@innvoid/getmarket-sdk 0.2.7 → 0.2.9

package/dist/chunk-HNOUEVHW.js

@@ -0,0 +1,410 @@
+import {
+  HEADER_INTERNAL_API_KEY,
+  getRequestContextFromHeaders
+} from "./chunk-KXXIMSON.js";
+
+// src/middlewares/parseHeaders.ts
+function parseHeaders(req, _res, next) {
+  req.context = getRequestContextFromHeaders(req.headers);
+  next();
+}
+
+// src/middlewares/requestId.ts
+import { randomUUID, randomBytes } from "crypto";
+var REQUEST_ID_HEADER = "x-request-id";
+var REQUEST_ID_HEADER_ALT = "x-requestid";
+var RESPONSE_REQUEST_ID_HEADER = "X-Request-Id";
+function requestId(req, res, next) {
+  const headerId = req.headers[REQUEST_ID_HEADER] || req.headers[REQUEST_ID_HEADER_ALT];
+  const id = headerId?.trim() || randomUUID();
+  req.requestId = id;
+  res.locals.requestId = id;
+  res.setHeader(RESPONSE_REQUEST_ID_HEADER, id);
+  next();
+}
+
+// src/middlewares/internalAuth.ts
+import fs from "fs";
+import crypto from "crypto";
+
+// src/middlewares/respond.ts
+function sendOk(_req, res, data, statusCode = 200) {
+  return res.status(statusCode).json({ ok: true, data, requestId: res.locals?.requestId ?? null });
+}
+function sendError(_req, res, statusCode, code, message, details) {
+  return res.status(statusCode).json({
+    ok: false,
+    error: { code, message, ...details !== void 0 ? { details } : {} },
+    requestId: res.locals?.requestId ?? null
+  });
+}
+
+// src/middlewares/internalAuth.ts
+function readSecretFile(path) {
+  if (!path) return null;
+  try {
+    const v = fs.readFileSync(path, "utf8").trim();
+    return v.length ? v : null;
+  } catch {
+    return null;
+  }
+}
+function splitKeys(v) {
+  if (!v) return [];
+  return v.split(",").map((s) => s.trim()).filter(Boolean);
+}
+function getExpectedKeys() {
+  const fileKey = readSecretFile(process.env.INTERNAL_API_KEY_FILE);
+  const envKey = (process.env.INTERNAL_API_KEY || "").trim();
+  const raw = fileKey || envKey;
+  return splitKeys(raw);
+}
+function extractToken(req) {
+  const apiKey = (req.header(HEADER_INTERNAL_API_KEY) || "").trim();
+  return apiKey || null;
+}
+function safeEquals(a, b) {
+  const aa = Buffer.from(a);
+  const bb = Buffer.from(b);
+  if (aa.length !== bb.length) return false;
+  return crypto.timingSafeEqual(aa, bb);
+}
+function internalAuth(req, res, next) {
+  const token = extractToken(req);
+  if (!token) {
+    return sendError(req, res, 401, "UNAUTHORIZED", `Missing internal api key (${HEADER_INTERNAL_API_KEY})`);
+  }
+  const expectedKeys = getExpectedKeys();
+  if (expectedKeys.length === 0) {
+    return sendError(
+      req,
+      res,
+      500,
+      "MISCONFIGURED_INTERNAL_AUTH",
+      "Internal api key not configured (INTERNAL_API_KEY or INTERNAL_API_KEY_FILE)"
+    );
+  }
+  const ok = expectedKeys.some((k) => safeEquals(token, k));
+  if (!ok) {
+    return sendError(req, res, 403, "FORBIDDEN", "Invalid internal api key");
+  }
+  return next();
+}
+
+// src/middlewares/authorization.ts
+function getAuth(req) {
+  return req.auth ?? {};
+}
+function hasAuthContext(req) {
+  return !!req.auth;
+}
+function normalizeCode(v) {
+  if (!v) return null;
+  if (typeof v === "string") return v;
+  if (typeof v === "object") return v.code || v.name || null;
+  return null;
+}
+function rolesSet(auth) {
+  const out = /* @__PURE__ */ new Set();
+  for (const r of auth.roles || []) {
+    const c = normalizeCode(r);
+    if (c) out.add(c);
+  }
+  return out;
+}
+function permsSet(list) {
+  const out = /* @__PURE__ */ new Set();
+  for (const p of list || []) {
+    const c = normalizeCode(p);
+    if (c) out.add(c);
+  }
+  return out;
+}
+function requireAuthContext() {
+  return (req, res, next) => {
+    if (!hasAuthContext(req)) {
+      return sendError(req, res, 401, "UNAUTHORIZED", "Missing auth context");
+    }
+    return next();
+  };
+}
+function isSysAdmin(auth, sysAdminRole) {
+  const have = rolesSet(auth);
+  return have.has(sysAdminRole);
+}
+function requirePermissions(perms, options) {
+  const sysAdminBypass = options?.sysAdminBypass !== false;
+  const sysAdminRole = options?.sysAdminRole || "SYS_ADMIN";
+  return (req, res, next) => {
+    if (!hasAuthContext(req)) {
+      return sendError(req, res, 401, "UNAUTHORIZED", "Missing auth context");
+    }
+    const auth = getAuth(req);
+    if (sysAdminBypass && isSysAdmin(auth, sysAdminRole)) return next();
+    const allow = permsSet(auth.permissions);
+    const deny = permsSet(auth.denied_permissions);
+    for (const p of perms) {
+      if (deny.has(p)) {
+        return sendError(req, res, 403, "FORBIDDEN", `Denied permission: ${p}`, {
+          denied: p
+        });
+      }
+    }
+    const missing = perms.filter((p) => !allow.has(p));
+    if (missing.length) {
+      return sendError(req, res, 403, "FORBIDDEN", "Missing permissions", {
+        missing,
+        mode: "ALL"
+      });
+    }
+    return next();
+  };
+}
+function requireAnyPermission(perms, options) {
+  const sysAdminBypass = options?.sysAdminBypass !== false;
+  const sysAdminRole = options?.sysAdminRole || "SYS_ADMIN";
+  return (req, res, next) => {
+    if (!hasAuthContext(req)) {
+      return sendError(req, res, 401, "UNAUTHORIZED", "Missing auth context");
+    }
+    const auth = getAuth(req);
+    if (sysAdminBypass && isSysAdmin(auth, sysAdminRole)) return next();
+    const allow = permsSet(auth.permissions);
+    const deny = permsSet(auth.denied_permissions);
+    for (const p of perms) {
+      if (deny.has(p)) {
+        return sendError(req, res, 403, "FORBIDDEN", `Denied permission: ${p}`, {
+          denied: p
+        });
+      }
+    }
+    const ok = perms.some((p) => allow.has(p));
+    if (!ok) {
+      return sendError(req, res, 403, "FORBIDDEN", "Permission denied", {
+        required: perms,
+        mode: "ANY"
+      });
+    }
+    return next();
+  };
+}
+function requireRoles(roles, options) {
+  const sysAdminBypass = options?.sysAdminBypass !== false;
+  const sysAdminRole = options?.sysAdminRole || "SYS_ADMIN";
+  return (req, res, next) => {
+    if (!hasAuthContext(req)) {
+      return sendError(req, res, 401, "UNAUTHORIZED", "Missing auth context");
+    }
+    const auth = getAuth(req);
+    if (sysAdminBypass && isSysAdmin(auth, sysAdminRole)) return next();
+    const have = rolesSet(auth);
+    if (!roles.some((r) => have.has(r))) {
+      return sendError(req, res, 403, "FORBIDDEN", "Role not allowed", {
+        required: roles,
+        mode: "ANY"
+      });
+    }
+    return next();
+  };
+}
+function requireRolesOrAnyPermission(roles, perms, options) {
+  const sysAdminBypass = options?.sysAdminBypass !== false;
+  const sysAdminRole = options?.sysAdminRole || "SYS_ADMIN";
+  return (req, res, next) => {
+    if (!hasAuthContext(req)) {
+      return sendError(req, res, 401, "UNAUTHORIZED", "Missing auth context");
+    }
+    const auth = getAuth(req);
+    if (sysAdminBypass && isSysAdmin(auth, sysAdminRole)) return next();
+    const haveRoles = rolesSet(auth);
+    const allow = permsSet(auth.permissions);
+    const deny = permsSet(auth.denied_permissions);
+    for (const p of perms) {
+      if (deny.has(p)) {
+        return sendError(req, res, 403, "FORBIDDEN", `Denied permission: ${p}`, {
+          denied: p
+        });
+      }
+    }
+    const okRole = roles.some((r) => haveRoles.has(r));
+    const okPerm = perms.some((p) => allow.has(p));
+    if (!okRole && !okPerm) {
+      return sendError(req, res, 403, "FORBIDDEN", "Access denied", {
+        roles,
+        permissions: perms,
+        mode: "ROLES_OR_PERMS_ANY"
+      });
+    }
+    return next();
+  };
+}
+
+// src/middlewares/guards.ts
+function normalizeRole(r) {
+  if (!r) return null;
+  if (typeof r === "string") return r;
+  return r.code || r.name || null;
+}
+function normalizePerm(p) {
+  if (!p) return null;
+  if (typeof p === "string") return p;
+  return p.code || p.name || null;
+}
+function getAuth2(req) {
+  return req.auth ?? {};
+}
+function roleSet(auth) {
+  return new Set(
+    (auth.roles ?? []).map(normalizeRole).filter(Boolean)
+  );
+}
+function permissionSets(auth) {
+  const allow = new Set(
+    (auth.permissions ?? []).map(normalizePerm).filter(Boolean)
+  );
+  const deny = new Set(
+    (auth.denied_permissions ?? []).map(normalizePerm).filter(Boolean)
+  );
+  return { allow, deny };
+}
+function normalizeHandlers(auth) {
+  if (!auth) return [];
+  return Array.isArray(auth) ? auth : [auth];
+}
+function buildBaseChain(options) {
+  const chain = [];
+  if (options?.includeParseHeaders !== false) {
+    chain.push(parseHeaders);
+  }
+  chain.push(...normalizeHandlers(options?.auth));
+  return chain;
+}
+function hasSysAdmin(auth, options) {
+  const sysAdminBypass = options?.sysAdminBypass !== false;
+  if (!sysAdminBypass) return false;
+  const sysAdminRole = options?.sysAdminRole || "SYS_ADMIN";
+  return roleSet(auth).has(sysAdminRole);
+}
+function allowSysAdminOrAnyPermission(perms, options) {
+  const required = (Array.isArray(perms) ? perms : [perms]).filter(Boolean);
+  return [
+    ...buildBaseChain(options),
+    (req, res, next) => {
+      const auth = getAuth2(req);
+      if (hasSysAdmin(auth, options)) return next();
+      const { allow, deny } = permissionSets(auth);
+      for (const p of required) {
+        if (deny.has(p)) {
+          return sendError(req, res, 403, "FORBIDDEN", `Denied permission: ${p}`, {
+            denied: p
+          });
+        }
+      }
+      const ok = required.some((p) => allow.has(p));
+      if (!ok) {
+        return sendError(req, res, 403, "FORBIDDEN", "Missing permissions (ANY)", {
+          required,
+          mode: "ANY"
+        });
+      }
+      return next();
+    }
+  ];
+}
+function allowSysAdminOrPermissionsAll(perms, options) {
+  const required = (Array.isArray(perms) ? perms : [perms]).filter(Boolean);
+  return [
+    ...buildBaseChain(options),
+    (req, res, next) => {
+      const auth = getAuth2(req);
+      if (hasSysAdmin(auth, options)) return next();
+      const { allow, deny } = permissionSets(auth);
+      for (const p of required) {
+        if (deny.has(p)) {
+          return sendError(req, res, 403, "FORBIDDEN", `Denied permission: ${p}`, {
+            denied: p
+          });
+        }
+      }
+      const missing = required.filter((p) => !allow.has(p));
+      if (missing.length) {
+        return sendError(req, res, 403, "FORBIDDEN", "Missing permissions (ALL)", {
+          required,
+          missing,
+          mode: "ALL"
+        });
+      }
+      return next();
+    }
+  ];
+}
+function allowSysAdminOrRoles(roles, options) {
+  const required = (Array.isArray(roles) ? roles : [roles]).filter(Boolean);
+  return [
+    ...buildBaseChain(options),
+    (req, res, next) => {
+      const auth = getAuth2(req);
+      if (hasSysAdmin(auth, options)) return next();
+      const have = roleSet(auth);
+      const ok = required.some((r) => have.has(r));
+      if (!ok) {
+        return sendError(req, res, 403, "FORBIDDEN", "Role not allowed", {
+          required,
+          mode: "ANY"
+        });
+      }
+      return next();
+    }
+  ];
+}
+function allowSysAdminOrRolesOrAnyPermission(roles, permissions, options) {
+  const requiredRoles = (Array.isArray(roles) ? roles : [roles]).filter(Boolean);
+  const requiredPerms = (Array.isArray(permissions) ? permissions : [permissions]).filter(Boolean);
+  return [
+    ...buildBaseChain(options),
+    (req, res, next) => {
+      const auth = getAuth2(req);
+      if (hasSysAdmin(auth, options)) return next();
+      const { allow, deny } = permissionSets(auth);
+      const haveRoles = roleSet(auth);
+      for (const p of requiredPerms) {
+        if (deny.has(p)) {
+          return sendError(req, res, 403, "FORBIDDEN", `Denied permission: ${p}`, {
+            denied: p
+          });
+        }
+      }
+      const okRole = requiredRoles.some((r) => haveRoles.has(r));
+      if (okRole) return next();
+      const okPerm = requiredPerms.some((p) => allow.has(p));
+      if (okPerm) return next();
+      return sendError(req, res, 403, "FORBIDDEN", "Permission denied", {
+        roles: requiredRoles,
+        permissions: requiredPerms,
+        mode: "ROLES_OR_ANY_PERMISSION"
+      });
+    }
+  ];
+}
+function allowAuthAdminOrPerm(permission, options) {
+  return allowSysAdminOrRolesOrAnyPermission(["AUTH_ADMIN"], [permission], options);
+}
+
+export {
+  parseHeaders,
+  requestId,
+  sendOk,
+  sendError,
+  internalAuth,
+  requireAuthContext,
+  requirePermissions,
+  requireAnyPermission,
+  requireRoles,
+  requireRolesOrAnyPermission,
+  allowSysAdminOrAnyPermission,
+  allowSysAdminOrPermissionsAll,
+  allowSysAdminOrRoles,
+  allowSysAdminOrRolesOrAnyPermission,
+  allowAuthAdminOrPerm
+};
+//# sourceMappingURL=chunk-HNOUEVHW.js.map

package/dist/chunk-HNOUEVHW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middlewares/parseHeaders.ts","../src/middlewares/requestId.ts","../src/middlewares/internalAuth.ts","../src/middlewares/respond.ts","../src/middlewares/authorization.ts","../src/middlewares/guards.ts"],"sourcesContent":["// sdk/src/middlewares/parseHeaders.ts\nimport type {Request, Response, NextFunction} from \"express\";\nimport {getRequestContextFromHeaders} from \"../headers\";\n\n/**\n * ✅ NO-LEGACY / ESTÁNDAR:\n * - Lee SOLO x-company y x-branch (UIDs planos)\n * - Setea req.context = { company_uid, branch_uid }\n * - NO toca req.auth (auth lo setea authentication/requireAuth)\n */\nexport default function parseHeaders(req: Request, _res: Response, next: NextFunction) {\n    (req as any).context = getRequestContextFromHeaders(req.headers as any);\n    next();\n}\n","// middlewares/requestId.ts\nimport type {Request, Response, NextFunction} from \"express\";\nimport {randomUUID, randomBytes} from \"crypto\";\n\nexport const REQUEST_ID_HEADER = \"x-request-id\";\nexport const REQUEST_ID_HEADER_ALT = \"x-requestid\";\nexport const RESPONSE_REQUEST_ID_HEADER = \"X-Request-Id\";\n\n// Si quieres IDs más cortos (opcional). Por defecto usamos UUID.\nfunction nanoidLike(len = 21) {\n    return randomBytes(16).toString(\"base64url\").slice(0, len);\n}\n\nexport default function requestId(req: Request, res: Response, next: NextFunction) {\n    const headerId = (req.headers[REQUEST_ID_HEADER] || req.headers[REQUEST_ID_HEADER_ALT]) as\n        | string\n        | undefined;\n\n    // ✅ estándar único: usa UUID (o cambia a nanoidLike() si prefieres corto)\n    const id = headerId?.trim() || randomUUID();\n\n    // ✅ estándar único (no legacy)\n    (req as any).requestId = id;\n    res.locals.requestId = id;\n\n    // ✅ respuesta\n    res.setHeader(RESPONSE_REQUEST_ID_HEADER, id);\n\n    next();\n}\n","import type {Request, Response, NextFunction} from \"express\";\nimport fs from \"fs\";\nimport crypto from \"crypto\";\nimport {sendError} from \"./respond\";\nimport {HEADER_INTERNAL_API_KEY} from \"../headers\";\n\nfunction readSecretFile(path?: string): string | null {\n    if (!path) return null;\n    try {\n        const v = fs.readFileSync(path, \"utf8\").trim();\n        return v.length ? v : null;\n    } catch {\n        return null;\n    }\n}\n\nfunction splitKeys(v?: string | null): string[] {\n    if (!v) return [];\n    return v.split(\",\").map((s) => s.trim()).filter(Boolean);\n}\n\nfunction getExpectedKeys(): string[] {\n    const fileKey = readSecretFile(process.env.INTERNAL_API_KEY_FILE);\n    const envKey = (process.env.INTERNAL_API_KEY || \"\").trim();\n    const raw = fileKey || envKey;\n    return splitKeys(raw);\n}\n\nfunction extractToken(req: Request): string | null {\n    const apiKey = (req.header(HEADER_INTERNAL_API_KEY) || \"\").trim();\n    return apiKey || null;\n}\n\nfunction safeEquals(a: string, b: string): boolean {\n    const aa = Buffer.from(a);\n    const bb = Buffer.from(b);\n    if (aa.length !== bb.length) return false;\n    return crypto.timingSafeEqual(aa, bb);\n}\n\nexport default function internalAuth(req: Request, res: Response, next: NextFunction) {\n    const token = extractToken(req);\n\n    if (!token) {\n        return sendError(req, res, 401, \"UNAUTHORIZED\", `Missing internal api key (${HEADER_INTERNAL_API_KEY})`);\n    }\n\n    const expectedKeys = getExpectedKeys();\n    if (expectedKeys.length === 0) {\n        return sendError(\n            req,\n            res,\n            500,\n            \"MISCONFIGURED_INTERNAL_AUTH\",\n            \"Internal api key not configured (INTERNAL_API_KEY or INTERNAL_API_KEY_FILE)\"\n        );\n    }\n\n    const ok = expectedKeys.some((k) => safeEquals(token, k));\n    if (!ok) {\n        return sendError(req, res, 403, \"FORBIDDEN\", \"Invalid internal api key\");\n    }\n\n    return next();\n}\n","// packages/sdk/src/middleware/respond.ts\nimport type {Request, Response} from \"express\";\n\nexport function sendOk<T>(_req: Request, res: Response, data: T, statusCode = 200) {\n    return res.status(statusCode).json({ok: true, data, requestId: res.locals?.requestId ?? null});\n}\n\nexport function sendError(\n    _req: Request,\n    res: Response,\n    statusCode: number,\n    code: string,\n    message: string,\n    details?: any\n) {\n    return res.status(statusCode).json({\n        ok: false,\n        error: {code, message, ...(details !== undefined ? {details} : {})},\n        requestId: res.locals?.requestId ?? null,\n    });\n}\n","import type {Request, Response, NextFunction} from \"express\";\nimport {sendError} from \"./respond\";\n\ntype AuthRole = string | { code?: string; name?: string };\ntype AuthPermission = string | { code?: string; name?: string };\n\ntype AuthShape = {\n  roles?: AuthRole[];\n  permissions?: AuthPermission[];\n  denied_permissions?: AuthPermission[];\n};\n\nfunction getAuth(req: Request): AuthShape {\n  return ((req as any).auth ?? {}) as AuthShape;\n}\n\nfunction hasAuthContext(req: Request): boolean {\n  return !!(req as any).auth;\n}\n\nfunction normalizeCode(v: any): string | null {\n  if (!v) return null;\n  if (typeof v === \"string\") return v;\n  if (typeof v === \"object\") return v.code || v.name || null;\n  return null;\n}\n\nfunction rolesSet(auth: AuthShape): Set<string> {\n  const out = new Set<string>();\n  for (const r of auth.roles || []) {\n    const c = normalizeCode(r);\n    if (c) out.add(c);\n  }\n  return out;\n}\n\nfunction permsSet(list?: AuthPermission[]): Set<string> {\n  const out = new Set<string>();\n  for (const p of list || []) {\n    const c = normalizeCode(p);\n    if (c) out.add(c);\n  }\n  return out;\n}\n\nexport function requireAuthContext() {\n  return (req: Request, res: Response, next: NextFunction) => {\n    if (!hasAuthContext(req)) {\n      return sendError(req, res, 401, \"UNAUTHORIZED\", \"Missing auth context\");\n    }\n    return next();\n  };\n}\n\nfunction isSysAdmin(auth: AuthShape, sysAdminRole: string) {\n  const have = rolesSet(auth);\n  return have.has(sysAdminRole);\n}\n\nexport function requirePermissions(\n  perms: string[],\n  options?: { sysAdminBypass?: boolean; sysAdminRole?: string }\n) {\n  const sysAdminBypass = options?.sysAdminBypass !== false;\n  const sysAdminRole = options?.sysAdminRole || \"SYS_ADMIN\";\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    if (!hasAuthContext(req)) {\n      return sendError(req, res, 401, \"UNAUTHORIZED\", \"Missing auth context\");\n    }\n\n    const auth = getAuth(req);\n\n    if (sysAdminBypass && isSysAdmin(auth, sysAdminRole)) return next();\n\n    const allow = permsSet(auth.permissions);\n    const deny = permsSet(auth.denied_permissions);\n\n    for (const p of perms) {\n      if (deny.has(p)) {\n        return sendError(req, res, 403, \"FORBIDDEN\", `Denied permission: ${p}`, {\n          denied: p,\n        });\n      }\n    }\n\n    const missing = perms.filter((p) => !allow.has(p));\n    if (missing.length) {\n      return sendError(req, res, 403, \"FORBIDDEN\", \"Missing permissions\", {\n        missing,\n        mode: \"ALL\",\n      });\n    }\n\n    return next();\n  };\n}\n\nexport function requireAnyPermission(\n  perms: string[],\n  options?: { sysAdminBypass?: boolean; sysAdminRole?: string }\n) {\n  const sysAdminBypass = options?.sysAdminBypass !== false;\n  const sysAdminRole = options?.sysAdminRole || \"SYS_ADMIN\";\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    if (!hasAuthContext(req)) {\n      return sendError(req, res, 401, \"UNAUTHORIZED\", \"Missing auth context\");\n    }\n\n    const auth = getAuth(req);\n\n    if (sysAdminBypass && isSysAdmin(auth, sysAdminRole)) return next();\n\n    const allow = permsSet(auth.permissions);\n    const deny = permsSet(auth.denied_permissions);\n\n    for (const p of perms) {\n      if (deny.has(p)) {\n        return sendError(req, res, 403, \"FORBIDDEN\", `Denied permission: ${p}`, {\n          denied: p,\n        });\n      }\n    }\n\n    const ok = perms.some((p) => allow.has(p));\n    if (!ok) {\n      return sendError(req, res, 403, \"FORBIDDEN\", \"Permission denied\", {\n        required: perms,\n        mode: \"ANY\",\n      });\n    }\n\n    return next();\n  };\n}\n\nexport function requireRoles(\n  roles: string[],\n  options?: { sysAdminBypass?: boolean; sysAdminRole?: string }\n) {\n  const sysAdminBypass = options?.sysAdminBypass !== false;\n  const sysAdminRole = options?.sysAdminRole || \"SYS_ADMIN\";\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    if (!hasAuthContext(req)) {\n      return sendError(req, res, 401, \"UNAUTHORIZED\", \"Missing auth context\");\n    }\n\n    const auth = getAuth(req);\n\n    if (sysAdminBypass && isSysAdmin(auth, sysAdminRole)) return next();\n\n    const have = rolesSet(auth);\n    if (!roles.some((r) => have.has(r))) {\n      return sendError(req, res, 403, \"FORBIDDEN\", \"Role not allowed\", {\n        required: roles,\n        mode: \"ANY\",\n      });\n    }\n\n    return next();\n  };\n}\n\nexport function requireRolesOrAnyPermission(\n  roles: string[],\n  perms: string[],\n  options?: { sysAdminBypass?: boolean; sysAdminRole?: string }\n) {\n  const sysAdminBypass = options?.sysAdminBypass !== false;\n  const sysAdminRole = options?.sysAdminRole || \"SYS_ADMIN\";\n\n  return (req: Request, res: Response, next: NextFunction) => {\n    if (!hasAuthContext(req)) {\n      return sendError(req, res, 401, \"UNAUTHORIZED\", \"Missing auth context\");\n    }\n\n    const auth = getAuth(req);\n\n    if (sysAdminBypass && isSysAdmin(auth, sysAdminRole)) return next();\n\n    const haveRoles = rolesSet(auth);\n    const allow = permsSet(auth.permissions);\n    const deny = permsSet(auth.denied_permissions);\n\n    for (const p of perms) {\n      if (deny.has(p)) {\n        return sendError(req, res, 403, \"FORBIDDEN\", `Denied permission: ${p}`, {\n          denied: p,\n        });\n      }\n    }\n\n    const okRole = roles.some((r) => haveRoles.has(r));\n    const okPerm = perms.some((p) => allow.has(p));\n\n    if (!okRole && !okPerm) {\n      return sendError(req, res, 403, \"FORBIDDEN\", \"Access denied\", {\n        roles,\n        permissions: perms,\n        mode: \"ROLES_OR_PERMS_ANY\",\n      });\n    }\n\n    return next();\n  };\n}\n","import type {Request, Response, NextFunction, RequestHandler} from \"express\";\nimport parseHeaders from \"./parseHeaders\";\nimport {sendError} from \"./respond\";\n\ntype RoleShape = string | { code?: string; name?: string };\ntype PermShape = string | { code?: string; name?: string };\n\ntype GuardOptions = {\n  /**\n   * Middleware(s) de autenticación del microservicio.\n   * Ej:\n   *   allowSysAdminOrAnyPermission([\"sale.read\"], { auth: authEmployeeRequired })\n   */\n  auth?: RequestHandler | RequestHandler[];\n\n  /**\n   * Si true, agrega parseHeaders automáticamente.\n   * Default: true\n   */\n  includeParseHeaders?: boolean;\n\n  /**\n   * Rol que representa SysAdmin.\n   * Default: SYS_ADMIN\n   */\n  sysAdminRole?: string;\n\n  /**\n   * Si false, desactiva bypass por SysAdmin.\n   * Default: true\n   */\n  sysAdminBypass?: boolean;\n};\n\nfunction normalizeRole(r: RoleShape): string | null {\n  if (!r) return null;\n  if (typeof r === \"string\") return r;\n  return r.code || r.name || null;\n}\n\nfunction normalizePerm(p: PermShape): string | null {\n  if (!p) return null;\n  if (typeof p === \"string\") return p;\n  return p.code || p.name || null;\n}\n\nfunction getAuth(req: Request) {\n  return ((req as any).auth ?? {}) as {\n    roles?: RoleShape[];\n    permissions?: PermShape[];\n    denied_permissions?: PermShape[];\n  };\n}\n\nfunction roleSet(auth: ReturnType<typeof getAuth>) {\n  return new Set<string>(\n    (auth.roles ?? []).map(normalizeRole).filter(Boolean) as string[]\n  );\n}\n\nfunction permissionSets(auth: ReturnType<typeof getAuth>) {\n  const allow = new Set<string>(\n    (auth.permissions ?? []).map(normalizePerm).filter(Boolean) as string[]\n  );\n  const deny = new Set<string>(\n    (auth.denied_permissions ?? []).map(normalizePerm).filter(Boolean) as string[]\n  );\n  return {allow, deny};\n}\n\nfunction normalizeHandlers(auth?: RequestHandler | RequestHandler[]): RequestHandler[] {\n  if (!auth) return [];\n  return Array.isArray(auth) ? auth : [auth];\n}\n\nfunction buildBaseChain(options?: GuardOptions): RequestHandler[] {\n  const chain: RequestHandler[] = [];\n\n  if (options?.includeParseHeaders !== false) {\n    chain.push(parseHeaders);\n  }\n\n  chain.push(...normalizeHandlers(options?.auth));\n\n  return chain;\n}\n\nfunction hasSysAdmin(auth: ReturnType<typeof getAuth>, options?: GuardOptions): boolean {\n  const sysAdminBypass = options?.sysAdminBypass !== false;\n  if (!sysAdminBypass) return false;\n\n  const sysAdminRole = options?.sysAdminRole || \"SYS_ADMIN\";\n  return roleSet(auth).has(sysAdminRole);\n}\n\n/**\n * Exige que exista req.auth.\n * Útil cuando auth ya fue montado antes y quieres validar contexto.\n */\nexport function requireAuthContext(options?: GuardOptions): RequestHandler[] {\n  return [\n    ...buildBaseChain(options),\n    (req: Request, res: Response, next: NextFunction) => {\n      if (!(req as any).auth) {\n        return sendError(req, res, 401, \"UNAUTHORIZED\", \"Missing auth context\");\n      }\n      return next();\n    },\n  ];\n}\n\n/**\n * SYS_ADMIN bypass OR ANY permission\n */\nexport function allowSysAdminOrAnyPermission(\n  perms: string[] | string,\n  options?: GuardOptions\n): RequestHandler[] {\n  const required = (Array.isArray(perms) ? perms : [perms]).filter(Boolean);\n\n  return [\n    ...buildBaseChain(options),\n    (req: Request, res: Response, next: NextFunction) => {\n      const auth = getAuth(req);\n\n      if (hasSysAdmin(auth, options)) return next();\n\n      const {allow, deny} = permissionSets(auth);\n\n      for (const p of required) {\n        if (deny.has(p)) {\n          return sendError(req, res, 403, \"FORBIDDEN\", `Denied permission: ${p}`, {\n            denied: p,\n          });\n        }\n      }\n\n      const ok = required.some((p) => allow.has(p));\n      if (!ok) {\n        return sendError(req, res, 403, \"FORBIDDEN\", \"Missing permissions (ANY)\", {\n          required,\n          mode: \"ANY\",\n        });\n      }\n\n      return next();\n    },\n  ];\n}\n\n/**\n * SYS_ADMIN bypass OR ALL permissions\n */\nexport function allowSysAdminOrPermissionsAll(\n  perms: string[] | string,\n  options?: GuardOptions\n): RequestHandler[] {\n  const required = (Array.isArray(perms) ? perms : [perms]).filter(Boolean);\n\n  return [\n    ...buildBaseChain(options),\n    (req: Request, res: Response, next: NextFunction) => {\n      const auth = getAuth(req);\n\n      if (hasSysAdmin(auth, options)) return next();\n\n      const {allow, deny} = permissionSets(auth);\n\n      for (const p of required) {\n        if (deny.has(p)) {\n          return sendError(req, res, 403, \"FORBIDDEN\", `Denied permission: ${p}`, {\n            denied: p,\n          });\n        }\n      }\n\n      const missing = required.filter((p) => !allow.has(p));\n      if (missing.length) {\n        return sendError(req, res, 403, \"FORBIDDEN\", \"Missing permissions (ALL)\", {\n          required,\n          missing,\n          mode: \"ALL\",\n        });\n      }\n\n      return next();\n    },\n  ];\n}\n\n/**\n * SYS_ADMIN bypass OR ANY role\n */\nexport function allowSysAdminOrRoles(\n  roles: string[] | string,\n  options?: GuardOptions\n): RequestHandler[] {\n  const required = (Array.isArray(roles) ? roles : [roles]).filter(Boolean);\n\n  return [\n    ...buildBaseChain(options),\n    (req: Request, res: Response, next: NextFunction) => {\n      const auth = getAuth(req);\n\n      if (hasSysAdmin(auth, options)) return next();\n\n      const have = roleSet(auth);\n      const ok = required.some((r) => have.has(r));\n\n      if (!ok) {\n        return sendError(req, res, 403, \"FORBIDDEN\", \"Role not allowed\", {\n          required,\n          mode: \"ANY\",\n        });\n      }\n\n      return next();\n    },\n  ];\n}\n\n/**\n * SYS_ADMIN bypass OR (roles ANY) OR (permissions ANY)\n * denied_permissions siempre gana\n */\nexport function allowSysAdminOrRolesOrAnyPermission(\n  roles: string | string[],\n  permissions: string | string[],\n  options?: GuardOptions\n): RequestHandler[] {\n  const requiredRoles = (Array.isArray(roles) ? roles : [roles]).filter(Boolean);\n  const requiredPerms = (Array.isArray(permissions) ? permissions : [permissions]).filter(Boolean);\n\n  return [\n    ...buildBaseChain(options),\n    (req: Request, res: Response, next: NextFunction) => {\n      const auth = getAuth(req);\n\n      if (hasSysAdmin(auth, options)) return next();\n\n      const {allow, deny} = permissionSets(auth);\n      const haveRoles = roleSet(auth);\n\n      for (const p of requiredPerms) {\n        if (deny.has(p)) {\n          return sendError(req, res, 403, \"FORBIDDEN\", `Denied permission: ${p}`, {\n            denied: p,\n          });\n        }\n      }\n\n      const okRole = requiredRoles.some((r) => haveRoles.has(r));\n      if (okRole) return next();\n\n      const okPerm = requiredPerms.some((p) => allow.has(p));\n      if (okPerm) return next();\n\n      return sendError(req, res, 403, \"FORBIDDEN\", \"Permission denied\", {\n        roles: requiredRoles,\n        permissions: requiredPerms,\n        mode: \"ROLES_OR_ANY_PERMISSION\",\n      });\n    },\n  ];\n}\n\n/**\n * Helper típico para AUTH backoffice\n */\nexport function allowAuthAdminOrPerm(\n  permission: string,\n  options?: GuardOptions\n): RequestHandler[] {\n  return allowSysAdminOrRolesOrAnyPermission([\"AUTH_ADMIN\"], [permission], options);\n}\n"],"mappings":";;;;;;AAUe,SAAR,aAA8B,KAAc,MAAgB,MAAoB;AACnF,EAAC,IAAY,UAAU,6BAA6B,IAAI,OAAc;AACtE,OAAK;AACT;;;ACXA,SAAQ,YAAY,mBAAkB;AAE/B,IAAM,oBAAoB;AAC1B,IAAM,wBAAwB;AAC9B,IAAM,6BAA6B;AAO3B,SAAR,UAA2B,KAAc,KAAe,MAAoB;AAC/E,QAAM,WAAY,IAAI,QAAQ,iBAAiB,KAAK,IAAI,QAAQ,qBAAqB;AAKrF,QAAM,KAAK,UAAU,KAAK,KAAK,WAAW;AAG1C,EAAC,IAAY,YAAY;AACzB,MAAI,OAAO,YAAY;AAGvB,MAAI,UAAU,4BAA4B,EAAE;AAE5C,OAAK;AACT;;;AC5BA,OAAO,QAAQ;AACf,OAAO,YAAY;;;ACCZ,SAAS,OAAU,MAAe,KAAe,MAAS,aAAa,KAAK;AAC/E,SAAO,IAAI,OAAO,UAAU,EAAE,KAAK,EAAC,IAAI,MAAM,MAAM,WAAW,IAAI,QAAQ,aAAa,KAAI,CAAC;AACjG;AAEO,SAAS,UACZ,MACA,KACA,YACA,MACA,SACA,SACF;AACE,SAAO,IAAI,OAAO,UAAU,EAAE,KAAK;AAAA,IAC/B,IAAI;AAAA,IACJ,OAAO,EAAC,MAAM,SAAS,GAAI,YAAY,SAAY,EAAC,QAAO,IAAI,CAAC,EAAE;AAAA,IAClE,WAAW,IAAI,QAAQ,aAAa;AAAA,EACxC,CAAC;AACL;;;ADdA,SAAS,eAAe,MAA8B;AAClD,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACA,UAAM,IAAI,GAAG,aAAa,MAAM,MAAM,EAAE,KAAK;AAC7C,WAAO,EAAE,SAAS,IAAI;AAAA,EAC1B,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AAEA,SAAS,UAAU,GAA6B;AAC5C,MAAI,CAAC,EAAG,QAAO,CAAC;AAChB,SAAO,EAAE,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAC3D;AAEA,SAAS,kBAA4B;AACjC,QAAM,UAAU,eAAe,QAAQ,IAAI,qBAAqB;AAChE,QAAM,UAAU,QAAQ,IAAI,oBAAoB,IAAI,KAAK;AACzD,QAAM,MAAM,WAAW;AACvB,SAAO,UAAU,GAAG;AACxB;AAEA,SAAS,aAAa,KAA6B;AAC/C,QAAM,UAAU,IAAI,OAAO,uBAAuB,KAAK,IAAI,KAAK;AAChE,SAAO,UAAU;AACrB;AAEA,SAAS,WAAW,GAAW,GAAoB;AAC/C,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,MAAI,GAAG,WAAW,GAAG,OAAQ,QAAO;AACpC,SAAO,OAAO,gBAAgB,IAAI,EAAE;AACxC;AAEe,SAAR,aAA8B,KAAc,KAAe,MAAoB;AAClF,QAAM,QAAQ,aAAa,GAAG;AAE9B,MAAI,CAAC,OAAO;AACR,WAAO,UAAU,KAAK,KAAK,KAAK,gBAAgB,6BAA6B,uBAAuB,GAAG;AAAA,EAC3G;AAEA,QAAM,eAAe,gBAAgB;AACrC,MAAI,aAAa,WAAW,GAAG;AAC3B,WAAO;AAAA,MACH;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAEA,QAAM,KAAK,aAAa,KAAK,CAAC,MAAM,WAAW,OAAO,CAAC,CAAC;AACxD,MAAI,CAAC,IAAI;AACL,WAAO,UAAU,KAAK,KAAK,KAAK,aAAa,0BAA0B;AAAA,EAC3E;AAEA,SAAO,KAAK;AAChB;;;AEpDA,SAAS,QAAQ,KAAyB;AACxC,SAAS,IAAY,QAAQ,CAAC;AAChC;AAEA,SAAS,eAAe,KAAuB;AAC7C,SAAO,CAAC,CAAE,IAAY;AACxB;AAEA,SAAS,cAAc,GAAuB;AAC5C,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,OAAO,MAAM,SAAU,QAAO;AAClC,MAAI,OAAO,MAAM,SAAU,QAAO,EAAE,QAAQ,EAAE,QAAQ;AACtD,SAAO;AACT;AAEA,SAAS,SAAS,MAA8B;AAC9C,QAAM,MAAM,oBAAI,IAAY;AAC5B,aAAW,KAAK,KAAK,SAAS,CAAC,GAAG;AAChC,UAAM,IAAI,cAAc,CAAC;AACzB,QAAI,EAAG,KAAI,IAAI,CAAC;AAAA,EAClB;AACA,SAAO;AACT;AAEA,SAAS,SAAS,MAAsC;AACtD,QAAM,MAAM,oBAAI,IAAY;AAC5B,aAAW,KAAK,QAAQ,CAAC,GAAG;AAC1B,UAAM,IAAI,cAAc,CAAC;AACzB,QAAI,EAAG,KAAI,IAAI,CAAC;AAAA,EAClB;AACA,SAAO;AACT;AAEO,SAAS,qBAAqB;AACnC,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,QAAI,CAAC,eAAe,GAAG,GAAG;AACxB,aAAO,UAAU,KAAK,KAAK,KAAK,gBAAgB,sBAAsB;AAAA,IACxE;AACA,WAAO,KAAK;AAAA,EACd;AACF;AAEA,SAAS,WAAW,MAAiB,cAAsB;AACzD,QAAM,OAAO,SAAS,IAAI;AAC1B,SAAO,KAAK,IAAI,YAAY;AAC9B;AAEO,SAAS,mBACd,OACA,SACA;AACA,QAAM,iBAAiB,SAAS,mBAAmB;AACnD,QAAM,eAAe,SAAS,gBAAgB;AAE9C,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,QAAI,CAAC,eAAe,GAAG,GAAG;AACxB,aAAO,UAAU,KAAK,KAAK,KAAK,gBAAgB,sBAAsB;AAAA,IACxE;AAEA,UAAM,OAAO,QAAQ,GAAG;AAExB,QAAI,kBAAkB,WAAW,MAAM,YAAY,EAAG,QAAO,KAAK;AAElE,UAAM,QAAQ,SAAS,KAAK,WAAW;AACvC,UAAM,OAAO,SAAS,KAAK,kBAAkB;AAE7C,eAAW,KAAK,OAAO;AACrB,UAAI,KAAK,IAAI,CAAC,GAAG;AACf,eAAO,UAAU,KAAK,KAAK,KAAK,aAAa,sBAAsB,CAAC,IAAI;AAAA,UACtE,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,UAAU,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;AACjD,QAAI,QAAQ,QAAQ;AAClB,aAAO,UAAU,KAAK,KAAK,KAAK,aAAa,uBAAuB;AAAA,QAClE;AAAA,QACA,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,WAAO,KAAK;AAAA,EACd;AACF;AAEO,SAAS,qBACd,OACA,SACA;AACA,QAAM,iBAAiB,SAAS,mBAAmB;AACnD,QAAM,eAAe,SAAS,gBAAgB;AAE9C,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,QAAI,CAAC,eAAe,GAAG,GAAG;AACxB,aAAO,UAAU,KAAK,KAAK,KAAK,gBAAgB,sBAAsB;AAAA,IACxE;AAEA,UAAM,OAAO,QAAQ,GAAG;AAExB,QAAI,kBAAkB,WAAW,MAAM,YAAY,EAAG,QAAO,KAAK;AAElE,UAAM,QAAQ,SAAS,KAAK,WAAW;AACvC,UAAM,OAAO,SAAS,KAAK,kBAAkB;AAE7C,eAAW,KAAK,OAAO;AACrB,UAAI,KAAK,IAAI,CAAC,GAAG;AACf,eAAO,UAAU,KAAK,KAAK,KAAK,aAAa,sBAAsB,CAAC,IAAI;AAAA,UACtE,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,KAAK,MAAM,KAAK,CAAC,MAAM,MAAM,IAAI,CAAC,CAAC;AACzC,QAAI,CAAC,IAAI;AACP,aAAO,UAAU,KAAK,KAAK,KAAK,aAAa,qBAAqB;AAAA,QAChE,UAAU;AAAA,QACV,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,WAAO,KAAK;AAAA,EACd;AACF;AAEO,SAAS,aACd,OACA,SACA;AACA,QAAM,iBAAiB,SAAS,mBAAmB;AACnD,QAAM,eAAe,SAAS,gBAAgB;AAE9C,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,QAAI,CAAC,eAAe,GAAG,GAAG;AACxB,aAAO,UAAU,KAAK,KAAK,KAAK,gBAAgB,sBAAsB;AAAA,IACxE;AAEA,UAAM,OAAO,QAAQ,GAAG;AAExB,QAAI,kBAAkB,WAAW,MAAM,YAAY,EAAG,QAAO,KAAK;AAElE,UAAM,OAAO,SAAS,IAAI;AAC1B,QAAI,CAAC,MAAM,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,GAAG;AACnC,aAAO,UAAU,KAAK,KAAK,KAAK,aAAa,oBAAoB;AAAA,QAC/D,UAAU;AAAA,QACV,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,WAAO,KAAK;AAAA,EACd;AACF;AAEO,SAAS,4BACd,OACA,OACA,SACA;AACA,QAAM,iBAAiB,SAAS,mBAAmB;AACnD,QAAM,eAAe,SAAS,gBAAgB;AAE9C,SAAO,CAAC,KAAc,KAAe,SAAuB;AAC1D,QAAI,CAAC,eAAe,GAAG,GAAG;AACxB,aAAO,UAAU,KAAK,KAAK,KAAK,gBAAgB,sBAAsB;AAAA,IACxE;AAEA,UAAM,OAAO,QAAQ,GAAG;AAExB,QAAI,kBAAkB,WAAW,MAAM,YAAY,EAAG,QAAO,KAAK;AAElE,UAAM,YAAY,SAAS,IAAI;AAC/B,UAAM,QAAQ,SAAS,KAAK,WAAW;AACvC,UAAM,OAAO,SAAS,KAAK,kBAAkB;AAE7C,eAAW,KAAK,OAAO;AACrB,UAAI,KAAK,IAAI,CAAC,GAAG;AACf,eAAO,UAAU,KAAK,KAAK,KAAK,aAAa,sBAAsB,CAAC,IAAI;AAAA,UACtE,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,KAAK,CAAC,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,UAAM,SAAS,MAAM,KAAK,CAAC,MAAM,MAAM,IAAI,CAAC,CAAC;AAE7C,QAAI,CAAC,UAAU,CAAC,QAAQ;AACtB,aAAO,UAAU,KAAK,KAAK,KAAK,aAAa,iBAAiB;AAAA,QAC5D;AAAA,QACA,aAAa;AAAA,QACb,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,WAAO,KAAK;AAAA,EACd;AACF;;;AC7KA,SAAS,cAAc,GAA6B;AAClD,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,OAAO,MAAM,SAAU,QAAO;AAClC,SAAO,EAAE,QAAQ,EAAE,QAAQ;AAC7B;AAEA,SAAS,cAAc,GAA6B;AAClD,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,OAAO,MAAM,SAAU,QAAO;AAClC,SAAO,EAAE,QAAQ,EAAE,QAAQ;AAC7B;AAEA,SAASA,SAAQ,KAAc;AAC7B,SAAS,IAAY,QAAQ,CAAC;AAKhC;AAEA,SAAS,QAAQ,MAAkC;AACjD,SAAO,IAAI;AAAA,KACR,KAAK,SAAS,CAAC,GAAG,IAAI,aAAa,EAAE,OAAO,OAAO;AAAA,EACtD;AACF;AAEA,SAAS,eAAe,MAAkC;AACxD,QAAM,QAAQ,IAAI;AAAA,KACf,KAAK,eAAe,CAAC,GAAG,IAAI,aAAa,EAAE,OAAO,OAAO;AAAA,EAC5D;AACA,QAAM,OAAO,IAAI;AAAA,KACd,KAAK,sBAAsB,CAAC,GAAG,IAAI,aAAa,EAAE,OAAO,OAAO;AAAA,EACnE;AACA,SAAO,EAAC,OAAO,KAAI;AACrB;AAEA,SAAS,kBAAkB,MAA4D;AACrF,MAAI,CAAC,KAAM,QAAO,CAAC;AACnB,SAAO,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAC,IAAI;AAC3C;AAEA,SAAS,eAAe,SAA0C;AAChE,QAAM,QAA0B,CAAC;AAEjC,MAAI,SAAS,wBAAwB,OAAO;AAC1C,UAAM,KAAK,YAAY;AAAA,EACzB;AAEA,QAAM,KAAK,GAAG,kBAAkB,SAAS,IAAI,CAAC;AAE9C,SAAO;AACT;AAEA,SAAS,YAAY,MAAkC,SAAiC;AACtF,QAAM,iBAAiB,SAAS,mBAAmB;AACnD,MAAI,CAAC,eAAgB,QAAO;AAE5B,QAAM,eAAe,SAAS,gBAAgB;AAC9C,SAAO,QAAQ,IAAI,EAAE,IAAI,YAAY;AACvC;AAqBO,SAAS,6BACd,OACA,SACkB;AAClB,QAAM,YAAY,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK,GAAG,OAAO,OAAO;AAExE,SAAO;AAAA,IACL,GAAG,eAAe,OAAO;AAAA,IACzB,CAAC,KAAc,KAAe,SAAuB;AACnD,YAAM,OAAOC,SAAQ,GAAG;AAExB,UAAI,YAAY,MAAM,OAAO,EAAG,QAAO,KAAK;AAE5C,YAAM,EAAC,OAAO,KAAI,IAAI,eAAe,IAAI;AAEzC,iBAAW,KAAK,UAAU;AACxB,YAAI,KAAK,IAAI,CAAC,GAAG;AACf,iBAAO,UAAU,KAAK,KAAK,KAAK,aAAa,sBAAsB,CAAC,IAAI;AAAA,YACtE,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AAAA,MACF;AAEA,YAAM,KAAK,SAAS,KAAK,CAAC,MAAM,MAAM,IAAI,CAAC,CAAC;AAC5C,UAAI,CAAC,IAAI;AACP,eAAO,UAAU,KAAK,KAAK,KAAK,aAAa,6BAA6B;AAAA,UACxE;AAAA,UACA,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAEA,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AACF;AAKO,SAAS,8BACd,OACA,SACkB;AAClB,QAAM,YAAY,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK,GAAG,OAAO,OAAO;AAExE,SAAO;AAAA,IACL,GAAG,eAAe,OAAO;AAAA,IACzB,CAAC,KAAc,KAAe,SAAuB;AACnD,YAAM,OAAOA,SAAQ,GAAG;AAExB,UAAI,YAAY,MAAM,OAAO,EAAG,QAAO,KAAK;AAE5C,YAAM,EAAC,OAAO,KAAI,IAAI,eAAe,IAAI;AAEzC,iBAAW,KAAK,UAAU;AACxB,YAAI,KAAK,IAAI,CAAC,GAAG;AACf,iBAAO,UAAU,KAAK,KAAK,KAAK,aAAa,sBAAsB,CAAC,IAAI;AAAA,YACtE,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AAAA,MACF;AAEA,YAAM,UAAU,SAAS,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;AACpD,UAAI,QAAQ,QAAQ;AAClB,eAAO,UAAU,KAAK,KAAK,KAAK,aAAa,6BAA6B;AAAA,UACxE;AAAA,UACA;AAAA,UACA,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAEA,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AACF;AAKO,SAAS,qBACd,OACA,SACkB;AAClB,QAAM,YAAY,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK,GAAG,OAAO,OAAO;AAExE,SAAO;AAAA,IACL,GAAG,eAAe,OAAO;AAAA,IACzB,CAAC,KAAc,KAAe,SAAuB;AACnD,YAAM,OAAOA,SAAQ,GAAG;AAExB,UAAI,YAAY,MAAM,OAAO,EAAG,QAAO,KAAK;AAE5C,YAAM,OAAO,QAAQ,IAAI;AACzB,YAAM,KAAK,SAAS,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;AAE3C,UAAI,CAAC,IAAI;AACP,eAAO,UAAU,KAAK,KAAK,KAAK,aAAa,oBAAoB;AAAA,UAC/D;AAAA,UACA,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAEA,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AACF;AAMO,SAAS,oCACd,OACA,aACA,SACkB;AAClB,QAAM,iBAAiB,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK,GAAG,OAAO,OAAO;AAC7E,QAAM,iBAAiB,MAAM,QAAQ,WAAW,IAAI,cAAc,CAAC,WAAW,GAAG,OAAO,OAAO;AAE/F,SAAO;AAAA,IACL,GAAG,eAAe,OAAO;AAAA,IACzB,CAAC,KAAc,KAAe,SAAuB;AACnD,YAAM,OAAOA,SAAQ,GAAG;AAExB,UAAI,YAAY,MAAM,OAAO,EAAG,QAAO,KAAK;AAE5C,YAAM,EAAC,OAAO,KAAI,IAAI,eAAe,IAAI;AACzC,YAAM,YAAY,QAAQ,IAAI;AAE9B,iBAAW,KAAK,eAAe;AAC7B,YAAI,KAAK,IAAI,CAAC,GAAG;AACf,iBAAO,UAAU,KAAK,KAAK,KAAK,aAAa,sBAAsB,CAAC,IAAI;AAAA,YACtE,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AAAA,MACF;AAEA,YAAM,SAAS,cAAc,KAAK,CAAC,MAAM,UAAU,IAAI,CAAC,CAAC;AACzD,UAAI,OAAQ,QAAO,KAAK;AAExB,YAAM,SAAS,cAAc,KAAK,CAAC,MAAM,MAAM,IAAI,CAAC,CAAC;AACrD,UAAI,OAAQ,QAAO,KAAK;AAExB,aAAO,UAAU,KAAK,KAAK,KAAK,aAAa,qBAAqB;AAAA,QAChE,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAKO,SAAS,qBACd,YACA,SACkB;AAClB,SAAO,oCAAoC,CAAC,YAAY,GAAG,CAAC,UAAU,GAAG,OAAO;AAClF;","names":["getAuth","getAuth"]}

package/dist/express.d.cts

@@ -1,4 +1,4 @@
-import { A as AuthContext } from './types-CRECQuHp.cjs';
+import { A as AuthContext } from './types-Cc_McZgD.cjs';
 import 'express';
 
 declare global {

package/dist/express.d.ts

@@ -1,4 +1,4 @@
-import { A as AuthContext } from './types-CRECQuHp.js';
+import { A as AuthContext } from './types-Cc_McZgD.js';
 import 'express';
 
 declare global {