base-idp 1.0.1 → 1.1.0

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAWlE,wEAAwE;AACxE,MAAM,oBAAoB,GAAG,MAAM,CAAC;AA2BpC,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IAOxB;IANZ,cAAc,CAAU;IACxB,MAAM,CAAS;IACxB,OAAO,GAA2B,IAAI,CAAC;IAC9B,SAAS,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC3D,YAAY,GAAyC,IAAI,CAAC;IAElE,YAA6B,UAAgC;QAC3D,KAAK,CAAC,UAAU,CAAC,CAAC;QADS,eAAU,GAAV,UAAU,CAAsB;QAE3D,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,IAAI,KAAK,CAAC;QACzD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC;QAErD,6DAA6D;QAC7D,IAAI,UAAU,CAAC,WAAW;YAAE,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1E,IAAI,UAAU,CAAC,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACjE,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CAAC,UAAoC,EAAE;QAC5D,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE3B,kEAAkE;QAClE,qEAAqE;QACrE,6EAA6E;QAC7E,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,QAAQ,CACZ,gCAAgC,EAChC,wEAAwE;gBACtE,8CAA8C;gBAC9C,gFAAgF;gBAChF,gFAAgF,CACnF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QAEhE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,QAAQ,CACZ,gBAAgB,EAChB,uFAAuF,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAuB;YAC7B,KAAK;YACL,YAAY,EAAE,IAAI,CAAC,QAAQ;YAC3B,WAAW;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,QAAQ,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAE1E,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC;YAC5B,KAAK;YACL,KAAK;YACL,aAAa,EAAE,IAAI,CAAC,SAAS;YAC7B,mBAAmB,EAAE,MAAM;YAC3B,WAAW;YACX,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM;YACzC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;SACnD,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,8EAA8E;IAE9E;;;;;;;;;;OAUG;IACH,KAAK,CAAC,sBAAsB,CAAC,GAAY;QACvC,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,YAAY,CAAC,CAAC;QAEjD,sEAAsE;QACtE,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,UAAU,CAAC;YAC3D,MAAM,QAAQ,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAExC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,QAAQ,CAAC,cAAc,EAAE,iDAAiD,CAAC,CAAC;QACpF,CAAC;QAED,mDAAmD;QACnD,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,MAAM,QAAQ,KAAK,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,QAAQ,CACZ,eAAe,EACf,oFAAoF,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAuB,CAAC;QACnD,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAEjC,6CAA6C;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;YACrC,IAAI;YACJ,YAAY,EAAE,EAAE,CAAC,YAAY;YAC7B,WAAW,EAAE,EAAE,CAAC,WAAW;SAC5B,CAAC,CAAC;QAEH,iEAAiE;QACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAErE,MAAM,QAAQ,GAAoB;YAChC,SAAS;YACT,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,YAAY,EAAE,MAAM,CAAC,aAAa;YAClC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI;YAChD,gBAAgB,EAAE,MAAM,CAAC,wBAAwB;SAClD,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE5B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC9C,CAAC;IAED,8EAA8E;IAE9E;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC/B,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;SAClC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,UAA2D,EAAE;QAChF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,CAAC,mBAAmB,EAAE,oDAAoD,CAAC,CAAC;QAC5F,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,EAAE,CAAC;YAC/D,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,CAAC,iBAAiB,EAAE,0DAA0D,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5F,MAAM,QAAQ,CACZ,oBAAoB,EACpB,mBAAmB,OAAO,CAAC,aAAa,iCAAiC,CAC1E,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;YAChC,MAAM,QAAQ,CAAC,mBAAmB,EAAE,4BAA4B,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;YAC/E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAErE,MAAM,QAAQ,GAAoB;gBAChC,SAAS;gBACT,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,YAAY,EAAE,MAAM,CAAC,aAAa;gBAClC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI;gBAChD,gBAAgB,EAAE,MAAM,CAAC,wBAAwB;aAClD,CAAC;YAEF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC,UAAU,EAAG,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,QAAQ,CAAC,gBAAgB,EAAE,gDAAgD,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E;;OAEG;IACH,MAAM,CAAC,UAAiC,EAAE;QACxC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,QAA+B;QAC7C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,kBAAkB,CAAC,KAAa;QAC5C,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,OAAO,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE;YAChD,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;YACvB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAClB,QAAyB,EACzB,YAAwC,WAAW;QAEnD,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QAExB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,YAAY,CAAC,OAAO,CAClB,GAAG,IAAI,CAAC,MAAM,UAAU,EACxB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CACzB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;YAC3E,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;YAClD,iEAAiE;YACjE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YAClF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,oBAAoB,CAAC,CAAC;QAEhE,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC/B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAEO,eAAe,CAAC,QAAyB;QAC/C,OAAO;YACL,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC;IACJ,CAAC;IAEO,IAAI,CAAC,KAAyB;QACpC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAA4B;IACnE,OAAO,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAE9E,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/dist/index.d.ts

@@ -1,10 +1,13 @@
 export { BaseIdPClient, BaseIdPClient as BaseIdpClient } from "./client.js";
 export { BaseIdPError, BaseIdPError as BaseIdpError, idpError } from "./errors.js";
 export { generatePKCE } from "./pkce.js";
-export type { AccessClaims, AccountContext, AuthorizeUrlOptions, BaseIdPConfig, BaseIdPConfig as BaseIdpConfig, ClientConfigResponse, PKCEPair, RefreshOptions, ResolvedConfig, BaseIdpIdentityMetadata, BaseIdpPublicKey, BaseIdpPublicKeySet, TokenExchangeOptions, TokenPair, VerifiedPrincipal, VerifyAccessTokenOptions, } from "./types.js";
-export { createReactBaseIdpAuth, } from "./react.js";
-export { createNextBaseIdpAuth, } from "./next.js";
+export { BrowserBaseIdpClient, createBrowserBaseIdpAuth, } from "./browser.js";
+export type { HandleCallbackResult } from "./browser.js";
+export { createReactBaseIdpAuth, BaseIdpProvider, useBaseIdpAuth, useUser, useSession, } from "./react.js";
+export type { ReactBaseIdpAuth, BaseIdpProviderProps } from "./react.js";
+export { createNextBaseIdpAuth } from "./next.js";
 export { baseIdpConfigFromNodeEnv, createNodeBaseIdpAuth, createExpressMiddleware, createNestBaseIdpGuard, } from "./node.js";
 export { createViteBaseIdpAuth, baseIdpConfigFromViteEnv, } from "./vite.js";
-export { createSvelteKitBaseIdpAuth, } from "./sveltekit.js";
+export { createSvelteKitBaseIdpAuth } from "./sveltekit.js";
+export type { BaseIdPConfig, BaseIdPConfig as BaseIdpConfig, BrowserBaseIdpConfig, ResolvedConfig, FetchLike, AuthorizeUrlOptions, TokenExchangeOptions, RefreshOptions, TokenPair, PKCEPair, AccessClaims, AccountContext, VerifiedPrincipal, VerifyAccessTokenOptions, AuthSession, LoginWithRedirectOptions, SessionChangeEvent, SessionChangeListener, UpsertUserData, UserRepository, MergedUser, ClientConfigResponse, BaseIdpIdentityMetadata, BaseIdpPublicKey, BaseIdpPublicKeySet, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,YAAY,IAAI,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,YAAY,EACV,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,aAAa,IAAI,aAAa,EAC9B,oBAAoB,EACpB,QAAQ,EACR,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,SAAS,EACT,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,YAAY,IAAI,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EACL,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGzD,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,OAAO,EACP,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAGlD,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAG5D,YAAY,EAEV,aAAa,EACb,aAAa,IAAI,aAAa,EAC9B,oBAAoB,EACpB,cAAc,EACd,SAAS,EAET,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,SAAS,EACT,QAAQ,EAER,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,wBAAwB,EAExB,WAAW,EACX,wBAAwB,EACxB,kBAAkB,EAClB,qBAAqB,EAErB,cAAc,EACd,cAAc,EACd,UAAU,EAEV,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,9 +1,17 @@
+// ── Core client (browser + Node compatible) ──────────────────────────────────
 export { BaseIdPClient, BaseIdPClient as BaseIdpClient } from "./client.js";
 export { BaseIdPError, BaseIdPError as BaseIdpError, idpError } from "./errors.js";
 export { generatePKCE } from "./pkce.js";
-export { createReactBaseIdpAuth, } from "./react.js";
-export { createNextBaseIdpAuth, } from "./next.js";
+// ── Browser Client SDK ───────────────────────────────────────────────────────
+export { BrowserBaseIdpClient, createBrowserBaseIdpAuth, } from "./browser.js";
+// ── React integration ────────────────────────────────────────────────────────
+export { createReactBaseIdpAuth, BaseIdpProvider, useBaseIdpAuth, useUser, useSession, } from "./react.js";
+// ── Next.js integration ───────────────────────────────────────────────────────
+export { createNextBaseIdpAuth } from "./next.js";
+// ── Node / Express / NestJS integration ──────────────────────────────────────
 export { baseIdpConfigFromNodeEnv, createNodeBaseIdpAuth, createExpressMiddleware, createNestBaseIdpGuard, } from "./node.js";
+// ── Vite integration ──────────────────────────────────────────────────────────
 export { createViteBaseIdpAuth, baseIdpConfigFromViteEnv, } from "./vite.js";
-export { createSvelteKitBaseIdpAuth, } from "./sveltekit.js";
+// ── SvelteKit integration ─────────────────────────────────────────────────────
+export { createSvelteKitBaseIdpAuth } from "./sveltekit.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,YAAY,IAAI,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAmBzC,OAAO,EACL,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,OAAO,EAAE,aAAa,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,YAAY,IAAI,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,gFAAgF;AAChF,OAAO,EACL,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAGtB,gFAAgF;AAChF,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,OAAO,EACP,UAAU,GACX,MAAM,YAAY,CAAC;AAGpB,iFAAiF;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElD,gFAAgF;AAChF,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,WAAW,CAAC;AAEnB,iFAAiF;AACjF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,WAAW,CAAC;AAEnB,iFAAiF;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/react.d.ts

@@ -1,5 +1,7 @@
+import type { ReactNode } from "react";
 import { BaseIdPClient } from "./client.js";
-import type { AuthorizeUrlOptions, BaseIdPConfig } from "./types.js";
+import { BrowserBaseIdpClient } from "./browser.js";
+import type { AuthSession, AuthorizeUrlOptions, BaseIdPConfig, LoginWithRedirectOptions, VerifiedPrincipal } from "./types.js";
 export type ReactBaseIdpAuth = {
     loginHref(options?: AuthorizeUrlOptions): string;
     login(options?: AuthorizeUrlOptions): void;
@@ -8,5 +10,102 @@ export type ReactBaseIdpAuth = {
         onClick(): void;
     };
 };
+/**
+ * Lightweight helper for React apps that only need a login button and don't
+ * require full session management.
+ *
+ * @example
+ * const auth = createReactBaseIdpAuth({ key: "...", issuer: "..." });
+ * <button {...auth.buttonProps()}>Sign in with Square</button>
+ */
 export declare function createReactBaseIdpAuth(config: BaseIdPConfig | BaseIdPClient): ReactBaseIdpAuth;
+type BaseIdpAuthState = {
+    isLoading: boolean;
+    isAuthenticated: boolean;
+    principal: VerifiedPrincipal | null;
+    session: AuthSession | null;
+    error: Error | null;
+};
+type BaseIdpContextValue = BaseIdpAuthState & {
+    client: BrowserBaseIdpClient;
+    loginWithRedirect(options?: LoginWithRedirectOptions): Promise<void>;
+    logout(options?: {
+        returnTo?: string;
+    }): void;
+    getAccessToken(): Promise<string>;
+    refreshSession(): Promise<AuthSession>;
+};
+export type BaseIdpProviderProps = {
+    /** An initialised BrowserBaseIdpClient (from createBrowserBaseIdpAuth) */
+    client: BrowserBaseIdpClient;
+    children: ReactNode;
+    /**
+     * Called after handleRedirectCallback completes successfully.
+     * Use this to navigate the user to `returnTo` or a default destination.
+     *
+     * @example
+     * onRedirectCallback={(_, returnTo) => router.push(returnTo ?? "/dashboard")}
+     */
+    onRedirectCallback?: (principal: VerifiedPrincipal, returnTo?: string) => void;
+};
+/**
+ * Wrap your React app with this provider to enable auth hooks.
+ *
+ * On mount it will:
+ *   1. Call client.init() to discover config
+ *   2. If `?code=` is in the URL, call handleRedirectCallback() and clean the URL
+ *   3. Otherwise, restore any existing session from storage
+ *
+ * @example
+ * const auth = createBrowserBaseIdpAuth({ key, issuer, persistSession: true });
+ *
+ * function App() {
+ *   return (
+ *     <BaseIdpProvider
+ *       client={auth}
+ *       onRedirectCallback={(_, returnTo) => navigate(returnTo ?? "/")}
+ *     >
+ *       <Router />
+ *     </BaseIdpProvider>
+ *   );
+ * }
+ */
+export declare function BaseIdpProvider({ client, children, onRedirectCallback, }: BaseIdpProviderProps): import("react").FunctionComponentElement<import("react").ProviderProps<BaseIdpContextValue | null>>;
+/**
+ * Access the full auth context from any component inside <BaseIdpProvider>.
+ *
+ * @example
+ * const { isLoading, isAuthenticated, principal, loginWithRedirect, logout } =
+ *   useBaseIdpAuth();
+ */
+export declare function useBaseIdpAuth(): BaseIdpContextValue;
+/**
+ * Quick access to the current user (VerifiedPrincipal).
+ * Returns { isLoaded, isSignedIn, user }.
+ *
+ * @example
+ * const { isLoaded, isSignedIn, user } = useUser();
+ * if (!isLoaded) return <Spinner />;
+ * if (!isSignedIn) return <LoginButton />;
+ * return <p>Hello, {user.name}</p>;
+ */
+export declare function useUser(): {
+    isLoaded: boolean;
+    isSignedIn: boolean;
+    user: VerifiedPrincipal | null;
+};
+/**
+ * Access the raw session object (token + expiresAt + principal).
+ *
+ * @example
+ * const { isLoaded, session } = useSession();
+ * if (session) {
+ *   console.log("token expires at", new Date(session.expiresAt));
+ * }
+ */
+export declare function useSession(): {
+    isLoaded: boolean;
+    session: AuthSession | null;
+};
+export {};
 //# sourceMappingURL=react.d.ts.map

package/dist/react.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAAC;IACjD,KAAK,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC3C,WAAW,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG;QAC1C,IAAI,EAAE,QAAQ,CAAC;QACf,OAAO,IAAI,IAAI,CAAC;KACjB,CAAC;CACH,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,GAAG,gBAAgB,CAkB9F"}
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EACV,WAAW,EACX,mBAAmB,EACnB,aAAa,EACb,wBAAwB,EAExB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAIpB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAAC;IACjD,KAAK,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC3C,WAAW,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG;QAC1C,IAAI,EAAE,QAAQ,CAAC;QACf,OAAO,IAAI,IAAI,CAAC;KACjB,CAAC;CACH,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,GAAG,gBAAgB,CAkB9F;AAID,KAAK,gBAAgB,GAAG;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACrB,CAAC;AAEF,KAAK,mBAAmB,GAAG,gBAAgB,GAAG;IAC5C,MAAM,EAAE,oBAAoB,CAAC;IAC7B,iBAAiB,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACxC,CAAC;AAYF,MAAM,MAAM,oBAAoB,GAAG;IACjC,0EAA0E;IAC1E,MAAM,EAAE,oBAAoB,CAAC;IAC7B,QAAQ,EAAE,SAAS,CAAC;IACpB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAChF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,QAAQ,EACR,kBAAkB,GACnB,EAAE,oBAAoB,uGA8GtB;AAID;;;;;;GAMG;AACH,wBAAgB,cAAc,IAAI,mBAAmB,CASpD;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,IAAI;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAChC,CAOA;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,IAAI;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B,CAMA"}

package/dist/react.js

@@ -1,4 +1,28 @@
+/**
+ * React integration for the Base IDP SDK.
+ *
+ * Exports two tiers:
+ *
+ * ── Tier 1: Simple login helper (backward compat, no React dep needed) ──────
+ *   createReactBaseIdpAuth()  →  { loginHref, login, buttonProps }
+ *
+ * ── Tier 2: Full React Provider + hooks (requires React ≥ 18) ───────────────
+ *   <BaseIdpProvider client={auth}>   — wraps your app
+ *   useBaseIdpAuth()                  — full auth context
+ *   useUser()                         — { isLoaded, isSignedIn, user }
+ *   useSession()                      — { isLoaded, session }
+ */
+import { createContext, useContext, useState, useEffect, useCallback, createElement, } from "react";
 import { BaseIdPClient } from "./client.js";
+import { BrowserBaseIdpClient } from "./browser.js";
+/**
+ * Lightweight helper for React apps that only need a login button and don't
+ * require full session management.
+ *
+ * @example
+ * const auth = createReactBaseIdpAuth({ key: "...", issuer: "..." });
+ * <button {...auth.buttonProps()}>Sign in with Square</button>
+ */
 export function createReactBaseIdpAuth(config) {
     const client = config instanceof BaseIdPClient ? config : new BaseIdPClient(config);
     return {
@@ -18,4 +42,180 @@ export function createReactBaseIdpAuth(config) {
         },
     };
 }
+const BaseIdpContext = createContext(null);
+const LOADING_STATE = {
+    isLoading: true,
+    isAuthenticated: false,
+    principal: null,
+    session: null,
+    error: null,
+};
+/**
+ * Wrap your React app with this provider to enable auth hooks.
+ *
+ * On mount it will:
+ *   1. Call client.init() to discover config
+ *   2. If `?code=` is in the URL, call handleRedirectCallback() and clean the URL
+ *   3. Otherwise, restore any existing session from storage
+ *
+ * @example
+ * const auth = createBrowserBaseIdpAuth({ key, issuer, persistSession: true });
+ *
+ * function App() {
+ *   return (
+ *     <BaseIdpProvider
+ *       client={auth}
+ *       onRedirectCallback={(_, returnTo) => navigate(returnTo ?? "/")}
+ *     >
+ *       <Router />
+ *     </BaseIdpProvider>
+ *   );
+ * }
+ */
+export function BaseIdpProvider({ client, children, onRedirectCallback, }) {
+    const [state, setState] = useState(LOADING_STATE);
+    useEffect(() => {
+        let cancelled = false;
+        async function initialize() {
+            try {
+                await client.init();
+                // If the IDP just redirected back with a code, complete the exchange
+                if (window.location.search.includes("code=")) {
+                    const { principal, returnTo } = await client.handleRedirectCallback();
+                    // Strip OAuth params from browser history so the URL is clean
+                    const clean = new URL(window.location.href);
+                    clean.searchParams.delete("code");
+                    clean.searchParams.delete("state");
+                    clean.searchParams.delete("error");
+                    clean.searchParams.delete("error_description");
+                    window.history.replaceState({}, document.title, clean.toString());
+                    if (!cancelled) {
+                        setState({
+                            isLoading: false,
+                            isAuthenticated: true,
+                            principal,
+                            session: client.getSession(),
+                            error: null,
+                        });
+                        onRedirectCallback?.(principal, returnTo);
+                    }
+                    return;
+                }
+                // No callback — restore session from storage
+                const existing = client.getSession();
+                if (!cancelled) {
+                    setState({
+                        isLoading: false,
+                        isAuthenticated: client.isAuthenticated(),
+                        principal: existing?.principal ?? null,
+                        session: existing,
+                        error: null,
+                    });
+                }
+            }
+            catch (err) {
+                if (!cancelled) {
+                    setState({
+                        isLoading: false,
+                        isAuthenticated: false,
+                        principal: null,
+                        session: null,
+                        error: err instanceof Error ? err : new Error(String(err)),
+                    });
+                }
+            }
+        }
+        void initialize();
+        // Keep React state in sync with BrowserBaseIdpClient session events
+        const unsubscribe = client.onSessionChange((event) => {
+            if (cancelled)
+                return;
+            if (event.type === "signed_out" || event.type === "expired") {
+                setState({
+                    isLoading: false,
+                    isAuthenticated: false,
+                    principal: null,
+                    session: null,
+                    error: null,
+                });
+            }
+            else if (event.session) {
+                setState({
+                    isLoading: false,
+                    isAuthenticated: true,
+                    principal: event.session.principal,
+                    session: event.session,
+                    error: null,
+                });
+            }
+        });
+        return () => {
+            cancelled = true;
+            unsubscribe();
+        };
+    }, [client, onRedirectCallback]);
+    const loginWithRedirect = useCallback((options) => client.loginWithRedirect(options), [client]);
+    const logout = useCallback((options) => client.logout(options), [client]);
+    const getAccessToken = useCallback(() => client.getAccessToken(), [client]);
+    const refreshSession = useCallback(() => client.refreshSession(), [client]);
+    const value = {
+        ...state,
+        client,
+        loginWithRedirect,
+        logout,
+        getAccessToken,
+        refreshSession,
+    };
+    return createElement(BaseIdpContext.Provider, { value }, children);
+}
+// ── Hooks ────────────────────────────────────────────────────────────────────
+/**
+ * Access the full auth context from any component inside <BaseIdpProvider>.
+ *
+ * @example
+ * const { isLoading, isAuthenticated, principal, loginWithRedirect, logout } =
+ *   useBaseIdpAuth();
+ */
+export function useBaseIdpAuth() {
+    const ctx = useContext(BaseIdpContext);
+    if (!ctx) {
+        throw new Error("useBaseIdpAuth() must be called inside a <BaseIdpProvider>. " +
+            "Wrap your app root with <BaseIdpProvider client={auth}>.");
+    }
+    return ctx;
+}
+/**
+ * Quick access to the current user (VerifiedPrincipal).
+ * Returns { isLoaded, isSignedIn, user }.
+ *
+ * @example
+ * const { isLoaded, isSignedIn, user } = useUser();
+ * if (!isLoaded) return <Spinner />;
+ * if (!isSignedIn) return <LoginButton />;
+ * return <p>Hello, {user.name}</p>;
+ */
+export function useUser() {
+    const { isLoading, isAuthenticated, principal } = useBaseIdpAuth();
+    return {
+        isLoaded: !isLoading,
+        isSignedIn: isAuthenticated,
+        user: principal,
+    };
+}
+/**
+ * Access the raw session object (token + expiresAt + principal).
+ *
+ * @example
+ * const { isLoaded, session } = useSession();
+ * if (session) {
+ *   console.log("token expires at", new Date(session.expiresAt));
+ * }
+ */
+export function useSession() {
+    const { isLoading, session } = useBaseIdpAuth();
+    return {
+        isLoaded: !isLoading,
+        session,
+    };
+}
 //# sourceMappingURL=react.js.map

package/dist/react.js.map

@@ -1 +1 @@
-{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAY5C,MAAM,UAAU,sBAAsB,CAAC,MAAqC;IAC1E,MAAM,MAAM,GAAG,MAAM,YAAY,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IACpF,OAAO;QACL,SAAS,CAAC,OAAO,GAAG,EAAE;YACpB,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,OAAO,GAAG,EAAE;YAChB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,WAAW,CAAC,OAAO,GAAG,EAAE;YACtB,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,OAAO;oBACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvD,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,aAAa,EACb,UAAU,EACV,QAAQ,EACR,SAAS,EACT,WAAW,EACX,aAAa,GACd,MAAM,OAAO,CAAC;AAEf,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAqBpD;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqC;IAC1E,MAAM,MAAM,GAAG,MAAM,YAAY,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IACpF,OAAO;QACL,SAAS,CAAC,OAAO,GAAG,EAAE;YACpB,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,OAAO,GAAG,EAAE;YAChB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,WAAW,CAAC,OAAO,GAAG,EAAE;YACtB,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,OAAO;oBACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvD,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAoBD,MAAM,cAAc,GAAG,aAAa,CAA6B,IAAI,CAAC,CAAC;AAEvE,MAAM,aAAa,GAAqB;IACtC,SAAS,EAAE,IAAI;IACf,eAAe,EAAE,KAAK;IACtB,SAAS,EAAE,IAAI;IACf,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,IAAI;CACZ,CAAC;AAgBF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,MAAM,EACN,QAAQ,EACR,kBAAkB,GACG;IACrB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAmB,aAAa,CAAC,CAAC;IAEpE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,KAAK,UAAU,UAAU;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAEpB,qEAAqE;gBACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7C,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC;oBAEtE,8DAA8D;oBAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC5C,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAClC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACnC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACnC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;oBAC/C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAElE,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,QAAQ,CAAC;4BACP,SAAS,EAAE,KAAK;4BAChB,eAAe,EAAE,IAAI;4BACrB,SAAS;4BACT,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;4BAC5B,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC;wBACH,kBAAkB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBAC5C,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,6CAA6C;gBAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBACrC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,QAAQ,CAAC;wBACP,SAAS,EAAE,KAAK;wBAChB,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE;wBACzC,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI;wBACtC,OAAO,EAAE,QAAQ;wBACjB,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,QAAQ,CAAC;wBACP,SAAS,EAAE,KAAK;wBAChB,eAAe,EAAE,KAAK;wBACtB,SAAS,EAAE,IAAI;wBACf,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;qBAC3D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,UAAU,EAAE,CAAC;QAElB,oEAAoE;QACpE,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,KAAyB,EAAE,EAAE;YACvE,IAAI,SAAS;gBAAE,OAAO;YACtB,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5D,QAAQ,CAAC;oBACP,SAAS,EAAE,KAAK;oBAChB,eAAe,EAAE,KAAK;oBACtB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzB,QAAQ,CAAC;oBACP,SAAS,EAAE,KAAK;oBAChB,eAAe,EAAE,IAAI;oBACrB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;oBAClC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,IAAI;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,WAAW,EAAE,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEjC,MAAM,iBAAiB,GAAG,WAAW,CACnC,CAAC,OAAkC,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,EACzE,CAAC,MAAM,CAAC,CACT,CAAC;IACF,MAAM,MAAM,GAAG,WAAW,CACxB,CAAC,OAA+B,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAC3D,CAAC,MAAM,CAAC,CACT,CAAC;IACF,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAwB;QACjC,GAAG,KAAK;QACR,MAAM;QACN,iBAAiB;QACjB,MAAM;QACN,cAAc;QACd,cAAc;KACf,CAAC;IAEF,OAAO,aAAa,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;AACrE,CAAC;AAED,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,8DAA8D;YAC5D,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,OAAO;IAKrB,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACnE,OAAO;QACL,QAAQ,EAAE,CAAC,SAAS;QACpB,UAAU,EAAE,eAAe;QAC3B,IAAI,EAAE,SAAS;KAChB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU;IAIxB,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAChD,OAAO;QACL,QAAQ,EAAE,CAAC,SAAS;QACpB,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -1,11 +1,46 @@
 import { BaseIdPClient } from "./client.js";
-import type { BaseIdPConfig, ResolvedConfig, VerifiedPrincipal, VerifyAccessTokenOptions } from "./types.js";
+import type { BaseIdPConfig, MergedUser, ResolvedConfig, UserRepository, VerifiedPrincipal, VerifyAccessTokenOptions } from "./types.js";
 export declare class BaseIdPServerClient extends BaseIdPClient {
     private readonly serverConfig;
     private initialized;
     constructor(serverConfig: BaseIdPConfig);
     init(): Promise<ResolvedConfig>;
     verifyAccessToken(token: string, options?: VerifyAccessTokenOptions): Promise<VerifiedPrincipal>;
+    /**
+     * First-login upsert — the standard pattern for backends that maintain their
+     * own user table alongside Base IDP.
+     *
+     * Given a verified principal and a thin repository interface:
+     *   1. Calls `repository.findBySubject(principal.subject)` to check for an existing row
+     *   2. Calls `repository.upsert(data)` to create or update the row
+     *   3. Returns `{ principal, isNewUser, localUser }`
+     *
+     * Apps only need to implement two methods — everything else (token
+     * verification, claim extraction, audit fields) is handled by the SDK.
+     *
+     * Works with any data layer: TypeORM, Prisma, Drizzle, raw SQL, etc.
+     *
+     * @example — NestJS service
+     * ```ts
+     * async login(principal: VerifiedPrincipal) {
+     *   const { isNewUser, localUser } = await this.baseIdp.mergeIdentity(
+     *     principal,
+     *     {
+     *       findBySubject: (sub) => this.users.findOne({ where: { subject: sub } }),
+     *       upsert: (data) => this.users.save(this.users.create({
+     *         subject: data.subject,
+     *         email: data.email,
+     *         name: data.name,
+     *         role: data.role,
+     *       })),
+     *     },
+     *   );
+     *   if (isNewUser) await this.sendWelcomeEmail(localUser);
+     *   return localUser;
+     * }
+     * ```
+     */
+    mergeIdentity<T extends Record<string, unknown>>(principal: VerifiedPrincipal, repository: UserRepository<T>): Promise<MergedUser<T>>;
 }
 export { BaseIdPServerClient as BaseIdpServerClient };
 export { verifyPasetoV4Public, unsafeFooter, unsafeFooterKid } from "./paseto.js";

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE7G,qBAAa,mBAAoB,SAAQ,aAAa;IAGxC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAFzC,OAAO,CAAC,WAAW,CAAS;gBAEC,YAAY,EAAE,aAAa;IAIlD,IAAI,IAAI,OAAO,CAAC,cAAc,CAAC;IAO/B,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAK3G;AAED,OAAO,EAAE,mBAAmB,IAAI,mBAAmB,EAAE,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClF,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,cAAc,EAEd,cAAc,EACd,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAEpB,qBAAa,mBAAoB,SAAQ,aAAa;IAGxC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAFzC,OAAO,CAAC,WAAW,CAAS;gBAEC,YAAY,EAAE,aAAa;IAIlD,IAAI,IAAI,OAAO,CAAC,cAAc,CAAC;IAO/B,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,iBAAiB,CAAC;IAM7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACG,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnD,SAAS,EAAE,iBAAiB,EAC5B,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;CAoB1B;AAED,OAAO,EAAE,mBAAmB,IAAI,mBAAmB,EAAE,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClF,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/server.js

@@ -19,6 +19,57 @@ export class BaseIdPServerClient extends BaseIdPClient {
         const keySet = await this.publicKeys();
         return verifyPasetoV4Public(token, keySet, this.cfg, options);
     }
+    /**
+     * First-login upsert — the standard pattern for backends that maintain their
+     * own user table alongside Base IDP.
+     *
+     * Given a verified principal and a thin repository interface:
+     *   1. Calls `repository.findBySubject(principal.subject)` to check for an existing row
+     *   2. Calls `repository.upsert(data)` to create or update the row
+     *   3. Returns `{ principal, isNewUser, localUser }`
+     *
+     * Apps only need to implement two methods — everything else (token
+     * verification, claim extraction, audit fields) is handled by the SDK.
+     *
+     * Works with any data layer: TypeORM, Prisma, Drizzle, raw SQL, etc.
+     *
+     * @example — NestJS service
+     * ```ts
+     * async login(principal: VerifiedPrincipal) {
+     *   const { isNewUser, localUser } = await this.baseIdp.mergeIdentity(
+     *     principal,
+     *     {
+     *       findBySubject: (sub) => this.users.findOne({ where: { subject: sub } }),
+     *       upsert: (data) => this.users.save(this.users.create({
+     *         subject: data.subject,
+     *         email: data.email,
+     *         name: data.name,
+     *         role: data.role,
+     *       })),
+     *     },
+     *   );
+     *   if (isNewUser) await this.sendWelcomeEmail(localUser);
+     *   return localUser;
+     * }
+     * ```
+     */
+    async mergeIdentity(principal, repository) {
+        const existing = await repository.findBySubject(principal.subject);
+        const upsertData = {
+            subject: principal.subject,
+            email: principal.email,
+            name: principal.name,
+            role: principal.role,
+            accountContext: principal.accountContext,
+            claims: principal.claims,
+        };
+        const localUser = await repository.upsert(upsertData);
+        return {
+            principal,
+            isNewUser: existing === null,
+            localUser,
+        };
+    }
 }
 export { BaseIdPServerClient as BaseIdpServerClient };
 export { verifyPasetoV4Public, unsafeFooter, unsafeFooterKid } from "./paseto.js";

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGnD,MAAM,OAAO,mBAAoB,SAAQ,aAAa;IAGvB;IAFrB,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,YAA2B;QACtD,KAAK,CAAC,YAAY,CAAC,CAAC;QADO,iBAAY,GAAZ,YAAY,CAAe;IAExD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,UAAoC,EAAE;QAC3E,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,OAAO,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;CACF;AAED,OAAO,EAAE,mBAAmB,IAAI,mBAAmB,EAAE,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAWnD,MAAM,OAAO,mBAAoB,SAAQ,aAAa;IAGvB;IAFrB,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,YAA2B;QACtD,KAAK,CAAC,YAAY,CAAC,CAAC;QADO,iBAAY,GAAZ,YAAY,CAAe;IAExD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,KAAa,EACb,UAAoC,EAAE;QAEtC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,OAAO,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,KAAK,CAAC,aAAa,CACjB,SAA4B,EAC5B,UAA6B;QAE7B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAEnE,MAAM,UAAU,GAAmB;YACjC,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEtD,OAAO;YACL,SAAS;YACT,SAAS,EAAE,QAAQ,KAAK,IAAI;YAC5B,SAAS;SACV,CAAC;IACJ,CAAC;CACF;AAED,OAAO,EAAE,mBAAmB,IAAI,mBAAmB,EAAE,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/types.d.ts

@@ -135,4 +135,68 @@ export type PKCEPair = {
     challenge: string;
     method: "S256";
 };
+export type LoginWithRedirectOptions = {
+    /** Where to send the user after successful login (stored in PKCE tx, passed to onRedirectCallback) */
+    returnTo?: string;
+    /** Explicit OAuth state — auto-generated if omitted */
+    state?: string;
+    /** Nonce to bind to the token — auto-generated if omitted */
+    nonce?: string;
+    /** Override the scopes for this login request */
+    scopes?: string | string[];
+    /** Override the redirect URI for this login request */
+    redirectUri?: string;
+    /** Extra OAuth parameters to forward to the authorization endpoint */
+    additionalParameters?: Record<string, string | undefined>;
+};
+export type AuthSession = {
+    /** Verified identity from Base IDP */
+    principal: VerifiedPrincipal;
+    /** Raw access token (PASETO v4.public) */
+    accessToken: string;
+    /** Unix timestamp (ms) when the access token expires */
+    expiresAt: number;
+};
+export type BrowserBaseIdpConfig = BaseIdPConfig & {
+    /** Exact callback URL — must be registered in Base IDP. Auto-discovered if omitted. */
+    redirectUri?: string;
+    /** Persist refresh token in localStorage so session survives page reload. Default: false */
+    persistSession?: boolean;
+    /** Prefix for sessionStorage / localStorage keys. Default: "base_idp" */
+    storagePrefix?: string;
+    /** Initial scopes — auto-discovered from client registration if omitted */
+    scopes?: string | string[];
+    /** Audience claim expected in the token. Default: "square-experience" */
+    audience?: string;
+};
+export type SessionChangeEvent = {
+    type: "signed_in" | "signed_out" | "refreshed" | "expired";
+    session: AuthSession | null;
+};
+export type SessionChangeListener = (event: SessionChangeEvent) => void;
+export type UpsertUserData = {
+    /** Base IDP global subject ID */
+    subject: string;
+    email?: string;
+    name?: string;
+    role: string;
+    accountContext: AccountContext;
+    claims: AccessClaims;
+};
+/**
+ * Minimal repository interface the app must implement to use mergeIdentity.
+ * Works with any ORM or raw SQL — TypeORM, Prisma, Drizzle, etc.
+ */
+export type UserRepository<T extends Record<string, unknown> = Record<string, unknown>> = {
+    findBySubject(subject: string): Promise<T | null>;
+    upsert(data: UpsertUserData): Promise<T>;
+};
+export type MergedUser<T extends Record<string, unknown> = Record<string, unknown>> = {
+    /** Verified Base IDP principal */
+    principal: VerifiedPrincipal;
+    /** true = first login; false = returning user */
+    isNewUser: boolean;
+    /** The app's own user row after upsert */
+    localUser: T;
+};
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,0BAA0B,EAAE,MAAM,CAAC;IACnC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,SAAS,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,0BAA0B,EAAE,MAAM,CAAC;IACnC,YAAY,EAAE,QAAQ,CAAC;IACvB,cAAc,EAAE,WAAW,CAAC;IAC5B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5C,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,WAAW,CAAC;IACjB,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,SAAS,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,gBAAgB,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3D,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,cAAc,GAAG,MAAM,CAAC;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,cAAc,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,0BAA0B,EAAE,MAAM,CAAC;IACnC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,SAAS,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,0BAA0B,EAAE,MAAM,CAAC;IACnC,YAAY,EAAE,QAAQ,CAAC;IACvB,cAAc,EAAE,WAAW,CAAC;IAC5B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5C,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,WAAW,CAAC;IACjB,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,SAAS,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,gBAAgB,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3D,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,cAAc,GAAG,MAAM,CAAC;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,cAAc,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAIF,MAAM,MAAM,wBAAwB,GAAG;IACrC,sGAAsG;IACtG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3D,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,sCAAsC;IACtC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG;IACjD,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;IAC3D,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;AAIxE,MAAM,MAAM,cAAc,GAAG;IAC3B,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;IACxF,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;IACpF,kCAAkC;IAClC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,iDAAiD;IACjD,SAAS,EAAE,OAAO,CAAC;IACnB,0CAA0C;IAC1C,SAAS,EAAE,CAAC,CAAC;CACd,CAAC"}