@vibedeckx/linux-x64 0.1.16 → 0.1.19

package/node_modules/@clerk/backend/dist/util/rfc4648.d.ts

@@ -1,26 +0,0 @@
-/**
- * The base64url helper was extracted from the rfc4648 package
- * in order to resolve CSJ/ESM interoperability issues
- *
- * https://github.com/swansontec/rfc4648.js
- *
- * For more context please refer to:
- * - https://github.com/evanw/esbuild/issues/1719
- * - https://github.com/evanw/esbuild/issues/532
- * - https://github.com/swansontec/rollup-plugin-mjs-entry
- */
-export declare const base64url: {
-    parse(string: string, opts?: ParseOptions): Uint8Array;
-    stringify(data: ArrayLike<number>, opts?: StringifyOptions): string;
-};
-interface ParseOptions {
-    loose?: boolean;
-    out?: new (size: number) => {
-        [index: number]: number;
-    };
-}
-interface StringifyOptions {
-    pad?: boolean;
-}
-export {};
-//# sourceMappingURL=rfc4648.d.ts.map

package/node_modules/@clerk/backend/dist/util/rfc4648.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rfc4648.d.ts","sourceRoot":"","sources":["../../src/util/rfc4648.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,SAAS;kBACN,MAAM,SAAS,YAAY,GAAG,UAAU;oBAItC,SAAS,CAAC,MAAM,CAAC,SAAS,gBAAgB,GAAG,MAAM;CAGpE,CAAC;AAaF,UAAU,YAAY;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,MAAM,KAAK;QAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,UAAU,gBAAgB;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf"}

package/node_modules/@clerk/backend/dist/util/shared.d.ts

@@ -1,7 +0,0 @@
-export { deprecated, deprecatedProperty } from '@clerk/shared/deprecated';
-export { getCookieSuffix, getSuffixedCookieName, isDevelopmentFromSecretKey, isProductionFromSecretKey, parsePublishableKey, } from '@clerk/shared/keys';
-export { retry } from '@clerk/shared/retry';
-export { addClerkPrefix, getClerkJsMajorVersionOrTag, getScriptUrl } from '@clerk/shared/url';
-export declare const errorThrower: import("@clerk/shared/index-BK_NVS1t").rr;
-export declare const isDevOrStagingUrl: (url: string | URL) => boolean;
-//# sourceMappingURL=shared.d.ts.map

package/node_modules/@clerk/backend/dist/util/shared.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/util/shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,0BAA0B,EAC1B,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAK9F,eAAO,MAAM,YAAY,2CAAuD,CAAC;AAEjF,eAAO,MAAQ,iBAAiB,gCAAiC,CAAC"}

package/node_modules/@clerk/backend/dist/webhooks.d.ts

@@ -1,50 +0,0 @@
-import type { WebhookEvent } from './api/resources/Webhooks';
-/**
- * @inline
- */
-export type VerifyWebhookOptions = {
-    /**
-     * The signing secret for the webhook. It's recommended to use the [`CLERK_WEBHOOK_SIGNING_SECRET` environment variable](https://clerk.com/docs/guides/development/clerk-environment-variables#webhooks) instead.
-     */
-    signingSecret?: string;
-};
-export * from './api/resources/Webhooks';
-/**
- * Verifies the authenticity of a webhook request using Standard Webhooks. Returns a promise that resolves to the verified webhook event data.
- *
- * @param request - The request object.
- * @param options - Optional configuration object.
- *
- * @displayFunctionSignature
- * @hideReturns
- *
- * @example
- * See the [guide on syncing data](https://clerk.com/docs/guides/development/webhooks/syncing) for more comprehensive and framework-specific examples that you can copy and paste into your app.
- *
- * ```ts
- * import { verifyWebhook } from '@clerk/backend/webhooks'
- *
- * export async function POST(request: Request) {
- *   try {
- *     const evt = await verifyWebhook(request)
- *
- *     // Access the event data
- *     const { id } = evt.data
- *     const eventType = evt.type
- *
- *     // Handle specific event types
- *     if (evt.type === 'user.created') {
- *       console.log('New user created:', evt.data.id)
- *       // Handle user creation
- *     }
- *
- *     return new Response('Success', { status: 200 })
- *   } catch (err) {
- *     console.error('Webhook verification failed:', err)
- *     return new Response('Webhook verification failed', { status: 400 })
- *   }
- * }
- * ```
- */
-export declare function verifyWebhook(request: Request, options?: VerifyWebhookOptions): Promise<WebhookEvent>;
-//# sourceMappingURL=webhooks.d.ts.map

package/node_modules/@clerk/backend/dist/webhooks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAYF,cAAc,0BAA0B,CAAC;AA0BzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,CAoD/G"}

package/node_modules/@clerk/backend/dist/webhooks.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/webhooks.ts","../src/util/shared.ts"],"sourcesContent":["import { getEnvVariable } from '@clerk/shared/getEnvVariable';\nimport { errorThrower } from 'src/util/shared';\nimport { Webhook } from 'standardwebhooks';\n\nimport type { WebhookEvent } from './api/resources/Webhooks';\n\n/**\n * @inline\n */\nexport type VerifyWebhookOptions = {\n  /**\n   * The signing secret for the webhook. It's recommended to use the [`CLERK_WEBHOOK_SIGNING_SECRET` environment variable](https://clerk.com/docs/guides/development/clerk-environment-variables#webhooks) instead.\n   */\n  signingSecret?: string;\n};\n\n// Standard Webhooks header names\nconst STANDARD_WEBHOOK_ID_HEADER = 'webhook-id';\nconst STANDARD_WEBHOOK_TIMESTAMP_HEADER = 'webhook-timestamp';\nconst STANDARD_WEBHOOK_SIGNATURE_HEADER = 'webhook-signature';\n\n// Svix header names (for mapping)\nconst SVIX_ID_HEADER = 'svix-id';\nconst SVIX_TIMESTAMP_HEADER = 'svix-timestamp';\nconst SVIX_SIGNATURE_HEADER = 'svix-signature';\n\nexport * from './api/resources/Webhooks';\n\n/**\n * Maps Svix headers to Standard Webhooks headers for compatibility\n */\nfunction createStandardWebhookHeaders(request: Request): Record<string, string> {\n  const headers: Record<string, string> = {};\n\n  // Map Svix headers to Standard Webhooks headers\n  const svixId = request.headers.get(SVIX_ID_HEADER)?.trim();\n  const svixTimestamp = request.headers.get(SVIX_TIMESTAMP_HEADER)?.trim();\n  const svixSignature = request.headers.get(SVIX_SIGNATURE_HEADER)?.trim();\n\n  if (svixId) {\n    headers[STANDARD_WEBHOOK_ID_HEADER] = svixId;\n  }\n  if (svixTimestamp) {\n    headers[STANDARD_WEBHOOK_TIMESTAMP_HEADER] = svixTimestamp;\n  }\n  if (svixSignature) {\n    headers[STANDARD_WEBHOOK_SIGNATURE_HEADER] = svixSignature;\n  }\n\n  return headers;\n}\n\n/**\n * Verifies the authenticity of a webhook request using Standard Webhooks. Returns a promise that resolves to the verified webhook event data.\n *\n * @param request - The request object.\n * @param options - Optional configuration object.\n *\n * @displayFunctionSignature\n * @hideReturns\n *\n * @example\n * See the [guide on syncing data](https://clerk.com/docs/guides/development/webhooks/syncing) for more comprehensive and framework-specific examples that you can copy and paste into your app.\n *\n * ```ts\n * import { verifyWebhook } from '@clerk/backend/webhooks'\n *\n * export async function POST(request: Request) {\n *   try {\n *     const evt = await verifyWebhook(request)\n *\n *     // Access the event data\n *     const { id } = evt.data\n *     const eventType = evt.type\n *\n *     // Handle specific event types\n *     if (evt.type === 'user.created') {\n *       console.log('New user created:', evt.data.id)\n *       // Handle user creation\n *     }\n *\n *     return new Response('Success', { status: 200 })\n *   } catch (err) {\n *     console.error('Webhook verification failed:', err)\n *     return new Response('Webhook verification failed', { status: 400 })\n *   }\n * }\n * ```\n */\nexport async function verifyWebhook(request: Request, options: VerifyWebhookOptions = {}): Promise<WebhookEvent> {\n  const secret = options.signingSecret ?? getEnvVariable('CLERK_WEBHOOK_SIGNING_SECRET');\n\n  if (!secret) {\n    return errorThrower.throw(\n      'Missing webhook signing secret. Set the CLERK_WEBHOOK_SIGNING_SECRET environment variable with the webhook secret from the Clerk Dashboard.',\n    );\n  }\n\n  // Check for required Svix headers\n  const webhookId = request.headers.get(SVIX_ID_HEADER)?.trim();\n  const webhookTimestamp = request.headers.get(SVIX_TIMESTAMP_HEADER)?.trim();\n  const webhookSignature = request.headers.get(SVIX_SIGNATURE_HEADER)?.trim();\n\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    const missingHeaders = [];\n\n    if (!webhookId) {\n      missingHeaders.push(SVIX_ID_HEADER);\n    }\n    if (!webhookTimestamp) {\n      missingHeaders.push(SVIX_TIMESTAMP_HEADER);\n    }\n    if (!webhookSignature) {\n      missingHeaders.push(SVIX_SIGNATURE_HEADER);\n    }\n\n    return errorThrower.throw(`Missing required webhook headers: ${missingHeaders.join(', ')}`);\n  }\n\n  const body = await request.text();\n\n  // Create Standard Webhooks compatible headers mapping\n  const standardHeaders = createStandardWebhookHeaders(request);\n\n  // Initialize Standard Webhooks verifier\n  const webhook = new Webhook(secret);\n\n  try {\n    // Verify using Standard Webhooks - this provides constant-time comparison\n    // and proper signature format handling\n    const payload = webhook.verify(body, standardHeaders) as Record<string, unknown>;\n\n    return {\n      type: payload.type,\n      object: 'event',\n      data: payload.data,\n      event_attributes: payload.event_attributes,\n    } as WebhookEvent;\n  } catch (e) {\n    return errorThrower.throw(`Unable to verify incoming webhook: ${e instanceof Error ? e.message : 'Unknown error'}`);\n  }\n}\n","export { deprecated, deprecatedProperty } from '@clerk/shared/deprecated';\nexport {\n  getCookieSuffix,\n  getSuffixedCookieName,\n  isDevelopmentFromSecretKey,\n  isProductionFromSecretKey,\n  parsePublishableKey,\n} from '@clerk/shared/keys';\nexport { retry } from '@clerk/shared/retry';\nexport { addClerkPrefix, getClerkJsMajorVersionOrTag, getScriptUrl } from '@clerk/shared/url';\n\nimport { buildErrorThrower } from '@clerk/shared/error';\nimport { createDevOrStagingUrlCache } from '@clerk/shared/keys';\n// TODO: replace packageName with `${PACKAGE_NAME}@${PACKAGE_VERSION}` from tsup.config.ts\nexport const errorThrower = buildErrorThrower({ packageName: '@clerk/backend' });\n\nexport const { isDevOrStagingUrl } = createDevOrStagingUrlCache();\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4BAA+B;;;ACA/B,wBAA+C;AAC/C,kBAMO;AACP,mBAAsB;AACtB,iBAA0E;AAE1E,mBAAkC;AAClC,IAAAA,eAA2C;AAEpC,IAAM,mBAAe,gCAAkB,EAAE,aAAa,iBAAiB,CAAC;AAExE,IAAM,EAAE,kBAAkB,QAAI,yCAA2B;;;ADdhE,8BAAwB;AAexB,IAAM,6BAA6B;AACnC,IAAM,oCAAoC;AAC1C,IAAM,oCAAoC;AAG1C,IAAM,iBAAiB;AACvB,IAAM,wBAAwB;AAC9B,IAAM,wBAAwB;AAO9B,SAAS,6BAA6B,SAA0C;AAC9E,QAAM,UAAkC,CAAC;AAGzC,QAAM,SAAS,QAAQ,QAAQ,IAAI,cAAc,GAAG,KAAK;AACzD,QAAM,gBAAgB,QAAQ,QAAQ,IAAI,qBAAqB,GAAG,KAAK;AACvE,QAAM,gBAAgB,QAAQ,QAAQ,IAAI,qBAAqB,GAAG,KAAK;AAEvE,MAAI,QAAQ;AACV,YAAQ,0BAA0B,IAAI;AAAA,EACxC;AACA,MAAI,eAAe;AACjB,YAAQ,iCAAiC,IAAI;AAAA,EAC/C;AACA,MAAI,eAAe;AACjB,YAAQ,iCAAiC,IAAI;AAAA,EAC/C;AAEA,SAAO;AACT;AAuCA,eAAsB,cAAc,SAAkB,UAAgC,CAAC,GAA0B;AAC/G,QAAM,SAAS,QAAQ,qBAAiB,sCAAe,8BAA8B;AAErF,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAGA,QAAM,YAAY,QAAQ,QAAQ,IAAI,cAAc,GAAG,KAAK;AAC5D,QAAM,mBAAmB,QAAQ,QAAQ,IAAI,qBAAqB,GAAG,KAAK;AAC1E,QAAM,mBAAmB,QAAQ,QAAQ,IAAI,qBAAqB,GAAG,KAAK;AAE1E,MAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBAAkB;AACxD,UAAM,iBAAiB,CAAC;AAExB,QAAI,CAAC,WAAW;AACd,qBAAe,KAAK,cAAc;AAAA,IACpC;AACA,QAAI,CAAC,kBAAkB;AACrB,qBAAe,KAAK,qBAAqB;AAAA,IAC3C;AACA,QAAI,CAAC,kBAAkB;AACrB,qBAAe,KAAK,qBAAqB;AAAA,IAC3C;AAEA,WAAO,aAAa,MAAM,qCAAqC,eAAe,KAAK,IAAI,CAAC,EAAE;AAAA,EAC5F;AAEA,QAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,QAAM,kBAAkB,6BAA6B,OAAO;AAG5D,QAAM,UAAU,IAAI,gCAAQ,MAAM;AAElC,MAAI;AAGF,UAAM,UAAU,QAAQ,OAAO,MAAM,eAAe;AAEpD,WAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,QAAQ;AAAA,MACR,MAAM,QAAQ;AAAA,MACd,kBAAkB,QAAQ;AAAA,IAC5B;AAAA,EACF,SAAS,GAAG;AACV,WAAO,aAAa,MAAM,sCAAsC,aAAa,QAAQ,EAAE,UAAU,eAAe,EAAE;AAAA,EACpH;AACF;","names":["import_keys"]}

package/node_modules/@clerk/backend/dist/webhooks.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/webhooks.ts"],"sourcesContent":["import { getEnvVariable } from '@clerk/shared/getEnvVariable';\nimport { errorThrower } from 'src/util/shared';\nimport { Webhook } from 'standardwebhooks';\n\nimport type { WebhookEvent } from './api/resources/Webhooks';\n\n/**\n * @inline\n */\nexport type VerifyWebhookOptions = {\n  /**\n   * The signing secret for the webhook. It's recommended to use the [`CLERK_WEBHOOK_SIGNING_SECRET` environment variable](https://clerk.com/docs/guides/development/clerk-environment-variables#webhooks) instead.\n   */\n  signingSecret?: string;\n};\n\n// Standard Webhooks header names\nconst STANDARD_WEBHOOK_ID_HEADER = 'webhook-id';\nconst STANDARD_WEBHOOK_TIMESTAMP_HEADER = 'webhook-timestamp';\nconst STANDARD_WEBHOOK_SIGNATURE_HEADER = 'webhook-signature';\n\n// Svix header names (for mapping)\nconst SVIX_ID_HEADER = 'svix-id';\nconst SVIX_TIMESTAMP_HEADER = 'svix-timestamp';\nconst SVIX_SIGNATURE_HEADER = 'svix-signature';\n\nexport * from './api/resources/Webhooks';\n\n/**\n * Maps Svix headers to Standard Webhooks headers for compatibility\n */\nfunction createStandardWebhookHeaders(request: Request): Record<string, string> {\n  const headers: Record<string, string> = {};\n\n  // Map Svix headers to Standard Webhooks headers\n  const svixId = request.headers.get(SVIX_ID_HEADER)?.trim();\n  const svixTimestamp = request.headers.get(SVIX_TIMESTAMP_HEADER)?.trim();\n  const svixSignature = request.headers.get(SVIX_SIGNATURE_HEADER)?.trim();\n\n  if (svixId) {\n    headers[STANDARD_WEBHOOK_ID_HEADER] = svixId;\n  }\n  if (svixTimestamp) {\n    headers[STANDARD_WEBHOOK_TIMESTAMP_HEADER] = svixTimestamp;\n  }\n  if (svixSignature) {\n    headers[STANDARD_WEBHOOK_SIGNATURE_HEADER] = svixSignature;\n  }\n\n  return headers;\n}\n\n/**\n * Verifies the authenticity of a webhook request using Standard Webhooks. Returns a promise that resolves to the verified webhook event data.\n *\n * @param request - The request object.\n * @param options - Optional configuration object.\n *\n * @displayFunctionSignature\n * @hideReturns\n *\n * @example\n * See the [guide on syncing data](https://clerk.com/docs/guides/development/webhooks/syncing) for more comprehensive and framework-specific examples that you can copy and paste into your app.\n *\n * ```ts\n * import { verifyWebhook } from '@clerk/backend/webhooks'\n *\n * export async function POST(request: Request) {\n *   try {\n *     const evt = await verifyWebhook(request)\n *\n *     // Access the event data\n *     const { id } = evt.data\n *     const eventType = evt.type\n *\n *     // Handle specific event types\n *     if (evt.type === 'user.created') {\n *       console.log('New user created:', evt.data.id)\n *       // Handle user creation\n *     }\n *\n *     return new Response('Success', { status: 200 })\n *   } catch (err) {\n *     console.error('Webhook verification failed:', err)\n *     return new Response('Webhook verification failed', { status: 400 })\n *   }\n * }\n * ```\n */\nexport async function verifyWebhook(request: Request, options: VerifyWebhookOptions = {}): Promise<WebhookEvent> {\n  const secret = options.signingSecret ?? getEnvVariable('CLERK_WEBHOOK_SIGNING_SECRET');\n\n  if (!secret) {\n    return errorThrower.throw(\n      'Missing webhook signing secret. Set the CLERK_WEBHOOK_SIGNING_SECRET environment variable with the webhook secret from the Clerk Dashboard.',\n    );\n  }\n\n  // Check for required Svix headers\n  const webhookId = request.headers.get(SVIX_ID_HEADER)?.trim();\n  const webhookTimestamp = request.headers.get(SVIX_TIMESTAMP_HEADER)?.trim();\n  const webhookSignature = request.headers.get(SVIX_SIGNATURE_HEADER)?.trim();\n\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    const missingHeaders = [];\n\n    if (!webhookId) {\n      missingHeaders.push(SVIX_ID_HEADER);\n    }\n    if (!webhookTimestamp) {\n      missingHeaders.push(SVIX_TIMESTAMP_HEADER);\n    }\n    if (!webhookSignature) {\n      missingHeaders.push(SVIX_SIGNATURE_HEADER);\n    }\n\n    return errorThrower.throw(`Missing required webhook headers: ${missingHeaders.join(', ')}`);\n  }\n\n  const body = await request.text();\n\n  // Create Standard Webhooks compatible headers mapping\n  const standardHeaders = createStandardWebhookHeaders(request);\n\n  // Initialize Standard Webhooks verifier\n  const webhook = new Webhook(secret);\n\n  try {\n    // Verify using Standard Webhooks - this provides constant-time comparison\n    // and proper signature format handling\n    const payload = webhook.verify(body, standardHeaders) as Record<string, unknown>;\n\n    return {\n      type: payload.type,\n      object: 'event',\n      data: payload.data,\n      event_attributes: payload.event_attributes,\n    } as WebhookEvent;\n  } catch (e) {\n    return errorThrower.throw(`Unable to verify incoming webhook: ${e instanceof Error ? e.message : 'Unknown error'}`);\n  }\n}\n"],"mappings":";;;;;;AAAA,SAAS,sBAAsB;AAE/B,SAAS,eAAe;AAexB,IAAM,6BAA6B;AACnC,IAAM,oCAAoC;AAC1C,IAAM,oCAAoC;AAG1C,IAAM,iBAAiB;AACvB,IAAM,wBAAwB;AAC9B,IAAM,wBAAwB;AAO9B,SAAS,6BAA6B,SAA0C;AAC9E,QAAM,UAAkC,CAAC;AAGzC,QAAM,SAAS,QAAQ,QAAQ,IAAI,cAAc,GAAG,KAAK;AACzD,QAAM,gBAAgB,QAAQ,QAAQ,IAAI,qBAAqB,GAAG,KAAK;AACvE,QAAM,gBAAgB,QAAQ,QAAQ,IAAI,qBAAqB,GAAG,KAAK;AAEvE,MAAI,QAAQ;AACV,YAAQ,0BAA0B,IAAI;AAAA,EACxC;AACA,MAAI,eAAe;AACjB,YAAQ,iCAAiC,IAAI;AAAA,EAC/C;AACA,MAAI,eAAe;AACjB,YAAQ,iCAAiC,IAAI;AAAA,EAC/C;AAEA,SAAO;AACT;AAuCA,eAAsB,cAAc,SAAkB,UAAgC,CAAC,GAA0B;AAC/G,QAAM,SAAS,QAAQ,iBAAiB,eAAe,8BAA8B;AAErF,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAGA,QAAM,YAAY,QAAQ,QAAQ,IAAI,cAAc,GAAG,KAAK;AAC5D,QAAM,mBAAmB,QAAQ,QAAQ,IAAI,qBAAqB,GAAG,KAAK;AAC1E,QAAM,mBAAmB,QAAQ,QAAQ,IAAI,qBAAqB,GAAG,KAAK;AAE1E,MAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBAAkB;AACxD,UAAM,iBAAiB,CAAC;AAExB,QAAI,CAAC,WAAW;AACd,qBAAe,KAAK,cAAc;AAAA,IACpC;AACA,QAAI,CAAC,kBAAkB;AACrB,qBAAe,KAAK,qBAAqB;AAAA,IAC3C;AACA,QAAI,CAAC,kBAAkB;AACrB,qBAAe,KAAK,qBAAqB;AAAA,IAC3C;AAEA,WAAO,aAAa,MAAM,qCAAqC,eAAe,KAAK,IAAI,CAAC,EAAE;AAAA,EAC5F;AAEA,QAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,QAAM,kBAAkB,6BAA6B,OAAO;AAG5D,QAAM,UAAU,IAAI,QAAQ,MAAM;AAElC,MAAI;AAGF,UAAM,UAAU,QAAQ,OAAO,MAAM,eAAe;AAEpD,WAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,QAAQ;AAAA,MACR,MAAM,QAAQ;AAAA,MACd,kBAAkB,QAAQ;AAAA,IAC5B;AAAA,EACF,SAAS,GAAG;AACV,WAAO,aAAa,MAAM,sCAAsC,aAAa,QAAQ,EAAE,UAAU,eAAe,EAAE;AAAA,EACpH;AACF;","names":[]}

package/node_modules/@clerk/fastify/dist/chunk-RY4T2JMQ.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils.ts"],"sourcesContent":["import type { FastifyRequest } from 'fastify';\nimport { Readable } from 'stream';\n\nexport const fastifyRequestToRequest = (req: FastifyRequest): Request => {\n  const headers = new Headers(\n    Object.keys(req.headers).reduce((acc, key) => {\n      const value = req.headers[key];\n      if (!value) {\n        return acc;\n      }\n\n      if (typeof value === 'string') {\n        acc.set(key, value);\n      } else {\n        acc.set(key, value.join(','));\n      }\n      return acc;\n    }, new Headers()),\n  );\n\n  // Making some manual tests it seems that FastifyRequest populates the req protocol / hostname\n  // based on the forwarded headers. Nevertheless, we are gonna use a dummy base and the request\n  // will be fixed by the internals of the clerk/backend package\n  const dummyOriginReqUrl = new URL(req.url || '', `${req.protocol}://clerk-dummy`);\n  return new Request(dummyOriginReqUrl, {\n    method: req.method,\n    headers,\n  });\n};\n\n/**\n * Converts a Fastify request to a Fetch API Request with full headers and body streaming,\n * suitable for proxy forwarding.\n */\nexport const requestToProxyRequest = (req: FastifyRequest): Request => {\n  const headers = new Headers();\n  Object.entries(req.headers).forEach(([key, value]) => {\n    if (value) {\n      headers.set(key, Array.isArray(value) ? value.join(', ') : value);\n    }\n  });\n\n  const forwardedProto = req.headers['x-forwarded-proto'];\n  const protoHeader = Array.isArray(forwardedProto) ? forwardedProto[0] : forwardedProto;\n  const proto = (protoHeader || '').split(',')[0].trim();\n  const protocol = proto === 'https' || req.protocol === 'https' ? 'https' : 'http';\n\n  const forwardedHost = req.headers['x-forwarded-host'];\n  const hostHeader = Array.isArray(forwardedHost) ? forwardedHost[0] : forwardedHost;\n  const host = (hostHeader || '').split(',')[0].trim() || req.hostname || 'localhost';\n\n  const url = new URL(req.url || '', `${protocol}://${host}`);\n\n  const hasBody = ['POST', 'PUT', 'PATCH'].includes(req.method);\n\n  return new Request(url.toString(), {\n    method: req.method,\n    headers,\n    body: hasBody ? (Readable.toWeb(req.raw) as ReadableStream) : undefined,\n    // @ts-expect-error - duplex required for streaming bodies but not in all TS definitions\n    duplex: hasBody ? 'half' : undefined,\n  });\n};\n"],"mappings":";AACA,SAAS,gBAAgB;AAElB,IAAM,0BAA0B,CAAC,QAAiC;AACvE,QAAM,UAAU,IAAI;AAAA,IAClB,OAAO,KAAK,IAAI,OAAO,EAAE,OAAO,CAAC,KAAK,QAAQ;AAC5C,YAAM,QAAQ,IAAI,QAAQ,GAAG;AAC7B,UAAI,CAAC,OAAO;AACV,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,UAAU,UAAU;AAC7B,YAAI,IAAI,KAAK,KAAK;AAAA,MACpB,OAAO;AACL,YAAI,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC;AAAA,MAC9B;AACA,aAAO;AAAA,IACT,GAAG,IAAI,QAAQ,CAAC;AAAA,EAClB;AAKA,QAAM,oBAAoB,IAAI,IAAI,IAAI,OAAO,IAAI,GAAG,IAAI,QAAQ,gBAAgB;AAChF,SAAO,IAAI,QAAQ,mBAAmB;AAAA,IACpC,QAAQ,IAAI;AAAA,IACZ;AAAA,EACF,CAAC;AACH;AAMO,IAAM,wBAAwB,CAAC,QAAiC;AACrE,QAAM,UAAU,IAAI,QAAQ;AAC5B,SAAO,QAAQ,IAAI,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACpD,QAAI,OAAO;AACT,cAAQ,IAAI,KAAK,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK;AAAA,IAClE;AAAA,EACF,CAAC;AAED,QAAM,iBAAiB,IAAI,QAAQ,mBAAmB;AACtD,QAAM,cAAc,MAAM,QAAQ,cAAc,IAAI,eAAe,CAAC,IAAI;AACxE,QAAM,SAAS,eAAe,IAAI,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK;AACrD,QAAM,WAAW,UAAU,WAAW,IAAI,aAAa,UAAU,UAAU;AAE3E,QAAM,gBAAgB,IAAI,QAAQ,kBAAkB;AACpD,QAAM,aAAa,MAAM,QAAQ,aAAa,IAAI,cAAc,CAAC,IAAI;AACrE,QAAM,QAAQ,cAAc,IAAI,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,YAAY;AAExE,QAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,GAAG,QAAQ,MAAM,IAAI,EAAE;AAE1D,QAAM,UAAU,CAAC,QAAQ,OAAO,OAAO,EAAE,SAAS,IAAI,MAAM;AAE5D,SAAO,IAAI,QAAQ,IAAI,SAAS,GAAG;AAAA,IACjC,QAAQ,IAAI;AAAA,IACZ;AAAA,IACA,MAAM,UAAW,SAAS,MAAM,IAAI,GAAG,IAAuB;AAAA;AAAA,IAE9D,QAAQ,UAAU,SAAS;AAAA,EAC7B,CAAC;AACH;","names":[]}

package/node_modules/@clerk/fastify/dist/index-CWnSaB0B.d.mts

@@ -1,25 +0,0 @@
-import '@clerk/shared/types';
-import { ClerkOptions } from '@clerk/backend';
-import { ShouldProxyFn } from '@clerk/shared/proxy';
-
-declare const ALLOWED_HOOKS: readonly ["onRequest", "preHandler"];
-/**
- * Options for the built-in Frontend API proxy.
- *
- * When enabled, the middleware intercepts requests that match the proxy path
- * (default `/__clerk`) and forwards them to the Clerk Frontend API, allowing
- * the Clerk frontend SDKs to communicate with Clerk without third-party
- * cookie or ad-blocker issues.
- */
-interface FrontendApiProxyOptions {
-    /** Toggle the proxy on/off, or supply a function that decides per-request. */
-    enabled: boolean | ShouldProxyFn;
-    /** Custom path prefix for the proxy (default: `/__clerk`). */
-    path?: string;
-}
-type ClerkFastifyOptions = ClerkOptions & {
-    hookName?: (typeof ALLOWED_HOOKS)[number];
-    frontendApiProxy?: FrontendApiProxyOptions;
-};
-
-export type { ClerkFastifyOptions as C, FrontendApiProxyOptions as F };

package/node_modules/@clerk/fastify/dist/index-CWnSaB0B.d.ts

@@ -1,25 +0,0 @@
-import '@clerk/shared/types';
-import { ClerkOptions } from '@clerk/backend';
-import { ShouldProxyFn } from '@clerk/shared/proxy';
-
-declare const ALLOWED_HOOKS: readonly ["onRequest", "preHandler"];
-/**
- * Options for the built-in Frontend API proxy.
- *
- * When enabled, the middleware intercepts requests that match the proxy path
- * (default `/__clerk`) and forwards them to the Clerk Frontend API, allowing
- * the Clerk frontend SDKs to communicate with Clerk without third-party
- * cookie or ad-blocker issues.
- */
-interface FrontendApiProxyOptions {
-    /** Toggle the proxy on/off, or supply a function that decides per-request. */
-    enabled: boolean | ShouldProxyFn;
-    /** Custom path prefix for the proxy (default: `/__clerk`). */
-    path?: string;
-}
-type ClerkFastifyOptions = ClerkOptions & {
-    hookName?: (typeof ALLOWED_HOOKS)[number];
-    frontendApiProxy?: FrontendApiProxyOptions;
-};
-
-export type { ClerkFastifyOptions as C, FrontendApiProxyOptions as F };

package/node_modules/@clerk/fastify/dist/index.d.mts

@@ -1,16 +0,0 @@
-import * as _clerk_backend from '@clerk/backend';
-export * from '@clerk/backend';
-import { C as ClerkFastifyOptions } from './index-CWnSaB0B.mjs';
-export { F as FrontendApiProxyOptions } from './index-CWnSaB0B.mjs';
-import { FastifyPluginCallback, FastifyRequest } from 'fastify';
-import { GetAuthFn } from '@clerk/backend/internal';
-import '@clerk/shared/types';
-import '@clerk/shared/proxy';
-
-declare const clerkPlugin: FastifyPluginCallback<ClerkFastifyOptions>;
-
-declare const getAuth: GetAuthFn<FastifyRequest>;
-
-declare const clerkClient: _clerk_backend.ClerkClient;
-
-export { ClerkFastifyOptions, clerkClient, clerkPlugin, getAuth };

package/node_modules/@clerk/fastify/dist/index.d.ts

@@ -1,16 +0,0 @@
-import * as _clerk_backend from '@clerk/backend';
-export * from '@clerk/backend';
-import { C as ClerkFastifyOptions } from './index-CWnSaB0B.js';
-export { F as FrontendApiProxyOptions } from './index-CWnSaB0B.js';
-import { FastifyPluginCallback, FastifyRequest } from 'fastify';
-import { GetAuthFn } from '@clerk/backend/internal';
-import '@clerk/shared/types';
-import '@clerk/shared/proxy';
-
-declare const clerkPlugin: FastifyPluginCallback<ClerkFastifyOptions>;
-
-declare const getAuth: GetAuthFn<FastifyRequest>;
-
-declare const clerkClient: _clerk_backend.ClerkClient;
-
-export { ClerkFastifyOptions, clerkClient, clerkPlugin, getAuth };

package/node_modules/@clerk/fastify/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts","../src/clerkPlugin.ts","../src/types.ts","../src/withClerkMiddleware.ts","../src/clerkClient.ts","../src/constants.ts","../src/utils.ts","../src/getAuth.ts","../src/errors.ts"],"sourcesContent":["export * from '@clerk/backend';\n\nexport type { ClerkFastifyOptions, FrontendApiProxyOptions } from './types';\n\nexport { clerkPlugin } from './clerkPlugin';\nexport { getAuth } from './getAuth';\nexport { clerkClient } from './clerkClient';\n","import type { FastifyInstance, FastifyPluginCallback } from 'fastify';\nimport fp from 'fastify-plugin';\n\nimport type { ClerkFastifyOptions } from './types';\nimport { ALLOWED_HOOKS } from './types';\nimport { withClerkMiddleware } from './withClerkMiddleware';\n\nconst plugin: FastifyPluginCallback<ClerkFastifyOptions> = (\n  instance: FastifyInstance,\n  opts: ClerkFastifyOptions,\n  done,\n) => {\n  instance.decorateRequest('auth', null);\n  // run clerk as a middleware to all scoped routes\n  const hookName = opts.hookName || 'preHandler';\n  if (!ALLOWED_HOOKS.includes(hookName)) {\n    throw new Error(`Unsupported hookName: ${hookName}`);\n  }\n\n  instance.addHook(hookName, withClerkMiddleware(opts));\n\n  done();\n};\n\nexport const clerkPlugin = fp(plugin, {\n  name: '@clerk/fastify',\n  fastify: '5.x',\n});\n","import type { ClerkOptions } from '@clerk/backend';\nimport type { ShouldProxyFn } from '@clerk/shared/proxy';\n\nexport const ALLOWED_HOOKS = ['onRequest', 'preHandler'] as const;\n\n/**\n * Options for the built-in Frontend API proxy.\n *\n * When enabled, the middleware intercepts requests that match the proxy path\n * (default `/__clerk`) and forwards them to the Clerk Frontend API, allowing\n * the Clerk frontend SDKs to communicate with Clerk without third-party\n * cookie or ad-blocker issues.\n */\nexport interface FrontendApiProxyOptions {\n  /** Toggle the proxy on/off, or supply a function that decides per-request. */\n  enabled: boolean | ShouldProxyFn;\n  /** Custom path prefix for the proxy (default: `/__clerk`). */\n  path?: string;\n}\n\nexport type ClerkFastifyOptions = ClerkOptions & {\n  hookName?: (typeof ALLOWED_HOOKS)[number];\n  frontendApiProxy?: FrontendApiProxyOptions;\n};\n","import { AuthStatus } from '@clerk/backend/internal';\nimport { clerkFrontendApiProxy, DEFAULT_PROXY_PATH, stripTrailingSlashes } from '@clerk/backend/proxy';\nimport type { FastifyReply, FastifyRequest } from 'fastify';\nimport { Readable } from 'stream';\n\nimport { clerkClient } from './clerkClient';\nimport * as constants from './constants';\nimport type { ClerkFastifyOptions } from './types';\nimport { fastifyRequestToRequest, requestToProxyRequest } from './utils';\n\nexport const withClerkMiddleware = (options: ClerkFastifyOptions) => {\n  const frontendApiProxy = options.frontendApiProxy;\n  const proxyPath = stripTrailingSlashes(frontendApiProxy?.path ?? DEFAULT_PROXY_PATH) || DEFAULT_PROXY_PATH;\n\n  return async (fastifyRequest: FastifyRequest, reply: FastifyReply) => {\n    const publishableKey = options.publishableKey || constants.PUBLISHABLE_KEY;\n    const secretKey = options.secretKey || constants.SECRET_KEY;\n\n    // Handle Frontend API proxy requests and auto-derive proxyUrl\n    let resolvedProxyUrl = options.proxyUrl;\n    if (frontendApiProxy) {\n      const requestUrl = new URL(\n        fastifyRequest.url,\n        `${fastifyRequest.protocol}://${fastifyRequest.hostname || 'localhost'}`,\n      );\n      const isEnabled =\n        typeof frontendApiProxy.enabled === 'function'\n          ? frontendApiProxy.enabled(requestUrl)\n          : frontendApiProxy.enabled;\n\n      if (isEnabled) {\n        if (requestUrl.pathname === proxyPath || requestUrl.pathname.startsWith(proxyPath + '/')) {\n          const proxyRequest = requestToProxyRequest(fastifyRequest);\n\n          const proxyResponse = await clerkFrontendApiProxy(proxyRequest, {\n            proxyPath,\n            publishableKey,\n            secretKey,\n          });\n\n          reply.code(proxyResponse.status);\n          proxyResponse.headers.forEach((value, key) => {\n            reply.header(key, value);\n          });\n\n          if (proxyResponse.body) {\n            const reader = proxyResponse.body.getReader();\n            const stream = new Readable({\n              async read() {\n                try {\n                  const { done, value } = await reader.read();\n                  if (done) {\n                    this.push(null);\n                  } else {\n                    this.push(Buffer.from(value));\n                  }\n                } catch (error) {\n                  this.destroy(error instanceof Error ? error : new Error(String(error)));\n                }\n              },\n            });\n            return reply.send(stream);\n          }\n          return reply.send();\n        }\n\n        // Pass just the path - the backend resolves it against the request's\n        // public origin (from x-forwarded-* headers).\n        if (!resolvedProxyUrl) {\n          resolvedProxyUrl = proxyPath;\n        }\n      }\n    }\n\n    const req = fastifyRequestToRequest(fastifyRequest);\n\n    const requestState = await clerkClient.authenticateRequest(req, {\n      ...options,\n      secretKey,\n      publishableKey,\n      proxyUrl: resolvedProxyUrl,\n      acceptsToken: 'any',\n    });\n\n    requestState.headers.forEach((value, key) => reply.header(key, value));\n\n    const locationHeader = requestState.headers.get(constants.Headers.Location);\n    if (locationHeader) {\n      return reply.code(307).send();\n    } else if (requestState.status === AuthStatus.Handshake) {\n      throw new Error('Clerk: handshake status without redirect');\n    }\n\n    // @ts-expect-error Inject auth so getAuth can read it\n    fastifyRequest.auth = requestState.toAuth();\n  };\n};\n","import { createClerkClient } from '@clerk/backend';\n\nimport { API_URL, API_VERSION, JWT_KEY, MACHINE_SECRET_KEY, SDK_METADATA, SECRET_KEY } from './constants';\n\nexport const clerkClient = createClerkClient({\n  secretKey: SECRET_KEY,\n  machineSecretKey: MACHINE_SECRET_KEY,\n  apiUrl: API_URL,\n  apiVersion: API_VERSION,\n  jwtKey: JWT_KEY,\n  userAgent: `${PACKAGE_NAME}@${PACKAGE_VERSION}`,\n  sdkMetadata: SDK_METADATA,\n});\n","import { constants } from '@clerk/backend/internal';\nimport { apiUrlFromPublishableKey } from '@clerk/shared/apiUrlFromPublishableKey';\n\nexport const API_VERSION = process.env.CLERK_API_VERSION || 'v1';\nexport const SECRET_KEY = process.env.CLERK_SECRET_KEY || '';\nexport const MACHINE_SECRET_KEY = process.env.CLERK_MACHINE_SECRET_KEY || '';\nexport const PUBLISHABLE_KEY = process.env.CLERK_PUBLISHABLE_KEY || '';\nexport const API_URL = process.env.CLERK_API_URL || apiUrlFromPublishableKey(PUBLISHABLE_KEY);\nexport const JWT_KEY = process.env.CLERK_JWT_KEY || '';\nexport const SDK_METADATA = {\n  name: PACKAGE_NAME,\n  version: PACKAGE_VERSION,\n  environment: process.env.NODE_ENV,\n};\n\nexport const { Cookies, Headers } = constants;\n","import type { FastifyRequest } from 'fastify';\nimport { Readable } from 'stream';\n\nexport const fastifyRequestToRequest = (req: FastifyRequest): Request => {\n  const headers = new Headers(\n    Object.keys(req.headers).reduce((acc, key) => {\n      const value = req.headers[key];\n      if (!value) {\n        return acc;\n      }\n\n      if (typeof value === 'string') {\n        acc.set(key, value);\n      } else {\n        acc.set(key, value.join(','));\n      }\n      return acc;\n    }, new Headers()),\n  );\n\n  // Making some manual tests it seems that FastifyRequest populates the req protocol / hostname\n  // based on the forwarded headers. Nevertheless, we are gonna use a dummy base and the request\n  // will be fixed by the internals of the clerk/backend package\n  const dummyOriginReqUrl = new URL(req.url || '', `${req.protocol}://clerk-dummy`);\n  return new Request(dummyOriginReqUrl, {\n    method: req.method,\n    headers,\n  });\n};\n\n/**\n * Converts a Fastify request to a Fetch API Request with full headers and body streaming,\n * suitable for proxy forwarding.\n */\nexport const requestToProxyRequest = (req: FastifyRequest): Request => {\n  const headers = new Headers();\n  Object.entries(req.headers).forEach(([key, value]) => {\n    if (value) {\n      headers.set(key, Array.isArray(value) ? value.join(', ') : value);\n    }\n  });\n\n  const forwardedProto = req.headers['x-forwarded-proto'];\n  const protoHeader = Array.isArray(forwardedProto) ? forwardedProto[0] : forwardedProto;\n  const proto = (protoHeader || '').split(',')[0].trim();\n  const protocol = proto === 'https' || req.protocol === 'https' ? 'https' : 'http';\n\n  const forwardedHost = req.headers['x-forwarded-host'];\n  const hostHeader = Array.isArray(forwardedHost) ? forwardedHost[0] : forwardedHost;\n  const host = (hostHeader || '').split(',')[0].trim() || req.hostname || 'localhost';\n\n  const url = new URL(req.url || '', `${protocol}://${host}`);\n\n  const hasBody = ['POST', 'PUT', 'PATCH'].includes(req.method);\n\n  return new Request(url.toString(), {\n    method: req.method,\n    headers,\n    body: hasBody ? (Readable.toWeb(req.raw) as ReadableStream) : undefined,\n    // @ts-expect-error - duplex required for streaming bodies but not in all TS definitions\n    duplex: hasBody ? 'half' : undefined,\n  });\n};\n","import type { AuthOptions, GetAuthFn, SignedInAuthObject, SignedOutAuthObject } from '@clerk/backend/internal';\nimport { getAuthObjectForAcceptedToken } from '@clerk/backend/internal';\nimport type { FastifyRequest } from 'fastify';\n\nimport { pluginRegistrationRequired } from './errors';\n\nexport const getAuth: GetAuthFn<FastifyRequest> = ((req: FastifyRequest, options?: AuthOptions) => {\n  const authReq = req as FastifyRequest & { auth: SignedInAuthObject | SignedOutAuthObject };\n\n  if (!authReq.auth) {\n    throw new Error(pluginRegistrationRequired);\n  }\n\n  return getAuthObjectForAcceptedToken({ authObject: authReq.auth, acceptsToken: options?.acceptsToken });\n}) as GetAuthFn<FastifyRequest>;\n","// https://github.com/clerk/javascript/blob/main/packages/remix/src/errors.ts#L1-L0\nconst createErrorMessage = (msg: string) => {\n  return `🔒 Clerk: ${msg.trim()}\n\nFor more info, check out the docs: https://clerk.com/docs,\nor come say hi in our discord server: https://clerk.com/discord\n`;\n};\n\nexport const pluginRegistrationRequired =\n  createErrorMessage(`The \"clerkPlugin\" should be registered before using the \"getAuth\".\nExample:\n\nimport { clerkPlugin } from '@clerk/fastify';\n\nconst server: FastifyInstance = Fastify({ logger: true });\nserver.register(clerkPlugin);\n`);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAAc,2BAAd;;;ACCA,4BAAe;;;ACER,IAAM,gBAAgB,CAAC,aAAa,YAAY;;;ACHvD,IAAAA,mBAA2B;AAC3B,mBAAgF;AAEhF,IAAAC,iBAAyB;;;ACHzB,qBAAkC;;;ACAlC,sBAA0B;AAC1B,sCAAyC;AAElC,IAAM,cAAc,QAAQ,IAAI,qBAAqB;AACrD,IAAM,aAAa,QAAQ,IAAI,oBAAoB;AACnD,IAAM,qBAAqB,QAAQ,IAAI,4BAA4B;AACnE,IAAM,kBAAkB,QAAQ,IAAI,yBAAyB;AAC7D,IAAM,UAAU,QAAQ,IAAI,qBAAiB,0DAAyB,eAAe;AACrF,IAAM,UAAU,QAAQ,IAAI,iBAAiB;AAC7C,IAAM,eAAe;AAAA,EAC1B,MAAM;AAAA,EACN,SAAS;AAAA,EACT,aAAa;AACf;AAEO,IAAM,EAAE,SAAS,SAAAC,SAAQ,IAAI;;;ADX7B,IAAM,kBAAc,kCAAkB;AAAA,EAC3C,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,WAAW,GAAG,gBAAY,IAAI,OAAe;AAAA,EAC7C,aAAa;AACf,CAAC;;;AEXD,oBAAyB;AAElB,IAAM,0BAA0B,CAAC,QAAiC;AACvE,QAAM,UAAU,IAAI;AAAA,IAClB,OAAO,KAAK,IAAI,OAAO,EAAE,OAAO,CAAC,KAAK,QAAQ;AAC5C,YAAM,QAAQ,IAAI,QAAQ,GAAG;AAC7B,UAAI,CAAC,OAAO;AACV,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,UAAU,UAAU;AAC7B,YAAI,IAAI,KAAK,KAAK;AAAA,MACpB,OAAO;AACL,YAAI,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC;AAAA,MAC9B;AACA,aAAO;AAAA,IACT,GAAG,IAAI,QAAQ,CAAC;AAAA,EAClB;AAKA,QAAM,oBAAoB,IAAI,IAAI,IAAI,OAAO,IAAI,GAAG,IAAI,QAAQ,gBAAgB;AAChF,SAAO,IAAI,QAAQ,mBAAmB;AAAA,IACpC,QAAQ,IAAI;AAAA,IACZ;AAAA,EACF,CAAC;AACH;AAMO,IAAM,wBAAwB,CAAC,QAAiC;AACrE,QAAM,UAAU,IAAI,QAAQ;AAC5B,SAAO,QAAQ,IAAI,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACpD,QAAI,OAAO;AACT,cAAQ,IAAI,KAAK,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK;AAAA,IAClE;AAAA,EACF,CAAC;AAED,QAAM,iBAAiB,IAAI,QAAQ,mBAAmB;AACtD,QAAM,cAAc,MAAM,QAAQ,cAAc,IAAI,eAAe,CAAC,IAAI;AACxE,QAAM,SAAS,eAAe,IAAI,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK;AACrD,QAAM,WAAW,UAAU,WAAW,IAAI,aAAa,UAAU,UAAU;AAE3E,QAAM,gBAAgB,IAAI,QAAQ,kBAAkB;AACpD,QAAM,aAAa,MAAM,QAAQ,aAAa,IAAI,cAAc,CAAC,IAAI;AACrE,QAAM,QAAQ,cAAc,IAAI,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,YAAY;AAExE,QAAM,MAAM,IAAI,IAAI,IAAI,OAAO,IAAI,GAAG,QAAQ,MAAM,IAAI,EAAE;AAE1D,QAAM,UAAU,CAAC,QAAQ,OAAO,OAAO,EAAE,SAAS,IAAI,MAAM;AAE5D,SAAO,IAAI,QAAQ,IAAI,SAAS,GAAG;AAAA,IACjC,QAAQ,IAAI;AAAA,IACZ;AAAA,IACA,MAAM,UAAW,uBAAS,MAAM,IAAI,GAAG,IAAuB;AAAA;AAAA,IAE9D,QAAQ,UAAU,SAAS;AAAA,EAC7B,CAAC;AACH;;;AHpDO,IAAM,sBAAsB,CAAC,YAAiC;AACnE,QAAM,mBAAmB,QAAQ;AACjC,QAAM,gBAAY,mCAAqB,kBAAkB,QAAQ,+BAAkB,KAAK;AAExF,SAAO,OAAO,gBAAgC,UAAwB;AACpE,UAAM,iBAAiB,QAAQ,kBAA4B;AAC3D,UAAM,YAAY,QAAQ,aAAuB;AAGjD,QAAI,mBAAmB,QAAQ;AAC/B,QAAI,kBAAkB;AACpB,YAAM,aAAa,IAAI;AAAA,QACrB,eAAe;AAAA,QACf,GAAG,eAAe,QAAQ,MAAM,eAAe,YAAY,WAAW;AAAA,MACxE;AACA,YAAM,YACJ,OAAO,iBAAiB,YAAY,aAChC,iBAAiB,QAAQ,UAAU,IACnC,iBAAiB;AAEvB,UAAI,WAAW;AACb,YAAI,WAAW,aAAa,aAAa,WAAW,SAAS,WAAW,YAAY,GAAG,GAAG;AACxF,gBAAM,eAAe,sBAAsB,cAAc;AAEzD,gBAAM,gBAAgB,UAAM,oCAAsB,cAAc;AAAA,YAC9D;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAED,gBAAM,KAAK,cAAc,MAAM;AAC/B,wBAAc,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC5C,kBAAM,OAAO,KAAK,KAAK;AAAA,UACzB,CAAC;AAED,cAAI,cAAc,MAAM;AACtB,kBAAM,SAAS,cAAc,KAAK,UAAU;AAC5C,kBAAM,SAAS,IAAI,wBAAS;AAAA,cAC1B,MAAM,OAAO;AACX,oBAAI;AACF,wBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,sBAAI,MAAM;AACR,yBAAK,KAAK,IAAI;AAAA,kBAChB,OAAO;AACL,yBAAK,KAAK,OAAO,KAAK,KAAK,CAAC;AAAA,kBAC9B;AAAA,gBACF,SAAS,OAAO;AACd,uBAAK,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAAA,gBACxE;AAAA,cACF;AAAA,YACF,CAAC;AACD,mBAAO,MAAM,KAAK,MAAM;AAAA,UAC1B;AACA,iBAAO,MAAM,KAAK;AAAA,QACpB;AAIA,YAAI,CAAC,kBAAkB;AACrB,6BAAmB;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,MAAM,wBAAwB,cAAc;AAElD,UAAM,eAAe,MAAM,YAAY,oBAAoB,KAAK;AAAA,MAC9D,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV,cAAc;AAAA,IAChB,CAAC;AAED,iBAAa,QAAQ,QAAQ,CAAC,OAAO,QAAQ,MAAM,OAAO,KAAK,KAAK,CAAC;AAErE,UAAM,iBAAiB,aAAa,QAAQ,IAAcC,SAAQ,QAAQ;AAC1E,QAAI,gBAAgB;AAClB,aAAO,MAAM,KAAK,GAAG,EAAE,KAAK;AAAA,IAC9B,WAAW,aAAa,WAAW,4BAAW,WAAW;AACvD,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AAGA,mBAAe,OAAO,aAAa,OAAO;AAAA,EAC5C;AACF;;;AFzFA,IAAM,SAAqD,CACzD,UACA,MACA,SACG;AACH,WAAS,gBAAgB,QAAQ,IAAI;AAErC,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,cAAc,SAAS,QAAQ,GAAG;AACrC,UAAM,IAAI,MAAM,yBAAyB,QAAQ,EAAE;AAAA,EACrD;AAEA,WAAS,QAAQ,UAAU,oBAAoB,IAAI,CAAC;AAEpD,OAAK;AACP;AAEO,IAAM,kBAAc,sBAAAC,SAAG,QAAQ;AAAA,EACpC,MAAM;AAAA,EACN,SAAS;AACX,CAAC;;;AM1BD,IAAAC,mBAA8C;;;ACA9C,IAAM,qBAAqB,CAAC,QAAgB;AAC1C,SAAO,oBAAa,IAAI,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA;AAKhC;AAEO,IAAM,6BACX,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOpB;;;ADXM,IAAM,WAAsC,CAAC,KAAqB,YAA0B;AACjG,QAAM,UAAU;AAEhB,MAAI,CAAC,QAAQ,MAAM;AACjB,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC5C;AAEA,aAAO,gDAA8B,EAAE,YAAY,QAAQ,MAAM,cAAc,SAAS,aAAa,CAAC;AACxG;","names":["import_internal","import_stream","Headers","Headers","fp","import_internal"]}

package/node_modules/@clerk/fastify/dist/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts","../src/clerkPlugin.ts","../src/types.ts","../src/withClerkMiddleware.ts","../src/clerkClient.ts","../src/constants.ts","../src/getAuth.ts","../src/errors.ts"],"sourcesContent":["export * from '@clerk/backend';\n\nexport type { ClerkFastifyOptions, FrontendApiProxyOptions } from './types';\n\nexport { clerkPlugin } from './clerkPlugin';\nexport { getAuth } from './getAuth';\nexport { clerkClient } from './clerkClient';\n","import type { FastifyInstance, FastifyPluginCallback } from 'fastify';\nimport fp from 'fastify-plugin';\n\nimport type { ClerkFastifyOptions } from './types';\nimport { ALLOWED_HOOKS } from './types';\nimport { withClerkMiddleware } from './withClerkMiddleware';\n\nconst plugin: FastifyPluginCallback<ClerkFastifyOptions> = (\n  instance: FastifyInstance,\n  opts: ClerkFastifyOptions,\n  done,\n) => {\n  instance.decorateRequest('auth', null);\n  // run clerk as a middleware to all scoped routes\n  const hookName = opts.hookName || 'preHandler';\n  if (!ALLOWED_HOOKS.includes(hookName)) {\n    throw new Error(`Unsupported hookName: ${hookName}`);\n  }\n\n  instance.addHook(hookName, withClerkMiddleware(opts));\n\n  done();\n};\n\nexport const clerkPlugin = fp(plugin, {\n  name: '@clerk/fastify',\n  fastify: '5.x',\n});\n","import type { ClerkOptions } from '@clerk/backend';\nimport type { ShouldProxyFn } from '@clerk/shared/proxy';\n\nexport const ALLOWED_HOOKS = ['onRequest', 'preHandler'] as const;\n\n/**\n * Options for the built-in Frontend API proxy.\n *\n * When enabled, the middleware intercepts requests that match the proxy path\n * (default `/__clerk`) and forwards them to the Clerk Frontend API, allowing\n * the Clerk frontend SDKs to communicate with Clerk without third-party\n * cookie or ad-blocker issues.\n */\nexport interface FrontendApiProxyOptions {\n  /** Toggle the proxy on/off, or supply a function that decides per-request. */\n  enabled: boolean | ShouldProxyFn;\n  /** Custom path prefix for the proxy (default: `/__clerk`). */\n  path?: string;\n}\n\nexport type ClerkFastifyOptions = ClerkOptions & {\n  hookName?: (typeof ALLOWED_HOOKS)[number];\n  frontendApiProxy?: FrontendApiProxyOptions;\n};\n","import { AuthStatus } from '@clerk/backend/internal';\nimport { clerkFrontendApiProxy, DEFAULT_PROXY_PATH, stripTrailingSlashes } from '@clerk/backend/proxy';\nimport type { FastifyReply, FastifyRequest } from 'fastify';\nimport { Readable } from 'stream';\n\nimport { clerkClient } from './clerkClient';\nimport * as constants from './constants';\nimport type { ClerkFastifyOptions } from './types';\nimport { fastifyRequestToRequest, requestToProxyRequest } from './utils';\n\nexport const withClerkMiddleware = (options: ClerkFastifyOptions) => {\n  const frontendApiProxy = options.frontendApiProxy;\n  const proxyPath = stripTrailingSlashes(frontendApiProxy?.path ?? DEFAULT_PROXY_PATH) || DEFAULT_PROXY_PATH;\n\n  return async (fastifyRequest: FastifyRequest, reply: FastifyReply) => {\n    const publishableKey = options.publishableKey || constants.PUBLISHABLE_KEY;\n    const secretKey = options.secretKey || constants.SECRET_KEY;\n\n    // Handle Frontend API proxy requests and auto-derive proxyUrl\n    let resolvedProxyUrl = options.proxyUrl;\n    if (frontendApiProxy) {\n      const requestUrl = new URL(\n        fastifyRequest.url,\n        `${fastifyRequest.protocol}://${fastifyRequest.hostname || 'localhost'}`,\n      );\n      const isEnabled =\n        typeof frontendApiProxy.enabled === 'function'\n          ? frontendApiProxy.enabled(requestUrl)\n          : frontendApiProxy.enabled;\n\n      if (isEnabled) {\n        if (requestUrl.pathname === proxyPath || requestUrl.pathname.startsWith(proxyPath + '/')) {\n          const proxyRequest = requestToProxyRequest(fastifyRequest);\n\n          const proxyResponse = await clerkFrontendApiProxy(proxyRequest, {\n            proxyPath,\n            publishableKey,\n            secretKey,\n          });\n\n          reply.code(proxyResponse.status);\n          proxyResponse.headers.forEach((value, key) => {\n            reply.header(key, value);\n          });\n\n          if (proxyResponse.body) {\n            const reader = proxyResponse.body.getReader();\n            const stream = new Readable({\n              async read() {\n                try {\n                  const { done, value } = await reader.read();\n                  if (done) {\n                    this.push(null);\n                  } else {\n                    this.push(Buffer.from(value));\n                  }\n                } catch (error) {\n                  this.destroy(error instanceof Error ? error : new Error(String(error)));\n                }\n              },\n            });\n            return reply.send(stream);\n          }\n          return reply.send();\n        }\n\n        // Pass just the path - the backend resolves it against the request's\n        // public origin (from x-forwarded-* headers).\n        if (!resolvedProxyUrl) {\n          resolvedProxyUrl = proxyPath;\n        }\n      }\n    }\n\n    const req = fastifyRequestToRequest(fastifyRequest);\n\n    const requestState = await clerkClient.authenticateRequest(req, {\n      ...options,\n      secretKey,\n      publishableKey,\n      proxyUrl: resolvedProxyUrl,\n      acceptsToken: 'any',\n    });\n\n    requestState.headers.forEach((value, key) => reply.header(key, value));\n\n    const locationHeader = requestState.headers.get(constants.Headers.Location);\n    if (locationHeader) {\n      return reply.code(307).send();\n    } else if (requestState.status === AuthStatus.Handshake) {\n      throw new Error('Clerk: handshake status without redirect');\n    }\n\n    // @ts-expect-error Inject auth so getAuth can read it\n    fastifyRequest.auth = requestState.toAuth();\n  };\n};\n","import { createClerkClient } from '@clerk/backend';\n\nimport { API_URL, API_VERSION, JWT_KEY, MACHINE_SECRET_KEY, SDK_METADATA, SECRET_KEY } from './constants';\n\nexport const clerkClient = createClerkClient({\n  secretKey: SECRET_KEY,\n  machineSecretKey: MACHINE_SECRET_KEY,\n  apiUrl: API_URL,\n  apiVersion: API_VERSION,\n  jwtKey: JWT_KEY,\n  userAgent: `${PACKAGE_NAME}@${PACKAGE_VERSION}`,\n  sdkMetadata: SDK_METADATA,\n});\n","import { constants } from '@clerk/backend/internal';\nimport { apiUrlFromPublishableKey } from '@clerk/shared/apiUrlFromPublishableKey';\n\nexport const API_VERSION = process.env.CLERK_API_VERSION || 'v1';\nexport const SECRET_KEY = process.env.CLERK_SECRET_KEY || '';\nexport const MACHINE_SECRET_KEY = process.env.CLERK_MACHINE_SECRET_KEY || '';\nexport const PUBLISHABLE_KEY = process.env.CLERK_PUBLISHABLE_KEY || '';\nexport const API_URL = process.env.CLERK_API_URL || apiUrlFromPublishableKey(PUBLISHABLE_KEY);\nexport const JWT_KEY = process.env.CLERK_JWT_KEY || '';\nexport const SDK_METADATA = {\n  name: PACKAGE_NAME,\n  version: PACKAGE_VERSION,\n  environment: process.env.NODE_ENV,\n};\n\nexport const { Cookies, Headers } = constants;\n","import type { AuthOptions, GetAuthFn, SignedInAuthObject, SignedOutAuthObject } from '@clerk/backend/internal';\nimport { getAuthObjectForAcceptedToken } from '@clerk/backend/internal';\nimport type { FastifyRequest } from 'fastify';\n\nimport { pluginRegistrationRequired } from './errors';\n\nexport const getAuth: GetAuthFn<FastifyRequest> = ((req: FastifyRequest, options?: AuthOptions) => {\n  const authReq = req as FastifyRequest & { auth: SignedInAuthObject | SignedOutAuthObject };\n\n  if (!authReq.auth) {\n    throw new Error(pluginRegistrationRequired);\n  }\n\n  return getAuthObjectForAcceptedToken({ authObject: authReq.auth, acceptsToken: options?.acceptsToken });\n}) as GetAuthFn<FastifyRequest>;\n","// https://github.com/clerk/javascript/blob/main/packages/remix/src/errors.ts#L1-L0\nconst createErrorMessage = (msg: string) => {\n  return `🔒 Clerk: ${msg.trim()}\n\nFor more info, check out the docs: https://clerk.com/docs,\nor come say hi in our discord server: https://clerk.com/discord\n`;\n};\n\nexport const pluginRegistrationRequired =\n  createErrorMessage(`The \"clerkPlugin\" should be registered before using the \"getAuth\".\nExample:\n\nimport { clerkPlugin } from '@clerk/fastify';\n\nconst server: FastifyInstance = Fastify({ logger: true });\nserver.register(clerkPlugin);\n`);\n"],"mappings":";;;;;;AAAA,cAAc;;;ACCd,OAAO,QAAQ;;;ACER,IAAM,gBAAgB,CAAC,aAAa,YAAY;;;ACHvD,SAAS,kBAAkB;AAC3B,SAAS,uBAAuB,oBAAoB,4BAA4B;AAEhF,SAAS,gBAAgB;;;ACHzB,SAAS,yBAAyB;;;ACAlC,SAAS,iBAAiB;AAC1B,SAAS,gCAAgC;AAElC,IAAM,cAAc,QAAQ,IAAI,qBAAqB;AACrD,IAAM,aAAa,QAAQ,IAAI,oBAAoB;AACnD,IAAM,qBAAqB,QAAQ,IAAI,4BAA4B;AACnE,IAAM,kBAAkB,QAAQ,IAAI,yBAAyB;AAC7D,IAAM,UAAU,QAAQ,IAAI,iBAAiB,yBAAyB,eAAe;AACrF,IAAM,UAAU,QAAQ,IAAI,iBAAiB;AAC7C,IAAM,eAAe;AAAA,EAC1B,MAAM;AAAA,EACN,SAAS;AAAA,EACT,aAAa;AACf;AAEO,IAAM,EAAE,SAAS,QAAQ,IAAI;;;ADX7B,IAAM,cAAc,kBAAkB;AAAA,EAC3C,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,WAAW,GAAG,gBAAY,IAAI,OAAe;AAAA,EAC7C,aAAa;AACf,CAAC;;;ADFM,IAAM,sBAAsB,CAAC,YAAiC;AACnE,QAAM,mBAAmB,QAAQ;AACjC,QAAM,YAAY,qBAAqB,kBAAkB,QAAQ,kBAAkB,KAAK;AAExF,SAAO,OAAO,gBAAgC,UAAwB;AACpE,UAAM,iBAAiB,QAAQ,kBAA4B;AAC3D,UAAM,YAAY,QAAQ,aAAuB;AAGjD,QAAI,mBAAmB,QAAQ;AAC/B,QAAI,kBAAkB;AACpB,YAAM,aAAa,IAAI;AAAA,QACrB,eAAe;AAAA,QACf,GAAG,eAAe,QAAQ,MAAM,eAAe,YAAY,WAAW;AAAA,MACxE;AACA,YAAM,YACJ,OAAO,iBAAiB,YAAY,aAChC,iBAAiB,QAAQ,UAAU,IACnC,iBAAiB;AAEvB,UAAI,WAAW;AACb,YAAI,WAAW,aAAa,aAAa,WAAW,SAAS,WAAW,YAAY,GAAG,GAAG;AACxF,gBAAM,eAAe,sBAAsB,cAAc;AAEzD,gBAAM,gBAAgB,MAAM,sBAAsB,cAAc;AAAA,YAC9D;AAAA,YACA;AAAA,YACA;AAAA,UACF,CAAC;AAED,gBAAM,KAAK,cAAc,MAAM;AAC/B,wBAAc,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AAC5C,kBAAM,OAAO,KAAK,KAAK;AAAA,UACzB,CAAC;AAED,cAAI,cAAc,MAAM;AACtB,kBAAM,SAAS,cAAc,KAAK,UAAU;AAC5C,kBAAM,SAAS,IAAI,SAAS;AAAA,cAC1B,MAAM,OAAO;AACX,oBAAI;AACF,wBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,sBAAI,MAAM;AACR,yBAAK,KAAK,IAAI;AAAA,kBAChB,OAAO;AACL,yBAAK,KAAK,OAAO,KAAK,KAAK,CAAC;AAAA,kBAC9B;AAAA,gBACF,SAAS,OAAO;AACd,uBAAK,QAAQ,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAAA,gBACxE;AAAA,cACF;AAAA,YACF,CAAC;AACD,mBAAO,MAAM,KAAK,MAAM;AAAA,UAC1B;AACA,iBAAO,MAAM,KAAK;AAAA,QACpB;AAIA,YAAI,CAAC,kBAAkB;AACrB,6BAAmB;AAAA,QACrB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,MAAM,wBAAwB,cAAc;AAElD,UAAM,eAAe,MAAM,YAAY,oBAAoB,KAAK;AAAA,MAC9D,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV,cAAc;AAAA,IAChB,CAAC;AAED,iBAAa,QAAQ,QAAQ,CAAC,OAAO,QAAQ,MAAM,OAAO,KAAK,KAAK,CAAC;AAErE,UAAM,iBAAiB,aAAa,QAAQ,IAAc,QAAQ,QAAQ;AAC1E,QAAI,gBAAgB;AAClB,aAAO,MAAM,KAAK,GAAG,EAAE,KAAK;AAAA,IAC9B,WAAW,aAAa,WAAW,WAAW,WAAW;AACvD,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AAGA,mBAAe,OAAO,aAAa,OAAO;AAAA,EAC5C;AACF;;;AFzFA,IAAM,SAAqD,CACzD,UACA,MACA,SACG;AACH,WAAS,gBAAgB,QAAQ,IAAI;AAErC,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,cAAc,SAAS,QAAQ,GAAG;AACrC,UAAM,IAAI,MAAM,yBAAyB,QAAQ,EAAE;AAAA,EACrD;AAEA,WAAS,QAAQ,UAAU,oBAAoB,IAAI,CAAC;AAEpD,OAAK;AACP;AAEO,IAAM,cAAc,GAAG,QAAQ;AAAA,EACpC,MAAM;AAAA,EACN,SAAS;AACX,CAAC;;;AK1BD,SAAS,qCAAqC;;;ACA9C,IAAM,qBAAqB,CAAC,QAAgB;AAC1C,SAAO,oBAAa,IAAI,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA;AAKhC;AAEO,IAAM,6BACX,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAOpB;;;ADXM,IAAM,WAAsC,CAAC,KAAqB,YAA0B;AACjG,QAAM,UAAU;AAEhB,MAAI,CAAC,QAAQ,MAAM;AACjB,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC5C;AAEA,SAAO,8BAA8B,EAAE,YAAY,QAAQ,MAAM,cAAc,SAAS,aAAa,CAAC;AACxG;","names":[]}

package/node_modules/@clerk/fastify/dist/types.d.mts

@@ -1,4 +0,0 @@
-export * from '@clerk/shared/types';
-export { C as ClerkFastifyOptions } from './index-CWnSaB0B.mjs';
-import '@clerk/backend';
-import '@clerk/shared/proxy';

package/node_modules/@clerk/fastify/dist/types.d.ts

@@ -1,4 +0,0 @@
-export * from '@clerk/shared/types';
-export { C as ClerkFastifyOptions } from './index-CWnSaB0B.js';
-import '@clerk/backend';
-import '@clerk/shared/proxy';

package/node_modules/@clerk/fastify/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/types/index.ts"],"sourcesContent":["/**\n * Re-export all shared Clerk types for convenient access via @clerk/fastify/types\n */\nexport type * from '@clerk/shared/types';\n\n/**\n * Fastify-specific types\n */\nexport type { ClerkFastifyOptions } from '../types';\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/node_modules/@clerk/fastify/dist/types.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/node_modules/@clerk/fastify/dist/webhooks.d.mts

@@ -1,19 +0,0 @@
-import * as _clerk_backend_webhooks from '@clerk/backend/webhooks';
-import { VerifyWebhookOptions } from '@clerk/backend/webhooks';
-export * from '@clerk/backend/webhooks';
-import { FastifyRequest } from 'fastify';
-
-/**
- * Verifies the authenticity of a webhook request using Svix.
- *
- * @param req - The incoming webhook Fastify Request object
- * @param options - Optional configuration object
- * @param options.signingSecret - Custom signing secret. If not provided, falls back to CLERK_WEBHOOK_SIGNING_SECRET env variable
- * @throws Will throw an error if the webhook signature verification fails
- * @returns A promise that resolves to the verified webhook event data
- *
- * @see {@link https://clerk.com/docs/webhooks/sync-data} to learn more about syncing Clerk data to your application using webhooks
- */
-declare function verifyWebhook(req: FastifyRequest, options?: VerifyWebhookOptions): Promise<_clerk_backend_webhooks.WebhookEvent>;
-
-export { verifyWebhook };

package/node_modules/@clerk/fastify/dist/webhooks.d.ts

@@ -1,19 +0,0 @@
-import * as _clerk_backend_webhooks from '@clerk/backend/webhooks';
-import { VerifyWebhookOptions } from '@clerk/backend/webhooks';
-export * from '@clerk/backend/webhooks';
-import { FastifyRequest } from 'fastify';
-
-/**
- * Verifies the authenticity of a webhook request using Svix.
- *
- * @param req - The incoming webhook Fastify Request object
- * @param options - Optional configuration object
- * @param options.signingSecret - Custom signing secret. If not provided, falls back to CLERK_WEBHOOK_SIGNING_SECRET env variable
- * @throws Will throw an error if the webhook signature verification fails
- * @returns A promise that resolves to the verified webhook event data
- *
- * @see {@link https://clerk.com/docs/webhooks/sync-data} to learn more about syncing Clerk data to your application using webhooks
- */
-declare function verifyWebhook(req: FastifyRequest, options?: VerifyWebhookOptions): Promise<_clerk_backend_webhooks.WebhookEvent>;
-
-export { verifyWebhook };

package/node_modules/@clerk/fastify/dist/webhooks.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/webhooks.ts","../src/utils.ts"],"sourcesContent":["/* eslint-disable import/export */\nimport type { VerifyWebhookOptions } from '@clerk/backend/webhooks';\nimport { verifyWebhook as verifyWebhookBase } from '@clerk/backend/webhooks';\nimport type { FastifyRequest } from 'fastify';\n\nimport { fastifyRequestToRequest } from './utils';\n\n// Ordering of exports matter here since\n// we're overriding the base verifyWebhook\nexport * from '@clerk/backend/webhooks';\n\n/**\n * Verifies the authenticity of a webhook request using Svix.\n *\n * @param req - The incoming webhook Fastify Request object\n * @param options - Optional configuration object\n * @param options.signingSecret - Custom signing secret. If not provided, falls back to CLERK_WEBHOOK_SIGNING_SECRET env variable\n * @throws Will throw an error if the webhook signature verification fails\n * @returns A promise that resolves to the verified webhook event data\n *\n * @see {@link https://clerk.com/docs/webhooks/sync-data} to learn more about syncing Clerk data to your application using webhooks\n */\nexport async function verifyWebhook(req: FastifyRequest, options?: VerifyWebhookOptions) {\n  const webRequest = fastifyRequestToRequest(req);\n  // Cloning instead of implementing the body inside fastifyRequestToRequest\n  // to make it more predictable\n  const clonedRequest = new Request(webRequest, {\n    body: JSON.stringify(req.body),\n  });\n  return verifyWebhookBase(clonedRequest, options);\n}\n","import type { FastifyRequest } from 'fastify';\nimport { Readable } from 'stream';\n\nexport const fastifyRequestToRequest = (req: FastifyRequest): Request => {\n  const headers = new Headers(\n    Object.keys(req.headers).reduce((acc, key) => {\n      const value = req.headers[key];\n      if (!value) {\n        return acc;\n      }\n\n      if (typeof value === 'string') {\n        acc.set(key, value);\n      } else {\n        acc.set(key, value.join(','));\n      }\n      return acc;\n    }, new Headers()),\n  );\n\n  // Making some manual tests it seems that FastifyRequest populates the req protocol / hostname\n  // based on the forwarded headers. Nevertheless, we are gonna use a dummy base and the request\n  // will be fixed by the internals of the clerk/backend package\n  const dummyOriginReqUrl = new URL(req.url || '', `${req.protocol}://clerk-dummy`);\n  return new Request(dummyOriginReqUrl, {\n    method: req.method,\n    headers,\n  });\n};\n\n/**\n * Converts a Fastify request to a Fetch API Request with full headers and body streaming,\n * suitable for proxy forwarding.\n */\nexport const requestToProxyRequest = (req: FastifyRequest): Request => {\n  const headers = new Headers();\n  Object.entries(req.headers).forEach(([key, value]) => {\n    if (value) {\n      headers.set(key, Array.isArray(value) ? value.join(', ') : value);\n    }\n  });\n\n  const forwardedProto = req.headers['x-forwarded-proto'];\n  const protoHeader = Array.isArray(forwardedProto) ? forwardedProto[0] : forwardedProto;\n  const proto = (protoHeader || '').split(',')[0].trim();\n  const protocol = proto === 'https' || req.protocol === 'https' ? 'https' : 'http';\n\n  const forwardedHost = req.headers['x-forwarded-host'];\n  const hostHeader = Array.isArray(forwardedHost) ? forwardedHost[0] : forwardedHost;\n  const host = (hostHeader || '').split(',')[0].trim() || req.hostname || 'localhost';\n\n  const url = new URL(req.url || '', `${protocol}://${host}`);\n\n  const hasBody = ['POST', 'PUT', 'PATCH'].includes(req.method);\n\n  return new Request(url.toString(), {\n    method: req.method,\n    headers,\n    body: hasBody ? (Readable.toWeb(req.raw) as ReadableStream) : undefined,\n    // @ts-expect-error - duplex required for streaming bodies but not in all TS definitions\n    duplex: hasBody ? 'half' : undefined,\n  });\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,sBAAmD;;;ACC5C,IAAM,0BAA0B,CAAC,QAAiC;AACvE,QAAM,UAAU,IAAI;AAAA,IAClB,OAAO,KAAK,IAAI,OAAO,EAAE,OAAO,CAAC,KAAK,QAAQ;AAC5C,YAAM,QAAQ,IAAI,QAAQ,GAAG;AAC7B,UAAI,CAAC,OAAO;AACV,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,UAAU,UAAU;AAC7B,YAAI,IAAI,KAAK,KAAK;AAAA,MACpB,OAAO;AACL,YAAI,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC;AAAA,MAC9B;AACA,aAAO;AAAA,IACT,GAAG,IAAI,QAAQ,CAAC;AAAA,EAClB;AAKA,QAAM,oBAAoB,IAAI,IAAI,IAAI,OAAO,IAAI,GAAG,IAAI,QAAQ,gBAAgB;AAChF,SAAO,IAAI,QAAQ,mBAAmB;AAAA,IACpC,QAAQ,IAAI;AAAA,IACZ;AAAA,EACF,CAAC;AACH;;;ADnBA,6BAAc,oCATd;AAsBA,eAAsB,cAAc,KAAqB,SAAgC;AACvF,QAAM,aAAa,wBAAwB,GAAG;AAG9C,QAAM,gBAAgB,IAAI,QAAQ,YAAY;AAAA,IAC5C,MAAM,KAAK,UAAU,IAAI,IAAI;AAAA,EAC/B,CAAC;AACD,aAAO,gBAAAA,eAAkB,eAAe,OAAO;AACjD;","names":["verifyWebhookBase"]}

package/node_modules/@clerk/fastify/dist/webhooks.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/webhooks.ts"],"sourcesContent":["/* eslint-disable import/export */\nimport type { VerifyWebhookOptions } from '@clerk/backend/webhooks';\nimport { verifyWebhook as verifyWebhookBase } from '@clerk/backend/webhooks';\nimport type { FastifyRequest } from 'fastify';\n\nimport { fastifyRequestToRequest } from './utils';\n\n// Ordering of exports matter here since\n// we're overriding the base verifyWebhook\nexport * from '@clerk/backend/webhooks';\n\n/**\n * Verifies the authenticity of a webhook request using Svix.\n *\n * @param req - The incoming webhook Fastify Request object\n * @param options - Optional configuration object\n * @param options.signingSecret - Custom signing secret. If not provided, falls back to CLERK_WEBHOOK_SIGNING_SECRET env variable\n * @throws Will throw an error if the webhook signature verification fails\n * @returns A promise that resolves to the verified webhook event data\n *\n * @see {@link https://clerk.com/docs/webhooks/sync-data} to learn more about syncing Clerk data to your application using webhooks\n */\nexport async function verifyWebhook(req: FastifyRequest, options?: VerifyWebhookOptions) {\n  const webRequest = fastifyRequestToRequest(req);\n  // Cloning instead of implementing the body inside fastifyRequestToRequest\n  // to make it more predictable\n  const clonedRequest = new Request(webRequest, {\n    body: JSON.stringify(req.body),\n  });\n  return verifyWebhookBase(clonedRequest, options);\n}\n"],"mappings":";;;;;AAEA,SAAS,iBAAiB,yBAAyB;AAOnD,cAAc;AAad,eAAsB,cAAc,KAAqB,SAAgC;AACvF,QAAM,aAAa,wBAAwB,GAAG;AAG9C,QAAM,gBAAgB,IAAI,QAAQ,YAAY;AAAA,IAC5C,MAAM,KAAK,UAAU,IAAI,IAAI;AAAA,EAC/B,CAAC;AACD,SAAO,kBAAkB,eAAe,OAAO;AACjD;","names":[]}

package/node_modules/@clerk/shared/dist/runtime/alternativePhoneCode.d.mts

@@ -1,9 +0,0 @@
-import { sd as PhoneCodeChannelData } from "./index-Cc98l5ga.mjs";
-import "./moduleManager-BsmFyRrH.mjs";
-
-//#region src/alternativePhoneCode.d.ts
-declare const ALTERNATIVE_PHONE_CODE_PROVIDERS: PhoneCodeChannelData[];
-declare const getAlternativePhoneCodeProviderData: (channel?: string) => PhoneCodeChannelData | null;
-//#endregion
-export { ALTERNATIVE_PHONE_CODE_PROVIDERS, getAlternativePhoneCodeProviderData };
-//# sourceMappingURL=alternativePhoneCode.d.mts.map

package/node_modules/@clerk/shared/dist/runtime/alternativePhoneCode.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"alternativePhoneCode.d.mts","names":[],"sources":["../../src/alternativePhoneCode.ts"],"sourcesContent":[],"mappings":";;;;cAEa,kCAAkC;cAOlC,2DAA0D"}

package/node_modules/@clerk/shared/dist/runtime/alternativePhoneCode.d.ts

@@ -1,9 +0,0 @@
-import { sd as PhoneCodeChannelData } from "./index-BK_NVS1t.js";
-import "./moduleManager-WB15hU3T.js";
-
-//#region src/alternativePhoneCode.d.ts
-declare const ALTERNATIVE_PHONE_CODE_PROVIDERS: PhoneCodeChannelData[];
-declare const getAlternativePhoneCodeProviderData: (channel?: string) => PhoneCodeChannelData | null;
-//#endregion
-export { ALTERNATIVE_PHONE_CODE_PROVIDERS, getAlternativePhoneCodeProviderData };
-//# sourceMappingURL=alternativePhoneCode.d.ts.map

package/node_modules/@clerk/shared/dist/runtime/alternativePhoneCode.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"alternativePhoneCode.d.ts","names":[],"sources":["../../src/alternativePhoneCode.ts"],"sourcesContent":[],"mappings":";;;;cAEa,kCAAkC;cAOlC,2DAA0D"}

package/node_modules/@clerk/shared/dist/runtime/alternativePhoneCode.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"alternativePhoneCode.js","names":["ALTERNATIVE_PHONE_CODE_PROVIDERS: PhoneCodeChannelData[]"],"sources":["../../src/alternativePhoneCode.ts"],"sourcesContent":["import type { PhoneCodeChannelData } from './types';\n\nexport const ALTERNATIVE_PHONE_CODE_PROVIDERS: PhoneCodeChannelData[] = [\n  {\n    channel: 'whatsapp',\n    name: 'WhatsApp',\n  },\n];\n\nexport const getAlternativePhoneCodeProviderData = (channel?: string): PhoneCodeChannelData | null => {\n  if (!channel) {\n    return null;\n  }\n  return ALTERNATIVE_PHONE_CODE_PROVIDERS.find(p => p.channel === channel) || null;\n};\n"],"mappings":";;AAEA,MAAaA,mCAA2D,CACtE;CACE,SAAS;CACT,MAAM;CACP,CACF;AAED,MAAa,uCAAuC,YAAkD;AACpG,KAAI,CAAC,QACH,QAAO;AAET,QAAO,iCAAiC,MAAK,MAAK,EAAE,YAAY,QAAQ,IAAI"}

package/node_modules/@clerk/shared/dist/runtime/alternativePhoneCode.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"alternativePhoneCode.mjs","names":["ALTERNATIVE_PHONE_CODE_PROVIDERS: PhoneCodeChannelData[]"],"sources":["../../src/alternativePhoneCode.ts"],"sourcesContent":["import type { PhoneCodeChannelData } from './types';\n\nexport const ALTERNATIVE_PHONE_CODE_PROVIDERS: PhoneCodeChannelData[] = [\n  {\n    channel: 'whatsapp',\n    name: 'WhatsApp',\n  },\n];\n\nexport const getAlternativePhoneCodeProviderData = (channel?: string): PhoneCodeChannelData | null => {\n  if (!channel) {\n    return null;\n  }\n  return ALTERNATIVE_PHONE_CODE_PROVIDERS.find(p => p.channel === channel) || null;\n};\n"],"mappings":";AAEA,MAAaA,mCAA2D,CACtE;CACE,SAAS;CACT,MAAM;CACP,CACF;AAED,MAAa,uCAAuC,YAAkD;AACpG,KAAI,CAAC,QACH,QAAO;AAET,QAAO,iCAAiC,MAAK,MAAK,EAAE,YAAY,QAAQ,IAAI"}

package/node_modules/@clerk/shared/dist/runtime/apiUrlFromPublishableKey.d.mts

@@ -1,11 +0,0 @@
-//#region src/apiUrlFromPublishableKey.d.ts
-/**
- * Get the correct API url based on the publishable key.
- *
- * @param publishableKey - The publishable key to parse.
- * @returns One of Clerk's API URLs.
- */
-declare const apiUrlFromPublishableKey: (publishableKey: string) => "https://api.clerk.com" | "https://api.lclclerk.com" | "https://api.clerkstage.dev";
-//#endregion
-export { apiUrlFromPublishableKey };
-//# sourceMappingURL=apiUrlFromPublishableKey.d.mts.map

package/node_modules/@clerk/shared/dist/runtime/apiUrlFromPublishableKey.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"apiUrlFromPublishableKey.d.mts","names":[],"sources":["../../src/apiUrlFromPublishableKey.ts"],"sourcesContent":[],"mappings":";;AAgBA;;;;;cAAa"}

package/node_modules/@clerk/shared/dist/runtime/apiUrlFromPublishableKey.d.ts

@@ -1,11 +0,0 @@
-//#region src/apiUrlFromPublishableKey.d.ts
-/**
- * Get the correct API url based on the publishable key.
- *
- * @param publishableKey - The publishable key to parse.
- * @returns One of Clerk's API URLs.
- */
-declare const apiUrlFromPublishableKey: (publishableKey: string) => "https://api.lclclerk.com" | "https://api.clerkstage.dev" | "https://api.clerk.com";
-//#endregion
-export { apiUrlFromPublishableKey };
-//# sourceMappingURL=apiUrlFromPublishableKey.d.ts.map

package/node_modules/@clerk/shared/dist/runtime/apiUrlFromPublishableKey.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"apiUrlFromPublishableKey.d.ts","names":[],"sources":["../../src/apiUrlFromPublishableKey.ts"],"sourcesContent":[],"mappings":";;AAgBA;;;;;cAAa"}

package/node_modules/@clerk/shared/dist/runtime/apiUrlFromPublishableKey.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"apiUrlFromPublishableKey.js","names":["parsePublishableKey","LEGACY_DEV_INSTANCE_SUFFIXES","PROD_API_URL","LOCAL_ENV_SUFFIXES","LOCAL_API_URL","STAGING_ENV_SUFFIXES","STAGING_API_URL"],"sources":["../../src/apiUrlFromPublishableKey.ts"],"sourcesContent":["import {\n  LEGACY_DEV_INSTANCE_SUFFIXES,\n  LOCAL_API_URL,\n  LOCAL_ENV_SUFFIXES,\n  PROD_API_URL,\n  STAGING_API_URL,\n  STAGING_ENV_SUFFIXES,\n} from './constants';\nimport { parsePublishableKey } from './keys';\n\n/**\n * Get the correct API url based on the publishable key.\n *\n * @param publishableKey - The publishable key to parse.\n * @returns One of Clerk's API URLs.\n */\nexport const apiUrlFromPublishableKey = (publishableKey: string) => {\n  const frontendApi = parsePublishableKey(publishableKey)?.frontendApi;\n\n  if (frontendApi?.startsWith('clerk.') && LEGACY_DEV_INSTANCE_SUFFIXES.some(suffix => frontendApi?.endsWith(suffix))) {\n    return PROD_API_URL;\n  }\n\n  if (LOCAL_ENV_SUFFIXES.some(suffix => frontendApi?.endsWith(suffix))) {\n    return LOCAL_API_URL;\n  }\n  if (STAGING_ENV_SUFFIXES.some(suffix => frontendApi?.endsWith(suffix))) {\n    return STAGING_API_URL;\n  }\n  return PROD_API_URL;\n};\n"],"mappings":";;;;;;;;;;;;AAgBA,MAAa,4BAA4B,mBAA2B;CAClE,MAAM,cAAcA,iCAAoB,eAAe,EAAE;AAEzD,KAAI,aAAa,WAAW,SAAS,IAAIC,+CAA6B,MAAK,WAAU,aAAa,SAAS,OAAO,CAAC,CACjH,QAAOC;AAGT,KAAIC,qCAAmB,MAAK,WAAU,aAAa,SAAS,OAAO,CAAC,CAClE,QAAOC;AAET,KAAIC,uCAAqB,MAAK,WAAU,aAAa,SAAS,OAAO,CAAC,CACpE,QAAOC;AAET,QAAOJ"}

package/node_modules/@clerk/shared/dist/runtime/apiUrlFromPublishableKey.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"apiUrlFromPublishableKey.mjs","names":[],"sources":["../../src/apiUrlFromPublishableKey.ts"],"sourcesContent":["import {\n  LEGACY_DEV_INSTANCE_SUFFIXES,\n  LOCAL_API_URL,\n  LOCAL_ENV_SUFFIXES,\n  PROD_API_URL,\n  STAGING_API_URL,\n  STAGING_ENV_SUFFIXES,\n} from './constants';\nimport { parsePublishableKey } from './keys';\n\n/**\n * Get the correct API url based on the publishable key.\n *\n * @param publishableKey - The publishable key to parse.\n * @returns One of Clerk's API URLs.\n */\nexport const apiUrlFromPublishableKey = (publishableKey: string) => {\n  const frontendApi = parsePublishableKey(publishableKey)?.frontendApi;\n\n  if (frontendApi?.startsWith('clerk.') && LEGACY_DEV_INSTANCE_SUFFIXES.some(suffix => frontendApi?.endsWith(suffix))) {\n    return PROD_API_URL;\n  }\n\n  if (LOCAL_ENV_SUFFIXES.some(suffix => frontendApi?.endsWith(suffix))) {\n    return LOCAL_API_URL;\n  }\n  if (STAGING_ENV_SUFFIXES.some(suffix => frontendApi?.endsWith(suffix))) {\n    return STAGING_API_URL;\n  }\n  return PROD_API_URL;\n};\n"],"mappings":";;;;;;;;;;;;AAgBA,MAAa,4BAA4B,mBAA2B;CAClE,MAAM,cAAc,oBAAoB,eAAe,EAAE;AAEzD,KAAI,aAAa,WAAW,SAAS,IAAI,6BAA6B,MAAK,WAAU,aAAa,SAAS,OAAO,CAAC,CACjH,QAAO;AAGT,KAAI,mBAAmB,MAAK,WAAU,aAAa,SAAS,OAAO,CAAC,CAClE,QAAO;AAET,KAAI,qBAAqB,MAAK,WAAU,aAAa,SAAS,OAAO,CAAC,CACpE,QAAO;AAET,QAAO"}

package/node_modules/@clerk/shared/dist/runtime/authorization-Du_JQmnH.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorization-Du_JQmnH.js","names":["TYPES_TO_OBJECTS: TypesToConfig","checkOrgAuthorization: CheckOrgAuthorization","checkBillingAuthorization: CheckBillingAuthorization","org: string[]","user: string[]","config","checkReverificationAuthorization: CheckReverificationAuthorization"],"sources":["../../src/authorization.ts"],"sourcesContent":["import type {\n  ActClaim,\n  CheckAuthorizationWithCustomPermissions,\n  GetToken,\n  JwtPayload,\n  OrganizationCustomPermissionKey,\n  OrganizationCustomRoleKey,\n  PendingSessionOptions,\n  ReverificationConfig,\n  SessionStatusClaim,\n  SessionVerificationLevel,\n  SessionVerificationTypes,\n  SignOut,\n  UseAuthReturn,\n} from './types';\n\ntype TypesToConfig = Record<SessionVerificationTypes, Exclude<ReverificationConfig, SessionVerificationTypes>>;\ntype AuthorizationOptions = {\n  userId: string | null | undefined;\n  orgId: string | null | undefined;\n  orgRole: string | null | undefined;\n  orgPermissions: string[] | null | undefined;\n  factorVerificationAge: [number, number] | null;\n  features: string | null | undefined;\n  plans: string | null | undefined;\n};\n\ntype CheckOrgAuthorization = (\n  params: { role?: OrganizationCustomRoleKey; permission?: OrganizationCustomPermissionKey },\n  options: Pick<AuthorizationOptions, 'orgId' | 'orgRole' | 'orgPermissions'>,\n) => boolean | null;\n\ntype CheckBillingAuthorization = (\n  params: { feature?: string; plan?: string },\n  options: Pick<AuthorizationOptions, 'plans' | 'features'>,\n) => boolean | null;\n\ntype CheckReverificationAuthorization = (\n  params: {\n    reverification?: ReverificationConfig;\n  },\n  { factorVerificationAge }: AuthorizationOptions,\n) => boolean | null;\n\nconst TYPES_TO_OBJECTS: TypesToConfig = {\n  strict_mfa: {\n    afterMinutes: 10,\n    level: 'multi_factor',\n  },\n  strict: {\n    afterMinutes: 10,\n    level: 'second_factor',\n  },\n  moderate: {\n    afterMinutes: 60,\n    level: 'second_factor',\n  },\n  lax: {\n    afterMinutes: 1_440,\n    level: 'second_factor',\n  },\n};\n\nconst ALLOWED_LEVELS = new Set<SessionVerificationLevel>(['first_factor', 'second_factor', 'multi_factor']);\n\nconst ALLOWED_TYPES = new Set<SessionVerificationTypes>(['strict_mfa', 'strict', 'moderate', 'lax']);\n\nconst ORG_SCOPES = new Set(['o', 'org', 'organization']);\nconst USER_SCOPES = new Set(['u', 'user']);\n\n// Helper functions\nconst isValidMaxAge = (maxAge: any) => typeof maxAge === 'number' && maxAge > 0;\nconst isValidLevel = (level: any) => ALLOWED_LEVELS.has(level);\nconst isValidVerificationType = (type: any) => ALLOWED_TYPES.has(type);\n\nconst prefixWithOrg = (value: string) => value.replace(/^(org:)*/, 'org:');\n\n/**\n * Checks if a user has the required organization-level authorization.\n * Verifies if the user has the specified role or permission within their organization.\n *\n * @returns null, if unable to determine due to missing data or unspecified role/permission.\n */\nconst checkOrgAuthorization: CheckOrgAuthorization = (params, options) => {\n  const { orgId, orgRole, orgPermissions } = options;\n  if (!params.role && !params.permission) {\n    return null;\n  }\n\n  if (!orgId || !orgRole || !orgPermissions) {\n    return null;\n  }\n\n  if (params.permission) {\n    return orgPermissions.includes(prefixWithOrg(params.permission));\n  }\n\n  if (params.role) {\n    return prefixWithOrg(orgRole) === prefixWithOrg(params.role);\n  }\n  return null;\n};\n\nconst checkForFeatureOrPlan = (claim: string, featureOrPlan: string) => {\n  const { org: orgFeatures, user: userFeatures } = splitByScope(claim);\n  const [rawScope, rawId] = featureOrPlan.split(':');\n  const hasExplicitScope = rawId !== undefined;\n  const scope = rawScope;\n  const id = rawId || rawScope;\n\n  if (hasExplicitScope && !ORG_SCOPES.has(scope) && !USER_SCOPES.has(scope)) {\n    throw new Error(`Invalid scope: ${scope}`);\n  }\n\n  if (hasExplicitScope) {\n    if (ORG_SCOPES.has(scope)) {\n      return orgFeatures.includes(id);\n    }\n    if (USER_SCOPES.has(scope)) {\n      return userFeatures.includes(id);\n    }\n  }\n\n  // Since org scoped features will not exist if there is not an active org, merging is safe.\n  return [...orgFeatures, ...userFeatures].includes(id);\n};\n\nconst checkBillingAuthorization: CheckBillingAuthorization = (params, options) => {\n  const { features, plans } = options;\n\n  if (params.feature && features) {\n    return checkForFeatureOrPlan(features, params.feature);\n  }\n\n  if (params.plan && plans) {\n    return checkForFeatureOrPlan(plans, params.plan);\n  }\n  return null;\n};\n\nconst splitByScope = (fea: string | null | undefined) => {\n  const org: string[] = [];\n  const user: string[] = [];\n\n  if (!fea) {\n    return { org, user };\n  }\n\n  const parts = fea.split(',');\n  for (let i = 0; i < parts.length; i++) {\n    const part = parts[i].trim();\n    const colonIndex = part.indexOf(':');\n    if (colonIndex === -1) {\n      throw new Error(`Invalid claim element (missing colon): ${part}`);\n    }\n    const scope = part.slice(0, colonIndex);\n    const value = part.slice(colonIndex + 1);\n\n    if (scope === 'o') {\n      org.push(value);\n    } else if (scope === 'u') {\n      user.push(value);\n    } else if (scope === 'ou' || scope === 'uo') {\n      org.push(value);\n      user.push(value);\n    }\n  }\n\n  return { org, user };\n};\n\nconst validateReverificationConfig = (config: ReverificationConfig | undefined | null) => {\n  if (!config) {\n    return false;\n  }\n\n  const convertConfigToObject = (config: ReverificationConfig) => {\n    if (typeof config === 'string') {\n      return TYPES_TO_OBJECTS[config];\n    }\n    return config;\n  };\n\n  const isValidStringValue = typeof config === 'string' && isValidVerificationType(config);\n  const isValidObjectValue =\n    typeof config === 'object' && isValidLevel(config.level) && isValidMaxAge(config.afterMinutes);\n\n  if (isValidStringValue || isValidObjectValue) {\n    return convertConfigToObject.bind(null, config);\n  }\n\n  return false;\n};\n\n/**\n * Evaluates if the user meets re-verification authentication requirements.\n * Compares the user's factor verification ages against the specified maxAge.\n * Handles different verification levels (first factor, second factor, multi-factor).\n *\n * @returns null, if requirements or verification data are missing.\n */\nconst checkReverificationAuthorization: CheckReverificationAuthorization = (params, { factorVerificationAge }) => {\n  if (!params.reverification || !factorVerificationAge) {\n    return null;\n  }\n\n  const isValidReverification = validateReverificationConfig(params.reverification);\n  if (!isValidReverification) {\n    return null;\n  }\n\n  const { level, afterMinutes } = isValidReverification();\n  const [factor1Age, factor2Age] = factorVerificationAge;\n\n  // -1 indicates the factor group (1fa,2fa) is not enabled\n  // -1 for 1fa is not a valid scenario, but we need to make sure we handle it properly\n  const isValidFactor1 = factor1Age !== -1 ? afterMinutes > factor1Age : null;\n  const isValidFactor2 = factor2Age !== -1 ? afterMinutes > factor2Age : null;\n\n  switch (level) {\n    case 'first_factor':\n      return isValidFactor1;\n    case 'second_factor':\n      return factor2Age !== -1 ? isValidFactor2 : isValidFactor1;\n    case 'multi_factor':\n      return factor2Age === -1 ? isValidFactor1 : isValidFactor1 && isValidFactor2;\n  }\n};\n\n/**\n * Creates a function for comprehensive user authorization checks.\n * Combines organization-level and reverification authentication checks.\n * The returned function authorizes if both checks pass, or if at least one passes\n * when the other is indeterminate. Fails if userId is missing.\n */\nconst createCheckAuthorization = (options: AuthorizationOptions): CheckAuthorizationWithCustomPermissions => {\n  return (params): boolean => {\n    if (!options.userId) {\n      return false;\n    }\n\n    const billingAuthorization = checkBillingAuthorization(params, options);\n    const orgAuthorization = checkOrgAuthorization(params, options);\n    const reverificationAuthorization = checkReverificationAuthorization(params, options);\n\n    if ([billingAuthorization || orgAuthorization, reverificationAuthorization].some(a => a === null)) {\n      return [billingAuthorization || orgAuthorization, reverificationAuthorization].some(a => a === true);\n    }\n\n    return [billingAuthorization || orgAuthorization, reverificationAuthorization].every(a => a === true);\n  };\n};\n\ntype AuthStateOptions = {\n  authObject: {\n    userId?: string | null;\n    sessionId?: string | null;\n    sessionStatus?: SessionStatusClaim | null;\n    sessionClaims?: JwtPayload | null;\n    actor?: ActClaim | null;\n    orgId?: string | null;\n    orgRole?: OrganizationCustomRoleKey | null;\n    orgSlug?: string | null;\n    orgPermissions?: OrganizationCustomPermissionKey[] | null;\n    getToken: GetToken;\n    signOut: SignOut;\n    has: (params: Parameters<CheckAuthorizationWithCustomPermissions>[0]) => boolean;\n  };\n  options: PendingSessionOptions;\n};\n\n/**\n * Shared utility function that centralizes auth state resolution logic,\n * preventing duplication across different packages.\n *\n * @internal\n */\nconst resolveAuthState = ({\n  authObject: {\n    sessionId,\n    sessionStatus,\n    userId,\n    actor,\n    orgId,\n    orgRole,\n    orgSlug,\n    signOut,\n    getToken,\n    has,\n    sessionClaims,\n  },\n  options: { treatPendingAsSignedOut = true },\n}: AuthStateOptions): UseAuthReturn | undefined => {\n  if (sessionId === undefined && userId === undefined) {\n    return {\n      actor: undefined,\n      getToken,\n      has: () => false,\n      isLoaded: false,\n      isSignedIn: undefined,\n      orgId: undefined,\n      orgRole: undefined,\n      orgSlug: undefined,\n      sessionClaims: undefined,\n      sessionId,\n      signOut,\n      userId,\n    } as const;\n  }\n\n  if (sessionId === null && userId === null) {\n    return {\n      actor: null,\n      getToken,\n      has: () => false,\n      isLoaded: true,\n      isSignedIn: false,\n      orgId: null,\n      orgRole: null,\n      orgSlug: null,\n      sessionClaims: null,\n      sessionId,\n      signOut,\n      userId,\n    } as const;\n  }\n\n  if (treatPendingAsSignedOut && sessionStatus === 'pending') {\n    return {\n      actor: null,\n      getToken,\n      has: () => false,\n      isLoaded: true,\n      isSignedIn: false,\n      orgId: null,\n      orgRole: null,\n      orgSlug: null,\n      sessionClaims: null,\n      sessionId: null,\n      signOut,\n      userId: null,\n    } as const;\n  }\n\n  if (!!sessionId && !!sessionClaims && !!userId && !!orgId && !!orgRole) {\n    return {\n      actor: actor || null,\n      getToken,\n      has,\n      isLoaded: true,\n      isSignedIn: true,\n      orgId,\n      orgRole,\n      orgSlug: orgSlug || null,\n      sessionClaims,\n      sessionId,\n      signOut,\n      userId,\n    } as const;\n  }\n\n  if (!!sessionId && !!sessionClaims && !!userId && !orgId) {\n    return {\n      actor: actor || null,\n      getToken,\n      has,\n      isLoaded: true,\n      isSignedIn: true,\n      orgId: null,\n      orgRole: null,\n      orgSlug: null,\n      sessionClaims,\n      sessionId,\n      signOut,\n      userId,\n    } as const;\n  }\n};\n\nexport { createCheckAuthorization, resolveAuthState, splitByScope, validateReverificationConfig };\n"],"mappings":";;AA4CA,MAAMA,mBAAkC;CACtC,YAAY;EACV,cAAc;EACd,OAAO;EACR;CACD,QAAQ;EACN,cAAc;EACd,OAAO;EACR;CACD,UAAU;EACR,cAAc;EACd,OAAO;EACR;CACD,KAAK;EACH,cAAc;EACd,OAAO;EACR;CACF;AAED,MAAM,iBAAiB,IAAI,IAA8B;CAAC;CAAgB;CAAiB;CAAe,CAAC;AAE3G,MAAM,gBAAgB,IAAI,IAA8B;CAAC;CAAc;CAAU;CAAY;CAAM,CAAC;AAEpG,MAAM,aAAa,IAAI,IAAI;CAAC;CAAK;CAAO;CAAe,CAAC;AACxD,MAAM,cAAc,IAAI,IAAI,CAAC,KAAK,OAAO,CAAC;AAG1C,MAAM,iBAAiB,WAAgB,OAAO,WAAW,YAAY,SAAS;AAC9E,MAAM,gBAAgB,UAAe,eAAe,IAAI,MAAM;AAC9D,MAAM,2BAA2B,SAAc,cAAc,IAAI,KAAK;AAEtE,MAAM,iBAAiB,UAAkB,MAAM,QAAQ,YAAY,OAAO;;;;;;;AAQ1E,MAAMC,yBAAgD,QAAQ,YAAY;CACxE,MAAM,EAAE,OAAO,SAAS,mBAAmB;AAC3C,KAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,WAC1B,QAAO;AAGT,KAAI,CAAC,SAAS,CAAC,WAAW,CAAC,eACzB,QAAO;AAGT,KAAI,OAAO,WACT,QAAO,eAAe,SAAS,cAAc,OAAO,WAAW,CAAC;AAGlE,KAAI,OAAO,KACT,QAAO,cAAc,QAAQ,KAAK,cAAc,OAAO,KAAK;AAE9D,QAAO;;AAGT,MAAM,yBAAyB,OAAe,kBAA0B;CACtE,MAAM,EAAE,KAAK,aAAa,MAAM,iBAAiB,aAAa,MAAM;CACpE,MAAM,CAAC,UAAU,SAAS,cAAc,MAAM,IAAI;CAClD,MAAM,mBAAmB,UAAU;CACnC,MAAM,QAAQ;CACd,MAAM,KAAK,SAAS;AAEpB,KAAI,oBAAoB,CAAC,WAAW,IAAI,MAAM,IAAI,CAAC,YAAY,IAAI,MAAM,CACvE,OAAM,IAAI,MAAM,kBAAkB,QAAQ;AAG5C,KAAI,kBAAkB;AACpB,MAAI,WAAW,IAAI,MAAM,CACvB,QAAO,YAAY,SAAS,GAAG;AAEjC,MAAI,YAAY,IAAI,MAAM,CACxB,QAAO,aAAa,SAAS,GAAG;;AAKpC,QAAO,CAAC,GAAG,aAAa,GAAG,aAAa,CAAC,SAAS,GAAG;;AAGvD,MAAMC,6BAAwD,QAAQ,YAAY;CAChF,MAAM,EAAE,UAAU,UAAU;AAE5B,KAAI,OAAO,WAAW,SACpB,QAAO,sBAAsB,UAAU,OAAO,QAAQ;AAGxD,KAAI,OAAO,QAAQ,MACjB,QAAO,sBAAsB,OAAO,OAAO,KAAK;AAElD,QAAO;;AAGT,MAAM,gBAAgB,QAAmC;CACvD,MAAMC,MAAgB,EAAE;CACxB,MAAMC,OAAiB,EAAE;AAEzB,KAAI,CAAC,IACH,QAAO;EAAE;EAAK;EAAM;CAGtB,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,OAAO,MAAM,GAAG,MAAM;EAC5B,MAAM,aAAa,KAAK,QAAQ,IAAI;AACpC,MAAI,eAAe,GACjB,OAAM,IAAI,MAAM,0CAA0C,OAAO;EAEnE,MAAM,QAAQ,KAAK,MAAM,GAAG,WAAW;EACvC,MAAM,QAAQ,KAAK,MAAM,aAAa,EAAE;AAExC,MAAI,UAAU,IACZ,KAAI,KAAK,MAAM;WACN,UAAU,IACnB,MAAK,KAAK,MAAM;WACP,UAAU,QAAQ,UAAU,MAAM;AAC3C,OAAI,KAAK,MAAM;AACf,QAAK,KAAK,MAAM;;;AAIpB,QAAO;EAAE;EAAK;EAAM;;AAGtB,MAAM,gCAAgC,WAAoD;AACxF,KAAI,CAAC,OACH,QAAO;CAGT,MAAM,yBAAyB,aAAiC;AAC9D,MAAI,OAAOC,aAAW,SACpB,QAAO,iBAAiBA;AAE1B,SAAOA;;CAGT,MAAM,qBAAqB,OAAO,WAAW,YAAY,wBAAwB,OAAO;CACxF,MAAM,qBACJ,OAAO,WAAW,YAAY,aAAa,OAAO,MAAM,IAAI,cAAc,OAAO,aAAa;AAEhG,KAAI,sBAAsB,mBACxB,QAAO,sBAAsB,KAAK,MAAM,OAAO;AAGjD,QAAO;;;;;;;;;AAUT,MAAMC,oCAAsE,QAAQ,EAAE,4BAA4B;AAChH,KAAI,CAAC,OAAO,kBAAkB,CAAC,sBAC7B,QAAO;CAGT,MAAM,wBAAwB,6BAA6B,OAAO,eAAe;AACjF,KAAI,CAAC,sBACH,QAAO;CAGT,MAAM,EAAE,OAAO,iBAAiB,uBAAuB;CACvD,MAAM,CAAC,YAAY,cAAc;CAIjC,MAAM,iBAAiB,eAAe,KAAK,eAAe,aAAa;CACvE,MAAM,iBAAiB,eAAe,KAAK,eAAe,aAAa;AAEvE,SAAQ,OAAR;EACE,KAAK,eACH,QAAO;EACT,KAAK,gBACH,QAAO,eAAe,KAAK,iBAAiB;EAC9C,KAAK,eACH,QAAO,eAAe,KAAK,iBAAiB,kBAAkB;;;;;;;;;AAUpE,MAAM,4BAA4B,YAA2E;AAC3G,SAAQ,WAAoB;AAC1B,MAAI,CAAC,QAAQ,OACX,QAAO;EAGT,MAAM,uBAAuB,0BAA0B,QAAQ,QAAQ;EACvE,MAAM,mBAAmB,sBAAsB,QAAQ,QAAQ;EAC/D,MAAM,8BAA8B,iCAAiC,QAAQ,QAAQ;AAErF,MAAI,CAAC,wBAAwB,kBAAkB,4BAA4B,CAAC,MAAK,MAAK,MAAM,KAAK,CAC/F,QAAO,CAAC,wBAAwB,kBAAkB,4BAA4B,CAAC,MAAK,MAAK,MAAM,KAAK;AAGtG,SAAO,CAAC,wBAAwB,kBAAkB,4BAA4B,CAAC,OAAM,MAAK,MAAM,KAAK;;;;;;;;;AA4BzG,MAAM,oBAAoB,EACxB,YAAY,EACV,WACA,eACA,QACA,OACA,OACA,SACA,SACA,SACA,UACA,KACA,iBAEF,SAAS,EAAE,0BAA0B,aACY;AACjD,KAAI,cAAc,UAAa,WAAW,OACxC,QAAO;EACL,OAAO;EACP;EACA,WAAW;EACX,UAAU;EACV,YAAY;EACZ,OAAO;EACP,SAAS;EACT,SAAS;EACT,eAAe;EACf;EACA;EACA;EACD;AAGH,KAAI,cAAc,QAAQ,WAAW,KACnC,QAAO;EACL,OAAO;EACP;EACA,WAAW;EACX,UAAU;EACV,YAAY;EACZ,OAAO;EACP,SAAS;EACT,SAAS;EACT,eAAe;EACf;EACA;EACA;EACD;AAGH,KAAI,2BAA2B,kBAAkB,UAC/C,QAAO;EACL,OAAO;EACP;EACA,WAAW;EACX,UAAU;EACV,YAAY;EACZ,OAAO;EACP,SAAS;EACT,SAAS;EACT,eAAe;EACf,WAAW;EACX;EACA,QAAQ;EACT;AAGH,KAAI,CAAC,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,QAC7D,QAAO;EACL,OAAO,SAAS;EAChB;EACA;EACA,UAAU;EACV,YAAY;EACZ;EACA;EACA,SAAS,WAAW;EACpB;EACA;EACA;EACA;EACD;AAGH,KAAI,CAAC,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,MACjD,QAAO;EACL,OAAO,SAAS;EAChB;EACA;EACA,UAAU;EACV,YAAY;EACZ,OAAO;EACP,SAAS;EACT,SAAS;EACT;EACA;EACA;EACA;EACD"}

package/node_modules/@clerk/shared/dist/runtime/authorization-Un7v7f6J.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorization-Un7v7f6J.mjs","names":["TYPES_TO_OBJECTS: TypesToConfig","checkOrgAuthorization: CheckOrgAuthorization","checkBillingAuthorization: CheckBillingAuthorization","org: string[]","user: string[]","config","checkReverificationAuthorization: CheckReverificationAuthorization"],"sources":["../../src/authorization.ts"],"sourcesContent":["import type {\n  ActClaim,\n  CheckAuthorizationWithCustomPermissions,\n  GetToken,\n  JwtPayload,\n  OrganizationCustomPermissionKey,\n  OrganizationCustomRoleKey,\n  PendingSessionOptions,\n  ReverificationConfig,\n  SessionStatusClaim,\n  SessionVerificationLevel,\n  SessionVerificationTypes,\n  SignOut,\n  UseAuthReturn,\n} from './types';\n\ntype TypesToConfig = Record<SessionVerificationTypes, Exclude<ReverificationConfig, SessionVerificationTypes>>;\ntype AuthorizationOptions = {\n  userId: string | null | undefined;\n  orgId: string | null | undefined;\n  orgRole: string | null | undefined;\n  orgPermissions: string[] | null | undefined;\n  factorVerificationAge: [number, number] | null;\n  features: string | null | undefined;\n  plans: string | null | undefined;\n};\n\ntype CheckOrgAuthorization = (\n  params: { role?: OrganizationCustomRoleKey; permission?: OrganizationCustomPermissionKey },\n  options: Pick<AuthorizationOptions, 'orgId' | 'orgRole' | 'orgPermissions'>,\n) => boolean | null;\n\ntype CheckBillingAuthorization = (\n  params: { feature?: string; plan?: string },\n  options: Pick<AuthorizationOptions, 'plans' | 'features'>,\n) => boolean | null;\n\ntype CheckReverificationAuthorization = (\n  params: {\n    reverification?: ReverificationConfig;\n  },\n  { factorVerificationAge }: AuthorizationOptions,\n) => boolean | null;\n\nconst TYPES_TO_OBJECTS: TypesToConfig = {\n  strict_mfa: {\n    afterMinutes: 10,\n    level: 'multi_factor',\n  },\n  strict: {\n    afterMinutes: 10,\n    level: 'second_factor',\n  },\n  moderate: {\n    afterMinutes: 60,\n    level: 'second_factor',\n  },\n  lax: {\n    afterMinutes: 1_440,\n    level: 'second_factor',\n  },\n};\n\nconst ALLOWED_LEVELS = new Set<SessionVerificationLevel>(['first_factor', 'second_factor', 'multi_factor']);\n\nconst ALLOWED_TYPES = new Set<SessionVerificationTypes>(['strict_mfa', 'strict', 'moderate', 'lax']);\n\nconst ORG_SCOPES = new Set(['o', 'org', 'organization']);\nconst USER_SCOPES = new Set(['u', 'user']);\n\n// Helper functions\nconst isValidMaxAge = (maxAge: any) => typeof maxAge === 'number' && maxAge > 0;\nconst isValidLevel = (level: any) => ALLOWED_LEVELS.has(level);\nconst isValidVerificationType = (type: any) => ALLOWED_TYPES.has(type);\n\nconst prefixWithOrg = (value: string) => value.replace(/^(org:)*/, 'org:');\n\n/**\n * Checks if a user has the required organization-level authorization.\n * Verifies if the user has the specified role or permission within their organization.\n *\n * @returns null, if unable to determine due to missing data or unspecified role/permission.\n */\nconst checkOrgAuthorization: CheckOrgAuthorization = (params, options) => {\n  const { orgId, orgRole, orgPermissions } = options;\n  if (!params.role && !params.permission) {\n    return null;\n  }\n\n  if (!orgId || !orgRole || !orgPermissions) {\n    return null;\n  }\n\n  if (params.permission) {\n    return orgPermissions.includes(prefixWithOrg(params.permission));\n  }\n\n  if (params.role) {\n    return prefixWithOrg(orgRole) === prefixWithOrg(params.role);\n  }\n  return null;\n};\n\nconst checkForFeatureOrPlan = (claim: string, featureOrPlan: string) => {\n  const { org: orgFeatures, user: userFeatures } = splitByScope(claim);\n  const [rawScope, rawId] = featureOrPlan.split(':');\n  const hasExplicitScope = rawId !== undefined;\n  const scope = rawScope;\n  const id = rawId || rawScope;\n\n  if (hasExplicitScope && !ORG_SCOPES.has(scope) && !USER_SCOPES.has(scope)) {\n    throw new Error(`Invalid scope: ${scope}`);\n  }\n\n  if (hasExplicitScope) {\n    if (ORG_SCOPES.has(scope)) {\n      return orgFeatures.includes(id);\n    }\n    if (USER_SCOPES.has(scope)) {\n      return userFeatures.includes(id);\n    }\n  }\n\n  // Since org scoped features will not exist if there is not an active org, merging is safe.\n  return [...orgFeatures, ...userFeatures].includes(id);\n};\n\nconst checkBillingAuthorization: CheckBillingAuthorization = (params, options) => {\n  const { features, plans } = options;\n\n  if (params.feature && features) {\n    return checkForFeatureOrPlan(features, params.feature);\n  }\n\n  if (params.plan && plans) {\n    return checkForFeatureOrPlan(plans, params.plan);\n  }\n  return null;\n};\n\nconst splitByScope = (fea: string | null | undefined) => {\n  const org: string[] = [];\n  const user: string[] = [];\n\n  if (!fea) {\n    return { org, user };\n  }\n\n  const parts = fea.split(',');\n  for (let i = 0; i < parts.length; i++) {\n    const part = parts[i].trim();\n    const colonIndex = part.indexOf(':');\n    if (colonIndex === -1) {\n      throw new Error(`Invalid claim element (missing colon): ${part}`);\n    }\n    const scope = part.slice(0, colonIndex);\n    const value = part.slice(colonIndex + 1);\n\n    if (scope === 'o') {\n      org.push(value);\n    } else if (scope === 'u') {\n      user.push(value);\n    } else if (scope === 'ou' || scope === 'uo') {\n      org.push(value);\n      user.push(value);\n    }\n  }\n\n  return { org, user };\n};\n\nconst validateReverificationConfig = (config: ReverificationConfig | undefined | null) => {\n  if (!config) {\n    return false;\n  }\n\n  const convertConfigToObject = (config: ReverificationConfig) => {\n    if (typeof config === 'string') {\n      return TYPES_TO_OBJECTS[config];\n    }\n    return config;\n  };\n\n  const isValidStringValue = typeof config === 'string' && isValidVerificationType(config);\n  const isValidObjectValue =\n    typeof config === 'object' && isValidLevel(config.level) && isValidMaxAge(config.afterMinutes);\n\n  if (isValidStringValue || isValidObjectValue) {\n    return convertConfigToObject.bind(null, config);\n  }\n\n  return false;\n};\n\n/**\n * Evaluates if the user meets re-verification authentication requirements.\n * Compares the user's factor verification ages against the specified maxAge.\n * Handles different verification levels (first factor, second factor, multi-factor).\n *\n * @returns null, if requirements or verification data are missing.\n */\nconst checkReverificationAuthorization: CheckReverificationAuthorization = (params, { factorVerificationAge }) => {\n  if (!params.reverification || !factorVerificationAge) {\n    return null;\n  }\n\n  const isValidReverification = validateReverificationConfig(params.reverification);\n  if (!isValidReverification) {\n    return null;\n  }\n\n  const { level, afterMinutes } = isValidReverification();\n  const [factor1Age, factor2Age] = factorVerificationAge;\n\n  // -1 indicates the factor group (1fa,2fa) is not enabled\n  // -1 for 1fa is not a valid scenario, but we need to make sure we handle it properly\n  const isValidFactor1 = factor1Age !== -1 ? afterMinutes > factor1Age : null;\n  const isValidFactor2 = factor2Age !== -1 ? afterMinutes > factor2Age : null;\n\n  switch (level) {\n    case 'first_factor':\n      return isValidFactor1;\n    case 'second_factor':\n      return factor2Age !== -1 ? isValidFactor2 : isValidFactor1;\n    case 'multi_factor':\n      return factor2Age === -1 ? isValidFactor1 : isValidFactor1 && isValidFactor2;\n  }\n};\n\n/**\n * Creates a function for comprehensive user authorization checks.\n * Combines organization-level and reverification authentication checks.\n * The returned function authorizes if both checks pass, or if at least one passes\n * when the other is indeterminate. Fails if userId is missing.\n */\nconst createCheckAuthorization = (options: AuthorizationOptions): CheckAuthorizationWithCustomPermissions => {\n  return (params): boolean => {\n    if (!options.userId) {\n      return false;\n    }\n\n    const billingAuthorization = checkBillingAuthorization(params, options);\n    const orgAuthorization = checkOrgAuthorization(params, options);\n    const reverificationAuthorization = checkReverificationAuthorization(params, options);\n\n    if ([billingAuthorization || orgAuthorization, reverificationAuthorization].some(a => a === null)) {\n      return [billingAuthorization || orgAuthorization, reverificationAuthorization].some(a => a === true);\n    }\n\n    return [billingAuthorization || orgAuthorization, reverificationAuthorization].every(a => a === true);\n  };\n};\n\ntype AuthStateOptions = {\n  authObject: {\n    userId?: string | null;\n    sessionId?: string | null;\n    sessionStatus?: SessionStatusClaim | null;\n    sessionClaims?: JwtPayload | null;\n    actor?: ActClaim | null;\n    orgId?: string | null;\n    orgRole?: OrganizationCustomRoleKey | null;\n    orgSlug?: string | null;\n    orgPermissions?: OrganizationCustomPermissionKey[] | null;\n    getToken: GetToken;\n    signOut: SignOut;\n    has: (params: Parameters<CheckAuthorizationWithCustomPermissions>[0]) => boolean;\n  };\n  options: PendingSessionOptions;\n};\n\n/**\n * Shared utility function that centralizes auth state resolution logic,\n * preventing duplication across different packages.\n *\n * @internal\n */\nconst resolveAuthState = ({\n  authObject: {\n    sessionId,\n    sessionStatus,\n    userId,\n    actor,\n    orgId,\n    orgRole,\n    orgSlug,\n    signOut,\n    getToken,\n    has,\n    sessionClaims,\n  },\n  options: { treatPendingAsSignedOut = true },\n}: AuthStateOptions): UseAuthReturn | undefined => {\n  if (sessionId === undefined && userId === undefined) {\n    return {\n      actor: undefined,\n      getToken,\n      has: () => false,\n      isLoaded: false,\n      isSignedIn: undefined,\n      orgId: undefined,\n      orgRole: undefined,\n      orgSlug: undefined,\n      sessionClaims: undefined,\n      sessionId,\n      signOut,\n      userId,\n    } as const;\n  }\n\n  if (sessionId === null && userId === null) {\n    return {\n      actor: null,\n      getToken,\n      has: () => false,\n      isLoaded: true,\n      isSignedIn: false,\n      orgId: null,\n      orgRole: null,\n      orgSlug: null,\n      sessionClaims: null,\n      sessionId,\n      signOut,\n      userId,\n    } as const;\n  }\n\n  if (treatPendingAsSignedOut && sessionStatus === 'pending') {\n    return {\n      actor: null,\n      getToken,\n      has: () => false,\n      isLoaded: true,\n      isSignedIn: false,\n      orgId: null,\n      orgRole: null,\n      orgSlug: null,\n      sessionClaims: null,\n      sessionId: null,\n      signOut,\n      userId: null,\n    } as const;\n  }\n\n  if (!!sessionId && !!sessionClaims && !!userId && !!orgId && !!orgRole) {\n    return {\n      actor: actor || null,\n      getToken,\n      has,\n      isLoaded: true,\n      isSignedIn: true,\n      orgId,\n      orgRole,\n      orgSlug: orgSlug || null,\n      sessionClaims,\n      sessionId,\n      signOut,\n      userId,\n    } as const;\n  }\n\n  if (!!sessionId && !!sessionClaims && !!userId && !orgId) {\n    return {\n      actor: actor || null,\n      getToken,\n      has,\n      isLoaded: true,\n      isSignedIn: true,\n      orgId: null,\n      orgRole: null,\n      orgSlug: null,\n      sessionClaims,\n      sessionId,\n      signOut,\n      userId,\n    } as const;\n  }\n};\n\nexport { createCheckAuthorization, resolveAuthState, splitByScope, validateReverificationConfig };\n"],"mappings":";AA4CA,MAAMA,mBAAkC;CACtC,YAAY;EACV,cAAc;EACd,OAAO;EACR;CACD,QAAQ;EACN,cAAc;EACd,OAAO;EACR;CACD,UAAU;EACR,cAAc;EACd,OAAO;EACR;CACD,KAAK;EACH,cAAc;EACd,OAAO;EACR;CACF;AAED,MAAM,iBAAiB,IAAI,IAA8B;CAAC;CAAgB;CAAiB;CAAe,CAAC;AAE3G,MAAM,gBAAgB,IAAI,IAA8B;CAAC;CAAc;CAAU;CAAY;CAAM,CAAC;AAEpG,MAAM,aAAa,IAAI,IAAI;CAAC;CAAK;CAAO;CAAe,CAAC;AACxD,MAAM,cAAc,IAAI,IAAI,CAAC,KAAK,OAAO,CAAC;AAG1C,MAAM,iBAAiB,WAAgB,OAAO,WAAW,YAAY,SAAS;AAC9E,MAAM,gBAAgB,UAAe,eAAe,IAAI,MAAM;AAC9D,MAAM,2BAA2B,SAAc,cAAc,IAAI,KAAK;AAEtE,MAAM,iBAAiB,UAAkB,MAAM,QAAQ,YAAY,OAAO;;;;;;;AAQ1E,MAAMC,yBAAgD,QAAQ,YAAY;CACxE,MAAM,EAAE,OAAO,SAAS,mBAAmB;AAC3C,KAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,WAC1B,QAAO;AAGT,KAAI,CAAC,SAAS,CAAC,WAAW,CAAC,eACzB,QAAO;AAGT,KAAI,OAAO,WACT,QAAO,eAAe,SAAS,cAAc,OAAO,WAAW,CAAC;AAGlE,KAAI,OAAO,KACT,QAAO,cAAc,QAAQ,KAAK,cAAc,OAAO,KAAK;AAE9D,QAAO;;AAGT,MAAM,yBAAyB,OAAe,kBAA0B;CACtE,MAAM,EAAE,KAAK,aAAa,MAAM,iBAAiB,aAAa,MAAM;CACpE,MAAM,CAAC,UAAU,SAAS,cAAc,MAAM,IAAI;CAClD,MAAM,mBAAmB,UAAU;CACnC,MAAM,QAAQ;CACd,MAAM,KAAK,SAAS;AAEpB,KAAI,oBAAoB,CAAC,WAAW,IAAI,MAAM,IAAI,CAAC,YAAY,IAAI,MAAM,CACvE,OAAM,IAAI,MAAM,kBAAkB,QAAQ;AAG5C,KAAI,kBAAkB;AACpB,MAAI,WAAW,IAAI,MAAM,CACvB,QAAO,YAAY,SAAS,GAAG;AAEjC,MAAI,YAAY,IAAI,MAAM,CACxB,QAAO,aAAa,SAAS,GAAG;;AAKpC,QAAO,CAAC,GAAG,aAAa,GAAG,aAAa,CAAC,SAAS,GAAG;;AAGvD,MAAMC,6BAAwD,QAAQ,YAAY;CAChF,MAAM,EAAE,UAAU,UAAU;AAE5B,KAAI,OAAO,WAAW,SACpB,QAAO,sBAAsB,UAAU,OAAO,QAAQ;AAGxD,KAAI,OAAO,QAAQ,MACjB,QAAO,sBAAsB,OAAO,OAAO,KAAK;AAElD,QAAO;;AAGT,MAAM,gBAAgB,QAAmC;CACvD,MAAMC,MAAgB,EAAE;CACxB,MAAMC,OAAiB,EAAE;AAEzB,KAAI,CAAC,IACH,QAAO;EAAE;EAAK;EAAM;CAGtB,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,OAAO,MAAM,GAAG,MAAM;EAC5B,MAAM,aAAa,KAAK,QAAQ,IAAI;AACpC,MAAI,eAAe,GACjB,OAAM,IAAI,MAAM,0CAA0C,OAAO;EAEnE,MAAM,QAAQ,KAAK,MAAM,GAAG,WAAW;EACvC,MAAM,QAAQ,KAAK,MAAM,aAAa,EAAE;AAExC,MAAI,UAAU,IACZ,KAAI,KAAK,MAAM;WACN,UAAU,IACnB,MAAK,KAAK,MAAM;WACP,UAAU,QAAQ,UAAU,MAAM;AAC3C,OAAI,KAAK,MAAM;AACf,QAAK,KAAK,MAAM;;;AAIpB,QAAO;EAAE;EAAK;EAAM;;AAGtB,MAAM,gCAAgC,WAAoD;AACxF,KAAI,CAAC,OACH,QAAO;CAGT,MAAM,yBAAyB,aAAiC;AAC9D,MAAI,OAAOC,aAAW,SACpB,QAAO,iBAAiBA;AAE1B,SAAOA;;CAGT,MAAM,qBAAqB,OAAO,WAAW,YAAY,wBAAwB,OAAO;CACxF,MAAM,qBACJ,OAAO,WAAW,YAAY,aAAa,OAAO,MAAM,IAAI,cAAc,OAAO,aAAa;AAEhG,KAAI,sBAAsB,mBACxB,QAAO,sBAAsB,KAAK,MAAM,OAAO;AAGjD,QAAO;;;;;;;;;AAUT,MAAMC,oCAAsE,QAAQ,EAAE,4BAA4B;AAChH,KAAI,CAAC,OAAO,kBAAkB,CAAC,sBAC7B,QAAO;CAGT,MAAM,wBAAwB,6BAA6B,OAAO,eAAe;AACjF,KAAI,CAAC,sBACH,QAAO;CAGT,MAAM,EAAE,OAAO,iBAAiB,uBAAuB;CACvD,MAAM,CAAC,YAAY,cAAc;CAIjC,MAAM,iBAAiB,eAAe,KAAK,eAAe,aAAa;CACvE,MAAM,iBAAiB,eAAe,KAAK,eAAe,aAAa;AAEvE,SAAQ,OAAR;EACE,KAAK,eACH,QAAO;EACT,KAAK,gBACH,QAAO,eAAe,KAAK,iBAAiB;EAC9C,KAAK,eACH,QAAO,eAAe,KAAK,iBAAiB,kBAAkB;;;;;;;;;AAUpE,MAAM,4BAA4B,YAA2E;AAC3G,SAAQ,WAAoB;AAC1B,MAAI,CAAC,QAAQ,OACX,QAAO;EAGT,MAAM,uBAAuB,0BAA0B,QAAQ,QAAQ;EACvE,MAAM,mBAAmB,sBAAsB,QAAQ,QAAQ;EAC/D,MAAM,8BAA8B,iCAAiC,QAAQ,QAAQ;AAErF,MAAI,CAAC,wBAAwB,kBAAkB,4BAA4B,CAAC,MAAK,MAAK,MAAM,KAAK,CAC/F,QAAO,CAAC,wBAAwB,kBAAkB,4BAA4B,CAAC,MAAK,MAAK,MAAM,KAAK;AAGtG,SAAO,CAAC,wBAAwB,kBAAkB,4BAA4B,CAAC,OAAM,MAAK,MAAM,KAAK;;;;;;;;;AA4BzG,MAAM,oBAAoB,EACxB,YAAY,EACV,WACA,eACA,QACA,OACA,OACA,SACA,SACA,SACA,UACA,KACA,iBAEF,SAAS,EAAE,0BAA0B,aACY;AACjD,KAAI,cAAc,UAAa,WAAW,OACxC,QAAO;EACL,OAAO;EACP;EACA,WAAW;EACX,UAAU;EACV,YAAY;EACZ,OAAO;EACP,SAAS;EACT,SAAS;EACT,eAAe;EACf;EACA;EACA;EACD;AAGH,KAAI,cAAc,QAAQ,WAAW,KACnC,QAAO;EACL,OAAO;EACP;EACA,WAAW;EACX,UAAU;EACV,YAAY;EACZ,OAAO;EACP,SAAS;EACT,SAAS;EACT,eAAe;EACf;EACA;EACA;EACD;AAGH,KAAI,2BAA2B,kBAAkB,UAC/C,QAAO;EACL,OAAO;EACP;EACA,WAAW;EACX,UAAU;EACV,YAAY;EACZ,OAAO;EACP,SAAS;EACT,SAAS;EACT,eAAe;EACf,WAAW;EACX;EACA,QAAQ;EACT;AAGH,KAAI,CAAC,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,QAC7D,QAAO;EACL,OAAO,SAAS;EAChB;EACA;EACA,UAAU;EACV,YAAY;EACZ;EACA;EACA,SAAS,WAAW;EACpB;EACA;EACA;EACA;EACD;AAGH,KAAI,CAAC,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,MACjD,QAAO;EACL,OAAO,SAAS;EAChB;EACA;EACA,UAAU;EACV,YAAY;EACZ,OAAO;EACP,SAAS;EACT,SAAS;EACT;EACA;EACA;EACA;EACD"}

package/node_modules/@clerk/shared/dist/runtime/authorization-errors-B7aH39AU.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorization-errors-B7aH39AU.js","names":[],"sources":["../../src/authorization-errors.ts"],"sourcesContent":["import type { ReverificationConfig } from './types';\n\ntype ClerkError<T> = {\n  clerk_error: T;\n};\n\nconst REVERIFICATION_REASON = 'reverification-error';\n\ntype ReverificationError<M extends { metadata?: any } = { metadata: unknown }> = ClerkError<\n  {\n    type: 'forbidden';\n    reason: typeof REVERIFICATION_REASON;\n  } & M\n>;\n\nconst reverificationError = <MC extends ReverificationConfig>(\n  missingConfig?: MC,\n): ReverificationError<{\n  metadata?: {\n    reverification?: MC;\n  };\n}> => ({\n  clerk_error: {\n    type: 'forbidden',\n    reason: REVERIFICATION_REASON,\n    metadata: {\n      reverification: missingConfig,\n    },\n  },\n});\n\nconst reverificationErrorResponse = (...args: Parameters<typeof reverificationError>) =>\n  new Response(JSON.stringify(reverificationError(...args)), {\n    status: 403,\n  });\n\nconst isReverificationHint = (result: any): result is ReturnType<typeof reverificationError> => {\n  return (\n    result &&\n    typeof result === 'object' &&\n    'clerk_error' in result &&\n    result.clerk_error?.type === 'forbidden' &&\n    result.clerk_error?.reason === REVERIFICATION_REASON\n  );\n};\n\nexport { isReverificationHint, reverificationError, reverificationErrorResponse };\n"],"mappings":";;AAMA,MAAM,wBAAwB;AAS9B,MAAM,uBACJ,mBAKK,EACL,aAAa;CACX,MAAM;CACN,QAAQ;CACR,UAAU,EACR,gBAAgB,eACjB;CACF,EACF;AAED,MAAM,+BAA+B,GAAG,SACtC,IAAI,SAAS,KAAK,UAAU,oBAAoB,GAAG,KAAK,CAAC,EAAE,EACzD,QAAQ,KACT,CAAC;AAEJ,MAAM,wBAAwB,WAAkE;AAC9F,QACE,UACA,OAAO,WAAW,YAClB,iBAAiB,UACjB,OAAO,aAAa,SAAS,eAC7B,OAAO,aAAa,WAAW"}

package/node_modules/@clerk/shared/dist/runtime/authorization-errors-CBHAr6Ld.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorization-errors-CBHAr6Ld.mjs","names":[],"sources":["../../src/authorization-errors.ts"],"sourcesContent":["import type { ReverificationConfig } from './types';\n\ntype ClerkError<T> = {\n  clerk_error: T;\n};\n\nconst REVERIFICATION_REASON = 'reverification-error';\n\ntype ReverificationError<M extends { metadata?: any } = { metadata: unknown }> = ClerkError<\n  {\n    type: 'forbidden';\n    reason: typeof REVERIFICATION_REASON;\n  } & M\n>;\n\nconst reverificationError = <MC extends ReverificationConfig>(\n  missingConfig?: MC,\n): ReverificationError<{\n  metadata?: {\n    reverification?: MC;\n  };\n}> => ({\n  clerk_error: {\n    type: 'forbidden',\n    reason: REVERIFICATION_REASON,\n    metadata: {\n      reverification: missingConfig,\n    },\n  },\n});\n\nconst reverificationErrorResponse = (...args: Parameters<typeof reverificationError>) =>\n  new Response(JSON.stringify(reverificationError(...args)), {\n    status: 403,\n  });\n\nconst isReverificationHint = (result: any): result is ReturnType<typeof reverificationError> => {\n  return (\n    result &&\n    typeof result === 'object' &&\n    'clerk_error' in result &&\n    result.clerk_error?.type === 'forbidden' &&\n    result.clerk_error?.reason === REVERIFICATION_REASON\n  );\n};\n\nexport { isReverificationHint, reverificationError, reverificationErrorResponse };\n"],"mappings":";AAMA,MAAM,wBAAwB;AAS9B,MAAM,uBACJ,mBAKK,EACL,aAAa;CACX,MAAM;CACN,QAAQ;CACR,UAAU,EACR,gBAAgB,eACjB;CACF,EACF;AAED,MAAM,+BAA+B,GAAG,SACtC,IAAI,SAAS,KAAK,UAAU,oBAAoB,GAAG,KAAK,CAAC,EAAE,EACzD,QAAQ,KACT,CAAC;AAEJ,MAAM,wBAAwB,WAAkE;AAC9F,QACE,UACA,OAAO,WAAW,YAClB,iBAAiB,UACjB,OAAO,aAAa,SAAS,eAC7B,OAAO,aAAa,WAAW"}

package/node_modules/@clerk/shared/dist/runtime/authorization-errors.d.mts

@@ -1,26 +0,0 @@
-import { Is as ReverificationConfig } from "./index-Cc98l5ga.mjs";
-import "./moduleManager-BsmFyRrH.mjs";
-
-//#region src/authorization-errors.d.ts
-type ClerkError<T> = {
-  clerk_error: T;
-};
-declare const REVERIFICATION_REASON = "reverification-error";
-type ReverificationError<M extends {
-  metadata?: any;
-} = {
-  metadata: unknown;
-}> = ClerkError<{
-  type: 'forbidden';
-  reason: typeof REVERIFICATION_REASON;
-} & M>;
-declare const reverificationError: <MC extends ReverificationConfig>(missingConfig?: MC) => ReverificationError<{
-  metadata?: {
-    reverification?: MC;
-  };
-}>;
-declare const reverificationErrorResponse: (...args: Parameters<typeof reverificationError>) => Response;
-declare const isReverificationHint: (result: any) => result is ReturnType<typeof reverificationError>;
-//#endregion
-export { isReverificationHint, reverificationError, reverificationErrorResponse };
-//# sourceMappingURL=authorization-errors.d.mts.map