@nebulr-group/bridge-auth-core 0.4.0-beta.2 → 0.4.0-beta.5

package/dist/backend/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @nebulr-group/bridge-auth-core/backend
+ *
+ * Framework-agnostic, Node-only auth surface for server-side Bridge plugins.
+ * No NestJS, no browser/storage APIs. Safe to import from any Node backend.
+ */
+export { JwksService, TokenVerificationError } from './jwks-service.js';
+export type { JwksServiceConfig, JwksLogger } from './jwks-service.js';
+export type { JwtClaims, BridgeUser, ApiTokenClaims } from './types.js';
+export { transformJwtToBridgeUser } from './types.js';
+export { decodeJwtPayload, getTokenExpiry, isTokenExpired, getTenantId, getTenantUserId, } from '../token-utils.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACxE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGvE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAGtD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,WAAW,EACX,eAAe,GAChB,MAAM,mBAAmB,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,12 @@
+/**
+ * @nebulr-group/bridge-auth-core/backend
+ *
+ * Framework-agnostic, Node-only auth surface for server-side Bridge plugins.
+ * No NestJS, no browser/storage APIs. Safe to import from any Node backend.
+ */
+// JWKS-based verification (plain class, not a DI provider)
+export { JwksService, TokenVerificationError } from './jwks-service.js';
+export { transformJwtToBridgeUser } from './types.js';
+// Token utilities (reused from the shared token-utils — no duplication)
+export { decodeJwtPayload, getTokenExpiry, isTokenExpired, getTenantId, getTenantUserId, } from '../token-utils.js';
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,2DAA2D;AAC3D,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAKxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,wEAAwE;AACxE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,WAAW,EACX,eAAe,GAChB,MAAM,mBAAmB,CAAC"}

package/dist/backend/jwks-service.d.ts

@@ -0,0 +1,86 @@
+import type { JwtClaims, ApiTokenClaims } from './types.js';
+/**
+ * Optional logger. Defaults to a no-op so the service is silent unless a
+ * consumer wires one in (e.g. NestJS forwards `BridgeConfigService.log`).
+ */
+export type JwksLogger = (message: string, ...args: unknown[]) => void;
+/**
+ * Construction config for the framework-agnostic JwksService.
+ *
+ * Everything the verification logic needs is injected — there is no hardcoded
+ * URL, issuer, audience, or TTL. Framework wrappers (NestJS, etc.) construct
+ * this from their own config service.
+ */
+export interface JwksServiceConfig {
+    /** JWKS endpoint for user-token verification. */
+    jwksUrl: string;
+    /** JWKS endpoint for API-token verification (cached independently). */
+    apiTokenJwksUrl: string;
+    /** Expected `iss` for user tokens. */
+    issuer: string;
+    /** Expected `aud` for user tokens (typically the appId). */
+    audience: string;
+    /** How long a remote JWKS client is reused before it is re-created. @default 3600000 (1h) */
+    cacheTtlMs?: number;
+    /** Optional debug logger. @default no-op */
+    log?: JwksLogger;
+}
+/**
+ * Error thrown on token verification failure.
+ *
+ * `code` is a stable, framework-agnostic discriminator:
+ * `TOKEN_EXPIRED` | `TOKEN_INVALID` | `JWKS_NO_MATCH` | `CLAIM_VALIDATION_FAILED`
+ * | `APP_MISMATCH` | `UNKNOWN_ERROR`.
+ */
+export declare class TokenVerificationError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+/**
+ * Framework-agnostic, Node-only JWKS-based JWT verification.
+ *
+ * Covers BOTH the user-token path (issuer/audience validated) and the
+ * API-token path (type + appId validated). The two JWKS clients are cached
+ * independently with the same TTL behavior.
+ *
+ * This is a plain class — NOT a DI provider. Framework plugins wrap it.
+ */
+export declare class JwksService {
+    private readonly config;
+    private jwks;
+    private jwksInitTime;
+    private apiTokenJwks;
+    private apiTokenJwksInitTime;
+    private readonly cacheTtlMs;
+    private readonly log;
+    constructor(config: JwksServiceConfig);
+    /**
+     * Initialize or refresh the user-token JWKS client.
+     */
+    private ensureJwks;
+    /**
+     * Initialize or refresh the API-token JWKS client (cached independently).
+     */
+    private ensureApiTokenJwks;
+    /**
+     * Verify a user JWT and return its claims.
+     *
+     * @throws {TokenVerificationError} if the token is invalid or expired.
+     */
+    verifyToken(token: string): Promise<JwtClaims>;
+    /**
+     * Verify a Bridge API token JWT and return its claims.
+     *
+     * Uses a separate JWKS client (cached independently from the user-token
+     * client). Validates `type === 'api'` and `appId === expectedAppId`.
+     *
+     * @throws {TokenVerificationError} if the token is invalid, expired, the
+     *   wrong type, or issued for a different app.
+     */
+    verifyApiToken(token: string, expectedAppId: string): Promise<ApiTokenClaims>;
+    /**
+     * Map a jose verification error to a stable TokenVerificationError.
+     */
+    private mapVerificationError;
+}
+//# sourceMappingURL=jwks-service.d.ts.map

package/dist/backend/jwks-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks-service.d.ts","sourceRoot":"","sources":["../../src/backend/jwks-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,eAAe,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,6FAA6F;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;aAG7B,IAAI,EAAE,MAAM;gBAD5B,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM;CAK/B;AAID;;;;;;;;GAQG;AACH,qBAAa,WAAW;IAUV,OAAO,CAAC,QAAQ,CAAC,MAAM;IATnC,OAAO,CAAC,IAAI,CAAsD;IAClE,OAAO,CAAC,YAAY,CAAK;IAEzB,OAAO,CAAC,YAAY,CAAsD;IAC1E,OAAO,CAAC,oBAAoB,CAAK;IAEjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAEJ,MAAM,EAAE,iBAAiB;IAKtD;;OAEG;IACH,OAAO,CAAC,UAAU;IAYlB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAY1B;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAqBpD;;;;;;;;OAQG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IA4BnF;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAqB7B"}

package/dist/backend/jwks-service.js

@@ -0,0 +1,143 @@
+import { createRemoteJWKSet, jwtVerify, errors as joseErrors } from 'jose';
+/**
+ * Error thrown on token verification failure.
+ *
+ * `code` is a stable, framework-agnostic discriminator:
+ * `TOKEN_EXPIRED` | `TOKEN_INVALID` | `JWKS_NO_MATCH` | `CLAIM_VALIDATION_FAILED`
+ * | `APP_MISMATCH` | `UNKNOWN_ERROR`.
+ */
+export class TokenVerificationError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'TokenVerificationError';
+    }
+}
+const DEFAULT_CACHE_TTL_MS = 60 * 60 * 1000; // 1 hour
+/**
+ * Framework-agnostic, Node-only JWKS-based JWT verification.
+ *
+ * Covers BOTH the user-token path (issuer/audience validated) and the
+ * API-token path (type + appId validated). The two JWKS clients are cached
+ * independently with the same TTL behavior.
+ *
+ * This is a plain class — NOT a DI provider. Framework plugins wrap it.
+ */
+export class JwksService {
+    config;
+    jwks = null;
+    jwksInitTime = 0;
+    apiTokenJwks = null;
+    apiTokenJwksInitTime = 0;
+    cacheTtlMs;
+    log;
+    constructor(config) {
+        this.config = config;
+        this.cacheTtlMs = config.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS;
+        this.log = config.log ?? (() => { });
+    }
+    /**
+     * Initialize or refresh the user-token JWKS client.
+     */
+    ensureJwks() {
+        const now = Date.now();
+        if (!this.jwks || now - this.jwksInitTime > this.cacheTtlMs) {
+            this.log('Initializing JWKS client', { url: this.config.jwksUrl });
+            this.jwks = createRemoteJWKSet(new URL(this.config.jwksUrl));
+            this.jwksInitTime = now;
+        }
+        return this.jwks;
+    }
+    /**
+     * Initialize or refresh the API-token JWKS client (cached independently).
+     */
+    ensureApiTokenJwks() {
+        const now = Date.now();
+        if (!this.apiTokenJwks || now - this.apiTokenJwksInitTime > this.cacheTtlMs) {
+            this.log('Initializing API token JWKS client', { url: this.config.apiTokenJwksUrl });
+            this.apiTokenJwks = createRemoteJWKSet(new URL(this.config.apiTokenJwksUrl));
+            this.apiTokenJwksInitTime = now;
+        }
+        return this.apiTokenJwks;
+    }
+    /**
+     * Verify a user JWT and return its claims.
+     *
+     * @throws {TokenVerificationError} if the token is invalid or expired.
+     */
+    async verifyToken(token) {
+        const jwks = this.ensureJwks();
+        try {
+            const { payload } = await jwtVerify(token, jwks, {
+                issuer: this.config.issuer,
+                audience: this.config.audience,
+            });
+            this.log('Token verified successfully', {
+                sub: payload.sub,
+                iss: payload.iss,
+                aud: payload.aud,
+            });
+            return payload;
+        }
+        catch (error) {
+            throw this.mapVerificationError(error, 'Token');
+        }
+    }
+    /**
+     * Verify a Bridge API token JWT and return its claims.
+     *
+     * Uses a separate JWKS client (cached independently from the user-token
+     * client). Validates `type === 'api'` and `appId === expectedAppId`.
+     *
+     * @throws {TokenVerificationError} if the token is invalid, expired, the
+     *   wrong type, or issued for a different app.
+     */
+    async verifyApiToken(token, expectedAppId) {
+        const jwks = this.ensureApiTokenJwks();
+        try {
+            const { payload } = await jwtVerify(token, jwks);
+            if (payload['type'] !== 'api') {
+                throw new TokenVerificationError('Wrong token type', 'TOKEN_INVALID');
+            }
+            if (payload['appId'] !== expectedAppId) {
+                throw new TokenVerificationError('Token issued for a different app', 'APP_MISMATCH');
+            }
+            this.log('API token verified successfully', {
+                sub: payload.sub,
+                appId: payload['appId'],
+            });
+            return payload;
+        }
+        catch (error) {
+            if (error instanceof TokenVerificationError) {
+                throw error;
+            }
+            throw this.mapVerificationError(error, 'API token');
+        }
+    }
+    /**
+     * Map a jose verification error to a stable TokenVerificationError.
+     */
+    mapVerificationError(error, label) {
+        if (error instanceof joseErrors.JWTExpired) {
+            this.log(`${label} verification failed: Token expired`);
+            return new TokenVerificationError('Token expired', 'TOKEN_EXPIRED');
+        }
+        if (error instanceof joseErrors.JWTInvalid) {
+            this.log(`${label} verification failed: Invalid token`);
+            return new TokenVerificationError('Invalid token', 'TOKEN_INVALID');
+        }
+        if (error instanceof joseErrors.JWKSNoMatchingKey) {
+            this.log(`${label} verification failed: No matching key in JWKS`);
+            return new TokenVerificationError('Invalid token signature', 'JWKS_NO_MATCH');
+        }
+        if (error instanceof joseErrors.JWTClaimValidationFailed) {
+            this.log(`${label} verification failed: Claim validation failed`, error.message);
+            return new TokenVerificationError('Token claim validation failed', 'CLAIM_VALIDATION_FAILED');
+        }
+        this.log(`${label} verification failed: Unknown error`, error);
+        return new TokenVerificationError('Token verification failed', 'UNKNOWN_ERROR');
+    }
+}
+//# sourceMappingURL=jwks-service.js.map

package/dist/backend/jwks-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks-service.js","sourceRoot":"","sources":["../../src/backend/jwks-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,MAAM,CAAC;AA+B3E;;;;;;GAMG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAG7B;IAFlB,YACE,OAAe,EACC,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAEtD;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IAUO;IATrB,IAAI,GAAiD,IAAI,CAAC;IAC1D,YAAY,GAAG,CAAC,CAAC;IAEjB,YAAY,GAAiD,IAAI,CAAC;IAClE,oBAAoB,GAAG,CAAC,CAAC;IAEhB,UAAU,CAAS;IACnB,GAAG,CAAa;IAEjC,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;QACpD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC;QAC5D,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5E,IAAI,CAAC,GAAG,CAAC,oCAAoC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;YACrF,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;YAC7E,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC;QAClC,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC/C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE;gBACtC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB,CAAC,CAAC;YAEH,OAAO,OAAoB,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,aAAqB;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAEjD,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC9B,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,aAAa,EAAE,CAAC;gBACvC,MAAM,IAAI,sBAAsB,CAAC,kCAAkC,EAAE,cAAc,CAAC,CAAC;YACvF,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,iCAAiC,EAAE;gBAC1C,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC;aACxB,CAAC,CAAC;YAEH,OAAO,OAAoC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;gBAC5C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,KAAc,EAAE,KAAa;QACxD,IAAI,KAAK,YAAY,UAAU,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;YACxD,OAAO,IAAI,sBAAsB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,KAAK,YAAY,UAAU,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;YACxD,OAAO,IAAI,sBAAsB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,KAAK,YAAY,UAAU,CAAC,iBAAiB,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,+CAA+C,CAAC,CAAC;YAClE,OAAO,IAAI,sBAAsB,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,KAAK,YAAY,UAAU,CAAC,wBAAwB,EAAE,CAAC;YACzD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,+CAA+C,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;YAC5F,OAAO,IAAI,sBAAsB,CAAC,+BAA+B,EAAE,yBAAyB,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC/D,OAAO,IAAI,sBAAsB,CAAC,2BAA2B,EAAE,eAAe,CAAC,CAAC;IAClF,CAAC;CACF"}

package/dist/backend/types.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Backend (Node-only) auth types.
+ *
+ * Framework-agnostic. No NestJS, no browser/storage APIs. These are the shapes
+ * shared by every server-side Bridge plugin (bridge-nestjs today; others later)
+ * for JWT verification and user extraction.
+ *
+ * NOTE on `JwtClaims` vs `IDToken` (in ../types.ts): `IDToken` is the strict
+ * OIDC id_token payload used by the browser SDK to build a `Profile`. `JwtClaims`
+ * here is the permissive *access-token* claim set the server verifies via JWKS —
+ * it carries short-form tenant/app claims (`tid`/`aid`), `privileges`, `role`,
+ * and the registered JWT claims (`iss`/`aud`/`exp`/...). They intentionally stay
+ * separate: different tokens, different consumers.
+ */
+/**
+ * Raw JWT claims from a Bridge access/ID token (the verified payload).
+ */
+export interface JwtClaims {
+    /** Subject (user ID) */
+    sub: string;
+    /** Preferred username */
+    preferred_username?: string;
+    /** Email address */
+    email?: string;
+    /** Email verified flag */
+    email_verified?: boolean;
+    /** Full name */
+    name?: string;
+    /** Given name */
+    given_name?: string;
+    /** Family name */
+    family_name?: string;
+    /** Locale */
+    locale?: string;
+    /** User onboarded flag */
+    onboarded?: boolean;
+    /** Multi-tenant flag */
+    multi_tenant?: boolean;
+    /** Tenant ID (long form) */
+    tenant_id?: string;
+    /** Tenant ID (short form) */
+    tid?: string;
+    /** App ID (short form) */
+    aid?: string;
+    /** Scope */
+    scope?: string;
+    /** Tenant name */
+    tenant_name?: string;
+    /** Tenant locale */
+    tenant_locale?: string;
+    /** Tenant logo URL */
+    tenant_logo?: string;
+    /** Tenant onboarded flag */
+    tenant_onboarded?: boolean;
+    /** User's role */
+    role?: string;
+    /** User privilege strings (custom claim) */
+    privileges?: string[];
+    /** Token issuer */
+    iss?: string;
+    /** Token audience */
+    aud?: string | string[];
+    /** Expiration time */
+    exp?: number;
+    /** Not before time */
+    nbf?: number;
+    /** Issued at time */
+    iat?: number;
+}
+/**
+ * Authenticated user extracted from a verified JWT access token.
+ */
+export interface BridgeUser {
+    /** User ID (sub claim) */
+    id: string;
+    /** User's email address */
+    email: string;
+    /** Whether email is verified */
+    emailVerified: boolean;
+    /** Username (preferred_username claim) */
+    username: string;
+    /** Full display name */
+    fullName: string;
+    /** Given/first name */
+    givenName?: string;
+    /** Family/last name */
+    familyName?: string;
+    /** User's locale preference */
+    locale?: string;
+    /** Whether user has completed onboarding */
+    onboarded?: boolean;
+    /** Tenant/workspace ID the user is authenticated for */
+    tenantId: string;
+    /** App ID from the token (aid claim) */
+    appId?: string;
+    /** OAuth scopes granted to the token */
+    scope?: string;
+    /** User's role within the tenant */
+    role?: string;
+    /** Whether user has multi-tenant access */
+    multiTenantAccess?: boolean;
+    /** Privilege strings from the JWT `privileges` claim (e.g. ['AUTHENTICATED', 'USER_READ']) */
+    privileges?: string[];
+}
+/**
+ * Claims present in a Bridge API token JWT (the `x-api-key` machine credential).
+ */
+export interface ApiTokenClaims extends JwtClaims {
+    sub: string;
+    appId: string;
+    tenantId: string | null;
+    type: 'api';
+    privileges: string[];
+}
+/**
+ * Transform raw JWT claims into a BridgeUser.
+ */
+export declare function transformJwtToBridgeUser(claims: JwtClaims): BridgeUser;
+//# sourceMappingURL=types.d.ts.map

package/dist/backend/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/backend/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wBAAwB;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kBAAkB;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,sBAAsB;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,aAAa,EAAE,OAAO,CAAC;IACvB,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uBAAuB;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,KAAK,CAAC;IACZ,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAkBtE"}

package/dist/backend/types.js

@@ -0,0 +1,37 @@
+/**
+ * Backend (Node-only) auth types.
+ *
+ * Framework-agnostic. No NestJS, no browser/storage APIs. These are the shapes
+ * shared by every server-side Bridge plugin (bridge-nestjs today; others later)
+ * for JWT verification and user extraction.
+ *
+ * NOTE on `JwtClaims` vs `IDToken` (in ../types.ts): `IDToken` is the strict
+ * OIDC id_token payload used by the browser SDK to build a `Profile`. `JwtClaims`
+ * here is the permissive *access-token* claim set the server verifies via JWKS —
+ * it carries short-form tenant/app claims (`tid`/`aid`), `privileges`, `role`,
+ * and the registered JWT claims (`iss`/`aud`/`exp`/...). They intentionally stay
+ * separate: different tokens, different consumers.
+ */
+/**
+ * Transform raw JWT claims into a BridgeUser.
+ */
+export function transformJwtToBridgeUser(claims) {
+    return {
+        id: claims.sub,
+        email: claims.email || '',
+        emailVerified: claims.email_verified || false,
+        username: claims.preferred_username || claims.email || '',
+        fullName: claims.name || '',
+        givenName: claims.given_name,
+        familyName: claims.family_name,
+        locale: claims.locale,
+        onboarded: claims.onboarded,
+        tenantId: claims.tid || claims.tenant_id || '',
+        appId: claims.aid,
+        scope: claims.scope,
+        role: claims.role,
+        multiTenantAccess: claims.multi_tenant,
+        privileges: claims.privileges,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/backend/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/backend/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAyGH;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAiB;IACxD,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG;QACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,aAAa,EAAE,MAAM,CAAC,cAAc,IAAI,KAAK;QAC7C,QAAQ,EAAE,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE;QACzD,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QAC3B,SAAS,EAAE,MAAM,CAAC,UAAU;QAC5B,UAAU,EAAE,MAAM,CAAC,WAAW;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE;QAC9C,KAAK,EAAE,MAAM,CAAC,GAAG;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,iBAAiB,EAAE,MAAM,CAAC,YAAY;QACtC,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC"}

package/dist/usage/index.d.ts

@@ -1,3 +1,3 @@
 export { UsageReporter, type UsageReporterOptions, type QueueStatus } from './usage-reporter.js';
-export { createDurableStorage, type DurableStorage, type DurableStorageOptions, type QueuedEvent, IndexedDBStorage, NodeFsStorage, InMemoryStorage, DEFAULT_MAX_SIZE, isBrowserEnv, isNodeEnv, } from './storage/index.js';
+export { createDurableStorage, type DurableStorage, type DurableStorageOptions, type QueuedEvent, IndexedDBStorage, InMemoryStorage, DEFAULT_MAX_SIZE, isBrowserEnv, isNodeEnv, } from './storage/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/usage/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/usage/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/usage/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,oBAAoB,CAAC"}

package/dist/usage/index.js

@@ -1,4 +1,4 @@
 // Billing 2.0 — public exports for the usage subsystem.
 export { UsageReporter } from './usage-reporter.js';
-export { createDurableStorage, IndexedDBStorage, NodeFsStorage, InMemoryStorage, DEFAULT_MAX_SIZE, isBrowserEnv, isNodeEnv, } from './storage/index.js';
+export { createDurableStorage, IndexedDBStorage, InMemoryStorage, DEFAULT_MAX_SIZE, isBrowserEnv, isNodeEnv, } from './storage/index.js';
 //# sourceMappingURL=index.js.map

package/dist/usage/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/usage/index.ts"],"names":[],"mappings":"AAAA,wDAAwD;AAExD,OAAO,EAAE,aAAa,EAA+C,MAAM,qBAAqB,CAAC;AACjG,OAAO,EACL,oBAAoB,EAIpB,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/usage/index.ts"],"names":[],"mappings":"AAAA,wDAAwD;AAExD,OAAO,EAAE,aAAa,EAA+C,MAAM,qBAAqB,CAAC;AACjG,OAAO,EACL,oBAAoB,EAIpB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,oBAAoB,CAAC"}

package/dist/usage/storage/index.d.ts

@@ -1,7 +1,6 @@
 import { type DurableStorage, type DurableStorageOptions } from './durable-storage.js';
 export { type DurableStorage, type DurableStorageOptions, type QueuedEvent, DEFAULT_MAX_SIZE, isBrowserEnv, isNodeEnv, } from './durable-storage.js';
 export { IndexedDBStorage } from './indexeddb-storage.js';
-export { NodeFsStorage } from './node-fs-storage.js';
 export { InMemoryStorage } from './noop-storage.js';
 export declare function createDurableStorage(opts?: DurableStorageOptions): DurableStorage;
 //# sourceMappingURL=index.d.ts.map

package/dist/usage/storage/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/usage/storage/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC3B,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,qBAA0B,GAAG,cAAc,CAIrF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/usage/storage/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAE3B,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAsCpD,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,qBAA0B,GAAG,cAAc,CAIrF"}

package/dist/usage/storage/index.js

@@ -2,27 +2,62 @@
 //
 // Auto-selects the correct backend for the current runtime:
 //   - browser → IndexedDBStorage
-//   - Node    → NodeFsStorage
+//   - Node    → NodeFsStorage (loaded lazily — see edge-safety note)
 //   - else    → InMemoryStorage (SSR / edge fallback)
 //
-// Tree-shake note: this file imports BOTH browser and Node impls, but each
-// impl encapsulates its env-specific code (Node uses dynamic `import()` for
-// `node:fs/promises`, browser uses `indexedDB` only inside method bodies).
-// Static analysis can prove the unreachable branches dead in production
-// bundles.
+// Edge-safety (TBP — Node-builtin edge-runtime fix): node-fs-storage.js loads
+// the Node fs/path/os builtins. Bundlers targeting the browser or an edge
+// runtime (Next.js middleware, Vite) choke on those builtins as soon as the
+// module is STATICALLY reachable from the package root — even when the builtin
+// import inside it is itself dynamic. We therefore never import NodeFsStorage
+// statically here: the Node branch returns a thin lazy proxy
+// (LazyNodeFsStorage) that imports the real impl on first method call. In a
+// real Node process this is transparent (all DurableStorage methods are async
+// already); in a browser/edge bundle the Node module simply never enters the
+// static graph. IndexedDBStorage is safe to import statically — it only touches
+// the indexedDB global inside method bodies, no Node builtins.
 import { isBrowserEnv, isNodeEnv, } from './durable-storage.js';
 import { IndexedDBStorage } from './indexeddb-storage.js';
-import { NodeFsStorage } from './node-fs-storage.js';
 import { InMemoryStorage } from './noop-storage.js';
 export { DEFAULT_MAX_SIZE, isBrowserEnv, isNodeEnv, } from './durable-storage.js';
 export { IndexedDBStorage } from './indexeddb-storage.js';
-export { NodeFsStorage } from './node-fs-storage.js';
 export { InMemoryStorage } from './noop-storage.js';
+/**
+ * Lazy Node filesystem storage. Defers loading node-fs-storage.js (and thus
+ * its Node-builtin imports) until the first storage operation, so the concrete
+ * Node impl is reachable only via a dynamic import and never via the static
+ * module graph. Keeps `createDurableStorage()` synchronous (it's called from
+ * the `UsageReporter` constructor) while all real I/O stays async.
+ */
+class LazyNodeFsStorage {
+    real;
+    constructor(opts) {
+        this.real = import('./node-fs-storage.js').then((m) => new m.NodeFsStorage(opts));
+    }
+    async enqueue(event) {
+        return (await this.real).enqueue(event);
+    }
+    async peek(limit) {
+        return (await this.real).peek(limit);
+    }
+    async remove(keys) {
+        return (await this.real).remove(keys);
+    }
+    async markRetry(key, error) {
+        return (await this.real).markRetry(key, error);
+    }
+    async size() {
+        return (await this.real).size();
+    }
+    async close() {
+        return (await this.real).close?.();
+    }
+}
 export function createDurableStorage(opts = {}) {
     if (isBrowserEnv())
         return new IndexedDBStorage(opts);
     if (isNodeEnv())
-        return new NodeFsStorage(opts);
+        return new LazyNodeFsStorage(opts);
     return new InMemoryStorage(opts);
 }
 //# sourceMappingURL=index.js.map

package/dist/usage/storage/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/usage/storage/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,4DAA4D;AAC5D,iCAAiC;AACjC,8BAA8B;AAC9B,sDAAsD;AACtD,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,WAAW;AAEX,OAAO,EACL,YAAY,EACZ,SAAS,GAGV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAIL,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,UAAU,oBAAoB,CAAC,OAA8B,EAAE;IACnE,IAAI,YAAY,EAAE;QAAE,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE;QAAE,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/usage/storage/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,4DAA4D;AAC5D,iCAAiC;AACjC,qEAAqE;AACrE,sDAAsD;AACtD,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,6DAA6D;AAC7D,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,+DAA+D;AAE/D,OAAO,EACL,YAAY,EACZ,SAAS,GAIV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAIL,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,iBAAiB;IACJ,IAAI,CAA0B;IAE/C,YAAY,IAA2B;QACrC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CACjC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAkB;QAC9B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,IAAc;QACzB,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,KAAa;QACxC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,KAAK;QACT,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACrC,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,OAA8B,EAAE;IACnE,IAAI,YAAY,EAAE;QAAE,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE;QAAE,OAAO,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/usage/storage/node-fs-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-fs-storage.d.ts","sourceRoot":"","sources":["../../../src/usage/storage/node-fs-storage.ts"],"names":[],"mappings":"AAqBA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAM9B,qBAAa,aAAc,YAAW,cAAc;IAClD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAC,CAAkB;IACrC,OAAO,CAAC,UAAU,CAAuC;IACzD,OAAO,CAAC,GAAG,CAAC,CAAoB;IAChC,OAAO,CAAC,KAAK,CAAC,CAAsB;IACpC,OAAO,CAAC,GAAG,CAAC,CAAoB;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAS;gBAE1B,IAAI,GAAE,qBAA0B;IAUtC,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAM3C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBpD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAK7B,SAAS,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAMrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,OAAO,CAAC,UAAU;YAOJ,QAAQ;YA8BR,qBAAqB;YAcrB,MAAM;IAOpB,OAAO,CAAC,GAAG;IAKX,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,GAAG;IAKX,OAAO,CAAC,IAAI;CAab"}
+{"version":3,"file":"node-fs-storage.d.ts","sourceRoot":"","sources":["../../../src/usage/storage/node-fs-storage.ts"],"names":[],"mappings":"AAwBA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAoB9B,qBAAa,aAAc,YAAW,cAAc;IAClD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAC,CAAkB;IACrC,OAAO,CAAC,UAAU,CAAuC;IACzD,OAAO,CAAC,GAAG,CAAC,CAAoB;IAChC,OAAO,CAAC,KAAK,CAAC,CAAsB;IACpC,OAAO,CAAC,GAAG,CAAC,CAAoB;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAS;gBAE1B,IAAI,GAAE,qBAA0B;IAUtC,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAM3C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBpD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAK7B,SAAS,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAMrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,OAAO,CAAC,UAAU;YAOJ,QAAQ;YA8BR,qBAAqB;YAcrB,MAAM;IAOpB,OAAO,CAAC,GAAG;IAKX,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,GAAG;IAKX,OAAO,CAAC,IAAI;CAab"}

package/dist/usage/storage/node-fs-storage.js

@@ -14,11 +14,26 @@
 //     serializes all writes. We do NOT attempt multi-process locking — bridge
 //     SDK consumers run a single process per app instance.
 //
-// Tree-shake isolation: this file uses `node:fs/promises` and `node:path` via
-// `await import()` so bundlers that target the browser can statically prove
-// the module never executes the imports. The IndexedDB sibling never reaches
-// into this file's graph.
+// Edge/browser-bundle isolation: this file loads the Node fs/path/os builtins
+// through `loadNodeBuiltin` (a runtime-computed specifier with per-bundler
+// ignore hints) so that even when an edge/browser bundler pulls this module
+// into its graph it never tries to bundle or parse the Node-builtin imports —
+// they stay native runtime imports that only ever resolve in a real Node
+// process. (A plain dynamic import of a literal node-scheme specifier is NOT
+// enough: webpack's edge target still parses the chunk and rejects it.)
 import { DEFAULT_MAX_SIZE, isNodeEnv, } from './durable-storage.js';
+// Bundler-invisible Node-builtin loader. A literal dynamic import of a
+// node-scheme specifier trips edge/browser bundlers (Next.js middleware
+// webpack: UnhandledSchemeError; Turbopack: middleware panic; Vite/esbuild:
+// unresolved scheme) whenever this module is reachable in their graph — even
+// though NodeFsStorage only ever runs in a real Node process. Routing through a
+// runtime-computed specifier plus per-bundler ignore hints keeps these as
+// native runtime imports the bundler never bundles or parses, while Node
+// resolves them normally.
+function loadNodeBuiltin(specifier) {
+    return import(
+    /* webpackIgnore: true */ /* turbopackIgnore: true */ /* @vite-ignore */ specifier);
+}
 export class NodeFsStorage {
     maxSize;
     dirPromise;
@@ -150,17 +165,17 @@ export class NodeFsStorage {
     }
     _fs() {
         if (!this.fsP)
-            this.fsP = import('node:fs/promises');
+            this.fsP = loadNodeBuiltin('node:fs/promises');
         return this.fsP;
     }
     _path() {
         if (!this.pathP)
-            this.pathP = import('node:path');
+            this.pathP = loadNodeBuiltin('node:path');
         return this.pathP;
     }
     _os() {
         if (!this.osP)
-            this.osP = import('node:os');
+            this.osP = loadNodeBuiltin('node:os');
         return this.osP;
     }
     _dir() {

package/dist/usage/storage/node-fs-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-fs-storage.js","sourceRoot":"","sources":["../../../src/usage/storage/node-fs-storage.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,EAAE;AACF,2EAA2E;AAC3E,iDAAiD;AACjD,EAAE;AACF,uBAAuB;AACvB,yDAAyD;AACzD,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,sCAAsC;AACtC,mEAAmE;AACnE,6EAA6E;AAC7E,8EAA8E;AAC9E,2DAA2D;AAC3D,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,0BAA0B;AAE1B,OAAO,EACL,gBAAgB,EAChB,SAAS,GAIV,MAAM,sBAAsB,CAAC;AAM9B,MAAM,OAAO,aAAa;IAChB,OAAO,CAAS;IAChB,UAAU,CAAmB;IAC7B,UAAU,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IACjD,GAAG,CAAqB;IACxB,KAAK,CAAuB;IAC5B,GAAG,CAAqB;IACf,WAAW,CAAU;IAEtC,YAAY,OAA8B,EAAE;QAC1C,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAkB;QAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YAC1C,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAc;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,KAAa;QACxC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;oBAC7B,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;oBACvC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC;oBACpB,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,SAAS,CAAC,IAA0B;QAClC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,+DAA+D;QAC/D,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,oBAAoB;IAEZ,UAAU,CAAI,EAAoB;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,6EAA6E;QAC7E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACzC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAChE,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;gBAClD,IACE,MAAM;oBACN,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;oBACzC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EACjC,CAAC;oBACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;YAC1E,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrE,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,qCAAqC,IAAI,CAAC,OAAO,0BAA0B,CAC5E,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC;IACrD,CAAC;IAEO,GAAG;QACT,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,KAAK;QACX,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,GAAG;QACT,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC5B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;gBAClF,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"node-fs-storage.js","sourceRoot":"","sources":["../../../src/usage/storage/node-fs-storage.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,EAAE;AACF,2EAA2E;AAC3E,iDAAiD;AACjD,EAAE;AACF,uBAAuB;AACvB,yDAAyD;AACzD,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,sCAAsC;AACtC,mEAAmE;AACnE,6EAA6E;AAC7E,8EAA8E;AAC9E,2DAA2D;AAC3D,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,yEAAyE;AACzE,6EAA6E;AAC7E,wEAAwE;AAExE,OAAO,EACL,gBAAgB,EAChB,SAAS,GAIV,MAAM,sBAAsB,CAAC;AAM9B,uEAAuE;AACvE,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,gFAAgF;AAChF,0EAA0E;AAC1E,yEAAyE;AACzE,0BAA0B;AAC1B,SAAS,eAAe,CAAC,SAAiB;IACxC,OAAO,MAAM;IACX,yBAAyB,CAAC,2BAA2B,CAAC,kBAAkB,CAAC,SAAS,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,aAAa;IAChB,OAAO,CAAS;IAChB,UAAU,CAAmB;IAC7B,UAAU,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IACjD,GAAG,CAAqB;IACxB,KAAK,CAAuB;IAC5B,GAAG,CAAqB;IACf,WAAW,CAAU;IAEtC,YAAY,OAA8B,EAAE;QAC1C,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAkB;QAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YAC1C,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAc;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,KAAa;QACxC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;oBAC7B,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;oBACvC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC;oBACpB,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,SAAS,CAAC,IAA0B;QAClC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,+DAA+D;QAC/D,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,oBAAoB;IAEZ,UAAU,CAAI,EAAoB;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,6EAA6E;QAC7E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACzC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAChE,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;gBAClD,IACE,MAAM;oBACN,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;oBACzC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EACjC,CAAC;oBACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;YAC1E,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrE,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,qCAAqC,IAAI,CAAC,OAAO,0BAA0B,CAC5E,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC;IACrD,CAAC;IAEO,GAAG;QACT,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC,kBAAkB,CAAsB,CAAC;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,KAAK;QACX,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,WAAW,CAAwB,CAAC;QAClF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,GAAG;QACT,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC,SAAS,CAAsB,CAAC;QAC1E,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC5B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;gBAClF,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzC,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nebulr-group/bridge-auth-core",
-  "version": "0.4.0-beta.2",
+  "version": "0.4.0-beta.5",
   "description": "Framework-agnostic auth core for Bridge platform",
   "type": "module",
   "main": "./dist/index.js",
@@ -10,6 +10,18 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "default": "./dist/index.js"
+    },
+    "./backend": {
+      "types": "./dist/backend/index.d.ts",
+      "import": "./dist/backend/index.js",
+      "default": "./dist/backend/index.js"
+    }
+  },
+  "typesVersions": {
+    "*": {
+      "backend": [
+        "./dist/backend/index.d.ts"
+      ]
     }
   },
   "files": [