@workos-inc/node 8.0.0-rc.8 → 8.0.0

package/lib/authenticate-with-totp-options.serializer-Dv5iQHm4.cjs

@@ -0,0 +1,21 @@
+
+//#region src/user-management/serializers/authenticate-with-totp-options.serializer.ts
+const serializeAuthenticateWithTotpOptions = (options) => ({
+	grant_type: "urn:workos:oauth:grant-type:mfa-totp",
+	client_id: options.clientId,
+	client_secret: options.clientSecret,
+	code: options.code,
+	authentication_challenge_id: options.authenticationChallengeId,
+	pending_authentication_token: options.pendingAuthenticationToken,
+	ip_address: options.ipAddress,
+	user_agent: options.userAgent
+});
+
+//#endregion
+Object.defineProperty(exports, 'serializeAuthenticateWithTotpOptions', {
+  enumerable: true,
+  get: function () {
+    return serializeAuthenticateWithTotpOptions;
+  }
+});
+//# sourceMappingURL=authenticate-with-totp-options.serializer-Dv5iQHm4.cjs.map

package/lib/authenticate-with-totp-options.serializer-Dv5iQHm4.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate-with-totp-options.serializer-Dv5iQHm4.cjs","names":[],"sources":["../src/user-management/serializers/authenticate-with-totp-options.serializer.ts"],"sourcesContent":["import {\n  AuthenticateUserWithTotpCredentials,\n  AuthenticateWithTotpOptions,\n  SerializedAuthenticateWithTotpOptions,\n  WithResolvedClientId,\n} from '../interfaces';\n\nexport const serializeAuthenticateWithTotpOptions = (\n  options: WithResolvedClientId<AuthenticateWithTotpOptions> &\n    AuthenticateUserWithTotpCredentials,\n): SerializedAuthenticateWithTotpOptions => ({\n  grant_type: 'urn:workos:oauth:grant-type:mfa-totp',\n  client_id: options.clientId,\n  client_secret: options.clientSecret,\n  code: options.code,\n  authentication_challenge_id: options.authenticationChallengeId,\n  pending_authentication_token: options.pendingAuthenticationToken,\n  ip_address: options.ipAddress,\n  user_agent: options.userAgent,\n});\n"],"mappings":";;AAOA,MAAa,wCACX,aAE2C;CAC3C,YAAY;CACZ,WAAW,QAAQ;CACnB,eAAe,QAAQ;CACvB,MAAM,QAAQ;CACd,6BAA6B,QAAQ;CACrC,8BAA8B,QAAQ;CACtC,YAAY,QAAQ;CACpB,YAAY,QAAQ;CACrB"}

package/lib/authentication-event.interface-B2DjMTcP.d.cts

@@ -0,0 +1,28 @@
+//#region src/user-management/interfaces/authentication-event.interface.d.ts
+interface AuthenticationEventError {
+  code: string;
+  message: string;
+}
+type AuthenticationEventType = 'sso' | 'password' | 'oauth' | 'mfa' | 'magic_auth' | 'email_verification';
+type AuthenticationEventStatus = 'failed' | 'succeeded';
+type AuthenticationEvent = {
+  email: string | null;
+  error?: AuthenticationEventError;
+  ipAddress: string | null;
+  status: AuthenticationEventStatus;
+  type: AuthenticationEventType;
+  userAgent: string | null;
+  userId: string | null;
+};
+interface AuthenticationEventResponse {
+  email: string | null;
+  error?: AuthenticationEventError;
+  ip_address: string | null;
+  status: AuthenticationEventStatus;
+  type: AuthenticationEventType;
+  user_agent: string | null;
+  user_id: string | null;
+}
+//#endregion
+export { AuthenticationEventResponse as n, AuthenticationEvent as t };
+//# sourceMappingURL=authentication-event.interface-B2DjMTcP.d.cts.map

package/lib/authentication-event.serializer-B2f7AREO.d.cts

@@ -0,0 +1,7 @@
+import { n as AuthenticationEventResponse, t as AuthenticationEvent } from "./authentication-event.interface-B2DjMTcP.cjs";
+
+//#region src/user-management/serializers/authentication-event.serializer.d.ts
+declare const deserializeAuthenticationEvent: (authenticationEvent: AuthenticationEventResponse) => AuthenticationEvent;
+//#endregion
+export { deserializeAuthenticationEvent as t };
+//# sourceMappingURL=authentication-event.serializer-B2f7AREO.d.cts.map

package/lib/authentication-event.serializer-mddvaOjb.cjs

@@ -0,0 +1,20 @@
+
+//#region src/user-management/serializers/authentication-event.serializer.ts
+const deserializeAuthenticationEvent = (authenticationEvent) => ({
+	email: authenticationEvent.email,
+	error: authenticationEvent.error,
+	ipAddress: authenticationEvent.ip_address,
+	status: authenticationEvent.status,
+	type: authenticationEvent.type,
+	userAgent: authenticationEvent.user_agent,
+	userId: authenticationEvent.user_id
+});
+
+//#endregion
+Object.defineProperty(exports, 'deserializeAuthenticationEvent', {
+  enumerable: true,
+  get: function () {
+    return deserializeAuthenticationEvent;
+  }
+});
+//# sourceMappingURL=authentication-event.serializer-mddvaOjb.cjs.map

package/lib/authentication-event.serializer-mddvaOjb.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-event.serializer-mddvaOjb.cjs","names":[],"sources":["../src/user-management/serializers/authentication-event.serializer.ts"],"sourcesContent":["import {\n  AuthenticationEvent,\n  AuthenticationEventResponse,\n} from '../interfaces';\n\nexport const deserializeAuthenticationEvent = (\n  authenticationEvent: AuthenticationEventResponse,\n): AuthenticationEvent => ({\n  email: authenticationEvent.email,\n  error: authenticationEvent.error,\n  ipAddress: authenticationEvent.ip_address,\n  status: authenticationEvent.status,\n  type: authenticationEvent.type,\n  userAgent: authenticationEvent.user_agent,\n  userId: authenticationEvent.user_id,\n});\n"],"mappings":";;AAKA,MAAa,kCACX,yBACyB;CACzB,OAAO,oBAAoB;CAC3B,OAAO,oBAAoB;CAC3B,WAAW,oBAAoB;CAC/B,QAAQ,oBAAoB;CAC5B,MAAM,oBAAoB;CAC1B,WAAW,oBAAoB;CAC/B,QAAQ,oBAAoB;CAC7B"}

package/lib/authentication-radar-risk-detected-event.interface-WzOM1Ikg.d.cts

@@ -0,0 +1,24 @@
+//#region src/user-management/interfaces/authentication-radar-risk-detected-event.interface.d.ts
+type AuthenticationRadarRiskDetectedEventData = {
+  authMethod: string;
+  action: 'signup' | 'login';
+  control: string | null;
+  blocklistType: string | null;
+  ipAddress: string | null;
+  userAgent: string | null;
+  userId: string;
+  email: string;
+};
+interface AuthenticationRadarRiskDetectedEventResponseData {
+  auth_method: string;
+  action: 'signup' | 'login';
+  control: string | null;
+  blocklist_type: string | null;
+  ip_address: string | null;
+  user_agent: string | null;
+  user_id: string;
+  email: string;
+}
+//#endregion
+export { AuthenticationRadarRiskDetectedEventResponseData as n, AuthenticationRadarRiskDetectedEventData as t };
+//# sourceMappingURL=authentication-radar-risk-detected-event.interface-WzOM1Ikg.d.cts.map

package/lib/authentication-radar-risk-event-serializer-CDBrk7yn.cjs

@@ -0,0 +1,21 @@
+
+//#region src/user-management/serializers/authentication-radar-risk-event-serializer.ts
+const deserializeAuthenticationRadarRiskDetectedEvent = (authenticationRadarRiskDetectedEvent) => ({
+	authMethod: authenticationRadarRiskDetectedEvent.auth_method,
+	action: authenticationRadarRiskDetectedEvent.action,
+	control: authenticationRadarRiskDetectedEvent.control,
+	blocklistType: authenticationRadarRiskDetectedEvent.blocklist_type,
+	ipAddress: authenticationRadarRiskDetectedEvent.ip_address,
+	userAgent: authenticationRadarRiskDetectedEvent.user_agent,
+	userId: authenticationRadarRiskDetectedEvent.user_id,
+	email: authenticationRadarRiskDetectedEvent.email
+});
+
+//#endregion
+Object.defineProperty(exports, 'deserializeAuthenticationRadarRiskDetectedEvent', {
+  enumerable: true,
+  get: function () {
+    return deserializeAuthenticationRadarRiskDetectedEvent;
+  }
+});
+//# sourceMappingURL=authentication-radar-risk-event-serializer-CDBrk7yn.cjs.map

package/lib/authentication-radar-risk-event-serializer-CDBrk7yn.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-radar-risk-event-serializer-CDBrk7yn.cjs","names":[],"sources":["../src/user-management/serializers/authentication-radar-risk-event-serializer.ts"],"sourcesContent":["import type {\n  AuthenticationRadarRiskDetectedEventData,\n  AuthenticationRadarRiskDetectedEventResponseData,\n} from '../interfaces';\n\nexport const deserializeAuthenticationRadarRiskDetectedEvent = (\n  authenticationRadarRiskDetectedEvent: AuthenticationRadarRiskDetectedEventResponseData,\n): AuthenticationRadarRiskDetectedEventData => ({\n  authMethod: authenticationRadarRiskDetectedEvent.auth_method,\n  action: authenticationRadarRiskDetectedEvent.action,\n  control: authenticationRadarRiskDetectedEvent.control,\n  blocklistType: authenticationRadarRiskDetectedEvent.blocklist_type,\n  ipAddress: authenticationRadarRiskDetectedEvent.ip_address,\n  userAgent: authenticationRadarRiskDetectedEvent.user_agent,\n  userId: authenticationRadarRiskDetectedEvent.user_id,\n  email: authenticationRadarRiskDetectedEvent.email,\n});\n"],"mappings":";;AAKA,MAAa,mDACX,0CAC8C;CAC9C,YAAY,qCAAqC;CACjD,QAAQ,qCAAqC;CAC7C,SAAS,qCAAqC;CAC9C,eAAe,qCAAqC;CACpD,WAAW,qCAAqC;CAChD,WAAW,qCAAqC;CAChD,QAAQ,qCAAqC;CAC7C,OAAO,qCAAqC;CAC7C"}

package/lib/authentication-response.interface-DsUweGqC.d.cts

@@ -0,0 +1,28 @@
+import { n as OauthTokensResponse, t as OauthTokens } from "./oauth-tokens.interface-BnEjos_G.cjs";
+import { n as ImpersonatorResponse, t as Impersonator } from "./impersonator.interface-Vr4-B1pz.cjs";
+import { n as UserResponse, t as User } from "./user.interface-Dw_0nNpw.cjs";
+
+//#region src/user-management/interfaces/authentication-response.interface.d.ts
+type AuthenticationMethod = 'SSO' | 'Password' | 'Passkey' | 'AppleOAuth' | 'BitbucketOAuth' | 'GitHubOAuth' | 'GitLabOAuth' | 'GoogleOAuth' | 'LinkedInOAuth' | 'MicrosoftOAuth' | 'SalesforceOAuth' | 'VercelOAuth' | 'MagicAuth' | 'CrossAppAuth' | 'Impersonation';
+interface AuthenticationResponse {
+  user: User;
+  organizationId?: string;
+  accessToken: string;
+  refreshToken: string;
+  impersonator?: Impersonator;
+  authenticationMethod?: AuthenticationMethod;
+  sealedSession?: string;
+  oauthTokens?: OauthTokens;
+}
+interface AuthenticationResponseResponse {
+  user: UserResponse;
+  organization_id?: string;
+  access_token: string;
+  refresh_token: string;
+  impersonator?: ImpersonatorResponse;
+  authentication_method?: AuthenticationMethod;
+  oauth_tokens?: OauthTokensResponse;
+}
+//#endregion
+export { AuthenticationResponseResponse as n, AuthenticationResponse as t };
+//# sourceMappingURL=authentication-response.interface-DsUweGqC.d.cts.map

package/lib/authentication-response.serializer-Cvgyw-Ny.d.cts

@@ -0,0 +1,7 @@
+import { n as AuthenticationResponseResponse, t as AuthenticationResponse } from "./authentication-response.interface-DsUweGqC.cjs";
+
+//#region src/user-management/serializers/authentication-response.serializer.d.ts
+declare const deserializeAuthenticationResponse: (authenticationResponse: AuthenticationResponseResponse) => AuthenticationResponse;
+//#endregion
+export { deserializeAuthenticationResponse as t };
+//# sourceMappingURL=authentication-response.serializer-Cvgyw-Ny.d.cts.map

package/lib/authentication-response.serializer-DCSj_OPJ.cjs

@@ -0,0 +1,26 @@
+const require_oauth_tokens_serializer = require('./oauth-tokens.serializer-BmyyKwrh.cjs');
+const require_user_serializer = require('./user.serializer-Y5EM8MeK.cjs');
+
+//#region src/user-management/serializers/authentication-response.serializer.ts
+const deserializeAuthenticationResponse = (authenticationResponse) => {
+	const { user, organization_id, access_token, refresh_token, authentication_method, impersonator, oauth_tokens, ...rest } = authenticationResponse;
+	return {
+		user: require_user_serializer.deserializeUser(user),
+		organizationId: organization_id,
+		accessToken: access_token,
+		refreshToken: refresh_token,
+		impersonator,
+		authenticationMethod: authentication_method,
+		oauthTokens: require_oauth_tokens_serializer.deserializeOauthTokens(oauth_tokens),
+		...rest
+	};
+};
+
+//#endregion
+Object.defineProperty(exports, 'deserializeAuthenticationResponse', {
+  enumerable: true,
+  get: function () {
+    return deserializeAuthenticationResponse;
+  }
+});
+//# sourceMappingURL=authentication-response.serializer-DCSj_OPJ.cjs.map

package/lib/authentication-response.serializer-DCSj_OPJ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-response.serializer-DCSj_OPJ.cjs","names":["deserializeUser","deserializeOauthTokens"],"sources":["../src/user-management/serializers/authentication-response.serializer.ts"],"sourcesContent":["import {\n  AuthenticationResponse,\n  AuthenticationResponseResponse,\n} from '../interfaces';\nimport { deserializeOauthTokens } from './oauth-tokens.serializer';\nimport { deserializeUser } from './user.serializer';\n\nexport const deserializeAuthenticationResponse = (\n  authenticationResponse: AuthenticationResponseResponse,\n): AuthenticationResponse => {\n  const {\n    user,\n    organization_id,\n    access_token,\n    refresh_token,\n    authentication_method,\n    impersonator,\n    oauth_tokens,\n    ...rest\n  } = authenticationResponse;\n\n  return {\n    user: deserializeUser(user),\n    organizationId: organization_id,\n    accessToken: access_token,\n    refreshToken: refresh_token,\n    impersonator,\n    authenticationMethod: authentication_method,\n    oauthTokens: deserializeOauthTokens(oauth_tokens),\n    ...rest,\n  };\n};\n"],"mappings":";;;;AAOA,MAAa,qCACX,2BAC2B;CAC3B,MAAM,EACJ,MACA,iBACA,cACA,eACA,uBACA,cACA,cACA,GAAG,SACD;AAEJ,QAAO;EACL,MAAMA,wCAAgB,KAAK;EAC3B,gBAAgB;EAChB,aAAa;EACb,cAAc;EACd;EACA,sBAAsB;EACtB,aAAaC,uDAAuB,aAAa;EACjD,GAAG;EACJ"}

package/lib/authorization-url-options.interface-ZrBipUt2.d.cts

@@ -0,0 +1,55 @@
+//#region src/sso/interfaces/authorization-url-options.interface.d.ts
+/**
+ * PKCE fields must be provided together or not at all.
+ * Use workos.pkce.generate() to create a valid pair.
+ */
+type PKCEFields = {
+  codeChallenge?: never;
+  codeChallengeMethod?: never;
+} | {
+  codeChallenge: string;
+  codeChallengeMethod: 'S256';
+};
+interface SSOAuthorizationURLBaseFields {
+  clientId: string;
+  domainHint?: string;
+  loginHint?: string;
+  providerQueryParams?: Record<string, string | boolean | number>;
+  providerScopes?: string[];
+  redirectUri: string;
+  state?: string;
+}
+/**
+ * Result of getAuthorizationUrlWithPKCE() containing the URL,
+ * state, and PKCE code verifier.
+ *
+ * The codeVerifier must be stored securely and passed to
+ * getProfileAndToken() during token exchange.
+ */
+interface SSOPKCEAuthorizationURLResult {
+  /** The complete authorization URL to redirect the user to */
+  url: string;
+  /** The state parameter (auto-generated) */
+  state: string;
+  /** The PKCE code verifier. Store securely and pass to getProfileAndToken(). */
+  codeVerifier: string;
+}
+type SSOWithConnection = SSOAuthorizationURLBaseFields & PKCEFields & {
+  connection: string;
+  organization?: never;
+  provider?: never;
+};
+type SSOWithOrganization = SSOAuthorizationURLBaseFields & PKCEFields & {
+  organization: string;
+  connection?: never;
+  provider?: never;
+};
+type SSOWithProvider = SSOAuthorizationURLBaseFields & PKCEFields & {
+  provider: string;
+  connection?: never;
+  organization?: never;
+};
+type SSOAuthorizationURLOptions = SSOWithConnection | SSOWithOrganization | SSOWithProvider;
+//#endregion
+export { SSOPKCEAuthorizationURLResult as n, SSOAuthorizationURLOptions as t };
+//# sourceMappingURL=authorization-url-options.interface-ZrBipUt2.d.cts.map

package/lib/authorization-url-options.interface-eEOWfbHw.d.cts

@@ -0,0 +1,45 @@
+//#region src/user-management/interfaces/authorization-url-options.interface.d.ts
+/**
+ * PKCE fields must be provided together or not at all.
+ * Use workos.pkce.generate() to create a valid pair.
+ */
+type PKCEFields = {
+  codeChallenge?: never;
+  codeChallengeMethod?: never;
+} | {
+  codeChallenge: string;
+  codeChallengeMethod: 'S256';
+};
+interface UserManagementAuthorizationURLBaseOptions {
+  clientId?: string;
+  connectionId?: string;
+  organizationId?: string;
+  domainHint?: string;
+  loginHint?: string;
+  provider?: string;
+  providerQueryParams?: Record<string, string | boolean | number>;
+  providerScopes?: string[];
+  prompt?: string;
+  redirectUri: string;
+  state?: string;
+  screenHint?: 'sign-up' | 'sign-in';
+}
+type UserManagementAuthorizationURLOptions = UserManagementAuthorizationURLBaseOptions & PKCEFields;
+/**
+ * Result of getAuthorizationUrlWithPKCE() containing the URL,
+ * state, and PKCE code verifier.
+ *
+ * The codeVerifier must be stored securely and passed to
+ * authenticateWithCode() during token exchange.
+ */
+interface PKCEAuthorizationURLResult {
+  /** The complete authorization URL to redirect the user to */
+  url: string;
+  /** The state parameter (auto-generated) */
+  state: string;
+  /** The PKCE code verifier. Store securely and pass to authenticateWithCode(). */
+  codeVerifier: string;
+}
+//#endregion
+export { UserManagementAuthorizationURLOptions as n, PKCEAuthorizationURLResult as t };
+//# sourceMappingURL=authorization-url-options.interface-eEOWfbHw.d.cts.map

package/lib/bad-request.exception-BmjHrQEZ.cjs

@@ -0,0 +1,26 @@
+
+//#region src/common/exceptions/bad-request.exception.ts
+var BadRequestException = class extends Error {
+	status = 400;
+	name = "BadRequestException";
+	message = "Bad request";
+	code;
+	errors;
+	requestID;
+	constructor({ code, errors, message, requestID }) {
+		super();
+		this.requestID = requestID;
+		if (message) this.message = message;
+		if (code) this.code = code;
+		if (errors) this.errors = errors;
+	}
+};
+
+//#endregion
+Object.defineProperty(exports, 'BadRequestException', {
+  enumerable: true,
+  get: function () {
+    return BadRequestException;
+  }
+});
+//# sourceMappingURL=bad-request.exception-BmjHrQEZ.cjs.map

package/lib/bad-request.exception-BmjHrQEZ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bad-request.exception-BmjHrQEZ.cjs","names":[],"sources":["../src/common/exceptions/bad-request.exception.ts"],"sourcesContent":["import { RequestException } from '../interfaces/request-exception.interface';\n\nexport class BadRequestException extends Error implements RequestException {\n  readonly status = 400;\n  readonly name = 'BadRequestException';\n  readonly message: string = 'Bad request';\n  readonly code?: string;\n  readonly errors?: unknown[];\n  readonly requestID: string;\n\n  constructor({\n    code,\n    errors,\n    message,\n    requestID,\n  }: {\n    code?: string;\n    errors?: unknown[];\n    message?: string;\n    requestID: string;\n  }) {\n    super();\n\n    this.requestID = requestID;\n\n    if (message) {\n      this.message = message;\n    }\n\n    if (code) {\n      this.code = code;\n    }\n\n    if (errors) {\n      this.errors = errors;\n    }\n  }\n}\n"],"mappings":";;AAEA,IAAa,sBAAb,cAAyC,MAAkC;CACzE,AAAS,SAAS;CAClB,AAAS,OAAO;CAChB,AAAS,UAAkB;CAC3B,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,EACV,MACA,QACA,SACA,aAMC;AACD,SAAO;AAEP,OAAK,YAAY;AAEjB,MAAI,QACF,MAAK,UAAU;AAGjB,MAAI,KACF,MAAK,OAAO;AAGd,MAAI,OACF,MAAK,SAAS"}

package/lib/bad-request.exception-Dt5w75jb.d.cts

@@ -0,0 +1,25 @@
+import { t as RequestException } from "./request-exception.interface-BmJyrOWP.cjs";
+
+//#region src/common/exceptions/bad-request.exception.d.ts
+declare class BadRequestException extends Error implements RequestException {
+  readonly status = 400;
+  readonly name = "BadRequestException";
+  readonly message: string;
+  readonly code?: string;
+  readonly errors?: unknown[];
+  readonly requestID: string;
+  constructor({
+    code,
+    errors,
+    message,
+    requestID
+  }: {
+    code?: string;
+    errors?: unknown[];
+    message?: string;
+    requestID: string;
+  });
+}
+//#endregion
+export { BadRequestException as t };
+//# sourceMappingURL=bad-request.exception-Dt5w75jb.d.cts.map

package/lib/base64-BROQtK6X.cjs

@@ -0,0 +1,44 @@
+
+//#region src/common/utils/base64.ts
+/**
+* Cross-runtime compatible base64 encoding/decoding utilities
+* that work in both Node.js and browser environments
+*/
+/**
+* Converts a base64 string to a Uint8Array
+*/
+function base64ToUint8Array(base64) {
+	if (typeof atob === "function") {
+		const binary = atob(base64);
+		const bytes = new Uint8Array(binary.length);
+		for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);
+		return bytes;
+	} else if (typeof Buffer !== "undefined") return new Uint8Array(Buffer.from(base64, "base64"));
+	else throw new Error("No base64 decoding implementation available");
+}
+/**
+* Converts a Uint8Array to a base64 string
+*/
+function uint8ArrayToBase64(bytes) {
+	if (typeof btoa === "function") {
+		let binary = "";
+		for (let i = 0; i < bytes.byteLength; i++) binary += String.fromCharCode(bytes[i]);
+		return btoa(binary);
+	} else if (typeof Buffer !== "undefined") return Buffer.from(bytes).toString("base64");
+	else throw new Error("No base64 encoding implementation available");
+}
+
+//#endregion
+Object.defineProperty(exports, 'base64ToUint8Array', {
+  enumerable: true,
+  get: function () {
+    return base64ToUint8Array;
+  }
+});
+Object.defineProperty(exports, 'uint8ArrayToBase64', {
+  enumerable: true,
+  get: function () {
+    return uint8ArrayToBase64;
+  }
+});
+//# sourceMappingURL=base64-BROQtK6X.cjs.map

package/lib/base64-BROQtK6X.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64-BROQtK6X.cjs","names":[],"sources":["../src/common/utils/base64.ts"],"sourcesContent":["/**\n * Cross-runtime compatible base64 encoding/decoding utilities\n * that work in both Node.js and browser environments\n */\n\n/**\n * Converts a base64 string to a Uint8Array\n */\nexport function base64ToUint8Array(base64: string): Uint8Array {\n  // In browsers and modern Node.js\n  if (typeof atob === 'function') {\n    const binary = atob(base64);\n    const bytes = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) {\n      bytes[i] = binary.charCodeAt(i);\n    }\n    return bytes;\n  }\n  // Node.js fallback using Buffer\n  else if (typeof Buffer !== 'undefined') {\n    return new Uint8Array(Buffer.from(base64, 'base64'));\n  }\n  // Fallback implementation if neither is available\n  else {\n    throw new Error('No base64 decoding implementation available');\n  }\n}\n\n/**\n * Converts a Uint8Array to a base64 string\n */\nexport function uint8ArrayToBase64(bytes: Uint8Array): string {\n  // In browsers and modern Node.js\n  if (typeof btoa === 'function') {\n    let binary = '';\n    for (let i = 0; i < bytes.byteLength; i++) {\n      binary += String.fromCharCode(bytes[i]);\n    }\n    return btoa(binary);\n  }\n  // Node.js fallback using Buffer\n  else if (typeof Buffer !== 'undefined') {\n    return Buffer.from(bytes).toString('base64');\n  }\n  // Fallback implementation if neither is available\n  else {\n    throw new Error('No base64 encoding implementation available');\n  }\n}\n"],"mappings":";;;;;;;;;AAQA,SAAgB,mBAAmB,QAA4B;AAE7D,KAAI,OAAO,SAAS,YAAY;EAC9B,MAAM,SAAS,KAAK,OAAO;EAC3B,MAAM,QAAQ,IAAI,WAAW,OAAO,OAAO;AAC3C,OAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,IACjC,OAAM,KAAK,OAAO,WAAW,EAAE;AAEjC,SAAO;YAGA,OAAO,WAAW,YACzB,QAAO,IAAI,WAAW,OAAO,KAAK,QAAQ,SAAS,CAAC;KAIpD,OAAM,IAAI,MAAM,8CAA8C;;;;;AAOlE,SAAgB,mBAAmB,OAA2B;AAE5D,KAAI,OAAO,SAAS,YAAY;EAC9B,IAAI,SAAS;AACb,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,YAAY,IACpC,WAAU,OAAO,aAAa,MAAM,GAAG;AAEzC,SAAO,KAAK,OAAO;YAGZ,OAAO,WAAW,YACzB,QAAO,OAAO,KAAK,MAAM,CAAC,SAAS,SAAS;KAI5C,OAAM,IAAI,MAAM,8CAA8C"}

package/lib/batch-write-resources-options.serializer-BxUrYV3Z.d.cts

@@ -0,0 +1,7 @@
+import { d as SerializedBatchWriteResourcesOptions, t as BatchWriteResourcesOptions } from "./resource.interface-DoGgkV2d.cjs";
+
+//#region src/fga/serializers/batch-write-resources-options.serializer.d.ts
+declare const serializeBatchWriteResourcesOptions: (options: BatchWriteResourcesOptions) => SerializedBatchWriteResourcesOptions;
+//#endregion
+export { serializeBatchWriteResourcesOptions as t };
+//# sourceMappingURL=batch-write-resources-options.serializer-BxUrYV3Z.d.cts.map

package/lib/batch-write-resources-options.serializer-CffA5DfH.cjs

@@ -0,0 +1,23 @@
+const require_resource_op_enum = require('./resource-op.enum-B88boilW.cjs');
+const require_create_resource_options_serializer = require('./create-resource-options.serializer-CW1mImuQ.cjs');
+const require_delete_resource_options_serializer = require('./delete-resource-options.serializer-1OtbZ7Xw.cjs');
+
+//#region src/fga/serializers/batch-write-resources-options.serializer.ts
+const serializeBatchWriteResourcesOptions = (options) => {
+	let serializedResources = [];
+	if (options.op === require_resource_op_enum.ResourceOp.Create) serializedResources = options.resources.map((options$1) => require_create_resource_options_serializer.serializeCreateResourceOptions(options$1));
+	else if (options.op === require_resource_op_enum.ResourceOp.Delete) serializedResources = options.resources.map((options$1) => require_delete_resource_options_serializer.serializeDeleteResourceOptions(options$1));
+	return {
+		op: options.op,
+		resources: serializedResources
+	};
+};
+
+//#endregion
+Object.defineProperty(exports, 'serializeBatchWriteResourcesOptions', {
+  enumerable: true,
+  get: function () {
+    return serializeBatchWriteResourcesOptions;
+  }
+});
+//# sourceMappingURL=batch-write-resources-options.serializer-CffA5DfH.cjs.map

package/lib/batch-write-resources-options.serializer-CffA5DfH.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-write-resources-options.serializer-CffA5DfH.cjs","names":["serializedResources:\n    | SerializedCreateResourceOptions[]\n    | SerializedDeleteResourceOptions[]","ResourceOp","serializeCreateResourceOptions","options","serializeDeleteResourceOptions"],"sources":["../src/fga/serializers/batch-write-resources-options.serializer.ts"],"sourcesContent":["import {\n  BatchWriteResourcesOptions,\n  CreateResourceOptions,\n  DeleteResourceOptions,\n  ResourceOp,\n  SerializedBatchWriteResourcesOptions,\n  SerializedCreateResourceOptions,\n  SerializedDeleteResourceOptions,\n} from '../interfaces';\nimport { serializeCreateResourceOptions } from './create-resource-options.serializer';\nimport { serializeDeleteResourceOptions } from './delete-resource-options.serializer';\n\nexport const serializeBatchWriteResourcesOptions = (\n  options: BatchWriteResourcesOptions,\n): SerializedBatchWriteResourcesOptions => {\n  let serializedResources:\n    | SerializedCreateResourceOptions[]\n    | SerializedDeleteResourceOptions[] = [];\n  if (options.op === ResourceOp.Create) {\n    const resources = options.resources as CreateResourceOptions[];\n    serializedResources = resources.map((options: CreateResourceOptions) =>\n      serializeCreateResourceOptions(options),\n    );\n  } else if (options.op === ResourceOp.Delete) {\n    const resources = options.resources as DeleteResourceOptions[];\n    serializedResources = resources.map((options: DeleteResourceOptions) =>\n      serializeDeleteResourceOptions(options),\n    );\n  }\n\n  return {\n    op: options.op,\n    resources: serializedResources,\n  };\n};\n"],"mappings":";;;;;AAYA,MAAa,uCACX,YACyC;CACzC,IAAIA,sBAEoC,EAAE;AAC1C,KAAI,QAAQ,OAAOC,oCAAW,OAE5B,uBADkB,QAAQ,UACM,KAAK,cACnCC,0EAA+BC,UAAQ,CACxC;UACQ,QAAQ,OAAOF,oCAAW,OAEnC,uBADkB,QAAQ,UACM,KAAK,cACnCG,0EAA+BD,UAAQ,CACxC;AAGH,QAAO;EACL,IAAI,QAAQ;EACZ,WAAW;EACZ"}

package/lib/challenge-factor-options-pbaZ9sT0.d.cts

@@ -0,0 +1,10 @@
+//#region src/mfa/interfaces/challenge-factor-options.d.ts
+type ChallengeFactorOptions = {
+  authenticationFactorId: string;
+} | {
+  authenticationFactorId: string;
+  smsTemplate: string;
+};
+//#endregion
+export { ChallengeFactorOptions as t };
+//# sourceMappingURL=challenge-factor-options-pbaZ9sT0.d.cts.map

package/lib/challenge.interface-BRyoywSw.d.cts

@@ -0,0 +1,22 @@
+//#region src/mfa/interfaces/challenge.interface.d.ts
+interface Challenge {
+  object: 'authentication_challenge';
+  id: string;
+  createdAt: string;
+  updatedAt: string;
+  expiresAt?: string;
+  code?: string;
+  authenticationFactorId: string;
+}
+interface ChallengeResponse {
+  object: 'authentication_challenge';
+  id: string;
+  created_at: string;
+  updated_at: string;
+  expires_at?: string;
+  code?: string;
+  authentication_factor_id: string;
+}
+//#endregion
+export { ChallengeResponse as n, Challenge as t };
+//# sourceMappingURL=challenge.interface-BRyoywSw.d.cts.map

package/lib/challenge.serializer-CiNDM6Ny.cjs

@@ -0,0 +1,20 @@
+
+//#region src/mfa/serializers/challenge.serializer.ts
+const deserializeChallenge = (challenge) => ({
+	object: challenge.object,
+	id: challenge.id,
+	createdAt: challenge.created_at,
+	updatedAt: challenge.updated_at,
+	expiresAt: challenge.expires_at,
+	code: challenge.code,
+	authenticationFactorId: challenge.authentication_factor_id
+});
+
+//#endregion
+Object.defineProperty(exports, 'deserializeChallenge', {
+  enumerable: true,
+  get: function () {
+    return deserializeChallenge;
+  }
+});
+//# sourceMappingURL=challenge.serializer-CiNDM6Ny.cjs.map

package/lib/challenge.serializer-CiNDM6Ny.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.serializer-CiNDM6Ny.cjs","names":[],"sources":["../src/mfa/serializers/challenge.serializer.ts"],"sourcesContent":["import { Challenge, ChallengeResponse } from '../interfaces';\n\nexport const deserializeChallenge = (\n  challenge: ChallengeResponse,\n): Challenge => ({\n  object: challenge.object,\n  id: challenge.id,\n  createdAt: challenge.created_at,\n  updatedAt: challenge.updated_at,\n  expiresAt: challenge.expires_at,\n  code: challenge.code,\n  authenticationFactorId: challenge.authentication_factor_id,\n});\n"],"mappings":";;AAEA,MAAa,wBACX,eACe;CACf,QAAQ,UAAU;CAClB,IAAI,UAAU;CACd,WAAW,UAAU;CACrB,WAAW,UAAU;CACrB,WAAW,UAAU;CACrB,MAAM,UAAU;CAChB,wBAAwB,UAAU;CACnC"}

package/lib/challenge.serializer-DuO1FONN.d.cts

@@ -0,0 +1,7 @@
+import { n as ChallengeResponse, t as Challenge } from "./challenge.interface-BRyoywSw.cjs";
+
+//#region src/mfa/serializers/challenge.serializer.d.ts
+declare const deserializeChallenge: (challenge: ChallengeResponse) => Challenge;
+//#endregion
+export { deserializeChallenge as t };
+//# sourceMappingURL=challenge.serializer-DuO1FONN.d.cts.map

package/lib/check-op.enum-4IPdgcR_.cjs

@@ -0,0 +1,16 @@
+
+//#region src/fga/interfaces/check-op.enum.ts
+let CheckOp = /* @__PURE__ */ function(CheckOp$1) {
+	CheckOp$1["AllOf"] = "all_of";
+	CheckOp$1["AnyOf"] = "any_of";
+	return CheckOp$1;
+}({});
+
+//#endregion
+Object.defineProperty(exports, 'CheckOp', {
+  enumerable: true,
+  get: function () {
+    return CheckOp;
+  }
+});
+//# sourceMappingURL=check-op.enum-4IPdgcR_.cjs.map

package/lib/check-op.enum-4IPdgcR_.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-op.enum-4IPdgcR_.cjs","names":[],"sources":["../src/fga/interfaces/check-op.enum.ts"],"sourcesContent":["export enum CheckOp {\n  AllOf = 'all_of',\n  AnyOf = 'any_of',\n}\n"],"mappings":";;AAAA,IAAY,8CAAL;AACL;AACA"}

package/lib/check-op.enum-BxjDvXvG.d.cts

@@ -0,0 +1,8 @@
+//#region src/fga/interfaces/check-op.enum.d.ts
+declare enum CheckOp {
+  AllOf = "all_of",
+  AnyOf = "any_of",
+}
+//#endregion
+export { CheckOp as t };
+//# sourceMappingURL=check-op.enum-BxjDvXvG.d.cts.map