@strivacity/sdk-core 3.0.3 → 4.0.0-beta.0

package/dist/utils/crypto.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const r=require("./base64Url.cjs");function t(){return crypto.randomUUID().replace(/-/g,"")}function n(){return crypto.randomUUID().replace(/-/g,"")}function o(){return`${crypto.randomUUID()}${crypto.randomUUID()}`.replace(/-/g,"")}async function c(e){return r.Base64Url.encode(await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e)))}const a={generateState:t,generateNonce:n,generateCodeVerifier:o,generateCodeChallenge:c};exports.Crypto=a;
-//# sourceMappingURL=crypto.cjs.map
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./base64url.cjs");async function t(e,t,n){let r=await globalThis.crypto.subtle.importKey(`raw`,new TextEncoder().encode(e),`HKDF`,!1,[`deriveBits`]),i=await globalThis.crypto.subtle.deriveBits({name:`HKDF`,hash:`SHA-256`,salt:t.buffer,info:new TextEncoder().encode(n)},r,256);return globalThis.crypto.subtle.importKey(`raw`,i,{name:`AES-GCM`},!1,[`encrypt`,`decrypt`])}async function n(n,r,i){let a=globalThis.crypto.getRandomValues(new Uint8Array(16)),o=globalThis.crypto.getRandomValues(new Uint8Array(12)),s=await t(r,a,i),c=new TextEncoder().encode(n),l=await globalThis.crypto.subtle.encrypt({name:`AES-GCM`,iv:o},s,c),u=new Uint8Array(a.byteLength+o.byteLength+l.byteLength);return u.set(a,0),u.set(o,a.byteLength),u.set(new Uint8Array(l),a.byteLength+o.byteLength),e.encodeBase64URL(u.buffer)}async function r(n,r,i){try{let a=new Uint8Array(e.decodeBase64URL(n)),o=a.slice(0,16),s=a.slice(16,28),c=a.slice(28),l=await t(r,o,i),u=await globalThis.crypto.subtle.decrypt({name:`AES-GCM`,iv:s},l,c);return new TextDecoder().decode(u)}catch{return null}}exports.decryptString=r,exports.encryptString=n;
+//# sourceMappingURL=crypto.cjs.map

package/dist/utils/crypto.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.cjs","sources":["../../src/utils/crypto.ts"],"sourcesContent":["import { Base64Url } from './base64Url';\n\n/**\n * Generates a unique state string using UUID, suitable for OAuth flows.\n *\n * @returns {string} A randomly generated state string.\n */\nfunction generateState(): string {\n\treturn crypto.randomUUID().replace(/-/g, '');\n}\n\n/**\n * Generates a unique nonce using UUID, suitable for security in OAuth flows.\n *\n * @returns {string} A randomly generated nonce string.\n */\nfunction generateNonce(): string {\n\treturn crypto.randomUUID().replace(/-/g, '');\n}\n\n/**\n * Generates a code verifier for PKCE (Proof Key for Code Exchange).\n *\n * @returns {string} A randomly generated code verifier string.\n */\nfunction generateCodeVerifier(): string {\n\treturn `${crypto.randomUUID()}${crypto.randomUUID()}`.replace(/-/g, '');\n}\n\n/**\n * Generates a code challenge from a code verifier using SHA-256 hashing.\n *\n * @param {string} codeVerifier The code verifier string.\n * @returns {Promise<string>} A promise that resolves to the generated code challenge.\n */\nasync function generateCodeChallenge(codeVerifier: string): Promise<string> {\n\treturn Base64Url.encode(await crypto.subtle.digest('SHA-256', new TextEncoder().encode(codeVerifier)));\n}\n\nexport const Crypto = {\n\tgenerateState,\n\tgenerateNonce,\n\tgenerateCodeVerifier,\n\tgenerateCodeChallenge,\n};\n"],"names":["generateState","generateNonce","generateCodeVerifier","generateCodeChallenge","codeVerifier","Base64Url","Crypto"],"mappings":"mHAOA,SAASA,GAAwB,CAChC,OAAO,OAAO,WAAA,EAAa,QAAQ,KAAM,EAAE,CAC5C,CAOA,SAASC,GAAwB,CAChC,OAAO,OAAO,WAAA,EAAa,QAAQ,KAAM,EAAE,CAC5C,CAOA,SAASC,GAA+B,CACvC,MAAO,GAAG,OAAO,WAAA,CAAY,GAAG,OAAO,WAAA,CAAY,GAAG,QAAQ,KAAM,EAAE,CACvE,CAQA,eAAeC,EAAsBC,EAAuC,CAC3E,OAAOC,YAAU,OAAO,MAAM,OAAO,OAAO,OAAO,UAAW,IAAI,YAAA,EAAc,OAAOD,CAAY,CAAC,CAAC,CACtG,CAEO,MAAME,EAAS,CACrB,cAAAN,EACA,cAAAC,EACA,qBAAAC,EACA,sBAAAC,CACD"}
+{"version":3,"file":"crypto.cjs","names":[],"sources":["../../src/utils/crypto.ts"],"sourcesContent":["import { decodeBase64URL, encodeBase64URL } from './base64url';\n\n/**\n * Derives a cryptographic key from the provided secret, salt, and context using the HKDF (HMAC-based Extract-and-Expand Key Derivation Function) algorithm.\n *\n * @param {string} secret - The input key material (IKM).\n * @param {Uint8Array} salt - A random salt (should be stored alongside the ciphertext).\n * @param {string} context - A context string that binds the key to its intended purpose (e.g. 'session', 'transaction').\n * @returns {Promise<CryptoKey>} A promise that resolves to the derived AES-GCM CryptoKey.\n */\nasync function deriveKey(secret: string, salt: Uint8Array, context: string): Promise<CryptoKey> {\n\tconst ikm = await globalThis.crypto.subtle.importKey('raw', new TextEncoder().encode(secret), 'HKDF', false, ['deriveBits']);\n\n\tconst keyBits = await globalThis.crypto.subtle.deriveBits(\n\t\t{\n\t\t\tname: 'HKDF',\n\t\t\thash: 'SHA-256',\n\t\t\tsalt: salt.buffer as ArrayBuffer,\n\t\t\tinfo: new TextEncoder().encode(context),\n\t\t},\n\t\tikm,\n\t\t32 << 3, // 256 bits\n\t);\n\n\treturn globalThis.crypto.subtle.importKey('raw', keyBits, { name: 'AES-GCM' }, false, ['encrypt', 'decrypt']);\n}\n\n/**\n * Encrypts a plaintext string using AES-GCM with a per-operation salt and IV.\n * The output format is Base64URL( salt(16) + iv(12) + ciphertext ).\n * A fresh HKDF key is derived for each encryption using the provided secret and context.\n *\n * @param {string} plaintext - The plaintext string to be encrypted.\n * @param {string} secret - The input key material.\n * @param {string} context - A context string that binds the key to its intended purpose.\n * @returns {Promise<string>} A promise that resolves to the Base64URL-encoded payload.\n */\nexport async function encryptString(plaintext: string, secret: string, context: string): Promise<string> {\n\tconst salt = globalThis.crypto.getRandomValues(new Uint8Array(16));\n\tconst iv = globalThis.crypto.getRandomValues(new Uint8Array(12));\n\tconst cryptoKey = await deriveKey(secret, salt, context);\n\tconst encoded = new TextEncoder().encode(plaintext);\n\tconst ciphertext = await globalThis.crypto.subtle.encrypt({ name: 'AES-GCM', iv }, cryptoKey, encoded);\n\tconst combined = new Uint8Array(salt.byteLength + iv.byteLength + ciphertext.byteLength);\n\n\tcombined.set(salt, 0);\n\tcombined.set(iv, salt.byteLength);\n\tcombined.set(new Uint8Array(ciphertext), salt.byteLength + iv.byteLength);\n\n\treturn encodeBase64URL(combined.buffer);\n}\n\n/**\n * Decrypts a Base64URL-encoded payload produced by {@link encryptString}.\n * Expects the format: salt(16) + iv(12) + ciphertext.\n * If decryption fails (e.g., due to tampering or incorrect key), the function returns null.\n *\n * @param {string} encoded - The Base64URL-encoded payload to be decrypted.\n * @param {string} secret - The input key material.\n * @param {string} context - The context string used during encryption.\n * @returns {Promise<string | null>} A promise that resolves to the decrypted plaintext string, or null if decryption fails.\n */\nexport async function decryptString(encoded: string, secret: string, context: string): Promise<string | null> {\n\ttry {\n\t\tconst combined = new Uint8Array(decodeBase64URL(encoded));\n\t\tconst salt = combined.slice(0, 16);\n\t\tconst iv = combined.slice(16, 28);\n\t\tconst ciphertext = combined.slice(28);\n\t\tconst cryptoKey = await deriveKey(secret, salt, context);\n\t\tconst plaintext = await globalThis.crypto.subtle.decrypt({ name: 'AES-GCM', iv }, cryptoKey, ciphertext);\n\n\t\treturn new TextDecoder().decode(plaintext);\n\t} catch {\n\t\treturn null;\n\t}\n}\n"],"mappings":"sGAUA,eAAe,EAAU,EAAgB,EAAkB,EAAqC,CAC/F,IAAM,EAAM,MAAM,WAAW,OAAO,OAAO,UAAU,MAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAM,EAAG,OAAQ,GAAO,CAAC,YAAY,CAAC,EAErH,EAAU,MAAM,WAAW,OAAO,OAAO,WAC9C,CACC,KAAM,OACN,KAAM,UACN,KAAM,EAAK,OACX,KAAM,IAAI,YAAY,CAAC,CAAC,OAAO,CAAO,CACvC,EACA,EACA,GACD,EAEA,OAAO,WAAW,OAAO,OAAO,UAAU,MAAO,EAAS,CAAE,KAAM,SAAU,EAAG,GAAO,CAAC,UAAW,SAAS,CAAC,CAC7G,CAYA,eAAsB,EAAc,EAAmB,EAAgB,EAAkC,CACxG,IAAM,EAAO,WAAW,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC3D,EAAK,WAAW,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EACzD,EAAY,MAAM,EAAU,EAAQ,EAAM,CAAO,EACjD,EAAU,IAAI,YAAY,CAAC,CAAC,OAAO,CAAS,EAC5C,EAAa,MAAM,WAAW,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,IAAG,EAAG,EAAW,CAAO,EAC/F,EAAW,IAAI,WAAW,EAAK,WAAa,EAAG,WAAa,EAAW,UAAU,EAMvF,OAJA,EAAS,IAAI,EAAM,CAAC,EACpB,EAAS,IAAI,EAAI,EAAK,UAAU,EAChC,EAAS,IAAI,IAAI,WAAW,CAAU,EAAG,EAAK,WAAa,EAAG,UAAU,EAEjE,EAAA,gBAAgB,EAAS,MAAM,CACvC,CAYA,eAAsB,EAAc,EAAiB,EAAgB,EAAyC,CAC7G,GAAI,CACH,IAAM,EAAW,IAAI,WAAW,EAAA,gBAAgB,CAAO,CAAC,EAClD,EAAO,EAAS,MAAM,EAAG,EAAE,EAC3B,EAAK,EAAS,MAAM,GAAI,EAAE,EAC1B,EAAa,EAAS,MAAM,EAAE,EAC9B,EAAY,MAAM,EAAU,EAAQ,EAAM,CAAO,EACjD,EAAY,MAAM,WAAW,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,IAAG,EAAG,EAAW,CAAU,EAEvG,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAS,CAC1C,MAAQ,CACP,OAAO,IACR,CACD"}

package/dist/utils/crypto.d.ts

@@ -1,32 +1,22 @@
 /**
- * Generates a unique state string using UUID, suitable for OAuth flows.
+ * Encrypts a plaintext string using AES-GCM with a per-operation salt and IV.
+ * The output format is Base64URL( salt(16) + iv(12) + ciphertext ).
+ * A fresh HKDF key is derived for each encryption using the provided secret and context.
  *
- * @returns {string} A randomly generated state string.
+ * @param {string} plaintext - The plaintext string to be encrypted.
+ * @param {string} secret - The input key material.
+ * @param {string} context - A context string that binds the key to its intended purpose.
+ * @returns {Promise<string>} A promise that resolves to the Base64URL-encoded payload.
  */
-declare function generateState(): string;
+export declare function encryptString(plaintext: string, secret: string, context: string): Promise<string>;
 /**
- * Generates a unique nonce using UUID, suitable for security in OAuth flows.
+ * Decrypts a Base64URL-encoded payload produced by {@link encryptString}.
+ * Expects the format: salt(16) + iv(12) + ciphertext.
+ * If decryption fails (e.g., due to tampering or incorrect key), the function returns null.
  *
- * @returns {string} A randomly generated nonce string.
+ * @param {string} encoded - The Base64URL-encoded payload to be decrypted.
+ * @param {string} secret - The input key material.
+ * @param {string} context - The context string used during encryption.
+ * @returns {Promise<string | null>} A promise that resolves to the decrypted plaintext string, or null if decryption fails.
  */
-declare function generateNonce(): string;
-/**
- * Generates a code verifier for PKCE (Proof Key for Code Exchange).
- *
- * @returns {string} A randomly generated code verifier string.
- */
-declare function generateCodeVerifier(): string;
-/**
- * Generates a code challenge from a code verifier using SHA-256 hashing.
- *
- * @param {string} codeVerifier The code verifier string.
- * @returns {Promise<string>} A promise that resolves to the generated code challenge.
- */
-declare function generateCodeChallenge(codeVerifier: string): Promise<string>;
-export declare const Crypto: {
-    generateState: typeof generateState;
-    generateNonce: typeof generateNonce;
-    generateCodeVerifier: typeof generateCodeVerifier;
-    generateCodeChallenge: typeof generateCodeChallenge;
-};
-export {};
+export declare function decryptString(encoded: string, secret: string, context: string): Promise<string | null>;

package/dist/utils/crypto.mjs

@@ -1,2 +1,2 @@
-import{Base64Url as r}from"./base64Url.mjs";function n(){return crypto.randomUUID().replace(/-/g,"")}function t(){return crypto.randomUUID().replace(/-/g,"")}function o(){return`${crypto.randomUUID()}${crypto.randomUUID()}`.replace(/-/g,"")}async function c(e){return r.encode(await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e)))}const p={generateState:n,generateNonce:t,generateCodeVerifier:o,generateCodeChallenge:c};export{p as Crypto};
-//# sourceMappingURL=crypto.mjs.map
+import{decodeBase64URL as e,encodeBase64URL as t}from"./base64url.mjs";async function n(e,t,n){let r=await globalThis.crypto.subtle.importKey(`raw`,new TextEncoder().encode(e),`HKDF`,!1,[`deriveBits`]),i=await globalThis.crypto.subtle.deriveBits({name:`HKDF`,hash:`SHA-256`,salt:t.buffer,info:new TextEncoder().encode(n)},r,256);return globalThis.crypto.subtle.importKey(`raw`,i,{name:`AES-GCM`},!1,[`encrypt`,`decrypt`])}async function r(e,r,i){let a=globalThis.crypto.getRandomValues(new Uint8Array(16)),o=globalThis.crypto.getRandomValues(new Uint8Array(12)),s=await n(r,a,i),c=new TextEncoder().encode(e),l=await globalThis.crypto.subtle.encrypt({name:`AES-GCM`,iv:o},s,c),u=new Uint8Array(a.byteLength+o.byteLength+l.byteLength);return u.set(a,0),u.set(o,a.byteLength),u.set(new Uint8Array(l),a.byteLength+o.byteLength),t(u.buffer)}async function i(t,r,i){try{let a=new Uint8Array(e(t)),o=a.slice(0,16),s=a.slice(16,28),c=a.slice(28),l=await n(r,o,i),u=await globalThis.crypto.subtle.decrypt({name:`AES-GCM`,iv:s},l,c);return new TextDecoder().decode(u)}catch{return null}}export{i as decryptString,r as encryptString};
+//# sourceMappingURL=crypto.mjs.map

package/dist/utils/crypto.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.mjs","sources":["../../src/utils/crypto.ts"],"sourcesContent":["import { Base64Url } from './base64Url';\n\n/**\n * Generates a unique state string using UUID, suitable for OAuth flows.\n *\n * @returns {string} A randomly generated state string.\n */\nfunction generateState(): string {\n\treturn crypto.randomUUID().replace(/-/g, '');\n}\n\n/**\n * Generates a unique nonce using UUID, suitable for security in OAuth flows.\n *\n * @returns {string} A randomly generated nonce string.\n */\nfunction generateNonce(): string {\n\treturn crypto.randomUUID().replace(/-/g, '');\n}\n\n/**\n * Generates a code verifier for PKCE (Proof Key for Code Exchange).\n *\n * @returns {string} A randomly generated code verifier string.\n */\nfunction generateCodeVerifier(): string {\n\treturn `${crypto.randomUUID()}${crypto.randomUUID()}`.replace(/-/g, '');\n}\n\n/**\n * Generates a code challenge from a code verifier using SHA-256 hashing.\n *\n * @param {string} codeVerifier The code verifier string.\n * @returns {Promise<string>} A promise that resolves to the generated code challenge.\n */\nasync function generateCodeChallenge(codeVerifier: string): Promise<string> {\n\treturn Base64Url.encode(await crypto.subtle.digest('SHA-256', new TextEncoder().encode(codeVerifier)));\n}\n\nexport const Crypto = {\n\tgenerateState,\n\tgenerateNonce,\n\tgenerateCodeVerifier,\n\tgenerateCodeChallenge,\n};\n"],"names":["generateState","generateNonce","generateCodeVerifier","generateCodeChallenge","codeVerifier","Base64Url","Crypto"],"mappings":"4CAOA,SAASA,GAAwB,CAChC,OAAO,OAAO,WAAA,EAAa,QAAQ,KAAM,EAAE,CAC5C,CAOA,SAASC,GAAwB,CAChC,OAAO,OAAO,WAAA,EAAa,QAAQ,KAAM,EAAE,CAC5C,CAOA,SAASC,GAA+B,CACvC,MAAO,GAAG,OAAO,WAAA,CAAY,GAAG,OAAO,WAAA,CAAY,GAAG,QAAQ,KAAM,EAAE,CACvE,CAQA,eAAeC,EAAsBC,EAAuC,CAC3E,OAAOC,EAAU,OAAO,MAAM,OAAO,OAAO,OAAO,UAAW,IAAI,YAAA,EAAc,OAAOD,CAAY,CAAC,CAAC,CACtG,CAEO,MAAME,EAAS,CACrB,cAAAN,EACA,cAAAC,EACA,qBAAAC,EACA,sBAAAC,CACD"}
+{"version":3,"file":"crypto.mjs","names":[],"sources":["../../src/utils/crypto.ts"],"sourcesContent":["import { decodeBase64URL, encodeBase64URL } from './base64url';\n\n/**\n * Derives a cryptographic key from the provided secret, salt, and context using the HKDF (HMAC-based Extract-and-Expand Key Derivation Function) algorithm.\n *\n * @param {string} secret - The input key material (IKM).\n * @param {Uint8Array} salt - A random salt (should be stored alongside the ciphertext).\n * @param {string} context - A context string that binds the key to its intended purpose (e.g. 'session', 'transaction').\n * @returns {Promise<CryptoKey>} A promise that resolves to the derived AES-GCM CryptoKey.\n */\nasync function deriveKey(secret: string, salt: Uint8Array, context: string): Promise<CryptoKey> {\n\tconst ikm = await globalThis.crypto.subtle.importKey('raw', new TextEncoder().encode(secret), 'HKDF', false, ['deriveBits']);\n\n\tconst keyBits = await globalThis.crypto.subtle.deriveBits(\n\t\t{\n\t\t\tname: 'HKDF',\n\t\t\thash: 'SHA-256',\n\t\t\tsalt: salt.buffer as ArrayBuffer,\n\t\t\tinfo: new TextEncoder().encode(context),\n\t\t},\n\t\tikm,\n\t\t32 << 3, // 256 bits\n\t);\n\n\treturn globalThis.crypto.subtle.importKey('raw', keyBits, { name: 'AES-GCM' }, false, ['encrypt', 'decrypt']);\n}\n\n/**\n * Encrypts a plaintext string using AES-GCM with a per-operation salt and IV.\n * The output format is Base64URL( salt(16) + iv(12) + ciphertext ).\n * A fresh HKDF key is derived for each encryption using the provided secret and context.\n *\n * @param {string} plaintext - The plaintext string to be encrypted.\n * @param {string} secret - The input key material.\n * @param {string} context - A context string that binds the key to its intended purpose.\n * @returns {Promise<string>} A promise that resolves to the Base64URL-encoded payload.\n */\nexport async function encryptString(plaintext: string, secret: string, context: string): Promise<string> {\n\tconst salt = globalThis.crypto.getRandomValues(new Uint8Array(16));\n\tconst iv = globalThis.crypto.getRandomValues(new Uint8Array(12));\n\tconst cryptoKey = await deriveKey(secret, salt, context);\n\tconst encoded = new TextEncoder().encode(plaintext);\n\tconst ciphertext = await globalThis.crypto.subtle.encrypt({ name: 'AES-GCM', iv }, cryptoKey, encoded);\n\tconst combined = new Uint8Array(salt.byteLength + iv.byteLength + ciphertext.byteLength);\n\n\tcombined.set(salt, 0);\n\tcombined.set(iv, salt.byteLength);\n\tcombined.set(new Uint8Array(ciphertext), salt.byteLength + iv.byteLength);\n\n\treturn encodeBase64URL(combined.buffer);\n}\n\n/**\n * Decrypts a Base64URL-encoded payload produced by {@link encryptString}.\n * Expects the format: salt(16) + iv(12) + ciphertext.\n * If decryption fails (e.g., due to tampering or incorrect key), the function returns null.\n *\n * @param {string} encoded - The Base64URL-encoded payload to be decrypted.\n * @param {string} secret - The input key material.\n * @param {string} context - The context string used during encryption.\n * @returns {Promise<string | null>} A promise that resolves to the decrypted plaintext string, or null if decryption fails.\n */\nexport async function decryptString(encoded: string, secret: string, context: string): Promise<string | null> {\n\ttry {\n\t\tconst combined = new Uint8Array(decodeBase64URL(encoded));\n\t\tconst salt = combined.slice(0, 16);\n\t\tconst iv = combined.slice(16, 28);\n\t\tconst ciphertext = combined.slice(28);\n\t\tconst cryptoKey = await deriveKey(secret, salt, context);\n\t\tconst plaintext = await globalThis.crypto.subtle.decrypt({ name: 'AES-GCM', iv }, cryptoKey, ciphertext);\n\n\t\treturn new TextDecoder().decode(plaintext);\n\t} catch {\n\t\treturn null;\n\t}\n}\n"],"mappings":"uEAUA,eAAe,EAAU,EAAgB,EAAkB,EAAqC,CAC/F,IAAM,EAAM,MAAM,WAAW,OAAO,OAAO,UAAU,MAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAM,EAAG,OAAQ,GAAO,CAAC,YAAY,CAAC,EAErH,EAAU,MAAM,WAAW,OAAO,OAAO,WAC9C,CACC,KAAM,OACN,KAAM,UACN,KAAM,EAAK,OACX,KAAM,IAAI,YAAY,CAAC,CAAC,OAAO,CAAO,CACvC,EACA,EACA,GACD,EAEA,OAAO,WAAW,OAAO,OAAO,UAAU,MAAO,EAAS,CAAE,KAAM,SAAU,EAAG,GAAO,CAAC,UAAW,SAAS,CAAC,CAC7G,CAYA,eAAsB,EAAc,EAAmB,EAAgB,EAAkC,CACxG,IAAM,EAAO,WAAW,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC3D,EAAK,WAAW,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EACzD,EAAY,MAAM,EAAU,EAAQ,EAAM,CAAO,EACjD,EAAU,IAAI,YAAY,CAAC,CAAC,OAAO,CAAS,EAC5C,EAAa,MAAM,WAAW,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,IAAG,EAAG,EAAW,CAAO,EAC/F,EAAW,IAAI,WAAW,EAAK,WAAa,EAAG,WAAa,EAAW,UAAU,EAMvF,OAJA,EAAS,IAAI,EAAM,CAAC,EACpB,EAAS,IAAI,EAAI,EAAK,UAAU,EAChC,EAAS,IAAI,IAAI,WAAW,CAAU,EAAG,EAAK,WAAa,EAAG,UAAU,EAEjE,EAAgB,EAAS,MAAM,CACvC,CAYA,eAAsB,EAAc,EAAiB,EAAgB,EAAyC,CAC7G,GAAI,CACH,IAAM,EAAW,IAAI,WAAW,EAAgB,CAAO,CAAC,EAClD,EAAO,EAAS,MAAM,EAAG,EAAE,EAC3B,EAAK,EAAS,MAAM,GAAI,EAAE,EAC1B,EAAa,EAAS,MAAM,EAAE,EAC9B,EAAY,MAAM,EAAU,EAAQ,EAAM,CAAO,EACjD,EAAY,MAAM,WAAW,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,IAAG,EAAG,EAAW,CAAU,EAEvG,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAS,CAC1C,MAAQ,CACP,OAAO,IACR,CACD"}

package/dist/utils/dom.cjs

@@ -0,0 +1,2 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});function e(e,t){if(typeof document>`u`||document.getElementById(e))return;let n=document.createElement(`script`);n.id=e,n.src=t,n.async=!0,n.type=`module`,document.body.appendChild(n)}exports.injectScript=e;
+//# sourceMappingURL=dom.cjs.map

package/dist/utils/dom.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dom.cjs","names":[],"sources":["../../src/utils/dom.ts"],"sourcesContent":["/**\n * Injects an async ES module script, deduplicating by id.\n *\n * @param {string} id - A unique identifier for the script element.\n * @param {string} src - The URL of the script to inject.\n */\nexport function injectScript(id: string, src: string): void {\n\tif (typeof document === 'undefined' || document.getElementById(id)) {\n\t\treturn;\n\t}\n\n\tconst script = document.createElement('script');\n\n\tscript.id = id;\n\tscript.src = src;\n\tscript.async = true;\n\tscript.type = 'module';\n\n\tdocument.body.appendChild(script);\n}\n"],"mappings":"mEAMA,SAAgB,EAAa,EAAY,EAAmB,CAC3D,GAAI,OAAO,SAAa,KAAe,SAAS,eAAe,CAAE,EAChE,OAGD,IAAM,EAAS,SAAS,cAAc,QAAQ,EAE9C,EAAO,GAAK,EACZ,EAAO,IAAM,EACb,EAAO,MAAQ,GACf,EAAO,KAAO,SAEd,SAAS,KAAK,YAAY,CAAM,CACjC"}

package/dist/utils/dom.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Injects an async ES module script, deduplicating by id.
+ *
+ * @param {string} id - A unique identifier for the script element.
+ * @param {string} src - The URL of the script to inject.
+ */
+export declare function injectScript(id: string, src: string): void;

package/dist/utils/dom.mjs

@@ -0,0 +1,2 @@
+function e(e,t){if(typeof document>`u`||document.getElementById(e))return;let n=document.createElement(`script`);n.id=e,n.src=t,n.async=!0,n.type=`module`,document.body.appendChild(n)}export{e as injectScript};
+//# sourceMappingURL=dom.mjs.map

package/dist/utils/dom.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dom.mjs","names":[],"sources":["../../src/utils/dom.ts"],"sourcesContent":["/**\n * Injects an async ES module script, deduplicating by id.\n *\n * @param {string} id - A unique identifier for the script element.\n * @param {string} src - The URL of the script to inject.\n */\nexport function injectScript(id: string, src: string): void {\n\tif (typeof document === 'undefined' || document.getElementById(id)) {\n\t\treturn;\n\t}\n\n\tconst script = document.createElement('script');\n\n\tscript.id = id;\n\tscript.src = src;\n\tscript.async = true;\n\tscript.type = 'module';\n\n\tdocument.body.appendChild(script);\n}\n"],"mappings":"AAMA,SAAgB,EAAa,EAAY,EAAmB,CAC3D,GAAI,OAAO,SAAa,KAAe,SAAS,eAAe,CAAE,EAChE,OAGD,IAAM,EAAS,SAAS,cAAc,QAAQ,EAE9C,EAAO,GAAK,EACZ,EAAO,IAAM,EACb,EAAO,MAAQ,GACf,EAAO,KAAO,SAEd,SAAS,KAAK,YAAY,CAAM,CACjC"}

package/dist/utils/errors.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});class t extends Error{constructor(r){super("Fallback occurred"),this.url=r,this.name="FallbackError"}}class o extends Error{constructor(r="Popup window blocked"){super(r),this.name="PopupBlockedError",Object.setPrototypeOf(this,o.prototype)}}class e extends Error{constructor(r="Popup closed by user"){super(r),this.name="PopupClosedError",Object.setPrototypeOf(this,e.prototype)}}exports.FallbackError=t;exports.PopupBlockedError=o;exports.PopupClosedError=e;
-//# sourceMappingURL=errors.cjs.map
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=class extends Error{constructor(e,t){super(`Fallback occurred`),this.url=e,this.name=`FallbackError`,this.message=t?`Fallback occurred: ${t}`:`Fallback occurred`}},t=class e extends Error{constructor(t=`Popup window blocked`){super(t),this.name=`PopupBlockedError`,Object.setPrototypeOf(this,e.prototype)}},n=class e extends Error{constructor(t=`Popup closed by user`){super(t),this.name=`PopupClosedError`,Object.setPrototypeOf(this,e.prototype)}},r=class e extends Error{constructor(t=`Unsupported flow mode`){super(t),this.name=`UnsupportedFlowError`,Object.setPrototypeOf(this,e.prototype)}},i=class e extends Error{constructor(t=`Session expired`){super(t),this.name=`SessionExpiredError`,Object.setPrototypeOf(this,e.prototype)}},a=class e extends Error{constructor(t=`Network request failed`){super(t),this.category=`Network`,this.recoverable=!0,this.name=`NetworkError`,Object.setPrototypeOf(this,e.prototype)}},o=class e extends Error{constructor(t,n){super(t),this.status=n,this.category=`Server`,this.recoverable=!0,this.name=`ServerError`,Object.setPrototypeOf(this,e.prototype)}},s=class e extends Error{constructor(t,n,r){super(n?`${t}: ${n}`:t),this.error=t,this.errorDescription=n,this.errorUri=r,this.category=`Oidc`,this.recoverable=!1,this.name=`OidcError`,Object.setPrototypeOf(this,e.prototype)}},c=class e extends Error{constructor(t){super(t),this.category=`Protocol`,this.recoverable=!1,this.name=`ProtocolError`,Object.setPrototypeOf(this,e.prototype)}},l=class e extends Error{constructor(t){super(t),this.category=`InvalidRequest`,this.recoverable=!1,this.name=`ConfigurationError`,Object.setPrototypeOf(this,e.prototype)}},u=class e extends Error{constructor(t){super(t),this.category=`Internal`,this.recoverable=!1,this.name=`InternalError`,Object.setPrototypeOf(this,e.prototype)}};async function d(e){if(e.status===429||e.status>=500)throw new o(`Token endpoint returned HTTP ${e.status}`,e.status);let t;try{t=await e.json()}catch{throw new c(`Non-JSON error response from token endpoint`)}throw typeof t.error==`string`?new s(t.error,t.error_description,t.error_uri):new c(`Malformed error response from token endpoint`)}function f(e,t){throw e===429||e>=500?new o(t,e):new c(t)}exports.ConfigurationError=l,exports.FallbackError=e,exports.InternalError=u,exports.NetworkError=a,exports.OidcError=s,exports.PopupBlockedError=t,exports.PopupClosedError=n,exports.ProtocolError=c,exports.ServerError=o,exports.SessionExpiredError=i,exports.UnsupportedFlowError=r,exports.throwHttpError=f,exports.throwTokenEndpointError=d;
+//# sourceMappingURL=errors.cjs.map

package/dist/utils/errors.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.cjs","sources":["../../src/utils/errors.ts"],"sourcesContent":["export class FallbackError extends Error {\n\tconstructor(public url: URL) {\n\t\tsuper('Fallback occurred');\n\t\tthis.name = 'FallbackError';\n\t}\n}\n\n/**\n * Error thrown when a popup window is blocked by the browser.\n */\nexport class PopupBlockedError extends Error {\n\tconstructor(message = 'Popup window blocked') {\n\t\tsuper(message);\n\t\tthis.name = 'PopupBlockedError';\n\t\tObject.setPrototypeOf(this, PopupBlockedError.prototype);\n\t}\n}\n\n/**\n * Error thrown when a popup window is closed by the user before completion.\n */\nexport class PopupClosedError extends Error {\n\tconstructor(message = 'Popup closed by user') {\n\t\tsuper(message);\n\t\tthis.name = 'PopupClosedError';\n\t\tObject.setPrototypeOf(this, PopupClosedError.prototype);\n\t}\n}\n"],"names":["FallbackError","url","PopupBlockedError","message","PopupClosedError"],"mappings":"gFAAO,MAAMA,UAAsB,KAAM,CACxC,YAAmBC,EAAU,CAC5B,MAAM,mBAAmB,EADP,KAAA,IAAAA,EAElB,KAAK,KAAO,eACb,CACD,CAKO,MAAMC,UAA0B,KAAM,CAC5C,YAAYC,EAAU,uBAAwB,CAC7C,MAAMA,CAAO,EACb,KAAK,KAAO,oBACZ,OAAO,eAAe,KAAMD,EAAkB,SAAS,CACxD,CACD,CAKO,MAAME,UAAyB,KAAM,CAC3C,YAAYD,EAAU,uBAAwB,CAC7C,MAAMA,CAAO,EACb,KAAK,KAAO,mBACZ,OAAO,eAAe,KAAMC,EAAiB,SAAS,CACvD,CACD"}
+{"version":3,"file":"errors.cjs","names":[],"sources":["../../src/utils/errors.ts"],"sourcesContent":["export type FailureCategory = 'Network' | 'Server' | 'Oidc' | 'Protocol' | 'InvalidRequest' | 'Internal' | 'Unknown';\n\nexport class FallbackError extends Error {\n\tconstructor(\n\t\tpublic url: URL,\n\t\tmessage?: string,\n\t) {\n\t\tsuper('Fallback occurred');\n\t\tthis.name = 'FallbackError';\n\t\tthis.message = message ? `Fallback occurred: ${message}` : 'Fallback occurred';\n\t}\n}\n\n/**\n * Error thrown when a popup window is blocked by the browser.\n */\nexport class PopupBlockedError extends Error {\n\tconstructor(message = 'Popup window blocked') {\n\t\tsuper(message);\n\t\tthis.name = 'PopupBlockedError';\n\t\tObject.setPrototypeOf(this, PopupBlockedError.prototype);\n\t}\n}\n\n/**\n * Error thrown when a popup window is closed by the user before completion.\n */\nexport class PopupClosedError extends Error {\n\tconstructor(message = 'Popup closed by user') {\n\t\tsuper(message);\n\t\tthis.name = 'PopupClosedError';\n\t\tObject.setPrototypeOf(this, PopupClosedError.prototype);\n\t}\n}\n\nexport class UnsupportedFlowError extends Error {\n\tconstructor(message = 'Unsupported flow mode') {\n\t\tsuper(message);\n\t\tthis.name = 'UnsupportedFlowError';\n\t\tObject.setPrototypeOf(this, UnsupportedFlowError.prototype);\n\t}\n}\n\nexport class SessionExpiredError extends Error {\n\tconstructor(message = 'Session expired') {\n\t\tsuper(message);\n\t\tthis.name = 'SessionExpiredError';\n\t\tObject.setPrototypeOf(this, SessionExpiredError.prototype);\n\t}\n}\n\nexport class NetworkError extends Error {\n\treadonly category: FailureCategory = 'Network';\n\treadonly recoverable = true;\n\n\tconstructor(message = 'Network request failed') {\n\t\tsuper(message);\n\t\tthis.name = 'NetworkError';\n\t\tObject.setPrototypeOf(this, NetworkError.prototype);\n\t}\n}\n\nexport class ServerError extends Error {\n\treadonly category: FailureCategory = 'Server';\n\treadonly recoverable = true;\n\n\tconstructor(\n\t\tmessage: string,\n\t\tpublic status?: number,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = 'ServerError';\n\t\tObject.setPrototypeOf(this, ServerError.prototype);\n\t}\n}\n\nexport class OidcError extends Error {\n\treadonly category: FailureCategory = 'Oidc';\n\treadonly recoverable = false;\n\n\tconstructor(\n\t\tpublic error: string,\n\t\tpublic errorDescription?: string | null,\n\t\tpublic errorUri?: string | null,\n\t) {\n\t\tsuper(errorDescription ? `${error}: ${errorDescription}` : error);\n\t\tthis.name = 'OidcError';\n\t\tObject.setPrototypeOf(this, OidcError.prototype);\n\t}\n}\n\nexport class ProtocolError extends Error {\n\treadonly category: FailureCategory = 'Protocol';\n\treadonly recoverable = false;\n\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = 'ProtocolError';\n\t\tObject.setPrototypeOf(this, ProtocolError.prototype);\n\t}\n}\n\nexport class ConfigurationError extends Error {\n\treadonly category: FailureCategory = 'InvalidRequest';\n\treadonly recoverable = false;\n\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = 'ConfigurationError';\n\t\tObject.setPrototypeOf(this, ConfigurationError.prototype);\n\t}\n}\n\nexport class InternalError extends Error {\n\treadonly category: FailureCategory = 'Internal';\n\treadonly recoverable = false;\n\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = 'InternalError';\n\t\tObject.setPrototypeOf(this, InternalError.prototype);\n\t}\n}\n\n/**\n * Throws the appropriate structured error for a non-OK token/revocation endpoint response:\n * `ServerError` for 5xx/429, `OidcError` for a well-formed `{error, ...}` body, `ProtocolError` otherwise.\n *\n * @param {Object} response - The non-OK HTTP response from a token/revocation endpoint.\n * @throws {ServerError | OidcError | ProtocolError} Always throws.\n */\nexport async function throwTokenEndpointError(response: { status: number; json: () => Promise<Record<string, string>> }): Promise<never> {\n\tif (response.status === 429 || response.status >= 500) {\n\t\tthrow new ServerError(`Token endpoint returned HTTP ${response.status}`, response.status);\n\t}\n\n\tlet body: Record<string, string>;\n\n\ttry {\n\t\tbody = await response.json();\n\t} catch {\n\t\tthrow new ProtocolError(`Non-JSON error response from token endpoint`);\n\t}\n\n\tif (typeof body.error !== 'string') {\n\t\tthrow new ProtocolError(`Malformed error response from token endpoint`);\n\t}\n\n\tthrow new OidcError(body.error, body.error_description, body.error_uri);\n}\n\n/**\n * Throws the appropriate structured error for a non-OK HTTP response that has no OAuth-style `{error, ...}` body:\n * `ServerError` for 5xx/429, `ProtocolError` otherwise.\n *\n * @param {number} status - The HTTP status code of the failed response.\n * @param {string} message - The error message to use.\n * @throws {ServerError | ProtocolError} Always throws.\n */\nexport function throwHttpError(status: number, message: string): never {\n\tif (status === 429 || status >= 500) {\n\t\tthrow new ServerError(message, status);\n\t}\n\n\tthrow new ProtocolError(message);\n}\n"],"mappings":"mEAEA,IAAa,EAAb,cAAmC,KAAM,CACxC,YACC,EACA,EACC,CACD,MAAM,mBAAmB,EAHlB,KAAA,IAAA,EAIP,KAAK,KAAO,gBACZ,KAAK,QAAU,EAAU,sBAAsB,IAAY,mBAC5D,CACD,EAKa,EAAb,MAAa,UAA0B,KAAM,CAC5C,YAAY,EAAU,uBAAwB,CAC7C,MAAM,CAAO,EACb,KAAK,KAAO,oBACZ,OAAO,eAAe,KAAM,EAAkB,SAAS,CACxD,CACD,EAKa,EAAb,MAAa,UAAyB,KAAM,CAC3C,YAAY,EAAU,uBAAwB,CAC7C,MAAM,CAAO,EACb,KAAK,KAAO,mBACZ,OAAO,eAAe,KAAM,EAAiB,SAAS,CACvD,CACD,EAEa,EAAb,MAAa,UAA6B,KAAM,CAC/C,YAAY,EAAU,wBAAyB,CAC9C,MAAM,CAAO,EACb,KAAK,KAAO,uBACZ,OAAO,eAAe,KAAM,EAAqB,SAAS,CAC3D,CACD,EAEa,EAAb,MAAa,UAA4B,KAAM,CAC9C,YAAY,EAAU,kBAAmB,CACxC,MAAM,CAAO,EACb,KAAK,KAAO,sBACZ,OAAO,eAAe,KAAM,EAAoB,SAAS,CAC1D,CACD,EAEa,EAAb,MAAa,UAAqB,KAAM,CAIvC,YAAY,EAAU,yBAA0B,CAC/C,MAAM,CAAO,EAJuB,KAAA,SAAA,UACd,KAAA,YAAA,GAItB,KAAK,KAAO,eACZ,OAAO,eAAe,KAAM,EAAa,SAAS,CACnD,CACD,EAEa,EAAb,MAAa,UAAoB,KAAM,CAItC,YACC,EACA,EACC,CACD,MAAM,CAAO,EAFN,KAAA,OAAA,EAL6B,KAAA,SAAA,SACd,KAAA,YAAA,GAOtB,KAAK,KAAO,cACZ,OAAO,eAAe,KAAM,EAAY,SAAS,CAClD,CACD,EAEa,EAAb,MAAa,UAAkB,KAAM,CAIpC,YACC,EACA,EACA,EACC,CACD,MAAM,EAAmB,GAAG,EAAM,IAAI,IAAqB,CAAK,EAJzD,KAAA,MAAA,EACA,KAAA,iBAAA,EACA,KAAA,SAAA,EAN6B,KAAA,SAAA,OACd,KAAA,YAAA,GAQtB,KAAK,KAAO,YACZ,OAAO,eAAe,KAAM,EAAU,SAAS,CAChD,CACD,EAEa,EAAb,MAAa,UAAsB,KAAM,CAIxC,YAAY,EAAiB,CAC5B,MAAM,CAAO,EAJuB,KAAA,SAAA,WACd,KAAA,YAAA,GAItB,KAAK,KAAO,gBACZ,OAAO,eAAe,KAAM,EAAc,SAAS,CACpD,CACD,EAEa,EAAb,MAAa,UAA2B,KAAM,CAI7C,YAAY,EAAiB,CAC5B,MAAM,CAAO,EAJuB,KAAA,SAAA,iBACd,KAAA,YAAA,GAItB,KAAK,KAAO,qBACZ,OAAO,eAAe,KAAM,EAAmB,SAAS,CACzD,CACD,EAEa,EAAb,MAAa,UAAsB,KAAM,CAIxC,YAAY,EAAiB,CAC5B,MAAM,CAAO,EAJuB,KAAA,SAAA,WACd,KAAA,YAAA,GAItB,KAAK,KAAO,gBACZ,OAAO,eAAe,KAAM,EAAc,SAAS,CACpD,CACD,EASA,eAAsB,EAAwB,EAA2F,CACxI,GAAI,EAAS,SAAW,KAAO,EAAS,QAAU,IACjD,MAAM,IAAI,EAAY,gCAAgC,EAAS,SAAU,EAAS,MAAM,EAGzF,IAAI,EAEJ,GAAI,CACH,EAAO,MAAM,EAAS,KAAK,CAC5B,MAAQ,CACP,MAAM,IAAI,EAAc,6CAA6C,CACtE,CAMA,MAJI,OAAO,EAAK,OAAU,SAIpB,IAAI,EAAU,EAAK,MAAO,EAAK,kBAAmB,EAAK,SAAS,EAH/D,IAAI,EAAc,8CAA8C,CAIxE,CAUA,SAAgB,EAAe,EAAgB,EAAwB,CAKtE,MAJI,IAAW,KAAO,GAAU,IACzB,IAAI,EAAY,EAAS,CAAM,EAGhC,IAAI,EAAc,CAAO,CAChC"}

package/dist/utils/errors.d.ts

@@ -1,6 +1,7 @@
+export type FailureCategory = 'Network' | 'Server' | 'Oidc' | 'Protocol' | 'InvalidRequest' | 'Internal' | 'Unknown';
 export declare class FallbackError extends Error {
     url: URL;
-    constructor(url: URL);
+    constructor(url: URL, message?: string);
 }
 /**
  * Error thrown when a popup window is blocked by the browser.
@@ -14,3 +15,63 @@ export declare class PopupBlockedError extends Error {
 export declare class PopupClosedError extends Error {
     constructor(message?: string);
 }
+export declare class UnsupportedFlowError extends Error {
+    constructor(message?: string);
+}
+export declare class SessionExpiredError extends Error {
+    constructor(message?: string);
+}
+export declare class NetworkError extends Error {
+    readonly category: FailureCategory;
+    readonly recoverable = true;
+    constructor(message?: string);
+}
+export declare class ServerError extends Error {
+    status?: number | undefined;
+    readonly category: FailureCategory;
+    readonly recoverable = true;
+    constructor(message: string, status?: number | undefined);
+}
+export declare class OidcError extends Error {
+    error: string;
+    errorDescription?: string | null | undefined;
+    errorUri?: string | null | undefined;
+    readonly category: FailureCategory;
+    readonly recoverable = false;
+    constructor(error: string, errorDescription?: string | null | undefined, errorUri?: string | null | undefined);
+}
+export declare class ProtocolError extends Error {
+    readonly category: FailureCategory;
+    readonly recoverable = false;
+    constructor(message: string);
+}
+export declare class ConfigurationError extends Error {
+    readonly category: FailureCategory;
+    readonly recoverable = false;
+    constructor(message: string);
+}
+export declare class InternalError extends Error {
+    readonly category: FailureCategory;
+    readonly recoverable = false;
+    constructor(message: string);
+}
+/**
+ * Throws the appropriate structured error for a non-OK token/revocation endpoint response:
+ * `ServerError` for 5xx/429, `OidcError` for a well-formed `{error, ...}` body, `ProtocolError` otherwise.
+ *
+ * @param {Object} response - The non-OK HTTP response from a token/revocation endpoint.
+ * @throws {ServerError | OidcError | ProtocolError} Always throws.
+ */
+export declare function throwTokenEndpointError(response: {
+    status: number;
+    json: () => Promise<Record<string, string>>;
+}): Promise<never>;
+/**
+ * Throws the appropriate structured error for a non-OK HTTP response that has no OAuth-style `{error, ...}` body:
+ * `ServerError` for 5xx/429, `ProtocolError` otherwise.
+ *
+ * @param {number} status - The HTTP status code of the failed response.
+ * @param {string} message - The error message to use.
+ * @throws {ServerError | ProtocolError} Always throws.
+ */
+export declare function throwHttpError(status: number, message: string): never;

package/dist/utils/errors.mjs

@@ -1,2 +1,2 @@
-class s extends Error{constructor(r){super("Fallback occurred"),this.url=r,this.name="FallbackError"}}class o extends Error{constructor(r="Popup window blocked"){super(r),this.name="PopupBlockedError",Object.setPrototypeOf(this,o.prototype)}}class t extends Error{constructor(r="Popup closed by user"){super(r),this.name="PopupClosedError",Object.setPrototypeOf(this,t.prototype)}}export{s as FallbackError,o as PopupBlockedError,t as PopupClosedError};
-//# sourceMappingURL=errors.mjs.map
+var e=class extends Error{constructor(e,t){super(`Fallback occurred`),this.url=e,this.name=`FallbackError`,this.message=t?`Fallback occurred: ${t}`:`Fallback occurred`}},t=class e extends Error{constructor(t=`Popup window blocked`){super(t),this.name=`PopupBlockedError`,Object.setPrototypeOf(this,e.prototype)}},n=class e extends Error{constructor(t=`Popup closed by user`){super(t),this.name=`PopupClosedError`,Object.setPrototypeOf(this,e.prototype)}},r=class e extends Error{constructor(t=`Unsupported flow mode`){super(t),this.name=`UnsupportedFlowError`,Object.setPrototypeOf(this,e.prototype)}},i=class e extends Error{constructor(t=`Session expired`){super(t),this.name=`SessionExpiredError`,Object.setPrototypeOf(this,e.prototype)}},a=class e extends Error{constructor(t=`Network request failed`){super(t),this.category=`Network`,this.recoverable=!0,this.name=`NetworkError`,Object.setPrototypeOf(this,e.prototype)}},o=class e extends Error{constructor(t,n){super(t),this.status=n,this.category=`Server`,this.recoverable=!0,this.name=`ServerError`,Object.setPrototypeOf(this,e.prototype)}},s=class e extends Error{constructor(t,n,r){super(n?`${t}: ${n}`:t),this.error=t,this.errorDescription=n,this.errorUri=r,this.category=`Oidc`,this.recoverable=!1,this.name=`OidcError`,Object.setPrototypeOf(this,e.prototype)}},c=class e extends Error{constructor(t){super(t),this.category=`Protocol`,this.recoverable=!1,this.name=`ProtocolError`,Object.setPrototypeOf(this,e.prototype)}},l=class e extends Error{constructor(t){super(t),this.category=`InvalidRequest`,this.recoverable=!1,this.name=`ConfigurationError`,Object.setPrototypeOf(this,e.prototype)}},u=class e extends Error{constructor(t){super(t),this.category=`Internal`,this.recoverable=!1,this.name=`InternalError`,Object.setPrototypeOf(this,e.prototype)}};async function d(e){if(e.status===429||e.status>=500)throw new o(`Token endpoint returned HTTP ${e.status}`,e.status);let t;try{t=await e.json()}catch{throw new c(`Non-JSON error response from token endpoint`)}throw typeof t.error==`string`?new s(t.error,t.error_description,t.error_uri):new c(`Malformed error response from token endpoint`)}function f(e,t){throw e===429||e>=500?new o(t,e):new c(t)}export{l as ConfigurationError,e as FallbackError,u as InternalError,a as NetworkError,s as OidcError,t as PopupBlockedError,n as PopupClosedError,c as ProtocolError,o as ServerError,i as SessionExpiredError,r as UnsupportedFlowError,f as throwHttpError,d as throwTokenEndpointError};
+//# sourceMappingURL=errors.mjs.map

package/dist/utils/errors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.mjs","sources":["../../src/utils/errors.ts"],"sourcesContent":["export class FallbackError extends Error {\n\tconstructor(public url: URL) {\n\t\tsuper('Fallback occurred');\n\t\tthis.name = 'FallbackError';\n\t}\n}\n\n/**\n * Error thrown when a popup window is blocked by the browser.\n */\nexport class PopupBlockedError extends Error {\n\tconstructor(message = 'Popup window blocked') {\n\t\tsuper(message);\n\t\tthis.name = 'PopupBlockedError';\n\t\tObject.setPrototypeOf(this, PopupBlockedError.prototype);\n\t}\n}\n\n/**\n * Error thrown when a popup window is closed by the user before completion.\n */\nexport class PopupClosedError extends Error {\n\tconstructor(message = 'Popup closed by user') {\n\t\tsuper(message);\n\t\tthis.name = 'PopupClosedError';\n\t\tObject.setPrototypeOf(this, PopupClosedError.prototype);\n\t}\n}\n"],"names":["FallbackError","url","PopupBlockedError","message","PopupClosedError"],"mappings":"AAAO,MAAMA,UAAsB,KAAM,CACxC,YAAmBC,EAAU,CAC5B,MAAM,mBAAmB,EADP,KAAA,IAAAA,EAElB,KAAK,KAAO,eACb,CACD,CAKO,MAAMC,UAA0B,KAAM,CAC5C,YAAYC,EAAU,uBAAwB,CAC7C,MAAMA,CAAO,EACb,KAAK,KAAO,oBACZ,OAAO,eAAe,KAAMD,EAAkB,SAAS,CACxD,CACD,CAKO,MAAME,UAAyB,KAAM,CAC3C,YAAYD,EAAU,uBAAwB,CAC7C,MAAMA,CAAO,EACb,KAAK,KAAO,mBACZ,OAAO,eAAe,KAAMC,EAAiB,SAAS,CACvD,CACD"}
+{"version":3,"file":"errors.mjs","names":[],"sources":["../../src/utils/errors.ts"],"sourcesContent":["export type FailureCategory = 'Network' | 'Server' | 'Oidc' | 'Protocol' | 'InvalidRequest' | 'Internal' | 'Unknown';\n\nexport class FallbackError extends Error {\n\tconstructor(\n\t\tpublic url: URL,\n\t\tmessage?: string,\n\t) {\n\t\tsuper('Fallback occurred');\n\t\tthis.name = 'FallbackError';\n\t\tthis.message = message ? `Fallback occurred: ${message}` : 'Fallback occurred';\n\t}\n}\n\n/**\n * Error thrown when a popup window is blocked by the browser.\n */\nexport class PopupBlockedError extends Error {\n\tconstructor(message = 'Popup window blocked') {\n\t\tsuper(message);\n\t\tthis.name = 'PopupBlockedError';\n\t\tObject.setPrototypeOf(this, PopupBlockedError.prototype);\n\t}\n}\n\n/**\n * Error thrown when a popup window is closed by the user before completion.\n */\nexport class PopupClosedError extends Error {\n\tconstructor(message = 'Popup closed by user') {\n\t\tsuper(message);\n\t\tthis.name = 'PopupClosedError';\n\t\tObject.setPrototypeOf(this, PopupClosedError.prototype);\n\t}\n}\n\nexport class UnsupportedFlowError extends Error {\n\tconstructor(message = 'Unsupported flow mode') {\n\t\tsuper(message);\n\t\tthis.name = 'UnsupportedFlowError';\n\t\tObject.setPrototypeOf(this, UnsupportedFlowError.prototype);\n\t}\n}\n\nexport class SessionExpiredError extends Error {\n\tconstructor(message = 'Session expired') {\n\t\tsuper(message);\n\t\tthis.name = 'SessionExpiredError';\n\t\tObject.setPrototypeOf(this, SessionExpiredError.prototype);\n\t}\n}\n\nexport class NetworkError extends Error {\n\treadonly category: FailureCategory = 'Network';\n\treadonly recoverable = true;\n\n\tconstructor(message = 'Network request failed') {\n\t\tsuper(message);\n\t\tthis.name = 'NetworkError';\n\t\tObject.setPrototypeOf(this, NetworkError.prototype);\n\t}\n}\n\nexport class ServerError extends Error {\n\treadonly category: FailureCategory = 'Server';\n\treadonly recoverable = true;\n\n\tconstructor(\n\t\tmessage: string,\n\t\tpublic status?: number,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = 'ServerError';\n\t\tObject.setPrototypeOf(this, ServerError.prototype);\n\t}\n}\n\nexport class OidcError extends Error {\n\treadonly category: FailureCategory = 'Oidc';\n\treadonly recoverable = false;\n\n\tconstructor(\n\t\tpublic error: string,\n\t\tpublic errorDescription?: string | null,\n\t\tpublic errorUri?: string | null,\n\t) {\n\t\tsuper(errorDescription ? `${error}: ${errorDescription}` : error);\n\t\tthis.name = 'OidcError';\n\t\tObject.setPrototypeOf(this, OidcError.prototype);\n\t}\n}\n\nexport class ProtocolError extends Error {\n\treadonly category: FailureCategory = 'Protocol';\n\treadonly recoverable = false;\n\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = 'ProtocolError';\n\t\tObject.setPrototypeOf(this, ProtocolError.prototype);\n\t}\n}\n\nexport class ConfigurationError extends Error {\n\treadonly category: FailureCategory = 'InvalidRequest';\n\treadonly recoverable = false;\n\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = 'ConfigurationError';\n\t\tObject.setPrototypeOf(this, ConfigurationError.prototype);\n\t}\n}\n\nexport class InternalError extends Error {\n\treadonly category: FailureCategory = 'Internal';\n\treadonly recoverable = false;\n\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = 'InternalError';\n\t\tObject.setPrototypeOf(this, InternalError.prototype);\n\t}\n}\n\n/**\n * Throws the appropriate structured error for a non-OK token/revocation endpoint response:\n * `ServerError` for 5xx/429, `OidcError` for a well-formed `{error, ...}` body, `ProtocolError` otherwise.\n *\n * @param {Object} response - The non-OK HTTP response from a token/revocation endpoint.\n * @throws {ServerError | OidcError | ProtocolError} Always throws.\n */\nexport async function throwTokenEndpointError(response: { status: number; json: () => Promise<Record<string, string>> }): Promise<never> {\n\tif (response.status === 429 || response.status >= 500) {\n\t\tthrow new ServerError(`Token endpoint returned HTTP ${response.status}`, response.status);\n\t}\n\n\tlet body: Record<string, string>;\n\n\ttry {\n\t\tbody = await response.json();\n\t} catch {\n\t\tthrow new ProtocolError(`Non-JSON error response from token endpoint`);\n\t}\n\n\tif (typeof body.error !== 'string') {\n\t\tthrow new ProtocolError(`Malformed error response from token endpoint`);\n\t}\n\n\tthrow new OidcError(body.error, body.error_description, body.error_uri);\n}\n\n/**\n * Throws the appropriate structured error for a non-OK HTTP response that has no OAuth-style `{error, ...}` body:\n * `ServerError` for 5xx/429, `ProtocolError` otherwise.\n *\n * @param {number} status - The HTTP status code of the failed response.\n * @param {string} message - The error message to use.\n * @throws {ServerError | ProtocolError} Always throws.\n */\nexport function throwHttpError(status: number, message: string): never {\n\tif (status === 429 || status >= 500) {\n\t\tthrow new ServerError(message, status);\n\t}\n\n\tthrow new ProtocolError(message);\n}\n"],"mappings":"AAEA,IAAa,EAAb,cAAmC,KAAM,CACxC,YACC,EACA,EACC,CACD,MAAM,mBAAmB,EAHlB,KAAA,IAAA,EAIP,KAAK,KAAO,gBACZ,KAAK,QAAU,EAAU,sBAAsB,IAAY,mBAC5D,CACD,EAKa,EAAb,MAAa,UAA0B,KAAM,CAC5C,YAAY,EAAU,uBAAwB,CAC7C,MAAM,CAAO,EACb,KAAK,KAAO,oBACZ,OAAO,eAAe,KAAM,EAAkB,SAAS,CACxD,CACD,EAKa,EAAb,MAAa,UAAyB,KAAM,CAC3C,YAAY,EAAU,uBAAwB,CAC7C,MAAM,CAAO,EACb,KAAK,KAAO,mBACZ,OAAO,eAAe,KAAM,EAAiB,SAAS,CACvD,CACD,EAEa,EAAb,MAAa,UAA6B,KAAM,CAC/C,YAAY,EAAU,wBAAyB,CAC9C,MAAM,CAAO,EACb,KAAK,KAAO,uBACZ,OAAO,eAAe,KAAM,EAAqB,SAAS,CAC3D,CACD,EAEa,EAAb,MAAa,UAA4B,KAAM,CAC9C,YAAY,EAAU,kBAAmB,CACxC,MAAM,CAAO,EACb,KAAK,KAAO,sBACZ,OAAO,eAAe,KAAM,EAAoB,SAAS,CAC1D,CACD,EAEa,EAAb,MAAa,UAAqB,KAAM,CAIvC,YAAY,EAAU,yBAA0B,CAC/C,MAAM,CAAO,EAJuB,KAAA,SAAA,UACd,KAAA,YAAA,GAItB,KAAK,KAAO,eACZ,OAAO,eAAe,KAAM,EAAa,SAAS,CACnD,CACD,EAEa,EAAb,MAAa,UAAoB,KAAM,CAItC,YACC,EACA,EACC,CACD,MAAM,CAAO,EAFN,KAAA,OAAA,EAL6B,KAAA,SAAA,SACd,KAAA,YAAA,GAOtB,KAAK,KAAO,cACZ,OAAO,eAAe,KAAM,EAAY,SAAS,CAClD,CACD,EAEa,EAAb,MAAa,UAAkB,KAAM,CAIpC,YACC,EACA,EACA,EACC,CACD,MAAM,EAAmB,GAAG,EAAM,IAAI,IAAqB,CAAK,EAJzD,KAAA,MAAA,EACA,KAAA,iBAAA,EACA,KAAA,SAAA,EAN6B,KAAA,SAAA,OACd,KAAA,YAAA,GAQtB,KAAK,KAAO,YACZ,OAAO,eAAe,KAAM,EAAU,SAAS,CAChD,CACD,EAEa,EAAb,MAAa,UAAsB,KAAM,CAIxC,YAAY,EAAiB,CAC5B,MAAM,CAAO,EAJuB,KAAA,SAAA,WACd,KAAA,YAAA,GAItB,KAAK,KAAO,gBACZ,OAAO,eAAe,KAAM,EAAc,SAAS,CACpD,CACD,EAEa,EAAb,MAAa,UAA2B,KAAM,CAI7C,YAAY,EAAiB,CAC5B,MAAM,CAAO,EAJuB,KAAA,SAAA,iBACd,KAAA,YAAA,GAItB,KAAK,KAAO,qBACZ,OAAO,eAAe,KAAM,EAAmB,SAAS,CACzD,CACD,EAEa,EAAb,MAAa,UAAsB,KAAM,CAIxC,YAAY,EAAiB,CAC5B,MAAM,CAAO,EAJuB,KAAA,SAAA,WACd,KAAA,YAAA,GAItB,KAAK,KAAO,gBACZ,OAAO,eAAe,KAAM,EAAc,SAAS,CACpD,CACD,EASA,eAAsB,EAAwB,EAA2F,CACxI,GAAI,EAAS,SAAW,KAAO,EAAS,QAAU,IACjD,MAAM,IAAI,EAAY,gCAAgC,EAAS,SAAU,EAAS,MAAM,EAGzF,IAAI,EAEJ,GAAI,CACH,EAAO,MAAM,EAAS,KAAK,CAC5B,MAAQ,CACP,MAAM,IAAI,EAAc,6CAA6C,CACtE,CAMA,MAJI,OAAO,EAAK,OAAU,SAIpB,IAAI,EAAU,EAAK,MAAO,EAAK,kBAAmB,EAAK,SAAS,EAH/D,IAAI,EAAc,8CAA8C,CAIxE,CAUA,SAAgB,EAAe,EAAgB,EAAwB,CAKtE,MAJI,IAAW,KAAO,GAAU,IACzB,IAAI,EAAY,EAAS,CAAM,EAGhC,IAAI,EAAc,CAAO,CAChC"}

package/dist/utils/httpClient.cjs

@@ -0,0 +1,2 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./errors.cjs");function t(t){let n={logger:t,async request(t,r){t=new URL(t,globalThis.location?.origin),n.logger?.debug(`REQUEST [${r?.method||`GET`}]: ${t.origin}${t.pathname}`);let i;try{i=await fetch(t,r)}catch{throw new e.NetworkError(`Network request failed: ${t.origin}${t.pathname}`)}if(n.logger&&i.headers.has(`x-event-id`)){let e=i.headers.get(`x-event-id`);n.logger.xEventId!==e&&(n.logger.xEventId=e,n.logger.debug(`X-Event-ID updated: ${n.logger.xEventId}`))}return{headers:i.headers,ok:i.ok,status:i.status,statusText:i.statusText,url:i.url,body:i.body,json:async()=>await i.json(),text:async()=>await i.text()}},sendTokenRequest(e,t){return n.request(e,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams(t).toString()})}};return n}exports.createHttpClient=t;
+//# sourceMappingURL=httpClient.cjs.map

package/dist/utils/httpClient.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.cjs","names":[],"sources":["../../src/utils/httpClient.ts"],"sourcesContent":["import type { SDKLogging, HttpClientResponse, SDKHttpClient } from '../types/common';\nimport { NetworkError } from './errors';\n\nexport function createHttpClient(logging?: SDKLogging): SDKHttpClient {\n\tconst client: SDKHttpClient = {\n\t\tlogger: logging,\n\t\tasync request<T>(url: string | URL, options?: RequestInit): Promise<HttpClientResponse<T>> {\n\t\t\turl = new URL(url, globalThis.location?.origin);\n\n\t\t\tclient.logger?.debug(`REQUEST [${options?.method || 'GET'}]: ${url.origin}${url.pathname}`);\n\n\t\t\tlet response: Response;\n\n\t\t\ttry {\n\t\t\t\tresponse = await fetch(url, options);\n\t\t\t} catch {\n\t\t\t\tthrow new NetworkError(`Network request failed: ${url.origin}${url.pathname}`);\n\t\t\t}\n\n\t\t\tif (client.logger && response.headers.has('x-event-id')) {\n\t\t\t\tconst xEventId = response.headers.get('x-event-id') as string;\n\n\t\t\t\tif (client.logger.xEventId !== xEventId) {\n\t\t\t\t\tclient.logger.xEventId = xEventId;\n\t\t\t\t\tclient.logger.debug(`X-Event-ID updated: ${client.logger.xEventId}`);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn {\n\t\t\t\theaders: response.headers,\n\t\t\t\tok: response.ok,\n\t\t\t\tstatus: response.status,\n\t\t\t\tstatusText: response.statusText,\n\t\t\t\turl: response.url,\n\t\t\t\tbody: response.body,\n\t\t\t\tjson: async () => (await response.json()) as T,\n\t\t\t\ttext: async () => await response.text(),\n\t\t\t\t// NOTE: Only json and text methods are supported in native platforms.\n\t\t\t};\n\t\t},\n\t\tsendTokenRequest<T>(url: string | URL, data: Record<string, string>): Promise<HttpClientResponse<T>> {\n\t\t\treturn client.request<T>(url, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders: { 'Content-Type': 'application/x-www-form-urlencoded' },\n\t\t\t\tbody: new URLSearchParams(data).toString(),\n\t\t\t});\n\t\t},\n\t};\n\n\treturn client;\n}\n"],"mappings":"mGAGA,SAAgB,EAAiB,EAAqC,CACrE,IAAM,EAAwB,CAC7B,OAAQ,EACR,MAAM,QAAW,EAAmB,EAAuD,CAC1F,EAAM,IAAI,IAAI,EAAK,WAAW,UAAU,MAAM,EAE9C,EAAO,QAAQ,MAAM,YAAY,GAAS,QAAU,MAAM,KAAK,EAAI,SAAS,EAAI,UAAU,EAE1F,IAAI,EAEJ,GAAI,CACH,EAAW,MAAM,MAAM,EAAK,CAAO,CACpC,MAAQ,CACP,MAAM,IAAI,EAAA,aAAa,2BAA2B,EAAI,SAAS,EAAI,UAAU,CAC9E,CAEA,GAAI,EAAO,QAAU,EAAS,QAAQ,IAAI,YAAY,EAAG,CACxD,IAAM,EAAW,EAAS,QAAQ,IAAI,YAAY,EAE9C,EAAO,OAAO,WAAa,IAC9B,EAAO,OAAO,SAAW,EACzB,EAAO,OAAO,MAAM,uBAAuB,EAAO,OAAO,UAAU,EAErE,CAEA,MAAO,CACN,QAAS,EAAS,QAClB,GAAI,EAAS,GACb,OAAQ,EAAS,OACjB,WAAY,EAAS,WACrB,IAAK,EAAS,IACd,KAAM,EAAS,KACf,KAAM,SAAa,MAAM,EAAS,KAAK,EACvC,KAAM,SAAY,MAAM,EAAS,KAAK,CAEvC,CACD,EACA,iBAAoB,EAAmB,EAA8D,CACpG,OAAO,EAAO,QAAW,EAAK,CAC7B,OAAQ,OACR,QAAS,CAAE,eAAgB,mCAAoC,EAC/D,KAAM,IAAI,gBAAgB,CAAI,CAAC,CAAC,SAAS,CAC1C,CAAC,CACF,CACD,EAEA,OAAO,CACR"}

package/dist/utils/httpClient.d.ts

@@ -0,0 +1,2 @@
+import { SDKLogging, SDKHttpClient } from '../types/common';
+export declare function createHttpClient(logging?: SDKLogging): SDKHttpClient;

package/dist/utils/httpClient.mjs

@@ -0,0 +1,2 @@
+import{NetworkError as e}from"./errors.mjs";function t(t){let n={logger:t,async request(t,r){t=new URL(t,globalThis.location?.origin),n.logger?.debug(`REQUEST [${r?.method||`GET`}]: ${t.origin}${t.pathname}`);let i;try{i=await fetch(t,r)}catch{throw new e(`Network request failed: ${t.origin}${t.pathname}`)}if(n.logger&&i.headers.has(`x-event-id`)){let e=i.headers.get(`x-event-id`);n.logger.xEventId!==e&&(n.logger.xEventId=e,n.logger.debug(`X-Event-ID updated: ${n.logger.xEventId}`))}return{headers:i.headers,ok:i.ok,status:i.status,statusText:i.statusText,url:i.url,body:i.body,json:async()=>await i.json(),text:async()=>await i.text()}},sendTokenRequest(e,t){return n.request(e,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams(t).toString()})}};return n}export{t as createHttpClient};
+//# sourceMappingURL=httpClient.mjs.map

package/dist/utils/httpClient.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.mjs","names":[],"sources":["../../src/utils/httpClient.ts"],"sourcesContent":["import type { SDKLogging, HttpClientResponse, SDKHttpClient } from '../types/common';\nimport { NetworkError } from './errors';\n\nexport function createHttpClient(logging?: SDKLogging): SDKHttpClient {\n\tconst client: SDKHttpClient = {\n\t\tlogger: logging,\n\t\tasync request<T>(url: string | URL, options?: RequestInit): Promise<HttpClientResponse<T>> {\n\t\t\turl = new URL(url, globalThis.location?.origin);\n\n\t\t\tclient.logger?.debug(`REQUEST [${options?.method || 'GET'}]: ${url.origin}${url.pathname}`);\n\n\t\t\tlet response: Response;\n\n\t\t\ttry {\n\t\t\t\tresponse = await fetch(url, options);\n\t\t\t} catch {\n\t\t\t\tthrow new NetworkError(`Network request failed: ${url.origin}${url.pathname}`);\n\t\t\t}\n\n\t\t\tif (client.logger && response.headers.has('x-event-id')) {\n\t\t\t\tconst xEventId = response.headers.get('x-event-id') as string;\n\n\t\t\t\tif (client.logger.xEventId !== xEventId) {\n\t\t\t\t\tclient.logger.xEventId = xEventId;\n\t\t\t\t\tclient.logger.debug(`X-Event-ID updated: ${client.logger.xEventId}`);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn {\n\t\t\t\theaders: response.headers,\n\t\t\t\tok: response.ok,\n\t\t\t\tstatus: response.status,\n\t\t\t\tstatusText: response.statusText,\n\t\t\t\turl: response.url,\n\t\t\t\tbody: response.body,\n\t\t\t\tjson: async () => (await response.json()) as T,\n\t\t\t\ttext: async () => await response.text(),\n\t\t\t\t// NOTE: Only json and text methods are supported in native platforms.\n\t\t\t};\n\t\t},\n\t\tsendTokenRequest<T>(url: string | URL, data: Record<string, string>): Promise<HttpClientResponse<T>> {\n\t\t\treturn client.request<T>(url, {\n\t\t\t\tmethod: 'POST',\n\t\t\t\theaders: { 'Content-Type': 'application/x-www-form-urlencoded' },\n\t\t\t\tbody: new URLSearchParams(data).toString(),\n\t\t\t});\n\t\t},\n\t};\n\n\treturn client;\n}\n"],"mappings":"4CAGA,SAAgB,EAAiB,EAAqC,CACrE,IAAM,EAAwB,CAC7B,OAAQ,EACR,MAAM,QAAW,EAAmB,EAAuD,CAC1F,EAAM,IAAI,IAAI,EAAK,WAAW,UAAU,MAAM,EAE9C,EAAO,QAAQ,MAAM,YAAY,GAAS,QAAU,MAAM,KAAK,EAAI,SAAS,EAAI,UAAU,EAE1F,IAAI,EAEJ,GAAI,CACH,EAAW,MAAM,MAAM,EAAK,CAAO,CACpC,MAAQ,CACP,MAAM,IAAI,EAAa,2BAA2B,EAAI,SAAS,EAAI,UAAU,CAC9E,CAEA,GAAI,EAAO,QAAU,EAAS,QAAQ,IAAI,YAAY,EAAG,CACxD,IAAM,EAAW,EAAS,QAAQ,IAAI,YAAY,EAE9C,EAAO,OAAO,WAAa,IAC9B,EAAO,OAAO,SAAW,EACzB,EAAO,OAAO,MAAM,uBAAuB,EAAO,OAAO,UAAU,EAErE,CAEA,MAAO,CACN,QAAS,EAAS,QAClB,GAAI,EAAS,GACb,OAAQ,EAAS,OACjB,WAAY,EAAS,WACrB,IAAK,EAAS,IACd,KAAM,EAAS,KACf,KAAM,SAAa,MAAM,EAAS,KAAK,EACvC,KAAM,SAAY,MAAM,EAAS,KAAK,CAEvC,CACD,EACA,iBAAoB,EAAmB,EAA8D,CACpG,OAAO,EAAO,QAAW,EAAK,CAC7B,OAAQ,OACR,QAAS,CAAE,eAAgB,mCAAoC,EAC/D,KAAM,IAAI,gBAAgB,CAAI,CAAC,CAAC,SAAS,CAC1C,CAAC,CACF,CACD,EAEA,OAAO,CACR"}

package/dist/utils/index.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./errors.cjs"),t=require("./base64url.cjs"),n=require("./httpClient.cjs"),r=require("./common.cjs"),i=require("./session.cjs"),a=require("../assets/oidc.cjs"),o=require("./credentials.cjs"),s=require("./crypto.cjs"),c=require("./dom.cjs"),l=require("./logging.cjs"),u=require("../assets/server.cjs");exports.BACKCHANNEL_LOGOUT_EVENT=u.t,exports.ConfigurationError=e.ConfigurationError,exports.DEFAULT_COOKIE_MAX_AGE=u.n,exports.DISALLOWED_PROXY_HEADERS=u.r,exports.FallbackError=e.FallbackError,exports.InternalError=e.InternalError,exports.NetworkError=e.NetworkError,exports.OidcError=e.OidcError,exports.PopupBlockedError=e.PopupBlockedError,exports.PopupClosedError=e.PopupClosedError,exports.ProtocolError=e.ProtocolError,exports.RETURN_TO_COOKIE=u.i,exports.ServerError=e.ServerError,exports.SessionExpiredError=e.SessionExpiredError,exports.UnsupportedFlowError=e.UnsupportedFlowError,exports.assertWebAuthnCredential=o.assertWebAuthnCredential,exports.buildAuthorizationUrl=a.t,exports.buildCookieString=r.buildCookieString,exports.buildEndSessionUrl=a.n,exports.createDefaultLogging=l.createDefaultLogging,exports.createHttpClient=n.createHttpClient,exports.createSession=i.createSession,exports.createState=a.b,exports.createWebAuthnCredential=o.createWebAuthnCredential,exports.decodeBase64URL=t.decodeBase64URL,exports.decodeJwt=a.r,exports.decryptString=s.decryptString,exports.defaultOptions=a.i,exports.encodeBase64URL=t.encodeBase64URL,exports.encryptString=s.encryptString,exports.exchangeCode=a.a,exports.fetchFlowEntry=a.o,exports.finalizeLoginSession=a.s,exports.flushSetCookies=u.a,exports.generateCodeChallenge=a.c,exports.generateCodeVerifier=a.l,exports.generateJwt=a.u,exports.generateRandomHex=a.d,exports.getDefaultFlowState=a.f,exports.getDiscoveryDocument=a.p,exports.getSDKOptions=a.m,exports.getServerSDKOptions=u.o,exports.injectScript=c.injectScript,exports.isSessionExpired=i.isSessionExpired,exports.loadSession=i.loadSession,exports.parseCookieHeader=u.s,exports.parseState=a.x,exports.proxyResponse=u.c,exports.pushSetCookie=u.l,exports.refreshToken=a.h,exports.revokeToken=a.g,exports.serializeCookie=u.u,exports.serializeSession=i.serializeSession,exports.serializeState=a.S,exports.submitLoginForm=a._,exports.throwHttpError=e.throwHttpError,exports.throwTokenEndpointError=e.throwTokenEndpointError,exports.timestamp=r.timestamp,exports.toSafeRedirect=u.d,exports.unflattenObject=r.unflattenObject,exports.verifyIdToken=a.v,exports.verifyJwt=a.y;

package/dist/utils/index.d.ts

@@ -0,0 +1,12 @@
+export * from './base64url';
+export * from './common';
+export * from './credentials';
+export * from './crypto';
+export * from './dom';
+export * from './errors';
+export * from './httpClient';
+export * from './logging';
+export * from './oidc';
+export * from './server';
+export * from './session';
+export * from './state';

package/dist/utils/index.mjs

@@ -0,0 +1 @@
+import{ConfigurationError as e,FallbackError as t,InternalError as n,NetworkError as r,OidcError as i,PopupBlockedError as a,PopupClosedError as o,ProtocolError as s,ServerError as c,SessionExpiredError as l,UnsupportedFlowError as u,throwHttpError as d,throwTokenEndpointError as f}from"./errors.mjs";import{decodeBase64URL as p,encodeBase64URL as m}from"./base64url.mjs";import{createHttpClient as h}from"./httpClient.mjs";import{buildCookieString as g,timestamp as _,unflattenObject as v}from"./common.mjs";import{createSession as y,isSessionExpired as b,loadSession as x,serializeSession as S}from"./session.mjs";import{S as C,_ as w,a as T,b as E,c as D,d as O,f as k,g as A,h as j,i as M,l as N,m as P,n as F,o as I,p as L,r as R,s as z,t as B,u as V,v as H,x as U,y as W}from"../assets/oidc.mjs";import{assertWebAuthnCredential as G,createWebAuthnCredential as K}from"./credentials.mjs";import{decryptString as q,encryptString as J}from"./crypto.mjs";import{injectScript as Y}from"./dom.mjs";import{createDefaultLogging as X}from"./logging.mjs";import{a as Z,c as Q,d as $,i as ee,l as te,n as ne,o as re,r as ie,s as ae,t as oe,u as se}from"../assets/server.mjs";export{oe as BACKCHANNEL_LOGOUT_EVENT,e as ConfigurationError,ne as DEFAULT_COOKIE_MAX_AGE,ie as DISALLOWED_PROXY_HEADERS,t as FallbackError,n as InternalError,r as NetworkError,i as OidcError,a as PopupBlockedError,o as PopupClosedError,s as ProtocolError,ee as RETURN_TO_COOKIE,c as ServerError,l as SessionExpiredError,u as UnsupportedFlowError,G as assertWebAuthnCredential,B as buildAuthorizationUrl,g as buildCookieString,F as buildEndSessionUrl,X as createDefaultLogging,h as createHttpClient,y as createSession,E as createState,K as createWebAuthnCredential,p as decodeBase64URL,R as decodeJwt,q as decryptString,M as defaultOptions,m as encodeBase64URL,J as encryptString,T as exchangeCode,I as fetchFlowEntry,z as finalizeLoginSession,Z as flushSetCookies,D as generateCodeChallenge,N as generateCodeVerifier,V as generateJwt,O as generateRandomHex,k as getDefaultFlowState,L as getDiscoveryDocument,P as getSDKOptions,re as getServerSDKOptions,Y as injectScript,b as isSessionExpired,x as loadSession,ae as parseCookieHeader,U as parseState,Q as proxyResponse,te as pushSetCookie,j as refreshToken,A as revokeToken,se as serializeCookie,S as serializeSession,C as serializeState,w as submitLoginForm,d as throwHttpError,f as throwTokenEndpointError,_ as timestamp,$ as toSafeRedirect,v as unflattenObject,H as verifyIdToken,W as verifyJwt};

package/dist/utils/logging.cjs

@@ -0,0 +1,2 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});function e(){let e={xEventId:void 0,debug(t){let n=e.xEventId?`(${e.xEventId}) ${t}`:t;console.log(n)},info(t){let n=e.xEventId?`(${e.xEventId}) ${t}`:t;console.info(n)},warn(t){let n=e.xEventId?`(${e.xEventId}) ${t}`:t;console.warn(n)},error(t,n){let r=e.xEventId?`(${e.xEventId}) ${t}`:t;console.error(`${r} - ${n}`)}};return e}exports.createDefaultLogging=e;
+//# sourceMappingURL=logging.cjs.map

package/dist/utils/logging.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.cjs","names":[],"sources":["../../src/utils/logging.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport type { SDKLogging } from '../types/common';\n\nexport function createDefaultLogging(): SDKLogging {\n\tconst logger: SDKLogging = {\n\t\txEventId: undefined,\n\t\tdebug(message: string): void {\n\t\t\tconst msg = logger.xEventId ? `(${logger.xEventId}) ${message}` : message;\n\t\t\tconsole.log(msg);\n\t\t},\n\t\tinfo(message: string): void {\n\t\t\tconst msg = logger.xEventId ? `(${logger.xEventId}) ${message}` : message;\n\t\t\tconsole.info(msg);\n\t\t},\n\t\twarn(message: string): void {\n\t\t\tconst msg = logger.xEventId ? `(${logger.xEventId}) ${message}` : message;\n\t\t\tconsole.warn(msg);\n\t\t},\n\t\terror(message: string, error: Error): void {\n\t\t\tconst msg = logger.xEventId ? `(${logger.xEventId}) ${message}` : message;\n\t\t\tconsole.error(`${msg} - ${error}`);\n\t\t},\n\t};\n\n\treturn logger;\n}\n"],"mappings":"mEAGA,SAAgB,GAAmC,CAClD,IAAM,EAAqB,CAC1B,SAAU,IAAA,GACV,MAAM,EAAuB,CAC5B,IAAM,EAAM,EAAO,SAAW,IAAI,EAAO,SAAS,IAAI,IAAY,EAClE,QAAQ,IAAI,CAAG,CAChB,EACA,KAAK,EAAuB,CAC3B,IAAM,EAAM,EAAO,SAAW,IAAI,EAAO,SAAS,IAAI,IAAY,EAClE,QAAQ,KAAK,CAAG,CACjB,EACA,KAAK,EAAuB,CAC3B,IAAM,EAAM,EAAO,SAAW,IAAI,EAAO,SAAS,IAAI,IAAY,EAClE,QAAQ,KAAK,CAAG,CACjB,EACA,MAAM,EAAiB,EAAoB,CAC1C,IAAM,EAAM,EAAO,SAAW,IAAI,EAAO,SAAS,IAAI,IAAY,EAClE,QAAQ,MAAM,GAAG,EAAI,KAAK,GAAO,CAClC,CACD,EAEA,OAAO,CACR"}

package/dist/utils/logging.d.ts

@@ -0,0 +1,2 @@
+import { SDKLogging } from '../types/common';
+export declare function createDefaultLogging(): SDKLogging;

package/dist/utils/logging.mjs

@@ -0,0 +1,2 @@
+function e(){let e={xEventId:void 0,debug(t){let n=e.xEventId?`(${e.xEventId}) ${t}`:t;console.log(n)},info(t){let n=e.xEventId?`(${e.xEventId}) ${t}`:t;console.info(n)},warn(t){let n=e.xEventId?`(${e.xEventId}) ${t}`:t;console.warn(n)},error(t,n){let r=e.xEventId?`(${e.xEventId}) ${t}`:t;console.error(`${r} - ${n}`)}};return e}export{e as createDefaultLogging};
+//# sourceMappingURL=logging.mjs.map

package/dist/utils/logging.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.mjs","names":[],"sources":["../../src/utils/logging.ts"],"sourcesContent":["/* eslint-disable no-console */\nimport type { SDKLogging } from '../types/common';\n\nexport function createDefaultLogging(): SDKLogging {\n\tconst logger: SDKLogging = {\n\t\txEventId: undefined,\n\t\tdebug(message: string): void {\n\t\t\tconst msg = logger.xEventId ? `(${logger.xEventId}) ${message}` : message;\n\t\t\tconsole.log(msg);\n\t\t},\n\t\tinfo(message: string): void {\n\t\t\tconst msg = logger.xEventId ? `(${logger.xEventId}) ${message}` : message;\n\t\t\tconsole.info(msg);\n\t\t},\n\t\twarn(message: string): void {\n\t\t\tconst msg = logger.xEventId ? `(${logger.xEventId}) ${message}` : message;\n\t\t\tconsole.warn(msg);\n\t\t},\n\t\terror(message: string, error: Error): void {\n\t\t\tconst msg = logger.xEventId ? `(${logger.xEventId}) ${message}` : message;\n\t\t\tconsole.error(`${msg} - ${error}`);\n\t\t},\n\t};\n\n\treturn logger;\n}\n"],"mappings":"AAGA,SAAgB,GAAmC,CAClD,IAAM,EAAqB,CAC1B,SAAU,IAAA,GACV,MAAM,EAAuB,CAC5B,IAAM,EAAM,EAAO,SAAW,IAAI,EAAO,SAAS,IAAI,IAAY,EAClE,QAAQ,IAAI,CAAG,CAChB,EACA,KAAK,EAAuB,CAC3B,IAAM,EAAM,EAAO,SAAW,IAAI,EAAO,SAAS,IAAI,IAAY,EAClE,QAAQ,KAAK,CAAG,CACjB,EACA,KAAK,EAAuB,CAC3B,IAAM,EAAM,EAAO,SAAW,IAAI,EAAO,SAAS,IAAI,IAAY,EAClE,QAAQ,KAAK,CAAG,CACjB,EACA,MAAM,EAAiB,EAAoB,CAC1C,IAAM,EAAM,EAAO,SAAW,IAAI,EAAO,SAAS,IAAI,IAAY,EAClE,QAAQ,MAAM,GAAG,EAAI,KAAK,GAAO,CAClC,CACD,EAEA,OAAO,CACR"}

package/dist/utils/oidc.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../assets/oidc.cjs");exports.buildAuthorizationUrl=e.t,exports.buildEndSessionUrl=e.n,exports.decodeJwt=e.r,exports.defaultOptions=e.i,exports.exchangeCode=e.a,exports.fetchFlowEntry=e.o,exports.finalizeLoginSession=e.s,exports.generateCodeChallenge=e.c,exports.generateCodeVerifier=e.l,exports.generateJwt=e.u,exports.generateRandomHex=e.d,exports.getDefaultFlowState=e.f,exports.getDiscoveryDocument=e.p,exports.getSDKOptions=e.m,exports.refreshToken=e.h,exports.revokeToken=e.g,exports.submitLoginForm=e._,exports.verifyIdToken=e.v,exports.verifyJwt=e.y;