@workos-inc/node 8.5.0 → 8.7.0

package/lib/workos.js.map

@@ -1 +1 @@
-{"version":3,"file":"workos.js","names":["protocol: string","apiHostname: string","port: number | undefined","userAgent: string","headers: Record<string, string>","requestHeaders: Record<string, string>","res: HttpClientResponseInterface","error"],"sources":["../src/workos.ts"],"sourcesContent":["import {\n  ApiKeyRequiredException,\n  GenericServerException,\n  NotFoundException,\n  UnauthorizedException,\n  UnprocessableEntityException,\n  OauthException,\n  RateLimitExceededException,\n} from './common/exceptions';\nimport { PKCE } from './pkce/pkce';\nimport {\n  GetOptions,\n  HttpClientResponseInterface,\n  PatchOptions,\n  PostOptions,\n  PutOptions,\n  WorkOSOptions,\n  WorkOSResponseError,\n} from './common/interfaces';\nimport { ApiKeys } from './api-keys/api-keys';\nimport { DirectorySync } from './directory-sync/directory-sync';\nimport { Events } from './events/events';\nimport { Organizations } from './organizations/organizations';\nimport { OrganizationDomains } from './organization-domains/organization-domains';\nimport { Passwordless } from './passwordless/passwordless';\nimport { Pipes } from './pipes/pipes';\nimport { Portal } from './portal/portal';\nimport { SSO } from './sso/sso';\nimport { Webhooks } from './webhooks/webhooks';\nimport { Mfa } from './mfa/mfa';\nimport { AuditLogs } from './audit-logs/audit-logs';\nimport { UserManagement } from './user-management/user-management';\nimport { FGA } from './fga/fga';\nimport { BadRequestException } from './common/exceptions/bad-request.exception';\nimport { FeatureFlags } from './feature-flags/feature-flags';\n\nimport { HttpClient, HttpClientError } from './common/net/http-client';\nimport { SubtleCryptoProvider } from './common/crypto/subtle-crypto-provider';\nimport { FetchHttpClient } from './common/net/fetch-client';\nimport { Widgets } from './widgets/widgets';\nimport { Actions } from './actions/actions';\nimport { Authorization } from './authorization/authorization';\nimport { Vault } from './vault/vault';\nimport { ConflictException } from './common/exceptions/conflict.exception';\nimport { CryptoProvider } from './common/crypto/crypto-provider';\nimport { ParseError } from './common/exceptions/parse-error';\nimport { getEnv } from './common/utils/env';\nimport { getRuntimeInfo } from './common/utils/runtime-info';\n\nconst VERSION = '8.5.0';\n\nconst DEFAULT_HOSTNAME = 'api.workos.com';\n\nconst HEADER_AUTHORIZATION = 'Authorization';\nconst HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';\nconst HEADER_WARRANT_TOKEN = 'Warrant-Token';\n\nexport class WorkOS {\n  readonly baseURL: string;\n  readonly client: HttpClient;\n  readonly clientId?: string;\n  readonly key?: string;\n  readonly options: WorkOSOptions;\n  readonly pkce: PKCE;\n\n  private readonly hasApiKey: boolean;\n\n  readonly actions: Actions;\n  readonly apiKeys = new ApiKeys(this);\n  readonly auditLogs = new AuditLogs(this);\n  readonly authorization = new Authorization(this);\n  readonly directorySync = new DirectorySync(this);\n  readonly events = new Events(this);\n  readonly featureFlags = new FeatureFlags(this);\n  readonly fga = new FGA(this);\n  readonly mfa = new Mfa(this);\n  readonly organizations = new Organizations(this);\n  readonly organizationDomains = new OrganizationDomains(this);\n  readonly passwordless = new Passwordless(this);\n  readonly pipes = new Pipes(this);\n  readonly portal = new Portal(this);\n  readonly sso = new SSO(this);\n  readonly userManagement: UserManagement;\n  readonly vault = new Vault(this);\n  readonly webhooks: Webhooks;\n  readonly widgets = new Widgets(this);\n\n  /**\n   * Create a new WorkOS client.\n   *\n   * @param keyOrOptions - API key string, or options object\n   * @param maybeOptions - Options when first argument is API key\n   *\n   * @example\n   * // Server-side with API key (string)\n   * const workos = new WorkOS('sk_...');\n   *\n   * @example\n   * // Server-side with API key (object)\n   * const workos = new WorkOS({ apiKey: 'sk_...', clientId: 'client_...' });\n   *\n   * @example\n   * // PKCE/public client (no API key)\n   * const workos = new WorkOS({ clientId: 'client_...' });\n   */\n  constructor(\n    keyOrOptions?: string | WorkOSOptions,\n    maybeOptions?: WorkOSOptions,\n  ) {\n    if (typeof keyOrOptions === 'object') {\n      this.key = keyOrOptions.apiKey;\n      this.options = keyOrOptions;\n    } else {\n      this.key = keyOrOptions;\n      this.options = maybeOptions ?? {};\n    }\n\n    if (!this.key) {\n      this.key = getEnv('WORKOS_API_KEY');\n    }\n\n    this.hasApiKey = !!this.key;\n\n    if (this.options.https === undefined) {\n      this.options.https = true;\n    }\n\n    this.clientId = this.options.clientId;\n    if (!this.clientId) {\n      this.clientId = getEnv('WORKOS_CLIENT_ID');\n    }\n\n    if (!this.hasApiKey && !this.clientId) {\n      throw new Error(\n        'WorkOS requires either an API key or a clientId. ' +\n          'For server-side: new WorkOS(\"sk_...\") or new WorkOS({ apiKey: \"sk_...\" }). ' +\n          'For PKCE/public clients: new WorkOS({ clientId: \"client_...\" })',\n      );\n    }\n\n    const protocol: string = this.options.https ? 'https' : 'http';\n    const apiHostname: string = this.options.apiHostname || DEFAULT_HOSTNAME;\n    const port: number | undefined = this.options.port;\n    this.baseURL = `${protocol}://${apiHostname}`;\n\n    if (port) {\n      this.baseURL = this.baseURL + `:${port}`;\n    }\n\n    this.pkce = new PKCE();\n\n    this.webhooks = this.createWebhookClient();\n    this.actions = this.createActionsClient();\n\n    // Must initialize UserManagement after baseURL is configured\n    this.userManagement = new UserManagement(this);\n\n    const userAgent = this.createUserAgent(this.options);\n\n    this.client = this.createHttpClient(this.options, userAgent);\n  }\n\n  private createUserAgent(options: WorkOSOptions): string {\n    let userAgent: string = `workos-node/${VERSION}`;\n\n    const { name: runtimeName, version: runtimeVersion } = getRuntimeInfo();\n    userAgent += ` (${runtimeName}${runtimeVersion ? `/${runtimeVersion}` : ''})`;\n\n    if (options.appInfo) {\n      const { name, version } = options.appInfo;\n      userAgent += ` ${name}: ${version}`;\n    }\n\n    return userAgent;\n  }\n\n  createWebhookClient() {\n    return new Webhooks(this.getCryptoProvider());\n  }\n\n  createActionsClient() {\n    return new Actions(this.getCryptoProvider());\n  }\n\n  getCryptoProvider(): CryptoProvider {\n    return new SubtleCryptoProvider();\n  }\n\n  createHttpClient(options: WorkOSOptions, userAgent: string) {\n    const headers: Record<string, string> = {\n      'User-Agent': userAgent,\n    };\n\n    const configHeaders = options.config?.headers;\n    if (\n      configHeaders &&\n      typeof configHeaders === 'object' &&\n      !Array.isArray(configHeaders) &&\n      !(configHeaders instanceof Headers)\n    ) {\n      Object.assign(headers, configHeaders);\n    }\n\n    if (this.key) {\n      headers['Authorization'] = `Bearer ${this.key}`;\n    }\n\n    return new FetchHttpClient(this.baseURL, {\n      ...options.config,\n      timeout: options.timeout,\n      headers,\n    }) as HttpClient;\n  }\n\n  get version() {\n    return VERSION;\n  }\n\n  /**\n   * Require API key for methods that need it.\n   * @param methodName - Name of the method requiring API key (for error message)\n   * @throws ApiKeyRequiredException if no API key was provided\n   */\n  requireApiKey(methodName: string): void {\n    if (!this.hasApiKey) {\n      throw new ApiKeyRequiredException(methodName);\n    }\n  }\n\n  async post<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PostOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.post<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async get<Result = any>(\n    path: string,\n    options: GetOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.accessToken) {\n      requestHeaders[HEADER_AUTHORIZATION] = `Bearer ${options.accessToken}`;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n    try {\n      res = await this.client.get(path, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async put<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PutOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.put<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async patch<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PatchOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.patch<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async delete(path: string, query?: any): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.delete(path, {\n        params: query,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  async deleteWithBody<Entity = any>(\n    path: string,\n    entity: Entity,\n  ): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.deleteWithBody(path, entity, {});\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  emitWarning(warning: string) {\n    // tslint:disable-next-line:no-console\n    console.warn(`WorkOS: ${warning}`);\n  }\n\n  private async handleParseError(\n    error: unknown,\n    res: HttpClientResponseInterface,\n  ) {\n    if (error instanceof SyntaxError) {\n      const rawResponse = res.getRawResponse() as Response;\n      const requestID = rawResponse.headers.get('X-Request-ID') ?? '';\n      const rawStatus = rawResponse.status;\n      const rawBody = await rawResponse.text();\n      throw new ParseError({\n        message: error.message,\n        rawBody,\n        rawStatus,\n        requestID,\n      });\n    }\n  }\n\n  private handleHttpError({ path, error }: { path: string; error: unknown }) {\n    if (!(error instanceof HttpClientError)) {\n      throw new Error(`Unexpected error: ${error}`, { cause: error });\n    }\n\n    const { response } = error as HttpClientError<WorkOSResponseError>;\n\n    if (response) {\n      const { status, data, headers } = response;\n\n      const requestID = headers['X-Request-ID'] ?? '';\n      const {\n        code,\n        error_description: errorDescription,\n        error,\n        errors,\n        message,\n      } = data;\n\n      switch (status) {\n        case 401: {\n          throw new UnauthorizedException(requestID);\n        }\n        case 409: {\n          throw new ConflictException({ requestID, message, error });\n        }\n        case 422: {\n          throw new UnprocessableEntityException({\n            code,\n            errors,\n            message,\n            requestID,\n          });\n        }\n        case 404: {\n          throw new NotFoundException({\n            code,\n            message,\n            path,\n            requestID,\n          });\n        }\n        case 429: {\n          const retryAfter = headers.get('Retry-After');\n\n          throw new RateLimitExceededException(\n            data.message,\n            requestID,\n            retryAfter ? Number(retryAfter) : null,\n          );\n        }\n        default: {\n          if (error || errorDescription) {\n            throw new OauthException(\n              status,\n              requestID,\n              error,\n              errorDescription,\n              data,\n            );\n          } else if (code && errors) {\n            // Note: ideally this should be mapped directly with a `400` status code.\n            // However, this would break existing logic for the `OauthException` exception.\n            throw new BadRequestException({\n              code,\n              errors,\n              message,\n              requestID,\n            });\n          } else {\n            throw new GenericServerException(\n              status,\n              data.message,\n              data,\n              requestID,\n            );\n          }\n        }\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,MAAM,UAAU;AAEhB,MAAM,mBAAmB;AAEzB,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,uBAAuB;AAE7B,IAAa,SAAb,MAAoB;CAClB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,AAAiB;CAEjB,AAAS;CACT,AAAS,UAAU,IAAI,QAAQ,KAAK;CACpC,AAAS,YAAY,IAAI,UAAU,KAAK;CACxC,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,SAAS,IAAI,OAAO,KAAK;CAClC,AAAS,eAAe,IAAI,aAAa,KAAK;CAC9C,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,sBAAsB,IAAI,oBAAoB,KAAK;CAC5D,AAAS,eAAe,IAAI,aAAa,KAAK;CAC9C,AAAS,QAAQ,IAAI,MAAM,KAAK;CAChC,AAAS,SAAS,IAAI,OAAO,KAAK;CAClC,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS;CACT,AAAS,QAAQ,IAAI,MAAM,KAAK;CAChC,AAAS;CACT,AAAS,UAAU,IAAI,QAAQ,KAAK;;;;;;;;;;;;;;;;;;;CAoBpC,YACE,cACA,cACA;AACA,MAAI,OAAO,iBAAiB,UAAU;AACpC,QAAK,MAAM,aAAa;AACxB,QAAK,UAAU;SACV;AACL,QAAK,MAAM;AACX,QAAK,UAAU,gBAAgB,EAAE;;AAGnC,MAAI,CAAC,KAAK,IACR,MAAK,MAAM,OAAO,iBAAiB;AAGrC,OAAK,YAAY,CAAC,CAAC,KAAK;AAExB,MAAI,KAAK,QAAQ,UAAU,OACzB,MAAK,QAAQ,QAAQ;AAGvB,OAAK,WAAW,KAAK,QAAQ;AAC7B,MAAI,CAAC,KAAK,SACR,MAAK,WAAW,OAAO,mBAAmB;AAG5C,MAAI,CAAC,KAAK,aAAa,CAAC,KAAK,SAC3B,OAAM,IAAI,MACR,oMAGD;EAGH,MAAMA,WAAmB,KAAK,QAAQ,QAAQ,UAAU;EACxD,MAAMC,cAAsB,KAAK,QAAQ,eAAe;EACxD,MAAMC,OAA2B,KAAK,QAAQ;AAC9C,OAAK,UAAU,GAAG,SAAS,KAAK;AAEhC,MAAI,KACF,MAAK,UAAU,KAAK,UAAU,IAAI;AAGpC,OAAK,OAAO,IAAI,MAAM;AAEtB,OAAK,WAAW,KAAK,qBAAqB;AAC1C,OAAK,UAAU,KAAK,qBAAqB;AAGzC,OAAK,iBAAiB,IAAI,eAAe,KAAK;EAE9C,MAAM,YAAY,KAAK,gBAAgB,KAAK,QAAQ;AAEpD,OAAK,SAAS,KAAK,iBAAiB,KAAK,SAAS,UAAU;;CAG9D,AAAQ,gBAAgB,SAAgC;EACtD,IAAIC,YAAoB,eAAe;EAEvC,MAAM,EAAE,MAAM,aAAa,SAAS,mBAAmB,gBAAgB;AACvE,eAAa,KAAK,cAAc,iBAAiB,IAAI,mBAAmB,GAAG;AAE3E,MAAI,QAAQ,SAAS;GACnB,MAAM,EAAE,MAAM,YAAY,QAAQ;AAClC,gBAAa,IAAI,KAAK,IAAI;;AAG5B,SAAO;;CAGT,sBAAsB;AACpB,SAAO,IAAI,SAAS,KAAK,mBAAmB,CAAC;;CAG/C,sBAAsB;AACpB,SAAO,IAAI,QAAQ,KAAK,mBAAmB,CAAC;;CAG9C,oBAAoC;AAClC,SAAO,IAAI,sBAAsB;;CAGnC,iBAAiB,SAAwB,WAAmB;EAC1D,MAAMC,UAAkC,EACtC,cAAc,WACf;EAED,MAAM,gBAAgB,QAAQ,QAAQ;AACtC,MACE,iBACA,OAAO,kBAAkB,YACzB,CAAC,MAAM,QAAQ,cAAc,IAC7B,EAAE,yBAAyB,SAE3B,QAAO,OAAO,SAAS,cAAc;AAGvC,MAAI,KAAK,IACP,SAAQ,mBAAmB,UAAU,KAAK;AAG5C,SAAO,IAAI,gBAAgB,KAAK,SAAS;GACvC,GAAG,QAAQ;GACX,SAAS,QAAQ;GACjB;GACD,CAAC;;CAGJ,IAAI,UAAU;AACZ,SAAO;;;;;;;CAQT,cAAc,YAA0B;AACtC,MAAI,CAAC,KAAK,UACR,OAAM,IAAI,wBAAwB,WAAW;;CAIjD,MAAM,KACJ,MACA,QACA,UAAuB,EAAE,EACE;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMC,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;AAGnD,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,KAAa,MAAM,QAAQ;IACjD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AACrC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,YACV,gBAAe,wBAAwB,UAAU,QAAQ;AAG3D,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AACJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAI,MAAM;IAChC,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,QACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAY,MAAM,QAAQ;IAChD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,MACJ,MACA,QACA,UAAwB,EAAE,EACC;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,MAAc,MAAM,QAAQ;IAClD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,OAAO,MAAc,OAA4B;AACrD,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,OAAO,MAAM,EAC7B,QAAQ,OACT,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,MAAM,eACJ,MACA,QACe;AACf,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,eAAe,MAAM,QAAQ,EAAE,CAAC;WAC3C,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,YAAY,SAAiB;AAE3B,UAAQ,KAAK,WAAW,UAAU;;CAGpC,MAAc,iBACZ,OACA,KACA;AACA,MAAI,iBAAiB,aAAa;GAChC,MAAM,cAAc,IAAI,gBAAgB;GACxC,MAAM,YAAY,YAAY,QAAQ,IAAI,eAAe,IAAI;GAC7D,MAAM,YAAY,YAAY;GAC9B,MAAM,UAAU,MAAM,YAAY,MAAM;AACxC,SAAM,IAAI,WAAW;IACnB,SAAS,MAAM;IACf;IACA;IACA;IACD,CAAC;;;CAIN,AAAQ,gBAAgB,EAAE,MAAM,SAA2C;AACzE,MAAI,EAAE,iBAAiB,iBACrB,OAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,OAAO,OAAO,CAAC;EAGjE,MAAM,EAAE,aAAa;AAErB,MAAI,UAAU;GACZ,MAAM,EAAE,QAAQ,MAAM,YAAY;GAElC,MAAM,YAAY,QAAQ,mBAAmB;GAC7C,MAAM,EACJ,MACA,mBAAmB,kBACnB,gBACA,QACA,YACE;AAEJ,WAAQ,QAAR;IACE,KAAK,IACH,OAAM,IAAI,sBAAsB,UAAU;IAE5C,KAAK,IACH,OAAM,IAAI,kBAAkB;KAAE;KAAW;KAAS;KAAO,CAAC;IAE5D,KAAK,IACH,OAAM,IAAI,6BAA6B;KACrC;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,IACH,OAAM,IAAI,kBAAkB;KAC1B;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,KAAK;KACR,MAAM,aAAa,QAAQ,IAAI,cAAc;AAE7C,WAAM,IAAI,2BACR,KAAK,SACL,WACA,aAAa,OAAO,WAAW,GAAG,KACnC;;IAEH,QACE,KAAIC,WAAS,iBACX,OAAM,IAAI,eACR,QACA,WACAA,SACA,kBACA,KACD;aACQ,QAAQ,OAGjB,OAAM,IAAI,oBAAoB;KAC5B;KACA;KACA;KACA;KACD,CAAC;QAEF,OAAM,IAAI,uBACR,QACA,KAAK,SACL,MACA,UACD"}
+{"version":3,"file":"workos.js","names":["protocol: string","apiHostname: string","port: number | undefined","userAgent: string","VERSION","version","headers: Record<string, string>","requestHeaders: Record<string, string>","res: HttpClientResponseInterface","error"],"sources":["../src/workos.ts"],"sourcesContent":["import {\n  ApiKeyRequiredException,\n  GenericServerException,\n  NotFoundException,\n  UnauthorizedException,\n  UnprocessableEntityException,\n  OauthException,\n  RateLimitExceededException,\n} from './common/exceptions';\nimport { PKCE } from './pkce/pkce';\nimport {\n  GetOptions,\n  HttpClientResponseInterface,\n  PatchOptions,\n  PostOptions,\n  PutOptions,\n  WorkOSOptions,\n  WorkOSResponseError,\n} from './common/interfaces';\nimport { ApiKeys } from './api-keys/api-keys';\nimport { DirectorySync } from './directory-sync/directory-sync';\nimport { Events } from './events/events';\nimport { Organizations } from './organizations/organizations';\nimport { OrganizationDomains } from './organization-domains/organization-domains';\nimport { Passwordless } from './passwordless/passwordless';\nimport { Pipes } from './pipes/pipes';\nimport { Portal } from './portal/portal';\nimport { SSO } from './sso/sso';\nimport { Webhooks } from './webhooks/webhooks';\nimport { Mfa } from './mfa/mfa';\nimport { AuditLogs } from './audit-logs/audit-logs';\nimport { UserManagement } from './user-management/user-management';\nimport { FGA } from './fga/fga';\nimport { BadRequestException } from './common/exceptions/bad-request.exception';\nimport { FeatureFlags } from './feature-flags/feature-flags';\n\nimport { HttpClient, HttpClientError } from './common/net/http-client';\nimport { SubtleCryptoProvider } from './common/crypto/subtle-crypto-provider';\nimport { FetchHttpClient } from './common/net/fetch-client';\nimport { Widgets } from './widgets/widgets';\nimport { Actions } from './actions/actions';\nimport { Authorization } from './authorization/authorization';\nimport { Vault } from './vault/vault';\nimport { ConflictException } from './common/exceptions/conflict.exception';\nimport { CryptoProvider } from './common/crypto/crypto-provider';\nimport { ParseError } from './common/exceptions/parse-error';\nimport { getEnv } from './common/utils/env';\nimport { getRuntimeInfo } from './common/utils/runtime-info';\nimport { version as VERSION } from '../package.json' with { type: 'json' };\n\nconst DEFAULT_HOSTNAME = 'api.workos.com';\n\nconst HEADER_AUTHORIZATION = 'Authorization';\nconst HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';\nconst HEADER_WARRANT_TOKEN = 'Warrant-Token';\n\nexport class WorkOS {\n  readonly baseURL: string;\n  readonly client: HttpClient;\n  readonly clientId?: string;\n  readonly key?: string;\n  readonly options: WorkOSOptions;\n  readonly pkce: PKCE;\n\n  private readonly hasApiKey: boolean;\n\n  readonly actions: Actions;\n  readonly apiKeys = new ApiKeys(this);\n  readonly auditLogs = new AuditLogs(this);\n  readonly authorization = new Authorization(this);\n  readonly directorySync = new DirectorySync(this);\n  readonly events = new Events(this);\n  readonly featureFlags = new FeatureFlags(this);\n  readonly fga = new FGA(this);\n  readonly mfa = new Mfa(this);\n  readonly organizations = new Organizations(this);\n  readonly organizationDomains = new OrganizationDomains(this);\n  readonly passwordless = new Passwordless(this);\n  readonly pipes = new Pipes(this);\n  readonly portal = new Portal(this);\n  readonly sso = new SSO(this);\n  readonly userManagement: UserManagement;\n  readonly vault = new Vault(this);\n  readonly webhooks: Webhooks;\n  readonly widgets = new Widgets(this);\n\n  /**\n   * Create a new WorkOS client.\n   *\n   * @param keyOrOptions - API key string, or options object\n   * @param maybeOptions - Options when first argument is API key\n   *\n   * @example\n   * // Server-side with API key (string)\n   * const workos = new WorkOS('sk_...');\n   *\n   * @example\n   * // Server-side with API key (object)\n   * const workos = new WorkOS({ apiKey: 'sk_...', clientId: 'client_...' });\n   *\n   * @example\n   * // PKCE/public client (no API key)\n   * const workos = new WorkOS({ clientId: 'client_...' });\n   */\n  constructor(\n    keyOrOptions?: string | WorkOSOptions,\n    maybeOptions?: WorkOSOptions,\n  ) {\n    if (typeof keyOrOptions === 'object') {\n      this.key = keyOrOptions.apiKey;\n      this.options = keyOrOptions;\n    } else {\n      this.key = keyOrOptions;\n      this.options = maybeOptions ?? {};\n    }\n\n    if (!this.key) {\n      this.key = getEnv('WORKOS_API_KEY');\n    }\n\n    this.hasApiKey = !!this.key;\n\n    if (this.options.https === undefined) {\n      this.options.https = true;\n    }\n\n    this.clientId = this.options.clientId;\n    if (!this.clientId) {\n      this.clientId = getEnv('WORKOS_CLIENT_ID');\n    }\n\n    if (!this.hasApiKey && !this.clientId) {\n      throw new Error(\n        'WorkOS requires either an API key or a clientId. ' +\n          'For server-side: new WorkOS(\"sk_...\") or new WorkOS({ apiKey: \"sk_...\" }). ' +\n          'For PKCE/public clients: new WorkOS({ clientId: \"client_...\" })',\n      );\n    }\n\n    const protocol: string = this.options.https ? 'https' : 'http';\n    const apiHostname: string = this.options.apiHostname || DEFAULT_HOSTNAME;\n    const port: number | undefined = this.options.port;\n    this.baseURL = `${protocol}://${apiHostname}`;\n\n    if (port) {\n      this.baseURL = this.baseURL + `:${port}`;\n    }\n\n    this.pkce = new PKCE();\n\n    this.webhooks = this.createWebhookClient();\n    this.actions = this.createActionsClient();\n\n    // Must initialize UserManagement after baseURL is configured\n    this.userManagement = new UserManagement(this);\n\n    const userAgent = this.createUserAgent(this.options);\n\n    this.client = this.createHttpClient(this.options, userAgent);\n  }\n\n  private createUserAgent(options: WorkOSOptions): string {\n    let userAgent: string = `workos-node/${VERSION}`;\n\n    const { name: runtimeName, version: runtimeVersion } = getRuntimeInfo();\n    userAgent += ` (${runtimeName}${runtimeVersion ? `/${runtimeVersion}` : ''})`;\n\n    if (options.appInfo) {\n      const { name, version } = options.appInfo;\n      userAgent += ` ${name}: ${version}`;\n    }\n\n    return userAgent;\n  }\n\n  createWebhookClient() {\n    return new Webhooks(this.getCryptoProvider());\n  }\n\n  createActionsClient() {\n    return new Actions(this.getCryptoProvider());\n  }\n\n  getCryptoProvider(): CryptoProvider {\n    return new SubtleCryptoProvider();\n  }\n\n  createHttpClient(options: WorkOSOptions, userAgent: string) {\n    const headers: Record<string, string> = {\n      'User-Agent': userAgent,\n    };\n\n    const configHeaders = options.config?.headers;\n    if (\n      configHeaders &&\n      typeof configHeaders === 'object' &&\n      !Array.isArray(configHeaders) &&\n      !(configHeaders instanceof Headers)\n    ) {\n      Object.assign(headers, configHeaders);\n    }\n\n    if (this.key) {\n      headers['Authorization'] = `Bearer ${this.key}`;\n    }\n\n    return new FetchHttpClient(this.baseURL, {\n      ...options.config,\n      timeout: options.timeout,\n      headers,\n    }) as HttpClient;\n  }\n\n  get version() {\n    return VERSION;\n  }\n\n  /**\n   * Require API key for methods that need it.\n   * @param methodName - Name of the method requiring API key (for error message)\n   * @throws ApiKeyRequiredException if no API key was provided\n   */\n  requireApiKey(methodName: string): void {\n    if (!this.hasApiKey) {\n      throw new ApiKeyRequiredException(methodName);\n    }\n  }\n\n  async post<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PostOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.post<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async get<Result = any>(\n    path: string,\n    options: GetOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.accessToken) {\n      requestHeaders[HEADER_AUTHORIZATION] = `Bearer ${options.accessToken}`;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n    try {\n      res = await this.client.get(path, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async put<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PutOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.put<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async patch<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PatchOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.patch<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async delete(path: string, query?: any): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.delete(path, {\n        params: query,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  async deleteWithBody<Entity = any>(\n    path: string,\n    entity: Entity,\n  ): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.deleteWithBody(path, entity, {});\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  emitWarning(warning: string) {\n    // tslint:disable-next-line:no-console\n    console.warn(`WorkOS: ${warning}`);\n  }\n\n  private async handleParseError(\n    error: unknown,\n    res: HttpClientResponseInterface,\n  ) {\n    if (error instanceof SyntaxError) {\n      const rawResponse = res.getRawResponse() as Response;\n      const requestID = rawResponse.headers.get('X-Request-ID') ?? '';\n      const rawStatus = rawResponse.status;\n      const rawBody = await rawResponse.text();\n      throw new ParseError({\n        message: error.message,\n        rawBody,\n        rawStatus,\n        requestID,\n      });\n    }\n  }\n\n  private handleHttpError({ path, error }: { path: string; error: unknown }) {\n    if (!(error instanceof HttpClientError)) {\n      throw new Error(`Unexpected error: ${error}`, { cause: error });\n    }\n\n    const { response } = error as HttpClientError<WorkOSResponseError>;\n\n    if (response) {\n      const { status, data, headers } = response;\n\n      const requestID = headers['X-Request-ID'] ?? '';\n      const {\n        code,\n        error_description: errorDescription,\n        error,\n        errors,\n        message,\n      } = data;\n\n      switch (status) {\n        case 401: {\n          throw new UnauthorizedException(requestID);\n        }\n        case 409: {\n          throw new ConflictException({ requestID, message, error });\n        }\n        case 422: {\n          throw new UnprocessableEntityException({\n            code,\n            errors,\n            message,\n            requestID,\n          });\n        }\n        case 404: {\n          throw new NotFoundException({\n            code,\n            message,\n            path,\n            requestID,\n          });\n        }\n        case 429: {\n          const retryAfter = headers.get('Retry-After');\n\n          throw new RateLimitExceededException(\n            data.message,\n            requestID,\n            retryAfter ? Number(retryAfter) : null,\n          );\n        }\n        default: {\n          if (error || errorDescription) {\n            throw new OauthException(\n              status,\n              requestID,\n              error,\n              errorDescription,\n              data,\n            );\n          } else if (code && errors) {\n            // Note: ideally this should be mapped directly with a `400` status code.\n            // However, this would break existing logic for the `OauthException` exception.\n            throw new BadRequestException({\n              code,\n              errors,\n              message,\n              requestID,\n            });\n          } else {\n            throw new GenericServerException(\n              status,\n              data.message,\n              data,\n              requestID,\n            );\n          }\n        }\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,MAAM,mBAAmB;AAEzB,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,uBAAuB;AAE7B,IAAa,SAAb,MAAoB;CAClB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,AAAiB;CAEjB,AAAS;CACT,AAAS,UAAU,IAAI,QAAQ,KAAK;CACpC,AAAS,YAAY,IAAI,UAAU,KAAK;CACxC,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,SAAS,IAAI,OAAO,KAAK;CAClC,AAAS,eAAe,IAAI,aAAa,KAAK;CAC9C,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS,gBAAgB,IAAI,cAAc,KAAK;CAChD,AAAS,sBAAsB,IAAI,oBAAoB,KAAK;CAC5D,AAAS,eAAe,IAAI,aAAa,KAAK;CAC9C,AAAS,QAAQ,IAAI,MAAM,KAAK;CAChC,AAAS,SAAS,IAAI,OAAO,KAAK;CAClC,AAAS,MAAM,IAAI,IAAI,KAAK;CAC5B,AAAS;CACT,AAAS,QAAQ,IAAI,MAAM,KAAK;CAChC,AAAS;CACT,AAAS,UAAU,IAAI,QAAQ,KAAK;;;;;;;;;;;;;;;;;;;CAoBpC,YACE,cACA,cACA;AACA,MAAI,OAAO,iBAAiB,UAAU;AACpC,QAAK,MAAM,aAAa;AACxB,QAAK,UAAU;SACV;AACL,QAAK,MAAM;AACX,QAAK,UAAU,gBAAgB,EAAE;;AAGnC,MAAI,CAAC,KAAK,IACR,MAAK,MAAM,OAAO,iBAAiB;AAGrC,OAAK,YAAY,CAAC,CAAC,KAAK;AAExB,MAAI,KAAK,QAAQ,UAAU,OACzB,MAAK,QAAQ,QAAQ;AAGvB,OAAK,WAAW,KAAK,QAAQ;AAC7B,MAAI,CAAC,KAAK,SACR,MAAK,WAAW,OAAO,mBAAmB;AAG5C,MAAI,CAAC,KAAK,aAAa,CAAC,KAAK,SAC3B,OAAM,IAAI,MACR,oMAGD;EAGH,MAAMA,WAAmB,KAAK,QAAQ,QAAQ,UAAU;EACxD,MAAMC,cAAsB,KAAK,QAAQ,eAAe;EACxD,MAAMC,OAA2B,KAAK,QAAQ;AAC9C,OAAK,UAAU,GAAG,SAAS,KAAK;AAEhC,MAAI,KACF,MAAK,UAAU,KAAK,UAAU,IAAI;AAGpC,OAAK,OAAO,IAAI,MAAM;AAEtB,OAAK,WAAW,KAAK,qBAAqB;AAC1C,OAAK,UAAU,KAAK,qBAAqB;AAGzC,OAAK,iBAAiB,IAAI,eAAe,KAAK;EAE9C,MAAM,YAAY,KAAK,gBAAgB,KAAK,QAAQ;AAEpD,OAAK,SAAS,KAAK,iBAAiB,KAAK,SAAS,UAAU;;CAG9D,AAAQ,gBAAgB,SAAgC;EACtD,IAAIC,YAAoB,eAAeC;EAEvC,MAAM,EAAE,MAAM,aAAa,SAAS,mBAAmB,gBAAgB;AACvE,eAAa,KAAK,cAAc,iBAAiB,IAAI,mBAAmB,GAAG;AAE3E,MAAI,QAAQ,SAAS;GACnB,MAAM,EAAE,MAAM,uBAAY,QAAQ;AAClC,gBAAa,IAAI,KAAK,IAAIC;;AAG5B,SAAO;;CAGT,sBAAsB;AACpB,SAAO,IAAI,SAAS,KAAK,mBAAmB,CAAC;;CAG/C,sBAAsB;AACpB,SAAO,IAAI,QAAQ,KAAK,mBAAmB,CAAC;;CAG9C,oBAAoC;AAClC,SAAO,IAAI,sBAAsB;;CAGnC,iBAAiB,SAAwB,WAAmB;EAC1D,MAAMC,UAAkC,EACtC,cAAc,WACf;EAED,MAAM,gBAAgB,QAAQ,QAAQ;AACtC,MACE,iBACA,OAAO,kBAAkB,YACzB,CAAC,MAAM,QAAQ,cAAc,IAC7B,EAAE,yBAAyB,SAE3B,QAAO,OAAO,SAAS,cAAc;AAGvC,MAAI,KAAK,IACP,SAAQ,mBAAmB,UAAU,KAAK;AAG5C,SAAO,IAAI,gBAAgB,KAAK,SAAS;GACvC,GAAG,QAAQ;GACX,SAAS,QAAQ;GACjB;GACD,CAAC;;CAGJ,IAAI,UAAU;AACZ,SAAOF;;;;;;;CAQT,cAAc,YAA0B;AACtC,MAAI,CAAC,KAAK,UACR,OAAM,IAAI,wBAAwB,WAAW;;CAIjD,MAAM,KACJ,MACA,QACA,UAAuB,EAAE,EACE;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMG,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;AAGnD,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,KAAa,MAAM,QAAQ;IACjD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AACrC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,YACV,gBAAe,wBAAwB,UAAU,QAAQ;AAG3D,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AACJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAI,MAAM;IAChC,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,QACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAY,MAAM,QAAQ;IAChD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,MACJ,MACA,QACA,UAAwB,EAAE,EACC;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,MAAc,MAAM,QAAQ;IAClD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,OAAO,MAAc,OAA4B;AACrD,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,OAAO,MAAM,EAC7B,QAAQ,OACT,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,MAAM,eACJ,MACA,QACe;AACf,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,eAAe,MAAM,QAAQ,EAAE,CAAC;WAC3C,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,YAAY,SAAiB;AAE3B,UAAQ,KAAK,WAAW,UAAU;;CAGpC,MAAc,iBACZ,OACA,KACA;AACA,MAAI,iBAAiB,aAAa;GAChC,MAAM,cAAc,IAAI,gBAAgB;GACxC,MAAM,YAAY,YAAY,QAAQ,IAAI,eAAe,IAAI;GAC7D,MAAM,YAAY,YAAY;GAC9B,MAAM,UAAU,MAAM,YAAY,MAAM;AACxC,SAAM,IAAI,WAAW;IACnB,SAAS,MAAM;IACf;IACA;IACA;IACD,CAAC;;;CAIN,AAAQ,gBAAgB,EAAE,MAAM,SAA2C;AACzE,MAAI,EAAE,iBAAiB,iBACrB,OAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,OAAO,OAAO,CAAC;EAGjE,MAAM,EAAE,aAAa;AAErB,MAAI,UAAU;GACZ,MAAM,EAAE,QAAQ,MAAM,YAAY;GAElC,MAAM,YAAY,QAAQ,mBAAmB;GAC7C,MAAM,EACJ,MACA,mBAAmB,kBACnB,gBACA,QACA,YACE;AAEJ,WAAQ,QAAR;IACE,KAAK,IACH,OAAM,IAAI,sBAAsB,UAAU;IAE5C,KAAK,IACH,OAAM,IAAI,kBAAkB;KAAE;KAAW;KAAS;KAAO,CAAC;IAE5D,KAAK,IACH,OAAM,IAAI,6BAA6B;KACrC;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,IACH,OAAM,IAAI,kBAAkB;KAC1B;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,KAAK;KACR,MAAM,aAAa,QAAQ,IAAI,cAAc;AAE7C,WAAM,IAAI,2BACR,KAAK,SACL,WACA,aAAa,OAAO,WAAW,GAAG,KACnC;;IAEH,QACE,KAAIC,WAAS,iBACX,OAAM,IAAI,eACR,QACA,WACAA,SACA,kBACA,KACD;aACQ,QAAQ,OAGjB,OAAM,IAAI,oBAAoB;KAC5B;KACA;KACA;KACA;KACD,CAAC;QAEF,OAAM,IAAI,uBACR,QACA,KAAK,SACL,MACA,UACD"}

package/lib/{write-warrant-options.serializer-BVsqqyjn.d.cts → write-warrant-options.serializer-BQP-4p5X.d.cts}

@@ -1,7 +1,7 @@
-import { o as SerializedWriteWarrantOptions, u as WriteWarrantOptions } from "./warrant.interface-DPnDplf7.cjs";
+import { o as SerializedWriteWarrantOptions, u as WriteWarrantOptions } from "./warrant.interface-5GMD1PlN.cjs";
 
 //#region src/fga/serializers/write-warrant-options.serializer.d.ts
 declare const serializeWriteWarrantOptions: (warrant: WriteWarrantOptions) => SerializedWriteWarrantOptions;
 //#endregion
 export { serializeWriteWarrantOptions as t };
-//# sourceMappingURL=write-warrant-options.serializer-BVsqqyjn.d.cts.map
+//# sourceMappingURL=write-warrant-options.serializer-BQP-4p5X.d.cts.map

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "8.5.0",
+  "version": "8.7.0",
   "name": "@workos-inc/node",
   "author": "WorkOS",
   "description": "A Node wrapper for the WorkOS API",
@@ -62,7 +62,6 @@
     "jest-fetch-mock": "^3.0.3",
     "miniflare": "^4.20251004.0",
     "prettier": "^3.5.3",
-    "ts-jest": "29.4.4",
     "tsdown": "^0.17.0",
     "tsx": "^4.20.6",
     "typescript": "5.9.3",

package/lib/authentication-event.serializer-mddvaOjb.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"authentication-event.serializer-mddvaOjb.cjs","names":[],"sources":["../src/user-management/serializers/authentication-event.serializer.ts"],"sourcesContent":["import {\n  AuthenticationEvent,\n  AuthenticationEventResponse,\n} from '../interfaces';\n\nexport const deserializeAuthenticationEvent = (\n  authenticationEvent: AuthenticationEventResponse,\n): AuthenticationEvent => ({\n  email: authenticationEvent.email,\n  error: authenticationEvent.error,\n  ipAddress: authenticationEvent.ip_address,\n  status: authenticationEvent.status,\n  type: authenticationEvent.type,\n  userAgent: authenticationEvent.user_agent,\n  userId: authenticationEvent.user_id,\n});\n"],"mappings":";;AAKA,MAAa,kCACX,yBACyB;CACzB,OAAO,oBAAoB;CAC3B,OAAO,oBAAoB;CAC3B,WAAW,oBAAoB;CAC/B,QAAQ,oBAAoB;CAC5B,MAAM,oBAAoB;CAC1B,WAAW,oBAAoB;CAC/B,QAAQ,oBAAoB;CAC7B"}

package/lib/connection.serializer-phS0D1t9.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"connection.serializer-phS0D1t9.cjs","names":[],"sources":["../src/sso/serializers/connection.serializer.ts"],"sourcesContent":["import { Connection, ConnectionResponse } from '../interfaces';\n\nexport const deserializeConnection = (\n  connection: ConnectionResponse,\n): Connection => ({\n  object: connection.object,\n  id: connection.id,\n  organizationId: connection.organization_id,\n  name: connection.name,\n  type: connection.connection_type,\n  state: connection.state,\n  domains: connection.domains,\n  createdAt: connection.created_at,\n  updatedAt: connection.updated_at,\n});\n"],"mappings":";;AAEA,MAAa,yBACX,gBACgB;CAChB,QAAQ,WAAW;CACnB,IAAI,WAAW;CACf,gBAAgB,WAAW;CAC3B,MAAM,WAAW;CACjB,MAAM,WAAW;CACjB,OAAO,WAAW;CAClB,SAAS,WAAW;CACpB,WAAW,WAAW;CACtB,WAAW,WAAW;CACvB"}

package/lib/directory-user.serializer-UTYCZSSB.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"directory-user.serializer-UTYCZSSB.cjs","names":["deserializeDirectoryGroup"],"sources":["../src/directory-sync/serializers/directory-user.serializer.ts"],"sourcesContent":["import {\n  DefaultCustomAttributes,\n  DirectoryUser,\n  DirectoryUserResponse,\n  DirectoryUserWithGroups,\n  DirectoryUserWithGroupsResponse,\n} from '../interfaces';\nimport { deserializeDirectoryGroup } from './directory-group.serializer';\n\nexport const deserializeDirectoryUser = <\n  TCustomAttributes extends object = DefaultCustomAttributes,\n>(\n  directoryUser:\n    | DirectoryUserResponse<TCustomAttributes>\n    | DirectoryUserWithGroupsResponse<TCustomAttributes>,\n): DirectoryUser<TCustomAttributes> => ({\n  object: directoryUser.object,\n  id: directoryUser.id,\n  directoryId: directoryUser.directory_id,\n  organizationId: directoryUser.organization_id,\n  rawAttributes: directoryUser.raw_attributes,\n  customAttributes: directoryUser.custom_attributes,\n  idpId: directoryUser.idp_id,\n  firstName: directoryUser.first_name,\n  email: directoryUser.email,\n  lastName: directoryUser.last_name,\n  state: directoryUser.state,\n  role: directoryUser.role,\n  roles: directoryUser.roles,\n  createdAt: directoryUser.created_at,\n  updatedAt: directoryUser.updated_at,\n});\n\nexport const deserializeDirectoryUserWithGroups = <\n  TCustomAttributes extends object = DefaultCustomAttributes,\n>(\n  directoryUserWithGroups: DirectoryUserWithGroupsResponse<TCustomAttributes>,\n): DirectoryUserWithGroups<TCustomAttributes> => ({\n  ...deserializeDirectoryUser(directoryUserWithGroups),\n  groups: directoryUserWithGroups.groups.map(deserializeDirectoryGroup),\n});\n\nexport const deserializeUpdatedEventDirectoryUser = (\n  directoryUser: DirectoryUserResponse & Record<'previous_attributes', any>,\n): DirectoryUser & Record<'previousAttributes', any> => ({\n  object: 'directory_user',\n  id: directoryUser.id,\n  directoryId: directoryUser.directory_id,\n  organizationId: directoryUser.organization_id,\n  rawAttributes: directoryUser.raw_attributes,\n  customAttributes: directoryUser.custom_attributes,\n  idpId: directoryUser.idp_id,\n  firstName: directoryUser.first_name,\n  email: directoryUser.email,\n  lastName: directoryUser.last_name,\n  state: directoryUser.state,\n  role: directoryUser.role,\n  roles: directoryUser.roles,\n  createdAt: directoryUser.created_at,\n  updatedAt: directoryUser.updated_at,\n  previousAttributes: directoryUser.previous_attributes,\n});\n"],"mappings":";;;AASA,MAAa,4BAGX,mBAGsC;CACtC,QAAQ,cAAc;CACtB,IAAI,cAAc;CAClB,aAAa,cAAc;CAC3B,gBAAgB,cAAc;CAC9B,eAAe,cAAc;CAC7B,kBAAkB,cAAc;CAChC,OAAO,cAAc;CACrB,WAAW,cAAc;CACzB,OAAO,cAAc;CACrB,UAAU,cAAc;CACxB,OAAO,cAAc;CACrB,MAAM,cAAc;CACpB,OAAO,cAAc;CACrB,WAAW,cAAc;CACzB,WAAW,cAAc;CAC1B;AAED,MAAa,sCAGX,6BACgD;CAChD,GAAG,yBAAyB,wBAAwB;CACpD,QAAQ,wBAAwB,OAAO,IAAIA,6DAA0B;CACtE;AAED,MAAa,wCACX,mBACuD;CACvD,QAAQ;CACR,IAAI,cAAc;CAClB,aAAa,cAAc;CAC3B,gBAAgB,cAAc;CAC9B,eAAe,cAAc;CAC7B,kBAAkB,cAAc;CAChC,OAAO,cAAc;CACrB,WAAW,cAAc;CACzB,OAAO,cAAc;CACrB,UAAU,cAAc;CACxB,OAAO,cAAc;CACrB,MAAM,cAAc;CACpB,OAAO,cAAc;CACrB,WAAW,cAAc;CACzB,WAAW,cAAc;CACzB,oBAAoB,cAAc;CACnC"}

package/lib/event.serializer-sODBRJP0.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"event.serializer-sODBRJP0.cjs","names":["eventBase: EventBase","deserializeAuthenticationEvent","deserializeAuthenticationRadarRiskDetectedEvent","deserializeConnection","deserializeEventDirectory","deserializeDeletedEventDirectory","deserializeDirectoryGroup","deserializeUpdatedEventDirectoryGroup","deserializeDirectoryUser","deserializeUpdatedEventDirectoryUser","deserializeEmailVerificationEvent","deserializeInvitationEvent","deserializeMagicAuthEvent","deserializePasswordResetEvent","deserializeUser","deserializeOrganizationMembership","deserializeRoleEvent","deserializeOrganizationRoleEvent","deserializePermission","deserializeSession","deserializeOrganization","deserializeOrganizationDomain","deserializeApiKey"],"sources":["../src/common/serializers/event.serializer.ts"],"sourcesContent":["import {\n  deserializeDeletedEventDirectory,\n  deserializeDirectoryUser,\n  deserializeEventDirectory,\n  deserializeDirectoryGroup,\n  deserializeUpdatedEventDirectoryGroup,\n  deserializeUpdatedEventDirectoryUser,\n} from '../../directory-sync/serializers';\nimport { deserializeOrganization } from '../../organizations/serializers';\nimport { deserializeConnection } from '../../sso/serializers';\nimport {\n  deserializeAuthenticationEvent,\n  deserializeEmailVerificationEvent,\n  deserializeInvitationEvent,\n  deserializeMagicAuthEvent,\n  deserializePasswordResetEvent,\n  deserializeUser,\n} from '../../user-management/serializers';\nimport { deserializeOrganizationDomain } from '../../organization-domains/serializers/organization-domain.serializer';\nimport { deserializeOrganizationMembership } from '../../user-management/serializers/organization-membership.serializer';\nimport { deserializeRoleEvent } from '../../user-management/serializers/role.serializer';\nimport { deserializeSession } from '../../user-management/serializers/session.serializer';\nimport { Event, EventBase, EventResponse } from '../interfaces';\nimport { deserializeAuthenticationRadarRiskDetectedEvent } from '../../user-management/serializers/authentication-radar-risk-event-serializer';\nimport { deserializeApiKey } from '../../api-keys/serializers/api-key.serializer';\nimport { deserializeOrganizationRoleEvent } from '../../authorization/serializers/organization-role.serializer';\nimport { deserializePermission } from '../../authorization/serializers/permission.serializer';\n\nexport const deserializeEvent = (event: EventResponse): Event => {\n  const eventBase: EventBase = {\n    id: event.id,\n    createdAt: event.created_at,\n    context: event.context,\n  };\n\n  switch (event.event) {\n    case 'authentication.email_verification_succeeded':\n    case 'authentication.magic_auth_failed':\n    case 'authentication.magic_auth_succeeded':\n    case 'authentication.mfa_succeeded':\n    case 'authentication.oauth_failed':\n    case 'authentication.oauth_succeeded':\n    case 'authentication.passkey_failed':\n    case 'authentication.passkey_succeeded':\n    case 'authentication.password_failed':\n    case 'authentication.password_succeeded':\n    case 'authentication.sso_failed':\n    case 'authentication.sso_succeeded':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeAuthenticationEvent(event.data),\n      };\n    case 'authentication.radar_risk_detected':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeAuthenticationRadarRiskDetectedEvent(event.data),\n      };\n    case 'connection.activated':\n    case 'connection.deactivated':\n    case 'connection.deleted':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeConnection(event.data),\n      };\n    case 'dsync.activated':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeEventDirectory(event.data),\n      };\n    case 'dsync.deleted':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeDeletedEventDirectory(event.data),\n      };\n    case 'dsync.group.created':\n    case 'dsync.group.deleted':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeDirectoryGroup(event.data),\n      };\n    case 'dsync.group.updated':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeUpdatedEventDirectoryGroup(event.data),\n      };\n    case 'dsync.group.user_added':\n    case 'dsync.group.user_removed':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: {\n          directoryId: event.data.directory_id,\n          user: deserializeDirectoryUser(event.data.user),\n          group: deserializeDirectoryGroup(event.data.group),\n        },\n      };\n    case 'dsync.user.created':\n    case 'dsync.user.deleted':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeDirectoryUser(event.data),\n      };\n    case 'dsync.user.updated':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeUpdatedEventDirectoryUser(event.data),\n      };\n    case 'email_verification.created':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeEmailVerificationEvent(event.data),\n      };\n    case 'invitation.accepted':\n    case 'invitation.created':\n    case 'invitation.revoked':\n    case 'invitation.resent':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeInvitationEvent(event.data),\n      };\n    case 'magic_auth.created':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeMagicAuthEvent(event.data),\n      };\n    case 'password_reset.created':\n    case 'password_reset.succeeded':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializePasswordResetEvent(event.data),\n      };\n    case 'user.created':\n    case 'user.updated':\n    case 'user.deleted':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeUser(event.data),\n      };\n    case 'organization_membership.created':\n    case 'organization_membership.deleted':\n    case 'organization_membership.updated':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeOrganizationMembership(event.data),\n      };\n    case 'role.created':\n    case 'role.deleted':\n    case 'role.updated':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeRoleEvent(event.data),\n      };\n    case 'organization_role.created':\n    case 'organization_role.updated':\n    case 'organization_role.deleted':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeOrganizationRoleEvent(event.data),\n      };\n    case 'permission.created':\n    case 'permission.updated':\n    case 'permission.deleted':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializePermission(event.data),\n      };\n    case 'session.created':\n    case 'session.revoked':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeSession(event.data),\n      };\n    case 'organization.created':\n    case 'organization.updated':\n    case 'organization.deleted':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeOrganization(event.data),\n      };\n    case 'organization_domain.verified':\n    case 'organization_domain.verification_failed':\n    case 'organization_domain.created':\n    case 'organization_domain.updated':\n    case 'organization_domain.deleted':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeOrganizationDomain(event.data),\n      };\n    case 'api_key.created':\n    case 'api_key.revoked':\n      return {\n        ...eventBase,\n        event: event.event,\n        data: deserializeApiKey(event.data),\n      };\n  }\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA4BA,MAAa,oBAAoB,UAAgC;CAC/D,MAAMA,YAAuB;EAC3B,IAAI,MAAM;EACV,WAAW,MAAM;EACjB,SAAS,MAAM;EAChB;AAED,SAAQ,MAAM,OAAd;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,+BACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,uEAA+B,MAAM,KAAK;GACjD;EACH,KAAK,qCACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,mGAAgD,MAAM,KAAK;GAClE;EACH,KAAK;EACL,KAAK;EACL,KAAK,qBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,oDAAsB,MAAM,KAAK;GACxC;EACH,KAAK,kBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,uDAA0B,MAAM,KAAK;GAC5C;EACH,KAAK,gBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,8DAAiC,MAAM,KAAK;GACnD;EACH,KAAK;EACL,KAAK,sBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,6DAA0B,MAAM,KAAK;GAC5C;EACH,KAAK,sBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,yEAAsC,MAAM,KAAK;GACxD;EACH,KAAK;EACL,KAAK,2BACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAM;IACJ,aAAa,MAAM,KAAK;IACxB,MAAMC,2DAAyB,MAAM,KAAK,KAAK;IAC/C,OAAOF,6DAA0B,MAAM,KAAK,MAAM;IACnD;GACF;EACH,KAAK;EACL,KAAK,qBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAME,2DAAyB,MAAM,KAAK;GAC3C;EACH,KAAK,qBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,uEAAqC,MAAM,KAAK;GACvD;EACH,KAAK,6BACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,wEAAkC,MAAM,KAAK;GACpD;EACH,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,oBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,yDAA2B,MAAM,KAAK;GAC7C;EACH,KAAK,qBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,wDAA0B,MAAM,KAAK;GAC5C;EACH,KAAK;EACL,KAAK,2BACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,gEAA8B,MAAM,KAAK;GAChD;EACH,KAAK;EACL,KAAK;EACL,KAAK,eACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,wCAAgB,MAAM,KAAK;GAClC;EACH,KAAK;EACL,KAAK;EACL,KAAK,kCACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,6EAAkC,MAAM,KAAK;GACpD;EACH,KAAK;EACL,KAAK;EACL,KAAK,eACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,6CAAqB,MAAM,KAAK;GACvC;EACH,KAAK;EACL,KAAK;EACL,KAAK,4BACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,sEAAiC,MAAM,KAAK;GACnD;EACH,KAAK;EACL,KAAK;EACL,KAAK,qBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,oDAAsB,MAAM,KAAK;GACxC;EACH,KAAK;EACL,KAAK,kBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,8CAAmB,MAAM,KAAK;GACrC;EACH,KAAK;EACL,KAAK;EACL,KAAK,uBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,wDAAwB,MAAM,KAAK;GAC1C;EACH,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,8BACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,qEAA8B,MAAM,KAAK;GAChD;EACH,KAAK;EACL,KAAK,kBACH,QAAO;GACL,GAAG;GACH,OAAO,MAAM;GACb,MAAMC,6CAAkB,MAAM,KAAK;GACpC"}

package/lib/generate-portal-link-intent.interface-CCKgsr2O.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"generate-portal-link-intent.interface-CCKgsr2O.cjs","names":[],"sources":["../src/portal/interfaces/generate-portal-link-intent.interface.ts"],"sourcesContent":["export enum GeneratePortalLinkIntent {\n  AuditLogs = 'audit_logs',\n  DomainVerification = 'domain_verification',\n  DSync = 'dsync',\n  LogStreams = 'log_streams',\n  SSO = 'sso',\n  CertificateRenewal = 'certificate_renewal',\n}\n"],"mappings":";;AAAA,IAAY,gFAAL;AACL;AACA;AACA;AACA;AACA;AACA"}

package/lib/http-client-DZQxEd4J.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"http-client-DZQxEd4J.cjs","names":["baseURL: string","options?: RequestInit","sanitizedQueryObj: Record<string, any>"],"sources":["../src/common/net/http-client.ts"],"sourcesContent":["import {\n  HttpClientInterface,\n  HttpClientResponseInterface,\n  RequestHeaders,\n  RequestOptions,\n  ResponseHeaders,\n} from '../interfaces/http-client.interface';\n\nexport abstract class HttpClient implements HttpClientInterface {\n  readonly MAX_RETRY_ATTEMPTS = 3;\n  readonly BACKOFF_MULTIPLIER = 1.5;\n  readonly MINIMUM_SLEEP_TIME_IN_MILLISECONDS = 500;\n  readonly RETRY_STATUS_CODES = [408, 500, 502, 504];\n\n  constructor(\n    readonly baseURL: string,\n    readonly options?: RequestInit,\n  ) {}\n\n  /** The HTTP client name used for diagnostics */\n  getClientName(): string {\n    throw new Error('getClientName not implemented');\n  }\n\n  abstract get(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract post<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract put<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract patch<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract delete(\n    path: string,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  abstract deleteWithBody<Entity = any>(\n    path: string,\n    entity: Entity,\n    options: RequestOptions,\n  ): Promise<HttpClientResponseInterface>;\n\n  addClientToUserAgent(userAgent: string): string {\n    if (userAgent.indexOf(' ') > -1) {\n      return userAgent.replace(/\\b\\s/, `/${this.getClientName()} `);\n    } else {\n      return (userAgent += `/${this.getClientName()}`);\n    }\n  }\n\n  static getResourceURL(\n    baseURL: string,\n    path: string,\n    params?: Record<string, any>,\n  ) {\n    const queryString = HttpClient.getQueryString(params);\n    const url = new URL([path, queryString].filter(Boolean).join('?'), baseURL);\n    return url.toString();\n  }\n\n  static getQueryString(queryObj?: Record<string, any>) {\n    if (!queryObj) return undefined;\n\n    const sanitizedQueryObj: Record<string, any> = {};\n\n    Object.entries(queryObj).forEach(([param, value]) => {\n      if (value !== '' && value !== undefined) sanitizedQueryObj[param] = value;\n    });\n\n    return new URLSearchParams(sanitizedQueryObj).toString();\n  }\n\n  static getContentTypeHeader(entity: any): RequestHeaders | undefined {\n    if (entity instanceof URLSearchParams) {\n      return {\n        'Content-Type': 'application/x-www-form-urlencoded;charset=utf-8',\n      };\n    }\n    return undefined;\n  }\n\n  static getBody(entity: any): BodyInit | null | undefined {\n    if (entity === null || entity instanceof URLSearchParams) {\n      return entity;\n    }\n\n    return JSON.stringify(entity);\n  }\n\n  static isPathRetryable(path: string): boolean {\n    return (\n      path.startsWith('/fga/') ||\n      path.startsWith('/vault/') ||\n      path.startsWith('/audit_logs/events')\n    );\n  }\n\n  private getSleepTimeInMilliseconds(retryAttempt: number): number {\n    const sleepTime =\n      this.MINIMUM_SLEEP_TIME_IN_MILLISECONDS *\n      Math.pow(this.BACKOFF_MULTIPLIER, retryAttempt);\n    const jitter = Math.random() + 0.5;\n    return sleepTime * jitter;\n  }\n\n  sleep = (retryAttempt: number) =>\n    new Promise((resolve) =>\n      setTimeout(resolve, this.getSleepTimeInMilliseconds(retryAttempt)),\n    );\n}\n\n// tslint:disable-next-line\nexport abstract class HttpClientResponse implements HttpClientResponseInterface {\n  _statusCode: number;\n  _headers: ResponseHeaders;\n\n  constructor(statusCode: number, headers: ResponseHeaders) {\n    this._statusCode = statusCode;\n    this._headers = headers;\n  }\n\n  getStatusCode(): number {\n    return this._statusCode;\n  }\n\n  getHeaders(): ResponseHeaders {\n    return this._headers;\n  }\n\n  abstract getRawResponse(): unknown;\n\n  abstract toJSON(): any | null;\n}\n\n// tslint:disable-next-line\nexport class HttpClientError<T> extends Error {\n  readonly name: string = 'HttpClientError';\n  readonly message: string = 'The request could not be completed.';\n  readonly response: { status: number; headers: any; data: T };\n\n  constructor({\n    message,\n    response,\n  }: {\n    message: string;\n    readonly response: HttpClientError<T>['response'];\n  }) {\n    super(message);\n    this.message = message;\n    this.response = response;\n  }\n}\n"],"mappings":";;AAQA,IAAsB,aAAtB,MAAsB,WAA0C;CAC9D,AAAS,qBAAqB;CAC9B,AAAS,qBAAqB;CAC9B,AAAS,qCAAqC;CAC9C,AAAS,qBAAqB;EAAC;EAAK;EAAK;EAAK;EAAI;CAElD,YACE,AAASA,SACT,AAASC,SACT;EAFS;EACA;;;CAIX,gBAAwB;AACtB,QAAM,IAAI,MAAM,gCAAgC;;CAqClD,qBAAqB,WAA2B;AAC9C,MAAI,UAAU,QAAQ,IAAI,GAAG,GAC3B,QAAO,UAAU,QAAQ,QAAQ,IAAI,KAAK,eAAe,CAAC,GAAG;MAE7D,QAAQ,aAAa,IAAI,KAAK,eAAe;;CAIjD,OAAO,eACL,SACA,MACA,QACA;EACA,MAAM,cAAc,WAAW,eAAe,OAAO;AAErD,SADY,IAAI,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,QAAQ,CAAC,KAAK,IAAI,EAAE,QAAQ,CAChE,UAAU;;CAGvB,OAAO,eAAe,UAAgC;AACpD,MAAI,CAAC,SAAU,QAAO;EAEtB,MAAMC,oBAAyC,EAAE;AAEjD,SAAO,QAAQ,SAAS,CAAC,SAAS,CAAC,OAAO,WAAW;AACnD,OAAI,UAAU,MAAM,UAAU,OAAW,mBAAkB,SAAS;IACpE;AAEF,SAAO,IAAI,gBAAgB,kBAAkB,CAAC,UAAU;;CAG1D,OAAO,qBAAqB,QAAyC;AACnE,MAAI,kBAAkB,gBACpB,QAAO,EACL,gBAAgB,mDACjB;;CAKL,OAAO,QAAQ,QAA0C;AACvD,MAAI,WAAW,QAAQ,kBAAkB,gBACvC,QAAO;AAGT,SAAO,KAAK,UAAU,OAAO;;CAG/B,OAAO,gBAAgB,MAAuB;AAC5C,SACE,KAAK,WAAW,QAAQ,IACxB,KAAK,WAAW,UAAU,IAC1B,KAAK,WAAW,qBAAqB;;CAIzC,AAAQ,2BAA2B,cAA8B;AAK/D,SAHE,KAAK,qCACL,KAAK,IAAI,KAAK,oBAAoB,aAAa,IAClC,KAAK,QAAQ,GAAG;;CAIjC,SAAS,iBACP,IAAI,SAAS,YACX,WAAW,SAAS,KAAK,2BAA2B,aAAa,CAAC,CACnE;;AAIL,IAAsB,qBAAtB,MAAgF;CAC9E;CACA;CAEA,YAAY,YAAoB,SAA0B;AACxD,OAAK,cAAc;AACnB,OAAK,WAAW;;CAGlB,gBAAwB;AACtB,SAAO,KAAK;;CAGd,aAA8B;AAC5B,SAAO,KAAK;;;AAShB,IAAa,kBAAb,cAAwC,MAAM;CAC5C,AAAS,OAAe;CACxB,AAAS,UAAkB;CAC3B,AAAS;CAET,YAAY,EACV,SACA,YAIC;AACD,QAAM,QAAQ;AACd,OAAK,UAAU;AACf,OAAK,WAAW"}

package/lib/index-QaV06Orc.d.cts

@@ -1 +0,0 @@
-export { };

package/lib/list-feature-flags-options.interface-BDzOTdye.d.cts

@@ -1,7 +0,0 @@
-import { t as PaginationOptions } from "./pagination-options.interface--3MwpP52.cjs";
-
-//#region src/feature-flags/interfaces/list-feature-flags-options.interface.d.ts
-type ListFeatureFlagsOptions = PaginationOptions;
-//#endregion
-export { ListFeatureFlagsOptions as t };
-//# sourceMappingURL=list-feature-flags-options.interface-BDzOTdye.d.cts.map

package/lib/organization-domain.serializer-BuecMdCg.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"organization-domain.serializer-BuecMdCg.cjs","names":[],"sources":["../src/organization-domains/serializers/organization-domain.serializer.ts"],"sourcesContent":["import { OrganizationDomain, OrganizationDomainResponse } from '../interfaces';\n\nexport const deserializeOrganizationDomain = (\n  organizationDomain: OrganizationDomainResponse,\n): OrganizationDomain => ({\n  object: organizationDomain.object,\n  id: organizationDomain.id,\n  domain: organizationDomain.domain,\n  organizationId: organizationDomain.organization_id,\n  state: organizationDomain.state,\n  verificationToken: organizationDomain.verification_token,\n  verificationStrategy: organizationDomain.verification_strategy,\n  createdAt: organizationDomain.created_at,\n  updatedAt: organizationDomain.updated_at,\n});\n"],"mappings":";;AAEA,MAAa,iCACX,wBACwB;CACxB,QAAQ,mBAAmB;CAC3B,IAAI,mBAAmB;CACvB,QAAQ,mBAAmB;CAC3B,gBAAgB,mBAAmB;CACnC,OAAO,mBAAmB;CAC1B,mBAAmB,mBAAmB;CACtC,sBAAsB,mBAAmB;CACzC,WAAW,mBAAmB;CAC9B,WAAW,mBAAmB;CAC/B"}

package/lib/organization-role.serializer-DFNkyIDQ.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"organization-role.serializer-DFNkyIDQ.cjs","names":[],"sources":["../src/authorization/serializers/organization-role.serializer.ts"],"sourcesContent":["import {\n  Role,\n  OrganizationRoleResponse,\n  OrganizationRoleEvent,\n  OrganizationRoleEventResponse,\n} from '../../roles/interfaces';\nimport { OrganizationRole } from '../interfaces';\n\nexport const deserializeRole = (role: OrganizationRoleResponse): Role => ({\n  object: role.object,\n  id: role.id,\n  name: role.name,\n  slug: role.slug,\n  description: role.description,\n  permissions: role.permissions,\n  type: role.type,\n  createdAt: role.created_at,\n  updatedAt: role.updated_at,\n});\n\nexport const deserializeOrganizationRole = (\n  role: OrganizationRoleResponse,\n): OrganizationRole => ({\n  object: role.object,\n  id: role.id,\n  name: role.name,\n  slug: role.slug,\n  description: role.description,\n  permissions: role.permissions,\n  type: 'OrganizationRole',\n  createdAt: role.created_at,\n  updatedAt: role.updated_at,\n});\n\nexport const deserializeOrganizationRoleEvent = (\n  event: OrganizationRoleEventResponse,\n): OrganizationRoleEvent => ({\n  object: event.object,\n  organizationId: event.organization_id,\n  slug: event.slug,\n  name: event.name,\n  description: event.description,\n  resourceTypeSlug: event.resource_type_slug,\n  permissions: event.permissions,\n  createdAt: event.created_at,\n  updatedAt: event.updated_at,\n});\n"],"mappings":";;AAQA,MAAa,mBAAmB,UAA0C;CACxE,QAAQ,KAAK;CACb,IAAI,KAAK;CACT,MAAM,KAAK;CACX,MAAM,KAAK;CACX,aAAa,KAAK;CAClB,aAAa,KAAK;CAClB,MAAM,KAAK;CACX,WAAW,KAAK;CAChB,WAAW,KAAK;CACjB;AAED,MAAa,+BACX,UACsB;CACtB,QAAQ,KAAK;CACb,IAAI,KAAK;CACT,MAAM,KAAK;CACX,MAAM,KAAK;CACX,aAAa,KAAK;CAClB,aAAa,KAAK;CAClB,MAAM;CACN,WAAW,KAAK;CAChB,WAAW,KAAK;CACjB;AAED,MAAa,oCACX,WAC2B;CAC3B,QAAQ,MAAM;CACd,gBAAgB,MAAM;CACtB,MAAM,MAAM;CACZ,MAAM,MAAM;CACZ,aAAa,MAAM;CACnB,kBAAkB,MAAM;CACxB,aAAa,MAAM;CACnB,WAAW,MAAM;CACjB,WAAW,MAAM;CAClB"}

package/lib/permission.serializer-BehT5Z93.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission.serializer-BehT5Z93.cjs","names":[],"sources":["../src/authorization/serializers/permission.serializer.ts"],"sourcesContent":["import {\n  Permission,\n  PermissionResponse,\n} from '../interfaces/permission.interface';\n\nexport const deserializePermission = (\n  permission: PermissionResponse,\n): Permission => ({\n  object: permission.object,\n  id: permission.id,\n  slug: permission.slug,\n  name: permission.name,\n  description: permission.description,\n  system: permission.system,\n  createdAt: permission.created_at,\n  updatedAt: permission.updated_at,\n});\n"],"mappings":";;AAKA,MAAa,yBACX,gBACgB;CAChB,QAAQ,WAAW;CACnB,IAAI,WAAW;CACf,MAAM,WAAW;CACjB,MAAM,WAAW;CACjB,aAAa,WAAW;CACxB,QAAQ,WAAW;CACnB,WAAW,WAAW;CACtB,WAAW,WAAW;CACvB"}

package/lib/profile.serializer-BDlm0TRU.cjs

@@ -1,26 +0,0 @@
-
-//#region src/sso/serializers/profile.serializer.ts
-const deserializeProfile = (profile) => ({
-	id: profile.id,
-	idpId: profile.idp_id,
-	organizationId: profile.organization_id,
-	connectionId: profile.connection_id,
-	connectionType: profile.connection_type,
-	email: profile.email,
-	firstName: profile.first_name,
-	lastName: profile.last_name,
-	role: profile.role,
-	roles: profile.roles,
-	groups: profile.groups,
-	customAttributes: profile.custom_attributes,
-	rawAttributes: profile.raw_attributes
-});
-
-//#endregion
-Object.defineProperty(exports, 'deserializeProfile', {
-  enumerable: true,
-  get: function () {
-    return deserializeProfile;
-  }
-});
-//# sourceMappingURL=profile.serializer-BDlm0TRU.cjs.map

package/lib/profile.serializer-BDlm0TRU.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile.serializer-BDlm0TRU.cjs","names":[],"sources":["../src/sso/serializers/profile.serializer.ts"],"sourcesContent":["import { UnknownRecord } from '../../common/interfaces/unknown-record.interface';\nimport { Profile, ProfileResponse } from '../interfaces';\n\nexport const deserializeProfile = <CustomAttributesType extends UnknownRecord>(\n  profile: ProfileResponse<CustomAttributesType>,\n): Profile<CustomAttributesType> => ({\n  id: profile.id,\n  idpId: profile.idp_id,\n  organizationId: profile.organization_id,\n  connectionId: profile.connection_id,\n  connectionType: profile.connection_type,\n  email: profile.email,\n  firstName: profile.first_name,\n  lastName: profile.last_name,\n  role: profile.role,\n  roles: profile.roles,\n  groups: profile.groups,\n  customAttributes: profile.custom_attributes,\n  rawAttributes: profile.raw_attributes,\n});\n"],"mappings":";;AAGA,MAAa,sBACX,aACmC;CACnC,IAAI,QAAQ;CACZ,OAAO,QAAQ;CACf,gBAAgB,QAAQ;CACxB,cAAc,QAAQ;CACtB,gBAAgB,QAAQ;CACxB,OAAO,QAAQ;CACf,WAAW,QAAQ;CACnB,UAAU,QAAQ;CAClB,MAAM,QAAQ;CACd,OAAO,QAAQ;CACf,QAAQ,QAAQ;CAChB,kBAAkB,QAAQ;CAC1B,eAAe,QAAQ;CACxB"}

package/lib/session.serializer-Dmj9Hm3q.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.serializer-Dmj9Hm3q.cjs","names":[],"sources":["../src/user-management/serializers/session.serializer.ts"],"sourcesContent":["import { Session, SessionResponse } from '../interfaces';\n\nexport const deserializeSession = (session: SessionResponse): Session => ({\n  object: 'session',\n  id: session.id,\n  userId: session.user_id,\n  ipAddress: session.ip_address,\n  userAgent: session.user_agent,\n  organizationId: session.organization_id,\n  impersonator: session.impersonator,\n  authMethod: session.auth_method,\n  status: session.status,\n  expiresAt: session.expires_at,\n  endedAt: session.ended_at,\n  createdAt: session.created_at,\n  updatedAt: session.updated_at,\n});\n"],"mappings":";;AAEA,MAAa,sBAAsB,aAAuC;CACxE,QAAQ;CACR,IAAI,QAAQ;CACZ,QAAQ,QAAQ;CAChB,WAAW,QAAQ;CACnB,WAAW,QAAQ;CACnB,gBAAgB,QAAQ;CACxB,cAAc,QAAQ;CACtB,YAAY,QAAQ;CACpB,QAAQ,QAAQ;CAChB,WAAW,QAAQ;CACnB,SAAS,QAAQ;CACjB,WAAW,QAAQ;CACnB,WAAW,QAAQ;CACpB"}

package/lib/vault-object.serializer-CwmJwCnO.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"vault-object.serializer-CwmJwCnO.cjs","names":[],"sources":["../src/vault/serializers/vault-object.serializer.ts"],"sourcesContent":["import { List, ListResponse } from '../../common/interfaces';\nimport {\n  ReadObjectMetadataResponse,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  UpdateObjectEntity,\n  ObjectMetadata,\n  VaultObject,\n  ObjectVersionResponse,\n  ObjectVersion,\n  CreateObjectOptions,\n  CreateObjectEntity,\n  ObjectDigestResponse,\n  ObjectDigest,\n  ListObjectVersionsResponse,\n} from '../interfaces';\n\nexport const deserializeObjectMetadata = (\n  metadata: ReadObjectMetadataResponse,\n): ObjectMetadata => ({\n  context: metadata.context,\n  environmentId: metadata.environment_id,\n  id: metadata.id,\n  keyId: metadata.key_id,\n  updatedAt: new Date(Date.parse(metadata.updated_at)),\n  updatedBy: metadata.updated_by,\n  versionId: metadata.version_id,\n});\n\nexport const deserializeObject = (object: ReadObjectResponse): VaultObject => ({\n  id: object.id,\n  name: object.name,\n  value: object.value,\n  metadata: deserializeObjectMetadata(object.metadata),\n});\n\nconst deserializeObjectDigest = (\n  digest: ObjectDigestResponse,\n): ObjectDigest => ({\n  id: digest.id,\n  name: digest.name,\n  updatedAt: new Date(Date.parse(digest.updated_at)),\n});\n\nexport const deserializeListObjects = (\n  list: ListResponse<ObjectDigestResponse>,\n): List<ObjectDigest> => ({\n  object: 'list',\n  data: list.data.map(deserializeObjectDigest),\n  listMetadata: {\n    after: list.list_metadata.after ?? undefined,\n    before: list.list_metadata.before ?? undefined,\n  },\n});\n\nexport const desrializeListObjectVersions = (\n  list: ListObjectVersionsResponse,\n): ObjectVersion[] => list.data.map(deserializeObjectVersion);\n\nconst deserializeObjectVersion = (\n  version: ObjectVersionResponse,\n): ObjectVersion => ({\n  createdAt: new Date(Date.parse(version.created_at)),\n  currentVersion: version.current_version,\n  id: version.id,\n});\n\nexport const serializeCreateObjectEntity = (\n  options: CreateObjectOptions,\n): CreateObjectEntity => ({\n  name: options.name,\n  value: options.value,\n  key_context: options.context,\n});\n\nexport const serializeUpdateObjectEntity = (\n  options: UpdateObjectOptions,\n): UpdateObjectEntity => ({\n  value: options.value,\n  version_check: options.versionCheck,\n});\n"],"mappings":";;AAiBA,MAAa,6BACX,cACoB;CACpB,SAAS,SAAS;CAClB,eAAe,SAAS;CACxB,IAAI,SAAS;CACb,OAAO,SAAS;CAChB,WAAW,IAAI,KAAK,KAAK,MAAM,SAAS,WAAW,CAAC;CACpD,WAAW,SAAS;CACpB,WAAW,SAAS;CACrB;AAED,MAAa,qBAAqB,YAA6C;CAC7E,IAAI,OAAO;CACX,MAAM,OAAO;CACb,OAAO,OAAO;CACd,UAAU,0BAA0B,OAAO,SAAS;CACrD;AAED,MAAM,2BACJ,YACkB;CAClB,IAAI,OAAO;CACX,MAAM,OAAO;CACb,WAAW,IAAI,KAAK,KAAK,MAAM,OAAO,WAAW,CAAC;CACnD;AAED,MAAa,0BACX,UACwB;CACxB,QAAQ;CACR,MAAM,KAAK,KAAK,IAAI,wBAAwB;CAC5C,cAAc;EACZ,OAAO,KAAK,cAAc,SAAS;EACnC,QAAQ,KAAK,cAAc,UAAU;EACtC;CACF;AAED,MAAa,gCACX,SACoB,KAAK,KAAK,IAAI,yBAAyB;AAE7D,MAAM,4BACJ,aACmB;CACnB,WAAW,IAAI,KAAK,KAAK,MAAM,QAAQ,WAAW,CAAC;CACnD,gBAAgB,QAAQ;CACxB,IAAI,QAAQ;CACb;AAED,MAAa,+BACX,aACwB;CACxB,MAAM,QAAQ;CACd,OAAO,QAAQ;CACf,aAAa,QAAQ;CACtB;AAED,MAAa,+BACX,aACwB;CACxB,OAAO,QAAQ;CACf,eAAe,QAAQ;CACxB"}

package/lib/workos-y5BVhQQQ.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"workos-y5BVhQQQ.cjs","names":["ApiKeys","AuditLogs","Authorization","DirectorySync","Events","FeatureFlags","FGA","Mfa","Organizations","OrganizationDomains","Passwordless","Pipes","Portal","SSO","Vault","Widgets","getEnv","protocol: string","apiHostname: string","port: number | undefined","PKCE","UserManagement","userAgent: string","getRuntimeInfo","Webhooks","Actions","SubtleCryptoProvider","headers: Record<string, string>","FetchHttpClient","ApiKeyRequiredException","requestHeaders: Record<string, string>","res: HttpClientResponseInterface","ParseError","HttpClientError","UnauthorizedException","ConflictException","UnprocessableEntityException","NotFoundException","RateLimitExceededException","error","OauthException","BadRequestException","GenericServerException"],"sources":["../src/workos.ts"],"sourcesContent":["import {\n  ApiKeyRequiredException,\n  GenericServerException,\n  NotFoundException,\n  UnauthorizedException,\n  UnprocessableEntityException,\n  OauthException,\n  RateLimitExceededException,\n} from './common/exceptions';\nimport { PKCE } from './pkce/pkce';\nimport {\n  GetOptions,\n  HttpClientResponseInterface,\n  PatchOptions,\n  PostOptions,\n  PutOptions,\n  WorkOSOptions,\n  WorkOSResponseError,\n} from './common/interfaces';\nimport { ApiKeys } from './api-keys/api-keys';\nimport { DirectorySync } from './directory-sync/directory-sync';\nimport { Events } from './events/events';\nimport { Organizations } from './organizations/organizations';\nimport { OrganizationDomains } from './organization-domains/organization-domains';\nimport { Passwordless } from './passwordless/passwordless';\nimport { Pipes } from './pipes/pipes';\nimport { Portal } from './portal/portal';\nimport { SSO } from './sso/sso';\nimport { Webhooks } from './webhooks/webhooks';\nimport { Mfa } from './mfa/mfa';\nimport { AuditLogs } from './audit-logs/audit-logs';\nimport { UserManagement } from './user-management/user-management';\nimport { FGA } from './fga/fga';\nimport { BadRequestException } from './common/exceptions/bad-request.exception';\nimport { FeatureFlags } from './feature-flags/feature-flags';\n\nimport { HttpClient, HttpClientError } from './common/net/http-client';\nimport { SubtleCryptoProvider } from './common/crypto/subtle-crypto-provider';\nimport { FetchHttpClient } from './common/net/fetch-client';\nimport { Widgets } from './widgets/widgets';\nimport { Actions } from './actions/actions';\nimport { Authorization } from './authorization/authorization';\nimport { Vault } from './vault/vault';\nimport { ConflictException } from './common/exceptions/conflict.exception';\nimport { CryptoProvider } from './common/crypto/crypto-provider';\nimport { ParseError } from './common/exceptions/parse-error';\nimport { getEnv } from './common/utils/env';\nimport { getRuntimeInfo } from './common/utils/runtime-info';\n\nconst VERSION = '8.5.0';\n\nconst DEFAULT_HOSTNAME = 'api.workos.com';\n\nconst HEADER_AUTHORIZATION = 'Authorization';\nconst HEADER_IDEMPOTENCY_KEY = 'Idempotency-Key';\nconst HEADER_WARRANT_TOKEN = 'Warrant-Token';\n\nexport class WorkOS {\n  readonly baseURL: string;\n  readonly client: HttpClient;\n  readonly clientId?: string;\n  readonly key?: string;\n  readonly options: WorkOSOptions;\n  readonly pkce: PKCE;\n\n  private readonly hasApiKey: boolean;\n\n  readonly actions: Actions;\n  readonly apiKeys = new ApiKeys(this);\n  readonly auditLogs = new AuditLogs(this);\n  readonly authorization = new Authorization(this);\n  readonly directorySync = new DirectorySync(this);\n  readonly events = new Events(this);\n  readonly featureFlags = new FeatureFlags(this);\n  readonly fga = new FGA(this);\n  readonly mfa = new Mfa(this);\n  readonly organizations = new Organizations(this);\n  readonly organizationDomains = new OrganizationDomains(this);\n  readonly passwordless = new Passwordless(this);\n  readonly pipes = new Pipes(this);\n  readonly portal = new Portal(this);\n  readonly sso = new SSO(this);\n  readonly userManagement: UserManagement;\n  readonly vault = new Vault(this);\n  readonly webhooks: Webhooks;\n  readonly widgets = new Widgets(this);\n\n  /**\n   * Create a new WorkOS client.\n   *\n   * @param keyOrOptions - API key string, or options object\n   * @param maybeOptions - Options when first argument is API key\n   *\n   * @example\n   * // Server-side with API key (string)\n   * const workos = new WorkOS('sk_...');\n   *\n   * @example\n   * // Server-side with API key (object)\n   * const workos = new WorkOS({ apiKey: 'sk_...', clientId: 'client_...' });\n   *\n   * @example\n   * // PKCE/public client (no API key)\n   * const workos = new WorkOS({ clientId: 'client_...' });\n   */\n  constructor(\n    keyOrOptions?: string | WorkOSOptions,\n    maybeOptions?: WorkOSOptions,\n  ) {\n    if (typeof keyOrOptions === 'object') {\n      this.key = keyOrOptions.apiKey;\n      this.options = keyOrOptions;\n    } else {\n      this.key = keyOrOptions;\n      this.options = maybeOptions ?? {};\n    }\n\n    if (!this.key) {\n      this.key = getEnv('WORKOS_API_KEY');\n    }\n\n    this.hasApiKey = !!this.key;\n\n    if (this.options.https === undefined) {\n      this.options.https = true;\n    }\n\n    this.clientId = this.options.clientId;\n    if (!this.clientId) {\n      this.clientId = getEnv('WORKOS_CLIENT_ID');\n    }\n\n    if (!this.hasApiKey && !this.clientId) {\n      throw new Error(\n        'WorkOS requires either an API key or a clientId. ' +\n          'For server-side: new WorkOS(\"sk_...\") or new WorkOS({ apiKey: \"sk_...\" }). ' +\n          'For PKCE/public clients: new WorkOS({ clientId: \"client_...\" })',\n      );\n    }\n\n    const protocol: string = this.options.https ? 'https' : 'http';\n    const apiHostname: string = this.options.apiHostname || DEFAULT_HOSTNAME;\n    const port: number | undefined = this.options.port;\n    this.baseURL = `${protocol}://${apiHostname}`;\n\n    if (port) {\n      this.baseURL = this.baseURL + `:${port}`;\n    }\n\n    this.pkce = new PKCE();\n\n    this.webhooks = this.createWebhookClient();\n    this.actions = this.createActionsClient();\n\n    // Must initialize UserManagement after baseURL is configured\n    this.userManagement = new UserManagement(this);\n\n    const userAgent = this.createUserAgent(this.options);\n\n    this.client = this.createHttpClient(this.options, userAgent);\n  }\n\n  private createUserAgent(options: WorkOSOptions): string {\n    let userAgent: string = `workos-node/${VERSION}`;\n\n    const { name: runtimeName, version: runtimeVersion } = getRuntimeInfo();\n    userAgent += ` (${runtimeName}${runtimeVersion ? `/${runtimeVersion}` : ''})`;\n\n    if (options.appInfo) {\n      const { name, version } = options.appInfo;\n      userAgent += ` ${name}: ${version}`;\n    }\n\n    return userAgent;\n  }\n\n  createWebhookClient() {\n    return new Webhooks(this.getCryptoProvider());\n  }\n\n  createActionsClient() {\n    return new Actions(this.getCryptoProvider());\n  }\n\n  getCryptoProvider(): CryptoProvider {\n    return new SubtleCryptoProvider();\n  }\n\n  createHttpClient(options: WorkOSOptions, userAgent: string) {\n    const headers: Record<string, string> = {\n      'User-Agent': userAgent,\n    };\n\n    const configHeaders = options.config?.headers;\n    if (\n      configHeaders &&\n      typeof configHeaders === 'object' &&\n      !Array.isArray(configHeaders) &&\n      !(configHeaders instanceof Headers)\n    ) {\n      Object.assign(headers, configHeaders);\n    }\n\n    if (this.key) {\n      headers['Authorization'] = `Bearer ${this.key}`;\n    }\n\n    return new FetchHttpClient(this.baseURL, {\n      ...options.config,\n      timeout: options.timeout,\n      headers,\n    }) as HttpClient;\n  }\n\n  get version() {\n    return VERSION;\n  }\n\n  /**\n   * Require API key for methods that need it.\n   * @param methodName - Name of the method requiring API key (for error message)\n   * @throws ApiKeyRequiredException if no API key was provided\n   */\n  requireApiKey(methodName: string): void {\n    if (!this.hasApiKey) {\n      throw new ApiKeyRequiredException(methodName);\n    }\n  }\n\n  async post<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PostOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.post<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async get<Result = any>(\n    path: string,\n    options: GetOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.accessToken) {\n      requestHeaders[HEADER_AUTHORIZATION] = `Bearer ${options.accessToken}`;\n    }\n\n    if (options.warrantToken) {\n      requestHeaders[HEADER_WARRANT_TOKEN] = options.warrantToken;\n    }\n\n    let res: HttpClientResponseInterface;\n    try {\n      res = await this.client.get(path, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async put<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PutOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.put<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async patch<Result = any, Entity = any>(\n    path: string,\n    entity: Entity,\n    options: PatchOptions = {},\n  ): Promise<{ data: Result }> {\n    if (!options.skipApiKeyCheck) {\n      this.requireApiKey(path);\n    }\n\n    const requestHeaders: Record<string, string> = {};\n\n    if (options.idempotencyKey) {\n      requestHeaders[HEADER_IDEMPOTENCY_KEY] = options.idempotencyKey;\n    }\n\n    let res: HttpClientResponseInterface;\n\n    try {\n      res = await this.client.patch<Entity>(path, entity, {\n        params: options.query,\n        headers: requestHeaders,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n\n    try {\n      return { data: await res.toJSON() };\n    } catch (error) {\n      await this.handleParseError(error, res);\n      throw error;\n    }\n  }\n\n  async delete(path: string, query?: any): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.delete(path, {\n        params: query,\n      });\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  async deleteWithBody<Entity = any>(\n    path: string,\n    entity: Entity,\n  ): Promise<void> {\n    this.requireApiKey(path);\n\n    try {\n      await this.client.deleteWithBody(path, entity, {});\n    } catch (error) {\n      this.handleHttpError({ path, error });\n\n      throw error;\n    }\n  }\n\n  emitWarning(warning: string) {\n    // tslint:disable-next-line:no-console\n    console.warn(`WorkOS: ${warning}`);\n  }\n\n  private async handleParseError(\n    error: unknown,\n    res: HttpClientResponseInterface,\n  ) {\n    if (error instanceof SyntaxError) {\n      const rawResponse = res.getRawResponse() as Response;\n      const requestID = rawResponse.headers.get('X-Request-ID') ?? '';\n      const rawStatus = rawResponse.status;\n      const rawBody = await rawResponse.text();\n      throw new ParseError({\n        message: error.message,\n        rawBody,\n        rawStatus,\n        requestID,\n      });\n    }\n  }\n\n  private handleHttpError({ path, error }: { path: string; error: unknown }) {\n    if (!(error instanceof HttpClientError)) {\n      throw new Error(`Unexpected error: ${error}`, { cause: error });\n    }\n\n    const { response } = error as HttpClientError<WorkOSResponseError>;\n\n    if (response) {\n      const { status, data, headers } = response;\n\n      const requestID = headers['X-Request-ID'] ?? '';\n      const {\n        code,\n        error_description: errorDescription,\n        error,\n        errors,\n        message,\n      } = data;\n\n      switch (status) {\n        case 401: {\n          throw new UnauthorizedException(requestID);\n        }\n        case 409: {\n          throw new ConflictException({ requestID, message, error });\n        }\n        case 422: {\n          throw new UnprocessableEntityException({\n            code,\n            errors,\n            message,\n            requestID,\n          });\n        }\n        case 404: {\n          throw new NotFoundException({\n            code,\n            message,\n            path,\n            requestID,\n          });\n        }\n        case 429: {\n          const retryAfter = headers.get('Retry-After');\n\n          throw new RateLimitExceededException(\n            data.message,\n            requestID,\n            retryAfter ? Number(retryAfter) : null,\n          );\n        }\n        default: {\n          if (error || errorDescription) {\n            throw new OauthException(\n              status,\n              requestID,\n              error,\n              errorDescription,\n              data,\n            );\n          } else if (code && errors) {\n            // Note: ideally this should be mapped directly with a `400` status code.\n            // However, this would break existing logic for the `OauthException` exception.\n            throw new BadRequestException({\n              code,\n              errors,\n              message,\n              requestID,\n            });\n          } else {\n            throw new GenericServerException(\n              status,\n              data.message,\n              data,\n              requestID,\n            );\n          }\n        }\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,MAAM,UAAU;AAEhB,MAAM,mBAAmB;AAEzB,MAAM,uBAAuB;AAC7B,MAAM,yBAAyB;AAC/B,MAAM,uBAAuB;AAE7B,IAAa,SAAb,MAAoB;CAClB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,AAAiB;CAEjB,AAAS;CACT,AAAS,UAAU,IAAIA,yBAAQ,KAAK;CACpC,AAAS,YAAY,IAAIC,6BAAU,KAAK;CACxC,AAAS,gBAAgB,IAAIC,oCAAc,KAAK;CAChD,AAAS,gBAAgB,IAAIC,qCAAc,KAAK;CAChD,AAAS,SAAS,IAAIC,sBAAO,KAAK;CAClC,AAAS,eAAe,IAAIC,mCAAa,KAAK;CAC9C,AAAS,MAAM,IAAIC,gBAAI,KAAK;CAC5B,AAAS,MAAM,IAAIC,gBAAI,KAAK;CAC5B,AAAS,gBAAgB,IAAIC,oCAAc,KAAK;CAChD,AAAS,sBAAsB,IAAIC,iDAAoB,KAAK;CAC5D,AAAS,eAAe,IAAIC,kCAAa,KAAK;CAC9C,AAAS,QAAQ,IAAIC,oBAAM,KAAK;CAChC,AAAS,SAAS,IAAIC,sBAAO,KAAK;CAClC,AAAS,MAAM,IAAIC,gBAAI,KAAK;CAC5B,AAAS;CACT,AAAS,QAAQ,IAAIC,oBAAM,KAAK;CAChC,AAAS;CACT,AAAS,UAAU,IAAIC,wBAAQ,KAAK;;;;;;;;;;;;;;;;;;;CAoBpC,YACE,cACA,cACA;AACA,MAAI,OAAO,iBAAiB,UAAU;AACpC,QAAK,MAAM,aAAa;AACxB,QAAK,UAAU;SACV;AACL,QAAK,MAAM;AACX,QAAK,UAAU,gBAAgB,EAAE;;AAGnC,MAAI,CAAC,KAAK,IACR,MAAK,MAAMC,mBAAO,iBAAiB;AAGrC,OAAK,YAAY,CAAC,CAAC,KAAK;AAExB,MAAI,KAAK,QAAQ,UAAU,OACzB,MAAK,QAAQ,QAAQ;AAGvB,OAAK,WAAW,KAAK,QAAQ;AAC7B,MAAI,CAAC,KAAK,SACR,MAAK,WAAWA,mBAAO,mBAAmB;AAG5C,MAAI,CAAC,KAAK,aAAa,CAAC,KAAK,SAC3B,OAAM,IAAI,MACR,oMAGD;EAGH,MAAMC,WAAmB,KAAK,QAAQ,QAAQ,UAAU;EACxD,MAAMC,cAAsB,KAAK,QAAQ,eAAe;EACxD,MAAMC,OAA2B,KAAK,QAAQ;AAC9C,OAAK,UAAU,GAAG,SAAS,KAAK;AAEhC,MAAI,KACF,MAAK,UAAU,KAAK,UAAU,IAAI;AAGpC,OAAK,OAAO,IAAIC,mBAAM;AAEtB,OAAK,WAAW,KAAK,qBAAqB;AAC1C,OAAK,UAAU,KAAK,qBAAqB;AAGzC,OAAK,iBAAiB,IAAIC,uCAAe,KAAK;EAE9C,MAAM,YAAY,KAAK,gBAAgB,KAAK,QAAQ;AAEpD,OAAK,SAAS,KAAK,iBAAiB,KAAK,SAAS,UAAU;;CAG9D,AAAQ,gBAAgB,SAAgC;EACtD,IAAIC,YAAoB,eAAe;EAEvC,MAAM,EAAE,MAAM,aAAa,SAAS,mBAAmBC,qCAAgB;AACvE,eAAa,KAAK,cAAc,iBAAiB,IAAI,mBAAmB,GAAG;AAE3E,MAAI,QAAQ,SAAS;GACnB,MAAM,EAAE,MAAM,YAAY,QAAQ;AAClC,gBAAa,IAAI,KAAK,IAAI;;AAG5B,SAAO;;CAGT,sBAAsB;AACpB,SAAO,IAAIC,0BAAS,KAAK,mBAAmB,CAAC;;CAG/C,sBAAsB;AACpB,SAAO,IAAIC,wBAAQ,KAAK,mBAAmB,CAAC;;CAG9C,oBAAoC;AAClC,SAAO,IAAIC,qDAAsB;;CAGnC,iBAAiB,SAAwB,WAAmB;EAC1D,MAAMC,UAAkC,EACtC,cAAc,WACf;EAED,MAAM,gBAAgB,QAAQ,QAAQ;AACtC,MACE,iBACA,OAAO,kBAAkB,YACzB,CAAC,MAAM,QAAQ,cAAc,IAC7B,EAAE,yBAAyB,SAE3B,QAAO,OAAO,SAAS,cAAc;AAGvC,MAAI,KAAK,IACP,SAAQ,mBAAmB,UAAU,KAAK;AAG5C,SAAO,IAAIC,qCAAgB,KAAK,SAAS;GACvC,GAAG,QAAQ;GACX,SAAS,QAAQ;GACjB;GACD,CAAC;;CAGJ,IAAI,UAAU;AACZ,SAAO;;;;;;;CAQT,cAAc,YAA0B;AACtC,MAAI,CAAC,KAAK,UACR,OAAM,IAAIC,2DAAwB,WAAW;;CAIjD,MAAM,KACJ,MACA,QACA,UAAuB,EAAE,EACE;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMC,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;AAGnD,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,KAAa,MAAM,QAAQ;IACjD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AACrC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,YACV,gBAAe,wBAAwB,UAAU,QAAQ;AAG3D,MAAI,QAAQ,aACV,gBAAe,wBAAwB,QAAQ;EAGjD,IAAIC;AACJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAI,MAAM;IAChC,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,IACJ,MACA,QACA,UAAsB,EAAE,EACG;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,IAAY,MAAM,QAAQ;IAChD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,MACJ,MACA,QACA,UAAwB,EAAE,EACC;AAC3B,MAAI,CAAC,QAAQ,gBACX,MAAK,cAAc,KAAK;EAG1B,MAAMD,iBAAyC,EAAE;AAEjD,MAAI,QAAQ,eACV,gBAAe,0BAA0B,QAAQ;EAGnD,IAAIC;AAEJ,MAAI;AACF,SAAM,MAAM,KAAK,OAAO,MAAc,MAAM,QAAQ;IAClD,QAAQ,QAAQ;IAChB,SAAS;IACV,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;AAGR,MAAI;AACF,UAAO,EAAE,MAAM,MAAM,IAAI,QAAQ,EAAE;WAC5B,OAAO;AACd,SAAM,KAAK,iBAAiB,OAAO,IAAI;AACvC,SAAM;;;CAIV,MAAM,OAAO,MAAc,OAA4B;AACrD,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,OAAO,MAAM,EAC7B,QAAQ,OACT,CAAC;WACK,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,MAAM,eACJ,MACA,QACe;AACf,OAAK,cAAc,KAAK;AAExB,MAAI;AACF,SAAM,KAAK,OAAO,eAAe,MAAM,QAAQ,EAAE,CAAC;WAC3C,OAAO;AACd,QAAK,gBAAgB;IAAE;IAAM;IAAO,CAAC;AAErC,SAAM;;;CAIV,YAAY,SAAiB;AAE3B,UAAQ,KAAK,WAAW,UAAU;;CAGpC,MAAc,iBACZ,OACA,KACA;AACA,MAAI,iBAAiB,aAAa;GAChC,MAAM,cAAc,IAAI,gBAAgB;GACxC,MAAM,YAAY,YAAY,QAAQ,IAAI,eAAe,IAAI;GAC7D,MAAM,YAAY,YAAY;GAC9B,MAAM,UAAU,MAAM,YAAY,MAAM;AACxC,SAAM,IAAIC,+BAAW;IACnB,SAAS,MAAM;IACf;IACA;IACA;IACD,CAAC;;;CAIN,AAAQ,gBAAgB,EAAE,MAAM,SAA2C;AACzE,MAAI,EAAE,iBAAiBC,qCACrB,OAAM,IAAI,MAAM,qBAAqB,SAAS,EAAE,OAAO,OAAO,CAAC;EAGjE,MAAM,EAAE,aAAa;AAErB,MAAI,UAAU;GACZ,MAAM,EAAE,QAAQ,MAAM,YAAY;GAElC,MAAM,YAAY,QAAQ,mBAAmB;GAC7C,MAAM,EACJ,MACA,mBAAmB,kBACnB,gBACA,QACA,YACE;AAEJ,WAAQ,QAAR;IACE,KAAK,IACH,OAAM,IAAIC,qDAAsB,UAAU;IAE5C,KAAK,IACH,OAAM,IAAIC,6CAAkB;KAAE;KAAW;KAAS;KAAO,CAAC;IAE5D,KAAK,IACH,OAAM,IAAIC,oEAA6B;KACrC;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,IACH,OAAM,IAAIC,8CAAkB;KAC1B;KACA;KACA;KACA;KACD,CAAC;IAEJ,KAAK,KAAK;KACR,MAAM,aAAa,QAAQ,IAAI,cAAc;AAE7C,WAAM,IAAIC,iEACR,KAAK,SACL,WACA,aAAa,OAAO,WAAW,GAAG,KACnC;;IAEH,QACE,KAAIC,WAAS,iBACX,OAAM,IAAIC,uCACR,QACA,WACAD,SACA,kBACA,KACD;aACQ,QAAQ,OAGjB,OAAM,IAAIE,kDAAoB;KAC5B;KACA;KACA;KACA;KACD,CAAC;QAEF,OAAM,IAAIC,wDACR,QACA,KAAK,SACL,MACA,UACD"}