@wix/cli-app 1.1.41 → 1.1.42

package/build/chunk-ZTW5IT5T.js

@@ -1,4 +0,0 @@
-import { createRequire as _createRequire } from 'node:module';
-const require = _createRequire(import.meta.url);
-import{v as u,w as a}from"./chunk-SQGBFWJ2.js";import{g as l,h as f,w as N}from"./chunk-UGTXCT5B.js";import{e as k,h as i}from"./chunk-V4TR6DCM.js";i();import{randomUUID as U}from"node:crypto";function L(r,t){r.updateDefaults(V(t))}function V(r){return r?{_client_id:r,_uuid:r,logged_user_id:r,logged_account_id:r,target_account_id:r}:{_client_id:U()}}i();import{uptime as R}from"node:process";i();var w=k(N(),1);import b from"node:os";import{platform as B,version as F}from"node:process";function x({cliVersion:r,flow:t}){return{...t?{flow:t}:{},cliVersion:r,isCI:w.default,nodeVersion:F,osName:J(),osVersion:b.release()}}function J(){switch(B){case"darwin":return"mac";case"win32":return"windows";default:return"linux"}}var y=()=>Math.round(R()*1e3);function h({biLogger:r,command:t,flow:S,cliVersion:E,projectId:p,extensions:o,extraFields:c}){let v=t.opts(),C=t.args,O=new Set(["apiKey"]),d=Object.fromEntries(Object.entries(v).map(([e,s])=>{let _=O.has(e)?"<censored>":s;return[e,_]})),n={command:t.name(),arguments:C.join(","),flags:Object.keys(d).length?JSON.stringify(d):""};return r.report(u({...x({cliVersion:E,flow:S}),...n,...p?{projectId:p}:{},...c?{extraFields:JSON.stringify(c)}:{},isValid:!0})),{succeed(){r.report(a({...n,...o?{extensions:JSON.stringify(o)}:{},duration:y(),isSuccess:!0,isValid:!0}))},failed(e){let s=l(e)?{errorType:f(e)?"SystemError":"UserError",errorName:e.name,errorMessage:e.message}:e instanceof Error?{errorType:"UnknownError",errorName:e.name,errorMessage:e.message}:{errorType:"UnknownError",errorMessage:JSON.stringify(e)};r.report(a({...n,...s,...o?{extensions:JSON.stringify(o)}:{},duration:y(),isSuccess:!1,isValid:!0}))}}}i();export{L as a,h as b};
-//# sourceMappingURL=chunk-ZTW5IT5T.js.map

package/build/platform-sdk/chunk-DGX4CFXG.js

@@ -1,2 +0,0 @@
-import{wixContext as l}from"@wix/sdk-context";function u(){let o=typeof $wixContext<"u"&&$wixContext.initWixModules?$wixContext.initWixModules:typeof globalThis.__wix_context__<"u"&&globalThis.__wix_context__.initWixModules?globalThis.__wix_context__.initWixModules:void 0;if(o)return{initWixModules(e,n){return r(()=>o(e,n))},fetchWithAuth(){throw new Error("fetchWithAuth is not available in this context")},graphql(){throw new Error("graphql is not available in this context")}};let t=typeof $wixContext<"u"?$wixContext.client:typeof l.client<"u"?l.client:typeof globalThis.__wix_context__<"u"?globalThis.__wix_context__.client:void 0,i=typeof $wixContext<"u"?$wixContext.elevatedClient:typeof l.elevatedClient<"u"?l.elevatedClient:typeof globalThis.__wix_context__<"u"?globalThis.__wix_context__.elevatedClient:void 0;if(!(!t&&!i))return{initWixModules(e,n){if(n){if(!i)throw new Error("An elevated client is required to use elevated modules. Make sure to initialize the Wix context with an elevated client before using elevated SDK modules");return r(()=>i.use(e))}if(!t)throw new Error("Wix context is not available. Make sure to initialize the Wix context before using SDK modules");return r(()=>t.use(e))},fetchWithAuth:(e,n)=>{if(!t)throw new Error("Wix context is not available. Make sure to initialize the Wix context before using SDK modules");return t.fetchWithAuth(e,n)},async graphql(e,n,a){if(!t)throw new Error("Wix context is not available. Make sure to initialize the Wix context before using SDK modules");return t.graphql(e,n,a)}}}function r(o){let t=globalThis.__wix_context__,i={client:l.client,elevatedClient:l.elevatedClient},e;globalThis.__wix_context__=void 0,l.client=void 0,l.elevatedClient=void 0,typeof $wixContext<"u"&&(e={client:$wixContext?.client,elevatedClient:$wixContext?.elevatedClient},delete $wixContext.client,delete $wixContext.elevatedClient);try{return o()}finally{globalThis.__wix_context__=t,l.client=i.client,l.elevatedClient=i.elevatedClient,typeof $wixContext<"u"&&($wixContext.client=e.client,$wixContext.elevatedClient=e.elevatedClient)}}function x(o,t){return{...o,...Object.fromEntries(t.map(i=>[i,(...e)=>{let n=u();if(!n)throw new Error("Wix context is not available. Make sure to initialize the Wix context before using SDK modules");return n.initWixModules(o)[i].apply(void 0,e)}]))}}function h(o){return x({__type:"host",create:t=>Object.entries(o).reduce((i,[e,n])=>({...i,[e]:n(t)}),{})},Object.keys(o))}export{h as a};
-//# sourceMappingURL=chunk-DGX4CFXG.js.map

package/build/platform-sdk/chunk-DGX4CFXG.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../node_modules/@wix/sdk-runtime/build/context.js","../../../node_modules/@wix/sdk-runtime/build/context-v2.js","../../../node_modules/@wix/sdk-runtime/build/host-modules.js"],"sourcesContent":["import { wixContext } from '@wix/sdk-context';\nexport function resolveContext() {\n    const oldContext = typeof $wixContext !== 'undefined' && $wixContext.initWixModules\n        ? $wixContext.initWixModules\n        : typeof globalThis.__wix_context__ !== 'undefined' &&\n            globalThis.__wix_context__.initWixModules\n            ? globalThis.__wix_context__.initWixModules\n            : undefined;\n    if (oldContext) {\n        return {\n            // @ts-expect-error\n            initWixModules(modules, elevated) {\n                return runWithoutContext(() => oldContext(modules, elevated));\n            },\n            fetchWithAuth() {\n                throw new Error('fetchWithAuth is not available in this context');\n            },\n            graphql() {\n                throw new Error('graphql is not available in this context');\n            },\n        };\n    }\n    const contextualClient = typeof $wixContext !== 'undefined'\n        ? $wixContext.client\n        : typeof wixContext.client !== 'undefined'\n            ? wixContext.client\n            : typeof globalThis.__wix_context__ !== 'undefined'\n                ? globalThis.__wix_context__.client\n                : undefined;\n    const elevatedClient = typeof $wixContext !== 'undefined'\n        ? $wixContext.elevatedClient\n        : typeof wixContext.elevatedClient !== 'undefined'\n            ? wixContext.elevatedClient\n            : typeof globalThis.__wix_context__ !== 'undefined'\n                ? globalThis.__wix_context__.elevatedClient\n                : undefined;\n    if (!contextualClient && !elevatedClient) {\n        return;\n    }\n    return {\n        initWixModules(wixModules, elevated) {\n            if (elevated) {\n                if (!elevatedClient) {\n                    throw new Error('An elevated client is required to use elevated modules. Make sure to initialize the Wix context with an elevated client before using elevated SDK modules');\n                }\n                return runWithoutContext(() => elevatedClient.use(wixModules));\n            }\n            if (!contextualClient) {\n                throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n            }\n            return runWithoutContext(() => contextualClient.use(wixModules));\n        },\n        fetchWithAuth: (urlOrRequest, requestInit) => {\n            if (!contextualClient) {\n                throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n            }\n            return contextualClient.fetchWithAuth(urlOrRequest, requestInit);\n        },\n        async graphql(query, variables, opts) {\n            if (!contextualClient) {\n                throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n            }\n            return contextualClient.graphql(query, variables, opts);\n        },\n    };\n}\nexport function contextualizeHostModule(hostModule, prop) {\n    return (...args) => {\n        const context = resolveContext();\n        if (!context) {\n            throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n        }\n        return context.initWixModules(hostModule)[prop].apply(undefined, args);\n    };\n}\nexport function contextualizeRESTModule(restModule, expectedArgsLength) {\n    return ((...args) => {\n        const context = resolveContext();\n        if (!context) {\n            throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n        }\n        return context\n            .initWixModules(restModule, args[expectedArgsLength]?.suppressAuth ? true : false)\n            .apply(undefined, args);\n    });\n}\nexport function contextualizeEventDefinitionModule(eventDefinition) {\n    return ((...args) => {\n        const context = resolveContext();\n        if (!context) {\n            throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n        }\n        return context.initWixModules(eventDefinition).apply(undefined, args);\n    });\n}\nexport function contextualizeSerivcePluginModule(servicePlugin) {\n    return ((...args) => {\n        const context = resolveContext();\n        if (!context) {\n            throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n        }\n        return context.initWixModules(servicePlugin).apply(undefined, args);\n    });\n}\nexport * from './context-v2.js';\nexport function runWithoutContext(fn) {\n    const globalContext = globalThis.__wix_context__;\n    const moduleContext = {\n        client: wixContext.client,\n        elevatedClient: wixContext.elevatedClient,\n    };\n    let closureContext;\n    globalThis.__wix_context__ = undefined;\n    wixContext.client = undefined;\n    wixContext.elevatedClient = undefined;\n    if (typeof $wixContext !== 'undefined') {\n        closureContext = {\n            client: $wixContext?.client,\n            elevatedClient: $wixContext?.elevatedClient,\n        };\n        delete $wixContext.client;\n        delete $wixContext.elevatedClient;\n    }\n    try {\n        return fn();\n    }\n    finally {\n        globalThis.__wix_context__ = globalContext;\n        wixContext.client = moduleContext.client;\n        wixContext.elevatedClient = moduleContext.elevatedClient;\n        if (typeof $wixContext !== 'undefined') {\n            $wixContext.client = closureContext.client;\n            $wixContext.elevatedClient = closureContext.elevatedClient;\n        }\n    }\n}\n","import { EventDefinition, ServicePluginDefinition, } from '@wix/sdk-types';\nimport { resolveContext } from './context.js';\nexport { EventDefinition, ServicePluginDefinition, };\nexport function contextualizeHostModuleV2(hostModule, props) {\n    return {\n        ...hostModule,\n        ...Object.fromEntries(props.map((prop) => [\n            prop,\n            (...args) => {\n                const context = resolveContext();\n                if (!context) {\n                    throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n                }\n                return context\n                    .initWixModules(hostModule)[prop].apply(undefined, args);\n            },\n        ])),\n    };\n}\nexport function contextualizeRESTModuleV2(restModule, elevated) {\n    return ((...args) => {\n        const context = resolveContext();\n        if (!context) {\n            // @ts-expect-error - if there is no context, we want to behave like the original module\n            return restModule.apply(undefined, args);\n        }\n        return (context\n            .initWixModules(restModule, elevated)\n            // @ts-expect-error - we know the args here are meant to be passed to the initalized module\n            .apply(undefined, args));\n    });\n}\nexport function contextualizeEventDefinitionModuleV2(eventDefinition) {\n    const contextualMethod = ((...args) => {\n        const context = resolveContext();\n        if (!context) {\n            // this line should throw, but this would be a breaking change for older SDK versions\n            // this is because in wixClient there's code that calls any function it detects and checks\n            // if it's an ambassador module (see isAmbassadorModule)\n            return () => { };\n        }\n        return context.initWixModules(eventDefinition).apply(undefined, args);\n    });\n    contextualMethod.__type = eventDefinition.__type;\n    contextualMethod.type = eventDefinition.type;\n    contextualMethod.isDomainEvent = eventDefinition.isDomainEvent;\n    contextualMethod.transformations = eventDefinition.transformations;\n    return contextualMethod;\n}\nexport function contextualizeSerivcePluginModuleV2(servicePlugin) {\n    const contextualMethod = ((...args) => {\n        const context = resolveContext();\n        if (!context) {\n            // this line should throw, but this would be a breaking change for older SDK versions\n            // this is because in wixClient there's code that calls any function it detects and checks\n            // if it's an ambassador module (see isAmbassadorModule)\n            return () => { };\n        }\n        return context.initWixModules(servicePlugin).apply(undefined, args);\n    });\n    contextualMethod.__type = servicePlugin.__type;\n    contextualMethod.componentType = servicePlugin.componentType;\n    contextualMethod.methods = servicePlugin.methods;\n    return contextualMethod;\n}\n","import { contextualizeHostModuleV2 } from './context-v2.js';\nexport function createHostModule(hostModuleAPI) {\n    return contextualizeHostModuleV2({\n        __type: 'host',\n        create: (host) => Object.entries(hostModuleAPI).reduce((acc, [key, fn]) => ({\n            ...acc,\n            [key]: fn(host),\n        }), {}),\n    }, Object.keys(hostModuleAPI));\n}\n"],"mappings":"AAAA,OAAS,cAAAA,MAAkB,mBACpB,SAASC,GAAiB,CAC7B,IAAMC,EAAa,OAAO,YAAgB,KAAe,YAAY,eAC/D,YAAY,eACZ,OAAO,WAAW,gBAAoB,KACpC,WAAW,gBAAgB,eACzB,WAAW,gBAAgB,eAC3B,OACV,GAAIA,EACA,MAAO,CAEH,eAAeC,EAASC,EAAU,CAC9B,OAAOC,EAAkB,IAAMH,EAAWC,EAASC,CAAQ,CAAC,CAChE,EACA,eAAgB,CACZ,MAAM,IAAI,MAAM,gDAAgD,CACpE,EACA,SAAU,CACN,MAAM,IAAI,MAAM,0CAA0C,CAC9D,CACJ,EAEJ,IAAME,EAAmB,OAAO,YAAgB,IAC1C,YAAY,OACZ,OAAON,EAAW,OAAW,IACzBA,EAAW,OACX,OAAO,WAAW,gBAAoB,IAClC,WAAW,gBAAgB,OAC3B,OACRO,EAAiB,OAAO,YAAgB,IACxC,YAAY,eACZ,OAAOP,EAAW,eAAmB,IACjCA,EAAW,eACX,OAAO,WAAW,gBAAoB,IAClC,WAAW,gBAAgB,eAC3B,OACd,GAAI,GAACM,GAAoB,CAACC,GAG1B,MAAO,CACH,eAAeC,EAAYJ,EAAU,CACjC,GAAIA,EAAU,CACV,GAAI,CAACG,EACD,MAAM,IAAI,MAAM,2JAA2J,EAE/K,OAAOF,EAAkB,IAAME,EAAe,IAAIC,CAAU,CAAC,CACjE,CACA,GAAI,CAACF,EACD,MAAM,IAAI,MAAM,gGAAgG,EAEpH,OAAOD,EAAkB,IAAMC,EAAiB,IAAIE,CAAU,CAAC,CACnE,EACA,cAAe,CAACC,EAAcC,IAAgB,CAC1C,GAAI,CAACJ,EACD,MAAM,IAAI,MAAM,gGAAgG,EAEpH,OAAOA,EAAiB,cAAcG,EAAcC,CAAW,CACnE,EACA,MAAM,QAAQC,EAAOC,EAAWC,EAAM,CAClC,GAAI,CAACP,EACD,MAAM,IAAI,MAAM,gGAAgG,EAEpH,OAAOA,EAAiB,QAAQK,EAAOC,EAAWC,CAAI,CAC1D,CACJ,CACJ,CAwCO,SAASC,EAAkBC,EAAI,CAClC,IAAMC,EAAgB,WAAW,gBAC3BC,EAAgB,CAClB,OAAQC,EAAW,OACnB,eAAgBA,EAAW,cAC/B,EACIC,EACJ,WAAW,gBAAkB,OAC7BD,EAAW,OAAS,OACpBA,EAAW,eAAiB,OACxB,OAAO,YAAgB,MACvBC,EAAiB,CACb,OAAQ,aAAa,OACrB,eAAgB,aAAa,cACjC,EACA,OAAO,YAAY,OACnB,OAAO,YAAY,gBAEvB,GAAI,CACA,OAAOJ,EAAG,CACd,QACA,CACI,WAAW,gBAAkBC,EAC7BE,EAAW,OAASD,EAAc,OAClCC,EAAW,eAAiBD,EAAc,eACtC,OAAO,YAAgB,MACvB,YAAY,OAASE,EAAe,OACpC,YAAY,eAAiBA,EAAe,eAEpD,CACJ,CCpIO,SAASC,EAA0BC,EAAYC,EAAO,CACzD,MAAO,CACH,GAAGD,EACH,GAAG,OAAO,YAAYC,EAAM,IAAKC,GAAS,CACtCA,EACA,IAAIC,IAAS,CACT,IAAMC,EAAUC,EAAe,EAC/B,GAAI,CAACD,EACD,MAAM,IAAI,MAAM,gGAAgG,EAEpH,OAAOA,EACF,eAAeJ,CAAU,EAAEE,CAAI,EAAE,MAAM,OAAWC,CAAI,CAC/D,CACJ,CAAC,CAAC,CACN,CACJ,CCjBO,SAASG,EAAiBC,EAAe,CAC5C,OAAOC,EAA0B,CAC7B,OAAQ,OACR,OAASC,GAAS,OAAO,QAAQF,CAAa,EAAE,OAAO,CAACG,EAAK,CAACC,EAAKC,CAAE,KAAO,CACxE,GAAGF,EACH,CAACC,CAAG,EAAGC,EAAGH,CAAI,CAClB,GAAI,CAAC,CAAC,CACV,EAAG,OAAO,KAAKF,CAAa,CAAC,CACjC","names":["wixContext","resolveContext","oldContext","modules","elevated","runWithoutContext","contextualClient","elevatedClient","wixModules","urlOrRequest","requestInit","query","variables","opts","runWithoutContext","fn","globalContext","moduleContext","wixContext","closureContext","contextualizeHostModuleV2","hostModule","props","prop","args","context","resolveContext","createHostModule","hostModuleAPI","contextualizeHostModuleV2","host","acc","key","fn"]}

package/build/platform-sdk/chunk-TEDR2MDT.js

@@ -1,2 +0,0 @@
-var h=Object.create;var e=Object.defineProperty;var i=Object.getOwnPropertyDescriptor;var j=Object.getOwnPropertyNames;var k=Object.getPrototypeOf,l=Object.prototype.hasOwnProperty;var m=(a,b)=>()=>(a&&(b=a(a=0)),b);var n=(a,b)=>()=>(b||a((b={exports:{}}).exports,b),b.exports),o=(a,b)=>{for(var c in b)e(a,c,{get:b[c],enumerable:!0})},g=(a,b,c,f)=>{if(b&&typeof b=="object"||typeof b=="function")for(let d of j(b))!l.call(a,d)&&d!==c&&e(a,d,{get:()=>b[d],enumerable:!(f=i(b,d))||f.enumerable});return a};var p=(a,b,c)=>(c=a!=null?h(k(a)):{},g(b||!a||!a.__esModule?e(c,"default",{value:a,enumerable:!0}):c,a)),q=a=>g(e({},"__esModule",{value:!0}),a);export{m as a,n as b,o as c,p as d,q as e};
-//# sourceMappingURL=chunk-TEDR2MDT.js.map

package/build/platform-sdk/chunk-UZ376HBX.js

@@ -1,2 +0,0 @@
-import{a as O,c as N}from"./chunk-TEDR2MDT.js";var z={};N(z,{EventDefinition:()=>E,SERVICE_PLUGIN_ERROR_TYPE:()=>b,ServicePluginDefinition:()=>B});function E(e,n=!1,s=l=>l){return()=>({__type:"event-definition",type:e,isDomainEvent:n,transformations:s})}function B(e,n){return{__type:"service-plugin-definition",componentType:e,methods:n}}var b,C=O(()=>{"use strict";b="wix_spi_error"});C();import{wixContext as L}from"@wix/sdk-context";var G=e=>{switch(e){case"get":case"GET":return"GET";case"post":case"POST":return"POST";case"put":case"PUT":return"PUT";case"delete":case"DELETE":return"DELETE";case"patch":case"PATCH":return"PATCH";case"head":case"HEAD":return"HEAD";case"options":case"OPTIONS":return"OPTIONS";default:throw new Error(`Unknown method: ${e}`)}},W=e=>n=>async s=>{let l,o=t=>{if(l=e(s)(t),l.url===void 0)throw new Error("Url was not successfully created for this request, please reach out to support channels for assistance.");let{method:a,url:i,params:c}=l;return{...l,method:G(a),url:i,data:l.data,params:c}};try{let t=await n.request(o);if(l===void 0)throw new Error("Request options were not created for this request, please reach out to support channels for assistance.");let a=Array.isArray(l.transformResponse)?l.transformResponse:[l.transformResponse],i=t.data;return a.forEach(c=>{c&&(i=c(t.data,t.headers))}),i}catch(t){throw typeof t=="object"&&t!==null&&"response"in t&&typeof t.response=="object"&&t.response!==null&&"data"in t.response?t.response.data:t}},M=e=>e.__isAmbassador?!0:!!e().__isAmbassador;var A="__metadata",m="www.wixapis.com";var v=class extends Error{message;response;constructor(n,s){super(n),this.message=n,this.response=s}async details(){let n=await this.response.json();return F(this.response.status,n?.message,n?.details,{requestId:this.response.headers.get("X-Wix-Request-Id"),details:n})}},F=(e,n,s,l)=>({details:{...!s?.validationError&&{applicationError:{description:n,code:e,data:l}},...s},message:n});var H=e=>e?.method&&["post","put","patch"].includes(e.method.toLocaleLowerCase())&&e.body?{"Content-Type":"application/json"}:{},P=e=>e&&typeof e=="object"&&!Array.isArray(e);var S=e=>e.__type==="host";function R(e,n){return e.create(n)}var K="x-wix-bi-gateway";function $(e,n){return{[K]:V({environment:"js-sdk","package-name":e.packageName??n?.PACKAGE_NAME,"method-fqn":e.methodFqn,entity:e.entityFqdn})}}function V(e){return Object.entries(e).filter(([n,s])=>!!s).map(([n,s])=>`${n}=${s}`).join(",")}import{wixContext as y}from"@wix/sdk-context";function T(e){let n=globalThis.__wix_context__,s={client:y.client,elevatedClient:y.elevatedClient},l;globalThis.__wix_context__=void 0,y.client=void 0,y.elevatedClient=void 0,typeof $wixContext<"u"&&(l={client:$wixContext?.client,elevatedClient:$wixContext?.elevatedClient},delete $wixContext.client,delete $wixContext.elevatedClient);try{return e()}finally{globalThis.__wix_context__=n,y.client=s.client,y.elevatedClient=s.elevatedClient,typeof $wixContext<"u"&&($wixContext.client=l.client,$wixContext.elevatedClient=l.elevatedClient)}}function U(e,n,s,l,o){return T(()=>e({request:async t=>{let a=t({host:o?.HTTPHost||m}),i=a;i.method==="GET"&&i.fallback?.length&&i.params.toString().length>4e3&&(i=a.fallback[0]);let h=`https://${o?.HTTPHost??m}${i.url}`;i.params&&i.params.toString()&&(h+=`?${i.params.toString()}`);try{let u=$(a,n),p=await s(h,{method:i.method,...i.data&&{body:JSON.stringify(i.data)},headers:{...u}});if(p.status!==200){let d=null;try{d=await p.json()}catch{}throw Y(p.status,d?.message,d?.details,{requestId:p.headers.get("X-Wix-Request-Id"),details:d})}return{data:await p.json(),headers:p.headers,status:p.status,statusText:p.statusText}}catch(u){throw u.message?.includes("fetch is not defined")&&console.error("Node.js v18+ is required"),u}},fetchWithAuth:s,wixAPIFetch:l}))}var Y=(e,n,s,l)=>({response:{data:{details:{...!s?.validationError&&{applicationError:{description:n,code:e,data:l}},...s},message:n},status:e}});C();function g(){return{emit(e,...n){for(let s=0,l=this.events[e]||[],o=l.length;s<o;s++)l[s](...n)},events:{},on(e,n){return(this.events[e]||=[]).push(n),()=>{this.events[e]=this.events[e]?.filter(s=>n!==s)}}}}var I=e=>e.__type==="event-definition";function j(e,n,s,l){let o;if(e.isDomainEvent){let a=s,{deletedEvent:i,actionEvent:c,createdEvent:h,updatedEvent:u,...p}=a,r={...l,...p};i?i?.deletedEntity?o={entity:i?.deletedEntity,metadata:r}:o={metadata:r}:c?o={data:c.body,metadata:r}:o={entity:h?.entity??u?.currentEntity,metadata:r}}else o={data:s,metadata:l};let t=e.transformations??(a=>a);return n(t(o))}function q(e){let n=new Map,s=g(),l={...s,getRegisteredEvents:()=>n,async process(o,t={expectedEvents:[]}){let{eventType:a,identity:i,instanceId:c,payload:h}=await this.parseJWT(o),u=[...t.expectedEvents,...Array.from(n.keys()).map(r=>({type:r}))];if(u.length>0&&!u.some(({type:r})=>r===a))throw new Error(`Unexpected event type: ${a}. Expected one of: ${u.map(r=>r.type).join(", ")}`);let p=n.get(a)??[];return await Promise.all(p.map(({eventDefinition:r,handler:d})=>j(r,d,h,{instanceId:c,identity:i}))),{instanceId:c,eventType:a,payload:h,identity:i}},async processRequest(o,t){let a=await o.text();return this.process(a,t)},async parseJWT(o){if(!e.decodeJWT)throw new Error("decodeJWT is not supported by the authentication strategy");let{decoded:t,valid:a}=await e.decodeJWT(o);if(!a)throw new Error("JWT is not valid");if(typeof t.data!="string")throw new Error(`Unexpected type of JWT data: expected string, got ${typeof t.data}`);let i=JSON.parse(t.data),c=i.eventType,h=i.instanceId,u=i.identity?JSON.parse(i.identity):void 0,p=JSON.parse(i.data);return{instanceId:h,eventType:c,payload:p,identity:u}},async parseRequest(o){let t=await o.text();return this.parseJWT(t)},async executeHandlers(o){let t=Array.from(n.keys()).map(i=>({type:i}));if(t.length>0&&!t.some(({type:i})=>i===o.eventType))throw new Error(`Unexpected event type: ${o.eventType}. Expected one of: ${t.map(i=>i.type).join(", ")}`);let a=n.get(o.eventType)??[];await Promise.all(a.map(({eventDefinition:i,handler:c})=>j(i,c,o.payload,{instanceId:o.instanceId,identity:o.identity})))},apps:{AppInstalled:E("AppInstalled")(),AppRemoved:E("AppRemoved")()}};return{initModule(o){return t=>{let a=n.get(o.type)??[];a.push({eventDefinition:o,handler:t}),n.set(o.type,a),s.emit("registered",o)}},client:l}}var k=e=>e.__type==="service-plugin-definition";function D(e){let n=new Map,s=g(),l={...s,getRegisteredServicePlugins:()=>n,async parseJWT(o){if(!e.decodeJWT)throw new Error("decodeJWT is not supported by the authentication strategy");let{decoded:t,valid:a}=await e.decodeJWT(o,!0);if(!a)throw new Error("JWT is not valid");if(typeof t.data!="object"||t.data===null||!("metadata"in t.data)||typeof t.data.metadata!="object"||t.data.metadata===null||!("appExtensionType"in t.data.metadata)||typeof t.data.metadata.appExtensionType!="string")throw new Error("Unexpected JWT data: expected object with metadata.appExtensionType string");return t.data},async process(o){let t=await this.parseJWT(o.body);return this.executeHandler(t,o.url)},async parseRequest(o){let t=await o.text();return this.parseJWT(t)},async processRequest(o){let t=o.url,a=await o.text(),i=await this.process({url:t,body:a});return Response.json(i)},async executeHandler(o,t){let a=o.metadata.appExtensionType.toLowerCase(),i=n.get(a)??[];if(i.length===0)throw new Error(`No service plugin implementations found for component type ${a}`);if(i.length>1)throw new Error(`Multiple service plugin implementations found for component type ${a}. This is currently not supported`);let{implementation:c,servicePluginDefinition:h}=i[0],u=h.methods.find(r=>t.endsWith(r.primaryHttpMappingPath));if(!u)throw new Error("Unexpect request: request url did not match any method: "+t);let p=c[u.name];if(!p)throw new Error(`Got request for service plugin method ${u.name} but no implementation was provided. Available methods: ${Object.keys(c).join(", ")}`);return u.transformations.toREST(await p(u.transformations.fromREST(o)))}};return{initModule(o){return t=>{let a=n.get(o.componentType.toLowerCase())??[];a.push({servicePluginDefinition:o,implementation:t}),n.set(o.componentType.toLowerCase(),a),s.emit("registered",o)}},client:l}}function Me(e){let n=e.headers||{Authorization:""},s=e.auth||{getAuthHeaders:r=>Promise.resolve({headers:{}})},l=s.getAuthHeaders.bind(void 0,e.host);s.getAuthHeaders=l;let{client:o,initModule:t}=D(s),{client:a,initModule:i}=q(s),c=async(r,d)=>{let f=await l(),x=H(d);return fetch(r,{...d,headers:{...x,...n,...f?.headers,...d?.headers}})},h=(r,d)=>{if(I(r))return i(r);if(k(r))return t(r);if(S(r)&&e.host)return R(r,e.host);if(typeof r=="function"){if("__type"in r&&r.__type===b)return r;let f=e.host?.apiBaseUrl??m;return U(T(()=>M(r))?W(r):r,d??{},c,(x,w)=>{let _=new URL(x,`https://${f}`);return _.host=f,_.protocol="https",c(_.toString(),w)},{HTTPHost:f})}else return P(r)?Object.fromEntries(Object.entries(r).map(([f,x])=>[f,h(x,r[A])])):r},u=r=>{for(let d in r)n[d]=r[d]};return{...e.modules?h(e.modules):{},auth:s,setHeaders:u,use:h,enableContext(r,d={elevated:!1}){r==="global"?globalThis.__wix_context__!=null?d.elevated?globalThis.__wix_context__.elevatedClient=this:globalThis.__wix_context__.client=this:d.elevated?globalThis.__wix_context__={elevatedClient:this}:globalThis.__wix_context__={client:this}:d.elevated?L.elevatedClient=this:L.client=this},fetch:(r,d)=>{let f=e.host?.apiBaseUrl??m,x=new URL(r,`https://${f}`);return x.host=f,x.protocol="https",c(x.toString(),d)},fetchWithAuth:async(r,d)=>{if(typeof r=="string"||r instanceof URL)return fetch(r,{...d,headers:{...d?.headers,...(await l()).headers}});for(let[f,x]of Object.entries((await l()).headers))r.headers.set(f,x);return fetch(r,d)},async graphql(r,d,f={apiVersion:"alpha"}){let x=e?.host?.apiBaseUrl??m,w=await c(`https://${x}/graphql/${f.apiVersion}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({query:r,variables:d})});if(w.status!==200)throw new v(`GraphQL request failed with status ${w.status}`,w);let{data:_,errors:J}=await w.json();return{data:_??{},errors:J}},webhooks:a,servicePlugins:o}}export{E as a,b,z as c,C as d,Me as e};
-//# sourceMappingURL=chunk-UZ376HBX.js.map

package/build/platform-sdk/chunk-UZ376HBX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../node_modules/@wix/sdk-types/build/index.mjs","../../../node_modules/@wix/sdk/build/wixClient.js","../../../node_modules/@wix/sdk/build/ambassador-modules.js","../../../node_modules/@wix/sdk/build/common.js","../../../node_modules/@wix/sdk/build/fetch-error.js","../../../node_modules/@wix/sdk/build/helpers.js","../../../node_modules/@wix/sdk/build/host-modules.js","../../../node_modules/@wix/sdk/build/bi/biHeaderGenerator.js","../../../node_modules/@wix/sdk/node_modules/@wix/sdk-runtime/build/context.js","../../../node_modules/@wix/sdk/build/rest-modules.js","../../../node_modules/@wix/sdk/build/event-handlers-modules.js","../../../node_modules/@wix/sdk/build/nanoevents.js","../../../node_modules/@wix/sdk/build/service-plugin-modules.js"],"sourcesContent":["// src/event-handlers-modules.ts\nfunction EventDefinition(type, isDomainEvent = false, transformations = (x) => x) {\n  return () => ({\n    __type: \"event-definition\",\n    type,\n    isDomainEvent,\n    transformations\n  });\n}\n\n// src/service-plugins.ts\nfunction ServicePluginDefinition(componentType, methods) {\n  return {\n    __type: \"service-plugin-definition\",\n    componentType,\n    methods\n  };\n}\nvar SERVICE_PLUGIN_ERROR_TYPE = \"wix_spi_error\";\nexport {\n  EventDefinition,\n  SERVICE_PLUGIN_ERROR_TYPE,\n  ServicePluginDefinition\n};\n","import { wixContext } from '@wix/sdk-context';\nimport { SERVICE_PLUGIN_ERROR_TYPE, } from '@wix/sdk-types';\nimport { isAmbassadorModule, toHTTPModule } from './ambassador-modules.js';\nimport { DEFAULT_API_URL, PUBLIC_METADATA_KEY } from './common.js';\nimport { FetchErrorResponse } from './fetch-error.js';\nimport { getDefaultContentHeader, isObject } from './helpers.js';\nimport { buildHostModule, isHostModule } from './host-modules.js';\nimport { buildRESTDescriptor } from './rest-modules.js';\nimport { eventHandlersModules, isEventHandlerModule, } from './event-handlers-modules.js';\nimport { isServicePluginModule, servicePluginsModules, } from './service-plugin-modules.js';\nimport { runWithoutContext } from '@wix/sdk-runtime/context';\nexport function createClient(config) {\n    const _headers = config.headers || { Authorization: '' };\n    const authStrategy = config.auth ||\n        {\n            getAuthHeaders: (_) => Promise.resolve({ headers: {} }),\n        };\n    const boundGetAuthHeaders = authStrategy.getAuthHeaders.bind(undefined, config.host);\n    authStrategy.getAuthHeaders = boundGetAuthHeaders;\n    const { client: servicePluginsClient, initModule: initServicePluginModule } = servicePluginsModules(authStrategy);\n    const { client: eventHandlersClient, initModule: initEventHandlerModule } = eventHandlersModules(authStrategy);\n    const boundFetch = async (url, options) => {\n        const authHeaders = await boundGetAuthHeaders();\n        const defaultContentTypeHeader = getDefaultContentHeader(options);\n        return fetch(url, {\n            ...options,\n            headers: {\n                ...defaultContentTypeHeader,\n                ..._headers,\n                ...authHeaders?.headers,\n                ...options?.headers,\n            },\n        });\n    };\n    // This is typed as `any` because when trying to properly type it as defined\n    // on the WixClient, typescript starts failing with `Type instantiation is\n    // excessively deep and possibly infinite.`\n    const use = (modules, metadata) => {\n        if (isEventHandlerModule(modules)) {\n            return initEventHandlerModule(modules);\n        }\n        else if (isServicePluginModule(modules)) {\n            return initServicePluginModule(modules);\n        }\n        else if (isHostModule(modules) && config.host) {\n            return buildHostModule(modules, config.host);\n        }\n        else if (typeof modules === 'function') {\n            // The generated namespaces all have the error classes on them and\n            // a class is also a function, so we need to explicitly ignore these\n            // error classes using a static field that exists on them.\n            if ('__type' in modules && modules.__type === SERVICE_PLUGIN_ERROR_TYPE) {\n                return modules;\n            }\n            const apiBaseUrl = config.host?.apiBaseUrl ?? DEFAULT_API_URL;\n            return buildRESTDescriptor(runWithoutContext(() => isAmbassadorModule(modules))\n                ? toHTTPModule(modules)\n                : modules, metadata ?? {}, boundFetch, (relativeUrl, fetchOptions) => {\n                const finalUrl = new URL(relativeUrl, `https://${apiBaseUrl}`);\n                finalUrl.host = apiBaseUrl;\n                finalUrl.protocol = 'https';\n                return boundFetch(finalUrl.toString(), fetchOptions);\n            }, { HTTPHost: apiBaseUrl });\n        }\n        else if (isObject(modules)) {\n            return Object.fromEntries(Object.entries(modules).map(([key, value]) => {\n                return [key, use(value, modules[PUBLIC_METADATA_KEY])];\n            }));\n        }\n        else {\n            return modules;\n        }\n    };\n    const setHeaders = (headers) => {\n        for (const k in headers) {\n            _headers[k] = headers[k];\n        }\n    };\n    const wrappedModules = config.modules\n        ? use(config.modules)\n        : {};\n    return {\n        ...wrappedModules,\n        auth: authStrategy,\n        setHeaders,\n        use,\n        enableContext(contextType, opts = { elevated: false }) {\n            if (contextType === 'global') {\n                if (globalThis.__wix_context__ != null) {\n                    if (opts.elevated) {\n                        globalThis.__wix_context__.elevatedClient = this;\n                    }\n                    else {\n                        globalThis.__wix_context__.client = this;\n                    }\n                }\n                else {\n                    if (opts.elevated) {\n                        globalThis.__wix_context__ = { elevatedClient: this };\n                    }\n                    else {\n                        globalThis.__wix_context__ = { client: this };\n                    }\n                }\n            }\n            else {\n                if (opts.elevated) {\n                    wixContext.elevatedClient = this;\n                }\n                else {\n                    wixContext.client = this;\n                }\n            }\n        },\n        fetch: (relativeUrl, options) => {\n            const apiBaseUrl = config.host?.apiBaseUrl ?? DEFAULT_API_URL;\n            const finalUrl = new URL(relativeUrl, `https://${apiBaseUrl}`);\n            finalUrl.host = apiBaseUrl;\n            finalUrl.protocol = 'https';\n            return boundFetch(finalUrl.toString(), options);\n        },\n        fetchWithAuth: async (urlOrRequest, requestInit) => {\n            if (typeof urlOrRequest === 'string' || urlOrRequest instanceof URL) {\n                return fetch(urlOrRequest, {\n                    ...requestInit,\n                    headers: {\n                        ...requestInit?.headers,\n                        ...(await boundGetAuthHeaders()).headers,\n                    },\n                });\n            }\n            else {\n                for (const [k, v] of Object.entries((await boundGetAuthHeaders()).headers)) {\n                    urlOrRequest.headers.set(k, v);\n                }\n                return fetch(urlOrRequest, requestInit);\n            }\n        },\n        async graphql(query, variables, opts = {\n            apiVersion: 'alpha',\n        }) {\n            const apiBaseUrl = config?.host?.apiBaseUrl ?? DEFAULT_API_URL;\n            const res = await boundFetch(`https://${apiBaseUrl}/graphql/${opts.apiVersion}`, {\n                method: 'POST',\n                headers: {\n                    'Content-Type': 'application/json',\n                },\n                body: JSON.stringify({ query, variables }),\n            });\n            if (res.status !== 200) {\n                throw new FetchErrorResponse(`GraphQL request failed with status ${res.status}`, res);\n            }\n            const { data, errors } = await res.json();\n            return { data: data ?? {}, errors };\n        },\n        webhooks: eventHandlersClient,\n        servicePlugins: servicePluginsClient,\n    };\n}\n","const parseMethod = (method) => {\n    switch (method) {\n        case 'get':\n        case 'GET':\n            return 'GET';\n        case 'post':\n        case 'POST':\n            return 'POST';\n        case 'put':\n        case 'PUT':\n            return 'PUT';\n        case 'delete':\n        case 'DELETE':\n            return 'DELETE';\n        case 'patch':\n        case 'PATCH':\n            return 'PATCH';\n        case 'head':\n        case 'HEAD':\n            return 'HEAD';\n        case 'options':\n        case 'OPTIONS':\n            return 'OPTIONS';\n        default:\n            throw new Error(`Unknown method: ${method}`);\n    }\n};\nexport const toHTTPModule = (factory) => (httpClient) => async (payload) => {\n    let requestOptions;\n    const HTTPFactory = (context) => {\n        requestOptions = factory(payload)(context);\n        if (requestOptions.url === undefined) {\n            throw new Error('Url was not successfully created for this request, please reach out to support channels for assistance.');\n        }\n        const { method, url, params } = requestOptions;\n        return {\n            ...requestOptions,\n            method: parseMethod(method),\n            url,\n            data: requestOptions.data,\n            params,\n        };\n    };\n    try {\n        const response = await httpClient.request(HTTPFactory);\n        if (requestOptions === undefined) {\n            throw new Error('Request options were not created for this request, please reach out to support channels for assistance.');\n        }\n        const transformations = Array.isArray(requestOptions.transformResponse)\n            ? requestOptions.transformResponse\n            : [requestOptions.transformResponse];\n        /**\n         * Based on Axios implementation:\n         * https://github.com/axios/axios/blob/3f53eb6960f05a1f88409c4b731a40de595cb825/lib/core/transformData.js#L22\n         */\n        let data = response.data;\n        transformations.forEach((transform) => {\n            if (transform) {\n                data = transform(response.data, response.headers);\n            }\n        });\n        return data;\n    }\n    catch (e) {\n        if (typeof e === 'object' &&\n            e !== null &&\n            'response' in e &&\n            typeof e.response === 'object' &&\n            e.response !== null &&\n            'data' in e.response) {\n            throw e.response.data;\n        }\n        throw e;\n    }\n};\n/*\n * Because of issues with tree-shaking, we cant really put static parameter on module.\n * We still have check for __isAmbassador for backward compatibility\n */\nexport const isAmbassadorModule = (module) => {\n    if (module.__isAmbassador) {\n        return true;\n    }\n    const fn = module();\n    return Boolean(fn.__isAmbassador);\n};\n","export const PUBLIC_METADATA_KEY = '__metadata';\nexport const DEFAULT_API_URL = 'www.wixapis.com';\nexport const FORCE_WRITE_API_URLS = ['/ecom/v1/carts/current'];\n","export class FetchErrorResponse extends Error {\n    message;\n    response;\n    constructor(message, response) {\n        super(message);\n        this.message = message;\n        this.response = response;\n    }\n    async details() {\n        const dataError = await this.response.json();\n        return errorBuilder(this.response.status, dataError?.message, dataError?.details, {\n            requestId: this.response.headers.get('X-Wix-Request-Id'),\n            details: dataError,\n        });\n    }\n}\nconst errorBuilder = (code, description, details, data) => {\n    return {\n        details: {\n            ...(!details?.validationError && {\n                applicationError: {\n                    description,\n                    code,\n                    data,\n                },\n            }),\n            ...details,\n        },\n        message: description,\n    };\n};\n","// we follow a simplified version of the axios convention\n// https://github.com/axios/axios/blob/649d739288c8e2c55829ac60e2345a0f3439c730/lib/defaults/index.js#L65\nexport const getDefaultContentHeader = (options) => {\n    if (options?.method &&\n        ['post', 'put', 'patch'].includes(options.method.toLocaleLowerCase()) &&\n        options.body) {\n        return { 'Content-Type': 'application/json' };\n    }\n    return {};\n};\nexport const isObject = (val) => val && typeof val === 'object' && !Array.isArray(val);\nexport function parsePublicKeyIfEncoded(publicKey) {\n    if (publicKey.includes('\\n') || publicKey.includes('\\r')) {\n        // publicKey is multi-line string, can be used as is\n        return publicKey.trim();\n    }\n    else {\n        // publicKey is base64 encoded\n        return typeof atob !== 'undefined'\n            ? atob(publicKey)\n            : Buffer.from(publicKey, 'base64').toString('utf-8');\n    }\n}\n","export const isHostModule = (val) => val.__type === 'host';\nexport function buildHostModule(val, host) {\n    return val.create(host);\n}\n","export const WixBIHeaderName = 'x-wix-bi-gateway';\nexport function biHeaderGenerator(apiMetadata, publicMetadata) {\n    return {\n        [WixBIHeaderName]: objectToKeyValue({\n            environment: 'js-sdk',\n            'package-name': apiMetadata.packageName ?? publicMetadata?.PACKAGE_NAME,\n            'method-fqn': apiMetadata.methodFqn,\n            entity: apiMetadata.entityFqdn,\n        }),\n    };\n}\nfunction objectToKeyValue(input) {\n    return Object.entries(input)\n        .filter(([_, value]) => Boolean(value))\n        .map(([key, value]) => `${key}=${value}`)\n        .join(',');\n}\n","import { wixContext } from '@wix/sdk-context';\nexport function resolveContext() {\n    const oldContext = typeof $wixContext !== 'undefined' && $wixContext.initWixModules\n        ? $wixContext.initWixModules\n        : typeof globalThis.__wix_context__ !== 'undefined' &&\n            globalThis.__wix_context__.initWixModules\n            ? globalThis.__wix_context__.initWixModules\n            : undefined;\n    if (oldContext) {\n        return {\n            // @ts-expect-error\n            initWixModules(modules, elevated) {\n                return runWithoutContext(() => oldContext(modules, elevated));\n            },\n            fetchWithAuth() {\n                throw new Error('fetchWithAuth is not available in this context');\n            },\n            graphql() {\n                throw new Error('graphql is not available in this context');\n            },\n        };\n    }\n    const contextualClient = typeof $wixContext !== 'undefined'\n        ? $wixContext.client\n        : typeof wixContext.client !== 'undefined'\n            ? wixContext.client\n            : typeof globalThis.__wix_context__ !== 'undefined'\n                ? globalThis.__wix_context__.client\n                : undefined;\n    const elevatedClient = typeof $wixContext !== 'undefined'\n        ? $wixContext.elevatedClient\n        : typeof wixContext.elevatedClient !== 'undefined'\n            ? wixContext.elevatedClient\n            : typeof globalThis.__wix_context__ !== 'undefined'\n                ? globalThis.__wix_context__.elevatedClient\n                : undefined;\n    if (!contextualClient && !elevatedClient) {\n        return;\n    }\n    return {\n        initWixModules(wixModules, elevated) {\n            if (elevated) {\n                if (!elevatedClient) {\n                    throw new Error('An elevated client is required to use elevated modules. Make sure to initialize the Wix context with an elevated client before using elevated SDK modules');\n                }\n                return runWithoutContext(() => elevatedClient.use(wixModules));\n            }\n            if (!contextualClient) {\n                throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n            }\n            return runWithoutContext(() => contextualClient.use(wixModules));\n        },\n        fetchWithAuth: (urlOrRequest, requestInit) => {\n            if (!contextualClient) {\n                throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n            }\n            return contextualClient.fetchWithAuth(urlOrRequest, requestInit);\n        },\n        async graphql(query, variables, opts) {\n            if (!contextualClient) {\n                throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n            }\n            return contextualClient.graphql(query, variables, opts);\n        },\n    };\n}\nexport function contextualizeHostModule(hostModule, prop) {\n    return (...args) => {\n        const context = resolveContext();\n        if (!context) {\n            throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n        }\n        return context.initWixModules(hostModule)[prop].apply(undefined, args);\n    };\n}\nexport function contextualizeRESTModule(restModule, expectedArgsLength) {\n    return ((...args) => {\n        const context = resolveContext();\n        if (!context) {\n            throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n        }\n        return context\n            .initWixModules(restModule, args[expectedArgsLength]?.suppressAuth ? true : false)\n            .apply(undefined, args);\n    });\n}\nexport function contextualizeEventDefinitionModule(eventDefinition) {\n    return ((...args) => {\n        const context = resolveContext();\n        if (!context) {\n            throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n        }\n        return context.initWixModules(eventDefinition).apply(undefined, args);\n    });\n}\nexport function contextualizeSerivcePluginModule(servicePlugin) {\n    return ((...args) => {\n        const context = resolveContext();\n        if (!context) {\n            throw new Error('Wix context is not available. Make sure to initialize the Wix context before using SDK modules');\n        }\n        return context.initWixModules(servicePlugin).apply(undefined, args);\n    });\n}\nexport * from './context-v2.js';\nexport function runWithoutContext(fn) {\n    const globalContext = globalThis.__wix_context__;\n    const moduleContext = {\n        client: wixContext.client,\n        elevatedClient: wixContext.elevatedClient,\n    };\n    let closureContext;\n    globalThis.__wix_context__ = undefined;\n    wixContext.client = undefined;\n    wixContext.elevatedClient = undefined;\n    if (typeof $wixContext !== 'undefined') {\n        closureContext = {\n            client: $wixContext?.client,\n            elevatedClient: $wixContext?.elevatedClient,\n        };\n        delete $wixContext.client;\n        delete $wixContext.elevatedClient;\n    }\n    try {\n        return fn();\n    }\n    finally {\n        globalThis.__wix_context__ = globalContext;\n        wixContext.client = moduleContext.client;\n        wixContext.elevatedClient = moduleContext.elevatedClient;\n        if (typeof $wixContext !== 'undefined') {\n            $wixContext.client = closureContext.client;\n            $wixContext.elevatedClient = closureContext.elevatedClient;\n        }\n    }\n}\n","import { biHeaderGenerator } from './bi/biHeaderGenerator.js';\nimport { DEFAULT_API_URL } from './common.js';\nimport { runWithoutContext } from '@wix/sdk-runtime/context';\nexport function buildRESTDescriptor(origFunc, publicMetadata, boundFetch, wixAPIFetch, options) {\n    return runWithoutContext(() => origFunc({\n        request: async (factory) => {\n            const requestOptions = factory({\n                host: options?.HTTPHost || DEFAULT_API_URL,\n            });\n            let request = requestOptions;\n            if (request.method === 'GET' &&\n                request.fallback?.length &&\n                request.params.toString().length > 4000) {\n                request = requestOptions.fallback[0];\n            }\n            const domain = options?.HTTPHost ?? DEFAULT_API_URL;\n            let url = `https://${domain}${request.url}`;\n            if (request.params && request.params.toString()) {\n                url += `?${request.params.toString()}`;\n            }\n            try {\n                const biHeader = biHeaderGenerator(requestOptions, publicMetadata);\n                const res = await boundFetch(url, {\n                    method: request.method,\n                    ...(request.data && {\n                        body: JSON.stringify(request.data),\n                    }),\n                    headers: {\n                        ...biHeader,\n                    },\n                });\n                if (res.status !== 200) {\n                    let dataError = null;\n                    try {\n                        dataError = await res.json();\n                    }\n                    catch (e) {\n                        //\n                    }\n                    throw errorBuilder(res.status, dataError?.message, dataError?.details, {\n                        requestId: res.headers.get('X-Wix-Request-Id'),\n                        details: dataError,\n                    });\n                }\n                const data = await res.json();\n                return {\n                    data,\n                    headers: res.headers,\n                    status: res.status,\n                    statusText: res.statusText,\n                };\n            }\n            catch (e) {\n                if (e.message?.includes('fetch is not defined')) {\n                    console.error('Node.js v18+ is required');\n                }\n                throw e;\n            }\n        },\n        fetchWithAuth: boundFetch,\n        wixAPIFetch,\n    }));\n}\nconst errorBuilder = (code, description, details, data) => {\n    return {\n        response: {\n            data: {\n                details: {\n                    ...(!details?.validationError && {\n                        applicationError: {\n                            description,\n                            code,\n                            data,\n                        },\n                    }),\n                    ...details,\n                },\n                message: description,\n            },\n            status: code,\n        },\n    };\n};\n","import { EventDefinition, } from '@wix/sdk-types';\nimport { createNanoEvents } from './nanoevents.js';\nexport const isEventHandlerModule = (val) => val.__type === 'event-definition';\nexport function buildEventDefinition(eventDefinition, registerHandler) {\n    return (handler) => {\n        registerHandler(eventDefinition, handler);\n    };\n}\nfunction runHandler(eventDefinition, handler, payload, baseEventMetadata) {\n    let envelope;\n    if (eventDefinition.isDomainEvent) {\n        const domainEventPayload = payload;\n        const { deletedEvent, actionEvent, createdEvent, updatedEvent, ...domainEventMetadata } = domainEventPayload;\n        const metadata = {\n            ...baseEventMetadata,\n            ...domainEventMetadata,\n        };\n        if (deletedEvent) {\n            if (deletedEvent?.deletedEntity) {\n                envelope = {\n                    entity: deletedEvent?.deletedEntity,\n                    metadata,\n                };\n            }\n            else {\n                envelope = { metadata };\n            }\n        }\n        else if (actionEvent) {\n            envelope = {\n                data: actionEvent.body,\n                metadata,\n            };\n        }\n        else {\n            envelope = {\n                entity: createdEvent?.entity ?? updatedEvent?.currentEntity,\n                metadata,\n            };\n        }\n    }\n    else {\n        envelope = {\n            data: payload,\n            metadata: baseEventMetadata,\n        };\n    }\n    const transformFromRESTFn = eventDefinition.transformations ?? ((x) => x);\n    return handler(transformFromRESTFn(envelope));\n}\nexport function eventHandlersModules(authStrategy) {\n    const eventHandlers = new Map();\n    const webhooksEmitter = createNanoEvents();\n    const client = {\n        ...webhooksEmitter,\n        getRegisteredEvents: () => eventHandlers,\n        async process(jwt, opts = {\n            expectedEvents: [],\n        }) {\n            const { eventType, identity, instanceId, payload } = await this.parseJWT(jwt);\n            const allExpectedEvents = [\n                ...opts.expectedEvents,\n                ...Array.from(eventHandlers.keys()).map((type) => ({ type })),\n            ];\n            if (allExpectedEvents.length > 0 &&\n                !allExpectedEvents.some(({ type }) => type === eventType)) {\n                throw new Error(`Unexpected event type: ${eventType}. Expected one of: ${allExpectedEvents\n                    .map((x) => x.type)\n                    .join(', ')}`);\n            }\n            const handlers = eventHandlers.get(eventType) ?? [];\n            await Promise.all(handlers.map(({ eventDefinition, handler }) => runHandler(eventDefinition, handler, payload, {\n                instanceId,\n                identity,\n            })));\n            return {\n                instanceId,\n                eventType,\n                payload,\n                identity,\n            };\n        },\n        async processRequest(request, opts) {\n            const body = await request.text();\n            return this.process(body, opts);\n        },\n        async parseJWT(jwt) {\n            if (!authStrategy.decodeJWT) {\n                throw new Error('decodeJWT is not supported by the authentication strategy');\n            }\n            const { decoded, valid } = await authStrategy.decodeJWT(jwt);\n            if (!valid) {\n                throw new Error('JWT is not valid');\n            }\n            if (typeof decoded.data !== 'string') {\n                throw new Error(`Unexpected type of JWT data: expected string, got ${typeof decoded.data}`);\n            }\n            const parsedDecoded = JSON.parse(decoded.data);\n            const eventType = parsedDecoded.eventType;\n            const instanceId = parsedDecoded.instanceId;\n            const identity = parsedDecoded.identity\n                ? JSON.parse(parsedDecoded.identity)\n                : undefined;\n            const payload = JSON.parse(parsedDecoded.data);\n            return {\n                instanceId,\n                eventType,\n                payload,\n                identity,\n            };\n        },\n        async parseRequest(request) {\n            const jwt = await request.text();\n            return this.parseJWT(jwt);\n        },\n        async executeHandlers(event) {\n            const allExpectedEvents = Array.from(eventHandlers.keys()).map((type) => ({ type }));\n            if (allExpectedEvents.length > 0 &&\n                !allExpectedEvents.some(({ type }) => type === event.eventType)) {\n                throw new Error(`Unexpected event type: ${event.eventType}. Expected one of: ${allExpectedEvents\n                    .map((x) => x.type)\n                    .join(', ')}`);\n            }\n            const handlers = eventHandlers.get(event.eventType) ?? [];\n            await Promise.all(handlers.map(({ eventDefinition, handler }) => runHandler(eventDefinition, handler, event.payload, {\n                instanceId: event.instanceId,\n                identity: event.identity,\n            })));\n        },\n        apps: {\n            AppInstalled: EventDefinition('AppInstalled')(),\n            AppRemoved: EventDefinition('AppRemoved')(),\n        },\n    };\n    return {\n        initModule(eventDefinition) {\n            return (handler) => {\n                const handlers = eventHandlers.get(eventDefinition.type) ?? [];\n                handlers.push({ eventDefinition, handler });\n                eventHandlers.set(eventDefinition.type, handlers);\n                webhooksEmitter.emit('registered', eventDefinition);\n            };\n        },\n        client,\n    };\n}\n","// Inlined from https://github.com/ai/nanoevents/blob/main/index.js\n/**\n * Create event emitter.\n *\n * ```js\n * import { createNanoEvents } from 'nanoevents'\n *\n * class Ticker {\n * constructor() {\n * this.emitter = createNanoEvents()\n * }\n * on(...args) {\n * return this.emitter.on(...args)\n * }\n * tick() {\n * this.emitter.emit('tick')\n * }\n * }\n * ```\n * @returns Event emitter.\n */\nexport function createNanoEvents() {\n    return {\n        emit(event, ...args) {\n            for (let i = 0, callbacks = this.events[event] || [], length = callbacks.length; i < length; i++) {\n                callbacks[i](...args);\n            }\n        },\n        events: {},\n        on(event, cb) {\n            (this.events[event] ||= []).push(cb);\n            return () => {\n                this.events[event] = this.events[event]?.filter((i) => cb !== i);\n            };\n        },\n    };\n}\n","import { createNanoEvents } from './nanoevents.js';\nexport const isServicePluginModule = (val) => val.__type === 'service-plugin-definition';\nexport function servicePluginsModules(authStrategy) {\n    const servicePluginsImplementations = new Map();\n    const servicePluginsEmitter = createNanoEvents();\n    const client = {\n        ...servicePluginsEmitter,\n        getRegisteredServicePlugins: () => servicePluginsImplementations,\n        async parseJWT(jwt) {\n            if (!authStrategy.decodeJWT) {\n                throw new Error('decodeJWT is not supported by the authentication strategy');\n            }\n            const { decoded, valid } = await authStrategy.decodeJWT(jwt, true);\n            if (!valid) {\n                throw new Error('JWT is not valid');\n            }\n            if (typeof decoded.data !== 'object' ||\n                decoded.data === null ||\n                !('metadata' in decoded.data) ||\n                typeof decoded.data.metadata !== 'object' ||\n                decoded.data.metadata === null ||\n                !('appExtensionType' in decoded.data.metadata) ||\n                typeof decoded.data.metadata.appExtensionType !== 'string') {\n                throw new Error('Unexpected JWT data: expected object with metadata.appExtensionType string');\n            }\n            return decoded.data;\n        },\n        async process(request) {\n            const servicePluginRequest = await this.parseJWT(request.body);\n            return this.executeHandler(servicePluginRequest, request.url);\n        },\n        async parseRequest(request) {\n            const body = await request.text();\n            return this.parseJWT(body);\n        },\n        async processRequest(request) {\n            const url = request.url;\n            const body = await request.text();\n            const implMethodResult = await this.process({ url, body });\n            return Response.json(implMethodResult);\n        },\n        async executeHandler(servicePluginRequest, url) {\n            const componentType = servicePluginRequest.metadata.appExtensionType.toLowerCase();\n            const implementations = servicePluginsImplementations.get(componentType) ?? [];\n            if (implementations.length === 0) {\n                throw new Error(`No service plugin implementations found for component type ${componentType}`);\n            }\n            else if (implementations.length > 1) {\n                throw new Error(`Multiple service plugin implementations found for component type ${componentType}. This is currently not supported`);\n            }\n            const { implementation: impl, servicePluginDefinition } = implementations[0];\n            const method = servicePluginDefinition.methods.find((m) => url.endsWith(m.primaryHttpMappingPath));\n            if (!method) {\n                throw new Error('Unexpect request: request url did not match any method: ' + url);\n            }\n            const implMethod = impl[method.name];\n            if (!implMethod) {\n                throw new Error(`Got request for service plugin method ${method.name} but no implementation was provided. Available methods: ${Object.keys(impl).join(', ')}`);\n            }\n            return method.transformations.toREST(await implMethod(method.transformations.fromREST(servicePluginRequest)));\n        },\n    };\n    return {\n        initModule(servicePluginDefinition) {\n            return (implementation) => {\n                const implementations = servicePluginsImplementations.get(servicePluginDefinition.componentType.toLowerCase()) ?? [];\n                implementations.push({ servicePluginDefinition, implementation });\n                servicePluginsImplementations.set(servicePluginDefinition.componentType.toLowerCase(), implementations);\n                servicePluginsEmitter.emit('registered', servicePluginDefinition);\n            };\n        },\n        client,\n    };\n}\n"],"mappings":"+CAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,qBAAAE,EAAA,8BAAAC,EAAA,4BAAAC,IACA,SAASF,EAAgBG,EAAMC,EAAgB,GAAOC,EAAmBC,GAAMA,EAAG,CAChF,MAAO,KAAO,CACZ,OAAQ,mBACR,KAAAH,EACA,cAAAC,EACA,gBAAAC,CACF,EACF,CAGA,SAASH,EAAwBK,EAAeC,EAAS,CACvD,MAAO,CACL,OAAQ,4BACR,cAAAD,EACA,QAAAC,CACF,CACF,CAjBA,IAkBIP,EAlBJQ,EAAAC,EAAA,kBAkBIT,EAA4B,kBCjBhCU,IADA,OAAS,cAAAC,MAAkB,mBCA3B,IAAMC,EAAeC,GAAW,CAC5B,OAAQA,EAAQ,CACZ,IAAK,MACL,IAAK,MACD,MAAO,MACX,IAAK,OACL,IAAK,OACD,MAAO,OACX,IAAK,MACL,IAAK,MACD,MAAO,MACX,IAAK,SACL,IAAK,SACD,MAAO,SACX,IAAK,QACL,IAAK,QACD,MAAO,QACX,IAAK,OACL,IAAK,OACD,MAAO,OACX,IAAK,UACL,IAAK,UACD,MAAO,UACX,QACI,MAAM,IAAI,MAAM,mBAAmBA,CAAM,EAAE,CACnD,CACJ,EACaC,EAAgBC,GAAaC,GAAe,MAAOC,GAAY,CACxE,IAAIC,EACEC,EAAeC,GAAY,CAE7B,GADAF,EAAiBH,EAAQE,CAAO,EAAEG,CAAO,EACrCF,EAAe,MAAQ,OACvB,MAAM,IAAI,MAAM,yGAAyG,EAE7H,GAAM,CAAE,OAAAL,EAAQ,IAAAQ,EAAK,OAAAC,CAAO,EAAIJ,EAChC,MAAO,CACH,GAAGA,EACH,OAAQN,EAAYC,CAAM,EAC1B,IAAAQ,EACA,KAAMH,EAAe,KACrB,OAAAI,CACJ,CACJ,EACA,GAAI,CACA,IAAMC,EAAW,MAAMP,EAAW,QAAQG,CAAW,EACrD,GAAID,IAAmB,OACnB,MAAM,IAAI,MAAM,yGAAyG,EAE7H,IAAMM,EAAkB,MAAM,QAAQN,EAAe,iBAAiB,EAChEA,EAAe,kBACf,CAACA,EAAe,iBAAiB,EAKnCO,EAAOF,EAAS,KACpB,OAAAC,EAAgB,QAASE,GAAc,CAC/BA,IACAD,EAAOC,EAAUH,EAAS,KAAMA,EAAS,OAAO,EAExD,CAAC,EACME,CACX,OACOE,EAAG,CACN,MAAI,OAAOA,GAAM,UACbA,IAAM,MACN,aAAcA,GACd,OAAOA,EAAE,UAAa,UACtBA,EAAE,WAAa,MACf,SAAUA,EAAE,SACNA,EAAE,SAAS,KAEfA,CACV,CACJ,EAKaC,EAAsBC,GAC3BA,EAAO,eACA,GAGJ,EADIA,EAAO,EACA,eCpFf,IAAMC,EAAsB,aACtBC,EAAkB,kBCDxB,IAAMC,EAAN,cAAiC,KAAM,CAC1C,QACA,SACA,YAAYC,EAASC,EAAU,CAC3B,MAAMD,CAAO,EACb,KAAK,QAAUA,EACf,KAAK,SAAWC,CACpB,CACA,MAAM,SAAU,CACZ,IAAMC,EAAY,MAAM,KAAK,SAAS,KAAK,EAC3C,OAAOC,EAAa,KAAK,SAAS,OAAQD,GAAW,QAASA,GAAW,QAAS,CAC9E,UAAW,KAAK,SAAS,QAAQ,IAAI,kBAAkB,EACvD,QAASA,CACb,CAAC,CACL,CACJ,EACMC,EAAe,CAACC,EAAMC,EAAaC,EAASC,KACvC,CACH,QAAS,CACL,GAAI,CAACD,GAAS,iBAAmB,CAC7B,iBAAkB,CACd,YAAAD,EACA,KAAAD,EACA,KAAAG,CACJ,CACJ,EACA,GAAGD,CACP,EACA,QAASD,CACb,GC3BG,IAAMG,EAA2BC,GAChCA,GAAS,QACT,CAAC,OAAQ,MAAO,OAAO,EAAE,SAASA,EAAQ,OAAO,kBAAkB,CAAC,GACpEA,EAAQ,KACD,CAAE,eAAgB,kBAAmB,EAEzC,CAAC,EAECC,EAAYC,GAAQA,GAAO,OAAOA,GAAQ,UAAY,CAAC,MAAM,QAAQA,CAAG,ECV9E,IAAMC,EAAgBC,GAAQA,EAAI,SAAW,OAC7C,SAASC,EAAgBD,EAAKE,EAAM,CACvC,OAAOF,EAAI,OAAOE,CAAI,CAC1B,CCHO,IAAMC,EAAkB,mBACxB,SAASC,EAAkBC,EAAaC,EAAgB,CAC3D,MAAO,CACH,CAACH,CAAe,EAAGI,EAAiB,CAChC,YAAa,SACb,eAAgBF,EAAY,aAAeC,GAAgB,aAC3D,aAAcD,EAAY,UAC1B,OAAQA,EAAY,UACxB,CAAC,CACL,CACJ,CACA,SAASE,EAAiBC,EAAO,CAC7B,OAAO,OAAO,QAAQA,CAAK,EACtB,OAAO,CAAC,CAACC,EAAGC,CAAK,IAAM,EAAQA,CAAM,EACrC,IAAI,CAAC,CAACC,EAAKD,CAAK,IAAM,GAAGC,CAAG,IAAID,CAAK,EAAE,EACvC,KAAK,GAAG,CACjB,CChBA,OAAS,cAAAE,MAAkB,mBAyGpB,SAASC,EAAkBC,EAAI,CAClC,IAAMC,EAAgB,WAAW,gBAC3BC,EAAgB,CAClB,OAAQC,EAAW,OACnB,eAAgBA,EAAW,cAC/B,EACIC,EACJ,WAAW,gBAAkB,OAC7BD,EAAW,OAAS,OACpBA,EAAW,eAAiB,OACxB,OAAO,YAAgB,MACvBC,EAAiB,CACb,OAAQ,aAAa,OACrB,eAAgB,aAAa,cACjC,EACA,OAAO,YAAY,OACnB,OAAO,YAAY,gBAEvB,GAAI,CACA,OAAOJ,EAAG,CACd,QACA,CACI,WAAW,gBAAkBC,EAC7BE,EAAW,OAASD,EAAc,OAClCC,EAAW,eAAiBD,EAAc,eACtC,OAAO,YAAgB,MACvB,YAAY,OAASE,EAAe,OACpC,YAAY,eAAiBA,EAAe,eAEpD,CACJ,CCpIO,SAASC,EAAoBC,EAAUC,EAAgBC,EAAYC,EAAaC,EAAS,CAC5F,OAAOC,EAAkB,IAAML,EAAS,CACpC,QAAS,MAAOM,GAAY,CACxB,IAAMC,EAAiBD,EAAQ,CAC3B,KAAMF,GAAS,UAAYI,CAC/B,CAAC,EACGC,EAAUF,EACVE,EAAQ,SAAW,OACnBA,EAAQ,UAAU,QAClBA,EAAQ,OAAO,SAAS,EAAE,OAAS,MACnCA,EAAUF,EAAe,SAAS,CAAC,GAGvC,IAAIG,EAAM,WADKN,GAAS,UAAYI,CACT,GAAGC,EAAQ,GAAG,GACrCA,EAAQ,QAAUA,EAAQ,OAAO,SAAS,IAC1CC,GAAO,IAAID,EAAQ,OAAO,SAAS,CAAC,IAExC,GAAI,CACA,IAAME,EAAWC,EAAkBL,EAAgBN,CAAc,EAC3DY,EAAM,MAAMX,EAAWQ,EAAK,CAC9B,OAAQD,EAAQ,OAChB,GAAIA,EAAQ,MAAQ,CAChB,KAAM,KAAK,UAAUA,EAAQ,IAAI,CACrC,EACA,QAAS,CACL,GAAGE,CACP,CACJ,CAAC,EACD,GAAIE,EAAI,SAAW,IAAK,CACpB,IAAIC,EAAY,KAChB,GAAI,CACAA,EAAY,MAAMD,EAAI,KAAK,CAC/B,MACU,CAEV,CACA,MAAME,EAAaF,EAAI,OAAQC,GAAW,QAASA,GAAW,QAAS,CACnE,UAAWD,EAAI,QAAQ,IAAI,kBAAkB,EAC7C,QAASC,CACb,CAAC,CACL,CAEA,MAAO,CACH,KAFS,MAAMD,EAAI,KAAK,EAGxB,QAASA,EAAI,QACb,OAAQA,EAAI,OACZ,WAAYA,EAAI,UACpB,CACJ,OACOG,EAAG,CACN,MAAIA,EAAE,SAAS,SAAS,sBAAsB,GAC1C,QAAQ,MAAM,0BAA0B,EAEtCA,CACV,CACJ,EACA,cAAed,EACf,YAAAC,CACJ,CAAC,CAAC,CACN,CACA,IAAMY,EAAe,CAACE,EAAMC,EAAaC,EAASC,KACvC,CACH,SAAU,CACN,KAAM,CACF,QAAS,CACL,GAAI,CAACD,GAAS,iBAAmB,CAC7B,iBAAkB,CACd,YAAAD,EACA,KAAAD,EACA,KAAAG,CACJ,CACJ,EACA,GAAGD,CACP,EACA,QAASD,CACb,EACA,OAAQD,CACZ,CACJ,GCjFJI,ICqBO,SAASC,GAAmB,CAC/B,MAAO,CACH,KAAKC,KAAUC,EAAM,CACjB,QAASC,EAAI,EAAGC,EAAY,KAAK,OAAOH,CAAK,GAAK,CAAC,EAAGI,EAASD,EAAU,OAAQD,EAAIE,EAAQF,IACzFC,EAAUD,CAAC,EAAE,GAAGD,CAAI,CAE5B,EACA,OAAQ,CAAC,EACT,GAAGD,EAAOK,EAAI,CACV,OAAC,KAAK,OAAOL,CAAK,IAAM,CAAC,GAAG,KAAKK,CAAE,EAC5B,IAAM,CACT,KAAK,OAAOL,CAAK,EAAI,KAAK,OAAOA,CAAK,GAAG,OAAQE,GAAMG,IAAOH,CAAC,CACnE,CACJ,CACJ,CACJ,CDlCO,IAAMI,EAAwBC,GAAQA,EAAI,SAAW,mBAM5D,SAASC,EAAWC,EAAiBC,EAASC,EAASC,EAAmB,CACtE,IAAIC,EACJ,GAAIJ,EAAgB,cAAe,CAC/B,IAAMK,EAAqBH,EACrB,CAAE,aAAAI,EAAc,YAAAC,EAAa,aAAAC,EAAc,aAAAC,EAAc,GAAGC,CAAoB,EAAIL,EACpFM,EAAW,CACb,GAAGR,EACH,GAAGO,CACP,EACIJ,EACIA,GAAc,cACdF,EAAW,CACP,OAAQE,GAAc,cACtB,SAAAK,CACJ,EAGAP,EAAW,CAAE,SAAAO,CAAS,EAGrBJ,EACLH,EAAW,CACP,KAAMG,EAAY,KAClB,SAAAI,CACJ,EAGAP,EAAW,CACP,OAAQI,GAAc,QAAUC,GAAc,cAC9C,SAAAE,CACJ,CAER,MAEIP,EAAW,CACP,KAAMF,EACN,SAAUC,CACd,EAEJ,IAAMS,EAAsBZ,EAAgB,kBAAqBa,GAAMA,GACvE,OAAOZ,EAAQW,EAAoBR,CAAQ,CAAC,CAChD,CACO,SAASU,EAAqBC,EAAc,CAC/C,IAAMC,EAAgB,IAAI,IACpBC,EAAkBC,EAAiB,EACnCC,EAAS,CACX,GAAGF,EACH,oBAAqB,IAAMD,EAC3B,MAAM,QAAQI,EAAKC,EAAO,CACtB,eAAgB,CAAC,CACrB,EAAG,CACC,GAAM,CAAE,UAAAC,EAAW,SAAAC,EAAU,WAAAC,EAAY,QAAAtB,CAAQ,EAAI,MAAM,KAAK,SAASkB,CAAG,EACtEK,EAAoB,CACtB,GAAGJ,EAAK,eACR,GAAG,MAAM,KAAKL,EAAc,KAAK,CAAC,EAAE,IAAKU,IAAU,CAAE,KAAAA,CAAK,EAAE,CAChE,EACA,GAAID,EAAkB,OAAS,GAC3B,CAACA,EAAkB,KAAK,CAAC,CAAE,KAAAC,CAAK,IAAMA,IAASJ,CAAS,EACxD,MAAM,IAAI,MAAM,0BAA0BA,CAAS,sBAAsBG,EACpE,IAAKZ,GAAMA,EAAE,IAAI,EACjB,KAAK,IAAI,CAAC,EAAE,EAErB,IAAMc,EAAWX,EAAc,IAAIM,CAAS,GAAK,CAAC,EAClD,aAAM,QAAQ,IAAIK,EAAS,IAAI,CAAC,CAAE,gBAAA3B,EAAiB,QAAAC,CAAQ,IAAMF,EAAWC,EAAiBC,EAASC,EAAS,CAC3G,WAAAsB,EACA,SAAAD,CACJ,CAAC,CAAC,CAAC,EACI,CACH,WAAAC,EACA,UAAAF,EACA,QAAApB,EACA,SAAAqB,CACJ,CACJ,EACA,MAAM,eAAeK,EAASP,EAAM,CAChC,IAAMQ,EAAO,MAAMD,EAAQ,KAAK,EAChC,OAAO,KAAK,QAAQC,EAAMR,CAAI,CAClC,EACA,MAAM,SAASD,EAAK,CAChB,GAAI,CAACL,EAAa,UACd,MAAM,IAAI,MAAM,2DAA2D,EAE/E,GAAM,CAAE,QAAAe,EAAS,MAAAC,CAAM,EAAI,MAAMhB,EAAa,UAAUK,CAAG,EAC3D,GAAI,CAACW,EACD,MAAM,IAAI,MAAM,kBAAkB,EAEtC,GAAI,OAAOD,EAAQ,MAAS,SACxB,MAAM,IAAI,MAAM,qDAAqD,OAAOA,EAAQ,IAAI,EAAE,EAE9F,IAAME,EAAgB,KAAK,MAAMF,EAAQ,IAAI,EACvCR,EAAYU,EAAc,UAC1BR,EAAaQ,EAAc,WAC3BT,EAAWS,EAAc,SACzB,KAAK,MAAMA,EAAc,QAAQ,EACjC,OACA9B,EAAU,KAAK,MAAM8B,EAAc,IAAI,EAC7C,MAAO,CACH,WAAAR,EACA,UAAAF,EACA,QAAApB,EACA,SAAAqB,CACJ,CACJ,EACA,MAAM,aAAaK,EAAS,CACxB,IAAMR,EAAM,MAAMQ,EAAQ,KAAK,EAC/B,OAAO,KAAK,SAASR,CAAG,CAC5B,EACA,MAAM,gBAAgBa,EAAO,CACzB,IAAMR,EAAoB,MAAM,KAAKT,EAAc,KAAK,CAAC,EAAE,IAAKU,IAAU,CAAE,KAAAA,CAAK,EAAE,EACnF,GAAID,EAAkB,OAAS,GAC3B,CAACA,EAAkB,KAAK,CAAC,CAAE,KAAAC,CAAK,IAAMA,IAASO,EAAM,SAAS,EAC9D,MAAM,IAAI,MAAM,0BAA0BA,EAAM,SAAS,sBAAsBR,EAC1E,IAAKZ,GAAMA,EAAE,IAAI,EACjB,KAAK,IAAI,CAAC,EAAE,EAErB,IAAMc,EAAWX,EAAc,IAAIiB,EAAM,SAAS,GAAK,CAAC,EACxD,MAAM,QAAQ,IAAIN,EAAS,IAAI,CAAC,CAAE,gBAAA3B,EAAiB,QAAAC,CAAQ,IAAMF,EAAWC,EAAiBC,EAASgC,EAAM,QAAS,CACjH,WAAYA,EAAM,WAClB,SAAUA,EAAM,QACpB,CAAC,CAAC,CAAC,CACP,EACA,KAAM,CACF,aAAcC,EAAgB,cAAc,EAAE,EAC9C,WAAYA,EAAgB,YAAY,EAAE,CAC9C,CACJ,EACA,MAAO,CACH,WAAWlC,EAAiB,CACxB,OAAQC,GAAY,CAChB,IAAM0B,EAAWX,EAAc,IAAIhB,EAAgB,IAAI,GAAK,CAAC,EAC7D2B,EAAS,KAAK,CAAE,gBAAA3B,EAAiB,QAAAC,CAAQ,CAAC,EAC1Ce,EAAc,IAAIhB,EAAgB,KAAM2B,CAAQ,EAChDV,EAAgB,KAAK,aAAcjB,CAAe,CACtD,CACJ,EACA,OAAAmB,CACJ,CACJ,CEhJO,IAAMgB,EAAyBC,GAAQA,EAAI,SAAW,4BACtD,SAASC,EAAsBC,EAAc,CAChD,IAAMC,EAAgC,IAAI,IACpCC,EAAwBC,EAAiB,EACzCC,EAAS,CACX,GAAGF,EACH,4BAA6B,IAAMD,EACnC,MAAM,SAASI,EAAK,CAChB,GAAI,CAACL,EAAa,UACd,MAAM,IAAI,MAAM,2DAA2D,EAE/E,GAAM,CAAE,QAAAM,EAAS,MAAAC,CAAM,EAAI,MAAMP,EAAa,UAAUK,EAAK,EAAI,EACjE,GAAI,CAACE,EACD,MAAM,IAAI,MAAM,kBAAkB,EAEtC,GAAI,OAAOD,EAAQ,MAAS,UACxBA,EAAQ,OAAS,MACjB,EAAE,aAAcA,EAAQ,OACxB,OAAOA,EAAQ,KAAK,UAAa,UACjCA,EAAQ,KAAK,WAAa,MAC1B,EAAE,qBAAsBA,EAAQ,KAAK,WACrC,OAAOA,EAAQ,KAAK,SAAS,kBAAqB,SAClD,MAAM,IAAI,MAAM,4EAA4E,EAEhG,OAAOA,EAAQ,IACnB,EACA,MAAM,QAAQE,EAAS,CACnB,IAAMC,EAAuB,MAAM,KAAK,SAASD,EAAQ,IAAI,EAC7D,OAAO,KAAK,eAAeC,EAAsBD,EAAQ,GAAG,CAChE,EACA,MAAM,aAAaA,EAAS,CACxB,IAAME,EAAO,MAAMF,EAAQ,KAAK,EAChC,OAAO,KAAK,SAASE,CAAI,CAC7B,EACA,MAAM,eAAeF,EAAS,CAC1B,IAAMG,EAAMH,EAAQ,IACdE,EAAO,MAAMF,EAAQ,KAAK,EAC1BI,EAAmB,MAAM,KAAK,QAAQ,CAAE,IAAAD,EAAK,KAAAD,CAAK,CAAC,EACzD,OAAO,SAAS,KAAKE,CAAgB,CACzC,EACA,MAAM,eAAeH,EAAsBE,EAAK,CAC5C,IAAME,EAAgBJ,EAAqB,SAAS,iBAAiB,YAAY,EAC3EK,EAAkBb,EAA8B,IAAIY,CAAa,GAAK,CAAC,EAC7E,GAAIC,EAAgB,SAAW,EAC3B,MAAM,IAAI,MAAM,8DAA8DD,CAAa,EAAE,EAE5F,GAAIC,EAAgB,OAAS,EAC9B,MAAM,IAAI,MAAM,oEAAoED,CAAa,mCAAmC,EAExI,GAAM,CAAE,eAAgBE,EAAM,wBAAAC,CAAwB,EAAIF,EAAgB,CAAC,EACrEG,EAASD,EAAwB,QAAQ,KAAME,GAAMP,EAAI,SAASO,EAAE,sBAAsB,CAAC,EACjG,GAAI,CAACD,EACD,MAAM,IAAI,MAAM,2DAA6DN,CAAG,EAEpF,IAAMQ,EAAaJ,EAAKE,EAAO,IAAI,EACnC,GAAI,CAACE,EACD,MAAM,IAAI,MAAM,yCAAyCF,EAAO,IAAI,2DAA2D,OAAO,KAAKF,CAAI,EAAE,KAAK,IAAI,CAAC,EAAE,EAEjK,OAAOE,EAAO,gBAAgB,OAAO,MAAME,EAAWF,EAAO,gBAAgB,SAASR,CAAoB,CAAC,CAAC,CAChH,CACJ,EACA,MAAO,CACH,WAAWO,EAAyB,CAChC,OAAQI,GAAmB,CACvB,IAAMN,EAAkBb,EAA8B,IAAIe,EAAwB,cAAc,YAAY,CAAC,GAAK,CAAC,EACnHF,EAAgB,KAAK,CAAE,wBAAAE,EAAyB,eAAAI,CAAe,CAAC,EAChEnB,EAA8B,IAAIe,EAAwB,cAAc,YAAY,EAAGF,CAAe,EACtGZ,EAAsB,KAAK,aAAcc,CAAuB,CACpE,CACJ,EACA,OAAAZ,CACJ,CACJ,CX9DO,SAASiB,GAAaC,EAAQ,CACjC,IAAMC,EAAWD,EAAO,SAAW,CAAE,cAAe,EAAG,EACjDE,EAAeF,EAAO,MACxB,CACI,eAAiBG,GAAM,QAAQ,QAAQ,CAAE,QAAS,CAAC,CAAE,CAAC,CAC1D,EACEC,EAAsBF,EAAa,eAAe,KAAK,OAAWF,EAAO,IAAI,EACnFE,EAAa,eAAiBE,EAC9B,GAAM,CAAE,OAAQC,EAAsB,WAAYC,CAAwB,EAAIC,EAAsBL,CAAY,EAC1G,CAAE,OAAQM,EAAqB,WAAYC,CAAuB,EAAIC,EAAqBR,CAAY,EACvGS,EAAa,MAAOC,EAAKC,IAAY,CACvC,IAAMC,EAAc,MAAMV,EAAoB,EACxCW,EAA2BC,EAAwBH,CAAO,EAChE,OAAO,MAAMD,EAAK,CACd,GAAGC,EACH,QAAS,CACL,GAAGE,EACH,GAAGd,EACH,GAAGa,GAAa,QAChB,GAAGD,GAAS,OAChB,CACJ,CAAC,CACL,EAIMI,EAAM,CAACC,EAASC,IAAa,CAC/B,GAAIC,EAAqBF,CAAO,EAC5B,OAAOT,EAAuBS,CAAO,EAEpC,GAAIG,EAAsBH,CAAO,EAClC,OAAOZ,EAAwBY,CAAO,EAErC,GAAII,EAAaJ,CAAO,GAAKlB,EAAO,KACrC,OAAOuB,EAAgBL,EAASlB,EAAO,IAAI,EAE1C,GAAI,OAAOkB,GAAY,WAAY,CAIpC,GAAI,WAAYA,GAAWA,EAAQ,SAAWM,EAC1C,OAAON,EAEX,IAAMO,EAAazB,EAAO,MAAM,YAAc0B,EAC9C,OAAOC,EAAoBC,EAAkB,IAAMC,EAAmBX,CAAO,CAAC,EACxEY,EAAaZ,CAAO,EACpBA,EAASC,GAAY,CAAC,EAAGR,EAAY,CAACoB,EAAaC,IAAiB,CACtE,IAAMC,EAAW,IAAI,IAAIF,EAAa,WAAWN,CAAU,EAAE,EAC7D,OAAAQ,EAAS,KAAOR,EAChBQ,EAAS,SAAW,QACbtB,EAAWsB,EAAS,SAAS,EAAGD,CAAY,CACvD,EAAG,CAAE,SAAUP,CAAW,CAAC,CAC/B,KACK,QAAIS,EAAShB,CAAO,EACd,OAAO,YAAY,OAAO,QAAQA,CAAO,EAAE,IAAI,CAAC,CAACiB,EAAKC,CAAK,IACvD,CAACD,EAAKlB,EAAImB,EAAOlB,EAAQmB,CAAmB,CAAC,CAAC,CACxD,CAAC,EAGKnB,CAEf,EACMoB,EAAcC,GAAY,CAC5B,QAAWC,KAAKD,EACZtC,EAASuC,CAAC,EAAID,EAAQC,CAAC,CAE/B,EAIA,MAAO,CACH,GAJmBxC,EAAO,QACxBiB,EAAIjB,EAAO,OAAO,EAClB,CAAC,EAGH,KAAME,EACN,WAAAoC,EACA,IAAArB,EACA,cAAcwB,EAAaC,EAAO,CAAE,SAAU,EAAM,EAAG,CAC/CD,IAAgB,SACZ,WAAW,iBAAmB,KAC1BC,EAAK,SACL,WAAW,gBAAgB,eAAiB,KAG5C,WAAW,gBAAgB,OAAS,KAIpCA,EAAK,SACL,WAAW,gBAAkB,CAAE,eAAgB,IAAK,EAGpD,WAAW,gBAAkB,CAAE,OAAQ,IAAK,EAKhDA,EAAK,SACLC,EAAW,eAAiB,KAG5BA,EAAW,OAAS,IAGhC,EACA,MAAO,CAACZ,EAAalB,IAAY,CAC7B,IAAMY,EAAazB,EAAO,MAAM,YAAc0B,EACxCO,EAAW,IAAI,IAAIF,EAAa,WAAWN,CAAU,EAAE,EAC7D,OAAAQ,EAAS,KAAOR,EAChBQ,EAAS,SAAW,QACbtB,EAAWsB,EAAS,SAAS,EAAGpB,CAAO,CAClD,EACA,cAAe,MAAO+B,EAAcC,IAAgB,CAChD,GAAI,OAAOD,GAAiB,UAAYA,aAAwB,IAC5D,OAAO,MAAMA,EAAc,CACvB,GAAGC,EACH,QAAS,CACL,GAAGA,GAAa,QAChB,IAAI,MAAMzC,EAAoB,GAAG,OACrC,CACJ,CAAC,EAGD,OAAW,CAACoC,EAAGM,CAAC,IAAK,OAAO,SAAS,MAAM1C,EAAoB,GAAG,OAAO,EACrEwC,EAAa,QAAQ,IAAIJ,EAAGM,CAAC,EAEjC,OAAO,MAAMF,EAAcC,CAAW,CAE9C,EACA,MAAM,QAAQE,EAAOC,EAAWN,EAAO,CACnC,WAAY,OAChB,EAAG,CACC,IAAMjB,EAAazB,GAAQ,MAAM,YAAc0B,EACzCuB,EAAM,MAAMtC,EAAW,WAAWc,CAAU,YAAYiB,EAAK,UAAU,GAAI,CAC7E,OAAQ,OACR,QAAS,CACL,eAAgB,kBACpB,EACA,KAAM,KAAK,UAAU,CAAE,MAAAK,EAAO,UAAAC,CAAU,CAAC,CAC7C,CAAC,EACD,GAAIC,EAAI,SAAW,IACf,MAAM,IAAIC,EAAmB,sCAAsCD,EAAI,MAAM,GAAIA,CAAG,EAExF,GAAM,CAAE,KAAAE,EAAM,OAAAC,CAAO,EAAI,MAAMH,EAAI,KAAK,EACxC,MAAO,CAAE,KAAME,GAAQ,CAAC,EAAG,OAAAC,CAAO,CACtC,EACA,SAAU5C,EACV,eAAgBH,CACpB,CACJ","names":["build_exports","__export","EventDefinition","SERVICE_PLUGIN_ERROR_TYPE","ServicePluginDefinition","type","isDomainEvent","transformations","x","componentType","methods","init_build","__esmMin","init_build","wixContext","parseMethod","method","toHTTPModule","factory","httpClient","payload","requestOptions","HTTPFactory","context","url","params","response","transformations","data","transform","e","isAmbassadorModule","module","PUBLIC_METADATA_KEY","DEFAULT_API_URL","FetchErrorResponse","message","response","dataError","errorBuilder","code","description","details","data","getDefaultContentHeader","options","isObject","val","isHostModule","val","buildHostModule","host","WixBIHeaderName","biHeaderGenerator","apiMetadata","publicMetadata","objectToKeyValue","input","_","value","key","wixContext","runWithoutContext","fn","globalContext","moduleContext","wixContext","closureContext","buildRESTDescriptor","origFunc","publicMetadata","boundFetch","wixAPIFetch","options","runWithoutContext","factory","requestOptions","DEFAULT_API_URL","request","url","biHeader","biHeaderGenerator","res","dataError","errorBuilder","e","code","description","details","data","init_build","createNanoEvents","event","args","i","callbacks","length","cb","isEventHandlerModule","val","runHandler","eventDefinition","handler","payload","baseEventMetadata","envelope","domainEventPayload","deletedEvent","actionEvent","createdEvent","updatedEvent","domainEventMetadata","metadata","transformFromRESTFn","x","eventHandlersModules","authStrategy","eventHandlers","webhooksEmitter","createNanoEvents","client","jwt","opts","eventType","identity","instanceId","allExpectedEvents","type","handlers","request","body","decoded","valid","parsedDecoded","event","EventDefinition","isServicePluginModule","val","servicePluginsModules","authStrategy","servicePluginsImplementations","servicePluginsEmitter","createNanoEvents","client","jwt","decoded","valid","request","servicePluginRequest","body","url","implMethodResult","componentType","implementations","impl","servicePluginDefinition","method","m","implMethod","implementation","createClient","config","_headers","authStrategy","_","boundGetAuthHeaders","servicePluginsClient","initServicePluginModule","servicePluginsModules","eventHandlersClient","initEventHandlerModule","eventHandlersModules","boundFetch","url","options","authHeaders","defaultContentTypeHeader","getDefaultContentHeader","use","modules","metadata","isEventHandlerModule","isServicePluginModule","isHostModule","buildHostModule","SERVICE_PLUGIN_ERROR_TYPE","apiBaseUrl","DEFAULT_API_URL","buildRESTDescriptor","runWithoutContext","isAmbassadorModule","toHTTPModule","relativeUrl","fetchOptions","finalUrl","isObject","key","value","PUBLIC_METADATA_KEY","setHeaders","headers","k","contextType","opts","wixContext","urlOrRequest","requestInit","v","query","variables","res","FetchErrorResponse","data","errors"]}

package/build/platform-sdk/esm-WXLS5NTC.js

@@ -1,2 +0,0 @@
-import{c as pt}from"./chunk-TEDR2MDT.js";import{Buffer as mt}from"node:buffer";import{createHash as yr}from"node:crypto";var wr=(e,t)=>yr(e).update(t).digest(),He=wr;var S=new TextEncoder,b=new TextDecoder,xe=2**32;function K(...e){let t=e.reduce((n,{length:i})=>n+i,0),r=new Uint8Array(t),o=0;for(let n of e)r.set(n,o),o+=n.length;return r}function Le(e,t){return K(S.encode(e),new Uint8Array([0]),t)}function $e(e,t,r){if(t<0||t>=xe)throw new RangeError(`value must be >= 0 and <= ${xe-1}. Received ${t}`);e.set([t>>>24,t>>>16,t>>>8,t&255],r)}function dt(e){let t=Math.floor(e/xe),r=e%xe,o=new Uint8Array(8);return $e(o,t,0),$e(o,r,4),o}function Pe(e){let t=new Uint8Array(4);return $e(t,e),t}function Ce(e){return K(Pe(e.length),e)}async function ft(e,t,r){let o=Math.ceil((t>>3)/32),n=new Uint8Array(o*32);for(let i=0;i<o;i++){let a=new Uint8Array(4+e.length+r.length);a.set(Pe(i+1)),a.set(e,4),a.set(r,4+e.length),n.set(await He("sha256",a),i*32)}return n.slice(0,t>>3)}function Er(e){let t=e;return t instanceof Uint8Array&&(t=b.decode(t)),t}var w=e=>mt.from(e).toString("base64url");var A=e=>new Uint8Array(mt.from(Er(e),"base64"));import{createDecipheriv as Ht,KeyObject as Pr}from"node:crypto";var ut={};pt(ut,{JOSEAlgNotAllowed:()=>$,JOSEError:()=>C,JOSENotSupported:()=>f,JWEDecryptionFailed:()=>N,JWEInvalid:()=>c,JWKInvalid:()=>ie,JWKSInvalid:()=>L,JWKSMultipleMatchingKeys:()=>ae,JWKSNoMatchingKey:()=>q,JWKSTimeout:()=>se,JWSInvalid:()=>u,JWSSignatureVerificationFailed:()=>Y,JWTClaimValidationFailed:()=>J,JWTExpired:()=>oe,JWTInvalid:()=>x});var C=class extends Error{static get code(){return"ERR_JOSE_GENERIC"}code="ERR_JOSE_GENERIC";constructor(t){super(t),this.name=this.constructor.name,Error.captureStackTrace?.(this,this.constructor)}},J=class extends C{static get code(){return"ERR_JWT_CLAIM_VALIDATION_FAILED"}code="ERR_JWT_CLAIM_VALIDATION_FAILED";claim;reason;constructor(t,r="unspecified",o="unspecified"){super(t),this.claim=r,this.reason=o}},oe=class extends C{static get code(){return"ERR_JWT_EXPIRED"}code="ERR_JWT_EXPIRED";claim;reason;constructor(t,r="unspecified",o="unspecified"){super(t),this.claim=r,this.reason=o}},$=class extends C{static get code(){return"ERR_JOSE_ALG_NOT_ALLOWED"}code="ERR_JOSE_ALG_NOT_ALLOWED"},f=class extends C{static get code(){return"ERR_JOSE_NOT_SUPPORTED"}code="ERR_JOSE_NOT_SUPPORTED"},N=class extends C{static get code(){return"ERR_JWE_DECRYPTION_FAILED"}code="ERR_JWE_DECRYPTION_FAILED";message="decryption operation failed"},c=class extends C{static get code(){return"ERR_JWE_INVALID"}code="ERR_JWE_INVALID"},u=class extends C{static get code(){return"ERR_JWS_INVALID"}code="ERR_JWS_INVALID"},x=class extends C{static get code(){return"ERR_JWT_INVALID"}code="ERR_JWT_INVALID"},ie=class extends C{static get code(){return"ERR_JWK_INVALID"}code="ERR_JWK_INVALID"},L=class extends C{static get code(){return"ERR_JWKS_INVALID"}code="ERR_JWKS_INVALID"},q=class extends C{static get code(){return"ERR_JWKS_NO_MATCHING_KEY"}code="ERR_JWKS_NO_MATCHING_KEY";message="no applicable key found in the JSON Web Key Set"},ae=class extends C{[Symbol.asyncIterator];static get code(){return"ERR_JWKS_MULTIPLE_MATCHING_KEYS"}code="ERR_JWKS_MULTIPLE_MATCHING_KEYS";message="multiple matching keys found in the JSON Web Key Set"},se=class extends C{static get code(){return"ERR_JWKS_TIMEOUT"}code="ERR_JWKS_TIMEOUT";message="request timed out"},Y=class extends C{static get code(){return"ERR_JWS_SIGNATURE_VERIFICATION_FAILED"}code="ERR_JWS_SIGNATURE_VERIFICATION_FAILED";message="signature verification failed"};import{randomFillSync as G}from"node:crypto";function Ge(e){switch(e){case"A128GCM":case"A128GCMKW":case"A192GCM":case"A192GCMKW":case"A256GCM":case"A256GCMKW":return 96;case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return 128;default:throw new f(`Unsupported JWE Algorithm: ${e}`)}}var lt=e=>G(new Uint8Array(Ge(e)>>3));var Sr=(e,t)=>{if(t.length<<3!==Ge(e))throw new c("Invalid Initialization Vector length")},Je=Sr;import*as yt from"node:util";var g=e=>yt.types.isKeyObject(e);var gr=(e,t)=>{let r;switch(e){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":r=parseInt(e.slice(-3),10);break;case"A128GCM":case"A192GCM":case"A256GCM":r=parseInt(e.slice(1,4),10);break;default:throw new f(`Content Encryption Algorithm ${e} is not supported either by JOSE or your javascript runtime`)}if(t instanceof Uint8Array){let o=t.byteLength<<3;if(o!==r)throw new c(`Invalid Content Encryption Key length. Expected ${r} bits, got ${o} bits`);return}if(g(t)&&t.type==="secret"){let o=t.symmetricKeySize<<3;if(o!==r)throw new c(`Invalid Content Encryption Key length. Expected ${r} bits, got ${o} bits`);return}throw new TypeError("Invalid Content Encryption Key type")},ve=gr;import{timingSafeEqual as br}from"node:crypto";var Ar=br,wt=Ar;import{createHmac as _r}from"node:crypto";function ce(e,t,r,o,n,i){let a=K(e,t,r,dt(e.length<<3)),s=_r(`sha${o}`,n);return s.update(a),s.digest().slice(0,i>>3)}import*as Et from"node:crypto";import*as St from"node:util";var Kr=Et.webcrypto,gt=Kr,_=e=>St.types.isCryptoKey(e);function W(e,t="algorithm.name"){return new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`)}function B(e,t){return e.name===t}function We(e){return parseInt(e.name.slice(4),10)}function Hr(e){switch(e){case"ES256":return"P-256";case"ES384":return"P-384";case"ES512":return"P-521";default:throw new Error("unreachable")}}function bt(e,t){if(t.length&&!t.some(r=>e.usages.includes(r))){let r="CryptoKey does not support this operation, its usages must include ";if(t.length>2){let o=t.pop();r+=`one of ${t.join(", ")}, or ${o}.`}else t.length===2?r+=`one of ${t[0]} or ${t[1]}.`:r+=`${t[0]}.`;throw new TypeError(r)}}function At(e,t,...r){switch(t){case"HS256":case"HS384":case"HS512":{if(!B(e.algorithm,"HMAC"))throw W("HMAC");let o=parseInt(t.slice(2),10);if(We(e.algorithm.hash)!==o)throw W(`SHA-${o}`,"algorithm.hash");break}case"RS256":case"RS384":case"RS512":{if(!B(e.algorithm,"RSASSA-PKCS1-v1_5"))throw W("RSASSA-PKCS1-v1_5");let o=parseInt(t.slice(2),10);if(We(e.algorithm.hash)!==o)throw W(`SHA-${o}`,"algorithm.hash");break}case"PS256":case"PS384":case"PS512":{if(!B(e.algorithm,"RSA-PSS"))throw W("RSA-PSS");let o=parseInt(t.slice(2),10);if(We(e.algorithm.hash)!==o)throw W(`SHA-${o}`,"algorithm.hash");break}case"EdDSA":{if(e.algorithm.name!=="Ed25519"&&e.algorithm.name!=="Ed448")throw W("Ed25519 or Ed448");break}case"ES256":case"ES384":case"ES512":{if(!B(e.algorithm,"ECDSA"))throw W("ECDSA");let o=Hr(t);if(e.algorithm.namedCurve!==o)throw W(o,"algorithm.namedCurve");break}default:throw new TypeError("CryptoKey does not support this operation")}bt(e,r)}function I(e,t,...r){switch(t){case"A128GCM":case"A192GCM":case"A256GCM":{if(!B(e.algorithm,"AES-GCM"))throw W("AES-GCM");let o=parseInt(t.slice(1,4),10);if(e.algorithm.length!==o)throw W(o,"algorithm.length");break}case"A128KW":case"A192KW":case"A256KW":{if(!B(e.algorithm,"AES-KW"))throw W("AES-KW");let o=parseInt(t.slice(1,4),10);if(e.algorithm.length!==o)throw W(o,"algorithm.length");break}case"ECDH":{switch(e.algorithm.name){case"ECDH":case"X25519":case"X448":break;default:throw W("ECDH, X25519, or X448")}break}case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":if(!B(e.algorithm,"PBKDF2"))throw W("PBKDF2");break;case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":{if(!B(e.algorithm,"RSA-OAEP"))throw W("RSA-OAEP");let o=parseInt(t.slice(9),10)||1;if(We(e.algorithm.hash)!==o)throw W(`SHA-${o}`,"algorithm.hash");break}default:throw new TypeError("CryptoKey does not support this operation")}bt(e,r)}function _t(e,t,...r){if(r.length>2){let o=r.pop();e+=`one of type ${r.join(", ")}, or ${o}.`}else r.length===2?e+=`one of type ${r[0]} or ${r[1]}.`:e+=`of type ${r[0]}.`;return t==null?e+=` Received ${t}`:typeof t=="function"&&t.name?e+=` Received function ${t.name}`:typeof t=="object"&&t!=null&&t.constructor?.name&&(e+=` Received an instance of ${t.constructor.name}`),e}var H=(e,...t)=>_t("Key must be ",e,...t);function Be(e,t,...r){return _t(`Key for the ${e} algorithm must be `,t,...r)}import{getCiphers as xr}from"node:crypto";var Kt,M=e=>(Kt||=new Set(xr()),Kt.has(e));var Fe=e=>g(e)||_(e),l=["KeyObject"];(globalThis.CryptoKey||gt?.CryptoKey)&&l.push("CryptoKey");function Cr(e,t,r,o,n,i){let a=parseInt(e.slice(1,4),10);g(t)&&(t=t.export());let s=t.subarray(a>>3),p=t.subarray(0,a>>3),d=parseInt(e.slice(-3),10),m=`aes-${a}-cbc`;if(!M(m))throw new f(`alg ${e} is not supported by your javascript runtime`);let h=ce(i,o,r,d,p,a),T;try{T=wt(n,h)}catch{}if(!T)throw new N;let P;try{let E=Ht(m,s,o);P=K(E.update(r),E.final())}catch{}if(!P)throw new N;return P}function Jr(e,t,r,o,n,i){let s=`aes-${parseInt(e.slice(1,4),10)}-gcm`;if(!M(s))throw new f(`alg ${e} is not supported by your javascript runtime`);try{let p=Ht(s,t,o,{authTagLength:16});p.setAuthTag(n),i.byteLength&&p.setAAD(i,{plaintextLength:r.length});let d=p.update(r);return p.final(),d}catch{throw new N}}var vr=(e,t,r,o,n,i)=>{let a;if(_(t))I(t,e,"decrypt"),a=Pr.from(t);else if(t instanceof Uint8Array||g(t))a=t;else throw new TypeError(H(t,...l,"Uint8Array"));if(!o)throw new c("JWE Initialization Vector missing");if(!n)throw new c("JWE Authentication Tag missing");switch(ve(e,a),Je(e,o),e){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return Cr(e,a,r,o,n,i);case"A128GCM":case"A192GCM":case"A256GCM":return Jr(e,a,r,o,n,i);default:throw new f("Unsupported JWE Content Encryption Algorithm")}},Te=vr;var Wr=(...e)=>{let t=e.filter(Boolean);if(t.length===0||t.length===1)return!0;let r;for(let o of t){let n=Object.keys(o);if(!r||r.size===0){r=new Set(n);continue}for(let i of n){if(r.has(i))return!1;r.add(i)}}return!0},O=Wr;function Tr(e){return typeof e=="object"&&e!==null}function y(e){if(!Tr(e)||Object.prototype.toString.call(e)!=="[object Object]")return!1;if(Object.getPrototypeOf(e)===null)return!0;let t=e;for(;Object.getPrototypeOf(t)!==null;)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}import{Buffer as xt}from"node:buffer";import{KeyObject as Ir,createDecipheriv as Or,createCipheriv as Rr,createSecretKey as Dr}from"node:crypto";function Pt(e,t){if(e.symmetricKeySize<<3!==parseInt(t.slice(1,4),10))throw new TypeError(`Invalid key size for alg: ${t}`)}function Ct(e,t,r){if(g(e))return e;if(e instanceof Uint8Array)return Dr(e);if(_(e))return I(e,t,r),Ir.from(e);throw new TypeError(H(e,...l,"Uint8Array"))}var pe=(e,t,r)=>{let n=`aes${parseInt(e.slice(1,4),10)}-wrap`;if(!M(n))throw new f(`alg ${e} is not supported either by JOSE or your javascript runtime`);let i=Ct(t,e,"wrapKey");Pt(i,e);let a=Rr(n,i,xt.alloc(8,166));return K(a.update(r),a.final())},de=(e,t,r)=>{let n=`aes${parseInt(e.slice(1,4),10)}-wrap`;if(!M(n))throw new f(`alg ${e} is not supported either by JOSE or your javascript runtime`);let i=Ct(t,e,"unwrapKey");Pt(i,e);let a=Or(n,i,xt.alloc(8,166));return K(a.update(r),a.final())};import{diffieHellman as Mr,generateKeyPair as $r,KeyObject as ze}from"node:crypto";import{promisify as Lr}from"node:util";import{KeyObject as Ur}from"node:crypto";var kr=e=>{switch(e){case"prime256v1":return"P-256";case"secp384r1":return"P-384";case"secp521r1":return"P-521";case"secp256k1":return"secp256k1";default:throw new f("Unsupported key curve for this operation")}},Nr=(e,t)=>{let r;if(_(e))r=Ur.from(e);else if(g(e))r=e;else throw new TypeError(H(e,...l));if(r.type==="secret")throw new TypeError('only "private" or "public" type keys can be used for this operation');switch(r.asymmetricKeyType){case"ed25519":case"ed448":return`Ed${r.asymmetricKeyType.slice(2)}`;case"x25519":case"x448":return`X${r.asymmetricKeyType.slice(1)}`;case"ec":{let o=r.asymmetricKeyDetails.namedCurve;return t?o:kr(o)}default:throw new TypeError("Invalid asymmetric key type for this operation")}},fe=Nr;var Ve=Lr($r);async function Ie(e,t,r,o,n=new Uint8Array(0),i=new Uint8Array(0)){let a;if(_(e))I(e,"ECDH"),a=ze.from(e);else if(g(e))a=e;else throw new TypeError(H(e,...l));let s;if(_(t))I(t,"ECDH","deriveBits"),s=ze.from(t);else if(g(t))s=t;else throw new TypeError(H(t,...l));let p=K(Ce(S.encode(r)),Ce(n),Ce(i),Pe(o)),d=Mr({privateKey:s,publicKey:a});return ft(d,o,p)}async function Jt(e){let t;if(_(e))t=ze.from(e);else if(g(e))t=e;else throw new TypeError(H(e,...l));switch(t.asymmetricKeyType){case"x25519":return Ve("x25519");case"x448":return Ve("x448");case"ec":{let r=fe(t);return Ve("ec",{namedCurve:r})}default:throw new f("Invalid or unsupported EPK")}}var Oe=e=>["P-256","P-384","P-521","X25519","X448"].includes(fe(e));import{promisify as Gr}from"node:util";import{KeyObject as Br,pbkdf2 as Fr}from"node:crypto";function Re(e){if(!(e instanceof Uint8Array)||e.length<8)throw new c("PBES2 Salt Input must be 8 or more octets")}var Wt=Gr(Fr);function Tt(e,t){if(g(e))return e.export();if(e instanceof Uint8Array)return e;if(_(e))return I(e,t,"deriveBits","deriveKey"),Br.from(e).export();throw new TypeError(H(e,...l,"Uint8Array"))}var It=async(e,t,r,o=2048,n=G(new Uint8Array(16)))=>{Re(n);let i=Le(e,n),a=parseInt(e.slice(13,16),10)>>3,s=Tt(t,e),p=await Wt(s,i,o,a,`sha${e.slice(8,11)}`);return{encryptedKey:await pe(e.slice(-6),p,r),p2c:o,p2s:w(n)}},Ot=async(e,t,r,o,n)=>{Re(n);let i=Le(e,n),a=parseInt(e.slice(13,16),10)>>3,s=Tt(t,e),p=await Wt(s,i,o,a,`sha${e.slice(8,11)}`);return de(e.slice(-6),p,r)};import{KeyObject as Vr,publicEncrypt as zr,constants as Rt,privateDecrypt as Xr}from"node:crypto";import{deprecate as qr}from"node:util";var me=(e,t)=>{let{modulusLength:r}=e.asymmetricKeyDetails;if(typeof r!="number"||r<2048)throw new TypeError(`${t} requires key modulusLength to be 2048 bits or larger`)};var Dt=(e,t)=>{if(e.asymmetricKeyType!=="rsa")throw new TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa");me(e,t)},Yr=qr(()=>Rt.RSA_PKCS1_PADDING,'The RSA1_5 "alg" (JWE Algorithm) is deprecated and will be removed in the next major revision.'),Ut=e=>{switch(e){case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":return Rt.RSA_PKCS1_OAEP_PADDING;case"RSA1_5":return Yr();default:return}},kt=e=>{switch(e){case"RSA-OAEP":return"sha1";case"RSA-OAEP-256":return"sha256";case"RSA-OAEP-384":return"sha384";case"RSA-OAEP-512":return"sha512";default:return}};function Nt(e,t,...r){if(g(e))return e;if(_(e))return I(e,t,...r),Vr.from(e);throw new TypeError(H(e,...l))}var Mt=(e,t,r)=>{let o=Ut(e),n=kt(e),i=Nt(t,e,"wrapKey","encrypt");return Dt(i,e),zr({key:i,oaepHash:n,padding:o},r)},$t=(e,t,r)=>{let o=Ut(e),n=kt(e),i=Nt(t,e,"unwrapKey","decrypt");return Dt(i,e),Xr({key:i,oaepHash:n,padding:o},r)};function he(e){switch(e){case"A128GCM":return 128;case"A192GCM":return 192;case"A256GCM":case"A128CBC-HS256":return 256;case"A192CBC-HS384":return 384;case"A256CBC-HS512":return 512;default:throw new f(`Unsupported JWE Algorithm: ${e}`)}}var R=e=>G(new Uint8Array(he(e)>>3));import{createPrivateKey as Qr,createPublicKey as Lt,KeyObject as Zr}from"node:crypto";import{Buffer as Gt}from"node:buffer";var Bt=(e,t,r)=>{let o;if(_(r)){if(!r.extractable)throw new TypeError("CryptoKey is not extractable");o=Zr.from(r)}else if(g(r))o=r;else throw new TypeError(H(r,...l));if(o.type!==e)throw new TypeError(`key is not a ${e} key`);return o.export({format:"pem",type:t})},Ft=e=>Bt("public","spki",e),Vt=e=>Bt("private","pkcs8",e),zt=e=>Qr({key:Gt.from(e.replace(/(?:-----(?:BEGIN|END) PRIVATE KEY-----|\s)/g,""),"base64"),type:"pkcs8",format:"der"}),Xt=e=>Lt({key:Gt.from(e.replace(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g,""),"base64"),type:"spki",format:"der"}),qt=e=>Lt({key:e,type:"spki",format:"pem"});import{createPrivateKey as jr,createPublicKey as eo}from"node:crypto";var to=e=>(e.d?jr:eo)({format:"jwk",key:e}),Yt=to;async function ro(e,t,r){if(typeof e!="string"||e.indexOf("-----BEGIN PUBLIC KEY-----")!==0)throw new TypeError('"spki" must be SPKI formatted string');return Xt(e,t,r)}async function oo(e,t,r){if(typeof e!="string"||e.indexOf("-----BEGIN CERTIFICATE-----")!==0)throw new TypeError('"x509" must be X.509 formatted string');return qt(e,t,r)}async function no(e,t,r){if(typeof e!="string"||e.indexOf("-----BEGIN PRIVATE KEY-----")!==0)throw new TypeError('"pkcs8" must be PKCS#8 formatted string');return zt(e,t,r)}async function Q(e,t){if(!y(e))throw new TypeError("JWK must be an object");switch(t||=e.alg,e.kty){case"oct":if(typeof e.k!="string"||!e.k)throw new TypeError('missing "k" (Key Value) Parameter value');return A(e.k);case"RSA":if(e.oth!==void 0)throw new f('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');case"EC":case"OKP":return Yt({...e,alg:t});default:throw new f('Unsupported "kty" (Key Type) Parameter value')}}var io=(e,t)=>{if(!(t instanceof Uint8Array)){if(!Fe(t))throw new TypeError(Be(e,t,...l,"Uint8Array"));if(t.type!=="secret")throw new TypeError(`${l.join(" or ")} instances for symmetric algorithms must be of type "secret"`)}},ao=(e,t,r)=>{if(!Fe(t))throw new TypeError(Be(e,t,...l));if(t.type==="secret")throw new TypeError(`${l.join(" or ")} instances for asymmetric algorithms must not be of type "secret"`);if(r==="sign"&&t.type==="public")throw new TypeError(`${l.join(" or ")} instances for asymmetric algorithm signing must be of type "private"`);if(r==="decrypt"&&t.type==="public")throw new TypeError(`${l.join(" or ")} instances for asymmetric algorithm decryption must be of type "private"`);if(t.algorithm&&r==="verify"&&t.type==="private")throw new TypeError(`${l.join(" or ")} instances for asymmetric algorithm verifying must be of type "public"`);if(t.algorithm&&r==="encrypt"&&t.type==="private")throw new TypeError(`${l.join(" or ")} instances for asymmetric algorithm encryption must be of type "public"`)},so=(e,t,r)=>{e.startsWith("HS")||e==="dir"||e.startsWith("PBES2")||/^A\d{3}(?:GCM)?KW$/.test(e)?io(e,t):ao(e,t,r)},F=so;import{createCipheriv as Qt,KeyObject as co}from"node:crypto";function po(e,t,r,o,n){let i=parseInt(e.slice(1,4),10);g(r)&&(r=r.export());let a=r.subarray(i>>3),s=r.subarray(0,i>>3),p=`aes-${i}-cbc`;if(!M(p))throw new f(`alg ${e} is not supported by your javascript runtime`);let d=Qt(p,a,o),m=K(d.update(t),d.final()),h=parseInt(e.slice(-3),10),T=ce(n,o,m,h,s,i);return{ciphertext:m,tag:T,iv:o}}function fo(e,t,r,o,n){let a=`aes-${parseInt(e.slice(1,4),10)}-gcm`;if(!M(a))throw new f(`alg ${e} is not supported by your javascript runtime`);let s=Qt(a,r,o,{authTagLength:16});n.byteLength&&s.setAAD(n,{plaintextLength:t.length});let p=s.update(t);s.final();let d=s.getAuthTag();return{ciphertext:p,tag:d,iv:o}}var mo=(e,t,r,o,n)=>{let i;if(_(r))I(r,e,"encrypt"),i=co.from(r);else if(r instanceof Uint8Array||g(r))i=r;else throw new TypeError(H(r,...l,"Uint8Array"));switch(ve(e,i),o?Je(e,o):o=lt(e),e){case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":return po(e,t,i,o,n);case"A128GCM":case"A192GCM":case"A256GCM":return fo(e,t,i,o,n);default:throw new f("Unsupported JWE Content Encryption Algorithm")}},De=mo;async function Zt(e,t,r,o){let n=e.slice(0,7),i=await De(n,r,t,o,new Uint8Array(0));return{encryptedKey:i.ciphertext,iv:w(i.iv),tag:w(i.tag)}}async function jt(e,t,r,o,n){let i=e.slice(0,7);return Te(i,t,r,o,n,new Uint8Array(0))}async function ho(e,t,r,o,n){switch(F(e,t,"decrypt"),e){case"dir":{if(r!==void 0)throw new c("Encountered unexpected JWE Encrypted Key");return t}case"ECDH-ES":if(r!==void 0)throw new c("Encountered unexpected JWE Encrypted Key");case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":{if(!y(o.epk))throw new c('JOSE Header "epk" (Ephemeral Public Key) missing or invalid');if(!Oe(t))throw new f("ECDH with the provided key is not allowed or not supported by your javascript runtime");let i=await Q(o.epk,e),a,s;if(o.apu!==void 0){if(typeof o.apu!="string")throw new c('JOSE Header "apu" (Agreement PartyUInfo) invalid');try{a=A(o.apu)}catch{throw new c("Failed to base64url decode the apu")}}if(o.apv!==void 0){if(typeof o.apv!="string")throw new c('JOSE Header "apv" (Agreement PartyVInfo) invalid');try{s=A(o.apv)}catch{throw new c("Failed to base64url decode the apv")}}let p=await Ie(i,t,e==="ECDH-ES"?o.enc:e,e==="ECDH-ES"?he(o.enc):parseInt(e.slice(-5,-2),10),a,s);if(e==="ECDH-ES")return p;if(r===void 0)throw new c("JWE Encrypted Key missing");return de(e.slice(-6),p,r)}case"RSA1_5":case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":{if(r===void 0)throw new c("JWE Encrypted Key missing");return $t(e,t,r)}case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":{if(r===void 0)throw new c("JWE Encrypted Key missing");if(typeof o.p2c!="number")throw new c('JOSE Header "p2c" (PBES2 Count) missing or invalid');let i=n?.maxPBES2Count||1e4;if(o.p2c>i)throw new c('JOSE Header "p2c" (PBES2 Count) out is of acceptable bounds');if(typeof o.p2s!="string")throw new c('JOSE Header "p2s" (PBES2 Salt) missing or invalid');let a;try{a=A(o.p2s)}catch{throw new c("Failed to base64url decode the p2s")}return Ot(e,t,r,o.p2c,a)}case"A128KW":case"A192KW":case"A256KW":{if(r===void 0)throw new c("JWE Encrypted Key missing");return de(e,t,r)}case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":{if(r===void 0)throw new c("JWE Encrypted Key missing");if(typeof o.iv!="string")throw new c('JOSE Header "iv" (Initialization Vector) missing or invalid');if(typeof o.tag!="string")throw new c('JOSE Header "tag" (Authentication Tag) missing or invalid');let i;try{i=A(o.iv)}catch{throw new c("Failed to base64url decode the iv")}let a;try{a=A(o.tag)}catch{throw new c("Failed to base64url decode the tag")}return jt(e,t,r,i,a)}default:throw new f('Invalid or unsupported "alg" (JWE Algorithm) header value')}}var er=ho;function uo(e,t,r,o,n){if(n.crit!==void 0&&o?.crit===void 0)throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');if(!o||o.crit===void 0)return new Set;if(!Array.isArray(o.crit)||o.crit.length===0||o.crit.some(a=>typeof a!="string"||a.length===0))throw new e('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');let i;r!==void 0?i=new Map([...Object.entries(r),...t.entries()]):i=t;for(let a of o.crit){if(!i.has(a))throw new f(`Extension Header Parameter "${a}" is not recognized`);if(n[a]===void 0)throw new e(`Extension Header Parameter "${a}" is missing`);if(i.get(a)&&o[a]===void 0)throw new e(`Extension Header Parameter "${a}" MUST be integrity protected`)}return new Set(o.crit)}var D=uo;var lo=(e,t)=>{if(t!==void 0&&(!Array.isArray(t)||t.some(r=>typeof r!="string")))throw new TypeError(`"${e}" option must be an array of strings`);if(t)return new Set(t)},ue=lo;async function le(e,t,r){if(!y(e))throw new c("Flattened JWE must be an object");if(e.protected===void 0&&e.header===void 0&&e.unprotected===void 0)throw new c("JOSE Header missing");if(e.iv!==void 0&&typeof e.iv!="string")throw new c("JWE Initialization Vector incorrect type");if(typeof e.ciphertext!="string")throw new c("JWE Ciphertext missing or incorrect type");if(e.tag!==void 0&&typeof e.tag!="string")throw new c("JWE Authentication Tag incorrect type");if(e.protected!==void 0&&typeof e.protected!="string")throw new c("JWE Protected Header incorrect type");if(e.encrypted_key!==void 0&&typeof e.encrypted_key!="string")throw new c("JWE Encrypted Key incorrect type");if(e.aad!==void 0&&typeof e.aad!="string")throw new c("JWE AAD incorrect type");if(e.header!==void 0&&!y(e.header))throw new c("JWE Shared Unprotected Header incorrect type");if(e.unprotected!==void 0&&!y(e.unprotected))throw new c("JWE Per-Recipient Unprotected Header incorrect type");let o;if(e.protected)try{let re=A(e.protected);o=JSON.parse(b.decode(re))}catch{throw new c("JWE Protected Header is invalid")}if(!O(o,e.header,e.unprotected))throw new c("JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint");let n={...o,...e.header,...e.unprotected};if(D(c,new Map,r?.crit,o,n),n.zip!==void 0)throw new f('JWE "zip" (Compression Algorithm) Header Parameter is not supported.');let{alg:i,enc:a}=n;if(typeof i!="string"||!i)throw new c("missing JWE Algorithm (alg) in JWE Header");if(typeof a!="string"||!a)throw new c("missing JWE Encryption Algorithm (enc) in JWE Header");let s=r&&ue("keyManagementAlgorithms",r.keyManagementAlgorithms),p=r&&ue("contentEncryptionAlgorithms",r.contentEncryptionAlgorithms);if(s&&!s.has(i)||!s&&i.startsWith("PBES2"))throw new $('"alg" (Algorithm) Header Parameter value not allowed');if(p&&!p.has(a))throw new $('"enc" (Encryption Algorithm) Header Parameter value not allowed');let d;if(e.encrypted_key!==void 0)try{d=A(e.encrypted_key)}catch{throw new c("Failed to base64url decode the encrypted_key")}let m=!1;typeof t=="function"&&(t=await t(o,e),m=!0);let h;try{h=await er(i,t,d,n,r)}catch(re){if(re instanceof TypeError||re instanceof c||re instanceof f)throw re;h=R(a)}let T,P;if(e.iv!==void 0)try{T=A(e.iv)}catch{throw new c("Failed to base64url decode the iv")}if(e.tag!==void 0)try{P=A(e.tag)}catch{throw new c("Failed to base64url decode the tag")}let E=S.encode(e.protected??""),v;e.aad!==void 0?v=K(E,S.encode("."),S.encode(e.aad)):v=E;let Ke;try{Ke=A(e.ciphertext)}catch{throw new c("Failed to base64url decode the ciphertext")}let te={plaintext:await Te(a,h,Ke,T,P,v)};if(e.protected!==void 0&&(te.protectedHeader=o),e.aad!==void 0)try{te.additionalAuthenticatedData=A(e.aad)}catch{throw new c("Failed to base64url decode the aad")}return e.unprotected!==void 0&&(te.sharedUnprotectedHeader=e.unprotected),e.header!==void 0&&(te.unprotectedHeader=e.header),m?{...te,key:t}:te}async function Xe(e,t,r){if(e instanceof Uint8Array&&(e=b.decode(e)),typeof e!="string")throw new c("Compact JWE must be a string or Uint8Array");let{0:o,1:n,2:i,3:a,4:s,length:p}=e.split(".");if(p!==5)throw new c("Invalid Compact JWE");let d=await le({ciphertext:a,iv:i||void 0,protected:o,tag:s||void 0,encrypted_key:n||void 0},t,r),m={plaintext:d.plaintext,protectedHeader:d.protectedHeader};return typeof t=="function"?{...m,key:d.key}:m}async function yo(e,t,r){if(!y(e))throw new c("General JWE must be an object");if(!Array.isArray(e.recipients)||!e.recipients.every(y))throw new c("JWE Recipients missing or incorrect type");if(!e.recipients.length)throw new c("JWE Recipients has no members");for(let o of e.recipients)try{return await le({aad:e.aad,ciphertext:e.ciphertext,encrypted_key:o.encrypted_key,header:o.header,iv:e.iv,protected:e.protected,tag:e.tag,unprotected:e.unprotected},t,r)}catch{}throw new N}import{KeyObject as wo}from"node:crypto";var Eo=e=>{let t;if(_(e)){if(!e.extractable)throw new TypeError("CryptoKey is not extractable");t=wo.from(e)}else if(g(e))t=e;else{if(e instanceof Uint8Array)return{kty:"oct",k:w(e)};throw new TypeError(H(e,...l,"Uint8Array"))}if(t.type!=="secret"&&!["rsa","ec","ed25519","x25519","ed448","x448"].includes(t.asymmetricKeyType))throw new f("Unsupported key asymmetricKeyType");return t.export({format:"jwk"})},tr=Eo;async function So(e){return Ft(e)}async function go(e){return Vt(e)}async function qe(e){return tr(e)}async function bo(e,t,r,o,n={}){let i,a,s;switch(F(e,r,"encrypt"),e){case"dir":{s=r;break}case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":{if(!Oe(r))throw new f("ECDH with the provided key is not allowed or not supported by your javascript runtime");let{apu:p,apv:d}=n,{epk:m}=n;m||=(await Jt(r)).privateKey;let{x:h,y:T,crv:P,kty:E}=await qe(m),v=await Ie(r,m,e==="ECDH-ES"?t:e,e==="ECDH-ES"?he(t):parseInt(e.slice(-5,-2),10),p,d);if(a={epk:{x:h,crv:P,kty:E}},E==="EC"&&(a.epk.y=T),p&&(a.apu=w(p)),d&&(a.apv=w(d)),e==="ECDH-ES"){s=v;break}s=o||R(t);let Ke=e.slice(-6);i=await pe(Ke,v,s);break}case"RSA1_5":case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":{s=o||R(t),i=await Mt(e,r,s);break}case"PBES2-HS256+A128KW":case"PBES2-HS384+A192KW":case"PBES2-HS512+A256KW":{s=o||R(t);let{p2c:p,p2s:d}=n;({encryptedKey:i,...a}=await It(e,r,s,p,d));break}case"A128KW":case"A192KW":case"A256KW":{s=o||R(t),i=await pe(e,r,s);break}case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":{s=o||R(t);let{iv:p}=n;({encryptedKey:i,...a}=await Zt(e,r,s,p));break}default:throw new f('Invalid or unsupported "alg" (JWE Algorithm) header value')}return{cek:s,encryptedKey:i,parameters:a}}var Ue=bo;var Ye=Symbol(),V=class{_plaintext;_protectedHeader;_sharedUnprotectedHeader;_unprotectedHeader;_aad;_cek;_iv;_keyManagementParameters;constructor(t){if(!(t instanceof Uint8Array))throw new TypeError("plaintext must be an instance of Uint8Array");this._plaintext=t}setKeyManagementParameters(t){if(this._keyManagementParameters)throw new TypeError("setKeyManagementParameters can only be called once");return this._keyManagementParameters=t,this}setProtectedHeader(t){if(this._protectedHeader)throw new TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setSharedUnprotectedHeader(t){if(this._sharedUnprotectedHeader)throw new TypeError("setSharedUnprotectedHeader can only be called once");return this._sharedUnprotectedHeader=t,this}setUnprotectedHeader(t){if(this._unprotectedHeader)throw new TypeError("setUnprotectedHeader can only be called once");return this._unprotectedHeader=t,this}setAdditionalAuthenticatedData(t){return this._aad=t,this}setContentEncryptionKey(t){if(this._cek)throw new TypeError("setContentEncryptionKey can only be called once");return this._cek=t,this}setInitializationVector(t){if(this._iv)throw new TypeError("setInitializationVector can only be called once");return this._iv=t,this}async encrypt(t,r){if(!this._protectedHeader&&!this._unprotectedHeader&&!this._sharedUnprotectedHeader)throw new c("either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()");if(!O(this._protectedHeader,this._unprotectedHeader,this._sharedUnprotectedHeader))throw new c("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");let o={...this._protectedHeader,...this._unprotectedHeader,...this._sharedUnprotectedHeader};if(D(c,new Map,r?.crit,this._protectedHeader,o),o.zip!==void 0)throw new f('JWE "zip" (Compression Algorithm) Header Parameter is not supported.');let{alg:n,enc:i}=o;if(typeof n!="string"||!n)throw new c('JWE "alg" (Algorithm) Header Parameter missing or invalid');if(typeof i!="string"||!i)throw new c('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');let a;if(this._cek&&(n==="dir"||n==="ECDH-ES"))throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${n}`);let s;{let v;({cek:s,encryptedKey:a,parameters:v}=await Ue(n,i,t,this._cek,this._keyManagementParameters)),v&&(r&&Ye in r?this._unprotectedHeader?this._unprotectedHeader={...this._unprotectedHeader,...v}:this.setUnprotectedHeader(v):this._protectedHeader?this._protectedHeader={...this._protectedHeader,...v}:this.setProtectedHeader(v))}let p,d,m;this._protectedHeader?d=S.encode(w(JSON.stringify(this._protectedHeader))):d=S.encode(""),this._aad?(m=w(this._aad),p=K(d,S.encode("."),S.encode(m))):p=d;let{ciphertext:h,tag:T,iv:P}=await De(i,this._plaintext,s,this._iv,p),E={ciphertext:w(h)};return P&&(E.iv=w(P)),T&&(E.tag=w(T)),a&&(E.encrypted_key=w(a)),m&&(E.aad=m),this._protectedHeader&&(E.protected=b.decode(d)),this._sharedUnprotectedHeader&&(E.unprotected=this._sharedUnprotectedHeader),this._unprotectedHeader&&(E.header=this._unprotectedHeader),E}};var Qe=class{parent;unprotectedHeader;key;options;constructor(t,r,o){this.parent=t,this.key=r,this.options=o}setUnprotectedHeader(t){if(this.unprotectedHeader)throw new TypeError("setUnprotectedHeader can only be called once");return this.unprotectedHeader=t,this}addRecipient(...t){return this.parent.addRecipient(...t)}encrypt(...t){return this.parent.encrypt(...t)}done(){return this.parent}},Ze=class{_plaintext;_recipients=[];_protectedHeader;_unprotectedHeader;_aad;constructor(t){this._plaintext=t}addRecipient(t,r){let o=new Qe(this,t,{crit:r?.crit});return this._recipients.push(o),o}setProtectedHeader(t){if(this._protectedHeader)throw new TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setSharedUnprotectedHeader(t){if(this._unprotectedHeader)throw new TypeError("setSharedUnprotectedHeader can only be called once");return this._unprotectedHeader=t,this}setAdditionalAuthenticatedData(t){return this._aad=t,this}async encrypt(){if(!this._recipients.length)throw new c("at least one recipient must be added");if(this._recipients.length===1){let[n]=this._recipients,i=await new V(this._plaintext).setAdditionalAuthenticatedData(this._aad).setProtectedHeader(this._protectedHeader).setSharedUnprotectedHeader(this._unprotectedHeader).setUnprotectedHeader(n.unprotectedHeader).encrypt(n.key,{...n.options}),a={ciphertext:i.ciphertext,iv:i.iv,recipients:[{}],tag:i.tag};return i.aad&&(a.aad=i.aad),i.protected&&(a.protected=i.protected),i.unprotected&&(a.unprotected=i.unprotected),i.encrypted_key&&(a.recipients[0].encrypted_key=i.encrypted_key),i.header&&(a.recipients[0].header=i.header),a}let t;for(let n=0;n<this._recipients.length;n++){let i=this._recipients[n];if(!O(this._protectedHeader,this._unprotectedHeader,i.unprotectedHeader))throw new c("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");let a={...this._protectedHeader,...this._unprotectedHeader,...i.unprotectedHeader},{alg:s}=a;if(typeof s!="string"||!s)throw new c('JWE "alg" (Algorithm) Header Parameter missing or invalid');if(s==="dir"||s==="ECDH-ES")throw new c('"dir" and "ECDH-ES" alg may only be used with a single recipient');if(typeof a.enc!="string"||!a.enc)throw new c('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');if(!t)t=a.enc;else if(t!==a.enc)throw new c('JWE "enc" (Encryption Algorithm) Header Parameter must be the same for all recipients');if(D(c,new Map,i.options.crit,this._protectedHeader,a),a.zip!==void 0)throw new f('JWE "zip" (Compression Algorithm) Header Parameter is not supported.')}let r=R(t),o={ciphertext:"",iv:"",recipients:[],tag:""};for(let n=0;n<this._recipients.length;n++){let i=this._recipients[n],a={};o.recipients.push(a);let p={...this._protectedHeader,...this._unprotectedHeader,...i.unprotectedHeader}.alg.startsWith("PBES2")?2048+n:void 0;if(n===0){let h=await new V(this._plaintext).setAdditionalAuthenticatedData(this._aad).setContentEncryptionKey(r).setProtectedHeader(this._protectedHeader).setSharedUnprotectedHeader(this._unprotectedHeader).setUnprotectedHeader(i.unprotectedHeader).setKeyManagementParameters({p2c:p}).encrypt(i.key,{...i.options,[Ye]:!0});o.ciphertext=h.ciphertext,o.iv=h.iv,o.tag=h.tag,h.aad&&(o.aad=h.aad),h.protected&&(o.protected=h.protected),h.unprotected&&(o.unprotected=h.unprotected),a.encrypted_key=h.encrypted_key,h.header&&(a.header=h.header);continue}let{encryptedKey:d,parameters:m}=await Ue(i.unprotectedHeader?.alg||this._protectedHeader?.alg||this._unprotectedHeader?.alg,t,i.key,r,{p2c:p});a.encrypted_key=w(d),(i.unprotectedHeader||m)&&(a.header={...i.unprotectedHeader,...m})}return o}};import*as Me from"node:crypto";import{promisify as Co}from"node:util";function ye(e){switch(e){case"PS256":case"RS256":case"ES256":case"ES256K":return"sha256";case"PS384":case"RS384":case"ES384":return"sha384";case"PS512":case"RS512":case"ES512":return"sha512";case"EdDSA":return;default:throw new f(`alg ${e} is not supported either by JOSE or your javascript runtime`)}}import{constants as rr}from"node:crypto";var Ao={padding:rr.RSA_PKCS1_PSS_PADDING,saltLength:rr.RSA_PSS_SALTLEN_DIGEST},_o=new Map([["ES256","P-256"],["ES256K","secp256k1"],["ES384","P-384"],["ES512","P-521"]]);function we(e,t){switch(e){case"EdDSA":if(!["ed25519","ed448"].includes(t.asymmetricKeyType))throw new TypeError("Invalid key for this operation, its asymmetricKeyType must be ed25519 or ed448");return t;case"RS256":case"RS384":case"RS512":if(t.asymmetricKeyType!=="rsa")throw new TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa");return me(t,e),t;case"PS256":case"PS384":case"PS512":if(t.asymmetricKeyType==="rsa-pss"){let{hashAlgorithm:r,mgf1HashAlgorithm:o,saltLength:n}=t.asymmetricKeyDetails,i=parseInt(e.slice(-3),10);if(r!==void 0&&(r!==`sha${i}`||o!==r))throw new TypeError(`Invalid key for this operation, its RSA-PSS parameters do not meet the requirements of "alg" ${e}`);if(n!==void 0&&n>i>>3)throw new TypeError(`Invalid key for this operation, its RSA-PSS parameter saltLength does not meet the requirements of "alg" ${e}`)}else if(t.asymmetricKeyType!=="rsa")throw new TypeError("Invalid key for this operation, its asymmetricKeyType must be rsa or rsa-pss");return me(t,e),{key:t,...Ao};case"ES256":case"ES256K":case"ES384":case"ES512":{if(t.asymmetricKeyType!=="ec")throw new TypeError("Invalid key for this operation, its asymmetricKeyType must be ec");let r=fe(t),o=_o.get(e);if(r!==o)throw new TypeError(`Invalid key curve for the algorithm, its curve must be ${o}, got ${r}`);return{dsaEncoding:"ieee-p1363",key:t}}default:throw new f(`alg ${e} is not supported either by JOSE or your javascript runtime`)}}import*as ke from"node:crypto";import{promisify as Ho}from"node:util";function je(e){switch(e){case"HS256":return"sha256";case"HS384":return"sha384";case"HS512":return"sha512";default:throw new f(`alg ${e} is not supported either by JOSE or your javascript runtime`)}}import{KeyObject as or,createSecretKey as Ko}from"node:crypto";function Ee(e,t,r){if(t instanceof Uint8Array){if(!e.startsWith("HS"))throw new TypeError(H(t,...l));return Ko(t)}if(t instanceof or)return t;if(_(t))return At(t,e,r),or.from(t);throw new TypeError(H(t,...l,"Uint8Array"))}var xo=Ho(ke.sign),Po=async(e,t,r)=>{let o=Ee(e,t,"sign");if(e.startsWith("HS")){let n=ke.createHmac(je(e),o);return n.update(r),n.digest()}return xo(ye(e),r,we(e,o))},Ne=Po;var Jo=Co(Me.verify),vo=async(e,t,r,o)=>{let n=Ee(e,t,"verify");if(e.startsWith("HS")){let s=await Ne(e,n,o),p=r;try{return Me.timingSafeEqual(p,s)}catch{return!1}}let i=ye(e),a=we(e,n);try{return await Jo(i,o,a,r)}catch{return!1}},nr=vo;async function Se(e,t,r){if(!y(e))throw new u("Flattened JWS must be an object");if(e.protected===void 0&&e.header===void 0)throw new u('Flattened JWS must have either of the "protected" or "header" members');if(e.protected!==void 0&&typeof e.protected!="string")throw new u("JWS Protected Header incorrect type");if(e.payload===void 0)throw new u("JWS Payload missing");if(typeof e.signature!="string")throw new u("JWS Signature missing or incorrect type");if(e.header!==void 0&&!y(e.header))throw new u("JWS Unprotected Header incorrect type");let o={};if(e.protected)try{let v=A(e.protected);o=JSON.parse(b.decode(v))}catch{throw new u("JWS Protected Header is invalid")}if(!O(o,e.header))throw new u("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let n={...o,...e.header},i=D(u,new Map([["b64",!0]]),r?.crit,o,n),a=!0;if(i.has("b64")&&(a=o.b64,typeof a!="boolean"))throw new u('The "b64" (base64url-encode payload) Header Parameter must be a boolean');let{alg:s}=n;if(typeof s!="string"||!s)throw new u('JWS "alg" (Algorithm) Header Parameter missing or invalid');let p=r&&ue("algorithms",r.algorithms);if(p&&!p.has(s))throw new $('"alg" (Algorithm) Header Parameter value not allowed');if(a){if(typeof e.payload!="string")throw new u("JWS Payload must be a string")}else if(typeof e.payload!="string"&&!(e.payload instanceof Uint8Array))throw new u("JWS Payload must be a string or an Uint8Array instance");let d=!1;typeof t=="function"&&(t=await t(o,e),d=!0),F(s,t,"verify");let m=K(S.encode(e.protected??""),S.encode("."),typeof e.payload=="string"?S.encode(e.payload):e.payload),h;try{h=A(e.signature)}catch{throw new u("Failed to base64url decode the signature")}if(!await nr(s,t,h,m))throw new Y;let P;if(a)try{P=A(e.payload)}catch{throw new u("Failed to base64url decode the payload")}else typeof e.payload=="string"?P=S.encode(e.payload):P=e.payload;let E={payload:P};return e.protected!==void 0&&(E.protectedHeader=o),e.header!==void 0&&(E.unprotectedHeader=e.header),d?{...E,key:t}:E}async function et(e,t,r){if(e instanceof Uint8Array&&(e=b.decode(e)),typeof e!="string")throw new u("Compact JWS must be a string or Uint8Array");let{0:o,1:n,2:i,length:a}=e.split(".");if(a!==3)throw new u("Invalid Compact JWS");let s=await Se({payload:n,protected:o,signature:i},t,r),p={payload:s.payload,protectedHeader:s.protectedHeader};return typeof t=="function"?{...p,key:s.key}:p}async function Wo(e,t,r){if(!y(e))throw new u("General JWS must be an object");if(!Array.isArray(e.signatures)||!e.signatures.every(y))throw new u("JWS Signatures missing or incorrect type");for(let o of e.signatures)try{return await Se({header:o.header,payload:e.payload,protected:o.protected,signature:o.signature},t,r)}catch{}throw new Y}var U=e=>Math.floor(e.getTime()/1e3);var To=/^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i,Z=e=>{let t=To.exec(e);if(!t||t[4]&&t[1])throw new TypeError("Invalid time period format");let r=parseFloat(t[2]),o=t[3].toLowerCase(),n;switch(o){case"sec":case"secs":case"second":case"seconds":case"s":n=Math.round(r);break;case"minute":case"minutes":case"min":case"mins":case"m":n=Math.round(r*60);break;case"hour":case"hours":case"hr":case"hrs":case"h":n=Math.round(r*3600);break;case"day":case"days":case"d":n=Math.round(r*86400);break;case"week":case"weeks":case"w":n=Math.round(r*604800);break;default:n=Math.round(r*31557600);break}return t[1]==="-"||t[4]==="ago"?-n:n};var ir=e=>e.toLowerCase().replace(/^application\//,""),Io=(e,t)=>typeof e=="string"?t.includes(e):Array.isArray(e)?t.some(Set.prototype.has.bind(new Set(e))):!1,ne=(e,t,r={})=>{let{typ:o}=r;if(o&&(typeof e.typ!="string"||ir(e.typ)!==ir(o)))throw new J('unexpected "typ" JWT header value',"typ","check_failed");let n;try{n=JSON.parse(b.decode(t))}catch{}if(!y(n))throw new x("JWT Claims Set must be a top-level JSON object");let{requiredClaims:i=[],issuer:a,subject:s,audience:p,maxTokenAge:d}=r,m=[...i];d!==void 0&&m.push("iat"),p!==void 0&&m.push("aud"),s!==void 0&&m.push("sub"),a!==void 0&&m.push("iss");for(let E of new Set(m.reverse()))if(!(E in n))throw new J(`missing required "${E}" claim`,E,"missing");if(a&&!(Array.isArray(a)?a:[a]).includes(n.iss))throw new J('unexpected "iss" claim value',"iss","check_failed");if(s&&n.sub!==s)throw new J('unexpected "sub" claim value',"sub","check_failed");if(p&&!Io(n.aud,typeof p=="string"?[p]:p))throw new J('unexpected "aud" claim value',"aud","check_failed");let h;switch(typeof r.clockTolerance){case"string":h=Z(r.clockTolerance);break;case"number":h=r.clockTolerance;break;case"undefined":h=0;break;default:throw new TypeError("Invalid clockTolerance option type")}let{currentDate:T}=r,P=U(T||new Date);if((n.iat!==void 0||d)&&typeof n.iat!="number")throw new J('"iat" claim must be a number',"iat","invalid");if(n.nbf!==void 0){if(typeof n.nbf!="number")throw new J('"nbf" claim must be a number',"nbf","invalid");if(n.nbf>P+h)throw new J('"nbf" claim timestamp check failed',"nbf","check_failed")}if(n.exp!==void 0){if(typeof n.exp!="number")throw new J('"exp" claim must be a number',"exp","invalid");if(n.exp<=P-h)throw new oe('"exp" claim timestamp check failed',"exp","check_failed")}if(d){let E=P-n.iat,v=typeof d=="number"?d:Z(d);if(E-h>v)throw new oe('"iat" claim timestamp check failed (too far in the past)',"iat","check_failed");if(E<0-h)throw new J('"iat" claim timestamp check failed (it should be in the past)',"iat","check_failed")}return n};async function Oo(e,t,r){let o=await et(e,t,r);if(o.protectedHeader.crit?.includes("b64")&&o.protectedHeader.b64===!1)throw new x("JWTs MUST NOT use unencoded payload");let i={payload:ne(o.protectedHeader,o.payload,r),protectedHeader:o.protectedHeader};return typeof t=="function"?{...i,key:o.key}:i}async function Ro(e,t,r){let o=await Xe(e,t,r),n=ne(o.protectedHeader,o.plaintext,r),{protectedHeader:i}=o;if(i.iss!==void 0&&i.iss!==n.iss)throw new J('replicated "iss" claim header parameter mismatch',"iss","mismatch");if(i.sub!==void 0&&i.sub!==n.sub)throw new J('replicated "sub" claim header parameter mismatch',"sub","mismatch");if(i.aud!==void 0&&JSON.stringify(i.aud)!==JSON.stringify(n.aud))throw new J('replicated "aud" claim header parameter mismatch',"aud","mismatch");let a={payload:n,protectedHeader:i};return typeof t=="function"?{...a,key:o.key}:a}var ge=class{_flattened;constructor(t){this._flattened=new V(t)}setContentEncryptionKey(t){return this._flattened.setContentEncryptionKey(t),this}setInitializationVector(t){return this._flattened.setInitializationVector(t),this}setProtectedHeader(t){return this._flattened.setProtectedHeader(t),this}setKeyManagementParameters(t){return this._flattened.setKeyManagementParameters(t),this}async encrypt(t,r){let o=await this._flattened.encrypt(t,r);return[o.protected,o.encrypted_key,o.iv,o.ciphertext,o.tag].join(".")}};var j=class{_payload;_protectedHeader;_unprotectedHeader;constructor(t){if(!(t instanceof Uint8Array))throw new TypeError("payload must be an instance of Uint8Array");this._payload=t}setProtectedHeader(t){if(this._protectedHeader)throw new TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setUnprotectedHeader(t){if(this._unprotectedHeader)throw new TypeError("setUnprotectedHeader can only be called once");return this._unprotectedHeader=t,this}async sign(t,r){if(!this._protectedHeader&&!this._unprotectedHeader)throw new u("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");if(!O(this._protectedHeader,this._unprotectedHeader))throw new u("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let o={...this._protectedHeader,...this._unprotectedHeader},n=D(u,new Map([["b64",!0]]),r?.crit,this._protectedHeader,o),i=!0;if(n.has("b64")&&(i=this._protectedHeader.b64,typeof i!="boolean"))throw new u('The "b64" (base64url-encode payload) Header Parameter must be a boolean');let{alg:a}=o;if(typeof a!="string"||!a)throw new u('JWS "alg" (Algorithm) Header Parameter missing or invalid');F(a,t,"sign");let s=this._payload;i&&(s=S.encode(w(s)));let p;this._protectedHeader?p=S.encode(w(JSON.stringify(this._protectedHeader))):p=S.encode("");let d=K(p,S.encode("."),s),m=await Ne(a,t,d),h={signature:w(m),payload:""};return i&&(h.payload=b.decode(s)),this._unprotectedHeader&&(h.header=this._unprotectedHeader),this._protectedHeader&&(h.protected=b.decode(p)),h}};var be=class{_flattened;constructor(t){this._flattened=new j(t)}setProtectedHeader(t){return this._flattened.setProtectedHeader(t),this}async sign(t,r){let o=await this._flattened.sign(t,r);if(o.payload===void 0)throw new TypeError("use the flattened module for creating JWS with b64: false");return`${o.protected}.${o.payload}.${o.signature}`}};var tt=class{parent;protectedHeader;unprotectedHeader;options;key;constructor(t,r,o){this.parent=t,this.key=r,this.options=o}setProtectedHeader(t){if(this.protectedHeader)throw new TypeError("setProtectedHeader can only be called once");return this.protectedHeader=t,this}setUnprotectedHeader(t){if(this.unprotectedHeader)throw new TypeError("setUnprotectedHeader can only be called once");return this.unprotectedHeader=t,this}addSignature(...t){return this.parent.addSignature(...t)}sign(...t){return this.parent.sign(...t)}done(){return this.parent}},rt=class{_payload;_signatures=[];constructor(t){this._payload=t}addSignature(t,r){let o=new tt(this,t,r);return this._signatures.push(o),o}async sign(){if(!this._signatures.length)throw new u("at least one signature must be added");let t={signatures:[],payload:""};for(let r=0;r<this._signatures.length;r++){let o=this._signatures[r],n=new j(this._payload);n.setProtectedHeader(o.protectedHeader),n.setUnprotectedHeader(o.unprotectedHeader);let{payload:i,...a}=await n.sign(o.key,o.options);if(r===0)t.payload=i;else if(t.payload!==i)throw new u("inconsistent use of JWS Unencoded Payload (RFC7797)");t.signatures.push(a)}return t}};function ee(e,t){if(!Number.isFinite(t))throw new TypeError(`Invalid ${e} input`);return t}var z=class{_payload;constructor(t={}){if(!y(t))throw new TypeError("JWT Claims Set MUST be an object");this._payload=t}setIssuer(t){return this._payload={...this._payload,iss:t},this}setSubject(t){return this._payload={...this._payload,sub:t},this}setAudience(t){return this._payload={...this._payload,aud:t},this}setJti(t){return this._payload={...this._payload,jti:t},this}setNotBefore(t){return typeof t=="number"?this._payload={...this._payload,nbf:ee("setNotBefore",t)}:t instanceof Date?this._payload={...this._payload,nbf:ee("setNotBefore",U(t))}:this._payload={...this._payload,nbf:U(new Date)+Z(t)},this}setExpirationTime(t){return typeof t=="number"?this._payload={...this._payload,exp:ee("setExpirationTime",t)}:t instanceof Date?this._payload={...this._payload,exp:ee("setExpirationTime",U(t))}:this._payload={...this._payload,exp:U(new Date)+Z(t)},this}setIssuedAt(t){return typeof t>"u"?this._payload={...this._payload,iat:U(new Date)}:t instanceof Date?this._payload={...this._payload,iat:ee("setIssuedAt",U(t))}:typeof t=="string"?this._payload={...this._payload,iat:ee("setIssuedAt",U(new Date)+Z(t))}:this._payload={...this._payload,iat:ee("setIssuedAt",t)},this}};var ot=class extends z{_protectedHeader;setProtectedHeader(t){return this._protectedHeader=t,this}async sign(t,r){let o=new be(S.encode(JSON.stringify(this._payload)));if(o.setProtectedHeader(this._protectedHeader),Array.isArray(this._protectedHeader?.crit)&&this._protectedHeader.crit.includes("b64")&&this._protectedHeader.b64===!1)throw new x("JWTs MUST NOT use unencoded payload");return o.sign(t,r)}};var nt=class extends z{_cek;_iv;_keyManagementParameters;_protectedHeader;_replicateIssuerAsHeader;_replicateSubjectAsHeader;_replicateAudienceAsHeader;setProtectedHeader(t){if(this._protectedHeader)throw new TypeError("setProtectedHeader can only be called once");return this._protectedHeader=t,this}setKeyManagementParameters(t){if(this._keyManagementParameters)throw new TypeError("setKeyManagementParameters can only be called once");return this._keyManagementParameters=t,this}setContentEncryptionKey(t){if(this._cek)throw new TypeError("setContentEncryptionKey can only be called once");return this._cek=t,this}setInitializationVector(t){if(this._iv)throw new TypeError("setInitializationVector can only be called once");return this._iv=t,this}replicateIssuerAsHeader(){return this._replicateIssuerAsHeader=!0,this}replicateSubjectAsHeader(){return this._replicateSubjectAsHeader=!0,this}replicateAudienceAsHeader(){return this._replicateAudienceAsHeader=!0,this}async encrypt(t,r){let o=new ge(S.encode(JSON.stringify(this._payload)));return this._replicateIssuerAsHeader&&(this._protectedHeader={...this._protectedHeader,iss:this._payload.iss}),this._replicateSubjectAsHeader&&(this._protectedHeader={...this._protectedHeader,sub:this._payload.sub}),this._replicateAudienceAsHeader&&(this._protectedHeader={...this._protectedHeader,aud:this._payload.aud}),o.setProtectedHeader(this._protectedHeader),this._iv&&o.setInitializationVector(this._iv),this._cek&&o.setContentEncryptionKey(this._cek),this._keyManagementParameters&&o.setKeyManagementParameters(this._keyManagementParameters),o.encrypt(t,r)}};var X=(e,t)=>{if(typeof e!="string"||!e)throw new ie(`${t} missing or invalid`)};async function ar(e,t){if(!y(e))throw new TypeError("JWK must be an object");if(t??="sha256",t!=="sha256"&&t!=="sha384"&&t!=="sha512")throw new TypeError('digestAlgorithm must one of "sha256", "sha384", or "sha512"');let r;switch(e.kty){case"EC":X(e.crv,'"crv" (Curve) Parameter'),X(e.x,'"x" (X Coordinate) Parameter'),X(e.y,'"y" (Y Coordinate) Parameter'),r={crv:e.crv,kty:e.kty,x:e.x,y:e.y};break;case"OKP":X(e.crv,'"crv" (Subtype of Key Pair) Parameter'),X(e.x,'"x" (Public Key) Parameter'),r={crv:e.crv,kty:e.kty,x:e.x};break;case"RSA":X(e.e,'"e" (Exponent) Parameter'),X(e.n,'"n" (Modulus) Parameter'),r={e:e.e,kty:e.kty,n:e.n};break;case"oct":X(e.k,'"k" (Key Value) Parameter'),r={k:e.k,kty:e.kty};break;default:throw new f('"kty" (Key Type) Parameter missing or unsupported')}let o=S.encode(JSON.stringify(r));return w(await He(t,o))}async function Do(e,t){t??="sha256";let r=await ar(e,t);return`urn:ietf:params:oauth:jwk-thumbprint:sha-${t.slice(-3)}:${r}`}async function Uo(e,t){let r={...e,...t?.header};if(!y(r.jwk))throw new u('"jwk" (JSON Web Key) Header Parameter must be a JSON object');let o=await Q({...r.jwk,ext:!0},r.alg);if(o instanceof Uint8Array||o.type!=="public")throw new u('"jwk" (JSON Web Key) Header Parameter must be a public key');return o}function ko(e){switch(typeof e=="string"&&e.slice(0,2)){case"RS":case"PS":return"RSA";case"ES":return"EC";case"Ed":return"OKP";default:throw new f('Unsupported "alg" value for a JSON Web Key Set')}}function it(e){return e&&typeof e=="object"&&Array.isArray(e.keys)&&e.keys.every(No)}function No(e){return y(e)}function Mo(e){return typeof structuredClone=="function"?structuredClone(e):JSON.parse(JSON.stringify(e))}var Ae=class{_jwks;_cached=new WeakMap;constructor(t){if(!it(t))throw new L("JSON Web Key Set malformed");this._jwks=Mo(t)}async getKey(t,r){let{alg:o,kid:n}={...t,...r?.header},i=ko(o),a=this._jwks.keys.filter(d=>{let m=i===d.kty;if(m&&typeof n=="string"&&(m=n===d.kid),m&&typeof d.alg=="string"&&(m=o===d.alg),m&&typeof d.use=="string"&&(m=d.use==="sig"),m&&Array.isArray(d.key_ops)&&(m=d.key_ops.includes("verify")),m&&o==="EdDSA"&&(m=d.crv==="Ed25519"||d.crv==="Ed448"),m)switch(o){case"ES256":m=d.crv==="P-256";break;case"ES256K":m=d.crv==="secp256k1";break;case"ES384":m=d.crv==="P-384";break;case"ES512":m=d.crv==="P-521";break}return m}),{0:s,length:p}=a;if(p===0)throw new q;if(p!==1){let d=new ae,{_cached:m}=this;throw d[Symbol.asyncIterator]=async function*(){for(let h of a)try{yield await sr(m,h,o)}catch{}},d}return sr(this._cached,s,o)}};async function sr(e,t,r){let o=e.get(t)||e.set(t,{}).get(t);if(o[r]===void 0){let n=await Q({...t,ext:!0},r);if(n instanceof Uint8Array||n.type!=="public")throw new L("JSON Web Key Set members must be public keys");o[r]=n}return o[r]}function $o(e){let t=new Ae(e);return async(r,o)=>t.getKey(r,o)}import*as pr from"node:http";import*as dr from"node:https";import{once as cr}from"node:events";var Lo=async(e,t,r)=>{let o;switch(e.protocol){case"https:":o=dr.get;break;case"http:":o=pr.get;break;default:throw new TypeError("Unsupported URL protocol.")}let{agent:n,headers:i}=r,a=o(e.href,{agent:n,timeout:t,headers:i}),[s]=await Promise.race([cr(a,"response"),cr(a,"timeout")]);if(!s)throw a.destroy(),new se;if(s.statusCode!==200)throw new C("Expected 200 OK from the JSON Web Key Set HTTP response");let p=[];for await(let d of s)p.push(d);try{return JSON.parse(b.decode(K(...p)))}catch{throw new C("Failed to parse the JSON Web Key Set HTTP response as JSON")}},fr=Lo;function Go(){return typeof WebSocketPair<"u"||typeof navigator<"u"&&navigator.userAgent==="Cloudflare-Workers"||typeof EdgeRuntime<"u"&&EdgeRuntime==="vercel"}var at;(typeof navigator>"u"||!navigator.userAgent?.startsWith?.("Mozilla/5.0 "))&&(at="jose/v5.2.3");var st=class extends Ae{_url;_timeoutDuration;_cooldownDuration;_cacheMaxAge;_jwksTimestamp;_pendingFetch;_options;constructor(t,r){if(super({keys:[]}),this._jwks=void 0,!(t instanceof URL))throw new TypeError("url must be an instance of URL");this._url=new URL(t.href),this._options={agent:r?.agent,headers:r?.headers},this._timeoutDuration=typeof r?.timeoutDuration=="number"?r?.timeoutDuration:5e3,this._cooldownDuration=typeof r?.cooldownDuration=="number"?r?.cooldownDuration:3e4,this._cacheMaxAge=typeof r?.cacheMaxAge=="number"?r?.cacheMaxAge:6e5}coolingDown(){return typeof this._jwksTimestamp=="number"?Date.now()<this._jwksTimestamp+this._cooldownDuration:!1}fresh(){return typeof this._jwksTimestamp=="number"?Date.now()<this._jwksTimestamp+this._cacheMaxAge:!1}async getKey(t,r){(!this._jwks||!this.fresh())&&await this.reload();try{return await super.getKey(t,r)}catch(o){if(o instanceof q&&this.coolingDown()===!1)return await this.reload(),super.getKey(t,r);throw o}}async reload(){this._pendingFetch&&Go()&&(this._pendingFetch=void 0);let t=new Headers(this._options.headers);at&&!t.has("User-Agent")&&(t.set("User-Agent",at),this._options.headers=Object.fromEntries(t.entries())),this._pendingFetch||=fr(this._url,this._timeoutDuration,this._options).then(r=>{if(!it(r))throw new L("JSON Web Key Set malformed");this._jwks={keys:r.keys},this._jwksTimestamp=Date.now(),this._pendingFetch=void 0}).catch(r=>{throw this._pendingFetch=void 0,r}),await this._pendingFetch}};function Bo(e,t){let r=new st(e,t);return async(o,n)=>r.getKey(o,n)}var ct=class extends z{encode(){let t=w(JSON.stringify({alg:"none"})),r=w(JSON.stringify(this._payload));return`${t}.${r}.`}static decode(t,r){if(typeof t!="string")throw new x("Unsecured JWT must be a string");let{0:o,1:n,2:i,length:a}=t.split(".");if(a!==3||i!=="")throw new x("Invalid Unsecured JWT");let s;try{if(s=JSON.parse(b.decode(A(o))),s.alg!=="none")throw new Error}catch{throw new x("Invalid Unsecured JWT")}return{payload:ne(s,A(n),r),header:s}}};var mr={};pt(mr,{decode:()=>_e,encode:()=>Fo});var Fo=w,_e=A;function Vo(e){let t;if(typeof e=="string"){let r=e.split(".");(r.length===3||r.length===5)&&([t]=r)}else if(typeof e=="object"&&e)if("protected"in e)t=e.protected;else throw new TypeError("Token does not contain a Protected Header");try{if(typeof t!="string"||!t)throw new Error;let r=JSON.parse(b.decode(_e(t)));if(!y(r))throw new Error;return r}catch{throw new TypeError("Invalid Token or Protected Header formatting")}}function zo(e){if(typeof e!="string")throw new x("JWTs must use Compact JWS serialization, JWT must be a string");let{1:t,length:r}=e.split(".");if(r===5)throw new x("Only JWTs using Compact JWS serialization can be decoded");if(r!==3)throw new x("Invalid JWT");if(!t)throw new x("JWTs must contain a payload");let o;try{o=_e(t)}catch{throw new x("Failed to base64url decode the payload")}let n;try{n=JSON.parse(b.decode(o))}catch{throw new x("Failed to parse the decoded payload as JSON")}if(!y(n))throw new x("Invalid JWT Claims Set");return n}import{createSecretKey as Xo,generateKeyPair as qo}from"node:crypto";import{promisify as Yo}from"node:util";var k=Yo(qo);async function hr(e,t){let r;switch(e){case"HS256":case"HS384":case"HS512":case"A128CBC-HS256":case"A192CBC-HS384":case"A256CBC-HS512":r=parseInt(e.slice(-3),10);break;case"A128KW":case"A192KW":case"A256KW":case"A128GCMKW":case"A192GCMKW":case"A256GCMKW":case"A128GCM":case"A192GCM":case"A256GCM":r=parseInt(e.slice(1,4),10);break;default:throw new f('Invalid or unsupported JWK "alg" (Algorithm) Parameter value')}return Xo(G(new Uint8Array(r>>3)))}async function ur(e,t){switch(e){case"RS256":case"RS384":case"RS512":case"PS256":case"PS384":case"PS512":case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":case"RSA1_5":{let r=t?.modulusLength??2048;if(typeof r!="number"||r<2048)throw new f("Invalid or unsupported modulusLength option provided, 2048 bits or larger keys must be used");return await k("rsa",{modulusLength:r,publicExponent:65537})}case"ES256":return k("ec",{namedCurve:"P-256"});case"ES256K":return k("ec",{namedCurve:"secp256k1"});case"ES384":return k("ec",{namedCurve:"P-384"});case"ES512":return k("ec",{namedCurve:"P-521"});case"EdDSA":switch(t?.crv){case void 0:case"Ed25519":return k("ed25519");case"Ed448":return k("ed448");default:throw new f("Invalid or unsupported crv option provided, supported values are Ed25519 and Ed448")}case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":{let r=t?.crv??"P-256";switch(r){case void 0:case"P-256":case"P-384":case"P-521":return k("ec",{namedCurve:r});case"X25519":return k("x25519");case"X448":return k("x448");default:throw new f("Invalid or unsupported crv option provided, supported values are P-256, P-384, P-521, X25519, and X448")}}default:throw new f('Invalid or unsupported JWK "alg" (Algorithm) Parameter value')}}async function Qo(e,t){return ur(e,t)}async function Zo(e,t){return hr(e,t)}var lr="node:crypto";var jo=lr;export{ge as CompactEncrypt,be as CompactSign,Uo as EmbeddedJWK,nt as EncryptJWT,V as FlattenedEncrypt,j as FlattenedSign,Ze as GeneralEncrypt,rt as GeneralSign,ot as SignJWT,ct as UnsecuredJWT,mr as base64url,ar as calculateJwkThumbprint,Do as calculateJwkThumbprintUri,Xe as compactDecrypt,et as compactVerify,$o as createLocalJWKSet,Bo as createRemoteJWKSet,jo as cryptoRuntime,zo as decodeJwt,Vo as decodeProtectedHeader,ut as errors,qe as exportJWK,go as exportPKCS8,So as exportSPKI,le as flattenedDecrypt,Se as flattenedVerify,yo as generalDecrypt,Wo as generalVerify,Qo as generateKeyPair,Zo as generateSecret,Q as importJWK,no as importPKCS8,ro as importSPKI,oo as importX509,Ro as jwtDecrypt,Oo as jwtVerify};
-//# sourceMappingURL=esm-WXLS5NTC.js.map