@superfunctions/oauth-http 0.0.1

package/README.md

@@ -0,0 +1,55 @@
+# @superfunctions/oauth-http
+
+Reusable OAuth token transport for code exchange, refresh, revocation, retries, and normalized upstream errors.
+
+## Install
+
+```bash
+npm install @superfunctions/oauth-http @superfunctions/oauth-core @superfunctions/oauth-providers
+```
+
+## Quick Start
+
+```ts
+import { DefaultOAuthTokenHttpClient } from "@superfunctions/oauth-http";
+import { getOAuthProviderDescriptor } from "@superfunctions/oauth-providers";
+
+const client = new DefaultOAuthTokenHttpClient();
+const github = getOAuthProviderDescriptor("github");
+
+const tokenSet = await client.exchangeToken({
+  provider: github,
+  grantType: "authorization_code",
+  clientId: process.env.GITHUB_CLIENT_ID!,
+  clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+  code: "oauth-code",
+  redirectUri: "https://app.example/oauth/github/callback",
+});
+```
+
+## Package Boundary
+
+`@superfunctions/oauth-http` owns OAuth HTTP transport only:
+
+- token endpoint exchange
+- refresh exchange
+- revocation requests
+- retry policy and normalized transport errors
+
+It does not own state validation, token persistence, or route generation. Pair it with:
+
+- `@superfunctions/oauth-core` for callback invariants
+- `@superfunctions/oauth-flow` for full lifecycle orchestration
+- `@superfunctions/oauth-router` for route exposure
+
+## Production Notes
+
+- Provide secrets through `clientSecretResolver` when your platform resolves secrets dynamically.
+- Tune retries for provider-specific 429/5xx behavior instead of wrapping token calls with ad hoc fetch logic.
+- Treat provider revocation as best effort unless your product contract requires remote confirmation before local cleanup.
+
+## Related Packages
+
+- OAuth core primitives: [../oauth-core/README.md](../oauth-core/README.md)
+- Provider descriptors: [../oauth-providers/README.md](../oauth-providers/README.md)
+- Route factories: [../oauth-router/README.md](../oauth-router/README.md)

package/dist/errors.d.ts

@@ -0,0 +1,25 @@
+import type { OAuthSecretResolverContext } from "./index.js";
+export type OAuthHttpErrorCode = "OAUTH_TOKEN_EXCHANGE_FAILED" | "OAUTH_TOKEN_REFRESH_FAILED" | "PROVIDER_RATE_LIMITED" | "VALIDATION_ERROR" | "INTERNAL_ERROR" | "OAUTH_RUNTIME_CONFIG_INVALID" | "OAUTH_SECRET_RESOLUTION_FAILED";
+export interface OAuthHttpErrorOptions {
+    code: OAuthHttpErrorCode;
+    status?: number;
+    retryable?: boolean;
+    details?: Record<string, unknown>;
+    cause?: unknown;
+}
+export declare class OAuthHttpError extends Error {
+    readonly code: OAuthHttpErrorCode;
+    readonly status?: number;
+    readonly retryable: boolean;
+    readonly details?: Record<string, unknown>;
+    readonly cause?: unknown;
+    constructor(message: string, options: OAuthHttpErrorOptions);
+}
+export declare function unsupportedTokenAuthMethodError(tokenAuthMethod: string): OAuthHttpError;
+export declare function invalidRuntimeConfigError(message: string, details?: Record<string, unknown>): OAuthHttpError;
+export declare function secretResolutionFailedError(context: OAuthSecretResolverContext, cause?: unknown, message?: string): OAuthHttpError;
+export declare function normalizeOAuthErrorBody(rawBody: unknown): {
+    message: string;
+    details?: Record<string, unknown>;
+};
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,MAAM,kBAAkB,GAC1B,6BAA6B,GAC7B,4BAA4B,GAC5B,uBAAuB,GACvB,kBAAkB,GAClB,gBAAgB,GAChB,8BAA8B,GAC9B,gCAAgC,CAAC;AAErC,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEb,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB;CAS5D;AAED,wBAAgB,+BAA+B,CAAC,eAAe,EAAE,MAAM,GAAG,cAAc,CAOvF;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CAO5G;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,0BAA0B,EACnC,KAAK,CAAC,EAAE,OAAO,EACf,OAAO,GAAE,MAAgD,GACxD,cAAc,CAahB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAyBhH"}

package/dist/errors.js

@@ -0,0 +1,71 @@
+export class OAuthHttpError extends Error {
+    code;
+    status;
+    retryable;
+    details;
+    cause;
+    constructor(message, options) {
+        super(message);
+        this.name = "OAuthHttpError";
+        this.code = options.code;
+        this.status = options.status;
+        this.retryable = options.retryable ?? false;
+        this.details = options.details;
+        this.cause = options.cause;
+    }
+}
+export function unsupportedTokenAuthMethodError(tokenAuthMethod) {
+    return new OAuthHttpError("unsupported token auth method", {
+        code: "VALIDATION_ERROR",
+        status: 400,
+        retryable: false,
+        details: { tokenAuthMethod }
+    });
+}
+export function invalidRuntimeConfigError(message, details) {
+    return new OAuthHttpError(message, {
+        code: "OAUTH_RUNTIME_CONFIG_INVALID",
+        status: 500,
+        retryable: false,
+        details
+    });
+}
+export function secretResolutionFailedError(context, cause, message = "failed to resolve OAuth client secret") {
+    return new OAuthHttpError(message, {
+        code: "OAUTH_SECRET_RESOLUTION_FAILED",
+        status: 500,
+        retryable: false,
+        cause,
+        details: {
+            providerId: context.provider.id,
+            operation: context.operation,
+            grantType: context.grantType,
+            hasResolver: true
+        }
+    });
+}
+export function normalizeOAuthErrorBody(rawBody) {
+    if (!rawBody || typeof rawBody !== "object") {
+        return { message: "OAuth provider request failed" };
+    }
+    const payload = rawBody;
+    const description = asString(payload.error_description) ??
+        asString(payload.message) ??
+        asString(payload.error) ??
+        asString(payload.detail) ??
+        "OAuth provider request failed";
+    const details = Object.fromEntries(Object.entries({
+        error: asString(payload.error),
+        error_description: asString(payload.error_description),
+        error_uri: asString(payload.error_uri),
+        detail: asString(payload.detail)
+    }).filter(([, value]) => value !== undefined));
+    return {
+        message: description,
+        details: Object.keys(details).length > 0 ? details : undefined
+    };
+}
+function asString(value) {
+    return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAmBA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAqB;IACzB,MAAM,CAAU;IAChB,SAAS,CAAU;IACnB,OAAO,CAA2B;IAClC,KAAK,CAAW;IAEzB,YAAY,OAAe,EAAE,OAA8B;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,UAAU,+BAA+B,CAAC,eAAuB;IACrE,OAAO,IAAI,cAAc,CAAC,+BAA+B,EAAE;QACzD,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,eAAe,EAAE;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe,EAAE,OAAiC;IAC1F,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE;QACjC,IAAI,EAAE,8BAA8B;QACpC,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,KAAK;QAChB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAAmC,EACnC,KAAe,EACf,UAAkB,uCAAuC;IAEzD,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE;QACjC,IAAI,EAAE,gCAAgC;QACtC,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,KAAK;QAChB,KAAK;QACL,OAAO,EAAE;YACP,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;YAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,IAAI;SAClB;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,OAAO,GAAG,OAAkC,CAAC;IACnD,MAAM,WAAW,GACf,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACnC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QACxB,+BAA+B,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAChC,MAAM,CAAC,OAAO,CAAC;QACb,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAC9B,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACtD,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;KACjC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC9C,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,54 @@
+import type { OAuthProviderDescriptor } from "@superfunctions/oauth-core";
+export type OAuthTokenGrantType = "authorization_code" | "refresh_token" | "client_credentials";
+export type OAuthTokenAuthMethod = "client_secret_post" | "client_secret_basic";
+export interface OAuthResolvedClientSecret {
+    clientSecret: string;
+    tokenAuthMethod?: OAuthTokenAuthMethod;
+}
+export interface OAuthSecretResolverContext {
+    provider: OAuthProviderDescriptor;
+    operation: "exchange" | "revoke";
+    clientId: string;
+    grantType?: OAuthTokenGrantType;
+    redirectUri?: string;
+    scopes?: string[];
+    tokenTypeHint?: "access_token" | "refresh_token";
+}
+export type OAuthClientSecretResolver = (input: OAuthSecretResolverContext) => Promise<OAuthResolvedClientSecret> | OAuthResolvedClientSecret;
+export interface OAuthTokenEndpointRequest {
+    provider: OAuthProviderDescriptor;
+    grantType: OAuthTokenGrantType;
+    clientId: string;
+    clientSecret?: string;
+    clientSecretResolver?: OAuthClientSecretResolver;
+    redirectUri?: string;
+    code?: string;
+    codeVerifier?: string;
+    refreshToken?: string;
+    scopes?: string[];
+}
+export interface OAuthTokenEndpointResponse {
+    accessToken: string;
+    refreshToken?: string;
+    expiresIn?: number;
+    tokenType?: string;
+    scope?: string;
+    idToken?: string;
+    raw?: unknown;
+}
+export interface OAuthRevocationRequest {
+    provider: OAuthProviderDescriptor;
+    clientId: string;
+    clientSecret?: string;
+    clientSecretResolver?: OAuthClientSecretResolver;
+    token: string;
+    tokenTypeHint?: "access_token" | "refresh_token";
+}
+export interface OAuthTokenHttpClient {
+    exchangeToken(input: OAuthTokenEndpointRequest): Promise<OAuthTokenEndpointResponse>;
+    revokeToken(input: OAuthRevocationRequest): Promise<void>;
+}
+export * from "./errors.js";
+export * from "./retry-policy.js";
+export * from "./token-client.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAE1E,MAAM,MAAM,mBAAmB,GAC3B,oBAAoB,GACpB,eAAe,GACf,oBAAoB,CAAC;AAEzB,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,qBAAqB,CAAC;AAEhF,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACxC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,SAAS,EAAE,UAAU,GAAG,QAAQ,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,cAAc,GAAG,eAAe,CAAC;CAClD;AAED,MAAM,MAAM,yBAAyB,GAAG,CACtC,KAAK,EAAE,0BAA0B,KAC9B,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC;AAEpE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,SAAS,EAAE,mBAAmB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,cAAc,GAAG,eAAe,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACrF,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export * from "./errors.js";
+export * from "./retry-policy.js";
+export * from "./token-client.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiEA,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC"}

package/dist/retry-policy.d.ts

@@ -0,0 +1,20 @@
+export interface OAuthRetryPolicy {
+    maxAttempts: number;
+    baseDelayMs: number;
+    maxDelayMs: number;
+    jitterRatio: number;
+    random: () => number;
+}
+export interface RetryDecisionInput {
+    attempt: number;
+    status?: number;
+    retryAfterHeader?: string | null;
+}
+export interface RetryDecision {
+    retry: boolean;
+    delayMs: number;
+}
+export declare const DEFAULT_OAUTH_RETRY_POLICY: OAuthRetryPolicy;
+export declare function decideRetry(input: RetryDecisionInput, policy?: OAuthRetryPolicy): RetryDecision;
+export declare function parseRetryAfter(value: string | null | undefined): number | null;
+//# sourceMappingURL=retry-policy.d.ts.map

package/dist/retry-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-policy.d.ts","sourceRoot":"","sources":["../src/retry-policy.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,0BAA0B,EAAE,gBAMxC,CAAC;AAEF,wBAAgB,WAAW,CACzB,KAAK,EAAE,kBAAkB,EACzB,MAAM,GAAE,gBAA6C,GACpD,aAAa,CAiBf;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAqB/E"}

package/dist/retry-policy.js

@@ -0,0 +1,50 @@
+export const DEFAULT_OAUTH_RETRY_POLICY = {
+    maxAttempts: 5,
+    baseDelayMs: 250,
+    maxDelayMs: 10_000,
+    jitterRatio: 0.2,
+    random: Math.random
+};
+export function decideRetry(input, policy = DEFAULT_OAUTH_RETRY_POLICY) {
+    if (!shouldRetryStatus(input.status)) {
+        return { retry: false, delayMs: 0 };
+    }
+    if (input.attempt >= policy.maxAttempts) {
+        return { retry: false, delayMs: 0 };
+    }
+    const retryAfterMs = parseRetryAfter(input.retryAfterHeader);
+    if (retryAfterMs !== null) {
+        return { retry: true, delayMs: retryAfterMs };
+    }
+    const exponentialDelay = Math.min(policy.maxDelayMs, policy.baseDelayMs * 2 ** (input.attempt - 1));
+    const jitter = Math.floor(exponentialDelay * policy.jitterRatio * policy.random());
+    return { retry: true, delayMs: exponentialDelay + jitter };
+}
+export function parseRetryAfter(value) {
+    if (!value) {
+        return null;
+    }
+    const seconds = Number(value);
+    if (!Number.isNaN(seconds) && Number.isFinite(seconds) && seconds >= 0) {
+        return Math.round(seconds * 1000);
+    }
+    const dateValue = Date.parse(value);
+    if (Number.isNaN(dateValue)) {
+        return null;
+    }
+    const now = Date.now();
+    if (dateValue <= now) {
+        return 0;
+    }
+    return dateValue - now;
+}
+function shouldRetryStatus(status) {
+    if (status === undefined) {
+        return false;
+    }
+    if (status === 429) {
+        return true;
+    }
+    return status >= 500 && status <= 599;
+}
+//# sourceMappingURL=retry-policy.js.map

package/dist/retry-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-policy.js","sourceRoot":"","sources":["../src/retry-policy.ts"],"names":[],"mappings":"AAmBA,MAAM,CAAC,MAAM,0BAA0B,GAAqB;IAC1D,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,GAAG;IAChB,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,GAAG;IAChB,MAAM,EAAE,IAAI,CAAC,MAAM;CACpB,CAAC;AAEF,MAAM,UAAU,WAAW,CACzB,KAAyB,EACzB,SAA2B,0BAA0B;IAErD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAgC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,SAAS,GAAG,GAAG,CAAC;AACzB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC;AACxC,CAAC"}

package/dist/token-client.d.ts

@@ -0,0 +1,47 @@
+import type { OAuthRevocationRequest, OAuthTokenEndpointRequest, OAuthTokenEndpointResponse, OAuthTokenHttpClient } from "./index.js";
+import { OAuthHttpError } from "./errors.js";
+import { type OAuthRetryPolicy } from "./retry-policy.js";
+interface HeadersLike {
+    get(name: string): string | null;
+}
+interface ResponseLike {
+    ok: boolean;
+    status: number;
+    headers: HeadersLike;
+    text(): Promise<string>;
+}
+export interface RequestInitLike {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+}
+export type OAuthFetchLike = (url: string, init: RequestInitLike) => Promise<ResponseLike>;
+export interface OAuthTokenClientOptions {
+    fetcher?: OAuthFetchLike;
+    retryPolicy?: OAuthRetryPolicy;
+    sleep?: (delayMs: number) => Promise<void>;
+}
+export interface DisconnectWithRevokeInput {
+    revokeSupported: boolean;
+    revokeRequest: OAuthRevocationRequest;
+    deleteLocalTokenRecord: () => Promise<void>;
+    deleteConnectionRecord: () => Promise<void>;
+    onRevocationFailure?: (error: OAuthHttpError) => Promise<void> | void;
+}
+export interface DisconnectWithRevokeResult {
+    remoteRevokeAttempted: boolean;
+    localTokenDeleted: boolean;
+    connectionDeleted: boolean;
+}
+export declare class DefaultOAuthTokenHttpClient implements OAuthTokenHttpClient {
+    private readonly fetcher;
+    private readonly retryPolicy;
+    private readonly sleep;
+    constructor(options?: OAuthTokenClientOptions);
+    exchangeToken(input: OAuthTokenEndpointRequest): Promise<OAuthTokenEndpointResponse>;
+    revokeToken(input: OAuthRevocationRequest): Promise<void>;
+    private executeWithRetry;
+}
+export declare function disconnectWithRevoke(client: OAuthTokenHttpClient, input: DisconnectWithRevokeInput): Promise<DisconnectWithRevokeResult>;
+export {};
+//# sourceMappingURL=token-client.d.ts.map

package/dist/token-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-client.d.ts","sourceRoot":"","sources":["../src/token-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,sBAAsB,EAGtB,yBAAyB,EACzB,0BAA0B,EAE1B,oBAAoB,EACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EAKf,MAAM,aAAa,CAAC;AACrB,OAAO,EAA2C,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEnG,UAAU,WAAW;IACnB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAE3F,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,sBAAsB,CAAC;IACtC,sBAAsB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,sBAAsB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACvE;AAED,MAAM,WAAW,0BAA0B;IACzC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAQD,qBAAa,2BAA4B,YAAW,oBAAoB;IACtE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;gBAE/C,OAAO,GAAE,uBAA4B;IAM3C,aAAa,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IA2BpF,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;YAkCjD,gBAAgB;CAiD/B;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAyCrC"}

package/dist/token-client.js

@@ -0,0 +1,408 @@
+import { OAuthHttpError, invalidRuntimeConfigError, normalizeOAuthErrorBody, secretResolutionFailedError, unsupportedTokenAuthMethodError } from "./errors.js";
+import { DEFAULT_OAUTH_RETRY_POLICY, decideRetry } from "./retry-policy.js";
+export class DefaultOAuthTokenHttpClient {
+    fetcher;
+    retryPolicy;
+    sleep;
+    constructor(options = {}) {
+        this.fetcher = options.fetcher ?? getGlobalFetch();
+        this.retryPolicy = options.retryPolicy ?? DEFAULT_OAUTH_RETRY_POLICY;
+        this.sleep = options.sleep ?? ((delayMs) => new Promise((resolve) => setTimeout(resolve, delayMs)));
+    }
+    async exchangeToken(input) {
+        const credentials = await resolveRequestCredentials(input, {
+            provider: input.provider,
+            operation: "exchange",
+            clientId: input.clientId,
+            grantType: input.grantType,
+            redirectUri: input.redirectUri,
+            scopes: input.scopes
+        });
+        const endpointRequest = createTokenRequest(input, credentials);
+        const response = await this.executeWithRetry(input.provider.tokenUrl, endpointRequest);
+        const contentType = response.headers.get("content-type");
+        const rawBodyText = await response.text();
+        const parsedBody = parseResponseBody(rawBodyText, contentType);
+        if (!response.ok) {
+            throw createTokenEndpointError({
+                status: response.status,
+                grantType: input.grantType,
+                providerId: input.provider.id,
+                parsedBody
+            });
+        }
+        return normalizeTokenResponse(parsedBody);
+    }
+    async revokeToken(input) {
+        if (!input.provider.revocationUrl) {
+            return;
+        }
+        const credentials = await resolveRequestCredentials(input, {
+            provider: input.provider,
+            operation: "revoke",
+            clientId: input.clientId,
+            tokenTypeHint: input.tokenTypeHint
+        });
+        const endpointRequest = createRevokeRequest(input, credentials);
+        const response = await this.executeWithRetry(input.provider.revocationUrl, endpointRequest);
+        if (response.ok) {
+            return;
+        }
+        const contentType = response.headers.get("content-type");
+        const rawBodyText = await response.text();
+        const parsedBody = parseResponseBody(rawBodyText, contentType);
+        const normalized = normalizeOAuthErrorBody(parsedBody);
+        const retryable = response.status === 429 || (response.status >= 500 && response.status <= 599);
+        throw new OAuthHttpError(normalized.message, {
+            code: response.status === 429 ? "PROVIDER_RATE_LIMITED" : "INTERNAL_ERROR",
+            status: response.status,
+            retryable,
+            details: {
+                providerId: input.provider.id,
+                operation: "revoke",
+                ...normalized.details
+            }
+        });
+    }
+    async executeWithRetry(url, init) {
+        let attempt = 1;
+        while (true) {
+            let response;
+            try {
+                response = await this.fetcher(url, init);
+            }
+            catch (error) {
+                const decision = decideRetry({
+                    attempt,
+                    status: 503
+                }, this.retryPolicy);
+                if (!decision.retry) {
+                    throw new OAuthHttpError("OAuth provider request failed", {
+                        code: "OAUTH_TOKEN_EXCHANGE_FAILED",
+                        status: 502,
+                        retryable: false,
+                        cause: error,
+                        details: {
+                            transportFailure: true
+                        }
+                    });
+                }
+                await this.sleep(decision.delayMs);
+                attempt += 1;
+                continue;
+            }
+            const decision = decideRetry({
+                attempt,
+                status: response.status,
+                retryAfterHeader: response.headers.get("retry-after")
+            }, this.retryPolicy);
+            if (!decision.retry) {
+                return response;
+            }
+            await this.sleep(decision.delayMs);
+            attempt += 1;
+        }
+    }
+}
+export async function disconnectWithRevoke(client, input) {
+    let revokeError = null;
+    let localTokenDeleted = false;
+    let connectionDeleted = false;
+    if (input.revokeSupported) {
+        try {
+            await client.revokeToken(input.revokeRequest);
+        }
+        catch (error) {
+            revokeError = ensureOAuthHttpError(error);
+            if (input.onRevocationFailure) {
+                await input.onRevocationFailure(revokeError);
+            }
+        }
+    }
+    await input.deleteLocalTokenRecord();
+    localTokenDeleted = true;
+    await input.deleteConnectionRecord();
+    connectionDeleted = true;
+    if (revokeError) {
+        throw new OAuthHttpError("provider revoke failed after local cleanup", {
+            code: "INTERNAL_ERROR",
+            status: 502,
+            retryable: false,
+            cause: revokeError,
+            details: {
+                remoteRevokeAttempted: true,
+                localTokenDeleted,
+                connectionDeleted,
+                revokeErrorCode: revokeError.code
+            }
+        });
+    }
+    return {
+        remoteRevokeAttempted: input.revokeSupported,
+        localTokenDeleted,
+        connectionDeleted
+    };
+}
+async function resolveRequestCredentials(input, context) {
+    if (!input.clientId) {
+        throw invalidRuntimeConfigError("OAuth runtime config missing clientId", {
+            providerId: input.provider.id,
+            operation: context.operation
+        });
+    }
+    const tokenAuthMethod = getTokenAuthMethod(input.provider.tokenAuthMethod);
+    if (input.clientSecret) {
+        return {
+            clientId: input.clientId,
+            clientSecret: input.clientSecret,
+            tokenAuthMethod
+        };
+    }
+    const resolvedSecret = await resolveClientSecret(input.clientSecretResolver, context);
+    return {
+        clientId: input.clientId,
+        clientSecret: resolvedSecret.clientSecret,
+        tokenAuthMethod: resolvedSecret.tokenAuthMethod ?? tokenAuthMethod
+    };
+}
+async function resolveClientSecret(resolver, context) {
+    if (!resolver) {
+        throw invalidRuntimeConfigError("OAuth runtime config missing clientSecret or clientSecretResolver", {
+            providerId: context.provider.id,
+            operation: context.operation
+        });
+    }
+    let resolved;
+    try {
+        resolved = await resolver(context);
+    }
+    catch (error) {
+        throw secretResolutionFailedError(context, error);
+    }
+    if (!resolved?.clientSecret) {
+        throw secretResolutionFailedError(context, undefined, "resolved OAuth client secret is empty");
+    }
+    return resolved;
+}
+function createTokenRequest(input, credentials) {
+    const params = new URLSearchParams();
+    params.set("grant_type", input.grantType);
+    if (input.grantType === "authorization_code") {
+        if (!input.code) {
+            throw new OAuthHttpError("authorization code is required", {
+                code: "VALIDATION_ERROR",
+                status: 400
+            });
+        }
+        params.set("code", input.code);
+        if (input.redirectUri) {
+            params.set("redirect_uri", input.redirectUri);
+        }
+        if (input.codeVerifier) {
+            params.set("code_verifier", input.codeVerifier);
+        }
+    }
+    else if (input.grantType === "refresh_token") {
+        if (!input.refreshToken) {
+            throw new OAuthHttpError("refresh token is required", {
+                code: "VALIDATION_ERROR",
+                status: 400
+            });
+        }
+        params.set("refresh_token", input.refreshToken);
+        if (input.redirectUri) {
+            params.set("redirect_uri", input.redirectUri);
+        }
+    }
+    if (input.scopes && input.scopes.length > 0) {
+        params.set("scope", input.scopes.join(input.provider.scopeSeparator ?? " "));
+    }
+    return {
+        method: "POST",
+        headers: createAuthHeaders(credentials, params),
+        body: params.toString()
+    };
+}
+function createRevokeRequest(input, credentials) {
+    const params = new URLSearchParams();
+    params.set("token", input.token);
+    if (input.tokenTypeHint) {
+        params.set("token_type_hint", input.tokenTypeHint);
+    }
+    return {
+        method: "POST",
+        headers: createAuthHeaders(credentials, params),
+        body: params.toString()
+    };
+}
+function createAuthHeaders(credentials, params) {
+    const headers = {
+        "content-type": "application/x-www-form-urlencoded",
+        accept: "application/json, application/x-www-form-urlencoded, text/plain"
+    };
+    if (credentials.tokenAuthMethod === "client_secret_post") {
+        params.set("client_id", credentials.clientId);
+        params.set("client_secret", credentials.clientSecret);
+    }
+    else {
+        const authUser = encodeURIComponent(credentials.clientId);
+        const authPassword = encodeURIComponent(credentials.clientSecret);
+        const auth = Buffer.from(`${authUser}:${authPassword}`, "utf8").toString("base64");
+        headers.authorization = `Basic ${auth}`;
+    }
+    return headers;
+}
+function parseResponseBody(rawBodyText, contentType) {
+    if (rawBodyText.length === 0) {
+        return {};
+    }
+    const normalizedContentType = contentType?.toLowerCase() ?? "";
+    if (normalizedContentType.includes("application/json")) {
+        return safeParseJson(rawBodyText);
+    }
+    if (normalizedContentType.includes("application/x-www-form-urlencoded") ||
+        normalizedContentType.includes("text/plain")) {
+        return parseFormBody(rawBodyText);
+    }
+    const maybeJson = safeParseJson(rawBodyText);
+    if (maybeJson !== null) {
+        return maybeJson;
+    }
+    return parseFormBody(rawBodyText);
+}
+function normalizeTokenResponse(parsedBody) {
+    if (!parsedBody || typeof parsedBody !== "object" || Array.isArray(parsedBody)) {
+        throw new OAuthHttpError("OAuth token response body must be a JSON object", {
+            code: "OAUTH_TOKEN_EXCHANGE_FAILED",
+            status: 502,
+            retryable: false,
+            details: { parsedBodyKeys: [] }
+        });
+    }
+    const payload = parsedBody;
+    const accessToken = asString(payload.access_token);
+    if (!accessToken) {
+        throw new OAuthHttpError("OAuth token response missing access_token", {
+            code: "OAUTH_TOKEN_EXCHANGE_FAILED",
+            status: 502,
+            retryable: false,
+            details: { parsedBodyKeys: Object.keys(payload).slice(0, 10) }
+        });
+    }
+    const result = {
+        accessToken,
+        refreshToken: asString(payload.refresh_token),
+        tokenType: asString(payload.token_type),
+        scope: asString(payload.scope),
+        idToken: asString(payload.id_token),
+        raw: payload
+    };
+    const expiresIn = asNumber(payload.expires_in);
+    if (expiresIn !== undefined) {
+        result.expiresIn = expiresIn;
+    }
+    return result;
+}
+function createTokenEndpointError(input) {
+    const normalized = normalizeOAuthErrorBody(input.parsedBody);
+    const retryable = input.status === 429 || (input.status >= 500 && input.status <= 599);
+    if (input.status === 429) {
+        return new OAuthHttpError(normalized.message, {
+            code: "PROVIDER_RATE_LIMITED",
+            status: input.status,
+            retryable: true,
+            details: {
+                providerId: input.providerId,
+                grantType: input.grantType,
+                ...normalized.details
+            }
+        });
+    }
+    return new OAuthHttpError(normalized.message, {
+        code: input.grantType === "refresh_token" ? "OAUTH_TOKEN_REFRESH_FAILED" : "OAUTH_TOKEN_EXCHANGE_FAILED",
+        status: input.status,
+        retryable,
+        details: {
+            providerId: input.providerId,
+            grantType: input.grantType,
+            ...normalized.details
+        }
+    });
+}
+function getTokenAuthMethod(tokenAuthMethod) {
+    if (!tokenAuthMethod) {
+        return "client_secret_post";
+    }
+    if (tokenAuthMethod === "client_secret_post" || tokenAuthMethod === "client_secret_basic") {
+        return tokenAuthMethod;
+    }
+    throw unsupportedTokenAuthMethodError(tokenAuthMethod);
+}
+function parseFormBody(rawBodyText) {
+    const params = new URLSearchParams(rawBodyText);
+    const result = {};
+    for (const [key, value] of params.entries()) {
+        result[key] = value;
+    }
+    return result;
+}
+function safeParseJson(rawBodyText) {
+    try {
+        return JSON.parse(rawBodyText);
+    }
+    catch {
+        return null;
+    }
+}
+function asString(value) {
+    return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function asNumber(value) {
+    if (typeof value === "number" && Number.isFinite(value)) {
+        return value;
+    }
+    if (typeof value === "string" && value.trim().length > 0) {
+        const parsed = Number(value);
+        return Number.isFinite(parsed) ? parsed : undefined;
+    }
+    return undefined;
+}
+function ensureOAuthHttpError(error) {
+    if (error instanceof OAuthHttpError) {
+        return error;
+    }
+    return new OAuthHttpError(error instanceof Error ? error.message : "OAuth HTTP request failed", {
+        code: "INTERNAL_ERROR",
+        status: 500,
+        retryable: false,
+        cause: error
+    });
+}
+function getGlobalFetch() {
+    const fetcher = globalThis.fetch;
+    if (!fetcher) {
+        throw new OAuthHttpError("global fetch is not available", {
+            code: "INTERNAL_ERROR",
+            status: 500,
+            retryable: false
+        });
+    }
+    return async (url, init) => {
+        const response = await fetcher(url, {
+            method: init.method,
+            headers: init.headers,
+            body: init.body
+        });
+        return {
+            ok: response.ok,
+            status: response.status,
+            headers: {
+                get(name) {
+                    return response.headers.get(name);
+                }
+            },
+            text: () => response.text()
+        };
+    };
+}
+//# sourceMappingURL=token-client.js.map

package/dist/token-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-client.js","sourceRoot":"","sources":["../src/token-client.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,+BAA+B,EAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAyB,MAAM,mBAAmB,CAAC;AA+CnG,MAAM,OAAO,2BAA2B;IACrB,OAAO,CAAiB;IACxB,WAAW,CAAmB;IAC9B,KAAK,CAAqC;IAE3D,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,0BAA0B,CAAC;QACrE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAgC;QAClD,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,KAAK,EAAE;YACzD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,UAAU;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACvF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE/D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,wBAAwB,CAAC;gBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;gBAC7B,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAED,OAAO,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA6B;QAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,KAAK,EAAE;YACzD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,mBAAmB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC5F,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;QAChG,MAAM,IAAI,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE;YAC3C,IAAI,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB;YAC1E,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS;YACT,OAAO,EAAE;gBACP,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;gBAC7B,SAAS,EAAE,QAAQ;gBACnB,GAAG,UAAU,CAAC,OAAO;aACtB;SACF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAW,EAAE,IAAqB;QAC/D,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,QAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,WAAW,CAC1B;oBACE,OAAO;oBACP,MAAM,EAAE,GAAG;iBACZ,EACD,IAAI,CAAC,WAAW,CACjB,CAAC;gBAEF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACpB,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE;wBACxD,IAAI,EAAE,6BAA6B;wBACnC,MAAM,EAAE,GAAG;wBACX,SAAS,EAAE,KAAK;wBAChB,KAAK,EAAE,KAAK;wBACZ,OAAO,EAAE;4BACP,gBAAgB,EAAE,IAAI;yBACvB;qBACF,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACnC,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,WAAW,CAC1B;gBACE,OAAO;gBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;aACtD,EACD,IAAI,CAAC,WAAW,CACjB,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA4B,EAC5B,KAAgC;IAEhC,IAAI,WAAW,GAA0B,IAAI,CAAC;IAC9C,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,CAAC,sBAAsB,EAAE,CAAC;IACrC,iBAAiB,GAAG,IAAI,CAAC;IACzB,MAAM,KAAK,CAAC,sBAAsB,EAAE,CAAC;IACrC,iBAAiB,GAAG,IAAI,CAAC;IAEzB,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,cAAc,CAAC,4CAA4C,EAAE;YACrE,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE;gBACP,qBAAqB,EAAE,IAAI;gBAC3B,iBAAiB;gBACjB,iBAAiB;gBACjB,eAAe,EAAE,WAAW,CAAC,IAAI;aAClC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,qBAAqB,EAAE,KAAK,CAAC,eAAe;QAC5C,iBAAiB;QACjB,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,KAAkI,EAClI,OAAmC;IAEnC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,yBAAyB,CAAC,uCAAuC,EAAE;YACvE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,eAAe;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IACtF,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,cAAc,CAAC,YAAY;QACzC,eAAe,EAAE,cAAc,CAAC,eAAe,IAAI,eAAe;KACnE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,QAA+C,EAC/C,OAAmC;IAEnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,yBAAyB,CAAC,mEAAmE,EAAE;YACnG,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;YAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAmC,CAAC;IACxC,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,2BAA2B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;QAC5B,MAAM,2BAA2B,CAAC,OAAO,EAAE,SAAS,EAAE,uCAAuC,CAAC,CAAC;IACjG,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAgC,EAChC,WAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAE1C,IAAI,KAAK,CAAC,SAAS,KAAK,oBAAoB,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CAAC,gCAAgC,EAAE;gBACzD,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,2BAA2B,EAAE;gBACpD,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC;QAC/C,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAA6B,EAC7B,WAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC;QAC/C,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,WAAuC,EACvC,MAAuB;IAEvB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,mCAAmC;QACnD,MAAM,EAAE,iEAAiE;KAC1E,CAAC;IAEF,IAAI,WAAW,CAAC,eAAe,KAAK,oBAAoB,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,kBAAkB,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnF,OAAO,CAAC,aAAa,GAAG,SAAS,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB,EAAE,WAA0B;IACxE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,qBAAqB,GAAG,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,qBAAqB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACvD,OAAO,aAAa,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,IACE,qBAAqB,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACnE,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC5C,CAAC;QACD,OAAO,aAAa,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,aAAa,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAmB;IACjD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,cAAc,CAAC,iDAAiD,EAAE;YAC1E,IAAI,EAAE,6BAA6B;YACnC,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,UAAqC,CAAC;IACtD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,cAAc,CAAC,2CAA2C,EAAE;YACpE,IAAI,EAAE,6BAA6B;YACnC,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAA+B;QACzC,WAAW;QACX,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;QACvC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAC9B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,GAAG,EAAE,OAAO;KACb,CAAC;IAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB,CAAC,KAKjC;IACC,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE;YAC5C,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE;gBACP,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,GAAG,UAAU,CAAC,OAAO;aACtB;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE;QAC5C,IAAI,EAAE,KAAK,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,6BAA6B;QACxG,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS;QACT,OAAO,EAAE;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,UAAU,CAAC,OAAO;SACtB;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,eAAmC;IAC7D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,IAAI,eAAe,KAAK,oBAAoB,IAAI,eAAe,KAAK,qBAAqB,EAAE,CAAC;QAC1F,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,+BAA+B,CAAC,eAAe,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB;IACxC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,cAAc,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,EAAE;QAC9F,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,+BAA+B,EAAE;YACxD,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE;gBACP,GAAG,CAAC,IAAY;oBACd,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpC,CAAC;aACF;YACD,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;SAC5B,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@superfunctions/oauth-http",
+  "version": "0.0.1",
+  "description": "OAuth HTTP transport contracts for Superfunctions",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest --config ./vitest.config.ts --run",
+    "test:watch": "vitest --config ./vitest.config.ts --watch",
+    "lint": "echo 'lint not configured'",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "keywords": [
+    "oauth",
+    "http",
+    "superfunctions"
+  ],
+  "author": "21n",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/21nCo/super-functions.git",
+    "directory": "packages/oauth-http"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@superfunctions/oauth-core": "0.0.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.6.0",
+    "vitest": "^3.2.4"
+  }
+}