@shohaghinfo/aerojs 0.2.0 → 0.4.0

package/AGENTS.md

@@ -707,3 +707,229 @@ When asked to build or modify any feature in an AeroJS project:
    npm run build
    npm test
    ```
+
+---
+
+## 11. Enterprise Capabilities Reference (v0.3.0)
+
+### 11.1 Fluent HTTP Client (`Http`)
+```typescript
+import { Http } from 'aerojs';
+
+const res = await Http.baseUrl('https://api.example.com')
+  .withToken('auth-token')
+  .timeout(5000)
+  .retry(3, 100)
+  .get('/data', { page: 1 });
+
+if (res.successful) {
+  const data = res.json();
+}
+```
+
+### 11.2 SMTP Mail Transport (`Mail`)
+```typescript
+import { Mail } from 'aerojs';
+
+Mail.configure({
+  default: 'smtp',
+  mailers: {
+    smtp: {
+      driver: 'smtp',
+      host: process.env.SMTP_HOST || '127.0.0.1',
+      port: Number(process.env.SMTP_PORT) || 587,
+      auth: { user: process.env.SMTP_USER!, pass: process.env.SMTP_PASS! },
+    },
+  },
+});
+
+await Mail.send((msg) => {
+  msg.to('user@example.com')
+     .subject('Welcome')
+     .html('<h1>Welcome to AeroJS</h1>');
+});
+```
+
+### 11.3 Redis Rate Limiter & Redis Queue
+```typescript
+import { rateLimit, RedisRateLimitStore, RedisClient, Queue } from 'aerojs';
+
+const redis = new RedisClient({ host: '127.0.0.1', port: 6379 });
+
+// Rate Limiter
+app.use(rateLimit({
+  windowMs: 60_000,
+  max: 100,
+  store: new RedisRateLimitStore({ client: redis, prefix: 'rl:api:' }),
+}));
+
+// Queue
+Queue.configure({
+  default: 'redis',
+  connections: {
+    redis: { driver: 'redis', redis },
+  },
+});
+```
+
+### 11.4 OAuth 2.0 Social Login (`OAuth`)
+```typescript
+import { OAuth } from 'aerojs';
+
+router.get('/auth/google', (ctx) => ctx.redirect(OAuth.driver('google').getRedirectUrl()));
+router.get('/auth/google/callback', async (ctx) => {
+  const { user } = await OAuth.driver('google').handleCallback(ctx.query.code as string);
+  ctx.json({ user });
+});
+```
+
+### 11.5 Multi-Channel Notifications (`Notifications`, `Notification`)
+```typescript
+import { Notification, Notifications, MailMessage } from 'aerojs';
+
+class OrderAlertNotification extends Notification {
+  via() { return ['mail', 'database', 'broadcast']; }
+  toMail(u: any) { return new MailMessage().subject('Alert').text('Hello'); }
+  toDatabase(u: any) { return { alert: 'Order Confirmed' }; }
+}
+
+await Notifications.send(user, new OrderAlertNotification());
+```
+
+### 11.6 Tamper-Proof Signed URLs (`UrlSigner`, `validateSignedUrl`)
+```typescript
+import { UrlSigner, validateSignedUrl, Storage } from 'aerojs';
+
+// Generate temporary signed link
+const downloadUrl = await Storage.temporaryUrl('invoices/inv-101.pdf', 900);
+
+// Validate in route
+router.get('/secure/download', validateSignedUrl(), async (ctx) => {
+  ctx.json({ secure: true });
+});
+```
+
+### 11.7 Extended CLI Generators (`aero make:*`)
+```bash
+aero make:job ProcessPayment
+aero make:mail OrderReceipt
+aero make:policy PatientPolicy
+aero make:event PatientAdmitted
+aero make:listener NotifyDoctor
+```
+
+---
+
+## 12. Advanced Enterprise Architecture (v0.4.0)
+
+### 12.1 Field-Level AES-256-GCM Encryption (`Crypt`, `@encrypted`)
+Protect sensitive compliance data (SSN, medical records, credit cards, credentials) transparently at rest:
+
+```typescript
+import { Model, encrypted, Crypt } from 'aerojs';
+
+// Encrypt standalone strings or objects
+const ciphertext = Crypt.encrypt('secret-data');
+const plaintext = Crypt.decrypt(ciphertext);
+
+// Model field-level transparent encryption
+export class Patient extends Model {
+  public static override table = 'patients';
+  public static override primaryKey = 'id';
+  public static override fillable = ['name', 'ssn', 'medical_record', 'diagnosis'];
+  
+  // Mark fields for automatic AES-256-GCM encryption
+  public static override encrypted = ['ssn', 'medical_record'];
+
+  // Or use TypeScript property decorator:
+  // @encrypted()
+  // public ssn!: string;
+}
+
+// Automatically encrypted on .save() and decrypted on .find() / .all() / .toJSON()
+const patient = await Patient.create({
+  name: 'John Doe',
+  ssn: '123-45-6789',
+  medical_record: 'Asthma diagnosis',
+});
+```
+
+### 12.2 Database Read Replicas & Master-Slave Routing
+Scale database read throughput across horizontal replica pools with automatic write pinning and master-slave routing:
+
+```typescript
+import { Database, DB } from 'aerojs';
+
+Database.configureReplication({
+  write: { client: 'pg', connection: { host: 'primary.db.internal' } },
+  read: [
+    { client: 'pg', connection: { host: 'replica-1.db.internal' } },
+    { client: 'pg', connection: { host: 'replica-2.db.internal' } },
+  ],
+});
+
+// SELECT queries automatically balance across replicas in round-robin:
+const users = await DB.table('users').where('is_active', true).get();
+
+// INSERT / UPDATE / DELETE automatically target the primary write connection:
+await DB.table('users').insert({ name: 'Alice', email: 'alice@example.com' });
+
+// Read-your-own-writes consistency via .useWriteConnection():
+const freshUser = await DB.table('users').useWriteConnection().where('email', 'alice@example.com').first();
+```
+
+### 12.3 Interactive Queue Horizon Dashboard
+A dark-mode glassmorphic real-time administration dashboard for inspecting background job queues and metrics:
+
+```typescript
+import { app } from './bootstrap.js';
+
+// Mount real-time queue inspector GUI & REST API
+app.useQueueDashboard('/__aero/queue', {
+  auth: (ctx) => ctx.state?.user?.role === 'admin', // Optional authorization guard
+});
+```
+- Web UI: Navigate to `http://localhost:3000/__aero/queue`
+- REST Endpoints:
+  - `GET /__aero/queue/api/metrics` — Active jobs, processed counts, failure rates, queue throughput.
+  - `GET /__aero/queue/api/failed` — Failed job payloads, error messages, and stack traces.
+  - `POST /__aero/queue/api/retry/:id` — Instant dead-letter job retry.
+  - `POST /__aero/queue/api/retry-all` — Batch retry all failed jobs.
+  - `DELETE /__aero/queue/api/purge-all` — Purge failed jobs.
+
+### 12.4 Encrypted Stateless Cookie Session Driver
+Stateless, horizontally scalable user session storage secured via AES-256-GCM authenticated encryption:
+
+```typescript
+import { SessionManager, CookieSessionDriver } from 'aerojs';
+
+const sessionManager = new SessionManager({
+  driver: 'cookie',
+  secret: process.env.APP_KEY, // 32-byte secret key
+  cookie: {
+    name: 'aero_session',
+    httpOnly: true,
+    secure: true,
+    sameSite: 'lax',
+  },
+});
+```
+
+### 12.5 Request Fingerprinting & Anti-Hijack Guard
+Prevent session hijacking and credential replay attacks across network switches or spoofed browsers:
+
+```typescript
+import { fingerprintGuard, RequestFingerprint } from 'aerojs';
+
+// Generate or inspect request fingerprint
+const hash = RequestFingerprint.generate(ctx, { checkIp: false });
+
+// Bind to security middleware stack
+app.use(fingerprintGuard({
+  strict: true,
+  checkIp: false, // Set true for high-security intranets or false for mobile networks
+  onHijackAttempt: (ctx, expected, actual) => {
+    ctx.logger?.warn(`Session hijacking attempt detected: expected ${expected}, got ${actual}`);
+  },
+}));
+```

package/README.md

@@ -62,6 +62,9 @@
   32. [Distributed Redis Rate Limiter (`RedisRateLimitStore`)](#32-distributed-redis-rate-limiter-redisratelimitstore)
   33. [Redis Queue Driver with DLQ (`RedisQueueDriver`)](#33-redis-queue-driver-with-dlq-redisqueuedriver)
   34. [Fluent HTTP Client (`Http`, `HttpResponse`)](#34-fluent-http-client-http-httpresponse)
+  35. [OAuth 2.0 & Social Login (`OAuth`, Google, GitHub)](#35-oauth-20--social-login-oauth-google-github)
+  36. [Multi-Channel Notifications (`Notification`, `Notifications`)](#36-multi-channel-notifications-notification-notifications)
+  37. [Tamper-Proof Signed URLs (`UrlSigner`, `validateSignedUrl`)](#37-tamper-proof-signed-urls-urlsigner-validatesignedurl)
 - [Performance, Size & Advantages](#-performance-size--advantages)
 - [Comparison Matrix](#-comparison-matrix)
 - [License](#-license)
@@ -1329,6 +1332,253 @@ Http.assertSent((req) => req.url.includes('/billing') && req.method === 'POST');
 
 ---
 
+### 35. OAuth 2.0 & Social Login (`OAuth`, Google, GitHub)
+
+Authenticate users with Google, GitHub, or custom OAuth 2.0 identity providers without external libraries.
+
+```typescript
+import { OAuth, router } from '@shohaghinfo/aerojs';
+
+// 1. Configure Providers
+OAuth.configure({
+  providers: {
+    google: {
+      clientId: process.env.GOOGLE_CLIENT_ID!,
+      clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
+      redirectUri: 'https://myapp.com/auth/google/callback',
+    },
+    github: {
+      clientId: process.env.GITHUB_CLIENT_ID!,
+      clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+      redirectUri: 'https://myapp.com/auth/github/callback',
+    },
+  },
+});
+
+// 2. Redirect to Provider
+router.get('/auth/google', (ctx) => {
+  ctx.redirect(OAuth.driver('google').getRedirectUrl());
+});
+
+// 3. Handle Callback
+router.get('/auth/google/callback', async (ctx) => {
+  const code = ctx.query.code as string;
+  const { user, accessToken } = await OAuth.driver('google').handleCallback(code);
+
+  console.log('Logged in user:', user.name, user.email, user.avatarUrl);
+  ctx.json({ success: true, user });
+});
+```
+
+---
+
+### 36. Multi-Channel Notifications (`Notification`, `Notifications`)
+
+Deliver notifications simultaneously across multiple delivery channels (Email, Database, Realtime Broadcast, SMS) with unified syntax.
+
+```typescript
+import { Notification, Notifications, MailMessage } from '@shohaghinfo/aerojs';
+
+class OrderShippedNotification extends Notification {
+  constructor(public order: any) {
+    super();
+  }
+
+  // Choose delivery channels
+  public via(user: any): string[] {
+    return ['mail', 'database', 'broadcast'];
+  }
+
+  public toMail(user: any): MailMessage {
+    const msg = new MailMessage();
+    return msg.subject(`Order #${this.order.id} Shipped`)
+              .html(`<h1>Your package is on its way!</h1>`);
+  }
+
+  public toDatabase(user: any) {
+    return { orderId: this.order.id, trackingNumber: 'TRK-98124' };
+  }
+
+  public toBroadcast(user: any) {
+    return {
+      channel: `user.${user.id}`,
+      event: 'OrderShipped',
+      data: { orderId: this.order.id },
+    };
+  }
+}
+
+// Dispatch to single user or array of users
+await Notifications.send(customer, new OrderShippedNotification(order));
+```
+
+---
+
+### 37. Tamper-Proof Signed URLs (`UrlSigner`, `validateSignedUrl`)
+
+Generate time-limited, cryptographically verified URLs for private downloads, password resets, or webhooks.
+
+```typescript
+import { UrlSigner, validateSignedUrl, Storage, router } from '@shohaghinfo/aerojs';
+
+// 1. Generate 15-minute temporary download link
+const downloadUrl = await Storage.temporaryUrl('invoices/inv-2026.pdf', 900);
+// Returns: /storage/invoices/inv-2026.pdf?expires=1790924000&signature=8f9a2...
+
+// 2. Protect route with middleware
+router.get('/secure/download', validateSignedUrl(), async (ctx) => {
+  ctx.json({ data: 'Confidential file contents' });
+});
+
+// 3. Or verify inline inside controller:
+if (!ctx.hasValidSignature()) {
+  ctx.status(403).json({ error: 'Signature invalid or expired' });
+  return;
+}
+```
+
+---
+
+### 38. Field-Level Database Encryption (`@encrypted()` & `Crypt`)
+
+Ensure HIPAA, GDPR, and PCI-DSS compliance by transparently encrypting sensitive database columns at rest using authenticated **AES-256-GCM** encryption:
+
+```typescript
+import { Model, encrypted, Crypt } from '@shohaghinfo/aerojs';
+
+class PatientRecord extends Model {
+  public static override table = 'patients';
+  public static override fillable = ['name', 'ssn', 'medical_history'];
+  public static override encrypted = ['ssn', 'medical_history'];
+
+  @encrypted()
+  public ssn!: string;
+}
+
+// 1. Create - Data is stored as aero:enc:<iv>:<tag>:<ciphertext> in the database
+const patient = await PatientRecord.create({
+  name: 'Rahim Khan',
+  ssn: '019-99-8888',
+  medical_history: 'Diabetes Type 2, Hypertension',
+});
+
+// 2. Read - Transparently decrypted on fetch
+const loaded = await PatientRecord.find(patient.id);
+console.log(loaded.ssn); // '019-99-8888' (Plaintext in app code)
+
+// 3. Arbitrary payload encryption via Crypt facade:
+const cipher = Crypt.encrypt({ account: '123456', balance: 5000 });
+const data = Crypt.decrypt(cipher);
+```
+
+---
+
+### 39. Database Read Replicas & Master-Slave Routing
+
+Route all high-volume read traffic to replica pools with round-robin load distribution while ensuring writes and transactions hit the primary master:
+
+```typescript
+import { Database, DB } from '@shohaghinfo/aerojs';
+
+// Configure replication pool
+Database.configureReplication({
+  write: 'primary_master',
+  read: ['replica_east_1', 'replica_east_2', 'replica_west_1'],
+});
+
+// 1. Automatically queries a read replica (round-robin balanced)
+const users = await DB.table('users').where('active', true).get();
+
+// 2. Force reading from the master node for read-your-own-writes consistency
+const freshUser = await DB.table('users').useWriteConnection().where('id', 1).first();
+
+// 3. Direct write queries always execute on the primary write database
+await DB.table('users').where('id', 1).update({ status: 'verified' });
+```
+
+---
+
+### 40. Interactive Queue Horizon Dashboard (`app.useQueueDashboard`)
+
+A built-in, dark-mode developer control panel for real-time background task monitoring and failure recovery:
+
+```typescript
+import { Aero } from '@shohaghinfo/aerojs';
+
+const app = new Aero();
+
+// Mount the dashboard with optional role-based protection
+app.useQueueDashboard('/__aero/queue', {
+  title: 'My Hospital Queue Horizon',
+  pollInterval: 3, // auto-refresh every 3s
+  auth: (ctx) => ctx.session?.get('user')?.role === 'superadmin',
+});
+```
+
+- **Live GUI (`GET /__aero/queue`)**: Glassmorphic dark UI with live throughput KPI cards, queues status, and dead letter queue inspector.
+- **REST APIs**:
+  - `GET /__aero/queue/api/metrics` — JSON statistics
+  - `GET /__aero/queue/api/failed` — List dead-letter failed jobs with full stack traces
+  - `POST /__aero/queue/api/retry/:id` — Retry single failed task
+  - `DELETE /__aero/queue/api/failed/:id` — Delete failed task
+  - `POST /__aero/queue/api/retry-all` — Batch retry all failed jobs
+  - `DELETE /__aero/queue/api/purge-all` — Purge dead letter queue
+
+---
+
+### 41. Encrypted Stateless Cookie Session Driver (`CookieSessionDriver`)
+
+Store session state entirely on the client within an encrypted, authenticated, and tamper-proof HTTP-only cookie using AES-256-GCM. Ideal for serverless, Edge, and horizontal autoscaling:
+
+```typescript
+import { Aero, sessionPlugin, CookieSessionDriver } from '@shohaghinfo/aerojs';
+
+const app = new Aero();
+
+app.use(sessionPlugin({
+  driver: new CookieSessionDriver(),
+  cookieName: 'aero_session',
+  lifetime: 8 * 3600, // 8-hour shift
+  cookie: { httpOnly: true, secure: true, sameSite: 'lax' },
+}));
+
+app.post('/login', async (ctx) => {
+  await ctx.session.put('user', { id: 1, role: 'physician' });
+  ctx.json({ loggedIn: true });
+});
+```
+
+---
+
+### 42. Client Request Fingerprinting & Anti-Hijacking Guard
+
+Prevent stolen session cookies and session fixation attacks by fingerprinting client browser characteristics (User-Agent, client IP, accept headers):
+
+```typescript
+import { Aero, sessionPlugin, fingerprintGuard, RequestFingerprint } from '@shohaghinfo/aerojs';
+
+const app = new Aero();
+app.use(sessionPlugin());
+
+// Automatically binds and verifies client fingerprint on every session request
+app.use(fingerprintGuard({
+  ip: true,
+  userAgent: true,
+  acceptLanguage: true,
+  onMismatch: (ctx) => {
+    ctx.status(401).json({ error: 'Session hijacked from an unauthorized device' });
+  },
+}));
+
+// Or generate manually for audit logs:
+app.get('/audit', (ctx) => {
+  const fp = RequestFingerprint.generate(ctx);
+  ctx.json({ fingerprint: fp });
+});
+```
+
+---
+
 ## 📊 Comparison Matrix
 
 | Feature | Express | Koa | Fastify | AdonisJS | **AeroJS** |

package/dist/auth/index.d.ts

@@ -1,2 +1,3 @@
 export * from './policy.js';
+export * from './oauth/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC"}

package/dist/auth/index.js

@@ -1,2 +1,3 @@
 export * from './policy.js';
+export * from './oauth/index.js';
 //# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC"}

package/dist/auth/oauth/github-driver.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @file github-driver.ts
+ * @description GitHub OAuth 2.0 social login provider for AeroJS.
+ */
+import type { OAuthDriver, OAuthDriverConfig, OAuthUser, OAuthCallbackResult } from './oauth-driver.js';
+export declare class GitHubOAuthDriver implements OAuthDriver {
+    private config;
+    constructor(config: OAuthDriverConfig);
+    getRedirectUrl(options?: {
+        state?: string;
+        scopes?: string[];
+    }): string;
+    getUserFromToken(accessToken: string): Promise<OAuthUser>;
+    handleCallback(code: string): Promise<OAuthCallbackResult>;
+}
+//# sourceMappingURL=github-driver.d.ts.map

package/dist/auth/oauth/github-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-driver.d.ts","sourceRoot":"","sources":["../../../src/auth/oauth/github-driver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxG,qBAAa,iBAAkB,YAAW,WAAW;IACnD,OAAO,CAAC,MAAM,CAAoB;gBAEtB,MAAM,EAAE,iBAAiB;IAO9B,cAAc,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GAAG,MAAM;IAerE,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAkCzD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAsBxE"}

package/dist/auth/oauth/github-driver.js

@@ -0,0 +1,79 @@
+/**
+ * @file github-driver.ts
+ * @description GitHub OAuth 2.0 social login provider for AeroJS.
+ */
+import { Http } from '../../http/http.js';
+export class GitHubOAuthDriver {
+    config;
+    constructor(config) {
+        this.config = {
+            scopes: ['read:user', 'user:email'],
+            ...config,
+        };
+    }
+    getRedirectUrl(options = {}) {
+        const scopes = options.scopes || this.config.scopes || ['read:user', 'user:email'];
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            redirect_uri: this.config.redirectUri,
+            scope: scopes.join(' '),
+        });
+        if (options.state) {
+            params.set('state', options.state);
+        }
+        return `https://github.com/login/oauth/authorize?${params.toString()}`;
+    }
+    async getUserFromToken(accessToken) {
+        const res = await Http.withToken(accessToken)
+            .withHeaders({ 'User-Agent': 'AeroJS-OAuth' })
+            .get('https://api.github.com/user');
+        res.throw();
+        const data = res.json();
+        // If primary email is private in GitHub, fetch from /user/emails
+        let email = data.email || null;
+        if (!email) {
+            try {
+                const emailsRes = await Http.withToken(accessToken)
+                    .withHeaders({ 'User-Agent': 'AeroJS-OAuth' })
+                    .get('https://api.github.com/user/emails');
+                if (emailsRes.successful) {
+                    const emails = emailsRes.json();
+                    const primary = emails.find((e) => e.primary && e.verified) || emails[0];
+                    if (primary)
+                        email = primary.email;
+                }
+            }
+            catch {
+                // Ignored
+            }
+        }
+        return {
+            id: String(data.id),
+            email,
+            name: data.name || data.login || null,
+            avatarUrl: data.avatar_url || null,
+            raw: data,
+        };
+    }
+    async handleCallback(code) {
+        const res = await Http.acceptJson()
+            .withHeaders({ 'User-Agent': 'AeroJS-OAuth' })
+            .post('https://github.com/login/oauth/access_token', {
+            client_id: this.config.clientId,
+            client_secret: this.config.clientSecret,
+            code,
+            redirect_uri: this.config.redirectUri,
+        });
+        res.throw();
+        const tokenData = res.json();
+        const accessToken = tokenData.access_token;
+        const user = await this.getUserFromToken(accessToken);
+        return {
+            accessToken,
+            tokenType: tokenData.token_type,
+            scope: tokenData.scope,
+            user,
+        };
+    }
+}
+//# sourceMappingURL=github-driver.js.map

package/dist/auth/oauth/github-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-driver.js","sourceRoot":"","sources":["../../../src/auth/oauth/github-driver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE1C,MAAM,OAAO,iBAAiB;IACpB,MAAM,CAAoB;IAElC,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG;YACZ,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;YACnC,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAEM,cAAc,CAAC,UAAiD,EAAE;QACvE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACxB,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,4CAA4C,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzE,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QAC/C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;aAC1C,WAAW,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;aAC7C,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACtC,GAAG,CAAC,KAAK,EAAE,CAAC;QAEZ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAExB,iEAAiE;QACjE,IAAI,KAAK,GAAkB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;qBAChD,WAAW,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;qBAC7C,GAAG,CAAC,oCAAoC,CAAC,CAAC;gBAC7C,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;oBAChC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;oBAC9E,IAAI,OAAO;wBAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;gBACrC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU;YACZ,CAAC;QACH,CAAC;QAED,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,KAAK;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI;YACrC,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YAClC,GAAG,EAAE,IAAI;SACV,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,IAAY;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE;aAChC,WAAW,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;aAC7C,IAAI,CAAC,6CAA6C,EAAE;YACnD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,IAAI;YACJ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;SACtC,CAAC,CAAC;QACL,GAAG,CAAC,KAAK,EAAE,CAAC;QAEZ,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,SAAS,CAAC,YAAY,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAEtD,OAAO;YACL,WAAW;YACX,SAAS,EAAE,SAAS,CAAC,UAAU;YAC/B,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,IAAI;SACL,CAAC;IACJ,CAAC;CACF"}

package/dist/auth/oauth/google-driver.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @file google-driver.ts
+ * @description Google OAuth 2.0 social login provider for AeroJS.
+ */
+import type { OAuthDriver, OAuthDriverConfig, OAuthUser, OAuthCallbackResult } from './oauth-driver.js';
+export declare class GoogleOAuthDriver implements OAuthDriver {
+    private config;
+    constructor(config: OAuthDriverConfig);
+    getRedirectUrl(options?: {
+        state?: string;
+        scopes?: string[];
+    }): string;
+    getUserFromToken(accessToken: string): Promise<OAuthUser>;
+    handleCallback(code: string): Promise<OAuthCallbackResult>;
+}
+//# sourceMappingURL=google-driver.d.ts.map

package/dist/auth/oauth/google-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-driver.d.ts","sourceRoot":"","sources":["../../../src/auth/oauth/google-driver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxG,qBAAa,iBAAkB,YAAW,WAAW;IACnD,OAAO,CAAC,MAAM,CAAoB;gBAEtB,MAAM,EAAE,iBAAiB;IAO9B,cAAc,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GAAG,MAAM;IAkBrE,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAczD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAuBxE"}