@mohasinac/appkit 2.1.1 → 2.2.0

package/dist/next/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/next/api/errorHandler.ts","../../src/next/api/routeHandler.ts","../../src/next/api/apiHandler.ts","../../src/next/request-helpers.ts","../../src/next/cache-middleware.ts","../../src/next/middleware/pii-scrubber.ts","../../src/next/middleware/chain.ts","../../src/next/middleware/pii-redactor.ts","../../src/next/api/api-response.ts","../../src/next/components/GlobalError.tsx","../../src/next/components/ErrorView.tsx","../../src/next/components/NotFoundView.tsx","../../src/next/components/UnauthorizedView.tsx"],"names":["NextResponse","key","useEffect","jsxs","jsx"],"mappings":";;;;;;;;;;;;AAiEO,SAAS,sBACd,OAAA,EACA;AACA,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,aAAA;AAAA,IACA,MAAA;AAAA,IACA,MAAA;AAAA,IACA,iBAAA,GAAoB,gBAAA;AAAA,IACpB,oBAAA,GAAuB;AAAA,GACzB,GAAI,OAAA;AAEJ,EAAA,OAAO,SAAS,eAAe,KAAA,EAA8B;AAE3D,IAAA,IAAI,UAAA,CAAW,KAAK,CAAA,EAAG;AACrB,MAAA,MAAM,MAAA,GAAS,cAAc,KAAK,CAAA;AAClC,MAAA,IAAI,UAAU,GAAA,EAAK;AACjB,QAAA,MAAA,CAAO,MAAM,WAAA,EAAa;AAAA,UACxB,IAAA,EAAM,OAAO,KAAK;AAAA,SACnB,CAAA;AAAA,MACH;AACA,MAAA,OAAO,aAAa,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA,EAAG,EAAE,QAAQ,CAAA;AAAA,IACpD;AAGA,IAAA,IACE,KAAA,KAAU,IAAA,IACV,OAAO,KAAA,KAAU,QAAA,IACjB,QAAA,IAAY,KAAA,IACZ,KAAA,CAAM,OAAA,CAAS,KAAA,CAAkC,MAAM,CAAA,EACvD;AACA,MAAA,OAAO,YAAA,CAAa,IAAA;AAAA,QAClB;AAAA,UACE,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO,mBAAA;AAAA,UACP,IAAA,EAAM,kBAAA;AAAA,UACN,IAAA,EAAM;AAAA,SACR;AAAA,QACA,EAAE,QAAQ,GAAA;AAAI,OAChB;AAAA,IACF;AAGA,IAAA,MAAA,CAAO,MAAM,sBAAA,EAAwB;AAAA,MACnC,KAAA,EACE,KAAA,YAAiB,KAAA,GACb,EAAE,IAAA,EAAM,KAAA,CAAM,IAAA,EAAM,OAAA,EAAS,KAAA,CAAM,OAAA,EAAS,KAAA,EAAO,KAAA,CAAM,OAAM,GAC/D;AAAA,KACP,CAAA;AAED,IAAA,OAAO,YAAA,CAAa,IAAA;AAAA,MAClB;AAAA,QACE,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO,oBAAA;AAAA,QACP,IAAA,EAAM;AAAA,OACR;AAAA,MACA,EAAE,QAAQ,GAAA;AAAI,KAChB;AAAA,EACF,CAAA;AACF;AChEA,SAAS,kBAAkB,OAAA,EAAiC;AA5D5D,EAAA,IAAA,EAAA;AA6DE,EAAA,MAAM,gBAAe,EAAA,GAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,MAA5B,IAAA,GAAA,EAAA,GAAiC,EAAA;AACtD,EAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,CAAM,6BAA6B,CAAA;AAC9D,EAAA,OAAO,KAAA,GAAQ,kBAAA,CAAmB,KAAA,CAAM,CAAC,CAAC,CAAA,GAAI,IAAA;AAChD;AAMA,eAAe,cAAc,OAAA,EAAsC;AACjE,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,YAAA,EAAa;AACjC,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,KAAA,CAAM,iCAAiC,CAAA,EAAG;AAAA,MAChE,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AACA,EAAA,MAAM,MAAA,GAAS,kBAAkB,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,MAAA,CAAO,OAAO,IAAI,KAAA,CAAM,yBAAyB,CAAA,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAC3E;AACA,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,aAAA,CAAc,MAAM,CAAA;AAClD,IAAA,OAAO,cAAA,CAAA;AAAA,MACL,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,eAAe,OAAA,CAAQ;AAAA,KAAA,EACpB,OAAA,CAAQ,MAAA,CAAA;AAAA,EAEf,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,IAAA,MAAM,MAAA,CAAO,MAAA,CAAO,IAAI,KAAA,CAAM,4BAA4B,CAAA,EAAG;AAAA,MAC3D,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AACF;AAKO,SAAS,mBAGd,OAAA,EAA+C;AAC/C,EAAA,OAAO,OACL,SACA,OAAA,KACsB;AA3G1B,IAAA,IAAA,EAAA,EAAA,EAAA;AA4GI,IAAA,IAAI;AAEF,MAAA,IAAI,IAAA;AACJ,MAAA,MAAM,YACJ,OAAA,CAAQ,IAAA,IAAS,QAAQ,KAAA,IAAS,OAAA,CAAQ,MAAM,MAAA,GAAS,CAAA;AAE3D,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,IAAA,GAAO,MAAM,cAAc,OAAO,CAAA;AAAA,MACpC;AAEA,MAAA,IAAI,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,EAAG;AAC7C,QAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,OAAA,CAAQ,KAAA,CAAM,UAAS,EAAA,GAAA,IAAA,CAAK,IAAA,KAAL,IAAA,GAAA,EAAA,GAAa,EAAE,CAAA,EAAG;AACrD,UAAA,OAAOA,YAAAA,CAAa,IAAA;AAAA,YAClB,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA2B;AAAA,YACpD,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AAAA,MACF;AAGA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,QAAA,IAAI,GAAA;AACJ,QAAA,IAAI;AACF,UAAA,GAAA,GAAM,MAAM,QAAQ,IAAA,EAAK;AAAA,QAC3B,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,UAAA,OAAOA,YAAAA,CAAa,IAAA;AAAA,YAClB,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,mBAAA,EAAoB;AAAA,YAC7C,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,CAAO,SAAA,CAAU,GAAG,CAAA;AAC3C,QAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,UAAA,OAAOA,YAAAA,CAAa,IAAA;AAAA,YAClB;AAAA,cACE,OAAA,EAAS,KAAA;AAAA,cACT,KAAA,EAAO,mBAAA;AAAA,cACP,MAAA,EAAA,CAAQ,EAAA,GAAA,MAAA,CAAO,KAAA,CAAM,MAAA,KAAb,YAAuB;AAAC,aAClC;AAAA,YACA,EAAE,QAAQ,GAAA;AAAI,WAChB;AAAA,QACF;AACA,QAAA,IAAA,GAAO,MAAA,CAAO,IAAA;AAAA,MAChB;AAGA,MAAA,MAAM,MAAA,GAAA,CAAS,OAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,OAAA,CAAS,MAAA,IAAS,MAAM,QAAQ,MAAA,GAAS,KAAA,CAAA;AAExD,MAAA,OAAO,MAAM,QAAQ,OAAA,CAAQ;AAAA,QAC3B,OAAA;AAAA,QACA,IAAA;AAAA,QACA,IAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH,SAAS,GAAA,EAAc;AAErB,MAAA,MAAM,SACJ,QAAQ,GAAA,IAAA,IAAA,GAAA,MAAA,GAAA,GAAA,CAA8B,MAAA,CAAA,KAAW,QAAA,GAC5C,IAA2B,MAAA,GAC5B,GAAA;AACN,MAAA,MAAM,OAAA,GACJ,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,uBAAA;AACvC,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,qBAAA,EAAwB,OAAA,CAAQ,MAAM,WAAW,GAAG,CAAA;AAClE,MAAA,OAAOA,YAAAA,CAAa,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,EAAO,OAAO,OAAA,EAAQ,EAAG,EAAE,MAAA,EAAQ,CAAA;AAAA,IACzE;AAAA,EACF,CAAA;AACF;;;ACpHO,SAAS,wBACd,IAAA,EACA;AACA,EAAA,OAAO,SAAS,iBAId,OAAA,EAOA;AACA,IAAA,OAAO,OACL,SACA,OAAA,KACsB;AACtB,MAAA,MAAM,OAAA,GAAU,YAAY,GAAA,EAAI;AAChC,MAAA,IAAI;AACF,QAAA,IAAI,gBAAA;AACJ,QAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,UAAA,MAAM,eAAA,GAAkB,MAAM,IAAA,CAAK,cAAA;AAAA,YACjC,OAAA;AAAA,YACA,OAAA,CAAQ;AAAA,WACV;AAEA,UAAA,gBAAA,GAAmB;AAAA,YACjB,iBAAA,EAAmB,MAAA,CAAO,eAAA,CAAgB,KAAK,CAAA;AAAA,YAC/C,qBAAA,EAAuB,MAAA,CAAO,eAAA,CAAgB,SAAS,CAAA;AAAA,YACvD,iBAAA,EAAmB,MAAA,CAAO,eAAA,CAAgB,KAAK;AAAA,WACjD;AAEA,UAAA,IAAI,CAAC,gBAAgB,OAAA,EAAS;AAC5B,YAAA,OAAO,IAAI,QAAA;AAAA,cACT,KAAK,SAAA,CAAU;AAAA,gBACb,OAAA,EAAS,KAAA;AAAA,gBACT,KAAA,EAAO,KAAK,2BAAA;AAA4B,eACzC,CAAA;AAAA,cACD;AAAA,gBACE,MAAA,EAAQ,GAAA;AAAA,gBACR,OAAA,EAAS,cAAA,CAAA;AAAA,kBACP,cAAA,EAAgB;AAAA,iBAAA,EACb,gBAAA;AAAA;AAEP,aACF;AAAA,UACF;AAAA,QACF;AAEA,QAAA,IAAI,IAAA;AACJ,QAAA,IAAI,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,EAAG;AAC7C,UAAA,IAAA,GAAO,MAAM,IAAA,CAAK,sBAAA,CAAuB,OAAA,EAAS,QAAQ,KAAK,CAAA;AAAA,QACjE,CAAA,MAAA,IAAW,QAAQ,IAAA,EAAM;AACvB,UAAA,IAAA,GAAO,MAAM,IAAA,CAAK,sBAAA,CAAuB,OAAO,CAAA;AAAA,QAClD;AAEA,QAAA,IAAI,aAAA;AACJ,QAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,UAAA,IAAI,OAAQ,OAAA,CAAQ,MAAA,CAAmC,SAAA,KAAc,UAAA,EAAY;AAC/E,YAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,IAAA,EAAK;AAChC,YAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,CAAO,SAAA,CAAU,IAAI,CAAA;AAC5C,YAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,cAAA,OAAO,IAAA,CAAK,aAAA;AAAA,gBACV,mBAAA;AAAA,gBACA,GAAA;AAAA,gBACA,OAAO,KAAA,CAAM;AAAA,eACf;AAAA,YACF;AACA,YAAA,aAAA,GAAgB,MAAA,CAAO,IAAA;AAAA,UACzB,CAAA,MAAO;AACL,YAAA,IAAI;AACF,cAAA,aAAA,GAAiB,MAAM,QAAQ,IAAA,EAAK;AAAA,YACtC,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,cAAA,aAAA,GAAgB,KAAA,CAAA;AAAA,YAClB;AAAA,UACF;AAAA,QACF;AAEA,QAAA,MAAM,cAAA,GAAA,CAAkB,OAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,OAAA,CAA2C,MAAA,IAC/D,MAAM,QAAQ,MAAA,GACd,KAAA,CAAA;AAEJ,QAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA,CAAQ;AAAA,UACrC,OAAA;AAAA,UACA,IAAA;AAAA,UACA,IAAA,EAAM,aAAA;AAAA,UACN,MAAA,EAAQ;AAAA,SACT,CAAA;AAED,QAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,wBAAA,EAA0B,OAAO,CAAA;AAEtD,QAAA,IAAI,gBAAA,EAAkB;AACpB,UAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,gBAAgB,CAAA,EAAG;AAC3D,YAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,UACjC;AAAA,QACF;AAEA,QAAA,IAAA,CAAK,SAAA,CAAU;AAAA,UACb,QAAQ,OAAA,CAAQ,MAAA;AAAA,UAChB,IAAA,EAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAA;AAAA,UAC3B,QAAQ,QAAA,CAAS,MAAA;AAAA,UACjB,YAAY,IAAA,CAAK,KAAA,CAAM,WAAA,CAAY,GAAA,KAAQ,OAAO;AAAA,SACnD,CAAA;AAED,QAAA,OAAO,QAAA;AAAA,MACT,SAAS,KAAA,EAAO;AACd,QAAA,IAAA,CAAK,SAAA,CAAU;AAAA,UACb,QAAQ,OAAA,CAAQ,MAAA;AAAA,UAChB,IAAA,EAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAA;AAAA,UAC3B,YAAY,IAAA,CAAK,KAAA,CAAM,WAAA,CAAY,GAAA,KAAQ,OAAO,CAAA;AAAA,UAClD,OAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK;AAAA,SAC7D,CAAA;AAED,QAAA,OAAO,IAAA,CAAK,eAAe,KAAK,CAAA;AAAA,MAClC;AAAA,IACF,CAAA;AAAA,EACF,CAAA;AACF;;;ACjKA,SAAS,oBAAA,CAAqB,SAAkB,IAAA,EAAkC;AAhBlF,EAAA,IAAA,EAAA;AAiBE,EAAA,MAAM,gBAAe,EAAA,GAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,MAA5B,IAAA,GAAA,EAAA,GAAiC,EAAA;AACtD,EAAA,MAAM,QAAQ,YAAA,CAAa,KAAA;AAAA,IACzB,IAAI,MAAA,CAAO,CAAA,WAAA,EAAc,IAAI,CAAA,QAAA,CAAU;AAAA,GACzC;AACA,EAAA,OAAO,KAAA,GAAQ,kBAAA,CAAmB,KAAA,CAAM,CAAC,CAAC,CAAA,GAAI,MAAA;AAChD;AAEO,SAAS,gBAAgB,OAAA,EAAmC;AACjE,EAAA,OAAO,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,YAAA;AAC9B;AAEO,SAAS,yBACd,OAAA,EACoB;AA9BtB,EAAA,IAAA,EAAA;AA+BE,EAAA,MAAM,WAAA,GAAA,CAAc,EAAA,GAAA,OAAA,CAAQ,OAAA,KAAR,IAAA,GAAA,MAAA,GAAA,EAAA,CAAiB,GAAA,CAAI,WAAA,CAAA;AACzC,EAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,EAAU,OAAO,WAAA;AAC5C,EAAA,IAAI,WAAA,IAAe,OAAO,WAAA,KAAgB,QAAA,SAAiB,WAAA,CAAY,KAAA;AACvE,EAAA,OAAO,oBAAA,CAAqB,SAAS,WAAW,CAAA;AAClD;AAEO,SAAS,yBAAyB,OAAA,EAAuC;AAC9E,EAAA,MAAM,MAAA,GAAS,yBAAyB,OAAO,CAAA;AAC/C,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,oBAAoB,cAAc,CAAA;AACzD,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,eAAA,CACd,cACA,GAAA,EACqB;AACrB,EAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AAClC,EAAA,IAAI,KAAA,KAAU,MAAM,OAAO,MAAA;AAC3B,EAAA,OAAO,KAAA,KAAU,MAAA;AACnB;AAEO,SAAS,cAAA,CACd,cACA,GAAA,EACoB;AACpB,EAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AAClC,EAAA,IAAI,CAAC,OAAO,OAAO,MAAA;AACnB,EAAA,OAAO,KAAA;AACT;AAEO,SAAS,cAAA,CACd,YAAA,EACA,GAAA,EACA,QAAA,EACA,OAAA,EACQ;AACR,EAAA,MAAM,QAAA,GAAW,YAAA,CAAa,GAAA,CAAI,GAAG,CAAA;AACrC,EAAA,MAAM,SAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,QAAA,EAAU,EAAE,CAAA,GAAI,QAAA;AAC1D,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,MAAM,IAAI,QAAA,GAAW,MAAA;AACpD,EAAA,IAAI,QAAO,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,GAAA,CAAA,KAAQ,QAAA,IAAY,YAAY,OAAA,CAAQ,GAAA;AAC1D,IAAA,OAAO,OAAA,CAAQ,GAAA;AACjB,EAAA,IAAI,QAAO,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,GAAA,CAAA,KAAQ,QAAA,IAAY,YAAY,OAAA,CAAQ,GAAA;AAC1D,IAAA,OAAO,OAAA,CAAQ,GAAA;AACjB,EAAA,OAAO,SAAA;AACT;AC5CA,IAAM,WAAA,GAAc,IAAI,EAAA,GAAK,GAAA;AAC7B,IAAM,KAAA,GAAQ,YAAA,CAAa,WAAA,CAAY,GAAG,CAAA;AAE1C,SAAS,aAAA,CAAc,SAAsB,MAAA,EAA6B;AACxE,EAAA,IAAI,MAAA,CAAO,YAAA,EAAc,OAAO,MAAA,CAAO,aAAa,OAAO,CAAA;AAC3D,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC/B,EAAA,IAAI,MAAA,CAAO,YAAA,KAAiB,KAAA,IAAS,GAAA,CAAI,MAAA;AACvC,IAAA,OAAO,CAAA,EAAG,GAAA,CAAI,QAAQ,CAAA,EAAG,IAAI,MAAM,CAAA,CAAA;AACrC,EAAA,OAAO,GAAA,CAAI,QAAA;AACb;AAEA,SAAS,WAAA,CAAY,SAAsB,MAAA,EAA8B;AA1CzE,EAAA,IAAA,EAAA;AA2CE,EAAA,IAAI,MAAA,CAAO,aAAa,OAAO,KAAA;AAC/B,EAAA,MAAM,OAAA,GAAA,CAAU,EAAA,GAAA,MAAA,CAAO,OAAA,KAAP,IAAA,GAAA,EAAA,GAAkB,CAAC,KAAK,CAAA;AACxC,EAAA,OAAO,OAAA,CAAQ,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA;AACxC;AAOO,SAAS,SAAA,CAAU,OAAA,EAAkB,MAAA,GAAsB,EAAC,EAAY;AAC7E,EAAA,OAAO,OACL,YACG,IAAA,KACuB;AAzD9B,IAAA,IAAA,EAAA;AA0DI,IAAA,IAAI,CAAC,WAAA,CAAY,OAAA,EAAS,MAAM,CAAA,EAAG;AACjC,MAAA,OAAO,OAAA,CAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AAAA,IACjC;AAEA,IAAA,MAAM,GAAA,GAAM,aAAA,CAAc,OAAA,EAAS,MAAM,CAAA;AACzC,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAIlB,GAAG,CAAA;AACN,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,OAAO,IAAIA,YAAAA,CAAa,MAAA,CAAO,IAAA,EAAM;AAAA,QACnC,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,SAAS,MAAA,CAAO;AAAA,OACjB,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA,EAAS,GAAG,IAAI,CAAA;AAC/C,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,MAAM,UAAkC,EAAC;AACzC,IAAA,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAOC,IAAAA,KAAQ;AACvC,MAAA,OAAA,CAAQA,IAAG,CAAA,GAAI,KAAA;AAAA,IACjB,CAAC,CAAA;AAED,IAAA,KAAA,CAAM,GAAA;AAAA,MACJ,GAAA;AAAA,MACA,EAAE,IAAA,EAAM,MAAA,EAAQ,QAAA,CAAS,QAAQ,OAAA,EAAQ;AAAA,MACzC,EAAE,GAAA,EAAA,CAAK,EAAA,GAAA,MAAA,CAAO,GAAA,KAAP,YAAc,WAAA;AAAY,KACnC;AAEA,IAAA,OAAO,IAAID,aAAa,IAAA,EAAM,EAAE,QAAQ,QAAA,CAAS,MAAA,EAAQ,SAAS,CAAA;AAAA,EACpE,CAAA;AACF;AAMO,SAAS,gBAAgB,OAAA,EAAiC;AAC/D,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,EAAK;AACxB,EAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,IAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,MAAA,IAAI,IAAI,UAAA,CAAW,OAAO,CAAA,EAAG,KAAA,CAAM,OAAO,GAAG,CAAA;AAAA,IAC/C;AAAA,EACF,CAAA,MAAO;AACL,IAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,MAAA,IAAI,QAAQ,IAAA,CAAK,GAAG,CAAA,EAAG,KAAA,CAAM,OAAO,GAAG,CAAA;AAAA,IACzC;AAAA,EACF;AACF;AC1GA,IAAM,UAAA,GAAa,SAAA;AAEnB,SAAS,WAAW,KAAA,EAAyB;AAC3C,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,UAAA,CAAW,UAAU,CAAA,EAAG;AAC7D,IAAA,OAAO,aAAA;AAAA,EACT;AACA,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,KAAA,CAAM,IAAI,UAAU,CAAA;AACrD,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AAC/C,IAAA,OAAO,MAAA,CAAO,WAAA;AAAA,MACZ,MAAA,CAAO,QAAQ,KAAgC,CAAA,CAAE,IAAI,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,KAAM;AAAA,QAC/D,CAAA;AAAA,QACA,WAAW,CAAC;AAAA,OACb;AAAA,KACH;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAWO,IAAM,qBAAA,GAAwD,OACnE,QAAA,EACA,IAAA,EACA,IAAA,KACgB;AApClB,EAAA,IAAA,EAAA;AAqCE,EAAA,MAAM,QAAA,GAAW,MAAM,IAAA,EAAK;AAE5B,EAAA,MAAM,eAAc,EAAA,GAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,MAAnC,IAAA,GAAA,EAAA,GAAwC,EAAA;AAC5D,EAAA,IAAI,CAAC,WAAA,CAAY,QAAA,CAAS,kBAAkB,GAAG,OAAO,QAAA;AAEtD,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,MAAM,SAAS,IAAA,EAAK;AAAA,EAC7B,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,MAAM,QAAA,GAAW,WAAW,IAAI,CAAA;AAEhC,EAAA,OAAOA,cAAAA,CAAa,KAAK,QAAA,EAAU;AAAA,IACjC,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,SAAS,QAAA,CAAS;AAAA,GACnB,CAAA;AACH;;;ACvCA,eAAsB,QAAA,CACpB,WAAA,EACA,GAAA,EACA,OAAA,EACA,OAAA,EACa;AACb,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,eAAe,IAAA,GAAoB;AACjC,IAAA,IAAI,KAAA,GAAQ,YAAY,MAAA,EAAQ;AAC9B,MAAA,MAAM,EAAA,GAAK,YAAY,KAAA,EAAO,CAAA;AAC9B,MAAA,OAAO,EAAA,CAAG,OAAA,EAAS,GAAA,EAAK,IAAI,CAAA;AAAA,IAC9B;AACA,IAAA,OAAO,OAAA,EAAQ;AAAA,EACjB;AAEA,EAAA,OAAO,IAAA,EAAK;AACd;AAKO,SAAS,iBAAiB,OAAA,EAA0C;AAtC3E,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAuCE,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,OAAO,UAAA,EAAW;AAAA,IAC3B,EAAA,EAAA,CACE,EAAA,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,KAArC,IAAA,GAAA,MAAA,GAAA,EAAA,CAAwC,KAAA,CAAM,GAAA,CAAA,CAAK,CAAA,CAAA,KAAnD,IAAA,GAAA,MAAA,GAAA,EAAA,CAAuD,IAAA,EAAA,KAAvD,IAAA,GAAA,EAAA,GACA,SAAA;AAAA,IACF,MAAA,EAAA,CACE,EAAA,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA,KAArC,IAAA,GAAA,MAAA,GAAA,EAAA,CAAwC,KAAA,CAAM,GAAA,CAAA,CAAK,CAAA,CAAA,KAAnD,IAAA,GAAA,MAAA,GAAA,EAAA,CAAuD,KAAA,CAAM,GAAA,CAAA,CAAK,OAAlE,IAAA,GAAA,EAAA,GACA,IAAA;AAAA,IACF,SAAA,EAAW,KAAK,GAAA;AAAI,GACtB;AACF;AAoCO,SAAS,mBAAA,CAGd,MAAA,GAA0C,EAAC,EAAG;AAC9C,EAAA,MAAM,EAAE,WAAA,GAAc,EAAC,EAAG,QAAA,GAAW,MAAK,GAAI,MAAA;AAE9C,EAAA,OAAO,SAAS,YACd,OAAA,EACA;AACA,IAAA,OAAO,eAAe,QAAQ,OAAA,EAAmC;AAC/D,MAAA,MAAM,GAAA,GAAM,iBAAiB,OAAO,CAAA;AAEpC,MAAA,MAAM,KAAA,GAA4B;AAAA,QAChC,GAAG,WAAA;AAAA;AAAA,QAEH,GAAI,QAAA,GACA,CAAC,qBAAoD,IACrD;AAAC,OACP;AAEA,MAAA,OAAO,QAAA,CAAS,KAAA,EAAO,GAAA,EAAK,OAAA,EAAS,YAAY;AAC/C,QAAA,IAAI;AACF,UAAA,OAAO,MAAM,OAAA,CAAQ,EAAC,EAAa,KAAK,OAAO,CAAA;AAAA,QACjD,SAAS,GAAA,EAAK;AACZ,UAAA,MAAM,OAAA,GACJ,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,uBAAA;AACvC,UAAA,OAAOA,cAAAA,CAAa,KAAK,EAAE,KAAA,EAAO,SAAQ,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,QAC9D;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,EACF,CAAA;AACF;ACnGA,SAAS,QAAQ,KAAA,EAAuB;AAjBxC,EAAA,IAAA,EAAA;AAkBE,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,GAAG,CAAA,EAAG;AACvB,IAAA,MAAM,CAAC,KAAA,EAAO,MAAM,CAAA,GAAI,KAAA,CAAM,MAAM,GAAG,CAAA;AACvC,IAAA,OAAO,IAAG,EAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAQ,CAAA,CAAA,KAAR,IAAA,GAAA,EAAA,GAAc,EAAE,OAAO,MAAM,CAAA,CAAA;AAAA,EACzC;AACA,EAAA,IAAI,aAAA,CAAc,IAAA,CAAK,KAAK,CAAA,EAAG;AAC7B,IAAA,OAAO,KAAA,CAAM,MAAM,CAAA,EAAG,CAAC,IAAI,KAAA,GAAQ,KAAA,CAAM,MAAM,EAAE,CAAA;AAAA,EACnD;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,aAAA,CAAc,aAA0B,QAAA,EAA2B;AAC1E,EAAA,OAAO,YAAY,GAAA,CAAI,GAAG,CAAA,IAAK,WAAA,CAAY,IAAI,QAAQ,CAAA;AACzD;AAEA,SAAS,YAAA,CACP,GAAA,EACA,MAAA,EACA,IAAA,EACyB;AACzB,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,CAAC,GAAA,EAAK,KAAA,KAAU;AACnC,IAAA,IAAI,EAAE,KAAA,IAAS,GAAA,CAAA,EAAM,OAAO,GAAA;AAC5B,IAAA,MAAM,OAAA,GAAU,IAAI,KAAK,CAAA;AACzB,IAAA,MAAM,WAAoC,cAAA,CAAA,EAAA,EAAK,GAAA,CAAA;AAC/C,IAAA,IAAI,IAAA,IAAQ,OAAO,OAAA,KAAY,QAAA,EAAU;AACvC,MAAA,QAAA,CAAS,KAAK,CAAA,GAAI,OAAA,CAAQ,OAAO,CAAA;AAAA,IACnC,CAAA,MAAO;AACL,MAAA,OAAO,SAAS,KAAK,CAAA;AAAA,IACvB;AACA,IAAA,OAAO,QAAA;AAAA,EACT,GAAG,GAAG,CAAA;AACR;AAqBO,SAAS,4BACd,KAAA,EACgC;AAChC,EAAA,OAAO,OACL,IAAA,EACA,GAAA,EACA,IAAA,KACgB;AA5EpB,IAAA,IAAA,EAAA;AA6EI,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,EAAK;AAE5B,IAAA,MAAM,eAAc,EAAA,GAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,MAAnC,IAAA,GAAA,EAAA,GAAwC,EAAA;AAC5D,IAAA,IAAI,CAAC,WAAA,CAAY,QAAA,CAAS,kBAAkB,GAAG,OAAO,QAAA;AAEtD,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,IAC9B,CAAA,CAAA,OAAQ,CAAA,EAAA;AACN,MAAA,OAAO,QAAA;AAAA,IACT;AAEA,IAAA,KAAA,MAAW,EAAE,MAAA,EAAQ,IAAA,GAAO,IAAA,EAAM,MAAA,MAAY,KAAA,EAAO;AAEnD,MAAA,IAAI,UAAU,aAAA,CAAc,GAAA,CAAI,IAAA,CAAK,WAAA,EAAa,MAAM,CAAA,EAAG;AAG3D,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA,EAAG;AAC5B,QAAA,IAAA,GAAO,iCACF,IAAA,CAAA,EADE;AAAA,UAEL,IAAA,EAAO,KAAK,IAAA,CAAmC,GAAA;AAAA,YAAI,CAAC,IAAA,KAClD,YAAA,CAAa,IAAA,EAAM,QAAQ,IAAI;AAAA;AACjC,SACF,CAAA;AAAA,MACF,CAAA,MAAO;AACL,QAAA,IAAA,GAAO,YAAA,CAAa,IAAA,EAAM,MAAA,EAAQ,IAAI,CAAA;AAAA,MACxC;AAAA,IACF;AAEA,IAAA,OAAOA,cAAAA,CAAa,KAAK,IAAA,EAAM;AAAA,MAC7B,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,SAAS,QAAA,CAAS;AAAA,KACnB,CAAA;AAAA,EACH,CAAA;AACF;ACzFO,SAAS,eAAA,CACd,IAAA,EACA,OAAA,EACA,MAAA,GAAiB,KACjB,IAAA,EACqC;AACrC,EAAA,OAAOA,cAAAA,CAAa,IAAA;AAAA,IAClB,cAAA,CAAA,cAAA,CAAA,cAAA,CAAA;AAAA,MACE,OAAA,EAAS;AAAA,KAAA,EACL,IAAA,KAAS,MAAA,IAAa,EAAE,IAAA,EAAK,CAAA,EAC7B,OAAA,IAAW,EAAE,OAAA,EAAQ,CAAA,EACrB,IAAA,IAAQ,EAAE,IAAA,EAAK,CAAA;AAAA,IAErB,EAAE,MAAA;AAAO,GACX;AACF;AAEO,SAAS,aAAA,CACd,KAAA,EACA,MAAA,GAAiB,GAAA,EACjB,OAAA,EACgC;AAChC,EAAA,OAAOA,cAAAA,CAAa,IAAA;AAAA,IAClB,cAAA,CAAA;AAAA,MACE,OAAA,EAAS,KAAA;AAAA,MACT;AAAA,KAAA,EACI,OAAA,KAAY,MAAA,IAAa,EAAE,OAAA,EAAQ,CAAA;AAAA,IAEzC,EAAE,MAAA;AAAO,GACX;AACF;AAGO,IAAM,SAAA,GAAY;AAAA,EACvB,cAAc,CAAC,OAAA,GAAU,cAAA,KAAmB,aAAA,CAAc,SAAS,GAAG,CAAA;AAAA,EAEtE,WAAW,CAAC,OAAA,GAAU,WAAA,KAAgB,aAAA,CAAc,SAAS,GAAG,CAAA;AAAA,EAEhE,QAAA,EAAU,CAAC,QAAA,GAAW,UAAA,KACpB,cAAc,CAAA,EAAG,QAAQ,cAAc,GAAG,CAAA;AAAA,EAE5C,UAAA,EAAY,CAAC,OAAA,GAAU,aAAA,EAAe,YACpC,aAAA,CAAc,OAAA,EAAS,KAAK,OAAO,CAAA;AAAA,EAErC,eAAe,CAAC,OAAA,GAAU,uBAAA,KACxB,aAAA,CAAc,SAAS,GAAG,CAAA;AAAA,EAE5B,iBAAiB,CAAC,OAAA,KAChB,aAAA,CAAc,mBAAA,EAAqB,KAAK,OAAO;AACnD;ACjDO,SAAS,WAAA,CAAY,EAAE,KAAA,EAAO,KAAA,EAAM,EAAqB;AAC9D,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,UAAA,CAAW,KAAA,EAAA,SAAA,gBAAA,UAAA,iBAAsD;AAAA,MAC/D,SAAA,EAAW,aAAA;AAAA,MACX,QAAA,EAAU,EAAE,MAAA,EAAQ,KAAA,CAAM,MAAA;AAAO,KAClC,CAAA;AAAA,EACH,CAAA,EAAG,CAAC,KAAK,CAAC,CAAA;AAEV,EAAA,2BACG,MAAA,EAAA,EACC,QAAA,kBAAA,IAAA;AAAA,IAAC,MAAA;AAAA,IAAA;AAAA,MACC,KAAA,EAAO;AAAA,QACL,OAAA,EAAS,MAAA;AAAA,QACT,aAAA,EAAe,QAAA;AAAA,QACf,UAAA,EAAY,QAAA;AAAA,QACZ,cAAA,EAAgB,QAAA;AAAA,QAChB,SAAA,EAAW,OAAA;AAAA,QACX,MAAA,EAAQ,CAAA;AAAA,QACR,UAAA,EAAY,uBAAA;AAAA,QACZ,OAAA,EAAS,MAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACb;AAAA,MAEA,QAAA,EAAA;AAAA,wBAAA,GAAA,CAAC,IAAA,EAAA,EAAG,OAAO,EAAE,QAAA,EAAU,QAAQ,YAAA,EAAc,QAAA,IAAY,QAAA,EAAA,sBAAA,EAEzD,CAAA;AAAA,wBACA,GAAA,CAAC,OAAE,KAAA,EAAO,EAAE,SAAS,GAAA,EAAK,YAAA,EAAc,QAAA,EAAS,EAAG,QAAA,EAAA,iDAAA,EAEpD,CAAA;AAAA,QACC,OAAA,CAAQ,GAAA,CAAI,QAAA,KAAa,aAAA,oBACxB,IAAA;AAAA,UAAC,KAAA;AAAA,UAAA;AAAA,YACC,KAAA,EAAO;AAAA,cACL,QAAA,EAAU,SAAA;AAAA,cACV,OAAA,EAAS,MAAA;AAAA,cACT,UAAA,EAAY,SAAA;AAAA,cACZ,YAAA,EAAc,QAAA;AAAA,cACd,SAAA,EAAW,MAAA;AAAA,cACX,QAAA,EAAU,OAAA;AAAA,cACV,QAAA,EAAU,MAAA;AAAA,cACV,YAAA,EAAc;AAAA,aAChB;AAAA,YAEC,QAAA,EAAA;AAAA,cAAA,KAAA,CAAM,OAAA;AAAA,cACN,MAAM,MAAA,GAAS;AAAA,SAAA,EAAc,KAAA,CAAM,MAAM,CAAA,CAAA,CAAA,GAAM;AAAA;AAAA;AAAA,SAClD;AAAA,4BAED,QAAA,EAAA,EAAO,OAAA,EAAS,KAAA,EAAO,IAAA,EAAK,UAAS,QAAA,EAAA,WAAA,EAEtC;AAAA;AAAA;AAAA,GACF,EACF,CAAA;AAEJ;ACzCO,SAAS,SAAA,CAAU;AAAA,EACxB,KAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA,GAAU,sBAAA;AAAA,EACV,WAAA,GAAc,iDAAA;AAAA,EACd,UAAA,GAAa;AACf,CAAA,EAAmB;AACjB,EAAAE,UAAU,MAAM;AACd,IAAA,UAAA,CAAW,KAAA,EAAA,SAAA,gBAAA,MAAA,aAAkD;AAAA,MAC3D,SAAA,EAAW,WAAA;AAAA,MACX,QAAA,EAAU,EAAE,MAAA,EAAQ,KAAA,CAAM,MAAA;AAAO,KAClC,CAAA;AAAA,EACH,CAAA,EAAG,CAAC,KAAK,CAAC,CAAA;AAEV,EAAA,uBACEC,IAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,OAAA;AAAA,MACL,KAAA,EAAO;AAAA,QACL,OAAA,EAAS,MAAA;AAAA,QACT,aAAA,EAAe,QAAA;AAAA,QACf,UAAA,EAAY,QAAA;AAAA,QACZ,cAAA,EAAgB,QAAA;AAAA,QAChB,SAAA,EAAW,MAAA;AAAA,QACX,OAAA,EAAS,MAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACb;AAAA,MAEA,QAAA,EAAA;AAAA,wBAAAC,GAAAA,CAAC,QAAG,KAAA,EAAO,EAAE,UAAU,QAAA,EAAU,YAAA,EAAc,QAAA,EAAS,EAAI,QAAA,EAAA,OAAA,EAAQ,CAAA;AAAA,wBACpEA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,SAAS,GAAA,EAAK,YAAA,EAAc,QAAA,EAAS,EAAI,QAAA,EAAA,WAAA,EAAY,CAAA;AAAA,QAChE,QAAQ,GAAA,CAAI,QAAA,KAAa,aAAA,IAAiB,KAAA,CAAM,0BAC/CD,IAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,QAAA,EAAU,SAAA,EAAW,SAAS,GAAA,EAAK,YAAA,EAAc,QAAO,EAAG,QAAA,EAAA;AAAA,UAAA,UAAA;AAAA,UAC5D,KAAA,CAAM;AAAA,SAAA,EACjB,CAAA;AAAA,wBAEFC,GAAAA,CAAC,QAAA,EAAA,EAAO,SAAS,KAAA,EAAO,IAAA,EAAK,UAC1B,QAAA,EAAA,UAAA,EACH;AAAA;AAAA;AAAA,GACF;AAEJ;AC3CO,SAAS,YAAA,CAAa;AAAA,EAC3B,OAAA,GAAU,2BAAA;AAAA,EACV,WAAA,GAAc,8CAAA;AAAA,EACd,SAAA,GAAY,SAAA;AAAA,EACZ,QAAA,GAAW;AACb,CAAA,EAAsB;AACpB,EAAA,uBACED,IAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,KAAA,EAAO;AAAA,QACL,OAAA,EAAS,MAAA;AAAA,QACT,aAAA,EAAe,QAAA;AAAA,QACf,UAAA,EAAY,QAAA;AAAA,QACZ,cAAA,EAAgB,QAAA;AAAA,QAChB,SAAA,EAAW,MAAA;AAAA,QACX,OAAA,EAAS,MAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACb;AAAA,MAEA,QAAA,EAAA;AAAA,wBAAAC,GAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,QAAA,EAAU,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,YAAA,EAAc,QAAA,EAAS,EAAG,QAAA,EAAA,KAAA,EAE1E,CAAA;AAAA,wBACAA,GAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,UAAU,QAAA,EAAU,YAAA,EAAc,SAAA,EAAU,EAAI,QAAA,EAAA,OAAA,EAAQ,CAAA;AAAA,wBACrEA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,SAAS,GAAA,EAAK,YAAA,EAAc,MAAA,EAAO,EAAI,QAAA,EAAA,WAAA,EAAY,CAAA;AAAA,wBAC/DA,GAAAA,CAAC,GAAA,EAAA,EAAE,IAAA,EAAM,UAAW,QAAA,EAAA,SAAA,EAAU;AAAA;AAAA;AAAA,GAChC;AAEJ;AC1BO,SAAS,gBAAA,CAAiB;AAAA,EAC/B,OAAA,GAAU,yBAAA;AAAA,EACV,WAAA,GAAc,6CAAA;AAAA,EACd,UAAA,GAAa,SAAA;AAAA,EACb,SAAA,GAAY,aAAA;AAAA,EACZ,SAAA,GAAY,SAAA;AAAA,EACZ,QAAA,GAAW;AACb,CAAA,EAA0B;AACxB,EAAA,uBACED,IAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,KAAA,EAAO;AAAA,QACL,OAAA,EAAS,MAAA;AAAA,QACT,aAAA,EAAe,QAAA;AAAA,QACf,UAAA,EAAY,QAAA;AAAA,QACZ,cAAA,EAAgB,QAAA;AAAA,QAChB,SAAA,EAAW,MAAA;AAAA,QACX,OAAA,EAAS,MAAA;AAAA,QACT,SAAA,EAAW;AAAA,OACb;AAAA,MAEA,QAAA,EAAA;AAAA,wBAAAC,GAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,QAAA,EAAU,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,YAAA,EAAc,QAAA,EAAS,EAAG,QAAA,EAAA,KAAA,EAE1E,CAAA;AAAA,wBACAA,GAAAA,CAAC,IAAA,EAAA,EAAG,KAAA,EAAO,EAAE,UAAU,QAAA,EAAU,YAAA,EAAc,SAAA,EAAU,EAAI,QAAA,EAAA,OAAA,EAAQ,CAAA;AAAA,wBACrEA,GAAAA,CAAC,GAAA,EAAA,EAAE,KAAA,EAAO,EAAE,SAAS,GAAA,EAAK,YAAA,EAAc,MAAA,EAAO,EAAI,QAAA,EAAA,WAAA,EAAY,CAAA;AAAA,wBAC/DD,KAAC,KAAA,EAAA,EAAI,KAAA,EAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,GAAA,EAAK,MAAA,EAAO,EACzC,QAAA,EAAA;AAAA,0BAAAC,GAAAA,CAAC,GAAA,EAAA,EAAE,IAAA,EAAM,SAAA,EAAY,QAAA,EAAA,UAAA,EAAW,CAAA;AAAA,0BAChCA,GAAAA,CAAC,GAAA,EAAA,EAAE,IAAA,EAAM,UAAW,QAAA,EAAA,SAAA,EAAU;AAAA,SAAA,EAChC;AAAA;AAAA;AAAA,GACF;AAEJ","file":"index.js","sourcesContent":["/**\n * Generic API error handler for Next.js API routes.\n *\n * Framework-agnostic version of the app's handleApiError. Business-specific\n * error classes and loggers are injected via factory options so this module\n * has zero knowledge of Firebase, Resend, or letitrip.in domain logic.\n *\n * @example\n * ```ts\n * // apps/web/src/lib/api/error-handler.ts\n * import { createApiErrorHandler } from '@mohasinac/next';\n * import { AppError } from '@/lib/errors';\n * import { serverLogger } from '@/lib/server-logger';\n *\n * export const handleApiError = createApiErrorHandler({\n *   isAppError: (e): e is AppError => e instanceof AppError,\n *   getStatusCode: (e) => e.statusCode,\n *   toJSON: (e) => e.toJSON(),\n *   logger: serverLogger,\n *   internalErrorCode: 'GEN_INTERNAL_ERROR',\n *   internalErrorMessage: 'An internal server error occurred',\n * });\n * ```\n */\n\nimport { NextResponse } from \"next/server.js\";\n\n/** Minimal logger interface — satisfied by Winston, Pino, or console. */\nexport interface IApiErrorLogger {\n  error(message: string, meta?: Record<string, unknown>): void;\n}\n\n/** Options for createApiErrorHandler factory. */\nexport interface ApiErrorHandlerOptions<TAppError> {\n  /**\n   * Type guard — returns true when the thrown value is your app's AppError\n   * (or any subclass) that has statusCode / toJSON methods.\n   */\n  isAppError(err: unknown): err is TAppError;\n\n  /** Extract the HTTP status code from your AppError. */\n  getStatusCode(err: TAppError): number;\n\n  /** Serialise the error to a JSON-safe shape for the response body. */\n  toJSON(err: TAppError): unknown;\n\n  /** Logger used for 5xx and unexpected errors. */\n  logger: IApiErrorLogger;\n\n  /** Error code included in the 500 response body. */\n  internalErrorCode?: string;\n\n  /** Error message included in the 500 response body. */\n  internalErrorMessage?: string;\n}\n\n/**\n * Build a typed handleApiError function bound to your app's error hierarchy.\n *\n * The returned function:\n * - Returns a typed NextResponse for known AppError subclasses.\n * - Returns a 400 with validation details for Zod-like error shapes.\n * - Logs unexpected errors server-side; returns a generic 500 (no stack trace\n *   leaks to the client).\n */\nexport function createApiErrorHandler<TAppError>(\n  options: ApiErrorHandlerOptions<TAppError>,\n) {\n  const {\n    isAppError,\n    getStatusCode,\n    toJSON,\n    logger,\n    internalErrorCode = \"INTERNAL_ERROR\",\n    internalErrorMessage = \"An internal server error occurred\",\n  } = options;\n\n  return function handleApiError(error: unknown): NextResponse {\n    // Known AppError subclass — structured response\n    if (isAppError(error)) {\n      const status = getStatusCode(error);\n      if (status >= 500) {\n        logger.error(\"API Error\", {\n          body: toJSON(error) as Record<string, unknown>,\n        });\n      }\n      return NextResponse.json(toJSON(error), { status });\n    }\n\n    // Zod / similar validation error shape: { issues: [...] }\n    if (\n      error !== null &&\n      typeof error === \"object\" &&\n      \"issues\" in error &&\n      Array.isArray((error as Record<string, unknown>).issues)\n    ) {\n      return NextResponse.json(\n        {\n          success: false,\n          error: \"Validation failed\",\n          code: \"VALIDATION_ERROR\",\n          data: error,\n        },\n        { status: 400 },\n      );\n    }\n\n    // Unknown / unexpected error — log full details, return generic 500\n    logger.error(\"Unexpected API error\", {\n      error:\n        error instanceof Error\n          ? { name: error.name, message: error.message, stack: error.stack }\n          : error,\n    });\n\n    return NextResponse.json(\n      {\n        success: false,\n        error: internalErrorMessage,\n        code: internalErrorCode,\n      },\n      { status: 500 },\n    );\n  };\n}\n","/**\r\n * createRouteHandler — provider-aware API route handler factory for feat-* packages.\r\n *\r\n * Works like letitrip.in's local `createApiHandler` but uses `getProviders().session`\r\n * for auth instead of a hardwired Firebase Admin call. This makes it portable across\r\n * all consumer projects that register an `ISessionProvider`.\r\n *\r\n * @example\r\n * ```ts\r\n * export const POST = createRouteHandler({\r\n *   auth: true,\r\n *   roles: [\"admin\"],\r\n *   schema: mySchema,\r\n *   handler: async ({ user, body }) => { ... },\r\n * });\r\n * ```\r\n */\r\n\r\nimport { NextResponse } from \"next/server.js\";\r\nimport { getProviders } from \"@mohasinac/contracts\";\r\n\r\n/** Minimal schema interface compatible with Zod v3 and v4. */\r\ninterface ParseableSchema<TOutput> {\r\n  safeParse(\r\n    data: unknown,\r\n  ):\r\n    | { success: true; data: TOutput }\r\n    | { success: false; error: { issues?: unknown[] } };\r\n}\r\n\r\nexport interface RouteUser {\r\n  uid: string;\r\n  email?: string | null;\r\n  role?: string;\r\n  [key: string]: unknown;\r\n}\r\n\r\ninterface RouteHandlerOptions<\r\n  TInput = unknown,\r\n  TParams = Record<string, string>,\r\n> {\r\n  /** Require a valid session cookie. Implied when `roles` is set. */\r\n  auth?: boolean;\r\n  /**\r\n   * If provided, the verified user's `role` must be in this list.\r\n   * Implies `auth: true`.\r\n   */\r\n  roles?: string[];\r\n  /** Zod schema to validate + parse the JSON request body. */\r\n  schema?: ParseableSchema<TInput>;\r\n  /** Route handler. `user` is present when `auth: true`. */\r\n  handler: (ctx: {\r\n    request: Request;\r\n    user?: RouteUser;\r\n    body?: TInput;\r\n    params?: TParams;\r\n  }) => Promise<Response>;\r\n}\r\n\r\n/** Read the `__session` HTTP-only cookie from request headers. */\r\nfunction readSessionCookie(request: Request): string | null {\r\n  const cookieHeader = request.headers.get(\"cookie\") ?? \"\";\r\n  const match = cookieHeader.match(/(?:^|;\\s*)__session=([^;]+)/);\r\n  return match ? decodeURIComponent(match[1]) : null;\r\n}\r\n\r\n/**\r\n * Verify the session cookie using `getProviders().session`.\r\n * Returns a `RouteUser` on success, or throws for invalid credentials.\r\n */\r\nasync function verifySession(request: Request): Promise<RouteUser> {\r\n  const { session } = getProviders();\r\n  if (!session) {\r\n    throw Object.assign(new Error(\"Session provider not configured\"), {\r\n      status: 503,\r\n    });\r\n  }\r\n  const cookie = readSessionCookie(request);\r\n  if (!cookie) {\r\n    throw Object.assign(new Error(\"Authentication required\"), { status: 401 });\r\n  }\r\n  try {\r\n    const payload = await session.verifySession(cookie);\r\n    return {\r\n      uid: payload.uid,\r\n      email: payload.email,\r\n      role: payload.role,\r\n      emailVerified: payload.emailVerified,\r\n      ...payload.claims,\r\n    };\r\n  } catch {\r\n    throw Object.assign(new Error(\"Invalid or expired session\"), {\r\n      status: 401,\r\n    });\r\n  }\r\n}\r\n\r\n/**\r\n * Create a typed Next.js App Router handler with built-in auth + Zod validation.\r\n */\r\nexport function createRouteHandler<\r\n  TInput = unknown,\r\n  TParams = Record<string, string>,\r\n>(options: RouteHandlerOptions<TInput, TParams>) {\r\n  return async (\r\n    request: Request,\r\n    context: { params: Promise<TParams> },\r\n  ): Promise<Response> => {\r\n    try {\r\n      // ── Auth ──────────────────────────────────────────────────────────────\r\n      let user: RouteUser | undefined;\r\n      const needsAuth =\r\n        options.auth || (options.roles && options.roles.length > 0);\r\n\r\n      if (needsAuth) {\r\n        user = await verifySession(request);\r\n      }\r\n\r\n      if (options.roles && options.roles.length > 0) {\r\n        if (!user || !options.roles.includes(user.role ?? \"\")) {\r\n          return NextResponse.json(\r\n            { success: false, error: \"Insufficient permissions\" },\r\n            { status: 403 },\r\n          );\r\n        }\r\n      }\r\n\r\n      // ── Body validation ───────────────────────────────────────────────────\r\n      let body: TInput | undefined;\r\n      if (options.schema) {\r\n        let raw: unknown;\r\n        try {\r\n          raw = await request.json();\r\n        } catch {\r\n          return NextResponse.json(\r\n            { success: false, error: \"Invalid JSON body\" },\r\n            { status: 400 },\r\n          );\r\n        }\r\n        const result = options.schema.safeParse(raw);\r\n        if (!result.success) {\r\n          return NextResponse.json(\r\n            {\r\n              success: false,\r\n              error: \"Validation failed\",\r\n              issues: result.error.issues ?? [],\r\n            },\r\n            { status: 400 },\r\n          );\r\n        }\r\n        body = result.data;\r\n      }\r\n\r\n      // ── Params ────────────────────────────────────────────────────────────\r\n      const params = context?.params ? await context.params : undefined;\r\n\r\n      return await options.handler({\r\n        request,\r\n        user,\r\n        body,\r\n        params: params as TParams | undefined,\r\n      });\r\n    } catch (err: unknown) {\r\n      // Structured errors thrown with .status\r\n      const status =\r\n        typeof (err as { status?: unknown })?.status === \"number\"\r\n          ? (err as { status: number }).status\r\n          : 500;\r\n      const message =\r\n        err instanceof Error ? err.message : \"Internal server error\";\r\n      console.error(`[createRouteHandler] ${request.method} failed`, err);\r\n      return NextResponse.json({ success: false, error: message }, { status });\r\n    }\r\n  };\r\n}\r\n","interface SafeParseSchema<TInput> {\r\n  safeParse: (input: unknown) =>\r\n    | { success: true; data: TInput }\r\n    | { success: false; error: { issues?: unknown[] } };\r\n}\r\n\r\nexport interface ApiRateLimitResult {\r\n  success: boolean;\r\n  limit: number;\r\n  remaining: number;\r\n  reset: number;\r\n}\r\n\r\nexport interface ApiHandlerOptions<\r\n  TInput,\r\n  TParams extends Record<string, string>,\r\n  TRole,\r\n  TRateLimitConfig,\r\n  TUser,\r\n> {\r\n  auth?: boolean;\r\n  roles?: TRole[];\r\n  rateLimit?: TRateLimitConfig;\r\n  schema?: SafeParseSchema<TInput>;\r\n  handler: (ctx: {\r\n    request: Request;\r\n    user?: TUser;\r\n    body?: TInput;\r\n    params?: TParams;\r\n  }) => Promise<Response>;\r\n}\r\n\r\nexport interface ApiHandlerFactoryDeps<TRole, TRateLimitConfig, TUser> {\r\n  applyRateLimit: (\r\n    request: Request,\r\n    config: TRateLimitConfig,\r\n  ) => Promise<ApiRateLimitResult>;\r\n  requireAuthFromRequest: (request: Request) => Promise<TUser>;\r\n  requireRoleFromRequest: (\r\n    request: Request,\r\n    roles: TRole[],\r\n  ) => Promise<TUser>;\r\n  errorResponse: (\r\n    message: string,\r\n    status: number,\r\n    issues?: unknown,\r\n  ) => Response;\r\n  handleApiError: (error: unknown) => Response;\r\n  getRateLimitExceededMessage: () => string;\r\n  logTiming: (entry: {\r\n    method: string;\r\n    path: string;\r\n    status?: number;\r\n    durationMs: number;\r\n    error?: string;\r\n  }) => void;\r\n}\r\n\r\nexport function createApiHandlerFactory<TRole, TRateLimitConfig, TUser>(\r\n  deps: ApiHandlerFactoryDeps<TRole, TRateLimitConfig, TUser>,\r\n) {\r\n  return function createApiHandler<\r\n    TInput = unknown,\r\n    TParams extends Record<string, string> = Record<string, string>,\r\n  >(\r\n    options: ApiHandlerOptions<\r\n      TInput,\r\n      TParams,\r\n      TRole,\r\n      TRateLimitConfig,\r\n      TUser\r\n    >,\r\n  ) {\r\n    return async (\r\n      request: Request,\r\n      context: { params: Promise<TParams> },\r\n    ): Promise<Response> => {\r\n      const startMs = performance.now();\r\n      try {\r\n        let rateLimitHeaders: Record<string, string> | undefined;\r\n        if (options.rateLimit) {\r\n          const rateLimitResult = await deps.applyRateLimit(\r\n            request,\r\n            options.rateLimit,\r\n          );\r\n\r\n          rateLimitHeaders = {\r\n            \"RateLimit-Limit\": String(rateLimitResult.limit),\r\n            \"RateLimit-Remaining\": String(rateLimitResult.remaining),\r\n            \"RateLimit-Reset\": String(rateLimitResult.reset),\r\n          };\r\n\r\n          if (!rateLimitResult.success) {\r\n            return new Response(\r\n              JSON.stringify({\r\n                success: false,\r\n                error: deps.getRateLimitExceededMessage(),\r\n              }),\r\n              {\r\n                status: 429,\r\n                headers: {\r\n                  \"Content-Type\": \"application/json\",\r\n                  ...rateLimitHeaders,\r\n                },\r\n              },\r\n            );\r\n          }\r\n        }\r\n\r\n        let user: TUser | undefined;\r\n        if (options.roles && options.roles.length > 0) {\r\n          user = await deps.requireRoleFromRequest(request, options.roles);\r\n        } else if (options.auth) {\r\n          user = await deps.requireAuthFromRequest(request);\r\n        }\r\n\r\n        let validatedBody: TInput | undefined;\r\n        if (options.schema) {\r\n          if (typeof (options.schema as { safeParse?: unknown }).safeParse === \"function\") {\r\n            const body = await request.json();\r\n            const result = options.schema.safeParse(body);\r\n            if (!result.success) {\r\n              return deps.errorResponse(\r\n                \"Validation failed\",\r\n                400,\r\n                result.error.issues,\r\n              );\r\n            }\r\n            validatedBody = result.data;\r\n          } else {\r\n            try {\r\n              validatedBody = (await request.json()) as TInput;\r\n            } catch {\r\n              validatedBody = undefined;\r\n            }\r\n          }\r\n        }\r\n\r\n        const resolvedParams = (context as { params?: Promise<TParams> })?.params\r\n          ? await context.params\r\n          : undefined;\r\n\r\n        const response = await options.handler({\r\n          request,\r\n          user,\r\n          body: validatedBody,\r\n          params: resolvedParams,\r\n        });\r\n\r\n        response.headers.set(\"Access-Control-Max-Age\", \"86400\");\r\n\r\n        if (rateLimitHeaders) {\r\n          for (const [key, value] of Object.entries(rateLimitHeaders)) {\r\n            response.headers.set(key, value);\r\n          }\r\n        }\r\n\r\n        deps.logTiming({\r\n          method: request.method,\r\n          path: new URL(request.url).pathname,\r\n          status: response.status,\r\n          durationMs: Math.round(performance.now() - startMs),\r\n        });\r\n\r\n        return response;\r\n      } catch (error) {\r\n        deps.logTiming({\r\n          method: request.method,\r\n          path: new URL(request.url).pathname,\r\n          durationMs: Math.round(performance.now() - startMs),\r\n          error: error instanceof Error ? error.message : String(error),\r\n        });\r\n\r\n        return deps.handleApiError(error);\r\n      }\r\n    };\r\n  };\r\n}","/**\r\n * API Request Helpers\r\n *\r\n * Generic utilities for API route request parsing and session extraction.\r\n * Uses structural request types (not NextRequest) to avoid cross-package\r\n * type identity issues when multiple Next.js installs exist in a monorepo.\r\n */\r\n\r\nimport { AuthenticationError } from \"@mohasinac/errors\";\r\n\r\ninterface CookieStoreLike {\r\n  get(name: string): { value?: string } | string | undefined;\r\n}\r\n\r\ntype CookieCapableRequest = Request & { cookies?: CookieStoreLike };\r\n\r\nfunction readCookieFromHeader(request: Request, name: string): string | undefined {\r\n  const cookieHeader = request.headers.get(\"cookie\") ?? \"\";\r\n  const match = cookieHeader.match(\r\n    new RegExp(`(?:^|;\\\\s*)${name}=([^;]+)`),\r\n  );\r\n  return match ? decodeURIComponent(match[1]) : undefined;\r\n}\r\n\r\nexport function getSearchParams(request: Request): URLSearchParams {\r\n  return new URL(request.url).searchParams;\r\n}\r\n\r\nexport function getOptionalSessionCookie(\r\n  request: CookieCapableRequest,\r\n): string | undefined {\r\n  const cookieValue = request.cookies?.get(\"__session\");\r\n  if (typeof cookieValue === \"string\") return cookieValue;\r\n  if (cookieValue && typeof cookieValue === \"object\") return cookieValue.value;\r\n  return readCookieFromHeader(request, \"__session\");\r\n}\r\n\r\nexport function getRequiredSessionCookie(request: CookieCapableRequest): string {\r\n  const cookie = getOptionalSessionCookie(request);\r\n  if (!cookie) throw new AuthenticationError(\"Unauthorized\");\r\n  return cookie;\r\n}\r\n\r\nexport function getBooleanParam(\r\n  searchParams: URLSearchParams,\r\n  key: string,\r\n): boolean | undefined {\r\n  const value = searchParams.get(key);\r\n  if (value === null) return undefined;\r\n  return value === \"true\";\r\n}\r\n\r\nexport function getStringParam(\r\n  searchParams: URLSearchParams,\r\n  key: string,\r\n): string | undefined {\r\n  const value = searchParams.get(key);\r\n  if (!value) return undefined;\r\n  return value;\r\n}\r\n\r\nexport function getNumberParam(\r\n  searchParams: URLSearchParams,\r\n  key: string,\r\n  fallback: number,\r\n  options?: { min?: number; max?: number },\r\n): number {\r\n  const rawValue = searchParams.get(key);\r\n  const parsed = rawValue ? Number.parseInt(rawValue, 10) : fallback;\r\n  const safeValue = Number.isNaN(parsed) ? fallback : parsed;\r\n  if (typeof options?.min === \"number\" && safeValue < options.min)\r\n    return options.min;\r\n  if (typeof options?.max === \"number\" && safeValue > options.max)\r\n    return options.max;\r\n  return safeValue;\r\n}\r\n","/**\r\n * API Response Cache Middleware\r\n *\r\n * Wraps a Next.js API handler with in-memory response caching via CacheManager.\r\n *\r\n * @example\r\n * ```ts\r\n * export const GET = withCache(\r\n *   async (request) => { ... return NextResponse.json(data); },\r\n *   { ttl: 5 * 60 * 1000 }\r\n * );\r\n * ```\r\n */\r\n\r\nimport type { NextRequest } from \"next/server.js\";\r\nimport { NextResponse } from \"next/server.js\";\r\nimport { CacheManager } from \"@mohasinac/core\";\r\n\r\nexport interface CacheConfig {\r\n  /** Time to live in milliseconds. Default: 5 minutes. */\r\n  ttl?: number;\r\n  /** Include query string in cache key. Default: true. */\r\n  includeQuery?: boolean;\r\n  /** Custom cache key generator. */\r\n  keyGenerator?: (request: NextRequest) => string;\r\n  /** Bypass caching entirely. Default: false. */\r\n  bypassCache?: boolean;\r\n  /** Only cache for these HTTP methods. Default: ['GET']. */\r\n  methods?: string[];\r\n}\r\n\r\nconst DEFAULT_TTL = 5 * 60 * 1000;\r\nconst cache = CacheManager.getInstance(500);\r\n\r\nfunction buildCacheKey(request: NextRequest, config: CacheConfig): string {\r\n  if (config.keyGenerator) return config.keyGenerator(request);\r\n  const url = new URL(request.url);\r\n  if (config.includeQuery !== false && url.search)\r\n    return `${url.pathname}${url.search}`;\r\n  return url.pathname;\r\n}\r\n\r\nfunction isCacheable(request: NextRequest, config: CacheConfig): boolean {\r\n  if (config.bypassCache) return false;\r\n  const methods = config.methods ?? [\"GET\"];\r\n  return methods.includes(request.method);\r\n}\r\n\r\ntype Handler = (\r\n  request: NextRequest,\r\n  ...args: unknown[]\r\n) => Promise<NextResponse>;\r\n\r\nexport function withCache(handler: Handler, config: CacheConfig = {}): Handler {\r\n  return async (\r\n    request: NextRequest,\r\n    ...args: unknown[]\r\n  ): Promise<NextResponse> => {\r\n    if (!isCacheable(request, config)) {\r\n      return handler(request, ...args);\r\n    }\r\n\r\n    const key = buildCacheKey(request, config);\r\n    const cached = cache.get<{\r\n      body: string;\r\n      status: number;\r\n      headers: Record<string, string>;\r\n    }>(key);\r\n    if (cached) {\r\n      return new NextResponse(cached.body, {\r\n        status: cached.status,\r\n        headers: cached.headers,\r\n      });\r\n    }\r\n\r\n    const response = await handler(request, ...args);\r\n    const body = await response.text();\r\n    const headers: Record<string, string> = {};\r\n    response.headers.forEach((value, key) => {\r\n      headers[key] = value;\r\n    });\r\n\r\n    cache.set(\r\n      key,\r\n      { body, status: response.status, headers },\r\n      { ttl: config.ttl ?? DEFAULT_TTL },\r\n    );\r\n\r\n    return new NextResponse(body, { status: response.status, headers });\r\n  };\r\n}\r\n\r\n/**\r\n * Invalidate cache entries by key prefix or regex pattern.\r\n * Pass no argument to clear the entire cache.\r\n */\r\nexport function invalidateCache(pattern?: string | RegExp): void {\r\n  if (!pattern) {\r\n    cache.clear();\r\n    return;\r\n  }\r\n  const keys = cache.keys();\r\n  if (typeof pattern === \"string\") {\r\n    for (const key of keys) {\r\n      if (key.startsWith(pattern)) cache.delete(key);\r\n    }\r\n  } else {\r\n    for (const key of keys) {\r\n      if (pattern.test(key)) cache.delete(key);\r\n    }\r\n  }\r\n}\r\n","// appkit/src/next/middleware/pii-scrubber.ts\r\nimport type { NextRequest, NextResponse as NR } from \"next/server\";\r\nimport { NextResponse } from \"next/server\";\r\nimport type { BaseRequestContext, Middleware } from \"./types\";\r\n\r\nconst ENC_PREFIX = \"enc:v1:\";\r\n\r\nfunction scrubValue(value: unknown): unknown {\r\n  if (typeof value === \"string\" && value.startsWith(ENC_PREFIX)) {\r\n    return \"[encrypted]\";\r\n  }\r\n  if (Array.isArray(value)) return value.map(scrubValue);\r\n  if (value !== null && typeof value === \"object\") {\r\n    return Object.fromEntries(\r\n      Object.entries(value as Record<string, unknown>).map(([k, v]) => [\r\n        k,\r\n        scrubValue(v),\r\n      ]),\r\n    );\r\n  }\r\n  return value;\r\n}\r\n\r\n/**\r\n * PiiScrubberMiddleware — safety net.\r\n *\r\n * Walks the entire JSON response body and replaces any string that starts with\r\n * the `enc:v1:` prefix (AES-256-GCM ciphertext) with the literal `\"[encrypted]\"`.\r\n *\r\n * This prevents raw Firestore ciphertext from leaking to the client when a\r\n * repository path forgets to call `decryptPiiFields()`.\r\n */\r\nexport const piiScrubberMiddleware: Middleware<BaseRequestContext> = async (\r\n  _request: NextRequest,\r\n  _ctx: BaseRequestContext,\r\n  next: () => Promise<NR>,\r\n): Promise<NR> => {\r\n  const response = await next();\r\n\r\n  const contentType = response.headers.get(\"content-type\") ?? \"\";\r\n  if (!contentType.includes(\"application/json\")) return response;\r\n\r\n  let body: unknown;\r\n  try {\r\n    body = await response.json();\r\n  } catch {\r\n    return response;\r\n  }\r\n\r\n  const scrubbed = scrubValue(body);\r\n\r\n  return NextResponse.json(scrubbed, {\r\n    status: response.status,\r\n    headers: response.headers,\r\n  });\r\n};\r\n","// appkit/src/next/middleware/chain.ts\r\nimport type { NextRequest, NextResponse as NR } from \"next/server\";\r\nimport { NextResponse } from \"next/server\";\r\nimport type {\r\n  BaseRequestContext,\r\n  AuthRequestContext,\r\n  Middleware,\r\n} from \"./types\";\r\nimport { piiScrubberMiddleware } from \"./pii-scrubber\";\r\n\r\n/**\r\n * runChain — sequential middleware runner.\r\n *\r\n * Each middleware calls `next()` to pass control to the subsequent one.\r\n * The final `next()` invokes the `handler` function.\r\n */\r\nexport async function runChain<Ctx extends BaseRequestContext>(\r\n  middlewares: Middleware<Ctx>[],\r\n  ctx: Ctx,\r\n  request: NextRequest,\r\n  handler: () => Promise<NR>,\r\n): Promise<NR> {\r\n  let index = 0;\r\n\r\n  async function next(): Promise<NR> {\r\n    if (index < middlewares.length) {\r\n      const mw = middlewares[index++]!;\r\n      return mw(request, ctx, next);\r\n    }\r\n    return handler();\r\n  }\r\n\r\n  return next();\r\n}\r\n\r\n/**\r\n * buildBaseContext — initialises request context from the incoming NextRequest.\r\n */\r\nexport function buildBaseContext(request: NextRequest): BaseRequestContext {\r\n  return {\r\n    traceId: crypto.randomUUID(),\r\n    ip:\r\n      request.headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ??\r\n      \"unknown\",\r\n    locale:\r\n      request.headers.get(\"accept-language\")?.split(\",\")[0]?.split(\"-\")[0] ??\r\n      \"en\",\r\n    startedAt: Date.now(),\r\n  };\r\n}\r\n\r\nexport interface CreateApiMiddlewareConfig<TCtx extends BaseRequestContext> {\r\n  /** Additional domain-specific middlewares to run before the handler */\r\n  middlewares?: Middleware<TCtx>[];\r\n  /**\r\n   * Whether to apply the PII scrubber to the response.\r\n   * Default: `true`.\r\n   */\r\n  scrubPii?: boolean;\r\n}\r\n\r\n/**\r\n * createApiMiddleware — lightweight middleware chain builder for Next.js API routes.\r\n *\r\n * Composes the provided middlewares with the PII scrubber by default.\r\n * Returns an HOF: pass the route handler function to get a `NextRequest → NextResponse`\r\n * handler suitable for use as a Next.js App Router route export.\r\n *\r\n * @example\r\n * ```ts\r\n * // Simple route with scrubber only\r\n * export const GET = createApiMiddleware({})(async (_input, _ctx, req) => {\r\n *   const data = await getProducts();\r\n *   return NextResponse.json({ data });\r\n * });\r\n *\r\n * // Route with auth context + custom middleware\r\n * export const GET = createApiMiddleware({\r\n *   middlewares: [myCustomMiddleware],\r\n * })(async (_input, ctx, _req) => {\r\n *   // ctx is AuthRequestContext\r\n *   return NextResponse.json({ uid: ctx.user.uid });\r\n * });\r\n * ```\r\n */\r\nexport function createApiMiddleware<\r\n  TInput = unknown,\r\n  TCtx extends BaseRequestContext = AuthRequestContext,\r\n>(config: CreateApiMiddlewareConfig<TCtx> = {}) {\r\n  const { middlewares = [], scrubPii = true } = config;\r\n\r\n  return function withHandler(\r\n    routeFn: (input: TInput, ctx: TCtx, req: NextRequest) => Promise<NR>,\r\n  ) {\r\n    return async function handler(request: NextRequest): Promise<NR> {\r\n      const ctx = buildBaseContext(request) as TCtx;\r\n\r\n      const chain: Middleware<TCtx>[] = [\r\n        ...middlewares,\r\n        // Apply PII scrubber last (wraps all other middleware output)\r\n        ...(scrubPii\r\n          ? [piiScrubberMiddleware as unknown as Middleware<TCtx>]\r\n          : []),\r\n      ];\r\n\r\n      return runChain(chain, ctx, request, async () => {\r\n        try {\r\n          return await routeFn({} as TInput, ctx, request);\r\n        } catch (err) {\r\n          const message =\r\n            err instanceof Error ? err.message : \"Internal server error\";\r\n          return NextResponse.json({ error: message }, { status: 500 });\r\n        }\r\n      });\r\n    };\r\n  };\r\n}\r\n","// appkit/src/next/middleware/pii-redactor.ts\r\nimport type { NextRequest, NextResponse as NR } from \"next/server\";\r\nimport { NextResponse } from \"next/server\";\r\nimport type { AuthRequestContext, Middleware } from \"./types\";\r\n\r\nexport interface PiiRedactionRule {\r\n  /** Fields to redact from the top-level object or items[] */\r\n  fields: string[];\r\n  /**\r\n   * If `true` (default), replace the value with a masked string like `a***@domain.com`.\r\n   * If `false`, remove the field entirely.\r\n   */\r\n  mask?: boolean;\r\n  /** Only redact if the caller does NOT have this permission string */\r\n  unless?: string;\r\n}\r\n\r\nfunction maskPii(value: string): string {\r\n  if (value.includes(\"@\")) {\r\n    const [local, domain] = value.split(\"@\");\r\n    return `${local?.[0] ?? \"\"}***@${domain}`;\r\n  }\r\n  if (/^\\+?\\d{7,}$/.test(value)) {\r\n    return value.slice(0, 3) + \"***\" + value.slice(-2);\r\n  }\r\n  return \"***\";\r\n}\r\n\r\nfunction hasPermission(permissions: Set<string>, required: string): boolean {\r\n  return permissions.has(\"*\") || permissions.has(required);\r\n}\r\n\r\nfunction redactObject(\r\n  obj: Record<string, unknown>,\r\n  fields: string[],\r\n  mask: boolean,\r\n): Record<string, unknown> {\r\n  return fields.reduce((acc, field) => {\r\n    if (!(field in acc)) return acc;\r\n    const current = acc[field];\r\n    const redacted: Record<string, unknown> = { ...acc };\r\n    if (mask && typeof current === \"string\") {\r\n      redacted[field] = maskPii(current);\r\n    } else {\r\n      delete redacted[field];\r\n    }\r\n    return redacted;\r\n  }, obj);\r\n}\r\n\r\n/**\r\n * createPiiRedactorMiddleware — field-level PII redaction for non-owners.\r\n *\r\n * Removes or masks declared PII fields from the response body unless the\r\n * calling user holds the specified permission.\r\n *\r\n * @example\r\n * ```ts\r\n * const userListRedactor = createPiiRedactorMiddleware([\r\n *   { fields: [\"email\", \"phone\"], mask: true,  unless: \"admin:users:pii\" },\r\n *   { fields: [\"bankAccount\"],    mask: false, unless: \"admin:payouts\" },\r\n * ]);\r\n *\r\n * export const GET = createApiMiddleware({\r\n *   permission: \"admin:users\",\r\n *   middlewares: [userListRedactor],\r\n * })(async (input, ctx) => { ... });\r\n * ```\r\n */\r\nexport function createPiiRedactorMiddleware(\r\n  rules: PiiRedactionRule[],\r\n): Middleware<AuthRequestContext> {\r\n  return async (\r\n    _req: NextRequest,\r\n    ctx: AuthRequestContext,\r\n    next: () => Promise<NR>,\r\n  ): Promise<NR> => {\r\n    const response = await next();\r\n\r\n    const contentType = response.headers.get(\"content-type\") ?? \"\";\r\n    if (!contentType.includes(\"application/json\")) return response;\r\n\r\n    let body: Record<string, unknown>;\r\n    try {\r\n      body = (await response.json()) as Record<string, unknown>;\r\n    } catch {\r\n      return response;\r\n    }\r\n\r\n    for (const { fields, mask = true, unless } of rules) {\r\n      // Skip redaction if caller has the authorising permission\r\n      if (unless && hasPermission(ctx.user.permissions, unless)) continue;\r\n\r\n      // Handle both paginated { data: [] } and single-object responses\r\n      if (Array.isArray(body.data)) {\r\n        body = {\r\n          ...body,\r\n          data: (body.data as Record<string, unknown>[]).map((item) =>\r\n            redactObject(item, fields, mask),\r\n          ),\r\n        };\r\n      } else {\r\n        body = redactObject(body, fields, mask);\r\n      }\r\n    }\r\n\r\n    return NextResponse.json(body, {\r\n      status: response.status,\r\n      headers: response.headers,\r\n    });\r\n  };\r\n}\r\n","/**\r\n * Standardized API Response Utilities\r\n *\r\n * Provides consistent response formatting across all Next.js API routes.\r\n * No app-specific dependencies — safe to use in any project.\r\n */\r\n\r\nimport { NextResponse } from \"next/server\";\r\n\r\nexport interface ApiSuccessResponse<T = unknown> {\r\n  success: true;\r\n  data?: T;\r\n  message?: string;\r\n  meta?: Record<string, unknown>;\r\n}\r\n\r\nexport interface ApiErrorResponse {\r\n  success: false;\r\n  error: string;\r\n  details?: unknown;\r\n}\r\n\r\nexport function successResponse<T>(\r\n  data?: T,\r\n  message?: string,\r\n  status: number = 200,\r\n  meta?: Record<string, unknown>,\r\n): NextResponse<ApiSuccessResponse<T>> {\r\n  return NextResponse.json(\r\n    {\r\n      success: true,\r\n      ...(data !== undefined && { data }),\r\n      ...(message && { message }),\r\n      ...(meta && { meta }),\r\n    },\r\n    { status },\r\n  );\r\n}\r\n\r\nexport function errorResponse(\r\n  error: string,\r\n  status: number = 400,\r\n  details?: unknown,\r\n): NextResponse<ApiErrorResponse> {\r\n  return NextResponse.json(\r\n    {\r\n      success: false,\r\n      error,\r\n      ...(details !== undefined && { details }),\r\n    },\r\n    { status },\r\n  );\r\n}\r\n\r\n/** Pre-built shorthand factories for common HTTP error responses. */\r\nexport const ApiErrors = {\r\n  unauthorized: (message = \"Unauthorized\") => errorResponse(message, 401),\r\n\r\n  forbidden: (message = \"Forbidden\") => errorResponse(message, 403),\r\n\r\n  notFound: (resource = \"Resource\") =>\r\n    errorResponse(`${resource} not found`, 404),\r\n\r\n  badRequest: (message = \"Bad request\", details?: unknown) =>\r\n    errorResponse(message, 400, details),\r\n\r\n  internalError: (message = \"Internal server error\") =>\r\n    errorResponse(message, 500),\r\n\r\n  validationError: (details: unknown) =>\r\n    errorResponse(\"Validation failed\", 422, details),\r\n};\r\n","\"use client\";\r\n\r\n/**\r\n * GlobalError — Next.js global-error.tsx template.\r\n *\r\n * Catches errors in the root layout (above all per-route error.tsx).\r\n * Must be a Client Component and must render <html> + <body>.\r\n * @see https://nextjs.org/docs/app/api-reference/file-conventions/error#global-errorjs\r\n *\r\n * Usage in your app:\r\n *   // app/global-error.tsx\r\n *   export { GlobalError as default } from \"@mohasinac/appkit/next\";\r\n */\r\n\r\nimport { useEffect } from \"react\";\r\nimport { trackError, ErrorCategory, ErrorSeverity } from \"../../monitoring\";\r\n\r\nexport interface GlobalErrorProps {\r\n  error: Error & { digest?: string };\r\n  reset: () => void;\r\n}\r\n\r\nexport function GlobalError({ error, reset }: GlobalErrorProps) {\r\n  useEffect(() => {\r\n    trackError(error, ErrorCategory.UNKNOWN, ErrorSeverity.CRITICAL, {\r\n      component: \"GlobalError\",\r\n      metadata: { digest: error.digest },\r\n    });\r\n  }, [error]);\r\n\r\n  return (\r\n    <html>\r\n      <body\r\n        style={{\r\n          display: \"flex\",\r\n          flexDirection: \"column\",\r\n          alignItems: \"center\",\r\n          justifyContent: \"center\",\r\n          minHeight: \"100vh\",\r\n          margin: 0,\r\n          fontFamily: \"system-ui, sans-serif\",\r\n          padding: \"2rem\",\r\n          textAlign: \"center\",\r\n        }}\r\n      >\r\n        <h1 style={{ fontSize: \"2rem\", marginBottom: \"0.5rem\" }}>\r\n          Something went wrong\r\n        </h1>\r\n        <p style={{ opacity: 0.7, marginBottom: \"1.5rem\" }}>\r\n          A critical error occurred. We&apos;re working on it.\r\n        </p>\r\n        {process.env.NODE_ENV === \"development\" && (\r\n          <pre\r\n            style={{\r\n              fontSize: \"0.75rem\",\r\n              padding: \"1rem\",\r\n              background: \"#f3f4f6\",\r\n              borderRadius: \"0.5rem\",\r\n              textAlign: \"left\",\r\n              maxWidth: \"40rem\",\r\n              overflow: \"auto\",\r\n              marginBottom: \"1.5rem\",\r\n            }}\r\n          >\r\n            {error.message}\r\n            {error.digest ? `\\n(digest: ${error.digest})` : \"\"}\r\n          </pre>\r\n        )}\r\n        <button onClick={reset} type=\"button\">\r\n          Try again\r\n        </button>\r\n      </body>\r\n    </html>\r\n  );\r\n}\r\n","\"use client\";\r\n\r\n/**\r\n * ErrorView — Next.js per-route error.tsx template.\r\n *\r\n * Renders when an unexpected error is thrown inside a route segment.\r\n * @see https://nextjs.org/docs/app/api-reference/file-conventions/error\r\n *\r\n * Usage in your app:\r\n *   // app/[locale]/error.tsx\r\n *   export { ErrorView as default } from \"@mohasinac/appkit/next\";\r\n *\r\n *   // Or with customisation:\r\n *   import { ErrorView } from \"@mohasinac/appkit/next\";\r\n *   export default function Error(props) {\r\n *     return <ErrorView {...props} heading=\"Oops!\" />;\r\n *   }\r\n */\r\n\r\nimport { useEffect } from \"react\";\r\nimport { trackError, ErrorCategory, ErrorSeverity } from \"../../monitoring\";\r\n\r\nexport interface ErrorViewProps {\r\n  error: Error & { digest?: string };\r\n  reset: () => void;\r\n  /** Override the heading text. */\r\n  heading?: string;\r\n  /** Override the body text. */\r\n  description?: string;\r\n  /** Override the retry button label. */\r\n  retryLabel?: string;\r\n}\r\n\r\nexport function ErrorView({\r\n  error,\r\n  reset,\r\n  heading = \"Something went wrong\",\r\n  description = \"An unexpected error occurred. Please try again.\",\r\n  retryLabel = \"Try again\",\r\n}: ErrorViewProps) {\r\n  useEffect(() => {\r\n    trackError(error, ErrorCategory.UNKNOWN, ErrorSeverity.HIGH, {\r\n      component: \"ErrorView\",\r\n      metadata: { digest: error.digest },\r\n    });\r\n  }, [error]);\r\n\r\n  return (\r\n    <div\r\n      role=\"alert\"\r\n      style={{\r\n        display: \"flex\",\r\n        flexDirection: \"column\",\r\n        alignItems: \"center\",\r\n        justifyContent: \"center\",\r\n        minHeight: \"50vh\",\r\n        padding: \"2rem\",\r\n        textAlign: \"center\",\r\n      }}\r\n    >\r\n      <h2 style={{ fontSize: \"1.5rem\", marginBottom: \"0.5rem\" }}>{heading}</h2>\r\n      <p style={{ opacity: 0.7, marginBottom: \"1.5rem\" }}>{description}</p>\r\n      {process.env.NODE_ENV === \"development\" && error.digest && (\r\n        <p style={{ fontSize: \"0.75rem\", opacity: 0.5, marginBottom: \"1rem\" }}>\r\n          digest: {error.digest}\r\n        </p>\r\n      )}\r\n      <button onClick={reset} type=\"button\">\r\n        {retryLabel}\r\n      </button>\r\n    </div>\r\n  );\r\n}\r\n","/**\r\n * NotFoundView — Next.js not-found.tsx template.\r\n *\r\n * Rendered when `notFound()` is called inside a route segment, or when a\r\n * route is not matched.\r\n * @see https://nextjs.org/docs/app/api-reference/file-conventions/not-found\r\n *\r\n * Usage in your app:\r\n *   // app/[locale]/not-found.tsx\r\n *   export { NotFoundView as default } from \"@mohasinac/appkit/next\";\r\n *\r\n *   // Or with customisation:\r\n *   import { NotFoundView } from \"@mohasinac/appkit/next\";\r\n *   export default function NotFound() {\r\n *     return <NotFoundView heading=\"Page not found\" homeHref=\"/en\" />;\r\n *   }\r\n */\r\n\r\nexport interface NotFoundViewProps {\r\n  /** Override the heading text. */\r\n  heading?: string;\r\n  /** Override the body text. */\r\n  description?: string;\r\n  /** Override the \"Go home\" label. */\r\n  homeLabel?: string;\r\n  /** Override the home link href. */\r\n  homeHref?: string;\r\n}\r\n\r\nexport function NotFoundView({\r\n  heading = \"404 — Page not found\",\r\n  description = \"The page you are looking for does not exist.\",\r\n  homeLabel = \"Go home\",\r\n  homeHref = \"/\",\r\n}: NotFoundViewProps) {\r\n  return (\r\n    <div\r\n      style={{\r\n        display: \"flex\",\r\n        flexDirection: \"column\",\r\n        alignItems: \"center\",\r\n        justifyContent: \"center\",\r\n        minHeight: \"60vh\",\r\n        padding: \"2rem\",\r\n        textAlign: \"center\",\r\n      }}\r\n    >\r\n      <h1 style={{ fontSize: \"4rem\", fontWeight: 700, marginBottom: \"0.5rem\" }}>\r\n        404\r\n      </h1>\r\n      <h2 style={{ fontSize: \"1.5rem\", marginBottom: \"0.75rem\" }}>{heading}</h2>\r\n      <p style={{ opacity: 0.7, marginBottom: \"2rem\" }}>{description}</p>\r\n      <a href={homeHref}>{homeLabel}</a>\r\n    </div>\r\n  );\r\n}\r\n","/**\r\n * UnauthorizedView — 401 page template.\r\n *\r\n * Render this when a user tries to access a resource they are not\r\n * authenticated for. Wire up the `loginHref` prop to your sign-in route.\r\n *\r\n * Usage in your app:\r\n *   // app/[locale]/unauthorized/page.tsx\r\n *   import { UnauthorizedView } from \"@mohasinac/appkit/next\";\r\n *   export default function UnauthorizedPage() {\r\n *     return <UnauthorizedView loginHref=\"/en/auth/login\" />;\r\n *   }\r\n */\r\n\r\nexport interface UnauthorizedViewProps {\r\n  /** Override the heading text. */\r\n  heading?: string;\r\n  /** Override the body text. */\r\n  description?: string;\r\n  /** Label for the sign-in link. */\r\n  loginLabel?: string;\r\n  /** href for the sign-in link. */\r\n  loginHref?: string;\r\n  /** Label for the home link. */\r\n  homeLabel?: string;\r\n  /** href for the home link. */\r\n  homeHref?: string;\r\n}\r\n\r\nexport function UnauthorizedView({\r\n  heading = \"401 — Unauthorized\",\r\n  description = \"You need to be signed in to view this page.\",\r\n  loginLabel = \"Sign in\",\r\n  loginHref = \"/auth/login\",\r\n  homeLabel = \"Go home\",\r\n  homeHref = \"/\",\r\n}: UnauthorizedViewProps) {\r\n  return (\r\n    <div\r\n      style={{\r\n        display: \"flex\",\r\n        flexDirection: \"column\",\r\n        alignItems: \"center\",\r\n        justifyContent: \"center\",\r\n        minHeight: \"60vh\",\r\n        padding: \"2rem\",\r\n        textAlign: \"center\",\r\n      }}\r\n    >\r\n      <h1 style={{ fontSize: \"4rem\", fontWeight: 700, marginBottom: \"0.5rem\" }}>\r\n        401\r\n      </h1>\r\n      <h2 style={{ fontSize: \"1.5rem\", marginBottom: \"0.75rem\" }}>{heading}</h2>\r\n      <p style={{ opacity: 0.7, marginBottom: \"2rem\" }}>{description}</p>\r\n      <div style={{ display: \"flex\", gap: \"1rem\" }}>\r\n        <a href={loginHref}>{loginLabel}</a>\r\n        <a href={homeHref}>{homeLabel}</a>\r\n      </div>\r\n    </div>\r\n  );\r\n}\r\n"]}

package/dist/providers/auth-firebase/index.cjs

@@ -1,400 +0,0 @@
-'use strict';
-
-var app = require('firebase-admin/app');
-var auth = require('firebase-admin/auth');
-require('firebase-admin/firestore');
-require('firebase-admin/storage');
-require('firebase-admin/database');
-var path = require('path');
-var fs = require('fs');
-require('@mohasinac/sievejs/services');
-require('@mohasinac/sievejs/adapters/firebase');
-
-function _interopNamespace(e) {
-  if (e && e.__esModule) return e;
-  var n = Object.create(null);
-  if (e) {
-    Object.keys(e).forEach(function (k) {
-      if (k !== 'default') {
-        var d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: function () { return e[k]; }
-        });
-      }
-    });
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
-
-var path__namespace = /*#__PURE__*/_interopNamespace(path);
-var fs__namespace = /*#__PURE__*/_interopNamespace(fs);
-
-var __defProp = Object.defineProperty;
-var __defProps = Object.defineProperties;
-var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
-var __getOwnPropSymbols = Object.getOwnPropertySymbols;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __propIsEnum = Object.prototype.propertyIsEnumerable;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __spreadValues = (a, b) => {
-  for (var prop in b || (b = {}))
-    if (__hasOwnProp.call(b, prop))
-      __defNormalProp(a, prop, b[prop]);
-  if (__getOwnPropSymbols)
-    for (var prop of __getOwnPropSymbols(b)) {
-      if (__propIsEnum.call(b, prop))
-        __defNormalProp(a, prop, b[prop]);
-    }
-  return a;
-};
-var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
-function parsePrivateKey(raw) {
-  return raw.replace(/^["']|["']$/g, "").replace(/\\n/g, "\n").replace(/\r\n/g, "\n").trim();
-}
-function get(key) {
-  var _a;
-  return (_a = globalThis[key]) != null ? _a : null;
-}
-function set(key, value) {
-  globalThis[key] = value;
-}
-function getAdminApp() {
-  var _a, _b, _c, _d, _e;
-  const cached = get("__mohasinac_firebase_admin_app__");
-  if (cached) return cached;
-  if (app.getApps().length) {
-    const existing = app.getApps()[0];
-    set("__mohasinac_firebase_admin_app__", existing);
-    return existing;
-  }
-  const keyPath = path__namespace.join(process.cwd(), "firebase-admin-key.json");
-  let app$1;
-  try {
-    if (fs__namespace.existsSync(keyPath)) {
-      const sa = JSON.parse(fs__namespace.readFileSync(keyPath, "utf8"));
-      const dbUrl = (_a = process.env.NEXT_PUBLIC_FIREBASE_DATABASE_URL) != null ? _a : `https://${sa.project_id}-default-rtdb.firebaseio.com`;
-      app$1 = app.initializeApp({ credential: app.cert(keyPath), databaseURL: dbUrl });
-    } else if (process.env.FIREBASE_ADMIN_PROJECT_ID && process.env.FIREBASE_ADMIN_CLIENT_EMAIL && process.env.FIREBASE_ADMIN_PRIVATE_KEY) {
-      const projectId = process.env.FIREBASE_ADMIN_PROJECT_ID.trim();
-      const dbUrl = (_e = (_d = (_b = process.env.FIREBASE_ADMIN_DATABASE_URL) == null ? void 0 : _b.trim()) != null ? _d : (_c = process.env.NEXT_PUBLIC_FIREBASE_DATABASE_URL) == null ? void 0 : _c.trim()) != null ? _e : `https://${projectId}-default-rtdb.firebaseio.com`;
-      app$1 = app.initializeApp({
-        credential: app.cert({
-          projectId,
-          clientEmail: process.env.FIREBASE_ADMIN_CLIENT_EMAIL.trim(),
-          privateKey: parsePrivateKey(process.env.FIREBASE_ADMIN_PRIVATE_KEY)
-        }),
-        databaseURL: dbUrl
-      });
-    } else {
-      throw new Error(
-        "@mohasinac/db-firebase: Firebase Admin credentials not found.\nAdd firebase-admin-key.json to project root, or set FIREBASE_ADMIN_PROJECT_ID, FIREBASE_ADMIN_CLIENT_EMAIL, FIREBASE_ADMIN_PRIVATE_KEY environment variables."
-      );
-    }
-  } catch (err) {
-    console.error(
-      "[@mohasinac/db-firebase] Failed to initialise Admin SDK:",
-      err
-    );
-    throw err;
-  }
-  set("__mohasinac_firebase_admin_app__", app$1);
-  return app$1;
-}
-function getAdminAuth() {
-  const cached = get("__mohasinac_firebase_admin_auth__");
-  if (cached) return cached;
-  const auth$1 = auth.getAuth(getAdminApp());
-  set("__mohasinac_firebase_admin_auth__", auth$1);
-  return auth$1;
-}
-
-// src/providers/auth-firebase/provider.ts
-var EXPECTED_AUTH_CODES = /* @__PURE__ */ new Set([
-  "auth/argument-error",
-  "auth/id-token-expired",
-  "auth/id-token-revoked",
-  "auth/session-cookie-expired",
-  "auth/session-cookie-revoked",
-  "auth/user-disabled",
-  "auth/user-not-found"
-]);
-function isExpectedAuthError(err) {
-  var _a;
-  return EXPECTED_AUTH_CODES.has((_a = err.code) != null ? _a : "");
-}
-function toAuthPayload(decoded) {
-  var _a, _b, _c;
-  return {
-    uid: decoded.uid,
-    email: (_a = decoded.email) != null ? _a : null,
-    role: (_b = decoded.role) != null ? _b : "user",
-    emailVerified: (_c = decoded.email_verified) != null ? _c : false,
-    claims: Object.fromEntries(
-      Object.entries(decoded).filter(
-        ([k]) => ![
-          "uid",
-          "email",
-          "email_verified",
-          "iat",
-          "exp",
-          "aud",
-          "iss",
-          "sub",
-          "auth_time",
-          "firebase"
-        ].includes(k)
-      )
-    )
-  };
-}
-function toAuthUser(record) {
-  var _a, _b, _c, _d, _e, _f;
-  return {
-    uid: record.uid,
-    email: (_a = record.email) != null ? _a : null,
-    displayName: (_b = record.displayName) != null ? _b : null,
-    photoURL: (_c = record.photoURL) != null ? _c : null,
-    role: (_e = (_d = record.customClaims) == null ? void 0 : _d["role"]) != null ? _e : "user",
-    emailVerified: record.emailVerified,
-    disabled: record.disabled,
-    createdAt: (_f = record.metadata.creationTime) != null ? _f : (/* @__PURE__ */ new Date(0)).toISOString()
-  };
-}
-var firebaseAuthProvider = {
-  async verifyToken(token) {
-    try {
-      const decoded = await getAdminAuth().verifyIdToken(token);
-      return toAuthPayload(decoded);
-    } catch (err) {
-      if (!isExpectedAuthError(err)) {
-        console.error(
-          "[@mohasinac/auth-firebase] Token verification failed:",
-          err
-        );
-      }
-      throw err;
-    }
-  },
-  async createCustomToken(uid, claims) {
-    return getAdminAuth().createCustomToken(uid, claims);
-  },
-  async getUser(uid) {
-    try {
-      const record = await getAdminAuth().getUser(uid);
-      return toAuthUser(record);
-    } catch (err) {
-      if (err.code === "auth/user-not-found")
-        return null;
-      throw err;
-    }
-  },
-  async createUser(data) {
-    var _a;
-    const record = await getAdminAuth().createUser({
-      email: data.email,
-      password: data.password,
-      displayName: data.displayName,
-      photoURL: data.photoURL,
-      emailVerified: (_a = data.emailVerified) != null ? _a : false
-    });
-    if (data.role) {
-      await getAdminAuth().setCustomUserClaims(record.uid, { role: data.role });
-      const updated = await getAdminAuth().getUser(record.uid);
-      return toAuthUser(updated);
-    }
-    return toAuthUser(record);
-  },
-  async updateUser(uid, data) {
-    const record = await getAdminAuth().updateUser(uid, {
-      email: data.email,
-      password: data.password,
-      displayName: data.displayName,
-      photoURL: data.photoURL,
-      emailVerified: data.emailVerified
-    });
-    if (data.role !== void 0) {
-      await getAdminAuth().setCustomUserClaims(uid, { role: data.role });
-    }
-    const updated = await getAdminAuth().getUser(record.uid);
-    return toAuthUser(updated);
-  },
-  async deleteUser(uid) {
-    await getAdminAuth().deleteUser(uid);
-  },
-  async revokeTokens(uid) {
-    await getAdminAuth().revokeRefreshTokens(uid);
-  }
-};
-
-// src/providers/auth-firebase/session.ts
-var DEFAULT_EXPIRES_IN_MS = 60 * 60 * 24 * 5 * 1e3;
-var EXPECTED_SESSION_CODES = /* @__PURE__ */ new Set([
-  "auth/session-cookie-expired",
-  "auth/session-cookie-revoked",
-  "auth/user-disabled",
-  "auth/user-not-found",
-  "auth/argument-error"
-]);
-var firebaseSessionProvider = {
-  /**
-   * `payload` must be an `AuthPayload` from a freshly verified ID token.
-   * The underlying Firebase API expects an ID token string, not just a UID.
-   * If you have the raw ID token, use `createSessionCookieFromToken()` instead.
-   *
-   * Here we create a custom token → exchange for an effective session.
-   * In practice, callers should use `createSessionCookieFromToken()`.
-   */
-  async createSession(payload) {
-    throw new Error(
-      "Use createSessionCookieFromToken(idToken) instead of createSession(payload). Firebase session cookies must be created from a raw ID token string."
-    );
-  },
-  async verifySession(cookie) {
-    var _a, _b, _c, _d;
-    try {
-      const decoded = await getAdminAuth().verifySessionCookie(cookie, true);
-      return {
-        uid: decoded.uid,
-        email: (_a = decoded.email) != null ? _a : null,
-        role: (_b = decoded.role) != null ? _b : "user",
-        emailVerified: (_c = decoded.email_verified) != null ? _c : false,
-        claims: Object.fromEntries(
-          Object.entries(decoded).filter(
-            ([k]) => ![
-              "uid",
-              "email",
-              "email_verified",
-              "iat",
-              "exp",
-              "aud",
-              "iss",
-              "sub",
-              "auth_time",
-              "firebase"
-            ].includes(k)
-          )
-        )
-      };
-    } catch (err) {
-      if (!EXPECTED_SESSION_CODES.has((_d = err.code) != null ? _d : "")) {
-        console.error(
-          "[@mohasinac/auth-firebase] Session cookie verification failed:",
-          err
-        );
-      }
-      throw err;
-    }
-  },
-  async destroySession(cookie) {
-    try {
-      const decoded = await getAdminAuth().verifySessionCookie(cookie, false);
-      await getAdminAuth().revokeRefreshTokens(decoded.uid);
-    } catch (e) {
-    }
-  }
-};
-async function createSessionCookieFromToken(idToken, expiresIn = DEFAULT_EXPIRES_IN_MS) {
-  return getAdminAuth().createSessionCookie(idToken, { expiresIn });
-}
-
-// src/providers/auth-firebase/helpers.ts
-var EXPECTED_AUTH_CODES2 = /* @__PURE__ */ new Set([
-  "auth/argument-error",
-  "auth/id-token-expired",
-  "auth/id-token-revoked",
-  "auth/session-cookie-expired",
-  "auth/session-cookie-revoked",
-  "auth/user-disabled",
-  "auth/user-not-found"
-]);
-async function verifyIdToken(token) {
-  var _a, _b, _c, _d;
-  try {
-    const decoded = await getAdminAuth().verifyIdToken(token);
-    return {
-      uid: decoded.uid,
-      email: (_a = decoded.email) != null ? _a : null,
-      role: (_b = decoded.role) != null ? _b : "user",
-      emailVerified: (_c = decoded.email_verified) != null ? _c : false
-    };
-  } catch (err) {
-    if (!EXPECTED_AUTH_CODES2.has((_d = err.code) != null ? _d : "")) {
-      console.error(
-        "[@mohasinac/auth-firebase] Token verification failed:",
-        err
-      );
-    }
-    return null;
-  }
-}
-async function verifySessionCookie(cookie) {
-  var _a, _b, _c, _d;
-  try {
-    const decoded = await getAdminAuth().verifySessionCookie(cookie, true);
-    return {
-      uid: decoded.uid,
-      email: (_a = decoded.email) != null ? _a : null,
-      role: (_b = decoded.role) != null ? _b : "user",
-      emailVerified: (_c = decoded.email_verified) != null ? _c : false
-    };
-  } catch (err) {
-    if (!EXPECTED_AUTH_CODES2.has((_d = err.code) != null ? _d : "")) {
-      console.error(
-        "[@mohasinac/auth-firebase] Session cookie verification failed:",
-        err
-      );
-    }
-    return null;
-  }
-}
-function createMiddlewareAuthChain() {
-  return async function getUser(cookies) {
-    var _a, _b;
-    const session = (_a = cookies.get("__session")) == null ? void 0 : _a.value;
-    if (session) {
-      const user = await verifySessionCookie(session);
-      if (user) return user;
-    }
-    const idToken = (_b = cookies.get("idToken")) == null ? void 0 : _b.value;
-    if (idToken) {
-      return verifyIdToken(idToken);
-    }
-    return null;
-  };
-}
-async function requireAuth(cookies) {
-  const chain = createMiddlewareAuthChain();
-  const user = await chain(cookies);
-  if (!user) {
-    throw Object.assign(new Error("Unauthorized"), { statusCode: 401 });
-  }
-  return user;
-}
-async function requireRole(cookies, role, resolveRole) {
-  const user = await requireAuth(cookies);
-  const allowed = Array.isArray(role) ? role : [role];
-  let userRole = user.role;
-  if (resolveRole) {
-    userRole = await resolveRole(user.uid);
-  }
-  if (!allowed.includes(userRole)) {
-    throw Object.assign(
-      new Error(`Forbidden \u2014 requires role: ${allowed.join(" | ")}`),
-      { statusCode: 403 }
-    );
-  }
-  return __spreadProps(__spreadValues({}, user), { role: userRole });
-}
-
-exports.createMiddlewareAuthChain = createMiddlewareAuthChain;
-exports.createSessionCookieFromToken = createSessionCookieFromToken;
-exports.firebaseAuthProvider = firebaseAuthProvider;
-exports.firebaseSessionProvider = firebaseSessionProvider;
-exports.requireAuth = requireAuth;
-exports.requireRole = requireRole;
-exports.verifyIdToken = verifyIdToken;
-exports.verifySessionCookie = verifySessionCookie;
-//# sourceMappingURL=index.cjs.map
-//# sourceMappingURL=index.cjs.map

package/dist/providers/auth-firebase/index.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/providers/db-firebase/admin.ts","../../../src/providers/auth-firebase/provider.ts","../../../src/providers/auth-firebase/session.ts","../../../src/providers/auth-firebase/helpers.ts"],"names":["getApps","path","app","fs","initializeApp","cert","auth","getAuth","EXPECTED_AUTH_CODES"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,SAAS,gBAAgB,GAAA,EAAqB;AAC5C,EAAA,OAAO,GAAA,CACJ,OAAA,CAAQ,cAAA,EAAgB,EAAE,CAAA,CAC1B,OAAA,CAAQ,MAAA,EAAQ,IAAI,CAAA,CACpB,OAAA,CAAQ,OAAA,EAAS,IAAI,EACrB,IAAA,EAAK;AACV;AAmBA,SAAS,IAAO,GAAA,EAAwC;AAzDxD,EAAA,IAAA,EAAA;AA0DE,EAAA,OAAA,CAAQ,EAAA,GAAA,UAAA,CAAW,GAAG,CAAA,KAAd,IAAA,GAAA,EAAA,GAA4C,IAAA;AACtD;AACA,SAAS,GAAA,CAAO,KAA8B,KAAA,EAAgB;AAC5D,EAAC,UAAA,CAAuC,GAAG,CAAA,GAAI,KAAA;AACjD;AAIO,SAAS,WAAA,GAAmB;AAlEnC,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAmEE,EAAA,MAAM,MAAA,GAAS,IAAS,kCAAkC,CAAA;AAC1D,EAAA,IAAI,QAAQ,OAAO,MAAA;AAEnB,EAAA,IAAIA,WAAA,GAAU,MAAA,EAAQ;AACpB,IAAA,MAAM,QAAA,GAAWA,WAAA,EAAQ,CAAE,CAAC,CAAA;AAC5B,IAAA,GAAA,CAAI,oCAAoC,QAAQ,CAAA;AAChD,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,MAAM,OAAA,GAAeC,eAAA,CAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,IAAO,yBAAyB,CAAA;AAClE,EAAA,IAAIC,KAAA;AAEJ,EAAA,IAAI;AACF,IAAA,IAAOC,aAAA,CAAA,UAAA,CAAW,OAAO,CAAA,EAAG;AAC1B,MAAA,MAAM,KAAK,IAAA,CAAK,KAAA,CAASA,aAAA,CAAA,YAAA,CAAa,OAAA,EAAS,MAAM,CAAC,CAAA;AACtD,MAAA,MAAM,SACJ,EAAA,GAAA,OAAA,CAAQ,GAAA,CAAI,sCAAZ,IAAA,GAAA,EAAA,GACA,CAAA,QAAA,EAAW,GAAG,UAAU,CAAA,4BAAA,CAAA;AAE1B,MAAAD,KAAA,GAAME,iBAAA,CAAc,EAAE,UAAA,EAAYC,QAAA,CAAK,OAAO,CAAA,EAAG,WAAA,EAAa,OAAO,CAAA;AAAA,IACvE,CAAA,MAAA,IACE,QAAQ,GAAA,CAAI,yBAAA,IACZ,QAAQ,GAAA,CAAI,2BAAA,IACZ,OAAA,CAAQ,GAAA,CAAI,0BAAA,EACZ;AACA,MAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,GAAA,CAAI,yBAAA,CAA0B,IAAA,EAAK;AAC7D,MAAA,MAAM,KAAA,GAAA,CACJ,EAAA,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,OAAA,CAAQ,GAAA,CAAI,2BAAA,KAAZ,mBAAyC,IAAA,EAAA,KAAzC,IAAA,GAAA,EAAA,GAAA,CACA,EAAA,GAAA,OAAA,CAAQ,GAAA,CAAI,iCAAA,KAAZ,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAA+C,IAAA,EAAA,KAD/C,IAAA,GAAA,EAAA,GAEA,WAAW,SAAS,CAAA,4BAAA,CAAA;AAEtB,MAAAH,KAAA,GAAME,iBAAA,CAAc;AAAA,QAClB,YAAYC,QAAA,CAAK;AAAA,UACf,SAAA;AAAA,UACA,WAAA,EAAa,OAAA,CAAQ,GAAA,CAAI,2BAAA,CAA4B,IAAA,EAAK;AAAA,UAC1D,UAAA,EAAY,eAAA,CAAgB,OAAA,CAAQ,GAAA,CAAI,0BAA0B;AAAA,SACnE,CAAA;AAAA,QACD,WAAA,EAAa;AAAA,OACd,CAAA;AAAA,IACH,CAAA,MAAO;AACL,MAAA,MAAM,IAAI,KAAA;AAAA,QACR;AAAA,OAIF;AAAA,IACF;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,OAAA,CAAQ,KAAA;AAAA,MACN,0DAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AAEA,EAAA,GAAA,CAAI,oCAAoCH,KAAG,CAAA;AAC3C,EAAA,OAAOA,KAAA;AACT;AAIO,SAAS,YAAA,GAAqB;AACnC,EAAA,MAAM,MAAA,GAAS,IAAU,mCAAmC,CAAA;AAC5D,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAMI,MAAA,GAAOC,YAAA,CAAQ,WAAA,EAAa,CAAA;AAClC,EAAA,GAAA,CAAI,qCAAqCD,MAAI,CAAA;AAC7C,EAAA,OAAOA,MAAA;AACT;;;ACtHA,IAAM,mBAAA,uBAA0B,GAAA,CAAI;AAAA,EAClC,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,6BAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,oBAAoB,GAAA,EAAuB;AA1BpD,EAAA,IAAA,EAAA;AA2BE,EAAA,OAAO,mBAAA,CAAoB,GAAA,CAAA,CAAK,EAAA,GAAA,GAAA,CAA0B,IAAA,KAA1B,YAAkC,EAAE,CAAA;AACtE;AAEA,SAAS,cAAc,OAAA,EAMP;AApChB,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAqCE,EAAA,OAAO;AAAA,IACL,KAAK,OAAA,CAAQ,GAAA;AAAA,IACb,KAAA,EAAA,CAAO,EAAA,GAAA,OAAA,CAAQ,KAAA,KAAR,IAAA,GAAA,EAAA,GAAiB,IAAA;AAAA,IACxB,IAAA,EAAA,CAAO,EAAA,GAAA,OAAA,CAAQ,IAAA,KAAR,IAAA,GAAA,EAAA,GAAuC,MAAA;AAAA,IAC9C,aAAA,EAAA,CAAe,EAAA,GAAA,OAAA,CAAQ,cAAA,KAAR,IAAA,GAAA,EAAA,GAA0B,KAAA;AAAA,IACzC,QAAQ,MAAA,CAAO,WAAA;AAAA,MACb,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,CAAE,MAAA;AAAA,QACtB,CAAC,CAAC,CAAC,CAAA,KACD,CAAC;AAAA,UACC,KAAA;AAAA,UACA,OAAA;AAAA,UACA,gBAAA;AAAA,UACA,KAAA;AAAA,UACA,KAAA;AAAA,UACA,KAAA;AAAA,UACA,KAAA;AAAA,UACA,KAAA;AAAA,UACA,WAAA;AAAA,UACA;AAAA,SACF,CAAE,SAAS,CAAC;AAAA;AAChB;AACF,GACF;AACF;AAEA,SAAS,WAAW,MAAA,EASP;AAvEb,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAwEE,EAAA,OAAO;AAAA,IACL,KAAK,MAAA,CAAO,GAAA;AAAA,IACZ,KAAA,EAAA,CAAO,EAAA,GAAA,MAAA,CAAO,KAAA,KAAP,IAAA,GAAA,EAAA,GAAgB,IAAA;AAAA,IACvB,WAAA,EAAA,CAAa,EAAA,GAAA,MAAA,CAAO,WAAA,KAAP,IAAA,GAAA,EAAA,GAAsB,IAAA;AAAA,IACnC,QAAA,EAAA,CAAU,EAAA,GAAA,MAAA,CAAO,QAAA,KAAP,IAAA,GAAA,EAAA,GAAmB,IAAA;AAAA,IAC7B,IAAA,EAAA,CAAO,EAAA,GAAA,CAAA,EAAA,GAAA,MAAA,CAAO,YAAA,KAAP,IAAA,GAAA,MAAA,GAAA,EAAA,CAAsB,YAAtB,IAAA,GAAA,EAAA,GAAwD,MAAA;AAAA,IAC/D,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAA,EAAA,CAAW,YAAO,QAAA,CAAS,YAAA,KAAhB,6BAAgC,IAAI,IAAA,CAAK,CAAC,CAAA,EAAE,WAAA;AAAY,GACrE;AACF;AAEO,IAAM,oBAAA,GAAsC;AAAA,EACjD,MAAM,YAAY,KAAA,EAAqC;AACrD,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,MAAM,YAAA,EAAa,CAAE,cAAc,KAAK,CAAA;AACxD,MAAA,OAAO,cAAc,OAAO,CAAA;AAAA,IAC9B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,CAAC,mBAAA,CAAoB,GAAG,CAAA,EAAG;AAC7B,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,uDAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF,CAAA;AAAA,EAEA,MAAM,iBAAA,CACJ,GAAA,EACA,MAAA,EACiB;AACjB,IAAA,OAAO,YAAA,EAAa,CAAE,iBAAA,CAAkB,GAAA,EAAK,MAAM,CAAA;AAAA,EACrD,CAAA;AAAA,EAEA,MAAM,QAAQ,GAAA,EAAuC;AACnD,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,YAAA,EAAa,CAAE,QAAQ,GAAG,CAAA;AAC/C,MAAA,OAAO,WAAW,MAAM,CAAA;AAAA,IAC1B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,IAA0B,IAAA,KAAS,qBAAA;AACtC,QAAA,OAAO,IAAA;AACT,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF,CAAA;AAAA,EAEA,MAAM,WAAW,IAAA,EAA0C;AAtH7D,IAAA,IAAA,EAAA;AAuHI,IAAA,MAAM,MAAA,GAAS,MAAM,YAAA,EAAa,CAAE,UAAA,CAAW;AAAA,MAC7C,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,aAAA,EAAA,CAAe,EAAA,GAAA,IAAA,CAAK,aAAA,KAAL,IAAA,GAAA,EAAA,GAAsB;AAAA,KACtC,CAAA;AACD,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,MAAM,YAAA,GAAe,mBAAA,CAAoB,MAAA,CAAO,KAAK,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,CAAA;AAExE,MAAA,MAAM,UAAU,MAAM,YAAA,EAAa,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA;AACvD,MAAA,OAAO,WAAW,OAAO,CAAA;AAAA,IAC3B;AACA,IAAA,OAAO,WAAW,MAAM,CAAA;AAAA,EAC1B,CAAA;AAAA,EAEA,MAAM,UAAA,CACJ,GAAA,EACA,IAAA,EACmB;AACnB,IAAA,MAAM,MAAA,GAAS,MAAM,YAAA,EAAa,CAAE,WAAW,GAAA,EAAK;AAAA,MAClD,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,eAAe,IAAA,CAAK;AAAA,KACrB,CAAA;AACD,IAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAW;AAC3B,MAAA,MAAM,YAAA,GAAe,mBAAA,CAAoB,GAAA,EAAK,EAAE,IAAA,EAAM,IAAA,CAAK,MAAM,CAAA;AAAA,IACnE;AACA,IAAA,MAAM,UAAU,MAAM,YAAA,EAAa,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA;AACvD,IAAA,OAAO,WAAW,OAAO,CAAA;AAAA,EAC3B,CAAA;AAAA,EAEA,MAAM,WAAW,GAAA,EAA4B;AAC3C,IAAA,MAAM,YAAA,EAAa,CAAE,UAAA,CAAW,GAAG,CAAA;AAAA,EACrC,CAAA;AAAA,EAEA,MAAM,aAAa,GAAA,EAA4B;AAC7C,IAAA,MAAM,YAAA,EAAa,CAAE,mBAAA,CAAoB,GAAG,CAAA;AAAA,EAC9C;AACF;;;ACnJA,IAAM,qBAAA,GAAwB,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,CAAA,GAAI,GAAA;AAEjD,IAAM,sBAAA,uBAA6B,GAAA,CAAI;AAAA,EACrC,6BAAA;AAAA,EACA,6BAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAEM,IAAM,uBAAA,GAA4C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASvD,MAAM,cAAc,OAAA,EAAuC;AAMzD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KAEF;AAAA,EACF,CAAA;AAAA,EAEA,MAAM,cAAc,MAAA,EAAsC;AA5C5D,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AA6CI,IAAA,IAAI;AACF,MAAA,MAAM,UAAU,MAAM,YAAA,EAAa,CAAE,mBAAA,CAAoB,QAAQ,IAAI,CAAA;AACrE,MAAA,OAAO;AAAA,QACL,KAAK,OAAA,CAAQ,GAAA;AAAA,QACb,KAAA,EAAA,CAAO,EAAA,GAAA,OAAA,CAAQ,KAAA,KAAR,IAAA,GAAA,EAAA,GAAiB,IAAA;AAAA,QACxB,IAAA,EAAA,CAAO,EAAA,GAAA,OAAA,CAAQ,IAAA,KAAR,IAAA,GAAA,EAAA,GAAuC,MAAA;AAAA,QAC9C,aAAA,EAAA,CAAe,EAAA,GAAA,OAAA,CAAQ,cAAA,KAAR,IAAA,GAAA,EAAA,GAA0B,KAAA;AAAA,QACzC,QAAQ,MAAA,CAAO,WAAA;AAAA,UACb,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,CAAE,MAAA;AAAA,YACtB,CAAC,CAAC,CAAC,CAAA,KACD,CAAC;AAAA,cACC,KAAA;AAAA,cACA,OAAA;AAAA,cACA,gBAAA;AAAA,cACA,KAAA;AAAA,cACA,KAAA;AAAA,cACA,KAAA;AAAA,cACA,KAAA;AAAA,cACA,KAAA;AAAA,cACA,WAAA;AAAA,cACA;AAAA,aACF,CAAE,SAAS,CAAC;AAAA;AAChB;AACF,OACF;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,CAAC,sBAAA,CAAuB,GAAA,CAAA,CAAK,SAA0B,IAAA,KAA1B,IAAA,GAAA,EAAA,GAAkC,EAAE,CAAA,EAAG;AACtE,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,gEAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,GAAA;AAAA,IACR;AAAA,EACF,CAAA;AAAA,EAEA,MAAM,eAAe,MAAA,EAA+B;AAClD,IAAA,IAAI;AACF,MAAA,MAAM,UAAU,MAAM,YAAA,EAAa,CAAE,mBAAA,CAAoB,QAAQ,KAAK,CAAA;AACtE,MAAA,MAAM,YAAA,EAAa,CAAE,mBAAA,CAAoB,OAAA,CAAQ,GAAG,CAAA;AAAA,IACtD,CAAA,CAAA,OAAQ,CAAA,EAAA;AAAA,IAER;AAAA,EACF;AACF;AAUA,eAAsB,4BAAA,CACpB,OAAA,EACA,SAAA,GAAoB,qBAAA,EACH;AACjB,EAAA,OAAO,cAAa,CAAE,mBAAA,CAAoB,OAAA,EAAS,EAAE,WAAW,CAAA;AAClE;;;AC3FA,IAAME,oBAAAA,uBAA0B,GAAA,CAAI;AAAA,EAClC,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,6BAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAKD,eAAsB,cACpB,KAAA,EAC6B;AA5B/B,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AA6BE,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAM,YAAA,EAAa,CAAE,cAAc,KAAK,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,KAAA,EAAA,CAAO,EAAA,GAAA,OAAA,CAAQ,KAAA,KAAR,IAAA,GAAA,EAAA,GAAiB,IAAA;AAAA,MACxB,IAAA,EAAA,CAAO,EAAA,GAAA,OAAA,CAAQ,IAAA,KAAR,IAAA,GAAA,EAAA,GAAuC,MAAA;AAAA,MAC9C,aAAA,EAAA,CAAe,EAAA,GAAA,OAAA,CAAQ,cAAA,KAAR,IAAA,GAAA,EAAA,GAA0B;AAAA,KAC3C;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,CAACA,oBAAAA,CAAoB,GAAA,CAAA,CAAK,SAA0B,IAAA,KAA1B,IAAA,GAAA,EAAA,GAAkC,EAAE,CAAA,EAAG;AACnE,MAAA,OAAA,CAAQ,KAAA;AAAA,QACN,uDAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGA,eAAsB,oBACpB,MAAA,EAC6B;AAnD/B,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAoDE,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,MAAM,YAAA,EAAa,CAAE,mBAAA,CAAoB,QAAQ,IAAI,CAAA;AACrE,IAAA,OAAO;AAAA,MACL,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,KAAA,EAAA,CAAO,EAAA,GAAA,OAAA,CAAQ,KAAA,KAAR,IAAA,GAAA,EAAA,GAAiB,IAAA;AAAA,MACxB,IAAA,EAAA,CAAO,EAAA,GAAA,OAAA,CAAQ,IAAA,KAAR,IAAA,GAAA,EAAA,GAAuC,MAAA;AAAA,MAC9C,aAAA,EAAA,CAAe,EAAA,GAAA,OAAA,CAAQ,cAAA,KAAR,IAAA,GAAA,EAAA,GAA0B;AAAA,KAC3C;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,CAACA,oBAAAA,CAAoB,GAAA,CAAA,CAAK,SAA0B,IAAA,KAA1B,IAAA,GAAA,EAAA,GAAkC,EAAE,CAAA,EAAG;AACnE,MAAA,OAAA,CAAQ,KAAA;AAAA,QACN,gEAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAgBO,SAAS,yBAAA,GAA4B;AAC1C,EAAA,OAAO,eAAe,QAAQ,OAAA,EAEE;AAxFlC,IAAA,IAAA,EAAA,EAAA,EAAA;AAyFI,IAAA,MAAM,OAAA,GAAA,CAAU,EAAA,GAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,MAAvB,IAAA,GAAA,MAAA,GAAA,EAAA,CAA0B,KAAA;AAC1C,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,mBAAA,CAAoB,OAAO,CAAA;AAC9C,MAAA,IAAI,MAAM,OAAO,IAAA;AAAA,IACnB;AAEA,IAAA,MAAM,OAAA,GAAA,CAAU,EAAA,GAAA,OAAA,CAAQ,GAAA,CAAI,SAAS,MAArB,IAAA,GAAA,MAAA,GAAA,EAAA,CAAwB,KAAA;AACxC,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,OAAO,cAAc,OAAO,CAAA;AAAA,IAC9B;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AACF;AAQA,eAAsB,YAAY,OAAA,EAET;AACvB,EAAA,MAAM,QAAQ,yBAAA,EAA0B;AACxC,EAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,OAAO,CAAA;AAChC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,MAAM,MAAA,CAAO,OAAO,IAAI,KAAA,CAAM,cAAc,CAAA,EAAG,EAAE,UAAA,EAAY,GAAA,EAAK,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,IAAA;AACT;AASA,eAAsB,WAAA,CACpB,OAAA,EACA,IAAA,EACA,WAAA,EACsB;AACtB,EAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,OAAO,CAAA;AACtC,EAAA,MAAM,UAAU,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GAAI,IAAA,GAAO,CAAC,IAAI,CAAA;AAElD,EAAA,IAAI,WAAW,IAAA,CAAK,IAAA;AACpB,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,QAAA,GAAW,MAAM,WAAA,CAAY,IAAA,CAAK,GAAG,CAAA;AAAA,EACvC;AAEA,EAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC/B,IAAA,MAAM,MAAA,CAAO,MAAA;AAAA,MACX,IAAI,KAAA,CAAM,CAAA,gCAAA,EAA8B,QAAQ,IAAA,CAAK,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,MAC7D,EAAE,YAAY,GAAA;AAAI,KACpB;AAAA,EACF;AAEA,EAAA,OAAO,aAAA,CAAA,cAAA,CAAA,EAAA,EAAK,IAAA,CAAA,EAAL,EAAW,IAAA,EAAM,QAAA,EAAS,CAAA;AACnC","file":"index.cjs","sourcesContent":["/**\n * Firebase Admin SDK singletons.\n *\n * Supports two init methods (checked in order):\n *   1. `firebase-admin-key.json` in process.cwd() — development\n *   2. FIREBASE_ADMIN_PROJECT_ID / CLIENT_EMAIL / PRIVATE_KEY env vars — production\n *\n * All getters are lazy — the SDK is not touched until first use.\n */\n\nimport { initializeApp, getApps, cert, type App } from \"firebase-admin/app\";\nimport { getAuth, type Auth } from \"firebase-admin/auth\";\nimport { getFirestore, type Firestore } from \"firebase-admin/firestore\";\nimport {\n  getStorage as getFirebaseStorage,\n  type Storage,\n} from \"firebase-admin/storage\";\nimport { getDatabase, type Database } from \"firebase-admin/database\";\nimport * as path from \"path\";\nimport * as fs from \"fs\";\n\n// ─── Private key normalisation ────────────────────────────────────────────────\n//\n// Vercel (and other platforms) can store the private key in several formats:\n//   1. Literal \\n sequences  (common — copied from JSON value)\n//   2. Real newlines          (set via CLI / multiline input)\n//   3. Windows \\r\\n endings   (copied on Windows)\n//   4. Wrapped in double-quotes (pasted with JSON quotes intact)\n//\n// OpenSSL 3 (Node 18+) rejects malformed PEM — ensure the key is normalised\n// before passing it to `cert()`.\n//\nfunction parsePrivateKey(raw: string): string {\n  return raw\n    .replace(/^[\"']|[\"']$/g, \"\") // strip optional surrounding quotes\n    .replace(/\\\\n/g, \"\\n\") // literal \\n → real newline\n    .replace(/\\r\\n/g, \"\\n\") // Windows CRLF → LF\n    .trim();\n}\n\n// ─── Global singletons ────────────────────────────────────────────────────────\n// Stored on globalThis so all module instances (pnpm deduplication may create\n// multiple copies of this package in the same process) share one SDK instance.\n\ndeclare global {\n  // eslint-disable-next-line no-var\n  var __mohasinac_firebase_admin_app__: App | null | undefined;\n  // eslint-disable-next-line no-var\n  var __mohasinac_firebase_admin_auth__: Auth | null | undefined;\n  // eslint-disable-next-line no-var\n  var __mohasinac_firebase_admin_db__: Firestore | null | undefined;\n  // eslint-disable-next-line no-var\n  var __mohasinac_firebase_admin_storage__: Storage | null | undefined;\n  // eslint-disable-next-line no-var\n  var __mohasinac_firebase_admin_rtdb__: Database | null | undefined;\n}\n\nfunction get<T>(key: keyof typeof globalThis): T | null {\n  return (globalThis[key] as T | null | undefined) ?? null;\n}\nfunction set<T>(key: keyof typeof globalThis, value: T): void {\n  (globalThis as Record<string, unknown>)[key] = value;\n}\n\n// ─── App ──────────────────────────────────────────────────────────────────────\n\nexport function getAdminApp(): App {\n  const cached = get<App>(\"__mohasinac_firebase_admin_app__\");\n  if (cached) return cached;\n\n  if (getApps().length) {\n    const existing = getApps()[0];\n    set(\"__mohasinac_firebase_admin_app__\", existing);\n    return existing;\n  }\n\n  const keyPath = path.join(process.cwd(), \"firebase-admin-key.json\");\n  let app: App;\n\n  try {\n    if (fs.existsSync(keyPath)) {\n      const sa = JSON.parse(fs.readFileSync(keyPath, \"utf8\"));\n      const dbUrl =\n        process.env.NEXT_PUBLIC_FIREBASE_DATABASE_URL ??\n        `https://${sa.project_id}-default-rtdb.firebaseio.com`;\n\n      app = initializeApp({ credential: cert(keyPath), databaseURL: dbUrl });\n    } else if (\n      process.env.FIREBASE_ADMIN_PROJECT_ID &&\n      process.env.FIREBASE_ADMIN_CLIENT_EMAIL &&\n      process.env.FIREBASE_ADMIN_PRIVATE_KEY\n    ) {\n      const projectId = process.env.FIREBASE_ADMIN_PROJECT_ID.trim();\n      const dbUrl =\n        process.env.FIREBASE_ADMIN_DATABASE_URL?.trim() ??\n        process.env.NEXT_PUBLIC_FIREBASE_DATABASE_URL?.trim() ??\n        `https://${projectId}-default-rtdb.firebaseio.com`;\n\n      app = initializeApp({\n        credential: cert({\n          projectId,\n          clientEmail: process.env.FIREBASE_ADMIN_CLIENT_EMAIL.trim(),\n          privateKey: parsePrivateKey(process.env.FIREBASE_ADMIN_PRIVATE_KEY),\n        }),\n        databaseURL: dbUrl,\n      });\n    } else {\n      throw new Error(\n        \"@mohasinac/db-firebase: Firebase Admin credentials not found.\\n\" +\n          \"Add firebase-admin-key.json to project root, or set \" +\n          \"FIREBASE_ADMIN_PROJECT_ID, FIREBASE_ADMIN_CLIENT_EMAIL, \" +\n          \"FIREBASE_ADMIN_PRIVATE_KEY environment variables.\",\n      );\n    }\n  } catch (err) {\n    console.error(\n      \"[@mohasinac/db-firebase] Failed to initialise Admin SDK:\",\n      err,\n    );\n    throw err;\n  }\n\n  set(\"__mohasinac_firebase_admin_app__\", app);\n  return app;\n}\n\n// ─── Auth ─────────────────────────────────────────────────────────────────────\n\nexport function getAdminAuth(): Auth {\n  const cached = get<Auth>(\"__mohasinac_firebase_admin_auth__\");\n  if (cached) return cached;\n  const auth = getAuth(getAdminApp());\n  set(\"__mohasinac_firebase_admin_auth__\", auth);\n  return auth;\n}\n\n// ─── Firestore ────────────────────────────────────────────────────────────────\n\nexport function getAdminDb(): Firestore {\n  const cached = get<Firestore>(\"__mohasinac_firebase_admin_db__\");\n  if (cached) return cached;\n  const db = getFirestore(getAdminApp());\n  try {\n    // settings() can only be called once per Firestore instance — guard for\n    // HMR reloads and duplicate module instances.\n    db.settings({ ignoreUndefinedProperties: true });\n  } catch {\n    // Already configured — safe to ignore.\n  }\n  set(\"__mohasinac_firebase_admin_db__\", db);\n  return db;\n}\n\n// ─── Cloud Storage ────────────────────────────────────────────────────────────\n\nexport function getAdminStorage(): Storage {\n  const cached = get<Storage>(\"__mohasinac_firebase_admin_storage__\");\n  if (cached) return cached;\n  const storage = getFirebaseStorage(getAdminApp());\n  set(\"__mohasinac_firebase_admin_storage__\", storage);\n  return storage;\n}\n\n// ─── Realtime DB ──────────────────────────────────────────────────────────────\n\nexport function getAdminRealtimeDb(): Database {\n  const cached = get<Database>(\"__mohasinac_firebase_admin_rtdb__\");\n  if (cached) return cached;\n  const rtdb = getDatabase(getAdminApp());\n  set(\"__mohasinac_firebase_admin_rtdb__\", rtdb);\n  return rtdb;\n}\n\n/** Reset all singletons — useful in tests. */\nexport function _resetAdminSingletons(): void {\n  set(\"__mohasinac_firebase_admin_app__\", null);\n  set(\"__mohasinac_firebase_admin_auth__\", null);\n  set(\"__mohasinac_firebase_admin_db__\", null);\n  set(\"__mohasinac_firebase_admin_storage__\", null);\n  set(\"__mohasinac_firebase_admin_rtdb__\", null);\n}\n","/**\n * firebaseAuthProvider — IAuthProvider\n *\n * Implements `@mohasinac/contracts` `IAuthProvider` using the Firebase Admin SDK.\n * Server-side only.  Never import this in browser/client-component code.\n */\n\nimport type {\n  IAuthProvider,\n  AuthPayload,\n  AuthUser,\n  CreateUserInput,\n} from \"@mohasinac/contracts\";\nimport { getAdminAuth } from \"@mohasinac/db-firebase\";\n\n/** Firebase error codes that represent a normal \"not authenticated\" state. */\nconst EXPECTED_AUTH_CODES = new Set([\n  \"auth/argument-error\",\n  \"auth/id-token-expired\",\n  \"auth/id-token-revoked\",\n  \"auth/session-cookie-expired\",\n  \"auth/session-cookie-revoked\",\n  \"auth/user-disabled\",\n  \"auth/user-not-found\",\n]);\n\nfunction isExpectedAuthError(err: unknown): boolean {\n  return EXPECTED_AUTH_CODES.has((err as { code?: string }).code ?? \"\");\n}\n\nfunction toAuthPayload(decoded: {\n  uid: string;\n  email?: string | null;\n  role?: string;\n  email_verified?: boolean;\n  [k: string]: unknown;\n}): AuthPayload {\n  return {\n    uid: decoded.uid,\n    email: decoded.email ?? null,\n    role: (decoded.role as string | undefined) ?? \"user\",\n    emailVerified: decoded.email_verified ?? false,\n    claims: Object.fromEntries(\n      Object.entries(decoded).filter(\n        ([k]) =>\n          ![\n            \"uid\",\n            \"email\",\n            \"email_verified\",\n            \"iat\",\n            \"exp\",\n            \"aud\",\n            \"iss\",\n            \"sub\",\n            \"auth_time\",\n            \"firebase\",\n          ].includes(k),\n      ),\n    ),\n  };\n}\n\nfunction toAuthUser(record: {\n  uid: string;\n  email?: string;\n  displayName?: string;\n  photoURL?: string;\n  emailVerified: boolean;\n  disabled: boolean;\n  metadata: { creationTime?: string };\n  customClaims?: Record<string, unknown>;\n}): AuthUser {\n  return {\n    uid: record.uid,\n    email: record.email ?? null,\n    displayName: record.displayName ?? null,\n    photoURL: record.photoURL ?? null,\n    role: (record.customClaims?.[\"role\"] as string | undefined) ?? \"user\",\n    emailVerified: record.emailVerified,\n    disabled: record.disabled,\n    createdAt: record.metadata.creationTime ?? new Date(0).toISOString(),\n  };\n}\n\nexport const firebaseAuthProvider: IAuthProvider = {\n  async verifyToken(token: string): Promise<AuthPayload> {\n    try {\n      const decoded = await getAdminAuth().verifyIdToken(token);\n      return toAuthPayload(decoded);\n    } catch (err) {\n      if (!isExpectedAuthError(err)) {\n        console.error(\n          \"[@mohasinac/auth-firebase] Token verification failed:\",\n          err,\n        );\n      }\n      throw err;\n    }\n  },\n\n  async createCustomToken(\n    uid: string,\n    claims?: Record<string, unknown>,\n  ): Promise<string> {\n    return getAdminAuth().createCustomToken(uid, claims);\n  },\n\n  async getUser(uid: string): Promise<AuthUser | null> {\n    try {\n      const record = await getAdminAuth().getUser(uid);\n      return toAuthUser(record);\n    } catch (err) {\n      if ((err as { code?: string }).code === \"auth/user-not-found\")\n        return null;\n      throw err;\n    }\n  },\n\n  async createUser(data: CreateUserInput): Promise<AuthUser> {\n    const record = await getAdminAuth().createUser({\n      email: data.email,\n      password: data.password,\n      displayName: data.displayName,\n      photoURL: data.photoURL,\n      emailVerified: data.emailVerified ?? false,\n    });\n    if (data.role) {\n      await getAdminAuth().setCustomUserClaims(record.uid, { role: data.role });\n      // Re-fetch to get updated claims\n      const updated = await getAdminAuth().getUser(record.uid);\n      return toAuthUser(updated);\n    }\n    return toAuthUser(record);\n  },\n\n  async updateUser(\n    uid: string,\n    data: Partial<CreateUserInput>,\n  ): Promise<AuthUser> {\n    const record = await getAdminAuth().updateUser(uid, {\n      email: data.email,\n      password: data.password,\n      displayName: data.displayName,\n      photoURL: data.photoURL,\n      emailVerified: data.emailVerified,\n    });\n    if (data.role !== undefined) {\n      await getAdminAuth().setCustomUserClaims(uid, { role: data.role });\n    }\n    const updated = await getAdminAuth().getUser(record.uid);\n    return toAuthUser(updated);\n  },\n\n  async deleteUser(uid: string): Promise<void> {\n    await getAdminAuth().deleteUser(uid);\n  },\n\n  async revokeTokens(uid: string): Promise<void> {\n    await getAdminAuth().revokeRefreshTokens(uid);\n  },\n};\n","/**\n * firebaseSessionProvider — ISessionProvider\n *\n * Implements `@mohasinac/contracts` `ISessionProvider` using Firebase Admin SDK\n * session cookies (HTTP-only, 5-day TTL by default).\n *\n * Server-side only.\n */\n\nimport type { ISessionProvider, AuthPayload } from \"@mohasinac/contracts\";\nimport { getAdminAuth } from \"@mohasinac/db-firebase\";\n\n/** Default session duration: 5 days (in milliseconds). */\nconst DEFAULT_EXPIRES_IN_MS = 60 * 60 * 24 * 5 * 1000;\n\nconst EXPECTED_SESSION_CODES = new Set([\n  \"auth/session-cookie-expired\",\n  \"auth/session-cookie-revoked\",\n  \"auth/user-disabled\",\n  \"auth/user-not-found\",\n  \"auth/argument-error\",\n]);\n\nexport const firebaseSessionProvider: ISessionProvider = {\n  /**\n   * `payload` must be an `AuthPayload` from a freshly verified ID token.\n   * The underlying Firebase API expects an ID token string, not just a UID.\n   * If you have the raw ID token, use `createSessionCookieFromToken()` instead.\n   *\n   * Here we create a custom token → exchange for an effective session.\n   * In practice, callers should use `createSessionCookieFromToken()`.\n   */\n  async createSession(payload: AuthPayload): Promise<string> {\n    void payload;\n    // Custom tokens cannot be used to mint a session cookie directly —\n    // createSession via ISessionProvider is called at the point where\n    // the caller already has a verified payload.  We delegate to a helper\n    // that is invoked in the auth API route where the raw ID token is available.\n    throw new Error(\n      \"Use createSessionCookieFromToken(idToken) instead of createSession(payload). \" +\n        \"Firebase session cookies must be created from a raw ID token string.\",\n    );\n  },\n\n  async verifySession(cookie: string): Promise<AuthPayload> {\n    try {\n      const decoded = await getAdminAuth().verifySessionCookie(cookie, true);\n      return {\n        uid: decoded.uid,\n        email: decoded.email ?? null,\n        role: (decoded.role as string | undefined) ?? \"user\",\n        emailVerified: decoded.email_verified ?? false,\n        claims: Object.fromEntries(\n          Object.entries(decoded).filter(\n            ([k]) =>\n              ![\n                \"uid\",\n                \"email\",\n                \"email_verified\",\n                \"iat\",\n                \"exp\",\n                \"aud\",\n                \"iss\",\n                \"sub\",\n                \"auth_time\",\n                \"firebase\",\n              ].includes(k),\n          ),\n        ),\n      };\n    } catch (err) {\n      if (!EXPECTED_SESSION_CODES.has((err as { code?: string }).code ?? \"\")) {\n        console.error(\n          \"[@mohasinac/auth-firebase] Session cookie verification failed:\",\n          err,\n        );\n      }\n      throw err;\n    }\n  },\n\n  async destroySession(cookie: string): Promise<void> {\n    try {\n      const decoded = await getAdminAuth().verifySessionCookie(cookie, false);\n      await getAdminAuth().revokeRefreshTokens(decoded.uid);\n    } catch {\n      // Best-effort: if cookie is already invalid, treat as already destroyed\n    }\n  },\n};\n\n/**\n * Mint a Firebase session cookie from a raw Firebase ID token string.\n *\n * Use this in your `POST /api/auth/session` route handler.\n *\n * @param idToken   The ID token from `firebase.auth().currentUser.getIdToken()`.\n * @param expiresIn Cookie duration in milliseconds (default: 5 days).\n */\nexport async function createSessionCookieFromToken(\n  idToken: string,\n  expiresIn: number = DEFAULT_EXPIRES_IN_MS,\n): Promise<string> {\n  return getAdminAuth().createSessionCookie(idToken, { expiresIn });\n}\n","/**\n * Server-side Firebase Auth helper functions.\n *\n * Drop-in replacements for the functions in `src/lib/firebase/auth-server.ts`.\n * All functions use the shared `getAdminAuth()` singleton from `@mohasinac/db-firebase`.\n */\n\nimport type { AuthPayload } from \"@mohasinac/contracts\";\nimport { getAdminAuth } from \"@mohasinac/db-firebase\";\nimport { createSessionCookieFromToken } from \"./session.js\";\n\nexport { createSessionCookieFromToken };\n\nconst EXPECTED_AUTH_CODES = new Set([\n  \"auth/argument-error\",\n  \"auth/id-token-expired\",\n  \"auth/id-token-revoked\",\n  \"auth/session-cookie-expired\",\n  \"auth/session-cookie-revoked\",\n  \"auth/user-disabled\",\n  \"auth/user-not-found\",\n]);\n\n// ─── Token helpers ────────────────────────────────────────────────────────────\n\n/** Verify a Firebase ID token. Returns null for expected auth failures. */\nexport async function verifyIdToken(\n  token: string,\n): Promise<AuthPayload | null> {\n  try {\n    const decoded = await getAdminAuth().verifyIdToken(token);\n    return {\n      uid: decoded.uid,\n      email: decoded.email ?? null,\n      role: (decoded.role as string | undefined) ?? \"user\",\n      emailVerified: decoded.email_verified ?? false,\n    };\n  } catch (err) {\n    if (!EXPECTED_AUTH_CODES.has((err as { code?: string }).code ?? \"\")) {\n      console.error(\n        \"[@mohasinac/auth-firebase] Token verification failed:\",\n        err,\n      );\n    }\n    return null;\n  }\n}\n\n/** Verify a Firebase session cookie. Returns null for expected auth failures. */\nexport async function verifySessionCookie(\n  cookie: string,\n): Promise<AuthPayload | null> {\n  try {\n    const decoded = await getAdminAuth().verifySessionCookie(cookie, true);\n    return {\n      uid: decoded.uid,\n      email: decoded.email ?? null,\n      role: (decoded.role as string | undefined) ?? \"user\",\n      emailVerified: decoded.email_verified ?? false,\n    };\n  } catch (err) {\n    if (!EXPECTED_AUTH_CODES.has((err as { code?: string }).code ?? \"\")) {\n      console.error(\n        \"[@mohasinac/auth-firebase] Session cookie verification failed:\",\n        err,\n      );\n    }\n    return null;\n  }\n}\n\n/**\n * Create a middleware auth chain function.\n *\n * Returns an async function that reads the `__session` (or `idToken`) cookie\n * from a `RequestCookies`-like object and returns the decoded `AuthPayload`.\n *\n * @example\n * ```ts\n * import { createMiddlewareAuthChain } from \"@mohasinac/auth-firebase\";\n *\n * const getUser = createMiddlewareAuthChain();\n * const user = await getUser(request.cookies);\n * ```\n */\nexport function createMiddlewareAuthChain() {\n  return async function getUser(cookies: {\n    get(name: string): { value: string } | undefined;\n  }): Promise<AuthPayload | null> {\n    const session = cookies.get(\"__session\")?.value;\n    if (session) {\n      const user = await verifySessionCookie(session);\n      if (user) return user;\n    }\n\n    const idToken = cookies.get(\"idToken\")?.value;\n    if (idToken) {\n      return verifyIdToken(idToken);\n    }\n\n    return null;\n  };\n}\n\n/**\n * Require a valid session — throws if not authenticated.\n *\n * @param cookies  `RequestCookies` from `request.cookies` (middleware) or\n *                 `await cookies()` from `next/headers` (RSC / API route).\n */\nexport async function requireAuth(cookies: {\n  get(name: string): { value: string } | undefined;\n}): Promise<AuthPayload> {\n  const chain = createMiddlewareAuthChain();\n  const user = await chain(cookies);\n  if (!user) {\n    throw Object.assign(new Error(\"Unauthorized\"), { statusCode: 401 });\n  }\n  return user;\n}\n\n/**\n * Require a specific role — throws 401/403 if not authenticated or wrong role.\n *\n * @param cookies  Cookie store (same as `requireAuth`).\n * @param role     A single role string or an array of allowed roles.\n * @param resolveRole  Optional async function to resolve the role from the DB.\n */\nexport async function requireRole(\n  cookies: { get(name: string): { value: string } | undefined },\n  role: string | string[],\n  resolveRole?: (uid: string) => Promise<string>,\n): Promise<AuthPayload> {\n  const user = await requireAuth(cookies);\n  const allowed = Array.isArray(role) ? role : [role];\n\n  let userRole = user.role;\n  if (resolveRole) {\n    userRole = await resolveRole(user.uid);\n  }\n\n  if (!allowed.includes(userRole)) {\n    throw Object.assign(\n      new Error(`Forbidden — requires role: ${allowed.join(\" | \")}`),\n      { statusCode: 403 },\n    );\n  }\n\n  return { ...user, role: userRole };\n}\n"]}