@timeback/sdk 0.1.4

package/dist/identity.js

@@ -0,0 +1,1019 @@
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: (newValue) => all[name] = () => newValue
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// node:util
+var exports_util = {};
+__export(exports_util, {
+  types: () => types,
+  promisify: () => promisify,
+  log: () => log,
+  isUndefined: () => isUndefined,
+  isSymbol: () => isSymbol,
+  isString: () => isString,
+  isRegExp: () => isRegExp,
+  isPrimitive: () => isPrimitive,
+  isObject: () => isObject,
+  isNumber: () => isNumber,
+  isNullOrUndefined: () => isNullOrUndefined,
+  isNull: () => isNull,
+  isFunction: () => isFunction,
+  isError: () => isError,
+  isDate: () => isDate,
+  isBuffer: () => isBuffer,
+  isBoolean: () => isBoolean,
+  isArray: () => isArray,
+  inspect: () => inspect,
+  inherits: () => inherits,
+  format: () => format,
+  deprecate: () => deprecate,
+  default: () => util_default,
+  debuglog: () => debuglog,
+  callbackifyOnRejected: () => callbackifyOnRejected,
+  callbackify: () => callbackify,
+  _extend: () => _extend,
+  TextEncoder: () => TextEncoder,
+  TextDecoder: () => TextDecoder
+});
+function format(f, ...args) {
+  if (!isString(f)) {
+    var objects = [f];
+    for (var i = 0;i < args.length; i++)
+      objects.push(inspect(args[i]));
+    return objects.join(" ");
+  }
+  var i = 0, len = args.length, str = String(f).replace(formatRegExp, function(x2) {
+    if (x2 === "%%")
+      return "%";
+    if (i >= len)
+      return x2;
+    switch (x2) {
+      case "%s":
+        return String(args[i++]);
+      case "%d":
+        return Number(args[i++]);
+      case "%j":
+        try {
+          return JSON.stringify(args[i++]);
+        } catch (_) {
+          return "[Circular]";
+        }
+      default:
+        return x2;
+    }
+  });
+  for (var x = args[i];i < len; x = args[++i])
+    if (isNull(x) || !isObject(x))
+      str += " " + x;
+    else
+      str += " " + inspect(x);
+  return str;
+}
+function deprecate(fn, msg) {
+  if (typeof process > "u" || process?.noDeprecation === true)
+    return fn;
+  var warned = false;
+  function deprecated(...args) {
+    if (!warned) {
+      if (process.throwDeprecation)
+        throw Error(msg);
+      else if (process.traceDeprecation)
+        console.trace(msg);
+      else
+        console.error(msg);
+      warned = true;
+    }
+    return fn.apply(this, ...args);
+  }
+  return deprecated;
+}
+function stylizeWithColor(str, styleType) {
+  var style = inspect.styles[styleType];
+  if (style)
+    return "\x1B[" + inspect.colors[style][0] + "m" + str + "\x1B[" + inspect.colors[style][1] + "m";
+  else
+    return str;
+}
+function stylizeNoColor(str, styleType) {
+  return str;
+}
+function arrayToHash(array) {
+  var hash = {};
+  return array.forEach(function(val, idx) {
+    hash[val] = true;
+  }), hash;
+}
+function formatValue(ctx, value, recurseTimes) {
+  if (ctx.customInspect && value && isFunction(value.inspect) && value.inspect !== inspect && !(value.constructor && value.constructor.prototype === value)) {
+    var ret = value.inspect(recurseTimes, ctx);
+    if (!isString(ret))
+      ret = formatValue(ctx, ret, recurseTimes);
+    return ret;
+  }
+  var primitive = formatPrimitive(ctx, value);
+  if (primitive)
+    return primitive;
+  var keys = Object.keys(value), visibleKeys = arrayToHash(keys);
+  if (ctx.showHidden)
+    keys = Object.getOwnPropertyNames(value);
+  if (isError(value) && (keys.indexOf("message") >= 0 || keys.indexOf("description") >= 0))
+    return formatError(value);
+  if (keys.length === 0) {
+    if (isFunction(value)) {
+      var name = value.name ? ": " + value.name : "";
+      return ctx.stylize("[Function" + name + "]", "special");
+    }
+    if (isRegExp(value))
+      return ctx.stylize(RegExp.prototype.toString.call(value), "regexp");
+    if (isDate(value))
+      return ctx.stylize(Date.prototype.toString.call(value), "date");
+    if (isError(value))
+      return formatError(value);
+  }
+  var base = "", array = false, braces = ["{", "}"];
+  if (isArray(value))
+    array = true, braces = ["[", "]"];
+  if (isFunction(value)) {
+    var n = value.name ? ": " + value.name : "";
+    base = " [Function" + n + "]";
+  }
+  if (isRegExp(value))
+    base = " " + RegExp.prototype.toString.call(value);
+  if (isDate(value))
+    base = " " + Date.prototype.toUTCString.call(value);
+  if (isError(value))
+    base = " " + formatError(value);
+  if (keys.length === 0 && (!array || value.length == 0))
+    return braces[0] + base + braces[1];
+  if (recurseTimes < 0)
+    if (isRegExp(value))
+      return ctx.stylize(RegExp.prototype.toString.call(value), "regexp");
+    else
+      return ctx.stylize("[Object]", "special");
+  ctx.seen.push(value);
+  var output;
+  if (array)
+    output = formatArray(ctx, value, recurseTimes, visibleKeys, keys);
+  else
+    output = keys.map(function(key) {
+      return formatProperty(ctx, value, recurseTimes, visibleKeys, key, array);
+    });
+  return ctx.seen.pop(), reduceToSingleString(output, base, braces);
+}
+function formatPrimitive(ctx, value) {
+  if (isUndefined(value))
+    return ctx.stylize("undefined", "undefined");
+  if (isString(value)) {
+    var simple = "'" + JSON.stringify(value).replace(/^"|"$/g, "").replace(/'/g, "\\'").replace(/\\"/g, '"') + "'";
+    return ctx.stylize(simple, "string");
+  }
+  if (isNumber(value))
+    return ctx.stylize("" + value, "number");
+  if (isBoolean(value))
+    return ctx.stylize("" + value, "boolean");
+  if (isNull(value))
+    return ctx.stylize("null", "null");
+}
+function formatError(value) {
+  return "[" + Error.prototype.toString.call(value) + "]";
+}
+function formatArray(ctx, value, recurseTimes, visibleKeys, keys) {
+  var output = [];
+  for (var i = 0, l = value.length;i < l; ++i)
+    if (hasOwnProperty(value, String(i)))
+      output.push(formatProperty(ctx, value, recurseTimes, visibleKeys, String(i), true));
+    else
+      output.push("");
+  return keys.forEach(function(key) {
+    if (!key.match(/^\d+$/))
+      output.push(formatProperty(ctx, value, recurseTimes, visibleKeys, key, true));
+  }), output;
+}
+function formatProperty(ctx, value, recurseTimes, visibleKeys, key, array) {
+  var name, str, desc;
+  if (desc = Object.getOwnPropertyDescriptor(value, key) || { value: value[key] }, desc.get)
+    if (desc.set)
+      str = ctx.stylize("[Getter/Setter]", "special");
+    else
+      str = ctx.stylize("[Getter]", "special");
+  else if (desc.set)
+    str = ctx.stylize("[Setter]", "special");
+  if (!hasOwnProperty(visibleKeys, key))
+    name = "[" + key + "]";
+  if (!str)
+    if (ctx.seen.indexOf(desc.value) < 0) {
+      if (isNull(recurseTimes))
+        str = formatValue(ctx, desc.value, null);
+      else
+        str = formatValue(ctx, desc.value, recurseTimes - 1);
+      if (str.indexOf(`
+`) > -1)
+        if (array)
+          str = str.split(`
+`).map(function(line) {
+            return "  " + line;
+          }).join(`
+`).slice(2);
+        else
+          str = `
+` + str.split(`
+`).map(function(line) {
+            return "   " + line;
+          }).join(`
+`);
+    } else
+      str = ctx.stylize("[Circular]", "special");
+  if (isUndefined(name)) {
+    if (array && key.match(/^\d+$/))
+      return str;
+    if (name = JSON.stringify("" + key), name.match(/^"([a-zA-Z_][a-zA-Z_0-9]*)"$/))
+      name = name.slice(1, -1), name = ctx.stylize(name, "name");
+    else
+      name = name.replace(/'/g, "\\'").replace(/\\"/g, '"').replace(/(^"|"$)/g, "'"), name = ctx.stylize(name, "string");
+  }
+  return name + ": " + str;
+}
+function reduceToSingleString(output, base, braces) {
+  var numLinesEst = 0, length = output.reduce(function(prev, cur) {
+    if (numLinesEst++, cur.indexOf(`
+`) >= 0)
+      numLinesEst++;
+    return prev + cur.replace(/\u001b\[\d\d?m/g, "").length + 1;
+  }, 0);
+  if (length > 60)
+    return braces[0] + (base === "" ? "" : base + `
+ `) + " " + output.join(`,
+  `) + " " + braces[1];
+  return braces[0] + base + " " + output.join(", ") + " " + braces[1];
+}
+function isArray(ar) {
+  return Array.isArray(ar);
+}
+function isBoolean(arg) {
+  return typeof arg === "boolean";
+}
+function isNull(arg) {
+  return arg === null;
+}
+function isNullOrUndefined(arg) {
+  return arg == null;
+}
+function isNumber(arg) {
+  return typeof arg === "number";
+}
+function isString(arg) {
+  return typeof arg === "string";
+}
+function isSymbol(arg) {
+  return typeof arg === "symbol";
+}
+function isUndefined(arg) {
+  return arg === undefined;
+}
+function isRegExp(re) {
+  return isObject(re) && objectToString(re) === "[object RegExp]";
+}
+function isObject(arg) {
+  return typeof arg === "object" && arg !== null;
+}
+function isDate(d) {
+  return isObject(d) && objectToString(d) === "[object Date]";
+}
+function isError(e) {
+  return isObject(e) && (objectToString(e) === "[object Error]" || e instanceof Error);
+}
+function isFunction(arg) {
+  return typeof arg === "function";
+}
+function isPrimitive(arg) {
+  return arg === null || typeof arg === "boolean" || typeof arg === "number" || typeof arg === "string" || typeof arg === "symbol" || typeof arg > "u";
+}
+function isBuffer(arg) {
+  return arg instanceof Buffer;
+}
+function objectToString(o) {
+  return Object.prototype.toString.call(o);
+}
+function pad(n) {
+  return n < 10 ? "0" + n.toString(10) : n.toString(10);
+}
+function timestamp() {
+  var d = new Date, time = [pad(d.getHours()), pad(d.getMinutes()), pad(d.getSeconds())].join(":");
+  return [d.getDate(), months[d.getMonth()], time].join(" ");
+}
+function log(...args) {
+  console.log("%s - %s", timestamp(), format.apply(null, args));
+}
+function inherits(ctor, superCtor) {
+  if (superCtor)
+    ctor.super_ = superCtor, ctor.prototype = Object.create(superCtor.prototype, { constructor: { value: ctor, enumerable: false, writable: true, configurable: true } });
+}
+function _extend(origin, add) {
+  if (!add || !isObject(add))
+    return origin;
+  var keys = Object.keys(add), i = keys.length;
+  while (i--)
+    origin[keys[i]] = add[keys[i]];
+  return origin;
+}
+function hasOwnProperty(obj, prop) {
+  return Object.prototype.hasOwnProperty.call(obj, prop);
+}
+function callbackifyOnRejected(reason, cb) {
+  if (!reason) {
+    var newReason = Error("Promise was rejected with a falsy value");
+    newReason.reason = reason, reason = newReason;
+  }
+  return cb(reason);
+}
+function callbackify(original) {
+  if (typeof original !== "function")
+    throw TypeError('The "original" argument must be of type Function');
+  function callbackified(...args) {
+    var maybeCb = args.pop();
+    if (typeof maybeCb !== "function")
+      throw TypeError("The last argument must be of type Function");
+    var self = this, cb = function(...args2) {
+      return maybeCb.apply(self, ...args2);
+    };
+    original.apply(this, args).then(function(ret) {
+      process.nextTick(cb.bind(null, null, ret));
+    }, function(rej) {
+      process.nextTick(callbackifyOnRejected.bind(null, rej, cb));
+    });
+  }
+  return Object.setPrototypeOf(callbackified, Object.getPrototypeOf(original)), Object.defineProperties(callbackified, Object.getOwnPropertyDescriptors(original)), callbackified;
+}
+var formatRegExp, debuglog, inspect, types = () => {}, months, promisify, TextEncoder, TextDecoder, util_default;
+var init_util = __esm(() => {
+  formatRegExp = /%[sdj%]/g;
+  debuglog = ((debugs = {}, debugEnvRegex = {}, debugEnv) => ((debugEnv = typeof process < "u" && false) && (debugEnv = debugEnv.replace(/[|\\{}()[\]^$+?.]/g, "\\$&").replace(/\*/g, ".*").replace(/,/g, "$|^").toUpperCase()), debugEnvRegex = new RegExp("^" + debugEnv + "$", "i"), (set) => {
+    if (set = set.toUpperCase(), !debugs[set])
+      if (debugEnvRegex.test(set))
+        debugs[set] = function(...args) {
+          console.error("%s: %s", set, pid, format.apply(null, ...args));
+        };
+      else
+        debugs[set] = function() {};
+    return debugs[set];
+  }))();
+  inspect = ((i) => (i.colors = { bold: [1, 22], italic: [3, 23], underline: [4, 24], inverse: [7, 27], white: [37, 39], grey: [90, 39], black: [30, 39], blue: [34, 39], cyan: [36, 39], green: [32, 39], magenta: [35, 39], red: [31, 39], yellow: [33, 39] }, i.styles = { special: "cyan", number: "yellow", boolean: "yellow", undefined: "grey", null: "bold", string: "green", date: "magenta", regexp: "red" }, i.custom = Symbol.for("nodejs.util.inspect.custom"), i))(function(obj, opts, ...rest) {
+    var ctx = { seen: [], stylize: stylizeNoColor };
+    if (rest.length >= 1)
+      ctx.depth = rest[0];
+    if (rest.length >= 2)
+      ctx.colors = rest[1];
+    if (isBoolean(opts))
+      ctx.showHidden = opts;
+    else if (opts)
+      _extend(ctx, opts);
+    if (isUndefined(ctx.showHidden))
+      ctx.showHidden = false;
+    if (isUndefined(ctx.depth))
+      ctx.depth = 2;
+    if (isUndefined(ctx.colors))
+      ctx.colors = false;
+    if (ctx.colors)
+      ctx.stylize = stylizeWithColor;
+    return formatValue(ctx, obj, ctx.depth);
+  });
+  months = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
+  promisify = ((x) => (x.custom = Symbol.for("nodejs.util.promisify.custom"), x))(function(original) {
+    if (typeof original !== "function")
+      throw TypeError('The "original" argument must be of type Function');
+    if (kCustomPromisifiedSymbol && original[kCustomPromisifiedSymbol]) {
+      var fn = original[kCustomPromisifiedSymbol];
+      if (typeof fn !== "function")
+        throw TypeError('The "nodejs.util.promisify.custom" argument must be of type Function');
+      return Object.defineProperty(fn, kCustomPromisifiedSymbol, { value: fn, enumerable: false, writable: false, configurable: true }), fn;
+    }
+    function fn(...args) {
+      var promiseResolve, promiseReject, promise = new Promise(function(resolve, reject) {
+        promiseResolve = resolve, promiseReject = reject;
+      });
+      args.push(function(err, value) {
+        if (err)
+          promiseReject(err);
+        else
+          promiseResolve(value);
+      });
+      try {
+        original.apply(this, args);
+      } catch (err) {
+        promiseReject(err);
+      }
+      return promise;
+    }
+    if (Object.setPrototypeOf(fn, Object.getPrototypeOf(original)), kCustomPromisifiedSymbol)
+      Object.defineProperty(fn, kCustomPromisifiedSymbol, { value: fn, enumerable: false, writable: false, configurable: true });
+    return Object.defineProperties(fn, Object.getOwnPropertyDescriptors(original));
+  });
+  ({ TextEncoder, TextDecoder } = globalThis);
+  util_default = { TextEncoder, TextDecoder, promisify, log, inherits, _extend, callbackifyOnRejected, callbackify };
+});
+
+// src/shared/constants.ts
+var ROUTES = {
+  ACTIVITY: "/activity",
+  IDENTITY: {
+    SIGNIN: "/identity/signin",
+    SIGNOUT: "/identity/signout",
+    CALLBACK: "/identity/callback"
+  },
+  USER: {
+    ME: "/user/me"
+  }
+};
+
+// ../internal/logger/src/debug.ts
+var patterns = null;
+var debugAll = false;
+var debugEnvSet = false;
+function patternToRegex(pattern) {
+  const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
+  const regexStr = escaped.replace(/\*/g, ".*");
+  return new RegExp(`^${regexStr}$`);
+}
+function parseDebugEnv() {
+  if (patterns !== null)
+    return;
+  patterns = [];
+  if (typeof process === "undefined" || !process.env?.DEBUG) {
+    debugEnvSet = false;
+    return;
+  }
+  debugEnvSet = true;
+  const debugValue = process.env.DEBUG.trim();
+  if (debugValue === "1" || debugValue === "true" || debugValue === "*") {
+    debugAll = true;
+    return;
+  }
+  const parts = debugValue.split(",").map((p) => p.trim()).filter(Boolean);
+  for (const part of parts) {
+    if (part.startsWith("-")) {
+      patterns.push({
+        regex: patternToRegex(part.slice(1)),
+        exclude: true
+      });
+    } else {
+      patterns.push({
+        regex: patternToRegex(part),
+        exclude: false
+      });
+    }
+  }
+  const hasInclude = patterns.some((p) => !p.exclude);
+  if (!hasInclude && patterns.length > 0) {
+    debugAll = true;
+  }
+}
+function shouldShowDebug(scope) {
+  parseDebugEnv();
+  if (!debugEnvSet) {
+    return true;
+  }
+  if (debugAll) {
+    if (scope) {
+      for (const pattern of patterns) {
+        if (pattern.exclude && pattern.regex.test(scope)) {
+          return false;
+        }
+      }
+    }
+    return true;
+  }
+  if (!scope) {
+    return false;
+  }
+  for (const pattern of patterns) {
+    if (pattern.exclude && pattern.regex.test(scope)) {
+      return false;
+    }
+  }
+  for (const pattern of patterns) {
+    if (!pattern.exclude && pattern.regex.test(scope)) {
+      return true;
+    }
+  }
+  return false;
+}
+
+// ../internal/logger/src/env.ts
+function isBrowser() {
+  return typeof globalThis !== "undefined" && "window" in globalThis;
+}
+function detectEnvironment() {
+  if (isBrowser()) {
+    return "browser";
+  }
+  if (typeof process !== "undefined" && process.env) {
+    if (process.env["NODE_ENV"] === "test" || process.env["BUN_ENV"] === "test") {
+      return "test";
+    }
+    if (false) {}
+    if (process.env.CI || process.env.GITHUB_ACTIONS || process.env.GITLAB_CI || process.env.CIRCLECI || process.env.JENKINS_URL || process.env.BUILDKITE) {
+      return "ci";
+    }
+  }
+  return "terminal";
+}
+
+// ../internal/logger/src/formatters/terminal.ts
+var nodeInspect;
+if (!isBrowser()) {
+  try {
+    const util = await Promise.resolve().then(() => (init_util(), exports_util));
+    nodeInspect = util.inspect;
+  } catch {}
+}
+var colors = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  red: "\x1B[31m",
+  yellow: "\x1B[33m",
+  blue: "\x1B[34m",
+  cyan: "\x1B[36m"
+};
+function getLevelColor(level) {
+  switch (level) {
+    case "debug":
+      return colors.blue;
+    case "info":
+      return colors.cyan;
+    case "warn":
+      return colors.yellow;
+    case "error":
+      return colors.red;
+  }
+}
+function getConsoleMethod(level) {
+  switch (level) {
+    case "debug":
+      return console.debug;
+    case "info":
+      return console.info;
+    case "warn":
+      return console.warn;
+    case "error":
+      return console.error;
+  }
+}
+function formatContext(context) {
+  if (nodeInspect) {
+    return nodeInspect(context, {
+      depth: null,
+      colors: true,
+      breakLength: 80,
+      compact: false
+    });
+  }
+  return JSON.stringify(context, null, 2);
+}
+var terminalFormatter = (entry) => {
+  const levelColor = getLevelColor(entry.level);
+  const consoleMethod = getConsoleMethod(entry.level);
+  const levelUpper = entry.level.toUpperCase().padEnd(5);
+  const isoString = entry.timestamp.toISOString().replace(/\.\d{3}Z$/, "");
+  const timestamp2 = `${colors.dim}[${isoString}]${colors.reset}`;
+  const level = `${levelColor}${levelUpper}${colors.reset}`;
+  const scope = entry.scope ? `${colors.bold}[${entry.scope}]${colors.reset} ` : "";
+  const prefix = `${timestamp2} ${level} ${scope}${entry.message}`;
+  if (entry.context && Object.keys(entry.context).length > 0) {
+    consoleMethod(prefix, formatContext(entry.context));
+  } else {
+    consoleMethod(prefix);
+  }
+};
+// ../internal/logger/src/formatters/ci.ts
+var LEVEL_PREFIX = {
+  debug: "[DEBUG]",
+  info: "[INFO]",
+  warn: "[WARN]",
+  error: "[ERROR]"
+};
+function formatContext2(context) {
+  return Object.entries(context).map(([key, value]) => `${key}=${formatValue2(value)}`).join(" ");
+}
+function formatValue2(value) {
+  if (typeof value === "string")
+    return value;
+  if (typeof value === "number")
+    return String(value);
+  if (typeof value === "boolean")
+    return String(value);
+  if (value === null)
+    return "null";
+  if (value === undefined)
+    return "undefined";
+  return JSON.stringify(value);
+}
+var ciFormatter = (entry) => {
+  const parts = [];
+  parts.push(entry.timestamp.toISOString());
+  parts.push(LEVEL_PREFIX[entry.level]);
+  if (entry.scope) {
+    parts.push(`[${entry.scope}]`);
+  }
+  parts.push(entry.message);
+  if (entry.context && Object.keys(entry.context).length > 0) {
+    parts.push(formatContext2(entry.context));
+  }
+  console.log(parts.join(" "));
+};
+// ../internal/logger/src/formatters/production.ts
+var productionFormatter = (entry) => {
+  const output = {
+    timestamp: entry.timestamp.toISOString(),
+    level: entry.level,
+    ...entry.scope && { scope: entry.scope },
+    msg: entry.message
+  };
+  if (entry.context && Object.keys(entry.context).length > 0) {
+    Object.assign(output, entry.context);
+  }
+  console.log(JSON.stringify(output));
+};
+// ../internal/logger/src/formatters/browser.ts
+var LEVEL_STYLES = {
+  debug: "color: gray",
+  info: "color: #0ea5e9",
+  warn: "color: #f59e0b",
+  error: "color: #ef4444; font-weight: bold"
+};
+var LEVEL_METHODS = {
+  debug: "log",
+  info: "info",
+  warn: "warn",
+  error: "error"
+};
+var browserFormatter = (entry) => {
+  const method = LEVEL_METHODS[entry.level];
+  const style = LEVEL_STYLES[entry.level];
+  const prefix = entry.scope ? `[${entry.scope}]` : "";
+  const label = `%c${prefix} ${entry.message}`;
+  if (entry.context && Object.keys(entry.context).length > 0) {
+    console[method](label, style, entry.context);
+  } else {
+    console[method](label, style);
+  }
+};
+// ../internal/logger/src/logger.ts
+var LOG_LEVELS = ["debug", "info", "warn", "error"];
+function getFormatter(env) {
+  switch (env) {
+    case "terminal":
+      return terminalFormatter;
+    case "ci":
+      return ciFormatter;
+    case "production":
+      return productionFormatter;
+    case "browser":
+      return browserFormatter;
+    case "test":
+      return () => {};
+  }
+}
+function getDefaultMinLevel() {
+  if (typeof process !== "undefined" && process.env?.DEBUG) {
+    return "debug";
+  }
+  return "info";
+}
+function shouldLog(level, minLevel) {
+  return LOG_LEVELS.indexOf(level) >= LOG_LEVELS.indexOf(minLevel);
+}
+
+class Logger {
+  scope;
+  minLevel;
+  environment;
+  formatter;
+  defaultContext;
+  constructor(options = {}) {
+    this.scope = options.scope;
+    this.minLevel = options.minLevel ?? getDefaultMinLevel();
+    this.defaultContext = options.defaultContext ?? {};
+    this.environment = options.environment ?? detectEnvironment();
+    this.formatter = getFormatter(this.environment);
+  }
+  child(scope) {
+    const childScope = this.scope ? `${this.scope}:${scope}` : scope;
+    return new Logger({
+      scope: childScope,
+      minLevel: this.minLevel,
+      environment: this.environment,
+      defaultContext: { ...this.defaultContext }
+    });
+  }
+  withContext(context) {
+    return new Logger({
+      scope: this.scope,
+      minLevel: this.minLevel,
+      environment: this.environment,
+      defaultContext: { ...this.defaultContext, ...context }
+    });
+  }
+  debug(message, context) {
+    this.log("debug", message, context);
+  }
+  info(message, context) {
+    this.log("info", message, context);
+  }
+  warn(message, context) {
+    this.log("warn", message, context);
+  }
+  error(message, context) {
+    this.log("error", message, context);
+  }
+  log(level, message, context) {
+    if (level === "debug" && !shouldShowDebug(this.scope)) {
+      return;
+    }
+    if (!shouldLog(level, this.minLevel)) {
+      return;
+    }
+    const entry = {
+      level,
+      message,
+      scope: this.scope,
+      context: context || Object.keys(this.defaultContext).length > 0 ? { ...this.defaultContext, ...context } : undefined,
+      timestamp: new Date
+    };
+    this.formatter(entry);
+  }
+}
+function createLogger(options = {}) {
+  return new Logger(options);
+}
+// src/server/lib/logger.ts
+function isDebug() {
+  try {
+    const debug = typeof process === "undefined" ? undefined : process.env.DEBUG;
+    return debug === "1" || debug === "true";
+  } catch {
+    return false;
+  }
+}
+function createScopedLogger(scope) {
+  return createLogger({
+    scope: `timeback:${scope}`,
+    minLevel: isDebug() ? "debug" : "warn"
+  });
+}
+var ssoLog = createScopedLogger("sso");
+var oidcLog = createScopedLogger("oidc");
+
+// src/server/lib/oidc.ts
+var discoveryCache = new Map;
+async function fetchDiscoveryDocument(issuer) {
+  const cached = discoveryCache.get(issuer);
+  if (cached) {
+    return cached;
+  }
+  const url = `${issuer}/.well-known/openid-configuration`;
+  const response = await fetch(url);
+  if (!response.ok) {
+    oidcLog.error("Discovery fetch failed", { status: response.status });
+    throw new Error(`Failed to fetch OIDC discovery: ${response.statusText}`);
+  }
+  const doc = await response.json();
+  oidcLog.debug("Fetched OIDC discovery document", {
+    authEndpoint: doc.authorization_endpoint,
+    tokenEndpoint: doc.token_endpoint
+  });
+  discoveryCache.set(issuer, doc);
+  return doc;
+}
+function getIssuer(env) {
+  switch (env) {
+    case "production":
+      return "https://cognito-idp.us-east-1.amazonaws.com/us-east-1_3uhuoRM3R";
+    case "staging":
+      return "https://cognito-idp.us-east-1.amazonaws.com/us-east-1_5EUwTP9XD";
+    case "local":
+      throw new Error("Local environment is not yet supported for OIDC");
+  }
+}
+async function buildAuthorizationUrl(params) {
+  const discovery = await fetchDiscoveryDocument(params.issuer);
+  const url = new URL(discovery.authorization_endpoint);
+  url.searchParams.set("response_type", "code");
+  url.searchParams.set("client_id", params.clientId);
+  url.searchParams.set("redirect_uri", params.redirectUri);
+  url.searchParams.set("scope", "openid profile email");
+  url.searchParams.set("state", params.state);
+  return url.toString();
+}
+async function exchangeCodeForTokens(params) {
+  const discovery = await fetchDiscoveryDocument(params.issuer);
+  const response = await fetch(discovery.token_endpoint, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body: new URLSearchParams({
+      grant_type: "authorization_code",
+      client_id: params.clientId,
+      client_secret: params.clientSecret,
+      code: params.code,
+      redirect_uri: params.redirectUri
+    })
+  });
+  if (!response.ok) {
+    const text = await response.text();
+    oidcLog.error("Token exchange failed", { status: response.status, body: text });
+    throw new Error(`Token exchange failed: ${response.status} ${text}`);
+  }
+  const tokens = await response.json();
+  oidcLog.debug("Received tokens from IdP", { expiresIn: tokens.expires_in });
+  return tokens;
+}
+async function getUserInfo(params) {
+  const discovery = await fetchDiscoveryDocument(params.issuer);
+  const response = await fetch(discovery.userinfo_endpoint, {
+    headers: {
+      Authorization: `Bearer ${params.accessToken}`
+    }
+  });
+  if (!response.ok) {
+    throw new Error(`UserInfo request failed: ${response.statusText}`);
+  }
+  return response.json();
+}
+
+// src/server/lib/utils.ts
+function jsonResponse(data, status = 200, headers) {
+  const responseHeaders = new Headers(headers);
+  responseHeaders.set("Content-Type", "application/json");
+  return new Response(JSON.stringify(data), { status, headers: responseHeaders });
+}
+function redirectResponse(url, headers) {
+  const responseHeaders = new Headers(headers);
+  responseHeaders.set("Location", url);
+  return new Response(null, { status: 302, headers: responseHeaders });
+}
+function encodeBase64Url(data) {
+  const json = JSON.stringify(data);
+  return btoa(json).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function decodeBase64Url(encoded) {
+  const padded = encoded.replace(/-/g, "+").replace(/_/g, "/");
+  const json = atob(padded);
+  return JSON.parse(json);
+}
+
+// src/server/handlers/identity-only.ts
+function buildErrorContext(error, errorCode, state, req) {
+  return {
+    error,
+    errorCode,
+    state,
+    req,
+    redirect: redirectResponse,
+    json: jsonResponse
+  };
+}
+function tryDecodeState(stateParam) {
+  try {
+    return decodeBase64Url(stateParam);
+  } catch {
+    ssoLog.warn("Failed to decode state");
+    return;
+  }
+}
+function handleCallbackError(errorParam, url, state, req, identity) {
+  const errorDesc = url.searchParams.get("error_description");
+  ssoLog.error("IdP returned error", { error: errorParam, description: errorDesc });
+  const error = new Error(errorDesc ?? errorParam);
+  if (identity.onCallbackError) {
+    return identity.onCallbackError(buildErrorContext(error, errorParam, state, req));
+  }
+  return jsonResponse({ error: errorParam }, 400);
+}
+function handleMissingCode(state, req, identity) {
+  ssoLog.error("Missing authorization code in callback");
+  const error = new Error("Missing authorization code");
+  if (identity.onCallbackError) {
+    return identity.onCallbackError(buildErrorContext(error, "missing_code", state, req));
+  }
+  return jsonResponse({ error: "Missing authorization code" }, 400);
+}
+async function handleSignIn(req, env, identity) {
+  const issuer = identity.issuer ?? getIssuer(env);
+  const url = new URL(req.url);
+  let redirectUri = identity.redirectUri;
+  if (!redirectUri) {
+    const basePath = url.pathname.replace(ROUTES.IDENTITY.SIGNIN, "");
+    redirectUri = `${url.origin}${basePath}${ROUTES.IDENTITY.CALLBACK}`;
+  }
+  ssoLog.debug("SSO sign-in initiated (identity-only)", {
+    env,
+    issuer,
+    clientId: identity.clientId,
+    redirectUri
+  });
+  const stateData = identity.buildState ? identity.buildState({ req, url }) : {};
+  const state = encodeBase64Url(stateData);
+  const authUrl = await buildAuthorizationUrl({
+    issuer,
+    clientId: identity.clientId,
+    redirectUri,
+    state
+  });
+  return redirectResponse(authUrl);
+}
+async function completeCallbackIdentityOnly(code, url, state, req, env, identity) {
+  try {
+    const issuer = identity.issuer ?? getIssuer(env);
+    let redirectUri = identity.redirectUri;
+    if (!redirectUri) {
+      const basePath = url.pathname.replace(ROUTES.IDENTITY.CALLBACK, "");
+      redirectUri = `${url.origin}${basePath}${ROUTES.IDENTITY.CALLBACK}`;
+    }
+    ssoLog.debug("Exchanging auth code for tokens (identity-only)", {
+      issuer,
+      clientId: identity.clientId
+    });
+    const tokens = await exchangeCodeForTokens({
+      issuer,
+      clientId: identity.clientId,
+      clientSecret: identity.clientSecret,
+      code,
+      redirectUri
+    });
+    const userInfo = await getUserInfo({ issuer, accessToken: tokens.access_token });
+    const identities = typeof userInfo.identities === "string" ? JSON.parse(userInfo.identities) : userInfo.identities;
+    ssoLog.debug("SSO completed (identity-only)", { user: { ...userInfo, identities } });
+    const ctx = {
+      tokens,
+      user: userInfo,
+      state,
+      req,
+      redirect: redirectResponse,
+      json: jsonResponse
+    };
+    return identity.onCallbackSuccess(ctx);
+  } catch (err) {
+    const error = err instanceof Error ? err : new Error("Unknown error");
+    ssoLog.error("Token exchange failed (identity-only)", { error: error.message });
+    if (identity.onCallbackError) {
+      return identity.onCallbackError(buildErrorContext(error, undefined, state, req));
+    }
+    return jsonResponse({ error: error.message }, 500);
+  }
+}
+async function handleCallbackIdentityOnly(req, env, identity) {
+  const url = new URL(req.url);
+  const code = url.searchParams.get("code");
+  const errorParam = url.searchParams.get("error");
+  const stateParam = url.searchParams.get("state");
+  ssoLog.debug("Received callback from IdP (identity-only)", {
+    hasCode: !!code,
+    error: errorParam
+  });
+  const state = stateParam ? tryDecodeState(stateParam) : undefined;
+  if (errorParam) {
+    return await handleCallbackError(errorParam, url, state, req, identity);
+  }
+  if (!code) {
+    return await handleMissingCode(state, req, identity);
+  }
+  return await completeCallbackIdentityOnly(code, url, state, req, env, identity);
+}
+function createIdentityOnlyHandlers(params) {
+  const { env, identity } = params;
+  if (identity.mode !== "sso") {
+    throw new Error('Identity-only mode requires identity.mode === "sso"');
+  }
+  return {
+    signIn: (req) => handleSignIn(req, env, identity),
+    callback: (req) => handleCallbackIdentityOnly(req, env, identity),
+    signOut: () => redirectResponse("/")
+  };
+}
+
+// src/server/timeback-identity.ts
+function createTimebackIdentity(config) {
+  const identity = createIdentityOnlyHandlers({
+    env: config.env,
+    identity: config.identity
+  });
+  return {
+    config,
+    handle: {
+      identity
+    }
+  };
+}
+export {
+  createTimebackIdentity
+};