAS,6BAA6B,aAAqC;CACzE,MAAM,gBAAgB,YAAY,aAAa,IAAI,OAAO;CAC1D,MAAM,2BAA2B,YAAY,aAAa,IAAI,mBAAmB;CACjF,IAAI,iBAAiB,QAAQ,4BAA4B,MACvD,OAAO;CAGT,QAAQ,eAAR;EACE,KAAK;EACL,KAAK,oBACH,OAAO,IAAIA,iBAAAA,YAAY,0BAA0B;EAInD,SACE,OAAO,IAAIA,iBAAAA,YAAY,oCAAoC;CAE/D;AACF;AAEA,SAAS,gCAAgC,SAEC;CACxC,MAAM,iBAAiB,CAAC,QAAQ,OAAO;CACvC,MAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;CAChD,MAAM,iBAAiB,YAAY,aAAa,IAAI,WAAW;CAC/D,MAAM,oBAAoB,YAAY,aAAa,IAAI,SAAS;CAChE,IAAI,kBAAkB,mBAAmB;EACvC,MAAM,UAAU,YAAY,aAAa,IAAI,SAAS;EACtD,IAAI,cAAc,CAAC;EACnB,IAAI,SACF,IAAI;GACF,cAAc,KAAK,MAAM,OAAO;EAClC,SAAS,OAAO;GACd,MAAM,IAAIC,mCAAAA,uBAAuB,yDAAyD;IACxF;IACA,OAAO;GACT,CAAC;EACH;EAGF,kCAAkC,WAAW;EAE7C,OAAO;GACL,MAAM;GACN,OAAOC,iBAAAA,WAAW,SAAS;IACzB,MAAM;IACN,SAAS;IACT,SAAS;GACX,CAAC;EACH;CACF;CAEA,MAAM,qBAAqB,6BAA6B,WAAW;CACnE,IAAI,sBAAsB,QAAQ,CAAC,eAAe,OAAM,UAAS,YAAY,aAAa,IAAI,KAAK,CAAC,GAAG;EACrG,kCAAkC,WAAW;EAC7C,OAAO;GACL,MAAM;GACN,OAAO;EACT;CACF;CAEA,KAAK,MAAM,SAAS,gBAClB,IAAI,CAAC,YAAY,aAAa,IAAI,KAAK,GAAG;EACxC,IAAI,CAAC,SAAS,iCACZ,QAAQ,qBAAK,IAAI,MAAM,uDAAuD,MAAM,0EAA0E,CAAC;EAEjK,OAAO;CACT;CAGF,MAAM,gBAAgB,YAAY,aAAa,IAAI,OAAO,MAAA,GAAA,mCAAA,SAAA,CAAc,uDAAuD;CAC/H,MAAM,gBAAA,GAAA,YAAA,8BAAA,CAA6C,aAAa;CAEhE,IAAI,CAAC,cAAc;EAGjB,QAAQ,KAAK,oCAAA,QAAQ;;;;;;;;;;;KAWpB;EACD,OAAO;CACT;CAGA,MAAM,SAAS,IAAI,IAAI,WAAW;CAClC,KAAK,MAAM,SAAS,gBAClB,OAAO,aAAa,OAAO,KAAK;CASlC,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;CAErD,OAAO;EACL,MAAM;EACN;EACA,cAAc,aAAa;EAC3B,OAAO;CACT;AACF;AAEA,eAAsB,kBACpB,OACA,aACA,SAGA;CAIA,MAAM,WAAW,gCAAgC,OAAO;CACxD,IAAI,CAAC,UAAU,OAAOC,oCAAAA,OAAO,GAAG,KAAA,CAAS;CACzC,IAAI,SAAS,SAAS,eACpB,MAAM,SAAS;CAMjB,IAAI;EACF,OAAOA,oCAAAA,OAAO,GAAG,MAAM,MAAM,kBAAkB;GAC7C,aAAa,SAAS,YAAY;GAClC,cAAA,GAAA,gBAAA,qBAAA,CAAkC,aAAa,aAAa;GAC5D,cAAc,SAAS;GACvB,OAAO,SAAS;EAClB,CAAC,CAAC;CACJ,SAAS,GAAG;EACV,IAAID,iBAAAA,WAAW,aAAa,CAAC,GAC3B,MAAM;EAER,MAAM,IAAID,mCAAAA,uBAAuB,6DAA6D,EAAE,OAAO,EAAE,CAAC;CAC5G;AACF"}

package/dist/lib/auth.test.js

@@ -1,8 +1,6 @@
-const require_chunk = require('../chunk-BE-pF4vm.js');
 let vitest = require("vitest");
 let _hexclave_shared = require("@hexclave/shared");
 let __auth_js = require("./auth.js");
-
 //#region src/lib/auth.test.ts
 // @vitest-environment jsdom
 vitest.vi.mock("./cookie", async (importOriginal) => {
@@ -70,6 +68,6 @@ function createTestInterface() {
 		(0, vitest.expect)(window.location.href).toBe("http://localhost:3000/handler/oauth-callback");
 	});
 });
-
 //#endregion
+
 //# sourceMappingURL=auth.test.js.map

package/dist/lib/auth.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.test.js","names":["vi","HexclaveClientInterface","KnownErrors"],"sources":["../../src/lib/auth.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { HexclaveClientInterface, KnownErrors } from \"@hexclave/shared\";\nimport { describe, expect, it, vi } from \"vitest\";\nimport { callOAuthCallback, getNewOAuthProviderOrScopeUrl } from \"./auth\";\n\nvi.mock(\"./cookie\", async (importOriginal) => {\n  const actual = await importOriginal<typeof import(\"./cookie\")>();\n  return {\n    ...actual,\n    saveVerifierAndState: async () => ({\n      codeChallenge: \"<stripped code challenge>\",\n      state: \"<stripped state>\",\n    }),\n  };\n});\n\nfunction createTestInterface() {\n  return new HexclaveClientInterface({\n    clientVersion: \"test\",\n    getBaseUrl: () => \"https://api.example.com\",\n    getApiUrls: () => [\"https://api.example.com\"],\n    extraRequestHeaders: {},\n    projectId: \"00000000-0000-4000-8000-000000000000\",\n    publishableClientKey: \"pck_test\",\n  });\n}\n\ndescribe(\"getNewOAuthProviderOrScopeUrl\", () => {\n  it(\"returns the OAuth URL without performing navigation\", async () => {\n    window.history.replaceState({}, \"\", \"/account?after_auth_return_to=%2Fsettings\");\n\n    const iface = createTestInterface();\n    const session = iface.createSession({ refreshToken: null, accessToken: null });\n\n    const location = await getNewOAuthProviderOrScopeUrl(\n      iface,\n      {\n        provider: \"github\",\n        redirectUrl: \"/handler/oauth-callback\",\n        errorRedirectUrl: \"/handler/error\",\n        providerScope: \"repo user\",\n      },\n      session,\n    );\n\n    const url = new URL(location);\n    expect(`${url.origin}${url.pathname}`).toBe(\"https://api.example.com/api/v1/auth/oauth/authorize/github\");\n    expect(Object.fromEntries(url.searchParams.entries())).toMatchInlineSnapshot(`\n      {\n        \"after_callback_redirect_url\": \"http://localhost:3000/account?after_auth_return_to=%2Fsettings\",\n        \"client_id\": \"00000000-0000-4000-8000-000000000000\",\n        \"client_secret\": \"pck_test\",\n        \"code_challenge\": \"<stripped code challenge>\",\n        \"code_challenge_method\": \"S256\",\n        \"error_redirect_url\": \"http://localhost:3000/handler/error?after_auth_return_to=%2Fsettings\",\n        \"grant_type\": \"authorization_code\",\n        \"provider_scope\": \"repo user\",\n        \"redirect_uri\": \"http://localhost:3000/handler/oauth-callback?after_auth_return_to=%2Fsettings\",\n        \"response_type\": \"code\",\n        \"scope\": \"legacy\",\n        \"state\": \"<stripped state>\",\n        \"type\": \"link\",\n      }\n    `);\n  });\n});\n\ndescribe(\"callOAuthCallback\", () => {\n  it(\"turns provider access denial callback params into a known error\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/oauth-callback?error=access_denied&error_description=User+cancelled\");\n\n    await expect(callOAuthCallback(createTestInterface(), \"/handler/oauth-callback\"))\n      .rejects.toSatisfy((error: unknown) => KnownErrors.OAuthProviderAccessDenied.isInstance(error));\n    expect(window.location.href).toBe(\"http://localhost:3000/handler/oauth-callback\");\n  });\n\n  it(\"turns generic provider error callback params into a known error\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/oauth-callback?error=server_error&error_description=Provider+failed\");\n\n    await expect(callOAuthCallback(createTestInterface(), \"/handler/oauth-callback\"))\n      .rejects.toSatisfy((error: unknown) => KnownErrors.OAuthProviderTemporarilyUnavailable.isInstance(error));\n    expect(window.location.href).toBe(\"http://localhost:3000/handler/oauth-callback\");\n  });\n});\n"],"mappings":";;;;;;;AAUAA,UAAG,KAAK,YAAY,OAAO,mBAAmB;AAE5C,QAAO;EACL,GAFa,MAAM,gBAA2C;EAG9D,sBAAsB,aAAa;GACjC,eAAe;GACf,OAAO;GACR;EACF;EACD;AAEF,SAAS,sBAAsB;AAC7B,QAAO,IAAIC,yCAAwB;EACjC,eAAe;EACf,kBAAkB;EAClB,kBAAkB,CAAC,0BAA0B;EAC7C,qBAAqB,EAAE;EACvB,WAAW;EACX,sBAAsB;EACvB,CAAC;;qBAGK,uCAAuC;AAC9C,gBAAG,uDAAuD,YAAY;AACpE,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,4CAA4C;EAEhF,MAAM,QAAQ,qBAAqB;EAGnC,MAAM,WAAW,mDACf,OACA;GACE,UAAU;GACV,aAAa;GACb,kBAAkB;GAClB,eAAe;GAChB,EATa,MAAM,cAAc;GAAE,cAAc;GAAM,aAAa;GAAM,CAAC,CAW7E;EAED,MAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,qBAAO,GAAG,IAAI,SAAS,IAAI,WAAW,CAAC,KAAK,6DAA6D;AACzG,qBAAO,OAAO,YAAY,IAAI,aAAa,SAAS,CAAC,CAAC,CAAC,sBAAsB;;;;;;;;;;;;;;;;MAgB3E;GACF;EACF;qBAEO,2BAA2B;AAClC,gBAAG,mEAAmE,YAAY;AAChF,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,+EAA+E;AAEnH,4DAA+B,qBAAqB,EAAE,0BAA0B,CAAC,CAC9E,QAAQ,WAAW,UAAmBC,6BAAY,0BAA0B,WAAW,MAAM,CAAC;AACjG,qBAAO,OAAO,SAAS,KAAK,CAAC,KAAK,+CAA+C;GACjF;AAEF,gBAAG,mEAAmE,YAAY;AAChF,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,+EAA+E;AAEnH,4DAA+B,qBAAqB,EAAE,0BAA0B,CAAC,CAC9E,QAAQ,WAAW,UAAmBA,6BAAY,oCAAoC,WAAW,MAAM,CAAC;AAC3G,qBAAO,OAAO,SAAS,KAAK,CAAC,KAAK,+CAA+C;GACjF;EACF"}
+{"version":3,"file":"auth.test.js","names":["vi","HexclaveClientInterface","KnownErrors"],"sources":["../../src/lib/auth.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { HexclaveClientInterface, KnownErrors } from \"@hexclave/shared\";\nimport { describe, expect, it, vi } from \"vitest\";\nimport { callOAuthCallback, getNewOAuthProviderOrScopeUrl } from \"./auth\";\n\nvi.mock(\"./cookie\", async (importOriginal) => {\n  const actual = await importOriginal<typeof import(\"./cookie\")>();\n  return {\n    ...actual,\n    saveVerifierAndState: async () => ({\n      codeChallenge: \"<stripped code challenge>\",\n      state: \"<stripped state>\",\n    }),\n  };\n});\n\nfunction createTestInterface() {\n  return new HexclaveClientInterface({\n    clientVersion: \"test\",\n    getBaseUrl: () => \"https://api.example.com\",\n    getApiUrls: () => [\"https://api.example.com\"],\n    extraRequestHeaders: {},\n    projectId: \"00000000-0000-4000-8000-000000000000\",\n    publishableClientKey: \"pck_test\",\n  });\n}\n\ndescribe(\"getNewOAuthProviderOrScopeUrl\", () => {\n  it(\"returns the OAuth URL without performing navigation\", async () => {\n    window.history.replaceState({}, \"\", \"/account?after_auth_return_to=%2Fsettings\");\n\n    const iface = createTestInterface();\n    const session = iface.createSession({ refreshToken: null, accessToken: null });\n\n    const location = await getNewOAuthProviderOrScopeUrl(\n      iface,\n      {\n        provider: \"github\",\n        redirectUrl: \"/handler/oauth-callback\",\n        errorRedirectUrl: \"/handler/error\",\n        providerScope: \"repo user\",\n      },\n      session,\n    );\n\n    const url = new URL(location);\n    expect(`${url.origin}${url.pathname}`).toBe(\"https://api.example.com/api/v1/auth/oauth/authorize/github\");\n    expect(Object.fromEntries(url.searchParams.entries())).toMatchInlineSnapshot(`\n      {\n        \"after_callback_redirect_url\": \"http://localhost:3000/account?after_auth_return_to=%2Fsettings\",\n        \"client_id\": \"00000000-0000-4000-8000-000000000000\",\n        \"client_secret\": \"pck_test\",\n        \"code_challenge\": \"<stripped code challenge>\",\n        \"code_challenge_method\": \"S256\",\n        \"error_redirect_url\": \"http://localhost:3000/handler/error?after_auth_return_to=%2Fsettings\",\n        \"grant_type\": \"authorization_code\",\n        \"provider_scope\": \"repo user\",\n        \"redirect_uri\": \"http://localhost:3000/handler/oauth-callback?after_auth_return_to=%2Fsettings\",\n        \"response_type\": \"code\",\n        \"scope\": \"legacy\",\n        \"state\": \"<stripped state>\",\n        \"type\": \"link\",\n      }\n    `);\n  });\n});\n\ndescribe(\"callOAuthCallback\", () => {\n  it(\"turns provider access denial callback params into a known error\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/oauth-callback?error=access_denied&error_description=User+cancelled\");\n\n    await expect(callOAuthCallback(createTestInterface(), \"/handler/oauth-callback\"))\n      .rejects.toSatisfy((error: unknown) => KnownErrors.OAuthProviderAccessDenied.isInstance(error));\n    expect(window.location.href).toBe(\"http://localhost:3000/handler/oauth-callback\");\n  });\n\n  it(\"turns generic provider error callback params into a known error\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/oauth-callback?error=server_error&error_description=Provider+failed\");\n\n    await expect(callOAuthCallback(createTestInterface(), \"/handler/oauth-callback\"))\n      .rejects.toSatisfy((error: unknown) => KnownErrors.OAuthProviderTemporarilyUnavailable.isInstance(error));\n    expect(window.location.href).toBe(\"http://localhost:3000/handler/oauth-callback\");\n  });\n});\n"],"mappings":";;;;;AAUAA,OAAAA,GAAG,KAAK,YAAY,OAAO,mBAAmB;CAE5C,OAAO;EACL,GAAG,MAFgB,eAA0C;EAG7D,sBAAsB,aAAa;GACjC,eAAe;GACf,OAAO;EACT;CACF;AACF,CAAC;AAED,SAAS,sBAAsB;CAC7B,OAAO,IAAIC,iBAAAA,wBAAwB;EACjC,eAAe;EACf,kBAAkB;EAClB,kBAAkB,CAAC,yBAAyB;EAC5C,qBAAqB,CAAC;EACtB,WAAW;EACX,sBAAsB;CACxB,CAAC;AACH;qBAES,uCAAuC;CAC9C,CAAA,GAAA,OAAA,GAAA,CAAG,uDAAuD,YAAY;EACpE,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,2CAA2C;EAE/E,MAAM,QAAQ,oBAAoB;EAGlC,MAAM,WAAW,OAAA,GAAA,UAAA,8BAAA,CACf,OACA;GACE,UAAU;GACV,aAAa;GACb,kBAAkB;GAClB,eAAe;EACjB,GATc,MAAM,cAAc;GAAE,cAAc;GAAM,aAAa;EAAK,CAUpE,CACR;EAEA,MAAM,MAAM,IAAI,IAAI,QAAQ;EAC5B,CAAA,GAAA,OAAA,OAAA,CAAO,GAAG,IAAI,SAAS,IAAI,UAAU,CAAC,CAAC,KAAK,4DAA4D;EACxG,CAAA,GAAA,OAAA,OAAA,CAAO,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC,CAAC,CAAC,sBAAsB;;;;;;;;;;;;;;;;KAgB5E;CACH,CAAC;AACH,CAAC;qBAEQ,2BAA2B;CAClC,CAAA,GAAA,OAAA,GAAA,CAAG,mEAAmE,YAAY;EAChF,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,8EAA8E;EAElH,OAAA,GAAA,OAAA,OAAA,EAAA,GAAA,UAAA,kBAAA,CAA+B,oBAAoB,GAAG,yBAAyB,CAAC,CAAC,CAC9E,QAAQ,WAAW,UAAmBC,iBAAAA,YAAY,0BAA0B,WAAW,KAAK,CAAC;EAChG,CAAA,GAAA,OAAA,OAAA,CAAO,OAAO,SAAS,IAAI,CAAC,CAAC,KAAK,8CAA8C;CAClF,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,mEAAmE,YAAY;EAChF,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,8EAA8E;EAElH,OAAA,GAAA,OAAA,OAAA,EAAA,GAAA,UAAA,kBAAA,CAA+B,oBAAoB,GAAG,yBAAyB,CAAC,CAAC,CAC9E,QAAQ,WAAW,UAAmBA,iBAAAA,YAAY,oCAAoC,WAAW,KAAK,CAAC;EAC1G,CAAA,GAAA,OAAA,OAAA,CAAO,OAAO,SAAS,IAAI,CAAC,CAAC,KAAK,8CAA8C;CAClF,CAAC;AACH,CAAC"}