clefbase 2.0.1 → 2.0.3

package/dist/auth/index.js

@@ -47,60 +47,14 @@ class SessionStore {
         catch { /* ignore */ }
     }
 }
-// ─── GIS script loader ────────────────────────────────────────────────────────
-const GIS_SCRIPT_URL = "https://accounts.google.com/gsi/client";
-let _gisLoading = null;
-function loadGisScript() {
-    if (typeof window === "undefined") {
-        return Promise.reject(new types_1.ClefbaseError("signInWithGoogle() requires a browser environment. " +
-            "Use signInWithGoogleToken(idToken) for server/Node.js contexts.", "UNSUPPORTED_ENVIRONMENT"));
-    }
-    if (window.google?.accounts?.id)
-        return Promise.resolve();
-    if (_gisLoading)
-        return _gisLoading;
-    _gisLoading = new Promise((resolve, reject) => {
-        if (window.google?.accounts?.id) {
-            resolve();
-            return;
-        }
-        const existing = document.querySelector(`script[src="${GIS_SCRIPT_URL}"]`);
-        const onLoad = () => resolve();
-        const onError = () => {
-            _gisLoading = null;
-            reject(new types_1.ClefbaseError("Failed to load the Google Identity Services script. Check your internet connection and Content Security Policy.", "GOOGLE_SCRIPT_LOAD_ERROR"));
-        };
-        if (existing) {
-            existing.addEventListener("load", onLoad, { once: true });
-            existing.addEventListener("error", onError, { once: true });
-            return;
-        }
-        const script = document.createElement("script");
-        script.src = GIS_SCRIPT_URL;
-        script.async = true;
-        script.defer = true;
-        script.addEventListener("load", onLoad, { once: true });
-        script.addEventListener("error", onError, { once: true });
-        document.head.appendChild(script);
-    });
-    return _gisLoading;
-}
-/**
- * Authentication service. Obtain via `getAuth(app)`.
- *
- * @example
- * const auth = getAuth(app);
- * const { user } = await auth.signIn("alice@example.com", "pass");
- * const unsub = auth.onAuthStateChanged(u => console.log(u));
- * unsub();
- */
 class Auth {
-    constructor(http) {
+    constructor(http, gatewayUrl, projectId) {
         this.http = http;
         this.store = new SessionStore();
         this.listeners = [];
-        /** Cached Google Client ID. `null` = confirmed not configured. `undefined` = not yet fetched. */
-        this._googleClientId = undefined;
+        this._modalCleanup = null;
+        this.gatewayUrl = gatewayUrl.replace(/\/+$/, "");
+        this.projectId = projectId;
         this.store.load();
     }
     // ── Internals ─────────────────────────────────────────────────────────────
@@ -121,186 +75,218 @@ class Auth {
         this.notify(result.user);
         return result;
     }
-    async resolveGoogleClientId() {
-        if (this._googleClientId !== undefined) {
-            if (!this._googleClientId) {
-                throw new types_1.ClefbaseError("Google Sign-In is not enabled for this project. " +
-                    "Add a Google Client ID in your Clefbase auth settings.", "GOOGLE_NOT_CONFIGURED");
-            }
-            return this._googleClientId;
-        }
-        const cfg = await this.http.get("/google/config");
-        if (!cfg.enabled || !cfg.clientId) {
-            this._googleClientId = null;
-            throw new types_1.ClefbaseError("Google Sign-In is not enabled for this project. " +
-                "Add a Google Client ID in your Clefbase auth settings.", "GOOGLE_NOT_CONFIGURED");
-        }
-        this._googleClientId = cfg.clientId;
-        return this._googleClientId;
-    }
     /** @internal — used by Storage to attach the bearer token to upload requests */
     getAuthHeaders() {
         const s = this.store.load();
         return s ? { Authorization: `Bearer ${s.token}` } : {};
     }
     // ── Public API ────────────────────────────────────────────────────────────
-    /** The currently signed-in user, or null. */
     get currentUser() { return this.store.load()?.user ?? null; }
-    /** The raw bearer token for the active session, or null. */
     get currentToken() { return this.store.load()?.token ?? null; }
-    /**
-     * Create a new account.
-     *
-     * @example
-     * const { user } = await auth.signUp("alice@example.com", "pass123", {
-     *   displayName: "Alice",
-     *   metadata: { role: "admin" },
-     * });
-     */
+    // ── Email / password ──────────────────────────────────────────────────────
     async signUp(email, password, profile) {
-        const result = await this.http.post("/signup", {
-            email, password, ...profile,
-        });
+        const result = await this.http.post("/signup", { email, password, ...profile });
         return this.handleResult(result);
     }
-    /**
-     * Sign in with email + password.
-     *
-     * @example
-     * const { user, token } = await auth.signIn("alice@example.com", "pass");
-     */
     async signIn(email, password) {
         const result = await this.http.post("/signin", { email, password });
         return this.handleResult(result);
     }
+    // ── Auth UI modal ─────────────────────────────────────────────────────────
     /**
-     * Sign in with Google using the Google Identity Services popup or One Tap.
-     *
-     * Browser-only. The GIS script (`accounts.google.com/gsi/client`) is loaded
-     * automatically — no manual `<script>` tag needed.
-     *
-     * Without `buttonOptions`, the Google One Tap prompt is shown.
-     * Pass `{ container }` to render a fully styled Google button instead —
-     * which is more reliable since One Tap can be suppressed by the browser.
+     * Open the Cleforyx hosted auth UI as a modal overlay on top of your page.
+     * Handles sign-in via email/password, Google, and magic link seamlessly.
      *
-     * Automatically handles new sign-ups: if the Google account has never been
-     * seen before, a new user record is created server-side.
-     *
-     * @throws `ClefbaseError` with code `GOOGLE_NOT_CONFIGURED` if no Client ID
-     *   has been set in the project's auth settings.
-     * @throws `ClefbaseError` with code `GOOGLE_PROMPT_SUPPRESSED` if One Tap
-     *   could not be displayed (switch to button mode in that case).
-     * @throws `ClefbaseError` with code `GOOGLE_SIGN_IN_CANCELLED` if the user
-     *   dismissed the popup.
+     * The modal closes automatically on successful sign-in and fires `onSuccess`.
      *
      * @example
-     * // One Tap prompt
-     * const { user } = await auth.signInWithGoogle();
-     *
-     * // Branded Google button
-     * const { user } = await auth.signInWithGoogle({
-     *   container: document.getElementById("google-btn")!,
-     *   theme: "filled_blue",
-     *   size: "large",
-     *   text: "continue_with",
+     * auth.openAuthUI({
+     *   onSuccess: (result) => {
+     *     console.log("Signed in:", result.user.email);
+     *     navigate("/dashboard");
+     *   },
      * });
-     *
-     * // React example
-     * const btnRef = useRef<HTMLDivElement>(null);
-     * await auth.signInWithGoogle({ container: btnRef.current! });
      */
-    async signInWithGoogle(buttonOptions) {
-        const clientId = await this.resolveGoogleClientId();
-        await loadGisScript();
-        const gis = window.google.accounts.id;
-        return new Promise((resolve, reject) => {
-            gis.initialize({
-                client_id: clientId,
-                auto_select: false,
-                cancel_on_tap_outside: true,
-                callback: async ({ credential }) => {
-                    try {
-                        resolve(await this.signInWithGoogleToken(credential));
-                    }
-                    catch (err) {
-                        reject(err);
-                    }
-                },
-            });
-            if (buttonOptions?.container) {
-                const { container, theme, size, text, shape, width, locale } = buttonOptions;
-                gis.renderButton(container, {
-                    type: "standard",
-                    theme: theme ?? "outline",
-                    size: size ?? "large",
-                    text: text ?? "signin_with",
-                    shape: shape ?? "rectangular",
-                    logo_alignment: "left",
-                    width,
-                    locale,
+    openAuthUI(options = {}) {
+        if (typeof window === "undefined") {
+            throw new types_1.ClefbaseError("openAuthUI() requires a browser environment.", "UNSUPPORTED_ENVIRONMENT");
+        }
+        const { mode = "modal", onSuccess, onDismiss, redirectUrl } = options;
+        const currentUrl = window.location.href;
+        const returnUrl = redirectUrl ?? currentUrl;
+        const params = new URLSearchParams({
+            project: this.projectId,
+            redirect: returnUrl,
+            embed: "popup",
+        });
+        const authUrl = `${this.gatewayUrl}/login?${params}`;
+        if (mode === "redirect") {
+            window.location.href = authUrl;
+            return;
+        }
+        // ── Modal mode ──────────────────────────────────────────────────────────
+        // Inject styles once
+        if (!document.getElementById("cfx-modal-styles")) {
+            const style = document.createElement("style");
+            style.id = "cfx-modal-styles";
+            style.textContent = `
+        @keyframes cfxFadeIn  { from { opacity: 0 } to { opacity: 1 } }
+        @keyframes cfxSlideUp { from { transform: translateY(20px); opacity: 0 } to { transform: none; opacity: 1 } }
+        #cfx-auth-overlay {
+          position: fixed; inset: 0; z-index: 999999;
+          background: rgba(15,23,42,0.6); backdrop-filter: blur(4px);
+          display: flex; align-items: center; justify-content: center;
+          animation: cfxFadeIn 0.18s ease;
+          padding: 16px; box-sizing: border-box;
+        }
+        #cfx-auth-card {
+          background: white; border-radius: 20px;
+          box-shadow: 0 24px 64px rgba(0,0,0,0.2);
+          overflow: hidden; width: 100%; max-width: 460px;
+          animation: cfxSlideUp 0.22s ease; position: relative;
+        }
+        #cfx-auth-frame {
+          width: 100%; height: 560px; border: none; display: block;
+        }
+        #cfx-auth-close {
+          position: absolute; top: 14px; right: 16px;
+          background: rgba(0,0,0,0.06); border: none;
+          width: 28px; height: 28px; border-radius: 50%;
+          font-size: 16px; line-height: 1; cursor: pointer;
+          display: flex; align-items: center; justify-content: center;
+          color: #64748b; z-index: 1; transition: background 0.15s;
+        }
+        #cfx-auth-close:hover { background: rgba(0,0,0,0.12); }
+      `;
+            document.head.appendChild(style);
+        }
+        // Create overlay
+        const overlay = document.createElement("div");
+        overlay.id = "cfx-auth-overlay";
+        const card = document.createElement("div");
+        card.id = "cfx-auth-card";
+        const closeBtn = document.createElement("button");
+        closeBtn.id = "cfx-auth-close";
+        closeBtn.innerHTML = "&#x2715;";
+        closeBtn.setAttribute("aria-label", "Close");
+        const iframe = document.createElement("iframe");
+        iframe.id = "cfx-auth-frame";
+        iframe.src = authUrl;
+        iframe.setAttribute("allow", "identity-credentials-get");
+        card.appendChild(closeBtn);
+        card.appendChild(iframe);
+        overlay.appendChild(card);
+        document.body.appendChild(overlay);
+        // Prevent body scroll
+        const prevOverflow = document.body.style.overflow;
+        document.body.style.overflow = "hidden";
+        const cleanup = () => {
+            overlay.remove();
+            document.body.style.overflow = prevOverflow;
+            window.removeEventListener("message", messageHandler);
+            this._modalCleanup = null;
+        };
+        const messageHandler = async (e) => {
+            if (e.data?.source !== "cleforyx-auth" || e.data?.type !== "auth_success")
+                return;
+            const { token, user: rawUser } = e.data;
+            if (!token)
+                return;
+            cleanup();
+            // Build a full AuthResult — fetch fresh user data to get expiresAt
+            // Use the public /me endpoint (no API key needed, just dbId + bearer)
+            try {
+                const serverUrl = this.http.getBaseUrl().replace(/\/auth$/, "");
+                const res = await fetch(`${serverUrl}/auth/public/me?dbId=${encodeURIComponent(this.projectId)}`, {
+                    headers: { Authorization: `Bearer ${token}` },
                 });
+                const user = res.ok ? await res.json() : rawUser;
+                const expiresAt = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000).toISOString();
+                const result = { user, token, session: { token, expiresAt } };
+                this.handleResult(result);
+                onSuccess?.(result);
             }
-            else {
-                gis.prompt((n) => {
-                    if (n.isNotDisplayed()) {
-                        reject(new types_1.ClefbaseError(`Google One Tap could not be displayed (${n.getNotDisplayedReason()}). ` +
-                            "Pass a { container } element to render a sign-in button instead.", "GOOGLE_PROMPT_SUPPRESSED"));
-                    }
-                    else if (n.isSkippedMoment() || n.isDismissedMoment()) {
-                        reject(new types_1.ClefbaseError("Google Sign-In was cancelled by the user.", "GOOGLE_SIGN_IN_CANCELLED"));
-                    }
-                });
+            catch {
+                // Fallback: use the user data from postMessage directly
+                const expiresAt = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000).toISOString();
+                const result = { user: rawUser, token, session: { token, expiresAt } };
+                this.handleResult(result);
+                onSuccess?.(result);
+            }
+        };
+        closeBtn.onclick = () => { cleanup(); onDismiss?.(); };
+        overlay.addEventListener("click", (e) => {
+            if (e.target === overlay) {
+                cleanup();
+                onDismiss?.();
             }
         });
+        window.addEventListener("message", messageHandler);
+        this._modalCleanup = cleanup;
+    }
+    /** Close the auth modal programmatically if open. */
+    closeAuthUI() {
+        this._modalCleanup?.();
     }
+    // ── Gateway redirect flow ─────────────────────────────────────────────────
     /**
-     * Sign in with Google using a raw ID token string.
-     *
-     * Use this when you already have a `credential` from Google's callback —
-     * for example with a custom button implementation, React Native Google
-     * Sign-In, or any other flow that gives you an ID token directly.
-     *
-     * Works in both browser and Node.js environments.
+     * Redirect to the Cleforyx auth gateway for OAuth sign-in.
+     * Use `openAuthUI()` for a modal experience instead.
      *
      * @example
-     * // Inside a GIS callback
-     * google.accounts.id.initialize({
-     *   client_id: "...",
-     *   callback: async ({ credential }) => {
-     *     const { user } = await auth.signInWithGoogleToken(credential);
-     *   },
-     * });
-     *
-     * // React Native
-     * const { idToken } = await GoogleSignin.signIn();
-     * const { user } = await auth.signInWithGoogleToken(idToken);
+     * await auth.signInWithGateway("google");
      */
-    async signInWithGoogleToken(idToken) {
-        if (!idToken || typeof idToken !== "string") {
-            throw new types_1.ClefbaseError("idToken must be a non-empty string.", "INVALID_ARGUMENT");
+    async signInWithGateway(provider, options) {
+        if (typeof window === "undefined") {
+            throw new types_1.ClefbaseError("signInWithGateway() requires a browser environment.", "UNSUPPORTED_ENVIRONMENT");
         }
-        const result = await this.http.post("/google", { idToken });
-        return this.handleResult(result);
+        const redirectUrl = options?.redirectUrl ?? window.location.href;
+        const params = new URLSearchParams({ project: this.projectId, redirect: redirectUrl });
+        window.location.href = `${this.gatewayUrl}/google?${params}`;
+        return new Promise(() => { });
+    }
+    isGatewayCallbackPending() {
+        if (typeof window === "undefined")
+            return false;
+        return new URLSearchParams(window.location.search).has("cfx_token");
     }
     /**
-     * Returns `true` if Google Sign-In is configured for this project.
-     * Useful for conditionally rendering a "Sign in with Google" button.
+     * Call on every page load to handle the gateway redirect callback.
+     * Detects `?cfx_token=` in the URL, validates it, and returns the signed-in user.
      *
      * @example
-     * if (await auth.isGoogleSignInEnabled()) {
-     *   showGoogleButton();
-     * }
+     * useEffect(() => {
+     *   auth.handleGatewayCallback().then(result => {
+     *     if (result) navigate("/dashboard");
+     *   });
+     * }, []);
      */
-    async isGoogleSignInEnabled() {
+    async handleGatewayCallback() {
+        if (typeof window === "undefined")
+            return null;
+        const params = new URLSearchParams(window.location.search);
+        const token = params.get("cfx_token");
+        if (!token)
+            return null;
+        // Clean URL
+        params.delete("cfx_token");
+        params.delete("cfx_project");
+        window.history.replaceState({}, "", window.location.pathname + (params.toString() ? `?${params}` : ""));
+        // Use /auth/public/me — no API key needed, just dbId + bearer
+        const serverUrl = this.http.getBaseUrl().replace(/\/auth$/, "");
         try {
-            const cfg = await this.http.get("/google/config");
-            return cfg.enabled && Boolean(cfg.clientId);
+            const res = await fetch(`${serverUrl}/auth/public/me?dbId=${encodeURIComponent(this.projectId)}`, { headers: { Authorization: `Bearer ${token}` } });
+            if (!res.ok)
+                throw new Error(`${res.status} ${res.statusText}`);
+            const user = await res.json();
+            const expiresAt = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000).toISOString();
+            return this.handleResult({ user, token, session: { token, expiresAt } });
         }
-        catch {
-            return false;
+        catch (err) {
+            throw new types_1.ClefbaseError(`Gateway callback failed: ${err.message}`, "GATEWAY_CALLBACK_ERROR");
         }
     }
-    /** Sign out and clear the local session. */
+    // ── Session management ────────────────────────────────────────────────────
     async signOut() {
         const token = this.currentToken;
         if (token) {
@@ -311,15 +297,7 @@ class Auth {
         }
         this.store.clear();
         this.notify(null);
-        // Tell GIS to disable auto-select so the user isn't silently re-signed in
-        if (typeof window !== "undefined" && window.google?.accounts?.id) {
-            try {
-                window.google.accounts.id.disableAutoSelect();
-            }
-            catch { /* ignore */ }
-        }
     }
-    /** Re-fetch the current user's profile from the server and update the cache. */
     async refreshCurrentUser() {
         const token = this.currentToken;
         if (!token)
@@ -336,72 +314,45 @@ class Auth {
             return null;
         }
     }
-    /**
-     * Update the signed-in user's profile.
-     *
-     * @example
-     * await auth.updateProfile({ displayName: "Bob", metadata: { theme: "dark" } });
-     */
     async updateProfile(updates) {
         const token = this.currentToken;
         if (!token)
             throw new Error("No user is currently signed in.");
-        const user = await this.http.patch("/me", updates, {
-            Authorization: `Bearer ${token}`,
-        });
+        const user = await this.http.patch("/me", updates, { Authorization: `Bearer ${token}` });
         const session = this.store.load();
         if (session)
             this.store.save({ ...session, user });
         this.notify(user);
         return user;
     }
-    /** Change password. All other sessions are invalidated server-side. */
     async changePassword(currentPassword, newPassword) {
         const token = this.currentToken;
         if (!token)
             throw new Error("No user is currently signed in.");
         await this.http.post("/change-password", { currentPassword, newPassword }, { Authorization: `Bearer ${token}` });
     }
-    /** Request a password-reset email. Safe to call even for unregistered addresses. */
     async sendPasswordResetEmail(email) {
         await this.http.post("/forgot-password", { email });
     }
-    /** Complete a password reset with the token from the reset email. */
     async confirmPasswordReset(resetToken, newPassword) {
         await this.http.post("/reset-password", { token: resetToken, newPassword });
     }
-    /** Send an email verification code to the currently signed-in user. */
     async sendEmailVerification() {
         const token = this.currentToken;
         if (!token)
             throw new Error("No user is currently signed in.");
         await this.http.post("/send-verification", undefined, { Authorization: `Bearer ${token}` });
     }
-    /** Verify email with the code the user received. */
     async verifyEmail(code) {
         return this.http.post("/verify-email", { code });
     }
-    /**
-     * Subscribe to auth state changes.
-     * Fires immediately with the current user, then on every change.
-     * Returns an unsubscribe function.
-     *
-     * @example
-     * const unsubscribe = auth.onAuthStateChanged(user => {
-     *   if (user) console.log("signed in:", user.email);
-     *   else console.log("signed out");
-     * });
-     * unsubscribe();
-     */
     onAuthStateChanged(callback) {
         this.listeners.push(callback);
         try {
             callback(this.currentUser);
         }
         catch { /* ignore */ }
-        return () => {
-            this.listeners = this.listeners.filter(cb => cb !== callback);
-        };
+        return () => { this.listeners = this.listeners.filter(cb => cb !== callback); };
     }
 }
 exports.Auth = Auth;

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":";;;AAEA,oCAAyC;AAUzC,MAAM,YAAY;IAAlB;QACU,YAAO,GAA4B,IAAI,CAAC;QAC/B,QAAG,GAAG,aAAa,CAAC;IAiCvC,CAAC;IA/BC,IAAY,EAAE;QACZ,IAAI,CAAC;YAAC,OAAO,OAAO,YAAY,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,CAAC;QACzE,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,CAAmB;QACtB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACtD,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACtC,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;gBACnD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;oBAC5C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;oBACtB,OAAO,IAAI,CAAC,OAAO,CAAC;gBACtB,CAAC;gBACD,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC;CACF;AA6CD,iFAAiF;AAEjF,MAAM,cAAc,GAAG,wCAAwC,CAAC;AAChE,IAAI,WAAW,GAAyB,IAAI,CAAC;AAE7C,SAAS,aAAa;IACpB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,qBAAa,CACf,qDAAqD;YACrD,iEAAiE,EACjE,yBAAyB,CAC1B,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1D,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAEvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CACrC,eAAe,cAAc,IAAI,CAClC,CAAC;QAEF,MAAM,MAAM,GAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM,CAAC,IAAI,qBAAa,CACtB,iHAAiH,EACjH,0BAA0B,CAC3B,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,gBAAgB,CAAC,MAAM,EAAG,MAAM,EAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,GAAK,cAAc,CAAC;QAC9B,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAG,MAAM,EAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC;AA+BD;;;;;;;;GAQG;AACH,MAAa,IAAI;IAOf,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;QAN5B,UAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QACpC,cAAS,GAAwB,EAAE,CAAC;QAE5C,iGAAiG;QACzF,oBAAe,GAA8B,SAAS,CAAC;QAG7D,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,6EAA6E;IAErE,MAAM,CAAC,IAAqB;QAClC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAkB;QACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC1B,MAAM,IAAI,qBAAa,CACrB,kDAAkD;oBAClD,wDAAwD,EACxD,uBAAuB,CACxB,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9B,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,gBAAgB,CAAC,CAAC;QAExE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,MAAM,IAAI,qBAAa,CACrB,kDAAkD;gBAClD,wDAAwD,EACxD,uBAAuB,CACxB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,QAAQ,CAAC;QACpC,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,gFAAgF;IAChF,cAAc;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,6EAA6E;IAE7E,6CAA6C;IAC7C,IAAI,WAAW,KAAsB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;IAE9E,4DAA4D;IAC5D,IAAI,YAAY,KAAoB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;IAE9E;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CACV,KAAa,EACb,QAAgB,EAChB,OAIC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAa,SAAS,EAAE;YACzD,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO;SAC5B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,QAAgB;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAa,SAAS,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,KAAK,CAAC,gBAAgB,CAAC,aAAmC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACpD,MAAM,aAAa,EAAE,CAAC;QAEtB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAEvC,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,GAAG,CAAC,UAAU,CAAC;gBACb,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,KAAK;gBAClB,qBAAqB,EAAE,IAAI;gBAC3B,QAAQ,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;oBACjC,IAAI,CAAC;wBACH,OAAO,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;oBACxD,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,aAAa,EAAE,SAAS,EAAE,CAAC;gBAC7B,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;gBAC7E,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE;oBAC1B,IAAI,EAAY,UAAU;oBAC1B,KAAK,EAAW,KAAK,IAAK,SAAS;oBACnC,IAAI,EAAY,IAAI,IAAM,OAAO;oBACjC,IAAI,EAAY,IAAI,IAAM,aAAa;oBACvC,KAAK,EAAW,KAAK,IAAK,aAAa;oBACvC,cAAc,EAAE,MAAM;oBACtB,KAAK;oBACL,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;oBACf,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;wBACvB,MAAM,CAAC,IAAI,qBAAa,CACtB,0CAA0C,CAAC,CAAC,qBAAqB,EAAE,KAAK;4BACxE,kEAAkE,EAClE,0BAA0B,CAC3B,CAAC,CAAC;oBACL,CAAC;yBAAM,IAAI,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC;wBACxD,MAAM,CAAC,IAAI,qBAAa,CACtB,2CAA2C,EAC3C,0BAA0B,CAC3B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,qBAAqB,CAAC,OAAe;QACzC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,qBAAa,CAAC,qCAAqC,EAAE,kBAAkB,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAa,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,qBAAqB;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,gBAAgB,CAAC,CAAC;YACxE,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,OAAO;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAElB,0EAA0E;QAC1E,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC;gBAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,kBAAkB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAW,KAAK,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;YACxF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAInB;QACC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAW,KAAK,EAAE,OAAO,EAAE;YAC3D,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,cAAc,CAAC,eAAuB,EAAE,WAAmB;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAClB,kBAAkB,EAClB,EAAE,eAAe,EAAE,WAAW,EAAE,EAChC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CACrC,CAAC;IACJ,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,sBAAsB,CAAC,KAAa;QACxC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,oBAAoB,CAAC,UAAkB,EAAE,WAAmB;QAChE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,qBAAqB;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAW,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,QAA2B;QAC5C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;QAChE,CAAC,CAAC;IACJ,CAAC;CACF;AAxVD,oBAwVC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":";;;AAEA,oCAAyC;AAUzC,MAAM,YAAY;IAAlB;QACU,YAAO,GAA4B,IAAI,CAAC;QAC/B,QAAG,GAAG,aAAa,CAAC;IAiCvC,CAAC;IA/BC,IAAY,EAAE;QACZ,IAAI,CAAC;YAAC,OAAO,OAAO,YAAY,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,CAAC;QACzE,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,CAAmB;QACtB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACtD,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACtC,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;gBACnD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;oBAC5C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;oBACtB,OAAO,IAAI,CAAC,OAAO,CAAC;gBACtB,CAAC;gBACD,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC;CACF;AAgCD,MAAa,IAAI;IAOf,YACmB,IAAgB,EACjC,UAAkB,EAClB,SAAiB;QAFA,SAAI,GAAJ,IAAI,CAAY;QAPlB,UAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QACpC,cAAS,GAAwB,EAAE,CAAC;QAGpC,kBAAa,GAAwB,IAAI,CAAC;QAOhD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAI,SAAS,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,6EAA6E;IAErE,MAAM,CAAC,IAAqB;QAClC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAkB;QACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,KAAK,EAAM,MAAM,CAAC,KAAK;YACvB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,IAAI,EAAO,MAAM,CAAC,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gFAAgF;IAChF,cAAc;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,6EAA6E;IAE7E,IAAI,WAAW,KAAsB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,YAAY,KAAqB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;IAE/E,6EAA6E;IAE7E,KAAK,CAAC,MAAM,CACV,KAAa,EACb,QAAgB,EAChB,OAAyF;QAEzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAa,SAAS,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,QAAgB;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAa,SAAS,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,6EAA6E;IAE7E;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,UAA6B,EAAE;QACxC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,qBAAa,CAAC,8CAA8C,EAAE,yBAAyB,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,EAAE,IAAI,GAAG,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QAEtE,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxC,MAAM,SAAS,GAAI,WAAW,IAAI,UAAU,CAAC;QAE7C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,OAAO,EAAG,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAK,OAAO;SAClB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,UAAU,UAAU,MAAM,EAAE,CAAC;QAErD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,2EAA2E;QAE3E,qBAAqB;QACrB,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC9C,KAAK,CAAC,EAAE,GAAG,kBAAkB,CAAC;YAC9B,KAAK,CAAC,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BnB,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,iBAAiB;QACjB,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,CAAC,EAAE,GAAG,kBAAkB,CAAC;QAEhC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,GAAG,eAAe,CAAC;QAE1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAClD,QAAQ,CAAC,EAAE,GAAG,gBAAgB,CAAC;QAC/B,QAAQ,CAAC,SAAS,GAAG,UAAU,CAAC;QAChC,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,GAAG,gBAAgB,CAAC;QAC7B,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC;QACrB,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAEzD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAEnC,sBAAsB;QACtB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAExC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,YAAY,CAAC;YAC5C,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACtD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC,CAAC;QAEF,MAAM,cAAc,GAAG,KAAK,EAAE,CAAe,EAAE,EAAE;YAC/C,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,eAAe,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,cAAc;gBAAE,OAAO;YAElF,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,IAAyC,CAAC;YAC7E,IAAI,CAAC,KAAK;gBAAE,OAAO;YAEnB,OAAO,EAAE,CAAC;YAEV,mEAAmE;YACnE,sEAAsE;YACtE,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE;oBAChG,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;iBAC9C,CAAC,CAAC;gBACH,MAAM,IAAI,GAAa,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAc,CAAC,CAAC,CAAC,OAAO,CAAC;gBACvE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAChF,MAAM,MAAM,GAAe,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;gBAC1E,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,wDAAwD;gBACxD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAChF,MAAM,MAAM,GAAe,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;gBACnF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC1B,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC;QAEF,QAAQ,CAAC,OAAO,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtC,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAAC,OAAO,EAAE,CAAC;gBAAC,SAAS,EAAE,EAAE,CAAC;YAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAEnD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;IAC/B,CAAC;IAED,qDAAqD;IACrD,WAAW;QACT,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;IACzB,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CACrB,QAAkB,EAClB,OAA8B;QAE9B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,qBAAa,CAAC,qDAAqD,EAAE,yBAAyB,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,WAAW,MAAM,EAAE,CAAC;QAC7D,OAAO,IAAI,OAAO,CAAQ,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,wBAAwB;QACtB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO,KAAK,CAAC;QAChD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,qBAAqB;QACzB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAE/C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,YAAY;QACZ,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,YAAY,CACzB,EAAE,EACF,EAAE,EACF,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACnE,CAAC;QAEF,8DAA8D;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,GAAG,GAAI,MAAM,KAAK,CACtB,GAAG,SAAS,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EACxE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAClD,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAc,CAAC;YAC1C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAChF,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,qBAAa,CACrB,4BAA6B,GAAa,CAAC,OAAO,EAAE,EACpD,wBAAwB,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,OAAO;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAW,KAAK,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;YACxF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAInB;QACC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAW,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,eAAuB,EAAE,WAAmB;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;IACnH,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,KAAa;QACxC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,UAAkB,EAAE,WAAmB;QAChE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAW,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,kBAAkB,CAAC,QAA2B;QAC5C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;CACF;AAnWD,oBAmWC"}

package/dist/cli-src/cli/commands/init.js

@@ -764,7 +764,18 @@ function buildLibTs(cfg) {
         ` *`,
         ` * Usage:`,
         ...(database ? [` *   import { db } from "@lib/clefBase";`] : []),
-        ...(auth ? [` *   import { auth } from "@lib/clefBase";`] : []),
+        ...(auth ? [
+            ` *   import { auth } from "@lib/clefBase";`,
+            ` *`,
+            ` *   // Email / password`,
+            ` *   const { user } = await auth.signIn("alice@example.com", "pass");`,
+            ` *`,
+            ` *   // Google sign-in — add this to your root component / entry point:`,
+            ` *   await auth.handleGatewayCallback(); // handles ?cfx_token= on return`,
+            ` *`,
+            ` *   // On sign-in button click:`,
+            ` *   await auth.signInWithGateway("google");`,
+        ] : []),
         ...(storage ? [` *   import { storage } from "@lib/clefBase";`] : []),
         ...(fns ? [
             ` *   import { fns, httpsCallable } from "@lib/clefBase";`,
@@ -804,6 +815,20 @@ function buildLibTs(cfg) {
         lines.push(`/** Clefbase Auth — sign up, sign in, manage sessions. */`);
         lines.push(`export const auth: Auth = getAuth(app);`);
         lines.push("");
+        lines.push(`/**`);
+        lines.push(` * Call this once on every page load (before rendering your UI).`);
+        lines.push(` * Detects the ?cfx_token= param the gateway appends after OAuth,`);
+        lines.push(` * saves the session, and cleans the URL.`);
+        lines.push(` *`);
+        lines.push(` * @example`);
+        lines.push(` * // React / Next.js — in your root layout or _app.tsx:`);
+        lines.push(` * useEffect(() => { auth.handleGatewayCallback(); }, []);`);
+        lines.push(` *`);
+        lines.push(` * // Vanilla JS — at the top of your entry point:`);
+        lines.push(` * await auth.handleGatewayCallback();`);
+        lines.push(` */`);
+        lines.push(`export { auth };`);
+        lines.push("");
     }
     if (storage) {
         lines.push(`/** Clefbase Storage — upload and manage files. */`);
@@ -941,6 +966,8 @@ function printUsageHint(cfg) {
     if (cfg.services.auth) {
         console.log();
         console.log(chalk_1.default.cyan(`  const { user } = await auth.signIn("email", "pass");`));
+        console.log(chalk_1.default.cyan(`  await auth.signInWithGateway("google"); // redirects to auth.cleforyx.com`));
+        console.log(chalk_1.default.cyan(`  await auth.handleGatewayCallback();     // call on every page load`));
     }
     if (cfg.services.storage) {
         console.log();