@shware/security 7.1.0 → 7.1.1

package/dist/auth/attributes.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let zod_mini = require("zod/mini");
-//#region src/auth/attributes.ts
+// src/auth/attributes.ts
 /** Upper bound on serialized attributes: they ride in a session or a request body. */
 const MAX_ATTRIBUTES_BYTES = 2048;
 function attributesSize(attributes) {
@@ -22,7 +22,6 @@ function bodyAttributes(body) {
 	if (!parsed.success) return null;
 	return parsed.data ?? {};
 }
-//#endregion
 exports.MAX_ATTRIBUTES_BYTES = MAX_ATTRIBUTES_BYTES;
 exports.attributesSchema = attributesSchema;
 exports.attributesSize = attributesSize;

package/dist/auth/attributes.d.cts

@@ -1,4 +1,3 @@
-//#region src/auth/attributes.d.ts
 /** Upper bound on serialized attributes: they ride in a session or a request body. */
 export declare const MAX_ATTRIBUTES_BYTES = 2048;
 export declare function attributesSize(attributes: Record<string, string>): number;
@@ -13,5 +12,4 @@ export declare const attributesSchema: import("zod/mini").ZodMiniOptional<import
  * present but invalid.
  */
 export declare function bodyAttributes(body: unknown): Record<string, string> | null;
-//#endregion
 //# sourceMappingURL=attributes.d.cts.map

package/dist/auth/attributes.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"attributes.d.cts","names":[],"sources":["../../src/auth/attributes.ts"],"mappings":";;qBAGa;wBAEG,eAAe,YAAY;;;;;;qBAS9B,qCAAgB,mCAAA,iCAAA,0CAAA;;;;;wBAYb,eAAe,gBAAgB"}
+{"version":3,"file":"attributes.d.cts","names":[],"sources":["../../src/auth/attributes.ts"],"mappings":";qBAGa;wBAEG,eAAe,YAAY;;;;;;qBAS9B,qCAAgB,mCAAA,iCAAA,0CAAA;;;;;wBAYb,eAAe,gBAAgB"}

package/dist/auth/attributes.d.mts

@@ -1,4 +1,3 @@
-//#region src/auth/attributes.d.ts
 /** Upper bound on serialized attributes: they ride in a session or a request body. */
 export declare const MAX_ATTRIBUTES_BYTES = 2048;
 export declare function attributesSize(attributes: Record<string, string>): number;
@@ -13,5 +12,4 @@ export declare const attributesSchema: import("zod/mini").ZodMiniOptional<import
  * present but invalid.
  */
 export declare function bodyAttributes(body: unknown): Record<string, string> | null;
-//#endregion
 //# sourceMappingURL=attributes.d.mts.map

package/dist/auth/attributes.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"attributes.d.mts","names":[],"sources":["../../src/auth/attributes.ts"],"mappings":";;qBAGa;wBAEG,eAAe,YAAY;;;;;;qBAS9B,qCAAgB,mCAAA,iCAAA,0CAAA;;;;;wBAYb,eAAe,gBAAgB"}
+{"version":3,"file":"attributes.d.mts","names":[],"sources":["../../src/auth/attributes.ts"],"mappings":";qBAGa;wBAEG,eAAe,YAAY;;;;;;qBAS9B,qCAAgB,mCAAA,iCAAA,0CAAA;;;;;wBAYb,eAAe,gBAAgB"}

package/dist/auth/attributes.mjs

@@ -1,5 +1,5 @@
 import { optional, record, refine, string } from "zod/mini";
-//#region src/auth/attributes.ts
+// src/auth/attributes.ts
 /** Upper bound on serialized attributes: they ride in a session or a request body. */
 const MAX_ATTRIBUTES_BYTES = 2048;
 function attributesSize(attributes) {
@@ -21,7 +21,6 @@ function bodyAttributes(body) {
 	if (!parsed.success) return null;
 	return parsed.data ?? {};
 }
-//#endregion
 export { MAX_ATTRIBUTES_BYTES, attributesSchema, attributesSize, bodyAttributes };
 
 //# sourceMappingURL=attributes.mjs.map

package/dist/auth/index.cjs

@@ -9,7 +9,7 @@ const require_utils_timing = require("../utils/timing.cjs");
 const require_utils_valid = require("../utils/valid.cjs");
 let node_crypto = require("node:crypto");
 let _shware_utils = require("@shware/utils");
-//#region src/auth/index.ts
+// src/auth/index.ts
 const PKCE_FORMAT = /^[A-Za-z0-9_-]{43,128}$/;
 const CODE_VERIFIER_FORMAT = /^[A-Za-z0-9._~-]{43,128}$/;
 const INVALID_CODE_VERIFIER = {
@@ -697,7 +697,6 @@ var Auth = class {
 		return Response.json({});
 	};
 };
-//#endregion
 exports.Auth = Auth;
 exports.PATH = PATH;
 

package/dist/auth/index.d.cts

@@ -1,7 +1,6 @@
 import { Principal } from "../core/index.cjs";
 import { Session } from "../session/types.cjs";
 import { AuthConfig, AuthService, AuthorizedHandler, LoggedHandler, OAuth2AuthorizationOptions } from "./types.cjs";
-//#region src/auth/index.d.ts
 export declare const PATH: {
   readonly CSRF: '/csrf';
   readonly LOGOUT: '/logout';
@@ -124,5 +123,4 @@ export declare class Auth implements AuthService {
   listSessions: (principal: Principal) => Promise<Session[]>;
   cleanupExpiredSessions: (cleanupCount?: number) => Promise<Response>;
 }
-//#endregion
 //# sourceMappingURL=index.d.cts.map

package/dist/auth/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/auth/index.ts"],"mappings":";;;;qBA4Ga;WACX;WACA;WACA;WAEA;WACA;WACA;WACA;WACA;WACA;WAEA;WACA;WACA;WACA;WASA;WACA;WAEA;;qBAMW,gBAAgB;mBACV;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;EAEjB,cACE,mBACA,cACA,oBACA,kBACA,QACA,QACA,SACA,UACC;UA2BK;EAYR,OAAI,UAAoB,YAAU,QAAQ;EAmB1C,SAAM,SAAmB,YAAU,QAAQ;EAU3C,SAAM,SAAmB,SAAO,WAAa,kBAAgB,QAAQ;UAsB7D;UAUA;UAIA;UAIA;UAIA;UAIA;UAIA;UAIA;EAIR,cAAW,SAAmB,YAAU,QAAQ;EAOhD,cAAW,SAAmB,YAAU,QAAQ;EAOhD,sBAAmB,SACR,SAAO,UACN,+BACT,QAAQ;mBAmCM;EAUjB,kBAAe,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;;;;;;UA+HxE;EAYR,oBAAiB,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;EAmDlF,oBAAiB,SACN,SAAO,SACP,mBAAiB,sBAEzB,QAAQ;EA6EX,4BAAyB,SACd,SAAO,SACP;IAAQ;IAAe;QAA+B,kBAC9D,QAAQ;EA0CX,aAAU,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;;;;;;;;;;;;;;;;;;;;EAsE3E,mBAAgB,SAAmB,YAAU,QAAQ;;;;;;;;;;;;;;;;;;;EA0DrD,kBAAe,SAAmB,YAAU,QAAQ;EAgEpD,4BAAyB,UACb,SAAO,UACP;IAAQ;IAAe;QAA+B,kBAC/D,QAAQ;EAIX,aAAU,UAAoB,SAAO,UAAY,sBAAoB,QAAQ;EAI7E,OAAI,WAAqB,cAAY;;;;;;;;UAcvB;EAOd,kBAAe,SAAmB,YAAU;EAW5C,aAAoB,mBAAiB,SAC1B,SAAO,QACR,MACP,QAAQ,iBAAiB,UAAU;EAwBtC,gBAAa,sBAA8B;EAI3C,eAAY,SAAmB,YAAU,QAAQ;EAWjD,eAAY,WAAqB,cAAY,QAAQ;EAKrD,yBAAsB,0BAAkC,QAAQ"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/auth/index.ts"],"mappings":";;;qBA4Ga;WACX;WACA;WACA;WAEA;WACA;WACA;WACA;WACA;WACA;WAEA;WACA;WACA;WACA;WASA;WACA;WAEA;;qBAMW,gBAAgB;mBACV;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;EAEjB,cACE,mBACA,cACA,oBACA,kBACA,QACA,QACA,SACA,UACC;UA2BK;EAYR,OAAI,UAAoB,YAAU,QAAQ;EAmB1C,SAAM,SAAmB,YAAU,QAAQ;EAU3C,SAAM,SAAmB,SAAO,WAAa,kBAAgB,QAAQ;UAsB7D;UAUA;UAIA;UAIA;UAIA;UAIA;UAIA;UAIA;EAIR,cAAW,SAAmB,YAAU,QAAQ;EAOhD,cAAW,SAAmB,YAAU,QAAQ;EAOhD,sBAAmB,SACR,SAAO,UACN,+BACT,QAAQ;mBAmCM;EAUjB,kBAAe,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;;;;;;UA+HxE;EAYR,oBAAiB,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;EAmDlF,oBAAiB,SACN,SAAO,SACP,mBAAiB,sBAEzB,QAAQ;EA6EX,4BAAyB,SACd,SAAO,SACP;IAAQ;IAAe;QAA+B,kBAC9D,QAAQ;EA0CX,aAAU,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;;;;;;;;;;;;;;;;;;;;EAsE3E,mBAAgB,SAAmB,YAAU,QAAQ;;;;;;;;;;;;;;;;;;;EA0DrD,kBAAe,SAAmB,YAAU,QAAQ;EAgEpD,4BAAyB,UACb,SAAO,UACP;IAAQ;IAAe;QAA+B,kBAC/D,QAAQ;EAIX,aAAU,UAAoB,SAAO,UAAY,sBAAoB,QAAQ;EAI7E,OAAI,WAAqB,cAAY;;;;;;;;UAcvB;EAOd,kBAAe,SAAmB,YAAU;EAW5C,aAAoB,mBAAiB,SAC1B,SAAO,QACR,MACP,QAAQ,iBAAiB,UAAU;EAwBtC,gBAAa,sBAA8B;EAI3C,eAAY,SAAmB,YAAU,QAAQ;EAWjD,eAAY,WAAqB,cAAY,QAAQ;EAKrD,yBAAsB,0BAAkC,QAAQ"}

package/dist/auth/index.d.mts

@@ -1,7 +1,6 @@
 import { Principal } from "../core/index.mjs";
 import { Session } from "../session/types.mjs";
 import { AuthConfig, AuthService, AuthorizedHandler, LoggedHandler, OAuth2AuthorizationOptions } from "./types.mjs";
-//#region src/auth/index.d.ts
 export declare const PATH: {
   readonly CSRF: '/csrf';
   readonly LOGOUT: '/logout';
@@ -124,5 +123,4 @@ export declare class Auth implements AuthService {
   listSessions: (principal: Principal) => Promise<Session[]>;
   cleanupExpiredSessions: (cleanupCount?: number) => Promise<Response>;
 }
-//#endregion
 //# sourceMappingURL=index.d.mts.map

package/dist/auth/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/auth/index.ts"],"mappings":";;;;qBA4Ga;WACX;WACA;WACA;WAEA;WACA;WACA;WACA;WACA;WACA;WAEA;WACA;WACA;WACA;WASA;WACA;WAEA;;qBAMW,gBAAgB;mBACV;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;EAEjB,cACE,mBACA,cACA,oBACA,kBACA,QACA,QACA,SACA,UACC;UA2BK;EAYR,OAAI,UAAoB,YAAU,QAAQ;EAmB1C,SAAM,SAAmB,YAAU,QAAQ;EAU3C,SAAM,SAAmB,SAAO,WAAa,kBAAgB,QAAQ;UAsB7D;UAUA;UAIA;UAIA;UAIA;UAIA;UAIA;UAIA;EAIR,cAAW,SAAmB,YAAU,QAAQ;EAOhD,cAAW,SAAmB,YAAU,QAAQ;EAOhD,sBAAmB,SACR,SAAO,UACN,+BACT,QAAQ;mBAmCM;EAUjB,kBAAe,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;;;;;;UA+HxE;EAYR,oBAAiB,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;EAmDlF,oBAAiB,SACN,SAAO,SACP,mBAAiB,sBAEzB,QAAQ;EA6EX,4BAAyB,SACd,SAAO,SACP;IAAQ;IAAe;QAA+B,kBAC9D,QAAQ;EA0CX,aAAU,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;;;;;;;;;;;;;;;;;;;;EAsE3E,mBAAgB,SAAmB,YAAU,QAAQ;;;;;;;;;;;;;;;;;;;EA0DrD,kBAAe,SAAmB,YAAU,QAAQ;EAgEpD,4BAAyB,UACb,SAAO,UACP;IAAQ;IAAe;QAA+B,kBAC/D,QAAQ;EAIX,aAAU,UAAoB,SAAO,UAAY,sBAAoB,QAAQ;EAI7E,OAAI,WAAqB,cAAY;;;;;;;;UAcvB;EAOd,kBAAe,SAAmB,YAAU;EAW5C,aAAoB,mBAAiB,SAC1B,SAAO,QACR,MACP,QAAQ,iBAAiB,UAAU;EAwBtC,gBAAa,sBAA8B;EAI3C,eAAY,SAAmB,YAAU,QAAQ;EAWjD,eAAY,WAAqB,cAAY,QAAQ;EAKrD,yBAAsB,0BAAkC,QAAQ"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/auth/index.ts"],"mappings":";;;qBA4Ga;WACX;WACA;WACA;WAEA;WACA;WACA;WACA;WACA;WACA;WAEA;WACA;WACA;WACA;WASA;WACA;WAEA;;qBAMW,gBAAgB;mBACV;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;EAEjB,cACE,mBACA,cACA,oBACA,kBACA,QACA,QACA,SACA,UACC;UA2BK;EAYR,OAAI,UAAoB,YAAU,QAAQ;EAmB1C,SAAM,SAAmB,YAAU,QAAQ;EAU3C,SAAM,SAAmB,SAAO,WAAa,kBAAgB,QAAQ;UAsB7D;UAUA;UAIA;UAIA;UAIA;UAIA;UAIA;UAIA;EAIR,cAAW,SAAmB,YAAU,QAAQ;EAOhD,cAAW,SAAmB,YAAU,QAAQ;EAOhD,sBAAmB,SACR,SAAO,UACN,+BACT,QAAQ;mBAmCM;EAUjB,kBAAe,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;;;;;;UA+HxE;EAYR,oBAAiB,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;EAmDlF,oBAAiB,SACN,SAAO,SACP,mBAAiB,sBAEzB,QAAQ;EA6EX,4BAAyB,SACd,SAAO,SACP;IAAQ;IAAe;QAA+B,kBAC9D,QAAQ;EA0CX,aAAU,SAAmB,SAAO,SAAW,sBAAoB,QAAQ;;;;;;;;;;;;;;;;;;;;EAsE3E,mBAAgB,SAAmB,YAAU,QAAQ;;;;;;;;;;;;;;;;;;;EA0DrD,kBAAe,SAAmB,YAAU,QAAQ;EAgEpD,4BAAyB,UACb,SAAO,UACP;IAAQ;IAAe;QAA+B,kBAC/D,QAAQ;EAIX,aAAU,UAAoB,SAAO,UAAY,sBAAoB,QAAQ;EAI7E,OAAI,WAAqB,cAAY;;;;;;;;UAcvB;EAOd,kBAAe,SAAmB,YAAU;EAW5C,aAAoB,mBAAiB,SAC1B,SAAO,QACR,MACP,QAAQ,iBAAiB,UAAU;EAwBtC,gBAAa,sBAA8B;EAI3C,eAAY,SAAmB,YAAU,QAAQ;EAWjD,eAAY,WAAqB,cAAY,QAAQ;EAKrD,yBAAsB,0BAAkC,QAAQ"}

package/dist/auth/index.mjs

@@ -8,7 +8,7 @@ import { timing } from "../utils/timing.mjs";
 import { invalidArgument, resourceExhausted, valid, verifyTurnstileToken } from "../utils/valid.mjs";
 import { createHash, randomInt, randomUUID, timingSafeEqual } from "node:crypto";
 import { invariant } from "@shware/utils";
-//#region src/auth/index.ts
+// src/auth/index.ts
 const PKCE_FORMAT = /^[A-Za-z0-9_-]{43,128}$/;
 const CODE_VERIFIER_FORMAT = /^[A-Za-z0-9._~-]{43,128}$/;
 const INVALID_CODE_VERIFIER = {
@@ -696,7 +696,6 @@ var Auth = class {
 		return Response.json({});
 	};
 };
-//#endregion
 export { Auth, PATH };
 
 //# sourceMappingURL=index.mjs.map

package/dist/auth/types.d.cts

@@ -2,7 +2,6 @@ import { Principal } from "../core/index.cjs";
 import { KVRepository, Session, SessionRepository } from "../session/types.cjs";
 import { OAuth2ClientConfig, OAuth2Token, UserInfo } from "../oauth2/types.cjs";
 import { CookieOptions } from "../utils/http.cjs";
-//#region src/auth/types.d.ts
 export type LoggedHandler = (principal: Principal) => Promise<void>;
 /**
  * Who signed in, and how: what every login method hands to `onAuthorized`.
@@ -115,5 +114,4 @@ export interface AuthService {
   listSessions: (principal: Principal) => Promise<Session[]>;
   cleanupExpiredSessions: (cleanupCount?: number) => Promise<Response>;
 }
-//#endregion
 //# sourceMappingURL=types.d.cts.map

package/dist/auth/types.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.cts","names":[],"sources":["../../src/auth/types.ts"],"mappings":";;;;;YAKY,iBAAiB,WAAW,cAAc;;;;;;;;;;;;;;;iBAerC;EACf;EACA;EACA,UAAU;EACV,QAAQ;EACR,YAAY;;;YAIF,qBACV,SAAS,SACT,eAAe,kBACZ,QAAQ;iBAEI;;;;;;;;;;;EAWf,aAAa;;iBAGE;EACf;EACA,cAAc;EACd,mBAAmB;EACnB,SAAS;IAAkB;;EAC3B;;;;;;;;;IASE;;EAEF;;EAEA;;;;;IAKE;;;;;IAKA;;EAEF;IACE,SAAS;;IAET;;;;;;;;MAQE;;;;iBAKW;EAEf,OAAO,SAAS,YAAY,QAAQ;EACpC,SAAS,SAAS,YAAY,QAAQ;EACtC,SAAS,SAAS,SAAS,WAAW,kBAAkB,QAAQ;EAGhE,cAAc,SAAS,YAAY,QAAQ;EAC3C,cAAc,SAAS,YAAY,QAAQ;EAC3C,sBACE,SAAS,SACT,UAAU,+BACP,QAAQ;EACb,kBAAkB,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAChF,oBAAoB,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAClF,oBACE,SAAS,SACT,cAAc,mBACd,sBACG,QAAQ;EAGb,4BACE,SAAS,SACT,SAAS;IAAQ;IAAe;QAA+B,kBAC5D,QAAQ;EACb,4BACE,SAAS,SACT,SAAS;IAAQ;IAAe;QAA+B,kBAC5D,QAAQ;EAEb,aAAa,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAC3E,aAAa,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAG3E,OAAO,WAAW,cAAc;EAChC,kBAAkB,SAAS,YAAY;EACvC,aAAa,mBACX,SAAS,SACT,QAAQ,MACL,QAAQ,iBAAiB,UAAU;EACxC,gBAAgB,sBAAsB;EACtC,eAAe,SAAS,YAAY,QAAQ;EAC5C,eAAe,WAAW,cAAc,QAAQ;EAChD,yBAAyB,0BAA0B,QAAQ"}
+{"version":3,"file":"types.d.cts","names":[],"sources":["../../src/auth/types.ts"],"mappings":";;;;YAKY,iBAAiB,WAAW,cAAc;;;;;;;;;;;;;;;iBAerC;EACf;EACA;EACA,UAAU;EACV,QAAQ;EACR,YAAY;;;YAIF,qBACV,SAAS,SACT,eAAe,kBACZ,QAAQ;iBAEI;;;;;;;;;;;EAWf,aAAa;;iBAGE;EACf;EACA,cAAc;EACd,mBAAmB;EACnB,SAAS;IAAkB;;EAC3B;;;;;;;;;IASE;;EAEF;;EAEA;;;;;IAKE;;;;;IAKA;;EAEF;IACE,SAAS;;IAET;;;;;;;;MAQE;;;;iBAKW;EAEf,OAAO,SAAS,YAAY,QAAQ;EACpC,SAAS,SAAS,YAAY,QAAQ;EACtC,SAAS,SAAS,SAAS,WAAW,kBAAkB,QAAQ;EAGhE,cAAc,SAAS,YAAY,QAAQ;EAC3C,cAAc,SAAS,YAAY,QAAQ;EAC3C,sBACE,SAAS,SACT,UAAU,+BACP,QAAQ;EACb,kBAAkB,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAChF,oBAAoB,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAClF,oBACE,SAAS,SACT,cAAc,mBACd,sBACG,QAAQ;EAGb,4BACE,SAAS,SACT,SAAS;IAAQ;IAAe;QAA+B,kBAC5D,QAAQ;EACb,4BACE,SAAS,SACT,SAAS;IAAQ;IAAe;QAA+B,kBAC5D,QAAQ;EAEb,aAAa,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAC3E,aAAa,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAG3E,OAAO,WAAW,cAAc;EAChC,kBAAkB,SAAS,YAAY;EACvC,aAAa,mBACX,SAAS,SACT,QAAQ,MACL,QAAQ,iBAAiB,UAAU;EACxC,gBAAgB,sBAAsB;EACtC,eAAe,SAAS,YAAY,QAAQ;EAC5C,eAAe,WAAW,cAAc,QAAQ;EAChD,yBAAyB,0BAA0B,QAAQ"}

package/dist/auth/types.d.mts

@@ -2,7 +2,6 @@ import { Principal } from "../core/index.mjs";
 import { KVRepository, Session, SessionRepository } from "../session/types.mjs";
 import { OAuth2ClientConfig, OAuth2Token, UserInfo } from "../oauth2/types.mjs";
 import { CookieOptions } from "../utils/http.mjs";
-//#region src/auth/types.d.ts
 export type LoggedHandler = (principal: Principal) => Promise<void>;
 /**
  * Who signed in, and how: what every login method hands to `onAuthorized`.
@@ -115,5 +114,4 @@ export interface AuthService {
   listSessions: (principal: Principal) => Promise<Session[]>;
   cleanupExpiredSessions: (cleanupCount?: number) => Promise<Response>;
 }
-//#endregion
 //# sourceMappingURL=types.d.mts.map

package/dist/auth/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/auth/types.ts"],"mappings":";;;;;YAKY,iBAAiB,WAAW,cAAc;;;;;;;;;;;;;;;iBAerC;EACf;EACA;EACA,UAAU;EACV,QAAQ;EACR,YAAY;;;YAIF,qBACV,SAAS,SACT,eAAe,kBACZ,QAAQ;iBAEI;;;;;;;;;;;EAWf,aAAa;;iBAGE;EACf;EACA,cAAc;EACd,mBAAmB;EACnB,SAAS;IAAkB;;EAC3B;;;;;;;;;IASE;;EAEF;;EAEA;;;;;IAKE;;;;;IAKA;;EAEF;IACE,SAAS;;IAET;;;;;;;;MAQE;;;;iBAKW;EAEf,OAAO,SAAS,YAAY,QAAQ;EACpC,SAAS,SAAS,YAAY,QAAQ;EACtC,SAAS,SAAS,SAAS,WAAW,kBAAkB,QAAQ;EAGhE,cAAc,SAAS,YAAY,QAAQ;EAC3C,cAAc,SAAS,YAAY,QAAQ;EAC3C,sBACE,SAAS,SACT,UAAU,+BACP,QAAQ;EACb,kBAAkB,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAChF,oBAAoB,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAClF,oBACE,SAAS,SACT,cAAc,mBACd,sBACG,QAAQ;EAGb,4BACE,SAAS,SACT,SAAS;IAAQ;IAAe;QAA+B,kBAC5D,QAAQ;EACb,4BACE,SAAS,SACT,SAAS;IAAQ;IAAe;QAA+B,kBAC5D,QAAQ;EAEb,aAAa,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAC3E,aAAa,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAG3E,OAAO,WAAW,cAAc;EAChC,kBAAkB,SAAS,YAAY;EACvC,aAAa,mBACX,SAAS,SACT,QAAQ,MACL,QAAQ,iBAAiB,UAAU;EACxC,gBAAgB,sBAAsB;EACtC,eAAe,SAAS,YAAY,QAAQ;EAC5C,eAAe,WAAW,cAAc,QAAQ;EAChD,yBAAyB,0BAA0B,QAAQ"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/auth/types.ts"],"mappings":";;;;YAKY,iBAAiB,WAAW,cAAc;;;;;;;;;;;;;;;iBAerC;EACf;EACA;EACA,UAAU;EACV,QAAQ;EACR,YAAY;;;YAIF,qBACV,SAAS,SACT,eAAe,kBACZ,QAAQ;iBAEI;;;;;;;;;;;EAWf,aAAa;;iBAGE;EACf;EACA,cAAc;EACd,mBAAmB;EACnB,SAAS;IAAkB;;EAC3B;;;;;;;;;IASE;;EAEF;;EAEA;;;;;IAKE;;;;;IAKA;;EAEF;IACE,SAAS;;IAET;;;;;;;;MAQE;;;;iBAKW;EAEf,OAAO,SAAS,YAAY,QAAQ;EACpC,SAAS,SAAS,YAAY,QAAQ;EACtC,SAAS,SAAS,SAAS,WAAW,kBAAkB,QAAQ;EAGhE,cAAc,SAAS,YAAY,QAAQ;EAC3C,cAAc,SAAS,YAAY,QAAQ;EAC3C,sBACE,SAAS,SACT,UAAU,+BACP,QAAQ;EACb,kBAAkB,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAChF,oBAAoB,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAClF,oBACE,SAAS,SACT,cAAc,mBACd,sBACG,QAAQ;EAGb,4BACE,SAAS,SACT,SAAS;IAAQ;IAAe;QAA+B,kBAC5D,QAAQ;EACb,4BACE,SAAS,SACT,SAAS;IAAQ;IAAe;QAA+B,kBAC5D,QAAQ;EAEb,aAAa,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAC3E,aAAa,SAAS,SAAS,cAAc,sBAAsB,QAAQ;EAG3E,OAAO,WAAW,cAAc;EAChC,kBAAkB,SAAS,YAAY;EACvC,aAAa,mBACX,SAAS,SACT,QAAQ,MACL,QAAQ,iBAAiB,UAAU;EACxC,gBAAgB,sBAAsB;EACtC,eAAe,SAAS,YAAY,QAAQ;EAC5C,eAAe,WAAW,cAAc,QAAQ;EAChD,yBAAyB,0BAA0B,QAAQ"}

package/dist/core/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-//#region src/core/index.ts
+// src/core/index.ts
 const PROVIDERS = [
 	"APPLE",
 	"DISCORD",
@@ -14,7 +14,6 @@ const PROVIDERS = [
 	"EMAIL",
 	"PHONE"
 ];
-//#endregion
 exports.PROVIDERS = PROVIDERS;
 
 //# sourceMappingURL=index.cjs.map

package/dist/core/index.d.cts

@@ -1,4 +1,3 @@
-//#region src/core/index.d.ts
 export type JSONValue = null | string | number | boolean | {
   [value: string]: JSONValue;
 } | Array<JSONValue>;
@@ -16,5 +15,4 @@ export interface CsrfToken {
 }
 export declare const PROVIDERS: readonly ['APPLE', 'DISCORD', 'FACEBOOK', 'GITHUB', 'GOOGLE', 'LINKEDIN', 'MICROSOFT', 'SLACK', 'WECHAT', 'X', 'EMAIL', 'PHONE'];
 export type Provider = (typeof PROVIDERS)[number];
-//#endregion
 //# sourceMappingURL=index.d.cts.map

package/dist/core/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/core/index.ts"],"mappings":";YAAY;GAKL,gBAAgB;IACnB,MAAM;iBAEO;EACf;;iBAGe,uBAAuB;EACtC;EACA;;iBAGe;EACf;EACA;EACA;;qBAGW;YAiBD,mBAAmB"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/core/index.ts"],"mappings":"A,YAAY;GAKL,gBAAgB;IACnB,MAAM;iBAEO;EACf;;iBAGe,uBAAuB;EACtC;EACA;;iBAGe;EACf;EACA;EACA;;qBAGW;YAiBD,mBAAmB"}

package/dist/core/index.d.mts

@@ -1,4 +1,3 @@
-//#region src/core/index.d.ts
 export type JSONValue = null | string | number | boolean | {
   [value: string]: JSONValue;
 } | Array<JSONValue>;
@@ -16,5 +15,4 @@ export interface CsrfToken {
 }
 export declare const PROVIDERS: readonly ['APPLE', 'DISCORD', 'FACEBOOK', 'GITHUB', 'GOOGLE', 'LINKEDIN', 'MICROSOFT', 'SLACK', 'WECHAT', 'X', 'EMAIL', 'PHONE'];
 export type Provider = (typeof PROVIDERS)[number];
-//#endregion
 //# sourceMappingURL=index.d.mts.map

package/dist/core/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/core/index.ts"],"mappings":";YAAY;GAKL,gBAAgB;IACnB,MAAM;iBAEO;EACf;;iBAGe,uBAAuB;EACtC;EACA;;iBAGe;EACf;EACA;EACA;;qBAGW;YAiBD,mBAAmB"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/core/index.ts"],"mappings":"A,YAAY;GAKL,gBAAgB;IACnB,MAAM;iBAEO;EACf;;iBAGe,uBAAuB;EACtC;EACA;;iBAGe;EACf;EACA;EACA;;qBAGW;YAiBD,mBAAmB"}

package/dist/core/index.mjs

@@ -1,4 +1,4 @@
-//#region src/core/index.ts
+// src/core/index.ts
 const PROVIDERS = [
 	"APPLE",
 	"DISCORD",
@@ -13,7 +13,6 @@ const PROVIDERS = [
 	"EMAIL",
 	"PHONE"
 ];
-//#endregion
 export { PROVIDERS };
 
 //# sourceMappingURL=index.mjs.map

package/dist/email/schema.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_auth_attributes = require("../auth/attributes.cjs");
 let zod_mini = require("zod/mini");
-//#region src/email/schema.ts
+// src/email/schema.ts
 /**
 * An email address as an identity key: trimmed and lowercased before the format check, so
 * `" A@X.com "` is accepted as `"a@x.com"`. The whole address is lowercased, local part included:
@@ -18,7 +18,6 @@ const loginEmailSchema = (0, zod_mini.object)({
 	verificationCode: (0, zod_mini.string)().check((0, zod_mini.regex)(/^\d{6}$/)),
 	attributes: require_auth_attributes.attributesSchema
 });
-//#endregion
 exports.loginEmailSchema = loginEmailSchema;
 exports.sendEmailVerificationCodeSchema = sendEmailVerificationCodeSchema;
 

package/dist/email/schema.d.cts

@@ -1,4 +1,3 @@
-//#region src/email/schema.d.ts
 export declare const sendEmailVerificationCodeSchema: import("zod/mini").ZodMiniObject<{
   email: import("zod/mini").ZodMiniPipe<import("zod/mini").ZodMiniString<string>, import("zod/mini").ZodMiniEmail>;
   turnstileToken: import("zod/mini").ZodMiniString<string>;
@@ -8,5 +7,4 @@ export declare const loginEmailSchema: import("zod/mini").ZodMiniObject<{
   verificationCode: import("zod/mini").ZodMiniString<string>;
   attributes: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniRecord<import("zod/mini").ZodMiniString<string>, import("zod/mini").ZodMiniString<string>>>;
 }, import("zod/v4/core").$strip>;
-//#endregion
 //# sourceMappingURL=schema.d.cts.map

package/dist/email/schema.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.cts","names":[],"sources":["../../src/email/schema.ts"],"mappings":";qBAWa,oDAA+B;;;yBAG1C;qBAEW,qCAAgB;;;;yBAI3B"}
+{"version":3,"file":"schema.d.cts","names":[],"sources":["../../src/email/schema.ts"],"mappings":"A,qBAWa,oDAA+B;;;yBAG1C;qBAEW,qCAAgB;;;;yBAI3B"}

package/dist/email/schema.d.mts

@@ -1,4 +1,3 @@
-//#region src/email/schema.d.ts
 export declare const sendEmailVerificationCodeSchema: import("zod/mini").ZodMiniObject<{
   email: import("zod/mini").ZodMiniPipe<import("zod/mini").ZodMiniString<string>, import("zod/mini").ZodMiniEmail>;
   turnstileToken: import("zod/mini").ZodMiniString<string>;
@@ -8,5 +7,4 @@ export declare const loginEmailSchema: import("zod/mini").ZodMiniObject<{
   verificationCode: import("zod/mini").ZodMiniString<string>;
   attributes: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniRecord<import("zod/mini").ZodMiniString<string>, import("zod/mini").ZodMiniString<string>>>;
 }, import("zod/v4/core").$strip>;
-//#endregion
 //# sourceMappingURL=schema.d.mts.map

package/dist/email/schema.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.mts","names":[],"sources":["../../src/email/schema.ts"],"mappings":";qBAWa,oDAA+B;;;yBAG1C;qBAEW,qCAAgB;;;;yBAI3B"}
+{"version":3,"file":"schema.d.mts","names":[],"sources":["../../src/email/schema.ts"],"mappings":"A,qBAWa,oDAA+B;;;yBAG1C;qBAEW,qCAAgB;;;;yBAI3B"}

package/dist/email/schema.mjs

@@ -1,6 +1,6 @@
 import { attributesSchema } from "../auth/attributes.mjs";
 import { email, maxLength, object, pipe, regex, string, toLowerCase, trim } from "zod/mini";
-//#region src/email/schema.ts
+// src/email/schema.ts
 /**
 * An email address as an identity key: trimmed and lowercased before the format check, so
 * `" A@X.com "` is accepted as `"a@x.com"`. The whole address is lowercased, local part included:
@@ -17,7 +17,6 @@ const loginEmailSchema = object({
 	verificationCode: string().check(regex(/^\d{6}$/)),
 	attributes: attributesSchema
 });
-//#endregion
 export { loginEmailSchema, sendEmailVerificationCodeSchema };
 
 //# sourceMappingURL=schema.mjs.map

package/dist/oauth2/client.cjs

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_oauth2_error = require("./error.cjs");
 let _shware_utils = require("@shware/utils");
 let zod_v4_mini = require("zod/v4-mini");
-//#region src/oauth2/client.ts
+// src/oauth2/client.ts
 const oauth2RedirectQuerySchema = (0, zod_v4_mini.object)({
 	code: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
 	state: (0, zod_v4_mini.optional)((0, zod_v4_mini.string)()),
@@ -174,7 +174,6 @@ var OAuth2Client = class {
 function isOneTapProvider(provider) {
 	return typeof provider.getTokenInfo === "function";
 }
-//#endregion
 exports.OAuth2Client = OAuth2Client;
 exports.googleOneTapSchema = googleOneTapSchema;
 exports.oauth2RedirectQuerySchema = oauth2RedirectQuerySchema;

package/dist/oauth2/client.d.cts

@@ -1,5 +1,4 @@
 import { AuthorizationResponse, NativeCredential, OAuth2ClientConfig, OAuth2Token, OidcToken, PkceParameters, UserInfo } from "./types.cjs";
-//#region src/oauth2/client.d.ts
 export declare const oauth2RedirectQuerySchema: import("zod/mini").ZodMiniObject<{
   code: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
   state: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
@@ -97,5 +96,4 @@ export declare class OAuth2Client {
     clientId: string;
   }>;
 }
-//#endregion
 //# sourceMappingURL=client.d.cts.map

package/dist/oauth2/client.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.cts","names":["_$__types0.UserInfo"],"sources":["../../src/oauth2/client.ts"],"mappings":";;qBAkBa,8CAAyB;;;;;;;yBAQpC;qBAEW,uCAAkB;;;;;;;;;;yBAY7B;qBAEW;mBACM;EACjB,YAAY,QAAQ;MAIhB;MAIA;MAIA;;UAKU;UAUN;;UAKM;;;;;;UAaA;;;;;;UAcA;UAYA;EAIR,yBACJ,UACA,OACA;IAEA;IACA;IACA,OAAO;MACL,QAAQ;;EAYN,4BACJ,UACA,MACA;IAEA;IACA;IACA,OAAO;MACL;IAAU;IAAkB,OAAO;;;EAcjC,cACJ,UACA,UACA,OACA;IAEA;IACA;IACA,OAAO,cAAc;IACrB,WAAW;MACZ,QADYA;;EAOP,eAAe,UAAU;IAAgB;IAAkB;MAAoB;;;;;EAS/E,qBACJ,UACA,UACA;IAEA;IACA;IACA;MACE,QAAQ;EAON,cACJ,UACA,UACA;IAEA;IACA;IACA;MACD;;;;;EAWK,oBACJ,UACA,eAAe,kBAAkB,eACjC;IAEA;IACA,aAAa;IACb,OAAO,KAAK;MACb"}
+{"version":3,"file":"client.d.cts","names":["_$__types0.UserInfo"],"sources":["../../src/oauth2/client.ts"],"mappings":";qBAkBa,8CAAyB;;;;;;;yBAQpC;qBAEW,uCAAkB;;;;;;;;;;yBAY7B;qBAEW;mBACM;EACjB,YAAY,QAAQ;MAIhB;MAIA;MAIA;;UAKU;UAUN;;UAKM;;;;;;UAaA;;;;;;UAcA;UAYA;EAIR,yBACJ,UACA,OACA;IAEA;IACA;IACA,OAAO;MACL,QAAQ;;EAYN,4BACJ,UACA,MACA;IAEA;IACA;IACA,OAAO;MACL;IAAU;IAAkB,OAAO;;;EAcjC,cACJ,UACA,UACA,OACA;IAEA;IACA;IACA,OAAO,cAAc;IACrB,WAAW;MACZ,QADYA;;EAOP,eAAe,UAAU;IAAgB;IAAkB;MAAoB;;;;;EAS/E,qBACJ,UACA,UACA;IAEA;IACA;IACA;MACE,QAAQ;EAON,cACJ,UACA,UACA;IAEA;IACA;IACA;MACD;;;;;EAWK,oBACJ,UACA,eAAe,kBAAkB,eACjC;IAEA;IACA,aAAa;IACb,OAAO,KAAK;MACb"}

package/dist/oauth2/client.d.mts

@@ -1,5 +1,4 @@
 import { AuthorizationResponse, NativeCredential, OAuth2ClientConfig, OAuth2Token, OidcToken, PkceParameters, UserInfo } from "./types.mjs";
-//#region src/oauth2/client.d.ts
 export declare const oauth2RedirectQuerySchema: import("zod/mini").ZodMiniObject<{
   code: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
   state: import("zod/mini").ZodMiniOptional<import("zod/mini").ZodMiniString<string>>;
@@ -97,5 +96,4 @@ export declare class OAuth2Client {
     clientId: string;
   }>;
 }
-//#endregion
 //# sourceMappingURL=client.d.mts.map

package/dist/oauth2/client.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.mts","names":["_$__types0.UserInfo"],"sources":["../../src/oauth2/client.ts"],"mappings":";;qBAkBa,8CAAyB;;;;;;;yBAQpC;qBAEW,uCAAkB;;;;;;;;;;yBAY7B;qBAEW;mBACM;EACjB,YAAY,QAAQ;MAIhB;MAIA;MAIA;;UAKU;UAUN;;UAKM;;;;;;UAaA;;;;;;UAcA;UAYA;EAIR,yBACJ,UACA,OACA;IAEA;IACA;IACA,OAAO;MACL,QAAQ;;EAYN,4BACJ,UACA,MACA;IAEA;IACA;IACA,OAAO;MACL;IAAU;IAAkB,OAAO;;;EAcjC,cACJ,UACA,UACA,OACA;IAEA;IACA;IACA,OAAO,cAAc;IACrB,WAAW;MACZ,QADYA;;EAOP,eAAe,UAAU;IAAgB;IAAkB;MAAoB;;;;;EAS/E,qBACJ,UACA,UACA;IAEA;IACA;IACA;MACE,QAAQ;EAON,cACJ,UACA,UACA;IAEA;IACA;IACA;MACD;;;;;EAWK,oBACJ,UACA,eAAe,kBAAkB,eACjC;IAEA;IACA,aAAa;IACb,OAAO,KAAK;MACb"}
+{"version":3,"file":"client.d.mts","names":["_$__types0.UserInfo"],"sources":["../../src/oauth2/client.ts"],"mappings":";qBAkBa,8CAAyB;;;;;;;yBAQpC;qBAEW,uCAAkB;;;;;;;;;;yBAY7B;qBAEW;mBACM;EACjB,YAAY,QAAQ;MAIhB;MAIA;MAIA;;UAKU;UAUN;;UAKM;;;;;;UAaA;;;;;;UAcA;UAYA;EAIR,yBACJ,UACA,OACA;IAEA;IACA;IACA,OAAO;MACL,QAAQ;;EAYN,4BACJ,UACA,MACA;IAEA;IACA;IACA,OAAO;MACL;IAAU;IAAkB,OAAO;;;EAcjC,cACJ,UACA,UACA,OACA;IAEA;IACA;IACA,OAAO,cAAc;IACrB,WAAW;MACZ,QADYA;;EAOP,eAAe,UAAU;IAAgB;IAAkB;MAAoB;;;;;EAS/E,qBACJ,UACA,UACA;IAEA;IACA;IACA;MACE,QAAQ;EAON,cACJ,UACA,UACA;IAEA;IACA;IACA;MACD;;;;;EAWK,oBACJ,UACA,eAAe,kBAAkB,eACjC;IAEA;IACA,aAAa;IACb,OAAO,KAAK;MACb"}

package/dist/oauth2/client.mjs

@@ -1,7 +1,7 @@
 import { OAuth2Error } from "./error.mjs";
 import { invariant } from "@shware/utils";
 import { object, optional, string } from "zod/v4-mini";
-//#region src/oauth2/client.ts
+// src/oauth2/client.ts
 const oauth2RedirectQuerySchema = object({
 	code: optional(string()),
 	state: optional(string()),
@@ -173,7 +173,6 @@ var OAuth2Client = class {
 function isOneTapProvider(provider) {
 	return typeof provider.getTokenInfo === "function";
 }
-//#endregion
 export { OAuth2Client, googleOneTapSchema, oauth2RedirectQuerySchema };
 
 //# sourceMappingURL=client.mjs.map

package/dist/oauth2/error.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-//#region src/oauth2/error.ts
+// src/oauth2/error.ts
 /** The registered error codes of `OAuth2ErrorType`, for checking untrusted input at runtime. */
 const OAUTH2_ERROR_TYPES = /* @__PURE__ */ new Set([
 	"invalid_request",
@@ -35,7 +35,6 @@ var AuthenticationError = class AuthenticationError extends Error {
 		Object.setPrototypeOf(this, AuthenticationError.prototype);
 	}
 };
-//#endregion
 exports.AuthenticationError = AuthenticationError;
 exports.OAuth2Error = OAuth2Error;
 exports.isKnownOAuth2ErrorType = isKnownOAuth2ErrorType;

package/dist/oauth2/error.d.cts

@@ -1,4 +1,3 @@
-//#region src/oauth2/error.d.ts
 export type OAuth2ErrorType = 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'invalid_token' | 'invalid_scope' | 'unauthorized_client' | 'unsupported_grant_type' | 'unsupported_response_type' | 'insufficient_scope' | 'redirect_uri_mismatch' | 'access_denied' | 'server_error' | 'temporarily_unavailable' | (string & {});
 export declare function isKnownOAuth2ErrorType(value: string): boolean;
 export declare class OAuth2Error extends Error {
@@ -9,5 +8,4 @@ export declare class OAuth2Error extends Error {
 export declare class AuthenticationError extends Error {
   constructor(message: string);
 }
-//#endregion
 //# sourceMappingURL=error.d.cts.map

package/dist/oauth2/error.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.cts","names":[],"sources":["../../src/oauth2/error.ts"],"mappings":";YACY;wBAiCI,uBAAuB;qBAI1B,oBAAoB;WACtB;WACA,OAAO;EAEhB,YAAY,gBAAgB,OAAO,iBAAiB;;qBAQzC,4BAA4B;EACvC,YAAY"}
+{"version":3,"file":"error.d.cts","names":[],"sources":["../../src/oauth2/error.ts"],"mappings":"A,YACY;wBAiCI,uBAAuB;qBAI1B,oBAAoB;WACtB;WACA,OAAO;EAEhB,YAAY,gBAAgB,OAAO,iBAAiB;;qBAQzC,4BAA4B;EACvC,YAAY"}

package/dist/oauth2/error.d.mts

@@ -1,4 +1,3 @@
-//#region src/oauth2/error.d.ts
 export type OAuth2ErrorType = 'invalid_request' | 'invalid_client' | 'invalid_grant' | 'invalid_token' | 'invalid_scope' | 'unauthorized_client' | 'unsupported_grant_type' | 'unsupported_response_type' | 'insufficient_scope' | 'redirect_uri_mismatch' | 'access_denied' | 'server_error' | 'temporarily_unavailable' | (string & {});
 export declare function isKnownOAuth2ErrorType(value: string): boolean;
 export declare class OAuth2Error extends Error {
@@ -9,5 +8,4 @@ export declare class OAuth2Error extends Error {
 export declare class AuthenticationError extends Error {
   constructor(message: string);
 }
-//#endregion
 //# sourceMappingURL=error.d.mts.map

package/dist/oauth2/error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.mts","names":[],"sources":["../../src/oauth2/error.ts"],"mappings":";YACY;wBAiCI,uBAAuB;qBAI1B,oBAAoB;WACtB;WACA,OAAO;EAEhB,YAAY,gBAAgB,OAAO,iBAAiB;;qBAQzC,4BAA4B;EACvC,YAAY"}
+{"version":3,"file":"error.d.mts","names":[],"sources":["../../src/oauth2/error.ts"],"mappings":"A,YACY;wBAiCI,uBAAuB;qBAI1B,oBAAoB;WACtB;WACA,OAAO;EAEhB,YAAY,gBAAgB,OAAO,iBAAiB;;qBAQzC,4BAA4B;EACvC,YAAY"}

package/dist/oauth2/error.mjs

@@ -1,4 +1,4 @@
-//#region src/oauth2/error.ts
+// src/oauth2/error.ts
 /** The registered error codes of `OAuth2ErrorType`, for checking untrusted input at runtime. */
 const OAUTH2_ERROR_TYPES = /* @__PURE__ */ new Set([
 	"invalid_request",
@@ -34,7 +34,6 @@ var AuthenticationError = class AuthenticationError extends Error {
 		Object.setPrototypeOf(this, AuthenticationError.prototype);
 	}
 };
-//#endregion
 export { AuthenticationError, OAuth2Error, isKnownOAuth2ErrorType };
 
 //# sourceMappingURL=error.mjs.map

package/dist/oauth2/name.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-//#region src/oauth2/name.ts
+// src/oauth2/name.ts
 /**
 * Upper bound, in characters, on each name part taken from the client. Names that reach us outside
 * a signed token (Apple's form_post `user`, a native login body) are plain client input, so they
@@ -96,7 +96,6 @@ function isObject(value) {
 function withoutUndefined(value) {
 	return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== void 0));
 }
-//#endregion
 exports.MAX_NAME_PART_LENGTH = MAX_NAME_PART_LENGTH;
 exports.cleanNamePart = cleanNamePart;
 exports.cleanPersonName = cleanPersonName;

package/dist/oauth2/name.d.cts

@@ -1,5 +1,4 @@
 import { PersonNameComponents, StandardClaims } from "./types.cjs";
-//#region src/oauth2/name.d.ts
 /**
  * Upper bound, in characters, on each name part taken from the client. Names that reach us outside
  * a signed token (Apple's form_post `user`, a native login body) are plain client input, so they
@@ -44,6 +43,5 @@ type NameClaims = Pick<StandardClaims, 'name' | 'given_name' | 'family_name' | '
  * Undefined parts are left out, so spreading the result never overwrites a claim with `undefined`.
  */
 export declare function nameClaims(parts: Omit<NameClaims, 'name'>): NameClaims;
-//#endregion
 export {};
 //# sourceMappingURL=name.d.cts.map

package/dist/oauth2/name.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"name.d.cts","names":[],"sources":["../../src/oauth2/name.ts"],"mappings":";;;;;;;qBAOa;;;;;;;wBAaG,cACd,YACA,eACC,KAAK;;;;;;wBAcQ,cAAc;;iBAQb;EACf;IAAS;IAAoB;;EAC7B;;;;;;;wBAQc,eAAe,0BAA0B;;;;;wBAkCzC,gBAAgB,iBAAiB;KAU5C,aAAa,KAChB;;;;;wBAQc,WAAW,OAAO,KAAK,sBAAsB"}
+{"version":3,"file":"name.d.cts","names":[],"sources":["../../src/oauth2/name.ts"],"mappings":";;;;;;qBAOa;;;;;;;wBAaG,cACd,YACA,eACC,KAAK;;;;;;wBAcQ,cAAc;;iBAQb;EACf;IAAS;IAAoB;;EAC7B;;;;;;;wBAQc,eAAe,0BAA0B;;;;;wBAkCzC,gBAAgB,iBAAiB;KAU5C,aAAa,KAChB;;;;;wBAQc,WAAW,OAAO,KAAK,sBAAsB"}

package/dist/oauth2/name.d.mts

@@ -1,5 +1,4 @@
 import { PersonNameComponents, StandardClaims } from "./types.mjs";
-//#region src/oauth2/name.d.ts
 /**
  * Upper bound, in characters, on each name part taken from the client. Names that reach us outside
  * a signed token (Apple's form_post `user`, a native login body) are plain client input, so they
@@ -44,6 +43,5 @@ type NameClaims = Pick<StandardClaims, 'name' | 'given_name' | 'family_name' | '
  * Undefined parts are left out, so spreading the result never overwrites a claim with `undefined`.
  */
 export declare function nameClaims(parts: Omit<NameClaims, 'name'>): NameClaims;
-//#endregion
 export {};
 //# sourceMappingURL=name.d.mts.map

package/dist/oauth2/name.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"name.d.mts","names":[],"sources":["../../src/oauth2/name.ts"],"mappings":";;;;;;;qBAOa;;;;;;;wBAaG,cACd,YACA,eACC,KAAK;;;;;;wBAcQ,cAAc;;iBAQb;EACf;IAAS;IAAoB;;EAC7B;;;;;;;wBAQc,eAAe,0BAA0B;;;;;wBAkCzC,gBAAgB,iBAAiB;KAU5C,aAAa,KAChB;;;;;wBAQc,WAAW,OAAO,KAAK,sBAAsB"}
+{"version":3,"file":"name.d.mts","names":[],"sources":["../../src/oauth2/name.ts"],"mappings":";;;;;;qBAOa;;;;;;;wBAaG,cACd,YACA,eACC,KAAK;;;;;;wBAcQ,cAAc;;iBAQb;EACf;IAAS;IAAoB;;EAC7B;;;;;;;wBAQc,eAAe,0BAA0B;;;;;wBAkCzC,gBAAgB,iBAAiB;KAU5C,aAAa,KAChB;;;;;wBAQc,WAAW,OAAO,KAAK,sBAAsB"}

package/dist/oauth2/name.mjs

@@ -1,4 +1,4 @@
-//#region src/oauth2/name.ts
+// src/oauth2/name.ts
 /**
 * Upper bound, in characters, on each name part taken from the client. Names that reach us outside
 * a signed token (Apple's form_post `user`, a native login body) are plain client input, so they
@@ -95,7 +95,6 @@ function isObject(value) {
 function withoutUndefined(value) {
 	return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== void 0));
 }
-//#endregion
 export { MAX_NAME_PART_LENGTH, cleanNamePart, cleanPersonName, composeName, nameClaims, parseAppleUser };
 
 //# sourceMappingURL=name.mjs.map

package/dist/oauth2/provider/apple-client-secret.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let jose = require("jose");
-//#region src/oauth2/provider/apple-client-secret.ts
+// src/oauth2/provider/apple-client-secret.ts
 /**
 * Sign in with Apple has no static client secret: the secret is a JWT the server signs with its
 * Sign in with Apple key (ES256, `iss` = team, `sub` = client id, `aud` = appleid.apple.com), and
@@ -40,7 +40,6 @@ function createAppleClientSecret(options) {
 		return secret;
 	};
 }
-//#endregion
 exports.createAppleClientSecret = createAppleClientSecret;
 
 //# sourceMappingURL=apple-client-secret.cjs.map

package/dist/oauth2/provider/apple-client-secret.d.cts

@@ -1,4 +1,3 @@
-//#region src/oauth2/provider/apple-client-secret.d.ts
 export interface AppleClientSecretOptions {
   /** Apple Developer Team ID (Membership details). */
   teamId: string;
@@ -23,5 +22,4 @@ export interface AppleClientSecretOptions {
  * instead of generating, storing and rotating static ones by hand.
  */
 export declare function createAppleClientSecret(options: AppleClientSecretOptions): (clientId: string) => Promise<string>;
-//#endregion
 //# sourceMappingURL=apple-client-secret.d.cts.map

package/dist/oauth2/provider/apple-client-secret.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"apple-client-secret.d.cts","names":[],"sources":["../../../src/oauth2/provider/apple-client-secret.ts"],"mappings":";iBAEiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;wBAcc,wBAAwB,SAAS,4BAAwB,qBAmBZ"}
+{"version":3,"file":"apple-client-secret.d.cts","names":[],"sources":["../../../src/oauth2/provider/apple-client-secret.ts"],"mappings":"A,iBAEiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;wBAcc,wBAAwB,SAAS,4BAAwB,qBAmBZ"}

package/dist/oauth2/provider/apple-client-secret.d.mts

@@ -1,4 +1,3 @@
-//#region src/oauth2/provider/apple-client-secret.d.ts
 export interface AppleClientSecretOptions {
   /** Apple Developer Team ID (Membership details). */
   teamId: string;
@@ -23,5 +22,4 @@ export interface AppleClientSecretOptions {
  * instead of generating, storing and rotating static ones by hand.
  */
 export declare function createAppleClientSecret(options: AppleClientSecretOptions): (clientId: string) => Promise<string>;
-//#endregion
 //# sourceMappingURL=apple-client-secret.d.mts.map

package/dist/oauth2/provider/apple-client-secret.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apple-client-secret.d.mts","names":[],"sources":["../../../src/oauth2/provider/apple-client-secret.ts"],"mappings":";iBAEiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;wBAcc,wBAAwB,SAAS,4BAAwB,qBAmBZ"}
+{"version":3,"file":"apple-client-secret.d.mts","names":[],"sources":["../../../src/oauth2/provider/apple-client-secret.ts"],"mappings":"A,iBAEiB;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;wBAcc,wBAAwB,SAAS,4BAAwB,qBAmBZ"}

package/dist/oauth2/provider/apple-client-secret.mjs

@@ -1,5 +1,5 @@
 import { SignJWT, importPKCS8 } from "jose";
-//#region src/oauth2/provider/apple-client-secret.ts
+// src/oauth2/provider/apple-client-secret.ts
 /**
 * Sign in with Apple has no static client secret: the secret is a JWT the server signs with its
 * Sign in with Apple key (ES256, `iss` = team, `sub` = client id, `aud` = appleid.apple.com), and
@@ -39,7 +39,6 @@ function createAppleClientSecret(options) {
 		return secret;
 	};
 }
-//#endregion
 export { createAppleClientSecret };
 
 //# sourceMappingURL=apple-client-secret.mjs.map