authula 0.2.0 → 0.3.2

package/README.md

@@ -7,6 +7,13 @@
 This Node.js SDK provides seamless integration with an Authula server for both client-side and server-side applications and is framework agnostic.
 </p>
 
+
+<div align="center">
+  <a href="https://www.npmjs.com/package/authula" target="_parent">
+    <img src="https://img.shields.io/npm/dm/authula.svg" alt="Node.js SDK downloads" />
+  </a>
+</div>
+
 ---
 
 ## Features
@@ -136,7 +143,7 @@ const authulaClient = createClient({
 
 ```typescript
 // Create a new role
-await authulaClient.accessControl.createRole({
+const createdRole = await authulaClient.accessControl.createRole({
   name: "Admin",
   description: "Administrator role",
   isSystem: false,
@@ -145,24 +152,27 @@ await authulaClient.accessControl.createRole({
 // Get all roles
 const allRoles = await authulaClient.accessControl.getAllRoles();
 
+// Look up a role by name
+const roleByName = await authulaClient.accessControl.getRoleByName("Admin");
+
 // Get a specific role
-const role = await authulaClient.accessControl.getRoleById("role-id");
+const roleDetails = await authulaClient.accessControl.getRoleById("role-id");
 
 // Update a role
-await authulaClient.accessControl.updateRole("role-id", {
+const updatedRole = await authulaClient.accessControl.updateRole("role-id", {
   name: "Updated name",
   description: "Updated description",
 });
 
 // Delete a role
-await authulaClient.accessControl.deleteRole("role-id");
+const deleteRoleResult = await authulaClient.accessControl.deleteRole("role-id");
 ```
 
 #### Permission Management
 
 ```typescript
 // Create a new permission
-await authulaClient.accessControl.createPermission({
+const createdPermission = await authulaClient.accessControl.createPermission({
   key: "users.create",
   description: "Create new users",
   isSystem: false,
@@ -171,20 +181,23 @@ await authulaClient.accessControl.createPermission({
 // Get all permissions
 const allPermissions = await authulaClient.accessControl.getAllPermissions();
 
+// Get a specific permission
+const permission = await authulaClient.accessControl.getPermissionById("permission-id");
+
 // Update a permission
-await authulaClient.accessControl.updatePermission("permission-id", {
+const updatedPermission = await authulaClient.accessControl.updatePermission("permission-id", {
   description: "Updated permission description",
 });
 
 // Delete a permission
-await authulaClient.accessControl.deletePermission("permission-id");
+const deletePermissionResult = await authulaClient.accessControl.deletePermission("permission-id");
 ```
 
 #### Role-Permission Management
 
 ```typescript
 // Add a permission to a role
-await authulaClient.accessControl.addRolePermission("role-id", {
+const addPermissionResult = await authulaClient.accessControl.addRolePermission("role-id", {
   permissionId: "permission-id",
 });
 
@@ -194,12 +207,12 @@ const rolePermissions = await authulaClient.accessControl.getRolePermissions(
 );
 
 // Replace all permissions for a role
-await authulaClient.accessControl.replaceRolePermissions("role-id", {
+const replaceRolePermissionsResult = await authulaClient.accessControl.replaceRolePermissions("role-id", {
   permissionIds: ["permission-id-1", "permission-id-2", "permission-id-3"],
 });
 
 // Remove a permission from a role
-await authulaClient.accessControl.removeRolePermission(
+const removeRolePermissionResult = await authulaClient.accessControl.removeRolePermission(
   "role-id",
   "permission-id",
 );
@@ -212,25 +225,30 @@ await authulaClient.accessControl.removeRolePermission(
 const userRoles = await authulaClient.accessControl.getUserRoles("user-id");
 
 // Assign a role to a user
-await authulaClient.accessControl.assignUserRole("user-id", {
+const assignUserRoleResult = await authulaClient.accessControl.assignUserRole("user-id", {
   roleId: "role-id",
   expiresAt: new Date("2025-12-31"), // Optional: role expiration date
 });
 
 // Replace all roles for a user
-await authulaClient.accessControl.replaceUserRoles("user-id", {
+const replaceUserRolesResult = await authulaClient.accessControl.replaceUserRoles("user-id", {
   roleIds: ["role-id-1", "role-id-2"],
 });
 
 // Remove a role from a user
-await authulaClient.accessControl.removeUserRole("user-id", "role-id");
+const removeUserRoleResult = await authulaClient.accessControl.removeUserRole("user-id", "role-id");
 ```
 
 #### User Permission Management
 
 ```typescript
 // Get all effective permissions for a user (from all assigned roles)
-const userPermissions = await authulaClient.accessControl.getUserEffectivePermissions("user-id");
+const effectivePermissions = await authulaClient.accessControl.getUserPermissions("user-id");
+
+// Check whether the user has all requested permissions
+const permissionCheck = await authulaClient.accessControl.checkUserPermissions("user-id", {
+  permissionKeys: ["users.create", "users.update"],
+});
 ```
 
 ---
@@ -537,6 +555,47 @@ await authulaClient.magicLink.exchange({
 });
 ```
 
+---
+
+### TOTP Plugin
+
+Provides time-based one-time password (TOTP) two-factor authentication flows.
+
+```typescript
+import { TOTPPlugin } from "authula/plugins";
+
+const authulaClient = createClient({
+  url: "http://localhost:8080/auth",
+  plugins: [new TOTPPlugin()],
+});
+
+// Enable TOTP for the current user
+await authulaClient.totp.enable();
+
+// Disable TOTP for the current user
+await authulaClient.totp.disable();
+
+// Get the TOTP URI for QR code generation
+await authulaClient.totp.getUri();
+
+// Verify a TOTP code
+await authulaClient.totp.verify({
+  code: "123456",
+  trustDevice: true,
+});
+
+// Verify a backup code
+await authulaClient.totp.verifyBackupCode({
+  code: "AbcXyz",
+  trustDevice: true,
+});
+
+// Generate fresh backup codes
+await authulaClient.totp.generateBackupCodes();
+```
+
+---
+
 ## Advanced Configuration
 
 ### Fetch Options

package/dist/plugins/index.cjs

@@ -174,6 +174,154 @@ const impersonationSchema = zod.z.object({
 	updatedAt: zod.z.iso.datetime()
 });
 
+//#endregion
+//#region src/plugins/access-control/plugin.ts
+var AccessControlPlugin = class {
+	id = "accessControl";
+	constructor() {}
+	init(client) {
+		return {
+			createRole: async (data) => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles`, {
+					method: "POST",
+					body: data
+				});
+			},
+			getAllRoles: async () => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles`, { method: "GET" });
+			},
+			getRoleByName: async (roleName) => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles/by-name/${roleName}`, { method: "GET" });
+			},
+			getRoleById: async (roleId) => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles/${roleId}`, { method: "GET" });
+			},
+			updateRole: async (roleId, data) => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles/${roleId}`, {
+					method: "PATCH",
+					body: data
+				});
+			},
+			deleteRole: async (roleId) => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles/${roleId}`, { method: "DELETE" });
+			},
+			createPermission: async (data) => {
+				return require_fetch.wrappedFetch(client, `/access-control/permissions`, {
+					method: "POST",
+					body: data
+				});
+			},
+			getAllPermissions: async () => {
+				return require_fetch.wrappedFetch(client, `/access-control/permissions`, { method: "GET" });
+			},
+			getPermissionById: async (permissionId) => {
+				return require_fetch.wrappedFetch(client, `/access-control/permissions/${permissionId}`, { method: "GET" });
+			},
+			updatePermission: async (permissionId, data) => {
+				return require_fetch.wrappedFetch(client, `/access-control/permissions/${permissionId}`, {
+					method: "PATCH",
+					body: data
+				});
+			},
+			deletePermission: async (permissionId) => {
+				return require_fetch.wrappedFetch(client, `/access-control/permissions/${permissionId}`, { method: "DELETE" });
+			},
+			addRolePermission: async (roleId, data) => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles/${roleId}/permissions`, {
+					method: "POST",
+					body: data
+				});
+			},
+			getRolePermissions: async (roleId) => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles/${roleId}/permissions`, { method: "GET" });
+			},
+			replaceRolePermissions: async (roleId, data) => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles/${roleId}/permissions`, {
+					method: "PUT",
+					body: data
+				});
+			},
+			removeRolePermission: async (roleId, permissionId) => {
+				return require_fetch.wrappedFetch(client, `/access-control/roles/${roleId}/permissions/${permissionId}`, { method: "DELETE" });
+			},
+			getUserRoles: async (userId) => {
+				return require_fetch.wrappedFetch(client, `/access-control/users/${userId}/roles`, { method: "GET" });
+			},
+			assignUserRole: async (userId, data) => {
+				return require_fetch.wrappedFetch(client, `/access-control/users/${userId}/roles`, {
+					method: "POST",
+					body: data
+				});
+			},
+			replaceUserRoles: async (userId, data) => {
+				return require_fetch.wrappedFetch(client, `/access-control/users/${userId}/roles`, {
+					method: "PUT",
+					body: data
+				});
+			},
+			removeUserRole: async (userId, roleId) => {
+				return require_fetch.wrappedFetch(client, `/access-control/users/${userId}/roles/${roleId}`, { method: "DELETE" });
+			},
+			getUserPermissions: async (userId) => {
+				return require_fetch.wrappedFetch(client, `/access-control/users/${userId}/permissions`, { method: "GET" });
+			},
+			checkUserPermissions: async (userId, data) => {
+				return require_fetch.wrappedFetch(client, `/access-control/users/${userId}/permissions/check`, {
+					method: "POST",
+					body: data
+				});
+			}
+		};
+	}
+};
+
+//#endregion
+//#region src/plugins/access-control/types.ts
+const roleSchema = zod.z.object({
+	id: zod.z.string().nonempty(),
+	name: zod.z.string().nonempty(),
+	description: zod.z.string().nullish(),
+	isSystem: zod.z.boolean(),
+	createdAt: zod.z.iso.datetime(),
+	updatedAt: zod.z.iso.datetime()
+});
+const permissionSchema = zod.z.object({
+	id: zod.z.string().nonempty(),
+	key: zod.z.string().nonempty(),
+	description: zod.z.string().nullish(),
+	isSystem: zod.z.boolean(),
+	createdAt: zod.z.iso.datetime(),
+	updatedAt: zod.z.iso.datetime()
+});
+const permissionGrantSourceSchema = zod.z.object({
+	roleId: zod.z.string().nonempty(),
+	roleName: zod.z.string().nonempty(),
+	grantedByUserId: zod.z.string().nullish(),
+	grantedAt: zod.z.iso.datetime().nullish()
+});
+const userPermissionInfoSchema = zod.z.object({
+	permissionId: zod.z.string().nonempty(),
+	permissionKey: zod.z.string().nonempty(),
+	permissionDescription: zod.z.string().nullish(),
+	grantedByUserId: zod.z.string().nullish(),
+	grantedAt: zod.z.iso.datetime().nullish(),
+	sources: zod.z.array(permissionGrantSourceSchema).optional()
+});
+const userRoleInfoSchema = zod.z.object({
+	roleId: zod.z.string().nonempty(),
+	roleName: zod.z.string().nonempty(),
+	roleDescription: zod.z.string().nullish(),
+	assignedByUserId: zod.z.string().nullish(),
+	assignedAt: zod.z.iso.datetime().nullish(),
+	expiresAt: zod.z.iso.datetime().nullish()
+});
+const roleDetailsSchema = zod.z.object({
+	role: roleSchema,
+	permissions: zod.z.array(userPermissionInfoSchema)
+});
+const getUserPermissionsResponseSchema = zod.z.object({ permissions: zod.z.array(userPermissionInfoSchema) });
+const checkUserPermissionsResponseSchema = zod.z.object({ hasPermissions: zod.z.boolean() });
+
 //#endregion
 //#region src/plugins/bearer/plugin.ts
 var BearerPlugin = class {
@@ -374,6 +522,41 @@ var OAuth2Plugin = class {
 };
 
 //#endregion
+//#region src/plugins/totp/plugin.ts
+var TOTPPlugin = class {
+	id = "totp";
+	init(client) {
+		return {
+			enable: async () => {
+				return require_fetch.wrappedFetch(client, "/totp/enable", { method: "POST" });
+			},
+			disable: async () => {
+				return require_fetch.wrappedFetch(client, "/totp/disable", { method: "POST" });
+			},
+			getUri: async () => {
+				return require_fetch.wrappedFetch(client, "/totp/get-uri", { method: "GET" });
+			},
+			verify: async (data) => {
+				return require_fetch.wrappedFetch(client, "/totp/verify", {
+					method: "POST",
+					body: data
+				});
+			},
+			verifyBackupCode: async (data) => {
+				return require_fetch.wrappedFetch(client, "/totp/verify-backup-code", {
+					method: "POST",
+					body: data
+				});
+			},
+			generateBackupCodes: async () => {
+				return require_fetch.wrappedFetch(client, "/totp/generate-backup-codes", { method: "POST" });
+			}
+		};
+	}
+};
+
+//#endregion
+exports.AccessControlPlugin = AccessControlPlugin;
 exports.AdminPlugin = AdminPlugin;
 exports.BearerPlugin = BearerPlugin;
 exports.CSRFPlugin = CSRFPlugin;
@@ -381,8 +564,17 @@ exports.EmailPasswordPlugin = EmailPasswordPlugin;
 exports.JWTPlugin = JWTPlugin;
 exports.MagicLinkPlugin = MagicLinkPlugin;
 exports.OAuth2Plugin = OAuth2Plugin;
+exports.TOTPPlugin = TOTPPlugin;
 exports.adminSessionStateSchema = adminSessionStateSchema;
 exports.adminUserSessionSchema = adminUserSessionSchema;
 exports.adminUserStateSchema = adminUserStateSchema;
+exports.checkUserPermissionsResponseSchema = checkUserPermissionsResponseSchema;
+exports.getUserPermissionsResponseSchema = getUserPermissionsResponseSchema;
 exports.impersonationSchema = impersonationSchema;
+exports.permissionGrantSourceSchema = permissionGrantSourceSchema;
+exports.permissionSchema = permissionSchema;
+exports.roleDetailsSchema = roleDetailsSchema;
+exports.roleSchema = roleSchema;
+exports.userPermissionInfoSchema = userPermissionInfoSchema;
+exports.userRoleInfoSchema = userRoleInfoSchema;
 //# sourceMappingURL=index.cjs.map

package/dist/plugins/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["wrappedFetch","z","sessionSchema","cookie","wrappedFetch","wrappedFetch","wrappedFetch","wrappedFetch"],"sources":["../../src/plugins/admin/plugin.ts","../../src/plugins/admin/types.ts","../../src/plugins/bearer/plugin.ts","../../src/plugins/csrf/plugin.ts","../../src/plugins/email-password/plugin.ts","../../src/plugins/jwt/plugin.ts","../../src/plugins/magic-link/plugin.ts","../../src/plugins/oauth2/plugin.ts"],"sourcesContent":["import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  BanUserRequest,\n  BanUserResponse,\n  CreateUserRequest,\n  CreateUserResponse,\n  DeleteSessionStateResponse,\n  DeleteUserStateResponse,\n  StopImpersonationResponse,\n  GetAllImpersonationsResponse,\n  GetAllUsersResponse,\n  GetBannedUserStatesResponse,\n  GetImpersonationByIdResponse,\n  GetRevokedSessionStatesResponse,\n  GetSessionStateResponse,\n  GetUserAdminSessionsResponse,\n  GetUserByIdResponse,\n  GetUserStateResponse,\n  RevokeSessionRequest,\n  RevokeSessionResponse,\n  StartImpersonationRequest,\n  StartImpersonationResponse,\n  UnbanUserResponse,\n  UpdateUserRequest,\n  UpdateUserResponse,\n  DeleteUserResponse,\n  CreateAccountRequest,\n  CreateAccountResponse,\n  GetUserAccountsResponse,\n  GetAccountByIdResponse,\n  UpdateAccountRequest,\n  UpdateAccountResponse,\n  DeleteAccountResponse,\n  CreateUserStateRequest,\n  CreateUserStateResponse,\n  UpdateUserStateRequest,\n  UpdateUserStateResponse,\n  CreateSessionStateRequest,\n  CreateSessionStateResponse,\n  UpdateSessionStateRequest,\n  UpdateSessionStateResponse,\n} from \"./types\";\n\nexport class AdminPlugin implements Plugin {\n  public readonly id = \"admin\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      // User management\n\n      createUser: async (\n        data: CreateUserRequest,\n      ): Promise<CreateUserResponse> => {\n        return wrappedFetch(client, \"/admin/users\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getAllUsers: async (limit?: number): Promise<GetAllUsersResponse> => {\n        const urlSearchParams = new URLSearchParams();\n        if (limit) {\n          urlSearchParams.append(\"limit\", limit.toString());\n        }\n        const params = urlSearchParams.toString()\n          ? `?${urlSearchParams.toString()}`\n          : \"\";\n        return wrappedFetch(client, `/admin/users${params}`, {\n          method: \"GET\",\n        });\n      },\n      getUserById: async (userId: string): Promise<GetUserByIdResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}`, {\n          method: \"GET\",\n        });\n      },\n      updateUser: async (\n        userId: string,\n        data: UpdateUserRequest,\n      ): Promise<UpdateUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteUser: async (userId: string): Promise<DeleteUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}`, {\n          method: \"DELETE\",\n        });\n      },\n\n      // Account management\n\n      createAccount: async (\n        userId: string,\n        data: CreateAccountRequest,\n      ): Promise<CreateAccountResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/accounts`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getUserAccounts: async (\n        userId: string,\n      ): Promise<GetUserAccountsResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/accounts`, {\n          method: \"GET\",\n        });\n      },\n      getAccountById: async (id: string): Promise<GetAccountByIdResponse> => {\n        return wrappedFetch(client, `/admin/accounts/${id}`, {\n          method: \"GET\",\n        });\n      },\n      updateAccount: async (\n        id: string,\n        data: UpdateAccountRequest,\n      ): Promise<UpdateAccountResponse> => {\n        return wrappedFetch(client, `/admin/accounts/${id}`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteAccount: async (id: string): Promise<DeleteAccountResponse> => {\n        return wrappedFetch(client, `/admin/accounts/${id}`, {\n          method: \"DELETE\",\n        });\n      },\n\n      // User state management\n\n      getUserState: async (userId: string): Promise<GetUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"GET\",\n        });\n      },\n      createUserState: async (\n        userId: string,\n        data: CreateUserStateRequest,\n      ): Promise<CreateUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      updateUserState: async (\n        userId: string,\n        data: UpdateUserStateRequest,\n      ): Promise<UpdateUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteUserState: async (\n        userId: string,\n      ): Promise<DeleteUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"DELETE\",\n        });\n      },\n      getBannedUserStates: async (): Promise<GetBannedUserStatesResponse> => {\n        return wrappedFetch(client, `/admin/users/states/banned`, {\n          method: \"GET\",\n        });\n      },\n      banUser: async (\n        userId: string,\n        data: BanUserRequest,\n      ): Promise<BanUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/ban`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      unbanUser: async (userId: string): Promise<UnbanUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/unban`, {\n          method: \"POST\",\n        });\n      },\n      getUserAdminSessions: async (\n        userId: string,\n      ): Promise<GetUserAdminSessionsResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/sessions`, {\n          method: \"GET\",\n        });\n      },\n\n      // Session state management\n\n      getSessionState: async (\n        sessionId: string,\n      ): Promise<GetSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"GET\",\n        });\n      },\n      createSessionState: async (\n        sessionId: string,\n        data: CreateSessionStateRequest,\n      ): Promise<CreateSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      updateSessionState: async (\n        sessionId: string,\n        data: UpdateSessionStateRequest,\n      ): Promise<UpdateSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteSessionState: async (\n        sessionId: string,\n      ): Promise<DeleteSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"DELETE\",\n        });\n      },\n      getRevokedSessionStates:\n        async (): Promise<GetRevokedSessionStatesResponse> => {\n          return wrappedFetch(client, `/admin/sessions/states/revoked`, {\n            method: \"GET\",\n          });\n        },\n      revokeSession: async (\n        sessionId: string,\n        data: RevokeSessionRequest,\n      ): Promise<RevokeSessionResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/revoke`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n\n      // Impersonations\n\n      getAllImpersonations: async (): Promise<GetAllImpersonationsResponse> => {\n        return wrappedFetch(client, \"/admin/impersonations\", {\n          method: \"GET\",\n        });\n      },\n      getImpersonationById: async (\n        impersonationId: string,\n      ): Promise<GetImpersonationByIdResponse> => {\n        return wrappedFetch(\n          client,\n          `/admin/impersonations/${impersonationId}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      startImpersonation: async (\n        data: StartImpersonationRequest,\n      ): Promise<StartImpersonationResponse> => {\n        return wrappedFetch(client, \"/admin/impersonations\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      stopImpersonation: async (\n        impersonationId: string,\n      ): Promise<StopImpersonationResponse> => {\n        return wrappedFetch(\n          client,\n          `/admin/impersonations/${impersonationId}/stop`,\n          {\n            method: \"POST\",\n          },\n        );\n      },\n    };\n  }\n}\n","import { z } from \"zod\";\n\nimport { sessionSchema, type Account, type User } from \"@/types\";\n\n// ------------------------------\n// SCHEMAS\n// ------------------------------\n\nexport const adminUserStateSchema = z.object({\n  userId: z.string().nonempty(),\n  isBanned: z.boolean(),\n  bannedAt: z.iso.datetime().nullable(),\n  bannedUntil: z.iso.datetime().nullable(),\n  bannedReason: z.string().nullable(),\n  bannedByUserId: z.string().nullable(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type AdminUserState = z.infer<typeof adminUserStateSchema>;\n\nexport const adminSessionStateSchema = z.object({\n  sessionId: z.string().nonempty(),\n  revokedAt: z.iso.datetime().nullable(),\n  revokedReason: z.string().nullable(),\n  revokedByUserId: z.string().nullable(),\n  impersonatorUserId: z.string().nullable(),\n  impersonationReason: z.string().nullable(),\n  impersonationExpiresAt: z.iso.datetime().nullable(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type AdminSessionState = z.infer<typeof adminSessionStateSchema>;\n\nexport const adminUserSessionSchema = z.object({\n  session: sessionSchema,\n  state: adminSessionStateSchema.nullable(),\n});\nexport type AdminUserSession = z.infer<typeof adminUserSessionSchema>;\n\nexport const impersonationSchema = z.object({\n  id: z.string().nonempty(),\n  actorUserId: z.string().nonempty(),\n  targetUserId: z.string().nonempty(),\n  actorSessionId: z.string().nullable(),\n  impersonationSessionId: z.string().nullable(),\n  reason: z.string().nonempty(),\n  startedAt: z.iso.datetime(),\n  expiresAt: z.iso.datetime(),\n  endedAt: z.iso.datetime().nullable(),\n  endedByUserId: z.string().nullable(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type Impersonation = z.infer<typeof impersonationSchema>;\n\n// ------------------------------\n// API response types\n// ------------------------------\n\n// User management\n\nexport type CreateUserRequest = {\n  name: string;\n  email: string;\n  emailVerified?: boolean;\n  image?: string;\n  metadata?: Record<string, unknown>;\n};\n\nexport type CreateUserResponse = {\n  user: User;\n};\n\nexport type GetAllUsersResponse = {\n  users: Array<User>;\n  nextCursor?: string | null;\n};\n\nexport type GetUserByIdResponse = {\n  user: User;\n};\n\nexport type UpdateUserRequest = {\n  name?: string;\n  email?: string;\n  emailVerified?: boolean;\n  image?: string;\n  metadata?: Record<string, unknown>;\n};\n\nexport type UpdateUserResponse = {\n  user: User;\n};\n\nexport type DeleteUserResponse = {\n  message: string;\n};\n\n// Account management\n\nexport type CreateAccountRequest = {\n  providerId: string;\n  accountId: string;\n  accessToken?: string;\n  refreshToken?: string;\n  idToken?: string;\n  accessTokenExpiresAt?: string;\n  refreshTokenExpiresAt?: string;\n  scope?: string;\n  password?: string;\n};\n\nexport type CreateAccountResponse = {\n  account: Account;\n};\n\nexport type GetUserAccountsResponse = {\n  accounts: Array<Account>;\n};\n\nexport type GetAccountByIdResponse = {\n  account: Account;\n};\n\nexport type UpdateAccountRequest = {\n  providerId?: string;\n  accountId?: string;\n  accessToken?: string;\n  refreshToken?: string;\n  idToken?: string;\n  accessTokenExpiresAt?: string;\n  refreshTokenExpiresAt?: string;\n  scope?: string;\n  password?: string;\n};\n\nexport type UpdateAccountResponse = {\n  account: Account;\n};\n\nexport type DeleteAccountResponse = {\n  message: string;\n};\n\n// User state management\n\nexport type GetUserStateResponse = {\n  state: AdminUserState;\n};\n\nexport type CreateUserStateRequest = {\n  banned: boolean;\n  bannedUntil?: string;\n  bannedReason?: string;\n};\n\nexport type UpdateUserStateRequest = {\n  banned: boolean;\n  bannedUntil?: string;\n  bannedReason?: string;\n};\n\nexport type CreateUserStateResponse = {\n  userState: AdminUserState;\n};\n\nexport type UpdateUserStateResponse = {\n  userState: AdminUserState;\n};\n\nexport type DeleteUserStateResponse = {\n  message: string;\n};\n\nexport type GetBannedUserStatesResponse = Array<AdminUserState>;\n\nexport type BanUserRequest = {\n  bannedUntil?: string;\n  reason?: string;\n};\n\nexport type BanUserResponse = {\n  state: AdminUserState;\n};\n\nexport type UnbanUserResponse = {\n  state: AdminUserState;\n};\n\nexport type GetUserAdminSessionsResponse = Array<AdminUserSession>;\n\n// Session state management\n\nexport type GetSessionStateResponse = {\n  state: AdminSessionState;\n};\n\nexport type CreateSessionStateRequest = {\n  revoke: boolean;\n  revokedReason?: string;\n  impersonatorUserId?: string;\n  impersonationReason?: string;\n  impersonationExpiresAt?: string;\n};\n\nexport type UpdateSessionStateRequest = {\n  revoke: boolean;\n  revokedReason?: string;\n  impersonatorUserId?: string;\n  impersonationReason?: string;\n  impersonationExpiresAt?: string;\n};\n\nexport type CreateSessionStateResponse = {\n  state: AdminSessionState;\n};\n\nexport type UpdateSessionStateResponse = {\n  state: AdminSessionState;\n};\n\nexport type DeleteSessionStateResponse = {\n  message: string;\n};\n\nexport type GetRevokedSessionStatesResponse = Array<AdminSessionState>;\n\nexport type RevokeSessionRequest = {\n  reason?: string;\n};\n\nexport type RevokeSessionResponse = {\n  sessionState: AdminSessionState;\n};\n\n// Impersonation\n\nexport type GetAllImpersonationsResponse = Array<Impersonation>;\n\nexport type GetImpersonationByIdResponse = {\n  impersonation: Impersonation;\n};\n\nexport type StartImpersonationRequest = {\n  targetUserId: string;\n  reason: string;\n  expiresInSeconds?: number;\n};\n\nexport type StartImpersonationResponse = {\n  impersonation: Impersonation;\n};\n\nexport type StopImpersonationResponse = {\n  message: string;\n};\n","import type { FetchContext, Plugin } from \"@/types\";\nimport type { BearerPluginOptions } from \"./types\";\nimport type { JWTPlugin } from \"../jwt/plugin\";\nimport type { ClientWithPlugins } from \"@/sdk\";\n\nexport class BearerPlugin implements Plugin {\n  public readonly id = \"bearer\";\n  private refreshPromise: Promise<any> | null = null;\n\n  constructor(private readonly options?: BearerPluginOptions) {}\n\n  public init(client: ClientWithPlugins<[JWTPlugin]>) {\n    client.registerBeforeFetch(async (ctx: FetchContext) => {\n      if (typeof document === \"undefined\") {\n        return;\n      }\n\n      const headerName = this.options?.headerName ?? \"Authorization\";\n      const token = localStorage.getItem(\"accessToken\");\n      if (token) {\n        ctx.init.headers = {\n          ...ctx.init.headers,\n          [headerName]: `Bearer ${token}`,\n        };\n      }\n    });\n\n    client.registerAfterFetch(async (ctx: FetchContext, res: Response) => {\n      if (typeof document === \"undefined\") {\n        return;\n      }\n      if (res.status !== 401) {\n        return;\n      }\n      if (ctx.meta.retry) {\n        return;\n      }\n\n      const refreshToken = localStorage.getItem(\"refreshToken\");\n      if (!refreshToken) {\n        return;\n      }\n\n      if (!client.jwt) {\n        console.warn(\"JWT Plugin is required for Bearer token refresh.\");\n        return;\n      }\n\n      // 🔒 SINGLE FLIGHT REFRESH\n      if (!this.refreshPromise) {\n        this.refreshPromise = (async () => {\n          try {\n            const response = await client.jwt.refreshToken({\n              refreshToken: refreshToken,\n            });\n            if (!response) {\n              return null;\n            }\n\n            localStorage.setItem(\"accessToken\", response.accessToken);\n            localStorage.setItem(\"refreshToken\", response.refreshToken);\n\n            return response;\n          } finally {\n            this.refreshPromise = null;\n          }\n        })();\n      }\n\n      const refreshed = await this.refreshPromise;\n      if (!refreshed) {\n        return;\n      }\n\n      const headerName = this.options?.headerName ?? \"Authorization\";\n      ctx.init.headers = {\n        ...ctx.init.headers,\n        [headerName]: `Bearer ${refreshed.accessToken}`,\n      };\n\n      return \"retry\";\n    });\n\n    return {};\n  }\n}\n","import { parse } from \"cookie\";\n\nimport type { FetchContext, Plugin } from \"@/types\";\nimport type { CSRFPluginOptions } from \"./types\";\nimport type { AuthulaClient } from \"@/client\";\n\nexport class CSRFPlugin implements Plugin {\n  public readonly id = \"csrf\";\n\n  constructor(private readonly options: CSRFPluginOptions) {}\n\n  public init(client: AuthulaClient) {\n    client.registerBeforeFetch(async (ctx: FetchContext) => {\n      // Client-side\n      if (typeof document !== \"undefined\") {\n        if ([\"OPTIONS\", \"HEAD\", \"GET\"].includes(ctx.init.method || \"GET\")) {\n          return;\n        }\n\n        const cookies = parse(document.cookie);\n        const value = cookies[this.options.cookieName];\n\n        if (!value) return;\n\n        ctx.init.headers = new Headers(ctx.init.headers);\n        ctx.init.headers.set(this.options.headerName, value);\n        return;\n      }\n\n      // SSR\n      if (this.cookies) {\n        if ([\"OPTIONS\", \"HEAD\", \"GET\"].includes(ctx.init.method || \"GET\")) {\n          return;\n        }\n\n        const store = await this.cookies();\n        const cookie = store.get(this.options.cookieName);\n\n        if (!cookie) return;\n\n        ctx.init.headers = new Headers(ctx.init.headers);\n        ctx.init.headers.set(this.options.headerName, cookie.value);\n      }\n    });\n\n    return {};\n  }\n\n  // Injected by client\n  private cookies?: () => Promise<any>;\n  attachCookies(fn: () => Promise<any>) {\n    this.cookies = fn;\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  ChangePasswordRequest,\n  RequestEmailChangeRequest,\n  RequestPasswordResetRequest,\n  SendEmailVerificationRequest,\n  SignInRequest,\n  SignUpRequest,\n} from \"./types\";\n\nexport class EmailPasswordPlugin implements Plugin {\n  public readonly id = \"emailPassword\";\n\n  public init(client: AuthulaClient) {\n    return {\n      signUp: async <T>(data: SignUpRequest): Promise<T> => {\n        return wrappedFetch<T>(client, \"/sign-up\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      signIn: async <T>(data: SignInRequest): Promise<T> => {\n        return wrappedFetch<T>(client, \"/sign-in\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      sendEmailVerification: async (\n        data: SendEmailVerificationRequest,\n      ): Promise<void> => {\n        return wrappedFetch(client, `/send-email-verification`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      requestPasswordReset: async (\n        data: RequestPasswordResetRequest,\n      ): Promise<void> => {\n        return wrappedFetch(client, `/request-password-reset`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      changePassword: async (data: ChangePasswordRequest): Promise<void> => {\n        return wrappedFetch(client, `/change-password`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      requestEmailChange: async (\n        data: RequestEmailChangeRequest,\n      ): Promise<void> => {\n        return wrappedFetch(client, `/request-email-change`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  JWKSKey,\n  TokenRefreshRequest,\n  TokenRefreshResponse,\n} from \"./types\";\n\nexport class JWTPlugin implements Plugin {\n  public readonly id = \"jwt\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      refreshToken: async (\n        data: TokenRefreshRequest,\n      ): Promise<TokenRefreshResponse> => {\n        return wrappedFetch(client, \"/token/refresh\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getJWKSKeys: async (): Promise<Array<JWKSKey>> => {\n        return wrappedFetch(client, \"/.well-known/jwks.json\", {\n          method: \"GET\",\n        });\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  MagicLinkSignInRequest,\n  MagicLinkSignInResponse,\n  MagicLinkExchangeRequest,\n  MagicLinkVerifyRequest,\n  MagicLinkVerifyResponse,\n} from \"./types\";\n\nexport class MagicLinkPlugin implements Plugin {\n  public readonly id = \"magicLink\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      signIn: async (\n        data: MagicLinkSignInRequest,\n      ): Promise<MagicLinkSignInResponse> => {\n        return wrappedFetch(client, \"/magic-link/sign-in\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      verify: async (\n        data: MagicLinkVerifyRequest,\n      ): Promise<MagicLinkVerifyResponse> => {\n        const searchParams = new URLSearchParams();\n        searchParams.append(\"token\", data.token);\n        if (data.callbackUrl) {\n          searchParams.append(\"callback_url\", data.callbackUrl);\n        }\n        return wrappedFetch(\n          client,\n          `/magic-link/verify?${searchParams.toString()}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      exchange: async <T>(data: MagicLinkExchangeRequest): Promise<T> => {\n        return wrappedFetch(client, \"/magic-link/exchange\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types/plugins\";\nimport type {\n  SignInWithOAuth2Request,\n  SignInWithOAuth2Response,\n} from \"./types\";\n\nexport class OAuth2Plugin implements Plugin {\n  public readonly id = \"oauth2\";\n\n  public init(client: AuthulaClient) {\n    return {\n      signIn: async (\n        data: SignInWithOAuth2Request,\n      ): Promise<SignInWithOAuth2Response> => {\n        return wrappedFetch(\n          client,\n          `/oauth2/authorize/${data.provider}?redirect_to=${data.redirectTo}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n    };\n  }\n}\n"],"mappings":";;;;;;AA6CA,IAAa,cAAb,MAA2C;CACzC,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GAGL,YAAY,OACV,SACgC;AAChC,WAAOA,2BAAa,QAAQ,gBAAgB;KAC1C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,aAAa,OAAO,UAAiD;IACnE,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,QAAI,MACF,iBAAgB,OAAO,SAAS,MAAM,UAAU,CAAC;AAKnD,WAAOA,2BAAa,QAAQ,eAHb,gBAAgB,UAAU,GACrC,IAAI,gBAAgB,UAAU,KAC9B,MACiD,EACnD,QAAQ,OACT,CAAC;;GAEJ,aAAa,OAAO,WAAiD;AACnE,WAAOA,2BAAa,QAAQ,gBAAgB,UAAU,EACpD,QAAQ,OACT,CAAC;;GAEJ,YAAY,OACV,QACA,SACgC;AAChC,WAAOA,2BAAa,QAAQ,gBAAgB,UAAU;KACpD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,YAAY,OAAO,WAAgD;AACjE,WAAOA,2BAAa,QAAQ,gBAAgB,UAAU,EACpD,QAAQ,UACT,CAAC;;GAKJ,eAAe,OACb,QACA,SACmC;AACnC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,YAAY;KAC7D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,iBAAiB,OACf,WACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,YAAY,EAC7D,QAAQ,OACT,CAAC;;GAEJ,gBAAgB,OAAO,OAAgD;AACrE,WAAOA,2BAAa,QAAQ,mBAAmB,MAAM,EACnD,QAAQ,OACT,CAAC;;GAEJ,eAAe,OACb,IACA,SACmC;AACnC,WAAOA,2BAAa,QAAQ,mBAAmB,MAAM;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,eAAe,OAAO,OAA+C;AACnE,WAAOA,2BAAa,QAAQ,mBAAmB,MAAM,EACnD,QAAQ,UACT,CAAC;;GAKJ,cAAc,OAAO,WAAkD;AACrE,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS,EAC1D,QAAQ,OACT,CAAC;;GAEJ,iBAAiB,OACf,QACA,SACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS;KAC1D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,iBAAiB,OACf,QACA,SACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS;KAC1D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,iBAAiB,OACf,WACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS,EAC1D,QAAQ,UACT,CAAC;;GAEJ,qBAAqB,YAAkD;AACrE,WAAOA,2BAAa,QAAQ,8BAA8B,EACxD,QAAQ,OACT,CAAC;;GAEJ,SAAS,OACP,QACA,SAC6B;AAC7B,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,OAAO;KACxD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,WAAW,OAAO,WAA+C;AAC/D,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS,EAC1D,QAAQ,QACT,CAAC;;GAEJ,sBAAsB,OACpB,WAC0C;AAC1C,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,YAAY,EAC7D,QAAQ,OACT,CAAC;;GAKJ,iBAAiB,OACf,cACqC;AACrC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS,EAChE,QAAQ,OACT,CAAC;;GAEJ,oBAAoB,OAClB,WACA,SACwC;AACxC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS;KAChE,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,oBAAoB,OAClB,WACA,SACwC;AACxC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS;KAChE,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,oBAAoB,OAClB,cACwC;AACxC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS,EAChE,QAAQ,UACT,CAAC;;GAEJ,yBACE,YAAsD;AACpD,WAAOA,2BAAa,QAAQ,kCAAkC,EAC5D,QAAQ,OACT,CAAC;;GAEN,eAAe,OACb,WACA,SACmC;AACnC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,UAAU;KACjE,QAAQ;KACR,MAAM;KACP,CAAC;;GAKJ,sBAAsB,YAAmD;AACvE,WAAOA,2BAAa,QAAQ,yBAAyB,EACnD,QAAQ,OACT,CAAC;;GAEJ,sBAAsB,OACpB,oBAC0C;AAC1C,WAAOA,2BACL,QACA,yBAAyB,mBACzB,EACE,QAAQ,OACT,CACF;;GAEH,oBAAoB,OAClB,SACwC;AACxC,WAAOA,2BAAa,QAAQ,yBAAyB;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,mBAAmB,OACjB,oBACuC;AACvC,WAAOA,2BACL,QACA,yBAAyB,gBAAgB,QACzC,EACE,QAAQ,QACT,CACF;;GAEJ;;;;;;AC9QL,MAAa,uBAAuBC,MAAE,OAAO;CAC3C,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,UAAUA,MAAE,SAAS;CACrB,UAAUA,MAAE,IAAI,UAAU,CAAC,UAAU;CACrC,aAAaA,MAAE,IAAI,UAAU,CAAC,UAAU;CACxC,cAAcA,MAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgBA,MAAE,QAAQ,CAAC,UAAU;CACrC,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;AAGF,MAAa,0BAA0BA,MAAE,OAAO;CAC9C,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,IAAI,UAAU,CAAC,UAAU;CACtC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,oBAAoBA,MAAE,QAAQ,CAAC,UAAU;CACzC,qBAAqBA,MAAE,QAAQ,CAAC,UAAU;CAC1C,wBAAwBA,MAAE,IAAI,UAAU,CAAC,UAAU;CACnD,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;AAGF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,SAASC;CACT,OAAO,wBAAwB,UAAU;CAC1C,CAAC;AAGF,MAAa,sBAAsBD,MAAE,OAAO;CAC1C,IAAIA,MAAE,QAAQ,CAAC,UAAU;CACzB,aAAaA,MAAE,QAAQ,CAAC,UAAU;CAClC,cAAcA,MAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgBA,MAAE,QAAQ,CAAC,UAAU;CACrC,wBAAwBA,MAAE,QAAQ,CAAC,UAAU;CAC7C,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC3B,SAASA,MAAE,IAAI,UAAU,CAAC,UAAU;CACpC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;;;;AC/CF,IAAa,eAAb,MAA4C;CAC1C,AAAgB,KAAK;CACrB,AAAQ,iBAAsC;CAE9C,YAAY,AAAiB,SAA+B;EAA/B;;CAE7B,AAAO,KAAK,QAAwC;AAClD,SAAO,oBAAoB,OAAO,QAAsB;AACtD,OAAI,OAAO,aAAa,YACtB;GAGF,MAAM,aAAa,KAAK,SAAS,cAAc;GAC/C,MAAM,QAAQ,aAAa,QAAQ,cAAc;AACjD,OAAI,MACF,KAAI,KAAK,UAAU;IACjB,GAAG,IAAI,KAAK;KACX,aAAa,UAAU;IACzB;IAEH;AAEF,SAAO,mBAAmB,OAAO,KAAmB,QAAkB;AACpE,OAAI,OAAO,aAAa,YACtB;AAEF,OAAI,IAAI,WAAW,IACjB;AAEF,OAAI,IAAI,KAAK,MACX;GAGF,MAAM,eAAe,aAAa,QAAQ,eAAe;AACzD,OAAI,CAAC,aACH;AAGF,OAAI,CAAC,OAAO,KAAK;AACf,YAAQ,KAAK,mDAAmD;AAChE;;AAIF,OAAI,CAAC,KAAK,eACR,MAAK,kBAAkB,YAAY;AACjC,QAAI;KACF,MAAM,WAAW,MAAM,OAAO,IAAI,aAAa,EAC/B,cACf,CAAC;AACF,SAAI,CAAC,SACH,QAAO;AAGT,kBAAa,QAAQ,eAAe,SAAS,YAAY;AACzD,kBAAa,QAAQ,gBAAgB,SAAS,aAAa;AAE3D,YAAO;cACC;AACR,UAAK,iBAAiB;;OAEtB;GAGN,MAAM,YAAY,MAAM,KAAK;AAC7B,OAAI,CAAC,UACH;GAGF,MAAM,aAAa,KAAK,SAAS,cAAc;AAC/C,OAAI,KAAK,UAAU;IACjB,GAAG,IAAI,KAAK;KACX,aAAa,UAAU,UAAU;IACnC;AAED,UAAO;IACP;AAEF,SAAO,EAAE;;;;;;AC7Eb,IAAa,aAAb,MAA0C;CACxC,AAAgB,KAAK;CAErB,YAAY,AAAiB,SAA4B;EAA5B;;CAE7B,AAAO,KAAK,QAAuB;AACjC,SAAO,oBAAoB,OAAO,QAAsB;AAEtD,OAAI,OAAO,aAAa,aAAa;AACnC,QAAI;KAAC;KAAW;KAAQ;KAAM,CAAC,SAAS,IAAI,KAAK,UAAU,MAAM,CAC/D;IAIF,MAAM,0BADgB,SAAS,OAAO,CAChB,KAAK,QAAQ;AAEnC,QAAI,CAAC,MAAO;AAEZ,QAAI,KAAK,UAAU,IAAI,QAAQ,IAAI,KAAK,QAAQ;AAChD,QAAI,KAAK,QAAQ,IAAI,KAAK,QAAQ,YAAY,MAAM;AACpD;;AAIF,OAAI,KAAK,SAAS;AAChB,QAAI;KAAC;KAAW;KAAQ;KAAM,CAAC,SAAS,IAAI,KAAK,UAAU,MAAM,CAC/D;IAIF,MAAME,YADQ,MAAM,KAAK,SAAS,EACb,IAAI,KAAK,QAAQ,WAAW;AAEjD,QAAI,CAACA,SAAQ;AAEb,QAAI,KAAK,UAAU,IAAI,QAAQ,IAAI,KAAK,QAAQ;AAChD,QAAI,KAAK,QAAQ,IAAI,KAAK,QAAQ,YAAYA,SAAO,MAAM;;IAE7D;AAEF,SAAO,EAAE;;CAIX,AAAQ;CACR,cAAc,IAAwB;AACpC,OAAK,UAAU;;;;;;ACvCnB,IAAa,sBAAb,MAAmD;CACjD,AAAgB,KAAK;CAErB,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,QAAQ,OAAU,SAAoC;AACpD,WAAOC,2BAAgB,QAAQ,YAAY;KACzC,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,QAAQ,OAAU,SAAoC;AACpD,WAAOA,2BAAgB,QAAQ,YAAY;KACzC,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,uBAAuB,OACrB,SACkB;AAClB,WAAOA,2BAAa,QAAQ,4BAA4B;KACtD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,sBAAsB,OACpB,SACkB;AAClB,WAAOA,2BAAa,QAAQ,2BAA2B;KACrD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,gBAAgB,OAAO,SAA+C;AACpE,WAAOA,2BAAa,QAAQ,oBAAoB;KAC9C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,oBAAoB,OAClB,SACkB;AAClB,WAAOA,2BAAa,QAAQ,yBAAyB;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEL;;;;;;AClDL,IAAa,YAAb,MAAyC;CACvC,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,cAAc,OACZ,SACkC;AAClC,WAAOC,2BAAa,QAAQ,kBAAkB;KAC5C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,aAAa,YAAqC;AAChD,WAAOA,2BAAa,QAAQ,0BAA0B,EACpD,QAAQ,OACT,CAAC;;GAEL;;;;;;AClBL,IAAa,kBAAb,MAA+C;CAC7C,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,QAAQ,OACN,SACqC;AACrC,WAAOC,2BAAa,QAAQ,uBAAuB;KACjD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,QAAQ,OACN,SACqC;IACrC,MAAM,eAAe,IAAI,iBAAiB;AAC1C,iBAAa,OAAO,SAAS,KAAK,MAAM;AACxC,QAAI,KAAK,YACP,cAAa,OAAO,gBAAgB,KAAK,YAAY;AAEvD,WAAOA,2BACL,QACA,sBAAsB,aAAa,UAAU,IAC7C,EACE,QAAQ,OACT,CACF;;GAEH,UAAU,OAAU,SAA+C;AACjE,WAAOA,2BAAa,QAAQ,wBAAwB;KAClD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEL;;;;;;ACxCL,IAAa,eAAb,MAA4C;CAC1C,AAAgB,KAAK;CAErB,AAAO,KAAK,QAAuB;AACjC,SAAO,EACL,QAAQ,OACN,SACsC;AACtC,UAAOC,2BACL,QACA,qBAAqB,KAAK,SAAS,eAAe,KAAK,cACvD,EACE,QAAQ,OACT,CACF;KAEJ"}
+{"version":3,"file":"index.cjs","names":["wrappedFetch","z","sessionSchema","wrappedFetch","z","cookie","wrappedFetch","wrappedFetch","wrappedFetch","wrappedFetch","wrappedFetch"],"sources":["../../src/plugins/admin/plugin.ts","../../src/plugins/admin/types.ts","../../src/plugins/access-control/plugin.ts","../../src/plugins/access-control/types.ts","../../src/plugins/bearer/plugin.ts","../../src/plugins/csrf/plugin.ts","../../src/plugins/email-password/plugin.ts","../../src/plugins/jwt/plugin.ts","../../src/plugins/magic-link/plugin.ts","../../src/plugins/oauth2/plugin.ts","../../src/plugins/totp/plugin.ts"],"sourcesContent":["import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  BanUserRequest,\n  BanUserResponse,\n  CreateUserRequest,\n  CreateUserResponse,\n  DeleteSessionStateResponse,\n  DeleteUserStateResponse,\n  StopImpersonationResponse,\n  GetAllImpersonationsResponse,\n  GetAllUsersResponse,\n  GetBannedUserStatesResponse,\n  GetImpersonationByIdResponse,\n  GetRevokedSessionStatesResponse,\n  GetSessionStateResponse,\n  GetUserAdminSessionsResponse,\n  GetUserByIdResponse,\n  GetUserStateResponse,\n  RevokeSessionRequest,\n  RevokeSessionResponse,\n  StartImpersonationRequest,\n  StartImpersonationResponse,\n  UnbanUserResponse,\n  UpdateUserRequest,\n  UpdateUserResponse,\n  DeleteUserResponse,\n  CreateAccountRequest,\n  CreateAccountResponse,\n  GetUserAccountsResponse,\n  GetAccountByIdResponse,\n  UpdateAccountRequest,\n  UpdateAccountResponse,\n  DeleteAccountResponse,\n  CreateUserStateRequest,\n  CreateUserStateResponse,\n  UpdateUserStateRequest,\n  UpdateUserStateResponse,\n  CreateSessionStateRequest,\n  CreateSessionStateResponse,\n  UpdateSessionStateRequest,\n  UpdateSessionStateResponse,\n} from \"./types\";\n\nexport class AdminPlugin implements Plugin {\n  public readonly id = \"admin\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      // User management\n\n      createUser: async (\n        data: CreateUserRequest,\n      ): Promise<CreateUserResponse> => {\n        return wrappedFetch(client, \"/admin/users\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getAllUsers: async (limit?: number): Promise<GetAllUsersResponse> => {\n        const urlSearchParams = new URLSearchParams();\n        if (limit) {\n          urlSearchParams.append(\"limit\", limit.toString());\n        }\n        const params = urlSearchParams.toString()\n          ? `?${urlSearchParams.toString()}`\n          : \"\";\n        return wrappedFetch(client, `/admin/users${params}`, {\n          method: \"GET\",\n        });\n      },\n      getUserById: async (userId: string): Promise<GetUserByIdResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}`, {\n          method: \"GET\",\n        });\n      },\n      updateUser: async (\n        userId: string,\n        data: UpdateUserRequest,\n      ): Promise<UpdateUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteUser: async (userId: string): Promise<DeleteUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}`, {\n          method: \"DELETE\",\n        });\n      },\n\n      // Account management\n\n      createAccount: async (\n        userId: string,\n        data: CreateAccountRequest,\n      ): Promise<CreateAccountResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/accounts`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getUserAccounts: async (\n        userId: string,\n      ): Promise<GetUserAccountsResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/accounts`, {\n          method: \"GET\",\n        });\n      },\n      getAccountById: async (id: string): Promise<GetAccountByIdResponse> => {\n        return wrappedFetch(client, `/admin/accounts/${id}`, {\n          method: \"GET\",\n        });\n      },\n      updateAccount: async (\n        id: string,\n        data: UpdateAccountRequest,\n      ): Promise<UpdateAccountResponse> => {\n        return wrappedFetch(client, `/admin/accounts/${id}`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteAccount: async (id: string): Promise<DeleteAccountResponse> => {\n        return wrappedFetch(client, `/admin/accounts/${id}`, {\n          method: \"DELETE\",\n        });\n      },\n\n      // User state management\n\n      getUserState: async (userId: string): Promise<GetUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"GET\",\n        });\n      },\n      createUserState: async (\n        userId: string,\n        data: CreateUserStateRequest,\n      ): Promise<CreateUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      updateUserState: async (\n        userId: string,\n        data: UpdateUserStateRequest,\n      ): Promise<UpdateUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteUserState: async (\n        userId: string,\n      ): Promise<DeleteUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"DELETE\",\n        });\n      },\n      getBannedUserStates: async (): Promise<GetBannedUserStatesResponse> => {\n        return wrappedFetch(client, `/admin/users/states/banned`, {\n          method: \"GET\",\n        });\n      },\n      banUser: async (\n        userId: string,\n        data: BanUserRequest,\n      ): Promise<BanUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/ban`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      unbanUser: async (userId: string): Promise<UnbanUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/unban`, {\n          method: \"POST\",\n        });\n      },\n      getUserAdminSessions: async (\n        userId: string,\n      ): Promise<GetUserAdminSessionsResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/sessions`, {\n          method: \"GET\",\n        });\n      },\n\n      // Session state management\n\n      getSessionState: async (\n        sessionId: string,\n      ): Promise<GetSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"GET\",\n        });\n      },\n      createSessionState: async (\n        sessionId: string,\n        data: CreateSessionStateRequest,\n      ): Promise<CreateSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      updateSessionState: async (\n        sessionId: string,\n        data: UpdateSessionStateRequest,\n      ): Promise<UpdateSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteSessionState: async (\n        sessionId: string,\n      ): Promise<DeleteSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"DELETE\",\n        });\n      },\n      getRevokedSessionStates:\n        async (): Promise<GetRevokedSessionStatesResponse> => {\n          return wrappedFetch(client, `/admin/sessions/states/revoked`, {\n            method: \"GET\",\n          });\n        },\n      revokeSession: async (\n        sessionId: string,\n        data: RevokeSessionRequest,\n      ): Promise<RevokeSessionResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/revoke`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n\n      // Impersonations\n\n      getAllImpersonations: async (): Promise<GetAllImpersonationsResponse> => {\n        return wrappedFetch(client, \"/admin/impersonations\", {\n          method: \"GET\",\n        });\n      },\n      getImpersonationById: async (\n        impersonationId: string,\n      ): Promise<GetImpersonationByIdResponse> => {\n        return wrappedFetch(\n          client,\n          `/admin/impersonations/${impersonationId}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      startImpersonation: async (\n        data: StartImpersonationRequest,\n      ): Promise<StartImpersonationResponse> => {\n        return wrappedFetch(client, \"/admin/impersonations\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      stopImpersonation: async (\n        impersonationId: string,\n      ): Promise<StopImpersonationResponse> => {\n        return wrappedFetch(\n          client,\n          `/admin/impersonations/${impersonationId}/stop`,\n          {\n            method: \"POST\",\n          },\n        );\n      },\n    };\n  }\n}\n","import { z } from \"zod\";\n\nimport { sessionSchema, type Account, type User } from \"@/types\";\n\n// ------------------------------\n// SCHEMAS\n// ------------------------------\n\nexport const adminUserStateSchema = z.object({\n  userId: z.string().nonempty(),\n  isBanned: z.boolean(),\n  bannedAt: z.iso.datetime().nullable(),\n  bannedUntil: z.iso.datetime().nullable(),\n  bannedReason: z.string().nullable(),\n  bannedByUserId: z.string().nullable(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type AdminUserState = z.infer<typeof adminUserStateSchema>;\n\nexport const adminSessionStateSchema = z.object({\n  sessionId: z.string().nonempty(),\n  revokedAt: z.iso.datetime().nullable(),\n  revokedReason: z.string().nullable(),\n  revokedByUserId: z.string().nullable(),\n  impersonatorUserId: z.string().nullable(),\n  impersonationReason: z.string().nullable(),\n  impersonationExpiresAt: z.iso.datetime().nullable(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type AdminSessionState = z.infer<typeof adminSessionStateSchema>;\n\nexport const adminUserSessionSchema = z.object({\n  session: sessionSchema,\n  state: adminSessionStateSchema.nullable(),\n});\nexport type AdminUserSession = z.infer<typeof adminUserSessionSchema>;\n\nexport const impersonationSchema = z.object({\n  id: z.string().nonempty(),\n  actorUserId: z.string().nonempty(),\n  targetUserId: z.string().nonempty(),\n  actorSessionId: z.string().nullable(),\n  impersonationSessionId: z.string().nullable(),\n  reason: z.string().nonempty(),\n  startedAt: z.iso.datetime(),\n  expiresAt: z.iso.datetime(),\n  endedAt: z.iso.datetime().nullable(),\n  endedByUserId: z.string().nullable(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type Impersonation = z.infer<typeof impersonationSchema>;\n\n// ------------------------------\n// API response types\n// ------------------------------\n\n// User management\n\nexport type CreateUserRequest = {\n  name: string;\n  email: string;\n  emailVerified?: boolean;\n  image?: string;\n  metadata?: Record<string, unknown>;\n};\n\nexport type CreateUserResponse = {\n  user: User;\n};\n\nexport type GetAllUsersResponse = {\n  users: Array<User>;\n  nextCursor?: string | null;\n};\n\nexport type GetUserByIdResponse = {\n  user: User;\n};\n\nexport type UpdateUserRequest = {\n  name?: string;\n  email?: string;\n  emailVerified?: boolean;\n  image?: string;\n  metadata?: Record<string, unknown>;\n};\n\nexport type UpdateUserResponse = {\n  user: User;\n};\n\nexport type DeleteUserResponse = {\n  message: string;\n};\n\n// Account management\n\nexport type CreateAccountRequest = {\n  providerId: string;\n  accountId: string;\n  accessToken?: string;\n  refreshToken?: string;\n  idToken?: string;\n  accessTokenExpiresAt?: string;\n  refreshTokenExpiresAt?: string;\n  scope?: string;\n  password?: string;\n};\n\nexport type CreateAccountResponse = {\n  account: Account;\n};\n\nexport type GetUserAccountsResponse = {\n  accounts: Array<Account>;\n};\n\nexport type GetAccountByIdResponse = {\n  account: Account;\n};\n\nexport type UpdateAccountRequest = {\n  providerId?: string;\n  accountId?: string;\n  accessToken?: string;\n  refreshToken?: string;\n  idToken?: string;\n  accessTokenExpiresAt?: string;\n  refreshTokenExpiresAt?: string;\n  scope?: string;\n  password?: string;\n};\n\nexport type UpdateAccountResponse = {\n  account: Account;\n};\n\nexport type DeleteAccountResponse = {\n  message: string;\n};\n\n// User state management\n\nexport type GetUserStateResponse = {\n  state: AdminUserState;\n};\n\nexport type CreateUserStateRequest = {\n  banned: boolean;\n  bannedUntil?: string;\n  bannedReason?: string;\n};\n\nexport type UpdateUserStateRequest = {\n  banned: boolean;\n  bannedUntil?: string;\n  bannedReason?: string;\n};\n\nexport type CreateUserStateResponse = {\n  userState: AdminUserState;\n};\n\nexport type UpdateUserStateResponse = {\n  userState: AdminUserState;\n};\n\nexport type DeleteUserStateResponse = {\n  message: string;\n};\n\nexport type GetBannedUserStatesResponse = Array<AdminUserState>;\n\nexport type BanUserRequest = {\n  bannedUntil?: string;\n  reason?: string;\n};\n\nexport type BanUserResponse = {\n  state: AdminUserState;\n};\n\nexport type UnbanUserResponse = {\n  state: AdminUserState;\n};\n\nexport type GetUserAdminSessionsResponse = Array<AdminUserSession>;\n\n// Session state management\n\nexport type GetSessionStateResponse = {\n  state: AdminSessionState;\n};\n\nexport type CreateSessionStateRequest = {\n  revoke: boolean;\n  revokedReason?: string;\n  impersonatorUserId?: string;\n  impersonationReason?: string;\n  impersonationExpiresAt?: string;\n};\n\nexport type UpdateSessionStateRequest = {\n  revoke: boolean;\n  revokedReason?: string;\n  impersonatorUserId?: string;\n  impersonationReason?: string;\n  impersonationExpiresAt?: string;\n};\n\nexport type CreateSessionStateResponse = {\n  state: AdminSessionState;\n};\n\nexport type UpdateSessionStateResponse = {\n  state: AdminSessionState;\n};\n\nexport type DeleteSessionStateResponse = {\n  message: string;\n};\n\nexport type GetRevokedSessionStatesResponse = Array<AdminSessionState>;\n\nexport type RevokeSessionRequest = {\n  reason?: string;\n};\n\nexport type RevokeSessionResponse = {\n  sessionState: AdminSessionState;\n};\n\n// Impersonation\n\nexport type GetAllImpersonationsResponse = Array<Impersonation>;\n\nexport type GetImpersonationByIdResponse = {\n  impersonation: Impersonation;\n};\n\nexport type StartImpersonationRequest = {\n  targetUserId: string;\n  reason: string;\n  expiresInSeconds?: number;\n};\n\nexport type StartImpersonationResponse = {\n  impersonation: Impersonation;\n};\n\nexport type StopImpersonationResponse = {\n  message: string;\n};\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  AddRolePermissionRequest,\n  AddRolePermissionResponse,\n  AssignUserRoleRequest,\n  AssignUserRoleResponse,\n  CheckUserPermissionsRequest,\n  CheckUserPermissionsResponse,\n  CreatePermissionRequest,\n  CreatePermissionResponse,\n  CreateRoleRequest,\n  CreateRoleResponse,\n  DeletePermissionResponse,\n  DeleteRoleResponse,\n  GetUserPermissionsResponse,\n  RoleDetails,\n  Permission,\n  UserPermissionInfo,\n  UserRoleInfo,\n  RemoveRolePermissionResponse,\n  RemoveUserRoleResponse,\n  ReplaceRolePermissionResponse,\n  ReplaceRolePermissionsRequest,\n  ReplaceUserRolesRequest,\n  ReplaceUserRolesResponse,\n  Role,\n  UpdatePermissionRequest,\n  UpdatePermissionResponse,\n  UpdateRoleRequest,\n  UpdateRoleResponse,\n} from \"./types\";\n\nexport class AccessControlPlugin implements Plugin {\n  public readonly id = \"accessControl\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      // Roles\n      createRole: async (\n        data: CreateRoleRequest,\n      ): Promise<CreateRoleResponse> => {\n        return wrappedFetch(client, `/access-control/roles`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getAllRoles: async (): Promise<Role[]> => {\n        return wrappedFetch(client, `/access-control/roles`, {\n          method: \"GET\",\n        });\n      },\n      getRoleByName: async (roleName: string): Promise<Role> => {\n        return wrappedFetch(\n          client,\n          `/access-control/roles/by-name/${roleName}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      getRoleById: async (roleId: string): Promise<RoleDetails> => {\n        return wrappedFetch(client, `/access-control/roles/${roleId}`, {\n          method: \"GET\",\n        });\n      },\n      updateRole: async (\n        roleId: string,\n        data: UpdateRoleRequest,\n      ): Promise<UpdateRoleResponse> => {\n        return wrappedFetch(client, `/access-control/roles/${roleId}`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteRole: async (roleId: string): Promise<DeleteRoleResponse> => {\n        return wrappedFetch(client, `/access-control/roles/${roleId}`, {\n          method: \"DELETE\",\n        });\n      },\n\n      // Permissions\n      createPermission: async (\n        data: CreatePermissionRequest,\n      ): Promise<CreatePermissionResponse> => {\n        return wrappedFetch(client, `/access-control/permissions`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getAllPermissions: async (): Promise<Permission[]> => {\n        return wrappedFetch(client, `/access-control/permissions`, {\n          method: \"GET\",\n        });\n      },\n      getPermissionById: async (permissionId: string): Promise<Permission> => {\n        return wrappedFetch(\n          client,\n          `/access-control/permissions/${permissionId}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      updatePermission: async (\n        permissionId: string,\n        data: UpdatePermissionRequest,\n      ): Promise<UpdatePermissionResponse> => {\n        return wrappedFetch(\n          client,\n          `/access-control/permissions/${permissionId}`,\n          {\n            method: \"PATCH\",\n            body: data,\n          },\n        );\n      },\n      deletePermission: async (\n        permissionId: string,\n      ): Promise<DeletePermissionResponse> => {\n        return wrappedFetch(\n          client,\n          `/access-control/permissions/${permissionId}`,\n          {\n            method: \"DELETE\",\n          },\n        );\n      },\n\n      // Role Permissions\n      addRolePermission: async (\n        roleId: string,\n        data: AddRolePermissionRequest,\n      ): Promise<AddRolePermissionResponse> => {\n        return wrappedFetch(\n          client,\n          `/access-control/roles/${roleId}/permissions`,\n          {\n            method: \"POST\",\n            body: data,\n          },\n        );\n      },\n      getRolePermissions: async (\n        roleId: string,\n      ): Promise<UserPermissionInfo[]> => {\n        return wrappedFetch(\n          client,\n          `/access-control/roles/${roleId}/permissions`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      replaceRolePermissions: async (\n        roleId: string,\n        data: ReplaceRolePermissionsRequest,\n      ): Promise<ReplaceRolePermissionResponse> => {\n        return wrappedFetch(\n          client,\n          `/access-control/roles/${roleId}/permissions`,\n          {\n            method: \"PUT\",\n            body: data,\n          },\n        );\n      },\n      removeRolePermission: async (\n        roleId: string,\n        permissionId: string,\n      ): Promise<RemoveRolePermissionResponse> => {\n        return wrappedFetch(\n          client,\n          `/access-control/roles/${roleId}/permissions/${permissionId}`,\n          {\n            method: \"DELETE\",\n          },\n        );\n      },\n\n      // User Roles\n      getUserRoles: async (userId: string): Promise<UserRoleInfo[]> => {\n        return wrappedFetch(client, `/access-control/users/${userId}/roles`, {\n          method: \"GET\",\n        });\n      },\n      assignUserRole: async (\n        userId: string,\n        data: AssignUserRoleRequest,\n      ): Promise<AssignUserRoleResponse> => {\n        return wrappedFetch(client, `/access-control/users/${userId}/roles`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      replaceUserRoles: async (\n        userId: string,\n        data: ReplaceUserRolesRequest,\n      ): Promise<ReplaceUserRolesResponse> => {\n        return wrappedFetch(client, `/access-control/users/${userId}/roles`, {\n          method: \"PUT\",\n          body: data,\n        });\n      },\n      removeUserRole: async (\n        userId: string,\n        roleId: string,\n      ): Promise<RemoveUserRoleResponse> => {\n        return wrappedFetch(\n          client,\n          `/access-control/users/${userId}/roles/${roleId}`,\n          {\n            method: \"DELETE\",\n          },\n        );\n      },\n\n      // User Permissions\n      getUserPermissions: async (\n        userId: string,\n      ): Promise<GetUserPermissionsResponse> => {\n        return wrappedFetch(\n          client,\n          `/access-control/users/${userId}/permissions`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      checkUserPermissions: async (\n        userId: string,\n        data: CheckUserPermissionsRequest,\n      ): Promise<CheckUserPermissionsResponse> => {\n        return wrappedFetch(\n          client,\n          `/access-control/users/${userId}/permissions/check`,\n          {\n            method: \"POST\",\n            body: data,\n          },\n        );\n      },\n    };\n  }\n}\n","import { z } from \"zod\";\n\nimport type { User } from \"@/types\";\n\nexport const roleSchema = z.object({\n  id: z.string().nonempty(),\n  name: z.string().nonempty(),\n  description: z.string().nullish(),\n  isSystem: z.boolean(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type Role = z.infer<typeof roleSchema>;\n\nexport const permissionSchema = z.object({\n  id: z.string().nonempty(),\n  key: z.string().nonempty(),\n  description: z.string().nullish(),\n  isSystem: z.boolean(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type Permission = z.infer<typeof permissionSchema>;\n\nexport const permissionGrantSourceSchema = z.object({\n  roleId: z.string().nonempty(),\n  roleName: z.string().nonempty(),\n  grantedByUserId: z.string().nullish(),\n  grantedAt: z.iso.datetime().nullish(),\n});\nexport type PermissionGrantSource = z.infer<typeof permissionGrantSourceSchema>;\n\nexport const userPermissionInfoSchema = z.object({\n  permissionId: z.string().nonempty(),\n  permissionKey: z.string().nonempty(),\n  permissionDescription: z.string().nullish(),\n  grantedByUserId: z.string().nullish(),\n  grantedAt: z.iso.datetime().nullish(),\n  sources: z.array(permissionGrantSourceSchema).optional(),\n});\nexport type UserPermissionInfo = z.infer<typeof userPermissionInfoSchema>;\n\nexport const userRoleInfoSchema = z.object({\n  roleId: z.string().nonempty(),\n  roleName: z.string().nonempty(),\n  roleDescription: z.string().nullish(),\n  assignedByUserId: z.string().nullish(),\n  assignedAt: z.iso.datetime().nullish(),\n  expiresAt: z.iso.datetime().nullish(),\n});\nexport type UserRoleInfo = z.infer<typeof userRoleInfoSchema>;\n\nexport const roleDetailsSchema = z.object({\n  role: roleSchema,\n  permissions: z.array(userPermissionInfoSchema),\n});\nexport type RoleDetails = z.infer<typeof roleDetailsSchema>;\n\nexport const getUserPermissionsResponseSchema = z.object({\n  permissions: z.array(userPermissionInfoSchema),\n});\nexport type GetUserPermissionsResponse = z.infer<\n  typeof getUserPermissionsResponseSchema\n>;\n\nexport const checkUserPermissionsResponseSchema = z.object({\n  hasPermissions: z.boolean(),\n});\nexport type CheckUserPermissionsResponse = z.infer<\n  typeof checkUserPermissionsResponseSchema\n>;\n\nexport type CreateRoleRequest = {\n  name: string;\n  description?: string | null;\n  isSystem: boolean;\n};\n\nexport type CreateRoleResponse = {\n  role: Role;\n};\n\nexport type UpdateRoleRequest = {\n  name?: string | null;\n  description?: string | null;\n};\n\nexport type UpdateRoleResponse = {\n  role: Role;\n};\n\nexport type DeleteRoleResponse = {\n  message: string;\n};\n\nexport type CreatePermissionRequest = {\n  key: string;\n  description?: string | null;\n  isSystem: boolean;\n};\n\nexport type CreatePermissionResponse = {\n  permission: Permission;\n};\n\nexport type UpdatePermissionRequest = {\n  description?: string | null;\n};\n\nexport type UpdatePermissionResponse = {\n  permission: Permission;\n};\n\nexport type DeletePermissionResponse = {\n  message: string;\n};\n\nexport type AddRolePermissionRequest = {\n  permissionId: string;\n};\n\nexport type AddRolePermissionResponse = {\n  message: string;\n};\n\nexport type ReplaceRolePermissionsRequest = {\n  permissionIds: string[];\n};\n\nexport type ReplaceRolePermissionResponse = {\n  message: string;\n};\n\nexport type RemoveRolePermissionResponse = {\n  message: string;\n};\n\nexport type AssignUserRoleRequest = {\n  roleId: string;\n  expiresAt?: string | null;\n};\n\nexport type ReplaceUserRolesRequest = {\n  roleIds: string[];\n};\n\nexport type ReplaceUserRolesResponse = {\n  message: string;\n};\n\nexport type AssignUserRoleResponse = {\n  message: string;\n};\n\nexport type RemoveUserRoleResponse = {\n  message: string;\n};\n\nexport type CheckUserPermissionsRequest = {\n  permissionKeys: string[];\n};\n\nexport type UserWithPermissions = {\n  user: User;\n  permissions: UserPermissionInfo[];\n};\n\nexport type UserAuthorizationProfile = {\n  user: User;\n  roles: UserRoleInfo[];\n  permissions: UserPermissionInfo[];\n};\n\nexport type UserWithRoles = {\n  user: User;\n  roles: UserRoleInfo[];\n};\n","import type { FetchContext, Plugin } from \"@/types\";\nimport type { BearerPluginOptions } from \"./types\";\nimport type { JWTPlugin } from \"../jwt/plugin\";\nimport type { ClientWithPlugins } from \"@/sdk\";\n\nexport class BearerPlugin implements Plugin {\n  public readonly id = \"bearer\";\n  private refreshPromise: Promise<any> | null = null;\n\n  constructor(private readonly options?: BearerPluginOptions) {}\n\n  public init(client: ClientWithPlugins<[JWTPlugin]>) {\n    client.registerBeforeFetch(async (ctx: FetchContext) => {\n      if (typeof document === \"undefined\") {\n        return;\n      }\n\n      const headerName = this.options?.headerName ?? \"Authorization\";\n      const token = localStorage.getItem(\"accessToken\");\n      if (token) {\n        ctx.init.headers = {\n          ...ctx.init.headers,\n          [headerName]: `Bearer ${token}`,\n        };\n      }\n    });\n\n    client.registerAfterFetch(async (ctx: FetchContext, res: Response) => {\n      if (typeof document === \"undefined\") {\n        return;\n      }\n      if (res.status !== 401) {\n        return;\n      }\n      if (ctx.meta.retry) {\n        return;\n      }\n\n      const refreshToken = localStorage.getItem(\"refreshToken\");\n      if (!refreshToken) {\n        return;\n      }\n\n      if (!client.jwt) {\n        console.warn(\"JWT Plugin is required for Bearer token refresh.\");\n        return;\n      }\n\n      // 🔒 SINGLE FLIGHT REFRESH\n      if (!this.refreshPromise) {\n        this.refreshPromise = (async () => {\n          try {\n            const response = await client.jwt.refreshToken({\n              refreshToken: refreshToken,\n            });\n            if (!response) {\n              return null;\n            }\n\n            localStorage.setItem(\"accessToken\", response.accessToken);\n            localStorage.setItem(\"refreshToken\", response.refreshToken);\n\n            return response;\n          } finally {\n            this.refreshPromise = null;\n          }\n        })();\n      }\n\n      const refreshed = await this.refreshPromise;\n      if (!refreshed) {\n        return;\n      }\n\n      const headerName = this.options?.headerName ?? \"Authorization\";\n      ctx.init.headers = {\n        ...ctx.init.headers,\n        [headerName]: `Bearer ${refreshed.accessToken}`,\n      };\n\n      return \"retry\";\n    });\n\n    return {};\n  }\n}\n","import { parse } from \"cookie\";\n\nimport type { FetchContext, Plugin } from \"@/types\";\nimport type { CSRFPluginOptions } from \"./types\";\nimport type { AuthulaClient } from \"@/client\";\n\nexport class CSRFPlugin implements Plugin {\n  public readonly id = \"csrf\";\n\n  constructor(private readonly options: CSRFPluginOptions) {}\n\n  public init(client: AuthulaClient) {\n    client.registerBeforeFetch(async (ctx: FetchContext) => {\n      // Client-side\n      if (typeof document !== \"undefined\") {\n        if ([\"OPTIONS\", \"HEAD\", \"GET\"].includes(ctx.init.method || \"GET\")) {\n          return;\n        }\n\n        const cookies = parse(document.cookie);\n        const value = cookies[this.options.cookieName];\n\n        if (!value) return;\n\n        ctx.init.headers = new Headers(ctx.init.headers);\n        ctx.init.headers.set(this.options.headerName, value);\n        return;\n      }\n\n      // SSR\n      if (this.cookies) {\n        if ([\"OPTIONS\", \"HEAD\", \"GET\"].includes(ctx.init.method || \"GET\")) {\n          return;\n        }\n\n        const store = await this.cookies();\n        const cookie = store.get(this.options.cookieName);\n\n        if (!cookie) return;\n\n        ctx.init.headers = new Headers(ctx.init.headers);\n        ctx.init.headers.set(this.options.headerName, cookie.value);\n      }\n    });\n\n    return {};\n  }\n\n  // Injected by client\n  private cookies?: () => Promise<any>;\n  attachCookies(fn: () => Promise<any>) {\n    this.cookies = fn;\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  ChangePasswordRequest,\n  RequestEmailChangeRequest,\n  RequestPasswordResetRequest,\n  SendEmailVerificationRequest,\n  SignInRequest,\n  SignUpRequest,\n} from \"./types\";\n\nexport class EmailPasswordPlugin implements Plugin {\n  public readonly id = \"emailPassword\";\n\n  public init(client: AuthulaClient) {\n    return {\n      signUp: async <T>(data: SignUpRequest): Promise<T> => {\n        return wrappedFetch<T>(client, \"/sign-up\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      signIn: async <T>(data: SignInRequest): Promise<T> => {\n        return wrappedFetch<T>(client, \"/sign-in\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      sendEmailVerification: async (\n        data: SendEmailVerificationRequest,\n      ): Promise<void> => {\n        return wrappedFetch(client, `/send-email-verification`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      requestPasswordReset: async (\n        data: RequestPasswordResetRequest,\n      ): Promise<void> => {\n        return wrappedFetch(client, `/request-password-reset`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      changePassword: async (data: ChangePasswordRequest): Promise<void> => {\n        return wrappedFetch(client, `/change-password`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      requestEmailChange: async (\n        data: RequestEmailChangeRequest,\n      ): Promise<void> => {\n        return wrappedFetch(client, `/request-email-change`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  JWKSKey,\n  TokenRefreshRequest,\n  TokenRefreshResponse,\n} from \"./types\";\n\nexport class JWTPlugin implements Plugin {\n  public readonly id = \"jwt\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      refreshToken: async (\n        data: TokenRefreshRequest,\n      ): Promise<TokenRefreshResponse> => {\n        return wrappedFetch(client, \"/token/refresh\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getJWKSKeys: async (): Promise<Array<JWKSKey>> => {\n        return wrappedFetch(client, \"/.well-known/jwks.json\", {\n          method: \"GET\",\n        });\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  MagicLinkSignInRequest,\n  MagicLinkSignInResponse,\n  MagicLinkExchangeRequest,\n  MagicLinkVerifyRequest,\n  MagicLinkVerifyResponse,\n} from \"./types\";\n\nexport class MagicLinkPlugin implements Plugin {\n  public readonly id = \"magicLink\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      signIn: async (\n        data: MagicLinkSignInRequest,\n      ): Promise<MagicLinkSignInResponse> => {\n        return wrappedFetch(client, \"/magic-link/sign-in\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      verify: async (\n        data: MagicLinkVerifyRequest,\n      ): Promise<MagicLinkVerifyResponse> => {\n        const searchParams = new URLSearchParams();\n        searchParams.append(\"token\", data.token);\n        if (data.callbackUrl) {\n          searchParams.append(\"callback_url\", data.callbackUrl);\n        }\n        return wrappedFetch(\n          client,\n          `/magic-link/verify?${searchParams.toString()}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      exchange: async <T>(data: MagicLinkExchangeRequest): Promise<T> => {\n        return wrappedFetch(client, \"/magic-link/exchange\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types/plugins\";\nimport type {\n  SignInWithOAuth2Request,\n  SignInWithOAuth2Response,\n} from \"./types\";\n\nexport class OAuth2Plugin implements Plugin {\n  public readonly id = \"oauth2\";\n\n  public init(client: AuthulaClient) {\n    return {\n      signIn: async (\n        data: SignInWithOAuth2Request,\n      ): Promise<SignInWithOAuth2Response> => {\n        return wrappedFetch(\n          client,\n          `/oauth2/authorize/${data.provider}?redirect_to=${data.redirectTo}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types/plugins\";\nimport type {\n  DisableResponse,\n  EnableResponse,\n  GenerateBackupCodesResponse,\n  GetTOTPURIResponse,\n  VerifyBackupCodeRequest,\n  VerifyBackupCodeResponse,\n  VerifyTOTPRequest,\n  VerifyTOTPResponse,\n} from \"./types\";\n\nexport class TOTPPlugin implements Plugin {\n  public readonly id = \"totp\";\n\n  public init(client: AuthulaClient) {\n    return {\n      enable: async (): Promise<EnableResponse> => {\n        return wrappedFetch(client, \"/totp/enable\", {\n          method: \"POST\",\n        });\n      },\n      disable: async (): Promise<DisableResponse> => {\n        return wrappedFetch(client, \"/totp/disable\", {\n          method: \"POST\",\n        });\n      },\n      getUri: async (): Promise<GetTOTPURIResponse> => {\n        return wrappedFetch(client, \"/totp/get-uri\", {\n          method: \"GET\",\n        });\n      },\n      verify: async (data: VerifyTOTPRequest): Promise<VerifyTOTPResponse> => {\n        return wrappedFetch(client, \"/totp/verify\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      verifyBackupCode: async (\n        data: VerifyBackupCodeRequest,\n      ): Promise<VerifyBackupCodeResponse> => {\n        return wrappedFetch(client, \"/totp/verify-backup-code\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      generateBackupCodes: async (): Promise<GenerateBackupCodesResponse> => {\n        return wrappedFetch(client, \"/totp/generate-backup-codes\", {\n          method: \"POST\",\n        });\n      },\n    };\n  }\n}\n"],"mappings":";;;;;;AA6CA,IAAa,cAAb,MAA2C;CACzC,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GAGL,YAAY,OACV,SACgC;AAChC,WAAOA,2BAAa,QAAQ,gBAAgB;KAC1C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,aAAa,OAAO,UAAiD;IACnE,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,QAAI,MACF,iBAAgB,OAAO,SAAS,MAAM,UAAU,CAAC;AAKnD,WAAOA,2BAAa,QAAQ,eAHb,gBAAgB,UAAU,GACrC,IAAI,gBAAgB,UAAU,KAC9B,MACiD,EACnD,QAAQ,OACT,CAAC;;GAEJ,aAAa,OAAO,WAAiD;AACnE,WAAOA,2BAAa,QAAQ,gBAAgB,UAAU,EACpD,QAAQ,OACT,CAAC;;GAEJ,YAAY,OACV,QACA,SACgC;AAChC,WAAOA,2BAAa,QAAQ,gBAAgB,UAAU;KACpD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,YAAY,OAAO,WAAgD;AACjE,WAAOA,2BAAa,QAAQ,gBAAgB,UAAU,EACpD,QAAQ,UACT,CAAC;;GAKJ,eAAe,OACb,QACA,SACmC;AACnC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,YAAY;KAC7D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,iBAAiB,OACf,WACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,YAAY,EAC7D,QAAQ,OACT,CAAC;;GAEJ,gBAAgB,OAAO,OAAgD;AACrE,WAAOA,2BAAa,QAAQ,mBAAmB,MAAM,EACnD,QAAQ,OACT,CAAC;;GAEJ,eAAe,OACb,IACA,SACmC;AACnC,WAAOA,2BAAa,QAAQ,mBAAmB,MAAM;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,eAAe,OAAO,OAA+C;AACnE,WAAOA,2BAAa,QAAQ,mBAAmB,MAAM,EACnD,QAAQ,UACT,CAAC;;GAKJ,cAAc,OAAO,WAAkD;AACrE,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS,EAC1D,QAAQ,OACT,CAAC;;GAEJ,iBAAiB,OACf,QACA,SACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS;KAC1D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,iBAAiB,OACf,QACA,SACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS;KAC1D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,iBAAiB,OACf,WACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS,EAC1D,QAAQ,UACT,CAAC;;GAEJ,qBAAqB,YAAkD;AACrE,WAAOA,2BAAa,QAAQ,8BAA8B,EACxD,QAAQ,OACT,CAAC;;GAEJ,SAAS,OACP,QACA,SAC6B;AAC7B,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,OAAO;KACxD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,WAAW,OAAO,WAA+C;AAC/D,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS,EAC1D,QAAQ,QACT,CAAC;;GAEJ,sBAAsB,OACpB,WAC0C;AAC1C,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,YAAY,EAC7D,QAAQ,OACT,CAAC;;GAKJ,iBAAiB,OACf,cACqC;AACrC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS,EAChE,QAAQ,OACT,CAAC;;GAEJ,oBAAoB,OAClB,WACA,SACwC;AACxC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS;KAChE,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,oBAAoB,OAClB,WACA,SACwC;AACxC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS;KAChE,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,oBAAoB,OAClB,cACwC;AACxC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS,EAChE,QAAQ,UACT,CAAC;;GAEJ,yBACE,YAAsD;AACpD,WAAOA,2BAAa,QAAQ,kCAAkC,EAC5D,QAAQ,OACT,CAAC;;GAEN,eAAe,OACb,WACA,SACmC;AACnC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,UAAU;KACjE,QAAQ;KACR,MAAM;KACP,CAAC;;GAKJ,sBAAsB,YAAmD;AACvE,WAAOA,2BAAa,QAAQ,yBAAyB,EACnD,QAAQ,OACT,CAAC;;GAEJ,sBAAsB,OACpB,oBAC0C;AAC1C,WAAOA,2BACL,QACA,yBAAyB,mBACzB,EACE,QAAQ,OACT,CACF;;GAEH,oBAAoB,OAClB,SACwC;AACxC,WAAOA,2BAAa,QAAQ,yBAAyB;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,mBAAmB,OACjB,oBACuC;AACvC,WAAOA,2BACL,QACA,yBAAyB,gBAAgB,QACzC,EACE,QAAQ,QACT,CACF;;GAEJ;;;;;;AC9QL,MAAa,uBAAuBC,MAAE,OAAO;CAC3C,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,UAAUA,MAAE,SAAS;CACrB,UAAUA,MAAE,IAAI,UAAU,CAAC,UAAU;CACrC,aAAaA,MAAE,IAAI,UAAU,CAAC,UAAU;CACxC,cAAcA,MAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgBA,MAAE,QAAQ,CAAC,UAAU;CACrC,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;AAGF,MAAa,0BAA0BA,MAAE,OAAO;CAC9C,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,IAAI,UAAU,CAAC,UAAU;CACtC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,oBAAoBA,MAAE,QAAQ,CAAC,UAAU;CACzC,qBAAqBA,MAAE,QAAQ,CAAC,UAAU;CAC1C,wBAAwBA,MAAE,IAAI,UAAU,CAAC,UAAU;CACnD,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;AAGF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,SAASC;CACT,OAAO,wBAAwB,UAAU;CAC1C,CAAC;AAGF,MAAa,sBAAsBD,MAAE,OAAO;CAC1C,IAAIA,MAAE,QAAQ,CAAC,UAAU;CACzB,aAAaA,MAAE,QAAQ,CAAC,UAAU;CAClC,cAAcA,MAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgBA,MAAE,QAAQ,CAAC,UAAU;CACrC,wBAAwBA,MAAE,QAAQ,CAAC,UAAU;CAC7C,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC3B,SAASA,MAAE,IAAI,UAAU,CAAC,UAAU;CACpC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;;;;AClBF,IAAa,sBAAb,MAAmD;CACjD,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GAEL,YAAY,OACV,SACgC;AAChC,WAAOE,2BAAa,QAAQ,yBAAyB;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,aAAa,YAA6B;AACxC,WAAOA,2BAAa,QAAQ,yBAAyB,EACnD,QAAQ,OACT,CAAC;;GAEJ,eAAe,OAAO,aAAoC;AACxD,WAAOA,2BACL,QACA,iCAAiC,YACjC,EACE,QAAQ,OACT,CACF;;GAEH,aAAa,OAAO,WAAyC;AAC3D,WAAOA,2BAAa,QAAQ,yBAAyB,UAAU,EAC7D,QAAQ,OACT,CAAC;;GAEJ,YAAY,OACV,QACA,SACgC;AAChC,WAAOA,2BAAa,QAAQ,yBAAyB,UAAU;KAC7D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,YAAY,OAAO,WAAgD;AACjE,WAAOA,2BAAa,QAAQ,yBAAyB,UAAU,EAC7D,QAAQ,UACT,CAAC;;GAIJ,kBAAkB,OAChB,SACsC;AACtC,WAAOA,2BAAa,QAAQ,+BAA+B;KACzD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,mBAAmB,YAAmC;AACpD,WAAOA,2BAAa,QAAQ,+BAA+B,EACzD,QAAQ,OACT,CAAC;;GAEJ,mBAAmB,OAAO,iBAA8C;AACtE,WAAOA,2BACL,QACA,+BAA+B,gBAC/B,EACE,QAAQ,OACT,CACF;;GAEH,kBAAkB,OAChB,cACA,SACsC;AACtC,WAAOA,2BACL,QACA,+BAA+B,gBAC/B;KACE,QAAQ;KACR,MAAM;KACP,CACF;;GAEH,kBAAkB,OAChB,iBACsC;AACtC,WAAOA,2BACL,QACA,+BAA+B,gBAC/B,EACE,QAAQ,UACT,CACF;;GAIH,mBAAmB,OACjB,QACA,SACuC;AACvC,WAAOA,2BACL,QACA,yBAAyB,OAAO,eAChC;KACE,QAAQ;KACR,MAAM;KACP,CACF;;GAEH,oBAAoB,OAClB,WACkC;AAClC,WAAOA,2BACL,QACA,yBAAyB,OAAO,eAChC,EACE,QAAQ,OACT,CACF;;GAEH,wBAAwB,OACtB,QACA,SAC2C;AAC3C,WAAOA,2BACL,QACA,yBAAyB,OAAO,eAChC;KACE,QAAQ;KACR,MAAM;KACP,CACF;;GAEH,sBAAsB,OACpB,QACA,iBAC0C;AAC1C,WAAOA,2BACL,QACA,yBAAyB,OAAO,eAAe,gBAC/C,EACE,QAAQ,UACT,CACF;;GAIH,cAAc,OAAO,WAA4C;AAC/D,WAAOA,2BAAa,QAAQ,yBAAyB,OAAO,SAAS,EACnE,QAAQ,OACT,CAAC;;GAEJ,gBAAgB,OACd,QACA,SACoC;AACpC,WAAOA,2BAAa,QAAQ,yBAAyB,OAAO,SAAS;KACnE,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,kBAAkB,OAChB,QACA,SACsC;AACtC,WAAOA,2BAAa,QAAQ,yBAAyB,OAAO,SAAS;KACnE,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,gBAAgB,OACd,QACA,WACoC;AACpC,WAAOA,2BACL,QACA,yBAAyB,OAAO,SAAS,UACzC,EACE,QAAQ,UACT,CACF;;GAIH,oBAAoB,OAClB,WACwC;AACxC,WAAOA,2BACL,QACA,yBAAyB,OAAO,eAChC,EACE,QAAQ,OACT,CACF;;GAEH,sBAAsB,OACpB,QACA,SAC0C;AAC1C,WAAOA,2BACL,QACA,yBAAyB,OAAO,qBAChC;KACE,QAAQ;KACR,MAAM;KACP,CACF;;GAEJ;;;;;;ACjPL,MAAa,aAAaC,MAAE,OAAO;CACjC,IAAIA,MAAE,QAAQ,CAAC,UAAU;CACzB,MAAMA,MAAE,QAAQ,CAAC,UAAU;CAC3B,aAAaA,MAAE,QAAQ,CAAC,SAAS;CACjC,UAAUA,MAAE,SAAS;CACrB,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;AAGF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,IAAIA,MAAE,QAAQ,CAAC,UAAU;CACzB,KAAKA,MAAE,QAAQ,CAAC,UAAU;CAC1B,aAAaA,MAAE,QAAQ,CAAC,SAAS;CACjC,UAAUA,MAAE,SAAS;CACrB,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;AAGF,MAAa,8BAA8BA,MAAE,OAAO;CAClD,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,iBAAiBA,MAAE,QAAQ,CAAC,SAAS;CACrC,WAAWA,MAAE,IAAI,UAAU,CAAC,SAAS;CACtC,CAAC;AAGF,MAAa,2BAA2BA,MAAE,OAAO;CAC/C,cAAcA,MAAE,QAAQ,CAAC,UAAU;CACnC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,uBAAuBA,MAAE,QAAQ,CAAC,SAAS;CAC3C,iBAAiBA,MAAE,QAAQ,CAAC,SAAS;CACrC,WAAWA,MAAE,IAAI,UAAU,CAAC,SAAS;CACrC,SAASA,MAAE,MAAM,4BAA4B,CAAC,UAAU;CACzD,CAAC;AAGF,MAAa,qBAAqBA,MAAE,OAAO;CACzC,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,iBAAiBA,MAAE,QAAQ,CAAC,SAAS;CACrC,kBAAkBA,MAAE,QAAQ,CAAC,SAAS;CACtC,YAAYA,MAAE,IAAI,UAAU,CAAC,SAAS;CACtC,WAAWA,MAAE,IAAI,UAAU,CAAC,SAAS;CACtC,CAAC;AAGF,MAAa,oBAAoBA,MAAE,OAAO;CACxC,MAAM;CACN,aAAaA,MAAE,MAAM,yBAAyB;CAC/C,CAAC;AAGF,MAAa,mCAAmCA,MAAE,OAAO,EACvD,aAAaA,MAAE,MAAM,yBAAyB,EAC/C,CAAC;AAKF,MAAa,qCAAqCA,MAAE,OAAO,EACzD,gBAAgBA,MAAE,SAAS,EAC5B,CAAC;;;;AC9DF,IAAa,eAAb,MAA4C;CAC1C,AAAgB,KAAK;CACrB,AAAQ,iBAAsC;CAE9C,YAAY,AAAiB,SAA+B;EAA/B;;CAE7B,AAAO,KAAK,QAAwC;AAClD,SAAO,oBAAoB,OAAO,QAAsB;AACtD,OAAI,OAAO,aAAa,YACtB;GAGF,MAAM,aAAa,KAAK,SAAS,cAAc;GAC/C,MAAM,QAAQ,aAAa,QAAQ,cAAc;AACjD,OAAI,MACF,KAAI,KAAK,UAAU;IACjB,GAAG,IAAI,KAAK;KACX,aAAa,UAAU;IACzB;IAEH;AAEF,SAAO,mBAAmB,OAAO,KAAmB,QAAkB;AACpE,OAAI,OAAO,aAAa,YACtB;AAEF,OAAI,IAAI,WAAW,IACjB;AAEF,OAAI,IAAI,KAAK,MACX;GAGF,MAAM,eAAe,aAAa,QAAQ,eAAe;AACzD,OAAI,CAAC,aACH;AAGF,OAAI,CAAC,OAAO,KAAK;AACf,YAAQ,KAAK,mDAAmD;AAChE;;AAIF,OAAI,CAAC,KAAK,eACR,MAAK,kBAAkB,YAAY;AACjC,QAAI;KACF,MAAM,WAAW,MAAM,OAAO,IAAI,aAAa,EAC/B,cACf,CAAC;AACF,SAAI,CAAC,SACH,QAAO;AAGT,kBAAa,QAAQ,eAAe,SAAS,YAAY;AACzD,kBAAa,QAAQ,gBAAgB,SAAS,aAAa;AAE3D,YAAO;cACC;AACR,UAAK,iBAAiB;;OAEtB;GAGN,MAAM,YAAY,MAAM,KAAK;AAC7B,OAAI,CAAC,UACH;GAGF,MAAM,aAAa,KAAK,SAAS,cAAc;AAC/C,OAAI,KAAK,UAAU;IACjB,GAAG,IAAI,KAAK;KACX,aAAa,UAAU,UAAU;IACnC;AAED,UAAO;IACP;AAEF,SAAO,EAAE;;;;;;AC7Eb,IAAa,aAAb,MAA0C;CACxC,AAAgB,KAAK;CAErB,YAAY,AAAiB,SAA4B;EAA5B;;CAE7B,AAAO,KAAK,QAAuB;AACjC,SAAO,oBAAoB,OAAO,QAAsB;AAEtD,OAAI,OAAO,aAAa,aAAa;AACnC,QAAI;KAAC;KAAW;KAAQ;KAAM,CAAC,SAAS,IAAI,KAAK,UAAU,MAAM,CAC/D;IAIF,MAAM,0BADgB,SAAS,OAAO,CAChB,KAAK,QAAQ;AAEnC,QAAI,CAAC,MAAO;AAEZ,QAAI,KAAK,UAAU,IAAI,QAAQ,IAAI,KAAK,QAAQ;AAChD,QAAI,KAAK,QAAQ,IAAI,KAAK,QAAQ,YAAY,MAAM;AACpD;;AAIF,OAAI,KAAK,SAAS;AAChB,QAAI;KAAC;KAAW;KAAQ;KAAM,CAAC,SAAS,IAAI,KAAK,UAAU,MAAM,CAC/D;IAIF,MAAMC,YADQ,MAAM,KAAK,SAAS,EACb,IAAI,KAAK,QAAQ,WAAW;AAEjD,QAAI,CAACA,SAAQ;AAEb,QAAI,KAAK,UAAU,IAAI,QAAQ,IAAI,KAAK,QAAQ;AAChD,QAAI,KAAK,QAAQ,IAAI,KAAK,QAAQ,YAAYA,SAAO,MAAM;;IAE7D;AAEF,SAAO,EAAE;;CAIX,AAAQ;CACR,cAAc,IAAwB;AACpC,OAAK,UAAU;;;;;;ACvCnB,IAAa,sBAAb,MAAmD;CACjD,AAAgB,KAAK;CAErB,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,QAAQ,OAAU,SAAoC;AACpD,WAAOC,2BAAgB,QAAQ,YAAY;KACzC,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,QAAQ,OAAU,SAAoC;AACpD,WAAOA,2BAAgB,QAAQ,YAAY;KACzC,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,uBAAuB,OACrB,SACkB;AAClB,WAAOA,2BAAa,QAAQ,4BAA4B;KACtD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,sBAAsB,OACpB,SACkB;AAClB,WAAOA,2BAAa,QAAQ,2BAA2B;KACrD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,gBAAgB,OAAO,SAA+C;AACpE,WAAOA,2BAAa,QAAQ,oBAAoB;KAC9C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,oBAAoB,OAClB,SACkB;AAClB,WAAOA,2BAAa,QAAQ,yBAAyB;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEL;;;;;;AClDL,IAAa,YAAb,MAAyC;CACvC,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,cAAc,OACZ,SACkC;AAClC,WAAOC,2BAAa,QAAQ,kBAAkB;KAC5C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,aAAa,YAAqC;AAChD,WAAOA,2BAAa,QAAQ,0BAA0B,EACpD,QAAQ,OACT,CAAC;;GAEL;;;;;;AClBL,IAAa,kBAAb,MAA+C;CAC7C,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,QAAQ,OACN,SACqC;AACrC,WAAOC,2BAAa,QAAQ,uBAAuB;KACjD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,QAAQ,OACN,SACqC;IACrC,MAAM,eAAe,IAAI,iBAAiB;AAC1C,iBAAa,OAAO,SAAS,KAAK,MAAM;AACxC,QAAI,KAAK,YACP,cAAa,OAAO,gBAAgB,KAAK,YAAY;AAEvD,WAAOA,2BACL,QACA,sBAAsB,aAAa,UAAU,IAC7C,EACE,QAAQ,OACT,CACF;;GAEH,UAAU,OAAU,SAA+C;AACjE,WAAOA,2BAAa,QAAQ,wBAAwB;KAClD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEL;;;;;;ACxCL,IAAa,eAAb,MAA4C;CAC1C,AAAgB,KAAK;CAErB,AAAO,KAAK,QAAuB;AACjC,SAAO,EACL,QAAQ,OACN,SACsC;AACtC,UAAOC,2BACL,QACA,qBAAqB,KAAK,SAAS,eAAe,KAAK,cACvD,EACE,QAAQ,OACT,CACF;KAEJ;;;;;;ACVL,IAAa,aAAb,MAA0C;CACxC,AAAgB,KAAK;CAErB,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,QAAQ,YAAqC;AAC3C,WAAOC,2BAAa,QAAQ,gBAAgB,EAC1C,QAAQ,QACT,CAAC;;GAEJ,SAAS,YAAsC;AAC7C,WAAOA,2BAAa,QAAQ,iBAAiB,EAC3C,QAAQ,QACT,CAAC;;GAEJ,QAAQ,YAAyC;AAC/C,WAAOA,2BAAa,QAAQ,iBAAiB,EAC3C,QAAQ,OACT,CAAC;;GAEJ,QAAQ,OAAO,SAAyD;AACtE,WAAOA,2BAAa,QAAQ,gBAAgB;KAC1C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,kBAAkB,OAChB,SACsC;AACtC,WAAOA,2BAAa,QAAQ,4BAA4B;KACtD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,qBAAqB,YAAkD;AACrE,WAAOA,2BAAa,QAAQ,+BAA+B,EACzD,QAAQ,QACT,CAAC;;GAEL"}