@hexclave/next 1.0.41 → 1.0.43

package/dist/esm/global.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"global.d.ts","names":["_0","Record","global","ImportMeta","env","sideEffect"],"sources":["../../src/global.d.ts"],"mappings":";QAMQE,MAAAA;EAAAA;EAAAA,UAEIC,UAAAA;IAAAA,SACCC,GAAAA,GAAMH,MAAAA;EAAAA;AAAAA"}
+{"version":3,"file":"global.d.ts","names":["global","ImportMeta","env","Record"],"sources":["../../src/global.d.ts"],"mappings":";QAMQA,MAAAA;EAAAA;EAAAA,UAEIC,UAAAA;IAAAA,SACCC,GAAAA,GAAM,MAAM;EAAA;AAAA"}

package/dist/esm/in-page-ui/base-styles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-styles.d.ts","names":[],"sources":["../../../src/in-page-ui/base-styles.ts"],"mappings":";iBAUgB,kBAAA,CAAmB,aAAA"}
+{"version":3,"file":"base-styles.d.ts","names":[],"sources":["../../../src/in-page-ui/base-styles.ts"],"mappings":";iBAUgB,kBAAA,CAAmB,aAAqB"}

package/dist/esm/in-page-ui/base-styles.js

@@ -160,7 +160,7 @@ function getInPageUiBaseCSS(scopeSelector) {
   }
 `;
 }
-
 //#endregion
 export { getInPageUiBaseCSS };
+
 //# sourceMappingURL=base-styles.js.map

package/dist/esm/in-page-ui/base-styles.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-styles.js","names":[],"sources":["../../../src/in-page-ui/base-styles.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// Shared design tokens + base reset for Hexclave's in-page UIs (the dev tool\n// and the standalone clickmap overlay). Each feature passes its own scope\n// selector so the two stylesheets never collide, while the tokens stay defined\n// in exactly one place. This module deliberately lives outside both feature\n// folders so either feature can be removed without affecting the other.\n\nexport function getInPageUiBaseCSS(scopeSelector: string): string {\n  return `\n  ${scopeSelector} {\n    --sdt-bg: #0a0a0b;\n    --sdt-bg-elevated: #141416;\n    --sdt-bg-hover: #1c1c1f;\n    --sdt-bg-active: #232326;\n    --sdt-bg-subtle: #111113;\n    --sdt-border: #2a2a2e;\n    --sdt-border-subtle: #1e1e22;\n    --sdt-text: #ececef;\n    --sdt-text-secondary: #8b8b93;\n    --sdt-text-tertiary: #5c5c66;\n    --sdt-accent: #6366f1;\n    --sdt-accent-hover: #818cf8;\n    --sdt-accent-muted: rgba(99, 102, 241, 0.15);\n    --sdt-success: #22c55e;\n    --sdt-success-muted: rgba(34, 197, 94, 0.15);\n    --sdt-warning: #eab308;\n    --sdt-warning-muted: rgba(234, 179, 8, 0.15);\n    --sdt-error: #ef4444;\n    --sdt-error-muted: rgba(239, 68, 68, 0.15);\n    --sdt-info: #3b82f6;\n    --sdt-info-muted: rgba(59, 130, 246, 0.15);\n    --sdt-overlay-bg: rgba(17, 17, 19, 0.92);\n    --sdt-radius: 8px;\n    --sdt-radius-sm: 4px;\n    --sdt-radius-lg: 12px;\n    --sdt-font: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;\n    --sdt-font-mono: 'SF Mono', SFMono-Regular, ui-monospace, 'DejaVu Sans Mono', Menlo, Consolas, monospace;\n    --sdt-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.5), 0 0 0 1px rgba(255, 255, 255, 0.05);\n    --sdt-trigger-shadow: 0 4px 12px rgba(0, 0, 0, 0.4), 0 0 0 1px rgba(255, 255, 255, 0.08);\n\n    all: initial;\n    font-family: var(--sdt-font);\n    color: var(--sdt-text);\n    font-size: 13px;\n    line-height: 1.5;\n    -webkit-font-smoothing: antialiased;\n    -moz-osx-font-smoothing: grayscale;\n    box-sizing: border-box;\n  }\n\n  ${scopeSelector} *, ${scopeSelector} *::before, ${scopeSelector} *::after {\n    box-sizing: border-box;\n  }\n\n  /* Thin, unobtrusive scrollbars for every scroll container */\n  ${scopeSelector} * {\n    scrollbar-width: thin;\n    scrollbar-color: var(--sdt-border) transparent;\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar {\n    width: 6px;\n    height: 6px;\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar-track {\n    background: transparent;\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar-thumb {\n    background: var(--sdt-border);\n    border-radius: 3px;\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar-thumb:hover {\n    background: var(--sdt-text-tertiary);\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar-corner {\n    background: transparent;\n  }\n\n  /* --- Light theme: system preference fallback --- */\n  @media (prefers-color-scheme: light) {\n    ${scopeSelector} {\n      --sdt-bg: #ffffff;\n      --sdt-bg-elevated: #f8f8fa;\n      --sdt-bg-hover: #f0f0f3;\n      --sdt-bg-active: #e8e8ec;\n      --sdt-bg-subtle: #fafafa;\n      --sdt-border: #e0e0e5;\n      --sdt-border-subtle: #eaeaef;\n      --sdt-text: #111113;\n      --sdt-text-secondary: #6b6b73;\n      --sdt-text-tertiary: #9b9ba3;\n      --sdt-accent: #6366f1;\n      --sdt-accent-hover: #4f46e5;\n      --sdt-accent-muted: rgba(99, 102, 241, 0.1);\n      --sdt-success: #16a34a;\n      --sdt-success-muted: rgba(22, 163, 74, 0.1);\n      --sdt-warning: #ca8a04;\n      --sdt-warning-muted: rgba(202, 138, 4, 0.1);\n      --sdt-error: #dc2626;\n      --sdt-error-muted: rgba(220, 38, 38, 0.1);\n      --sdt-info: #2563eb;\n      --sdt-info-muted: rgba(37, 99, 235, 0.1);\n      --sdt-overlay-bg: rgba(255, 255, 255, 0.92);\n      --sdt-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.12), 0 0 0 1px rgba(0, 0, 0, 0.06);\n      --sdt-trigger-shadow: 0 4px 12px rgba(0, 0, 0, 0.08), 0 0 0 1px rgba(0, 0, 0, 0.06);\n    }\n  }\n\n  /* --- Stack theme explicit overrides (take priority over system preference) --- */\n  html:has(head > [data-stack-theme=\"light\"]) ${scopeSelector} {\n    --sdt-bg: #ffffff;\n    --sdt-bg-elevated: #f8f8fa;\n    --sdt-bg-hover: #f0f0f3;\n    --sdt-bg-active: #e8e8ec;\n    --sdt-bg-subtle: #fafafa;\n    --sdt-border: #e0e0e5;\n    --sdt-border-subtle: #eaeaef;\n    --sdt-text: #111113;\n    --sdt-text-secondary: #6b6b73;\n    --sdt-text-tertiary: #9b9ba3;\n    --sdt-accent: #6366f1;\n    --sdt-accent-hover: #4f46e5;\n    --sdt-accent-muted: rgba(99, 102, 241, 0.1);\n    --sdt-success: #16a34a;\n    --sdt-success-muted: rgba(22, 163, 74, 0.1);\n    --sdt-warning: #ca8a04;\n    --sdt-warning-muted: rgba(202, 138, 4, 0.1);\n    --sdt-error: #dc2626;\n    --sdt-error-muted: rgba(220, 38, 38, 0.1);\n    --sdt-info: #2563eb;\n    --sdt-info-muted: rgba(37, 99, 235, 0.1);\n    --sdt-overlay-bg: rgba(255, 255, 255, 0.92);\n    --sdt-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.12), 0 0 0 1px rgba(0, 0, 0, 0.06);\n    --sdt-trigger-shadow: 0 4px 12px rgba(0, 0, 0, 0.08), 0 0 0 1px rgba(0, 0, 0, 0.06);\n  }\n\n  html:has(head > [data-stack-theme=\"dark\"]) ${scopeSelector} {\n    --sdt-bg: #0a0a0b;\n    --sdt-bg-elevated: #141416;\n    --sdt-bg-hover: #1c1c1f;\n    --sdt-bg-active: #232326;\n    --sdt-bg-subtle: #111113;\n    --sdt-border: #2a2a2e;\n    --sdt-border-subtle: #1e1e22;\n    --sdt-text: #ececef;\n    --sdt-text-secondary: #8b8b93;\n    --sdt-text-tertiary: #5c5c66;\n    --sdt-accent: #6366f1;\n    --sdt-accent-hover: #818cf8;\n    --sdt-accent-muted: rgba(99, 102, 241, 0.15);\n    --sdt-success: #22c55e;\n    --sdt-success-muted: rgba(34, 197, 94, 0.15);\n    --sdt-warning: #eab308;\n    --sdt-warning-muted: rgba(234, 179, 8, 0.15);\n    --sdt-error: #ef4444;\n    --sdt-error-muted: rgba(239, 68, 68, 0.15);\n    --sdt-info: #3b82f6;\n    --sdt-info-muted: rgba(59, 130, 246, 0.15);\n    --sdt-overlay-bg: rgba(17, 17, 19, 0.92);\n    --sdt-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.5), 0 0 0 1px rgba(255, 255, 255, 0.05);\n    --sdt-trigger-shadow: 0 4px 12px rgba(0, 0, 0, 0.4), 0 0 0 1px rgba(255, 255, 255, 0.08);\n  }\n`;\n}\n"],"mappings":";AAUA,SAAgB,mBAAmB,eAA+B;AAChE,QAAO;IACL,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyCd,cAAc,MAAM,cAAc,cAAc,cAAc;;;;;IAK9D,cAAc;;;;;IAKd,cAAc;;;;;IAKd,cAAc;;;;IAId,cAAc;;;;;IAKd,cAAc;;;;IAId,cAAc;;;;;;MAMZ,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gDA6B4B,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;+CA2Bf,cAAc"}
+{"version":3,"file":"base-styles.js","names":[],"sources":["../../../src/in-page-ui/base-styles.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// Shared design tokens + base reset for Hexclave's in-page UIs (the dev tool\n// and the standalone clickmap overlay). Each feature passes its own scope\n// selector so the two stylesheets never collide, while the tokens stay defined\n// in exactly one place. This module deliberately lives outside both feature\n// folders so either feature can be removed without affecting the other.\n\nexport function getInPageUiBaseCSS(scopeSelector: string): string {\n  return `\n  ${scopeSelector} {\n    --sdt-bg: #0a0a0b;\n    --sdt-bg-elevated: #141416;\n    --sdt-bg-hover: #1c1c1f;\n    --sdt-bg-active: #232326;\n    --sdt-bg-subtle: #111113;\n    --sdt-border: #2a2a2e;\n    --sdt-border-subtle: #1e1e22;\n    --sdt-text: #ececef;\n    --sdt-text-secondary: #8b8b93;\n    --sdt-text-tertiary: #5c5c66;\n    --sdt-accent: #6366f1;\n    --sdt-accent-hover: #818cf8;\n    --sdt-accent-muted: rgba(99, 102, 241, 0.15);\n    --sdt-success: #22c55e;\n    --sdt-success-muted: rgba(34, 197, 94, 0.15);\n    --sdt-warning: #eab308;\n    --sdt-warning-muted: rgba(234, 179, 8, 0.15);\n    --sdt-error: #ef4444;\n    --sdt-error-muted: rgba(239, 68, 68, 0.15);\n    --sdt-info: #3b82f6;\n    --sdt-info-muted: rgba(59, 130, 246, 0.15);\n    --sdt-overlay-bg: rgba(17, 17, 19, 0.92);\n    --sdt-radius: 8px;\n    --sdt-radius-sm: 4px;\n    --sdt-radius-lg: 12px;\n    --sdt-font: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;\n    --sdt-font-mono: 'SF Mono', SFMono-Regular, ui-monospace, 'DejaVu Sans Mono', Menlo, Consolas, monospace;\n    --sdt-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.5), 0 0 0 1px rgba(255, 255, 255, 0.05);\n    --sdt-trigger-shadow: 0 4px 12px rgba(0, 0, 0, 0.4), 0 0 0 1px rgba(255, 255, 255, 0.08);\n\n    all: initial;\n    font-family: var(--sdt-font);\n    color: var(--sdt-text);\n    font-size: 13px;\n    line-height: 1.5;\n    -webkit-font-smoothing: antialiased;\n    -moz-osx-font-smoothing: grayscale;\n    box-sizing: border-box;\n  }\n\n  ${scopeSelector} *, ${scopeSelector} *::before, ${scopeSelector} *::after {\n    box-sizing: border-box;\n  }\n\n  /* Thin, unobtrusive scrollbars for every scroll container */\n  ${scopeSelector} * {\n    scrollbar-width: thin;\n    scrollbar-color: var(--sdt-border) transparent;\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar {\n    width: 6px;\n    height: 6px;\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar-track {\n    background: transparent;\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar-thumb {\n    background: var(--sdt-border);\n    border-radius: 3px;\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar-thumb:hover {\n    background: var(--sdt-text-tertiary);\n  }\n\n  ${scopeSelector} *::-webkit-scrollbar-corner {\n    background: transparent;\n  }\n\n  /* --- Light theme: system preference fallback --- */\n  @media (prefers-color-scheme: light) {\n    ${scopeSelector} {\n      --sdt-bg: #ffffff;\n      --sdt-bg-elevated: #f8f8fa;\n      --sdt-bg-hover: #f0f0f3;\n      --sdt-bg-active: #e8e8ec;\n      --sdt-bg-subtle: #fafafa;\n      --sdt-border: #e0e0e5;\n      --sdt-border-subtle: #eaeaef;\n      --sdt-text: #111113;\n      --sdt-text-secondary: #6b6b73;\n      --sdt-text-tertiary: #9b9ba3;\n      --sdt-accent: #6366f1;\n      --sdt-accent-hover: #4f46e5;\n      --sdt-accent-muted: rgba(99, 102, 241, 0.1);\n      --sdt-success: #16a34a;\n      --sdt-success-muted: rgba(22, 163, 74, 0.1);\n      --sdt-warning: #ca8a04;\n      --sdt-warning-muted: rgba(202, 138, 4, 0.1);\n      --sdt-error: #dc2626;\n      --sdt-error-muted: rgba(220, 38, 38, 0.1);\n      --sdt-info: #2563eb;\n      --sdt-info-muted: rgba(37, 99, 235, 0.1);\n      --sdt-overlay-bg: rgba(255, 255, 255, 0.92);\n      --sdt-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.12), 0 0 0 1px rgba(0, 0, 0, 0.06);\n      --sdt-trigger-shadow: 0 4px 12px rgba(0, 0, 0, 0.08), 0 0 0 1px rgba(0, 0, 0, 0.06);\n    }\n  }\n\n  /* --- Stack theme explicit overrides (take priority over system preference) --- */\n  html:has(head > [data-stack-theme=\"light\"]) ${scopeSelector} {\n    --sdt-bg: #ffffff;\n    --sdt-bg-elevated: #f8f8fa;\n    --sdt-bg-hover: #f0f0f3;\n    --sdt-bg-active: #e8e8ec;\n    --sdt-bg-subtle: #fafafa;\n    --sdt-border: #e0e0e5;\n    --sdt-border-subtle: #eaeaef;\n    --sdt-text: #111113;\n    --sdt-text-secondary: #6b6b73;\n    --sdt-text-tertiary: #9b9ba3;\n    --sdt-accent: #6366f1;\n    --sdt-accent-hover: #4f46e5;\n    --sdt-accent-muted: rgba(99, 102, 241, 0.1);\n    --sdt-success: #16a34a;\n    --sdt-success-muted: rgba(22, 163, 74, 0.1);\n    --sdt-warning: #ca8a04;\n    --sdt-warning-muted: rgba(202, 138, 4, 0.1);\n    --sdt-error: #dc2626;\n    --sdt-error-muted: rgba(220, 38, 38, 0.1);\n    --sdt-info: #2563eb;\n    --sdt-info-muted: rgba(37, 99, 235, 0.1);\n    --sdt-overlay-bg: rgba(255, 255, 255, 0.92);\n    --sdt-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.12), 0 0 0 1px rgba(0, 0, 0, 0.06);\n    --sdt-trigger-shadow: 0 4px 12px rgba(0, 0, 0, 0.08), 0 0 0 1px rgba(0, 0, 0, 0.06);\n  }\n\n  html:has(head > [data-stack-theme=\"dark\"]) ${scopeSelector} {\n    --sdt-bg: #0a0a0b;\n    --sdt-bg-elevated: #141416;\n    --sdt-bg-hover: #1c1c1f;\n    --sdt-bg-active: #232326;\n    --sdt-bg-subtle: #111113;\n    --sdt-border: #2a2a2e;\n    --sdt-border-subtle: #1e1e22;\n    --sdt-text: #ececef;\n    --sdt-text-secondary: #8b8b93;\n    --sdt-text-tertiary: #5c5c66;\n    --sdt-accent: #6366f1;\n    --sdt-accent-hover: #818cf8;\n    --sdt-accent-muted: rgba(99, 102, 241, 0.15);\n    --sdt-success: #22c55e;\n    --sdt-success-muted: rgba(34, 197, 94, 0.15);\n    --sdt-warning: #eab308;\n    --sdt-warning-muted: rgba(234, 179, 8, 0.15);\n    --sdt-error: #ef4444;\n    --sdt-error-muted: rgba(239, 68, 68, 0.15);\n    --sdt-info: #3b82f6;\n    --sdt-info-muted: rgba(59, 130, 246, 0.15);\n    --sdt-overlay-bg: rgba(17, 17, 19, 0.92);\n    --sdt-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.5), 0 0 0 1px rgba(255, 255, 255, 0.05);\n    --sdt-trigger-shadow: 0 4px 12px rgba(0, 0, 0, 0.4), 0 0 0 1px rgba(255, 255, 255, 0.08);\n  }\n`;\n}\n"],"mappings":";AAUA,SAAgB,mBAAmB,eAA+B;CAChE,OAAO;IACL,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyCd,cAAc,MAAM,cAAc,cAAc,cAAc;;;;;IAK9D,cAAc;;;;;IAKd,cAAc;;;;;IAKd,cAAc;;;;IAId,cAAc;;;;;IAKd,cAAc;;;;IAId,cAAc;;;;;;MAMZ,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gDA6B4B,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;+CA2Bf,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2B7D"}

package/dist/esm/in-page-ui/dom.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dom.d.ts","names":[],"sources":["../../../src/in-page-ui/dom.ts"],"mappings":";iBAQgB,CAAA,iBAAkB,qBAAA,CAAA,CAChC,GAAA,EAAK,CAAA,EACL,KAAA,GAAQ,MAAA,yBACL,QAAA,YAAoB,IAAA,yBACtB,qBAAA,CAAsB,CAAA;AAAA,iBAuBT,OAAA,CAAQ,EAAA,EAAI,WAAA,EAAa,IAAA;AAAA,iBAIzB,cAAA,CAAe,KAAA,YAAiB,KAAA;EAAW,WAAA,CAAY,IAAA,EAAM,IAAA;AAAA;AAAA,iBAI7D,eAAA,CAAA;AAAA,KAeJ,gBAAA;EACV,OAAA;AAAA;AAAA,iBAOc,mBAAA,CAAoB,GAAA,WAAc,gBAAA;AAAA,iBAMlC,mBAAA,CAAoB,GAAA,UAAa,QAAA,EAAU,gBAAA"}
+{"version":3,"file":"dom.d.ts","names":[],"sources":["../../../src/in-page-ui/dom.ts"],"mappings":";iBAQgB,CAAA,iBAAkB,qBAAA,EAChC,GAAA,EAAK,CAAA,EACL,KAAA,GAAQ,MAAA,yBACL,QAAA,YAAoB,IAAA,yBACtB,qBAAA,CAAsB,CAAA;AAAA,iBAuBT,OAAA,CAAQ,EAAA,EAAI,WAAW,EAAE,IAAA;AAAA,iBAIzB,cAAA,CAAe,KAAA,YAAiB,KAAA;EAAW,WAAA,CAAY,IAAA,EAAM,IAAI;AAAA;AAAA,iBAIjE,eAAA;AAAA,KAeJ,gBAAA;EACV,OAAO;AAAA;AAAA,iBAOO,mBAAA,CAAoB,GAAA,WAAc,gBAAgB;AAAA,iBAMlD,mBAAA,CAAoB,GAAA,UAAa,QAAA,EAAU,gBAAgB"}

package/dist/esm/in-page-ui/dom.js

@@ -38,7 +38,7 @@ function setGlobalUiInstance(key, instance) {
 	if (instance === null) Reflect.deleteProperty(window, key);
 	else Reflect.set(window, key, instance);
 }
-
 //#endregion
 export { canMountIntoDom, getGlobalUiInstance, h, hasAppendChild, setGlobalUiInstance, setHtml };
+
 //# sourceMappingURL=dom.js.map

package/dist/esm/in-page-ui/dom.js.map

@@ -1 +1 @@
-{"version":3,"file":"dom.js","names":[],"sources":["../../../src/in-page-ui/dom.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// Tiny DOM helpers shared by Hexclave's in-page UIs (the dev tool and the\n// standalone clickmap overlay). This module deliberately lives outside both\n// feature folders so either feature can be removed without affecting the other.\n\nexport function h<K extends keyof HTMLElementTagNameMap>(\n  tag: K,\n  attrs?: Record<string, any> | null,\n  ...children: (string | Node | null | undefined)[]\n): HTMLElementTagNameMap[K] {\n  const el = document.createElement(tag);\n  if (attrs) {\n    for (const [k, v] of Object.entries(attrs)) {\n      if (v == null) continue;\n      if (k === 'className') {\n        el.className = v;\n      } else if (k === 'style' && typeof v === 'object') {\n        Object.assign(el.style, v);\n      } else if (k.startsWith('on') && typeof v === 'function') {\n        el.addEventListener(k.slice(2).toLowerCase(), v);\n      } else {\n        el.setAttribute(k, String(v));\n      }\n    }\n  }\n  for (const child of children) {\n    if (child == null) continue;\n    el.appendChild(typeof child === 'string' ? document.createTextNode(child) : child);\n  }\n  return el;\n}\n\nexport function setHtml(el: HTMLElement, html: string) {\n  el.innerHTML = html;\n}\n\nexport function hasAppendChild(value: unknown): value is { appendChild(node: Node): void } {\n  return typeof value === 'object' && value !== null && typeof Reflect.get(value, 'appendChild') === 'function';\n}\n\nexport function canMountIntoDom(): boolean {\n  if (typeof window === 'undefined' || typeof document === 'undefined') {\n    return false;\n  }\n  if (typeof document.createElement !== 'function') {\n    return false;\n  }\n  return hasAppendChild(Reflect.get(document, 'body'));\n}\n\n// ---------------------------------------------------------------------------\n// Window-global singleton slot, so remounts (e.g. across HMR or multiple app\n// instances) can tear down the previous instance before mounting a new one.\n// ---------------------------------------------------------------------------\n\nexport type UiGlobalInstance = {\n  cleanup: () => void;\n};\n\nfunction isUiGlobalInstance(value: unknown): value is UiGlobalInstance {\n  return typeof value === 'object' && value !== null && typeof Reflect.get(value, 'cleanup') === 'function';\n}\n\nexport function getGlobalUiInstance(key: string): UiGlobalInstance | null {\n  if (typeof window === 'undefined') return null;\n  const value: unknown = Reflect.get(window, key);\n  return isUiGlobalInstance(value) ? value : null;\n}\n\nexport function setGlobalUiInstance(key: string, instance: UiGlobalInstance | null) {\n  if (typeof window === 'undefined') return;\n  if (instance === null) {\n    Reflect.deleteProperty(window, key);\n  } else {\n    Reflect.set(window, key, instance);\n  }\n}\n"],"mappings":";AAQA,SAAgB,EACd,KACA,OACA,GAAG,UACuB;CAC1B,MAAM,KAAK,SAAS,cAAc,IAAI;AACtC,KAAI,MACF,MAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAM,EAAE;AAC1C,MAAI,KAAK,KAAM;AACf,MAAI,MAAM,YACR,IAAG,YAAY;WACN,MAAM,WAAW,OAAO,MAAM,SACvC,QAAO,OAAO,GAAG,OAAO,EAAE;WACjB,EAAE,WAAW,KAAK,IAAI,OAAO,MAAM,WAC5C,IAAG,iBAAiB,EAAE,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE;MAEhD,IAAG,aAAa,GAAG,OAAO,EAAE,CAAC;;AAInC,MAAK,MAAM,SAAS,UAAU;AAC5B,MAAI,SAAS,KAAM;AACnB,KAAG,YAAY,OAAO,UAAU,WAAW,SAAS,eAAe,MAAM,GAAG,MAAM;;AAEpF,QAAO;;AAGT,SAAgB,QAAQ,IAAiB,MAAc;AACrD,IAAG,YAAY;;AAGjB,SAAgB,eAAe,OAA4D;AACzF,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,QAAQ,IAAI,OAAO,cAAc,KAAK;;AAGrG,SAAgB,kBAA2B;AACzC,KAAI,OAAO,WAAW,eAAe,OAAO,aAAa,YACvD,QAAO;AAET,KAAI,OAAO,SAAS,kBAAkB,WACpC,QAAO;AAET,QAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,CAAC;;AAYtD,SAAS,mBAAmB,OAA2C;AACrE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,QAAQ,IAAI,OAAO,UAAU,KAAK;;AAGjG,SAAgB,oBAAoB,KAAsC;AACxE,KAAI,OAAO,WAAW,YAAa,QAAO;CAC1C,MAAM,QAAiB,QAAQ,IAAI,QAAQ,IAAI;AAC/C,QAAO,mBAAmB,MAAM,GAAG,QAAQ;;AAG7C,SAAgB,oBAAoB,KAAa,UAAmC;AAClF,KAAI,OAAO,WAAW,YAAa;AACnC,KAAI,aAAa,KACf,SAAQ,eAAe,QAAQ,IAAI;KAEnC,SAAQ,IAAI,QAAQ,KAAK,SAAS"}
+{"version":3,"file":"dom.js","names":[],"sources":["../../../src/in-page-ui/dom.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// Tiny DOM helpers shared by Hexclave's in-page UIs (the dev tool and the\n// standalone clickmap overlay). This module deliberately lives outside both\n// feature folders so either feature can be removed without affecting the other.\n\nexport function h<K extends keyof HTMLElementTagNameMap>(\n  tag: K,\n  attrs?: Record<string, any> | null,\n  ...children: (string | Node | null | undefined)[]\n): HTMLElementTagNameMap[K] {\n  const el = document.createElement(tag);\n  if (attrs) {\n    for (const [k, v] of Object.entries(attrs)) {\n      if (v == null) continue;\n      if (k === 'className') {\n        el.className = v;\n      } else if (k === 'style' && typeof v === 'object') {\n        Object.assign(el.style, v);\n      } else if (k.startsWith('on') && typeof v === 'function') {\n        el.addEventListener(k.slice(2).toLowerCase(), v);\n      } else {\n        el.setAttribute(k, String(v));\n      }\n    }\n  }\n  for (const child of children) {\n    if (child == null) continue;\n    el.appendChild(typeof child === 'string' ? document.createTextNode(child) : child);\n  }\n  return el;\n}\n\nexport function setHtml(el: HTMLElement, html: string) {\n  el.innerHTML = html;\n}\n\nexport function hasAppendChild(value: unknown): value is { appendChild(node: Node): void } {\n  return typeof value === 'object' && value !== null && typeof Reflect.get(value, 'appendChild') === 'function';\n}\n\nexport function canMountIntoDom(): boolean {\n  if (typeof window === 'undefined' || typeof document === 'undefined') {\n    return false;\n  }\n  if (typeof document.createElement !== 'function') {\n    return false;\n  }\n  return hasAppendChild(Reflect.get(document, 'body'));\n}\n\n// ---------------------------------------------------------------------------\n// Window-global singleton slot, so remounts (e.g. across HMR or multiple app\n// instances) can tear down the previous instance before mounting a new one.\n// ---------------------------------------------------------------------------\n\nexport type UiGlobalInstance = {\n  cleanup: () => void;\n};\n\nfunction isUiGlobalInstance(value: unknown): value is UiGlobalInstance {\n  return typeof value === 'object' && value !== null && typeof Reflect.get(value, 'cleanup') === 'function';\n}\n\nexport function getGlobalUiInstance(key: string): UiGlobalInstance | null {\n  if (typeof window === 'undefined') return null;\n  const value: unknown = Reflect.get(window, key);\n  return isUiGlobalInstance(value) ? value : null;\n}\n\nexport function setGlobalUiInstance(key: string, instance: UiGlobalInstance | null) {\n  if (typeof window === 'undefined') return;\n  if (instance === null) {\n    Reflect.deleteProperty(window, key);\n  } else {\n    Reflect.set(window, key, instance);\n  }\n}\n"],"mappings":";AAQA,SAAgB,EACd,KACA,OACA,GAAG,UACuB;CAC1B,MAAM,KAAK,SAAS,cAAc,GAAG;CACrC,IAAI,OACF,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,KAAK,GAAG;EAC1C,IAAI,KAAK,MAAM;EACf,IAAI,MAAM,aACR,GAAG,YAAY;OACV,IAAI,MAAM,WAAW,OAAO,MAAM,UACvC,OAAO,OAAO,GAAG,OAAO,CAAC;OACpB,IAAI,EAAE,WAAW,IAAI,KAAK,OAAO,MAAM,YAC5C,GAAG,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC;OAE/C,GAAG,aAAa,GAAG,OAAO,CAAC,CAAC;CAEhC;CAEF,KAAK,MAAM,SAAS,UAAU;EAC5B,IAAI,SAAS,MAAM;EACnB,GAAG,YAAY,OAAO,UAAU,WAAW,SAAS,eAAe,KAAK,IAAI,KAAK;CACnF;CACA,OAAO;AACT;AAEA,SAAgB,QAAQ,IAAiB,MAAc;CACrD,GAAG,YAAY;AACjB;AAEA,SAAgB,eAAe,OAA4D;CACzF,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,QAAQ,IAAI,OAAO,aAAa,MAAM;AACrG;AAEA,SAAgB,kBAA2B;CACzC,IAAI,OAAO,WAAW,eAAe,OAAO,aAAa,aACvD,OAAO;CAET,IAAI,OAAO,SAAS,kBAAkB,YACpC,OAAO;CAET,OAAO,eAAe,QAAQ,IAAI,UAAU,MAAM,CAAC;AACrD;AAWA,SAAS,mBAAmB,OAA2C;CACrE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,QAAQ,IAAI,OAAO,SAAS,MAAM;AACjG;AAEA,SAAgB,oBAAoB,KAAsC;CACxE,IAAI,OAAO,WAAW,aAAa,OAAO;CAC1C,MAAM,QAAiB,QAAQ,IAAI,QAAQ,GAAG;CAC9C,OAAO,mBAAmB,KAAK,IAAI,QAAQ;AAC7C;AAEA,SAAgB,oBAAoB,KAAa,UAAmC;CAClF,IAAI,OAAO,WAAW,aAAa;CACnC,IAAI,aAAa,MACf,QAAQ,eAAe,QAAQ,GAAG;MAElC,QAAQ,IAAI,QAAQ,KAAK,QAAQ;AAErC"}

package/dist/esm/index.d.ts

@@ -1,27 +1,27 @@
 import { HexclaveConfig, StackConfig, defineHexclaveConfig, defineStackConfig } from "@hexclave/shared/config";
-import { getConvexProvidersConfig } from "./integrations/convex";
-import { AnalyticsOptions, AnalyticsReplayOptions } from "./lib/hexclave-app/apps/implementations/session-replay";
-import { HexclaveHandler, StackHandler } from "./components-page/hexclave-handler";
-import { useHexclaveApp, useStackApp, useUser } from "./lib/hooks";
-import { HexclaveProvider, StackProvider } from "./providers/hexclave-provider";
-import { HexclaveTheme, StackTheme } from "./providers/theme-provider";
-import { AccountSettings } from "./components-page/account-settings";
-import { AuthPage } from "./components-page/auth-page";
-import { CliAuthConfirmation, CliAuthConfirmationState, CliAuthConfirmationStatus, useCliAuthConfirmation } from "./components-page/cli-auth-confirm";
-import { EmailVerification } from "./components-page/email-verification";
-import { ForgotPassword } from "./components-page/forgot-password";
-import { PasswordReset } from "./components-page/password-reset";
-import { SignIn } from "./components-page/sign-in";
-import { SignUp } from "./components-page/sign-up";
-import { CredentialSignIn } from "./components/credential-sign-in";
-import { CredentialSignUp } from "./components/credential-sign-up";
-import { UserAvatar } from "./components/elements/user-avatar";
-import { MagicLinkSignIn } from "./components/magic-link-sign-in";
-import { MessageCard } from "./components/message-cards/message-card";
-import { OAuthButton } from "./components/oauth-button";
-import { OAuthButtonGroup } from "./components/oauth-button-group";
-import { SelectedTeamSwitcher } from "./components/selected-team-switcher";
-import { TeamSwitcher } from "./components/team-switcher";
-import { UserButton } from "./components/user-button";
-export * from "./lib/hexclave-app";
+import { getConvexProvidersConfig } from "./integrations/convex.js";
+import { HexclaveHandler, StackHandler } from "./components-page/hexclave-handler.js";
+import { useHexclaveApp, useStackApp, useUser } from "./lib/hooks.js";
+import { HexclaveProvider, StackProvider } from "./providers/hexclave-provider.js";
+import { HexclaveTheme, StackTheme } from "./providers/theme-provider.js";
+import { AccountSettings } from "./components-page/account-settings.js";
+import { AuthPage } from "./components-page/auth-page.js";
+import { CliAuthConfirmation, CliAuthConfirmationState, CliAuthConfirmationStatus, useCliAuthConfirmation } from "./components-page/cli-auth-confirm.js";
+import { EmailVerification } from "./components-page/email-verification.js";
+import { ForgotPassword } from "./components-page/forgot-password.js";
+import { PasswordReset } from "./components-page/password-reset.js";
+import { SignIn } from "./components-page/sign-in.js";
+import { SignUp } from "./components-page/sign-up.js";
+import { CredentialSignIn } from "./components/credential-sign-in.js";
+import { CredentialSignUp } from "./components/credential-sign-up.js";
+import { UserAvatar } from "./components/elements/user-avatar.js";
+import { MagicLinkSignIn } from "./components/magic-link-sign-in.js";
+import { MessageCard } from "./components/message-cards/message-card.js";
+import { OAuthButton } from "./components/oauth-button.js";
+import { OAuthButtonGroup } from "./components/oauth-button-group.js";
+import { SelectedTeamSwitcher } from "./components/selected-team-switcher.js";
+import { TeamSwitcher } from "./components/team-switcher.js";
+import { UserButton } from "./components/user-button.js";
+import { AnalyticsOptions, AnalyticsReplayOptions } from "./lib/hexclave-app/apps/implementations/session-replay.js";
+export * from "./lib/hexclave-app/index.js";
 export { AccountSettings, type AnalyticsOptions, type AnalyticsReplayOptions, AuthPage, CliAuthConfirmation, type CliAuthConfirmationState, type CliAuthConfirmationStatus, CredentialSignIn, CredentialSignUp, EmailVerification, ForgotPassword, type HexclaveConfig, HexclaveHandler, HexclaveProvider, HexclaveTheme, MagicLinkSignIn, MessageCard, OAuthButton, OAuthButtonGroup, PasswordReset, SelectedTeamSwitcher, SignIn, SignUp, type StackConfig, StackHandler, StackProvider, StackTheme, TeamSwitcher, UserAvatar, UserButton, defineHexclaveConfig, defineStackConfig, getConvexProvidersConfig, useCliAuthConfirmation, useHexclaveApp, useStackApp, useUser };

package/dist/esm/index.js

@@ -22,7 +22,5 @@ import { OAuthButtonGroup } from "./components/oauth-button-group.js";
 import { SelectedTeamSwitcher } from "./components/selected-team-switcher.js";
 import { TeamSwitcher } from "./components/team-switcher.js";
 import { UserButton } from "./components/user-button.js";
-
-export * from "./lib/hexclave-app/index.js"
-
-export { AccountSettings, AuthPage, CliAuthConfirmation, CredentialSignIn, CredentialSignUp, EmailVerification, ForgotPassword, HexclaveHandler, HexclaveProvider, HexclaveTheme, MagicLinkSignIn, MessageCard, OAuthButton, OAuthButtonGroup, PasswordReset, SelectedTeamSwitcher, SignIn, SignUp, StackHandler, StackProvider, StackTheme, TeamSwitcher, UserAvatar, UserButton, defineHexclaveConfig, defineStackConfig, getConvexProvidersConfig, useCliAuthConfirmation, useHexclaveApp, useStackApp, useUser };
+export * from "./lib/hexclave-app/index.js";
+export { AccountSettings, AuthPage, CliAuthConfirmation, CredentialSignIn, CredentialSignUp, EmailVerification, ForgotPassword, HexclaveHandler, HexclaveProvider, HexclaveTheme, MagicLinkSignIn, MessageCard, OAuthButton, OAuthButtonGroup, PasswordReset, SelectedTeamSwitcher, SignIn, SignUp, StackHandler, StackProvider, StackTheme, TeamSwitcher, UserAvatar, UserButton, defineHexclaveConfig, defineStackConfig, getConvexProvidersConfig, useCliAuthConfirmation, useHexclaveApp, useStackApp, useUser };

package/dist/esm/integrations/convex/component/convex.config.d.ts

@@ -1,7 +1,5 @@
-import * as convex_server0 from "convex/server";
-
 //#region src/integrations/convex/component/convex.config.d.ts
-declare const component: convex_server0.ComponentDefinition<any>;
+declare const component: import("convex/server").ComponentDefinition<any>;
 //#endregion
 export { component as default };
 //# sourceMappingURL=convex.config.d.ts.map

package/dist/esm/integrations/convex/component/convex.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"convex.config.d.ts","names":[],"sources":["../../../../../src/integrations/convex/component/convex.config.ts"],"mappings":";;;cAMM,SAAA,EAAyC,cAAA,CAAhC,mBAAA"}
+{"version":3,"file":"convex.config.d.ts","names":[],"sources":["../../../../../src/integrations/convex/component/convex.config.ts"],"mappings":";cAMM,SAAA,0BAAS,mBAAA"}

package/dist/esm/integrations/convex/component/convex.config.js

@@ -1,8 +1,7 @@
 import { defineComponent } from "convex/server";
-
 //#region src/integrations/convex/component/convex.config.ts
 const component = defineComponent("stack_auth");
-
 //#endregion
 export { component as default };
+
 //# sourceMappingURL=convex.config.js.map

package/dist/esm/integrations/convex/component/convex.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"convex.config.js","names":[],"sources":["../../../../../src/integrations/convex/component/convex.config.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { defineComponent } from \"convex/server\";\n\nconst component = defineComponent(\"stack_auth\");\n\nexport default component;\n"],"mappings":";;;AAMA,MAAM,YAAY,gBAAgB,aAAa"}
+{"version":3,"file":"convex.config.js","names":[],"sources":["../../../../../src/integrations/convex/component/convex.config.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { defineComponent } from \"convex/server\";\n\nconst component = defineComponent(\"stack_auth\");\n\nexport default component;\n"],"mappings":";;AAMA,MAAM,YAAY,gBAAgB,YAAY"}

package/dist/esm/integrations/convex.js

@@ -1,6 +1,5 @@
 import { urlString } from "@hexclave/shared/dist/utils/urls";
 import { defaultBaseUrl } from "../lib/hexclave-app/apps/implementations/common.js";
-
 //#region src/integrations/convex.ts
 function getConvexProvidersConfig(options) {
 	const baseUrl = options.baseUrl || defaultBaseUrl;
@@ -17,7 +16,7 @@ function getConvexProvidersConfig(options) {
 		algorithm: "ES256"
 	}];
 }
-
 //#endregion
 export { getConvexProvidersConfig };
+
 //# sourceMappingURL=convex.js.map

package/dist/esm/integrations/convex.js.map

@@ -1 +1 @@
-{"version":3,"file":"convex.js","names":[],"sources":["../../../src/integrations/convex.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { urlString } from \"@hexclave/shared/dist/utils/urls\";\nimport { defaultBaseUrl } from \"../lib/hexclave-app/apps/implementations/common\";\n\nexport function getConvexProvidersConfig(options: {\n  baseUrl?: string,\n  projectId: string,\n}) {\n  const baseUrl = options.baseUrl || defaultBaseUrl;\n  const projectId = options.projectId;\n  return [\n    {\n      type: \"customJwt\",\n      issuer: new URL(urlString`/api/v1/projects/${projectId}`, baseUrl),\n      jwks: new URL(urlString`/api/v1/projects/${projectId}/.well-known/jwks.json`, baseUrl),\n      algorithm: \"ES256\",\n    },\n    {\n      type: \"customJwt\",\n      issuer: new URL(urlString`/api/v1/projects-anonymous-users/${projectId}`, baseUrl),\n      jwks: new URL(urlString`/api/v1/projects/${projectId}/.well-known/jwks.json?include_anonymous=true`, baseUrl),\n      algorithm: \"ES256\",\n    },\n  ];\n}\n"],"mappings":";;;;AAOA,SAAgB,yBAAyB,SAGtC;CACD,MAAM,UAAU,QAAQ,WAAW;CACnC,MAAM,YAAY,QAAQ;AAC1B,QAAO,CACL;EACE,MAAM;EACN,QAAQ,IAAI,IAAI,SAAS,oBAAoB,aAAa,QAAQ;EAClE,MAAM,IAAI,IAAI,SAAS,oBAAoB,UAAU,yBAAyB,QAAQ;EACtF,WAAW;EACZ,EACD;EACE,MAAM;EACN,QAAQ,IAAI,IAAI,SAAS,oCAAoC,aAAa,QAAQ;EAClF,MAAM,IAAI,IAAI,SAAS,oBAAoB,UAAU,gDAAgD,QAAQ;EAC7G,WAAW;EACZ,CACF"}
+{"version":3,"file":"convex.js","names":[],"sources":["../../../src/integrations/convex.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { urlString } from \"@hexclave/shared/dist/utils/urls\";\nimport { defaultBaseUrl } from \"../lib/hexclave-app/apps/implementations/common\";\n\nexport function getConvexProvidersConfig(options: {\n  baseUrl?: string,\n  projectId: string,\n}) {\n  const baseUrl = options.baseUrl || defaultBaseUrl;\n  const projectId = options.projectId;\n  return [\n    {\n      type: \"customJwt\",\n      issuer: new URL(urlString`/api/v1/projects/${projectId}`, baseUrl),\n      jwks: new URL(urlString`/api/v1/projects/${projectId}/.well-known/jwks.json`, baseUrl),\n      algorithm: \"ES256\",\n    },\n    {\n      type: \"customJwt\",\n      issuer: new URL(urlString`/api/v1/projects-anonymous-users/${projectId}`, baseUrl),\n      jwks: new URL(urlString`/api/v1/projects/${projectId}/.well-known/jwks.json?include_anonymous=true`, baseUrl),\n      algorithm: \"ES256\",\n    },\n  ];\n}\n"],"mappings":";;;AAOA,SAAgB,yBAAyB,SAGtC;CACD,MAAM,UAAU,QAAQ,WAAW;CACnC,MAAM,YAAY,QAAQ;CAC1B,OAAO,CACL;EACE,MAAM;EACN,QAAQ,IAAI,IAAI,SAAS,oBAAoB,aAAa,OAAO;EACjE,MAAM,IAAI,IAAI,SAAS,oBAAoB,UAAU,yBAAyB,OAAO;EACrF,WAAW;CACb,GACA;EACE,MAAM;EACN,QAAQ,IAAI,IAAI,SAAS,oCAAoC,aAAa,OAAO;EACjF,MAAM,IAAI,IAAI,SAAS,oBAAoB,UAAU,gDAAgD,OAAO;EAC5G,WAAW;CACb,CACF;AACF"}

package/dist/esm/lib/auth.js

@@ -1,10 +1,9 @@
-import { deindent } from "@hexclave/shared/dist/utils/strings";
 import { HexclaveAssertionError, throwErr } from "@hexclave/shared/dist/utils/errors";
 import { KnownError, KnownErrors } from "@hexclave/shared";
+import { deindent } from "@hexclave/shared/dist/utils/strings";
 import { Result } from "@hexclave/shared/dist/utils/results";
 import { constructRedirectUrl } from "../utils/url.js";
 import { consumeVerifierAndStateCookie, saveVerifierAndState } from "./cookie.js";
-
 //#region src/lib/auth.ts
 async function getNewOAuthProviderOrScopeUrl(iface, options, session) {
 	const { codeChallenge, state } = await saveVerifierAndState();
@@ -123,7 +122,7 @@ async function callOAuthCallback(iface, redirectUrl, options) {
 		throw new HexclaveAssertionError("Error signing in during OAuth callback. Please try again.", { cause: e });
 	}
 }
-
 //#endregion
 export { callOAuthCallback, getNewOAuthProviderOrScopeUrl };
+
 //# sourceMappingURL=auth.js.map

package/dist/esm/lib/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","names":[],"sources":["../../../src/lib/auth.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { KnownError, KnownErrors, HexclaveClientInterface } from \"@hexclave/shared\";\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport { HexclaveAssertionError, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { deindent } from \"@hexclave/shared/dist/utils/strings\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { consumeVerifierAndStateCookie, saveVerifierAndState } from \"./cookie\";\nexport async function getNewOAuthProviderOrScopeUrl(\n  iface: HexclaveClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n): Promise<string> {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  return await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl, \"redirectUrl\"),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl, \"errorRedirectUrl\"),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href, \"afterCallbackRedirectUrl\"),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\ntype OAuthCallbackConsumptionResult =\n  | {\n    type: \"oauth-response\",\n    originalUrl: URL,\n    codeVerifier: string,\n    state: string,\n  }\n  | {\n    type: \"known-error\",\n    error: KnownError,\n  };\n\nconst oauthErrorParams = [\"error\", \"error_description\", \"errorCode\", \"message\", \"details\"] as const;\n\nfunction removeOAuthErrorParamsFromHistory(originalUrl: URL): void {\n  const newUrl = new URL(originalUrl);\n  for (const param of oauthErrorParams) {\n    newUrl.searchParams.delete(param);\n  }\n  window.history.replaceState({}, \"\", newUrl.toString());\n}\n\nfunction getProviderOAuthErrorFromUrl(originalUrl: URL): KnownError | null {\n  const providerError = originalUrl.searchParams.get(\"error\");\n  const providerErrorDescription = originalUrl.searchParams.get(\"error_description\");\n  if (providerError == null && providerErrorDescription == null) {\n    return null;\n  }\n\n  switch (providerError) {\n    case \"access_denied\":\n    case \"consent_required\": {\n      return new KnownErrors.OAuthProviderAccessDenied();\n    }\n    case \"server_error\":\n    case \"temporarily_unavailable\":\n    default: {\n      return new KnownErrors.OAuthProviderTemporarilyUnavailable();\n    }\n  }\n}\n\nfunction consumeOAuthCallbackQueryParams(options?: {\n  dontWarnAboutMissingQueryParams?: boolean,\n}): OAuthCallbackConsumptionResult | null {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  const knownErrorCode = originalUrl.searchParams.get(\"errorCode\");\n  const knownErrorMessage = originalUrl.searchParams.get(\"message\");\n  if (knownErrorCode && knownErrorMessage) {\n    const details = originalUrl.searchParams.get(\"details\");\n    let detailsJson = {};\n    if (details) {\n      try {\n        detailsJson = JSON.parse(details);\n      } catch (error) {\n        throw new HexclaveAssertionError(\"OAuth callback returned malformed known-error details\", {\n          details,\n          cause: error,\n        });\n      }\n    }\n\n    removeOAuthErrorParamsFromHistory(originalUrl);\n\n    return {\n      type: \"known-error\",\n      error: KnownError.fromJson({\n        code: knownErrorCode,\n        message: knownErrorMessage,\n        details: detailsJson,\n      }),\n    };\n  }\n\n  const providerOAuthError = getProviderOAuthErrorFromUrl(originalUrl);\n  if (providerOAuthError != null && !requiredParams.every(param => originalUrl.searchParams.has(param))) {\n    removeOAuthErrorParamsFromHistory(originalUrl);\n    return {\n      type: \"known-error\",\n      error: providerOAuthError,\n    };\n  }\n\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      if (!options?.dontWarnAboutMissingQueryParams) {\n        console.warn(new Error(`Missing required query parameter on OAuth callback: ${param}. Maybe you opened or reloaded the oauth-callback page from your history?`));\n      }\n      return null;\n    }\n  }\n\n  const expectedState = originalUrl.searchParams.get(\"state\") ?? throwErr(\"This should never happen; isn't state required above?\");\n  const cookieResult = consumeVerifierAndStateCookie(expectedState);\n\n  if (!cookieResult) {\n    // If the state can't be found in the cookies, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    console.warn(deindent`\n      Hexclave found an outer OAuth callback state in the query parameters, but not in cookies.\n\n      This could have multiple reasons:\n        - The cookie expired, because the OAuth flow took too long.\n        - The user's browser deleted the cookie, either manually or because of a very strict cookie policy.\n        - The cookie was already consumed by this page, and the user already logged in.\n        - You are using another OAuth client library with the same callback URL as Hexclave.\n        - The user opened the OAuth callback page from their history.\n\n      Either way, it is probably safe to ignore this warning unless you are debugging an OAuth issue.\n    `);\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return {\n    type: \"oauth-response\",\n    originalUrl,\n    codeVerifier: cookieResult.codeVerifier,\n    state: expectedState,\n  };\n}\n\nexport async function callOAuthCallback(\n  iface: HexclaveClientInterface,\n  redirectUrl: string,\n  options?: {\n    dontWarnAboutMissingQueryParams?: boolean,\n  },\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const consumed = consumeOAuthCallbackQueryParams(options);\n  if (!consumed) return Result.ok(undefined);\n  if (consumed.type === \"known-error\") {\n    throw consumed.error;\n  }\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback, and the only instance\n  // of callOAuthCallback that's running)\n  try {\n    return Result.ok(await iface.callOAuthCallback({\n      oauthParams: consumed.originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl, \"redirectUri\"),\n      codeVerifier: consumed.codeVerifier,\n      state: consumed.state,\n    }));\n  } catch (e) {\n    if (KnownError.isKnownError(e)) {\n      throw e;\n    }\n    throw new HexclaveAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";;;;;;;;AAWA,eAAsB,8BACpB,OACA,SAMA,SACiB;CACjB,MAAM,EAAE,eAAe,UAAU,MAAM,sBAAsB;AAC7D,QAAO,MAAM,MAAM,YAAY;EAC7B,UAAU,QAAQ;EAClB,aAAa,qBAAqB,QAAQ,aAAa,cAAc;EACrE,kBAAkB,qBAAqB,QAAQ,kBAAkB,mBAAmB;EACpF,0BAA0B,qBAAqB,OAAO,SAAS,MAAM,2BAA2B;EAChG;EACA;EACA,MAAM;EACN;EACA,eAAe,QAAQ;EACxB,CAAC;;AAoBJ,MAAM,mBAAmB;CAAC;CAAS;CAAqB;CAAa;CAAW;CAAU;AAE1F,SAAS,kCAAkC,aAAwB;CACjE,MAAM,SAAS,IAAI,IAAI,YAAY;AACnC,MAAK,MAAM,SAAS,iBAClB,QAAO,aAAa,OAAO,MAAM;AAEnC,QAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,OAAO,UAAU,CAAC;;AAGxD,SAAS,6BAA6B,aAAqC;CACzE,MAAM,gBAAgB,YAAY,aAAa,IAAI,QAAQ;CAC3D,MAAM,2BAA2B,YAAY,aAAa,IAAI,oBAAoB;AAClF,KAAI,iBAAiB,QAAQ,4BAA4B,KACvD,QAAO;AAGT,SAAQ,eAAR;EACE,KAAK;EACL,KAAK,mBACH,QAAO,IAAI,YAAY,2BAA2B;EAIpD,QACE,QAAO,IAAI,YAAY,qCAAqC;;;AAKlE,SAAS,gCAAgC,SAEC;CACxC,MAAM,iBAAiB,CAAC,QAAQ,QAAQ;CACxC,MAAM,cAAc,IAAI,IAAI,OAAO,SAAS,KAAK;CACjD,MAAM,iBAAiB,YAAY,aAAa,IAAI,YAAY;CAChE,MAAM,oBAAoB,YAAY,aAAa,IAAI,UAAU;AACjE,KAAI,kBAAkB,mBAAmB;EACvC,MAAM,UAAU,YAAY,aAAa,IAAI,UAAU;EACvD,IAAI,cAAc,EAAE;AACpB,MAAI,QACF,KAAI;AACF,iBAAc,KAAK,MAAM,QAAQ;WAC1B,OAAO;AACd,SAAM,IAAI,uBAAuB,yDAAyD;IACxF;IACA,OAAO;IACR,CAAC;;AAIN,oCAAkC,YAAY;AAE9C,SAAO;GACL,MAAM;GACN,OAAO,WAAW,SAAS;IACzB,MAAM;IACN,SAAS;IACT,SAAS;IACV,CAAC;GACH;;CAGH,MAAM,qBAAqB,6BAA6B,YAAY;AACpE,KAAI,sBAAsB,QAAQ,CAAC,eAAe,OAAM,UAAS,YAAY,aAAa,IAAI,MAAM,CAAC,EAAE;AACrG,oCAAkC,YAAY;AAC9C,SAAO;GACL,MAAM;GACN,OAAO;GACR;;AAGH,MAAK,MAAM,SAAS,eAClB,KAAI,CAAC,YAAY,aAAa,IAAI,MAAM,EAAE;AACxC,MAAI,CAAC,SAAS,gCACZ,SAAQ,qBAAK,IAAI,MAAM,uDAAuD,MAAM,2EAA2E,CAAC;AAElK,SAAO;;CAIX,MAAM,gBAAgB,YAAY,aAAa,IAAI,QAAQ,IAAI,SAAS,wDAAwD;CAChI,MAAM,eAAe,8BAA8B,cAAc;AAEjE,KAAI,CAAC,cAAc;AAGjB,UAAQ,KAAK,QAAQ;;;;;;;;;;;MAWnB;AACF,SAAO;;CAIT,MAAM,SAAS,IAAI,IAAI,YAAY;AACnC,MAAK,MAAM,SAAS,eAClB,QAAO,aAAa,OAAO,MAAM;AASnC,QAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,OAAO,UAAU,CAAC;AAEtD,QAAO;EACL,MAAM;EACN;EACA,cAAc,aAAa;EAC3B,OAAO;EACR;;AAGH,eAAsB,kBACpB,OACA,aACA,SAGA;CAIA,MAAM,WAAW,gCAAgC,QAAQ;AACzD,KAAI,CAAC,SAAU,QAAO,OAAO,GAAG,OAAU;AAC1C,KAAI,SAAS,SAAS,cACpB,OAAM,SAAS;AAMjB,KAAI;AACF,SAAO,OAAO,GAAG,MAAM,MAAM,kBAAkB;GAC7C,aAAa,SAAS,YAAY;GAClC,aAAa,qBAAqB,aAAa,cAAc;GAC7D,cAAc,SAAS;GACvB,OAAO,SAAS;GACjB,CAAC,CAAC;UACI,GAAG;AACV,MAAI,WAAW,aAAa,EAAE,CAC5B,OAAM;AAER,QAAM,IAAI,uBAAuB,6DAA6D,EAAE,OAAO,GAAG,CAAC"}
+{"version":3,"file":"auth.js","names":[],"sources":["../../../src/lib/auth.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { KnownError, KnownErrors, HexclaveClientInterface } from \"@hexclave/shared\";\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport { HexclaveAssertionError, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { deindent } from \"@hexclave/shared/dist/utils/strings\";\nimport { constructRedirectUrl } from \"../utils/url\";\nimport { consumeVerifierAndStateCookie, saveVerifierAndState } from \"./cookie\";\nexport async function getNewOAuthProviderOrScopeUrl(\n  iface: HexclaveClientInterface,\n  options: {\n    provider: string,\n    redirectUrl: string,\n    errorRedirectUrl: string,\n    providerScope?: string,\n  },\n  session: InternalSession,\n): Promise<string> {\n  const { codeChallenge, state } = await saveVerifierAndState();\n  return await iface.getOAuthUrl({\n    provider: options.provider,\n    redirectUrl: constructRedirectUrl(options.redirectUrl, \"redirectUrl\"),\n    errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl, \"errorRedirectUrl\"),\n    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href, \"afterCallbackRedirectUrl\"),\n    codeChallenge,\n    state,\n    type: \"link\",\n    session,\n    providerScope: options.providerScope,\n  });\n}\n\n/**\n * Checks if the current URL has the query parameters for an OAuth callback, and if so, removes them.\n *\n * Must be synchronous for the logic in callOAuthCallback to work without race conditions.\n */\ntype OAuthCallbackConsumptionResult =\n  | {\n    type: \"oauth-response\",\n    originalUrl: URL,\n    codeVerifier: string,\n    state: string,\n  }\n  | {\n    type: \"known-error\",\n    error: KnownError,\n  };\n\nconst oauthErrorParams = [\"error\", \"error_description\", \"errorCode\", \"message\", \"details\"] as const;\n\nfunction removeOAuthErrorParamsFromHistory(originalUrl: URL): void {\n  const newUrl = new URL(originalUrl);\n  for (const param of oauthErrorParams) {\n    newUrl.searchParams.delete(param);\n  }\n  window.history.replaceState({}, \"\", newUrl.toString());\n}\n\nfunction getProviderOAuthErrorFromUrl(originalUrl: URL): KnownError | null {\n  const providerError = originalUrl.searchParams.get(\"error\");\n  const providerErrorDescription = originalUrl.searchParams.get(\"error_description\");\n  if (providerError == null && providerErrorDescription == null) {\n    return null;\n  }\n\n  switch (providerError) {\n    case \"access_denied\":\n    case \"consent_required\": {\n      return new KnownErrors.OAuthProviderAccessDenied();\n    }\n    case \"server_error\":\n    case \"temporarily_unavailable\":\n    default: {\n      return new KnownErrors.OAuthProviderTemporarilyUnavailable();\n    }\n  }\n}\n\nfunction consumeOAuthCallbackQueryParams(options?: {\n  dontWarnAboutMissingQueryParams?: boolean,\n}): OAuthCallbackConsumptionResult | null {\n  const requiredParams = [\"code\", \"state\"];\n  const originalUrl = new URL(window.location.href);\n  const knownErrorCode = originalUrl.searchParams.get(\"errorCode\");\n  const knownErrorMessage = originalUrl.searchParams.get(\"message\");\n  if (knownErrorCode && knownErrorMessage) {\n    const details = originalUrl.searchParams.get(\"details\");\n    let detailsJson = {};\n    if (details) {\n      try {\n        detailsJson = JSON.parse(details);\n      } catch (error) {\n        throw new HexclaveAssertionError(\"OAuth callback returned malformed known-error details\", {\n          details,\n          cause: error,\n        });\n      }\n    }\n\n    removeOAuthErrorParamsFromHistory(originalUrl);\n\n    return {\n      type: \"known-error\",\n      error: KnownError.fromJson({\n        code: knownErrorCode,\n        message: knownErrorMessage,\n        details: detailsJson,\n      }),\n    };\n  }\n\n  const providerOAuthError = getProviderOAuthErrorFromUrl(originalUrl);\n  if (providerOAuthError != null && !requiredParams.every(param => originalUrl.searchParams.has(param))) {\n    removeOAuthErrorParamsFromHistory(originalUrl);\n    return {\n      type: \"known-error\",\n      error: providerOAuthError,\n    };\n  }\n\n  for (const param of requiredParams) {\n    if (!originalUrl.searchParams.has(param)) {\n      if (!options?.dontWarnAboutMissingQueryParams) {\n        console.warn(new Error(`Missing required query parameter on OAuth callback: ${param}. Maybe you opened or reloaded the oauth-callback page from your history?`));\n      }\n      return null;\n    }\n  }\n\n  const expectedState = originalUrl.searchParams.get(\"state\") ?? throwErr(\"This should never happen; isn't state required above?\");\n  const cookieResult = consumeVerifierAndStateCookie(expectedState);\n\n  if (!cookieResult) {\n    // If the state can't be found in the cookies, then the callback wasn't meant for us.\n    // Maybe the website uses another OAuth library?\n    console.warn(deindent`\n      Hexclave found an outer OAuth callback state in the query parameters, but not in cookies.\n\n      This could have multiple reasons:\n        - The cookie expired, because the OAuth flow took too long.\n        - The user's browser deleted the cookie, either manually or because of a very strict cookie policy.\n        - The cookie was already consumed by this page, and the user already logged in.\n        - You are using another OAuth client library with the same callback URL as Hexclave.\n        - The user opened the OAuth callback page from their history.\n\n      Either way, it is probably safe to ignore this warning unless you are debugging an OAuth issue.\n    `);\n    return null;\n  }\n\n\n  const newUrl = new URL(originalUrl);\n  for (const param of requiredParams) {\n    newUrl.searchParams.delete(param);\n  }\n\n  // let's get rid of the authorization code in the history as we\n  // don't redirect to `redirectUrl` if there's a validation error\n  // (as the redirectUrl might be malicious!).\n  //\n  // We use history.replaceState instead of location.assign(...) to\n  // prevent an unnecessary reload\n  window.history.replaceState({}, \"\", newUrl.toString());\n\n  return {\n    type: \"oauth-response\",\n    originalUrl,\n    codeVerifier: cookieResult.codeVerifier,\n    state: expectedState,\n  };\n}\n\nexport async function callOAuthCallback(\n  iface: HexclaveClientInterface,\n  redirectUrl: string,\n  options?: {\n    dontWarnAboutMissingQueryParams?: boolean,\n  },\n) {\n  // note: this part of the function (until the return) needs\n  // to be synchronous, to prevent race conditions when\n  // callOAuthCallback is called multiple times in parallel\n  const consumed = consumeOAuthCallbackQueryParams(options);\n  if (!consumed) return Result.ok(undefined);\n  if (consumed.type === \"known-error\") {\n    throw consumed.error;\n  }\n\n  // the rest can be asynchronous (we now know that we are the\n  // intended recipient of the callback, and the only instance\n  // of callOAuthCallback that's running)\n  try {\n    return Result.ok(await iface.callOAuthCallback({\n      oauthParams: consumed.originalUrl.searchParams,\n      redirectUri: constructRedirectUrl(redirectUrl, \"redirectUri\"),\n      codeVerifier: consumed.codeVerifier,\n      state: consumed.state,\n    }));\n  } catch (e) {\n    if (KnownError.isKnownError(e)) {\n      throw e;\n    }\n    throw new HexclaveAssertionError(\"Error signing in during OAuth callback. Please try again.\", { cause: e });\n  }\n}\n"],"mappings":";;;;;;;AAWA,eAAsB,8BACpB,OACA,SAMA,SACiB;CACjB,MAAM,EAAE,eAAe,UAAU,MAAM,qBAAqB;CAC5D,OAAO,MAAM,MAAM,YAAY;EAC7B,UAAU,QAAQ;EAClB,aAAa,qBAAqB,QAAQ,aAAa,aAAa;EACpE,kBAAkB,qBAAqB,QAAQ,kBAAkB,kBAAkB;EACnF,0BAA0B,qBAAqB,OAAO,SAAS,MAAM,0BAA0B;EAC/F;EACA;EACA,MAAM;EACN;EACA,eAAe,QAAQ;CACzB,CAAC;AACH;AAmBA,MAAM,mBAAmB;CAAC;CAAS;CAAqB;CAAa;CAAW;AAAS;AAEzF,SAAS,kCAAkC,aAAwB;CACjE,MAAM,SAAS,IAAI,IAAI,WAAW;CAClC,KAAK,MAAM,SAAS,kBAClB,OAAO,aAAa,OAAO,KAAK;CAElC,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;AACvD;AAEA,SAAS,6BAA6B,aAAqC;CACzE,MAAM,gBAAgB,YAAY,aAAa,IAAI,OAAO;CAC1D,MAAM,2BAA2B,YAAY,aAAa,IAAI,mBAAmB;CACjF,IAAI,iBAAiB,QAAQ,4BAA4B,MACvD,OAAO;CAGT,QAAQ,eAAR;EACE,KAAK;EACL,KAAK,oBACH,OAAO,IAAI,YAAY,0BAA0B;EAInD,SACE,OAAO,IAAI,YAAY,oCAAoC;CAE/D;AACF;AAEA,SAAS,gCAAgC,SAEC;CACxC,MAAM,iBAAiB,CAAC,QAAQ,OAAO;CACvC,MAAM,cAAc,IAAI,IAAI,OAAO,SAAS,IAAI;CAChD,MAAM,iBAAiB,YAAY,aAAa,IAAI,WAAW;CAC/D,MAAM,oBAAoB,YAAY,aAAa,IAAI,SAAS;CAChE,IAAI,kBAAkB,mBAAmB;EACvC,MAAM,UAAU,YAAY,aAAa,IAAI,SAAS;EACtD,IAAI,cAAc,CAAC;EACnB,IAAI,SACF,IAAI;GACF,cAAc,KAAK,MAAM,OAAO;EAClC,SAAS,OAAO;GACd,MAAM,IAAI,uBAAuB,yDAAyD;IACxF;IACA,OAAO;GACT,CAAC;EACH;EAGF,kCAAkC,WAAW;EAE7C,OAAO;GACL,MAAM;GACN,OAAO,WAAW,SAAS;IACzB,MAAM;IACN,SAAS;IACT,SAAS;GACX,CAAC;EACH;CACF;CAEA,MAAM,qBAAqB,6BAA6B,WAAW;CACnE,IAAI,sBAAsB,QAAQ,CAAC,eAAe,OAAM,UAAS,YAAY,aAAa,IAAI,KAAK,CAAC,GAAG;EACrG,kCAAkC,WAAW;EAC7C,OAAO;GACL,MAAM;GACN,OAAO;EACT;CACF;CAEA,KAAK,MAAM,SAAS,gBAClB,IAAI,CAAC,YAAY,aAAa,IAAI,KAAK,GAAG;EACxC,IAAI,CAAC,SAAS,iCACZ,QAAQ,qBAAK,IAAI,MAAM,uDAAuD,MAAM,0EAA0E,CAAC;EAEjK,OAAO;CACT;CAGF,MAAM,gBAAgB,YAAY,aAAa,IAAI,OAAO,KAAK,SAAS,uDAAuD;CAC/H,MAAM,eAAe,8BAA8B,aAAa;CAEhE,IAAI,CAAC,cAAc;EAGjB,QAAQ,KAAK,QAAQ;;;;;;;;;;;KAWpB;EACD,OAAO;CACT;CAGA,MAAM,SAAS,IAAI,IAAI,WAAW;CAClC,KAAK,MAAM,SAAS,gBAClB,OAAO,aAAa,OAAO,KAAK;CASlC,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,OAAO,SAAS,CAAC;CAErD,OAAO;EACL,MAAM;EACN;EACA,cAAc,aAAa;EAC3B,OAAO;CACT;AACF;AAEA,eAAsB,kBACpB,OACA,aACA,SAGA;CAIA,MAAM,WAAW,gCAAgC,OAAO;CACxD,IAAI,CAAC,UAAU,OAAO,OAAO,GAAG,KAAA,CAAS;CACzC,IAAI,SAAS,SAAS,eACpB,MAAM,SAAS;CAMjB,IAAI;EACF,OAAO,OAAO,GAAG,MAAM,MAAM,kBAAkB;GAC7C,aAAa,SAAS,YAAY;GAClC,aAAa,qBAAqB,aAAa,aAAa;GAC5D,cAAc,SAAS;GACvB,OAAO,SAAS;EAClB,CAAC,CAAC;CACJ,SAAS,GAAG;EACV,IAAI,WAAW,aAAa,CAAC,GAC3B,MAAM;EAER,MAAM,IAAI,uBAAuB,6DAA6D,EAAE,OAAO,EAAE,CAAC;CAC5G;AACF"}

package/dist/esm/lib/auth.test.js

@@ -1,7 +1,6 @@
 import { HexclaveClientInterface, KnownErrors } from "@hexclave/shared";
 import { describe, expect, it, vi } from "vitest";
 import { callOAuthCallback, getNewOAuthProviderOrScopeUrl } from "./auth.js";
-
 //#region src/lib/auth.test.ts
 // @vitest-environment jsdom
 vi.mock("./cookie", async (importOriginal) => {
@@ -69,7 +68,7 @@ describe("callOAuthCallback", () => {
 		expect(window.location.href).toBe("http://localhost:3000/handler/oauth-callback");
 	});
 });
-
 //#endregion
-export {  };
+export {};
+
 //# sourceMappingURL=auth.test.js.map

package/dist/esm/lib/auth.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.test.js","names":[],"sources":["../../../src/lib/auth.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { HexclaveClientInterface, KnownErrors } from \"@hexclave/shared\";\nimport { describe, expect, it, vi } from \"vitest\";\nimport { callOAuthCallback, getNewOAuthProviderOrScopeUrl } from \"./auth\";\n\nvi.mock(\"./cookie\", async (importOriginal) => {\n  const actual = await importOriginal<typeof import(\"./cookie\")>();\n  return {\n    ...actual,\n    saveVerifierAndState: async () => ({\n      codeChallenge: \"<stripped code challenge>\",\n      state: \"<stripped state>\",\n    }),\n  };\n});\n\nfunction createTestInterface() {\n  return new HexclaveClientInterface({\n    clientVersion: \"test\",\n    getBaseUrl: () => \"https://api.example.com\",\n    getApiUrls: () => [\"https://api.example.com\"],\n    extraRequestHeaders: {},\n    projectId: \"00000000-0000-4000-8000-000000000000\",\n    publishableClientKey: \"pck_test\",\n  });\n}\n\ndescribe(\"getNewOAuthProviderOrScopeUrl\", () => {\n  it(\"returns the OAuth URL without performing navigation\", async () => {\n    window.history.replaceState({}, \"\", \"/account?after_auth_return_to=%2Fsettings\");\n\n    const iface = createTestInterface();\n    const session = iface.createSession({ refreshToken: null, accessToken: null });\n\n    const location = await getNewOAuthProviderOrScopeUrl(\n      iface,\n      {\n        provider: \"github\",\n        redirectUrl: \"/handler/oauth-callback\",\n        errorRedirectUrl: \"/handler/error\",\n        providerScope: \"repo user\",\n      },\n      session,\n    );\n\n    const url = new URL(location);\n    expect(`${url.origin}${url.pathname}`).toBe(\"https://api.example.com/api/v1/auth/oauth/authorize/github\");\n    expect(Object.fromEntries(url.searchParams.entries())).toMatchInlineSnapshot(`\n      {\n        \"after_callback_redirect_url\": \"http://localhost:3000/account?after_auth_return_to=%2Fsettings\",\n        \"client_id\": \"00000000-0000-4000-8000-000000000000\",\n        \"client_secret\": \"pck_test\",\n        \"code_challenge\": \"<stripped code challenge>\",\n        \"code_challenge_method\": \"S256\",\n        \"error_redirect_url\": \"http://localhost:3000/handler/error?after_auth_return_to=%2Fsettings\",\n        \"grant_type\": \"authorization_code\",\n        \"provider_scope\": \"repo user\",\n        \"redirect_uri\": \"http://localhost:3000/handler/oauth-callback?after_auth_return_to=%2Fsettings\",\n        \"response_type\": \"code\",\n        \"scope\": \"legacy\",\n        \"state\": \"<stripped state>\",\n        \"type\": \"link\",\n      }\n    `);\n  });\n});\n\ndescribe(\"callOAuthCallback\", () => {\n  it(\"turns provider access denial callback params into a known error\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/oauth-callback?error=access_denied&error_description=User+cancelled\");\n\n    await expect(callOAuthCallback(createTestInterface(), \"/handler/oauth-callback\"))\n      .rejects.toSatisfy((error: unknown) => KnownErrors.OAuthProviderAccessDenied.isInstance(error));\n    expect(window.location.href).toBe(\"http://localhost:3000/handler/oauth-callback\");\n  });\n\n  it(\"turns generic provider error callback params into a known error\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/oauth-callback?error=server_error&error_description=Provider+failed\");\n\n    await expect(callOAuthCallback(createTestInterface(), \"/handler/oauth-callback\"))\n      .rejects.toSatisfy((error: unknown) => KnownErrors.OAuthProviderTemporarilyUnavailable.isInstance(error));\n    expect(window.location.href).toBe(\"http://localhost:3000/handler/oauth-callback\");\n  });\n});\n"],"mappings":";;;;;;AAUA,GAAG,KAAK,YAAY,OAAO,mBAAmB;AAE5C,QAAO;EACL,GAFa,MAAM,gBAA2C;EAG9D,sBAAsB,aAAa;GACjC,eAAe;GACf,OAAO;GACR;EACF;EACD;AAEF,SAAS,sBAAsB;AAC7B,QAAO,IAAI,wBAAwB;EACjC,eAAe;EACf,kBAAkB;EAClB,kBAAkB,CAAC,0BAA0B;EAC7C,qBAAqB,EAAE;EACvB,WAAW;EACX,sBAAsB;EACvB,CAAC;;AAGJ,SAAS,uCAAuC;AAC9C,IAAG,uDAAuD,YAAY;AACpE,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,4CAA4C;EAEhF,MAAM,QAAQ,qBAAqB;EAGnC,MAAM,WAAW,MAAM,8BACrB,OACA;GACE,UAAU;GACV,aAAa;GACb,kBAAkB;GAClB,eAAe;GAChB,EATa,MAAM,cAAc;GAAE,cAAc;GAAM,aAAa;GAAM,CAAC,CAW7E;EAED,MAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,SAAO,GAAG,IAAI,SAAS,IAAI,WAAW,CAAC,KAAK,6DAA6D;AACzG,SAAO,OAAO,YAAY,IAAI,aAAa,SAAS,CAAC,CAAC,CAAC,sBAAsB;;;;;;;;;;;;;;;;MAgB3E;GACF;EACF;AAEF,SAAS,2BAA2B;AAClC,IAAG,mEAAmE,YAAY;AAChF,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,+EAA+E;AAEnH,QAAM,OAAO,kBAAkB,qBAAqB,EAAE,0BAA0B,CAAC,CAC9E,QAAQ,WAAW,UAAmB,YAAY,0BAA0B,WAAW,MAAM,CAAC;AACjG,SAAO,OAAO,SAAS,KAAK,CAAC,KAAK,+CAA+C;GACjF;AAEF,IAAG,mEAAmE,YAAY;AAChF,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,+EAA+E;AAEnH,QAAM,OAAO,kBAAkB,qBAAqB,EAAE,0BAA0B,CAAC,CAC9E,QAAQ,WAAW,UAAmB,YAAY,oCAAoC,WAAW,MAAM,CAAC;AAC3G,SAAO,OAAO,SAAS,KAAK,CAAC,KAAK,+CAA+C;GACjF;EACF"}
+{"version":3,"file":"auth.test.js","names":[],"sources":["../../../src/lib/auth.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { HexclaveClientInterface, KnownErrors } from \"@hexclave/shared\";\nimport { describe, expect, it, vi } from \"vitest\";\nimport { callOAuthCallback, getNewOAuthProviderOrScopeUrl } from \"./auth\";\n\nvi.mock(\"./cookie\", async (importOriginal) => {\n  const actual = await importOriginal<typeof import(\"./cookie\")>();\n  return {\n    ...actual,\n    saveVerifierAndState: async () => ({\n      codeChallenge: \"<stripped code challenge>\",\n      state: \"<stripped state>\",\n    }),\n  };\n});\n\nfunction createTestInterface() {\n  return new HexclaveClientInterface({\n    clientVersion: \"test\",\n    getBaseUrl: () => \"https://api.example.com\",\n    getApiUrls: () => [\"https://api.example.com\"],\n    extraRequestHeaders: {},\n    projectId: \"00000000-0000-4000-8000-000000000000\",\n    publishableClientKey: \"pck_test\",\n  });\n}\n\ndescribe(\"getNewOAuthProviderOrScopeUrl\", () => {\n  it(\"returns the OAuth URL without performing navigation\", async () => {\n    window.history.replaceState({}, \"\", \"/account?after_auth_return_to=%2Fsettings\");\n\n    const iface = createTestInterface();\n    const session = iface.createSession({ refreshToken: null, accessToken: null });\n\n    const location = await getNewOAuthProviderOrScopeUrl(\n      iface,\n      {\n        provider: \"github\",\n        redirectUrl: \"/handler/oauth-callback\",\n        errorRedirectUrl: \"/handler/error\",\n        providerScope: \"repo user\",\n      },\n      session,\n    );\n\n    const url = new URL(location);\n    expect(`${url.origin}${url.pathname}`).toBe(\"https://api.example.com/api/v1/auth/oauth/authorize/github\");\n    expect(Object.fromEntries(url.searchParams.entries())).toMatchInlineSnapshot(`\n      {\n        \"after_callback_redirect_url\": \"http://localhost:3000/account?after_auth_return_to=%2Fsettings\",\n        \"client_id\": \"00000000-0000-4000-8000-000000000000\",\n        \"client_secret\": \"pck_test\",\n        \"code_challenge\": \"<stripped code challenge>\",\n        \"code_challenge_method\": \"S256\",\n        \"error_redirect_url\": \"http://localhost:3000/handler/error?after_auth_return_to=%2Fsettings\",\n        \"grant_type\": \"authorization_code\",\n        \"provider_scope\": \"repo user\",\n        \"redirect_uri\": \"http://localhost:3000/handler/oauth-callback?after_auth_return_to=%2Fsettings\",\n        \"response_type\": \"code\",\n        \"scope\": \"legacy\",\n        \"state\": \"<stripped state>\",\n        \"type\": \"link\",\n      }\n    `);\n  });\n});\n\ndescribe(\"callOAuthCallback\", () => {\n  it(\"turns provider access denial callback params into a known error\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/oauth-callback?error=access_denied&error_description=User+cancelled\");\n\n    await expect(callOAuthCallback(createTestInterface(), \"/handler/oauth-callback\"))\n      .rejects.toSatisfy((error: unknown) => KnownErrors.OAuthProviderAccessDenied.isInstance(error));\n    expect(window.location.href).toBe(\"http://localhost:3000/handler/oauth-callback\");\n  });\n\n  it(\"turns generic provider error callback params into a known error\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/oauth-callback?error=server_error&error_description=Provider+failed\");\n\n    await expect(callOAuthCallback(createTestInterface(), \"/handler/oauth-callback\"))\n      .rejects.toSatisfy((error: unknown) => KnownErrors.OAuthProviderTemporarilyUnavailable.isInstance(error));\n    expect(window.location.href).toBe(\"http://localhost:3000/handler/oauth-callback\");\n  });\n});\n"],"mappings":";;;;;AAUA,GAAG,KAAK,YAAY,OAAO,mBAAmB;CAE5C,OAAO;EACL,GAAG,MAFgB,eAA0C;EAG7D,sBAAsB,aAAa;GACjC,eAAe;GACf,OAAO;EACT;CACF;AACF,CAAC;AAED,SAAS,sBAAsB;CAC7B,OAAO,IAAI,wBAAwB;EACjC,eAAe;EACf,kBAAkB;EAClB,kBAAkB,CAAC,yBAAyB;EAC5C,qBAAqB,CAAC;EACtB,WAAW;EACX,sBAAsB;CACxB,CAAC;AACH;AAEA,SAAS,uCAAuC;CAC9C,GAAG,uDAAuD,YAAY;EACpE,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,2CAA2C;EAE/E,MAAM,QAAQ,oBAAoB;EAGlC,MAAM,WAAW,MAAM,8BACrB,OACA;GACE,UAAU;GACV,aAAa;GACb,kBAAkB;GAClB,eAAe;EACjB,GATc,MAAM,cAAc;GAAE,cAAc;GAAM,aAAa;EAAK,CAUpE,CACR;EAEA,MAAM,MAAM,IAAI,IAAI,QAAQ;EAC5B,OAAO,GAAG,IAAI,SAAS,IAAI,UAAU,CAAC,CAAC,KAAK,4DAA4D;EACxG,OAAO,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC,CAAC,CAAC,sBAAsB;;;;;;;;;;;;;;;;KAgB5E;CACH,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B;CAClC,GAAG,mEAAmE,YAAY;EAChF,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,8EAA8E;EAElH,MAAM,OAAO,kBAAkB,oBAAoB,GAAG,yBAAyB,CAAC,CAAC,CAC9E,QAAQ,WAAW,UAAmB,YAAY,0BAA0B,WAAW,KAAK,CAAC;EAChG,OAAO,OAAO,SAAS,IAAI,CAAC,CAAC,KAAK,8CAA8C;CAClF,CAAC;CAED,GAAG,mEAAmE,YAAY;EAChF,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,8EAA8E;EAElH,MAAM,OAAO,kBAAkB,oBAAoB,GAAG,yBAAyB,CAAC,CAAC,CAC9E,QAAQ,WAAW,UAAmB,YAAY,oCAAoC,WAAW,KAAK,CAAC;EAC1G,OAAO,OAAO,SAAS,IAAI,CAAC,CAAC,KAAK,8CAA8C;CAClF,CAAC;AACH,CAAC"}

package/dist/esm/lib/cookie.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookie.d.ts","names":[],"sources":["../../../src/lib/cookie.ts"],"mappings":";KAsEK,gBAAA;EAAqB,MAAA;EAA4B,qBAAA;EAAiC,MAAA;EAAiB,MAAA;AAAA;AAAA,KACnG,mBAAA;EAAwB,qBAAA;EAAiC,MAAA;AAAA;AAAA,KASlD,YAAA;EACV,GAAA,GAAM,IAAA;EACN,MAAA,QAAc,MAAA;EACd,GAAA,GAAM,IAAA,UAAc,KAAA,UAAe,OAAA,EAAS,gBAAA;EAC5C,WAAA,GAAc,IAAA,UAAc,KAAA,iBAAsB,OAAA,EAAS,gBAAA,GAAmB,mBAAA;EAC9E,MAAA,GAAS,IAAA,UAAc,OAAA,EAAS,mBAAA;AAAA;AAAA,iBAIZ,6BAAA,CAAA,GAAiC,OAAA,CAAQ,YAAA;AAAA,iBAuBzC,kBAAA,CAAA,GAAsB,OAAA,CAAQ,YAAA;AAAA,iBAWpC,sBAAA,CAAA,GAA0B,YAAA;AAAA,iBAiB1B,yBAAA,CAAA,GAA6B,YAAA;AAAA,iBAsG7B,eAAA,CAAgB,IAAA;AAAA,iBAKhB,mBAAA,CAAA,GAAuB,MAAA;AAAA,iBASjB,SAAA,CAAU,IAAA,WAAe,OAAA;AAAA,iBAKzB,QAAA,CAAA,GAAY,OAAA;AAAA,iBAgGlB,uBAAA,CAAwB,IAAA,UAAc,KAAA,iBAAsB,OAAA,EAAS,gBAAA,GAAmB,mBAAA;AAAA,iBASlF,iBAAA,CAAkB,IAAA,UAAc,KAAA,iBAAsB,OAAA,EAAS,gBAAA,GAAmB,mBAAA,GAAmB,OAAA;AAAA,iBAK3G,kBAAA,CAAmB,IAAA,UAAc,OAAA,EAAS,mBAAA;AAAA,iBAKpC,YAAA,CAAa,IAAA,UAAc,OAAA,EAAS,mBAAA,GAAmB,OAAA;AAAA,iBAK7D,eAAA,CAAgB,IAAA,UAAc,KAAA,UAAe,OAAA,EAAS,gBAAA;AAAA,iBAKhD,SAAA,CAAU,IAAA,UAAc,KAAA,UAAe,OAAA,EAAS,gBAAA,GAAgB,OAAA;AAAA,iBAKhE,oBAAA,CAAA,GAAoB,OAAA;;;;iBAe1B,6BAAA,CAA8B,KAAA;EAAA,YAAA;AAAA"}
+{"version":3,"file":"cookie.d.ts","names":[],"sources":["../../../src/lib/cookie.ts"],"mappings":";KAsEK,gBAAA;EAAqB,MAAA;EAA4B,qBAAA;EAAiC,MAAA;EAAiB,MAAA;AAAA;AAAA,KACnG,mBAAA;EAAwB,qBAAA;EAAiC,MAAM;AAAA;AAAA,KASxD,YAAA;EACV,GAAA,GAAM,IAAA;EACN,MAAA,QAAc,MAAA;EACd,GAAA,GAAM,IAAA,UAAc,KAAA,UAAe,OAAA,EAAS,gBAAA;EAC5C,WAAA,GAAc,IAAA,UAAc,KAAA,iBAAsB,OAAA,EAAS,gBAAA,GAAmB,mBAAA;EAC9E,MAAA,GAAS,IAAA,UAAc,OAAA,EAAS,mBAAA;AAAA;AAAA,iBAIZ,6BAAA,IAAiC,OAAO,CAAC,YAAA;AAAA,iBAuBzC,kBAAA,IAAsB,OAAO,CAAC,YAAA;AAAA,iBAWpC,sBAAA,IAA0B,YAAY;AAAA,iBAiBtC,yBAAA,IAA6B,YAAY;AAAA,iBAsGzC,eAAA,CAAgB,IAAY;AAAA,iBAK5B,mBAAA,IAAuB,MAAM;AAAA,iBASvB,SAAA,CAAU,IAAA,WAAe,OAAO;AAAA,iBAKhC,QAAA,IAAY,OAAO;AAAA,iBAgGzB,uBAAA,CAAwB,IAAA,UAAc,KAAA,iBAAsB,OAAA,EAAS,gBAAA,GAAmB,mBAAmB;AAAA,iBASrG,iBAAA,CAAkB,IAAA,UAAc,KAAA,iBAAsB,OAAA,EAAS,gBAAA,GAAmB,mBAAA,GAAmB,OAAA;AAAA,iBAK3G,kBAAA,CAAmB,IAAA,UAAc,OAAA,EAAS,mBAAmB;AAAA,iBAKvD,YAAA,CAAa,IAAA,UAAc,OAAA,EAAS,mBAAA,GAAmB,OAAA;AAAA,iBAK7D,eAAA,CAAgB,IAAA,UAAc,KAAA,UAAe,OAAA,EAAS,gBAAgB;AAAA,iBAKhE,SAAA,CAAU,IAAA,UAAc,KAAA,UAAe,OAAA,EAAS,gBAAA,GAAgB,OAAA;AAAA,iBAKhE,oBAAA,IAAoB,OAAA;;;;iBAe1B,6BAAA,CAA8B,KAAA;EAAA,YAAA;AAAA"}

package/dist/esm/lib/cookie.js

@@ -2,10 +2,7 @@ import { HexclaveAssertionError } from "@hexclave/shared/dist/utils/errors";
 import { cookies, headers } from "@hexclave/sc/force-react-server";
 import { isBrowserLike } from "@hexclave/shared/dist/utils/env";
 import Cookies from "js-cookie";
-
-//#region ../../node_modules/.pnpm/oauth4webapi@3.8.5/node_modules/oauth4webapi/build/index.js
-let USER_AGENT;
-if (typeof navigator === "undefined" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 ")) USER_AGENT = `oauth4webapi/v3.8.5`;
+if (typeof navigator === "undefined" || !navigator.userAgent?.startsWith?.("Mozilla/5.0 "));
 const ERR_INVALID_ARG_VALUE = "ERR_INVALID_ARG_VALUE";
 const ERR_INVALID_ARG_TYPE = "ERR_INVALID_ARG_TYPE";
 function CodedTypeError(message, code, cause) {
@@ -83,7 +80,7 @@ function assertString(input, it, code, cause) {
 	}
 }
 function randomBytes() {
-	return b64u(crypto.getRandomValues(new Uint8Array(32)));
+	return b64u(crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(32)));
 }
 function generateRandomCodeVerifier() {
 	return randomBytes();
@@ -95,22 +92,7 @@ async function calculatePKCECodeChallenge(codeVerifier) {
 	assertString(codeVerifier, "codeVerifier");
 	return b64u(await crypto.subtle.digest("SHA-256", buf(codeVerifier)));
 }
-const URLParse = URL.parse ? (url, base) => URL.parse(url, base) : (url, base) => {
-	try {
-		return new URL(url, base);
-	} catch {
-		return null;
-	}
-};
-const tokenMatch = "[a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+";
-const token68Match = "[a-zA-Z0-9\\-\\._\\~\\+\\/]+={0,2}";
-const quotedParamMatcher = "(" + tokenMatch + ")\\s*=\\s*\"((?:[^\"\\\\]|\\\\[\\s\\S])*)\"";
-const paramMatcher = "(" + tokenMatch + ")\\s*=\\s*([a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+)";
-const schemeRE = new RegExp("^[,\\s]*(" + tokenMatch + ")");
-const quotedParamRE = new RegExp("^[,\\s]*" + quotedParamMatcher + "[,\\s]*(.*)");
-const unquotedParamRE = new RegExp("^[,\\s]*" + paramMatcher + "[,\\s]*(.*)");
-const token68ParamRE = new RegExp("^(" + token68Match + ")(?:$|[,\\s])(.*)");
-
+URL.parse;
 //#endregion
 //#region src/lib/cookie.ts
 function ensureClient() {
@@ -350,7 +332,7 @@ function consumeVerifierAndStateCookie(state) {
 	deleteCookieClient(stackCookieName, {});
 	return { codeVerifier };
 }
-
 //#endregion
 export { consumeVerifierAndStateCookie, createBrowserCookieHelper, createCookieHelper, createCookieHelperSync, createPlaceholderCookieHelper, deleteCookie, deleteCookieClient, getAllCookiesClient, getCookie, getCookieClient, isSecure, saveVerifierAndState, setCookie, setCookieClient, setOrDeleteCookie, setOrDeleteCookieClient };
+
 //# sourceMappingURL=cookie.js.map