@rebasepro/server 0.13.0 → 0.13.1-canary.g18cfeb7

package/dist/{admin_block-CcSGdH7M.js → admin_block-CLeUMG8G.js}

@@ -44,6 +44,7 @@ var ADMIN_COLLECTION_KEYS = [
 	"defaultSize",
 	"defaultViewMode",
 	"disableDefaultActions",
+	"display",
 	"enabledViews",
 	"entityActions",
 	"entityViews",
@@ -54,6 +55,7 @@ var ADMIN_COLLECTION_KEYS = [
 	"formAutoSave",
 	"formView",
 	"group",
+	"hideFromEntityViews",
 	"hideFromNavigation",
 	"hideIdFromCollection",
 	"hideIdFromForm",
@@ -121,4 +123,4 @@ var ADMIN_PROPERTY_KEYS = [
 //#endregion
 export { ADMIN_PROPERTY_KEYS as n, ADMIN_COLLECTION_KEYS as t };
 
-//# sourceMappingURL=admin_block-CcSGdH7M.js.map
+//# sourceMappingURL=admin_block-CLeUMG8G.js.map

package/dist/admin_block-CLeUMG8G.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin_block-CLeUMG8G.js","names":[],"sources":["../../types/src/types/admin_block.ts"],"sourcesContent":["/**\n * The keys of a collection's admin block, as data.\n *\n * There is no *type* for the block in this package any more, and that is the point:\n * `admin` is not declared on `BaseCollectionConfig` or on any property here, so a\n * BaaS install cannot even write one. `@rebasepro/admin-types` adds the field back by\n * declaration merging, which is why installing it is what makes the admin surface\n * appear.\n *\n * The *list* still has to live here, because three runtime consumers need it and two\n * of them are core — see below.\n */\n\n/**\n * Every key that belongs inside a collection's `admin` block, as data.\n *\n * The type that describes these fields is `AdminCollectionOptions` in\n * `@rebasepro/admin-types`, and it is erased at build time — but three runtime\n * consumers need the list, and two of them are core:\n *\n * - `serializeCollections`, to drop the block from the contract\n * - the ts-morph schema editor in `@rebasepro/server`, which rewrites collection\n *   files on disk from the admin panel and has to know where each key goes. A key\n *   missing from this list gets written to the *top level* of the file, where the\n *   backend ignores it and the panel never finds it again.\n * - the `collections-admin-block` codemod\n *\n * `@rebasepro/admin-types` re-exports this and asserts it names only real option\n * keys; the count is pinned by a test there.\n *\n * @group Models\n */\nexport const ADMIN_COLLECTION_KEYS = [\n    \"Actions\",\n    \"additionalFields\",\n    \"alwaysApplyDefaultValues\",\n    \"components\",\n    \"defaultEntityAction\",\n    \"defaultFilter\",\n    \"defaultSelectedView\",\n    \"defaultSize\",\n    \"defaultViewMode\",\n    \"disableDefaultActions\",\n    \"display\",\n    \"enabledViews\",\n    \"entityActions\",\n    \"entityViews\",\n    \"exportable\",\n    \"filterPresets\",\n    \"fixedFilter\",\n    \"form\",\n    \"formAutoSave\",\n    \"formView\",\n    \"group\",\n    \"hideFromEntityViews\",\n    \"hideFromNavigation\",\n    \"hideIdFromCollection\",\n    \"hideIdFromForm\",\n    \"icon\",\n    \"includeJsonView\",\n    \"inlineEditing\",\n    \"kanban\",\n    \"listProperties\",\n    \"localChangesBackup\",\n    \"openEntityMode\",\n    \"orderProperty\",\n    \"pagination\",\n    \"previewProperties\",\n    \"propertiesOrder\",\n    \"selectionController\",\n    \"selectionEnabled\",\n    \"sideDialogWidth\",\n    \"sort\",\n    \"titleProperty\"\n] as const;\n\n/** A key of a collection's `admin` block. @group Models */\nexport type AdminCollectionKey = typeof ADMIN_COLLECTION_KEYS[number];\n\n/**\n * Every key that belongs inside a *property's* `admin` block, as data.\n *\n * The union of `AdminPropertyOptions` and its per-type extensions\n * (`AdminStringOptions`, `AdminArrayOptions`, …) in `@rebasepro/admin-types`.\n * It lives here for the same reason {@link ADMIN_COLLECTION_KEYS} does: the\n * runtime consumers are core packages that the BaaS guard forbids from\n * importing `@rebasepro/admin-types`. Here it is the boot-time collection\n * validator in `@rebasepro/server`, which has to tell \"you left `readOnly` at\n * the top of the property, where nothing reads it\" apart from \"you invented a\n * key we have never heard of\".\n *\n * `@rebasepro/admin-types` re-exports this and asserts it names only real\n * option keys.\n *\n * @group Models\n */\nexport const ADMIN_PROPERTY_KEYS = [\n    \"canAddElements\",\n    \"clearable\",\n    \"columnWidth\",\n    \"customProps\",\n    \"disabled\",\n    \"expanded\",\n    \"Field\",\n    \"Filter\",\n    \"filterOperators\",\n    \"fixedFilter\",\n    \"hideFromCollection\",\n    \"includeEntityLink\",\n    \"includeId\",\n    \"markdown\",\n    \"minimalistView\",\n    \"multiline\",\n    \"Preview\",\n    \"previewAsTag\",\n    \"previewProperties\",\n    \"readOnly\",\n    \"sortable\",\n    \"span\",\n    \"spreadChildren\",\n    \"urlPreview\",\n    \"widget\",\n] as const;\n\n/** A key of a property's `admin` block. @group Models */\nexport type AdminPropertyKey = typeof ADMIN_PROPERTY_KEYS[number];\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAa,wBAAwB;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACJ;;;;;;;;;;;;;;;;;;AAsBA,IAAa,sBAAsB;CAC/B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACJ"}

package/dist/api/errors.d.ts

@@ -55,12 +55,6 @@ export interface RebaseApiError extends Error {
     code?: string;
     details?: unknown;
 }
-/**
- * Type guard for errors that carry optional API metadata (statusCode, code, details).
- * Returns true for any Error instance — the optional properties are then
- * checked via normal property access.
- */
-export declare function isRebaseApiError(error: unknown): error is RebaseApiError;
 /**
  * Hono error-handling middleware (`app.onError`).
  * Converts any error into the canonical `{ error: { message, code } }` shape.

package/dist/api/openapi-generator.d.ts

@@ -12,5 +12,19 @@ export interface OpenApiGeneratorOptions {
     basePath?: string;
     /** Whether auth is enabled on data routes. Defaults to true. */
     requireAuth?: boolean;
+    /**
+     * The list-pagination bounds the REST layer applies, so the spec states the
+     * ones a request will actually meet.
+     *
+     * These were hardcoded as `default: 20, maximum: 100` — neither of which
+     * the server has ever used. The spec drives the API Explorer and is what a
+     * generated client is built from, so an understated ceiling is a request
+     * the client refuses to make, and an overstated one is a 400 nobody
+     * predicted.
+     */
+    listLimits?: {
+        defaultLimit?: number;
+        maxLimit?: number;
+    };
 }
 export declare function generateOpenApiSpec(collections: CollectionConfig[], options?: OpenApiGeneratorOptions): Record<string, unknown>;

package/dist/api/rest/idempotency.d.ts

@@ -1,9 +1,46 @@
 import { DataDriver } from "@rebasepro/types";
+/**
+ * What a caller may do with a key.
+ *
+ * `claimed` is the only outcome that permits the write. Recalling and then
+ * writing was not atomic: two requests carrying one key both missed the recall,
+ * both wrote, and `ON CONFLICT DO NOTHING` protected only the second row in
+ * *this* table — the duplicate row in the caller's collection, which is the
+ * thing the mechanism exists to prevent, was inserted anyway. The offline queue
+ * is shared across tabs, so two tabs reconnecting together is the ordinary case
+ * rather than an exotic one.
+ */
+export type IdempotencyClaim = 
+/** This key has already been answered; serve that answer again. */
+{
+    status: "replay";
+    response: unknown;
+}
+/** Another request holds this key and has not answered yet. */
+ | {
+    status: "in-flight";
+}
+/** The key is ours; do the write, then `complete` or `release` it. */
+ | {
+    status: "claimed";
+};
 export interface IdempotencyStore {
-    /** What this key answered before, or `undefined` if it is new. */
-    recall(key: string, uid: string | undefined): Promise<unknown | undefined>;
-    /** Record what this key answered. Never throws — see {@link createIdempotencyStore}. */
-    remember(key: string, uid: string | undefined, response: unknown): Promise<void>;
+    /**
+     * Take the key if it is free, atomically. Never throws — a store that
+     * cannot answer reports `claimed`, which degrades to no idempotency rather
+     * than to a refused write.
+     */
+    claim(key: string, uid: string | undefined): Promise<IdempotencyClaim>;
+    /** Record what this key answered. Never throws. */
+    complete(key: string, uid: string | undefined, response: unknown): Promise<void>;
+    /**
+     * Give the key back after the write it was claimed for failed.
+     *
+     * Without this a transient failure strands the key: every retry would be
+     * told `in-flight` until the row aged out, turning one failed write into a
+     * day of refusals.
+     */
+    release(key: string, uid: string | undefined): Promise<void>;
 }
 /**
  * Returns `undefined` when the driver cannot run SQL, which disables the whole

package/dist/api/rest/write-validation.d.ts

@@ -33,11 +33,18 @@ export declare function assertKnownWriteFields(values: Record<string, unknown>,
  * This shapes the *response*, which is what the parameter says it does; it is
  * not a column pushdown, so it saves bandwidth rather than database work.
  *
- * `id` always survives. Rows are addressed by it everywhere above this layer —
- * the admin table, realtime reconciliation, the offline cache — and a row that
- * arrives without one is not a smaller row, it is an unusable one. Asking for
- * `fields=title` and being unable to open the record you clicked is a worse
- * answer than one extra key.
+ * The collection's key always survives. Rows are addressed by it everywhere
+ * above this layer — the admin table, realtime reconciliation, the offline
+ * cache — and a row that arrives without one is not a smaller row, it is an
+ * unusable one. Asking for `fields=title` and being unable to open the record
+ * you clicked is a worse answer than one extra key.
+ *
+ * That is a statement about the key, not about the name `id`: a collection
+ * keyed on `slug`, or on `user_id + role_id`, was projected down to the fields
+ * asked for and nothing else, which is the very outcome the paragraph above
+ * describes. `assertKnownWriteFields` one function up already has a dedicated
+ * error for collections with no `id` column, so this layer had no excuse for
+ * assuming one.
  */
 export declare function projectResponseFields<T extends Record<string, unknown>>(rows: T[], fields: readonly string[] | undefined, collection: CollectionConfig, options?: {
     include?: readonly string[];

package/dist/auth/index.d.ts

@@ -1,5 +1,5 @@
 export * from "./interfaces";
-export { configureJwt, generateAccessToken, verifyAccessToken, generateRefreshToken, hashRefreshToken, getRefreshTokenExpiry, getAccessTokenExpiry, generateDownloadToken, verifyDownloadToken } from "./jwt";
+export { configureJwt, isJwtConfigured, generateAccessToken, verifyAccessToken, generateRefreshToken, hashRefreshToken, getRefreshTokenExpiry, getAccessTokenExpiry, generateDownloadToken, verifyDownloadToken } from "./jwt";
 export type { JwtConfig, AccessTokenPayload, DownloadTokenPayload } from "./jwt";
 export { hashPassword, verifyPassword, validatePasswordStrength } from "./password";
 export { safeCompare } from "./crypto-utils";

package/dist/auth/jwt.d.ts

@@ -30,6 +30,18 @@ export interface AccessTokenPayload {
  * Validates the secret strength to prevent deployment with default/weak secrets.
  */
 export declare function configureJwt(config: JwtConfig): void;
+/**
+ * Has this server been given a JWT secret?
+ *
+ * False on every backend that authenticates through an adapter — Firebase,
+ * Clerk, anything with its own tokens — because nothing calls
+ * {@link configureJwt} there. Signing paths still throw when it is false, since
+ * asking for a token from a server that cannot mint one is a mistake worth
+ * hearing about. Paths whose contract is *"tolerate the absence of auth"* must
+ * ask first: `optionalAuth` crashing a request because this backend does not do
+ * JWT is a 500 on a route that had already decided anonymous was acceptable.
+ */
+export declare function isJwtConfigured(): boolean;
 /**
  * Generate an access token (short-lived, 1 hour by default)
  */

package/dist/{auth-CuC9M2x6.js → auth-CtxXQYV_.js}

@@ -2,38 +2,16 @@ import { createRequire as __createRequire } from "module";
 import process from "process";
 __createRequire(import.meta.url);
 import { i as __toESM, n as __exportAll } from "./rolldown-runtime-DSJWtz9O.js";
-import { _ as ANONYMOUS_USER_ID, v as isAnonymousUid } from "./src-Cum9kox5.js";
-import "./src-_qQ3RNCK.js";
-import { t as isSQLAdmin } from "./backend-CIxN4FVm.js";
+import { S as isAnonymousUid, b as resolveClientListLimit, x as ANONYMOUS_USER_ID } from "./src-CvaxLgnM.js";
+import "./src-Ca6NhxKs.js";
+import { n as isSQLAdmin, t as revokeInternalTableSql } from "./internal-tables-57VaN3o1.js";
 import { t as logger } from "./logger-BYU66ENZ.js";
-import { n as errorHandler, t as ApiError } from "./errors-CgkCzoj7.js";
-import { a as generateRefreshToken, c as getRefreshTokenTtlMs, d as verifyAccessToken, f as verifyDownloadToken, i as generateDownloadToken, l as hashRefreshToken, n as configureJwt, o as getAccessTokenExpiry, p as require_jsonwebtoken, r as generateAccessToken, s as getRefreshTokenExpiry, t as MAX_COOKIE_AGE_MS } from "./jwt-DD6EtpGj.js";
+import { n as errorHandler, t as ApiError } from "./errors-BpudWAVU.js";
+import { a as generateRefreshToken, c as getRefreshTokenTtlMs, f as verifyAccessToken, i as generateDownloadToken, l as hashRefreshToken, m as require_jsonwebtoken, n as configureJwt, o as getAccessTokenExpiry, p as verifyDownloadToken, r as generateAccessToken, s as getRefreshTokenExpiry, t as MAX_COOKIE_AGE_MS, u as isJwtConfigured } from "./jwt-CzeviDcB.js";
 import { createHash, randomBytes, randomInt } from "node:crypto";
 import { Hono } from "hono";
 import { promisify } from "util";
 import { createCipheriv, createDecipheriv, createHash as createHash$1, createHmac, randomBytes as randomBytes$1, randomUUID as randomUUID$1, scrypt, timingSafeEqual } from "crypto";
-/** Hard ceiling clamped onto any client-supplied `limit`, on every surface. */
-var MAX_LIST_LIMIT = 1e3;
-/**
-* Resolve a client-supplied list `limit` into a safe, always-defined value.
-*
-* - A provided limit is coerced to an integer and clamped to `[1, maxLimit]`,
-*   so `0`, negatives, and absurd values can never bypass the cap.
-* - An absent / blank / non-numeric limit falls back to the mode default:
-*   `vectorDefaultLimit` for a vector search, otherwise `defaultLimit`.
-*
-* The return is never `undefined` — no ingress that routes its client limit
-* through this can produce an unbounded read.
-*/
-function resolveClientListLimit(rawLimit, opts = {}) {
-	const maxLimit = opts.maxLimit ?? 1e3;
-	if (rawLimit != null && String(rawLimit).trim() !== "") {
-		const parsed = typeof rawLimit === "number" ? rawLimit : parseInt(String(rawLimit), 10);
-		if (Number.isFinite(parsed)) return Math.min(Math.max(1, Math.floor(parsed)), maxLimit);
-	}
-	return opts.vectorSearch ? opts.vectorDefaultLimit ?? 10 : opts.defaultLimit ?? 50;
-}
-//#endregion
 //#region ../types/src/controllers/storage.ts
 /**
 * Path prefix that marks an object as **public**. Files stored under this
@@ -551,7 +529,7 @@ var requireAdmin = async (c, next) => {
 var optionalAuth = async (c, next) => {
 	if (c.get("user")) return next();
 	const token = extractBearerToken(c.req.header("authorization"));
-	if (token !== void 0) {
+	if (token !== void 0 && isJwtConfigured()) {
 		const payload = verifyAccessToken(token);
 		if (payload) c.set("user", payload);
 	}
@@ -561,6 +539,7 @@ var optionalAuth = async (c, next) => {
 * Extract user from token - for WebSocket authentication
 */
 function extractUserFromToken(token) {
+	if (!isJwtConfigured()) return null;
 	return verifyAccessToken(token);
 }
 /**
@@ -711,7 +690,7 @@ function createAuthMiddleware(options) {
 var queryTokenAuth = async (c, next) => {
 	if (extractBearerToken(c.req.header("authorization")) !== void 0) return next();
 	const queryToken = c.req.query("token");
-	if (queryToken) {
+	if (queryToken && isJwtConfigured()) {
 		const payload = verifyAccessToken(queryToken);
 		if (payload) c.set("user", payload);
 	}
@@ -1491,6 +1470,11 @@ async function finalizeAdminUserCreation(entity, clearPassword, ctx) {
 var scryptAsync = promisify(scrypt);
 var SALT_LENGTH = 32;
 var KEY_LENGTH = 64;
+var SCRYPT_PARAMS = {
+	N: 16384,
+	r: 8,
+	p: 1
+};
 /**
 * Password requirements:
 * - Minimum 8 characters
@@ -1515,7 +1499,7 @@ function validatePasswordStrength(password) {
 */
 async function hashPassword(password) {
 	const salt = randomBytes$1(SALT_LENGTH);
-	const derivedKey = await scryptAsync(password, salt, KEY_LENGTH);
+	const derivedKey = await scryptAsync(password, salt, KEY_LENGTH, SCRYPT_PARAMS);
 	return `${salt.toString("hex")}:${derivedKey.toString("hex")}`;
 }
 /**
@@ -1527,7 +1511,7 @@ async function verifyPassword(password, storedHash) {
 	if (!saltHex || !hashHex) return false;
 	const salt = Buffer.from(saltHex, "hex");
 	const storedKey = Buffer.from(hashHex, "hex");
-	return timingSafeEqual(await scryptAsync(password, salt, KEY_LENGTH), storedKey);
+	return timingSafeEqual(await scryptAsync(password, salt, KEY_LENGTH, SCRYPT_PARAMS), storedKey);
 }
 //#endregion
 //#region src/auth/auth-hooks.ts
@@ -6168,7 +6152,7 @@ function mountSessionRoutes(opts) {
 		clearRefreshCookie(c, config.cookieAuth);
 		const accessToken = extractBearerToken(c.req.header("authorization"));
 		if (ops.afterLogout && accessToken !== void 0) {
-			const { verifyAccessToken } = await import("./jwt-DD6EtpGj.js").then((n) => n.u);
+			const { verifyAccessToken } = await import("./jwt-CzeviDcB.js").then((n) => n.d);
 			const payload = verifyAccessToken(accessToken);
 			if (payload) ops.afterLogout(payload.uid).catch((err) => {
 				logger.error("[AuthHooks] afterLogout error", { error: err instanceof Error ? err.message : err });
@@ -6549,11 +6533,6 @@ function createAuthRoutes(config) {
 		newPassword: string().min(1, "New password is required").max(128)
 	});
 	const refreshSchema = object({ refreshToken: string().min(1).optional() });
-	object({ refreshToken: string().optional() });
-	object({
-		displayName: string().max(255).optional(),
-		photoURL: string().url().max(2048).optional()
-	});
 	/** Parse a Zod schema against the request body, throwing ApiError on failure */
 	function parseBody(schema, body) {
 		const result = schema.safeParse(body);
@@ -8624,6 +8603,7 @@ function createApiKeyStore(driver) {
                     ALTER TABLE ${TABLE}
                     ADD COLUMN IF NOT EXISTS admin BOOLEAN NOT NULL DEFAULT FALSE
                 `);
+				await exec(revokeInternalTableSql("rebase", "api_keys"));
 				logger.info("✅ API keys table ready");
 			} catch (err) {
 				logger.error("❌ Failed to create API keys table", { error: err });
@@ -8939,6 +8919,7 @@ var auth_exports = /* @__PURE__ */ __exportAll({
 	hashToken: () => hashToken,
 	httpMethodToOperation: () => httpMethodToOperation,
 	isApiKeyToken: () => isApiKeyToken,
+	isJwtConfigured: () => isJwtConfigured,
 	isOperationAllowed: () => isOperationAllowed,
 	mountMagicLinkRoutes: () => mountMagicLinkRoutes,
 	optionalAuth: () => optionalAuth,
@@ -8956,6 +8937,6 @@ var auth_exports = /* @__PURE__ */ __exportAll({
 	verifyPassword: () => verifyPassword
 });
 //#endregion
-export { httpMethodToOperation as $, getEmailVerificationTemplate as A, optionalAuth as B, createDataRateLimiter as C, validatePasswordStrength as D, hashPassword as E, createAdapterAuthMiddleware as F, createApiKeyPreAuth as G, queryTokenAuth as H, createAuthMiddleware as I, isApiKeyToken as J, createFunctionApiKeyGuard as K, createRequireAuth as L, getPasswordResetTemplate as M, getUserInvitationTemplate as N, verifyPassword as O, getWelcomeEmailTemplate as P, scopeDataDriver as Q, extractUserFromToken as R, _coercedNumber as S, resolveAuthHooks as T, requireAdmin as U, publicObjectAuth as V, requireAuth as W, extractBearerToken as X, validateApiKey as Y, safeCompare as Z, createBuiltinAuthAdapter as _, createSpotifyProvider as a, object as b, createGitLabProvider as c, createFacebookProvider as d, isOperationAllowed as et, createAppleProvider as f, createGoogleProvider as g, createLinkedinProvider as h, createApiKeyStore as i, resolveClientListLimit as it, getMagicLinkTemplate as j, generateSecurePassword as k, createDiscordProvider as l, createGitHubProvider as m, createCustomAuthAdapter as n, isPublicStoragePath as nt, createSlackProvider as o, createMicrosoftProvider as p, createStorageApiKeyGuard as q, createApiKeyRoutes as r, MAX_LIST_LIMIT as rt, createBitbucketProvider as s, auth_exports as t, PUBLIC_STORAGE_PREFIX as tt, createTwitterProvider as u, ZodNumber as v, MemoryRateLimitStore as w, string as x, _enum as y, fileTokenAuth as z };
+export { httpMethodToOperation as $, getEmailVerificationTemplate as A, optionalAuth as B, createDataRateLimiter as C, validatePasswordStrength as D, hashPassword as E, createAdapterAuthMiddleware as F, createApiKeyPreAuth as G, queryTokenAuth as H, createAuthMiddleware as I, isApiKeyToken as J, createFunctionApiKeyGuard as K, createRequireAuth as L, getPasswordResetTemplate as M, getUserInvitationTemplate as N, verifyPassword as O, getWelcomeEmailTemplate as P, scopeDataDriver as Q, extractUserFromToken as R, _coercedNumber as S, resolveAuthHooks as T, requireAdmin as U, publicObjectAuth as V, requireAuth as W, extractBearerToken as X, validateApiKey as Y, safeCompare as Z, createBuiltinAuthAdapter as _, createSpotifyProvider as a, object as b, createGitLabProvider as c, createFacebookProvider as d, isOperationAllowed as et, createAppleProvider as f, createGoogleProvider as g, createLinkedinProvider as h, createApiKeyStore as i, getMagicLinkTemplate as j, generateSecurePassword as k, createDiscordProvider as l, createGitHubProvider as m, createCustomAuthAdapter as n, isPublicStoragePath as nt, createSlackProvider as o, createMicrosoftProvider as p, createStorageApiKeyGuard as q, createApiKeyRoutes as r, createBitbucketProvider as s, auth_exports as t, PUBLIC_STORAGE_PREFIX as tt, createTwitterProvider as u, ZodNumber as v, MemoryRateLimitStore as w, string as x, _enum as y, fileTokenAuth as z };
 
-//# sourceMappingURL=auth-CuC9M2x6.js.map
+//# sourceMappingURL=auth-CtxXQYV_.js.map