@workos-inc/node 8.0.0-beta.2 → 8.0.0-beta.4

package/lib/cjs/client/utils.cjs

@@ -0,0 +1,49 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var utils_exports = {};
+__export(utils_exports, {
+  toQueryString: () => toQueryString
+});
+module.exports = __toCommonJS(utils_exports);
+var import_qs = __toESM(require("qs"), 1);
+const toQueryString = /* @__PURE__ */ __name((options) => {
+  return import_qs.default.stringify(options, {
+    arrayFormat: "repeat",
+    // sorts the keys alphabetically to maintain backwards compatibility
+    sort: /* @__PURE__ */ __name((a, b) => a.localeCompare(b), "sort"),
+    // encodes space as + instead of %20 to maintain backwards compatibility
+    format: "RFC1738"
+  });
+}, "toQueryString");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  toQueryString
+});
+//# sourceMappingURL=utils.cjs.map

package/lib/cjs/client/utils.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/client/utils.ts"],"sourcesContent":["import qs from 'qs';\n\n/**\n * Converts an options object to a query string using qs library.\n * Maintains backwards compatibility with existing URL formatting.\n */\nexport const toQueryString = (\n  options: Record<\n    string,\n    string | string[] | Record<string, string | boolean | number> | undefined\n  >,\n): string => {\n  return qs.stringify(options, {\n    arrayFormat: 'repeat',\n    // sorts the keys alphabetically to maintain backwards compatibility\n    sort: (a, b) => a.localeCompare(b),\n    // encodes space as + instead of %20 to maintain backwards compatibility\n    format: 'RFC1738',\n  });\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAAe;AAMR,MAAM,gBAAgB,wBAC3B,YAIW;AACX,SAAO,UAAAA,QAAG,UAAU,SAAS;AAAA,IAC3B,aAAa;AAAA;AAAA,IAEb,MAAM,wBAAC,GAAG,MAAM,EAAE,cAAc,CAAC,GAA3B;AAAA;AAAA,IAEN,QAAQ;AAAA,EACV,CAAC;AACH,GAb6B;","names":["qs"]}

package/lib/cjs/client/utils.d.cts

@@ -0,0 +1,7 @@
+/**
+ * Converts an options object to a query string using qs library.
+ * Maintains backwards compatibility with existing URL formatting.
+ */
+declare const toQueryString: (options: Record<string, string | string[] | Record<string, string | boolean | number> | undefined>) => string;
+
+export { toQueryString };

package/lib/cjs/common/crypto/crypto-provider.cjs

@@ -0,0 +1,35 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var crypto_provider_exports = {};
+__export(crypto_provider_exports, {
+  CryptoProvider: () => CryptoProvider
+});
+module.exports = __toCommonJS(crypto_provider_exports);
+class CryptoProvider {
+  static {
+    __name(this, "CryptoProvider");
+  }
+  encoder = new TextEncoder();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CryptoProvider
+});
+//# sourceMappingURL=crypto-provider.cjs.map

package/lib/cjs/common/crypto/crypto-provider.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/crypto/crypto-provider.ts"],"sourcesContent":["/**\n * Interface encapsulating the various crypto computations used by the library,\n * allowing pluggable underlying crypto implementations.\n */\nexport abstract class CryptoProvider {\n  encoder = new TextEncoder();\n\n  /**\n   * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).\n   * The output HMAC should be encoded in hexadecimal.\n   *\n   * Sample values for implementations:\n   * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'\n   * - computeHMACSignature('\\ud83d\\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43\n   */\n  abstract computeHMACSignature(payload: string, secret: string): string;\n\n  /**\n   * Asynchronous version of `computeHMACSignature`. Some implementations may\n   * only allow support async signature computation.\n   *\n   * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).\n   * The output HMAC should be encoded in hexadecimal.\n   *\n   * Sample values for implementations:\n   * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'\n   * - computeHMACSignature('\\ud83d\\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43\n   */\n  abstract computeHMACSignatureAsync(\n    payload: string,\n    secret: string,\n  ): Promise<string>;\n\n  /**\n   * Cryptographically determine whether two signatures are equal\n   */\n  abstract secureCompare(stringA: string, stringB: string): Promise<boolean>;\n\n  /**\n   * Encrypts data using AES-256-GCM algorithm.\n   *\n   * @param plaintext The data to encrypt\n   * @param key The encryption key (should be 32 bytes for AES-256)\n   * @param iv Optional initialization vector (if not provided, a random one will be generated)\n   * @param aad Optional additional authenticated data\n   * @returns Object containing the encrypted ciphertext, the IV used, and the authentication tag\n   */\n  abstract encrypt(\n    plaintext: Uint8Array,\n    key: Uint8Array,\n    iv?: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<{\n    ciphertext: Uint8Array;\n    iv: Uint8Array;\n    tag: Uint8Array;\n  }>;\n\n  /**\n   * Decrypts data that was encrypted using AES-256-GCM algorithm.\n   *\n   * @param ciphertext The encrypted data\n   * @param key The decryption key (must be the same key used for encryption)\n   * @param iv The initialization vector used during encryption\n   * @param tag The authentication tag produced during encryption\n   * @param aad Optional additional authenticated data (must match what was used during encryption)\n   * @returns The decrypted data\n   * @throws Will throw an error if authentication fails or the data has been tampered with\n   */\n  abstract decrypt(\n    ciphertext: Uint8Array,\n    key: Uint8Array,\n    iv: Uint8Array,\n    tag: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<Uint8Array>;\n\n  /**\n   * Generates cryptographically secure random bytes.\n   *\n   * @param length The number of random bytes to generate\n   * @returns A Uint8Array containing the random bytes\n   */\n  abstract randomBytes(length: number): Uint8Array;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,MAAe,eAAe;AAAA,EAJrC,OAIqC;AAAA;AAAA;AAAA,EACnC,UAAU,IAAI,YAAY;AA+E5B;","names":[]}

package/lib/cjs/common/crypto/crypto-provider.d.cts

@@ -0,0 +1,67 @@
+/**
+ * Interface encapsulating the various crypto computations used by the library,
+ * allowing pluggable underlying crypto implementations.
+ */
+declare abstract class CryptoProvider {
+    encoder: TextEncoder;
+    /**
+     * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).
+     * The output HMAC should be encoded in hexadecimal.
+     *
+     * Sample values for implementations:
+     * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'
+     * - computeHMACSignature('\ud83d\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43
+     */
+    abstract computeHMACSignature(payload: string, secret: string): string;
+    /**
+     * Asynchronous version of `computeHMACSignature`. Some implementations may
+     * only allow support async signature computation.
+     *
+     * Computes a SHA-256 HMAC given a secret and a payload (encoded in UTF-8).
+     * The output HMAC should be encoded in hexadecimal.
+     *
+     * Sample values for implementations:
+     * - computeHMACSignature('', 'test_secret') => 'f7f9bd47fb987337b5796fdc1fdb9ba221d0d5396814bfcaf9521f43fd8927fd'
+     * - computeHMACSignature('\ud83d\ude00', 'test_secret') => '837da296d05c4fe31f61d5d7ead035099d9585a5bcde87de952012a78f0b0c43
+     */
+    abstract computeHMACSignatureAsync(payload: string, secret: string): Promise<string>;
+    /**
+     * Cryptographically determine whether two signatures are equal
+     */
+    abstract secureCompare(stringA: string, stringB: string): Promise<boolean>;
+    /**
+     * Encrypts data using AES-256-GCM algorithm.
+     *
+     * @param plaintext The data to encrypt
+     * @param key The encryption key (should be 32 bytes for AES-256)
+     * @param iv Optional initialization vector (if not provided, a random one will be generated)
+     * @param aad Optional additional authenticated data
+     * @returns Object containing the encrypted ciphertext, the IV used, and the authentication tag
+     */
+    abstract encrypt(plaintext: Uint8Array, key: Uint8Array, iv?: Uint8Array, aad?: Uint8Array): Promise<{
+        ciphertext: Uint8Array;
+        iv: Uint8Array;
+        tag: Uint8Array;
+    }>;
+    /**
+     * Decrypts data that was encrypted using AES-256-GCM algorithm.
+     *
+     * @param ciphertext The encrypted data
+     * @param key The decryption key (must be the same key used for encryption)
+     * @param iv The initialization vector used during encryption
+     * @param tag The authentication tag produced during encryption
+     * @param aad Optional additional authenticated data (must match what was used during encryption)
+     * @returns The decrypted data
+     * @throws Will throw an error if authentication fails or the data has been tampered with
+     */
+    abstract decrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, tag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Generates cryptographically secure random bytes.
+     *
+     * @param length The number of random bytes to generate
+     * @returns A Uint8Array containing the random bytes
+     */
+    abstract randomBytes(length: number): Uint8Array;
+}
+
+export { CryptoProvider };

package/lib/cjs/common/crypto/signature-provider.cjs

@@ -0,0 +1,84 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var signature_provider_exports = {};
+__export(signature_provider_exports, {
+  SignatureProvider: () => SignatureProvider
+});
+module.exports = __toCommonJS(signature_provider_exports);
+var import_exceptions = require('../exceptions/index.cjs');
+class SignatureProvider {
+  static {
+    __name(this, "SignatureProvider");
+  }
+  cryptoProvider;
+  constructor(cryptoProvider) {
+    this.cryptoProvider = cryptoProvider;
+  }
+  async verifyHeader({
+    payload,
+    sigHeader,
+    secret,
+    tolerance = 18e4
+  }) {
+    const [timestamp, signatureHash] = this.getTimestampAndSignatureHash(sigHeader);
+    if (!signatureHash || Object.keys(signatureHash).length === 0) {
+      throw new import_exceptions.SignatureVerificationException(
+        "No signature hash found with expected scheme v1"
+      );
+    }
+    if (parseInt(timestamp, 10) < Date.now() - tolerance) {
+      throw new import_exceptions.SignatureVerificationException(
+        "Timestamp outside the tolerance zone"
+      );
+    }
+    const expectedSig = await this.computeSignature(timestamp, payload, secret);
+    if (await this.cryptoProvider.secureCompare(expectedSig, signatureHash) === false) {
+      throw new import_exceptions.SignatureVerificationException(
+        "Signature hash does not match the expected signature hash for payload"
+      );
+    }
+    return true;
+  }
+  getTimestampAndSignatureHash(sigHeader) {
+    const signature = sigHeader;
+    const [t, v1] = signature.split(",");
+    if (typeof t === "undefined" || typeof v1 === "undefined") {
+      throw new import_exceptions.SignatureVerificationException(
+        "Signature or timestamp missing"
+      );
+    }
+    const { 1: timestamp } = t.split("=");
+    const { 1: signatureHash } = v1.split("=");
+    return [timestamp, signatureHash];
+  }
+  async computeSignature(timestamp, payload, secret) {
+    payload = JSON.stringify(payload);
+    const signedPayload = `${timestamp}.${payload}`;
+    return await this.cryptoProvider.computeHMACSignatureAsync(
+      signedPayload,
+      secret
+    );
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  SignatureProvider
+});
+//# sourceMappingURL=signature-provider.cjs.map

package/lib/cjs/common/crypto/signature-provider.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/crypto/signature-provider.ts"],"sourcesContent":["import { SignatureVerificationException } from '../exceptions';\nimport { CryptoProvider } from './crypto-provider';\n\nexport class SignatureProvider {\n  private cryptoProvider: CryptoProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.cryptoProvider = cryptoProvider;\n  }\n\n  async verifyHeader({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: any;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<boolean> {\n    const [timestamp, signatureHash] =\n      this.getTimestampAndSignatureHash(sigHeader);\n\n    if (!signatureHash || Object.keys(signatureHash).length === 0) {\n      throw new SignatureVerificationException(\n        'No signature hash found with expected scheme v1',\n      );\n    }\n\n    if (parseInt(timestamp, 10) < Date.now() - tolerance) {\n      throw new SignatureVerificationException(\n        'Timestamp outside the tolerance zone',\n      );\n    }\n\n    const expectedSig = await this.computeSignature(timestamp, payload, secret);\n    if (\n      (await this.cryptoProvider.secureCompare(expectedSig, signatureHash)) ===\n      false\n    ) {\n      throw new SignatureVerificationException(\n        'Signature hash does not match the expected signature hash for payload',\n      );\n    }\n    return true;\n  }\n\n  getTimestampAndSignatureHash(sigHeader: string): [string, string] {\n    const signature = sigHeader;\n    const [t, v1] = signature.split(',');\n    if (typeof t === 'undefined' || typeof v1 === 'undefined') {\n      throw new SignatureVerificationException(\n        'Signature or timestamp missing',\n      );\n    }\n    const { 1: timestamp } = t.split('=');\n    const { 1: signatureHash } = v1.split('=');\n\n    return [timestamp, signatureHash];\n  }\n\n  async computeSignature(\n    timestamp: any,\n    payload: any,\n    secret: string,\n  ): Promise<string> {\n    payload = JSON.stringify(payload);\n    const signedPayload = `${timestamp}.${payload}`;\n\n    return await this.cryptoProvider.computeHMACSignatureAsync(\n      signedPayload,\n      secret,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wBAA+C;AAGxC,MAAM,kBAAkB;AAAA,EAH/B,OAG+B;AAAA;AAAA;AAAA,EACrB;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAEA,MAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAKqB;AACnB,UAAM,CAAC,WAAW,aAAa,IAC7B,KAAK,6BAA6B,SAAS;AAE7C,QAAI,CAAC,iBAAiB,OAAO,KAAK,aAAa,EAAE,WAAW,GAAG;AAC7D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,EAAE,IAAI,KAAK,IAAI,IAAI,WAAW;AACpD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,cAAc,MAAM,KAAK,iBAAiB,WAAW,SAAS,MAAM;AAC1E,QACG,MAAM,KAAK,eAAe,cAAc,aAAa,aAAa,MACnE,OACA;AACA,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,6BAA6B,WAAqC;AAChE,UAAM,YAAY;AAClB,UAAM,CAAC,GAAG,EAAE,IAAI,UAAU,MAAM,GAAG;AACnC,QAAI,OAAO,MAAM,eAAe,OAAO,OAAO,aAAa;AACzD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,EAAE,GAAG,UAAU,IAAI,EAAE,MAAM,GAAG;AACpC,UAAM,EAAE,GAAG,cAAc,IAAI,GAAG,MAAM,GAAG;AAEzC,WAAO,CAAC,WAAW,aAAa;AAAA,EAClC;AAAA,EAEA,MAAM,iBACJ,WACA,SACA,QACiB;AACjB,cAAU,KAAK,UAAU,OAAO;AAChC,UAAM,gBAAgB,GAAG,SAAS,IAAI,OAAO;AAE7C,WAAO,MAAM,KAAK,eAAe;AAAA,MAC/B;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/lib/cjs/common/crypto/signature-provider.d.cts

@@ -0,0 +1,16 @@
+import { CryptoProvider } from './crypto-provider.cjs';
+
+declare class SignatureProvider {
+    private cryptoProvider;
+    constructor(cryptoProvider: CryptoProvider);
+    verifyHeader({ payload, sigHeader, secret, tolerance, }: {
+        payload: any;
+        sigHeader: string;
+        secret: string;
+        tolerance?: number;
+    }): Promise<boolean>;
+    getTimestampAndSignatureHash(sigHeader: string): [string, string];
+    computeSignature(timestamp: any, payload: any, secret: string): Promise<string>;
+}
+
+export { SignatureProvider };

package/lib/cjs/common/crypto/subtle-crypto-provider.cjs

@@ -0,0 +1,152 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var subtle_crypto_provider_exports = {};
+__export(subtle_crypto_provider_exports, {
+  SubtleCryptoProvider: () => SubtleCryptoProvider
+});
+module.exports = __toCommonJS(subtle_crypto_provider_exports);
+var import_crypto_provider = require('./crypto-provider.cjs');
+class SubtleCryptoProvider extends import_crypto_provider.CryptoProvider {
+  static {
+    __name(this, "SubtleCryptoProvider");
+  }
+  subtleCrypto;
+  constructor(subtleCrypto) {
+    super();
+    this.subtleCrypto = subtleCrypto || crypto.subtle;
+  }
+  computeHMACSignature(_payload, _secret) {
+    throw new Error(
+      "SubleCryptoProvider cannot be used in a synchronous context."
+    );
+  }
+  /** @override */
+  async computeHMACSignatureAsync(payload, secret) {
+    const encoder = new TextEncoder();
+    const key = await this.subtleCrypto.importKey(
+      "raw",
+      encoder.encode(secret),
+      {
+        name: "HMAC",
+        hash: { name: "SHA-256" }
+      },
+      false,
+      ["sign"]
+    );
+    const signatureBuffer = await this.subtleCrypto.sign(
+      "hmac",
+      key,
+      encoder.encode(payload)
+    );
+    const signatureBytes = new Uint8Array(signatureBuffer);
+    const signatureHexCodes = new Array(signatureBytes.length);
+    for (let i = 0; i < signatureBytes.length; i++) {
+      signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];
+    }
+    return signatureHexCodes.join("");
+  }
+  /** @override */
+  async secureCompare(stringA, stringB) {
+    const bufferA = this.encoder.encode(stringA);
+    const bufferB = this.encoder.encode(stringB);
+    if (bufferA.length !== bufferB.length) {
+      return false;
+    }
+    const algorithm = { name: "HMAC", hash: "SHA-256" };
+    const key = await crypto.subtle.generateKey(algorithm, false, [
+      "sign",
+      "verify"
+    ]);
+    const hmac = await crypto.subtle.sign(algorithm, key, bufferA);
+    const equal = await crypto.subtle.verify(algorithm, key, hmac, bufferB);
+    return equal;
+  }
+  async encrypt(plaintext, key, iv, aad) {
+    const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));
+    const cryptoKey = await this.subtleCrypto.importKey(
+      "raw",
+      key,
+      { name: "AES-GCM" },
+      false,
+      ["encrypt"]
+    );
+    const encryptParams = {
+      name: "AES-GCM",
+      iv: actualIv
+    };
+    if (aad) {
+      encryptParams.additionalData = aad;
+    }
+    const encryptedData = await this.subtleCrypto.encrypt(
+      encryptParams,
+      cryptoKey,
+      plaintext
+    );
+    const encryptedBytes = new Uint8Array(encryptedData);
+    const tagSize = 16;
+    const tagStart = encryptedBytes.length - tagSize;
+    const tag = encryptedBytes.slice(tagStart);
+    const ciphertext = encryptedBytes.slice(0, tagStart);
+    return {
+      ciphertext,
+      iv: actualIv,
+      tag
+    };
+  }
+  async decrypt(ciphertext, key, iv, tag, aad) {
+    const combinedData = new Uint8Array(ciphertext.length + tag.length);
+    combinedData.set(ciphertext, 0);
+    combinedData.set(tag, ciphertext.length);
+    const cryptoKey = await this.subtleCrypto.importKey(
+      "raw",
+      key,
+      { name: "AES-GCM" },
+      false,
+      ["decrypt"]
+    );
+    const decryptParams = {
+      name: "AES-GCM",
+      iv
+    };
+    if (aad) {
+      decryptParams.additionalData = aad;
+    }
+    const decryptedData = await this.subtleCrypto.decrypt(
+      decryptParams,
+      cryptoKey,
+      combinedData
+    );
+    return new Uint8Array(decryptedData);
+  }
+  randomBytes(length) {
+    const bytes = new Uint8Array(length);
+    crypto.getRandomValues(bytes);
+    return bytes;
+  }
+}
+const byteHexMapping = new Array(256);
+for (let i = 0; i < byteHexMapping.length; i++) {
+  byteHexMapping[i] = i.toString(16).padStart(2, "0");
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  SubtleCryptoProvider
+});
+//# sourceMappingURL=subtle-crypto-provider.cjs.map

package/lib/cjs/common/crypto/subtle-crypto-provider.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/crypto/subtle-crypto-provider.ts"],"sourcesContent":["import { CryptoProvider } from './crypto-provider';\n\n/**\n * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.\n *\n * This only supports asynchronous operations.\n */\nexport class SubtleCryptoProvider extends CryptoProvider {\n  subtleCrypto: SubtleCrypto;\n\n  constructor(subtleCrypto?: SubtleCrypto) {\n    super();\n\n    // If no subtle crypto is interface, default to the global namespace. This\n    // is to allow custom interfaces (eg. using the Node webcrypto interface in\n    // tests).\n    this.subtleCrypto = subtleCrypto || crypto.subtle;\n  }\n\n  computeHMACSignature(_payload: string, _secret: string): string {\n    throw new Error(\n      'SubleCryptoProvider cannot be used in a synchronous context.',\n    );\n  }\n\n  /** @override */\n  async computeHMACSignatureAsync(\n    payload: string,\n    secret: string,\n  ): Promise<string> {\n    const encoder = new TextEncoder();\n\n    const key = await this.subtleCrypto.importKey(\n      'raw',\n      encoder.encode(secret),\n      {\n        name: 'HMAC',\n        hash: { name: 'SHA-256' },\n      },\n      false,\n      ['sign'],\n    );\n\n    const signatureBuffer = await this.subtleCrypto.sign(\n      'hmac',\n      key,\n      encoder.encode(payload),\n    );\n\n    // crypto.subtle returns the signature in base64 format. This must be\n    // encoded in hex to match the CryptoProvider contract. We map each byte in\n    // the buffer to its corresponding hex octet and then combine into a string.\n    const signatureBytes = new Uint8Array(signatureBuffer);\n    const signatureHexCodes = new Array(signatureBytes.length);\n\n    for (let i = 0; i < signatureBytes.length; i++) {\n      signatureHexCodes[i] = byteHexMapping[signatureBytes[i]];\n    }\n\n    return signatureHexCodes.join('');\n  }\n\n  /** @override */\n  async secureCompare(stringA: string, stringB: string): Promise<boolean> {\n    const bufferA = this.encoder.encode(stringA);\n    const bufferB = this.encoder.encode(stringB);\n\n    if (bufferA.length !== bufferB.length) {\n      return false;\n    }\n\n    const algorithm = { name: 'HMAC', hash: 'SHA-256' };\n    const key = (await crypto.subtle.generateKey(algorithm, false, [\n      'sign',\n      'verify',\n    ])) as CryptoKey;\n    const hmac = await crypto.subtle.sign(algorithm, key, bufferA);\n    const equal = await crypto.subtle.verify(algorithm, key, hmac, bufferB);\n\n    return equal;\n  }\n\n  async encrypt(\n    plaintext: Uint8Array,\n    key: Uint8Array,\n    iv?: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<{\n    ciphertext: Uint8Array;\n    iv: Uint8Array;\n    tag: Uint8Array;\n  }> {\n    const actualIv = iv || crypto.getRandomValues(new Uint8Array(32));\n\n    const cryptoKey = await this.subtleCrypto.importKey(\n      'raw',\n      key as BufferSource,\n      { name: 'AES-GCM' },\n      false,\n      ['encrypt'],\n    );\n\n    const encryptParams: AesGcmParams = {\n      name: 'AES-GCM',\n      iv: actualIv as BufferSource,\n    };\n\n    if (aad) {\n      encryptParams.additionalData = aad as BufferSource;\n    }\n\n    const encryptedData = await this.subtleCrypto.encrypt(\n      encryptParams,\n      cryptoKey,\n      plaintext as BufferSource,\n    );\n\n    const encryptedBytes = new Uint8Array(encryptedData);\n\n    // Extract tag (last 16 bytes)\n    const tagSize = 16;\n    const tagStart = encryptedBytes.length - tagSize;\n    const tag = encryptedBytes.slice(tagStart);\n    const ciphertext = encryptedBytes.slice(0, tagStart);\n\n    return {\n      ciphertext,\n      iv: actualIv,\n      tag,\n    };\n  }\n\n  async decrypt(\n    ciphertext: Uint8Array,\n    key: Uint8Array,\n    iv: Uint8Array,\n    tag: Uint8Array,\n    aad?: Uint8Array,\n  ): Promise<Uint8Array> {\n    // SubtleCrypto expects tag to be appended to ciphertext for AES-GCM\n    const combinedData = new Uint8Array(ciphertext.length + tag.length);\n    combinedData.set(ciphertext, 0);\n    combinedData.set(tag, ciphertext.length);\n\n    const cryptoKey = await this.subtleCrypto.importKey(\n      'raw',\n      key as BufferSource,\n      { name: 'AES-GCM' },\n      false,\n      ['decrypt'],\n    );\n\n    const decryptParams: AesGcmParams = {\n      name: 'AES-GCM',\n      iv: iv as BufferSource,\n    };\n\n    if (aad) {\n      decryptParams.additionalData = aad as BufferSource;\n    }\n\n    const decryptedData = await this.subtleCrypto.decrypt(\n      decryptParams,\n      cryptoKey,\n      combinedData,\n    );\n\n    return new Uint8Array(decryptedData);\n  }\n\n  randomBytes(length: number): Uint8Array {\n    const bytes = new Uint8Array(length);\n    crypto.getRandomValues(bytes);\n    return bytes;\n  }\n}\n\n// Cached mapping of byte to hex representation. We do this once to avoid re-\n// computing every time we need to convert the result of a signature to hex.\nconst byteHexMapping = new Array(256);\nfor (let i = 0; i < byteHexMapping.length; i++) {\n  byteHexMapping[i] = i.toString(16).padStart(2, '0');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6BAA+B;AAOxB,MAAM,6BAA6B,sCAAe;AAAA,EAPzD,OAOyD;AAAA;AAAA;AAAA,EACvD;AAAA,EAEA,YAAY,cAA6B;AACvC,UAAM;AAKN,SAAK,eAAe,gBAAgB,OAAO;AAAA,EAC7C;AAAA,EAEA,qBAAqB,UAAkB,SAAyB;AAC9D,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,0BACJ,SACA,QACiB;AACjB,UAAM,UAAU,IAAI,YAAY;AAEhC,UAAM,MAAM,MAAM,KAAK,aAAa;AAAA,MAClC;AAAA,MACA,QAAQ,OAAO,MAAM;AAAA,MACrB;AAAA,QACE,MAAM;AAAA,QACN,MAAM,EAAE,MAAM,UAAU;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AAEA,UAAM,kBAAkB,MAAM,KAAK,aAAa;AAAA,MAC9C;AAAA,MACA;AAAA,MACA,QAAQ,OAAO,OAAO;AAAA,IACxB;AAKA,UAAM,iBAAiB,IAAI,WAAW,eAAe;AACrD,UAAM,oBAAoB,IAAI,MAAM,eAAe,MAAM;AAEzD,aAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,wBAAkB,CAAC,IAAI,eAAe,eAAe,CAAC,CAAC;AAAA,IACzD;AAEA,WAAO,kBAAkB,KAAK,EAAE;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,cAAc,SAAiB,SAAmC;AACtE,UAAM,UAAU,KAAK,QAAQ,OAAO,OAAO;AAC3C,UAAM,UAAU,KAAK,QAAQ,OAAO,OAAO;AAE3C,QAAI,QAAQ,WAAW,QAAQ,QAAQ;AACrC,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,EAAE,MAAM,QAAQ,MAAM,UAAU;AAClD,UAAM,MAAO,MAAM,OAAO,OAAO,YAAY,WAAW,OAAO;AAAA,MAC7D;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,OAAO,MAAM,OAAO,OAAO,KAAK,WAAW,KAAK,OAAO;AAC7D,UAAM,QAAQ,MAAM,OAAO,OAAO,OAAO,WAAW,KAAK,MAAM,OAAO;AAEtE,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QACJ,WACA,KACA,IACA,KAKC;AACD,UAAM,WAAW,MAAM,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AAEhE,UAAM,YAAY,MAAM,KAAK,aAAa;AAAA,MACxC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU;AAAA,MAClB;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAEA,UAAM,gBAA8B;AAAA,MAClC,MAAM;AAAA,MACN,IAAI;AAAA,IACN;AAEA,QAAI,KAAK;AACP,oBAAc,iBAAiB;AAAA,IACjC;AAEA,UAAM,gBAAgB,MAAM,KAAK,aAAa;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,iBAAiB,IAAI,WAAW,aAAa;AAGnD,UAAM,UAAU;AAChB,UAAM,WAAW,eAAe,SAAS;AACzC,UAAM,MAAM,eAAe,MAAM,QAAQ;AACzC,UAAM,aAAa,eAAe,MAAM,GAAG,QAAQ;AAEnD,WAAO;AAAA,MACL;AAAA,MACA,IAAI;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,YACA,KACA,IACA,KACA,KACqB;AAErB,UAAM,eAAe,IAAI,WAAW,WAAW,SAAS,IAAI,MAAM;AAClE,iBAAa,IAAI,YAAY,CAAC;AAC9B,iBAAa,IAAI,KAAK,WAAW,MAAM;AAEvC,UAAM,YAAY,MAAM,KAAK,aAAa;AAAA,MACxC;AAAA,MACA;AAAA,MACA,EAAE,MAAM,UAAU;AAAA,MAClB;AAAA,MACA,CAAC,SAAS;AAAA,IACZ;AAEA,UAAM,gBAA8B;AAAA,MAClC,MAAM;AAAA,MACN;AAAA,IACF;AAEA,QAAI,KAAK;AACP,oBAAc,iBAAiB;AAAA,IACjC;AAEA,UAAM,gBAAgB,MAAM,KAAK,aAAa;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,WAAO,IAAI,WAAW,aAAa;AAAA,EACrC;AAAA,EAEA,YAAY,QAA4B;AACtC,UAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,WAAO,gBAAgB,KAAK;AAC5B,WAAO;AAAA,EACT;AACF;AAIA,MAAM,iBAAiB,IAAI,MAAM,GAAG;AACpC,SAAS,IAAI,GAAG,IAAI,eAAe,QAAQ,KAAK;AAC9C,iBAAe,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACpD;","names":[]}

package/lib/cjs/common/crypto/subtle-crypto-provider.d.cts

@@ -0,0 +1,25 @@
+import { CryptoProvider } from './crypto-provider.cjs';
+
+/**
+ * `CryptoProvider which uses the SubtleCrypto interface of the Web Crypto API.
+ *
+ * This only supports asynchronous operations.
+ */
+declare class SubtleCryptoProvider extends CryptoProvider {
+    subtleCrypto: SubtleCrypto;
+    constructor(subtleCrypto?: SubtleCrypto);
+    computeHMACSignature(_payload: string, _secret: string): string;
+    /** @override */
+    computeHMACSignatureAsync(payload: string, secret: string): Promise<string>;
+    /** @override */
+    secureCompare(stringA: string, stringB: string): Promise<boolean>;
+    encrypt(plaintext: Uint8Array, key: Uint8Array, iv?: Uint8Array, aad?: Uint8Array): Promise<{
+        ciphertext: Uint8Array;
+        iv: Uint8Array;
+        tag: Uint8Array;
+    }>;
+    decrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, tag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
+    randomBytes(length: number): Uint8Array;
+}
+
+export { SubtleCryptoProvider };

package/lib/cjs/common/decorators/public-method.cjs

@@ -0,0 +1,48 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var public_method_exports = {};
+__export(public_method_exports, {
+  PUBLIC_METHODS: () => PUBLIC_METHODS,
+  PublicMethod: () => PublicMethod,
+  getPublicMethods: () => getPublicMethods
+});
+module.exports = __toCommonJS(public_method_exports);
+const PUBLIC_METHODS = Symbol("publicMethods");
+function PublicMethod(method, context) {
+  context.addInitializer(function() {
+    if (!this.constructor[PUBLIC_METHODS]) {
+      this.constructor[PUBLIC_METHODS] = /* @__PURE__ */ new Set();
+    }
+    this.constructor[PUBLIC_METHODS].add(context.name);
+  });
+  return method;
+}
+__name(PublicMethod, "PublicMethod");
+function getPublicMethods(target) {
+  return target.constructor[PUBLIC_METHODS];
+}
+__name(getPublicMethods, "getPublicMethods");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PUBLIC_METHODS,
+  PublicMethod,
+  getPublicMethods
+});
+//# sourceMappingURL=public-method.cjs.map

package/lib/cjs/common/decorators/public-method.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/decorators/public-method.ts"],"sourcesContent":["export const PUBLIC_METHODS = Symbol('publicMethods');\n\n/**\n * Decorator to mark a method as public (safe to use without API key).\n * These methods can be exposed in browser environments.\n */\nexport function PublicMethod<T extends (...args: any[]) => any>(\n  method: T,\n  context: ClassMethodDecoratorContext\n): T {\n  context.addInitializer(function (this: any) {\n    if (!this.constructor[PUBLIC_METHODS]) {\n      this.constructor[PUBLIC_METHODS] = new Set<string | symbol>();\n    }\n    this.constructor[PUBLIC_METHODS].add(context.name);\n  });\n\n  return method;\n}\n\n/**\n * Helper to get public methods from a class\n */\nexport function getPublicMethods(target: any): Set<string | symbol> | undefined {\n  return target.constructor[PUBLIC_METHODS];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAO,MAAM,iBAAiB,OAAO,eAAe;AAM7C,SAAS,aACd,QACA,SACG;AACH,UAAQ,eAAe,WAAqB;AAC1C,QAAI,CAAC,KAAK,YAAY,cAAc,GAAG;AACrC,WAAK,YAAY,cAAc,IAAI,oBAAI,IAAqB;AAAA,IAC9D;AACA,SAAK,YAAY,cAAc,EAAE,IAAI,QAAQ,IAAI;AAAA,EACnD,CAAC;AAED,SAAO;AACT;AAZgB;AAiBT,SAAS,iBAAiB,QAA+C;AAC9E,SAAO,OAAO,YAAY,cAAc;AAC1C;AAFgB;","names":[]}

package/lib/cjs/common/decorators/public-method.d.cts

@@ -0,0 +1,12 @@
+declare const PUBLIC_METHODS: unique symbol;
+/**
+ * Decorator to mark a method as public (safe to use without API key).
+ * These methods can be exposed in browser environments.
+ */
+declare function PublicMethod<T extends (...args: any[]) => any>(method: T, context: ClassMethodDecoratorContext): T;
+/**
+ * Helper to get public methods from a class
+ */
+declare function getPublicMethods(target: any): Set<string | symbol> | undefined;
+
+export { PUBLIC_METHODS, PublicMethod, getPublicMethods };

package/lib/cjs/common/exceptions/bad-request.exception.cjs

@@ -0,0 +1,58 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var bad_request_exception_exports = {};
+__export(bad_request_exception_exports, {
+  BadRequestException: () => BadRequestException
+});
+module.exports = __toCommonJS(bad_request_exception_exports);
+class BadRequestException extends Error {
+  static {
+    __name(this, "BadRequestException");
+  }
+  status = 400;
+  name = "BadRequestException";
+  message = "Bad request";
+  code;
+  errors;
+  requestID;
+  constructor({
+    code,
+    errors,
+    message,
+    requestID
+  }) {
+    super();
+    this.requestID = requestID;
+    if (message) {
+      this.message = message;
+    }
+    if (code) {
+      this.code = code;
+    }
+    if (errors) {
+      this.errors = errors;
+    }
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  BadRequestException
+});
+//# sourceMappingURL=bad-request.exception.cjs.map

package/lib/cjs/common/exceptions/bad-request.exception.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/common/exceptions/bad-request.exception.ts"],"sourcesContent":["import { RequestException } from '../interfaces/request-exception.interface';\n\nexport class BadRequestException extends Error implements RequestException {\n  readonly status = 400;\n  readonly name = 'BadRequestException';\n  readonly message: string = 'Bad request';\n  readonly code?: string;\n  readonly errors?: unknown[];\n  readonly requestID: string;\n\n  constructor({\n    code,\n    errors,\n    message,\n    requestID,\n  }: {\n    code?: string;\n    errors?: unknown[];\n    message?: string;\n    requestID: string;\n  }) {\n    super();\n\n    this.requestID = requestID;\n\n    if (message) {\n      this.message = message;\n    }\n\n    if (code) {\n      this.code = code;\n    }\n\n    if (errors) {\n      this.errors = errors;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEO,MAAM,4BAA4B,MAAkC;AAAA,EAF3E,OAE2E;AAAA;AAAA;AAAA,EAChE,SAAS;AAAA,EACT,OAAO;AAAA,EACP,UAAkB;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAKG;AACD,UAAM;AAEN,SAAK,YAAY;AAEjB,QAAI,SAAS;AACX,WAAK,UAAU;AAAA,IACjB;AAEA,QAAI,MAAM;AACR,WAAK,OAAO;AAAA,IACd;AAEA,QAAI,QAAQ;AACV,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AACF;","names":[]}

package/lib/cjs/common/exceptions/bad-request.exception.d.cts

@@ -0,0 +1,18 @@
+import { RequestException } from '../interfaces/request-exception.interface.cjs';
+
+declare class BadRequestException extends Error implements RequestException {
+    readonly status = 400;
+    readonly name = "BadRequestException";
+    readonly message: string;
+    readonly code?: string;
+    readonly errors?: unknown[];
+    readonly requestID: string;
+    constructor({ code, errors, message, requestID, }: {
+        code?: string;
+        errors?: unknown[];
+        message?: string;
+        requestID: string;
+    });
+}
+
+export { BadRequestException };