@molecule/app-auth 1.8.2 → 2.0.0

package/dist/index.d.ts

@@ -137,15 +137,18 @@
  * const config: AuthClientConfig<MyUser> = {
  *   mapAuthResponse: (data) => {
  *     const { user: wire } = data as { user: { token: string } & Omit<MyUser, 'id'> }
+ *     // The bearer stays OUT of the profile: the client caches `user` in Web
+ *     // Storage, where a token copy is readable by any script on the origin.
+ *     const { token, ...profile } = wire
  *     return {
- *       accessToken: wire.token,
+ *       accessToken: token,
  *       user: {
  *         // Every wire field the pages read (`username`, `image`, …) survives…
- *         ...wire,
+ *         ...profile,
  *         // …plus the base fields the client derives its identity from.
- *         id: wire.username,
- *         name: wire.name ?? wire.username,
- *         avatar: wire.image,
+ *         id: profile.username,
+ *         name: profile.name ?? profile.username,
+ *         avatar: profile.image,
  *       },
  *     }
  *   },
@@ -155,6 +158,44 @@
  * // React: `useAuth<MyUser>()` reads the same profile.
  * ```
  *
+ * A profile does not have to extend `UserProfile` and does not need an `id`: the client
+ * stores and returns the object it is given and reads no field of it. Name the API's own
+ * shape, pass it to the factory and the config, and have the mapper return it complete —
+ * every configuration adapter is typed by the same `T` (`mapAuthResponse`, the
+ * `profileEndpoint`/`profileUpdateMethod`/`profileRequestBody` write transport,
+ * `shouldRestoreUser`, and `setSession`):
+ *
+ * ```typescript
+ * import type { AuthClientConfig } from '@molecule/app-auth'
+ * import { createJWTAuthClient } from '@molecule/app-auth'
+ *
+ * interface SessionUser {
+ *   username: string
+ *   email: string
+ *   bio: string
+ *   image: string
+ * }
+ *
+ * const config: AuthClientConfig<SessionUser> = {
+ *   mapAuthResponse: (data) => {
+ *     const { user: wire } = data as { user: { token: string } & SessionUser }
+ *     // The bearer stays OUT of the profile: the client caches `user` in Web
+ *     // Storage, where a token copy is readable by any script on the origin.
+ *     const { token, ...profile } = wire
+ *     return { accessToken: token, user: profile }
+ *   },
+ *   profileEndpoint: (user) => '/people/' + encodeURIComponent(user.username),
+ * }
+ *
+ * const client = createJWTAuthClient<SessionUser>(config)
+ * // `client.getUser()` has `bio`/`image`; there is no `id` to fabricate.
+ * ```
+ *
+ * The profile is named at the factory, never inferred from the mapper: an untyped
+ * `createJWTAuthClient({ mapAuthResponse })` stays `UserProfile`, whose required
+ * `id: string` is the default configuration's contract. An array, a function or a
+ * `Date` is not a profile the client can persist — see `AuthProfileShape`.
+ *
  * A username-derived `id` can change during a profile save. It is not an immutable
  * session identifier: `getSessionRevision()` tracks session ownership independently
  * of profile fields, remains unchanged for profile updates and same-session
@@ -227,7 +268,8 @@
  * @remarks
  * - **An API with its own auth envelope keeps this client.** `requestBody` wraps the
  *   login/register payload (`(kind, p) => ({ user: p })`), `mapAuthResponse` reads the
- *   token and user out of the answer (`(d) => ({ accessToken: d.user.token, user: d.user })`),
+ *   token and user out of the answer — keeping the wire bearer OUT of the profile,
+ *   because the client caches `user` in Web Storage (see the mapper example below) —
  *   and `authScheme: 'Token'` sends `Authorization: Token <jwt>`. `mapAuthResponse` is the
  *   ONE user-shape adapter: the client applies it to every answer that carries a user (login,
  *   register, `validateSession()`, the cookie restore, a token refresh, `updateProfile()`), so
@@ -248,6 +290,16 @@
  * - Client-side auth state is UX only — the server enforces authorization on
  *   every request; hiding a screen is not protection.
  *
+ * The mapper for such an envelope, with the wire token kept out of the cached
+ * profile (`d` is the parsed answer):
+ *
+ * ```typescript
+ * (d) => {
+ *   const { token, ...user } = d.user
+ *   return { accessToken: token, user }
+ * }
+ * ```
+ *
  * @example
  * ```typescript
  * import { createJWTAuthClient, setClient } from '@molecule/app-auth'

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4UG;AAEH,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgYG;AAEH,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA"}

package/dist/index.js

@@ -137,15 +137,18 @@
  * const config: AuthClientConfig<MyUser> = {
  *   mapAuthResponse: (data) => {
  *     const { user: wire } = data as { user: { token: string } & Omit<MyUser, 'id'> }
+ *     // The bearer stays OUT of the profile: the client caches `user` in Web
+ *     // Storage, where a token copy is readable by any script on the origin.
+ *     const { token, ...profile } = wire
  *     return {
- *       accessToken: wire.token,
+ *       accessToken: token,
  *       user: {
  *         // Every wire field the pages read (`username`, `image`, …) survives…
- *         ...wire,
+ *         ...profile,
  *         // …plus the base fields the client derives its identity from.
- *         id: wire.username,
- *         name: wire.name ?? wire.username,
- *         avatar: wire.image,
+ *         id: profile.username,
+ *         name: profile.name ?? profile.username,
+ *         avatar: profile.image,
  *       },
  *     }
  *   },
@@ -155,6 +158,44 @@
  * // React: `useAuth<MyUser>()` reads the same profile.
  * ```
  *
+ * A profile does not have to extend `UserProfile` and does not need an `id`: the client
+ * stores and returns the object it is given and reads no field of it. Name the API's own
+ * shape, pass it to the factory and the config, and have the mapper return it complete —
+ * every configuration adapter is typed by the same `T` (`mapAuthResponse`, the
+ * `profileEndpoint`/`profileUpdateMethod`/`profileRequestBody` write transport,
+ * `shouldRestoreUser`, and `setSession`):
+ *
+ * ```typescript
+ * import type { AuthClientConfig } from '@molecule/app-auth'
+ * import { createJWTAuthClient } from '@molecule/app-auth'
+ *
+ * interface SessionUser {
+ *   username: string
+ *   email: string
+ *   bio: string
+ *   image: string
+ * }
+ *
+ * const config: AuthClientConfig<SessionUser> = {
+ *   mapAuthResponse: (data) => {
+ *     const { user: wire } = data as { user: { token: string } & SessionUser }
+ *     // The bearer stays OUT of the profile: the client caches `user` in Web
+ *     // Storage, where a token copy is readable by any script on the origin.
+ *     const { token, ...profile } = wire
+ *     return { accessToken: token, user: profile }
+ *   },
+ *   profileEndpoint: (user) => '/people/' + encodeURIComponent(user.username),
+ * }
+ *
+ * const client = createJWTAuthClient<SessionUser>(config)
+ * // `client.getUser()` has `bio`/`image`; there is no `id` to fabricate.
+ * ```
+ *
+ * The profile is named at the factory, never inferred from the mapper: an untyped
+ * `createJWTAuthClient({ mapAuthResponse })` stays `UserProfile`, whose required
+ * `id: string` is the default configuration's contract. An array, a function or a
+ * `Date` is not a profile the client can persist — see `AuthProfileShape`.
+ *
  * A username-derived `id` can change during a profile save. It is not an immutable
  * session identifier: `getSessionRevision()` tracks session ownership independently
  * of profile fields, remains unchanged for profile updates and same-session
@@ -227,7 +268,8 @@
  * @remarks
  * - **An API with its own auth envelope keeps this client.** `requestBody` wraps the
  *   login/register payload (`(kind, p) => ({ user: p })`), `mapAuthResponse` reads the
- *   token and user out of the answer (`(d) => ({ accessToken: d.user.token, user: d.user })`),
+ *   token and user out of the answer — keeping the wire bearer OUT of the profile,
+ *   because the client caches `user` in Web Storage (see the mapper example below) —
  *   and `authScheme: 'Token'` sends `Authorization: Token <jwt>`. `mapAuthResponse` is the
  *   ONE user-shape adapter: the client applies it to every answer that carries a user (login,
  *   register, `validateSession()`, the cookie restore, a token refresh, `updateProfile()`), so
@@ -248,6 +290,16 @@
  * - Client-side auth state is UX only — the server enforces authorization on
  *   every request; hiding a screen is not protection.
  *
+ * The mapper for such an envelope, with the wire token kept out of the cached
+ * profile (`d` is the parsed answer):
+ *
+ * ```typescript
+ * (d) => {
+ *   const { token, ...user } = d.user
+ *   return { accessToken: token, user }
+ * }
+ * ```
+ *
  * @example
  * ```typescript
  * import { createJWTAuthClient, setClient } from '@molecule/app-auth'

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4UG;AAEH,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgYG;AAEH,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA"}

package/dist/provider.d.ts

@@ -7,7 +7,7 @@
  *
  * @module
  */
-import type { AuthClient, RegisterExtraShape, UserProfile } from './types.js';
+import type { AuthClient, AuthProfileConstraint, RegisterExtraShape, UserProfile } from './types.js';
 /**
  * Registers an auth client as the active singleton. Called by bond
  * packages during application startup.
@@ -21,13 +21,16 @@ export declare const setClient: <T = UserProfile, TRegister extends RegisterExtr
 /**
  * Retrieves the bonded auth client, throwing if none is configured.
  *
- * @template T - The user profile the bonded client returns.
+ * @template T - The user profile the bonded client returns: a JSON object type
+ *   of named fields (see {@link AuthProfileConstraint}), including an app
+ *   profile with no `id`. Name it at the call (`getClient<SessionUser>()`); it
+ *   is never inferred from a config.
  * @template TRegister - The app's own registration fields, at the top level
  *   of `register()` (see `RegisterData`).
  * @returns The bonded auth client.
  * @throws {Error} If no auth client has been bonded.
  */
-export declare const getClient: <T extends UserProfile = UserProfile, TRegister extends RegisterExtraShape<TRegister> = Record<never, never>>() => AuthClient<T, TRegister>;
+export declare const getClient: <T extends AuthProfileConstraint<T> = UserProfile, TRegister extends RegisterExtraShape<TRegister> = Record<never, never>>() => AuthClient<T, TRegister>;
 /**
  * Checks whether an auth client is currently bonded.
  *

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAI7E;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,GACpB,CAAC,GAAG,WAAW,EACf,SAAS,SAAS,kBAAkB,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAEtE,QAAQ,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,KAC/B,IAEF,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,GACpB,CAAC,SAAS,WAAW,GAAG,WAAW,EACnC,SAAS,SAAS,kBAAkB,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,OACnE,UAAU,CAAC,CAAC,EAAE,SAAS,CAE3B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,SAAS,QAAO,OAE5B,CAAA"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAIpG;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,GACpB,CAAC,GAAG,WAAW,EACf,SAAS,SAAS,kBAAkB,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAEtE,QAAQ,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,KAC/B,IAEF,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,SAAS,GACpB,CAAC,SAAS,qBAAqB,CAAC,CAAC,CAAC,GAAG,WAAW,EAChD,SAAS,SAAS,kBAAkB,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,OACnE,UAAU,CAAC,CAAC,EAAE,SAAS,CAE3B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,SAAS,QAAO,OAE5B,CAAA"}

package/dist/provider.js

@@ -24,7 +24,10 @@ export const setClient = (client) => {
 /**
  * Retrieves the bonded auth client, throwing if none is configured.
  *
- * @template T - The user profile the bonded client returns.
+ * @template T - The user profile the bonded client returns: a JSON object type
+ *   of named fields (see {@link AuthProfileConstraint}), including an app
+ *   profile with no `id`. Name it at the call (`getClient<SessionUser>()`); it
+ *   is never inferred from a config.
  * @template TRegister - The app's own registration fields, at the top level
  *   of `register()` (see `RegisterData`).
  * @returns The bonded auth client.

package/dist/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAI3E,MAAM,SAAS,GAAG,aAAa,CAAA;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAIvB,MAAgC,EAC1B,EAAE;IACR,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;AACzB,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAGK,EAAE;IAC9B,OAAO,WAAW,CAA2B,SAAS,CAAC,CAAA;AACzD,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAY,EAAE;IACrC,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAA;AAC5B,CAAC,CAAA"}
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAI3E,MAAM,SAAS,GAAG,aAAa,CAAA;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAIvB,MAAgC,EAC1B,EAAE;IACR,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;AACzB,CAAC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAGK,EAAE;IAC9B,OAAO,WAAW,CAA2B,SAAS,CAAC,CAAA;AACzD,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAY,EAAE;IACrC,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAA;AAC5B,CAAC,CAAA"}

package/dist/types.d.ts

@@ -33,6 +33,117 @@ export interface UserProfile {
      */
     metadata?: Record<string, unknown>;
 }
+/**
+ * The sentence every invalid profile type is rejected with.
+ */
+type AuthProfileRejection = 'An auth profile must be a JSON object type of named fields, not an array, a function or a Date';
+/**
+ * The profile shapes the auth client accepts: a JSON object type of named
+ * fields, and nothing else.
+ *
+ * The client does not read a field of the profile, but it does persist it:
+ * `tokenStorage.setUser` writes it with `JSON.stringify` and `getUser` restores
+ * it with `JSON.parse`, and `updateProfile(data: Partial<T>)` patches it
+ * field-wise. An array has no named fields to read or patch, `JSON.stringify`
+ * drops a function entirely, and a `Date` comes back from `JSON.parse` as a
+ * string while still typed as a `Date` — so those three types are rejected on
+ * every entrypoint that takes a profile type (`createJWTAuthClient`,
+ * the default-auth factories, `AuthClientConfig`).
+ *
+ * The check is on the TOP-LEVEL shape only: a class instance, or a `Date` in a
+ * nested field, is the app's own persistence contract, not this validator's.
+ * A named `interface`, a type literal, an intersection and the empty object
+ * type all satisfy it — `{}` compiles because it is a JSON object that
+ * round-trips unchanged, not an invalid form.
+ *
+ * A union is checked member by member: `ExistingUser | ExistingUser[]` contains
+ * an array, so it is not an object-only profile either, and the shared
+ * rejection test (`AuthProfileIsRejected`, used by
+ * {@link AuthProfileConstraint} and {@link AuthProfileGuard}) rejects it as a
+ * whole.
+ *
+ * @template T - The candidate profile type.
+ */
+export type AuthProfileShape<T> = T extends readonly unknown[] | ((...args: never[]) => unknown) | Date ? AuthProfileRejection : object;
+/**
+ * Whether `T` is, or is a union containing, a shape the client cannot persist —
+ * an array, a function or a `Date` ({@link AuthProfileShape}).
+ *
+ * This is the ONE decision {@link AuthProfileConstraint} and
+ * {@link AuthProfileGuard} share, so the entrypoints and `AuthClientConfig`
+ * cannot drift apart.
+ *
+ * Three TypeScript behaviors shape it:
+ *
+ * - **No distribution.** `AuthProfileShape<T>` already distributes, so a union
+ *   `Good | Bad` yields `object | AuthProfileRejection`. Wrapping BOTH sides of
+ *   the test in tuples compares those unions as a whole, so one invalid member
+ *   rejects the whole union. The plain `AuthProfileShape<T> extends
+ *   AuthProfileRejection` form instead asks whether the ENTIRE union is the
+ *   rejection, which a valid sibling makes false — that is the union hole this
+ *   closes.
+ * - **`any` is checked first.** `any` is the caller's explicit opt-out of
+ *   profile typing, not an invalid member, but `AuthProfileShape<any>` resolves
+ *   to `AuthProfileRejection | object`, which the tuple test reads as "contains
+ *   a rejection". `0 extends 1 & T` detects `any` (and only `any` — `never`,
+ *   `unknown` and `object` are all false) and takes the accepted branch.
+ * - **Deferred at the outer edge.** `[T] extends [unknown]` keeps the whole
+ *   check deferred while `T` is an unresolved type parameter (it is always true
+ *   for a concrete type, and does not distribute over a union). Without it,
+ *   TypeScript resolves the inner `0 extends 1 & T` while checking a forwarder's
+ *   constraint `T extends AuthProfileConstraint<T>` and reports TS2313 ("Type
+ *   parameter 'T' has a circular constraint"); with it, the constraint checks at
+ *   the call site.
+ *
+ * `never`, `unknown` and the primitives are not this helper's job: each
+ * entrypoint's `extends object` requirement rejects them, unchanged.
+ *
+ * @template T - The candidate profile type.
+ */
+type AuthProfileIsRejected<T> = [T] extends [unknown] ? 0 extends 1 & T ? false : [AuthProfileRejection] extends [AuthProfileShape<T>] ? true : false : never;
+/**
+ * Requires a profile type to satisfy {@link AuthProfileShape}: an invalid
+ * profile makes {@link AuthClientConfig} impossible to populate, so the
+ * annotation itself is the error. It shares the entrypoints' rejection test,
+ * so a union with an invalid member is rejected here too.
+ *
+ * @template T - The candidate profile type.
+ */
+export type AuthProfileGuard<T> = AuthProfileIsRejected<T> extends true ? {
+    readonly [K in AuthProfileRejection]: never;
+} : Record<never, never>;
+/**
+ * The constraint every entrypoint puts on a profile type: a JSON object type of
+ * named fields ({@link AuthProfileShape}), and `object` for `any`.
+ *
+ * `any` is the caller's explicit opt-out of profile typing, not an invalid JSON
+ * shape: `createJWTAuthClient<any>()`, `getClient<any>()` and
+ * `AuthClientConfig<any>` name it deliberately. It is detected explicitly
+ * (`0 extends 1 & T`) and accepted. Every other type is measured against
+ * {@link AuthProfileShape}, member by member when it is a union: a union that
+ * holds an array, a function or a `Date` is rejected as a whole, so
+ * `createJWTAuthClient<ExistingUser | ExistingUser[]>()` is the same type error
+ * as `createJWTAuthClient<ExistingUser[]>()`.
+ *
+ * Forwarding a profile through your own generic copies this constraint, so the
+ * profile keeps being checked:
+ *
+ * ```typescript
+ * import type { AuthClientConfig, AuthProfileConstraint } from '@molecule/app-auth'
+ * import { createJWTAuthClient } from '@molecule/app-auth'
+ *
+ * export function makeAuth<T extends AuthProfileConstraint<T>>(config: AuthClientConfig<T>) {
+ *   return createJWTAuthClient<T>(config)
+ * }
+ * ```
+ *
+ * `T extends object` is not enough: the factory rejects arrays, functions and
+ * `Date` at its own constraint, so a forwarder written that way does not
+ * compile. Copy this type instead.
+ *
+ * @template T - The candidate profile type.
+ */
+export type AuthProfileConstraint<T> = AuthProfileIsRejected<T> extends true ? never : object;
 /**
  * Email/password login credentials with optional "remember me" flag.
  */
@@ -223,15 +334,21 @@ export interface AuthState<T = UserProfile> {
 }
 /**
  * Auth event types.
+ *
+ * A sign-in event carries the client's own profile type, so a listener on a
+ * client typed with the app's profile reads that profile — including one that
+ * does not extend {@link UserProfile}. The default is {@link UserProfile}.
+ *
+ * @template T - The user profile the API returns.
  */
-export type AuthEvent = {
+export type AuthEvent<T = UserProfile> = {
     type: 'login';
-    user: UserProfile;
+    user: T;
 } | {
     type: 'logout';
 } | {
     type: 'register';
-    user: UserProfile;
+    user: T;
 } | {
     type: 'refresh';
 } | {
@@ -240,8 +357,30 @@ export type AuthEvent = {
 };
 /**
  * Callback invoked when an authentication event occurs (login, logout, etc.).
+ *
+ * A listener is typed by the client's profile: `AuthEventListener<MyUser>`
+ * receives `AuthEvent<MyUser>`, so a sign-in event's `user` is the app's own
+ * shape — including a profile that does not extend {@link UserProfile}. The
+ * default is {@link UserProfile}.
+ *
+ * An inline arrow is contextually typed, so its `event` parameter needs no
+ * annotation. Because listener parameters are contravariant, a client whose
+ * profile extends {@link UserProfile} also accepts a listener written against
+ * the default `AuthEventListener` (those events carry every `UserProfile`
+ * field). A client whose profile does NOT extend `UserProfile` — an API user
+ * with no `id` — accepts only `AuthEventListener<T>`: a default listener would
+ * read an `id` the runtime user does not have.
+ *
+ * **Migration to 2.0.** External providers that implement {@link AuthClient}
+ * declare their listener parameter as `AuthEventListener<T>`
+ * (`addEventListener(listener: AuthEventListener<T>): () => void`). The
+ * previous `addEventListener(listener: AuthEventListener)` declaration, which
+ * claimed every client's events carry a `UserProfile`, is no longer assignable
+ * once the client's profile is a custom one.
+ *
+ * @template T - The user profile the API returns.
  */
-export type AuthEventListener = (event: AuthEvent) => void;
+export type AuthEventListener<T = UserProfile> = (event: AuthEvent<T>) => void;
 /**
  * The error an auth client rejects with when the API answers a non-ok HTTP
  * response. It is the {@link I18nError} the client throws — same `i18nKey`,
@@ -498,8 +637,22 @@ export interface AuthClient<T = UserProfile, TRegister extends RegisterExtraShap
     getToken?(): string | null;
     /**
      * Adds an auth event listener.
-     */
-    addEventListener(listener: AuthEventListener): () => void;
+     *
+     * The listener is typed by this client's profile: one signature,
+     * `AuthEventListener<T>`, so an inline arrow is contextually typed and `event`
+     * is never implicitly `any`. A client whose profile extends
+     * {@link UserProfile} also accepts a default {@link AuthEventListener}: when
+     * `T` extends `UserProfile`, `AuthEvent<T>` is assignable to
+     * `AuthEvent<UserProfile>`, so a listener that takes the wider default event
+     * accepts every event this client emits and keeps compiling. (`UserProfile`
+     * is the wider type here — it has fewer required fields — and the assignable
+     * direction runs from the client's `AuthEvent<T>` to the listener's
+     * `AuthEvent<UserProfile>`.) A profile that does not extend `UserProfile`
+     * (no `id`) rejects the default listener: an `AuthEvent<UserProfile>` would
+     * promise an `id` the runtime user does not have, and the narrower-typed
+     * event is not assignable to it.
+     */
+    addEventListener(listener: AuthEventListener<T>): () => void;
     /**
      * Destroys the auth client.
      */
@@ -520,18 +673,63 @@ export interface StorageAdapter {
  *
  * Type it with the app's user — `AuthClientConfig<MyUser>` — the same type
  * `createJWTAuthClient<MyUser>` returns and `useAuth<MyUser>()` reads. That
- * makes {@link mapAuthResponse} return `AuthResult<MyUser>`, so a mapper that
- * omits a required custom field is a type error instead of a signed-in page
- * reading `undefined` (xr-molecule-flash-m255). Keep every wire field the pages
- * read (spread the wire user and add `id`/`name`/`avatar`); mapping a field to a
- * different name does not preserve the original, and a `as unknown as MyUser`
- * assertion hides the loss. See the module docs for the wire-preserving
- * adapter.
- *
- * @template T - The user profile the API returns. The default,
- *   {@link UserProfile}, keeps the untyped configuration working.
+ * makes {@link AuthClientConfigOptions.mapAuthResponse} return
+ * `AuthResult<MyUser>`, so a mapper that omits a required custom field is a type
+ * error instead of a signed-in page reading `undefined`
+ * (xr-molecule-flash-m255). Keep every wire field the pages read (spread the
+ * wire user and add `id`/`name`/`avatar`); mapping a field to a different name
+ * does not preserve the original, and a `as unknown as MyUser` assertion hides
+ * the loss. See the module docs for the wire-preserving adapter.
+ *
+ * `T` is the app's OWN profile shape and need not extend {@link UserProfile}:
+ * the client stores and returns the object it is given and reads no field of
+ * it, so an API whose user has no `id` — `{ username, email, bio, image }` —
+ * is typed by its own `interface` directly, with no fabricated `id`. The
+ * default, {@link UserProfile}, still requires `id: string`. A primitive,
+ * `null`, an array, a function or a `Date` — or a union containing one — is
+ * rejected; see {@link AuthProfileShape} for the persistence contract behind
+ * that list.
+ *
+ * The type argument is NEVER inferred from the config: not from
+ * `mapAuthResponse`, `profileEndpoint`, `profileRequestBody` or
+ * `shouldRestoreUser`, and not from a config variable the caller annotated as
+ * `AuthClientConfig<MyUser>`. An untyped call stays typed `UserProfile`, so the
+ * default configuration keeps requiring `id: string`. Name the profile at the
+ * call (`createJWTAuthClient<MyUser>(config)`) — which also checks this config
+ * against `MyUser`.
+ *
+ * **Callers upgrading from 1.8 — three shapes now need the profile at the call.**
+ * Each was accepted by 1.8 and is a type error here; each has a one-line fix:
+ *
+ * 1. A mapper that supplied the profile
+ *    (`createJWTAuthClient({ mapAuthResponse: (d): AuthResult<MyUser> => … })`)
+ *    is now typed `UserProfile`. Name it on the factory:
+ *    `createJWTAuthClient<MyUser>({ mapAuthResponse })`.
+ * 2. A config variable annotated `AuthClientConfig<MyUser>` with a profile that
+ *    extends `UserProfile` used to supply the type argument. Pass it:
+ *    `createJWTAuthClient<MyUser>(config)`. (A no-id profile was already
+ *    rejected by 1.8's `T extends UserProfile`.)
+ * 3. Generic forwarding written `function make<T extends UserProfile>(config: AuthClientConfig<T>)`
+ *    no longer satisfies the factory's constraint. Copy the named constraint:
+ *    `function make<T extends AuthProfileConstraint<T>>(config: AuthClientConfig<T>)`.
+ *
+ * `any` is accepted at every entrypoint (`createJWTAuthClient<any>()`,
+ * `getClient<any>()`), so a caller that deliberately opted out keeps compiling.
+ *
+ * @template T - The user profile the API returns: a JSON object type of named
+ *   fields. The default, {@link UserProfile}, keeps the untyped configuration
+ *   working.
+ */
+export type AuthClientConfig<T extends object = UserProfile> = AuthClientConfigOptions<T> & AuthProfileGuard<T>;
+/**
+ * Every option {@link AuthClientConfig} accepts, typed by the profile.
+ *
+ * Use `AuthClientConfig<T>` rather than this type: it adds the profile-shape
+ * check. This interface exists so each member's documentation is addressable.
+ *
+ * @template T - The user profile the API returns.
  */
-export interface AuthClientConfig<T extends UserProfile = UserProfile> {
+export interface AuthClientConfigOptions<T extends object = UserProfile> {
     /**
      * API base URL.
      */
@@ -556,6 +754,8 @@ export interface AuthClientConfig<T extends UserProfile = UserProfile> {
      * The write route used by `updateProfile`, independently of `currentUserEndpoint`.
      * Defaults to `/auth/profile`. A resource route with an account id can resolve
      * from the signed-in user, e.g. `(user) => '/accounts/' + encodeURIComponent(user.id)`.
+     * A profile with no `id` resolves from a field it does have, e.g.
+     * `(user) => '/people/' + encodeURIComponent(user.username)`.
      * The resolver sees the current user before the patch, never caller-submitted identity.
      */
     profileEndpoint?: string | ((user: Readonly<T>) => string);
@@ -634,7 +834,16 @@ export interface AuthClientConfig<T extends UserProfile = UserProfile> {
     /**
      * Turn an answer that carries a user into the client's
      * `{ accessToken, refreshToken?, user }` (default: the answer as given).
-     * RealWorld, for example: `(data) => ({ accessToken: data.user.token, user: data.user })`.
+     * RealWorld, for example — keep the wire bearer OUT of the profile, because
+     * the client caches `user` in Web Storage where a token copy is readable by
+     * any script on the origin:
+     *
+     * ```typescript
+     * (data) => {
+     *   const { token, ...user } = data.user
+     *   return { accessToken: token, user }
+     * }
+     * ```
      *
      * It is the ONE user-shape adapter, and the client applies it on EVERY path
      * that adopts a user from an API answer — `login()`, `register()`,
@@ -649,10 +858,19 @@ export interface AuthClientConfig<T extends UserProfile = UserProfile> {
      * It is NOT applied to `setSession()` or `setUser()`: those receive a profile
      * the caller already built in this client's shape, not a wire answer.
      *
+     * The return type does NOT infer the profile: an untyped
+     * `createJWTAuthClient({ mapAuthResponse })` stays `UserProfile`, so a mapper
+     * that returns a no-id profile fails to compile there instead of silently
+     * replacing the default with whatever the mapper happened to return. The same
+     * rule holds for every config member below (`profileEndpoint`,
+     * `profileRequestBody`, `shouldRestoreUser`): none of them supplies the
+     * profile. Name the profile at the call
+     * (`createJWTAuthClient<MyUser>({ mapAuthResponse })`) to use a custom one.
+     *
      * @param data - The parsed response body.
      * @returns The auth result.
      */
-    mapAuthResponse?: (data: unknown) => AuthResult<T>;
+    mapAuthResponse?: (data: unknown) => AuthResult<NoInfer<T>>;
     /**
      * Where the access/refresh token and the cached user are kept — the field that
      * decides whether a page reload keeps the user signed in.
@@ -760,4 +978,5 @@ export interface TokenStorage {
     setUser<T = UserProfile>(user: T | null): void;
     clear(): void;
 }
+export {};
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAEnD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAA;IAEV;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI;KACjC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,GAAG,UAAU,GAC1C,MAAM,GACN,CAAC,SAAS,MAAM,GACd,MAAM,GAAG,SAAS,GAClB,CAAC,SAAS,UAAU,GAClB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACnC,CAAC,CAAC,CAAC,CAAC;CACb,GAAG,MAAM,CAAA;AAEV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,MAAM,YAAY,CAAC,MAAM,SAAS,kBAAkB,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;IAC3F;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC,GAAG,MAAM,CAAA;AAEV;;GAEG;AACH,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,WAAW;IACzC;;OAEG;IACH,IAAI,EAAE,CAAC,CAAA;IAEP;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,iBAAiB,GAAG,aAAa,CAAA;AAExF;;GAEG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC,GAAG,WAAW;IACxC;;;OAGG;IACH,MAAM,EAAE,UAAU,CAAA;IAElB;;OAEG;IACH,WAAW,EAAE,OAAO,CAAA;IAEpB;;OAEG;IACH,aAAa,EAAE,OAAO,CAAA;IAEtB;;OAEG;IACH,IAAI,EAAE,CAAC,GAAG,IAAI,CAAA;IAEd;;OAEG;IACH,OAAO,EAAE,OAAO,CAAA;IAEhB;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAA;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAA;IAEd;;;OAGG;IACH,IAAI,EAAE,OAAO,CAAA;CACd;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,WAAW;IAC9C,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,IAAI,EAAE,CAAC,CAAA;IACP,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU,CACzB,CAAC,GAAG,WAAW,EACf,SAAS,SAAS,kBAAkB,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtE;;;;;;;;;OASG;IACH,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAAA;IAExB;;OAEG;IACH,eAAe,IAAI,OAAO,CAAA;IAE1B;;OAEG;IACH,OAAO,IAAI,CAAC,GAAG,IAAI,CAAA;IAEnB;;;;;;;OAOG;IACH,kBAAkB,CAAC,IAAI,MAAM,CAAA;IAE7B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IAE7B;;OAEG;IACH,cAAc,IAAI,MAAM,GAAG,IAAI,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAE1C;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;IAE7C;;OAEG;IACH,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAEhC;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAE5D;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/D;;OAEG;IACH,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAEjC;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE/D;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE/D;;;;;OAKG;IACH,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAE3C;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,eAAe,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9B;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAE9D;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAEjE;;OAEG;IACH,QAAQ,CAAC,IAAI,MAAM,GAAG,IAAI,CAAA;IAE1B;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAAA;IAEzD;;OAEG;IACH,OAAO,IAAI,IAAI,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACnC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW;IACnE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAA;IAE1D,kGAAkG;IAClG,mBAAmB,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;IAE9C,8IAA8I;IAC9I,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAA;IAElD;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAE5B;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAA;IAEvF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,CAAA;IAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6CG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,cAAc,CAAA;IAEnC;;;;;;;;;;;;;OAaG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAA;IAExC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IAErB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAE/B;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAE9B;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAE/B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAEzB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,cAAc,IAAI,MAAM,GAAG,IAAI,CAAA;IAC/B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC1C,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAChC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC3C,OAAO,CAAC,CAAC,GAAG,WAAW,KAAK,CAAC,GAAG,IAAI,CAAA;IACpC,OAAO,CAAC,CAAC,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IAC9C,KAAK,IAAI,IAAI,CAAA;CACd"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAEnD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAA;IAEV;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,KAAK,oBAAoB,GACvB,gGAAgG,CAAA;AAElG;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI,CAAC,SACjC,SAAS,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC,GAAG,IAAI,GACzD,oBAAoB,GACpB,MAAM,CAAA;AAEV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,KAAK,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GACjD,CAAC,SAAS,CAAC,GAAG,CAAC,GACb,KAAK,GACL,CAAC,oBAAoB,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAClD,IAAI,GACJ,KAAK,GACT,KAAK,CAAA;AAET;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAC5B,qBAAqB,CAAC,CAAC,CAAC,SAAS,IAAI,GACjC;IAAE,QAAQ,EAAE,CAAC,IAAI,oBAAoB,GAAG,KAAK;CAAE,GAC/C,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAE1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,MAAM,qBAAqB,CAAC,CAAC,IAAI,qBAAqB,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,KAAK,GAAG,MAAM,CAAA;AAE7F;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI;KACjC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,OAAO,GAAG,UAAU,GAC1C,MAAM,GACN,CAAC,SAAS,MAAM,GACd,MAAM,GAAG,SAAS,GAClB,CAAC,SAAS,UAAU,GAClB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACnC,CAAC,CAAC,CAAC,CAAC;CACb,GAAG,MAAM,CAAA;AAEV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,MAAM,YAAY,CAAC,MAAM,SAAS,kBAAkB,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;IAC3F;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC,GAAG,MAAM,CAAA;AAEV;;GAEG;AACH,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,WAAW;IACzC;;OAEG;IACH,IAAI,EAAE,CAAC,CAAA;IAEP;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,iBAAiB,GAAG,aAAa,CAAA;AAExF;;GAEG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC,GAAG,WAAW;IACxC;;;OAGG;IACH,MAAM,EAAE,UAAU,CAAA;IAElB;;OAEG;IACH,WAAW,EAAE,OAAO,CAAA;IAEpB;;OAEG;IACH,aAAa,EAAE,OAAO,CAAA;IAEtB;;OAEG;IACH,IAAI,EAAE,CAAC,GAAG,IAAI,CAAA;IAEd;;OAEG;IACH,OAAO,EAAE,OAAO,CAAA;IAEhB;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,GAAG,WAAW,IACjC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,GAAG,WAAW,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAA;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAA;IAEd;;;OAGG;IACH,IAAI,EAAE,OAAO,CAAA;CACd;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,WAAW;IAC9C,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,IAAI,EAAE,CAAC,CAAA;IACP,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU,CACzB,CAAC,GAAG,WAAW,EACf,SAAS,SAAS,kBAAkB,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtE;;;;;;;;;OASG;IACH,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAAA;IAExB;;OAEG;IACH,eAAe,IAAI,OAAO,CAAA;IAE1B;;OAEG;IACH,OAAO,IAAI,CAAC,GAAG,IAAI,CAAA;IAEnB;;;;;;;OAOG;IACH,kBAAkB,CAAC,IAAI,MAAM,CAAA;IAE7B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IAE7B;;OAEG;IACH,cAAc,IAAI,MAAM,GAAG,IAAI,CAAA;IAE/B;;;;;;;;;;;;OAYG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAE1C;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;IAE7C;;OAEG;IACH,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAEhC;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAE5D;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/D;;OAEG;IACH,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAEjC;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE/D;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE/D;;;;;OAKG;IACH,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAE3C;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,eAAe,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9B;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAE9D;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAEjE;;OAEG;IACH,QAAQ,CAAC,IAAI,MAAM,GAAG,IAAI,CAAA;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACH,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAA;IAE5D;;OAEG;IACH,OAAO,IAAI,IAAI,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACnC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,MAAM,GAAG,WAAW,IAAI,uBAAuB,CAAC,CAAC,CAAC,GACvF,gBAAgB,CAAC,CAAC,CAAC,CAAA;AAErB;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,MAAM,GAAG,WAAW;IACrE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAA;IAE1D,kGAAkG;IAClG,mBAAmB,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;IAE9C,8IAA8I;IAC9I,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAA;IAElD;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAE5B;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAA;IAEvF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6CG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,cAAc,CAAA;IAEnC;;;;;;;;;;;;;OAaG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAA;IAExC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IAErB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAE/B;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAE9B;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAE/B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAEzB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,cAAc,IAAI,MAAM,GAAG,IAAI,CAAA;IAC/B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC1C,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAChC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC3C,OAAO,CAAC,CAAC,GAAG,WAAW,KAAK,CAAC,GAAG,IAAI,CAAA;IACpC,OAAO,CAAC,CAAC,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IAC9C,KAAK,IAAI,IAAI,CAAA;CACd"}