@tempoxyz/id 0.0.0-pr-293.sha-db2bcd0 → 0.0.0-pr-293.sha-e314a6e

package/dist/app/server/assets/{authorize-D_5EG0WN.js → authorize-C3nY01zc.js}

@@ -1,2 +1,2 @@
-import{s as e}from"./react-dom-DtwtyQPy.js";import{a as t,i as n,o as r,r as i}from"./Client-D3gnMDTr.js";import"./zyzz.config-DYq-16_0.js";import{n as a,t as o}from"./Authentication-DLWMd2mA.js";import{t as s}from"./authorize-pZETCSux.js";import{n as c,t as l}from"./Approval-DhLkTvkI.js";var u=e(),d=class extends Error{name=`Page.CeremonyError`};function f(e){let i=t(),s=a({async mutationFn(t){let n={accept:t.accept,...e.request?.key?.account?{account:e.request.key.account}:{},oauth_query:window.location.search.slice(1),session_id:e.request?.session??``},a=await r(i.v1.authorize.consent.$post({json:n}));if(!(`step`in a))return a;let s=await o({options:{publicKey:a.step.options.publicKey}}).catch(e=>{throw new d(`Passkey ceremony failed.`,{cause:e})}),c=await r(i.v1.authorize.consent.$post({json:{...n,passkey:{assertion:s}}}));if(`step`in c)throw Error(`The approval requested a second passkey step.`);return c},onError:e=>{n(e)===`session_required`&&window.location.reload()},onSuccess:e=>window.location.assign(e.redirect)}),f=s.isPending||s.isSuccess;return(0,u.jsx)(`main`,{className:h.page?`z_tempo_2d_id-V2chls0 z_tempo_2d_id-V2chls1 z_tempo_2d_id-V2chls2 z_tempo_2d_id-V2chls3 z_tempo_2d_id-V2chls4`:h.page().className,children:e.request?(0,u.jsx)(l,{account:e.request.account,app:e.request.app,approving:f&&s.variables.accept,denying:f&&!s.variables.accept,destination:e.request.destination,email:e.request.email,verified:e.request.verified,error:s.error&&n(s.error)!==`webauthn_required`?p(s.error):void 0,keyAuthorization:e.request.key,logo:e.request.logo,onApprove:()=>s.mutate({accept:!0}),onDeny:()=>s.mutate({accept:!1}),refusal:n(s.error)===`webauthn_required`?`passkey`:void 0}):(0,u.jsx)(c,{})})}function p(e){return n(e)===`webauthn_rejected`?`Your passkey did not sign the approval. Approve again, or deny the request.`:e instanceof d?m(e).includes(`NotAllowedError`)?`The passkey request was canceled. Approve again, or deny the request.`:`Your passkey did not sign the approval. Approve again, or deny the request.`:i(e)}function m(e){return e instanceof Error?[e.name,...m(e.cause)]:[]}var h;(function(e){e.page=1})(h||={});var g=()=>(0,u.jsx)(f,{...s.useLoaderData()});export{g as component};
-//# sourceMappingURL=authorize-D_5EG0WN.js.map
+import{s as e}from"./react-dom-pSpaua7D.js";import{a as t,i as n,o as r,r as i}from"./Client-BAXSFa9e.js";import"./zyzz.config-CW977vYL.js";import{n as a,t as o}from"./Authentication-CsSh3HGu.js";import{t as s}from"./authorize-C9tfZ34z.js";import{n as c,t as l}from"./Approval-DA8fDZIl.js";var u=e(),d=class extends Error{name=`Page.CeremonyError`};function f(e){let i=t(),s=a({async mutationFn(t){let n={accept:t.accept,...e.request?.key?.account?{account:e.request.key.account}:{},oauth_query:window.location.search.slice(1),session_id:e.request?.session??``},a=await r(i.v1.authorize.consent.$post({json:n}));if(!(`step`in a))return a;let s=await o({options:{publicKey:a.step.options.publicKey}}).catch(e=>{throw new d(`Passkey ceremony failed.`,{cause:e})}),c=await r(i.v1.authorize.consent.$post({json:{...n,passkey:{assertion:s}}}));if(`step`in c)throw Error(`The approval requested a second passkey step.`);return c},onError:e=>{n(e)===`session_required`&&window.location.reload()},onSuccess:e=>window.location.assign(e.redirect)}),f=s.isPending||s.isSuccess;return(0,u.jsx)(`main`,{className:h.page?`z_tempo_2d_id-V2chls0 z_tempo_2d_id-V2chls1 z_tempo_2d_id-V2chls2 z_tempo_2d_id-V2chls3 z_tempo_2d_id-V2chls4`:h.page().className,children:e.request?(0,u.jsx)(l,{account:e.request.account,app:e.request.app,approving:f&&s.variables.accept,denying:f&&!s.variables.accept,destination:e.request.destination,email:e.request.email,verified:e.request.verified,error:s.error&&n(s.error)!==`webauthn_required`?p(s.error):void 0,keyAuthorization:e.request.key,logo:e.request.logo,onApprove:()=>s.mutate({accept:!0}),onDeny:()=>s.mutate({accept:!1}),refusal:n(s.error)===`webauthn_required`?`passkey`:void 0}):(0,u.jsx)(c,{})})}function p(e){return n(e)===`webauthn_rejected`?`Your passkey did not sign the approval. Approve again, or deny the request.`:e instanceof d?m(e).includes(`NotAllowedError`)?`The passkey request was canceled. Approve again, or deny the request.`:`Your passkey did not sign the approval. Approve again, or deny the request.`:i(e)}function m(e){return e instanceof Error?[e.name,...m(e.cause)]:[]}var h;(function(e){e.page=1})(h||={});var g=()=>(0,u.jsx)(f,{...s.useLoaderData()});export{g as component};
+//# sourceMappingURL=authorize-C3nY01zc.js.map

package/dist/app/server/assets/{authorize-D_5EG0WN.js.map → authorize-C3nY01zc.js.map}

@@ -1 +1 @@
-{"version":3,"file":"authorize-D_5EG0WN.js","names":["useMutation","parseResponse","Authentication","Client","Approval","InvalidRequest","style","CeremonyError","Error","name","Route","Page","props","client","use","consent","mutationFn","variables","json","accept","request","key","account","oauth_query","window","location","search","slice","session_id","session","decided","v1","authorize","$post","assertion","sign","options","publicKey","step","catch","error","cause","signed","passkey","onError","reason","reload","onSuccess","data","assign","redirect","isPending","isSuccess","styles","page","className","app","destination","email","verified","message","undefined","logo","mutate","names","includes","_styles","SplitComponent","useLoaderData","component","Client.use","Authentication.sign","Client.reason","Client.message","require_jsx_runtime","use","reason","parseResponse","message$1","useMutation","sign","Route","InvalidRequest","Approval","import_jsx_runtime","CeremonyError","Page","client","consent","json","variables","props","decided","assertion","error","signed","data","styles","message","names","SplitComponent"],"sources":["../../../routes/authorize.tsx?tsr-split=component"],"sourcesContent":["/** The approval page, where the signed-in user approves or denies an app's request. @module */\nimport { useMutation } from '@tanstack/react-query'\nimport { createFileRoute } from '@tanstack/react-router'\nimport { parseResponse } from 'hono/client'\nimport { Authentication } from 'webauthx/client'\nimport * as Client from '../lib/Client.js'\nimport * as Loader from '../lib/Loader.js'\nimport { Approval, InvalidRequest } from '../screens/Approval.js'\nimport { style } from '../zyzz.config.js'\n\n/** Wraps a failure of the browser's passkey ceremony. */\nclass CeremonyError extends Error {\n  override name = 'Page.CeremonyError'\n}\n\nexport const Route = createFileRoute('/authorize')({\n  component: () => <Page {...Route.useLoaderData()} />,\n  /**\n   * Redirects an unsigned request to `/oauth2/authorize`, and a visitor without a session to\n   * sign-in. Otherwise returns the request, or redirects a refused key to the app.\n   */\n  loader: async (match): Promise<Page.Props> => {\n    const { searchStr } = match.location\n    // Better Auth reads the query with `URLSearchParams`, so the page reads it the same way, and a\n    // malformed escape cannot show one request and approve another.\n    const query = new URLSearchParams(searchStr)\n    if (!query.get('sig')) {\n      const forwarded = new URLSearchParams(query)\n      if (!forwarded.has('code_challenge_method'))\n        forwarded.set('code_challenge_method', 'S256')\n      if (!forwarded.has('response_type'))\n        forwarded.set('response_type', 'code')\n      Loader.redirect({\n        document: true,\n        href: `/oauth2/authorize?${forwarded}`,\n      })\n    }\n\n    const client = Client.create()\n    const result = await (async () => {\n      try {\n        return await parseResponse(\n          client.v1.authorize.request.$get({\n            query: { oauth_query: query.toString() },\n          }),\n        )\n      } catch (error) {\n        if (Client.reason(error) === 'session_required')\n          Loader.redirect({ href: `/login${searchStr}` })\n        throw error\n      }\n    })()\n    if ('redirect' in result)\n      Loader.redirect({ document: true, href: result.redirect })\n    return { request: result.request }\n  },\n  // The loader reads the whole query, so a change to any parameter loads the page again.\n  loaderDeps: (match) => ({ search: match.search }),\n})\n\n/** Renders the page. */\nfunction Page(props: Page.Props) {\n  const client = Client.use()\n  const consent = useMutation({\n    async mutationFn(variables: { accept: boolean }) {\n      const json = {\n        accept: variables.accept,\n        // Approval signs for the account that the page shows.\n        ...(props.request?.key?.account\n          ? { account: props.request.key.account }\n          : {}),\n        oauth_query: window.location.search.slice(1),\n        session_id: props.request?.session ?? '',\n      }\n      const decided = await parseResponse(\n        client.v1.authorize.consent.$post({ json }),\n      )\n      if (!('step' in decided)) return decided\n\n      // The passkey signs the key authorization's digest, which the step's options carry.\n      const assertion = await Authentication.sign({\n        options: { publicKey: decided.step.options.publicKey },\n      }).catch((error: unknown) => {\n        throw new CeremonyError('Passkey ceremony failed.', { cause: error })\n      })\n      const signed = await parseResponse(\n        client.v1.authorize.consent.$post({\n          json: { ...json, passkey: { assertion } },\n        }),\n      )\n      if ('step' in signed)\n        throw new Error('The approval requested a second passkey step.')\n      return signed\n    },\n    // Without a session, the page's loader sends the browser to sign-in, which continues the request.\n    onError: (error) => {\n      if (Client.reason(error) === 'session_required') window.location.reload()\n    },\n    onSuccess: (data) => window.location.assign(data.redirect),\n  })\n  // The decision holds both buttons until the browser leaves, after the request succeeds too.\n  const decided = consent.isPending || consent.isSuccess\n\n  return (\n    <main {...styles.page()}>\n      {props.request ? (\n        <Approval\n          account={props.request.account}\n          app={props.request.app}\n          approving={decided && consent.variables.accept}\n          denying={decided && !consent.variables.accept}\n          destination={props.request.destination}\n          email={props.request.email}\n          verified={props.request.verified}\n          error={\n            consent.error &&\n            Client.reason(consent.error) !== 'webauthn_required'\n              ? message(consent.error)\n              : undefined\n          }\n          keyAuthorization={props.request.key}\n          logo={props.request.logo}\n          onApprove={() => consent.mutate({ accept: true })}\n          onDeny={() => consent.mutate({ accept: false })}\n          // The API's refusal names the other flows, and the screen states the step here instead.\n          refusal={\n            Client.reason(consent.error) === 'webauthn_required'\n              ? 'passkey'\n              : undefined\n          }\n        />\n      ) : (\n        <InvalidRequest />\n      )}\n    </main>\n  )\n}\n\ndeclare namespace Page {\n  type Props = {\n    /** `null` for a forged or expired query or an unknown app. */\n    request: {\n      /** Absent unless the user holds several accounts in the app's realms. */\n      account?: Approval.Account | undefined\n      /** The app's display name. */\n      app: string\n      /** The host of the app's redirect URI, or the scheme of a native app. */\n      destination: string\n      /** The signed-in user's address. */\n      email: string\n      /** Absent without a key authorization. */\n      key?: Approval.Key | undefined\n      /** The app's logo as a `data:` URL, if any. */\n      logo?: string | undefined\n      /** The signed-in session's ID, which the decision names. */\n      session: string\n      /** Whether the app is registered, which marks its name as verified. */\n      verified: boolean\n    } | null\n  }\n}\n\n/** Returns the message for `error`, such as for a canceled ceremony. */\nfunction message(error: unknown) {\n  if (Client.reason(error) === 'webauthn_rejected')\n    return 'Your passkey did not sign the approval. Approve again, or deny the request.'\n  if (!(error instanceof CeremonyError)) return Client.message(error)\n  if (names(error).includes('NotAllowedError'))\n    return 'The passkey request was canceled. Approve again, or deny the request.'\n  return 'Your passkey did not sign the approval. Approve again, or deny the request.'\n}\n\n/** Returns the names of `error` and its causes. */\nfunction names(error: unknown): readonly string[] {\n  if (!(error instanceof Error)) return []\n  return [error.name, ...names(error.cause)]\n}\n\nnamespace styles {\n  export const page = style({\n    alignItems: 'center',\n    display: 'flex',\n    justifyContent: 'center',\n    minHeight: '100dvh !custom',\n    paddingBlock: '64',\n    paddingInline: '16',\n  })\n}\n"],"mappings":"A,4SAWMO,EAAN,cAA4BC,KAAM,CAChCC,KAAgB,oBAClB,EAgDA,SAASE,EAAKC,EAAmB,CAC/B,IAAMC,EAASV,EAAW,EACpBY,EAAUf,EAAY,CAC1B,MAAMgB,WAAWC,EAAgC,CAC/C,IAAMC,EAAO,CACXC,OAAQF,EAAUE,OAElB,GAAIP,EAAMQ,SAASC,KAAKC,QACpB,CAAEA,QAASV,EAAMQ,QAAQC,IAAIC,OAAQ,EACrC,CAAC,EACLC,YAAaC,OAAOC,SAASC,OAAOC,MAAM,CAAC,EAC3CC,WAAYhB,EAAMQ,SAASS,SAAW,EACxC,EACMC,EAAU,MAAM7B,EACpBY,EAAOkB,GAAGC,UAAUjB,QAAQkB,MAAM,CAAEf,MAAK,CAAC,CAC5C,EACA,GAAI,EAAE,SAAUY,GAAU,OAAOA,EAGjC,IAAMI,EAAY,MAAMhC,EAAoB,CAC1CkC,QAAS,CAAEC,UAAWP,EAAQQ,KAAKF,QAAQC,SAAU,CACvD,CAAC,CAAC,CAACE,MAAOC,GAAmB,CAC3B,MAAM,IAAIjC,EAAc,2BAA4B,CAAEkC,MAAOD,CAAM,CAAC,CACtE,CAAC,EACKE,EAAS,MAAMzC,EACnBY,EAAOkB,GAAGC,UAAUjB,QAAQkB,MAAM,CAChCf,KAAM,CAAE,GAAGA,EAAMyB,QAAS,CAAET,WAAU,CAAE,CAC1C,CAAC,CACH,EACA,GAAI,SAAUQ,EACZ,MAAUlC,MAAM,+CAA+C,EACjE,OAAOkC,CACT,EAEAE,QAAUJ,GAAU,CACdrC,EAAcqC,CAAK,IAAM,oBAAoBhB,OAAOC,SAASqB,OAAO,CAC1E,EACAC,UAAYC,GAASxB,OAAOC,SAASwB,OAAOD,EAAKE,QAAQ,CAC3D,CAAC,EAEKpB,EAAUf,EAAQoC,WAAapC,EAAQqC,UAE7C,OACE,EAAAgC,EAAA,IAAA,CAAC,OAAD,CAAM,UAAA/B,EAAAC,KAAA,gHAAAD,EAAAC,KAAA,CAAA,CAAAC,UACH3C,SAAAA,EAAMQ,SACL,EAAAgE,EAAA,IAAA,CAACD,EAAD,CACE,QAASvE,EAAMQ,QAAQE,QACvB,IAAKV,EAAMQ,QAAQoC,IACnB,UAAW1B,GAAWf,EAAQE,UAAUE,OACxC,QAASW,GAAW,CAACf,EAAQE,UAAUE,OACvC,YAAaP,EAAMQ,QAAQqC,YAC3B,MAAO7C,EAAMQ,QAAQsC,MACrB,SAAU9C,EAAMQ,QAAQuC,SACxB,MACE5C,EAAQyB,OACRrC,EAAcY,EAAQyB,KAAK,IAAM,oBAC7BoB,EAAQ7C,EAAQyB,KAAK,EACrBqB,IAAAA,GAEN,iBAAkBjD,EAAMQ,QAAQC,IAChC,KAAMT,EAAMQ,QAAQ0C,KACpB,cAAiB/C,EAAQgD,OAAO,CAAE5C,OAAQ,EAAK,CAAC,EAChD,WAAcJ,EAAQgD,OAAO,CAAE5C,OAAQ,EAAM,CAAC,EAE9C,QACEhB,EAAcY,EAAQyB,KAAK,IAAM,oBAC7B,UACAqB,IAAAA,EAAA,CAAA,GAIR,EAAAuB,EAAA,IAAA,CAACF,EAAD,CAAC,CAAA,CAEH,CAAA,CAEN,CA2BA,SAAStB,EAAQpB,EAAgB,CAM/B,OALIrC,EAAcqC,CAAK,IAAM,oBACpB,8EACHA,aAAiBjC,EACnByD,EAAMxB,CAAK,CAAC,CAACyB,SAAS,iBAAiB,EAClC,wEACF,8EAHuC9D,EAAeqC,CAAK,CAIpE,CAGA,SAASwB,EAAMxB,EAAmC,CAEhD,OADMA,aAAiBhC,MAChB,CAACgC,EAAM/B,KAAM,GAAGuD,EAAMxB,EAAMC,KAAK,CAAC,EADH,CAAA,CAExC,CAEA,IAAUY,GAAV,SAAAa,EAAA,CACeA,EAAAZ,KAAO,CAQtB,EAAA,CAAAD,AAAAA,IAAA,CAAA,CAAA,E,WA3KmB,EAAA+B,EAAA,IAAA,CAACE,EAAD,CAAM,GAAI5E,EAAM0D,cAAc,CAAC,CAAA,E"}
+{"version":3,"file":"authorize-C3nY01zc.js","names":["useMutation","parseResponse","Authentication","Client","Approval","InvalidRequest","style","CeremonyError","Error","name","Route","Page","props","client","use","consent","mutationFn","variables","json","accept","request","key","account","oauth_query","window","location","search","slice","session_id","session","decided","v1","authorize","$post","assertion","sign","options","publicKey","step","catch","error","cause","signed","passkey","onError","reason","reload","onSuccess","data","assign","redirect","isPending","isSuccess","styles","page","className","app","destination","email","verified","message","undefined","logo","mutate","names","includes","_styles","SplitComponent","useLoaderData","component","Client.use","Authentication.sign","Client.reason","Client.message","require_jsx_runtime","use","reason","parseResponse","message$1","useMutation","sign","Route","InvalidRequest","Approval","import_jsx_runtime","CeremonyError","Page","client","consent","json","variables","props","decided","assertion","error","signed","data","styles","message","names","SplitComponent"],"sources":["../../../routes/authorize.tsx?tsr-split=component"],"sourcesContent":["/** The approval page, where the signed-in user approves or denies an app's request. @module */\nimport { useMutation } from '@tanstack/react-query'\nimport { createFileRoute } from '@tanstack/react-router'\nimport { parseResponse } from 'hono/client'\nimport { Authentication } from 'webauthx/client'\nimport * as Client from '../lib/Client.js'\nimport * as Loader from '../lib/Loader.js'\nimport { Approval, InvalidRequest } from '../screens/Approval.js'\nimport { style } from '../zyzz.config.js'\n\n/** Wraps a failure of the browser's passkey ceremony. */\nclass CeremonyError extends Error {\n  override name = 'Page.CeremonyError'\n}\n\nexport const Route = createFileRoute('/authorize')({\n  component: () => <Page {...Route.useLoaderData()} />,\n  /**\n   * Redirects an unsigned request to `/oauth2/authorize`, and a visitor without a session to\n   * sign-in. Otherwise returns the request, or redirects a refused key to the app.\n   */\n  loader: async (match): Promise<Page.Props> => {\n    const { searchStr } = match.location\n    // Better Auth reads the query with `URLSearchParams`, so the page reads it the same way, and a\n    // malformed escape cannot show one request and approve another.\n    const query = new URLSearchParams(searchStr)\n    if (!query.get('sig')) {\n      const forwarded = new URLSearchParams(query)\n      if (!forwarded.has('code_challenge_method'))\n        forwarded.set('code_challenge_method', 'S256')\n      if (!forwarded.has('response_type'))\n        forwarded.set('response_type', 'code')\n      Loader.redirect({\n        document: true,\n        href: `/oauth2/authorize?${forwarded}`,\n      })\n    }\n\n    const client = Client.create()\n    const result = await (async () => {\n      try {\n        return await parseResponse(\n          client.v1.authorize.request.$get({\n            query: { oauth_query: query.toString() },\n          }),\n        )\n      } catch (error) {\n        if (Client.reason(error) === 'session_required')\n          Loader.redirect({ href: `/login${searchStr}` })\n        throw error\n      }\n    })()\n    if ('redirect' in result)\n      Loader.redirect({ document: true, href: result.redirect })\n    return { request: result.request }\n  },\n  // The loader reads the whole query, so a change to any parameter loads the page again.\n  loaderDeps: (match) => ({ search: match.search }),\n})\n\n/** Renders the page. */\nfunction Page(props: Page.Props) {\n  const client = Client.use()\n  const consent = useMutation({\n    async mutationFn(variables: { accept: boolean }) {\n      const json = {\n        accept: variables.accept,\n        // Approval signs for the account that the page shows.\n        ...(props.request?.key?.account\n          ? { account: props.request.key.account }\n          : {}),\n        oauth_query: window.location.search.slice(1),\n        session_id: props.request?.session ?? '',\n      }\n      const decided = await parseResponse(\n        client.v1.authorize.consent.$post({ json }),\n      )\n      if (!('step' in decided)) return decided\n\n      // The passkey signs the key authorization's digest, which the step's options carry.\n      const assertion = await Authentication.sign({\n        options: { publicKey: decided.step.options.publicKey },\n      }).catch((error: unknown) => {\n        throw new CeremonyError('Passkey ceremony failed.', { cause: error })\n      })\n      const signed = await parseResponse(\n        client.v1.authorize.consent.$post({\n          json: { ...json, passkey: { assertion } },\n        }),\n      )\n      if ('step' in signed)\n        throw new Error('The approval requested a second passkey step.')\n      return signed\n    },\n    // Without a session, the page's loader sends the browser to sign-in, which continues the request.\n    onError: (error) => {\n      if (Client.reason(error) === 'session_required') window.location.reload()\n    },\n    onSuccess: (data) => window.location.assign(data.redirect),\n  })\n  // The decision holds both buttons until the browser leaves, after the request succeeds too.\n  const decided = consent.isPending || consent.isSuccess\n\n  return (\n    <main {...styles.page()}>\n      {props.request ? (\n        <Approval\n          account={props.request.account}\n          app={props.request.app}\n          approving={decided && consent.variables.accept}\n          denying={decided && !consent.variables.accept}\n          destination={props.request.destination}\n          email={props.request.email}\n          verified={props.request.verified}\n          error={\n            consent.error &&\n            Client.reason(consent.error) !== 'webauthn_required'\n              ? message(consent.error)\n              : undefined\n          }\n          keyAuthorization={props.request.key}\n          logo={props.request.logo}\n          onApprove={() => consent.mutate({ accept: true })}\n          onDeny={() => consent.mutate({ accept: false })}\n          // The API's refusal names the other flows, and the screen states the step here instead.\n          refusal={\n            Client.reason(consent.error) === 'webauthn_required'\n              ? 'passkey'\n              : undefined\n          }\n        />\n      ) : (\n        <InvalidRequest />\n      )}\n    </main>\n  )\n}\n\ndeclare namespace Page {\n  type Props = {\n    /** `null` for a forged or expired query or an unknown app. */\n    request: {\n      /** Absent unless the user holds several accounts in the app's realms. */\n      account?: Approval.Account | undefined\n      /** The app's display name. */\n      app: string\n      /** The host of the app's redirect URI, or the scheme of a native app. */\n      destination: string\n      /** The signed-in user's address. */\n      email: string\n      /** Absent without a key authorization. */\n      key?: Approval.Key | undefined\n      /** The app's logo as a `data:` URL, if any. */\n      logo?: string | undefined\n      /** The signed-in session's ID, which the decision names. */\n      session: string\n      /** Whether the app is registered, which marks its name as verified. */\n      verified: boolean\n    } | null\n  }\n}\n\n/** Returns the message for `error`, such as for a canceled ceremony. */\nfunction message(error: unknown) {\n  if (Client.reason(error) === 'webauthn_rejected')\n    return 'Your passkey did not sign the approval. Approve again, or deny the request.'\n  if (!(error instanceof CeremonyError)) return Client.message(error)\n  if (names(error).includes('NotAllowedError'))\n    return 'The passkey request was canceled. Approve again, or deny the request.'\n  return 'Your passkey did not sign the approval. Approve again, or deny the request.'\n}\n\n/** Returns the names of `error` and its causes. */\nfunction names(error: unknown): readonly string[] {\n  if (!(error instanceof Error)) return []\n  return [error.name, ...names(error.cause)]\n}\n\nnamespace styles {\n  export const page = style({\n    alignItems: 'center',\n    display: 'flex',\n    justifyContent: 'center',\n    minHeight: '100dvh !custom',\n    paddingBlock: '64',\n    paddingInline: '16',\n  })\n}\n"],"mappings":"A,4SAWMO,EAAN,cAA4BC,KAAM,CAChCC,KAAgB,oBAClB,EAgDA,SAASE,EAAKC,EAAmB,CAC/B,IAAMC,EAASV,EAAW,EACpBY,EAAUf,EAAY,CAC1B,MAAMgB,WAAWC,EAAgC,CAC/C,IAAMC,EAAO,CACXC,OAAQF,EAAUE,OAElB,GAAIP,EAAMQ,SAASC,KAAKC,QACpB,CAAEA,QAASV,EAAMQ,QAAQC,IAAIC,OAAQ,EACrC,CAAC,EACLC,YAAaC,OAAOC,SAASC,OAAOC,MAAM,CAAC,EAC3CC,WAAYhB,EAAMQ,SAASS,SAAW,EACxC,EACMC,EAAU,MAAM7B,EACpBY,EAAOkB,GAAGC,UAAUjB,QAAQkB,MAAM,CAAEf,MAAK,CAAC,CAC5C,EACA,GAAI,EAAE,SAAUY,GAAU,OAAOA,EAGjC,IAAMI,EAAY,MAAMhC,EAAoB,CAC1CkC,QAAS,CAAEC,UAAWP,EAAQQ,KAAKF,QAAQC,SAAU,CACvD,CAAC,CAAC,CAACE,MAAOC,GAAmB,CAC3B,MAAM,IAAIjC,EAAc,2BAA4B,CAAEkC,MAAOD,CAAM,CAAC,CACtE,CAAC,EACKE,EAAS,MAAMzC,EACnBY,EAAOkB,GAAGC,UAAUjB,QAAQkB,MAAM,CAChCf,KAAM,CAAE,GAAGA,EAAMyB,QAAS,CAAET,WAAU,CAAE,CAC1C,CAAC,CACH,EACA,GAAI,SAAUQ,EACZ,MAAUlC,MAAM,+CAA+C,EACjE,OAAOkC,CACT,EAEAE,QAAUJ,GAAU,CACdrC,EAAcqC,CAAK,IAAM,oBAAoBhB,OAAOC,SAASqB,OAAO,CAC1E,EACAC,UAAYC,GAASxB,OAAOC,SAASwB,OAAOD,EAAKE,QAAQ,CAC3D,CAAC,EAEKpB,EAAUf,EAAQoC,WAAapC,EAAQqC,UAE7C,OACE,EAAAgC,EAAA,IAAA,CAAC,OAAD,CAAM,UAAA/B,EAAAC,KAAA,gHAAAD,EAAAC,KAAA,CAAA,CAAAC,UACH3C,SAAAA,EAAMQ,SACL,EAAAgE,EAAA,IAAA,CAACD,EAAD,CACE,QAASvE,EAAMQ,QAAQE,QACvB,IAAKV,EAAMQ,QAAQoC,IACnB,UAAW1B,GAAWf,EAAQE,UAAUE,OACxC,QAASW,GAAW,CAACf,EAAQE,UAAUE,OACvC,YAAaP,EAAMQ,QAAQqC,YAC3B,MAAO7C,EAAMQ,QAAQsC,MACrB,SAAU9C,EAAMQ,QAAQuC,SACxB,MACE5C,EAAQyB,OACRrC,EAAcY,EAAQyB,KAAK,IAAM,oBAC7BoB,EAAQ7C,EAAQyB,KAAK,EACrBqB,IAAAA,GAEN,iBAAkBjD,EAAMQ,QAAQC,IAChC,KAAMT,EAAMQ,QAAQ0C,KACpB,cAAiB/C,EAAQgD,OAAO,CAAE5C,OAAQ,EAAK,CAAC,EAChD,WAAcJ,EAAQgD,OAAO,CAAE5C,OAAQ,EAAM,CAAC,EAE9C,QACEhB,EAAcY,EAAQyB,KAAK,IAAM,oBAC7B,UACAqB,IAAAA,EAAA,CAAA,GAIR,EAAAuB,EAAA,IAAA,CAACF,EAAD,CAAC,CAAA,CAEH,CAAA,CAEN,CA2BA,SAAStB,EAAQpB,EAAgB,CAM/B,OALIrC,EAAcqC,CAAK,IAAM,oBACpB,8EACHA,aAAiBjC,EACnByD,EAAMxB,CAAK,CAAC,CAACyB,SAAS,iBAAiB,EAClC,wEACF,8EAHuC9D,EAAeqC,CAAK,CAIpE,CAGA,SAASwB,EAAMxB,EAAmC,CAEhD,OADMA,aAAiBhC,MAChB,CAACgC,EAAM/B,KAAM,GAAGuD,EAAMxB,EAAMC,KAAK,CAAC,EADH,CAAA,CAExC,CAEA,IAAUY,GAAV,SAAAa,EAAA,CACeA,EAAAZ,KAAO,CAQtB,EAAA,CAAAD,AAAAA,IAAA,CAAA,CAAA,E,WA3KmB,EAAA+B,EAAA,IAAA,CAACE,EAAD,CAAM,GAAI5E,EAAM0D,cAAc,CAAC,CAAA,E"}

package/dist/app/server/assets/{authorize-pZETCSux.js → authorize-C9tfZ34z.js}

@@ -1,2 +1,2 @@
-import"./react-dom-DtwtyQPy.js";import{n as e,t}from"./lazyRouteComponent-BXabRVTE.js";import{i as n,n as r,o as i}from"./Client-D3gnMDTr.js";import"./zyzz.config-DYq-16_0.js";import{t as a}from"./Loader-Ivf5dWFl.js";var o=e(`/authorize`)({component:t(()=>import(`./authorize-D_5EG0WN.js`),`component`),loader:async e=>{let{searchStr:t}=e.location,o=new URLSearchParams(t);if(!o.get(`sig`)){let e=new URLSearchParams(o);e.has(`code_challenge_method`)||e.set(`code_challenge_method`,`S256`),e.has(`response_type`)||e.set(`response_type`,`code`),a({document:!0,href:`/oauth2/authorize?${e}`})}let s=r(),c=await(async()=>{try{return await i(s.v1.authorize.request.$get({query:{oauth_query:o.toString()}}))}catch(e){throw n(e)===`session_required`&&a({href:`/login${t}`}),e}})();return`redirect`in c&&a({document:!0,href:c.redirect}),{request:c.request}},loaderDeps:e=>({search:e.search})}),s;(function(e){e.page=1})(s||={});export{o as t};
-//# sourceMappingURL=authorize-pZETCSux.js.map
+import"./react-dom-pSpaua7D.js";import{n as e,t}from"./lazyRouteComponent-DOSE663E.js";import{i as n,n as r,o as i}from"./Client-BAXSFa9e.js";import"./zyzz.config-CW977vYL.js";import{t as a}from"./Loader-DvDbd8kj.js";var o=e(`/authorize`)({component:t(()=>import(`./authorize-C3nY01zc.js`),`component`),loader:async e=>{let{searchStr:t}=e.location,o=new URLSearchParams(t);if(!o.get(`sig`)){let e=new URLSearchParams(o);e.has(`code_challenge_method`)||e.set(`code_challenge_method`,`S256`),e.has(`response_type`)||e.set(`response_type`,`code`),a({document:!0,href:`/oauth2/authorize?${e}`})}let s=r(),c=await(async()=>{try{return await i(s.v1.authorize.request.$get({query:{oauth_query:o.toString()}}))}catch(e){throw n(e)===`session_required`&&a({href:`/login${t}`}),e}})();return`redirect`in c&&a({document:!0,href:c.redirect}),{request:c.request}},loaderDeps:e=>({search:e.search})}),s;(function(e){e.page=1})(s||={});export{o as t};
+//# sourceMappingURL=authorize-C9tfZ34z.js.map

package/dist/app/server/assets/{authorize-pZETCSux.js.map → authorize-C9tfZ34z.js.map}

@@ -1 +1 @@
-{"version":3,"file":"authorize-pZETCSux.js","names":["createFileRoute","parseResponse","Client","Loader","style","CeremonyError","Error","name","Route","component","lazyRouteComponent","$$splitComponentImporter","loader","match","Promise","Page","Props","searchStr","location","query","URLSearchParams","get","forwarded","has","set","redirect","document","href","client","create","result","v1","authorize","request","$get","oauth_query","toString","error","reason","loaderDeps","search","styles","page","ReturnType","Client.create","Client.reason","createFileRoute","reason","create","parseResponse","redirect","Route","lazyRouteComponent","match","query","searchStr","forwarded","client","result","error","styles"],"sources":["../../../routes/authorize.tsx"],"sourcesContent":["/** The approval page, where the signed-in user approves or denies an app's request. @module */\nimport { useMutation } from '@tanstack/react-query'\nimport { createFileRoute } from '@tanstack/react-router'\nimport { parseResponse } from 'hono/client'\nimport { Authentication } from 'webauthx/client'\nimport * as Client from '../lib/Client.js'\nimport * as Loader from '../lib/Loader.js'\nimport { Approval, InvalidRequest } from '../screens/Approval.js'\nimport { style } from '../zyzz.config.js'\n\n/** Wraps a failure of the browser's passkey ceremony. */\nclass CeremonyError extends Error {\n  override name = 'Page.CeremonyError'\n}\n\nexport const Route = createFileRoute('/authorize')({\n  component: () => <Page {...Route.useLoaderData()} />,\n  /**\n   * Redirects an unsigned request to `/oauth2/authorize`, and a visitor without a session to\n   * sign-in. Otherwise returns the request, or redirects a refused key to the app.\n   */\n  loader: async (match): Promise<Page.Props> => {\n    const { searchStr } = match.location\n    // Better Auth reads the query with `URLSearchParams`, so the page reads it the same way, and a\n    // malformed escape cannot show one request and approve another.\n    const query = new URLSearchParams(searchStr)\n    if (!query.get('sig')) {\n      const forwarded = new URLSearchParams(query)\n      if (!forwarded.has('code_challenge_method'))\n        forwarded.set('code_challenge_method', 'S256')\n      if (!forwarded.has('response_type'))\n        forwarded.set('response_type', 'code')\n      Loader.redirect({\n        document: true,\n        href: `/oauth2/authorize?${forwarded}`,\n      })\n    }\n\n    const client = Client.create()\n    const result = await (async () => {\n      try {\n        return await parseResponse(\n          client.v1.authorize.request.$get({\n            query: { oauth_query: query.toString() },\n          }),\n        )\n      } catch (error) {\n        if (Client.reason(error) === 'session_required')\n          Loader.redirect({ href: `/login${searchStr}` })\n        throw error\n      }\n    })()\n    if ('redirect' in result)\n      Loader.redirect({ document: true, href: result.redirect })\n    return { request: result.request }\n  },\n  // The loader reads the whole query, so a change to any parameter loads the page again.\n  loaderDeps: (match) => ({ search: match.search }),\n})\n\n/** Renders the page. */\nfunction Page(props: Page.Props) {\n  const client = Client.use()\n  const consent = useMutation({\n    async mutationFn(variables: { accept: boolean }) {\n      const json = {\n        accept: variables.accept,\n        // Approval signs for the account that the page shows.\n        ...(props.request?.key?.account\n          ? { account: props.request.key.account }\n          : {}),\n        oauth_query: window.location.search.slice(1),\n        session_id: props.request?.session ?? '',\n      }\n      const decided = await parseResponse(\n        client.v1.authorize.consent.$post({ json }),\n      )\n      if (!('step' in decided)) return decided\n\n      // The passkey signs the key authorization's digest, which the step's options carry.\n      const assertion = await Authentication.sign({\n        options: { publicKey: decided.step.options.publicKey },\n      }).catch((error: unknown) => {\n        throw new CeremonyError('Passkey ceremony failed.', { cause: error })\n      })\n      const signed = await parseResponse(\n        client.v1.authorize.consent.$post({\n          json: { ...json, passkey: { assertion } },\n        }),\n      )\n      if ('step' in signed)\n        throw new Error('The approval requested a second passkey step.')\n      return signed\n    },\n    // Without a session, the page's loader sends the browser to sign-in, which continues the request.\n    onError: (error) => {\n      if (Client.reason(error) === 'session_required') window.location.reload()\n    },\n    onSuccess: (data) => window.location.assign(data.redirect),\n  })\n  // The decision holds both buttons until the browser leaves, after the request succeeds too.\n  const decided = consent.isPending || consent.isSuccess\n\n  return (\n    <main {...styles.page()}>\n      {props.request ? (\n        <Approval\n          account={props.request.account}\n          app={props.request.app}\n          approving={decided && consent.variables.accept}\n          denying={decided && !consent.variables.accept}\n          destination={props.request.destination}\n          email={props.request.email}\n          verified={props.request.verified}\n          error={\n            consent.error &&\n            Client.reason(consent.error) !== 'webauthn_required'\n              ? message(consent.error)\n              : undefined\n          }\n          keyAuthorization={props.request.key}\n          logo={props.request.logo}\n          onApprove={() => consent.mutate({ accept: true })}\n          onDeny={() => consent.mutate({ accept: false })}\n          // The API's refusal names the other flows, and the screen states the step here instead.\n          refusal={\n            Client.reason(consent.error) === 'webauthn_required'\n              ? 'passkey'\n              : undefined\n          }\n        />\n      ) : (\n        <InvalidRequest />\n      )}\n    </main>\n  )\n}\n\ndeclare namespace Page {\n  type Props = {\n    /** `null` for a forged or expired query or an unknown app. */\n    request: {\n      /** Absent unless the user holds several accounts in the app's realms. */\n      account?: Approval.Account | undefined\n      /** The app's display name. */\n      app: string\n      /** The host of the app's redirect URI, or the scheme of a native app. */\n      destination: string\n      /** The signed-in user's address. */\n      email: string\n      /** Absent without a key authorization. */\n      key?: Approval.Key | undefined\n      /** The app's logo as a `data:` URL, if any. */\n      logo?: string | undefined\n      /** The signed-in session's ID, which the decision names. */\n      session: string\n      /** Whether the app is registered, which marks its name as verified. */\n      verified: boolean\n    } | null\n  }\n}\n\n/** Returns the message for `error`, such as for a canceled ceremony. */\nfunction message(error: unknown) {\n  if (Client.reason(error) === 'webauthn_rejected')\n    return 'Your passkey did not sign the approval. Approve again, or deny the request.'\n  if (!(error instanceof CeremonyError)) return Client.message(error)\n  if (names(error).includes('NotAllowedError'))\n    return 'The passkey request was canceled. Approve again, or deny the request.'\n  return 'Your passkey did not sign the approval. Approve again, or deny the request.'\n}\n\n/** Returns the names of `error` and its causes. */\nfunction names(error: unknown): readonly string[] {\n  if (!(error instanceof Error)) return []\n  return [error.name, ...names(error.cause)]\n}\n\nnamespace styles {\n  export const page = style({\n    alignItems: 'center',\n    display: 'flex',\n    justifyContent: 'center',\n    minHeight: '100dvh !custom',\n    paddingBlock: '64',\n    paddingInline: '16',\n  })\n}\n"],"mappings":"A,yNAeA,IAAaQ,EAAQR,EAAgB,YAAY,CAAC,CAAC,CACjDS,UAASC,M,kCAAA,WAAA,EAKTE,OAAQ,KAAOC,IAA+B,CAC5C,GAAM,CAAEI,aAAcJ,EAAMK,SAGtBC,EAAQ,IAAIC,gBAAgBH,CAAS,EAC3C,GAAI,CAACE,EAAME,IAAI,KAAK,EAAG,CACrB,IAAMC,EAAY,IAAIF,gBAAgBD,CAAK,EACtCG,EAAUC,IAAI,uBAAuB,GACxCD,EAAUE,IAAI,wBAAyB,MAAM,EAC1CF,EAAUC,IAAI,eAAe,GAChCD,EAAUE,IAAI,gBAAiB,MAAM,EACvCrB,EAAgB,CACduB,SAAU,GACVC,KAAM,qBAAqBL,GAC7B,CAAC,CACH,CAEA,IAAMM,EAAS1B,EAAc,EACvB4B,EAAS,MAAO,SAAY,CAChC,GAAI,CACF,OAAO,MAAM7B,EACX2B,EAAOG,GAAGC,UAAUC,QAAQC,KAAK,CAC/Bf,MAAO,CAAEgB,YAAahB,EAAMiB,SAAS,CAAE,CACzC,CAAC,CACH,CACF,OAASC,EAAO,CAGd,MAFInC,EAAcmC,CAAK,IAAM,oBAC3BlC,EAAgB,CAAEwB,KAAM,SAASV,GAAY,CAAC,EAC1CoB,CACR,CACF,EAAA,CAAG,EAGH,MAFI,aAAcP,GAChB3B,EAAgB,CAAEuB,SAAU,GAAMC,KAAMG,EAAOL,QAAS,CAAC,EACpD,CAAEQ,QAASH,EAAOG,OAAQ,CACnC,EAEAM,WAAa1B,IAAW,CAAE2B,OAAQ3B,EAAM2B,MAAO,EACjD,CAAC,EAwHSC,GAAV,SAAA,EAAA,CACeC,EAAAA,KAAO,CAQtB,EAAA,CAAA,AAAAkB,IAAA,CAAA,CAAA,E"}
+{"version":3,"file":"authorize-C9tfZ34z.js","names":["createFileRoute","parseResponse","Client","Loader","style","CeremonyError","Error","name","Route","component","lazyRouteComponent","$$splitComponentImporter","loader","match","Promise","Page","Props","searchStr","location","query","URLSearchParams","get","forwarded","has","set","redirect","document","href","client","create","result","v1","authorize","request","$get","oauth_query","toString","error","reason","loaderDeps","search","styles","page","ReturnType","Client.create","Client.reason","createFileRoute","reason","create","parseResponse","redirect","Route","lazyRouteComponent","match","query","searchStr","forwarded","client","result","error","styles"],"sources":["../../../routes/authorize.tsx"],"sourcesContent":["/** The approval page, where the signed-in user approves or denies an app's request. @module */\nimport { useMutation } from '@tanstack/react-query'\nimport { createFileRoute } from '@tanstack/react-router'\nimport { parseResponse } from 'hono/client'\nimport { Authentication } from 'webauthx/client'\nimport * as Client from '../lib/Client.js'\nimport * as Loader from '../lib/Loader.js'\nimport { Approval, InvalidRequest } from '../screens/Approval.js'\nimport { style } from '../zyzz.config.js'\n\n/** Wraps a failure of the browser's passkey ceremony. */\nclass CeremonyError extends Error {\n  override name = 'Page.CeremonyError'\n}\n\nexport const Route = createFileRoute('/authorize')({\n  component: () => <Page {...Route.useLoaderData()} />,\n  /**\n   * Redirects an unsigned request to `/oauth2/authorize`, and a visitor without a session to\n   * sign-in. Otherwise returns the request, or redirects a refused key to the app.\n   */\n  loader: async (match): Promise<Page.Props> => {\n    const { searchStr } = match.location\n    // Better Auth reads the query with `URLSearchParams`, so the page reads it the same way, and a\n    // malformed escape cannot show one request and approve another.\n    const query = new URLSearchParams(searchStr)\n    if (!query.get('sig')) {\n      const forwarded = new URLSearchParams(query)\n      if (!forwarded.has('code_challenge_method'))\n        forwarded.set('code_challenge_method', 'S256')\n      if (!forwarded.has('response_type'))\n        forwarded.set('response_type', 'code')\n      Loader.redirect({\n        document: true,\n        href: `/oauth2/authorize?${forwarded}`,\n      })\n    }\n\n    const client = Client.create()\n    const result = await (async () => {\n      try {\n        return await parseResponse(\n          client.v1.authorize.request.$get({\n            query: { oauth_query: query.toString() },\n          }),\n        )\n      } catch (error) {\n        if (Client.reason(error) === 'session_required')\n          Loader.redirect({ href: `/login${searchStr}` })\n        throw error\n      }\n    })()\n    if ('redirect' in result)\n      Loader.redirect({ document: true, href: result.redirect })\n    return { request: result.request }\n  },\n  // The loader reads the whole query, so a change to any parameter loads the page again.\n  loaderDeps: (match) => ({ search: match.search }),\n})\n\n/** Renders the page. */\nfunction Page(props: Page.Props) {\n  const client = Client.use()\n  const consent = useMutation({\n    async mutationFn(variables: { accept: boolean }) {\n      const json = {\n        accept: variables.accept,\n        // Approval signs for the account that the page shows.\n        ...(props.request?.key?.account\n          ? { account: props.request.key.account }\n          : {}),\n        oauth_query: window.location.search.slice(1),\n        session_id: props.request?.session ?? '',\n      }\n      const decided = await parseResponse(\n        client.v1.authorize.consent.$post({ json }),\n      )\n      if (!('step' in decided)) return decided\n\n      // The passkey signs the key authorization's digest, which the step's options carry.\n      const assertion = await Authentication.sign({\n        options: { publicKey: decided.step.options.publicKey },\n      }).catch((error: unknown) => {\n        throw new CeremonyError('Passkey ceremony failed.', { cause: error })\n      })\n      const signed = await parseResponse(\n        client.v1.authorize.consent.$post({\n          json: { ...json, passkey: { assertion } },\n        }),\n      )\n      if ('step' in signed)\n        throw new Error('The approval requested a second passkey step.')\n      return signed\n    },\n    // Without a session, the page's loader sends the browser to sign-in, which continues the request.\n    onError: (error) => {\n      if (Client.reason(error) === 'session_required') window.location.reload()\n    },\n    onSuccess: (data) => window.location.assign(data.redirect),\n  })\n  // The decision holds both buttons until the browser leaves, after the request succeeds too.\n  const decided = consent.isPending || consent.isSuccess\n\n  return (\n    <main {...styles.page()}>\n      {props.request ? (\n        <Approval\n          account={props.request.account}\n          app={props.request.app}\n          approving={decided && consent.variables.accept}\n          denying={decided && !consent.variables.accept}\n          destination={props.request.destination}\n          email={props.request.email}\n          verified={props.request.verified}\n          error={\n            consent.error &&\n            Client.reason(consent.error) !== 'webauthn_required'\n              ? message(consent.error)\n              : undefined\n          }\n          keyAuthorization={props.request.key}\n          logo={props.request.logo}\n          onApprove={() => consent.mutate({ accept: true })}\n          onDeny={() => consent.mutate({ accept: false })}\n          // The API's refusal names the other flows, and the screen states the step here instead.\n          refusal={\n            Client.reason(consent.error) === 'webauthn_required'\n              ? 'passkey'\n              : undefined\n          }\n        />\n      ) : (\n        <InvalidRequest />\n      )}\n    </main>\n  )\n}\n\ndeclare namespace Page {\n  type Props = {\n    /** `null` for a forged or expired query or an unknown app. */\n    request: {\n      /** Absent unless the user holds several accounts in the app's realms. */\n      account?: Approval.Account | undefined\n      /** The app's display name. */\n      app: string\n      /** The host of the app's redirect URI, or the scheme of a native app. */\n      destination: string\n      /** The signed-in user's address. */\n      email: string\n      /** Absent without a key authorization. */\n      key?: Approval.Key | undefined\n      /** The app's logo as a `data:` URL, if any. */\n      logo?: string | undefined\n      /** The signed-in session's ID, which the decision names. */\n      session: string\n      /** Whether the app is registered, which marks its name as verified. */\n      verified: boolean\n    } | null\n  }\n}\n\n/** Returns the message for `error`, such as for a canceled ceremony. */\nfunction message(error: unknown) {\n  if (Client.reason(error) === 'webauthn_rejected')\n    return 'Your passkey did not sign the approval. Approve again, or deny the request.'\n  if (!(error instanceof CeremonyError)) return Client.message(error)\n  if (names(error).includes('NotAllowedError'))\n    return 'The passkey request was canceled. Approve again, or deny the request.'\n  return 'Your passkey did not sign the approval. Approve again, or deny the request.'\n}\n\n/** Returns the names of `error` and its causes. */\nfunction names(error: unknown): readonly string[] {\n  if (!(error instanceof Error)) return []\n  return [error.name, ...names(error.cause)]\n}\n\nnamespace styles {\n  export const page = style({\n    alignItems: 'center',\n    display: 'flex',\n    justifyContent: 'center',\n    minHeight: '100dvh !custom',\n    paddingBlock: '64',\n    paddingInline: '16',\n  })\n}\n"],"mappings":"A,yNAeA,IAAaQ,EAAQR,EAAgB,YAAY,CAAC,CAAC,CACjDS,UAASC,M,kCAAA,WAAA,EAKTE,OAAQ,KAAOC,IAA+B,CAC5C,GAAM,CAAEI,aAAcJ,EAAMK,SAGtBC,EAAQ,IAAIC,gBAAgBH,CAAS,EAC3C,GAAI,CAACE,EAAME,IAAI,KAAK,EAAG,CACrB,IAAMC,EAAY,IAAIF,gBAAgBD,CAAK,EACtCG,EAAUC,IAAI,uBAAuB,GACxCD,EAAUE,IAAI,wBAAyB,MAAM,EAC1CF,EAAUC,IAAI,eAAe,GAChCD,EAAUE,IAAI,gBAAiB,MAAM,EACvCrB,EAAgB,CACduB,SAAU,GACVC,KAAM,qBAAqBL,GAC7B,CAAC,CACH,CAEA,IAAMM,EAAS1B,EAAc,EACvB4B,EAAS,MAAO,SAAY,CAChC,GAAI,CACF,OAAO,MAAM7B,EACX2B,EAAOG,GAAGC,UAAUC,QAAQC,KAAK,CAC/Bf,MAAO,CAAEgB,YAAahB,EAAMiB,SAAS,CAAE,CACzC,CAAC,CACH,CACF,OAASC,EAAO,CAGd,MAFInC,EAAcmC,CAAK,IAAM,oBAC3BlC,EAAgB,CAAEwB,KAAM,SAASV,GAAY,CAAC,EAC1CoB,CACR,CACF,EAAA,CAAG,EAGH,MAFI,aAAcP,GAChB3B,EAAgB,CAAEuB,SAAU,GAAMC,KAAMG,EAAOL,QAAS,CAAC,EACpD,CAAEQ,QAASH,EAAOG,OAAQ,CACnC,EAEAM,WAAa1B,IAAW,CAAE2B,OAAQ3B,EAAM2B,MAAO,EACjD,CAAC,EAwHSC,GAAV,SAAA,EAAA,CACeC,EAAAA,KAAO,CAQtB,EAAA,CAAA,AAAAkB,IAAA,CAAA,CAAA,E"}