@hexclave/next 1.0.0

package/dist/lib/auth.test.js

@@ -0,0 +1,60 @@
+const require_chunk = require('../chunk-BE-pF4vm.js');
+let _stackframe_stack_shared = require("@hexclave/shared");
+let vitest = require("vitest");
+let __auth_js = require("./auth.js");
+
+//#region src/lib/auth.test.ts
+// @vitest-environment jsdom
+vitest.vi.mock("./cookie", async (importOriginal) => {
+	return {
+		...await importOriginal(),
+		saveVerifierAndState: async () => ({
+			codeChallenge: "<stripped code challenge>",
+			state: "<stripped state>"
+		})
+	};
+});
+(0, vitest.describe)("getNewOAuthProviderOrScopeUrl", () => {
+	(0, vitest.it)("returns the OAuth URL without performing navigation", async () => {
+		window.history.replaceState({}, "", "/account?after_auth_return_to=%2Fsettings");
+		const iface = new _stackframe_stack_shared.HexclaveClientInterface({
+			clientVersion: "test",
+			getBaseUrl: () => "https://api.example.com",
+			getApiUrls: () => ["https://api.example.com"],
+			extraRequestHeaders: {},
+			projectId: "00000000-0000-4000-8000-000000000000",
+			publishableClientKey: "pck_test"
+		});
+		const location = await (0, __auth_js.getNewOAuthProviderOrScopeUrl)(iface, {
+			provider: "github",
+			redirectUrl: "/handler/oauth-callback",
+			errorRedirectUrl: "/handler/error",
+			providerScope: "repo user"
+		}, iface.createSession({
+			refreshToken: null,
+			accessToken: null
+		}));
+		const url = new URL(location);
+		(0, vitest.expect)(`${url.origin}${url.pathname}`).toBe("https://api.example.com/api/v1/auth/oauth/authorize/github");
+		(0, vitest.expect)(Object.fromEntries(url.searchParams.entries())).toMatchInlineSnapshot(`
+      {
+        "after_callback_redirect_url": "http://localhost:3000/account?after_auth_return_to=%2Fsettings",
+        "client_id": "00000000-0000-4000-8000-000000000000",
+        "client_secret": "pck_test",
+        "code_challenge": "<stripped code challenge>",
+        "code_challenge_method": "S256",
+        "error_redirect_url": "http://localhost:3000/handler/error?after_auth_return_to=%2Fsettings",
+        "grant_type": "authorization_code",
+        "provider_scope": "repo user",
+        "redirect_uri": "http://localhost:3000/handler/oauth-callback?after_auth_return_to=%2Fsettings",
+        "response_type": "code",
+        "scope": "legacy",
+        "state": "<stripped state>",
+        "type": "link",
+      }
+    `);
+	});
+});
+
+//#endregion
+//# sourceMappingURL=auth.test.js.map

package/dist/lib/auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.js","names":["vi","HexclaveClientInterface"],"sources":["../../src/lib/auth.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY, INSTEAD EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { HexclaveClientInterface } from \"@stackframe/stack-shared\";\nimport { describe, expect, it, vi } from \"vitest\";\nimport { getNewOAuthProviderOrScopeUrl } from \"./auth\";\n\nvi.mock(\"./cookie\", async (importOriginal) => {\n  const actual = await importOriginal<typeof import(\"./cookie\")>();\n  return {\n    ...actual,\n    saveVerifierAndState: async () => ({\n      codeChallenge: \"<stripped code challenge>\",\n      state: \"<stripped state>\",\n    }),\n  };\n});\n\ndescribe(\"getNewOAuthProviderOrScopeUrl\", () => {\n  it(\"returns the OAuth URL without performing navigation\", async () => {\n    window.history.replaceState({}, \"\", \"/account?after_auth_return_to=%2Fsettings\");\n\n    const iface = new HexclaveClientInterface({\n      clientVersion: \"test\",\n      getBaseUrl: () => \"https://api.example.com\",\n      getApiUrls: () => [\"https://api.example.com\"],\n      extraRequestHeaders: {},\n      projectId: \"00000000-0000-4000-8000-000000000000\",\n      publishableClientKey: \"pck_test\",\n    });\n    const session = iface.createSession({ refreshToken: null, accessToken: null });\n\n    const location = await getNewOAuthProviderOrScopeUrl(\n      iface,\n      {\n        provider: \"github\",\n        redirectUrl: \"/handler/oauth-callback\",\n        errorRedirectUrl: \"/handler/error\",\n        providerScope: \"repo user\",\n      },\n      session,\n    );\n\n    const url = new URL(location);\n    expect(`${url.origin}${url.pathname}`).toBe(\"https://api.example.com/api/v1/auth/oauth/authorize/github\");\n    expect(Object.fromEntries(url.searchParams.entries())).toMatchInlineSnapshot(`\n      {\n        \"after_callback_redirect_url\": \"http://localhost:3000/account?after_auth_return_to=%2Fsettings\",\n        \"client_id\": \"00000000-0000-4000-8000-000000000000\",\n        \"client_secret\": \"pck_test\",\n        \"code_challenge\": \"<stripped code challenge>\",\n        \"code_challenge_method\": \"S256\",\n        \"error_redirect_url\": \"http://localhost:3000/handler/error?after_auth_return_to=%2Fsettings\",\n        \"grant_type\": \"authorization_code\",\n        \"provider_scope\": \"repo user\",\n        \"redirect_uri\": \"http://localhost:3000/handler/oauth-callback?after_auth_return_to=%2Fsettings\",\n        \"response_type\": \"code\",\n        \"scope\": \"legacy\",\n        \"state\": \"<stripped state>\",\n        \"type\": \"link\",\n      }\n    `);\n  });\n});\n"],"mappings":";;;;;;;AAUAA,UAAG,KAAK,YAAY,OAAO,mBAAmB;AAE5C,QAAO;EACL,GAFa,MAAM,gBAA2C;EAG9D,sBAAsB,aAAa;GACjC,eAAe;GACf,OAAO;GACR;EACF;EACD;qBAEO,uCAAuC;AAC9C,gBAAG,uDAAuD,YAAY;AACpE,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,4CAA4C;EAEhF,MAAM,QAAQ,IAAIC,iDAAwB;GACxC,eAAe;GACf,kBAAkB;GAClB,kBAAkB,CAAC,0BAA0B;GAC7C,qBAAqB,EAAE;GACvB,WAAW;GACX,sBAAsB;GACvB,CAAC;EAGF,MAAM,WAAW,mDACf,OACA;GACE,UAAU;GACV,aAAa;GACb,kBAAkB;GAClB,eAAe;GAChB,EATa,MAAM,cAAc;GAAE,cAAc;GAAM,aAAa;GAAM,CAAC,CAW7E;EAED,MAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,qBAAO,GAAG,IAAI,SAAS,IAAI,WAAW,CAAC,KAAK,6DAA6D;AACzG,qBAAO,OAAO,YAAY,IAAI,aAAa,SAAS,CAAC,CAAC,CAAC,sBAAsB;;;;;;;;;;;;;;;;MAgB3E;GACF;EACF"}

package/dist/lib/cookie.d.ts

@@ -0,0 +1,42 @@
+//#region src/lib/cookie.d.ts
+type SetCookieOptions = {
+  maxAge: number | "session";
+  noOpIfServerComponent?: boolean;
+  domain?: string;
+  secure?: boolean;
+};
+type DeleteCookieOptions = {
+  noOpIfServerComponent?: boolean;
+  domain?: string;
+};
+type CookieHelper = {
+  get: (name: string) => string | null;
+  getAll: () => Record<string, string>;
+  set: (name: string, value: string, options: SetCookieOptions) => void;
+  setOrDelete: (name: string, value: string | null, options: SetCookieOptions & DeleteCookieOptions) => void;
+  delete: (name: string, options: DeleteCookieOptions) => void;
+};
+declare function createPlaceholderCookieHelper(): Promise<CookieHelper>;
+declare function createCookieHelper(): Promise<CookieHelper>;
+declare function createCookieHelperSync(): CookieHelper;
+declare function createBrowserCookieHelper(): CookieHelper;
+declare function getCookieClient(name: string): string | null;
+declare function getAllCookiesClient(): Record<string, string>;
+declare function getCookie(name: string): Promise<string | null>;
+declare function isSecure(): Promise<boolean>;
+declare function setOrDeleteCookieClient(name: string, value: string | null, options: SetCookieOptions & DeleteCookieOptions): void;
+declare function setOrDeleteCookie(name: string, value: string | null, options: SetCookieOptions & DeleteCookieOptions): Promise<void>;
+declare function deleteCookieClient(name: string, options: DeleteCookieOptions): void;
+declare function deleteCookie(name: string, options: DeleteCookieOptions): Promise<void>;
+declare function setCookieClient(name: string, value: string, options: SetCookieOptions): void;
+declare function setCookie(name: string, value: string, options: SetCookieOptions): Promise<void>;
+declare function saveVerifierAndState(): Promise<{
+  codeChallenge: string;
+  state: string;
+}>;
+declare function consumeVerifierAndStateCookie(state: string): {
+  codeVerifier: string;
+} | null;
+//#endregion
+export { CookieHelper, consumeVerifierAndStateCookie, createBrowserCookieHelper, createCookieHelper, createCookieHelperSync, createPlaceholderCookieHelper, deleteCookie, deleteCookieClient, getAllCookiesClient, getCookie, getCookieClient, isSecure, saveVerifierAndState, setCookie, setCookieClient, setOrDeleteCookie, setOrDeleteCookieClient };
+//# sourceMappingURL=cookie.d.ts.map

package/dist/lib/cookie.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.d.ts","names":[],"sources":["../../src/lib/cookie.ts"],"mappings":";KAsEK,gBAAA;EAAqB,MAAA;EAA4B,qBAAA;EAAiC,MAAA;EAAiB,MAAA;AAAA;AAAA,KACnG,mBAAA;EAAwB,qBAAA;EAAiC,MAAA;AAAA;AAAA,KASlD,YAAA;EACV,GAAA,GAAM,IAAA;EACN,MAAA,QAAc,MAAA;EACd,GAAA,GAAM,IAAA,UAAc,KAAA,UAAe,OAAA,EAAS,gBAAA;EAC5C,WAAA,GAAc,IAAA,UAAc,KAAA,iBAAsB,OAAA,EAAS,gBAAA,GAAmB,mBAAA;EAC9E,MAAA,GAAS,IAAA,UAAc,OAAA,EAAS,mBAAA;AAAA;AAAA,iBAIZ,6BAAA,CAAA,GAAiC,OAAA,CAAQ,YAAA;AAAA,iBAuBzC,kBAAA,CAAA,GAAsB,OAAA,CAAQ,YAAA;AAAA,iBAWpC,sBAAA,CAAA,GAA0B,YAAA;AAAA,iBAiB1B,yBAAA,CAAA,GAA6B,YAAA;AAAA,iBAsG7B,eAAA,CAAgB,IAAA;AAAA,iBAKhB,mBAAA,CAAA,GAAuB,MAAA;AAAA,iBASjB,SAAA,CAAU,IAAA,WAAe,OAAA;AAAA,iBAKzB,QAAA,CAAA,GAAY,OAAA;AAAA,iBAgGlB,uBAAA,CAAwB,IAAA,UAAc,KAAA,iBAAsB,OAAA,EAAS,gBAAA,GAAmB,mBAAA;AAAA,iBASlF,iBAAA,CAAkB,IAAA,UAAc,KAAA,iBAAsB,OAAA,EAAS,gBAAA,GAAmB,mBAAA,GAAmB,OAAA;AAAA,iBAK3G,kBAAA,CAAmB,IAAA,UAAc,OAAA,EAAS,mBAAA;AAAA,iBAKpC,YAAA,CAAa,IAAA,UAAc,OAAA,EAAS,mBAAA,GAAmB,OAAA;AAAA,iBAK7D,eAAA,CAAgB,IAAA,UAAc,KAAA,UAAe,OAAA,EAAS,gBAAA;AAAA,iBAKhD,SAAA,CAAU,IAAA,UAAc,KAAA,UAAe,OAAA,EAAS,gBAAA,GAAgB,OAAA;AAAA,iBAKhE,oBAAA,CAAA,GAAoB,OAAA;;;;iBAe1B,6BAAA,CAA8B,KAAA;EAAA,YAAA;AAAA"}

package/dist/lib/cookie.js

@@ -0,0 +1,374 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_chunk = require('../chunk-BE-pF4vm.js');
+let _stackframe_stack_shared_dist_utils_errors = require("@hexclave/shared/dist/utils/errors");
+let _stackframe_stack_sc_force_react_server = require("@hexclave/sc/force-react-server");
+let _stackframe_stack_shared_dist_utils_env = require("@hexclave/shared/dist/utils/env");
+let js_cookie = require("js-cookie");
+js_cookie = require_chunk.__toESM(js_cookie);
+
+//#region ../../node_modules/.pnpm/oauth4webapi@3.8.3/node_modules/oauth4webapi/build/index.js
+let USER_AGENT;
+if (typeof navigator === "undefined" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) USER_AGENT = `oauth4webapi/v3.8.3`;
+const ERR_INVALID_ARG_VALUE = "ERR_INVALID_ARG_VALUE";
+const ERR_INVALID_ARG_TYPE = "ERR_INVALID_ARG_TYPE";
+function CodedTypeError(message, code, cause) {
+	const err = new TypeError(message, { cause });
+	Object.assign(err, { code });
+	return err;
+}
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+function buf(input) {
+	if (typeof input === "string") return encoder.encode(input);
+	return decoder.decode(input);
+}
+let encodeBase64Url;
+if (Uint8Array.prototype.toBase64) encodeBase64Url = (input) => {
+	if (input instanceof ArrayBuffer) input = new Uint8Array(input);
+	return input.toBase64({
+		alphabet: "base64url",
+		omitPadding: true
+	});
+};
+else {
+	const CHUNK_SIZE = 32768;
+	encodeBase64Url = (input) => {
+		if (input instanceof ArrayBuffer) input = new Uint8Array(input);
+		const arr = [];
+		for (let i = 0; i < input.byteLength; i += CHUNK_SIZE) arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));
+		return btoa(arr.join("")).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+	};
+}
+let decodeBase64Url;
+if (Uint8Array.fromBase64) decodeBase64Url = (input) => {
+	try {
+		return Uint8Array.fromBase64(input, { alphabet: "base64url" });
+	} catch (cause) {
+		throw CodedTypeError("The input to be decoded is not correctly encoded.", ERR_INVALID_ARG_VALUE, cause);
+	}
+};
+else decodeBase64Url = (input) => {
+	try {
+		const binary = atob(input.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, ""));
+		const bytes = new Uint8Array(binary.length);
+		for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+		return bytes;
+	} catch (cause) {
+		throw CodedTypeError("The input to be decoded is not correctly encoded.", ERR_INVALID_ARG_VALUE, cause);
+	}
+};
+function b64u(input) {
+	if (typeof input === "string") return decodeBase64Url(input);
+	return encodeBase64Url(input);
+}
+var OperationProcessingError = class extends Error {
+	code;
+	constructor(message, options) {
+		super(message, options);
+		this.name = this.constructor.name;
+		if (options?.code) this.code = options?.code;
+		Error.captureStackTrace?.(this, this.constructor);
+	}
+};
+function OPE(message, code, cause) {
+	return new OperationProcessingError(message, {
+		code,
+		cause
+	});
+}
+function assertString(input, it, code, cause) {
+	try {
+		if (typeof input !== "string") throw CodedTypeError(`${it} must be a string`, ERR_INVALID_ARG_TYPE, cause);
+		if (input.length === 0) throw CodedTypeError(`${it} must not be empty`, ERR_INVALID_ARG_VALUE, cause);
+	} catch (err) {
+		if (code) throw OPE(err.message, code, cause);
+		throw err;
+	}
+}
+function randomBytes() {
+	return b64u(crypto.getRandomValues(new Uint8Array(32)));
+}
+function generateRandomCodeVerifier() {
+	return randomBytes();
+}
+function generateRandomState() {
+	return randomBytes();
+}
+async function calculatePKCECodeChallenge(codeVerifier) {
+	assertString(codeVerifier, "codeVerifier");
+	return b64u(await crypto.subtle.digest("SHA-256", buf(codeVerifier)));
+}
+const URLParse = URL.parse ? (url, base) => URL.parse(url, base) : (url, base) => {
+	try {
+		return new URL(url, base);
+	} catch {
+		return null;
+	}
+};
+const tokenMatch = "[a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+";
+const token68Match = "[a-zA-Z0-9\\-\\._\\~\\+\\/]+={0,2}";
+const quotedParamMatcher = "(" + tokenMatch + ")\\s*=\\s*\"((?:[^\"\\\\]|\\\\[\\s\\S])*)\"";
+const paramMatcher = "(" + tokenMatch + ")\\s*=\\s*([a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+)";
+const schemeRE = new RegExp("^[,\\s]*(" + tokenMatch + ")");
+const quotedParamRE = new RegExp("^[,\\s]*" + quotedParamMatcher + "[,\\s]*(.*)");
+const unquotedParamRE = new RegExp("^[,\\s]*" + paramMatcher + "[,\\s]*(.*)");
+const token68ParamRE = new RegExp("^(" + token68Match + ")(?:$|[,\\s])(.*)");
+
+//#endregion
+//#region src/lib/cookie.ts
+function ensureClient() {
+	if (!(0, _stackframe_stack_shared_dist_utils_env.isBrowserLike)()) throw new Error("cookieClient functions can only be called in a browser environment, yet window is undefined");
+}
+async function createPlaceholderCookieHelper() {
+	function throwError() {
+		throw new _stackframe_stack_shared_dist_utils_errors.HexclaveAssertionError("Throwing cookie helper is just a placeholder. This should never be called");
+	}
+	return {
+		get: throwError,
+		getAll: throwError,
+		set: throwError,
+		setOrDelete: throwError,
+		delete: throwError
+	};
+}
+function requiresSecureAttribute(name) {
+	return name.startsWith("__Host-");
+}
+function validateCookieOptions(name, options) {
+	if (requiresSecureAttribute(name) && options.domain !== void 0) throw new _stackframe_stack_shared_dist_utils_errors.HexclaveAssertionError("__Host- cookies must not specify a Domain attribute");
+}
+async function createCookieHelper() {
+	if ((0, _stackframe_stack_shared_dist_utils_env.isBrowserLike)()) return createBrowserCookieHelper();
+	else return createNextCookieHelper(await (0, _stackframe_stack_sc_force_react_server.cookies)(), await (0, _stackframe_stack_sc_force_react_server.headers)());
+}
+function createCookieHelperSync() {
+	if ((0, _stackframe_stack_shared_dist_utils_env.isBrowserLike)()) return createBrowserCookieHelper();
+	function throwError() {
+		throw new _stackframe_stack_shared_dist_utils_errors.HexclaveAssertionError("Synchronous server cookie helpers are not available on this platform");
+	}
+	return {
+		get: throwError,
+		getAll: throwError,
+		set: throwError,
+		setOrDelete: throwError,
+		delete: throwError
+	};
+}
+function createBrowserCookieHelper() {
+	return {
+		get: getCookieClient,
+		getAll: getAllCookiesClient,
+		set: setCookieClient,
+		setOrDelete: setOrDeleteCookieClient,
+		delete: deleteCookieClient
+	};
+}
+function handleCookieError(e, options) {
+	if (e instanceof Error && e.message.includes("Cookies can only be modified in")) if (options.noOpIfServerComponent) {} else throw new _stackframe_stack_shared_dist_utils_errors.HexclaveAssertionError("Attempted to set cookie in server component. Pass { noOpIfServerComponent: true } in the options of Stack's cookie functions if this is intentional and you want to ignore this error. Read more: https://nextjs.org/docs/app/api-reference/functions/cookies#options");
+	else throw e;
+}
+function createNextCookieHelper(rscCookiesAwaited, rscHeadersAwaited) {
+	const cookieHelper = {
+		get: (name) => {
+			return cookieHelper.getAll()[name] ?? null;
+		},
+		getAll: () => {
+			try {
+				rscCookiesAwaited.set("hexclave-is-https", "true", {
+					secure: true,
+					expires: new Date(Date.now() + 1e3 * 60 * 60 * 24 * 365)
+				});
+				rscCookiesAwaited.set("stack-is-https", "true", {
+					secure: true,
+					expires: new Date(Date.now() + 1e3 * 60 * 60 * 24 * 365)
+				});
+			} catch (e) {
+				if (typeof e === "object" && e !== null && "message" in e && typeof e.message === "string" && e.message.includes("Cookies can only be modified in a Server Action or Route Handler")) {} else throw e;
+			}
+			return rscCookiesAwaited.getAll().reduce((acc, entry) => {
+				acc[entry.name] = entry.value;
+				return acc;
+			}, {});
+		},
+		set: (name, value, options) => {
+			validateCookieOptions(name, options);
+			const isSecureCookie = determineSecureFromServerContext(rscCookiesAwaited, rscHeadersAwaited);
+			try {
+				rscCookiesAwaited.set(name, value, {
+					secure: requiresSecureAttribute(name) || isSecureCookie,
+					maxAge: options.maxAge === "session" ? void 0 : options.maxAge,
+					domain: options.domain,
+					sameSite: "lax",
+					path: "/"
+				});
+			} catch (e) {
+				handleCookieError(e, options);
+			}
+		},
+		setOrDelete(name, value, options) {
+			if (value === null) this.delete(name, options);
+			else this.set(name, value, options);
+		},
+		delete(name, options) {
+			try {
+				validateCookieOptions(name, options);
+				if (options.domain !== void 0) rscCookiesAwaited.delete({
+					name,
+					domain: options.domain,
+					path: "/"
+				});
+				else rscCookiesAwaited.delete({
+					name,
+					path: "/"
+				});
+			} catch (e) {
+				handleCookieError(e, options);
+			}
+		}
+	};
+	return cookieHelper;
+}
+function getCookieClient(name) {
+	return getAllCookiesClient()[name] ?? null;
+}
+function getAllCookiesClient() {
+	ensureClient();
+	js_cookie.default.set("hexclave-is-https", "true", {
+		secure: true,
+		expires: new Date(Date.now() + 1e3 * 60 * 60 * 24 * 365)
+	});
+	js_cookie.default.set("stack-is-https", "true", {
+		secure: true,
+		expires: new Date(Date.now() + 1e3 * 60 * 60 * 24 * 365)
+	});
+	return js_cookie.default.get();
+}
+async function getCookie(name) {
+	return (await createCookieHelper()).get(name);
+}
+async function isSecure() {
+	if ((0, _stackframe_stack_shared_dist_utils_env.isBrowserLike)()) return determineSecureFromClientContext();
+	return determineSecureFromServerContext(await (0, _stackframe_stack_sc_force_react_server.cookies)(), await (0, _stackframe_stack_sc_force_react_server.headers)());
+}
+function determineSecureFromClientContext() {
+	return typeof window !== "undefined" && window.location.protocol === "https:";
+}
+function determineSecureFromServerContext(cookies, headers) {
+	return cookies.has("hexclave-is-https") || cookies.has("stack-is-https") || headers.get("x-forwarded-proto") === "https";
+}
+let _shouldSetPartitionedClientCache = void 0;
+function shouldSetPartitionedClient() {
+	return _shouldSetPartitionedClientCache ??= _internalShouldSetPartitionedClient();
+}
+function _internalShouldSetPartitionedClient() {
+	ensureClient();
+	if (!determineSecureFromClientContext()) return false;
+	const cookie1Name = "__Host-stack-temporary-chips-test-" + Math.random().toString(36).substring(2, 15);
+	document.cookie = `${cookie1Name}=value1; Secure; path=/`;
+	const cookies1 = document.cookie.split("; ");
+	document.cookie = `${cookie1Name}=delete1; Secure; path=/; expires=Thu, 01 Jan 1970 00:00:00 UTC;`;
+	if (cookies1.some((c) => c.startsWith(cookie1Name + "="))) return false;
+	const cookie2Name = "__Host-stack-temporary-chips-test-" + Math.random().toString(36).substring(2, 15);
+	document.cookie = `${cookie2Name}=delete1; Secure; SameSite=None; Partitioned; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/`;
+	document.cookie = `${cookie2Name}=delete2; Secure; SameSite=None; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/`;
+	document.cookie = `${cookie2Name}=set1; Secure; SameSite=None; Partitioned; path=/`;
+	document.cookie = `${cookie2Name}=set2; Secure; SameSite=None; path=/`;
+	const numberOfCookiesWithThisName = document.cookie.split("; ").filter((c) => c.startsWith(cookie2Name + "=")).length;
+	document.cookie = `${cookie2Name}=delete3; Secure; SameSite=None; Partitioned; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/`;
+	document.cookie = `${cookie2Name}=delete4; Secure; SameSite=None; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/`;
+	return numberOfCookiesWithThisName === 2;
+}
+function setCookieClientInternal(name, value, options) {
+	validateCookieOptions(name, options);
+	const secure = requiresSecureAttribute(name) || (options.secure ?? determineSecureFromClientContext());
+	const partitioned = shouldSetPartitionedClient();
+	js_cookie.default.set(name, value, {
+		expires: options.maxAge === "session" ? void 0 : new Date(Date.now() + options.maxAge * 1e3),
+		domain: options.domain,
+		secure,
+		path: "/",
+		sameSite: "Lax",
+		...partitioned ? {
+			partitioned,
+			sameSite: "None"
+		} : {}
+	});
+}
+function deleteCookieClientInternal(name, options) {
+	validateCookieOptions(name, options);
+	for (const partitioned of [true, false]) {
+		if (options.domain !== void 0) js_cookie.default.remove(name, {
+			domain: options.domain,
+			secure: determineSecureFromClientContext(),
+			partitioned,
+			path: "/"
+		});
+		js_cookie.default.remove(name, {
+			secure: requiresSecureAttribute(name) || determineSecureFromClientContext(),
+			partitioned,
+			path: "/"
+		});
+	}
+}
+function setOrDeleteCookieClient(name, value, options) {
+	ensureClient();
+	if (value === null) deleteCookieClientInternal(name, options);
+	else setCookieClientInternal(name, value, options);
+}
+async function setOrDeleteCookie(name, value, options) {
+	(await createCookieHelper()).setOrDelete(name, value, options);
+}
+function deleteCookieClient(name, options) {
+	ensureClient();
+	deleteCookieClientInternal(name, options);
+}
+async function deleteCookie(name, options) {
+	(await createCookieHelper()).delete(name, options);
+}
+function setCookieClient(name, value, options) {
+	ensureClient();
+	setCookieClientInternal(name, value, options);
+}
+async function setCookie(name, value, options) {
+	(await createCookieHelper()).set(name, value, options);
+}
+async function saveVerifierAndState() {
+	const codeVerifier = generateRandomCodeVerifier();
+	const codeChallenge = await calculatePKCECodeChallenge(codeVerifier);
+	const state = generateRandomState();
+	await setCookie("hexclave-oauth-outer-" + state, codeVerifier, { maxAge: 3600 });
+	await setCookie("stack-oauth-outer-" + state, codeVerifier, { maxAge: 3600 });
+	return {
+		codeChallenge,
+		state
+	};
+}
+function consumeVerifierAndStateCookie(state) {
+	ensureClient();
+	const hexclaveCookieName = "hexclave-oauth-outer-" + state;
+	const stackCookieName = "stack-oauth-outer-" + state;
+	const codeVerifier = getCookieClient(hexclaveCookieName) ?? getCookieClient(stackCookieName);
+	if (!codeVerifier) return null;
+	deleteCookieClient(hexclaveCookieName, {});
+	deleteCookieClient(stackCookieName, {});
+	return { codeVerifier };
+}
+
+//#endregion
+exports.consumeVerifierAndStateCookie = consumeVerifierAndStateCookie;
+exports.createBrowserCookieHelper = createBrowserCookieHelper;
+exports.createCookieHelper = createCookieHelper;
+exports.createCookieHelperSync = createCookieHelperSync;
+exports.createPlaceholderCookieHelper = createPlaceholderCookieHelper;
+exports.deleteCookie = deleteCookie;
+exports.deleteCookieClient = deleteCookieClient;
+exports.getAllCookiesClient = getAllCookiesClient;
+exports.getCookie = getCookie;
+exports.getCookieClient = getCookieClient;
+exports.isSecure = isSecure;
+exports.saveVerifierAndState = saveVerifierAndState;
+exports.setCookie = setCookie;
+exports.setCookieClient = setCookieClient;
+exports.setOrDeleteCookie = setOrDeleteCookie;
+exports.setOrDeleteCookieClient = setOrDeleteCookieClient;
+//# sourceMappingURL=cookie.js.map