@vibedeckx/linux-x64 0.1.16 → 0.1.17

package/node_modules/@clerk/shared/dist/runtime/keyless/index.d.ts

@@ -1,271 +0,0 @@
-//#region src/keyless/types.d.ts
-/**
- * Represents an accountless application created in keyless mode.
- *
- * This interface matches the shape of `AccountlessApplication` from `@clerk/backend`.
- * We define it here to avoid a circular dependency (shared cannot depend on backend).
- * Framework packages that depend on both shared and backend can use either type
- * interchangeably since they have the same structure.
- */
-interface AccountlessApplication {
-  readonly publishableKey: string;
-  readonly secretKey: string;
-  readonly claimUrl: string;
-  readonly apiKeysUrl: string;
-}
-/**
- * Public-facing keyless application data (without secret key).
- */
-type PublicKeylessApplication = Omit<AccountlessApplication, 'secretKey'>;
-//#endregion
-//#region src/keyless/devCache.d.ts
-interface ClerkDevCache {
-  __cache: Map<string, {
-    expiresAt: number;
-    data?: unknown;
-  }>;
-  /**
-   * Log a message with throttling to prevent spam.
-   */
-  log: (params: {
-    cacheKey: string;
-    msg: string;
-  }) => void;
-  /**
-   * Run an async callback with caching.
-   */
-  run: <T>(callback: () => Promise<T>, options: {
-    cacheKey: string;
-    onSuccessStale?: number;
-    onErrorStale?: number;
-  }) => Promise<T | undefined>;
-}
-declare global {
-  var __clerk_internal_keyless_logger: ClerkDevCache | undefined;
-}
-/**
- * Creates a development-only cache for keyless mode logging and API calls.
- * This prevents console spam and duplicate API requests.
- *
- * @returns The cache instance or undefined in non-development environments
- */
-declare function createClerkDevCache(): ClerkDevCache | undefined;
-/**
- * Creates the console message shown when running in keyless mode.
- *
- * @param keys - The keyless application keys
- * @returns Formatted console message
- */
-declare function createKeylessModeMessage(keys: AccountlessApplication | PublicKeylessApplication): string;
-/**
- * Creates the console message shown when keys have been claimed.
- *
- * @returns Formatted console message
- */
-declare function createConfirmationMessage(): string;
-/**
- * Shared singleton instance of the development cache.
- */
-declare const clerkDevelopmentCache: ClerkDevCache | undefined;
-//#endregion
-//#region src/keyless/service.d.ts
-/**
- * Storage adapter interface for keyless mode.
- * Implementations can use file system, cookies, or other storage mechanisms.
- *
- * Implementations are responsible for their own concurrency handling
- * (e.g., file locking for file-based storage).
- */
-interface KeylessStorage {
-  /**
-   * Reads the stored keyless configuration.
-   *
-   * @returns The JSON string of the stored config, or empty string if not found.
-   */
-  read(): string;
-  /**
-   * Writes the keyless configuration to storage.
-   *
-   * @param data - The JSON string to store.
-   */
-  write(data: string): void;
-  /**
-   * Removes the keyless configuration from storage.
-   */
-  remove(): void;
-}
-/**
- * API adapter for keyless mode operations.
- * This abstraction allows the service to work without depending on @clerk/backend.
- */
-interface KeylessAPI {
-  /**
-   * Creates a new accountless application.
-   *
-   * @param requestHeaders - Optional headers to include with the request.
-   * @returns The created AccountlessApplication or null if failed.
-   */
-  createAccountlessApplication(requestHeaders?: Headers): Promise<AccountlessApplication | null>;
-  /**
-   * Notifies the backend that onboarding is complete (instance has been claimed).
-   *
-   * @param requestHeaders - Optional headers to include with the request.
-   * @returns The updated AccountlessApplication or null if failed.
-   */
-  completeOnboarding(requestHeaders?: Headers): Promise<AccountlessApplication | null>;
-}
-/**
- * Options for creating a keyless service.
- */
-interface KeylessServiceOptions {
-  /**
-   * Storage adapter for reading/writing keyless configuration.
-   */
-  storage: KeylessStorage;
-  /**
-   * API adapter for keyless operations (create application, complete onboarding).
-   */
-  api: KeylessAPI;
-  /**
-   * Optional: Framework name for metadata (e.g., 'Next.js', 'TanStack Start').
-   */
-  framework?: string;
-  /**
-   * Optional: Framework version for metadata.
-   */
-  frameworkVersion?: string;
-}
-/**
- * Result type for key resolution.
- */
-interface KeylessResult$1 {
-  publishableKey: string | undefined;
-  secretKey: string | undefined;
-  claimUrl: string | undefined;
-  apiKeysUrl: string | undefined;
-}
-/**
- * The keyless service interface.
- */
-interface KeylessService {
-  /**
-   * Gets existing keyless keys or creates new ones via the API.
-   */
-  getOrCreateKeys: () => Promise<AccountlessApplication | null>;
-  /**
-   * Reads existing keyless keys without creating new ones.
-   */
-  readKeys: () => AccountlessApplication | undefined;
-  /**
-   * Removes the keyless configuration.
-   */
-  removeKeys: () => void;
-  /**
-   * Notifies the backend that the instance has been claimed/onboarded.
-   * This should be called once when the user claims their instance.
-   */
-  completeOnboarding: () => Promise<AccountlessApplication | null>;
-  /**
-   * Logs a keyless mode message to the console (throttled to once per process).
-   */
-  logKeylessMessage: (claimUrl: string) => void;
-  /**
-   * Resolves Clerk keys, falling back to keyless mode if configured keys are missing.
-   *
-   * @param configuredPublishableKey - The publishable key from options or environment
-   * @param configuredSecretKey - The secret key from options or environment
-   * @returns The resolved keys (either configured or from keyless mode)
-   */
-  resolveKeysWithKeylessFallback: (configuredPublishableKey: string | undefined, configuredSecretKey: string | undefined) => Promise<KeylessResult$1>;
-}
-/**
- * Creates a keyless service that handles accountless application creation and storage.
- * This provides a simple API for frameworks to integrate keyless mode.
- *
- * @param options - Configuration for the service including storage and API adapters
- * @returns A keyless service instance
- *
- * @example
- * ```ts
- * import { createKeylessService } from '@clerk/shared/keyless';
- *
- * const keylessService = createKeylessService({
- *   storage: createFileStorage(),
- *   api: createKeylessAPI({ secretKey }),
- *   framework: 'TanStack Start',
- * });
- *
- * const keys = await keylessService.getOrCreateKeys(request);
- * if (keys) {
- *   console.log('Publishable Key:', keys.publishableKey);
- * }
- * ```
- */
-declare function createKeylessService(options: KeylessServiceOptions): KeylessService;
-//#endregion
-//#region src/keyless/nodeFileStorage.d.ts
-interface NodeFileStorageOptions {
-  /**
-   * Function that returns the current working directory.
-   * Defaults to process.cwd().
-   */
-  cwd?: () => string;
-  /**
-   * The framework name for the README message.
-   * @example '@clerk/nextjs'
-   */
-  frameworkPackageName?: string;
-}
-interface FileSystemAdapter {
-  existsSync: (path: string) => boolean;
-  readFileSync: (path: string, options: {
-    encoding: BufferEncoding;
-  }) => string;
-  writeFileSync: (path: string, data: string, options: {
-    encoding: BufferEncoding;
-    mode?: number;
-  }) => void;
-  appendFileSync: (path: string, data: string) => void;
-  mkdirSync: (path: string, options: {
-    recursive: boolean;
-  }) => void;
-  rmSync: (path: string, options: {
-    force?: boolean;
-    recursive?: boolean;
-  }) => void;
-}
-interface PathAdapter {
-  join: (...paths: string[]) => string;
-}
-/**
- * Creates a file-based storage adapter for keyless mode.
- * This is used by Node.js-based frameworks (Next.js, TanStack Start, etc.)
- * to persist keyless configuration to the file system.
- *
- * @param fs - Node.js fs module or compatible adapter
- * @param path - Node.js path module or compatible adapter
- * @param options - Configuration options
- * @returns A KeylessStorage implementation
- */
-declare function createNodeFileStorage(fs: FileSystemAdapter, path: PathAdapter, options?: NodeFileStorageOptions): KeylessStorage;
-//#endregion
-//#region src/keyless/resolveKeysWithKeylessFallback.d.ts
-interface KeylessResult {
-  publishableKey: string | undefined;
-  secretKey: string | undefined;
-  claimUrl: string | undefined;
-  apiKeysUrl: string | undefined;
-}
-/**
- * Resolves Clerk keys, falling back to keyless mode in development if configured keys are missing.
- *
- * @param configuredPublishableKey - The publishable key from options or environment
- * @param configuredSecretKey - The secret key from options or environment
- * @param keylessService - The keyless service instance (or null if unavailable)
- * @param canUseKeyless - Whether keyless mode is enabled in the current environment
- * @returns The resolved keys (either configured or from keyless mode)
- */
-declare function resolveKeysWithKeylessFallback(configuredPublishableKey: string | undefined, configuredSecretKey: string | undefined, keylessService: KeylessService | null, canUseKeyless: boolean): Promise<KeylessResult>;
-//#endregion
-export { type AccountlessApplication, type ClerkDevCache, type FileSystemAdapter, type KeylessAPI, type KeylessResult, type KeylessService, type KeylessServiceOptions, type KeylessStorage, type NodeFileStorageOptions, type PathAdapter, type PublicKeylessApplication, clerkDevelopmentCache, createClerkDevCache, createConfirmationMessage, createKeylessModeMessage, createKeylessService, createNodeFileStorage, resolveKeysWithKeylessFallback };
-//# sourceMappingURL=index.d.ts.map

package/node_modules/@clerk/shared/dist/runtime/keyless/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/keyless/types.ts","../../../src/keyless/devCache.ts","../../../src/keyless/service.ts","../../../src/keyless/nodeFileStorage.ts","../../../src/keyless/resolveKeysWithKeylessFallback.ts"],"sourcesContent":[],"mappings":";;AAQA;AAUA;;;;ACZA;;AAU4B,UDRX,sBAAA,CCQW;EAAR,SAAA,cAAA,EAAA,MAAA;EAML,SAAA,SAAA,EAAA,MAAA;EAAR,SAAA,QAAA,EAAA,MAAA;EAAO,SAAA,UAAA,EAAA,MAAA;AACb;;;;AAGmD,KDRxC,wBAAA,GAA2B,ICQa,CDRR,sBCQQ,EAAA,WAAA,CAAA;;;ADlBnC,UCFA,aAAA,CDEsB;EAU3B,OAAA,ECXD,GDWC,CAAA,MAAA,EAAA;;;;ECZK;;;EAUG,GAAA,EAAA,CAAA,MAAA,EAAA;IAML,QAAA,EAAA,MAAA;IAAR,GAAA,EAAA,MAAA;EAAO,CAAA,EAAA,GAAA,IAAA;EACb;;;EAGmD,GAAA,EAAA,CAAA,CAAA,CAAA,CAAA,QAAA,EAAA,GAAA,GAVhC,OAUgC,CAVxB,CAUwB,CAAA,EAAA,OAAA,EAAA;IAAA,QAAA,EAAA,MAAA;IASpC,cAAA,CAAA,EAAA,MAAmB;IAyDnB,YAAA,CAAA,EAAA,MAAA;EASA,CAAA,EAAA,GA/ET,OA+ES,CA/ED,CA+EC,GAAA,SAAA,CAAyB;AAOzC;;uCAlFuC;;AChBvC;AAyBA;;;;;AAewD,iBDfxC,mBAAA,CAAA,CCewC,EDfjB,aCeiB,GAAA,SAAA;;;AAMxD;AAyBA;AAUA;;AAIyB,iBDHT,wBAAA,CCGS,IAAA,EDHsB,sBCGtB,GDH+C,wBCG/C,CAAA,EAAA,MAAA;;;;;;AAiCX,iBD3BE,yBAAA,CAAA,CC2BF,EAAA,MAAA;AA0Cd;;;cD9Da,uBAAqB;;;ADpGlC;AAUA;;;;ACZA;;AAU4B,UCNX,cAAA,CDMW;EAAR;;;;AAOnB;EAAA,IAAA,EAAA,EAAA,MAAA;;;;AAYD;AAyDA;EASgB,KAAA,CAAA,IAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAOH;;;;AClGb;AAyBA;;;;AAesC,UAfrB,UAAA,CAeqB;EAAkB;;;AAMxD;AAyBA;AAUA;EAIiC,4BAAA,CAAA,cAAA,CAAA,EArDe,OAqDf,CAAA,EArDyB,OAqDzB,CArDiC,sBAqDjC,GAAA,IAAA,CAAA;EAAR;;;;;;EAiCX,kBAAA,CAAA,cAAA,CAAA,EA9EwB,OA8ExB,CAAA,EA9EkC,OA8ElC,CA9E0C,sBA8E1C,GAAA,IAAA,CAAA;AA0Cd;;;;AClKiB,UDgDA,qBAAA,CChDsB;EActB;AASjB;AAcA;EACM,OAAA,EDcK,cCdL;EACE;;;EAES,GAAA,EDgBV,UChBU;;;;EC7CA,SAAA,CAAA,EAAA,MAAa;EAgBR;;;EAKnB,gBAAA,CAAA,EAAA,MAAA;;;;;UFwDc,eAAA;;;;;;;;;UAUA,cAAA;;;;yBAIQ,QAAQ;;;;kBAKf;;;;;;;;;4BAWU,QAAQ;;;;;;;;;;;;6HAiB7B,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;iBA0CC,oBAAA,UAA8B,wBAAwB;;;AFlKrD,UGAA,sBAAA,CHAsB;EAU3B;;;;ECZK,GAAA,CAAA,EAAA,GAAA,GAAA,MAAa;EACnB;;;;EAeJ,oBAAA,CAAA,EAAA,MAAA;;AACN,UEDgB,iBAAA,CFChB;EAAA,UAAA,EAAA,CAAA,IAAA,EAAA,MAAA,EAAA,GAAA,OAAA;cAGsC,EAAA,CAAA,IAAa,EAAA,MAAA,EAAA,OAAA,EAAA;IAAA,QAAA,EEFA,cFEA;EAAA,CAAA,EAAA,GAAA,MAAA;EASpC,aAAA,EAAA,CAAA,IAAA,EAAmB,MAAA,EAAA,IAAA,EAAI,MAAA,EAAA,OAAa,EAAA;IAyDpC,QAAA,EEnEmD,cFmE3B;IASxB,IAAA,CAAA,EAAA,MAAA;EAOH,CAAA,EAAA,GAAA,IAAA;;;;EClGI,CAAA,EAAA,GAAA,IAAA;EAyBA,MAAA,EAAA,CAAA,IAAU,EAAA,MAAA,EAAA,OAAA,EAAA;IAOqB,KAAA,CAAA,EAAA,OAAA;IAAkB,SAAA,CAAA,EAAA,OAAA;EAAR,CAAA,EAAA,GAAA,IAAA;;AAQF,UCnBvC,WAAA,CDmBuC;EAAR,IAAA,EAAA,CAAA,GAAA,KAAA,EAAA,MAAA,EAAA,EAAA,GAAA,MAAA;;AAMhD;AAyBA;AAUA;;;;;;;;AAqCc,iBCnFE,qBAAA,CDmFF,EAAA,EClFR,iBDkFQ,EAAA,IAAA,ECjFN,WDiFM,EAAA,OAAA,CAAA,EChFH,sBDgFG,CAAA,EC/EX,cD+EW;;;AFxHG,UIJA,aAAA,CJIsB;EAU3B,cAAA,EAAA,MAAA,GAAA,SAAwB;;;;ACZpC;;;;;;;AAiBC;;;AAGmD,iBGN9B,8BAAA,CHM8B,wBAAA,EAAA,MAAA,GAAA,SAAA,EAAA,mBAAA,EAAA,MAAA,GAAA,SAAA,EAAA,cAAA,EGHlC,cHGkC,GAAA,IAAA,EAAA,aAAA,EAAA,OAAA,CAAA,EGDjD,OHCiD,CGDzC,aHCyC,CAAA"}

package/node_modules/@clerk/shared/dist/runtime/keyless/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":["isDevelopmentEnvironment","claimUrl: string | undefined","apiKeysUrl: string | undefined","keylessApp: AccountlessApplication | null","claimUrl: string | undefined","apiKeysUrl: string | undefined","keylessApp: AccountlessApplication | null"],"sources":["../../../src/keyless/devCache.ts","../../../src/keyless/nodeFileStorage.ts","../../../src/keyless/service.ts","../../../src/keyless/resolveKeysWithKeylessFallback.ts"],"sourcesContent":["import { isDevelopmentEnvironment } from '../utils/runtimeEnvironment';\nimport type { AccountlessApplication, PublicKeylessApplication } from './types';\n\n// 10 minutes in milliseconds\nconst THROTTLE_DURATION_MS = 10 * 60 * 1000;\n\nexport interface ClerkDevCache {\n  __cache: Map<string, { expiresAt: number; data?: unknown }>;\n  /**\n   * Log a message with throttling to prevent spam.\n   */\n  log: (params: { cacheKey: string; msg: string }) => void;\n  /**\n   * Run an async callback with caching.\n   */\n  run: <T>(\n    callback: () => Promise<T>,\n    options: {\n      cacheKey: string;\n      onSuccessStale?: number;\n      onErrorStale?: number;\n    },\n  ) => Promise<T | undefined>;\n}\n\ndeclare global {\n  var __clerk_internal_keyless_logger: ClerkDevCache | undefined;\n}\n\n/**\n * Creates a development-only cache for keyless mode logging and API calls.\n * This prevents console spam and duplicate API requests.\n *\n * @returns The cache instance or undefined in non-development environments\n */\nexport function createClerkDevCache(): ClerkDevCache | undefined {\n  if (!isDevelopmentEnvironment()) {\n    return undefined;\n  }\n\n  if (!globalThis.__clerk_internal_keyless_logger) {\n    globalThis.__clerk_internal_keyless_logger = {\n      __cache: new Map<string, { expiresAt: number; data?: unknown }>(),\n\n      log: function ({ cacheKey, msg }) {\n        if (this.__cache.has(cacheKey) && Date.now() < (this.__cache.get(cacheKey)?.expiresAt || 0)) {\n          return;\n        }\n\n        console.log(msg);\n\n        this.__cache.set(cacheKey, {\n          expiresAt: Date.now() + THROTTLE_DURATION_MS,\n        });\n      },\n\n      run: async function (\n        callback,\n        { cacheKey, onSuccessStale = THROTTLE_DURATION_MS, onErrorStale = THROTTLE_DURATION_MS },\n      ) {\n        if (this.__cache.has(cacheKey) && Date.now() < (this.__cache.get(cacheKey)?.expiresAt || 0)) {\n          return this.__cache.get(cacheKey)?.data as ReturnType<typeof callback>;\n        }\n\n        try {\n          const result = await callback();\n\n          this.__cache.set(cacheKey, {\n            expiresAt: Date.now() + onSuccessStale,\n            data: result,\n          });\n          return result;\n        } catch (e) {\n          this.__cache.set(cacheKey, {\n            expiresAt: Date.now() + onErrorStale,\n          });\n\n          throw e;\n        }\n      },\n    };\n  }\n\n  return globalThis.__clerk_internal_keyless_logger;\n}\n\n/**\n * Creates the console message shown when running in keyless mode.\n *\n * @param keys - The keyless application keys\n * @returns Formatted console message\n */\nexport function createKeylessModeMessage(keys: AccountlessApplication | PublicKeylessApplication): string {\n  return `\\n\\x1b[35m\\n[Clerk]:\\x1b[0m You are running in keyless mode.\\nYou can \\x1b[35mclaim your keys\\x1b[0m by visiting ${keys.claimUrl}\\n`;\n}\n\n/**\n * Creates the console message shown when keys have been claimed.\n *\n * @returns Formatted console message\n */\nexport function createConfirmationMessage(): string {\n  return `\\n\\x1b[35m\\n[Clerk]:\\x1b[0m Your application is running with your claimed keys.\\nYou can safely remove the \\x1b[35m.clerk/\\x1b[0m from your project.\\n`;\n}\n\n/**\n * Shared singleton instance of the development cache.\n */\nexport const clerkDevelopmentCache = createClerkDevCache();\n","import type { KeylessStorage } from './service';\n\nconst CLERK_HIDDEN = '.clerk';\nconst CLERK_LOCK = 'clerk.lock';\nconst TEMP_DIR_NAME = '.tmp';\nconst CONFIG_FILE = 'keyless.json';\nconst README_FILE = 'README.md';\n\nexport interface NodeFileStorageOptions {\n  /**\n   * Function that returns the current working directory.\n   * Defaults to process.cwd().\n   */\n  cwd?: () => string;\n\n  /**\n   * The framework name for the README message.\n   * @example '@clerk/nextjs'\n   */\n  frameworkPackageName?: string;\n}\n\nexport interface FileSystemAdapter {\n  existsSync: (path: string) => boolean;\n  readFileSync: (path: string, options: { encoding: BufferEncoding }) => string;\n  writeFileSync: (path: string, data: string, options: { encoding: BufferEncoding; mode?: number }) => void;\n  appendFileSync: (path: string, data: string) => void;\n  mkdirSync: (path: string, options: { recursive: boolean }) => void;\n  rmSync: (path: string, options: { force?: boolean; recursive?: boolean }) => void;\n}\n\nexport interface PathAdapter {\n  join: (...paths: string[]) => string;\n}\n\n/**\n * Creates a file-based storage adapter for keyless mode.\n * This is used by Node.js-based frameworks (Next.js, TanStack Start, etc.)\n * to persist keyless configuration to the file system.\n *\n * @param fs - Node.js fs module or compatible adapter\n * @param path - Node.js path module or compatible adapter\n * @param options - Configuration options\n * @returns A KeylessStorage implementation\n */\nexport function createNodeFileStorage(\n  fs: FileSystemAdapter,\n  path: PathAdapter,\n  options: NodeFileStorageOptions = {},\n): KeylessStorage {\n  const { cwd = () => process.cwd(), frameworkPackageName = '@clerk/shared' } = options;\n\n  let inMemoryLock = false;\n\n  const getClerkDir = () => path.join(cwd(), CLERK_HIDDEN);\n  const getTempDir = () => path.join(getClerkDir(), TEMP_DIR_NAME);\n  const getConfigPath = () => path.join(getTempDir(), CONFIG_FILE);\n  const getReadmePath = () => path.join(getTempDir(), README_FILE);\n  const getLockPath = () => path.join(cwd(), CLERK_LOCK);\n\n  const isLocked = (): boolean => inMemoryLock || fs.existsSync(getLockPath());\n\n  const lock = (): boolean => {\n    if (isLocked()) {\n      return false;\n    }\n    inMemoryLock = true;\n    try {\n      fs.writeFileSync(getLockPath(), 'This file can be deleted if your app is stuck.', {\n        encoding: 'utf8',\n        mode: 0o644,\n      });\n      return true;\n    } catch {\n      inMemoryLock = false;\n      return false;\n    }\n  };\n\n  const unlock = (): void => {\n    inMemoryLock = false;\n    try {\n      if (fs.existsSync(getLockPath())) {\n        fs.rmSync(getLockPath(), { force: true });\n      }\n    } catch {\n      // Ignore\n    }\n  };\n\n  const ensureDirectoryExists = () => {\n    const tempDir = getTempDir();\n    if (!fs.existsSync(tempDir)) {\n      fs.mkdirSync(tempDir, { recursive: true });\n    }\n  };\n\n  const updateGitignore = () => {\n    const gitignorePath = path.join(cwd(), '.gitignore');\n    const entry = `/${CLERK_HIDDEN}/`;\n\n    if (!fs.existsSync(gitignorePath)) {\n      fs.writeFileSync(gitignorePath, '', { encoding: 'utf8', mode: 0o644 });\n    }\n\n    const content = fs.readFileSync(gitignorePath, { encoding: 'utf-8' });\n    if (!content.includes(entry)) {\n      fs.appendFileSync(gitignorePath, `\\n# clerk configuration (can include secrets)\\n${entry}\\n`);\n    }\n  };\n\n  const writeReadme = () => {\n    const readme = `## DO NOT COMMIT\nThis directory is auto-generated from \\`${frameworkPackageName}\\` because you are running in Keyless mode.\nAvoid committing the \\`.clerk/\\` directory as it includes the secret key of the unclaimed instance.\n`;\n    fs.writeFileSync(getReadmePath(), readme, { encoding: 'utf8', mode: 0o600 });\n  };\n\n  return {\n    read(): string {\n      try {\n        if (!fs.existsSync(getConfigPath())) {\n          return '';\n        }\n        return fs.readFileSync(getConfigPath(), { encoding: 'utf-8' });\n      } catch {\n        return '';\n      }\n    },\n\n    write(data: string): void {\n      if (!lock()) {\n        return;\n      }\n      try {\n        ensureDirectoryExists();\n        updateGitignore();\n        writeReadme();\n        fs.writeFileSync(getConfigPath(), data, { encoding: 'utf8', mode: 0o600 });\n      } finally {\n        unlock();\n      }\n    },\n\n    remove(): void {\n      if (!lock()) {\n        return;\n      }\n      try {\n        if (fs.existsSync(getClerkDir())) {\n          fs.rmSync(getClerkDir(), { recursive: true, force: true });\n        }\n      } finally {\n        unlock();\n      }\n    },\n  };\n}\n","import { clerkDevelopmentCache, createConfirmationMessage, createKeylessModeMessage } from './devCache';\nimport type { AccountlessApplication } from './types';\n\n/**\n * Storage adapter interface for keyless mode.\n * Implementations can use file system, cookies, or other storage mechanisms.\n *\n * Implementations are responsible for their own concurrency handling\n * (e.g., file locking for file-based storage).\n */\nexport interface KeylessStorage {\n  /**\n   * Reads the stored keyless configuration.\n   *\n   * @returns The JSON string of the stored config, or empty string if not found.\n   */\n  read(): string;\n\n  /**\n   * Writes the keyless configuration to storage.\n   *\n   * @param data - The JSON string to store.\n   */\n  write(data: string): void;\n\n  /**\n   * Removes the keyless configuration from storage.\n   */\n  remove(): void;\n}\n\n/**\n * API adapter for keyless mode operations.\n * This abstraction allows the service to work without depending on @clerk/backend.\n */\nexport interface KeylessAPI {\n  /**\n   * Creates a new accountless application.\n   *\n   * @param requestHeaders - Optional headers to include with the request.\n   * @returns The created AccountlessApplication or null if failed.\n   */\n  createAccountlessApplication(requestHeaders?: Headers): Promise<AccountlessApplication | null>;\n\n  /**\n   * Notifies the backend that onboarding is complete (instance has been claimed).\n   *\n   * @param requestHeaders - Optional headers to include with the request.\n   * @returns The updated AccountlessApplication or null if failed.\n   */\n  completeOnboarding(requestHeaders?: Headers): Promise<AccountlessApplication | null>;\n}\n\n/**\n * Options for creating a keyless service.\n */\nexport interface KeylessServiceOptions {\n  /**\n   * Storage adapter for reading/writing keyless configuration.\n   */\n  storage: KeylessStorage;\n\n  /**\n   * API adapter for keyless operations (create application, complete onboarding).\n   */\n  api: KeylessAPI;\n\n  /**\n   * Optional: Framework name for metadata (e.g., 'Next.js', 'TanStack Start').\n   */\n  framework?: string;\n\n  /**\n   * Optional: Framework version for metadata.\n   */\n  frameworkVersion?: string;\n}\n\n/**\n * Result type for key resolution.\n */\nexport interface KeylessResult {\n  publishableKey: string | undefined;\n  secretKey: string | undefined;\n  claimUrl: string | undefined;\n  apiKeysUrl: string | undefined;\n}\n\n/**\n * The keyless service interface.\n */\nexport interface KeylessService {\n  /**\n   * Gets existing keyless keys or creates new ones via the API.\n   */\n  getOrCreateKeys: () => Promise<AccountlessApplication | null>;\n\n  /**\n   * Reads existing keyless keys without creating new ones.\n   */\n  readKeys: () => AccountlessApplication | undefined;\n\n  /**\n   * Removes the keyless configuration.\n   */\n  removeKeys: () => void;\n\n  /**\n   * Notifies the backend that the instance has been claimed/onboarded.\n   * This should be called once when the user claims their instance.\n   */\n  completeOnboarding: () => Promise<AccountlessApplication | null>;\n\n  /**\n   * Logs a keyless mode message to the console (throttled to once per process).\n   */\n  logKeylessMessage: (claimUrl: string) => void;\n\n  /**\n   * Resolves Clerk keys, falling back to keyless mode if configured keys are missing.\n   *\n   * @param configuredPublishableKey - The publishable key from options or environment\n   * @param configuredSecretKey - The secret key from options or environment\n   * @returns The resolved keys (either configured or from keyless mode)\n   */\n  resolveKeysWithKeylessFallback: (\n    configuredPublishableKey: string | undefined,\n    configuredSecretKey: string | undefined,\n  ) => Promise<KeylessResult>;\n}\n\n/**\n * Creates metadata headers for the keyless service.\n */\nfunction createMetadataHeaders(framework?: string, frameworkVersion?: string): Headers {\n  const headers = new Headers();\n\n  if (framework) {\n    headers.set('Clerk-Framework', framework);\n  }\n  if (frameworkVersion) {\n    headers.set('Clerk-Framework-Version', frameworkVersion);\n  }\n\n  return headers;\n}\n\n/**\n * Creates a keyless service that handles accountless application creation and storage.\n * This provides a simple API for frameworks to integrate keyless mode.\n *\n * @param options - Configuration for the service including storage and API adapters\n * @returns A keyless service instance\n *\n * @example\n * ```ts\n * import { createKeylessService } from '@clerk/shared/keyless';\n *\n * const keylessService = createKeylessService({\n *   storage: createFileStorage(),\n *   api: createKeylessAPI({ secretKey }),\n *   framework: 'TanStack Start',\n * });\n *\n * const keys = await keylessService.getOrCreateKeys(request);\n * if (keys) {\n *   console.log('Publishable Key:', keys.publishableKey);\n * }\n * ```\n */\nexport function createKeylessService(options: KeylessServiceOptions): KeylessService {\n  const { storage, api, framework, frameworkVersion } = options;\n\n  let hasLoggedKeylessMessage = false;\n\n  const safeParseConfig = (): AccountlessApplication | undefined => {\n    try {\n      const data = storage.read();\n      if (!data) {\n        return undefined;\n      }\n      return JSON.parse(data) as AccountlessApplication;\n    } catch {\n      return undefined;\n    }\n  };\n\n  return {\n    async getOrCreateKeys(): Promise<AccountlessApplication | null> {\n      // Check for existing config first\n      const existingConfig = safeParseConfig();\n      if (existingConfig?.publishableKey && existingConfig?.secretKey) {\n        return existingConfig;\n      }\n\n      // Create metadata headers\n      const headers = createMetadataHeaders(framework, frameworkVersion);\n\n      // Create new keys via the API\n      const accountlessApplication = await api.createAccountlessApplication(headers);\n\n      if (accountlessApplication) {\n        storage.write(JSON.stringify(accountlessApplication));\n      }\n\n      return accountlessApplication;\n    },\n\n    readKeys(): AccountlessApplication | undefined {\n      return safeParseConfig();\n    },\n\n    removeKeys(): void {\n      storage.remove();\n    },\n\n    async completeOnboarding(): Promise<AccountlessApplication | null> {\n      const headers = createMetadataHeaders(framework, frameworkVersion);\n      return api.completeOnboarding(headers);\n    },\n\n    logKeylessMessage(claimUrl: string): void {\n      if (!hasLoggedKeylessMessage) {\n        hasLoggedKeylessMessage = true;\n        console.log(`[Clerk]: Running in keyless mode. Claim your keys at: ${claimUrl}`);\n      }\n    },\n\n    async resolveKeysWithKeylessFallback(\n      configuredPublishableKey: string | undefined,\n      configuredSecretKey: string | undefined,\n    ): Promise<KeylessResult> {\n      let publishableKey = configuredPublishableKey;\n      let secretKey = configuredSecretKey;\n      let claimUrl: string | undefined;\n      let apiKeysUrl: string | undefined;\n\n      try {\n        const locallyStoredKeys = safeParseConfig();\n\n        // Check if running with claimed keys (configured keys match locally stored keyless keys)\n        const runningWithClaimedKeys =\n          Boolean(configuredPublishableKey) && configuredPublishableKey === locallyStoredKeys?.publishableKey;\n\n        if (runningWithClaimedKeys && locallyStoredKeys) {\n          // Complete onboarding when running with claimed keys\n          try {\n            await clerkDevelopmentCache?.run(() => this.completeOnboarding(), {\n              cacheKey: `${locallyStoredKeys.publishableKey}_complete`,\n              onSuccessStale: 24 * 60 * 60 * 1000, // 24 hours\n            });\n          } catch {\n            // noop\n          }\n\n          clerkDevelopmentCache?.log({\n            cacheKey: `${locallyStoredKeys.publishableKey}_claimed`,\n            msg: createConfirmationMessage(),\n          });\n\n          return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n        }\n\n        // In keyless mode, try to read/create keys from the file system\n        if (!publishableKey && !secretKey) {\n          const keylessApp: AccountlessApplication | null = await this.getOrCreateKeys();\n\n          if (keylessApp) {\n            publishableKey = keylessApp.publishableKey;\n            secretKey = keylessApp.secretKey;\n            claimUrl = keylessApp.claimUrl;\n            apiKeysUrl = keylessApp.apiKeysUrl;\n\n            clerkDevelopmentCache?.log({\n              cacheKey: keylessApp.publishableKey,\n              msg: createKeylessModeMessage(keylessApp),\n            });\n          }\n        }\n      } catch {\n        // noop - fall through to return whatever keys we have\n      }\n\n      return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n    },\n  };\n}\n","import { clerkDevelopmentCache, createConfirmationMessage, createKeylessModeMessage } from './devCache';\nimport type { KeylessService } from './service';\nimport type { AccountlessApplication } from './types';\n\nexport interface KeylessResult {\n  publishableKey: string | undefined;\n  secretKey: string | undefined;\n  claimUrl: string | undefined;\n  apiKeysUrl: string | undefined;\n}\n\n/**\n * Resolves Clerk keys, falling back to keyless mode in development if configured keys are missing.\n *\n * @param configuredPublishableKey - The publishable key from options or environment\n * @param configuredSecretKey - The secret key from options or environment\n * @param keylessService - The keyless service instance (or null if unavailable)\n * @param canUseKeyless - Whether keyless mode is enabled in the current environment\n * @returns The resolved keys (either configured or from keyless mode)\n */\nexport async function resolveKeysWithKeylessFallback(\n  configuredPublishableKey: string | undefined,\n  configuredSecretKey: string | undefined,\n  keylessService: KeylessService | null,\n  canUseKeyless: boolean,\n): Promise<KeylessResult> {\n  let publishableKey = configuredPublishableKey;\n  let secretKey = configuredSecretKey;\n  let claimUrl: string | undefined;\n  let apiKeysUrl: string | undefined;\n\n  if (!canUseKeyless) {\n    return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n  }\n\n  if (!keylessService) {\n    return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n  }\n\n  try {\n    const locallyStoredKeys = keylessService.readKeys();\n\n    // Check if running with claimed keys (configured keys match locally stored keyless keys)\n    const runningWithClaimedKeys =\n      Boolean(configuredPublishableKey) && configuredPublishableKey === locallyStoredKeys?.publishableKey;\n\n    if (runningWithClaimedKeys && locallyStoredKeys) {\n      // Complete onboarding when running with claimed keys\n      try {\n        await clerkDevelopmentCache?.run(() => keylessService.completeOnboarding(), {\n          cacheKey: `${locallyStoredKeys.publishableKey}_complete`,\n          onSuccessStale: 24 * 60 * 60 * 1000, // 24 hours\n        });\n      } catch {\n        // noop\n      }\n\n      clerkDevelopmentCache?.log({\n        cacheKey: `${locallyStoredKeys.publishableKey}_claimed`,\n        msg: createConfirmationMessage(),\n      });\n\n      return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n    }\n\n    // In keyless mode, try to read/create keys from the file system\n    if (!publishableKey && !secretKey) {\n      const keylessApp: AccountlessApplication | null = await keylessService.getOrCreateKeys();\n\n      if (keylessApp) {\n        publishableKey = keylessApp.publishableKey;\n        secretKey = keylessApp.secretKey;\n        claimUrl = keylessApp.claimUrl;\n        apiKeysUrl = keylessApp.apiKeysUrl;\n\n        clerkDevelopmentCache?.log({\n          cacheKey: keylessApp.publishableKey,\n          msg: createKeylessModeMessage(keylessApp),\n        });\n      }\n    }\n  } catch {\n    // noop - fall through to return whatever keys we have\n  }\n\n  return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n}\n"],"mappings":";;;AAIA,MAAM,uBAAuB,MAAU;;;;;;;AA+BvC,SAAgB,sBAAiD;AAC/D,KAAI,CAACA,qDAA0B,CAC7B;AAGF,KAAI,CAAC,WAAW,gCACd,YAAW,kCAAkC;EAC3C,yBAAS,IAAI,KAAoD;EAEjE,KAAK,SAAU,EAAE,UAAU,OAAO;AAChC,OAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,KAAK,IAAI,KAAK,QAAQ,IAAI,SAAS,EAAE,aAAa,GACvF;AAGF,WAAQ,IAAI,IAAI;AAEhB,QAAK,QAAQ,IAAI,UAAU,EACzB,WAAW,KAAK,KAAK,GAAG,sBACzB,CAAC;;EAGJ,KAAK,eACH,UACA,EAAE,UAAU,iBAAiB,sBAAsB,eAAe,wBAClE;AACA,OAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,KAAK,IAAI,KAAK,QAAQ,IAAI,SAAS,EAAE,aAAa,GACvF,QAAO,KAAK,QAAQ,IAAI,SAAS,EAAE;AAGrC,OAAI;IACF,MAAM,SAAS,MAAM,UAAU;AAE/B,SAAK,QAAQ,IAAI,UAAU;KACzB,WAAW,KAAK,KAAK,GAAG;KACxB,MAAM;KACP,CAAC;AACF,WAAO;YACA,GAAG;AACV,SAAK,QAAQ,IAAI,UAAU,EACzB,WAAW,KAAK,KAAK,GAAG,cACzB,CAAC;AAEF,UAAM;;;EAGX;AAGH,QAAO,WAAW;;;;;;;;AASpB,SAAgB,yBAAyB,MAAiE;AACxG,QAAO,oHAAoH,KAAK,SAAS;;;;;;;AAQ3I,SAAgB,4BAAoC;AAClD,QAAO;;;;;AAMT,MAAa,wBAAwB,qBAAqB;;;;AC1G1D,MAAM,eAAe;AACrB,MAAM,aAAa;AACnB,MAAM,gBAAgB;AACtB,MAAM,cAAc;AACpB,MAAM,cAAc;;;;;;;;;;;AAuCpB,SAAgB,sBACd,IACA,MACA,UAAkC,EAAE,EACpB;CAChB,MAAM,EAAE,YAAY,QAAQ,KAAK,EAAE,uBAAuB,oBAAoB;CAE9E,IAAI,eAAe;CAEnB,MAAM,oBAAoB,KAAK,KAAK,KAAK,EAAE,aAAa;CACxD,MAAM,mBAAmB,KAAK,KAAK,aAAa,EAAE,cAAc;CAChE,MAAM,sBAAsB,KAAK,KAAK,YAAY,EAAE,YAAY;CAChE,MAAM,sBAAsB,KAAK,KAAK,YAAY,EAAE,YAAY;CAChE,MAAM,oBAAoB,KAAK,KAAK,KAAK,EAAE,WAAW;CAEtD,MAAM,iBAA0B,gBAAgB,GAAG,WAAW,aAAa,CAAC;CAE5E,MAAM,aAAsB;AAC1B,MAAI,UAAU,CACZ,QAAO;AAET,iBAAe;AACf,MAAI;AACF,MAAG,cAAc,aAAa,EAAE,kDAAkD;IAChF,UAAU;IACV,MAAM;IACP,CAAC;AACF,UAAO;UACD;AACN,kBAAe;AACf,UAAO;;;CAIX,MAAM,eAAqB;AACzB,iBAAe;AACf,MAAI;AACF,OAAI,GAAG,WAAW,aAAa,CAAC,CAC9B,IAAG,OAAO,aAAa,EAAE,EAAE,OAAO,MAAM,CAAC;UAErC;;CAKV,MAAM,8BAA8B;EAClC,MAAM,UAAU,YAAY;AAC5B,MAAI,CAAC,GAAG,WAAW,QAAQ,CACzB,IAAG,UAAU,SAAS,EAAE,WAAW,MAAM,CAAC;;CAI9C,MAAM,wBAAwB;EAC5B,MAAM,gBAAgB,KAAK,KAAK,KAAK,EAAE,aAAa;EACpD,MAAM,QAAQ,IAAI,aAAa;AAE/B,MAAI,CAAC,GAAG,WAAW,cAAc,CAC/B,IAAG,cAAc,eAAe,IAAI;GAAE,UAAU;GAAQ,MAAM;GAAO,CAAC;AAIxE,MAAI,CADY,GAAG,aAAa,eAAe,EAAE,UAAU,SAAS,CAAC,CACxD,SAAS,MAAM,CAC1B,IAAG,eAAe,eAAe,kDAAkD,MAAM,IAAI;;CAIjG,MAAM,oBAAoB;EACxB,MAAM,SAAS;0CACuB,qBAAqB;;;AAG3D,KAAG,cAAc,eAAe,EAAE,QAAQ;GAAE,UAAU;GAAQ,MAAM;GAAO,CAAC;;AAG9E,QAAO;EACL,OAAe;AACb,OAAI;AACF,QAAI,CAAC,GAAG,WAAW,eAAe,CAAC,CACjC,QAAO;AAET,WAAO,GAAG,aAAa,eAAe,EAAE,EAAE,UAAU,SAAS,CAAC;WACxD;AACN,WAAO;;;EAIX,MAAM,MAAoB;AACxB,OAAI,CAAC,MAAM,CACT;AAEF,OAAI;AACF,2BAAuB;AACvB,qBAAiB;AACjB,iBAAa;AACb,OAAG,cAAc,eAAe,EAAE,MAAM;KAAE,UAAU;KAAQ,MAAM;KAAO,CAAC;aAClE;AACR,YAAQ;;;EAIZ,SAAe;AACb,OAAI,CAAC,MAAM,CACT;AAEF,OAAI;AACF,QAAI,GAAG,WAAW,aAAa,CAAC,CAC9B,IAAG,OAAO,aAAa,EAAE;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;aAEpD;AACR,YAAQ;;;EAGb;;;;;;;;ACvBH,SAAS,sBAAsB,WAAoB,kBAAoC;CACrF,MAAM,UAAU,IAAI,SAAS;AAE7B,KAAI,UACF,SAAQ,IAAI,mBAAmB,UAAU;AAE3C,KAAI,iBACF,SAAQ,IAAI,2BAA2B,iBAAiB;AAG1D,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;AA0BT,SAAgB,qBAAqB,SAAgD;CACnF,MAAM,EAAE,SAAS,KAAK,WAAW,qBAAqB;CAEtD,IAAI,0BAA0B;CAE9B,MAAM,wBAA4D;AAChE,MAAI;GACF,MAAM,OAAO,QAAQ,MAAM;AAC3B,OAAI,CAAC,KACH;AAEF,UAAO,KAAK,MAAM,KAAK;UACjB;AACN;;;AAIJ,QAAO;EACL,MAAM,kBAA0D;GAE9D,MAAM,iBAAiB,iBAAiB;AACxC,OAAI,gBAAgB,kBAAkB,gBAAgB,UACpD,QAAO;GAIT,MAAM,UAAU,sBAAsB,WAAW,iBAAiB;GAGlE,MAAM,yBAAyB,MAAM,IAAI,6BAA6B,QAAQ;AAE9E,OAAI,uBACF,SAAQ,MAAM,KAAK,UAAU,uBAAuB,CAAC;AAGvD,UAAO;;EAGT,WAA+C;AAC7C,UAAO,iBAAiB;;EAG1B,aAAmB;AACjB,WAAQ,QAAQ;;EAGlB,MAAM,qBAA6D;GACjE,MAAM,UAAU,sBAAsB,WAAW,iBAAiB;AAClE,UAAO,IAAI,mBAAmB,QAAQ;;EAGxC,kBAAkB,UAAwB;AACxC,OAAI,CAAC,yBAAyB;AAC5B,8BAA0B;AAC1B,YAAQ,IAAI,yDAAyD,WAAW;;;EAIpF,MAAM,+BACJ,0BACA,qBACwB;GACxB,IAAI,iBAAiB;GACrB,IAAI,YAAY;GAChB,IAAIC;GACJ,IAAIC;AAEJ,OAAI;IACF,MAAM,oBAAoB,iBAAiB;AAM3C,QAFE,QAAQ,yBAAyB,IAAI,6BAA6B,mBAAmB,kBAEzD,mBAAmB;AAE/C,SAAI;AACF,YAAM,uBAAuB,UAAU,KAAK,oBAAoB,EAAE;OAChE,UAAU,GAAG,kBAAkB,eAAe;OAC9C,gBAAgB,OAAU,KAAK;OAChC,CAAC;aACI;AAIR,4BAAuB,IAAI;MACzB,UAAU,GAAG,kBAAkB,eAAe;MAC9C,KAAK,2BAA2B;MACjC,CAAC;AAEF,YAAO;MAAE;MAAgB;MAAW;MAAU;MAAY;;AAI5D,QAAI,CAAC,kBAAkB,CAAC,WAAW;KACjC,MAAMC,aAA4C,MAAM,KAAK,iBAAiB;AAE9E,SAAI,YAAY;AACd,uBAAiB,WAAW;AAC5B,kBAAY,WAAW;AACvB,iBAAW,WAAW;AACtB,mBAAa,WAAW;AAExB,6BAAuB,IAAI;OACzB,UAAU,WAAW;OACrB,KAAK,yBAAyB,WAAW;OAC1C,CAAC;;;WAGA;AAIR,UAAO;IAAE;IAAgB;IAAW;IAAU;IAAY;;EAE7D;;;;;;;;;;;;;;ACzQH,eAAsB,+BACpB,0BACA,qBACA,gBACA,eACwB;CACxB,IAAI,iBAAiB;CACrB,IAAI,YAAY;CAChB,IAAIC;CACJ,IAAIC;AAEJ,KAAI,CAAC,cACH,QAAO;EAAE;EAAgB;EAAW;EAAU;EAAY;AAG5D,KAAI,CAAC,eACH,QAAO;EAAE;EAAgB;EAAW;EAAU;EAAY;AAG5D,KAAI;EACF,MAAM,oBAAoB,eAAe,UAAU;AAMnD,MAFE,QAAQ,yBAAyB,IAAI,6BAA6B,mBAAmB,kBAEzD,mBAAmB;AAE/C,OAAI;AACF,UAAM,uBAAuB,UAAU,eAAe,oBAAoB,EAAE;KAC1E,UAAU,GAAG,kBAAkB,eAAe;KAC9C,gBAAgB,OAAU,KAAK;KAChC,CAAC;WACI;AAIR,0BAAuB,IAAI;IACzB,UAAU,GAAG,kBAAkB,eAAe;IAC9C,KAAK,2BAA2B;IACjC,CAAC;AAEF,UAAO;IAAE;IAAgB;IAAW;IAAU;IAAY;;AAI5D,MAAI,CAAC,kBAAkB,CAAC,WAAW;GACjC,MAAMC,aAA4C,MAAM,eAAe,iBAAiB;AAExF,OAAI,YAAY;AACd,qBAAiB,WAAW;AAC5B,gBAAY,WAAW;AACvB,eAAW,WAAW;AACtB,iBAAa,WAAW;AAExB,2BAAuB,IAAI;KACzB,UAAU,WAAW;KACrB,KAAK,yBAAyB,WAAW;KAC1C,CAAC;;;SAGA;AAIR,QAAO;EAAE;EAAgB;EAAW;EAAU;EAAY"}

package/node_modules/@clerk/shared/dist/runtime/keyless/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.mjs","names":["claimUrl: string | undefined","apiKeysUrl: string | undefined","keylessApp: AccountlessApplication | null","claimUrl: string | undefined","apiKeysUrl: string | undefined","keylessApp: AccountlessApplication | null"],"sources":["../../../src/keyless/devCache.ts","../../../src/keyless/nodeFileStorage.ts","../../../src/keyless/service.ts","../../../src/keyless/resolveKeysWithKeylessFallback.ts"],"sourcesContent":["import { isDevelopmentEnvironment } from '../utils/runtimeEnvironment';\nimport type { AccountlessApplication, PublicKeylessApplication } from './types';\n\n// 10 minutes in milliseconds\nconst THROTTLE_DURATION_MS = 10 * 60 * 1000;\n\nexport interface ClerkDevCache {\n  __cache: Map<string, { expiresAt: number; data?: unknown }>;\n  /**\n   * Log a message with throttling to prevent spam.\n   */\n  log: (params: { cacheKey: string; msg: string }) => void;\n  /**\n   * Run an async callback with caching.\n   */\n  run: <T>(\n    callback: () => Promise<T>,\n    options: {\n      cacheKey: string;\n      onSuccessStale?: number;\n      onErrorStale?: number;\n    },\n  ) => Promise<T | undefined>;\n}\n\ndeclare global {\n  var __clerk_internal_keyless_logger: ClerkDevCache | undefined;\n}\n\n/**\n * Creates a development-only cache for keyless mode logging and API calls.\n * This prevents console spam and duplicate API requests.\n *\n * @returns The cache instance or undefined in non-development environments\n */\nexport function createClerkDevCache(): ClerkDevCache | undefined {\n  if (!isDevelopmentEnvironment()) {\n    return undefined;\n  }\n\n  if (!globalThis.__clerk_internal_keyless_logger) {\n    globalThis.__clerk_internal_keyless_logger = {\n      __cache: new Map<string, { expiresAt: number; data?: unknown }>(),\n\n      log: function ({ cacheKey, msg }) {\n        if (this.__cache.has(cacheKey) && Date.now() < (this.__cache.get(cacheKey)?.expiresAt || 0)) {\n          return;\n        }\n\n        console.log(msg);\n\n        this.__cache.set(cacheKey, {\n          expiresAt: Date.now() + THROTTLE_DURATION_MS,\n        });\n      },\n\n      run: async function (\n        callback,\n        { cacheKey, onSuccessStale = THROTTLE_DURATION_MS, onErrorStale = THROTTLE_DURATION_MS },\n      ) {\n        if (this.__cache.has(cacheKey) && Date.now() < (this.__cache.get(cacheKey)?.expiresAt || 0)) {\n          return this.__cache.get(cacheKey)?.data as ReturnType<typeof callback>;\n        }\n\n        try {\n          const result = await callback();\n\n          this.__cache.set(cacheKey, {\n            expiresAt: Date.now() + onSuccessStale,\n            data: result,\n          });\n          return result;\n        } catch (e) {\n          this.__cache.set(cacheKey, {\n            expiresAt: Date.now() + onErrorStale,\n          });\n\n          throw e;\n        }\n      },\n    };\n  }\n\n  return globalThis.__clerk_internal_keyless_logger;\n}\n\n/**\n * Creates the console message shown when running in keyless mode.\n *\n * @param keys - The keyless application keys\n * @returns Formatted console message\n */\nexport function createKeylessModeMessage(keys: AccountlessApplication | PublicKeylessApplication): string {\n  return `\\n\\x1b[35m\\n[Clerk]:\\x1b[0m You are running in keyless mode.\\nYou can \\x1b[35mclaim your keys\\x1b[0m by visiting ${keys.claimUrl}\\n`;\n}\n\n/**\n * Creates the console message shown when keys have been claimed.\n *\n * @returns Formatted console message\n */\nexport function createConfirmationMessage(): string {\n  return `\\n\\x1b[35m\\n[Clerk]:\\x1b[0m Your application is running with your claimed keys.\\nYou can safely remove the \\x1b[35m.clerk/\\x1b[0m from your project.\\n`;\n}\n\n/**\n * Shared singleton instance of the development cache.\n */\nexport const clerkDevelopmentCache = createClerkDevCache();\n","import type { KeylessStorage } from './service';\n\nconst CLERK_HIDDEN = '.clerk';\nconst CLERK_LOCK = 'clerk.lock';\nconst TEMP_DIR_NAME = '.tmp';\nconst CONFIG_FILE = 'keyless.json';\nconst README_FILE = 'README.md';\n\nexport interface NodeFileStorageOptions {\n  /**\n   * Function that returns the current working directory.\n   * Defaults to process.cwd().\n   */\n  cwd?: () => string;\n\n  /**\n   * The framework name for the README message.\n   * @example '@clerk/nextjs'\n   */\n  frameworkPackageName?: string;\n}\n\nexport interface FileSystemAdapter {\n  existsSync: (path: string) => boolean;\n  readFileSync: (path: string, options: { encoding: BufferEncoding }) => string;\n  writeFileSync: (path: string, data: string, options: { encoding: BufferEncoding; mode?: number }) => void;\n  appendFileSync: (path: string, data: string) => void;\n  mkdirSync: (path: string, options: { recursive: boolean }) => void;\n  rmSync: (path: string, options: { force?: boolean; recursive?: boolean }) => void;\n}\n\nexport interface PathAdapter {\n  join: (...paths: string[]) => string;\n}\n\n/**\n * Creates a file-based storage adapter for keyless mode.\n * This is used by Node.js-based frameworks (Next.js, TanStack Start, etc.)\n * to persist keyless configuration to the file system.\n *\n * @param fs - Node.js fs module or compatible adapter\n * @param path - Node.js path module or compatible adapter\n * @param options - Configuration options\n * @returns A KeylessStorage implementation\n */\nexport function createNodeFileStorage(\n  fs: FileSystemAdapter,\n  path: PathAdapter,\n  options: NodeFileStorageOptions = {},\n): KeylessStorage {\n  const { cwd = () => process.cwd(), frameworkPackageName = '@clerk/shared' } = options;\n\n  let inMemoryLock = false;\n\n  const getClerkDir = () => path.join(cwd(), CLERK_HIDDEN);\n  const getTempDir = () => path.join(getClerkDir(), TEMP_DIR_NAME);\n  const getConfigPath = () => path.join(getTempDir(), CONFIG_FILE);\n  const getReadmePath = () => path.join(getTempDir(), README_FILE);\n  const getLockPath = () => path.join(cwd(), CLERK_LOCK);\n\n  const isLocked = (): boolean => inMemoryLock || fs.existsSync(getLockPath());\n\n  const lock = (): boolean => {\n    if (isLocked()) {\n      return false;\n    }\n    inMemoryLock = true;\n    try {\n      fs.writeFileSync(getLockPath(), 'This file can be deleted if your app is stuck.', {\n        encoding: 'utf8',\n        mode: 0o644,\n      });\n      return true;\n    } catch {\n      inMemoryLock = false;\n      return false;\n    }\n  };\n\n  const unlock = (): void => {\n    inMemoryLock = false;\n    try {\n      if (fs.existsSync(getLockPath())) {\n        fs.rmSync(getLockPath(), { force: true });\n      }\n    } catch {\n      // Ignore\n    }\n  };\n\n  const ensureDirectoryExists = () => {\n    const tempDir = getTempDir();\n    if (!fs.existsSync(tempDir)) {\n      fs.mkdirSync(tempDir, { recursive: true });\n    }\n  };\n\n  const updateGitignore = () => {\n    const gitignorePath = path.join(cwd(), '.gitignore');\n    const entry = `/${CLERK_HIDDEN}/`;\n\n    if (!fs.existsSync(gitignorePath)) {\n      fs.writeFileSync(gitignorePath, '', { encoding: 'utf8', mode: 0o644 });\n    }\n\n    const content = fs.readFileSync(gitignorePath, { encoding: 'utf-8' });\n    if (!content.includes(entry)) {\n      fs.appendFileSync(gitignorePath, `\\n# clerk configuration (can include secrets)\\n${entry}\\n`);\n    }\n  };\n\n  const writeReadme = () => {\n    const readme = `## DO NOT COMMIT\nThis directory is auto-generated from \\`${frameworkPackageName}\\` because you are running in Keyless mode.\nAvoid committing the \\`.clerk/\\` directory as it includes the secret key of the unclaimed instance.\n`;\n    fs.writeFileSync(getReadmePath(), readme, { encoding: 'utf8', mode: 0o600 });\n  };\n\n  return {\n    read(): string {\n      try {\n        if (!fs.existsSync(getConfigPath())) {\n          return '';\n        }\n        return fs.readFileSync(getConfigPath(), { encoding: 'utf-8' });\n      } catch {\n        return '';\n      }\n    },\n\n    write(data: string): void {\n      if (!lock()) {\n        return;\n      }\n      try {\n        ensureDirectoryExists();\n        updateGitignore();\n        writeReadme();\n        fs.writeFileSync(getConfigPath(), data, { encoding: 'utf8', mode: 0o600 });\n      } finally {\n        unlock();\n      }\n    },\n\n    remove(): void {\n      if (!lock()) {\n        return;\n      }\n      try {\n        if (fs.existsSync(getClerkDir())) {\n          fs.rmSync(getClerkDir(), { recursive: true, force: true });\n        }\n      } finally {\n        unlock();\n      }\n    },\n  };\n}\n","import { clerkDevelopmentCache, createConfirmationMessage, createKeylessModeMessage } from './devCache';\nimport type { AccountlessApplication } from './types';\n\n/**\n * Storage adapter interface for keyless mode.\n * Implementations can use file system, cookies, or other storage mechanisms.\n *\n * Implementations are responsible for their own concurrency handling\n * (e.g., file locking for file-based storage).\n */\nexport interface KeylessStorage {\n  /**\n   * Reads the stored keyless configuration.\n   *\n   * @returns The JSON string of the stored config, or empty string if not found.\n   */\n  read(): string;\n\n  /**\n   * Writes the keyless configuration to storage.\n   *\n   * @param data - The JSON string to store.\n   */\n  write(data: string): void;\n\n  /**\n   * Removes the keyless configuration from storage.\n   */\n  remove(): void;\n}\n\n/**\n * API adapter for keyless mode operations.\n * This abstraction allows the service to work without depending on @clerk/backend.\n */\nexport interface KeylessAPI {\n  /**\n   * Creates a new accountless application.\n   *\n   * @param requestHeaders - Optional headers to include with the request.\n   * @returns The created AccountlessApplication or null if failed.\n   */\n  createAccountlessApplication(requestHeaders?: Headers): Promise<AccountlessApplication | null>;\n\n  /**\n   * Notifies the backend that onboarding is complete (instance has been claimed).\n   *\n   * @param requestHeaders - Optional headers to include with the request.\n   * @returns The updated AccountlessApplication or null if failed.\n   */\n  completeOnboarding(requestHeaders?: Headers): Promise<AccountlessApplication | null>;\n}\n\n/**\n * Options for creating a keyless service.\n */\nexport interface KeylessServiceOptions {\n  /**\n   * Storage adapter for reading/writing keyless configuration.\n   */\n  storage: KeylessStorage;\n\n  /**\n   * API adapter for keyless operations (create application, complete onboarding).\n   */\n  api: KeylessAPI;\n\n  /**\n   * Optional: Framework name for metadata (e.g., 'Next.js', 'TanStack Start').\n   */\n  framework?: string;\n\n  /**\n   * Optional: Framework version for metadata.\n   */\n  frameworkVersion?: string;\n}\n\n/**\n * Result type for key resolution.\n */\nexport interface KeylessResult {\n  publishableKey: string | undefined;\n  secretKey: string | undefined;\n  claimUrl: string | undefined;\n  apiKeysUrl: string | undefined;\n}\n\n/**\n * The keyless service interface.\n */\nexport interface KeylessService {\n  /**\n   * Gets existing keyless keys or creates new ones via the API.\n   */\n  getOrCreateKeys: () => Promise<AccountlessApplication | null>;\n\n  /**\n   * Reads existing keyless keys without creating new ones.\n   */\n  readKeys: () => AccountlessApplication | undefined;\n\n  /**\n   * Removes the keyless configuration.\n   */\n  removeKeys: () => void;\n\n  /**\n   * Notifies the backend that the instance has been claimed/onboarded.\n   * This should be called once when the user claims their instance.\n   */\n  completeOnboarding: () => Promise<AccountlessApplication | null>;\n\n  /**\n   * Logs a keyless mode message to the console (throttled to once per process).\n   */\n  logKeylessMessage: (claimUrl: string) => void;\n\n  /**\n   * Resolves Clerk keys, falling back to keyless mode if configured keys are missing.\n   *\n   * @param configuredPublishableKey - The publishable key from options or environment\n   * @param configuredSecretKey - The secret key from options or environment\n   * @returns The resolved keys (either configured or from keyless mode)\n   */\n  resolveKeysWithKeylessFallback: (\n    configuredPublishableKey: string | undefined,\n    configuredSecretKey: string | undefined,\n  ) => Promise<KeylessResult>;\n}\n\n/**\n * Creates metadata headers for the keyless service.\n */\nfunction createMetadataHeaders(framework?: string, frameworkVersion?: string): Headers {\n  const headers = new Headers();\n\n  if (framework) {\n    headers.set('Clerk-Framework', framework);\n  }\n  if (frameworkVersion) {\n    headers.set('Clerk-Framework-Version', frameworkVersion);\n  }\n\n  return headers;\n}\n\n/**\n * Creates a keyless service that handles accountless application creation and storage.\n * This provides a simple API for frameworks to integrate keyless mode.\n *\n * @param options - Configuration for the service including storage and API adapters\n * @returns A keyless service instance\n *\n * @example\n * ```ts\n * import { createKeylessService } from '@clerk/shared/keyless';\n *\n * const keylessService = createKeylessService({\n *   storage: createFileStorage(),\n *   api: createKeylessAPI({ secretKey }),\n *   framework: 'TanStack Start',\n * });\n *\n * const keys = await keylessService.getOrCreateKeys(request);\n * if (keys) {\n *   console.log('Publishable Key:', keys.publishableKey);\n * }\n * ```\n */\nexport function createKeylessService(options: KeylessServiceOptions): KeylessService {\n  const { storage, api, framework, frameworkVersion } = options;\n\n  let hasLoggedKeylessMessage = false;\n\n  const safeParseConfig = (): AccountlessApplication | undefined => {\n    try {\n      const data = storage.read();\n      if (!data) {\n        return undefined;\n      }\n      return JSON.parse(data) as AccountlessApplication;\n    } catch {\n      return undefined;\n    }\n  };\n\n  return {\n    async getOrCreateKeys(): Promise<AccountlessApplication | null> {\n      // Check for existing config first\n      const existingConfig = safeParseConfig();\n      if (existingConfig?.publishableKey && existingConfig?.secretKey) {\n        return existingConfig;\n      }\n\n      // Create metadata headers\n      const headers = createMetadataHeaders(framework, frameworkVersion);\n\n      // Create new keys via the API\n      const accountlessApplication = await api.createAccountlessApplication(headers);\n\n      if (accountlessApplication) {\n        storage.write(JSON.stringify(accountlessApplication));\n      }\n\n      return accountlessApplication;\n    },\n\n    readKeys(): AccountlessApplication | undefined {\n      return safeParseConfig();\n    },\n\n    removeKeys(): void {\n      storage.remove();\n    },\n\n    async completeOnboarding(): Promise<AccountlessApplication | null> {\n      const headers = createMetadataHeaders(framework, frameworkVersion);\n      return api.completeOnboarding(headers);\n    },\n\n    logKeylessMessage(claimUrl: string): void {\n      if (!hasLoggedKeylessMessage) {\n        hasLoggedKeylessMessage = true;\n        console.log(`[Clerk]: Running in keyless mode. Claim your keys at: ${claimUrl}`);\n      }\n    },\n\n    async resolveKeysWithKeylessFallback(\n      configuredPublishableKey: string | undefined,\n      configuredSecretKey: string | undefined,\n    ): Promise<KeylessResult> {\n      let publishableKey = configuredPublishableKey;\n      let secretKey = configuredSecretKey;\n      let claimUrl: string | undefined;\n      let apiKeysUrl: string | undefined;\n\n      try {\n        const locallyStoredKeys = safeParseConfig();\n\n        // Check if running with claimed keys (configured keys match locally stored keyless keys)\n        const runningWithClaimedKeys =\n          Boolean(configuredPublishableKey) && configuredPublishableKey === locallyStoredKeys?.publishableKey;\n\n        if (runningWithClaimedKeys && locallyStoredKeys) {\n          // Complete onboarding when running with claimed keys\n          try {\n            await clerkDevelopmentCache?.run(() => this.completeOnboarding(), {\n              cacheKey: `${locallyStoredKeys.publishableKey}_complete`,\n              onSuccessStale: 24 * 60 * 60 * 1000, // 24 hours\n            });\n          } catch {\n            // noop\n          }\n\n          clerkDevelopmentCache?.log({\n            cacheKey: `${locallyStoredKeys.publishableKey}_claimed`,\n            msg: createConfirmationMessage(),\n          });\n\n          return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n        }\n\n        // In keyless mode, try to read/create keys from the file system\n        if (!publishableKey && !secretKey) {\n          const keylessApp: AccountlessApplication | null = await this.getOrCreateKeys();\n\n          if (keylessApp) {\n            publishableKey = keylessApp.publishableKey;\n            secretKey = keylessApp.secretKey;\n            claimUrl = keylessApp.claimUrl;\n            apiKeysUrl = keylessApp.apiKeysUrl;\n\n            clerkDevelopmentCache?.log({\n              cacheKey: keylessApp.publishableKey,\n              msg: createKeylessModeMessage(keylessApp),\n            });\n          }\n        }\n      } catch {\n        // noop - fall through to return whatever keys we have\n      }\n\n      return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n    },\n  };\n}\n","import { clerkDevelopmentCache, createConfirmationMessage, createKeylessModeMessage } from './devCache';\nimport type { KeylessService } from './service';\nimport type { AccountlessApplication } from './types';\n\nexport interface KeylessResult {\n  publishableKey: string | undefined;\n  secretKey: string | undefined;\n  claimUrl: string | undefined;\n  apiKeysUrl: string | undefined;\n}\n\n/**\n * Resolves Clerk keys, falling back to keyless mode in development if configured keys are missing.\n *\n * @param configuredPublishableKey - The publishable key from options or environment\n * @param configuredSecretKey - The secret key from options or environment\n * @param keylessService - The keyless service instance (or null if unavailable)\n * @param canUseKeyless - Whether keyless mode is enabled in the current environment\n * @returns The resolved keys (either configured or from keyless mode)\n */\nexport async function resolveKeysWithKeylessFallback(\n  configuredPublishableKey: string | undefined,\n  configuredSecretKey: string | undefined,\n  keylessService: KeylessService | null,\n  canUseKeyless: boolean,\n): Promise<KeylessResult> {\n  let publishableKey = configuredPublishableKey;\n  let secretKey = configuredSecretKey;\n  let claimUrl: string | undefined;\n  let apiKeysUrl: string | undefined;\n\n  if (!canUseKeyless) {\n    return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n  }\n\n  if (!keylessService) {\n    return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n  }\n\n  try {\n    const locallyStoredKeys = keylessService.readKeys();\n\n    // Check if running with claimed keys (configured keys match locally stored keyless keys)\n    const runningWithClaimedKeys =\n      Boolean(configuredPublishableKey) && configuredPublishableKey === locallyStoredKeys?.publishableKey;\n\n    if (runningWithClaimedKeys && locallyStoredKeys) {\n      // Complete onboarding when running with claimed keys\n      try {\n        await clerkDevelopmentCache?.run(() => keylessService.completeOnboarding(), {\n          cacheKey: `${locallyStoredKeys.publishableKey}_complete`,\n          onSuccessStale: 24 * 60 * 60 * 1000, // 24 hours\n        });\n      } catch {\n        // noop\n      }\n\n      clerkDevelopmentCache?.log({\n        cacheKey: `${locallyStoredKeys.publishableKey}_claimed`,\n        msg: createConfirmationMessage(),\n      });\n\n      return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n    }\n\n    // In keyless mode, try to read/create keys from the file system\n    if (!publishableKey && !secretKey) {\n      const keylessApp: AccountlessApplication | null = await keylessService.getOrCreateKeys();\n\n      if (keylessApp) {\n        publishableKey = keylessApp.publishableKey;\n        secretKey = keylessApp.secretKey;\n        claimUrl = keylessApp.claimUrl;\n        apiKeysUrl = keylessApp.apiKeysUrl;\n\n        clerkDevelopmentCache?.log({\n          cacheKey: keylessApp.publishableKey,\n          msg: createKeylessModeMessage(keylessApp),\n        });\n      }\n    }\n  } catch {\n    // noop - fall through to return whatever keys we have\n  }\n\n  return { publishableKey, secretKey, claimUrl, apiKeysUrl };\n}\n"],"mappings":";;;AAIA,MAAM,uBAAuB,MAAU;;;;;;;AA+BvC,SAAgB,sBAAiD;AAC/D,KAAI,CAAC,0BAA0B,CAC7B;AAGF,KAAI,CAAC,WAAW,gCACd,YAAW,kCAAkC;EAC3C,yBAAS,IAAI,KAAoD;EAEjE,KAAK,SAAU,EAAE,UAAU,OAAO;AAChC,OAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,KAAK,IAAI,KAAK,QAAQ,IAAI,SAAS,EAAE,aAAa,GACvF;AAGF,WAAQ,IAAI,IAAI;AAEhB,QAAK,QAAQ,IAAI,UAAU,EACzB,WAAW,KAAK,KAAK,GAAG,sBACzB,CAAC;;EAGJ,KAAK,eACH,UACA,EAAE,UAAU,iBAAiB,sBAAsB,eAAe,wBAClE;AACA,OAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,KAAK,IAAI,KAAK,QAAQ,IAAI,SAAS,EAAE,aAAa,GACvF,QAAO,KAAK,QAAQ,IAAI,SAAS,EAAE;AAGrC,OAAI;IACF,MAAM,SAAS,MAAM,UAAU;AAE/B,SAAK,QAAQ,IAAI,UAAU;KACzB,WAAW,KAAK,KAAK,GAAG;KACxB,MAAM;KACP,CAAC;AACF,WAAO;YACA,GAAG;AACV,SAAK,QAAQ,IAAI,UAAU,EACzB,WAAW,KAAK,KAAK,GAAG,cACzB,CAAC;AAEF,UAAM;;;EAGX;AAGH,QAAO,WAAW;;;;;;;;AASpB,SAAgB,yBAAyB,MAAiE;AACxG,QAAO,oHAAoH,KAAK,SAAS;;;;;;;AAQ3I,SAAgB,4BAAoC;AAClD,QAAO;;;;;AAMT,MAAa,wBAAwB,qBAAqB;;;;AC1G1D,MAAM,eAAe;AACrB,MAAM,aAAa;AACnB,MAAM,gBAAgB;AACtB,MAAM,cAAc;AACpB,MAAM,cAAc;;;;;;;;;;;AAuCpB,SAAgB,sBACd,IACA,MACA,UAAkC,EAAE,EACpB;CAChB,MAAM,EAAE,YAAY,QAAQ,KAAK,EAAE,uBAAuB,oBAAoB;CAE9E,IAAI,eAAe;CAEnB,MAAM,oBAAoB,KAAK,KAAK,KAAK,EAAE,aAAa;CACxD,MAAM,mBAAmB,KAAK,KAAK,aAAa,EAAE,cAAc;CAChE,MAAM,sBAAsB,KAAK,KAAK,YAAY,EAAE,YAAY;CAChE,MAAM,sBAAsB,KAAK,KAAK,YAAY,EAAE,YAAY;CAChE,MAAM,oBAAoB,KAAK,KAAK,KAAK,EAAE,WAAW;CAEtD,MAAM,iBAA0B,gBAAgB,GAAG,WAAW,aAAa,CAAC;CAE5E,MAAM,aAAsB;AAC1B,MAAI,UAAU,CACZ,QAAO;AAET,iBAAe;AACf,MAAI;AACF,MAAG,cAAc,aAAa,EAAE,kDAAkD;IAChF,UAAU;IACV,MAAM;IACP,CAAC;AACF,UAAO;UACD;AACN,kBAAe;AACf,UAAO;;;CAIX,MAAM,eAAqB;AACzB,iBAAe;AACf,MAAI;AACF,OAAI,GAAG,WAAW,aAAa,CAAC,CAC9B,IAAG,OAAO,aAAa,EAAE,EAAE,OAAO,MAAM,CAAC;UAErC;;CAKV,MAAM,8BAA8B;EAClC,MAAM,UAAU,YAAY;AAC5B,MAAI,CAAC,GAAG,WAAW,QAAQ,CACzB,IAAG,UAAU,SAAS,EAAE,WAAW,MAAM,CAAC;;CAI9C,MAAM,wBAAwB;EAC5B,MAAM,gBAAgB,KAAK,KAAK,KAAK,EAAE,aAAa;EACpD,MAAM,QAAQ,IAAI,aAAa;AAE/B,MAAI,CAAC,GAAG,WAAW,cAAc,CAC/B,IAAG,cAAc,eAAe,IAAI;GAAE,UAAU;GAAQ,MAAM;GAAO,CAAC;AAIxE,MAAI,CADY,GAAG,aAAa,eAAe,EAAE,UAAU,SAAS,CAAC,CACxD,SAAS,MAAM,CAC1B,IAAG,eAAe,eAAe,kDAAkD,MAAM,IAAI;;CAIjG,MAAM,oBAAoB;EACxB,MAAM,SAAS;0CACuB,qBAAqB;;;AAG3D,KAAG,cAAc,eAAe,EAAE,QAAQ;GAAE,UAAU;GAAQ,MAAM;GAAO,CAAC;;AAG9E,QAAO;EACL,OAAe;AACb,OAAI;AACF,QAAI,CAAC,GAAG,WAAW,eAAe,CAAC,CACjC,QAAO;AAET,WAAO,GAAG,aAAa,eAAe,EAAE,EAAE,UAAU,SAAS,CAAC;WACxD;AACN,WAAO;;;EAIX,MAAM,MAAoB;AACxB,OAAI,CAAC,MAAM,CACT;AAEF,OAAI;AACF,2BAAuB;AACvB,qBAAiB;AACjB,iBAAa;AACb,OAAG,cAAc,eAAe,EAAE,MAAM;KAAE,UAAU;KAAQ,MAAM;KAAO,CAAC;aAClE;AACR,YAAQ;;;EAIZ,SAAe;AACb,OAAI,CAAC,MAAM,CACT;AAEF,OAAI;AACF,QAAI,GAAG,WAAW,aAAa,CAAC,CAC9B,IAAG,OAAO,aAAa,EAAE;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;aAEpD;AACR,YAAQ;;;EAGb;;;;;;;;ACvBH,SAAS,sBAAsB,WAAoB,kBAAoC;CACrF,MAAM,UAAU,IAAI,SAAS;AAE7B,KAAI,UACF,SAAQ,IAAI,mBAAmB,UAAU;AAE3C,KAAI,iBACF,SAAQ,IAAI,2BAA2B,iBAAiB;AAG1D,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;AA0BT,SAAgB,qBAAqB,SAAgD;CACnF,MAAM,EAAE,SAAS,KAAK,WAAW,qBAAqB;CAEtD,IAAI,0BAA0B;CAE9B,MAAM,wBAA4D;AAChE,MAAI;GACF,MAAM,OAAO,QAAQ,MAAM;AAC3B,OAAI,CAAC,KACH;AAEF,UAAO,KAAK,MAAM,KAAK;UACjB;AACN;;;AAIJ,QAAO;EACL,MAAM,kBAA0D;GAE9D,MAAM,iBAAiB,iBAAiB;AACxC,OAAI,gBAAgB,kBAAkB,gBAAgB,UACpD,QAAO;GAIT,MAAM,UAAU,sBAAsB,WAAW,iBAAiB;GAGlE,MAAM,yBAAyB,MAAM,IAAI,6BAA6B,QAAQ;AAE9E,OAAI,uBACF,SAAQ,MAAM,KAAK,UAAU,uBAAuB,CAAC;AAGvD,UAAO;;EAGT,WAA+C;AAC7C,UAAO,iBAAiB;;EAG1B,aAAmB;AACjB,WAAQ,QAAQ;;EAGlB,MAAM,qBAA6D;GACjE,MAAM,UAAU,sBAAsB,WAAW,iBAAiB;AAClE,UAAO,IAAI,mBAAmB,QAAQ;;EAGxC,kBAAkB,UAAwB;AACxC,OAAI,CAAC,yBAAyB;AAC5B,8BAA0B;AAC1B,YAAQ,IAAI,yDAAyD,WAAW;;;EAIpF,MAAM,+BACJ,0BACA,qBACwB;GACxB,IAAI,iBAAiB;GACrB,IAAI,YAAY;GAChB,IAAIA;GACJ,IAAIC;AAEJ,OAAI;IACF,MAAM,oBAAoB,iBAAiB;AAM3C,QAFE,QAAQ,yBAAyB,IAAI,6BAA6B,mBAAmB,kBAEzD,mBAAmB;AAE/C,SAAI;AACF,YAAM,uBAAuB,UAAU,KAAK,oBAAoB,EAAE;OAChE,UAAU,GAAG,kBAAkB,eAAe;OAC9C,gBAAgB,OAAU,KAAK;OAChC,CAAC;aACI;AAIR,4BAAuB,IAAI;MACzB,UAAU,GAAG,kBAAkB,eAAe;MAC9C,KAAK,2BAA2B;MACjC,CAAC;AAEF,YAAO;MAAE;MAAgB;MAAW;MAAU;MAAY;;AAI5D,QAAI,CAAC,kBAAkB,CAAC,WAAW;KACjC,MAAMC,aAA4C,MAAM,KAAK,iBAAiB;AAE9E,SAAI,YAAY;AACd,uBAAiB,WAAW;AAC5B,kBAAY,WAAW;AACvB,iBAAW,WAAW;AACtB,mBAAa,WAAW;AAExB,6BAAuB,IAAI;OACzB,UAAU,WAAW;OACrB,KAAK,yBAAyB,WAAW;OAC1C,CAAC;;;WAGA;AAIR,UAAO;IAAE;IAAgB;IAAW;IAAU;IAAY;;EAE7D;;;;;;;;;;;;;;ACzQH,eAAsB,+BACpB,0BACA,qBACA,gBACA,eACwB;CACxB,IAAI,iBAAiB;CACrB,IAAI,YAAY;CAChB,IAAIC;CACJ,IAAIC;AAEJ,KAAI,CAAC,cACH,QAAO;EAAE;EAAgB;EAAW;EAAU;EAAY;AAG5D,KAAI,CAAC,eACH,QAAO;EAAE;EAAgB;EAAW;EAAU;EAAY;AAG5D,KAAI;EACF,MAAM,oBAAoB,eAAe,UAAU;AAMnD,MAFE,QAAQ,yBAAyB,IAAI,6BAA6B,mBAAmB,kBAEzD,mBAAmB;AAE/C,OAAI;AACF,UAAM,uBAAuB,UAAU,eAAe,oBAAoB,EAAE;KAC1E,UAAU,GAAG,kBAAkB,eAAe;KAC9C,gBAAgB,OAAU,KAAK;KAChC,CAAC;WACI;AAIR,0BAAuB,IAAI;IACzB,UAAU,GAAG,kBAAkB,eAAe;IAC9C,KAAK,2BAA2B;IACjC,CAAC;AAEF,UAAO;IAAE;IAAgB;IAAW;IAAU;IAAY;;AAI5D,MAAI,CAAC,kBAAkB,CAAC,WAAW;GACjC,MAAMC,aAA4C,MAAM,eAAe,iBAAiB;AAExF,OAAI,YAAY;AACd,qBAAiB,WAAW;AAC5B,gBAAY,WAAW;AACvB,eAAW,WAAW;AACtB,iBAAa,WAAW;AAExB,2BAAuB,IAAI;KACzB,UAAU,WAAW;KACrB,KAAK,yBAAyB,WAAW;KAC1C,CAAC;;;SAGA;AAIR,QAAO;EAAE;EAAgB;EAAW;EAAU;EAAY"}

package/node_modules/@clerk/shared/dist/runtime/keys-BI9hmfja.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys-BI9hmfja.js","names":["LEGACY_DEV_INSTANCE_SUFFIXES","isomorphicBtoa","decodedFrontendApi: string","isomorphicAtob","DEV_OR_STAGING_SUFFIXES"],"sources":["../../src/keys.ts"],"sourcesContent":["import { DEV_OR_STAGING_SUFFIXES, LEGACY_DEV_INSTANCE_SUFFIXES } from './constants';\nimport { isomorphicAtob } from './isomorphicAtob';\nimport { isomorphicBtoa } from './isomorphicBtoa';\nimport type { PublishableKey } from './types';\n\n/**\n * Configuration options for parsing publishable keys.\n */\ntype ParsePublishableKeyOptions = {\n  /** Whether to throw an error if parsing fails */\n  fatal?: boolean;\n  /** Custom domain to use for satellite instances */\n  domain?: string;\n  /** Proxy URL to use instead of the decoded frontend API */\n  proxyUrl?: string;\n  /** Whether this is a satellite instance */\n  isSatellite?: boolean;\n};\n\n/** Prefix used for production publishable keys */\nconst PUBLISHABLE_KEY_LIVE_PREFIX = 'pk_live_';\n\n/** Prefix used for development publishable keys */\nconst PUBLISHABLE_KEY_TEST_PREFIX = 'pk_test_';\n\n/**\n * Regular expression that matches development frontend API keys.\n * Matches patterns like: foo-bar-13.clerk.accounts.dev.\n */\nconst PUBLISHABLE_FRONTEND_API_DEV_REGEX = /^(([a-z]+)-){2}([0-9]{1,2})\\.clerk\\.accounts([a-z.]*)(dev|com)$/i;\n\n/**\n * Converts a frontend API URL into a base64-encoded publishable key.\n *\n * @param frontendApi - The frontend API URL (e.g., 'clerk.example.com').\n * @returns A base64-encoded publishable key with appropriate prefix (pk_live_ or pk_test_).\n */\nexport function buildPublishableKey(frontendApi: string): string {\n  const isDevKey =\n    PUBLISHABLE_FRONTEND_API_DEV_REGEX.test(frontendApi) ||\n    (frontendApi.startsWith('clerk.') && LEGACY_DEV_INSTANCE_SUFFIXES.some(s => frontendApi.endsWith(s)));\n  const keyPrefix = isDevKey ? PUBLISHABLE_KEY_TEST_PREFIX : PUBLISHABLE_KEY_LIVE_PREFIX;\n  return `${keyPrefix}${isomorphicBtoa(`${frontendApi}$`)}`;\n}\n\n/**\n * Validates that a decoded publishable key has the correct format.\n * The decoded value should be a frontend API followed by exactly one '$' at the end.\n *\n * @param decoded - The decoded publishable key string to validate.\n * @returns `true` if the decoded key has valid format, `false` otherwise.\n */\nfunction isValidDecodedPublishableKey(decoded: string): boolean {\n  if (!decoded.endsWith('$')) {\n    return false;\n  }\n\n  const withoutTrailing = decoded.slice(0, -1);\n  if (withoutTrailing.includes('$')) {\n    return false;\n  }\n\n  return withoutTrailing.includes('.');\n}\n\nexport function parsePublishableKey(\n  key: string | undefined,\n  options: ParsePublishableKeyOptions & { fatal: true },\n): PublishableKey;\nexport function parsePublishableKey(\n  key: string | undefined,\n  options?: ParsePublishableKeyOptions,\n): PublishableKey | null;\n/**\n * Parses and validates a publishable key, extracting the frontend API and instance type.\n *\n * @param key - The publishable key to parse.\n * @param options - Configuration options for parsing.\n * @param options.fatal\n * @param options.domain\n * @param options.proxyUrl\n * @param options.isSatellite\n * @returns Parsed publishable key object with instanceType and frontendApi, or null if invalid.\n *\n * @throws {Error} When options.fatal is true and key is missing or invalid.\n */\nexport function parsePublishableKey(\n  key: string | undefined,\n  options: { fatal?: boolean; domain?: string; proxyUrl?: string; isSatellite?: boolean } = {},\n): PublishableKey | null {\n  key = key || '';\n\n  if (!key || !isPublishableKey(key)) {\n    if (options.fatal && !key) {\n      throw new Error(\n        'Publishable key is missing. Ensure that your publishable key is correctly configured. Double-check your environment configuration for your keys, or access them here: https://dashboard.clerk.com/last-active?path=api-keys',\n      );\n    }\n    if (options.fatal && !isPublishableKey(key)) {\n      throw new Error('Publishable key not valid.');\n    }\n    return null;\n  }\n\n  const instanceType = key.startsWith(PUBLISHABLE_KEY_LIVE_PREFIX) ? 'production' : 'development';\n\n  let decodedFrontendApi: string;\n  try {\n    decodedFrontendApi = isomorphicAtob(key.split('_')[2]);\n  } catch {\n    if (options.fatal) {\n      throw new Error('Publishable key not valid: Failed to decode key.');\n    }\n    return null;\n  }\n\n  if (!isValidDecodedPublishableKey(decodedFrontendApi)) {\n    if (options.fatal) {\n      throw new Error('Publishable key not valid: Decoded key has invalid format.');\n    }\n    return null;\n  }\n\n  let frontendApi = decodedFrontendApi.slice(0, -1);\n\n  if (options.proxyUrl) {\n    frontendApi = options.proxyUrl;\n  } else if (instanceType !== 'development' && options.domain && options.isSatellite) {\n    frontendApi = `clerk.${options.domain}`;\n  }\n\n  return {\n    instanceType,\n    frontendApi,\n  };\n}\n\n/**\n * Checks if the provided key is a valid publishable key.\n *\n * @param key - The key to be checked. Defaults to an empty string if not provided.\n * @returns `true` if 'key' is a valid publishable key, `false` otherwise.\n */\nexport function isPublishableKey(key: string = '') {\n  try {\n    const hasValidPrefix = key.startsWith(PUBLISHABLE_KEY_LIVE_PREFIX) || key.startsWith(PUBLISHABLE_KEY_TEST_PREFIX);\n\n    if (!hasValidPrefix) {\n      return false;\n    }\n\n    const parts = key.split('_');\n    if (parts.length !== 3) {\n      return false;\n    }\n\n    const encodedPart = parts[2];\n    if (!encodedPart) {\n      return false;\n    }\n\n    const decoded = isomorphicAtob(encodedPart);\n    return isValidDecodedPublishableKey(decoded);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Creates a memoized cache for checking if URLs are development or staging environments.\n * Uses a Map to cache results for better performance on repeated checks.\n *\n * @returns An object with an isDevOrStagingUrl method that checks if a URL is dev/staging.\n */\nexport function createDevOrStagingUrlCache() {\n  const devOrStagingUrlCache = new Map<string, boolean>();\n\n  return {\n    /**\n     * Checks if a URL is a development or staging environment.\n     *\n     * @param url - The URL to check (string or URL object).\n     * @returns `true` if the URL is a development or staging environment, `false` otherwise.\n     */\n    isDevOrStagingUrl: (url: string | URL): boolean => {\n      if (!url) {\n        return false;\n      }\n\n      const hostname = typeof url === 'string' ? url : url.hostname;\n      let res = devOrStagingUrlCache.get(hostname);\n      if (res === undefined) {\n        res = DEV_OR_STAGING_SUFFIXES.some(s => hostname.endsWith(s));\n        devOrStagingUrlCache.set(hostname, res);\n      }\n      return res;\n    },\n  };\n}\n\n/**\n * Checks if a publishable key is for a development environment.\n * Supports both legacy format (test_) and new format (pk_test_).\n *\n * @param apiKey - The API key to check.\n * @returns `true` if the key is for development, `false` otherwise.\n */\nexport function isDevelopmentFromPublishableKey(apiKey: string): boolean {\n  return apiKey.startsWith('test_') || apiKey.startsWith('pk_test_');\n}\n\n/**\n * Checks if a publishable key is for a production environment.\n * Supports both legacy format (live_) and new format (pk_live_).\n *\n * @param apiKey - The API key to check.\n * @returns `true` if the key is for production, `false` otherwise.\n */\nexport function isProductionFromPublishableKey(apiKey: string): boolean {\n  return apiKey.startsWith('live_') || apiKey.startsWith('pk_live_');\n}\n\n/**\n * Checks if a secret key is for a development environment.\n * Supports both legacy format (test_) and new format (sk_test_).\n *\n * @param apiKey - The secret key to check.\n * @returns `true` if the key is for development, `false` otherwise.\n */\nexport function isDevelopmentFromSecretKey(apiKey: string): boolean {\n  return apiKey.startsWith('test_') || apiKey.startsWith('sk_test_');\n}\n\n/**\n * Checks if a secret key is for a production environment.\n * Supports both legacy format (live_) and new format (sk_live_).\n *\n * @param apiKey - The secret key to check.\n * @returns `true` if the key is for production, `false` otherwise.\n */\nexport function isProductionFromSecretKey(apiKey: string): boolean {\n  return apiKey.startsWith('live_') || apiKey.startsWith('sk_live_');\n}\n\n/**\n * Generates a unique cookie suffix based on the publishable key using SHA-1 hashing.\n * The suffix is base64-encoded and URL-safe (+ and / characters are replaced).\n *\n * @param publishableKey - The publishable key to generate suffix from.\n * @param subtle - The SubtleCrypto interface to use for hashing (defaults to globalThis.crypto.subtle).\n * @returns A promise that resolves to an 8-character URL-safe base64 string.\n */\nexport async function getCookieSuffix(\n  publishableKey: string,\n  subtle: SubtleCrypto = globalThis.crypto.subtle,\n): Promise<string> {\n  const data = new TextEncoder().encode(publishableKey);\n  const digest = await subtle.digest('sha-1', data);\n  const stringDigest = String.fromCharCode(...new Uint8Array(digest));\n  // Base 64 Encoding with URL and Filename Safe Alphabet: https://datatracker.ietf.org/doc/html/rfc4648#section-5\n  return isomorphicBtoa(stringDigest).replace(/\\+/gi, '-').replace(/\\//gi, '_').substring(0, 8);\n}\n\n/**\n * Creates a suffixed cookie name by appending the cookie suffix to the base name.\n * Used to create unique cookie names based on the publishable key.\n *\n * @param cookieName - The base cookie name.\n * @param cookieSuffix - The suffix to append (typically generated by getCookieSuffix).\n * @returns The suffixed cookie name in format: `${cookieName}_${cookieSuffix}`.\n */\nexport const getSuffixedCookieName = (cookieName: string, cookieSuffix: string): string => {\n  return `${cookieName}_${cookieSuffix}`;\n};\n"],"mappings":";;;;;;AAoBA,MAAM,8BAA8B;;AAGpC,MAAM,8BAA8B;;;;;AAMpC,MAAM,qCAAqC;;;;;;;AAQ3C,SAAgB,oBAAoB,aAA6B;AAK/D,QAAO,GAHL,mCAAmC,KAAK,YAAY,IACnD,YAAY,WAAW,SAAS,IAAIA,+CAA6B,MAAK,MAAK,YAAY,SAAS,EAAE,CAAC,GACzE,8BAA8B,8BACrCC,sCAAe,GAAG,YAAY,GAAG;;;;;;;;;AAUzD,SAAS,6BAA6B,SAA0B;AAC9D,KAAI,CAAC,QAAQ,SAAS,IAAI,CACxB,QAAO;CAGT,MAAM,kBAAkB,QAAQ,MAAM,GAAG,GAAG;AAC5C,KAAI,gBAAgB,SAAS,IAAI,CAC/B,QAAO;AAGT,QAAO,gBAAgB,SAAS,IAAI;;;;;;;;;;;;;;;AAwBtC,SAAgB,oBACd,KACA,UAA0F,EAAE,EACrE;AACvB,OAAM,OAAO;AAEb,KAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE;AAClC,MAAI,QAAQ,SAAS,CAAC,IACpB,OAAM,IAAI,MACR,8NACD;AAEH,MAAI,QAAQ,SAAS,CAAC,iBAAiB,IAAI,CACzC,OAAM,IAAI,MAAM,6BAA6B;AAE/C,SAAO;;CAGT,MAAM,eAAe,IAAI,WAAW,4BAA4B,GAAG,eAAe;CAElF,IAAIC;AACJ,KAAI;AACF,uBAAqBC,sCAAe,IAAI,MAAM,IAAI,CAAC,GAAG;SAChD;AACN,MAAI,QAAQ,MACV,OAAM,IAAI,MAAM,mDAAmD;AAErE,SAAO;;AAGT,KAAI,CAAC,6BAA6B,mBAAmB,EAAE;AACrD,MAAI,QAAQ,MACV,OAAM,IAAI,MAAM,6DAA6D;AAE/E,SAAO;;CAGT,IAAI,cAAc,mBAAmB,MAAM,GAAG,GAAG;AAEjD,KAAI,QAAQ,SACV,eAAc,QAAQ;UACb,iBAAiB,iBAAiB,QAAQ,UAAU,QAAQ,YACrE,eAAc,SAAS,QAAQ;AAGjC,QAAO;EACL;EACA;EACD;;;;;;;;AASH,SAAgB,iBAAiB,MAAc,IAAI;AACjD,KAAI;AAGF,MAAI,EAFmB,IAAI,WAAW,4BAA4B,IAAI,IAAI,WAAW,4BAA4B,EAG/G,QAAO;EAGT,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAI,MAAM,WAAW,EACnB,QAAO;EAGT,MAAM,cAAc,MAAM;AAC1B,MAAI,CAAC,YACH,QAAO;AAIT,SAAO,6BADSA,sCAAe,YAAY,CACC;SACtC;AACN,SAAO;;;;;;;;;AAUX,SAAgB,6BAA6B;CAC3C,MAAM,uCAAuB,IAAI,KAAsB;AAEvD,QAAO,EAOL,oBAAoB,QAA+B;AACjD,MAAI,CAAC,IACH,QAAO;EAGT,MAAM,WAAW,OAAO,QAAQ,WAAW,MAAM,IAAI;EACrD,IAAI,MAAM,qBAAqB,IAAI,SAAS;AAC5C,MAAI,QAAQ,QAAW;AACrB,SAAMC,0CAAwB,MAAK,MAAK,SAAS,SAAS,EAAE,CAAC;AAC7D,wBAAqB,IAAI,UAAU,IAAI;;AAEzC,SAAO;IAEV;;;;;;;;;AAUH,SAAgB,gCAAgC,QAAyB;AACvE,QAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,WAAW,WAAW;;;;;;;;;AAUpE,SAAgB,+BAA+B,QAAyB;AACtE,QAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,WAAW,WAAW;;;;;;;;;AAUpE,SAAgB,2BAA2B,QAAyB;AAClE,QAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,WAAW,WAAW;;;;;;;;;AAUpE,SAAgB,0BAA0B,QAAyB;AACjE,QAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,WAAW,WAAW;;;;;;;;;;AAWpE,eAAsB,gBACpB,gBACA,SAAuB,WAAW,OAAO,QACxB;CACjB,MAAM,OAAO,IAAI,aAAa,CAAC,OAAO,eAAe;CACrD,MAAM,SAAS,MAAM,OAAO,OAAO,SAAS,KAAK;AAGjD,QAAOH,sCAFc,OAAO,aAAa,GAAG,IAAI,WAAW,OAAO,CAAC,CAEhC,CAAC,QAAQ,QAAQ,IAAI,CAAC,QAAQ,QAAQ,IAAI,CAAC,UAAU,GAAG,EAAE;;;;;;;;;;AAW/F,MAAa,yBAAyB,YAAoB,iBAAiC;AACzF,QAAO,GAAG,WAAW,GAAG"}

package/node_modules/@clerk/shared/dist/runtime/keys-DuxzP8MU.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys-DuxzP8MU.mjs","names":["decodedFrontendApi: string"],"sources":["../../src/keys.ts"],"sourcesContent":["import { DEV_OR_STAGING_SUFFIXES, LEGACY_DEV_INSTANCE_SUFFIXES } from './constants';\nimport { isomorphicAtob } from './isomorphicAtob';\nimport { isomorphicBtoa } from './isomorphicBtoa';\nimport type { PublishableKey } from './types';\n\n/**\n * Configuration options for parsing publishable keys.\n */\ntype ParsePublishableKeyOptions = {\n  /** Whether to throw an error if parsing fails */\n  fatal?: boolean;\n  /** Custom domain to use for satellite instances */\n  domain?: string;\n  /** Proxy URL to use instead of the decoded frontend API */\n  proxyUrl?: string;\n  /** Whether this is a satellite instance */\n  isSatellite?: boolean;\n};\n\n/** Prefix used for production publishable keys */\nconst PUBLISHABLE_KEY_LIVE_PREFIX = 'pk_live_';\n\n/** Prefix used for development publishable keys */\nconst PUBLISHABLE_KEY_TEST_PREFIX = 'pk_test_';\n\n/**\n * Regular expression that matches development frontend API keys.\n * Matches patterns like: foo-bar-13.clerk.accounts.dev.\n */\nconst PUBLISHABLE_FRONTEND_API_DEV_REGEX = /^(([a-z]+)-){2}([0-9]{1,2})\\.clerk\\.accounts([a-z.]*)(dev|com)$/i;\n\n/**\n * Converts a frontend API URL into a base64-encoded publishable key.\n *\n * @param frontendApi - The frontend API URL (e.g., 'clerk.example.com').\n * @returns A base64-encoded publishable key with appropriate prefix (pk_live_ or pk_test_).\n */\nexport function buildPublishableKey(frontendApi: string): string {\n  const isDevKey =\n    PUBLISHABLE_FRONTEND_API_DEV_REGEX.test(frontendApi) ||\n    (frontendApi.startsWith('clerk.') && LEGACY_DEV_INSTANCE_SUFFIXES.some(s => frontendApi.endsWith(s)));\n  const keyPrefix = isDevKey ? PUBLISHABLE_KEY_TEST_PREFIX : PUBLISHABLE_KEY_LIVE_PREFIX;\n  return `${keyPrefix}${isomorphicBtoa(`${frontendApi}$`)}`;\n}\n\n/**\n * Validates that a decoded publishable key has the correct format.\n * The decoded value should be a frontend API followed by exactly one '$' at the end.\n *\n * @param decoded - The decoded publishable key string to validate.\n * @returns `true` if the decoded key has valid format, `false` otherwise.\n */\nfunction isValidDecodedPublishableKey(decoded: string): boolean {\n  if (!decoded.endsWith('$')) {\n    return false;\n  }\n\n  const withoutTrailing = decoded.slice(0, -1);\n  if (withoutTrailing.includes('$')) {\n    return false;\n  }\n\n  return withoutTrailing.includes('.');\n}\n\nexport function parsePublishableKey(\n  key: string | undefined,\n  options: ParsePublishableKeyOptions & { fatal: true },\n): PublishableKey;\nexport function parsePublishableKey(\n  key: string | undefined,\n  options?: ParsePublishableKeyOptions,\n): PublishableKey | null;\n/**\n * Parses and validates a publishable key, extracting the frontend API and instance type.\n *\n * @param key - The publishable key to parse.\n * @param options - Configuration options for parsing.\n * @param options.fatal\n * @param options.domain\n * @param options.proxyUrl\n * @param options.isSatellite\n * @returns Parsed publishable key object with instanceType and frontendApi, or null if invalid.\n *\n * @throws {Error} When options.fatal is true and key is missing or invalid.\n */\nexport function parsePublishableKey(\n  key: string | undefined,\n  options: { fatal?: boolean; domain?: string; proxyUrl?: string; isSatellite?: boolean } = {},\n): PublishableKey | null {\n  key = key || '';\n\n  if (!key || !isPublishableKey(key)) {\n    if (options.fatal && !key) {\n      throw new Error(\n        'Publishable key is missing. Ensure that your publishable key is correctly configured. Double-check your environment configuration for your keys, or access them here: https://dashboard.clerk.com/last-active?path=api-keys',\n      );\n    }\n    if (options.fatal && !isPublishableKey(key)) {\n      throw new Error('Publishable key not valid.');\n    }\n    return null;\n  }\n\n  const instanceType = key.startsWith(PUBLISHABLE_KEY_LIVE_PREFIX) ? 'production' : 'development';\n\n  let decodedFrontendApi: string;\n  try {\n    decodedFrontendApi = isomorphicAtob(key.split('_')[2]);\n  } catch {\n    if (options.fatal) {\n      throw new Error('Publishable key not valid: Failed to decode key.');\n    }\n    return null;\n  }\n\n  if (!isValidDecodedPublishableKey(decodedFrontendApi)) {\n    if (options.fatal) {\n      throw new Error('Publishable key not valid: Decoded key has invalid format.');\n    }\n    return null;\n  }\n\n  let frontendApi = decodedFrontendApi.slice(0, -1);\n\n  if (options.proxyUrl) {\n    frontendApi = options.proxyUrl;\n  } else if (instanceType !== 'development' && options.domain && options.isSatellite) {\n    frontendApi = `clerk.${options.domain}`;\n  }\n\n  return {\n    instanceType,\n    frontendApi,\n  };\n}\n\n/**\n * Checks if the provided key is a valid publishable key.\n *\n * @param key - The key to be checked. Defaults to an empty string if not provided.\n * @returns `true` if 'key' is a valid publishable key, `false` otherwise.\n */\nexport function isPublishableKey(key: string = '') {\n  try {\n    const hasValidPrefix = key.startsWith(PUBLISHABLE_KEY_LIVE_PREFIX) || key.startsWith(PUBLISHABLE_KEY_TEST_PREFIX);\n\n    if (!hasValidPrefix) {\n      return false;\n    }\n\n    const parts = key.split('_');\n    if (parts.length !== 3) {\n      return false;\n    }\n\n    const encodedPart = parts[2];\n    if (!encodedPart) {\n      return false;\n    }\n\n    const decoded = isomorphicAtob(encodedPart);\n    return isValidDecodedPublishableKey(decoded);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Creates a memoized cache for checking if URLs are development or staging environments.\n * Uses a Map to cache results for better performance on repeated checks.\n *\n * @returns An object with an isDevOrStagingUrl method that checks if a URL is dev/staging.\n */\nexport function createDevOrStagingUrlCache() {\n  const devOrStagingUrlCache = new Map<string, boolean>();\n\n  return {\n    /**\n     * Checks if a URL is a development or staging environment.\n     *\n     * @param url - The URL to check (string or URL object).\n     * @returns `true` if the URL is a development or staging environment, `false` otherwise.\n     */\n    isDevOrStagingUrl: (url: string | URL): boolean => {\n      if (!url) {\n        return false;\n      }\n\n      const hostname = typeof url === 'string' ? url : url.hostname;\n      let res = devOrStagingUrlCache.get(hostname);\n      if (res === undefined) {\n        res = DEV_OR_STAGING_SUFFIXES.some(s => hostname.endsWith(s));\n        devOrStagingUrlCache.set(hostname, res);\n      }\n      return res;\n    },\n  };\n}\n\n/**\n * Checks if a publishable key is for a development environment.\n * Supports both legacy format (test_) and new format (pk_test_).\n *\n * @param apiKey - The API key to check.\n * @returns `true` if the key is for development, `false` otherwise.\n */\nexport function isDevelopmentFromPublishableKey(apiKey: string): boolean {\n  return apiKey.startsWith('test_') || apiKey.startsWith('pk_test_');\n}\n\n/**\n * Checks if a publishable key is for a production environment.\n * Supports both legacy format (live_) and new format (pk_live_).\n *\n * @param apiKey - The API key to check.\n * @returns `true` if the key is for production, `false` otherwise.\n */\nexport function isProductionFromPublishableKey(apiKey: string): boolean {\n  return apiKey.startsWith('live_') || apiKey.startsWith('pk_live_');\n}\n\n/**\n * Checks if a secret key is for a development environment.\n * Supports both legacy format (test_) and new format (sk_test_).\n *\n * @param apiKey - The secret key to check.\n * @returns `true` if the key is for development, `false` otherwise.\n */\nexport function isDevelopmentFromSecretKey(apiKey: string): boolean {\n  return apiKey.startsWith('test_') || apiKey.startsWith('sk_test_');\n}\n\n/**\n * Checks if a secret key is for a production environment.\n * Supports both legacy format (live_) and new format (sk_live_).\n *\n * @param apiKey - The secret key to check.\n * @returns `true` if the key is for production, `false` otherwise.\n */\nexport function isProductionFromSecretKey(apiKey: string): boolean {\n  return apiKey.startsWith('live_') || apiKey.startsWith('sk_live_');\n}\n\n/**\n * Generates a unique cookie suffix based on the publishable key using SHA-1 hashing.\n * The suffix is base64-encoded and URL-safe (+ and / characters are replaced).\n *\n * @param publishableKey - The publishable key to generate suffix from.\n * @param subtle - The SubtleCrypto interface to use for hashing (defaults to globalThis.crypto.subtle).\n * @returns A promise that resolves to an 8-character URL-safe base64 string.\n */\nexport async function getCookieSuffix(\n  publishableKey: string,\n  subtle: SubtleCrypto = globalThis.crypto.subtle,\n): Promise<string> {\n  const data = new TextEncoder().encode(publishableKey);\n  const digest = await subtle.digest('sha-1', data);\n  const stringDigest = String.fromCharCode(...new Uint8Array(digest));\n  // Base 64 Encoding with URL and Filename Safe Alphabet: https://datatracker.ietf.org/doc/html/rfc4648#section-5\n  return isomorphicBtoa(stringDigest).replace(/\\+/gi, '-').replace(/\\//gi, '_').substring(0, 8);\n}\n\n/**\n * Creates a suffixed cookie name by appending the cookie suffix to the base name.\n * Used to create unique cookie names based on the publishable key.\n *\n * @param cookieName - The base cookie name.\n * @param cookieSuffix - The suffix to append (typically generated by getCookieSuffix).\n * @returns The suffixed cookie name in format: `${cookieName}_${cookieSuffix}`.\n */\nexport const getSuffixedCookieName = (cookieName: string, cookieSuffix: string): string => {\n  return `${cookieName}_${cookieSuffix}`;\n};\n"],"mappings":";;;;;;AAoBA,MAAM,8BAA8B;;AAGpC,MAAM,8BAA8B;;;;;AAMpC,MAAM,qCAAqC;;;;;;;AAQ3C,SAAgB,oBAAoB,aAA6B;AAK/D,QAAO,GAHL,mCAAmC,KAAK,YAAY,IACnD,YAAY,WAAW,SAAS,IAAI,6BAA6B,MAAK,MAAK,YAAY,SAAS,EAAE,CAAC,GACzE,8BAA8B,8BACrC,eAAe,GAAG,YAAY,GAAG;;;;;;;;;AAUzD,SAAS,6BAA6B,SAA0B;AAC9D,KAAI,CAAC,QAAQ,SAAS,IAAI,CACxB,QAAO;CAGT,MAAM,kBAAkB,QAAQ,MAAM,GAAG,GAAG;AAC5C,KAAI,gBAAgB,SAAS,IAAI,CAC/B,QAAO;AAGT,QAAO,gBAAgB,SAAS,IAAI;;;;;;;;;;;;;;;AAwBtC,SAAgB,oBACd,KACA,UAA0F,EAAE,EACrE;AACvB,OAAM,OAAO;AAEb,KAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE;AAClC,MAAI,QAAQ,SAAS,CAAC,IACpB,OAAM,IAAI,MACR,8NACD;AAEH,MAAI,QAAQ,SAAS,CAAC,iBAAiB,IAAI,CACzC,OAAM,IAAI,MAAM,6BAA6B;AAE/C,SAAO;;CAGT,MAAM,eAAe,IAAI,WAAW,4BAA4B,GAAG,eAAe;CAElF,IAAIA;AACJ,KAAI;AACF,uBAAqB,eAAe,IAAI,MAAM,IAAI,CAAC,GAAG;SAChD;AACN,MAAI,QAAQ,MACV,OAAM,IAAI,MAAM,mDAAmD;AAErE,SAAO;;AAGT,KAAI,CAAC,6BAA6B,mBAAmB,EAAE;AACrD,MAAI,QAAQ,MACV,OAAM,IAAI,MAAM,6DAA6D;AAE/E,SAAO;;CAGT,IAAI,cAAc,mBAAmB,MAAM,GAAG,GAAG;AAEjD,KAAI,QAAQ,SACV,eAAc,QAAQ;UACb,iBAAiB,iBAAiB,QAAQ,UAAU,QAAQ,YACrE,eAAc,SAAS,QAAQ;AAGjC,QAAO;EACL;EACA;EACD;;;;;;;;AASH,SAAgB,iBAAiB,MAAc,IAAI;AACjD,KAAI;AAGF,MAAI,EAFmB,IAAI,WAAW,4BAA4B,IAAI,IAAI,WAAW,4BAA4B,EAG/G,QAAO;EAGT,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAI,MAAM,WAAW,EACnB,QAAO;EAGT,MAAM,cAAc,MAAM;AAC1B,MAAI,CAAC,YACH,QAAO;AAIT,SAAO,6BADS,eAAe,YAAY,CACC;SACtC;AACN,SAAO;;;;;;;;;AAUX,SAAgB,6BAA6B;CAC3C,MAAM,uCAAuB,IAAI,KAAsB;AAEvD,QAAO,EAOL,oBAAoB,QAA+B;AACjD,MAAI,CAAC,IACH,QAAO;EAGT,MAAM,WAAW,OAAO,QAAQ,WAAW,MAAM,IAAI;EACrD,IAAI,MAAM,qBAAqB,IAAI,SAAS;AAC5C,MAAI,QAAQ,QAAW;AACrB,SAAM,wBAAwB,MAAK,MAAK,SAAS,SAAS,EAAE,CAAC;AAC7D,wBAAqB,IAAI,UAAU,IAAI;;AAEzC,SAAO;IAEV;;;;;;;;;AAUH,SAAgB,gCAAgC,QAAyB;AACvE,QAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,WAAW,WAAW;;;;;;;;;AAUpE,SAAgB,+BAA+B,QAAyB;AACtE,QAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,WAAW,WAAW;;;;;;;;;AAUpE,SAAgB,2BAA2B,QAAyB;AAClE,QAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,WAAW,WAAW;;;;;;;;;AAUpE,SAAgB,0BAA0B,QAAyB;AACjE,QAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,WAAW,WAAW;;;;;;;;;;AAWpE,eAAsB,gBACpB,gBACA,SAAuB,WAAW,OAAO,QACxB;CACjB,MAAM,OAAO,IAAI,aAAa,CAAC,OAAO,eAAe;CACrD,MAAM,SAAS,MAAM,OAAO,OAAO,SAAS,KAAK;AAGjD,QAAO,eAFc,OAAO,aAAa,GAAG,IAAI,WAAW,OAAO,CAAC,CAEhC,CAAC,QAAQ,QAAQ,IAAI,CAAC,QAAQ,QAAQ,IAAI,CAAC,UAAU,GAAG,EAAE;;;;;;;;;;AAW/F,MAAa,yBAAyB,YAAoB,iBAAiC;AACzF,QAAO,GAAG,WAAW,GAAG"}

package/node_modules/@clerk/shared/dist/runtime/keys.d.mts

@@ -1,103 +0,0 @@
-import { h as PublishableKey } from "./index-Cc98l5ga.mjs";
-import "./moduleManager-BsmFyRrH.mjs";
-
-//#region src/keys.d.ts
-/**
- * Configuration options for parsing publishable keys.
- */
-type ParsePublishableKeyOptions = {
-  /** Whether to throw an error if parsing fails */
-  fatal?: boolean;
-  /** Custom domain to use for satellite instances */
-  domain?: string;
-  /** Proxy URL to use instead of the decoded frontend API */
-  proxyUrl?: string;
-  /** Whether this is a satellite instance */
-  isSatellite?: boolean;
-};
-/**
- * Converts a frontend API URL into a base64-encoded publishable key.
- *
- * @param frontendApi - The frontend API URL (e.g., 'clerk.example.com').
- * @returns A base64-encoded publishable key with appropriate prefix (pk_live_ or pk_test_).
- */
-declare function buildPublishableKey(frontendApi: string): string;
-declare function parsePublishableKey(key: string | undefined, options: ParsePublishableKeyOptions & {
-  fatal: true;
-}): PublishableKey;
-declare function parsePublishableKey(key: string | undefined, options?: ParsePublishableKeyOptions): PublishableKey | null;
-/**
- * Checks if the provided key is a valid publishable key.
- *
- * @param key - The key to be checked. Defaults to an empty string if not provided.
- * @returns `true` if 'key' is a valid publishable key, `false` otherwise.
- */
-declare function isPublishableKey(key?: string): boolean;
-/**
- * Creates a memoized cache for checking if URLs are development or staging environments.
- * Uses a Map to cache results for better performance on repeated checks.
- *
- * @returns An object with an isDevOrStagingUrl method that checks if a URL is dev/staging.
- */
-declare function createDevOrStagingUrlCache(): {
-  /**
-   * Checks if a URL is a development or staging environment.
-   *
-   * @param url - The URL to check (string or URL object).
-   * @returns `true` if the URL is a development or staging environment, `false` otherwise.
-   */
-  isDevOrStagingUrl: (url: string | URL) => boolean;
-};
-/**
- * Checks if a publishable key is for a development environment.
- * Supports both legacy format (test_) and new format (pk_test_).
- *
- * @param apiKey - The API key to check.
- * @returns `true` if the key is for development, `false` otherwise.
- */
-declare function isDevelopmentFromPublishableKey(apiKey: string): boolean;
-/**
- * Checks if a publishable key is for a production environment.
- * Supports both legacy format (live_) and new format (pk_live_).
- *
- * @param apiKey - The API key to check.
- * @returns `true` if the key is for production, `false` otherwise.
- */
-declare function isProductionFromPublishableKey(apiKey: string): boolean;
-/**
- * Checks if a secret key is for a development environment.
- * Supports both legacy format (test_) and new format (sk_test_).
- *
- * @param apiKey - The secret key to check.
- * @returns `true` if the key is for development, `false` otherwise.
- */
-declare function isDevelopmentFromSecretKey(apiKey: string): boolean;
-/**
- * Checks if a secret key is for a production environment.
- * Supports both legacy format (live_) and new format (sk_live_).
- *
- * @param apiKey - The secret key to check.
- * @returns `true` if the key is for production, `false` otherwise.
- */
-declare function isProductionFromSecretKey(apiKey: string): boolean;
-/**
- * Generates a unique cookie suffix based on the publishable key using SHA-1 hashing.
- * The suffix is base64-encoded and URL-safe (+ and / characters are replaced).
- *
- * @param publishableKey - The publishable key to generate suffix from.
- * @param subtle - The SubtleCrypto interface to use for hashing (defaults to globalThis.crypto.subtle).
- * @returns A promise that resolves to an 8-character URL-safe base64 string.
- */
-declare function getCookieSuffix(publishableKey: string, subtle?: SubtleCrypto): Promise<string>;
-/**
- * Creates a suffixed cookie name by appending the cookie suffix to the base name.
- * Used to create unique cookie names based on the publishable key.
- *
- * @param cookieName - The base cookie name.
- * @param cookieSuffix - The suffix to append (typically generated by getCookieSuffix).
- * @returns The suffixed cookie name in format: `${cookieName}_${cookieSuffix}`.
- */
-declare const getSuffixedCookieName: (cookieName: string, cookieSuffix: string) => string;
-//#endregion
-export { buildPublishableKey, createDevOrStagingUrlCache, getCookieSuffix, getSuffixedCookieName, isDevelopmentFromPublishableKey, isDevelopmentFromSecretKey, isProductionFromPublishableKey, isProductionFromSecretKey, isPublishableKey, parsePublishableKey };
-//# sourceMappingURL=keys.d.mts.map

package/node_modules/@clerk/shared/dist/runtime/keys.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.d.mts","names":[],"sources":["../../src/keys.ts"],"sourcesContent":[],"mappings":";;;;;;;AAG8C,KAKzC,0BAAA,GAA0B;EA6Bf;EA4BA,KAAA,CAAA,EAAA,OAAA;EAIA;EA0EA,MAAA,CAAA,EAAA,MAAA;EA+BA;EAiCA,QAAA,CAAA,EAAA,MAAA;EAWA;EAWA,WAAA,CAAA,EAAA,OAAA;AAWhB,CAAA;AAYA;AAmBA;;;;;iBA1OgB,mBAAA;iBA4BA,mBAAA,mCAEL;;IACR;iBACa,mBAAA,oCAEJ,6BACT;;;;;;;iBAuEa,gBAAA;;;;;;;iBA+BA,0BAAA,CAAA;;;;;;;oCAUsB;;;;;;;;;iBAuBtB,+BAAA;;;;;;;;iBAWA,8BAAA;;;;;;;;iBAWA,0BAAA;;;;;;;;iBAWA,yBAAA;;;;;;;;;iBAYM,eAAA,kCAEZ,eACP;;;;;;;;;cAgBU"}