@shware/security 2.5.3 → 3.0.0

package/dist/email/schema.cjs

@@ -1,41 +1,16 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/email/schema.ts
-var schema_exports = {};
-__export(schema_exports, {
-  loginEmailSchema: () => loginEmailSchema,
-  sendEmailVerificationCodeSchema: () => sendEmailVerificationCodeSchema
-});
-module.exports = __toCommonJS(schema_exports);
-var import_mini = require("zod/mini");
-var sendEmailVerificationCodeSchema = (0, import_mini.object)({
-  email: (0, import_mini.email)().check((0, import_mini.maxLength)(320)),
-  turnstileToken: (0, import_mini.string)().check((0, import_mini.maxLength)(2048))
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let zod_mini = require("zod/mini");
+//#region src/email/schema.ts
+const sendEmailVerificationCodeSchema = (0, zod_mini.object)({
+	email: (0, zod_mini.email)().check((0, zod_mini.maxLength)(320)),
+	turnstileToken: (0, zod_mini.string)().check((0, zod_mini.maxLength)(2048))
 });
-var loginEmailSchema = (0, import_mini.object)({
-  email: (0, import_mini.email)().check((0, import_mini.maxLength)(320)),
-  verificationCode: (0, import_mini.string)().check((0, import_mini.regex)(/^\d{6}$/))
-});
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  loginEmailSchema,
-  sendEmailVerificationCodeSchema
+const loginEmailSchema = (0, zod_mini.object)({
+	email: (0, zod_mini.email)().check((0, zod_mini.maxLength)(320)),
+	verificationCode: (0, zod_mini.string)().check((0, zod_mini.regex)(/^\d{6}$/))
 });
+//#endregion
+exports.loginEmailSchema = loginEmailSchema;
+exports.sendEmailVerificationCodeSchema = sendEmailVerificationCodeSchema;
+
 //# sourceMappingURL=schema.cjs.map

package/dist/email/schema.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/email/schema.ts"],"sourcesContent":["import { email, maxLength, object, regex, string } from 'zod/mini';\n\nexport const sendEmailVerificationCodeSchema = object({\n  email: email().check(maxLength(320)),\n  turnstileToken: string().check(maxLength(2048)),\n});\n\nexport const loginEmailSchema = object({\n  email: email().check(maxLength(320)),\n  verificationCode: string().check(regex(/^\\d{6}$/)),\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAwD;AAEjD,IAAM,sCAAkC,oBAAO;AAAA,EACpD,WAAO,mBAAM,EAAE,UAAM,uBAAU,GAAG,CAAC;AAAA,EACnC,oBAAgB,oBAAO,EAAE,UAAM,uBAAU,IAAI,CAAC;AAChD,CAAC;AAEM,IAAM,uBAAmB,oBAAO;AAAA,EACrC,WAAO,mBAAM,EAAE,UAAM,uBAAU,GAAG,CAAC;AAAA,EACnC,sBAAkB,oBAAO,EAAE,UAAM,mBAAM,SAAS,CAAC;AACnD,CAAC;","names":[]}
+{"version":3,"file":"schema.cjs","names":[],"sources":["../../src/email/schema.ts"],"sourcesContent":["import { email, maxLength, object, regex, string } from 'zod/mini';\n\nexport const sendEmailVerificationCodeSchema = object({\n  email: email().check(maxLength(320)),\n  turnstileToken: string().check(maxLength(2048)),\n});\n\nexport const loginEmailSchema = object({\n  email: email().check(maxLength(320)),\n  verificationCode: string().check(regex(/^\\d{6}$/)),\n});\n"],"mappings":";;;AAEA,MAAa,mCAAA,GAAA,SAAA,OAAA,CAAyC;CACpD,QAAA,GAAA,SAAA,MAAA,CAAa,CAAC,CAAC,OAAA,GAAA,SAAA,UAAA,CAAgB,GAAG,CAAC;CACnC,iBAAA,GAAA,SAAA,OAAA,CAAuB,CAAC,CAAC,OAAA,GAAA,SAAA,UAAA,CAAgB,IAAI,CAAC;AAChD,CAAC;AAED,MAAa,oBAAA,GAAA,SAAA,OAAA,CAA0B;CACrC,QAAA,GAAA,SAAA,MAAA,CAAa,CAAC,CAAC,OAAA,GAAA,SAAA,UAAA,CAAgB,GAAG,CAAC;CACnC,mBAAA,GAAA,SAAA,OAAA,CAAyB,CAAC,CAAC,OAAA,GAAA,SAAA,MAAA,CAAY,SAAS,CAAC;AACnD,CAAC"}

package/dist/email/schema.d.cts

@@ -1,13 +1,12 @@
-import * as zod_v4_core from 'zod/v4/core';
-import * as zod_mini from 'zod/mini';
-
-declare const sendEmailVerificationCodeSchema: zod_mini.ZodMiniObject<{
-    email: zod_mini.ZodMiniEmail;
-    turnstileToken: zod_mini.ZodMiniString<string>;
-}, zod_v4_core.$strip>;
-declare const loginEmailSchema: zod_mini.ZodMiniObject<{
-    email: zod_mini.ZodMiniEmail;
-    verificationCode: zod_mini.ZodMiniString<string>;
-}, zod_v4_core.$strip>;
-
+//#region src/email/schema.d.ts
+declare const sendEmailVerificationCodeSchema: import("zod/mini").ZodMiniObject<{
+  email: import("zod/mini").ZodMiniEmail;
+  turnstileToken: import("zod/mini").ZodMiniString<string>;
+}, import("zod/v4/core").$strip>;
+declare const loginEmailSchema: import("zod/mini").ZodMiniObject<{
+  email: import("zod/mini").ZodMiniEmail;
+  verificationCode: import("zod/mini").ZodMiniString<string>;
+}, import("zod/v4/core").$strip>;
+//#endregion
 export { loginEmailSchema, sendEmailVerificationCodeSchema };
+//# sourceMappingURL=schema.d.cts.map

package/dist/email/schema.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.cts","names":[],"sources":["../../src/email/schema.ts"],"mappings":";cAEa,oDAA+B;;;;cAK/B,qCAAgB"}

package/dist/email/schema.d.mts

@@ -0,0 +1,12 @@
+//#region src/email/schema.d.ts
+declare const sendEmailVerificationCodeSchema: import("zod/mini").ZodMiniObject<{
+  email: import("zod/mini").ZodMiniEmail;
+  turnstileToken: import("zod/mini").ZodMiniString<string>;
+}, import("zod/v4/core").$strip>;
+declare const loginEmailSchema: import("zod/mini").ZodMiniObject<{
+  email: import("zod/mini").ZodMiniEmail;
+  verificationCode: import("zod/mini").ZodMiniString<string>;
+}, import("zod/v4/core").$strip>;
+//#endregion
+export { loginEmailSchema, sendEmailVerificationCodeSchema };
+//# sourceMappingURL=schema.d.mts.map

package/dist/email/schema.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.mts","names":[],"sources":["../../src/email/schema.ts"],"mappings":";cAEa,oDAA+B;;;;cAK/B,qCAAgB"}

package/dist/email/schema.mjs

@@ -1,15 +1,14 @@
-// src/email/schema.ts
 import { email, maxLength, object, regex, string } from "zod/mini";
-var sendEmailVerificationCodeSchema = object({
-  email: email().check(maxLength(320)),
-  turnstileToken: string().check(maxLength(2048))
+//#region src/email/schema.ts
+const sendEmailVerificationCodeSchema = object({
+	email: email().check(maxLength(320)),
+	turnstileToken: string().check(maxLength(2048))
 });
-var loginEmailSchema = object({
-  email: email().check(maxLength(320)),
-  verificationCode: string().check(regex(/^\d{6}$/))
+const loginEmailSchema = object({
+	email: email().check(maxLength(320)),
+	verificationCode: string().check(regex(/^\d{6}$/))
 });
-export {
-  loginEmailSchema,
-  sendEmailVerificationCodeSchema
-};
+//#endregion
+export { loginEmailSchema, sendEmailVerificationCodeSchema };
+
 //# sourceMappingURL=schema.mjs.map

package/dist/email/schema.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/email/schema.ts"],"sourcesContent":["import { email, maxLength, object, regex, string } from 'zod/mini';\n\nexport const sendEmailVerificationCodeSchema = object({\n  email: email().check(maxLength(320)),\n  turnstileToken: string().check(maxLength(2048)),\n});\n\nexport const loginEmailSchema = object({\n  email: email().check(maxLength(320)),\n  verificationCode: string().check(regex(/^\\d{6}$/)),\n});\n"],"mappings":";AAAA,SAAS,OAAO,WAAW,QAAQ,OAAO,cAAc;AAEjD,IAAM,kCAAkC,OAAO;AAAA,EACpD,OAAO,MAAM,EAAE,MAAM,UAAU,GAAG,CAAC;AAAA,EACnC,gBAAgB,OAAO,EAAE,MAAM,UAAU,IAAI,CAAC;AAChD,CAAC;AAEM,IAAM,mBAAmB,OAAO;AAAA,EACrC,OAAO,MAAM,EAAE,MAAM,UAAU,GAAG,CAAC;AAAA,EACnC,kBAAkB,OAAO,EAAE,MAAM,MAAM,SAAS,CAAC;AACnD,CAAC;","names":[]}
+{"version":3,"file":"schema.mjs","names":[],"sources":["../../src/email/schema.ts"],"sourcesContent":["import { email, maxLength, object, regex, string } from 'zod/mini';\n\nexport const sendEmailVerificationCodeSchema = object({\n  email: email().check(maxLength(320)),\n  turnstileToken: string().check(maxLength(2048)),\n});\n\nexport const loginEmailSchema = object({\n  email: email().check(maxLength(320)),\n  verificationCode: string().check(regex(/^\\d{6}$/)),\n});\n"],"mappings":";;AAEA,MAAa,kCAAkC,OAAO;CACpD,OAAO,MAAM,CAAC,CAAC,MAAM,UAAU,GAAG,CAAC;CACnC,gBAAgB,OAAO,CAAC,CAAC,MAAM,UAAU,IAAI,CAAC;AAChD,CAAC;AAED,MAAa,mBAAmB,OAAO;CACrC,OAAO,MAAM,CAAC,CAAC,MAAM,UAAU,GAAG,CAAC;CACnC,kBAAkB,OAAO,CAAC,CAAC,MAAM,MAAM,SAAS,CAAC;AACnD,CAAC"}

package/dist/index.cjs

@@ -1,54 +1,18 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/index.ts
-var index_exports = {};
-__export(index_exports, {
-  ALL_PROVIDERS: () => import_core.ALL_PROVIDERS,
-  Auth: () => import_auth.Auth,
-  DBIndexedSessionRepository: () => import_db.DBIndexedSessionRepository,
-  OAuth2Client: () => import_client.OAuth2Client,
-  PATH: () => import_auth.PATH,
-  PRINCIPAL_NAME_INDEX_NAME: () => import_common.PRINCIPAL_NAME_INDEX_NAME,
-  Provider: () => import_core.Provider,
-  RedisIndexedSessionRepository: () => import_redis.RedisIndexedSessionRepository,
-  RedisKVRepository: () => import_redis.RedisKVRepository,
-  oauth2RedirectQuerySchema: () => import_client.oauth2RedirectQuerySchema
-});
-module.exports = __toCommonJS(index_exports);
-var import_auth = require("./auth/index.cjs");
-var import_client = require("./oauth2/client.cjs");
-var import_redis = require("./session/redis.cjs");
-var import_db = require("./session/db.cjs");
-var import_common = require("./session/common.cjs");
-var import_core = require("./core/index.cjs");
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  ALL_PROVIDERS,
-  Auth,
-  DBIndexedSessionRepository,
-  OAuth2Client,
-  PATH,
-  PRINCIPAL_NAME_INDEX_NAME,
-  Provider,
-  RedisIndexedSessionRepository,
-  RedisKVRepository,
-  oauth2RedirectQuerySchema
-});
-//# sourceMappingURL=index.cjs.map
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_oauth2_client = require("./oauth2/client.cjs");
+const require_session_common = require("./session/common.cjs");
+const require_auth_index = require("./auth/index.cjs");
+const require_session_redis = require("./session/redis.cjs");
+const require_session_db = require("./session/db.cjs");
+const require_core_index = require("./core/index.cjs");
+const require_oauth2_types = require("./oauth2/types.cjs");
+exports.Auth = require_auth_index.Auth;
+exports.DBIndexedSessionRepository = require_session_db.DBIndexedSessionRepository;
+exports.OAuth2Client = require_oauth2_client.OAuth2Client;
+exports.OIDC_SCOPES = require_oauth2_types.OIDC_SCOPES;
+exports.PATH = require_auth_index.PATH;
+exports.PRINCIPAL_NAME_INDEX_NAME = require_session_common.PRINCIPAL_NAME_INDEX_NAME;
+exports.PROVIDERS = require_core_index.PROVIDERS;
+exports.RedisIndexedSessionRepository = require_session_redis.RedisIndexedSessionRepository;
+exports.RedisKVRepository = require_session_redis.RedisKVRepository;
+exports.oauth2RedirectQuerySchema = require_oauth2_client.oauth2RedirectQuerySchema;

package/dist/index.d.cts

@@ -1,15 +1,10 @@
-export { Auth, PATH } from './auth/index.cjs';
-export { OAuth2Client, oauth2RedirectQuerySchema } from './oauth2/client.cjs';
-export { RedisIndexedSessionRepository, RedisKVRepository } from './session/redis.cjs';
-export { DBAdapter, DBIndexedSessionRepository } from './session/db.cjs';
-export { PRINCIPAL_NAME_INDEX_NAME } from './session/common.cjs';
-export { ALL_PROVIDERS, CsrfToken, Principal, Provider } from './core/index.cjs';
-export { KVRepository, Namespace, Session, SessionRepository } from './session/types.cjs';
-export { NativeCredential, OAuth2Token, OidcScopes, OidcToken, StandardClaims, UserInfo } from './oauth2/types.cjs';
-export { AuthConfig, AuthService } from './auth/types.cjs';
-import 'zod/v4/core';
-import 'zod/mini';
-import 'ioredis';
-import './session/map-session.cjs';
-import './utils/http.cjs';
-import 'cookie';
+import { CsrfToken, PROVIDERS, Principal, Provider } from "./core/index.cjs";
+import { KVRepository, Namespace, Session, SessionRepository } from "./session/types.cjs";
+import { NativeCredential, OAuth2Token, OIDC_SCOPES, OidcScope, OidcToken, StandardClaims, UserInfo } from "./oauth2/types.cjs";
+import { AuthConfig, AuthService } from "./auth/types.cjs";
+import { Auth, PATH } from "./auth/index.cjs";
+import { OAuth2Client, oauth2RedirectQuerySchema } from "./oauth2/client.cjs";
+import { RedisIndexedSessionRepository, RedisKVRepository } from "./session/redis.cjs";
+import { DBAdapter, DBIndexedSessionRepository } from "./session/db.cjs";
+import { PRINCIPAL_NAME_INDEX_NAME } from "./session/common.cjs";
+export { Auth, type AuthConfig, type AuthService, type CsrfToken, type DBAdapter, DBIndexedSessionRepository, type KVRepository, type Namespace, type NativeCredential, OAuth2Client, type OAuth2Token, OIDC_SCOPES, type OidcScope, type OidcToken, PATH, PRINCIPAL_NAME_INDEX_NAME, PROVIDERS, type Principal, type Provider, RedisIndexedSessionRepository, RedisKVRepository, type Session, type SessionRepository, type StandardClaims, type UserInfo, oauth2RedirectQuerySchema };

package/dist/index.d.mts

@@ -0,0 +1,10 @@
+import { CsrfToken, PROVIDERS, Principal, Provider } from "./core/index.mjs";
+import { KVRepository, Namespace, Session, SessionRepository } from "./session/types.mjs";
+import { NativeCredential, OAuth2Token, OIDC_SCOPES, OidcScope, OidcToken, StandardClaims, UserInfo } from "./oauth2/types.mjs";
+import { AuthConfig, AuthService } from "./auth/types.mjs";
+import { Auth, PATH } from "./auth/index.mjs";
+import { OAuth2Client, oauth2RedirectQuerySchema } from "./oauth2/client.mjs";
+import { RedisIndexedSessionRepository, RedisKVRepository } from "./session/redis.mjs";
+import { DBAdapter, DBIndexedSessionRepository } from "./session/db.mjs";
+import { PRINCIPAL_NAME_INDEX_NAME } from "./session/common.mjs";
+export { Auth, type AuthConfig, type AuthService, type CsrfToken, type DBAdapter, DBIndexedSessionRepository, type KVRepository, type Namespace, type NativeCredential, OAuth2Client, type OAuth2Token, OIDC_SCOPES, type OidcScope, type OidcToken, PATH, PRINCIPAL_NAME_INDEX_NAME, PROVIDERS, type Principal, type Provider, RedisIndexedSessionRepository, RedisKVRepository, type Session, type SessionRepository, type StandardClaims, type UserInfo, oauth2RedirectQuerySchema };

package/dist/index.mjs

@@ -1,20 +1,8 @@
-// src/index.ts
-import { Auth, PATH } from "./auth/index.mjs";
 import { OAuth2Client, oauth2RedirectQuerySchema } from "./oauth2/client.mjs";
+import { PRINCIPAL_NAME_INDEX_NAME } from "./session/common.mjs";
+import { Auth, PATH } from "./auth/index.mjs";
 import { RedisIndexedSessionRepository, RedisKVRepository } from "./session/redis.mjs";
 import { DBIndexedSessionRepository } from "./session/db.mjs";
-import { PRINCIPAL_NAME_INDEX_NAME } from "./session/common.mjs";
-import { Provider, ALL_PROVIDERS } from "./core/index.mjs";
-export {
-  ALL_PROVIDERS,
-  Auth,
-  DBIndexedSessionRepository,
-  OAuth2Client,
-  PATH,
-  PRINCIPAL_NAME_INDEX_NAME,
-  Provider,
-  RedisIndexedSessionRepository,
-  RedisKVRepository,
-  oauth2RedirectQuerySchema
-};
-//# sourceMappingURL=index.mjs.map
+import { PROVIDERS } from "./core/index.mjs";
+import { OIDC_SCOPES } from "./oauth2/types.mjs";
+export { Auth, DBIndexedSessionRepository, OAuth2Client, OIDC_SCOPES, PATH, PRINCIPAL_NAME_INDEX_NAME, PROVIDERS, RedisIndexedSessionRepository, RedisKVRepository, oauth2RedirectQuerySchema };

package/dist/oauth2/client.cjs

@@ -1,150 +1,114 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/oauth2/client.ts
-var client_exports = {};
-__export(client_exports, {
-  OAuth2Client: () => OAuth2Client,
-  googleOneTapSchema: () => googleOneTapSchema,
-  oauth2RedirectQuerySchema: () => oauth2RedirectQuerySchema
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _shware_utils = require("@shware/utils");
+let zod_v4_mini = require("zod/v4-mini");
+//#region src/oauth2/client.ts
+const oauth2RedirectQuerySchema = (0, zod_v4_mini.object)({
+	code: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	state: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error_description: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error_uri: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)())
 });
-module.exports = __toCommonJS(client_exports);
-var import_utils = require("@shware/utils");
-var import_v4_mini = require("zod/v4-mini");
-var oauth2RedirectQuerySchema = (0, import_v4_mini.object)({
-  code: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  state: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error_description: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error_uri: (0, import_v4_mini.optional)((0, import_v4_mini.string)())
-});
-var googleOneTapSchema = (0, import_v4_mini.object)({
-  // login_uri
-  code: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  state: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error_description: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  error_uri: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  nonce: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  g_csrf_token: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  hd: (0, import_v4_mini.optional)((0, import_v4_mini.string)()),
-  // callback
-  credential: (0, import_v4_mini.optional)((0, import_v4_mini.string)())
+const googleOneTapSchema = (0, zod_v4_mini.object)({
+	code: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	state: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error_description: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	error_uri: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	nonce: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	g_csrf_token: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	hd: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
+	credential: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)())
 });
 var OAuth2Client = class {
-  config;
-  constructor(config) {
-    this.config = config;
-  }
-  get baseUri() {
-    return this.config.baseUri;
-  }
-  get successUri() {
-    return this.config.successUri;
-  }
-  get errorUri() {
-    return this.config.errorUri;
-  }
-  async getClientConfig(registrationId) {
-    const registrations = typeof this.config.registration === "function" ? await this.config.registration() : this.config.registration;
-    const registration = registrations[registrationId];
-    (0, import_utils.invariant)(registration, `Registration ${registrationId} not found`);
-    const provider = this.config.provider[registration.provider ?? registrationId];
-    (0, import_utils.invariant)(provider, `Provider ${registration.provider ?? registrationId} not found`);
-    return { registration, provider };
-  }
-  async createAuthorizationUri({
-    registrationId,
-    state,
-    pkce
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { baseUri } = this.config;
-    const { scope, clientId, redirectUri } = registration;
-    return provider.createAuthorizationUri({
-      pkce,
-      state,
-      scope,
-      clientId,
-      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
-    });
-  }
-  async exchangeAuthorizationCode({
-    registrationId,
-    code,
-    pkce
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { baseUri } = this.config;
-    const { clientId, clientSecret, redirectUri } = registration;
-    return provider.exchangeAuthorizationCode({
-      code,
-      pkce,
-      clientId,
-      clientSecret,
-      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
-    });
-  }
-  async getUserInfo({
-    registrationId,
-    token
-  }) {
-    const { provider } = await this.getClientConfig(registrationId);
-    return provider.getUserInfo(token);
-  }
-  async refreshAccessToken({
-    registrationId,
-    refreshToken
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { clientId, clientSecret } = registration;
-    (0, import_utils.invariant)(provider.refreshAccessToken, "Provider does not support refreshAccessToken");
-    return provider.refreshAccessToken({ refreshToken, clientId, clientSecret });
-  }
-  async revokeToken(registrationId, token) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    const { clientId, clientSecret } = registration;
-    (0, import_utils.invariant)(provider.revokeToken, "Provider does not support revokeToken");
-    await provider.revokeToken({ token, clientId, clientSecret });
-  }
-  async loginOAuth2Native({
-    registrationId,
-    credentials,
-    pkce
-  }) {
-    const { provider, registration } = await this.getClientConfig(registrationId);
-    (0, import_utils.invariant)(provider.loginOAuth2Native, "Provider does not support loginOAuth2Native");
-    const { baseUri } = this.config;
-    const { clientId, clientSecret, redirectUri } = registration;
-    return provider.loginOAuth2Native({
-      clientId,
-      clientSecret,
-      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,
-      credentials,
-      pkce
-    });
-  }
+	config;
+	constructor(config) {
+		this.config = config;
+	}
+	get baseUri() {
+		return this.config.baseUri;
+	}
+	get successUri() {
+		return this.config.successUri;
+	}
+	get errorUri() {
+		return this.config.errorUri;
+	}
+	async getClientConfig(registrationId) {
+		const registration = (typeof this.config.registration === "function" ? await this.config.registration() : this.config.registration)[registrationId];
+		(0, _shware_utils.invariant)(registration, `Registration ${registrationId} not found`);
+		const provider = this.config.provider[registration.provider ?? registrationId];
+		(0, _shware_utils.invariant)(provider, `Provider ${registration.provider ?? registrationId} not found`);
+		return {
+			registration,
+			provider
+		};
+	}
+	async createAuthorizationUri({ registrationId, state, pkce }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { baseUri } = this.config;
+		const { scope, clientId, redirectUri } = registration;
+		return provider.createAuthorizationUri({
+			pkce,
+			state,
+			scope,
+			clientId,
+			redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
+		});
+	}
+	async exchangeAuthorizationCode({ registrationId, code, pkce }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { baseUri } = this.config;
+		const { clientId, clientSecret, redirectUri } = registration;
+		return provider.exchangeAuthorizationCode({
+			code,
+			pkce,
+			clientId,
+			clientSecret,
+			redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`
+		});
+	}
+	async getUserInfo({ registrationId, token }) {
+		const { provider } = await this.getClientConfig(registrationId);
+		return provider.getUserInfo(token);
+	}
+	async refreshAccessToken({ registrationId, refreshToken }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { clientId, clientSecret } = registration;
+		(0, _shware_utils.invariant)(provider.refreshAccessToken, "Provider does not support refreshAccessToken");
+		return provider.refreshAccessToken({
+			refreshToken,
+			clientId,
+			clientSecret
+		});
+	}
+	async revokeToken(registrationId, token) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		const { clientId, clientSecret } = registration;
+		(0, _shware_utils.invariant)(provider.revokeToken, "Provider does not support revokeToken");
+		await provider.revokeToken({
+			token,
+			clientId,
+			clientSecret
+		});
+	}
+	async loginOAuth2Native({ registrationId, credentials, pkce }) {
+		const { provider, registration } = await this.getClientConfig(registrationId);
+		(0, _shware_utils.invariant)(provider.loginOAuth2Native, "Provider does not support loginOAuth2Native");
+		const { baseUri } = this.config;
+		const { clientId, clientSecret, redirectUri } = registration;
+		return provider.loginOAuth2Native({
+			clientId,
+			clientSecret,
+			redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,
+			credentials,
+			pkce
+		});
+	}
 };
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  OAuth2Client,
-  googleOneTapSchema,
-  oauth2RedirectQuerySchema
-});
+//#endregion
+exports.OAuth2Client = OAuth2Client;
+exports.googleOneTapSchema = googleOneTapSchema;
+exports.oauth2RedirectQuerySchema = oauth2RedirectQuerySchema;
+
 //# sourceMappingURL=client.cjs.map

package/dist/oauth2/client.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/oauth2/client.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { object, optional, string } from 'zod/v4-mini';\nimport type {\n  NativeCredential,\n  OAuth2ClientConfig,\n  OAuth2Token,\n  OidcToken,\n  PkceParameters,\n} from './types';\n\nexport const oauth2RedirectQuerySchema = object({\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n});\n\nexport const googleOneTapSchema = object({\n  // login_uri\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n  nonce: optional(string()),\n  g_csrf_token: optional(string()),\n  hd: optional(string()),\n  // callback\n  credential: optional(string()),\n});\n\nexport class OAuth2Client {\n  private config: OAuth2ClientConfig;\n  constructor(config: OAuth2ClientConfig) {\n    this.config = config;\n  }\n\n  get baseUri() {\n    return this.config.baseUri;\n  }\n\n  get successUri() {\n    return this.config.successUri;\n  }\n\n  get errorUri() {\n    return this.config.errorUri;\n  }\n\n  private async getClientConfig(registrationId: string) {\n    const registrations =\n      typeof this.config.registration === 'function'\n        ? await this.config.registration()\n        : this.config.registration;\n\n    const registration = registrations[registrationId];\n    invariant(registration, `Registration ${registrationId} not found`);\n\n    const provider = this.config.provider[registration.provider ?? registrationId];\n    invariant(provider, `Provider ${registration.provider ?? registrationId} not found`);\n    return { registration, provider };\n  }\n\n  async createAuthorizationUri({\n    registrationId,\n    state,\n    pkce,\n  }: {\n    registrationId: string;\n    state: string;\n    pkce?: PkceParameters;\n  }): Promise<URL> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { scope, clientId, redirectUri } = registration;\n    return provider.createAuthorizationUri({\n      pkce,\n      state,\n      scope,\n      clientId,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async exchangeAuthorizationCode({\n    registrationId,\n    code,\n    pkce,\n  }: {\n    registrationId: string;\n    code: string;\n    pkce?: PkceParameters;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n    return provider.exchangeAuthorizationCode({\n      code,\n      pkce,\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async getUserInfo({\n    registrationId,\n    token,\n  }: {\n    registrationId: string;\n    token: OAuth2Token | OidcToken;\n  }) {\n    const { provider } = await this.getClientConfig(registrationId);\n    return provider.getUserInfo(token);\n  }\n\n  async refreshAccessToken({\n    registrationId,\n    refreshToken,\n  }: {\n    registrationId: string;\n    refreshToken: string;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.refreshAccessToken, 'Provider does not support refreshAccessToken');\n    return provider.refreshAccessToken({ refreshToken, clientId, clientSecret });\n  }\n\n  async revokeToken(registrationId: string, token: string) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.revokeToken, 'Provider does not support revokeToken');\n    await provider.revokeToken({ token, clientId, clientSecret });\n  }\n\n  async loginOAuth2Native({\n    registrationId,\n    credentials,\n    pkce,\n  }: {\n    registrationId: string;\n    credentials: NativeCredential;\n    pkce?: PkceParameters;\n  }) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    invariant(provider.loginOAuth2Native, 'Provider does not support loginOAuth2Native');\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n\n    return provider.loginOAuth2Native({\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n      credentials,\n      pkce,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAA0B;AAC1B,qBAAyC;AASlC,IAAM,gCAA4B,uBAAO;AAAA,EAC9C,UAAM,6BAAS,uBAAO,CAAC;AAAA,EACvB,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,uBAAmB,6BAAS,uBAAO,CAAC;AAAA,EACpC,eAAW,6BAAS,uBAAO,CAAC;AAC9B,CAAC;AAEM,IAAM,yBAAqB,uBAAO;AAAA;AAAA,EAEvC,UAAM,6BAAS,uBAAO,CAAC;AAAA,EACvB,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,uBAAmB,6BAAS,uBAAO,CAAC;AAAA,EACpC,eAAW,6BAAS,uBAAO,CAAC;AAAA,EAC5B,WAAO,6BAAS,uBAAO,CAAC;AAAA,EACxB,kBAAc,6BAAS,uBAAO,CAAC;AAAA,EAC/B,QAAI,6BAAS,uBAAO,CAAC;AAAA;AAAA,EAErB,gBAAY,6BAAS,uBAAO,CAAC;AAC/B,CAAC;AAEM,IAAM,eAAN,MAAmB;AAAA,EAChB;AAAA,EACR,YAAY,QAA4B;AACtC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAI,UAAU;AACZ,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAI,aAAa;AACf,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAI,WAAW;AACb,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAc,gBAAgB,gBAAwB;AACpD,UAAM,gBACJ,OAAO,KAAK,OAAO,iBAAiB,aAChC,MAAM,KAAK,OAAO,aAAa,IAC/B,KAAK,OAAO;AAElB,UAAM,eAAe,cAAc,cAAc;AACjD,gCAAU,cAAc,gBAAgB,cAAc,YAAY;AAElE,UAAM,WAAW,KAAK,OAAO,SAAS,aAAa,YAAY,cAAc;AAC7E,gCAAU,UAAU,YAAY,aAAa,YAAY,cAAc,YAAY;AACnF,WAAO,EAAE,cAAc,SAAS;AAAA,EAClC;AAAA,EAEA,MAAM,uBAAuB;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIiB;AACf,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAE5E,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,EAAE,OAAO,UAAU,YAAY,IAAI;AACzC,WAAO,SAAS,uBAAuB;AAAA,MACrC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,eAAe,GAAG,OAAO,sBAAsB,cAAc;AAAA,IAC5E,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,0BAA0B;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIyB;AACvB,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAE5E,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,EAAE,UAAU,cAAc,YAAY,IAAI;AAChD,WAAO,SAAS,0BAA0B;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,eAAe,GAAG,OAAO,sBAAsB,cAAc;AAAA,IAC5E,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,EACF,GAGG;AACD,UAAM,EAAE,SAAS,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC9D,WAAO,SAAS,YAAY,KAAK;AAAA,EACnC;AAAA,EAEA,MAAM,mBAAmB;AAAA,IACvB;AAAA,IACA;AAAA,EACF,GAGyB;AACvB,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC5E,UAAM,EAAE,UAAU,aAAa,IAAI;AAEnC,gCAAU,SAAS,oBAAoB,8CAA8C;AACrF,WAAO,SAAS,mBAAmB,EAAE,cAAc,UAAU,aAAa,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAM,YAAY,gBAAwB,OAAe;AACvD,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC5E,UAAM,EAAE,UAAU,aAAa,IAAI;AAEnC,gCAAU,SAAS,aAAa,uCAAuC;AACvE,UAAM,SAAS,YAAY,EAAE,OAAO,UAAU,aAAa,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAM,kBAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,EAAE,UAAU,aAAa,IAAI,MAAM,KAAK,gBAAgB,cAAc;AAC5E,gCAAU,SAAS,mBAAmB,6CAA6C;AACnF,UAAM,EAAE,QAAQ,IAAI,KAAK;AACzB,UAAM,EAAE,UAAU,cAAc,YAAY,IAAI;AAEhD,WAAO,SAAS,kBAAkB;AAAA,MAChC;AAAA,MACA;AAAA,MACA,aAAa,eAAe,GAAG,OAAO,sBAAsB,cAAc;AAAA,MAC1E;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":[]}
+{"version":3,"file":"client.cjs","names":[],"sources":["../../src/oauth2/client.ts"],"sourcesContent":["import { invariant } from '@shware/utils';\nimport { object, optional, string } from 'zod/v4-mini';\nimport type {\n  NativeCredential,\n  OAuth2ClientConfig,\n  OAuth2Token,\n  OidcToken,\n  PkceParameters,\n} from './types';\n\nexport const oauth2RedirectQuerySchema = object({\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n});\n\nexport const googleOneTapSchema = object({\n  // login_uri\n  code: optional(string()),\n  state: optional(string()),\n  error: optional(string()),\n  error_description: optional(string()),\n  error_uri: optional(string()),\n  nonce: optional(string()),\n  g_csrf_token: optional(string()),\n  hd: optional(string()),\n  // callback\n  credential: optional(string()),\n});\n\nexport class OAuth2Client {\n  private config: OAuth2ClientConfig;\n  constructor(config: OAuth2ClientConfig) {\n    this.config = config;\n  }\n\n  get baseUri() {\n    return this.config.baseUri;\n  }\n\n  get successUri() {\n    return this.config.successUri;\n  }\n\n  get errorUri() {\n    return this.config.errorUri;\n  }\n\n  private async getClientConfig(registrationId: string) {\n    const registrations =\n      typeof this.config.registration === 'function'\n        ? await this.config.registration()\n        : this.config.registration;\n\n    const registration = registrations[registrationId];\n    invariant(registration, `Registration ${registrationId} not found`);\n\n    const provider = this.config.provider[registration.provider ?? registrationId];\n    invariant(provider, `Provider ${registration.provider ?? registrationId} not found`);\n    return { registration, provider };\n  }\n\n  async createAuthorizationUri({\n    registrationId,\n    state,\n    pkce,\n  }: {\n    registrationId: string;\n    state: string;\n    pkce?: PkceParameters;\n  }): Promise<URL> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { scope, clientId, redirectUri } = registration;\n    return provider.createAuthorizationUri({\n      pkce,\n      state,\n      scope,\n      clientId,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async exchangeAuthorizationCode({\n    registrationId,\n    code,\n    pkce,\n  }: {\n    registrationId: string;\n    code: string;\n    pkce?: PkceParameters;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n    return provider.exchangeAuthorizationCode({\n      code,\n      pkce,\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n    });\n  }\n\n  async getUserInfo({\n    registrationId,\n    token,\n  }: {\n    registrationId: string;\n    token: OAuth2Token | OidcToken;\n  }) {\n    const { provider } = await this.getClientConfig(registrationId);\n    return provider.getUserInfo(token);\n  }\n\n  async refreshAccessToken({\n    registrationId,\n    refreshToken,\n  }: {\n    registrationId: string;\n    refreshToken: string;\n  }): Promise<OAuth2Token> {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.refreshAccessToken, 'Provider does not support refreshAccessToken');\n    return provider.refreshAccessToken({ refreshToken, clientId, clientSecret });\n  }\n\n  async revokeToken(registrationId: string, token: string) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    const { clientId, clientSecret } = registration;\n\n    invariant(provider.revokeToken, 'Provider does not support revokeToken');\n    await provider.revokeToken({ token, clientId, clientSecret });\n  }\n\n  async loginOAuth2Native({\n    registrationId,\n    credentials,\n    pkce,\n  }: {\n    registrationId: string;\n    credentials: NativeCredential;\n    pkce?: PkceParameters;\n  }) {\n    const { provider, registration } = await this.getClientConfig(registrationId);\n    invariant(provider.loginOAuth2Native, 'Provider does not support loginOAuth2Native');\n    const { baseUri } = this.config;\n    const { clientId, clientSecret, redirectUri } = registration;\n\n    return provider.loginOAuth2Native({\n      clientId,\n      clientSecret,\n      redirectUri: redirectUri ?? `${baseUri}/login/oauth2/code/${registrationId}`,\n      credentials,\n      pkce,\n    });\n  }\n}\n"],"mappings":";;;;AAUA,MAAa,6BAAA,GAAA,YAAA,OAAA,CAAmC;CAC9C,OAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAsB,CAAC;CACvB,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,oBAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAmC,CAAC;CACpC,YAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAA2B,CAAC;AAC9B,CAAC;AAED,MAAa,sBAAA,GAAA,YAAA,OAAA,CAA4B;CAEvC,OAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAsB,CAAC;CACvB,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,oBAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAmC,CAAC;CACpC,YAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAA2B,CAAC;CAC5B,QAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAuB,CAAC;CACxB,eAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAA8B,CAAC;CAC/B,KAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAAoB,CAAC;CAErB,aAAA,GAAA,YAAA,SAAA,EAAA,GAAA,YAAA,OAAA,CAA4B,CAAC;AAC/B,CAAC;AAED,IAAa,eAAb,MAA0B;CACxB;CACA,YAAY,QAA4B;EACtC,KAAK,SAAS;CAChB;CAEA,IAAI,UAAU;EACZ,OAAO,KAAK,OAAO;CACrB;CAEA,IAAI,aAAa;EACf,OAAO,KAAK,OAAO;CACrB;CAEA,IAAI,WAAW;EACb,OAAO,KAAK,OAAO;CACrB;CAEA,MAAc,gBAAgB,gBAAwB;EAMpD,MAAM,gBAJJ,OAAO,KAAK,OAAO,iBAAiB,aAChC,MAAM,KAAK,OAAO,aAAa,IAC/B,KAAK,OAAO,aAAA,CAEiB;EACnC,CAAA,GAAA,cAAA,UAAA,CAAU,cAAc,gBAAgB,eAAe,WAAW;EAElE,MAAM,WAAW,KAAK,OAAO,SAAS,aAAa,YAAY;EAC/D,CAAA,GAAA,cAAA,UAAA,CAAU,UAAU,YAAY,aAAa,YAAY,eAAe,WAAW;EACnF,OAAO;GAAE;GAAc;EAAS;CAClC;CAEA,MAAM,uBAAuB,EAC3B,gBACA,OACA,QAKe;EACf,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAE5E,MAAM,EAAE,YAAY,KAAK;EACzB,MAAM,EAAE,OAAO,UAAU,gBAAgB;EACzC,OAAO,SAAS,uBAAuB;GACrC;GACA;GACA;GACA;GACA,aAAa,eAAe,GAAG,QAAQ,qBAAqB;EAC9D,CAAC;CACH;CAEA,MAAM,0BAA0B,EAC9B,gBACA,MACA,QAKuB;EACvB,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAE5E,MAAM,EAAE,YAAY,KAAK;EACzB,MAAM,EAAE,UAAU,cAAc,gBAAgB;EAChD,OAAO,SAAS,0BAA0B;GACxC;GACA;GACA;GACA;GACA,aAAa,eAAe,GAAG,QAAQ,qBAAqB;EAC9D,CAAC;CACH;CAEA,MAAM,YAAY,EAChB,gBACA,SAIC;EACD,MAAM,EAAE,aAAa,MAAM,KAAK,gBAAgB,cAAc;EAC9D,OAAO,SAAS,YAAY,KAAK;CACnC;CAEA,MAAM,mBAAmB,EACvB,gBACA,gBAIuB;EACvB,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAC5E,MAAM,EAAE,UAAU,iBAAiB;EAEnC,CAAA,GAAA,cAAA,UAAA,CAAU,SAAS,oBAAoB,8CAA8C;EACrF,OAAO,SAAS,mBAAmB;GAAE;GAAc;GAAU;EAAa,CAAC;CAC7E;CAEA,MAAM,YAAY,gBAAwB,OAAe;EACvD,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAC5E,MAAM,EAAE,UAAU,iBAAiB;EAEnC,CAAA,GAAA,cAAA,UAAA,CAAU,SAAS,aAAa,uCAAuC;EACvE,MAAM,SAAS,YAAY;GAAE;GAAO;GAAU;EAAa,CAAC;CAC9D;CAEA,MAAM,kBAAkB,EACtB,gBACA,aACA,QAKC;EACD,MAAM,EAAE,UAAU,iBAAiB,MAAM,KAAK,gBAAgB,cAAc;EAC5E,CAAA,GAAA,cAAA,UAAA,CAAU,SAAS,mBAAmB,6CAA6C;EACnF,MAAM,EAAE,YAAY,KAAK;EACzB,MAAM,EAAE,UAAU,cAAc,gBAAgB;EAEhD,OAAO,SAAS,kBAAkB;GAChC;GACA;GACA,aAAa,eAAe,GAAG,QAAQ,qBAAqB;GAC5D;GACA;EACF,CAAC;CACH;AACF"}