@ya-accelerators/nextjs-framework 0.0.82 → 0.0.84

package/@types/next-auth.d.ts

@@ -8,7 +8,6 @@ declare module 'next-auth' {
     headers?: Record<string, string>
   }
   interface Session extends DefaultSession {
-    accessToken?: string
     scope?: string
     error?: string
   }

package/dist/hooks/dispatch/index.jsx

@@ -15,10 +15,14 @@ export const DispatchProvider = ({ children }) => {
         if (requestShowLoading !== false) {
             showLoading();
         }
-        const ret = await promise;
-        router.refresh();
-        dismissLoading();
-        return ret;
+        try {
+            const ret = await promise;
+            router.refresh();
+            return ret;
+        }
+        finally {
+            dismissLoading();
+        }
     };
     return <DispatchContext.Provider value={{ dispatch }}>{children}</DispatchContext.Provider>;
 };

package/dist/hooks/dispatch/index.jsx.map

@@ -1 +1 @@
-{"version":3,"file":"index.jsx","sourceRoot":"","sources":["../../../../src/hooks/dispatch/index.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAEjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAK9C,MAAM,eAAe,GAAG,aAAa,CAAmB;IACtD,QAAQ,CAAI,OAAmB;QAC7B,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAA;AAEnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAAE,QAAQ,EAA2B,EAAE,EAAE;IACxE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,CAAA;IAC3D,MAAM,QAAQ,GAAG,KAAK,WAAc,OAAmB,EAAE,kBAA4B;QACnF,IAAI,kBAAkB,KAAK,KAAK,EAAE,CAAC;YACjC,WAAW,EAAE,CAAA;QACf,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAA;QACzB,MAAM,CAAC,OAAO,EAAE,CAAA;QAChB,cAAc,EAAE,CAAA;QAChB,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;IACD,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAA;AAC7F,CAAC,CAAA"}
+{"version":3,"file":"index.jsx","sourceRoot":"","sources":["../../../../src/hooks/dispatch/index.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAEjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAK9C,MAAM,eAAe,GAAG,aAAa,CAAmB;IACtD,QAAQ,CAAI,OAAmB;QAC7B,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAA;AAEnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,EAAE,QAAQ,EAA2B,EAAE,EAAE;IACxE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,CAAA;IAC3D,MAAM,QAAQ,GAAG,KAAK,WAAc,OAAmB,EAAE,kBAA4B;QACnF,IAAI,kBAAkB,KAAK,KAAK,EAAE,CAAC;YACjC,WAAW,EAAE,CAAA;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAA;YACzB,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,OAAO,GAAG,CAAA;QACZ,CAAC;gBAAS,CAAC;YACT,cAAc,EAAE,CAAA;QAClB,CAAC;IACH,CAAC,CAAA;IACD,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAA;AAC7F,CAAC,CAAA"}

package/dist/hooks/toast/index.jsx

@@ -26,6 +26,9 @@ export const ToastProvider = ({ children }) => {
         }
     };
     const dismissToast = () => {
+        if (h) {
+            clearTimeout(h);
+        }
         setContent(undefined);
         setH(undefined);
     };

package/dist/hooks/toast/index.jsx.map

@@ -1 +1 @@
-{"version":3,"file":"index.jsx","sourceRoot":"","sources":["../../../../src/hooks/toast/index.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAGZ,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAE3D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAMjD,MAAM,YAAY,GAAG,aAAa,CAAgB;IAChD,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;IACnB,YAAY,EAAE,GAAG,EAAE,GAAE,CAAC;CACvB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;AAE7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAE,QAAQ,EAA2B,EAAE,EAAE;IACrE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,EAAa,CAAA;IACnD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAa,UAAU,CAAC,OAAO,CAAC,CAAA;IAClE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,QAAQ,EAAkB,CAAA;IAC5C,MAAM,SAAS,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAA+D,EAAE,EAAE;QAC5G,UAAU,CAAC,OAAO,CAAC,CAAA;QACnB,QAAQ,CAAC,KAAK,IAAI,UAAU,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,CAAC,EAAE,CAAC;YACN,YAAY,CAAC,CAAC,CAAC,CAAA;YACf,IAAI,CAAC,SAAS,CAAC,CAAA;QACjB,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CACF,UAAU,CAAC,GAAG,EAAE;gBACd,UAAU,CAAC,SAAS,CAAC,CAAA;gBACrB,IAAI,CAAC,SAAS,CAAC,CAAA;YACjB,CAAC,EAAE,MAAM,CAAC,CACX,CAAA;QACH,CAAC;IACH,CAAC,CAAA;IACD,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,UAAU,CAAC,SAAS,CAAC,CAAA;QACrB,IAAI,CAAC,SAAS,CAAC,CAAA;IACjB,CAAC,CAAA;IACD,OAAO,CACL,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CACxD;MAAA,CAAC,QAAQ,CACT;MAAA,CAAC,OAAO,IAAI,CACV,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAC9C;UAAA,CAAC,OAAO,CACV;QAAA,EAAE,KAAK,CAAC,CACT,CACH;IAAA,EAAE,YAAY,CAAC,QAAQ,CAAC,CACzB,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"index.jsx","sourceRoot":"","sources":["../../../../src/hooks/toast/index.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAGZ,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAE3D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAMjD,MAAM,YAAY,GAAG,aAAa,CAAgB;IAChD,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;IACnB,YAAY,EAAE,GAAG,EAAE,GAAE,CAAC;CACvB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;AAE7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAE,QAAQ,EAA2B,EAAE,EAAE;IACrE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,EAAa,CAAA;IACnD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAa,UAAU,CAAC,OAAO,CAAC,CAAA;IAClE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,QAAQ,EAAkB,CAAA;IAC5C,MAAM,SAAS,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAA+D,EAAE,EAAE;QAC5G,UAAU,CAAC,OAAO,CAAC,CAAA;QACnB,QAAQ,CAAC,KAAK,IAAI,UAAU,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,CAAC,EAAE,CAAC;YACN,YAAY,CAAC,CAAC,CAAC,CAAA;YACf,IAAI,CAAC,SAAS,CAAC,CAAA;QACjB,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CACF,UAAU,CAAC,GAAG,EAAE;gBACd,UAAU,CAAC,SAAS,CAAC,CAAA;gBACrB,IAAI,CAAC,SAAS,CAAC,CAAA;YACjB,CAAC,EAAE,MAAM,CAAC,CACX,CAAA;QACH,CAAC;IACH,CAAC,CAAA;IACD,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,IAAI,CAAC,EAAE,CAAC;YACN,YAAY,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,UAAU,CAAC,SAAS,CAAC,CAAA;QACrB,IAAI,CAAC,SAAS,CAAC,CAAA;IACjB,CAAC,CAAA;IACD,OAAO,CACL,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CACxD;MAAA,CAAC,QAAQ,CACT;MAAA,CAAC,OAAO,IAAI,CACV,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAC9C;UAAA,CAAC,OAAO,CACV;QAAA,EAAE,KAAK,CAAC,CACT,CACH;IAAA,EAAE,YAAY,CAAC,QAAQ,CAAC,CACzB,CAAA;AACH,CAAC,CAAA"}

package/dist/lib/next-auth/index.d.ts

@@ -5,4 +5,5 @@ export type TokenSet = {
     expiresAtSec: number;
     scope?: string;
 };
+export declare const serverRefresh: (refreshToken: string) => Promise<TokenSet | undefined>;
 export declare const options: (authorize?: (email: string, password: string) => Promise<TokenSet | undefined>, refresh?: (refreshToken: string) => Promise<TokenSet | undefined>, externalAuthorize?: (credential: string) => Promise<TokenSet | undefined>) => NextAuthOptions;

package/dist/lib/next-auth/index.js

@@ -19,131 +19,142 @@ const dedupedRefresh = (refreshToken, refresh) => {
     inflightRefreshes.set(refreshToken, p);
     return p;
 };
-export const options = (authorize, refresh, externalAuthorize) => ({
-    secret: (() => {
-        // next build (page-data collection) evaluates this module but never signs anything —
-        // the secret is a runtime-only concern (Secrets Manager / dev .env). Build must not require it.
-        if (defaultServerEnv.NEXT_PHASE === 'phase-production-build') {
-            return defaultServerEnv.NEXTAUTH_SECRET ?? 'build-only-not-used-at-runtime';
-        }
-        if (!defaultServerEnv.NEXTAUTH_SECRET) {
-            throw new Error('NEXTAUTH_SECRET is not set');
-        }
-        if (defaultServerEnv.DEPLOY_ENV !== 'dev' &&
-            defaultServerEnv.NEXTAUTH_SECRET === 'build-only-not-used-at-runtime') {
-            throw new Error('NEXTAUTH_SECRET must be replaced with a real secret in non-dev environments');
-        }
-        return defaultServerEnv.NEXTAUTH_SECRET;
-    })(),
-    pages: {
-        signIn: '/signin',
-    },
-    session: {
-        maxAge: 60 * 60 * 24 * 30,
-        strategy: 'jwt',
-    },
-    providers: [
-        CredentialsProvider({
-            credentials: {
-                email: { type: 'email' },
-                password: { type: 'password' },
-                credential: { type: 'text' },
-            },
-            async authorize(credentials) {
-                if (!credentials) {
-                    return null;
-                }
-                try {
-                    // Route an app-supplied opaque credential (e.g. a MicroHub OIDC broker
-                    // one-time code) through externalAuthorize; otherwise fall back to the
-                    // email/password path. Either callback maps to a TokenSet or undefined.
-                    let tokenSet;
-                    if (credentials.credential && externalAuthorize) {
-                        tokenSet = await externalAuthorize(credentials.credential);
+// The app's refresh callback, captured (deduped) when options() is wired with one, so the server-side
+// tRPC header builder (Lib.trpc) can refresh a near-expiry access token before forwarding it on the
+// RSC / server-action path — where the jwt callback's own refresh cannot persist a cookie. Only a
+// non-undefined refresh is stored, so a no-arg options() call never clears an already-registered one.
+let registeredRefresh;
+export const serverRefresh = async (refreshToken) => registeredRefresh ? registeredRefresh(refreshToken) : undefined;
+export const options = (authorize, refresh, externalAuthorize) => {
+    if (refresh) {
+        registeredRefresh = (refreshToken) => dedupedRefresh(refreshToken, refresh);
+    }
+    return {
+        secret: (() => {
+            // next build (page-data collection) evaluates this module but never signs anything —
+            // the secret is a runtime-only concern (Secrets Manager / dev .env). Build must not require it.
+            if (defaultServerEnv.NEXT_PHASE === 'phase-production-build') {
+                return defaultServerEnv.NEXTAUTH_SECRET ?? 'build-only-not-used-at-runtime';
+            }
+            if (!defaultServerEnv.NEXTAUTH_SECRET) {
+                throw new Error('NEXTAUTH_SECRET is not set');
+            }
+            if (defaultServerEnv.DEPLOY_ENV !== 'dev' &&
+                defaultServerEnv.NEXTAUTH_SECRET === 'build-only-not-used-at-runtime') {
+                throw new Error('NEXTAUTH_SECRET must be replaced with a real secret in non-dev environments');
+            }
+            return defaultServerEnv.NEXTAUTH_SECRET;
+        })(),
+        pages: {
+            signIn: '/signin',
+        },
+        session: {
+            maxAge: 60 * 60 * 24 * 30,
+            strategy: 'jwt',
+        },
+        providers: [
+            CredentialsProvider({
+                credentials: {
+                    email: { type: 'email' },
+                    password: { type: 'password' },
+                    credential: { type: 'text' },
+                },
+                async authorize(credentials) {
+                    if (!credentials) {
+                        return null;
                     }
-                    else if (authorize) {
-                        tokenSet = await authorize(credentials.email, credentials.password);
+                    try {
+                        // Route an app-supplied opaque credential (e.g. a MicroHub OIDC broker
+                        // one-time code) through externalAuthorize; otherwise fall back to the
+                        // email/password path. Either callback maps to a TokenSet or undefined.
+                        let tokenSet;
+                        if (credentials.credential && externalAuthorize) {
+                            tokenSet = await externalAuthorize(credentials.credential);
+                        }
+                        else if (authorize) {
+                            tokenSet = await authorize(credentials.email, credentials.password);
+                        }
+                        if (!tokenSet) {
+                            return null;
+                        }
+                        return {
+                            tokenSet,
+                        };
                     }
-                    if (!tokenSet) {
+                    catch (error) {
+                        // NextAuth swallows authorize() exceptions silently and returns null —
+                        // operationally indistinguishable from "wrong password". Log the throw so
+                        // server-side bugs in the consumer's authorize callback are visible.
+                        logger.error('auth', { op: 'authorize', error });
                         return null;
                     }
-                    return {
-                        tokenSet,
-                    };
+                },
+            }),
+        ],
+        callbacks: {
+            session: ({ session, token }) => {
+                // The access token is deliberately NOT copied onto the session: the session is serialized to the
+                // browser via /api/auth/session (SessionProvider), so exposing the bearer there hands any client
+                // script a usable credential. The server reads it from the JWT via getToken (see Lib.trpc).
+                if (token?.scope) {
+                    session.scope = token.scope;
                 }
-                catch (error) {
-                    // NextAuth swallows authorize() exceptions silently and returns null —
-                    // operationally indistinguishable from "wrong password". Log the throw so
-                    // server-side bugs in the consumer's authorize callback are visible.
-                    logger.error('auth', { op: 'authorize', error });
-                    return null;
+                if (token?.error) {
+                    session.error = token.error;
                 }
+                return session;
             },
-        }),
-    ],
-    callbacks: {
-        session: ({ session, token }) => {
-            if (token?.accessToken) {
-                session.accessToken = token.accessToken;
-            }
-            if (token?.scope) {
-                session.scope = token.scope;
-            }
-            if (token?.error) {
-                session.error = token.error;
-            }
-            return session;
-        },
-        jwt: async ({ token, user }) => {
-            // New sign-in path: authorize() returned a TokenSet; CredentialsProvider
-            // hands it to us on `user.tokenSet`.
-            if (user?.tokenSet) {
-                token.accessToken = user.tokenSet.accessToken;
-                token.refreshToken = user.tokenSet.refreshToken;
-                token.expiresAtSec = user.tokenSet.expiresAtSec;
-                token.scope = user.tokenSet.scope;
-                token.error = undefined;
-                return token;
-            }
-            // Existing session path: refresh the access token if expiry is within
-            // the leeway. `refresh` is optional — without it, the access token
-            // simply expires and downstream calls start failing 401 until the user
-            // signs in again. The refreshToken is cleared on failure so subsequent
-            // jwt() invocations don't loop and hammer the refresh endpoint until
-            // session.maxAge.
-            if (refresh &&
-                token.refreshToken &&
-                token.expiresAtSec &&
-                Date.now() / 1000 >= token.expiresAtSec - REFRESH_LEEWAY_SEC) {
-                try {
-                    const refreshed = await dedupedRefresh(token.refreshToken, refresh);
-                    if (!refreshed) {
+            jwt: async ({ token, user }) => {
+                // New sign-in path: authorize() returned a TokenSet; CredentialsProvider
+                // hands it to us on `user.tokenSet`.
+                if (user?.tokenSet) {
+                    token.accessToken = user.tokenSet.accessToken;
+                    token.refreshToken = user.tokenSet.refreshToken;
+                    token.expiresAtSec = user.tokenSet.expiresAtSec;
+                    token.scope = user.tokenSet.scope;
+                    token.error = undefined;
+                    return token;
+                }
+                // Existing session path: refresh the access token if expiry is within
+                // the leeway. `refresh` is optional — without it, the access token
+                // simply expires and downstream calls start failing 401 until the user
+                // signs in again. The refreshToken is cleared on failure so subsequent
+                // jwt() invocations don't loop and hammer the refresh endpoint until
+                // session.maxAge.
+                if (refresh &&
+                    token.refreshToken &&
+                    token.expiresAtSec &&
+                    Date.now() / 1000 >= token.expiresAtSec - REFRESH_LEEWAY_SEC) {
+                    try {
+                        const refreshed = await dedupedRefresh(token.refreshToken, refresh);
+                        if (!refreshed) {
+                            return { ...token, refreshToken: undefined, error: 'RefreshAccessTokenError' };
+                        }
+                        return {
+                            ...token,
+                            accessToken: refreshed.accessToken,
+                            refreshToken: refreshed.refreshToken,
+                            expiresAtSec: refreshed.expiresAtSec,
+                            scope: refreshed.scope,
+                            error: undefined,
+                        };
+                    }
+                    catch (error) {
+                        logger.error('auth', { op: 'refresh', error });
                         return { ...token, refreshToken: undefined, error: 'RefreshAccessTokenError' };
                     }
-                    return {
-                        ...token,
-                        accessToken: refreshed.accessToken,
-                        refreshToken: refreshed.refreshToken,
-                        expiresAtSec: refreshed.expiresAtSec,
-                        scope: refreshed.scope,
-                        error: undefined,
-                    };
                 }
-                catch (error) {
-                    logger.error('auth', { op: 'refresh', error });
-                    return { ...token, refreshToken: undefined, error: 'RefreshAccessTokenError' };
+                return token;
+            },
+            redirect: ({ url, baseUrl }) => {
+                if (url.startsWith('/')) {
+                    return `${baseUrl}${url}`;
                 }
-            }
-            return token;
-        },
-        redirect: ({ url, baseUrl }) => {
-            if (url.startsWith('/')) {
-                return `${baseUrl}${url}`;
-            }
-            const searchParams = new URLSearchParams(new URL(url).search);
-            const resolved = new URL(searchParams.get('callbackUrl') ?? '', baseUrl);
-            return resolved.origin === new URL(baseUrl).origin ? resolved.toString() : baseUrl;
+                const searchParams = new URLSearchParams(new URL(url).search);
+                const resolved = new URL(searchParams.get('callbackUrl') ?? '', baseUrl);
+                return resolved.origin === new URL(baseUrl).origin ? resolved.toString() : baseUrl;
+            },
         },
-    },
-});
+    };
+};
 //# sourceMappingURL=index.js.map

package/dist/lib/next-auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lib/next-auth/index.ts"],"names":[],"mappings":"AACA,OAAO,mBAAmB,MAAM,iCAAiC,CAAA;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AASrC,+EAA+E;AAC/E,+EAA+E;AAC/E,iFAAiF;AACjF,8EAA8E;AAC9E,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAyC,CAAA;AAE1E,MAAM,cAAc,GAAG,CACrB,YAAoB,EACpB,OAAgE,EACjC,EAAE;IACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QAC3C,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IACF,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;IACtC,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,SAA8E,EAC9E,OAAiE,EACjE,iBAAyE,EACxD,EAAE,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,GAAG,EAAE;QACZ,qFAAqF;QACrF,gGAAgG;QAChG,IAAI,gBAAgB,CAAC,UAAU,KAAK,wBAAwB,EAAE,CAAC;YAC7D,OAAO,gBAAgB,CAAC,eAAe,IAAI,gCAAgC,CAAA;QAC7E,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC/C,CAAC;QACD,IACE,gBAAgB,CAAC,UAAU,KAAK,KAAK;YACrC,gBAAgB,CAAC,eAAe,KAAK,gCAAgC,EACrE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;QAChG,CAAC;QACD,OAAO,gBAAgB,CAAC,eAAe,CAAA;IACzC,CAAC,CAAC,EAAE;IACJ,KAAK,EAAE;QACL,MAAM,EAAE,SAAS;KAClB;IACD,OAAO,EAAE;QACP,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;QACzB,QAAQ,EAAE,KAAK;KAChB;IACD,SAAS,EAAE;QACT,mBAAmB,CAAC;YAClB,WAAW,EAAE;gBACX,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;gBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC9B,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aAC7B;YACD,KAAK,CAAC,SAAS,CAAC,WAAW;gBACzB,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,IAAI,CAAC;oBACH,uEAAuE;oBACvE,uEAAuE;oBACvE,wEAAwE;oBACxE,IAAI,QAA8B,CAAA;oBAClC,IAAI,WAAW,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;wBAChD,QAAQ,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;oBAC5D,CAAC;yBAAM,IAAI,SAAS,EAAE,CAAC;wBACrB,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAA;oBACrE,CAAC;oBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,OAAO,IAAI,CAAA;oBACb,CAAC;oBACD,OAAO;wBACL,QAAQ;qBACD,CAAA;gBACX,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,uEAAuE;oBACvE,0EAA0E;oBAC1E,qEAAqE;oBACrE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;oBAChD,OAAO,IAAI,CAAA;gBACb,CAAC;YACH,CAAC;SACF,CAAC;KACH;IACD,SAAS,EAAE;QACT,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YAC9B,IAAI,KAAK,EAAE,WAAW,EAAE,CAAC;gBACvB,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAA;YACzC,CAAC;YACD,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YAC7B,CAAC;YACD,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YAC7B,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;YAC7B,yEAAyE;YACzE,qCAAqC;YACrC,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;gBACnB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAA;gBAC7C,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAA;gBAC/C,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAA;gBAC/C,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAA;gBACjC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAA;gBACvB,OAAO,KAAK,CAAA;YACd,CAAC;YACD,sEAAsE;YACtE,mEAAmE;YACnE,uEAAuE;YACvE,uEAAuE;YACvE,qEAAqE;YACrE,kBAAkB;YAClB,IACE,OAAO;gBACP,KAAK,CAAC,YAAY;gBAClB,KAAK,CAAC,YAAY;gBAClB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,YAAY,GAAG,kBAAkB,EAC5D,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;oBACnE,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAA;oBAChF,CAAC;oBACD,OAAO;wBACL,GAAG,KAAK;wBACR,WAAW,EAAE,SAAS,CAAC,WAAW;wBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,KAAK,EAAE,SAAS,CAAC,KAAK;wBACtB,KAAK,EAAE,SAAS;qBACjB,CAAA;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;oBAC9C,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAA;gBAChF,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,GAAG,OAAO,GAAG,GAAG,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;YAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAA;YACxE,OAAO,QAAQ,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;QACpF,CAAC;KACF;CACF,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lib/next-auth/index.ts"],"names":[],"mappings":"AACA,OAAO,mBAAmB,MAAM,iCAAiC,CAAA;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AASrC,+EAA+E;AAC/E,+EAA+E;AAC/E,iFAAiF;AACjF,8EAA8E;AAC9E,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAyC,CAAA;AAE1E,MAAM,cAAc,GAAG,CACrB,YAAoB,EACpB,OAAgE,EACjC,EAAE;IACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QAC3C,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IACF,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAA;IACtC,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AAED,sGAAsG;AACtG,oGAAoG;AACpG,kGAAkG;AAClG,sGAAsG;AACtG,IAAI,iBAAwF,CAAA;AAE5F,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,YAAoB,EAAE,EAAE,CAC1D,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAEjE,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,SAA8E,EAC9E,OAAiE,EACjE,iBAAyE,EACxD,EAAE;IACnB,IAAI,OAAO,EAAE,CAAC;QACZ,iBAAiB,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO;QACL,MAAM,EAAE,CAAC,GAAG,EAAE;YACZ,qFAAqF;YACrF,gGAAgG;YAChG,IAAI,gBAAgB,CAAC,UAAU,KAAK,wBAAwB,EAAE,CAAC;gBAC7D,OAAO,gBAAgB,CAAC,eAAe,IAAI,gCAAgC,CAAA;YAC7E,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAC/C,CAAC;YACD,IACE,gBAAgB,CAAC,UAAU,KAAK,KAAK;gBACrC,gBAAgB,CAAC,eAAe,KAAK,gCAAgC,EACrE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;YAChG,CAAC;YACD,OAAO,gBAAgB,CAAC,eAAe,CAAA;QACzC,CAAC,CAAC,EAAE;QACJ,KAAK,EAAE;YACL,MAAM,EAAE,SAAS;SAClB;QACD,OAAO,EAAE;YACP,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACzB,QAAQ,EAAE,KAAK;SAChB;QACD,SAAS,EAAE;YACT,mBAAmB,CAAC;gBAClB,WAAW,EAAE;oBACX,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;oBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;oBAC9B,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;iBAC7B;gBACD,KAAK,CAAC,SAAS,CAAC,WAAW;oBACzB,IAAI,CAAC,WAAW,EAAE,CAAC;wBACjB,OAAO,IAAI,CAAA;oBACb,CAAC;oBACD,IAAI,CAAC;wBACH,uEAAuE;wBACvE,uEAAuE;wBACvE,wEAAwE;wBACxE,IAAI,QAA8B,CAAA;wBAClC,IAAI,WAAW,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;4BAChD,QAAQ,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;wBAC5D,CAAC;6BAAM,IAAI,SAAS,EAAE,CAAC;4BACrB,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAA;wBACrE,CAAC;wBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACd,OAAO,IAAI,CAAA;wBACb,CAAC;wBACD,OAAO;4BACL,QAAQ;yBACD,CAAA;oBACX,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,uEAAuE;wBACvE,0EAA0E;wBAC1E,qEAAqE;wBACrE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;wBAChD,OAAO,IAAI,CAAA;oBACb,CAAC;gBACH,CAAC;aACF,CAAC;SACH;QACD,SAAS,EAAE;YACT,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC9B,iGAAiG;gBACjG,iGAAiG;gBACjG,4FAA4F;gBAC5F,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;oBACjB,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;gBAC7B,CAAC;gBACD,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;oBACjB,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;gBAC7B,CAAC;gBACD,OAAO,OAAO,CAAA;YAChB,CAAC;YACD,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC7B,yEAAyE;gBACzE,qCAAqC;gBACrC,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;oBACnB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAA;oBAC7C,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAA;oBAC/C,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAA;oBAC/C,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAA;oBACjC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAA;oBACvB,OAAO,KAAK,CAAA;gBACd,CAAC;gBACD,sEAAsE;gBACtE,mEAAmE;gBACnE,uEAAuE;gBACvE,uEAAuE;gBACvE,qEAAqE;gBACrE,kBAAkB;gBAClB,IACE,OAAO;oBACP,KAAK,CAAC,YAAY;oBAClB,KAAK,CAAC,YAAY;oBAClB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,YAAY,GAAG,kBAAkB,EAC5D,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;wBACnE,IAAI,CAAC,SAAS,EAAE,CAAC;4BACf,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAA;wBAChF,CAAC;wBACD,OAAO;4BACL,GAAG,KAAK;4BACR,WAAW,EAAE,SAAS,CAAC,WAAW;4BAClC,YAAY,EAAE,SAAS,CAAC,YAAY;4BACpC,YAAY,EAAE,SAAS,CAAC,YAAY;4BACpC,KAAK,EAAE,SAAS,CAAC,KAAK;4BACtB,KAAK,EAAE,SAAS;yBACjB,CAAA;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;wBAC9C,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAA;oBAChF,CAAC;gBACH,CAAC;gBACD,OAAO,KAAK,CAAA;YACd,CAAC;YACD,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,GAAG,OAAO,GAAG,GAAG,EAAE,CAAA;gBAC3B,CAAC;gBACD,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;gBAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAA;gBACxE,OAAO,QAAQ,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;YACpF,CAAC;SACF;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/lib/trpc/index.js

@@ -1,10 +1,12 @@
-import { getServerSession } from 'next-auth';
+import { REFRESH_LEEWAY_SEC } from '../../constants';
+import { defaultServerEnv } from '../../env';
+import { logger } from '../../logger';
 import { getCookieValue, setCookieValue } from '../cookie';
-import { options as nextAuthOptions } from '../next-auth';
+import { serverRefresh } from '../next-auth';
 export const setHeaderValues = async (headers, options) => setCookieValue('headers', JSON.stringify(headers), options);
 // The `headers` cookie is client-controllable (tamperable via subdomain cookie injection or an
 // httpOnly:false setHeaderValues call), so auth / IP / routing headers must not be accepted from it.
-// The real authorization is applied server-side from the session below.
+// The real authorization is applied server-side from the JWT (getToken) below.
 const SENSITIVE_HEADER_NAMES = new Set([
     'authorization',
     'cookie',
@@ -15,10 +17,36 @@ const SENSITIVE_HEADER_NAMES = new Set([
 ]);
 const createDefaultHeaders = async (defaultHeaders = {}) => {
     let baseHeaders = {};
+    let authorization;
     if (typeof window === 'undefined') {
         const { headers: nextHeaders } = await import('next/headers');
         const headersList = await nextHeaders();
         baseHeaders = { 'user-agent': headersList.get('user-agent') || 'unknown' };
+        // Read the access token from the server-side JWT (getToken decodes the same session cookie
+        // getServerSession does) rather than the session — the session no longer carries the bearer, so it is
+        // never exposed to client JS. Refresh it here when it is within the expiry leeway so an RSC /
+        // server-action call in an expired-token window forwards a fresh bearer instead of a stale one (the
+        // jwt callback's refresh cannot persist a cookie on this path). Refresh reaches the app's callback via
+        // Lib.nextAuth registration; when none is wired, the current token is forwarded unchanged.
+        const { getToken } = await import('next-auth/jwt');
+        const { NextRequest } = await import('next/server');
+        const token = await getToken({
+            req: new NextRequest('http://localhost', { headers: { cookie: headersList.get('cookie') ?? '' } }),
+            secret: defaultServerEnv.NEXTAUTH_SECRET,
+        });
+        let accessToken = token?.accessToken;
+        if (token?.refreshToken && token.expiresAtSec && Date.now() / 1000 >= token.expiresAtSec - REFRESH_LEEWAY_SEC) {
+            const refreshed = await serverRefresh(token.refreshToken).catch((error) => {
+                logger.error('auth', { op: 'refresh', error });
+                return undefined;
+            });
+            if (refreshed) {
+                accessToken = refreshed.accessToken;
+            }
+        }
+        if (accessToken) {
+            authorization = `Bearer ${accessToken}`;
+        }
     }
     const savedHeaders = {};
     const headersCookie = await getCookieValue('headers');
@@ -35,11 +63,10 @@ const createDefaultHeaders = async (defaultHeaders = {}) => {
             // Ignore if JSON parse fails
         }
     }
-    const session = await getServerSession(nextAuthOptions());
     return {
         ...baseHeaders,
         ...savedHeaders,
-        ...(session?.accessToken ? { authorization: `Bearer ${session.accessToken}` } : {}),
+        ...(authorization ? { authorization } : {}),
         ...defaultHeaders,
     };
 };

package/dist/lib/trpc/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lib/trpc/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAE5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,cAAc,CAAA;AAEzD,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,OAAoB,EACpB,OAKC,EACD,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;AAEhE,+FAA+F;AAC/F,qGAAqG;AACrG,wEAAwE;AACxE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,eAAe;IACf,QAAQ;IACR,iBAAiB;IACjB,kBAAkB;IAClB,mBAAmB;IACnB,WAAW;CACZ,CAAC,CAAA;AAEF,MAAM,oBAAoB,GAAG,KAAK,EAAE,iBAA8B,EAAE,EAAwB,EAAE;IAC5F,IAAI,WAAW,GAAgB,EAAE,CAAA;IAEjC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;QAC7D,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE,CAAA;QACvC,WAAW,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,EAAE,CAAA;IAC5E,CAAC;IAED,MAAM,YAAY,GAAgB,EAAE,CAAA;IACpC,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAA;IACrD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAA2B,CAAA;YACzE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACnD,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,eAAe,EAAE,CAAC,CAAA;IACzD,OAAO;QACL,GAAG,WAAW;QACd,GAAG,YAAY;QACf,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,cAAc;KAClB,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,KAAmB,EAAwB,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lib/trpc/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,OAAoB,EACpB,OAKC,EACD,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;AAEhE,+FAA+F;AAC/F,qGAAqG;AACrG,+EAA+E;AAC/E,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,eAAe;IACf,QAAQ;IACR,iBAAiB;IACjB,kBAAkB;IAClB,mBAAmB;IACnB,WAAW;CACZ,CAAC,CAAA;AAEF,MAAM,oBAAoB,GAAG,KAAK,EAAE,iBAA8B,EAAE,EAAwB,EAAE;IAC5F,IAAI,WAAW,GAAgB,EAAE,CAAA;IACjC,IAAI,aAAiC,CAAA;IAErC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;QAC7D,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE,CAAA;QACvC,WAAW,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,EAAE,CAAA;QAC1E,2FAA2F;QAC3F,sGAAsG;QACtG,8FAA8F;QAC9F,oGAAoG;QACpG,uGAAuG;QACvG,2FAA2F;QAC3F,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;QAClD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;YAC3B,GAAG,EAAE,IAAI,WAAW,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YAClG,MAAM,EAAE,gBAAgB,CAAC,eAAe;SACzC,CAAC,CAAA;QACF,IAAI,WAAW,GAAG,KAAK,EAAE,WAAW,CAAA;QACpC,IAAI,KAAK,EAAE,YAAY,IAAI,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,YAAY,GAAG,kBAAkB,EAAE,CAAC;YAC9G,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;gBAC9C,OAAO,SAAS,CAAA;YAClB,CAAC,CAAC,CAAA;YACF,IAAI,SAAS,EAAE,CAAC;gBACd,WAAW,GAAG,SAAS,CAAC,WAAW,CAAA;YACrC,CAAC;QACH,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,aAAa,GAAG,UAAU,WAAW,EAAE,CAAA;QACzC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAgB,EAAE,CAAA;IACpC,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAA;IACrD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAA2B,CAAA;YACzE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACnD,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,WAAW;QACd,GAAG,YAAY;QACf,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,cAAc;KAClB,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,KAAmB,EAAwB,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA"}