fetchguard 1.5.2 → 1.5.4

package/README.md

@@ -183,6 +183,32 @@ await api.logout()
 unsubscribe()
 ```
 
+### Multiple Login URLs
+
+FetchGuard supports dynamic login URL selection for different auth methods (OAuth, phone, etc.):
+
+```ts
+// Use default login URL
+await api.login({
+  email: 'user@example.com',
+  password: 'password123'
+})
+
+// Override with OAuth URL
+await api.login(
+  { code: 'oauth_code_123', provider: 'google' },
+  'https://api.example.com/auth/oauth'  // ← Custom URL
+)
+
+// Override with phone auth URL
+await api.login(
+  { phone: '+84987654321', otp: '123456' },
+  'https://api.example.com/auth/phone'  // ← Custom URL
+)
+```
+
+No need to create custom methods for each auth type - just pass the URL as the second parameter!
+
 ### Public Endpoints and Headers
 
 ```ts
@@ -511,11 +537,11 @@ if (res.isOk()) {
 }
 ```
 
-Grouped error helpers are exported: `GeneralErrors`, `InitErrors`, `AuthErrors`, `DomainErrors`, `NetworkErrors`, `HttpErrors`, `RequestErrors`.
+Grouped error helpers are exported: `GeneralErrors`, `InitErrors`, `AuthErrors`, `DomainErrors`, `RequestErrors`.
 
-### HTTP Errors vs Network Errors
+### Request Errors (HTTP & Network)
 
-FetchGuard distinguishes between **HTTP errors** (server returned 4xx/5xx) and **Network errors** (connection failed):
+FetchGuard uses a unified `RequestErrors` category that includes both HTTP and network errors:
 
 ```ts
 const res = await api.post('/data', payload)
@@ -526,38 +552,44 @@ if (res.isOk()) {
 } else {
   const err = res.errors?.[0]
 
-  // HTTP 4xx/5xx errors - server responded with error status
-  if (err?.code === 'HTTP_NOT_FOUND') {
-    console.log('Resource not found')
-  } else if (err?.code === 'HTTP_UNAUTHORIZED') {
-    console.log('Need to login')
-  } else if (err?.code === 'HTTP_SERVER_ERROR') {
-    console.log('Server error:', res.meta?.body) // Error response body available in metadata
+  // HTTP errors (4xx/5xx) - server responded with error status
+  if (err?.code === 'HTTP_ERROR') {
+    const status = res.meta?.status
+    console.log(`HTTP ${status} error`)
+    console.log('Response body:', res.meta?.body)  // Debug server error response
+
+    // Check specific status codes if needed
+    if (status === 404) {
+      console.log('Resource not found')
+    } else if (status === 401) {
+      console.log('Unauthorized - need to login')
+    }
   }
 
-  // Network errors - connection failed, no response
+  // Network errors - connection failed, no HTTP response
   else if (err?.code === 'NETWORK_ERROR') {
     console.log('Connection failed - check internet')
-  } else if (err?.code === 'REQUEST_CANCELLED') {
+  }
+
+  // Request cancelled by user
+  else if (err?.code === 'REQUEST_CANCELLED') {
     console.log('Request was cancelled')
   }
 }
 ```
 
-**Available HTTP Error Codes:**
-- `HTTP_BAD_REQUEST` (400)
-- `HTTP_UNAUTHORIZED` (401)
-- `HTTP_FORBIDDEN` (403)
-- `HTTP_NOT_FOUND` (404)
-- `HTTP_INTERNAL_SERVER_ERROR` (500)
-- `HTTP_CLIENT_ERROR` (generic 4xx)
-- `HTTP_SERVER_ERROR` (generic 5xx)
+**Available Request Error Codes:**
+- `HTTP_ERROR` - Server returned 4xx/5xx status (includes response body in `result.meta`)
+- `NETWORK_ERROR` - Connection failed, timeout, or DNS error (no response)
+- `REQUEST_CANCELLED` - Request was cancelled via `cancel()` method
+- `RESPONSE_PARSE_FAILED` - Failed to read/parse response body
 
 **Key Points:**
-- ✅ HTTP 4xx/5xx errors include response body in `result.meta` for debugging
-- ✅ Network errors have no response body (connection failed before server responded)
-- ✅ All HTTP responses (including errors) pass through the same `FETCH_RESULT` message
-- ✅ Client splits success/error based on status code for clean API
+- ✅ Single `RequestErrors` category - easier to remember
+- ✅ HTTP errors include status code via `defineErrorAdvanced` (message: "HTTP 404 error")
+- ✅ HTTP error response body available in `result.meta` for debugging
+- ✅ Network errors have no response (connection failed before server responded)
+- ✅ Check `result.meta?.status` for specific HTTP status codes when needed
 
 ## Auth Methods and Events
 

package/dist/index.d.ts

@@ -56,9 +56,10 @@ interface TokenProvider {
     /**
      * Login with credentials (required)
      * @param payload - Login credentials (email/password, etc.)
+     * @param url - Optional URL override (if not provided, uses configured loginUrl)
      * @returns Result<TokenInfo> with tokens
      */
-    login(payload: unknown): Promise<Result<TokenInfo>>;
+    login(payload: unknown, url?: string): Promise<Result<TokenInfo>>;
     /**
      * Logout - clear tokens (required)
      * @param payload - Optional logout payload
@@ -105,8 +106,12 @@ interface TokenParser {
 interface AuthStrategy {
     /** Refresh access token */
     refresh(refreshToken: string | null): Promise<Response>;
-    /** Login with credentials */
-    login(payload: unknown): Promise<Response>;
+    /**
+     * Login with credentials
+     * @param payload - Login credentials
+     * @param url - Optional URL override (if not provided, uses configured loginUrl)
+     */
+    login(payload: unknown, url?: string): Promise<Response>;
     /** Logout */
     logout(payload?: unknown): Promise<Response>;
 }
@@ -254,9 +259,10 @@ declare class FetchGuardClient {
     /**
      * Convenience wrapper for login
      * @param payload - Login credentials
+     * @param url - Optional URL override
      * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)
      */
-    login(payload?: unknown, emitEvent?: boolean): Promise<Result<AuthResult>>;
+    login(payload?: unknown, url?: string, emitEvent?: boolean): Promise<Result<AuthResult>>;
     /**
      * Convenience wrapper for logout
      * @param payload - Optional logout payload
@@ -447,30 +453,14 @@ declare const DomainErrors: {
     } & Partial<ts_micro_result_factories_errors_advanced.BaseErrorParams>) | undefined) => ts_micro_result.ErrorDetail;
 };
 /**
- * Network errors (connection failures, no response)
- */
-declare const NetworkErrors: {
-    readonly NetworkError: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-    readonly FetchError: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-};
-/**
- * HTTP errors (server returned error status 4xx/5xx)
- */
-declare const HttpErrors: {
-    readonly ClientError: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-    readonly ServerError: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-    readonly BadRequest: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-    readonly Unauthorized: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-    readonly Forbidden: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-    readonly NotFound: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-    readonly InternalServerError: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-};
-/**
- * Request errors
+ * Request/Response errors (network, HTTP, parsing)
  */
 declare const RequestErrors: {
+    readonly NetworkError: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
     readonly Cancelled: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
-    readonly Timeout: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
+    readonly HttpError: (params?: ({
+        status: any;
+    } & Partial<ts_micro_result_factories_errors_advanced.BaseErrorParams>) | undefined) => ts_micro_result.ErrorDetail;
     readonly ResponseParseFailed: (params?: ts_micro_result.BaseErrorParams) => ts_micro_result.ErrorDetail;
 };
 
@@ -560,6 +550,10 @@ declare const cookieParser: TokenParser;
  *
  * Refresh token is sent automatically via httpOnly cookie
  * Credentials are sent in request body
+ *
+ * Login URL can be:
+ * - Configured once: loginUrl: 'https://api.example.com/auth/login'
+ * - Passed per call: login(payload, 'https://...')
  */
 declare function createCookieStrategy(config: {
     refreshUrl: string;
@@ -576,6 +570,10 @@ declare const cookieStrategy: AuthStrategy;
  * Suitable for SPA applications
  *
  * All tokens/credentials are sent in request body
+ *
+ * Login URL can be:
+ * - Configured once: loginUrl: 'https://api.example.com/auth/login'
+ * - Passed per call: login(payload, 'https://...')
  */
 declare function createBodyStrategy(config: {
     refreshUrl: string;
@@ -646,4 +644,4 @@ declare function base64ToArrayBuffer(base64: string): ArrayBuffer;
  */
 declare function isBinaryContentType(contentType: string): boolean;
 
-export { type ApiResponse, AuthErrors, type AuthResult, type AuthStrategy, DomainErrors, FetchGuardClient, type FetchGuardOptions, type FetchGuardRequestInit, GeneralErrors, HttpErrors, InitErrors, MSG, type MainToWorkerMessage, type MessageType, NetworkErrors, type ProviderConfig, type ProviderPresetConfig, type RefreshTokenStorage, RequestErrors, type SerializedFile, type SerializedFormData, type SerializedFormDataEntry, type TokenInfo, type TokenParser, type TokenProvider, type WorkerConfig, type WorkerToMainMessage, base64ToArrayBuffer, bodyParser, bodyStrategy, clearProviders, cookieParser, cookieStrategy, createBodyProvider, createBodyStrategy, createClient, createCookieProvider, createCookieStrategy, createIndexedDBStorage, createProvider, deserializeFormData, getProvider, hasProvider, isBinaryContentType, isFormData, isSerializedFormData, listProviders, registerProvider, serializeFormData, unregisterProvider };
+export { type ApiResponse, AuthErrors, type AuthResult, type AuthStrategy, DomainErrors, FetchGuardClient, type FetchGuardOptions, type FetchGuardRequestInit, GeneralErrors, InitErrors, MSG, type MainToWorkerMessage, type MessageType, type ProviderConfig, type ProviderPresetConfig, type RefreshTokenStorage, RequestErrors, type SerializedFile, type SerializedFormData, type SerializedFormDataEntry, type TokenInfo, type TokenParser, type TokenProvider, type WorkerConfig, type WorkerToMainMessage, base64ToArrayBuffer, bodyParser, bodyStrategy, clearProviders, cookieParser, cookieStrategy, createBodyProvider, createBodyStrategy, createClient, createCookieProvider, createCookieStrategy, createIndexedDBStorage, createProvider, deserializeFormData, getProvider, hasProvider, isBinaryContentType, isFormData, isSerializedFormData, listProviders, registerProvider, serializeFormData, unregisterProvider };

package/dist/index.js

@@ -45,22 +45,13 @@ var AuthErrors = {
 var DomainErrors = {
   NotAllowed: defineErrorAdvanced("DOMAIN_NOT_ALLOWED", "Domain not allowed: {url}", 403)
 };
-var NetworkErrors = {
-  NetworkError: defineError("NETWORK_ERROR", "Network error", 500),
-  FetchError: defineError("FETCH_ERROR", "Fetch error", 500)
-};
-var HttpErrors = {
-  ClientError: defineError("HTTP_CLIENT_ERROR", "HTTP client error (4xx)", 400),
-  ServerError: defineError("HTTP_SERVER_ERROR", "HTTP server error (5xx)", 500),
-  BadRequest: defineError("HTTP_BAD_REQUEST", "Bad request", 400),
-  Unauthorized: defineError("HTTP_UNAUTHORIZED", "Unauthorized", 401),
-  Forbidden: defineError("HTTP_FORBIDDEN", "Forbidden", 403),
-  NotFound: defineError("HTTP_NOT_FOUND", "Not found", 404),
-  InternalServerError: defineError("HTTP_INTERNAL_SERVER_ERROR", "Internal server error", 500)
-};
 var RequestErrors = {
+  // Network errors (connection failed, no response)
+  NetworkError: defineError("NETWORK_ERROR", "Network error", 500),
   Cancelled: defineError("REQUEST_CANCELLED", "Request was cancelled", 499),
-  Timeout: defineError("REQUEST_TIMEOUT", "Request timeout", 408),
+  // HTTP errors (server responded with error status)
+  HttpError: defineErrorAdvanced("HTTP_ERROR", "HTTP {status} error", 500),
+  // Response parsing errors
   ResponseParseFailed: defineError("RESPONSE_PARSE_FAILED", "Failed to parse response body", 500)
 };
 
@@ -192,24 +183,8 @@ var FetchGuardClient = class {
       if (status >= 200 && status < 400) {
         request.resolve(ok(payload));
       } else {
-        let httpError;
-        if (status === 400) {
-          httpError = HttpErrors.BadRequest();
-        } else if (status === 401) {
-          httpError = HttpErrors.Unauthorized();
-        } else if (status === 403) {
-          httpError = HttpErrors.Forbidden();
-        } else if (status === 404) {
-          httpError = HttpErrors.NotFound();
-        } else if (status === 500) {
-          httpError = HttpErrors.InternalServerError();
-        } else if (status >= 400 && status < 500) {
-          httpError = HttpErrors.ClientError({ message: `HTTP ${status}` });
-        } else {
-          httpError = HttpErrors.ServerError({ message: `HTTP ${status}` });
-        }
         request.resolve(err(
-          httpError,
+          RequestErrors.HttpError({ status }),
           {
             body: String(payload?.body ?? ""),
             headers: payload?.headers ?? {}
@@ -225,7 +200,7 @@ var FetchGuardClient = class {
       this.pendingRequests.delete(id);
       const status = typeof payload?.status === "number" ? payload.status : void 0;
       request.resolve(err(
-        NetworkErrors.NetworkError({ message: String(payload?.error || "Network error") }),
+        RequestErrors.NetworkError({ message: String(payload?.error || "Network error") }),
         void 0,
         status
       ));
@@ -447,10 +422,20 @@ var FetchGuardClient = class {
   /**
    * Convenience wrapper for login
    * @param payload - Login credentials
+   * @param url - Optional URL override
    * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)
    */
-  async login(payload, emitEvent = true) {
-    const args = typeof payload === "undefined" ? [] : [payload];
+  async login(payload, url, emitEvent = true) {
+    const args = [];
+    if (typeof payload !== "undefined") {
+      args.push(payload);
+    }
+    if (typeof url !== "undefined") {
+      if (args.length === 0) {
+        args.push(void 0);
+      }
+      args.push(url);
+    }
     return this.call("login", emitEvent, ...args);
   }
   /**
@@ -644,12 +629,12 @@ function createProvider(config) {
         }
         return ok2(tokenInfo);
       } catch (error) {
-        return err2(NetworkErrors.NetworkError({ message: String(error) }));
+        return err2(RequestErrors.NetworkError({ message: String(error) }));
       }
     },
-    async login(payload) {
+    async login(payload, url) {
       try {
-        const response = await config.strategy.login(payload);
+        const response = await config.strategy.login(payload, url);
         if (!response.ok) {
           return err2(AuthErrors.LoginFailed({ message: `HTTP ${response.status}` }));
         }
@@ -662,7 +647,7 @@ function createProvider(config) {
         }
         return ok2(tokenInfo);
       } catch (error) {
-        return err2(NetworkErrors.NetworkError({ message: String(error) }));
+        return err2(RequestErrors.NetworkError({ message: String(error) }));
       }
     },
     async logout(payload) {
@@ -682,7 +667,7 @@ function createProvider(config) {
           // Explicitly clear user on logout
         });
       } catch (error) {
-        return err2(NetworkErrors.NetworkError({ message: String(error) }));
+        return err2(RequestErrors.NetworkError({ message: String(error) }));
       }
     }
   };
@@ -783,8 +768,8 @@ function createCookieStrategy(config) {
         credentials: "include"
       });
     },
-    async login(payload) {
-      return fetch(config.loginUrl, {
+    async login(payload, url) {
+      return fetch(url || config.loginUrl, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(payload),
@@ -821,8 +806,8 @@ function createBodyStrategy(config) {
         credentials: "include"
       });
     },
-    async login(payload) {
-      return fetch(config.loginUrl, {
+    async login(payload, url) {
+      return fetch(url || config.loginUrl, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(payload),
@@ -885,10 +870,8 @@ export {
   DomainErrors,
   FetchGuardClient,
   GeneralErrors,
-  HttpErrors,
   InitErrors,
   MSG,
-  NetworkErrors,
   RequestErrors,
   base64ToArrayBuffer,
   bodyParser,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/client.ts","../src/messages.ts","../src/constants.ts","../src/errors.ts","../src/utils/formdata.ts","../src/utils/registry.ts","../src/provider/create-provider.ts","../src/provider/storage/indexeddb.ts","../src/provider/parser/body.ts","../src/provider/parser/cookie.ts","../src/provider/strategy/cookie.ts","../src/provider/strategy/body.ts","../src/provider/presets.ts","../src/utils/binary.ts"],"sourcesContent":["import type {\r\n  FetchGuardOptions,\r\n  FetchGuardRequestInit,\r\n  WorkerConfig,\r\n  ApiResponse,\r\n  ProviderPresetConfig,\r\n  AuthResult\r\n} from './types'\r\nimport type { MainToWorkerMessage } from './messages'\r\nimport { ok, err, type Result } from 'ts-micro-result'\r\nimport { MSG } from './messages'\r\nimport { DEFAULT_REFRESH_EARLY_MS } from './constants'\r\nimport { NetworkErrors, HttpErrors } from './errors'\r\nimport { serializeFormData, isFormData } from './utils/formdata'\r\n\r\n/**\r\n * Queue item for sequential message processing\r\n */\r\ninterface QueueItem {\r\n  id: string\r\n  message: MainToWorkerMessage\r\n  resolve: (response: unknown) => void\r\n  reject: (error: Error) => void\r\n  timeout: ReturnType<typeof setTimeout>\r\n}\r\n\r\n/**\r\n * FetchGuard Client - main interface cho việc gọi API thông qua Web Worker\r\n */\r\nexport class FetchGuardClient {\r\n  private worker: Worker\r\n  private messageId = 0\r\n  // Using unknown because different messages have different response types\r\n  // (ApiResponse for FETCH, AuthResult for AUTH_CALL, etc.)\r\n  private pendingRequests = new Map<string, {\r\n    resolve: (value: unknown) => void\r\n    reject: (error: Error) => void\r\n  }>()\r\n  private authListeners = new Set<(state: AuthResult) => void>()\r\n  private readyListeners = new Set<() => void>()\r\n  private isReady = false\r\n\r\n  private requestQueue: QueueItem[] = []\r\n  private isProcessingQueue = false\r\n  private queueTimeout = 30000 // 30 seconds\r\n  private setupResolve?: () => void\r\n  private setupReject?: (error: Error) => void\r\n\r\n  constructor(options: FetchGuardOptions) {\r\n    this.worker = new Worker(new URL('./worker.js', import.meta.url), { \r\n      type: 'module' \r\n    })\r\n\r\n    this.worker.onmessage = this.handleWorkerMessage.bind(this)\r\n    this.worker.onerror = this.handleWorkerError.bind(this)\r\n\r\n    this.initializeWorker(options)\r\n  }\r\n\r\n  /**\r\n   * Initialize worker with config and provider\r\n   */\r\n  private async initializeWorker(options: FetchGuardOptions): Promise<void> {\r\n    const config: WorkerConfig = {\r\n      allowedDomains: options.allowedDomains || [],\r\n      refreshEarlyMs: options.refreshEarlyMs ?? DEFAULT_REFRESH_EARLY_MS\r\n    }\r\n\r\n    // Serialize provider config based on type\r\n    let providerConfig: ProviderPresetConfig | string | null = null\r\n\r\n    if (typeof options.provider === 'string') {\r\n      // String = registry lookup (advanced usage)\r\n      providerConfig = options.provider\r\n    } else if ('type' in options.provider && options.provider.type) {\r\n      // ProviderPresetConfig object (recommended)\r\n      providerConfig = options.provider as ProviderPresetConfig\r\n    } else {\r\n      // TokenProvider instance - NOT SUPPORTED\r\n      throw new Error(\r\n        'Direct TokenProvider instance is not supported. Use ProviderPresetConfig instead:\\n' +\r\n        '  { type: \"cookie-auth\", refreshUrl: \"...\", loginUrl: \"...\", logoutUrl: \"...\" }\\n' +\r\n        'Or for custom providers, register in worker code and use string name.'\r\n      )\r\n    }\r\n\r\n    const message = {\r\n      id: this.generateMessageId(),\r\n      type: MSG.SETUP,\r\n      payload: {\r\n        config,\r\n        providerConfig\r\n      }\r\n    }\r\n\r\n    return new Promise((resolve, reject) => {\r\n      // Setup will respond with READY (no id, so we track separately)\r\n      this.setupResolve = resolve\r\n      this.setupReject = reject\r\n\r\n      this.worker.postMessage(message)\r\n\r\n      setTimeout(() => {\r\n        if (this.setupReject) {\r\n          this.setupReject(new Error('Worker setup timeout'))\r\n          this.setupResolve = undefined\r\n          this.setupReject = undefined\r\n        }\r\n      }, 10000)\r\n    })\r\n  }\r\n\r\n\r\n  /**\r\n   * Handle worker messages\r\n   */\r\n  private handleWorkerMessage(event: MessageEvent): void {\r\n    const { id, type, payload } = event.data\r\n\r\n    if (type === MSG.FETCH_RESULT) {\r\n      // FETCH_RESULT contains all HTTP responses (2xx, 3xx, 4xx, 5xx)\r\n      const request = this.pendingRequests.get(id)\r\n      if (!request) return\r\n\r\n      this.pendingRequests.delete(id)\r\n\r\n      const status = payload?.status\r\n\r\n      // Split ok/err based on HTTP status\r\n      if (status >= 200 && status < 400) {\r\n        // HTTP 2xx/3xx = success\r\n        request.resolve(ok(payload))\r\n      } else {\r\n        // HTTP 4xx/5xx = error with response metadata\r\n        // Map to specific error types for common status codes\r\n        let httpError\r\n        if (status === 400) {\r\n          httpError = HttpErrors.BadRequest()\r\n        } else if (status === 401) {\r\n          httpError = HttpErrors.Unauthorized()\r\n        } else if (status === 403) {\r\n          httpError = HttpErrors.Forbidden()\r\n        } else if (status === 404) {\r\n          httpError = HttpErrors.NotFound()\r\n        } else if (status === 500) {\r\n          httpError = HttpErrors.InternalServerError()\r\n        } else if (status >= 400 && status < 500) {\r\n          // Generic 4xx - need status in message\r\n          httpError = HttpErrors.ClientError({ message: `HTTP ${status}` })\r\n        } else {\r\n          // Generic 5xx - need status in message\r\n          httpError = HttpErrors.ServerError({ message: `HTTP ${status}` })\r\n        }\r\n\r\n        request.resolve(err(\r\n          httpError,\r\n          {\r\n            body: String(payload?.body ?? ''),\r\n            headers: payload?.headers ?? {}\r\n          },\r\n          payload?.status\r\n        ))\r\n      }\r\n      return\r\n    }\r\n\r\n    if (type === MSG.FETCH_ERROR) {\r\n      // Network/timeout/cancel errors (no HTTP response)\r\n      const request = this.pendingRequests.get(id)\r\n      if (!request) return\r\n\r\n      this.pendingRequests.delete(id)\r\n\r\n      const status = typeof payload?.status === 'number' ? payload.status : undefined\r\n      request.resolve(err(\r\n        NetworkErrors.NetworkError({ message: String(payload?.error || 'Network error') }),\r\n        undefined,\r\n        status\r\n      ))\r\n      return\r\n    }\r\n\r\n    if (type === MSG.ERROR) {\r\n      const request = this.pendingRequests.get(id)\r\n      if (!request) return\r\n\r\n      this.pendingRequests.delete(id)\r\n\r\n      // Reconstruct error Result from ErrorDetail[]\r\n      const errors = payload?.errors || []\r\n      request.resolve(err(errors))\r\n      return\r\n    }\r\n\r\n    if (type === MSG.SETUP_ERROR) {\r\n      // Setup failed - reject setup promise\r\n      if (this.setupReject) {\r\n        this.setupReject(new Error(`Worker setup failed: ${payload?.error || 'Unknown error'}`))\r\n        this.setupResolve = undefined\r\n        this.setupReject = undefined\r\n      }\r\n      return\r\n    }\r\n\r\n    if (type === MSG.READY) {\r\n      this.isReady = true\r\n\r\n      // Notify ready listeners\r\n      for (const listener of this.readyListeners) {\r\n        listener()\r\n      }\r\n\r\n      if (this.setupResolve) {\r\n        this.setupResolve()\r\n        this.setupResolve = undefined\r\n        this.setupReject = undefined\r\n      }\r\n      return\r\n    }\r\n\r\n    if (type === MSG.PONG) {\r\n      const request = this.pendingRequests.get(id)\r\n      if (request) {\r\n        this.pendingRequests.delete(id)\r\n        request.resolve(ok({ timestamp: payload?.timestamp }))\r\n      }\r\n      return\r\n    }\r\n\r\n    if (type === MSG.AUTH_STATE_CHANGED) {\r\n      for (const cb of this.authListeners) cb(payload)\r\n      return\r\n    }\r\n\r\n    if (type === MSG.AUTH_CALL_RESULT) {\r\n      const request = this.pendingRequests.get(id)\r\n      if (request) {\r\n        this.pendingRequests.delete(id)\r\n        request.resolve(ok(payload)) // payload is AuthResult\r\n      }\r\n      return\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Handle worker errors\r\n   */\r\n  private handleWorkerError(error: ErrorEvent): void {\r\n    console.error('Worker error:', error)\r\n    // Reject all pending requests\r\n    for (const [id, request] of this.pendingRequests) {\r\n      request.reject(new Error(`Worker error: ${error.message}`))\r\n    }\r\n    this.pendingRequests.clear()\r\n  }\r\n\r\n  /**\r\n   * Generate unique message ID\r\n   */\r\n  private generateMessageId(): string {\r\n    return `msg_${++this.messageId}_${Date.now()}`\r\n  }\r\n\r\n  /**\r\n   * Make API request\r\n   */\r\n  async fetch(url: string, options: FetchGuardRequestInit = {}): Promise<Result<ApiResponse>> {\r\n    const { result } = this.fetchWithId(url, options)\r\n    return result\r\n  }\r\n\r\n  /**\r\n   * Fetch with id for external cancellation\r\n   * Returns { id, result, cancel }\r\n   * Now uses queue system for sequential processing\r\n   */\r\n  fetchWithId(url: string, options: FetchGuardRequestInit = {}): {\r\n    id: string\r\n    result: Promise<Result<ApiResponse>>\r\n    cancel: () => void\r\n  } {\r\n    const id = this.generateMessageId()\r\n\r\n    // Serialize FormData if present (async operation)\r\n    const result = new Promise<Result<ApiResponse>>(async (resolve, reject) => {\r\n      this.pendingRequests.set(id, {\r\n        resolve: (response) => resolve(response as Result<ApiResponse>),\r\n        reject: (error) => reject(error)\r\n      })\r\n\r\n      try {\r\n        let serializedOptions = { ...options }\r\n\r\n        // Serialize FormData body before sending to worker\r\n        if (options.body && isFormData(options.body)) {\r\n          const serializedBody = await serializeFormData(options.body)\r\n          // SerializedFormData will be deserialized back to FormData in worker\r\n          serializedOptions.body = serializedBody as unknown as BodyInit\r\n        }\r\n\r\n        // Serialize Headers object to plain object (Headers cannot be cloned)\r\n        if (options.headers) {\r\n          if (options.headers instanceof Headers) {\r\n            const plainHeaders: Record<string, string> = {}\r\n            options.headers.forEach((value, key) => {\r\n              plainHeaders[key] = value\r\n            })\r\n            serializedOptions.headers = plainHeaders\r\n          }\r\n        }\r\n\r\n        const message = { id, type: MSG.FETCH, payload: { url, options: serializedOptions } }\r\n\r\n        await this.sendMessageQueued(message, 30000)\r\n      } catch (error) {\r\n        const request = this.pendingRequests.get(id)\r\n        if (request) {\r\n          this.pendingRequests.delete(id)\r\n          request.reject(error instanceof Error ? error : new Error(String(error)))\r\n        }\r\n      }\r\n    })\r\n\r\n    const cancel = () => this.cancel(id)\r\n\r\n    return { id, result, cancel }\r\n  }\r\n\r\n  /**\r\n   * Cancel a pending request by ID\r\n   */\r\n  cancel(id: string): void {\r\n    const request = this.pendingRequests.get(id)\r\n    if (request) {\r\n      this.pendingRequests.delete(id)\r\n      this.worker.postMessage({ id, type: MSG.CANCEL })\r\n      request.reject(new Error('Request cancelled'))\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Convenience methods\r\n   */\r\n  async get(url: string, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    return this.fetch(url, { ...options, method: 'GET' })\r\n  }\r\n\r\n  async post(url: string, body?: unknown, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    // If body is FormData, use fetch directly (no JSON.stringify)\r\n    if (body && isFormData(body)) {\r\n      return this.fetch(url, {\r\n        ...options,\r\n        method: 'POST',\r\n        body\r\n      })\r\n    }\r\n\r\n    // For non-FormData body, use JSON\r\n    const headers = new Headers(options.headers)\r\n\r\n    // Set Content-Type if not already set and body is being stringified\r\n    if (body && !headers.has('Content-Type')) {\r\n      headers.set('Content-Type', 'application/json')\r\n    }\r\n\r\n    return this.fetch(url, {\r\n      ...options,\r\n      headers,\r\n      method: 'POST',\r\n      body: body ? JSON.stringify(body) : undefined\r\n    })\r\n  }\r\n\r\n  async put(url: string, body?: unknown, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    // If body is FormData, use fetch directly (no JSON.stringify)\r\n    if (body && isFormData(body)) {\r\n      return this.fetch(url, {\r\n        ...options,\r\n        method: 'PUT',\r\n        body\r\n      })\r\n    }\r\n\r\n    // For non-FormData body, use JSON\r\n    const headers = new Headers(options.headers)\r\n\r\n    // Set Content-Type if not already set and body is being stringified\r\n    if (body && !headers.has('Content-Type')) {\r\n      headers.set('Content-Type', 'application/json')\r\n    }\r\n\r\n    return this.fetch(url, {\r\n      ...options,\r\n      headers,\r\n      method: 'PUT',\r\n      body: body ? JSON.stringify(body) : undefined\r\n    })\r\n  }\r\n\r\n  async delete(url: string, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    return this.fetch(url, { ...options, method: 'DELETE' })\r\n  }\r\n\r\n  async patch(url: string, body?: unknown, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    // If body is FormData, use fetch directly (no JSON.stringify)\r\n    if (body && isFormData(body)) {\r\n      return this.fetch(url, {\r\n        ...options,\r\n        method: 'PATCH',\r\n        body\r\n      })\r\n    }\r\n\r\n    // For non-FormData body, use JSON\r\n    const headers = new Headers(options.headers)\r\n\r\n    // Set Content-Type if not already set and body is being stringified\r\n    if (body && !headers.has('Content-Type')) {\r\n      headers.set('Content-Type', 'application/json')\r\n    }\r\n\r\n    return this.fetch(url, {\r\n      ...options,\r\n      headers,\r\n      method: 'PATCH',\r\n      body: body ? JSON.stringify(body) : undefined\r\n    })\r\n  }\r\n\r\n  /**\r\n   * Generic method to call any auth method on provider\r\n   * @param method - Method name (login, logout, loginWithPhone, etc.)\r\n   * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)\r\n   * @param args - Arguments to pass to the method\r\n   * @returns Promise<Result<AuthResult>> - Always returns AuthResult\r\n   */\r\n  async call(method: string, emitEvent?: boolean, ...args: unknown[]): Promise<Result<AuthResult>> {\r\n    const id = this.generateMessageId()\r\n    const message = { id, type: MSG.AUTH_CALL, payload: { method, args, emitEvent } }\r\n\r\n    return new Promise<Result<AuthResult>>((resolve, reject) => {\r\n      this.pendingRequests.set(id, {\r\n        resolve: (r) => resolve(r as Result<AuthResult>),\r\n        reject: (e: Error) => reject(e)\r\n      })\r\n\r\n      this.sendMessageQueued(message, 15000).catch((error) => {\r\n        const request = this.pendingRequests.get(id)\r\n        if (request) {\r\n          this.pendingRequests.delete(id)\r\n          request.reject(error)\r\n        }\r\n      })\r\n    })\r\n  }\r\n\r\n\r\n  /**\r\n   * Convenience wrapper for login\r\n   * @param payload - Login credentials\r\n   * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)\r\n   */\r\n  async login(payload?: unknown, emitEvent: boolean = true): Promise<Result<AuthResult>> {\r\n    const args = typeof payload === 'undefined' ? [] : [payload]\r\n    return this.call('login', emitEvent, ...args)\r\n  }\r\n\r\n  /**\r\n   * Convenience wrapper for logout\r\n   * @param payload - Optional logout payload\r\n   * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)\r\n   */\r\n  async logout(payload?: unknown, emitEvent: boolean = true): Promise<Result<AuthResult>> {\r\n    const args = typeof payload === 'undefined' ? [] : [payload]\r\n    return this.call('logout', emitEvent, ...args)\r\n  }\r\n\r\n  /**\r\n   * Convenience wrapper for refreshToken\r\n   * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)\r\n   */\r\n  async refreshToken(emitEvent: boolean = true): Promise<Result<AuthResult>> {\r\n    return this.call('refreshToken', emitEvent)\r\n  }\r\n\r\n  /**\r\n   * Check if worker is ready\r\n   */\r\n  ready(): boolean {\r\n    return this.isReady\r\n  }\r\n\r\n  /**\r\n   * Wait for worker to be ready\r\n   * Returns immediately if already ready\r\n   */\r\n  async whenReady(): Promise<void> {\r\n    if (this.isReady) return Promise.resolve()\r\n\r\n    return new Promise<void>((resolve) => {\r\n      this.readyListeners.add(resolve)\r\n    })\r\n  }\r\n\r\n  /**\r\n   * Subscribe to ready event\r\n   * Callback is called immediately if already ready\r\n   */\r\n  onReady(callback: () => void): () => void {\r\n    if (this.isReady) {\r\n      // Already ready - call immediately\r\n      callback()\r\n    }\r\n\r\n    this.readyListeners.add(callback)\r\n\r\n    // Return unsubscribe function\r\n    return () => {\r\n      this.readyListeners.delete(callback)\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Subscribe to auth state changes\r\n   */\r\n  onAuthStateChanged(cb: (state: AuthResult) => void): () => void {\r\n    this.authListeners.add(cb)\r\n    return () => this.authListeners.delete(cb)\r\n  }\r\n\r\n  /** Send PING and await PONG */\r\n  async ping(): Promise<Result<{ timestamp: number }>> {\r\n    const id = this.generateMessageId()\r\n    const message = { id, type: MSG.PING, payload: { timestamp: Date.now() } }\r\n\r\n    return new Promise<Result<{ timestamp: number }>>((resolve, reject) => {\r\n      this.pendingRequests.set(id, {\r\n        resolve: (r) => resolve(r as Result<{ timestamp: number }>),\r\n        reject: (e: Error) => reject(e)\r\n      })\r\n\r\n      this.sendMessageQueued(message, 5000).catch((error) => {\r\n        const request = this.pendingRequests.get(id)\r\n        if (request) {\r\n          this.pendingRequests.delete(id)\r\n          request.reject(error)\r\n        }\r\n      })\r\n    })\r\n  }\r\n\r\n\r\n  /**\r\n   * Send message through queue system\r\n   * All messages go through queue for sequential processing\r\n   */\r\n  private sendMessageQueued<T = unknown>(message: MainToWorkerMessage, timeoutMs: number = this.queueTimeout): Promise<T> {\r\n    return new Promise((resolve, reject) => {\r\n      const timeout = setTimeout(() => {\r\n        const index = this.requestQueue.findIndex(item => item.id === message.id)\r\n        if (index !== -1) {\r\n          this.requestQueue.splice(index, 1)\r\n        }\r\n        this.pendingRequests.delete(message.id)\r\n        reject(new Error('Request timeout'))\r\n      }, timeoutMs)\r\n\r\n      const queueItem: QueueItem = {\r\n        id: message.id,\r\n        message,\r\n        resolve: resolve as (response: unknown) => void,\r\n        reject,\r\n        timeout\r\n      }\r\n\r\n      this.requestQueue.push(queueItem)\r\n\r\n      this.processQueue()\r\n    })\r\n  }\r\n\r\n  /**\r\n   * Process message queue sequentially\r\n   * Benefits:\r\n   * - Sequential processing prevents worker overload\r\n   * - Better error isolation (one failure doesn't affect others)\r\n   * - 50ms delay between requests for backpressure\r\n   */\r\n  private async processQueue(): Promise<void> {\r\n    if (this.isProcessingQueue || this.requestQueue.length === 0) {\r\n      return\r\n    }\r\n\r\n    this.isProcessingQueue = true\r\n\r\n    while (this.requestQueue.length > 0) {\r\n      const item = this.requestQueue.shift()\r\n      if (!item) continue\r\n\r\n      try {\r\n        this.worker.postMessage(item.message)\r\n\r\n        await new Promise(resolve => setTimeout(resolve, 50))\r\n      } catch (error) {\r\n        clearTimeout(item.timeout)\r\n        item.reject(error instanceof Error ? error : new Error(String(error)))\r\n      }\r\n    }\r\n\r\n    this.isProcessingQueue = false\r\n  }\r\n\r\n  /**\r\n   * Cleanup - terminate worker\r\n   */\r\n  destroy(): void {\r\n    this.worker.terminate()\r\n    this.pendingRequests.clear()\r\n\r\n    for (const item of this.requestQueue) {\r\n      clearTimeout(item.timeout)\r\n      item.reject(new Error('Client destroyed'))\r\n    }\r\n    this.requestQueue = []\r\n  }\r\n}\r\n\r\n/**\r\n * Factory function to create FetchGuard client\r\n */\r\nexport function createClient(options: FetchGuardOptions): FetchGuardClient {\r\n  return new FetchGuardClient(options)\r\n}\r\n","import type { ErrorDetail } from 'ts-micro-result'\r\nimport type { WorkerConfig, FetchGuardRequestInit, ProviderPresetConfig, AuthResult, ApiResponse } from './types'\r\n\r\n/**\r\n * MESSAGE PAYLOADS - SINGLE SOURCE OF TRUTH\r\n *\r\n * Define all message payloads here. Type unions and MSG constants are auto-generated.\r\n *\r\n * USAGE:\r\n * - To add a new message: Just add one line to the appropriate interface\r\n * - Payload types are automatically inferred\r\n * - MSG constants are automatically generated\r\n *\r\n * EXAMPLE:\r\n * ```typescript\r\n * interface MainPayloads {\r\n *   NEW_MESSAGE: { foo: string }  // Add this line\r\n * }\r\n * // => Automatically get MainToWorkerMessage union with NEW_MESSAGE\r\n * // => Automatically get MSG.NEW_MESSAGE = 'NEW_MESSAGE'\r\n * ```\r\n */\r\n\r\n/**\r\n * Payloads for messages sent from Main thread → Worker thread\r\n */\r\nexport interface MainPayloads {\r\n  SETUP: { config: WorkerConfig; providerConfig: ProviderPresetConfig | string | null }\r\n  FETCH: { url: string; options?: FetchGuardRequestInit }\r\n  AUTH_CALL: { method: string; args: unknown[]; emitEvent?: boolean }  // Generic auth method call (login, logout, loginWithPhone, etc.)\r\n  CANCEL: undefined\r\n  PING: { timestamp: number }\r\n}\r\n\r\n/**\r\n * Payloads for messages sent from Worker thread → Main thread\r\n */\r\nexport interface WorkerPayloads {\r\n  ERROR: { errors: ErrorDetail[] }\r\n  READY: undefined\r\n  SETUP_ERROR: { error: string }\r\n  PONG: { timestamp: number }\r\n  LOG: { level: 'info' | 'warn' | 'error'; message: string }\r\n  AUTH_STATE_CHANGED: AuthResult\r\n  AUTH_CALL_RESULT: AuthResult\r\n  FETCH_RESULT: ApiResponse\r\n  FETCH_ERROR: { error: string; status?: number }\r\n}\r\n\r\n/**\r\n * Generate message type from payload definition\r\n * Handles optional payloads (undefined) gracefully\r\n */\r\ntype MessageFromPayloads<P> = {\r\n  [K in keyof P]: { id: string; type: K } & (\r\n    P[K] extends undefined ? {} : { payload: P[K] }\r\n  )\r\n}[keyof P]\r\n\r\n/**\r\n * Message type unions - auto-generated from payload interfaces\r\n */\r\nexport type MainToWorkerMessage = MessageFromPayloads<MainPayloads>\r\nexport type WorkerToMainMessage = MessageFromPayloads<WorkerPayloads>\r\n\r\n/**\r\n * Message type unions for compile-time type checking\r\n */\r\nexport type MainType = keyof MainPayloads\r\nexport type WorkerType = keyof WorkerPayloads\r\nexport type MessageType = MainType | WorkerType\r\n\r\n/**\r\n * MSG constants object\r\n * Usage: MSG.SETUP, MSG.FETCH, etc.\r\n */\r\nexport const MSG = Object.freeze({\r\n  // Main -> Worker messages\r\n  SETUP: 'SETUP',\r\n  FETCH: 'FETCH',\r\n  AUTH_CALL: 'AUTH_CALL',\r\n  CANCEL: 'CANCEL',\r\n  PING: 'PING',\r\n\r\n  // Worker -> Main messages\r\n  ERROR: 'ERROR',\r\n  READY: 'READY',\r\n  SETUP_ERROR: 'SETUP_ERROR',\r\n  PONG: 'PONG',\r\n  LOG: 'LOG',\r\n  AUTH_STATE_CHANGED: 'AUTH_STATE_CHANGED',\r\n  AUTH_CALL_RESULT: 'AUTH_CALL_RESULT',\r\n  FETCH_RESULT: 'FETCH_RESULT',\r\n  FETCH_ERROR: 'FETCH_ERROR'\r\n}) as { readonly [K in MessageType]: K }\r\n","/**\n * FetchGuard Default Configuration Values\n */\n\n/**\n * Default time (in milliseconds) to refresh token before expiry\n * @default 60000 (60 seconds)\n */\nexport const DEFAULT_REFRESH_EARLY_MS = 60_000\n","/**\n * Error definitions organized by domain\n * Using ts-micro-result's defineError for consistency\n */\n\nimport { defineError, defineErrorAdvanced } from 'ts-micro-result'\n\n/**\n * General errors\n */\nexport const GeneralErrors = {\n  Unexpected: defineError('UNEXPECTED', 'Unexpected error', 500),\n  UnknownMessage: defineError('UNKNOWN_MESSAGE', 'Unknown message type', 400),\n  ResultParse: defineError('RESULT_PARSE_ERROR', 'Failed to parse result', 500),\n} as const\n\n/**\n * Initialization errors\n */\nexport const InitErrors = {\n  NotInitialized: defineError('INIT_ERROR', 'Worker not initialized', 500),\n  ProviderInitFailed: defineError('PROVIDER_INIT_FAILED', 'Failed to initialize provider', 500),\n  InitFailed: defineError('INIT_FAILED', 'Initialization failed', 500),\n} as const\n\n/**\n * Authentication & Token errors\n */\nexport const AuthErrors = {\n  TokenRefreshFailed: defineError('TOKEN_REFRESH_FAILED', 'Token refresh failed', 401),\n  LoginFailed: defineError('LOGIN_FAILED', 'Login failed', 401),\n  LogoutFailed: defineError('LOGOUT_FAILED', 'Logout failed', 500),\n  NotAuthenticated: defineError('NOT_AUTHENTICATED', 'User is not authenticated', 401),\n} as const\n\n/**\n * Domain validation errors\n */\nexport const DomainErrors = {\n  NotAllowed: defineErrorAdvanced('DOMAIN_NOT_ALLOWED', 'Domain not allowed: {url}', 403),\n} as const\n\n/**\n * Network errors (connection failures, no response)\n */\nexport const NetworkErrors = {\n  NetworkError: defineError('NETWORK_ERROR', 'Network error', 500),\n  FetchError: defineError('FETCH_ERROR', 'Fetch error', 500),\n} as const\n\n/**\n * HTTP errors (server returned error status 4xx/5xx)\n */\nexport const HttpErrors = {\n  ClientError: defineError('HTTP_CLIENT_ERROR', 'HTTP client error (4xx)', 400),\n  ServerError: defineError('HTTP_SERVER_ERROR', 'HTTP server error (5xx)', 500),\n  BadRequest: defineError('HTTP_BAD_REQUEST', 'Bad request', 400),\n  Unauthorized: defineError('HTTP_UNAUTHORIZED', 'Unauthorized', 401),\n  Forbidden: defineError('HTTP_FORBIDDEN', 'Forbidden', 403),\n  NotFound: defineError('HTTP_NOT_FOUND', 'Not found', 404),\n  InternalServerError: defineError('HTTP_INTERNAL_SERVER_ERROR', 'Internal server error', 500),\n} as const\n\n/**\n * Request errors\n */\nexport const RequestErrors = {\n  Cancelled: defineError('REQUEST_CANCELLED', 'Request was cancelled', 499),\n  Timeout: defineError('REQUEST_TIMEOUT', 'Request timeout', 408),\n  ResponseParseFailed: defineError('RESPONSE_PARSE_FAILED', 'Failed to parse response body', 500),\n} as const\n","import type { SerializedFormData, SerializedFormDataEntry, SerializedFile } from '../types'\r\n\r\n/**\r\n * Serialize FormData for transfer over postMessage\r\n * Inspired by api-worker.js:484-518\r\n *\r\n * FormData cannot be cloned via postMessage, so we need to serialize it first\r\n * Files are converted to ArrayBuffer -> number[] for transfer\r\n */\r\nexport async function serializeFormData(formData: FormData): Promise<SerializedFormData> {\r\n  const entries: Array<[string, SerializedFormDataEntry]> = []\r\n\r\n  // Use forEach instead of entries() for better TS compatibility\r\n  formData.forEach((value, key) => {\r\n    // Push async operations to promises array for parallel processing\r\n    if (value instanceof File) {\r\n      // We need to handle this synchronously in forEach, so we'll collect promises\r\n      // and await them all at once\r\n    } else {\r\n      entries.push([key, String(value)])\r\n    }\r\n  })\r\n\r\n  // Handle File entries separately with Promise.all\r\n  const filePromises: Promise<void>[] = []\r\n  formData.forEach((value, key) => {\r\n    if (value instanceof File) {\r\n      const promise = (async () => {\r\n        const arrayBuffer = await value.arrayBuffer()\r\n        const uint8Array = new Uint8Array(arrayBuffer)\r\n        const serializedFile: SerializedFile = {\r\n          name: value.name,\r\n          type: value.type,\r\n          data: Array.from(uint8Array) // Convert to number array\r\n        }\r\n        entries.push([key, serializedFile])\r\n      })()\r\n      filePromises.push(promise)\r\n    }\r\n  })\r\n\r\n  await Promise.all(filePromises)\r\n\r\n  return {\r\n    _type: 'FormData',\r\n    entries\r\n  }\r\n}\r\n\r\n/**\r\n * Deserialize SerializedFormData back to FormData in worker\r\n * Reconstructs File objects from serialized data\r\n */\r\nexport function deserializeFormData(serialized: SerializedFormData): FormData {\r\n  const formData = new FormData()\r\n\r\n  for (const [key, value] of serialized.entries) {\r\n    if (typeof value === 'string') {\r\n      formData.append(key, value)\r\n    } else {\r\n      // Reconstruct File from SerializedFile\r\n      const uint8Array = new Uint8Array(value.data)\r\n      const file = new File([uint8Array], value.name, { type: value.type })\r\n      formData.append(key, file)\r\n    }\r\n  }\r\n\r\n  return formData\r\n}\r\n\r\n/**\r\n * Check if body is FormData\r\n */\r\nexport function isFormData(body: unknown): body is FormData {\r\n  return body instanceof FormData\r\n}\r\n\r\n/**\r\n * Check if serialized body is SerializedFormData\r\n */\r\nexport function isSerializedFormData(body: unknown): body is SerializedFormData {\r\n  return body !== null && typeof body === 'object' && (body as SerializedFormData)._type === 'FormData'\r\n}\r\n","import type { TokenProvider } from '../types'\r\n\r\n/**\r\n * Registry to manage token providers\r\n */\r\nconst registry = new Map<string, TokenProvider>()\r\n\r\n/**\r\n * Register a token provider with name\r\n */\r\nexport function registerProvider(name: string, provider: TokenProvider): void {\r\n  if (typeof name !== 'string' || !name.trim()) {\r\n    throw new Error('Provider name must be a non-empty string')\r\n  }\r\n  \r\n  if (!provider || typeof provider.refreshToken !== 'function') {\r\n    throw new Error('Provider must implement TokenProvider interface')\r\n  }\r\n  \r\n  registry.set(name, provider)\r\n}\r\n\r\n/**\r\n * Get provider by name\r\n */\r\nexport function getProvider(name: string): TokenProvider {\r\n  const provider = registry.get(name)\r\n  if (!provider) {\r\n    throw new Error(`Provider '${name}' not found. Available providers: ${Array.from(registry.keys()).join(', ')}`)\r\n  }\r\n  return provider\r\n}\r\n\r\n/**\r\n * Check if provider exists\r\n */\r\nexport function hasProvider(name: string): boolean {\r\n  return registry.has(name)\r\n}\r\n\r\n/**\r\n * Get list of all provider names\r\n */\r\nexport function listProviders(): string[] {\r\n  return Array.from(registry.keys())\r\n}\r\n\r\n/**\r\n * Remove provider\r\n */\r\nexport function unregisterProvider(name: string): boolean {\r\n  return registry.delete(name)\r\n}\r\n\r\n/**\r\n * Remove all providers\r\n */\r\nexport function clearProviders(): void {\r\n  registry.clear()\r\n}\r\n","import type {\r\n  TokenProvider,\r\n  RefreshTokenStorage,\r\n  TokenParser,\r\n  AuthStrategy,\r\n  TokenInfo\r\n} from '../types'\r\nimport { ok, err, type Result } from 'ts-micro-result'\r\nimport { AuthErrors, NetworkErrors } from '../errors'\r\n\r\n/**\r\n * Custom auth method type\r\n */\r\ntype CustomAuthMethod = (...args: unknown[]) => Promise<Result<TokenInfo>>\r\n\r\n/**\r\n * Configuration for creating provider\r\n *\r\n * refreshStorage: OPTIONAL - to load refresh token initially when worker starts\r\n * - undefined: cookie-based auth (httpOnly cookie, no need to load)\r\n * - RefreshTokenStorage: body-based auth (load from IndexedDB on startup)\r\n *\r\n * strategy: AuthStrategy with refresh (required), login/logout (required)\r\n *\r\n * customMethods: OPTIONAL - custom auth methods (loginWithPhone, loginWithGoogle, etc.)\r\n */\r\nexport interface ProviderConfig {\r\n  refreshStorage?: RefreshTokenStorage\r\n  parser: TokenParser\r\n  strategy: AuthStrategy\r\n  customMethods?: Record<string, CustomAuthMethod>\r\n}\r\n\r\n/**\r\n * Factory function to create TokenProvider from modular components\r\n *\r\n * Provider automatically handles refresh token:\r\n * - If refreshToken is null and storage exists → load from storage initially\r\n * - If refreshToken exists → use token from worker memory\r\n * - Cookie-based (no storage) → always null\r\n *\r\n * Custom methods:\r\n * - User can add custom auth methods (loginWithPhone, loginWithGoogle, etc.)\r\n * - Custom methods will be spread into provider object\r\n */\r\nexport function createProvider(config: ProviderConfig): TokenProvider {\r\n  const baseProvider: Pick<TokenProvider, 'refreshToken' | 'login' | 'logout'> = {\r\n    async refreshToken(refreshToken: string | null) {\r\n      let currentRefreshToken = refreshToken\r\n      if (currentRefreshToken === null && config.refreshStorage) {\r\n        currentRefreshToken = await config.refreshStorage.get()\r\n      }\r\n\r\n      try {\r\n        const response = await config.strategy.refresh(currentRefreshToken)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.TokenRefreshFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        const tokenInfo = await config.parser.parse(response)\r\n        if (!tokenInfo.token) {\r\n          return err(AuthErrors.TokenRefreshFailed({ message: 'No access token in response' }))\r\n        }\r\n\r\n        if (config.refreshStorage && tokenInfo.refreshToken) {\r\n          await config.refreshStorage.set(tokenInfo.refreshToken)\r\n        }\r\n\r\n        return ok(tokenInfo)\r\n      } catch (error) {\r\n        return err(NetworkErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    },\r\n\r\n    async login(payload: unknown) {\r\n      try {\r\n        const response = await config.strategy.login(payload)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.LoginFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        const tokenInfo = await config.parser.parse(response)\r\n        if (!tokenInfo.token) {\r\n          return err(AuthErrors.LoginFailed({ message: 'No access token in response' }))\r\n        }\r\n\r\n        if (config.refreshStorage && tokenInfo.refreshToken) {\r\n          await config.refreshStorage.set(tokenInfo.refreshToken)\r\n        }\r\n\r\n        return ok(tokenInfo)\r\n      } catch (error) {\r\n        return err(NetworkErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    },\r\n\r\n    async logout(payload?: unknown) {\r\n      try {\r\n        const response = await config.strategy.logout(payload)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.LogoutFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        if (config.refreshStorage) {\r\n          await config.refreshStorage.set(null)\r\n        }\r\n\r\n        return ok({\r\n          token: '',\r\n          refreshToken: undefined,\r\n          expiresAt: undefined,\r\n          user: null  // Explicitly clear user on logout\r\n        })\r\n      } catch (error) {\r\n        return err(NetworkErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    }\r\n  }\r\n\r\n  // Merge custom methods if provided\r\n  if (config.customMethods) {\r\n    return {\r\n      ...baseProvider,\r\n      ...config.customMethods\r\n    } as TokenProvider\r\n  }\r\n\r\n  return baseProvider as TokenProvider\r\n}\r\n","import type { RefreshTokenStorage } from '../../types'\r\n\r\n/**\r\n * IndexedDB storage - only stores refresh token in IndexedDB\r\n * Suitable for body-based refresh strategy\r\n * Persists refresh token for reuse after reload\r\n */\r\nexport function createIndexedDBStorage(dbName = 'FetchGuardDB', refreshTokenKey = 'refreshToken'): RefreshTokenStorage {\r\n  const storeName = 'tokens'\r\n\r\n  const openDB = (): Promise<IDBDatabase> => {\r\n    return new Promise((resolve, reject) => {\r\n      const request = indexedDB.open(dbName, 1)\r\n      \r\n      request.onerror = () => reject(request.error)\r\n      request.onsuccess = () => resolve(request.result)\r\n      \r\n      request.onupgradeneeded = (event) => {\r\n        const db = (event.target as IDBOpenDBRequest).result\r\n        if (!db.objectStoreNames.contains(storeName)) {\r\n          const store = db.createObjectStore(storeName, { keyPath: 'key' })\r\n          store.createIndex('timestamp', 'timestamp', { unique: false })\r\n        }\r\n      }\r\n    })\r\n  }\r\n\r\n  const promisifyRequest = <T>(request: IDBRequest<T>): Promise<T> => {\r\n    return new Promise((resolve, reject) => {\r\n      request.onsuccess = () => resolve(request.result)\r\n      request.onerror = () => reject(request.error)\r\n    })\r\n  }\r\n\r\n  return {\r\n    async get() {\r\n      try {\r\n        const db = await openDB()\r\n        const transaction = db.transaction([storeName], 'readonly')\r\n        const store = transaction.objectStore(storeName)\r\n        const result = await promisifyRequest(store.get(refreshTokenKey))\r\n        return result?.value || null\r\n      } catch (error) {\r\n        console.warn('Failed to get refresh token from IndexedDB:', error)\r\n        return null\r\n      }\r\n    },\r\n    async set(token) {\r\n      try {\r\n        const db = await openDB()\r\n        const transaction = db.transaction([storeName], 'readwrite')\r\n        const store = transaction.objectStore(storeName)\r\n\r\n        if (token) {\r\n          await promisifyRequest(store.put({ key: refreshTokenKey, value: token, timestamp: Date.now() }))\r\n        } else {\r\n          await promisifyRequest(store.delete(refreshTokenKey))\r\n        }\r\n      } catch (error) {\r\n        console.warn('Failed to save refresh token to IndexedDB:', error)\r\n      }\r\n    }\r\n  }\r\n}\r\n","import type { TokenParser } from '../../types'\r\n\r\n/**\r\n * Body parser - parse token from response body (JSON)\r\n * Expects response format: { data: { accessToken, refreshToken, expiresAt?, user? } }\r\n */\r\nexport const bodyParser: TokenParser = {\r\n  async parse(response) {\r\n    const json = await response.clone().json()\r\n    return {\r\n      token: json.data.accessToken,\r\n      refreshToken: json.data.refreshToken,\r\n      expiresAt: json.data.expiresAt,\r\n      user: json.data.user\r\n    }\r\n  }\r\n}\r\n","import type { TokenParser } from '../../types'\r\n\r\n/**\r\n * Cookie parser - parse access token from response body\r\n * Expects response format: { data: { accessToken, expiresAt?, user? } }\r\n * Refresh token is automatically set by backend into httpOnly cookie\r\n */\r\nexport const cookieParser: TokenParser = {\r\n  async parse(response) {\r\n    const json = await response.clone().json()\r\n    return {\r\n      token: json.data.accessToken,\r\n      expiresAt: json.data.expiresAt,\r\n      user: json.data.user\r\n    }\r\n  }\r\n}\r\n","import type { AuthStrategy } from '../../types'\r\n\r\n/**\r\n * Cookie auth strategy - all auth operations via httpOnly cookies\r\n * Suitable for SSR and cross-domain authentication\r\n *\r\n * Refresh token is sent automatically via httpOnly cookie\r\n * Credentials are sent in request body\r\n */\r\nexport function createCookieStrategy(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): AuthStrategy {\r\n  return {\r\n    async refresh() {\r\n      return fetch(config.refreshUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async login(payload) {\r\n      return fetch(config.loginUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify(payload),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async logout(payload) {\r\n      return fetch(config.logoutUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: payload ? JSON.stringify(payload) : undefined,\r\n        credentials: 'include'\r\n      })\r\n    }\r\n  }\r\n}\r\n\r\n/**\r\n * Standard cookie strategy\r\n */\r\nexport const cookieStrategy = createCookieStrategy({\r\n  refreshUrl: '/auth/refresh',\r\n  loginUrl: '/auth/login',\r\n  logoutUrl: '/auth/logout'\r\n})\r\n","import type { AuthStrategy } from '../../types'\r\n\r\n/**\r\n * Body auth strategy - all auth operations via request body\r\n * Suitable for SPA applications\r\n *\r\n * All tokens/credentials are sent in request body\r\n */\r\nexport function createBodyStrategy(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): AuthStrategy {\r\n  return {\r\n    async refresh(refreshToken) {\r\n      if (!refreshToken) {\r\n        throw new Error('No refresh token available')\r\n      }\r\n\r\n      return fetch(config.refreshUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify({ refreshToken }),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async login(payload) {\r\n      return fetch(config.loginUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify(payload),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async logout(payload) {\r\n      return fetch(config.logoutUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: payload ? JSON.stringify(payload) : undefined,\r\n        credentials: 'include'\r\n      })\r\n    }\r\n  }\r\n}\r\n\r\n/**\r\n * Standard body strategy\r\n */\r\nexport const bodyStrategy = createBodyStrategy({\r\n  refreshUrl: '/auth/refresh',\r\n  loginUrl: '/auth/login',\r\n  logoutUrl: '/auth/logout'\r\n})\r\n","import { createProvider } from './create-provider'\r\nimport { createIndexedDBStorage } from './storage/indexeddb'\r\nimport { bodyParser } from './parser/body'\r\nimport { cookieParser } from './parser/cookie'\r\nimport { createCookieStrategy } from './strategy/cookie'\r\nimport { createBodyStrategy } from './strategy/body'\r\nimport type { TokenProvider } from '../types'\r\n\r\n/**\r\n * Cookie Provider - uses httpOnly cookies\r\n * Suitable for SSR and cross-domain authentication\r\n *\r\n * Access token: Worker memory\r\n * Refresh token: httpOnly cookie (managed by backend)\r\n */\r\nexport function createCookieProvider(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): TokenProvider {\r\n  return createProvider({\r\n    refreshStorage: undefined,\r\n    parser: cookieParser,\r\n    strategy: createCookieStrategy(config)\r\n  })\r\n}\r\n\r\n/**\r\n * Body Provider - refresh token in response body, persisted to IndexedDB\r\n * Suitable for SPA applications\r\n *\r\n * Access token: Worker memory\r\n * Refresh token: IndexedDB (persists across reload)\r\n */\r\nexport function createBodyProvider(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n  refreshTokenKey?: string\r\n}): TokenProvider {\r\n  return createProvider({\r\n    refreshStorage: createIndexedDBStorage('FetchGuardDB', config.refreshTokenKey || 'refreshToken'),\r\n    parser: bodyParser,\r\n    strategy: createBodyStrategy(config)\r\n  })\r\n}\r\n","/**\r\n * Binary data utilities for Worker\r\n * Handles ArrayBuffer <-> Base64 conversion for binary responses\r\n */\r\n\r\n/**\r\n * Convert ArrayBuffer to base64 string\r\n * Used in worker to encode binary responses for postMessage transfer\r\n */\r\nexport function arrayBufferToBase64(buffer: ArrayBuffer): string {\r\n  const bytes = new Uint8Array(buffer)\r\n  let binary = ''\r\n  for (let i = 0; i < bytes.length; i++) {\r\n    binary += String.fromCharCode(bytes[i])\r\n  }\r\n  return btoa(binary)\r\n}\r\n\r\n/**\r\n * Convert base64 string to ArrayBuffer\r\n * Used in client to decode binary responses\r\n */\r\nexport function base64ToArrayBuffer(base64: string): ArrayBuffer {\r\n  const binary = atob(base64)\r\n  const bytes = new Uint8Array(binary.length)\r\n  for (let i = 0; i < binary.length; i++) {\r\n    bytes[i] = binary.charCodeAt(i)\r\n  }\r\n  return bytes.buffer\r\n}\r\n\r\n/**\r\n * Check if content type is binary (should be base64 encoded)\r\n * Returns true for images, PDFs, videos, etc.\r\n */\r\nexport function isBinaryContentType(contentType: string): boolean {\r\n  const normalized = contentType.toLowerCase()\r\n\r\n  // Text types - NOT binary\r\n  if (normalized.includes('text/')) return false\r\n  if (normalized.includes('json')) return false\r\n  if (normalized.includes('xml')) return false\r\n  if (normalized.includes('javascript')) return false\r\n  if (normalized.includes('ecmascript')) return false\r\n  if (normalized.includes('html')) return false\r\n\r\n  // Everything else is considered binary\r\n  return true\r\n}\r\n"],"mappings":";AASA,SAAS,IAAI,WAAwB;;;ACmE9B,IAAM,MAAM,OAAO,OAAO;AAAA;AAAA,EAE/B,OAAO;AAAA,EACP,OAAO;AAAA,EACP,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,MAAM;AAAA;AAAA,EAGN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,KAAK;AAAA,EACL,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,cAAc;AAAA,EACd,aAAa;AACf,CAAC;;;ACtFM,IAAM,2BAA2B;;;ACHxC,SAAS,aAAa,2BAA2B;AAK1C,IAAM,gBAAgB;AAAA,EAC3B,YAAY,YAAY,cAAc,oBAAoB,GAAG;AAAA,EAC7D,gBAAgB,YAAY,mBAAmB,wBAAwB,GAAG;AAAA,EAC1E,aAAa,YAAY,sBAAsB,0BAA0B,GAAG;AAC9E;AAKO,IAAM,aAAa;AAAA,EACxB,gBAAgB,YAAY,cAAc,0BAA0B,GAAG;AAAA,EACvE,oBAAoB,YAAY,wBAAwB,iCAAiC,GAAG;AAAA,EAC5F,YAAY,YAAY,eAAe,yBAAyB,GAAG;AACrE;AAKO,IAAM,aAAa;AAAA,EACxB,oBAAoB,YAAY,wBAAwB,wBAAwB,GAAG;AAAA,EACnF,aAAa,YAAY,gBAAgB,gBAAgB,GAAG;AAAA,EAC5D,cAAc,YAAY,iBAAiB,iBAAiB,GAAG;AAAA,EAC/D,kBAAkB,YAAY,qBAAqB,6BAA6B,GAAG;AACrF;AAKO,IAAM,eAAe;AAAA,EAC1B,YAAY,oBAAoB,sBAAsB,6BAA6B,GAAG;AACxF;AAKO,IAAM,gBAAgB;AAAA,EAC3B,cAAc,YAAY,iBAAiB,iBAAiB,GAAG;AAAA,EAC/D,YAAY,YAAY,eAAe,eAAe,GAAG;AAC3D;AAKO,IAAM,aAAa;AAAA,EACxB,aAAa,YAAY,qBAAqB,2BAA2B,GAAG;AAAA,EAC5E,aAAa,YAAY,qBAAqB,2BAA2B,GAAG;AAAA,EAC5E,YAAY,YAAY,oBAAoB,eAAe,GAAG;AAAA,EAC9D,cAAc,YAAY,qBAAqB,gBAAgB,GAAG;AAAA,EAClE,WAAW,YAAY,kBAAkB,aAAa,GAAG;AAAA,EACzD,UAAU,YAAY,kBAAkB,aAAa,GAAG;AAAA,EACxD,qBAAqB,YAAY,8BAA8B,yBAAyB,GAAG;AAC7F;AAKO,IAAM,gBAAgB;AAAA,EAC3B,WAAW,YAAY,qBAAqB,yBAAyB,GAAG;AAAA,EACxE,SAAS,YAAY,mBAAmB,mBAAmB,GAAG;AAAA,EAC9D,qBAAqB,YAAY,yBAAyB,iCAAiC,GAAG;AAChG;;;AC7DA,eAAsB,kBAAkB,UAAiD;AACvF,QAAM,UAAoD,CAAC;AAG3D,WAAS,QAAQ,CAAC,OAAO,QAAQ;AAE/B,QAAI,iBAAiB,MAAM;AAAA,IAG3B,OAAO;AACL,cAAQ,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC;AAAA,IACnC;AAAA,EACF,CAAC;AAGD,QAAM,eAAgC,CAAC;AACvC,WAAS,QAAQ,CAAC,OAAO,QAAQ;AAC/B,QAAI,iBAAiB,MAAM;AACzB,YAAM,WAAW,YAAY;AAC3B,cAAM,cAAc,MAAM,MAAM,YAAY;AAC5C,cAAM,aAAa,IAAI,WAAW,WAAW;AAC7C,cAAM,iBAAiC;AAAA,UACrC,MAAM,MAAM;AAAA,UACZ,MAAM,MAAM;AAAA,UACZ,MAAM,MAAM,KAAK,UAAU;AAAA;AAAA,QAC7B;AACA,gBAAQ,KAAK,CAAC,KAAK,cAAc,CAAC;AAAA,MACpC,GAAG;AACH,mBAAa,KAAK,OAAO;AAAA,IAC3B;AAAA,EACF,CAAC;AAED,QAAM,QAAQ,IAAI,YAAY;AAE9B,SAAO;AAAA,IACL,OAAO;AAAA,IACP;AAAA,EACF;AACF;AAMO,SAAS,oBAAoB,YAA0C;AAC5E,QAAM,WAAW,IAAI,SAAS;AAE9B,aAAW,CAAC,KAAK,KAAK,KAAK,WAAW,SAAS;AAC7C,QAAI,OAAO,UAAU,UAAU;AAC7B,eAAS,OAAO,KAAK,KAAK;AAAA,IAC5B,OAAO;AAEL,YAAM,aAAa,IAAI,WAAW,MAAM,IAAI;AAC5C,YAAM,OAAO,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,MAAM,EAAE,MAAM,MAAM,KAAK,CAAC;AACpE,eAAS,OAAO,KAAK,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAKO,SAAS,WAAW,MAAiC;AAC1D,SAAO,gBAAgB;AACzB;AAKO,SAAS,qBAAqB,MAA2C;AAC9E,SAAO,SAAS,QAAQ,OAAO,SAAS,YAAa,KAA4B,UAAU;AAC7F;;;AJrDO,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EACA,YAAY;AAAA;AAAA;AAAA,EAGZ,kBAAkB,oBAAI,IAG3B;AAAA,EACK,gBAAgB,oBAAI,IAAiC;AAAA,EACrD,iBAAiB,oBAAI,IAAgB;AAAA,EACrC,UAAU;AAAA,EAEV,eAA4B,CAAC;AAAA,EAC7B,oBAAoB;AAAA,EACpB,eAAe;AAAA;AAAA,EACf;AAAA,EACA;AAAA,EAER,YAAY,SAA4B;AACtC,SAAK,SAAS,IAAI,OAAO,IAAI,IAAI,eAAe,YAAY,GAAG,GAAG;AAAA,MAChE,MAAM;AAAA,IACR,CAAC;AAED,SAAK,OAAO,YAAY,KAAK,oBAAoB,KAAK,IAAI;AAC1D,SAAK,OAAO,UAAU,KAAK,kBAAkB,KAAK,IAAI;AAEtD,SAAK,iBAAiB,OAAO;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,iBAAiB,SAA2C;AACxE,UAAM,SAAuB;AAAA,MAC3B,gBAAgB,QAAQ,kBAAkB,CAAC;AAAA,MAC3C,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C;AAGA,QAAI,iBAAuD;AAE3D,QAAI,OAAO,QAAQ,aAAa,UAAU;AAExC,uBAAiB,QAAQ;AAAA,IAC3B,WAAW,UAAU,QAAQ,YAAY,QAAQ,SAAS,MAAM;AAE9D,uBAAiB,QAAQ;AAAA,IAC3B,OAAO;AAEL,YAAM,IAAI;AAAA,QACR;AAAA,MAGF;AAAA,IACF;AAEA,UAAM,UAAU;AAAA,MACd,IAAI,KAAK,kBAAkB;AAAA,MAC3B,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,QACP;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAEtC,WAAK,eAAe;AACpB,WAAK,cAAc;AAEnB,WAAK,OAAO,YAAY,OAAO;AAE/B,iBAAW,MAAM;AACf,YAAI,KAAK,aAAa;AACpB,eAAK,YAAY,IAAI,MAAM,sBAAsB,CAAC;AAClD,eAAK,eAAe;AACpB,eAAK,cAAc;AAAA,QACrB;AAAA,MACF,GAAG,GAAK;AAAA,IACV,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAMQ,oBAAoB,OAA2B;AACrD,UAAM,EAAE,IAAI,MAAM,QAAQ,IAAI,MAAM;AAEpC,QAAI,SAAS,IAAI,cAAc;AAE7B,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,CAAC,QAAS;AAEd,WAAK,gBAAgB,OAAO,EAAE;AAE9B,YAAM,SAAS,SAAS;AAGxB,UAAI,UAAU,OAAO,SAAS,KAAK;AAEjC,gBAAQ,QAAQ,GAAG,OAAO,CAAC;AAAA,MAC7B,OAAO;AAGL,YAAI;AACJ,YAAI,WAAW,KAAK;AAClB,sBAAY,WAAW,WAAW;AAAA,QACpC,WAAW,WAAW,KAAK;AACzB,sBAAY,WAAW,aAAa;AAAA,QACtC,WAAW,WAAW,KAAK;AACzB,sBAAY,WAAW,UAAU;AAAA,QACnC,WAAW,WAAW,KAAK;AACzB,sBAAY,WAAW,SAAS;AAAA,QAClC,WAAW,WAAW,KAAK;AACzB,sBAAY,WAAW,oBAAoB;AAAA,QAC7C,WAAW,UAAU,OAAO,SAAS,KAAK;AAExC,sBAAY,WAAW,YAAY,EAAE,SAAS,QAAQ,MAAM,GAAG,CAAC;AAAA,QAClE,OAAO;AAEL,sBAAY,WAAW,YAAY,EAAE,SAAS,QAAQ,MAAM,GAAG,CAAC;AAAA,QAClE;AAEA,gBAAQ,QAAQ;AAAA,UACd;AAAA,UACA;AAAA,YACE,MAAM,OAAO,SAAS,QAAQ,EAAE;AAAA,YAChC,SAAS,SAAS,WAAW,CAAC;AAAA,UAChC;AAAA,UACA,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AACA;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,aAAa;AAE5B,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,CAAC,QAAS;AAEd,WAAK,gBAAgB,OAAO,EAAE;AAE9B,YAAM,SAAS,OAAO,SAAS,WAAW,WAAW,QAAQ,SAAS;AACtE,cAAQ,QAAQ;AAAA,QACd,cAAc,aAAa,EAAE,SAAS,OAAO,SAAS,SAAS,eAAe,EAAE,CAAC;AAAA,QACjF;AAAA,QACA;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,OAAO;AACtB,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,CAAC,QAAS;AAEd,WAAK,gBAAgB,OAAO,EAAE;AAG9B,YAAM,SAAS,SAAS,UAAU,CAAC;AACnC,cAAQ,QAAQ,IAAI,MAAM,CAAC;AAC3B;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,aAAa;AAE5B,UAAI,KAAK,aAAa;AACpB,aAAK,YAAY,IAAI,MAAM,wBAAwB,SAAS,SAAS,eAAe,EAAE,CAAC;AACvF,aAAK,eAAe;AACpB,aAAK,cAAc;AAAA,MACrB;AACA;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,OAAO;AACtB,WAAK,UAAU;AAGf,iBAAW,YAAY,KAAK,gBAAgB;AAC1C,iBAAS;AAAA,MACX;AAEA,UAAI,KAAK,cAAc;AACrB,aAAK,aAAa;AAClB,aAAK,eAAe;AACpB,aAAK,cAAc;AAAA,MACrB;AACA;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,MAAM;AACrB,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,SAAS;AACX,aAAK,gBAAgB,OAAO,EAAE;AAC9B,gBAAQ,QAAQ,GAAG,EAAE,WAAW,SAAS,UAAU,CAAC,CAAC;AAAA,MACvD;AACA;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,oBAAoB;AACnC,iBAAW,MAAM,KAAK,cAAe,IAAG,OAAO;AAC/C;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,kBAAkB;AACjC,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,SAAS;AACX,aAAK,gBAAgB,OAAO,EAAE;AAC9B,gBAAQ,QAAQ,GAAG,OAAO,CAAC;AAAA,MAC7B;AACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,OAAyB;AACjD,YAAQ,MAAM,iBAAiB,KAAK;AAEpC,eAAW,CAAC,IAAI,OAAO,KAAK,KAAK,iBAAiB;AAChD,cAAQ,OAAO,IAAI,MAAM,iBAAiB,MAAM,OAAO,EAAE,CAAC;AAAA,IAC5D;AACA,SAAK,gBAAgB,MAAM;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAA4B;AAClC,WAAO,OAAO,EAAE,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,KAAa,UAAiC,CAAC,GAAiC;AAC1F,UAAM,EAAE,OAAO,IAAI,KAAK,YAAY,KAAK,OAAO;AAChD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAY,KAAa,UAAiC,CAAC,GAIzD;AACA,UAAM,KAAK,KAAK,kBAAkB;AAGlC,UAAM,SAAS,IAAI,QAA6B,OAAO,SAAS,WAAW;AACzE,WAAK,gBAAgB,IAAI,IAAI;AAAA,QAC3B,SAAS,CAAC,aAAa,QAAQ,QAA+B;AAAA,QAC9D,QAAQ,CAAC,UAAU,OAAO,KAAK;AAAA,MACjC,CAAC;AAED,UAAI;AACF,YAAI,oBAAoB,EAAE,GAAG,QAAQ;AAGrC,YAAI,QAAQ,QAAQ,WAAW,QAAQ,IAAI,GAAG;AAC5C,gBAAM,iBAAiB,MAAM,kBAAkB,QAAQ,IAAI;AAE3D,4BAAkB,OAAO;AAAA,QAC3B;AAGA,YAAI,QAAQ,SAAS;AACnB,cAAI,QAAQ,mBAAmB,SAAS;AACtC,kBAAM,eAAuC,CAAC;AAC9C,oBAAQ,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACtC,2BAAa,GAAG,IAAI;AAAA,YACtB,CAAC;AACD,8BAAkB,UAAU;AAAA,UAC9B;AAAA,QACF;AAEA,cAAM,UAAU,EAAE,IAAI,MAAM,IAAI,OAAO,SAAS,EAAE,KAAK,SAAS,kBAAkB,EAAE;AAEpF,cAAM,KAAK,kBAAkB,SAAS,GAAK;AAAA,MAC7C,SAAS,OAAO;AACd,cAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,YAAI,SAAS;AACX,eAAK,gBAAgB,OAAO,EAAE;AAC9B,kBAAQ,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAAA,QAC1E;AAAA,MACF;AAAA,IACF,CAAC;AAED,UAAM,SAAS,MAAM,KAAK,OAAO,EAAE;AAEnC,WAAO,EAAE,IAAI,QAAQ,OAAO;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,IAAkB;AACvB,UAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,QAAI,SAAS;AACX,WAAK,gBAAgB,OAAO,EAAE;AAC9B,WAAK,OAAO,YAAY,EAAE,IAAI,MAAM,IAAI,OAAO,CAAC;AAChD,cAAQ,OAAO,IAAI,MAAM,mBAAmB,CAAC;AAAA,IAC/C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,IAAI,KAAa,UAA0D,CAAC,GAAiC;AACjH,WAAO,KAAK,MAAM,KAAK,EAAE,GAAG,SAAS,QAAQ,MAAM,CAAC;AAAA,EACtD;AAAA,EAEA,MAAM,KAAK,KAAa,MAAgB,UAA0D,CAAC,GAAiC;AAElI,QAAI,QAAQ,WAAW,IAAI,GAAG;AAC5B,aAAO,KAAK,MAAM,KAAK;AAAA,QACrB,GAAG;AAAA,QACH,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AAGA,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAG3C,QAAI,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AACxC,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AAEA,WAAO,KAAK,MAAM,KAAK;AAAA,MACrB,GAAG;AAAA,MACH;AAAA,MACA,QAAQ;AAAA,MACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACtC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,IAAI,KAAa,MAAgB,UAA0D,CAAC,GAAiC;AAEjI,QAAI,QAAQ,WAAW,IAAI,GAAG;AAC5B,aAAO,KAAK,MAAM,KAAK;AAAA,QACrB,GAAG;AAAA,QACH,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AAGA,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAG3C,QAAI,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AACxC,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AAEA,WAAO,KAAK,MAAM,KAAK;AAAA,MACrB,GAAG;AAAA,MACH;AAAA,MACA,QAAQ;AAAA,MACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACtC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,OAAO,KAAa,UAA0D,CAAC,GAAiC;AACpH,WAAO,KAAK,MAAM,KAAK,EAAE,GAAG,SAAS,QAAQ,SAAS,CAAC;AAAA,EACzD;AAAA,EAEA,MAAM,MAAM,KAAa,MAAgB,UAA0D,CAAC,GAAiC;AAEnI,QAAI,QAAQ,WAAW,IAAI,GAAG;AAC5B,aAAO,KAAK,MAAM,KAAK;AAAA,QACrB,GAAG;AAAA,QACH,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AAGA,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAG3C,QAAI,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AACxC,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AAEA,WAAO,KAAK,MAAM,KAAK;AAAA,MACrB,GAAG;AAAA,MACH;AAAA,MACA,QAAQ;AAAA,MACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACtC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,KAAK,QAAgB,cAAwB,MAA8C;AAC/F,UAAM,KAAK,KAAK,kBAAkB;AAClC,UAAM,UAAU,EAAE,IAAI,MAAM,IAAI,WAAW,SAAS,EAAE,QAAQ,MAAM,UAAU,EAAE;AAEhF,WAAO,IAAI,QAA4B,CAAC,SAAS,WAAW;AAC1D,WAAK,gBAAgB,IAAI,IAAI;AAAA,QAC3B,SAAS,CAAC,MAAM,QAAQ,CAAuB;AAAA,QAC/C,QAAQ,CAAC,MAAa,OAAO,CAAC;AAAA,MAChC,CAAC;AAED,WAAK,kBAAkB,SAAS,IAAK,EAAE,MAAM,CAAC,UAAU;AACtD,cAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,YAAI,SAAS;AACX,eAAK,gBAAgB,OAAO,EAAE;AAC9B,kBAAQ,OAAO,KAAK;AAAA,QACtB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAM,SAAmB,YAAqB,MAAmC;AACrF,UAAM,OAAO,OAAO,YAAY,cAAc,CAAC,IAAI,CAAC,OAAO;AAC3D,WAAO,KAAK,KAAK,SAAS,WAAW,GAAG,IAAI;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAO,SAAmB,YAAqB,MAAmC;AACtF,UAAM,OAAO,OAAO,YAAY,cAAc,CAAC,IAAI,CAAC,OAAO;AAC3D,WAAO,KAAK,KAAK,UAAU,WAAW,GAAG,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aAAa,YAAqB,MAAmC;AACzE,WAAO,KAAK,KAAK,gBAAgB,SAAS;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKA,QAAiB;AACf,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAA2B;AAC/B,QAAI,KAAK,QAAS,QAAO,QAAQ,QAAQ;AAEzC,WAAO,IAAI,QAAc,CAAC,YAAY;AACpC,WAAK,eAAe,IAAI,OAAO;AAAA,IACjC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,UAAkC;AACxC,QAAI,KAAK,SAAS;AAEhB,eAAS;AAAA,IACX;AAEA,SAAK,eAAe,IAAI,QAAQ;AAGhC,WAAO,MAAM;AACX,WAAK,eAAe,OAAO,QAAQ;AAAA,IACrC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,mBAAmB,IAA6C;AAC9D,SAAK,cAAc,IAAI,EAAE;AACzB,WAAO,MAAM,KAAK,cAAc,OAAO,EAAE;AAAA,EAC3C;AAAA;AAAA,EAGA,MAAM,OAA+C;AACnD,UAAM,KAAK,KAAK,kBAAkB;AAClC,UAAM,UAAU,EAAE,IAAI,MAAM,IAAI,MAAM,SAAS,EAAE,WAAW,KAAK,IAAI,EAAE,EAAE;AAEzE,WAAO,IAAI,QAAuC,CAAC,SAAS,WAAW;AACrE,WAAK,gBAAgB,IAAI,IAAI;AAAA,QAC3B,SAAS,CAAC,MAAM,QAAQ,CAAkC;AAAA,QAC1D,QAAQ,CAAC,MAAa,OAAO,CAAC;AAAA,MAChC,CAAC;AAED,WAAK,kBAAkB,SAAS,GAAI,EAAE,MAAM,CAAC,UAAU;AACrD,cAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,YAAI,SAAS;AACX,eAAK,gBAAgB,OAAO,EAAE;AAC9B,kBAAQ,OAAO,KAAK;AAAA,QACtB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,kBAA+B,SAA8B,YAAoB,KAAK,cAA0B;AACtH,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAU,WAAW,MAAM;AAC/B,cAAM,QAAQ,KAAK,aAAa,UAAU,UAAQ,KAAK,OAAO,QAAQ,EAAE;AACxE,YAAI,UAAU,IAAI;AAChB,eAAK,aAAa,OAAO,OAAO,CAAC;AAAA,QACnC;AACA,aAAK,gBAAgB,OAAO,QAAQ,EAAE;AACtC,eAAO,IAAI,MAAM,iBAAiB,CAAC;AAAA,MACrC,GAAG,SAAS;AAEZ,YAAM,YAAuB;AAAA,QAC3B,IAAI,QAAQ;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,WAAK,aAAa,KAAK,SAAS;AAEhC,WAAK,aAAa;AAAA,IACpB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,eAA8B;AAC1C,QAAI,KAAK,qBAAqB,KAAK,aAAa,WAAW,GAAG;AAC5D;AAAA,IACF;AAEA,SAAK,oBAAoB;AAEzB,WAAO,KAAK,aAAa,SAAS,GAAG;AACnC,YAAM,OAAO,KAAK,aAAa,MAAM;AACrC,UAAI,CAAC,KAAM;AAEX,UAAI;AACF,aAAK,OAAO,YAAY,KAAK,OAAO;AAEpC,cAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AAAA,MACtD,SAAS,OAAO;AACd,qBAAa,KAAK,OAAO;AACzB,aAAK,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAAA,MACvE;AAAA,IACF;AAEA,SAAK,oBAAoB;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,UAAgB;AACd,SAAK,OAAO,UAAU;AACtB,SAAK,gBAAgB,MAAM;AAE3B,eAAW,QAAQ,KAAK,cAAc;AACpC,mBAAa,KAAK,OAAO;AACzB,WAAK,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,IAC3C;AACA,SAAK,eAAe,CAAC;AAAA,EACvB;AACF;AAKO,SAAS,aAAa,SAA8C;AACzE,SAAO,IAAI,iBAAiB,OAAO;AACrC;;;AKnnBA,IAAM,WAAW,oBAAI,IAA2B;AAKzC,SAAS,iBAAiB,MAAc,UAA+B;AAC5E,MAAI,OAAO,SAAS,YAAY,CAAC,KAAK,KAAK,GAAG;AAC5C,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AAEA,MAAI,CAAC,YAAY,OAAO,SAAS,iBAAiB,YAAY;AAC5D,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AAEA,WAAS,IAAI,MAAM,QAAQ;AAC7B;AAKO,SAAS,YAAY,MAA6B;AACvD,QAAM,WAAW,SAAS,IAAI,IAAI;AAClC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,aAAa,IAAI,qCAAqC,MAAM,KAAK,SAAS,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;AAAA,EAChH;AACA,SAAO;AACT;AAKO,SAAS,YAAY,MAAuB;AACjD,SAAO,SAAS,IAAI,IAAI;AAC1B;AAKO,SAAS,gBAA0B;AACxC,SAAO,MAAM,KAAK,SAAS,KAAK,CAAC;AACnC;AAKO,SAAS,mBAAmB,MAAuB;AACxD,SAAO,SAAS,OAAO,IAAI;AAC7B;AAKO,SAAS,iBAAuB;AACrC,WAAS,MAAM;AACjB;;;ACpDA,SAAS,MAAAA,KAAI,OAAAC,YAAwB;AAsC9B,SAAS,eAAe,QAAuC;AACpE,QAAM,eAAyE;AAAA,IAC7E,MAAM,aAAa,cAA6B;AAC9C,UAAI,sBAAsB;AAC1B,UAAI,wBAAwB,QAAQ,OAAO,gBAAgB;AACzD,8BAAsB,MAAM,OAAO,eAAe,IAAI;AAAA,MACxD;AAEA,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,QAAQ,mBAAmB;AAElE,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAOC,KAAI,WAAW,mBAAmB,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAClF;AAEA,cAAM,YAAY,MAAM,OAAO,OAAO,MAAM,QAAQ;AACpD,YAAI,CAAC,UAAU,OAAO;AACpB,iBAAOA,KAAI,WAAW,mBAAmB,EAAE,SAAS,8BAA8B,CAAC,CAAC;AAAA,QACtF;AAEA,YAAI,OAAO,kBAAkB,UAAU,cAAc;AACnD,gBAAM,OAAO,eAAe,IAAI,UAAU,YAAY;AAAA,QACxD;AAEA,eAAOC,IAAG,SAAS;AAAA,MACrB,SAAS,OAAO;AACd,eAAOD,KAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,MAAM,SAAkB;AAC5B,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,MAAM,OAAO;AAEpD,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAOA,KAAI,WAAW,YAAY,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAC3E;AAEA,cAAM,YAAY,MAAM,OAAO,OAAO,MAAM,QAAQ;AACpD,YAAI,CAAC,UAAU,OAAO;AACpB,iBAAOA,KAAI,WAAW,YAAY,EAAE,SAAS,8BAA8B,CAAC,CAAC;AAAA,QAC/E;AAEA,YAAI,OAAO,kBAAkB,UAAU,cAAc;AACnD,gBAAM,OAAO,eAAe,IAAI,UAAU,YAAY;AAAA,QACxD;AAEA,eAAOC,IAAG,SAAS;AAAA,MACrB,SAAS,OAAO;AACd,eAAOD,KAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,OAAO,SAAmB;AAC9B,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,OAAO,OAAO;AAErD,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAOA,KAAI,WAAW,aAAa,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAC5E;AAEA,YAAI,OAAO,gBAAgB;AACzB,gBAAM,OAAO,eAAe,IAAI,IAAI;AAAA,QACtC;AAEA,eAAOC,IAAG;AAAA,UACR,OAAO;AAAA,UACP,cAAc;AAAA,UACd,WAAW;AAAA,UACX,MAAM;AAAA;AAAA,QACR,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAOD,KAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAGA,MAAI,OAAO,eAAe;AACxB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,GAAG,OAAO;AAAA,IACZ;AAAA,EACF;AAEA,SAAO;AACT;;;AC5HO,SAAS,uBAAuB,SAAS,gBAAgB,kBAAkB,gBAAqC;AACrH,QAAM,YAAY;AAElB,QAAM,SAAS,MAA4B;AACzC,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAU,UAAU,KAAK,QAAQ,CAAC;AAExC,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAC5C,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAEhD,cAAQ,kBAAkB,CAAC,UAAU;AACnC,cAAM,KAAM,MAAM,OAA4B;AAC9C,YAAI,CAAC,GAAG,iBAAiB,SAAS,SAAS,GAAG;AAC5C,gBAAM,QAAQ,GAAG,kBAAkB,WAAW,EAAE,SAAS,MAAM,CAAC;AAChE,gBAAM,YAAY,aAAa,aAAa,EAAE,QAAQ,MAAM,CAAC;AAAA,QAC/D;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,CAAI,YAAuC;AAClE,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAChD,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,IAC9C,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,MAAM;AACV,UAAI;AACF,cAAM,KAAK,MAAM,OAAO;AACxB,cAAM,cAAc,GAAG,YAAY,CAAC,SAAS,GAAG,UAAU;AAC1D,cAAM,QAAQ,YAAY,YAAY,SAAS;AAC/C,cAAM,SAAS,MAAM,iBAAiB,MAAM,IAAI,eAAe,CAAC;AAChE,eAAO,QAAQ,SAAS;AAAA,MAC1B,SAAS,OAAO;AACd,gBAAQ,KAAK,+CAA+C,KAAK;AACjE,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,MAAM,IAAI,OAAO;AACf,UAAI;AACF,cAAM,KAAK,MAAM,OAAO;AACxB,cAAM,cAAc,GAAG,YAAY,CAAC,SAAS,GAAG,WAAW;AAC3D,cAAM,QAAQ,YAAY,YAAY,SAAS;AAE/C,YAAI,OAAO;AACT,gBAAM,iBAAiB,MAAM,IAAI,EAAE,KAAK,iBAAiB,OAAO,OAAO,WAAW,KAAK,IAAI,EAAE,CAAC,CAAC;AAAA,QACjG,OAAO;AACL,gBAAM,iBAAiB,MAAM,OAAO,eAAe,CAAC;AAAA,QACtD;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,KAAK,8CAA8C,KAAK;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;;;ACzDO,IAAM,aAA0B;AAAA,EACrC,MAAM,MAAM,UAAU;AACpB,UAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,WAAO;AAAA,MACL,OAAO,KAAK,KAAK;AAAA,MACjB,cAAc,KAAK,KAAK;AAAA,MACxB,WAAW,KAAK,KAAK;AAAA,MACrB,MAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACTO,IAAM,eAA4B;AAAA,EACvC,MAAM,MAAM,UAAU;AACpB,UAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,WAAO;AAAA,MACL,OAAO,KAAK,KAAK;AAAA,MACjB,WAAW,KAAK,KAAK;AAAA,MACrB,MAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACPO,SAAS,qBAAqB,QAIpB;AACf,SAAO;AAAA,IACL,MAAM,UAAU;AACd,aAAO,MAAM,OAAO,YAAY;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,MAAM,SAAS;AACnB,aAAO,MAAM,OAAO,UAAU;AAAA,QAC5B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,SAAS;AACpB,aAAO,MAAM,OAAO,WAAW;AAAA,QAC7B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,UAAU,KAAK,UAAU,OAAO,IAAI;AAAA,QAC1C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAKO,IAAM,iBAAiB,qBAAqB;AAAA,EACjD,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb,CAAC;;;AC1CM,SAAS,mBAAmB,QAIlB;AACf,SAAO;AAAA,IACL,MAAM,QAAQ,cAAc;AAC1B,UAAI,CAAC,cAAc;AACjB,cAAM,IAAI,MAAM,4BAA4B;AAAA,MAC9C;AAEA,aAAO,MAAM,OAAO,YAAY;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,aAAa,CAAC;AAAA,QACrC,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,MAAM,SAAS;AACnB,aAAO,MAAM,OAAO,UAAU;AAAA,QAC5B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,SAAS;AACpB,aAAO,MAAM,OAAO,WAAW;AAAA,QAC7B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,UAAU,KAAK,UAAU,OAAO,IAAI;AAAA,QAC1C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAKO,IAAM,eAAe,mBAAmB;AAAA,EAC7C,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb,CAAC;;;ACvCM,SAAS,qBAAqB,QAInB;AAChB,SAAO,eAAe;AAAA,IACpB,gBAAgB;AAAA,IAChB,QAAQ;AAAA,IACR,UAAU,qBAAqB,MAAM;AAAA,EACvC,CAAC;AACH;AASO,SAAS,mBAAmB,QAKjB;AAChB,SAAO,eAAe;AAAA,IACpB,gBAAgB,uBAAuB,gBAAgB,OAAO,mBAAmB,cAAc;AAAA,IAC/F,QAAQ;AAAA,IACR,UAAU,mBAAmB,MAAM;AAAA,EACrC,CAAC;AACH;;;ACvBO,SAAS,oBAAoB,QAA6B;AAC/D,QAAM,SAAS,KAAK,MAAM;AAC1B,QAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AAAA,EAChC;AACA,SAAO,MAAM;AACf;AAMO,SAAS,oBAAoB,aAA8B;AAChE,QAAM,aAAa,YAAY,YAAY;AAG3C,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,MAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AACxC,MAAI,WAAW,SAAS,KAAK,EAAG,QAAO;AACvC,MAAI,WAAW,SAAS,YAAY,EAAG,QAAO;AAC9C,MAAI,WAAW,SAAS,YAAY,EAAG,QAAO;AAC9C,MAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AAGxC,SAAO;AACT;","names":["ok","err","err","ok"]}
+{"version":3,"sources":["../src/client.ts","../src/messages.ts","../src/constants.ts","../src/errors.ts","../src/utils/formdata.ts","../src/utils/registry.ts","../src/provider/create-provider.ts","../src/provider/storage/indexeddb.ts","../src/provider/parser/body.ts","../src/provider/parser/cookie.ts","../src/provider/strategy/cookie.ts","../src/provider/strategy/body.ts","../src/provider/presets.ts","../src/utils/binary.ts"],"sourcesContent":["import type {\r\n  FetchGuardOptions,\r\n  FetchGuardRequestInit,\r\n  WorkerConfig,\r\n  ApiResponse,\r\n  ProviderPresetConfig,\r\n  AuthResult\r\n} from './types'\r\nimport type { MainToWorkerMessage } from './messages'\r\nimport { ok, err, type Result } from 'ts-micro-result'\r\nimport { MSG } from './messages'\r\nimport { DEFAULT_REFRESH_EARLY_MS } from './constants'\r\nimport { RequestErrors } from './errors'\r\nimport { serializeFormData, isFormData } from './utils/formdata'\r\n\r\n/**\r\n * Queue item for sequential message processing\r\n */\r\ninterface QueueItem {\r\n  id: string\r\n  message: MainToWorkerMessage\r\n  resolve: (response: unknown) => void\r\n  reject: (error: Error) => void\r\n  timeout: ReturnType<typeof setTimeout>\r\n}\r\n\r\n/**\r\n * FetchGuard Client - main interface cho việc gọi API thông qua Web Worker\r\n */\r\nexport class FetchGuardClient {\r\n  private worker: Worker\r\n  private messageId = 0\r\n  // Using unknown because different messages have different response types\r\n  // (ApiResponse for FETCH, AuthResult for AUTH_CALL, etc.)\r\n  private pendingRequests = new Map<string, {\r\n    resolve: (value: unknown) => void\r\n    reject: (error: Error) => void\r\n  }>()\r\n  private authListeners = new Set<(state: AuthResult) => void>()\r\n  private readyListeners = new Set<() => void>()\r\n  private isReady = false\r\n\r\n  private requestQueue: QueueItem[] = []\r\n  private isProcessingQueue = false\r\n  private queueTimeout = 30000 // 30 seconds\r\n  private setupResolve?: () => void\r\n  private setupReject?: (error: Error) => void\r\n\r\n  constructor(options: FetchGuardOptions) {\r\n    this.worker = new Worker(new URL('./worker.js', import.meta.url), { \r\n      type: 'module' \r\n    })\r\n\r\n    this.worker.onmessage = this.handleWorkerMessage.bind(this)\r\n    this.worker.onerror = this.handleWorkerError.bind(this)\r\n\r\n    this.initializeWorker(options)\r\n  }\r\n\r\n  /**\r\n   * Initialize worker with config and provider\r\n   */\r\n  private async initializeWorker(options: FetchGuardOptions): Promise<void> {\r\n    const config: WorkerConfig = {\r\n      allowedDomains: options.allowedDomains || [],\r\n      refreshEarlyMs: options.refreshEarlyMs ?? DEFAULT_REFRESH_EARLY_MS\r\n    }\r\n\r\n    // Serialize provider config based on type\r\n    let providerConfig: ProviderPresetConfig | string | null = null\r\n\r\n    if (typeof options.provider === 'string') {\r\n      // String = registry lookup (advanced usage)\r\n      providerConfig = options.provider\r\n    } else if ('type' in options.provider && options.provider.type) {\r\n      // ProviderPresetConfig object (recommended)\r\n      providerConfig = options.provider as ProviderPresetConfig\r\n    } else {\r\n      // TokenProvider instance - NOT SUPPORTED\r\n      throw new Error(\r\n        'Direct TokenProvider instance is not supported. Use ProviderPresetConfig instead:\\n' +\r\n        '  { type: \"cookie-auth\", refreshUrl: \"...\", loginUrl: \"...\", logoutUrl: \"...\" }\\n' +\r\n        'Or for custom providers, register in worker code and use string name.'\r\n      )\r\n    }\r\n\r\n    const message = {\r\n      id: this.generateMessageId(),\r\n      type: MSG.SETUP,\r\n      payload: {\r\n        config,\r\n        providerConfig\r\n      }\r\n    }\r\n\r\n    return new Promise((resolve, reject) => {\r\n      // Setup will respond with READY (no id, so we track separately)\r\n      this.setupResolve = resolve\r\n      this.setupReject = reject\r\n\r\n      this.worker.postMessage(message)\r\n\r\n      setTimeout(() => {\r\n        if (this.setupReject) {\r\n          this.setupReject(new Error('Worker setup timeout'))\r\n          this.setupResolve = undefined\r\n          this.setupReject = undefined\r\n        }\r\n      }, 10000)\r\n    })\r\n  }\r\n\r\n\r\n  /**\r\n   * Handle worker messages\r\n   */\r\n  private handleWorkerMessage(event: MessageEvent): void {\r\n    const { id, type, payload } = event.data\r\n\r\n    if (type === MSG.FETCH_RESULT) {\r\n      // FETCH_RESULT contains all HTTP responses (2xx, 3xx, 4xx, 5xx)\r\n      const request = this.pendingRequests.get(id)\r\n      if (!request) return\r\n\r\n      this.pendingRequests.delete(id)\r\n\r\n      const status = payload?.status\r\n\r\n      // Split ok/err based on HTTP status\r\n      if (status >= 200 && status < 400) {\r\n        // HTTP 2xx/3xx = success\r\n        request.resolve(ok(payload))\r\n      } else {\r\n        // HTTP 4xx/5xx = error with response metadata\r\n        request.resolve(err(\r\n          RequestErrors.HttpError({ status }),\r\n          {\r\n            body: String(payload?.body ?? ''),\r\n            headers: payload?.headers ?? {}\r\n          },\r\n          payload?.status\r\n        ))\r\n      }\r\n      return\r\n    }\r\n\r\n    if (type === MSG.FETCH_ERROR) {\r\n      // Network/timeout/cancel errors (no HTTP response)\r\n      const request = this.pendingRequests.get(id)\r\n      if (!request) return\r\n\r\n      this.pendingRequests.delete(id)\r\n\r\n      const status = typeof payload?.status === 'number' ? payload.status : undefined\r\n      request.resolve(err(\r\n        RequestErrors.NetworkError({ message: String(payload?.error || 'Network error') }),\r\n        undefined,\r\n        status\r\n      ))\r\n      return\r\n    }\r\n\r\n    if (type === MSG.ERROR) {\r\n      const request = this.pendingRequests.get(id)\r\n      if (!request) return\r\n\r\n      this.pendingRequests.delete(id)\r\n\r\n      // Reconstruct error Result from ErrorDetail[]\r\n      const errors = payload?.errors || []\r\n      request.resolve(err(errors))\r\n      return\r\n    }\r\n\r\n    if (type === MSG.SETUP_ERROR) {\r\n      // Setup failed - reject setup promise\r\n      if (this.setupReject) {\r\n        this.setupReject(new Error(`Worker setup failed: ${payload?.error || 'Unknown error'}`))\r\n        this.setupResolve = undefined\r\n        this.setupReject = undefined\r\n      }\r\n      return\r\n    }\r\n\r\n    if (type === MSG.READY) {\r\n      this.isReady = true\r\n\r\n      // Notify ready listeners\r\n      for (const listener of this.readyListeners) {\r\n        listener()\r\n      }\r\n\r\n      if (this.setupResolve) {\r\n        this.setupResolve()\r\n        this.setupResolve = undefined\r\n        this.setupReject = undefined\r\n      }\r\n      return\r\n    }\r\n\r\n    if (type === MSG.PONG) {\r\n      const request = this.pendingRequests.get(id)\r\n      if (request) {\r\n        this.pendingRequests.delete(id)\r\n        request.resolve(ok({ timestamp: payload?.timestamp }))\r\n      }\r\n      return\r\n    }\r\n\r\n    if (type === MSG.AUTH_STATE_CHANGED) {\r\n      for (const cb of this.authListeners) cb(payload)\r\n      return\r\n    }\r\n\r\n    if (type === MSG.AUTH_CALL_RESULT) {\r\n      const request = this.pendingRequests.get(id)\r\n      if (request) {\r\n        this.pendingRequests.delete(id)\r\n        request.resolve(ok(payload)) // payload is AuthResult\r\n      }\r\n      return\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Handle worker errors\r\n   */\r\n  private handleWorkerError(error: ErrorEvent): void {\r\n    console.error('Worker error:', error)\r\n    // Reject all pending requests\r\n    for (const [id, request] of this.pendingRequests) {\r\n      request.reject(new Error(`Worker error: ${error.message}`))\r\n    }\r\n    this.pendingRequests.clear()\r\n  }\r\n\r\n  /**\r\n   * Generate unique message ID\r\n   */\r\n  private generateMessageId(): string {\r\n    return `msg_${++this.messageId}_${Date.now()}`\r\n  }\r\n\r\n  /**\r\n   * Make API request\r\n   */\r\n  async fetch(url: string, options: FetchGuardRequestInit = {}): Promise<Result<ApiResponse>> {\r\n    const { result } = this.fetchWithId(url, options)\r\n    return result\r\n  }\r\n\r\n  /**\r\n   * Fetch with id for external cancellation\r\n   * Returns { id, result, cancel }\r\n   * Now uses queue system for sequential processing\r\n   */\r\n  fetchWithId(url: string, options: FetchGuardRequestInit = {}): {\r\n    id: string\r\n    result: Promise<Result<ApiResponse>>\r\n    cancel: () => void\r\n  } {\r\n    const id = this.generateMessageId()\r\n\r\n    // Serialize FormData if present (async operation)\r\n    const result = new Promise<Result<ApiResponse>>(async (resolve, reject) => {\r\n      this.pendingRequests.set(id, {\r\n        resolve: (response) => resolve(response as Result<ApiResponse>),\r\n        reject: (error) => reject(error)\r\n      })\r\n\r\n      try {\r\n        let serializedOptions = { ...options }\r\n\r\n        // Serialize FormData body before sending to worker\r\n        if (options.body && isFormData(options.body)) {\r\n          const serializedBody = await serializeFormData(options.body)\r\n          // SerializedFormData will be deserialized back to FormData in worker\r\n          serializedOptions.body = serializedBody as unknown as BodyInit\r\n        }\r\n\r\n        // Serialize Headers object to plain object (Headers cannot be cloned)\r\n        if (options.headers) {\r\n          if (options.headers instanceof Headers) {\r\n            const plainHeaders: Record<string, string> = {}\r\n            options.headers.forEach((value, key) => {\r\n              plainHeaders[key] = value\r\n            })\r\n            serializedOptions.headers = plainHeaders\r\n          }\r\n        }\r\n\r\n        const message = { id, type: MSG.FETCH, payload: { url, options: serializedOptions } }\r\n\r\n        await this.sendMessageQueued(message, 30000)\r\n      } catch (error) {\r\n        const request = this.pendingRequests.get(id)\r\n        if (request) {\r\n          this.pendingRequests.delete(id)\r\n          request.reject(error instanceof Error ? error : new Error(String(error)))\r\n        }\r\n      }\r\n    })\r\n\r\n    const cancel = () => this.cancel(id)\r\n\r\n    return { id, result, cancel }\r\n  }\r\n\r\n  /**\r\n   * Cancel a pending request by ID\r\n   */\r\n  cancel(id: string): void {\r\n    const request = this.pendingRequests.get(id)\r\n    if (request) {\r\n      this.pendingRequests.delete(id)\r\n      this.worker.postMessage({ id, type: MSG.CANCEL })\r\n      request.reject(new Error('Request cancelled'))\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Convenience methods\r\n   */\r\n  async get(url: string, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    return this.fetch(url, { ...options, method: 'GET' })\r\n  }\r\n\r\n  async post(url: string, body?: unknown, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    // If body is FormData, use fetch directly (no JSON.stringify)\r\n    if (body && isFormData(body)) {\r\n      return this.fetch(url, {\r\n        ...options,\r\n        method: 'POST',\r\n        body\r\n      })\r\n    }\r\n\r\n    // For non-FormData body, use JSON\r\n    const headers = new Headers(options.headers)\r\n\r\n    // Set Content-Type if not already set and body is being stringified\r\n    if (body && !headers.has('Content-Type')) {\r\n      headers.set('Content-Type', 'application/json')\r\n    }\r\n\r\n    return this.fetch(url, {\r\n      ...options,\r\n      headers,\r\n      method: 'POST',\r\n      body: body ? JSON.stringify(body) : undefined\r\n    })\r\n  }\r\n\r\n  async put(url: string, body?: unknown, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    // If body is FormData, use fetch directly (no JSON.stringify)\r\n    if (body && isFormData(body)) {\r\n      return this.fetch(url, {\r\n        ...options,\r\n        method: 'PUT',\r\n        body\r\n      })\r\n    }\r\n\r\n    // For non-FormData body, use JSON\r\n    const headers = new Headers(options.headers)\r\n\r\n    // Set Content-Type if not already set and body is being stringified\r\n    if (body && !headers.has('Content-Type')) {\r\n      headers.set('Content-Type', 'application/json')\r\n    }\r\n\r\n    return this.fetch(url, {\r\n      ...options,\r\n      headers,\r\n      method: 'PUT',\r\n      body: body ? JSON.stringify(body) : undefined\r\n    })\r\n  }\r\n\r\n  async delete(url: string, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    return this.fetch(url, { ...options, method: 'DELETE' })\r\n  }\r\n\r\n  async patch(url: string, body?: unknown, options: Omit<FetchGuardRequestInit, 'method' | 'body'> = {}): Promise<Result<ApiResponse>> {\r\n    // If body is FormData, use fetch directly (no JSON.stringify)\r\n    if (body && isFormData(body)) {\r\n      return this.fetch(url, {\r\n        ...options,\r\n        method: 'PATCH',\r\n        body\r\n      })\r\n    }\r\n\r\n    // For non-FormData body, use JSON\r\n    const headers = new Headers(options.headers)\r\n\r\n    // Set Content-Type if not already set and body is being stringified\r\n    if (body && !headers.has('Content-Type')) {\r\n      headers.set('Content-Type', 'application/json')\r\n    }\r\n\r\n    return this.fetch(url, {\r\n      ...options,\r\n      headers,\r\n      method: 'PATCH',\r\n      body: body ? JSON.stringify(body) : undefined\r\n    })\r\n  }\r\n\r\n  /**\r\n   * Generic method to call any auth method on provider\r\n   * @param method - Method name (login, logout, loginWithPhone, etc.)\r\n   * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)\r\n   * @param args - Arguments to pass to the method\r\n   * @returns Promise<Result<AuthResult>> - Always returns AuthResult\r\n   */\r\n  async call(method: string, emitEvent?: boolean, ...args: unknown[]): Promise<Result<AuthResult>> {\r\n    const id = this.generateMessageId()\r\n    const message = { id, type: MSG.AUTH_CALL, payload: { method, args, emitEvent } }\r\n\r\n    return new Promise<Result<AuthResult>>((resolve, reject) => {\r\n      this.pendingRequests.set(id, {\r\n        resolve: (r) => resolve(r as Result<AuthResult>),\r\n        reject: (e: Error) => reject(e)\r\n      })\r\n\r\n      this.sendMessageQueued(message, 15000).catch((error) => {\r\n        const request = this.pendingRequests.get(id)\r\n        if (request) {\r\n          this.pendingRequests.delete(id)\r\n          request.reject(error)\r\n        }\r\n      })\r\n    })\r\n  }\r\n\r\n\r\n  /**\r\n   * Convenience wrapper for login\r\n   * @param payload - Login credentials\r\n   * @param url - Optional URL override\r\n   * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)\r\n   */\r\n  async login(payload?: unknown, url?: string, emitEvent: boolean = true): Promise<Result<AuthResult>> {\r\n    const args: unknown[] = []\r\n    if (typeof payload !== 'undefined') {\r\n      args.push(payload)\r\n    }\r\n    if (typeof url !== 'undefined') {\r\n      // If payload is undefined but url is provided, need to pass undefined explicitly\r\n      if (args.length === 0) {\r\n        args.push(undefined)\r\n      }\r\n      args.push(url)\r\n    }\r\n    return this.call('login', emitEvent, ...args)\r\n  }\r\n\r\n  /**\r\n   * Convenience wrapper for logout\r\n   * @param payload - Optional logout payload\r\n   * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)\r\n   */\r\n  async logout(payload?: unknown, emitEvent: boolean = true): Promise<Result<AuthResult>> {\r\n    const args = typeof payload === 'undefined' ? [] : [payload]\r\n    return this.call('logout', emitEvent, ...args)\r\n  }\r\n\r\n  /**\r\n   * Convenience wrapper for refreshToken\r\n   * @param emitEvent - Whether to emit AUTH_STATE_CHANGED event (default: true)\r\n   */\r\n  async refreshToken(emitEvent: boolean = true): Promise<Result<AuthResult>> {\r\n    return this.call('refreshToken', emitEvent)\r\n  }\r\n\r\n  /**\r\n   * Check if worker is ready\r\n   */\r\n  ready(): boolean {\r\n    return this.isReady\r\n  }\r\n\r\n  /**\r\n   * Wait for worker to be ready\r\n   * Returns immediately if already ready\r\n   */\r\n  async whenReady(): Promise<void> {\r\n    if (this.isReady) return Promise.resolve()\r\n\r\n    return new Promise<void>((resolve) => {\r\n      this.readyListeners.add(resolve)\r\n    })\r\n  }\r\n\r\n  /**\r\n   * Subscribe to ready event\r\n   * Callback is called immediately if already ready\r\n   */\r\n  onReady(callback: () => void): () => void {\r\n    if (this.isReady) {\r\n      // Already ready - call immediately\r\n      callback()\r\n    }\r\n\r\n    this.readyListeners.add(callback)\r\n\r\n    // Return unsubscribe function\r\n    return () => {\r\n      this.readyListeners.delete(callback)\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Subscribe to auth state changes\r\n   */\r\n  onAuthStateChanged(cb: (state: AuthResult) => void): () => void {\r\n    this.authListeners.add(cb)\r\n    return () => this.authListeners.delete(cb)\r\n  }\r\n\r\n  /** Send PING and await PONG */\r\n  async ping(): Promise<Result<{ timestamp: number }>> {\r\n    const id = this.generateMessageId()\r\n    const message = { id, type: MSG.PING, payload: { timestamp: Date.now() } }\r\n\r\n    return new Promise<Result<{ timestamp: number }>>((resolve, reject) => {\r\n      this.pendingRequests.set(id, {\r\n        resolve: (r) => resolve(r as Result<{ timestamp: number }>),\r\n        reject: (e: Error) => reject(e)\r\n      })\r\n\r\n      this.sendMessageQueued(message, 5000).catch((error) => {\r\n        const request = this.pendingRequests.get(id)\r\n        if (request) {\r\n          this.pendingRequests.delete(id)\r\n          request.reject(error)\r\n        }\r\n      })\r\n    })\r\n  }\r\n\r\n\r\n  /**\r\n   * Send message through queue system\r\n   * All messages go through queue for sequential processing\r\n   */\r\n  private sendMessageQueued<T = unknown>(message: MainToWorkerMessage, timeoutMs: number = this.queueTimeout): Promise<T> {\r\n    return new Promise((resolve, reject) => {\r\n      const timeout = setTimeout(() => {\r\n        const index = this.requestQueue.findIndex(item => item.id === message.id)\r\n        if (index !== -1) {\r\n          this.requestQueue.splice(index, 1)\r\n        }\r\n        this.pendingRequests.delete(message.id)\r\n        reject(new Error('Request timeout'))\r\n      }, timeoutMs)\r\n\r\n      const queueItem: QueueItem = {\r\n        id: message.id,\r\n        message,\r\n        resolve: resolve as (response: unknown) => void,\r\n        reject,\r\n        timeout\r\n      }\r\n\r\n      this.requestQueue.push(queueItem)\r\n\r\n      this.processQueue()\r\n    })\r\n  }\r\n\r\n  /**\r\n   * Process message queue sequentially\r\n   * Benefits:\r\n   * - Sequential processing prevents worker overload\r\n   * - Better error isolation (one failure doesn't affect others)\r\n   * - 50ms delay between requests for backpressure\r\n   */\r\n  private async processQueue(): Promise<void> {\r\n    if (this.isProcessingQueue || this.requestQueue.length === 0) {\r\n      return\r\n    }\r\n\r\n    this.isProcessingQueue = true\r\n\r\n    while (this.requestQueue.length > 0) {\r\n      const item = this.requestQueue.shift()\r\n      if (!item) continue\r\n\r\n      try {\r\n        this.worker.postMessage(item.message)\r\n\r\n        await new Promise(resolve => setTimeout(resolve, 50))\r\n      } catch (error) {\r\n        clearTimeout(item.timeout)\r\n        item.reject(error instanceof Error ? error : new Error(String(error)))\r\n      }\r\n    }\r\n\r\n    this.isProcessingQueue = false\r\n  }\r\n\r\n  /**\r\n   * Cleanup - terminate worker\r\n   */\r\n  destroy(): void {\r\n    this.worker.terminate()\r\n    this.pendingRequests.clear()\r\n\r\n    for (const item of this.requestQueue) {\r\n      clearTimeout(item.timeout)\r\n      item.reject(new Error('Client destroyed'))\r\n    }\r\n    this.requestQueue = []\r\n  }\r\n}\r\n\r\n/**\r\n * Factory function to create FetchGuard client\r\n */\r\nexport function createClient(options: FetchGuardOptions): FetchGuardClient {\r\n  return new FetchGuardClient(options)\r\n}\r\n","import type { ErrorDetail } from 'ts-micro-result'\r\nimport type { WorkerConfig, FetchGuardRequestInit, ProviderPresetConfig, AuthResult, ApiResponse } from './types'\r\n\r\n/**\r\n * MESSAGE PAYLOADS - SINGLE SOURCE OF TRUTH\r\n *\r\n * Define all message payloads here. Type unions and MSG constants are auto-generated.\r\n *\r\n * USAGE:\r\n * - To add a new message: Just add one line to the appropriate interface\r\n * - Payload types are automatically inferred\r\n * - MSG constants are automatically generated\r\n *\r\n * EXAMPLE:\r\n * ```typescript\r\n * interface MainPayloads {\r\n *   NEW_MESSAGE: { foo: string }  // Add this line\r\n * }\r\n * // => Automatically get MainToWorkerMessage union with NEW_MESSAGE\r\n * // => Automatically get MSG.NEW_MESSAGE = 'NEW_MESSAGE'\r\n * ```\r\n */\r\n\r\n/**\r\n * Payloads for messages sent from Main thread → Worker thread\r\n */\r\nexport interface MainPayloads {\r\n  SETUP: { config: WorkerConfig; providerConfig: ProviderPresetConfig | string | null }\r\n  FETCH: { url: string; options?: FetchGuardRequestInit }\r\n  AUTH_CALL: { method: string; args: unknown[]; emitEvent?: boolean }  // Generic auth method call (login, logout, loginWithPhone, etc.)\r\n  CANCEL: undefined\r\n  PING: { timestamp: number }\r\n}\r\n\r\n/**\r\n * Payloads for messages sent from Worker thread → Main thread\r\n */\r\nexport interface WorkerPayloads {\r\n  ERROR: { errors: ErrorDetail[] }\r\n  READY: undefined\r\n  SETUP_ERROR: { error: string }\r\n  PONG: { timestamp: number }\r\n  LOG: { level: 'info' | 'warn' | 'error'; message: string }\r\n  AUTH_STATE_CHANGED: AuthResult\r\n  AUTH_CALL_RESULT: AuthResult\r\n  FETCH_RESULT: ApiResponse\r\n  FETCH_ERROR: { error: string; status?: number }\r\n}\r\n\r\n/**\r\n * Generate message type from payload definition\r\n * Handles optional payloads (undefined) gracefully\r\n */\r\ntype MessageFromPayloads<P> = {\r\n  [K in keyof P]: { id: string; type: K } & (\r\n    P[K] extends undefined ? {} : { payload: P[K] }\r\n  )\r\n}[keyof P]\r\n\r\n/**\r\n * Message type unions - auto-generated from payload interfaces\r\n */\r\nexport type MainToWorkerMessage = MessageFromPayloads<MainPayloads>\r\nexport type WorkerToMainMessage = MessageFromPayloads<WorkerPayloads>\r\n\r\n/**\r\n * Message type unions for compile-time type checking\r\n */\r\nexport type MainType = keyof MainPayloads\r\nexport type WorkerType = keyof WorkerPayloads\r\nexport type MessageType = MainType | WorkerType\r\n\r\n/**\r\n * MSG constants object\r\n * Usage: MSG.SETUP, MSG.FETCH, etc.\r\n */\r\nexport const MSG = Object.freeze({\r\n  // Main -> Worker messages\r\n  SETUP: 'SETUP',\r\n  FETCH: 'FETCH',\r\n  AUTH_CALL: 'AUTH_CALL',\r\n  CANCEL: 'CANCEL',\r\n  PING: 'PING',\r\n\r\n  // Worker -> Main messages\r\n  ERROR: 'ERROR',\r\n  READY: 'READY',\r\n  SETUP_ERROR: 'SETUP_ERROR',\r\n  PONG: 'PONG',\r\n  LOG: 'LOG',\r\n  AUTH_STATE_CHANGED: 'AUTH_STATE_CHANGED',\r\n  AUTH_CALL_RESULT: 'AUTH_CALL_RESULT',\r\n  FETCH_RESULT: 'FETCH_RESULT',\r\n  FETCH_ERROR: 'FETCH_ERROR'\r\n}) as { readonly [K in MessageType]: K }\r\n","/**\n * FetchGuard Default Configuration Values\n */\n\n/**\n * Default time (in milliseconds) to refresh token before expiry\n * @default 60000 (60 seconds)\n */\nexport const DEFAULT_REFRESH_EARLY_MS = 60_000\n","/**\n * Error definitions organized by domain\n * Using ts-micro-result's defineError for consistency\n */\n\nimport { defineError, defineErrorAdvanced } from 'ts-micro-result'\n\n/**\n * General errors\n */\nexport const GeneralErrors = {\n  Unexpected: defineError('UNEXPECTED', 'Unexpected error', 500),\n  UnknownMessage: defineError('UNKNOWN_MESSAGE', 'Unknown message type', 400),\n  ResultParse: defineError('RESULT_PARSE_ERROR', 'Failed to parse result', 500),\n} as const\n\n/**\n * Initialization errors\n */\nexport const InitErrors = {\n  NotInitialized: defineError('INIT_ERROR', 'Worker not initialized', 500),\n  ProviderInitFailed: defineError('PROVIDER_INIT_FAILED', 'Failed to initialize provider', 500),\n  InitFailed: defineError('INIT_FAILED', 'Initialization failed', 500),\n} as const\n\n/**\n * Authentication & Token errors\n */\nexport const AuthErrors = {\n  TokenRefreshFailed: defineError('TOKEN_REFRESH_FAILED', 'Token refresh failed', 401),\n  LoginFailed: defineError('LOGIN_FAILED', 'Login failed', 401),\n  LogoutFailed: defineError('LOGOUT_FAILED', 'Logout failed', 500),\n  NotAuthenticated: defineError('NOT_AUTHENTICATED', 'User is not authenticated', 401),\n} as const\n\n/**\n * Domain validation errors\n */\nexport const DomainErrors = {\n  NotAllowed: defineErrorAdvanced('DOMAIN_NOT_ALLOWED', 'Domain not allowed: {url}', 403),\n} as const\n\n/**\n * Request/Response errors (network, HTTP, parsing)\n */\nexport const RequestErrors = {\n  // Network errors (connection failed, no response)\n  NetworkError: defineError('NETWORK_ERROR', 'Network error', 500),\n  Cancelled: defineError('REQUEST_CANCELLED', 'Request was cancelled', 499),\n\n  // HTTP errors (server responded with error status)\n  HttpError: defineErrorAdvanced('HTTP_ERROR', 'HTTP {status} error', 500),\n\n  // Response parsing errors\n  ResponseParseFailed: defineError('RESPONSE_PARSE_FAILED', 'Failed to parse response body', 500),\n} as const\n","import type { SerializedFormData, SerializedFormDataEntry, SerializedFile } from '../types'\r\n\r\n/**\r\n * Serialize FormData for transfer over postMessage\r\n * Inspired by api-worker.js:484-518\r\n *\r\n * FormData cannot be cloned via postMessage, so we need to serialize it first\r\n * Files are converted to ArrayBuffer -> number[] for transfer\r\n */\r\nexport async function serializeFormData(formData: FormData): Promise<SerializedFormData> {\r\n  const entries: Array<[string, SerializedFormDataEntry]> = []\r\n\r\n  // Use forEach instead of entries() for better TS compatibility\r\n  formData.forEach((value, key) => {\r\n    // Push async operations to promises array for parallel processing\r\n    if (value instanceof File) {\r\n      // We need to handle this synchronously in forEach, so we'll collect promises\r\n      // and await them all at once\r\n    } else {\r\n      entries.push([key, String(value)])\r\n    }\r\n  })\r\n\r\n  // Handle File entries separately with Promise.all\r\n  const filePromises: Promise<void>[] = []\r\n  formData.forEach((value, key) => {\r\n    if (value instanceof File) {\r\n      const promise = (async () => {\r\n        const arrayBuffer = await value.arrayBuffer()\r\n        const uint8Array = new Uint8Array(arrayBuffer)\r\n        const serializedFile: SerializedFile = {\r\n          name: value.name,\r\n          type: value.type,\r\n          data: Array.from(uint8Array) // Convert to number array\r\n        }\r\n        entries.push([key, serializedFile])\r\n      })()\r\n      filePromises.push(promise)\r\n    }\r\n  })\r\n\r\n  await Promise.all(filePromises)\r\n\r\n  return {\r\n    _type: 'FormData',\r\n    entries\r\n  }\r\n}\r\n\r\n/**\r\n * Deserialize SerializedFormData back to FormData in worker\r\n * Reconstructs File objects from serialized data\r\n */\r\nexport function deserializeFormData(serialized: SerializedFormData): FormData {\r\n  const formData = new FormData()\r\n\r\n  for (const [key, value] of serialized.entries) {\r\n    if (typeof value === 'string') {\r\n      formData.append(key, value)\r\n    } else {\r\n      // Reconstruct File from SerializedFile\r\n      const uint8Array = new Uint8Array(value.data)\r\n      const file = new File([uint8Array], value.name, { type: value.type })\r\n      formData.append(key, file)\r\n    }\r\n  }\r\n\r\n  return formData\r\n}\r\n\r\n/**\r\n * Check if body is FormData\r\n */\r\nexport function isFormData(body: unknown): body is FormData {\r\n  return body instanceof FormData\r\n}\r\n\r\n/**\r\n * Check if serialized body is SerializedFormData\r\n */\r\nexport function isSerializedFormData(body: unknown): body is SerializedFormData {\r\n  return body !== null && typeof body === 'object' && (body as SerializedFormData)._type === 'FormData'\r\n}\r\n","import type { TokenProvider } from '../types'\r\n\r\n/**\r\n * Registry to manage token providers\r\n */\r\nconst registry = new Map<string, TokenProvider>()\r\n\r\n/**\r\n * Register a token provider with name\r\n */\r\nexport function registerProvider(name: string, provider: TokenProvider): void {\r\n  if (typeof name !== 'string' || !name.trim()) {\r\n    throw new Error('Provider name must be a non-empty string')\r\n  }\r\n  \r\n  if (!provider || typeof provider.refreshToken !== 'function') {\r\n    throw new Error('Provider must implement TokenProvider interface')\r\n  }\r\n  \r\n  registry.set(name, provider)\r\n}\r\n\r\n/**\r\n * Get provider by name\r\n */\r\nexport function getProvider(name: string): TokenProvider {\r\n  const provider = registry.get(name)\r\n  if (!provider) {\r\n    throw new Error(`Provider '${name}' not found. Available providers: ${Array.from(registry.keys()).join(', ')}`)\r\n  }\r\n  return provider\r\n}\r\n\r\n/**\r\n * Check if provider exists\r\n */\r\nexport function hasProvider(name: string): boolean {\r\n  return registry.has(name)\r\n}\r\n\r\n/**\r\n * Get list of all provider names\r\n */\r\nexport function listProviders(): string[] {\r\n  return Array.from(registry.keys())\r\n}\r\n\r\n/**\r\n * Remove provider\r\n */\r\nexport function unregisterProvider(name: string): boolean {\r\n  return registry.delete(name)\r\n}\r\n\r\n/**\r\n * Remove all providers\r\n */\r\nexport function clearProviders(): void {\r\n  registry.clear()\r\n}\r\n","import type {\r\n  TokenProvider,\r\n  RefreshTokenStorage,\r\n  TokenParser,\r\n  AuthStrategy,\r\n  TokenInfo\r\n} from '../types'\r\nimport { ok, err, type Result } from 'ts-micro-result'\r\nimport { AuthErrors, RequestErrors } from '../errors'\r\n\r\n/**\r\n * Custom auth method type\r\n */\r\ntype CustomAuthMethod = (...args: unknown[]) => Promise<Result<TokenInfo>>\r\n\r\n/**\r\n * Configuration for creating provider\r\n *\r\n * refreshStorage: OPTIONAL - to load refresh token initially when worker starts\r\n * - undefined: cookie-based auth (httpOnly cookie, no need to load)\r\n * - RefreshTokenStorage: body-based auth (load from IndexedDB on startup)\r\n *\r\n * strategy: AuthStrategy with refresh (required), login/logout (required)\r\n *\r\n * customMethods: OPTIONAL - custom auth methods (loginWithPhone, loginWithGoogle, etc.)\r\n */\r\nexport interface ProviderConfig {\r\n  refreshStorage?: RefreshTokenStorage\r\n  parser: TokenParser\r\n  strategy: AuthStrategy\r\n  customMethods?: Record<string, CustomAuthMethod>\r\n}\r\n\r\n/**\r\n * Factory function to create TokenProvider from modular components\r\n *\r\n * Provider automatically handles refresh token:\r\n * - If refreshToken is null and storage exists → load from storage initially\r\n * - If refreshToken exists → use token from worker memory\r\n * - Cookie-based (no storage) → always null\r\n *\r\n * Custom methods:\r\n * - User can add custom auth methods (loginWithPhone, loginWithGoogle, etc.)\r\n * - Custom methods will be spread into provider object\r\n */\r\nexport function createProvider(config: ProviderConfig): TokenProvider {\r\n  const baseProvider: Pick<TokenProvider, 'refreshToken' | 'login' | 'logout'> = {\r\n    async refreshToken(refreshToken: string | null) {\r\n      let currentRefreshToken = refreshToken\r\n      if (currentRefreshToken === null && config.refreshStorage) {\r\n        currentRefreshToken = await config.refreshStorage.get()\r\n      }\r\n\r\n      try {\r\n        const response = await config.strategy.refresh(currentRefreshToken)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.TokenRefreshFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        const tokenInfo = await config.parser.parse(response)\r\n        if (!tokenInfo.token) {\r\n          return err(AuthErrors.TokenRefreshFailed({ message: 'No access token in response' }))\r\n        }\r\n\r\n        if (config.refreshStorage && tokenInfo.refreshToken) {\r\n          await config.refreshStorage.set(tokenInfo.refreshToken)\r\n        }\r\n\r\n        return ok(tokenInfo)\r\n      } catch (error) {\r\n        return err(RequestErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    },\r\n\r\n    async login(payload: unknown, url?: string) {\r\n      try {\r\n        const response = await config.strategy.login(payload, url)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.LoginFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        const tokenInfo = await config.parser.parse(response)\r\n        if (!tokenInfo.token) {\r\n          return err(AuthErrors.LoginFailed({ message: 'No access token in response' }))\r\n        }\r\n\r\n        if (config.refreshStorage && tokenInfo.refreshToken) {\r\n          await config.refreshStorage.set(tokenInfo.refreshToken)\r\n        }\r\n\r\n        return ok(tokenInfo)\r\n      } catch (error) {\r\n        return err(RequestErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    },\r\n\r\n    async logout(payload?: unknown) {\r\n      try {\r\n        const response = await config.strategy.logout(payload)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.LogoutFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        if (config.refreshStorage) {\r\n          await config.refreshStorage.set(null)\r\n        }\r\n\r\n        return ok({\r\n          token: '',\r\n          refreshToken: undefined,\r\n          expiresAt: undefined,\r\n          user: null  // Explicitly clear user on logout\r\n        })\r\n      } catch (error) {\r\n        return err(RequestErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    }\r\n  }\r\n\r\n  // Merge custom methods if provided\r\n  if (config.customMethods) {\r\n    return {\r\n      ...baseProvider,\r\n      ...config.customMethods\r\n    } as TokenProvider\r\n  }\r\n\r\n  return baseProvider as TokenProvider\r\n}\r\n","import type { RefreshTokenStorage } from '../../types'\r\n\r\n/**\r\n * IndexedDB storage - only stores refresh token in IndexedDB\r\n * Suitable for body-based refresh strategy\r\n * Persists refresh token for reuse after reload\r\n */\r\nexport function createIndexedDBStorage(dbName = 'FetchGuardDB', refreshTokenKey = 'refreshToken'): RefreshTokenStorage {\r\n  const storeName = 'tokens'\r\n\r\n  const openDB = (): Promise<IDBDatabase> => {\r\n    return new Promise((resolve, reject) => {\r\n      const request = indexedDB.open(dbName, 1)\r\n      \r\n      request.onerror = () => reject(request.error)\r\n      request.onsuccess = () => resolve(request.result)\r\n      \r\n      request.onupgradeneeded = (event) => {\r\n        const db = (event.target as IDBOpenDBRequest).result\r\n        if (!db.objectStoreNames.contains(storeName)) {\r\n          const store = db.createObjectStore(storeName, { keyPath: 'key' })\r\n          store.createIndex('timestamp', 'timestamp', { unique: false })\r\n        }\r\n      }\r\n    })\r\n  }\r\n\r\n  const promisifyRequest = <T>(request: IDBRequest<T>): Promise<T> => {\r\n    return new Promise((resolve, reject) => {\r\n      request.onsuccess = () => resolve(request.result)\r\n      request.onerror = () => reject(request.error)\r\n    })\r\n  }\r\n\r\n  return {\r\n    async get() {\r\n      try {\r\n        const db = await openDB()\r\n        const transaction = db.transaction([storeName], 'readonly')\r\n        const store = transaction.objectStore(storeName)\r\n        const result = await promisifyRequest(store.get(refreshTokenKey))\r\n        return result?.value || null\r\n      } catch (error) {\r\n        console.warn('Failed to get refresh token from IndexedDB:', error)\r\n        return null\r\n      }\r\n    },\r\n    async set(token) {\r\n      try {\r\n        const db = await openDB()\r\n        const transaction = db.transaction([storeName], 'readwrite')\r\n        const store = transaction.objectStore(storeName)\r\n\r\n        if (token) {\r\n          await promisifyRequest(store.put({ key: refreshTokenKey, value: token, timestamp: Date.now() }))\r\n        } else {\r\n          await promisifyRequest(store.delete(refreshTokenKey))\r\n        }\r\n      } catch (error) {\r\n        console.warn('Failed to save refresh token to IndexedDB:', error)\r\n      }\r\n    }\r\n  }\r\n}\r\n","import type { TokenParser } from '../../types'\r\n\r\n/**\r\n * Body parser - parse token from response body (JSON)\r\n * Expects response format: { data: { accessToken, refreshToken, expiresAt?, user? } }\r\n */\r\nexport const bodyParser: TokenParser = {\r\n  async parse(response) {\r\n    const json = await response.clone().json()\r\n    return {\r\n      token: json.data.accessToken,\r\n      refreshToken: json.data.refreshToken,\r\n      expiresAt: json.data.expiresAt,\r\n      user: json.data.user\r\n    }\r\n  }\r\n}\r\n","import type { TokenParser } from '../../types'\r\n\r\n/**\r\n * Cookie parser - parse access token from response body\r\n * Expects response format: { data: { accessToken, expiresAt?, user? } }\r\n * Refresh token is automatically set by backend into httpOnly cookie\r\n */\r\nexport const cookieParser: TokenParser = {\r\n  async parse(response) {\r\n    const json = await response.clone().json()\r\n    return {\r\n      token: json.data.accessToken,\r\n      expiresAt: json.data.expiresAt,\r\n      user: json.data.user\r\n    }\r\n  }\r\n}\r\n","import type { AuthStrategy } from '../../types'\r\n\r\n/**\r\n * Cookie auth strategy - all auth operations via httpOnly cookies\r\n * Suitable for SSR and cross-domain authentication\r\n *\r\n * Refresh token is sent automatically via httpOnly cookie\r\n * Credentials are sent in request body\r\n *\r\n * Login URL can be:\r\n * - Configured once: loginUrl: 'https://api.example.com/auth/login'\r\n * - Passed per call: login(payload, 'https://...')\r\n */\r\nexport function createCookieStrategy(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): AuthStrategy {\r\n  return {\r\n    async refresh() {\r\n      return fetch(config.refreshUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async login(payload, url) {\r\n      return fetch(url || config.loginUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify(payload),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async logout(payload) {\r\n      return fetch(config.logoutUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: payload ? JSON.stringify(payload) : undefined,\r\n        credentials: 'include'\r\n      })\r\n    }\r\n  }\r\n}\r\n\r\n/**\r\n * Standard cookie strategy\r\n */\r\nexport const cookieStrategy = createCookieStrategy({\r\n  refreshUrl: '/auth/refresh',\r\n  loginUrl: '/auth/login',\r\n  logoutUrl: '/auth/logout'\r\n})\r\n","import type { AuthStrategy } from '../../types'\r\n\r\n/**\r\n * Body auth strategy - all auth operations via request body\r\n * Suitable for SPA applications\r\n *\r\n * All tokens/credentials are sent in request body\r\n *\r\n * Login URL can be:\r\n * - Configured once: loginUrl: 'https://api.example.com/auth/login'\r\n * - Passed per call: login(payload, 'https://...')\r\n */\r\nexport function createBodyStrategy(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): AuthStrategy {\r\n  return {\r\n    async refresh(refreshToken) {\r\n      if (!refreshToken) {\r\n        throw new Error('No refresh token available')\r\n      }\r\n\r\n      return fetch(config.refreshUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify({ refreshToken }),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async login(payload, url) {\r\n      return fetch(url || config.loginUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify(payload),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async logout(payload) {\r\n      return fetch(config.logoutUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: payload ? JSON.stringify(payload) : undefined,\r\n        credentials: 'include'\r\n      })\r\n    }\r\n  }\r\n}\r\n\r\n/**\r\n * Standard body strategy\r\n */\r\nexport const bodyStrategy = createBodyStrategy({\r\n  refreshUrl: '/auth/refresh',\r\n  loginUrl: '/auth/login',\r\n  logoutUrl: '/auth/logout'\r\n})\r\n","import { createProvider } from './create-provider'\r\nimport { createIndexedDBStorage } from './storage/indexeddb'\r\nimport { bodyParser } from './parser/body'\r\nimport { cookieParser } from './parser/cookie'\r\nimport { createCookieStrategy } from './strategy/cookie'\r\nimport { createBodyStrategy } from './strategy/body'\r\nimport type { TokenProvider } from '../types'\r\n\r\n/**\r\n * Cookie Provider - uses httpOnly cookies\r\n * Suitable for SSR and cross-domain authentication\r\n *\r\n * Access token: Worker memory\r\n * Refresh token: httpOnly cookie (managed by backend)\r\n */\r\nexport function createCookieProvider(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): TokenProvider {\r\n  return createProvider({\r\n    refreshStorage: undefined,\r\n    parser: cookieParser,\r\n    strategy: createCookieStrategy(config)\r\n  })\r\n}\r\n\r\n/**\r\n * Body Provider - refresh token in response body, persisted to IndexedDB\r\n * Suitable for SPA applications\r\n *\r\n * Access token: Worker memory\r\n * Refresh token: IndexedDB (persists across reload)\r\n */\r\nexport function createBodyProvider(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n  refreshTokenKey?: string\r\n}): TokenProvider {\r\n  return createProvider({\r\n    refreshStorage: createIndexedDBStorage('FetchGuardDB', config.refreshTokenKey || 'refreshToken'),\r\n    parser: bodyParser,\r\n    strategy: createBodyStrategy(config)\r\n  })\r\n}\r\n","/**\r\n * Binary data utilities for Worker\r\n * Handles ArrayBuffer <-> Base64 conversion for binary responses\r\n */\r\n\r\n/**\r\n * Convert ArrayBuffer to base64 string\r\n * Used in worker to encode binary responses for postMessage transfer\r\n */\r\nexport function arrayBufferToBase64(buffer: ArrayBuffer): string {\r\n  const bytes = new Uint8Array(buffer)\r\n  let binary = ''\r\n  for (let i = 0; i < bytes.length; i++) {\r\n    binary += String.fromCharCode(bytes[i])\r\n  }\r\n  return btoa(binary)\r\n}\r\n\r\n/**\r\n * Convert base64 string to ArrayBuffer\r\n * Used in client to decode binary responses\r\n */\r\nexport function base64ToArrayBuffer(base64: string): ArrayBuffer {\r\n  const binary = atob(base64)\r\n  const bytes = new Uint8Array(binary.length)\r\n  for (let i = 0; i < binary.length; i++) {\r\n    bytes[i] = binary.charCodeAt(i)\r\n  }\r\n  return bytes.buffer\r\n}\r\n\r\n/**\r\n * Check if content type is binary (should be base64 encoded)\r\n * Returns true for images, PDFs, videos, etc.\r\n */\r\nexport function isBinaryContentType(contentType: string): boolean {\r\n  const normalized = contentType.toLowerCase()\r\n\r\n  // Text types - NOT binary\r\n  if (normalized.includes('text/')) return false\r\n  if (normalized.includes('json')) return false\r\n  if (normalized.includes('xml')) return false\r\n  if (normalized.includes('javascript')) return false\r\n  if (normalized.includes('ecmascript')) return false\r\n  if (normalized.includes('html')) return false\r\n\r\n  // Everything else is considered binary\r\n  return true\r\n}\r\n"],"mappings":";AASA,SAAS,IAAI,WAAwB;;;ACmE9B,IAAM,MAAM,OAAO,OAAO;AAAA;AAAA,EAE/B,OAAO;AAAA,EACP,OAAO;AAAA,EACP,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,MAAM;AAAA;AAAA,EAGN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,KAAK;AAAA,EACL,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,cAAc;AAAA,EACd,aAAa;AACf,CAAC;;;ACtFM,IAAM,2BAA2B;;;ACHxC,SAAS,aAAa,2BAA2B;AAK1C,IAAM,gBAAgB;AAAA,EAC3B,YAAY,YAAY,cAAc,oBAAoB,GAAG;AAAA,EAC7D,gBAAgB,YAAY,mBAAmB,wBAAwB,GAAG;AAAA,EAC1E,aAAa,YAAY,sBAAsB,0BAA0B,GAAG;AAC9E;AAKO,IAAM,aAAa;AAAA,EACxB,gBAAgB,YAAY,cAAc,0BAA0B,GAAG;AAAA,EACvE,oBAAoB,YAAY,wBAAwB,iCAAiC,GAAG;AAAA,EAC5F,YAAY,YAAY,eAAe,yBAAyB,GAAG;AACrE;AAKO,IAAM,aAAa;AAAA,EACxB,oBAAoB,YAAY,wBAAwB,wBAAwB,GAAG;AAAA,EACnF,aAAa,YAAY,gBAAgB,gBAAgB,GAAG;AAAA,EAC5D,cAAc,YAAY,iBAAiB,iBAAiB,GAAG;AAAA,EAC/D,kBAAkB,YAAY,qBAAqB,6BAA6B,GAAG;AACrF;AAKO,IAAM,eAAe;AAAA,EAC1B,YAAY,oBAAoB,sBAAsB,6BAA6B,GAAG;AACxF;AAKO,IAAM,gBAAgB;AAAA;AAAA,EAE3B,cAAc,YAAY,iBAAiB,iBAAiB,GAAG;AAAA,EAC/D,WAAW,YAAY,qBAAqB,yBAAyB,GAAG;AAAA;AAAA,EAGxE,WAAW,oBAAoB,cAAc,uBAAuB,GAAG;AAAA;AAAA,EAGvE,qBAAqB,YAAY,yBAAyB,iCAAiC,GAAG;AAChG;;;AC9CA,eAAsB,kBAAkB,UAAiD;AACvF,QAAM,UAAoD,CAAC;AAG3D,WAAS,QAAQ,CAAC,OAAO,QAAQ;AAE/B,QAAI,iBAAiB,MAAM;AAAA,IAG3B,OAAO;AACL,cAAQ,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,CAAC;AAAA,IACnC;AAAA,EACF,CAAC;AAGD,QAAM,eAAgC,CAAC;AACvC,WAAS,QAAQ,CAAC,OAAO,QAAQ;AAC/B,QAAI,iBAAiB,MAAM;AACzB,YAAM,WAAW,YAAY;AAC3B,cAAM,cAAc,MAAM,MAAM,YAAY;AAC5C,cAAM,aAAa,IAAI,WAAW,WAAW;AAC7C,cAAM,iBAAiC;AAAA,UACrC,MAAM,MAAM;AAAA,UACZ,MAAM,MAAM;AAAA,UACZ,MAAM,MAAM,KAAK,UAAU;AAAA;AAAA,QAC7B;AACA,gBAAQ,KAAK,CAAC,KAAK,cAAc,CAAC;AAAA,MACpC,GAAG;AACH,mBAAa,KAAK,OAAO;AAAA,IAC3B;AAAA,EACF,CAAC;AAED,QAAM,QAAQ,IAAI,YAAY;AAE9B,SAAO;AAAA,IACL,OAAO;AAAA,IACP;AAAA,EACF;AACF;AAMO,SAAS,oBAAoB,YAA0C;AAC5E,QAAM,WAAW,IAAI,SAAS;AAE9B,aAAW,CAAC,KAAK,KAAK,KAAK,WAAW,SAAS;AAC7C,QAAI,OAAO,UAAU,UAAU;AAC7B,eAAS,OAAO,KAAK,KAAK;AAAA,IAC5B,OAAO;AAEL,YAAM,aAAa,IAAI,WAAW,MAAM,IAAI;AAC5C,YAAM,OAAO,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,MAAM,EAAE,MAAM,MAAM,KAAK,CAAC;AACpE,eAAS,OAAO,KAAK,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAKO,SAAS,WAAW,MAAiC;AAC1D,SAAO,gBAAgB;AACzB;AAKO,SAAS,qBAAqB,MAA2C;AAC9E,SAAO,SAAS,QAAQ,OAAO,SAAS,YAAa,KAA4B,UAAU;AAC7F;;;AJrDO,IAAM,mBAAN,MAAuB;AAAA,EACpB;AAAA,EACA,YAAY;AAAA;AAAA;AAAA,EAGZ,kBAAkB,oBAAI,IAG3B;AAAA,EACK,gBAAgB,oBAAI,IAAiC;AAAA,EACrD,iBAAiB,oBAAI,IAAgB;AAAA,EACrC,UAAU;AAAA,EAEV,eAA4B,CAAC;AAAA,EAC7B,oBAAoB;AAAA,EACpB,eAAe;AAAA;AAAA,EACf;AAAA,EACA;AAAA,EAER,YAAY,SAA4B;AACtC,SAAK,SAAS,IAAI,OAAO,IAAI,IAAI,eAAe,YAAY,GAAG,GAAG;AAAA,MAChE,MAAM;AAAA,IACR,CAAC;AAED,SAAK,OAAO,YAAY,KAAK,oBAAoB,KAAK,IAAI;AAC1D,SAAK,OAAO,UAAU,KAAK,kBAAkB,KAAK,IAAI;AAEtD,SAAK,iBAAiB,OAAO;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,iBAAiB,SAA2C;AACxE,UAAM,SAAuB;AAAA,MAC3B,gBAAgB,QAAQ,kBAAkB,CAAC;AAAA,MAC3C,gBAAgB,QAAQ,kBAAkB;AAAA,IAC5C;AAGA,QAAI,iBAAuD;AAE3D,QAAI,OAAO,QAAQ,aAAa,UAAU;AAExC,uBAAiB,QAAQ;AAAA,IAC3B,WAAW,UAAU,QAAQ,YAAY,QAAQ,SAAS,MAAM;AAE9D,uBAAiB,QAAQ;AAAA,IAC3B,OAAO;AAEL,YAAM,IAAI;AAAA,QACR;AAAA,MAGF;AAAA,IACF;AAEA,UAAM,UAAU;AAAA,MACd,IAAI,KAAK,kBAAkB;AAAA,MAC3B,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,QACP;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAEtC,WAAK,eAAe;AACpB,WAAK,cAAc;AAEnB,WAAK,OAAO,YAAY,OAAO;AAE/B,iBAAW,MAAM;AACf,YAAI,KAAK,aAAa;AACpB,eAAK,YAAY,IAAI,MAAM,sBAAsB,CAAC;AAClD,eAAK,eAAe;AACpB,eAAK,cAAc;AAAA,QACrB;AAAA,MACF,GAAG,GAAK;AAAA,IACV,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAMQ,oBAAoB,OAA2B;AACrD,UAAM,EAAE,IAAI,MAAM,QAAQ,IAAI,MAAM;AAEpC,QAAI,SAAS,IAAI,cAAc;AAE7B,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,CAAC,QAAS;AAEd,WAAK,gBAAgB,OAAO,EAAE;AAE9B,YAAM,SAAS,SAAS;AAGxB,UAAI,UAAU,OAAO,SAAS,KAAK;AAEjC,gBAAQ,QAAQ,GAAG,OAAO,CAAC;AAAA,MAC7B,OAAO;AAEL,gBAAQ,QAAQ;AAAA,UACd,cAAc,UAAU,EAAE,OAAO,CAAC;AAAA,UAClC;AAAA,YACE,MAAM,OAAO,SAAS,QAAQ,EAAE;AAAA,YAChC,SAAS,SAAS,WAAW,CAAC;AAAA,UAChC;AAAA,UACA,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AACA;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,aAAa;AAE5B,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,CAAC,QAAS;AAEd,WAAK,gBAAgB,OAAO,EAAE;AAE9B,YAAM,SAAS,OAAO,SAAS,WAAW,WAAW,QAAQ,SAAS;AACtE,cAAQ,QAAQ;AAAA,QACd,cAAc,aAAa,EAAE,SAAS,OAAO,SAAS,SAAS,eAAe,EAAE,CAAC;AAAA,QACjF;AAAA,QACA;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,OAAO;AACtB,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,CAAC,QAAS;AAEd,WAAK,gBAAgB,OAAO,EAAE;AAG9B,YAAM,SAAS,SAAS,UAAU,CAAC;AACnC,cAAQ,QAAQ,IAAI,MAAM,CAAC;AAC3B;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,aAAa;AAE5B,UAAI,KAAK,aAAa;AACpB,aAAK,YAAY,IAAI,MAAM,wBAAwB,SAAS,SAAS,eAAe,EAAE,CAAC;AACvF,aAAK,eAAe;AACpB,aAAK,cAAc;AAAA,MACrB;AACA;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,OAAO;AACtB,WAAK,UAAU;AAGf,iBAAW,YAAY,KAAK,gBAAgB;AAC1C,iBAAS;AAAA,MACX;AAEA,UAAI,KAAK,cAAc;AACrB,aAAK,aAAa;AAClB,aAAK,eAAe;AACpB,aAAK,cAAc;AAAA,MACrB;AACA;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,MAAM;AACrB,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,SAAS;AACX,aAAK,gBAAgB,OAAO,EAAE;AAC9B,gBAAQ,QAAQ,GAAG,EAAE,WAAW,SAAS,UAAU,CAAC,CAAC;AAAA,MACvD;AACA;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,oBAAoB;AACnC,iBAAW,MAAM,KAAK,cAAe,IAAG,OAAO;AAC/C;AAAA,IACF;AAEA,QAAI,SAAS,IAAI,kBAAkB;AACjC,YAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,UAAI,SAAS;AACX,aAAK,gBAAgB,OAAO,EAAE;AAC9B,gBAAQ,QAAQ,GAAG,OAAO,CAAC;AAAA,MAC7B;AACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,OAAyB;AACjD,YAAQ,MAAM,iBAAiB,KAAK;AAEpC,eAAW,CAAC,IAAI,OAAO,KAAK,KAAK,iBAAiB;AAChD,cAAQ,OAAO,IAAI,MAAM,iBAAiB,MAAM,OAAO,EAAE,CAAC;AAAA,IAC5D;AACA,SAAK,gBAAgB,MAAM;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAA4B;AAClC,WAAO,OAAO,EAAE,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,KAAa,UAAiC,CAAC,GAAiC;AAC1F,UAAM,EAAE,OAAO,IAAI,KAAK,YAAY,KAAK,OAAO;AAChD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAY,KAAa,UAAiC,CAAC,GAIzD;AACA,UAAM,KAAK,KAAK,kBAAkB;AAGlC,UAAM,SAAS,IAAI,QAA6B,OAAO,SAAS,WAAW;AACzE,WAAK,gBAAgB,IAAI,IAAI;AAAA,QAC3B,SAAS,CAAC,aAAa,QAAQ,QAA+B;AAAA,QAC9D,QAAQ,CAAC,UAAU,OAAO,KAAK;AAAA,MACjC,CAAC;AAED,UAAI;AACF,YAAI,oBAAoB,EAAE,GAAG,QAAQ;AAGrC,YAAI,QAAQ,QAAQ,WAAW,QAAQ,IAAI,GAAG;AAC5C,gBAAM,iBAAiB,MAAM,kBAAkB,QAAQ,IAAI;AAE3D,4BAAkB,OAAO;AAAA,QAC3B;AAGA,YAAI,QAAQ,SAAS;AACnB,cAAI,QAAQ,mBAAmB,SAAS;AACtC,kBAAM,eAAuC,CAAC;AAC9C,oBAAQ,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACtC,2BAAa,GAAG,IAAI;AAAA,YACtB,CAAC;AACD,8BAAkB,UAAU;AAAA,UAC9B;AAAA,QACF;AAEA,cAAM,UAAU,EAAE,IAAI,MAAM,IAAI,OAAO,SAAS,EAAE,KAAK,SAAS,kBAAkB,EAAE;AAEpF,cAAM,KAAK,kBAAkB,SAAS,GAAK;AAAA,MAC7C,SAAS,OAAO;AACd,cAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,YAAI,SAAS;AACX,eAAK,gBAAgB,OAAO,EAAE;AAC9B,kBAAQ,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAAA,QAC1E;AAAA,MACF;AAAA,IACF,CAAC;AAED,UAAM,SAAS,MAAM,KAAK,OAAO,EAAE;AAEnC,WAAO,EAAE,IAAI,QAAQ,OAAO;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,IAAkB;AACvB,UAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,QAAI,SAAS;AACX,WAAK,gBAAgB,OAAO,EAAE;AAC9B,WAAK,OAAO,YAAY,EAAE,IAAI,MAAM,IAAI,OAAO,CAAC;AAChD,cAAQ,OAAO,IAAI,MAAM,mBAAmB,CAAC;AAAA,IAC/C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,IAAI,KAAa,UAA0D,CAAC,GAAiC;AACjH,WAAO,KAAK,MAAM,KAAK,EAAE,GAAG,SAAS,QAAQ,MAAM,CAAC;AAAA,EACtD;AAAA,EAEA,MAAM,KAAK,KAAa,MAAgB,UAA0D,CAAC,GAAiC;AAElI,QAAI,QAAQ,WAAW,IAAI,GAAG;AAC5B,aAAO,KAAK,MAAM,KAAK;AAAA,QACrB,GAAG;AAAA,QACH,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AAGA,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAG3C,QAAI,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AACxC,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AAEA,WAAO,KAAK,MAAM,KAAK;AAAA,MACrB,GAAG;AAAA,MACH;AAAA,MACA,QAAQ;AAAA,MACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACtC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,IAAI,KAAa,MAAgB,UAA0D,CAAC,GAAiC;AAEjI,QAAI,QAAQ,WAAW,IAAI,GAAG;AAC5B,aAAO,KAAK,MAAM,KAAK;AAAA,QACrB,GAAG;AAAA,QACH,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AAGA,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAG3C,QAAI,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AACxC,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AAEA,WAAO,KAAK,MAAM,KAAK;AAAA,MACrB,GAAG;AAAA,MACH;AAAA,MACA,QAAQ;AAAA,MACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACtC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,OAAO,KAAa,UAA0D,CAAC,GAAiC;AACpH,WAAO,KAAK,MAAM,KAAK,EAAE,GAAG,SAAS,QAAQ,SAAS,CAAC;AAAA,EACzD;AAAA,EAEA,MAAM,MAAM,KAAa,MAAgB,UAA0D,CAAC,GAAiC;AAEnI,QAAI,QAAQ,WAAW,IAAI,GAAG;AAC5B,aAAO,KAAK,MAAM,KAAK;AAAA,QACrB,GAAG;AAAA,QACH,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AAGA,UAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAG3C,QAAI,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AACxC,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AAEA,WAAO,KAAK,MAAM,KAAK;AAAA,MACrB,GAAG;AAAA,MACH;AAAA,MACA,QAAQ;AAAA,MACR,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACtC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,KAAK,QAAgB,cAAwB,MAA8C;AAC/F,UAAM,KAAK,KAAK,kBAAkB;AAClC,UAAM,UAAU,EAAE,IAAI,MAAM,IAAI,WAAW,SAAS,EAAE,QAAQ,MAAM,UAAU,EAAE;AAEhF,WAAO,IAAI,QAA4B,CAAC,SAAS,WAAW;AAC1D,WAAK,gBAAgB,IAAI,IAAI;AAAA,QAC3B,SAAS,CAAC,MAAM,QAAQ,CAAuB;AAAA,QAC/C,QAAQ,CAAC,MAAa,OAAO,CAAC;AAAA,MAChC,CAAC;AAED,WAAK,kBAAkB,SAAS,IAAK,EAAE,MAAM,CAAC,UAAU;AACtD,cAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,YAAI,SAAS;AACX,eAAK,gBAAgB,OAAO,EAAE;AAC9B,kBAAQ,OAAO,KAAK;AAAA,QACtB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,MAAM,SAAmB,KAAc,YAAqB,MAAmC;AACnG,UAAM,OAAkB,CAAC;AACzB,QAAI,OAAO,YAAY,aAAa;AAClC,WAAK,KAAK,OAAO;AAAA,IACnB;AACA,QAAI,OAAO,QAAQ,aAAa;AAE9B,UAAI,KAAK,WAAW,GAAG;AACrB,aAAK,KAAK,MAAS;AAAA,MACrB;AACA,WAAK,KAAK,GAAG;AAAA,IACf;AACA,WAAO,KAAK,KAAK,SAAS,WAAW,GAAG,IAAI;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAO,SAAmB,YAAqB,MAAmC;AACtF,UAAM,OAAO,OAAO,YAAY,cAAc,CAAC,IAAI,CAAC,OAAO;AAC3D,WAAO,KAAK,KAAK,UAAU,WAAW,GAAG,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aAAa,YAAqB,MAAmC;AACzE,WAAO,KAAK,KAAK,gBAAgB,SAAS;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKA,QAAiB;AACf,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAA2B;AAC/B,QAAI,KAAK,QAAS,QAAO,QAAQ,QAAQ;AAEzC,WAAO,IAAI,QAAc,CAAC,YAAY;AACpC,WAAK,eAAe,IAAI,OAAO;AAAA,IACjC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,UAAkC;AACxC,QAAI,KAAK,SAAS;AAEhB,eAAS;AAAA,IACX;AAEA,SAAK,eAAe,IAAI,QAAQ;AAGhC,WAAO,MAAM;AACX,WAAK,eAAe,OAAO,QAAQ;AAAA,IACrC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,mBAAmB,IAA6C;AAC9D,SAAK,cAAc,IAAI,EAAE;AACzB,WAAO,MAAM,KAAK,cAAc,OAAO,EAAE;AAAA,EAC3C;AAAA;AAAA,EAGA,MAAM,OAA+C;AACnD,UAAM,KAAK,KAAK,kBAAkB;AAClC,UAAM,UAAU,EAAE,IAAI,MAAM,IAAI,MAAM,SAAS,EAAE,WAAW,KAAK,IAAI,EAAE,EAAE;AAEzE,WAAO,IAAI,QAAuC,CAAC,SAAS,WAAW;AACrE,WAAK,gBAAgB,IAAI,IAAI;AAAA,QAC3B,SAAS,CAAC,MAAM,QAAQ,CAAkC;AAAA,QAC1D,QAAQ,CAAC,MAAa,OAAO,CAAC;AAAA,MAChC,CAAC;AAED,WAAK,kBAAkB,SAAS,GAAI,EAAE,MAAM,CAAC,UAAU;AACrD,cAAM,UAAU,KAAK,gBAAgB,IAAI,EAAE;AAC3C,YAAI,SAAS;AACX,eAAK,gBAAgB,OAAO,EAAE;AAC9B,kBAAQ,OAAO,KAAK;AAAA,QACtB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,kBAA+B,SAA8B,YAAoB,KAAK,cAA0B;AACtH,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAU,WAAW,MAAM;AAC/B,cAAM,QAAQ,KAAK,aAAa,UAAU,UAAQ,KAAK,OAAO,QAAQ,EAAE;AACxE,YAAI,UAAU,IAAI;AAChB,eAAK,aAAa,OAAO,OAAO,CAAC;AAAA,QACnC;AACA,aAAK,gBAAgB,OAAO,QAAQ,EAAE;AACtC,eAAO,IAAI,MAAM,iBAAiB,CAAC;AAAA,MACrC,GAAG,SAAS;AAEZ,YAAM,YAAuB;AAAA,QAC3B,IAAI,QAAQ;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,WAAK,aAAa,KAAK,SAAS;AAEhC,WAAK,aAAa;AAAA,IACpB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,eAA8B;AAC1C,QAAI,KAAK,qBAAqB,KAAK,aAAa,WAAW,GAAG;AAC5D;AAAA,IACF;AAEA,SAAK,oBAAoB;AAEzB,WAAO,KAAK,aAAa,SAAS,GAAG;AACnC,YAAM,OAAO,KAAK,aAAa,MAAM;AACrC,UAAI,CAAC,KAAM;AAEX,UAAI;AACF,aAAK,OAAO,YAAY,KAAK,OAAO;AAEpC,cAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,EAAE,CAAC;AAAA,MACtD,SAAS,OAAO;AACd,qBAAa,KAAK,OAAO;AACzB,aAAK,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;AAAA,MACvE;AAAA,IACF;AAEA,SAAK,oBAAoB;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,UAAgB;AACd,SAAK,OAAO,UAAU;AACtB,SAAK,gBAAgB,MAAM;AAE3B,eAAW,QAAQ,KAAK,cAAc;AACpC,mBAAa,KAAK,OAAO;AACzB,WAAK,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,IAC3C;AACA,SAAK,eAAe,CAAC;AAAA,EACvB;AACF;AAKO,SAAS,aAAa,SAA8C;AACzE,SAAO,IAAI,iBAAiB,OAAO;AACrC;;;AK1mBA,IAAM,WAAW,oBAAI,IAA2B;AAKzC,SAAS,iBAAiB,MAAc,UAA+B;AAC5E,MAAI,OAAO,SAAS,YAAY,CAAC,KAAK,KAAK,GAAG;AAC5C,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AAEA,MAAI,CAAC,YAAY,OAAO,SAAS,iBAAiB,YAAY;AAC5D,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AAEA,WAAS,IAAI,MAAM,QAAQ;AAC7B;AAKO,SAAS,YAAY,MAA6B;AACvD,QAAM,WAAW,SAAS,IAAI,IAAI;AAClC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,aAAa,IAAI,qCAAqC,MAAM,KAAK,SAAS,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;AAAA,EAChH;AACA,SAAO;AACT;AAKO,SAAS,YAAY,MAAuB;AACjD,SAAO,SAAS,IAAI,IAAI;AAC1B;AAKO,SAAS,gBAA0B;AACxC,SAAO,MAAM,KAAK,SAAS,KAAK,CAAC;AACnC;AAKO,SAAS,mBAAmB,MAAuB;AACxD,SAAO,SAAS,OAAO,IAAI;AAC7B;AAKO,SAAS,iBAAuB;AACrC,WAAS,MAAM;AACjB;;;ACpDA,SAAS,MAAAA,KAAI,OAAAC,YAAwB;AAsC9B,SAAS,eAAe,QAAuC;AACpE,QAAM,eAAyE;AAAA,IAC7E,MAAM,aAAa,cAA6B;AAC9C,UAAI,sBAAsB;AAC1B,UAAI,wBAAwB,QAAQ,OAAO,gBAAgB;AACzD,8BAAsB,MAAM,OAAO,eAAe,IAAI;AAAA,MACxD;AAEA,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,QAAQ,mBAAmB;AAElE,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAOC,KAAI,WAAW,mBAAmB,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAClF;AAEA,cAAM,YAAY,MAAM,OAAO,OAAO,MAAM,QAAQ;AACpD,YAAI,CAAC,UAAU,OAAO;AACpB,iBAAOA,KAAI,WAAW,mBAAmB,EAAE,SAAS,8BAA8B,CAAC,CAAC;AAAA,QACtF;AAEA,YAAI,OAAO,kBAAkB,UAAU,cAAc;AACnD,gBAAM,OAAO,eAAe,IAAI,UAAU,YAAY;AAAA,QACxD;AAEA,eAAOC,IAAG,SAAS;AAAA,MACrB,SAAS,OAAO;AACd,eAAOD,KAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,MAAM,SAAkB,KAAc;AAC1C,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,MAAM,SAAS,GAAG;AAEzD,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAOA,KAAI,WAAW,YAAY,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAC3E;AAEA,cAAM,YAAY,MAAM,OAAO,OAAO,MAAM,QAAQ;AACpD,YAAI,CAAC,UAAU,OAAO;AACpB,iBAAOA,KAAI,WAAW,YAAY,EAAE,SAAS,8BAA8B,CAAC,CAAC;AAAA,QAC/E;AAEA,YAAI,OAAO,kBAAkB,UAAU,cAAc;AACnD,gBAAM,OAAO,eAAe,IAAI,UAAU,YAAY;AAAA,QACxD;AAEA,eAAOC,IAAG,SAAS;AAAA,MACrB,SAAS,OAAO;AACd,eAAOD,KAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,OAAO,SAAmB;AAC9B,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,OAAO,OAAO;AAErD,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAOA,KAAI,WAAW,aAAa,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAC5E;AAEA,YAAI,OAAO,gBAAgB;AACzB,gBAAM,OAAO,eAAe,IAAI,IAAI;AAAA,QACtC;AAEA,eAAOC,IAAG;AAAA,UACR,OAAO;AAAA,UACP,cAAc;AAAA,UACd,WAAW;AAAA,UACX,MAAM;AAAA;AAAA,QACR,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAOD,KAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAGA,MAAI,OAAO,eAAe;AACxB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,GAAG,OAAO;AAAA,IACZ;AAAA,EACF;AAEA,SAAO;AACT;;;AC5HO,SAAS,uBAAuB,SAAS,gBAAgB,kBAAkB,gBAAqC;AACrH,QAAM,YAAY;AAElB,QAAM,SAAS,MAA4B;AACzC,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAU,UAAU,KAAK,QAAQ,CAAC;AAExC,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAC5C,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAEhD,cAAQ,kBAAkB,CAAC,UAAU;AACnC,cAAM,KAAM,MAAM,OAA4B;AAC9C,YAAI,CAAC,GAAG,iBAAiB,SAAS,SAAS,GAAG;AAC5C,gBAAM,QAAQ,GAAG,kBAAkB,WAAW,EAAE,SAAS,MAAM,CAAC;AAChE,gBAAM,YAAY,aAAa,aAAa,EAAE,QAAQ,MAAM,CAAC;AAAA,QAC/D;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,CAAI,YAAuC;AAClE,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAChD,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,IAC9C,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,MAAM;AACV,UAAI;AACF,cAAM,KAAK,MAAM,OAAO;AACxB,cAAM,cAAc,GAAG,YAAY,CAAC,SAAS,GAAG,UAAU;AAC1D,cAAM,QAAQ,YAAY,YAAY,SAAS;AAC/C,cAAM,SAAS,MAAM,iBAAiB,MAAM,IAAI,eAAe,CAAC;AAChE,eAAO,QAAQ,SAAS;AAAA,MAC1B,SAAS,OAAO;AACd,gBAAQ,KAAK,+CAA+C,KAAK;AACjE,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,MAAM,IAAI,OAAO;AACf,UAAI;AACF,cAAM,KAAK,MAAM,OAAO;AACxB,cAAM,cAAc,GAAG,YAAY,CAAC,SAAS,GAAG,WAAW;AAC3D,cAAM,QAAQ,YAAY,YAAY,SAAS;AAE/C,YAAI,OAAO;AACT,gBAAM,iBAAiB,MAAM,IAAI,EAAE,KAAK,iBAAiB,OAAO,OAAO,WAAW,KAAK,IAAI,EAAE,CAAC,CAAC;AAAA,QACjG,OAAO;AACL,gBAAM,iBAAiB,MAAM,OAAO,eAAe,CAAC;AAAA,QACtD;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,KAAK,8CAA8C,KAAK;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;;;ACzDO,IAAM,aAA0B;AAAA,EACrC,MAAM,MAAM,UAAU;AACpB,UAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,WAAO;AAAA,MACL,OAAO,KAAK,KAAK;AAAA,MACjB,cAAc,KAAK,KAAK;AAAA,MACxB,WAAW,KAAK,KAAK;AAAA,MACrB,MAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACTO,IAAM,eAA4B;AAAA,EACvC,MAAM,MAAM,UAAU;AACpB,UAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,WAAO;AAAA,MACL,OAAO,KAAK,KAAK;AAAA,MACjB,WAAW,KAAK,KAAK;AAAA,MACrB,MAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACHO,SAAS,qBAAqB,QAIpB;AACf,SAAO;AAAA,IACL,MAAM,UAAU;AACd,aAAO,MAAM,OAAO,YAAY;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,MAAM,SAAS,KAAK;AACxB,aAAO,MAAM,OAAO,OAAO,UAAU;AAAA,QACnC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,SAAS;AACpB,aAAO,MAAM,OAAO,WAAW;AAAA,QAC7B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,UAAU,KAAK,UAAU,OAAO,IAAI;AAAA,QAC1C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAKO,IAAM,iBAAiB,qBAAqB;AAAA,EACjD,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb,CAAC;;;AC1CM,SAAS,mBAAmB,QAIlB;AACf,SAAO;AAAA,IACL,MAAM,QAAQ,cAAc;AAC1B,UAAI,CAAC,cAAc;AACjB,cAAM,IAAI,MAAM,4BAA4B;AAAA,MAC9C;AAEA,aAAO,MAAM,OAAO,YAAY;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,aAAa,CAAC;AAAA,QACrC,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,MAAM,SAAS,KAAK;AACxB,aAAO,MAAM,OAAO,OAAO,UAAU;AAAA,QACnC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,SAAS;AACpB,aAAO,MAAM,OAAO,WAAW;AAAA,QAC7B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,UAAU,KAAK,UAAU,OAAO,IAAI;AAAA,QAC1C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAKO,IAAM,eAAe,mBAAmB;AAAA,EAC7C,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb,CAAC;;;AC3CM,SAAS,qBAAqB,QAInB;AAChB,SAAO,eAAe;AAAA,IACpB,gBAAgB;AAAA,IAChB,QAAQ;AAAA,IACR,UAAU,qBAAqB,MAAM;AAAA,EACvC,CAAC;AACH;AASO,SAAS,mBAAmB,QAKjB;AAChB,SAAO,eAAe;AAAA,IACpB,gBAAgB,uBAAuB,gBAAgB,OAAO,mBAAmB,cAAc;AAAA,IAC/F,QAAQ;AAAA,IACR,UAAU,mBAAmB,MAAM;AAAA,EACrC,CAAC;AACH;;;ACvBO,SAAS,oBAAoB,QAA6B;AAC/D,QAAM,SAAS,KAAK,MAAM;AAC1B,QAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AAAA,EAChC;AACA,SAAO,MAAM;AACf;AAMO,SAAS,oBAAoB,aAA8B;AAChE,QAAM,aAAa,YAAY,YAAY;AAG3C,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,MAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AACxC,MAAI,WAAW,SAAS,KAAK,EAAG,QAAO;AACvC,MAAI,WAAW,SAAS,YAAY,EAAG,QAAO;AAC9C,MAAI,WAAW,SAAS,YAAY,EAAG,QAAO;AAC9C,MAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AAGxC,SAAO;AACT;","names":["ok","err","err","ok"]}

package/dist/worker.js

@@ -45,22 +45,13 @@ var AuthErrors = {
 var DomainErrors = {
   NotAllowed: defineErrorAdvanced("DOMAIN_NOT_ALLOWED", "Domain not allowed: {url}", 403)
 };
-var NetworkErrors = {
-  NetworkError: defineError("NETWORK_ERROR", "Network error", 500),
-  FetchError: defineError("FETCH_ERROR", "Fetch error", 500)
-};
-var HttpErrors = {
-  ClientError: defineError("HTTP_CLIENT_ERROR", "HTTP client error (4xx)", 400),
-  ServerError: defineError("HTTP_SERVER_ERROR", "HTTP server error (5xx)", 500),
-  BadRequest: defineError("HTTP_BAD_REQUEST", "Bad request", 400),
-  Unauthorized: defineError("HTTP_UNAUTHORIZED", "Unauthorized", 401),
-  Forbidden: defineError("HTTP_FORBIDDEN", "Forbidden", 403),
-  NotFound: defineError("HTTP_NOT_FOUND", "Not found", 404),
-  InternalServerError: defineError("HTTP_INTERNAL_SERVER_ERROR", "Internal server error", 500)
-};
 var RequestErrors = {
+  // Network errors (connection failed, no response)
+  NetworkError: defineError("NETWORK_ERROR", "Network error", 500),
   Cancelled: defineError("REQUEST_CANCELLED", "Request was cancelled", 499),
-  Timeout: defineError("REQUEST_TIMEOUT", "Request timeout", 408),
+  // HTTP errors (server responded with error status)
+  HttpError: defineErrorAdvanced("HTTP_ERROR", "HTTP {status} error", 500),
+  // Response parsing errors
   ResponseParseFailed: defineError("RESPONSE_PARSE_FAILED", "Failed to parse response body", 500)
 };
 
@@ -158,12 +149,12 @@ function createProvider(config) {
         }
         return ok(tokenInfo);
       } catch (error) {
-        return err(NetworkErrors.NetworkError({ message: String(error) }));
+        return err(RequestErrors.NetworkError({ message: String(error) }));
       }
     },
-    async login(payload) {
+    async login(payload, url) {
       try {
-        const response = await config.strategy.login(payload);
+        const response = await config.strategy.login(payload, url);
         if (!response.ok) {
           return err(AuthErrors.LoginFailed({ message: `HTTP ${response.status}` }));
         }
@@ -176,7 +167,7 @@ function createProvider(config) {
         }
         return ok(tokenInfo);
       } catch (error) {
-        return err(NetworkErrors.NetworkError({ message: String(error) }));
+        return err(RequestErrors.NetworkError({ message: String(error) }));
       }
     },
     async logout(payload) {
@@ -196,7 +187,7 @@ function createProvider(config) {
           // Explicitly clear user on logout
         });
       } catch (error) {
-        return err(NetworkErrors.NetworkError({ message: String(error) }));
+        return err(RequestErrors.NetworkError({ message: String(error) }));
       }
     }
   };
@@ -297,8 +288,8 @@ function createCookieStrategy(config) {
         credentials: "include"
       });
     },
-    async login(payload) {
-      return fetch(config.loginUrl, {
+    async login(payload, url) {
+      return fetch(url || config.loginUrl, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(payload),
@@ -335,8 +326,8 @@ function createBodyStrategy(config) {
         credentials: "include"
       });
     },
-    async login(payload) {
-      return fetch(config.loginUrl, {
+    async login(payload, url) {
+      return fetch(url || config.loginUrl, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(payload),
@@ -548,7 +539,7 @@ function isBinaryContentType(contentType) {
       response = await fetch(url, { ...fetchOptions, headers, credentials: "include" });
     } catch (e) {
       const aborted = e && e.name === "AbortError";
-      return aborted ? err2(RequestErrors.Cancelled()) : err2(NetworkErrors.NetworkError({ message: String(e) }));
+      return aborted ? err2(RequestErrors.Cancelled()) : err2(RequestErrors.NetworkError({ message: String(e) }));
     }
     const contentType = response.headers.get("content-type") || "application/octet-stream";
     const isBinary = isBinaryContentType(contentType);

package/dist/worker.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/worker.ts","../src/messages.ts","../src/constants.ts","../src/errors.ts","../src/worker-post.ts","../src/utils/registry.ts","../src/provider/create-provider.ts","../src/provider/storage/indexeddb.ts","../src/provider/parser/body.ts","../src/provider/parser/cookie.ts","../src/provider/strategy/cookie.ts","../src/provider/strategy/body.ts","../src/provider/presets.ts","../src/provider/register-presets.ts","../src/utils/formdata.ts","../src/utils/binary.ts"],"sourcesContent":["/// <reference lib=\"webworker\" />\n\nimport type { WorkerConfig, ApiResponse, TokenProvider, FetchGuardRequestInit, ProviderPresetConfig } from './types'\nimport type { MainToWorkerMessage } from './messages'\nimport { ok, err, type Result } from 'ts-micro-result'\nimport { MSG } from './messages'\nimport { DEFAULT_REFRESH_EARLY_MS } from './constants'\nimport {\n  InitErrors,\n  AuthErrors,\n  DomainErrors,\n  NetworkErrors,\n  RequestErrors,\n  GeneralErrors\n} from './errors'\nimport { sendAuthStateChanged, sendAuthCallResult, sendPong, sendReady, sendSetupError, sendError, sendFetchResult, sendFetchError } from './worker-post'\nimport { getProvider } from './utils/registry'\nimport { buildProviderFromPreset } from './provider/register-presets'\nimport { deserializeFormData, isSerializedFormData } from './utils/formdata'\nimport { arrayBufferToBase64, isBinaryContentType } from './utils/binary'\n\n/**\n * IIFE Closure to protect sensitive tokens from external access\n * Inspired by api-worker.js security pattern\n */\n;(function () {\n  let config: WorkerConfig | null = null\n  let provider: TokenProvider | null = null\n  let accessToken: string | null = null\n  let refreshToken: string | null = null\n  let expiresAt: number | null = null\n  let currentUser: unknown | undefined\n  const pendingControllers = new Map<string, AbortController>()\n  let refreshPromise: Promise<Result<string>> | null = null\n\n/**\n * Ensure we have a valid access token (not expired).\n * If token is missing or expired, refresh it.\n * Prevents concurrent refresh attempts.\n *\n * @returns Result<string> - access token on success, error on failure\n */\nasync function ensureValidToken(): Promise<Result<string>> {\n  // Provider must be initialized via SETUP first\n  if (!provider) {\n    return err(InitErrors.NotInitialized())\n  }\n\n  if (accessToken && expiresAt) {\n    const refreshEarlyMs = config?.refreshEarlyMs ?? DEFAULT_REFRESH_EARLY_MS\n    const timeLeft = expiresAt - Date.now()\n    if (timeLeft > refreshEarlyMs) {\n      return ok(accessToken)\n    }\n  }\n\n  if (refreshPromise) {\n    const result = await refreshPromise\n    return result\n  }\n\n  refreshPromise = (async (): Promise<Result<string>> => {\n    try {\n      // Provider already checked above, TypeScript needs assertion\n      if (!provider) {\n        return err(InitErrors.NotInitialized())\n      }\n\n      const valueRes = await provider.refreshToken(refreshToken)\n\n      if (valueRes.isError()) {\n        setTokenState({ token: null, expiresAt: null, user: undefined, refreshToken: undefined })\n        return err(valueRes.errors)\n      }\n\n      const tokenInfo = valueRes.data\n      if (!tokenInfo) {\n        return err(AuthErrors.TokenRefreshFailed({ message: 'Provider returned null token info' }))\n      }\n\n      setTokenState(tokenInfo)\n\n      // Validate that we got a valid access token after refresh\n      if (!accessToken) {\n        return err(AuthErrors.TokenRefreshFailed({ message: 'Access token is null after refresh' }))\n      }\n\n      return ok(accessToken)\n    } finally {\n      refreshPromise = null\n    }\n  })()\n\n  return refreshPromise\n}\n\n/**\n * Validate domain against allowed domains\n */\nfunction validateDomain(url: string): boolean {\n  if (!config?.allowedDomains?.length) {\n    return true\n  }\n\n  try {\n    const urlObj = new URL(url)\n    const hostname = urlObj.hostname\n    const port = urlObj.port\n\n    for (const entry of config.allowedDomains) {\n      const idx = entry.lastIndexOf(':')\n      const hasPort = idx > -1 && entry.indexOf(':') === idx\n      const pattern = hasPort ? entry.slice(0, idx) : entry\n      const entryPort = hasPort ? entry.slice(idx + 1) : ''\n      const isWildcard = pattern.startsWith('*.')\n      const base = isWildcard ? pattern.slice(2) : pattern\n\n      const hostnameMatch = isWildcard\n        ? (hostname === base || hostname.endsWith('.' + base))\n        : (hostname === base)\n      \n      if (!hostnameMatch) continue\n\n      if (hasPort) {\n        if (port === entryPort) return true\n        continue\n      }\n      return true\n    }\n    return false\n  } catch {\n    return false\n  }\n}\n\n/**\n * Make API request with proactive token management\n */\nasync function makeApiRequest(url: string, options: FetchGuardRequestInit = {}): Promise<Result<ApiResponse>> {\n  if (!config) {\n    return err(InitErrors.NotInitialized())\n  }\n\n  if (!validateDomain(url)) {\n    return err(DomainErrors.NotAllowed({ url }))\n  }\n\n  const requiresAuth = options.requiresAuth !== false\n  const includeHeaders = options.includeHeaders === true\n  // Extract FetchGuard-specific options and keep only standard RequestInit\n  const { requiresAuth: _, includeHeaders: __, ...fetchOptions } = options\n\n  // Deserialize FormData if present (inspired by api-worker.js:484-518)\n  if (fetchOptions.body && isSerializedFormData(fetchOptions.body)) {\n    fetchOptions.body = deserializeFormData(fetchOptions.body)\n  }\n\n  const headers: Record<string, string> = {\n    ...(fetchOptions.headers as Record<string, string> || {})\n  }\n\n  // Don't set Content-Type for FormData - browser will set it with boundary\n  if (!headers['Content-Type'] && !headers['content-type'] && fetchOptions.body) {\n    if (typeof fetchOptions.body === 'object' && !(fetchOptions.body instanceof FormData) && !(fetchOptions.body instanceof URLSearchParams)) {\n      headers['Content-Type'] = 'application/json'\n    }\n  }\n\n  if (requiresAuth) {\n    const tokenRes = await ensureValidToken()\n    if (tokenRes.isError()) {\n      // Propagate error - cast to correct return type\n      return err(tokenRes.errors)\n    }\n\n    const token = tokenRes.data\n    if (token) {\n      headers['Authorization'] = `Bearer ${token}`\n    }\n  }\n\n  let response: Response\n  try {\n    response = await fetch(url, { ...fetchOptions, headers, credentials: 'include' })\n  } catch (e) {\n    const aborted = (e && (e as any).name === 'AbortError')\n    return aborted\n      ? err(RequestErrors.Cancelled())\n      : err(NetworkErrors.NetworkError({ message: String(e) }))\n  }\n\n  // Extract content-type (always needed for binary detection)\n  const contentType = response.headers.get('content-type') || 'application/octet-stream'\n\n  // Determine if response is binary\n  const isBinary = isBinaryContentType(contentType)\n\n  // Get body as text or base64\n  let body: string\n  try {\n    if (isBinary) {\n      const buffer = await response.arrayBuffer()\n      body = arrayBufferToBase64(buffer)\n    } else {\n      body = await response.text()\n    }\n  } catch (e) {\n    // Reading/parsing response body failed\n    return err(RequestErrors.ResponseParseFailed({ message: String(e) }))\n  }\n\n  // Extract headers if requested\n  const responseHeaders: Record<string, string> = {}\n  if (includeHeaders) {\n    response.headers.forEach((value, key) => {\n      responseHeaders[key] = value\n    })\n  }\n\n  const responseData = { body, status: response.status, contentType, headers: responseHeaders }\n  return ok(responseData)\n}\n\n/**\n * Update token state from TokenInfo and auto emit AUTH_STATE_CHANGED\n *\n * Smart update logic for ALL fields:\n * - Only update field if key exists in tokenInfo\n * - If key exists with value: update to that value (including null)\n * - If key doesn't exist: preserve existing value\n *\n * This allows flexible custom auth methods:\n * - Standard login/refresh: returns { token, user, expiresAt }\n * - Update user info: may only return { user: {...} } (no token change)\n * - Verify OTP: may return {} (just validation, no state change)\n * - Logout: returns { token: null, user: null, ... } to clear all\n */\nfunction setTokenState(tokenInfo: { token?: string | null; expiresAt?: number | null; user?: unknown; refreshToken?: string | null }, emitEvent: boolean = true) {\n  // Apply smart preservation to ALL fields\n  if ('token' in tokenInfo) {\n    accessToken = tokenInfo.token ?? null\n  }\n\n  if ('expiresAt' in tokenInfo) {\n    expiresAt = tokenInfo.expiresAt ?? null\n  }\n\n  if ('user' in tokenInfo) {\n    currentUser = tokenInfo.user\n  }\n\n  if ('refreshToken' in tokenInfo) {\n    refreshToken = tokenInfo.refreshToken ?? null\n  }\n\n  if (emitEvent) {\n    postAuthChanged()\n  }\n}\n\n/**\n * Emit AUTH_STATE_CHANGED event based on current state\n * authenticated = true if we have valid non-expired token\n */\nfunction postAuthChanged() {\n  const now = Date.now()\n  const authenticated = accessToken !== null && accessToken !== '' && (expiresAt === null || expiresAt > now)\n  sendAuthStateChanged({\n    authenticated,\n    expiresAt,\n    user: currentUser\n  })\n}\n\n/**\n * Main message handler\n * Each case has its own try-catch for better error isolation\n */\nself.onmessage = async (event: MessageEvent<MainToWorkerMessage>) => {\n  const data = event.data\n  switch (data.type) {\n    case MSG.SETUP: {\n      try {\n        const payload = data.payload\n        config = payload.config\n\n        const providerConfig = payload.providerConfig\n\n        // Build provider from config\n        if (typeof providerConfig === 'string') {\n          // Registry lookup\n          provider = getProvider(providerConfig)\n        } else if (providerConfig && typeof providerConfig === 'object' && 'type' in providerConfig) {\n          // ProviderPresetConfig object\n          provider = buildProviderFromPreset(providerConfig as ProviderPresetConfig)\n        } else {\n          sendSetupError('Invalid provider config')\n          break\n        }\n\n        // Validate provider was successfully created\n        if (!provider) {\n          sendSetupError('Provider initialization failed - provider is null')\n          break\n        }\n\n        sendReady()\n      } catch (error) {\n        const errorMessage = error instanceof Error ? error.message : String(error)\n        console.error('[FetchGuard Worker] Setup failed:', errorMessage)\n        sendSetupError(errorMessage)\n      }\n      break\n    }\n\n    case MSG.FETCH: {\n      const { id } = data\n      try {\n        const { url, options } = data.payload\n        const controller = new AbortController()\n        pendingControllers.set(id, controller)\n        const merged: RequestInit = { ...(options || {}), signal: controller.signal }\n        const result = await makeApiRequest(url, merged)\n\n        if (result.isOkWithData()) {\n          sendFetchResult(id, result.data)\n        } else {\n          // Network/timeout/cancel error \n          const error = result.errors?.[0]\n          const message = error?.message || 'Unknown error'\n          const status = result.status\n          sendFetchError(id, message, status)\n        }\n\n        pendingControllers.delete(id)\n      } catch (error) {\n        pendingControllers.delete(id)\n        sendFetchError(id, error instanceof Error ? error.message : String(error), undefined)\n      }\n      break\n    }\n\n    case MSG.AUTH_CALL: {\n      const { id, payload } = data\n      try {\n        const { method, args, emitEvent } = payload\n        const shouldEmitEvent = emitEvent ?? true // Default: emit event\n\n        if (!provider) {\n          sendError(id, err(InitErrors.NotInitialized()))\n          break\n        }\n\n        if (typeof provider[method] !== 'function') {\n          sendError(id, err(GeneralErrors.Unexpected({ message: `Method '${method}' not found on provider` })))\n          break\n        }\n\n        const result = await provider[method](...args)\n        if (result.isError()) {\n          sendError(id, result)\n          break\n        }\n\n        const tokenInfo = result.data\n        if (!tokenInfo) {\n          sendError(id, err(GeneralErrors.Unexpected({ message: 'Provider returned null token info' })))\n          break\n        }\n\n        // Update token state and optionally emit event\n        setTokenState(tokenInfo, shouldEmitEvent)\n\n        // Always send AuthResult back\n        const now = Date.now()\n        const authenticated =\n          accessToken !== null && accessToken !== '' && (expiresAt === null || expiresAt > now)\n\n        sendAuthCallResult(id, {\n          authenticated,\n          expiresAt,\n          user: currentUser\n        })\n      } catch (error) {\n        sendError(id, err(GeneralErrors.Unexpected({ message: error instanceof Error ? error.message : String(error) })))\n      }\n      break\n    }\n\n    case MSG.CANCEL: {\n      try {\n        const { id } = data\n        const controller = pendingControllers.get(id)\n        if (controller) {\n          controller.abort()\n          pendingControllers.delete(id)\n        }\n      } catch (error) {\n        // Silently ignore cancel errors\n      }\n      break\n    }\n\n    case MSG.PING: {\n      const { id } = data\n      try {\n        const ts = data.payload?.timestamp ?? Date.now()\n        sendPong(id, ts)\n      } catch (error) {\n        sendError(id, err(GeneralErrors.Unexpected({ message: error instanceof Error ? error.message : String(error) })))\n      }\n      break\n    }\n\n    default: {\n      const anyData: any = data\n      sendError(anyData.id, err(GeneralErrors.UnknownMessage({ message: `Unknown message type: ${String(anyData.type)}` })))\n    }\n  }\n}\n\n})() // End IIFE - Immediately Invoked Function Expression\n","import type { ErrorDetail } from 'ts-micro-result'\r\nimport type { WorkerConfig, FetchGuardRequestInit, ProviderPresetConfig, AuthResult, ApiResponse } from './types'\r\n\r\n/**\r\n * MESSAGE PAYLOADS - SINGLE SOURCE OF TRUTH\r\n *\r\n * Define all message payloads here. Type unions and MSG constants are auto-generated.\r\n *\r\n * USAGE:\r\n * - To add a new message: Just add one line to the appropriate interface\r\n * - Payload types are automatically inferred\r\n * - MSG constants are automatically generated\r\n *\r\n * EXAMPLE:\r\n * ```typescript\r\n * interface MainPayloads {\r\n *   NEW_MESSAGE: { foo: string }  // Add this line\r\n * }\r\n * // => Automatically get MainToWorkerMessage union with NEW_MESSAGE\r\n * // => Automatically get MSG.NEW_MESSAGE = 'NEW_MESSAGE'\r\n * ```\r\n */\r\n\r\n/**\r\n * Payloads for messages sent from Main thread → Worker thread\r\n */\r\nexport interface MainPayloads {\r\n  SETUP: { config: WorkerConfig; providerConfig: ProviderPresetConfig | string | null }\r\n  FETCH: { url: string; options?: FetchGuardRequestInit }\r\n  AUTH_CALL: { method: string; args: unknown[]; emitEvent?: boolean }  // Generic auth method call (login, logout, loginWithPhone, etc.)\r\n  CANCEL: undefined\r\n  PING: { timestamp: number }\r\n}\r\n\r\n/**\r\n * Payloads for messages sent from Worker thread → Main thread\r\n */\r\nexport interface WorkerPayloads {\r\n  ERROR: { errors: ErrorDetail[] }\r\n  READY: undefined\r\n  SETUP_ERROR: { error: string }\r\n  PONG: { timestamp: number }\r\n  LOG: { level: 'info' | 'warn' | 'error'; message: string }\r\n  AUTH_STATE_CHANGED: AuthResult\r\n  AUTH_CALL_RESULT: AuthResult\r\n  FETCH_RESULT: ApiResponse\r\n  FETCH_ERROR: { error: string; status?: number }\r\n}\r\n\r\n/**\r\n * Generate message type from payload definition\r\n * Handles optional payloads (undefined) gracefully\r\n */\r\ntype MessageFromPayloads<P> = {\r\n  [K in keyof P]: { id: string; type: K } & (\r\n    P[K] extends undefined ? {} : { payload: P[K] }\r\n  )\r\n}[keyof P]\r\n\r\n/**\r\n * Message type unions - auto-generated from payload interfaces\r\n */\r\nexport type MainToWorkerMessage = MessageFromPayloads<MainPayloads>\r\nexport type WorkerToMainMessage = MessageFromPayloads<WorkerPayloads>\r\n\r\n/**\r\n * Message type unions for compile-time type checking\r\n */\r\nexport type MainType = keyof MainPayloads\r\nexport type WorkerType = keyof WorkerPayloads\r\nexport type MessageType = MainType | WorkerType\r\n\r\n/**\r\n * MSG constants object\r\n * Usage: MSG.SETUP, MSG.FETCH, etc.\r\n */\r\nexport const MSG = Object.freeze({\r\n  // Main -> Worker messages\r\n  SETUP: 'SETUP',\r\n  FETCH: 'FETCH',\r\n  AUTH_CALL: 'AUTH_CALL',\r\n  CANCEL: 'CANCEL',\r\n  PING: 'PING',\r\n\r\n  // Worker -> Main messages\r\n  ERROR: 'ERROR',\r\n  READY: 'READY',\r\n  SETUP_ERROR: 'SETUP_ERROR',\r\n  PONG: 'PONG',\r\n  LOG: 'LOG',\r\n  AUTH_STATE_CHANGED: 'AUTH_STATE_CHANGED',\r\n  AUTH_CALL_RESULT: 'AUTH_CALL_RESULT',\r\n  FETCH_RESULT: 'FETCH_RESULT',\r\n  FETCH_ERROR: 'FETCH_ERROR'\r\n}) as { readonly [K in MessageType]: K }\r\n","/**\n * FetchGuard Default Configuration Values\n */\n\n/**\n * Default time (in milliseconds) to refresh token before expiry\n * @default 60000 (60 seconds)\n */\nexport const DEFAULT_REFRESH_EARLY_MS = 60_000\n","/**\n * Error definitions organized by domain\n * Using ts-micro-result's defineError for consistency\n */\n\nimport { defineError, defineErrorAdvanced } from 'ts-micro-result'\n\n/**\n * General errors\n */\nexport const GeneralErrors = {\n  Unexpected: defineError('UNEXPECTED', 'Unexpected error', 500),\n  UnknownMessage: defineError('UNKNOWN_MESSAGE', 'Unknown message type', 400),\n  ResultParse: defineError('RESULT_PARSE_ERROR', 'Failed to parse result', 500),\n} as const\n\n/**\n * Initialization errors\n */\nexport const InitErrors = {\n  NotInitialized: defineError('INIT_ERROR', 'Worker not initialized', 500),\n  ProviderInitFailed: defineError('PROVIDER_INIT_FAILED', 'Failed to initialize provider', 500),\n  InitFailed: defineError('INIT_FAILED', 'Initialization failed', 500),\n} as const\n\n/**\n * Authentication & Token errors\n */\nexport const AuthErrors = {\n  TokenRefreshFailed: defineError('TOKEN_REFRESH_FAILED', 'Token refresh failed', 401),\n  LoginFailed: defineError('LOGIN_FAILED', 'Login failed', 401),\n  LogoutFailed: defineError('LOGOUT_FAILED', 'Logout failed', 500),\n  NotAuthenticated: defineError('NOT_AUTHENTICATED', 'User is not authenticated', 401),\n} as const\n\n/**\n * Domain validation errors\n */\nexport const DomainErrors = {\n  NotAllowed: defineErrorAdvanced('DOMAIN_NOT_ALLOWED', 'Domain not allowed: {url}', 403),\n} as const\n\n/**\n * Network errors (connection failures, no response)\n */\nexport const NetworkErrors = {\n  NetworkError: defineError('NETWORK_ERROR', 'Network error', 500),\n  FetchError: defineError('FETCH_ERROR', 'Fetch error', 500),\n} as const\n\n/**\n * HTTP errors (server returned error status 4xx/5xx)\n */\nexport const HttpErrors = {\n  ClientError: defineError('HTTP_CLIENT_ERROR', 'HTTP client error (4xx)', 400),\n  ServerError: defineError('HTTP_SERVER_ERROR', 'HTTP server error (5xx)', 500),\n  BadRequest: defineError('HTTP_BAD_REQUEST', 'Bad request', 400),\n  Unauthorized: defineError('HTTP_UNAUTHORIZED', 'Unauthorized', 401),\n  Forbidden: defineError('HTTP_FORBIDDEN', 'Forbidden', 403),\n  NotFound: defineError('HTTP_NOT_FOUND', 'Not found', 404),\n  InternalServerError: defineError('HTTP_INTERNAL_SERVER_ERROR', 'Internal server error', 500),\n} as const\n\n/**\n * Request errors\n */\nexport const RequestErrors = {\n  Cancelled: defineError('REQUEST_CANCELLED', 'Request was cancelled', 499),\n  Timeout: defineError('REQUEST_TIMEOUT', 'Request timeout', 408),\n  ResponseParseFailed: defineError('RESPONSE_PARSE_FAILED', 'Failed to parse response body', 500),\n} as const\n","/**\r\n * Worker postMessage helpers\r\n * Utilities to send messages from worker thread to main thread\r\n */\r\n\r\nimport type { WorkerToMainMessage } from './messages'\r\nimport type { Result } from 'ts-micro-result'\r\nimport type { AuthResult, ApiResponse } from './types'\r\nimport { MSG } from './messages'\r\n\r\n/**\r\n * Internal helper to post message to main thread\r\n */\r\nfunction post(message: WorkerToMainMessage): void {\r\n  ;(self as DedicatedWorkerGlobalScope).postMessage(message)\r\n}\r\n\r\n/**\r\n * Send error result (generic errors for auth operations, etc.)\r\n */\r\nexport function sendError(id: string, result: Result<unknown>): void {\r\n  post({\r\n    type: MSG.ERROR,\r\n    id,\r\n    payload: { errors: result.errors || [] }\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send successful fetch response\r\n */\r\nexport function sendFetchResult(id: string, response: ApiResponse): void {\r\n  post({\r\n    type: MSG.FETCH_RESULT,\r\n    id,\r\n    payload: response\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send fetch error response\r\n */\r\nexport function sendFetchError(id: string, error: string, status?: number): void {\r\n  post({\r\n    type: MSG.FETCH_ERROR,\r\n    id,\r\n    payload: { error, status }\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send READY event (worker initialized)\r\n */\r\nexport function sendReady(): void {\r\n  post({\r\n    type: MSG.READY,\r\n    id: `evt_${Date.now()}`\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send SETUP_ERROR event (worker setup failed)\r\n */\r\nexport function sendSetupError(error: string): void {\r\n  post({\r\n    type: MSG.SETUP_ERROR,\r\n    id: `evt_${Date.now()}`,\r\n    payload: { error }\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send PONG response to PING\r\n */\r\nexport function sendPong(id: string, timestamp: number): void {\r\n  post({\r\n    type: MSG.PONG,\r\n    id,\r\n    payload: { timestamp }\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send AUTH_STATE_CHANGED event\r\n */\r\nexport function sendAuthStateChanged(authResult: AuthResult): void {\r\n  post({\r\n    type: MSG.AUTH_STATE_CHANGED,\r\n    id: `evt_${Date.now()}`,\r\n    payload: authResult\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send AUTH_CALL_RESULT (auth method result)\r\n */\r\nexport function sendAuthCallResult(id: string, authResult: AuthResult): void {\r\n  post({\r\n    type: MSG.AUTH_CALL_RESULT,\r\n    id,\r\n    payload: authResult\r\n  } as any)\r\n}\r\n","import type { TokenProvider } from '../types'\r\n\r\n/**\r\n * Registry to manage token providers\r\n */\r\nconst registry = new Map<string, TokenProvider>()\r\n\r\n/**\r\n * Register a token provider with name\r\n */\r\nexport function registerProvider(name: string, provider: TokenProvider): void {\r\n  if (typeof name !== 'string' || !name.trim()) {\r\n    throw new Error('Provider name must be a non-empty string')\r\n  }\r\n  \r\n  if (!provider || typeof provider.refreshToken !== 'function') {\r\n    throw new Error('Provider must implement TokenProvider interface')\r\n  }\r\n  \r\n  registry.set(name, provider)\r\n}\r\n\r\n/**\r\n * Get provider by name\r\n */\r\nexport function getProvider(name: string): TokenProvider {\r\n  const provider = registry.get(name)\r\n  if (!provider) {\r\n    throw new Error(`Provider '${name}' not found. Available providers: ${Array.from(registry.keys()).join(', ')}`)\r\n  }\r\n  return provider\r\n}\r\n\r\n/**\r\n * Check if provider exists\r\n */\r\nexport function hasProvider(name: string): boolean {\r\n  return registry.has(name)\r\n}\r\n\r\n/**\r\n * Get list of all provider names\r\n */\r\nexport function listProviders(): string[] {\r\n  return Array.from(registry.keys())\r\n}\r\n\r\n/**\r\n * Remove provider\r\n */\r\nexport function unregisterProvider(name: string): boolean {\r\n  return registry.delete(name)\r\n}\r\n\r\n/**\r\n * Remove all providers\r\n */\r\nexport function clearProviders(): void {\r\n  registry.clear()\r\n}\r\n","import type {\r\n  TokenProvider,\r\n  RefreshTokenStorage,\r\n  TokenParser,\r\n  AuthStrategy,\r\n  TokenInfo\r\n} from '../types'\r\nimport { ok, err, type Result } from 'ts-micro-result'\r\nimport { AuthErrors, NetworkErrors } from '../errors'\r\n\r\n/**\r\n * Custom auth method type\r\n */\r\ntype CustomAuthMethod = (...args: unknown[]) => Promise<Result<TokenInfo>>\r\n\r\n/**\r\n * Configuration for creating provider\r\n *\r\n * refreshStorage: OPTIONAL - to load refresh token initially when worker starts\r\n * - undefined: cookie-based auth (httpOnly cookie, no need to load)\r\n * - RefreshTokenStorage: body-based auth (load from IndexedDB on startup)\r\n *\r\n * strategy: AuthStrategy with refresh (required), login/logout (required)\r\n *\r\n * customMethods: OPTIONAL - custom auth methods (loginWithPhone, loginWithGoogle, etc.)\r\n */\r\nexport interface ProviderConfig {\r\n  refreshStorage?: RefreshTokenStorage\r\n  parser: TokenParser\r\n  strategy: AuthStrategy\r\n  customMethods?: Record<string, CustomAuthMethod>\r\n}\r\n\r\n/**\r\n * Factory function to create TokenProvider from modular components\r\n *\r\n * Provider automatically handles refresh token:\r\n * - If refreshToken is null and storage exists → load from storage initially\r\n * - If refreshToken exists → use token from worker memory\r\n * - Cookie-based (no storage) → always null\r\n *\r\n * Custom methods:\r\n * - User can add custom auth methods (loginWithPhone, loginWithGoogle, etc.)\r\n * - Custom methods will be spread into provider object\r\n */\r\nexport function createProvider(config: ProviderConfig): TokenProvider {\r\n  const baseProvider: Pick<TokenProvider, 'refreshToken' | 'login' | 'logout'> = {\r\n    async refreshToken(refreshToken: string | null) {\r\n      let currentRefreshToken = refreshToken\r\n      if (currentRefreshToken === null && config.refreshStorage) {\r\n        currentRefreshToken = await config.refreshStorage.get()\r\n      }\r\n\r\n      try {\r\n        const response = await config.strategy.refresh(currentRefreshToken)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.TokenRefreshFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        const tokenInfo = await config.parser.parse(response)\r\n        if (!tokenInfo.token) {\r\n          return err(AuthErrors.TokenRefreshFailed({ message: 'No access token in response' }))\r\n        }\r\n\r\n        if (config.refreshStorage && tokenInfo.refreshToken) {\r\n          await config.refreshStorage.set(tokenInfo.refreshToken)\r\n        }\r\n\r\n        return ok(tokenInfo)\r\n      } catch (error) {\r\n        return err(NetworkErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    },\r\n\r\n    async login(payload: unknown) {\r\n      try {\r\n        const response = await config.strategy.login(payload)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.LoginFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        const tokenInfo = await config.parser.parse(response)\r\n        if (!tokenInfo.token) {\r\n          return err(AuthErrors.LoginFailed({ message: 'No access token in response' }))\r\n        }\r\n\r\n        if (config.refreshStorage && tokenInfo.refreshToken) {\r\n          await config.refreshStorage.set(tokenInfo.refreshToken)\r\n        }\r\n\r\n        return ok(tokenInfo)\r\n      } catch (error) {\r\n        return err(NetworkErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    },\r\n\r\n    async logout(payload?: unknown) {\r\n      try {\r\n        const response = await config.strategy.logout(payload)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.LogoutFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        if (config.refreshStorage) {\r\n          await config.refreshStorage.set(null)\r\n        }\r\n\r\n        return ok({\r\n          token: '',\r\n          refreshToken: undefined,\r\n          expiresAt: undefined,\r\n          user: null  // Explicitly clear user on logout\r\n        })\r\n      } catch (error) {\r\n        return err(NetworkErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    }\r\n  }\r\n\r\n  // Merge custom methods if provided\r\n  if (config.customMethods) {\r\n    return {\r\n      ...baseProvider,\r\n      ...config.customMethods\r\n    } as TokenProvider\r\n  }\r\n\r\n  return baseProvider as TokenProvider\r\n}\r\n","import type { RefreshTokenStorage } from '../../types'\r\n\r\n/**\r\n * IndexedDB storage - only stores refresh token in IndexedDB\r\n * Suitable for body-based refresh strategy\r\n * Persists refresh token for reuse after reload\r\n */\r\nexport function createIndexedDBStorage(dbName = 'FetchGuardDB', refreshTokenKey = 'refreshToken'): RefreshTokenStorage {\r\n  const storeName = 'tokens'\r\n\r\n  const openDB = (): Promise<IDBDatabase> => {\r\n    return new Promise((resolve, reject) => {\r\n      const request = indexedDB.open(dbName, 1)\r\n      \r\n      request.onerror = () => reject(request.error)\r\n      request.onsuccess = () => resolve(request.result)\r\n      \r\n      request.onupgradeneeded = (event) => {\r\n        const db = (event.target as IDBOpenDBRequest).result\r\n        if (!db.objectStoreNames.contains(storeName)) {\r\n          const store = db.createObjectStore(storeName, { keyPath: 'key' })\r\n          store.createIndex('timestamp', 'timestamp', { unique: false })\r\n        }\r\n      }\r\n    })\r\n  }\r\n\r\n  const promisifyRequest = <T>(request: IDBRequest<T>): Promise<T> => {\r\n    return new Promise((resolve, reject) => {\r\n      request.onsuccess = () => resolve(request.result)\r\n      request.onerror = () => reject(request.error)\r\n    })\r\n  }\r\n\r\n  return {\r\n    async get() {\r\n      try {\r\n        const db = await openDB()\r\n        const transaction = db.transaction([storeName], 'readonly')\r\n        const store = transaction.objectStore(storeName)\r\n        const result = await promisifyRequest(store.get(refreshTokenKey))\r\n        return result?.value || null\r\n      } catch (error) {\r\n        console.warn('Failed to get refresh token from IndexedDB:', error)\r\n        return null\r\n      }\r\n    },\r\n    async set(token) {\r\n      try {\r\n        const db = await openDB()\r\n        const transaction = db.transaction([storeName], 'readwrite')\r\n        const store = transaction.objectStore(storeName)\r\n\r\n        if (token) {\r\n          await promisifyRequest(store.put({ key: refreshTokenKey, value: token, timestamp: Date.now() }))\r\n        } else {\r\n          await promisifyRequest(store.delete(refreshTokenKey))\r\n        }\r\n      } catch (error) {\r\n        console.warn('Failed to save refresh token to IndexedDB:', error)\r\n      }\r\n    }\r\n  }\r\n}\r\n","import type { TokenParser } from '../../types'\r\n\r\n/**\r\n * Body parser - parse token from response body (JSON)\r\n * Expects response format: { data: { accessToken, refreshToken, expiresAt?, user? } }\r\n */\r\nexport const bodyParser: TokenParser = {\r\n  async parse(response) {\r\n    const json = await response.clone().json()\r\n    return {\r\n      token: json.data.accessToken,\r\n      refreshToken: json.data.refreshToken,\r\n      expiresAt: json.data.expiresAt,\r\n      user: json.data.user\r\n    }\r\n  }\r\n}\r\n","import type { TokenParser } from '../../types'\r\n\r\n/**\r\n * Cookie parser - parse access token from response body\r\n * Expects response format: { data: { accessToken, expiresAt?, user? } }\r\n * Refresh token is automatically set by backend into httpOnly cookie\r\n */\r\nexport const cookieParser: TokenParser = {\r\n  async parse(response) {\r\n    const json = await response.clone().json()\r\n    return {\r\n      token: json.data.accessToken,\r\n      expiresAt: json.data.expiresAt,\r\n      user: json.data.user\r\n    }\r\n  }\r\n}\r\n","import type { AuthStrategy } from '../../types'\r\n\r\n/**\r\n * Cookie auth strategy - all auth operations via httpOnly cookies\r\n * Suitable for SSR and cross-domain authentication\r\n *\r\n * Refresh token is sent automatically via httpOnly cookie\r\n * Credentials are sent in request body\r\n */\r\nexport function createCookieStrategy(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): AuthStrategy {\r\n  return {\r\n    async refresh() {\r\n      return fetch(config.refreshUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async login(payload) {\r\n      return fetch(config.loginUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify(payload),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async logout(payload) {\r\n      return fetch(config.logoutUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: payload ? JSON.stringify(payload) : undefined,\r\n        credentials: 'include'\r\n      })\r\n    }\r\n  }\r\n}\r\n\r\n/**\r\n * Standard cookie strategy\r\n */\r\nexport const cookieStrategy = createCookieStrategy({\r\n  refreshUrl: '/auth/refresh',\r\n  loginUrl: '/auth/login',\r\n  logoutUrl: '/auth/logout'\r\n})\r\n","import type { AuthStrategy } from '../../types'\r\n\r\n/**\r\n * Body auth strategy - all auth operations via request body\r\n * Suitable for SPA applications\r\n *\r\n * All tokens/credentials are sent in request body\r\n */\r\nexport function createBodyStrategy(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): AuthStrategy {\r\n  return {\r\n    async refresh(refreshToken) {\r\n      if (!refreshToken) {\r\n        throw new Error('No refresh token available')\r\n      }\r\n\r\n      return fetch(config.refreshUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify({ refreshToken }),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async login(payload) {\r\n      return fetch(config.loginUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify(payload),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async logout(payload) {\r\n      return fetch(config.logoutUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: payload ? JSON.stringify(payload) : undefined,\r\n        credentials: 'include'\r\n      })\r\n    }\r\n  }\r\n}\r\n\r\n/**\r\n * Standard body strategy\r\n */\r\nexport const bodyStrategy = createBodyStrategy({\r\n  refreshUrl: '/auth/refresh',\r\n  loginUrl: '/auth/login',\r\n  logoutUrl: '/auth/logout'\r\n})\r\n","import { createProvider } from './create-provider'\r\nimport { createIndexedDBStorage } from './storage/indexeddb'\r\nimport { bodyParser } from './parser/body'\r\nimport { cookieParser } from './parser/cookie'\r\nimport { createCookieStrategy } from './strategy/cookie'\r\nimport { createBodyStrategy } from './strategy/body'\r\nimport type { TokenProvider } from '../types'\r\n\r\n/**\r\n * Cookie Provider - uses httpOnly cookies\r\n * Suitable for SSR and cross-domain authentication\r\n *\r\n * Access token: Worker memory\r\n * Refresh token: httpOnly cookie (managed by backend)\r\n */\r\nexport function createCookieProvider(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): TokenProvider {\r\n  return createProvider({\r\n    refreshStorage: undefined,\r\n    parser: cookieParser,\r\n    strategy: createCookieStrategy(config)\r\n  })\r\n}\r\n\r\n/**\r\n * Body Provider - refresh token in response body, persisted to IndexedDB\r\n * Suitable for SPA applications\r\n *\r\n * Access token: Worker memory\r\n * Refresh token: IndexedDB (persists across reload)\r\n */\r\nexport function createBodyProvider(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n  refreshTokenKey?: string\r\n}): TokenProvider {\r\n  return createProvider({\r\n    refreshStorage: createIndexedDBStorage('FetchGuardDB', config.refreshTokenKey || 'refreshToken'),\r\n    parser: bodyParser,\r\n    strategy: createBodyStrategy(config)\r\n  })\r\n}\r\n","import { createCookieProvider, createBodyProvider } from './presets'\r\nimport type { TokenProvider, ProviderPresetConfig } from '../types'\r\n\r\n/**\r\n * Build provider from preset config\r\n * This is called in worker when receiving SETUP message\r\n */\r\nexport function buildProviderFromPreset(config: ProviderPresetConfig): TokenProvider {\r\n  switch (config.type) {\r\n    case 'cookie-auth':\r\n      return createCookieProvider({\r\n        refreshUrl: config.refreshUrl,\r\n        loginUrl: config.loginUrl,\r\n        logoutUrl: config.logoutUrl\r\n      })\r\n\r\n    case 'body-auth':\r\n      return createBodyProvider({\r\n        refreshUrl: config.refreshUrl,\r\n        loginUrl: config.loginUrl,\r\n        logoutUrl: config.logoutUrl,\r\n        refreshTokenKey: config.refreshTokenKey\r\n      })\r\n\r\n    default:\r\n      throw new Error(`Unknown provider type: ${String((config as { type?: unknown }).type)}`)\r\n  }\r\n}\r\n","import type { SerializedFormData, SerializedFormDataEntry, SerializedFile } from '../types'\r\n\r\n/**\r\n * Serialize FormData for transfer over postMessage\r\n * Inspired by api-worker.js:484-518\r\n *\r\n * FormData cannot be cloned via postMessage, so we need to serialize it first\r\n * Files are converted to ArrayBuffer -> number[] for transfer\r\n */\r\nexport async function serializeFormData(formData: FormData): Promise<SerializedFormData> {\r\n  const entries: Array<[string, SerializedFormDataEntry]> = []\r\n\r\n  // Use forEach instead of entries() for better TS compatibility\r\n  formData.forEach((value, key) => {\r\n    // Push async operations to promises array for parallel processing\r\n    if (value instanceof File) {\r\n      // We need to handle this synchronously in forEach, so we'll collect promises\r\n      // and await them all at once\r\n    } else {\r\n      entries.push([key, String(value)])\r\n    }\r\n  })\r\n\r\n  // Handle File entries separately with Promise.all\r\n  const filePromises: Promise<void>[] = []\r\n  formData.forEach((value, key) => {\r\n    if (value instanceof File) {\r\n      const promise = (async () => {\r\n        const arrayBuffer = await value.arrayBuffer()\r\n        const uint8Array = new Uint8Array(arrayBuffer)\r\n        const serializedFile: SerializedFile = {\r\n          name: value.name,\r\n          type: value.type,\r\n          data: Array.from(uint8Array) // Convert to number array\r\n        }\r\n        entries.push([key, serializedFile])\r\n      })()\r\n      filePromises.push(promise)\r\n    }\r\n  })\r\n\r\n  await Promise.all(filePromises)\r\n\r\n  return {\r\n    _type: 'FormData',\r\n    entries\r\n  }\r\n}\r\n\r\n/**\r\n * Deserialize SerializedFormData back to FormData in worker\r\n * Reconstructs File objects from serialized data\r\n */\r\nexport function deserializeFormData(serialized: SerializedFormData): FormData {\r\n  const formData = new FormData()\r\n\r\n  for (const [key, value] of serialized.entries) {\r\n    if (typeof value === 'string') {\r\n      formData.append(key, value)\r\n    } else {\r\n      // Reconstruct File from SerializedFile\r\n      const uint8Array = new Uint8Array(value.data)\r\n      const file = new File([uint8Array], value.name, { type: value.type })\r\n      formData.append(key, file)\r\n    }\r\n  }\r\n\r\n  return formData\r\n}\r\n\r\n/**\r\n * Check if body is FormData\r\n */\r\nexport function isFormData(body: unknown): body is FormData {\r\n  return body instanceof FormData\r\n}\r\n\r\n/**\r\n * Check if serialized body is SerializedFormData\r\n */\r\nexport function isSerializedFormData(body: unknown): body is SerializedFormData {\r\n  return body !== null && typeof body === 'object' && (body as SerializedFormData)._type === 'FormData'\r\n}\r\n","/**\r\n * Binary data utilities for Worker\r\n * Handles ArrayBuffer <-> Base64 conversion for binary responses\r\n */\r\n\r\n/**\r\n * Convert ArrayBuffer to base64 string\r\n * Used in worker to encode binary responses for postMessage transfer\r\n */\r\nexport function arrayBufferToBase64(buffer: ArrayBuffer): string {\r\n  const bytes = new Uint8Array(buffer)\r\n  let binary = ''\r\n  for (let i = 0; i < bytes.length; i++) {\r\n    binary += String.fromCharCode(bytes[i])\r\n  }\r\n  return btoa(binary)\r\n}\r\n\r\n/**\r\n * Convert base64 string to ArrayBuffer\r\n * Used in client to decode binary responses\r\n */\r\nexport function base64ToArrayBuffer(base64: string): ArrayBuffer {\r\n  const binary = atob(base64)\r\n  const bytes = new Uint8Array(binary.length)\r\n  for (let i = 0; i < binary.length; i++) {\r\n    bytes[i] = binary.charCodeAt(i)\r\n  }\r\n  return bytes.buffer\r\n}\r\n\r\n/**\r\n * Check if content type is binary (should be base64 encoded)\r\n * Returns true for images, PDFs, videos, etc.\r\n */\r\nexport function isBinaryContentType(contentType: string): boolean {\r\n  const normalized = contentType.toLowerCase()\r\n\r\n  // Text types - NOT binary\r\n  if (normalized.includes('text/')) return false\r\n  if (normalized.includes('json')) return false\r\n  if (normalized.includes('xml')) return false\r\n  if (normalized.includes('javascript')) return false\r\n  if (normalized.includes('ecmascript')) return false\r\n  if (normalized.includes('html')) return false\r\n\r\n  // Everything else is considered binary\r\n  return true\r\n}\r\n"],"mappings":";AAIA,SAAS,MAAAA,KAAI,OAAAC,YAAwB;;;ACwE9B,IAAM,MAAM,OAAO,OAAO;AAAA;AAAA,EAE/B,OAAO;AAAA,EACP,OAAO;AAAA,EACP,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,MAAM;AAAA;AAAA,EAGN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,KAAK;AAAA,EACL,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,cAAc;AAAA,EACd,aAAa;AACf,CAAC;;;ACtFM,IAAM,2BAA2B;;;ACHxC,SAAS,aAAa,2BAA2B;AAK1C,IAAM,gBAAgB;AAAA,EAC3B,YAAY,YAAY,cAAc,oBAAoB,GAAG;AAAA,EAC7D,gBAAgB,YAAY,mBAAmB,wBAAwB,GAAG;AAAA,EAC1E,aAAa,YAAY,sBAAsB,0BAA0B,GAAG;AAC9E;AAKO,IAAM,aAAa;AAAA,EACxB,gBAAgB,YAAY,cAAc,0BAA0B,GAAG;AAAA,EACvE,oBAAoB,YAAY,wBAAwB,iCAAiC,GAAG;AAAA,EAC5F,YAAY,YAAY,eAAe,yBAAyB,GAAG;AACrE;AAKO,IAAM,aAAa;AAAA,EACxB,oBAAoB,YAAY,wBAAwB,wBAAwB,GAAG;AAAA,EACnF,aAAa,YAAY,gBAAgB,gBAAgB,GAAG;AAAA,EAC5D,cAAc,YAAY,iBAAiB,iBAAiB,GAAG;AAAA,EAC/D,kBAAkB,YAAY,qBAAqB,6BAA6B,GAAG;AACrF;AAKO,IAAM,eAAe;AAAA,EAC1B,YAAY,oBAAoB,sBAAsB,6BAA6B,GAAG;AACxF;AAKO,IAAM,gBAAgB;AAAA,EAC3B,cAAc,YAAY,iBAAiB,iBAAiB,GAAG;AAAA,EAC/D,YAAY,YAAY,eAAe,eAAe,GAAG;AAC3D;AAKO,IAAM,aAAa;AAAA,EACxB,aAAa,YAAY,qBAAqB,2BAA2B,GAAG;AAAA,EAC5E,aAAa,YAAY,qBAAqB,2BAA2B,GAAG;AAAA,EAC5E,YAAY,YAAY,oBAAoB,eAAe,GAAG;AAAA,EAC9D,cAAc,YAAY,qBAAqB,gBAAgB,GAAG;AAAA,EAClE,WAAW,YAAY,kBAAkB,aAAa,GAAG;AAAA,EACzD,UAAU,YAAY,kBAAkB,aAAa,GAAG;AAAA,EACxD,qBAAqB,YAAY,8BAA8B,yBAAyB,GAAG;AAC7F;AAKO,IAAM,gBAAgB;AAAA,EAC3B,WAAW,YAAY,qBAAqB,yBAAyB,GAAG;AAAA,EACxE,SAAS,YAAY,mBAAmB,mBAAmB,GAAG;AAAA,EAC9D,qBAAqB,YAAY,yBAAyB,iCAAiC,GAAG;AAChG;;;ACzDA,SAAS,KAAK,SAAoC;AAChD;AAAC,EAAC,KAAoC,YAAY,OAAO;AAC3D;AAKO,SAAS,UAAU,IAAY,QAA+B;AACnE,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS,EAAE,QAAQ,OAAO,UAAU,CAAC,EAAE;AAAA,EACzC,CAAQ;AACV;AAKO,SAAS,gBAAgB,IAAY,UAA6B;AACvE,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS;AAAA,EACX,CAAQ;AACV;AAKO,SAAS,eAAe,IAAY,OAAe,QAAuB;AAC/E,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS,EAAE,OAAO,OAAO;AAAA,EAC3B,CAAQ;AACV;AAKO,SAAS,YAAkB;AAChC,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV,IAAI,OAAO,KAAK,IAAI,CAAC;AAAA,EACvB,CAAQ;AACV;AAKO,SAAS,eAAe,OAAqB;AAClD,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV,IAAI,OAAO,KAAK,IAAI,CAAC;AAAA,IACrB,SAAS,EAAE,MAAM;AAAA,EACnB,CAAQ;AACV;AAKO,SAAS,SAAS,IAAY,WAAyB;AAC5D,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS,EAAE,UAAU;AAAA,EACvB,CAAQ;AACV;AAKO,SAAS,qBAAqB,YAA8B;AACjE,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV,IAAI,OAAO,KAAK,IAAI,CAAC;AAAA,IACrB,SAAS;AAAA,EACX,CAAQ;AACV;AAKO,SAAS,mBAAmB,IAAY,YAA8B;AAC3E,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS;AAAA,EACX,CAAQ;AACV;;;ACjGA,IAAM,WAAW,oBAAI,IAA2B;AAoBzC,SAAS,YAAY,MAA6B;AACvD,QAAM,WAAW,SAAS,IAAI,IAAI;AAClC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,aAAa,IAAI,qCAAqC,MAAM,KAAK,SAAS,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;AAAA,EAChH;AACA,SAAO;AACT;;;ACxBA,SAAS,IAAI,WAAwB;AAsC9B,SAAS,eAAe,QAAuC;AACpE,QAAM,eAAyE;AAAA,IAC7E,MAAM,aAAa,cAA6B;AAC9C,UAAI,sBAAsB;AAC1B,UAAI,wBAAwB,QAAQ,OAAO,gBAAgB;AACzD,8BAAsB,MAAM,OAAO,eAAe,IAAI;AAAA,MACxD;AAEA,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,QAAQ,mBAAmB;AAElE,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI,WAAW,mBAAmB,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAClF;AAEA,cAAM,YAAY,MAAM,OAAO,OAAO,MAAM,QAAQ;AACpD,YAAI,CAAC,UAAU,OAAO;AACpB,iBAAO,IAAI,WAAW,mBAAmB,EAAE,SAAS,8BAA8B,CAAC,CAAC;AAAA,QACtF;AAEA,YAAI,OAAO,kBAAkB,UAAU,cAAc;AACnD,gBAAM,OAAO,eAAe,IAAI,UAAU,YAAY;AAAA,QACxD;AAEA,eAAO,GAAG,SAAS;AAAA,MACrB,SAAS,OAAO;AACd,eAAO,IAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,MAAM,SAAkB;AAC5B,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,MAAM,OAAO;AAEpD,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI,WAAW,YAAY,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAC3E;AAEA,cAAM,YAAY,MAAM,OAAO,OAAO,MAAM,QAAQ;AACpD,YAAI,CAAC,UAAU,OAAO;AACpB,iBAAO,IAAI,WAAW,YAAY,EAAE,SAAS,8BAA8B,CAAC,CAAC;AAAA,QAC/E;AAEA,YAAI,OAAO,kBAAkB,UAAU,cAAc;AACnD,gBAAM,OAAO,eAAe,IAAI,UAAU,YAAY;AAAA,QACxD;AAEA,eAAO,GAAG,SAAS;AAAA,MACrB,SAAS,OAAO;AACd,eAAO,IAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,OAAO,SAAmB;AAC9B,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,OAAO,OAAO;AAErD,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI,WAAW,aAAa,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAC5E;AAEA,YAAI,OAAO,gBAAgB;AACzB,gBAAM,OAAO,eAAe,IAAI,IAAI;AAAA,QACtC;AAEA,eAAO,GAAG;AAAA,UACR,OAAO;AAAA,UACP,cAAc;AAAA,UACd,WAAW;AAAA,UACX,MAAM;AAAA;AAAA,QACR,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,IAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAGA,MAAI,OAAO,eAAe;AACxB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,GAAG,OAAO;AAAA,IACZ;AAAA,EACF;AAEA,SAAO;AACT;;;AC5HO,SAAS,uBAAuB,SAAS,gBAAgB,kBAAkB,gBAAqC;AACrH,QAAM,YAAY;AAElB,QAAM,SAAS,MAA4B;AACzC,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAU,UAAU,KAAK,QAAQ,CAAC;AAExC,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAC5C,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAEhD,cAAQ,kBAAkB,CAAC,UAAU;AACnC,cAAM,KAAM,MAAM,OAA4B;AAC9C,YAAI,CAAC,GAAG,iBAAiB,SAAS,SAAS,GAAG;AAC5C,gBAAM,QAAQ,GAAG,kBAAkB,WAAW,EAAE,SAAS,MAAM,CAAC;AAChE,gBAAM,YAAY,aAAa,aAAa,EAAE,QAAQ,MAAM,CAAC;AAAA,QAC/D;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,CAAI,YAAuC;AAClE,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAChD,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,IAC9C,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,MAAM;AACV,UAAI;AACF,cAAM,KAAK,MAAM,OAAO;AACxB,cAAM,cAAc,GAAG,YAAY,CAAC,SAAS,GAAG,UAAU;AAC1D,cAAM,QAAQ,YAAY,YAAY,SAAS;AAC/C,cAAM,SAAS,MAAM,iBAAiB,MAAM,IAAI,eAAe,CAAC;AAChE,eAAO,QAAQ,SAAS;AAAA,MAC1B,SAAS,OAAO;AACd,gBAAQ,KAAK,+CAA+C,KAAK;AACjE,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,MAAM,IAAI,OAAO;AACf,UAAI;AACF,cAAM,KAAK,MAAM,OAAO;AACxB,cAAM,cAAc,GAAG,YAAY,CAAC,SAAS,GAAG,WAAW;AAC3D,cAAM,QAAQ,YAAY,YAAY,SAAS;AAE/C,YAAI,OAAO;AACT,gBAAM,iBAAiB,MAAM,IAAI,EAAE,KAAK,iBAAiB,OAAO,OAAO,WAAW,KAAK,IAAI,EAAE,CAAC,CAAC;AAAA,QACjG,OAAO;AACL,gBAAM,iBAAiB,MAAM,OAAO,eAAe,CAAC;AAAA,QACtD;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,KAAK,8CAA8C,KAAK;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;;;ACzDO,IAAM,aAA0B;AAAA,EACrC,MAAM,MAAM,UAAU;AACpB,UAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,WAAO;AAAA,MACL,OAAO,KAAK,KAAK;AAAA,MACjB,cAAc,KAAK,KAAK;AAAA,MACxB,WAAW,KAAK,KAAK;AAAA,MACrB,MAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACTO,IAAM,eAA4B;AAAA,EACvC,MAAM,MAAM,UAAU;AACpB,UAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,WAAO;AAAA,MACL,OAAO,KAAK,KAAK;AAAA,MACjB,WAAW,KAAK,KAAK;AAAA,MACrB,MAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACPO,SAAS,qBAAqB,QAIpB;AACf,SAAO;AAAA,IACL,MAAM,UAAU;AACd,aAAO,MAAM,OAAO,YAAY;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,MAAM,SAAS;AACnB,aAAO,MAAM,OAAO,UAAU;AAAA,QAC5B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,SAAS;AACpB,aAAO,MAAM,OAAO,WAAW;AAAA,QAC7B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,UAAU,KAAK,UAAU,OAAO,IAAI;AAAA,QAC1C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAKO,IAAM,iBAAiB,qBAAqB;AAAA,EACjD,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb,CAAC;;;AC1CM,SAAS,mBAAmB,QAIlB;AACf,SAAO;AAAA,IACL,MAAM,QAAQ,cAAc;AAC1B,UAAI,CAAC,cAAc;AACjB,cAAM,IAAI,MAAM,4BAA4B;AAAA,MAC9C;AAEA,aAAO,MAAM,OAAO,YAAY;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,aAAa,CAAC;AAAA,QACrC,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,MAAM,SAAS;AACnB,aAAO,MAAM,OAAO,UAAU;AAAA,QAC5B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,SAAS;AACpB,aAAO,MAAM,OAAO,WAAW;AAAA,QAC7B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,UAAU,KAAK,UAAU,OAAO,IAAI;AAAA,QAC1C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAKO,IAAM,eAAe,mBAAmB;AAAA,EAC7C,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb,CAAC;;;ACvCM,SAAS,qBAAqB,QAInB;AAChB,SAAO,eAAe;AAAA,IACpB,gBAAgB;AAAA,IAChB,QAAQ;AAAA,IACR,UAAU,qBAAqB,MAAM;AAAA,EACvC,CAAC;AACH;AASO,SAAS,mBAAmB,QAKjB;AAChB,SAAO,eAAe;AAAA,IACpB,gBAAgB,uBAAuB,gBAAgB,OAAO,mBAAmB,cAAc;AAAA,IAC/F,QAAQ;AAAA,IACR,UAAU,mBAAmB,MAAM;AAAA,EACrC,CAAC;AACH;;;ACtCO,SAAS,wBAAwB,QAA6C;AACnF,UAAQ,OAAO,MAAM;AAAA,IACnB,KAAK;AACH,aAAO,qBAAqB;AAAA,QAC1B,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,MACpB,CAAC;AAAA,IAEH,KAAK;AACH,aAAO,mBAAmB;AAAA,QACxB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,iBAAiB,OAAO;AAAA,MAC1B,CAAC;AAAA,IAEH;AACE,YAAM,IAAI,MAAM,0BAA0B,OAAQ,OAA8B,IAAI,CAAC,EAAE;AAAA,EAC3F;AACF;;;AC0BO,SAAS,oBAAoB,YAA0C;AAC5E,QAAM,WAAW,IAAI,SAAS;AAE9B,aAAW,CAAC,KAAK,KAAK,KAAK,WAAW,SAAS;AAC7C,QAAI,OAAO,UAAU,UAAU;AAC7B,eAAS,OAAO,KAAK,KAAK;AAAA,IAC5B,OAAO;AAEL,YAAM,aAAa,IAAI,WAAW,MAAM,IAAI;AAC5C,YAAM,OAAO,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,MAAM,EAAE,MAAM,MAAM,KAAK,CAAC;AACpE,eAAS,OAAO,KAAK,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAYO,SAAS,qBAAqB,MAA2C;AAC9E,SAAO,SAAS,QAAQ,OAAO,SAAS,YAAa,KAA4B,UAAU;AAC7F;;;ACzEO,SAAS,oBAAoB,QAA6B;AAC/D,QAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,cAAU,OAAO,aAAa,MAAM,CAAC,CAAC;AAAA,EACxC;AACA,SAAO,KAAK,MAAM;AACpB;AAmBO,SAAS,oBAAoB,aAA8B;AAChE,QAAM,aAAa,YAAY,YAAY;AAG3C,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,MAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AACxC,MAAI,WAAW,SAAS,KAAK,EAAG,QAAO;AACvC,MAAI,WAAW,SAAS,YAAY,EAAG,QAAO;AAC9C,MAAI,WAAW,SAAS,YAAY,EAAG,QAAO;AAC9C,MAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AAGxC,SAAO;AACT;;;CfvBE,WAAY;AACZ,MAAI,SAA8B;AAClC,MAAI,WAAiC;AACrC,MAAI,cAA6B;AACjC,MAAI,eAA8B;AAClC,MAAI,YAA2B;AAC/B,MAAI;AACJ,QAAM,qBAAqB,oBAAI,IAA6B;AAC5D,MAAI,iBAAiD;AASvD,iBAAe,mBAA4C;AAEzD,QAAI,CAAC,UAAU;AACb,aAAOC,KAAI,WAAW,eAAe,CAAC;AAAA,IACxC;AAEA,QAAI,eAAe,WAAW;AAC5B,YAAM,iBAAiB,QAAQ,kBAAkB;AACjD,YAAM,WAAW,YAAY,KAAK,IAAI;AACtC,UAAI,WAAW,gBAAgB;AAC7B,eAAOC,IAAG,WAAW;AAAA,MACvB;AAAA,IACF;AAEA,QAAI,gBAAgB;AAClB,YAAM,SAAS,MAAM;AACrB,aAAO;AAAA,IACT;AAEA,sBAAkB,YAAqC;AACrD,UAAI;AAEF,YAAI,CAAC,UAAU;AACb,iBAAOD,KAAI,WAAW,eAAe,CAAC;AAAA,QACxC;AAEA,cAAM,WAAW,MAAM,SAAS,aAAa,YAAY;AAEzD,YAAI,SAAS,QAAQ,GAAG;AACtB,wBAAc,EAAE,OAAO,MAAM,WAAW,MAAM,MAAM,QAAW,cAAc,OAAU,CAAC;AACxF,iBAAOA,KAAI,SAAS,MAAM;AAAA,QAC5B;AAEA,cAAM,YAAY,SAAS;AAC3B,YAAI,CAAC,WAAW;AACd,iBAAOA,KAAI,WAAW,mBAAmB,EAAE,SAAS,oCAAoC,CAAC,CAAC;AAAA,QAC5F;AAEA,sBAAc,SAAS;AAGvB,YAAI,CAAC,aAAa;AAChB,iBAAOA,KAAI,WAAW,mBAAmB,EAAE,SAAS,qCAAqC,CAAC,CAAC;AAAA,QAC7F;AAEA,eAAOC,IAAG,WAAW;AAAA,MACvB,UAAE;AACA,yBAAiB;AAAA,MACnB;AAAA,IACF,GAAG;AAEH,WAAO;AAAA,EACT;AAKA,WAAS,eAAe,KAAsB;AAC5C,QAAI,CAAC,QAAQ,gBAAgB,QAAQ;AACnC,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,YAAM,WAAW,OAAO;AACxB,YAAM,OAAO,OAAO;AAEpB,iBAAW,SAAS,OAAO,gBAAgB;AACzC,cAAM,MAAM,MAAM,YAAY,GAAG;AACjC,cAAM,UAAU,MAAM,MAAM,MAAM,QAAQ,GAAG,MAAM;AACnD,cAAM,UAAU,UAAU,MAAM,MAAM,GAAG,GAAG,IAAI;AAChD,cAAM,YAAY,UAAU,MAAM,MAAM,MAAM,CAAC,IAAI;AACnD,cAAM,aAAa,QAAQ,WAAW,IAAI;AAC1C,cAAM,OAAO,aAAa,QAAQ,MAAM,CAAC,IAAI;AAE7C,cAAM,gBAAgB,aACjB,aAAa,QAAQ,SAAS,SAAS,MAAM,IAAI,IACjD,aAAa;AAElB,YAAI,CAAC,cAAe;AAEpB,YAAI,SAAS;AACX,cAAI,SAAS,UAAW,QAAO;AAC/B;AAAA,QACF;AACA,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAKA,iBAAe,eAAe,KAAa,UAAiC,CAAC,GAAiC;AAC5G,QAAI,CAAC,QAAQ;AACX,aAAOD,KAAI,WAAW,eAAe,CAAC;AAAA,IACxC;AAEA,QAAI,CAAC,eAAe,GAAG,GAAG;AACxB,aAAOA,KAAI,aAAa,WAAW,EAAE,IAAI,CAAC,CAAC;AAAA,IAC7C;AAEA,UAAM,eAAe,QAAQ,iBAAiB;AAC9C,UAAM,iBAAiB,QAAQ,mBAAmB;AAElD,UAAM,EAAE,cAAc,GAAG,gBAAgB,IAAI,GAAG,aAAa,IAAI;AAGjE,QAAI,aAAa,QAAQ,qBAAqB,aAAa,IAAI,GAAG;AAChE,mBAAa,OAAO,oBAAoB,aAAa,IAAI;AAAA,IAC3D;AAEA,UAAM,UAAkC;AAAA,MACtC,GAAI,aAAa,WAAqC,CAAC;AAAA,IACzD;AAGA,QAAI,CAAC,QAAQ,cAAc,KAAK,CAAC,QAAQ,cAAc,KAAK,aAAa,MAAM;AAC7E,UAAI,OAAO,aAAa,SAAS,YAAY,EAAE,aAAa,gBAAgB,aAAa,EAAE,aAAa,gBAAgB,kBAAkB;AACxI,gBAAQ,cAAc,IAAI;AAAA,MAC5B;AAAA,IACF;AAEA,QAAI,cAAc;AAChB,YAAM,WAAW,MAAM,iBAAiB;AACxC,UAAI,SAAS,QAAQ,GAAG;AAEtB,eAAOA,KAAI,SAAS,MAAM;AAAA,MAC5B;AAEA,YAAM,QAAQ,SAAS;AACvB,UAAI,OAAO;AACT,gBAAQ,eAAe,IAAI,UAAU,KAAK;AAAA,MAC5C;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK,EAAE,GAAG,cAAc,SAAS,aAAa,UAAU,CAAC;AAAA,IAClF,SAAS,GAAG;AACV,YAAM,UAAW,KAAM,EAAU,SAAS;AAC1C,aAAO,UACHA,KAAI,cAAc,UAAU,CAAC,IAC7BA,KAAI,cAAc,aAAa,EAAE,SAAS,OAAO,CAAC,EAAE,CAAC,CAAC;AAAA,IAC5D;AAGA,UAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK;AAG5D,UAAM,WAAW,oBAAoB,WAAW;AAGhD,QAAI;AACJ,QAAI;AACF,UAAI,UAAU;AACZ,cAAM,SAAS,MAAM,SAAS,YAAY;AAC1C,eAAO,oBAAoB,MAAM;AAAA,MACnC,OAAO;AACL,eAAO,MAAM,SAAS,KAAK;AAAA,MAC7B;AAAA,IACF,SAAS,GAAG;AAEV,aAAOA,KAAI,cAAc,oBAAoB,EAAE,SAAS,OAAO,CAAC,EAAE,CAAC,CAAC;AAAA,IACtE;AAGA,UAAM,kBAA0C,CAAC;AACjD,QAAI,gBAAgB;AAClB,eAAS,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACvC,wBAAgB,GAAG,IAAI;AAAA,MACzB,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,EAAE,MAAM,QAAQ,SAAS,QAAQ,aAAa,SAAS,gBAAgB;AAC5F,WAAOC,IAAG,YAAY;AAAA,EACxB;AAgBA,WAAS,cAAc,WAA+G,YAAqB,MAAM;AAE/J,QAAI,WAAW,WAAW;AACxB,oBAAc,UAAU,SAAS;AAAA,IACnC;AAEA,QAAI,eAAe,WAAW;AAC5B,kBAAY,UAAU,aAAa;AAAA,IACrC;AAEA,QAAI,UAAU,WAAW;AACvB,oBAAc,UAAU;AAAA,IAC1B;AAEA,QAAI,kBAAkB,WAAW;AAC/B,qBAAe,UAAU,gBAAgB;AAAA,IAC3C;AAEA,QAAI,WAAW;AACb,sBAAgB;AAAA,IAClB;AAAA,EACF;AAMA,WAAS,kBAAkB;AACzB,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,gBAAgB,gBAAgB,QAAQ,gBAAgB,OAAO,cAAc,QAAQ,YAAY;AACvG,yBAAqB;AAAA,MACnB;AAAA,MACA;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAMA,OAAK,YAAY,OAAO,UAA6C;AACnE,UAAM,OAAO,MAAM;AACnB,YAAQ,KAAK,MAAM;AAAA,MACjB,KAAK,IAAI,OAAO;AACd,YAAI;AACF,gBAAM,UAAU,KAAK;AACrB,mBAAS,QAAQ;AAEjB,gBAAM,iBAAiB,QAAQ;AAG/B,cAAI,OAAO,mBAAmB,UAAU;AAEtC,uBAAW,YAAY,cAAc;AAAA,UACvC,WAAW,kBAAkB,OAAO,mBAAmB,YAAY,UAAU,gBAAgB;AAE3F,uBAAW,wBAAwB,cAAsC;AAAA,UAC3E,OAAO;AACL,2BAAe,yBAAyB;AACxC;AAAA,UACF;AAGA,cAAI,CAAC,UAAU;AACb,2BAAe,mDAAmD;AAClE;AAAA,UACF;AAEA,oBAAU;AAAA,QACZ,SAAS,OAAO;AACd,gBAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,kBAAQ,MAAM,qCAAqC,YAAY;AAC/D,yBAAe,YAAY;AAAA,QAC7B;AACA;AAAA,MACF;AAAA,MAEA,KAAK,IAAI,OAAO;AACd,cAAM,EAAE,GAAG,IAAI;AACf,YAAI;AACF,gBAAM,EAAE,KAAK,QAAQ,IAAI,KAAK;AAC9B,gBAAM,aAAa,IAAI,gBAAgB;AACvC,6BAAmB,IAAI,IAAI,UAAU;AACrC,gBAAM,SAAsB,EAAE,GAAI,WAAW,CAAC,GAAI,QAAQ,WAAW,OAAO;AAC5E,gBAAM,SAAS,MAAM,eAAe,KAAK,MAAM;AAE/C,cAAI,OAAO,aAAa,GAAG;AACzB,4BAAgB,IAAI,OAAO,IAAI;AAAA,UACjC,OAAO;AAEL,kBAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,kBAAM,UAAU,OAAO,WAAW;AAClC,kBAAM,SAAS,OAAO;AACtB,2BAAe,IAAI,SAAS,MAAM;AAAA,UACpC;AAEA,6BAAmB,OAAO,EAAE;AAAA,QAC9B,SAAS,OAAO;AACd,6BAAmB,OAAO,EAAE;AAC5B,yBAAe,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAS;AAAA,QACtF;AACA;AAAA,MACF;AAAA,MAEA,KAAK,IAAI,WAAW;AAClB,cAAM,EAAE,IAAI,QAAQ,IAAI;AACxB,YAAI;AACF,gBAAM,EAAE,QAAQ,MAAM,UAAU,IAAI;AACpC,gBAAM,kBAAkB,aAAa;AAErC,cAAI,CAAC,UAAU;AACb,sBAAU,IAAID,KAAI,WAAW,eAAe,CAAC,CAAC;AAC9C;AAAA,UACF;AAEA,cAAI,OAAO,SAAS,MAAM,MAAM,YAAY;AAC1C,sBAAU,IAAIA,KAAI,cAAc,WAAW,EAAE,SAAS,WAAW,MAAM,0BAA0B,CAAC,CAAC,CAAC;AACpG;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,MAAM,EAAE,GAAG,IAAI;AAC7C,cAAI,OAAO,QAAQ,GAAG;AACpB,sBAAU,IAAI,MAAM;AACpB;AAAA,UACF;AAEA,gBAAM,YAAY,OAAO;AACzB,cAAI,CAAC,WAAW;AACd,sBAAU,IAAIA,KAAI,cAAc,WAAW,EAAE,SAAS,oCAAoC,CAAC,CAAC,CAAC;AAC7F;AAAA,UACF;AAGA,wBAAc,WAAW,eAAe;AAGxC,gBAAM,MAAM,KAAK,IAAI;AACrB,gBAAM,gBACJ,gBAAgB,QAAQ,gBAAgB,OAAO,cAAc,QAAQ,YAAY;AAEnF,6BAAmB,IAAI;AAAA,YACrB;AAAA,YACA;AAAA,YACA,MAAM;AAAA,UACR,CAAC;AAAA,QACH,SAAS,OAAO;AACd,oBAAU,IAAIA,KAAI,cAAc,WAAW,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;AAAA,QAClH;AACA;AAAA,MACF;AAAA,MAEA,KAAK,IAAI,QAAQ;AACf,YAAI;AACF,gBAAM,EAAE,GAAG,IAAI;AACf,gBAAM,aAAa,mBAAmB,IAAI,EAAE;AAC5C,cAAI,YAAY;AACd,uBAAW,MAAM;AACjB,+BAAmB,OAAO,EAAE;AAAA,UAC9B;AAAA,QACF,SAAS,OAAO;AAAA,QAEhB;AACA;AAAA,MACF;AAAA,MAEA,KAAK,IAAI,MAAM;AACb,cAAM,EAAE,GAAG,IAAI;AACf,YAAI;AACF,gBAAM,KAAK,KAAK,SAAS,aAAa,KAAK,IAAI;AAC/C,mBAAS,IAAI,EAAE;AAAA,QACjB,SAAS,OAAO;AACd,oBAAU,IAAIA,KAAI,cAAc,WAAW,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;AAAA,QAClH;AACA;AAAA,MACF;AAAA,MAEA,SAAS;AACP,cAAM,UAAe;AACrB,kBAAU,QAAQ,IAAIA,KAAI,cAAc,eAAe,EAAE,SAAS,yBAAyB,OAAO,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAAA,MACvH;AAAA,IACF;AAAA,EACF;AAEA,GAAG;","names":["ok","err","err","ok"]}
+{"version":3,"sources":["../src/worker.ts","../src/messages.ts","../src/constants.ts","../src/errors.ts","../src/worker-post.ts","../src/utils/registry.ts","../src/provider/create-provider.ts","../src/provider/storage/indexeddb.ts","../src/provider/parser/body.ts","../src/provider/parser/cookie.ts","../src/provider/strategy/cookie.ts","../src/provider/strategy/body.ts","../src/provider/presets.ts","../src/provider/register-presets.ts","../src/utils/formdata.ts","../src/utils/binary.ts"],"sourcesContent":["/// <reference lib=\"webworker\" />\n\nimport type { WorkerConfig, ApiResponse, TokenProvider, FetchGuardRequestInit, ProviderPresetConfig } from './types'\nimport type { MainToWorkerMessage } from './messages'\nimport { ok, err, type Result } from 'ts-micro-result'\nimport { MSG } from './messages'\nimport { DEFAULT_REFRESH_EARLY_MS } from './constants'\nimport {\n  InitErrors,\n  AuthErrors,\n  DomainErrors,\n  RequestErrors,\n  GeneralErrors\n} from './errors'\nimport { sendAuthStateChanged, sendAuthCallResult, sendPong, sendReady, sendSetupError, sendError, sendFetchResult, sendFetchError } from './worker-post'\nimport { getProvider } from './utils/registry'\nimport { buildProviderFromPreset } from './provider/register-presets'\nimport { deserializeFormData, isSerializedFormData } from './utils/formdata'\nimport { arrayBufferToBase64, isBinaryContentType } from './utils/binary'\n\n/**\n * IIFE Closure to protect sensitive tokens from external access\n * Inspired by api-worker.js security pattern\n */\n;(function () {\n  let config: WorkerConfig | null = null\n  let provider: TokenProvider | null = null\n  let accessToken: string | null = null\n  let refreshToken: string | null = null\n  let expiresAt: number | null = null\n  let currentUser: unknown | undefined\n  const pendingControllers = new Map<string, AbortController>()\n  let refreshPromise: Promise<Result<string>> | null = null\n\n/**\n * Ensure we have a valid access token (not expired).\n * If token is missing or expired, refresh it.\n * Prevents concurrent refresh attempts.\n *\n * @returns Result<string> - access token on success, error on failure\n */\nasync function ensureValidToken(): Promise<Result<string>> {\n  // Provider must be initialized via SETUP first\n  if (!provider) {\n    return err(InitErrors.NotInitialized())\n  }\n\n  if (accessToken && expiresAt) {\n    const refreshEarlyMs = config?.refreshEarlyMs ?? DEFAULT_REFRESH_EARLY_MS\n    const timeLeft = expiresAt - Date.now()\n    if (timeLeft > refreshEarlyMs) {\n      return ok(accessToken)\n    }\n  }\n\n  if (refreshPromise) {\n    const result = await refreshPromise\n    return result\n  }\n\n  refreshPromise = (async (): Promise<Result<string>> => {\n    try {\n      // Provider already checked above, TypeScript needs assertion\n      if (!provider) {\n        return err(InitErrors.NotInitialized())\n      }\n\n      const valueRes = await provider.refreshToken(refreshToken)\n\n      if (valueRes.isError()) {\n        setTokenState({ token: null, expiresAt: null, user: undefined, refreshToken: undefined })\n        return err(valueRes.errors)\n      }\n\n      const tokenInfo = valueRes.data\n      if (!tokenInfo) {\n        return err(AuthErrors.TokenRefreshFailed({ message: 'Provider returned null token info' }))\n      }\n\n      setTokenState(tokenInfo)\n\n      // Validate that we got a valid access token after refresh\n      if (!accessToken) {\n        return err(AuthErrors.TokenRefreshFailed({ message: 'Access token is null after refresh' }))\n      }\n\n      return ok(accessToken)\n    } finally {\n      refreshPromise = null\n    }\n  })()\n\n  return refreshPromise\n}\n\n/**\n * Validate domain against allowed domains\n */\nfunction validateDomain(url: string): boolean {\n  if (!config?.allowedDomains?.length) {\n    return true\n  }\n\n  try {\n    const urlObj = new URL(url)\n    const hostname = urlObj.hostname\n    const port = urlObj.port\n\n    for (const entry of config.allowedDomains) {\n      const idx = entry.lastIndexOf(':')\n      const hasPort = idx > -1 && entry.indexOf(':') === idx\n      const pattern = hasPort ? entry.slice(0, idx) : entry\n      const entryPort = hasPort ? entry.slice(idx + 1) : ''\n      const isWildcard = pattern.startsWith('*.')\n      const base = isWildcard ? pattern.slice(2) : pattern\n\n      const hostnameMatch = isWildcard\n        ? (hostname === base || hostname.endsWith('.' + base))\n        : (hostname === base)\n      \n      if (!hostnameMatch) continue\n\n      if (hasPort) {\n        if (port === entryPort) return true\n        continue\n      }\n      return true\n    }\n    return false\n  } catch {\n    return false\n  }\n}\n\n/**\n * Make API request with proactive token management\n */\nasync function makeApiRequest(url: string, options: FetchGuardRequestInit = {}): Promise<Result<ApiResponse>> {\n  if (!config) {\n    return err(InitErrors.NotInitialized())\n  }\n\n  if (!validateDomain(url)) {\n    return err(DomainErrors.NotAllowed({ url }))\n  }\n\n  const requiresAuth = options.requiresAuth !== false\n  const includeHeaders = options.includeHeaders === true\n  // Extract FetchGuard-specific options and keep only standard RequestInit\n  const { requiresAuth: _, includeHeaders: __, ...fetchOptions } = options\n\n  // Deserialize FormData if present (inspired by api-worker.js:484-518)\n  if (fetchOptions.body && isSerializedFormData(fetchOptions.body)) {\n    fetchOptions.body = deserializeFormData(fetchOptions.body)\n  }\n\n  const headers: Record<string, string> = {\n    ...(fetchOptions.headers as Record<string, string> || {})\n  }\n\n  // Don't set Content-Type for FormData - browser will set it with boundary\n  if (!headers['Content-Type'] && !headers['content-type'] && fetchOptions.body) {\n    if (typeof fetchOptions.body === 'object' && !(fetchOptions.body instanceof FormData) && !(fetchOptions.body instanceof URLSearchParams)) {\n      headers['Content-Type'] = 'application/json'\n    }\n  }\n\n  if (requiresAuth) {\n    const tokenRes = await ensureValidToken()\n    if (tokenRes.isError()) {\n      // Propagate error - cast to correct return type\n      return err(tokenRes.errors)\n    }\n\n    const token = tokenRes.data\n    if (token) {\n      headers['Authorization'] = `Bearer ${token}`\n    }\n  }\n\n  let response: Response\n  try {\n    response = await fetch(url, { ...fetchOptions, headers, credentials: 'include' })\n  } catch (e) {\n    const aborted = (e && (e as any).name === 'AbortError')\n    return aborted\n      ? err(RequestErrors.Cancelled())\n      : err(RequestErrors.NetworkError({ message: String(e) }))\n  }\n\n  // Extract content-type (always needed for binary detection)\n  const contentType = response.headers.get('content-type') || 'application/octet-stream'\n\n  // Determine if response is binary\n  const isBinary = isBinaryContentType(contentType)\n\n  // Get body as text or base64\n  let body: string\n  try {\n    if (isBinary) {\n      const buffer = await response.arrayBuffer()\n      body = arrayBufferToBase64(buffer)\n    } else {\n      body = await response.text()\n    }\n  } catch (e) {\n    // Reading/parsing response body failed\n    return err(RequestErrors.ResponseParseFailed({ message: String(e) }))\n  }\n\n  // Extract headers if requested\n  const responseHeaders: Record<string, string> = {}\n  if (includeHeaders) {\n    response.headers.forEach((value, key) => {\n      responseHeaders[key] = value\n    })\n  }\n\n  const responseData = { body, status: response.status, contentType, headers: responseHeaders }\n  return ok(responseData)\n}\n\n/**\n * Update token state from TokenInfo and auto emit AUTH_STATE_CHANGED\n *\n * Smart update logic for ALL fields:\n * - Only update field if key exists in tokenInfo\n * - If key exists with value: update to that value (including null)\n * - If key doesn't exist: preserve existing value\n *\n * This allows flexible custom auth methods:\n * - Standard login/refresh: returns { token, user, expiresAt }\n * - Update user info: may only return { user: {...} } (no token change)\n * - Verify OTP: may return {} (just validation, no state change)\n * - Logout: returns { token: null, user: null, ... } to clear all\n */\nfunction setTokenState(tokenInfo: { token?: string | null; expiresAt?: number | null; user?: unknown; refreshToken?: string | null }, emitEvent: boolean = true) {\n  // Apply smart preservation to ALL fields\n  if ('token' in tokenInfo) {\n    accessToken = tokenInfo.token ?? null\n  }\n\n  if ('expiresAt' in tokenInfo) {\n    expiresAt = tokenInfo.expiresAt ?? null\n  }\n\n  if ('user' in tokenInfo) {\n    currentUser = tokenInfo.user\n  }\n\n  if ('refreshToken' in tokenInfo) {\n    refreshToken = tokenInfo.refreshToken ?? null\n  }\n\n  if (emitEvent) {\n    postAuthChanged()\n  }\n}\n\n/**\n * Emit AUTH_STATE_CHANGED event based on current state\n * authenticated = true if we have valid non-expired token\n */\nfunction postAuthChanged() {\n  const now = Date.now()\n  const authenticated = accessToken !== null && accessToken !== '' && (expiresAt === null || expiresAt > now)\n  sendAuthStateChanged({\n    authenticated,\n    expiresAt,\n    user: currentUser\n  })\n}\n\n/**\n * Main message handler\n * Each case has its own try-catch for better error isolation\n */\nself.onmessage = async (event: MessageEvent<MainToWorkerMessage>) => {\n  const data = event.data\n  switch (data.type) {\n    case MSG.SETUP: {\n      try {\n        const payload = data.payload\n        config = payload.config\n\n        const providerConfig = payload.providerConfig\n\n        // Build provider from config\n        if (typeof providerConfig === 'string') {\n          // Registry lookup\n          provider = getProvider(providerConfig)\n        } else if (providerConfig && typeof providerConfig === 'object' && 'type' in providerConfig) {\n          // ProviderPresetConfig object\n          provider = buildProviderFromPreset(providerConfig as ProviderPresetConfig)\n        } else {\n          sendSetupError('Invalid provider config')\n          break\n        }\n\n        // Validate provider was successfully created\n        if (!provider) {\n          sendSetupError('Provider initialization failed - provider is null')\n          break\n        }\n\n        sendReady()\n      } catch (error) {\n        const errorMessage = error instanceof Error ? error.message : String(error)\n        console.error('[FetchGuard Worker] Setup failed:', errorMessage)\n        sendSetupError(errorMessage)\n      }\n      break\n    }\n\n    case MSG.FETCH: {\n      const { id } = data\n      try {\n        const { url, options } = data.payload\n        const controller = new AbortController()\n        pendingControllers.set(id, controller)\n        const merged: RequestInit = { ...(options || {}), signal: controller.signal }\n        const result = await makeApiRequest(url, merged)\n\n        if (result.isOkWithData()) {\n          sendFetchResult(id, result.data)\n        } else {\n          // Network/timeout/cancel error \n          const error = result.errors?.[0]\n          const message = error?.message || 'Unknown error'\n          const status = result.status\n          sendFetchError(id, message, status)\n        }\n\n        pendingControllers.delete(id)\n      } catch (error) {\n        pendingControllers.delete(id)\n        sendFetchError(id, error instanceof Error ? error.message : String(error), undefined)\n      }\n      break\n    }\n\n    case MSG.AUTH_CALL: {\n      const { id, payload } = data\n      try {\n        const { method, args, emitEvent } = payload\n        const shouldEmitEvent = emitEvent ?? true // Default: emit event\n\n        if (!provider) {\n          sendError(id, err(InitErrors.NotInitialized()))\n          break\n        }\n\n        if (typeof provider[method] !== 'function') {\n          sendError(id, err(GeneralErrors.Unexpected({ message: `Method '${method}' not found on provider` })))\n          break\n        }\n\n        const result = await provider[method](...args)\n        if (result.isError()) {\n          sendError(id, result)\n          break\n        }\n\n        const tokenInfo = result.data\n        if (!tokenInfo) {\n          sendError(id, err(GeneralErrors.Unexpected({ message: 'Provider returned null token info' })))\n          break\n        }\n\n        // Update token state and optionally emit event\n        setTokenState(tokenInfo, shouldEmitEvent)\n\n        // Always send AuthResult back\n        const now = Date.now()\n        const authenticated =\n          accessToken !== null && accessToken !== '' && (expiresAt === null || expiresAt > now)\n\n        sendAuthCallResult(id, {\n          authenticated,\n          expiresAt,\n          user: currentUser\n        })\n      } catch (error) {\n        sendError(id, err(GeneralErrors.Unexpected({ message: error instanceof Error ? error.message : String(error) })))\n      }\n      break\n    }\n\n    case MSG.CANCEL: {\n      try {\n        const { id } = data\n        const controller = pendingControllers.get(id)\n        if (controller) {\n          controller.abort()\n          pendingControllers.delete(id)\n        }\n      } catch (error) {\n        // Silently ignore cancel errors\n      }\n      break\n    }\n\n    case MSG.PING: {\n      const { id } = data\n      try {\n        const ts = data.payload?.timestamp ?? Date.now()\n        sendPong(id, ts)\n      } catch (error) {\n        sendError(id, err(GeneralErrors.Unexpected({ message: error instanceof Error ? error.message : String(error) })))\n      }\n      break\n    }\n\n    default: {\n      const anyData: any = data\n      sendError(anyData.id, err(GeneralErrors.UnknownMessage({ message: `Unknown message type: ${String(anyData.type)}` })))\n    }\n  }\n}\n\n})() // End IIFE - Immediately Invoked Function Expression\n","import type { ErrorDetail } from 'ts-micro-result'\r\nimport type { WorkerConfig, FetchGuardRequestInit, ProviderPresetConfig, AuthResult, ApiResponse } from './types'\r\n\r\n/**\r\n * MESSAGE PAYLOADS - SINGLE SOURCE OF TRUTH\r\n *\r\n * Define all message payloads here. Type unions and MSG constants are auto-generated.\r\n *\r\n * USAGE:\r\n * - To add a new message: Just add one line to the appropriate interface\r\n * - Payload types are automatically inferred\r\n * - MSG constants are automatically generated\r\n *\r\n * EXAMPLE:\r\n * ```typescript\r\n * interface MainPayloads {\r\n *   NEW_MESSAGE: { foo: string }  // Add this line\r\n * }\r\n * // => Automatically get MainToWorkerMessage union with NEW_MESSAGE\r\n * // => Automatically get MSG.NEW_MESSAGE = 'NEW_MESSAGE'\r\n * ```\r\n */\r\n\r\n/**\r\n * Payloads for messages sent from Main thread → Worker thread\r\n */\r\nexport interface MainPayloads {\r\n  SETUP: { config: WorkerConfig; providerConfig: ProviderPresetConfig | string | null }\r\n  FETCH: { url: string; options?: FetchGuardRequestInit }\r\n  AUTH_CALL: { method: string; args: unknown[]; emitEvent?: boolean }  // Generic auth method call (login, logout, loginWithPhone, etc.)\r\n  CANCEL: undefined\r\n  PING: { timestamp: number }\r\n}\r\n\r\n/**\r\n * Payloads for messages sent from Worker thread → Main thread\r\n */\r\nexport interface WorkerPayloads {\r\n  ERROR: { errors: ErrorDetail[] }\r\n  READY: undefined\r\n  SETUP_ERROR: { error: string }\r\n  PONG: { timestamp: number }\r\n  LOG: { level: 'info' | 'warn' | 'error'; message: string }\r\n  AUTH_STATE_CHANGED: AuthResult\r\n  AUTH_CALL_RESULT: AuthResult\r\n  FETCH_RESULT: ApiResponse\r\n  FETCH_ERROR: { error: string; status?: number }\r\n}\r\n\r\n/**\r\n * Generate message type from payload definition\r\n * Handles optional payloads (undefined) gracefully\r\n */\r\ntype MessageFromPayloads<P> = {\r\n  [K in keyof P]: { id: string; type: K } & (\r\n    P[K] extends undefined ? {} : { payload: P[K] }\r\n  )\r\n}[keyof P]\r\n\r\n/**\r\n * Message type unions - auto-generated from payload interfaces\r\n */\r\nexport type MainToWorkerMessage = MessageFromPayloads<MainPayloads>\r\nexport type WorkerToMainMessage = MessageFromPayloads<WorkerPayloads>\r\n\r\n/**\r\n * Message type unions for compile-time type checking\r\n */\r\nexport type MainType = keyof MainPayloads\r\nexport type WorkerType = keyof WorkerPayloads\r\nexport type MessageType = MainType | WorkerType\r\n\r\n/**\r\n * MSG constants object\r\n * Usage: MSG.SETUP, MSG.FETCH, etc.\r\n */\r\nexport const MSG = Object.freeze({\r\n  // Main -> Worker messages\r\n  SETUP: 'SETUP',\r\n  FETCH: 'FETCH',\r\n  AUTH_CALL: 'AUTH_CALL',\r\n  CANCEL: 'CANCEL',\r\n  PING: 'PING',\r\n\r\n  // Worker -> Main messages\r\n  ERROR: 'ERROR',\r\n  READY: 'READY',\r\n  SETUP_ERROR: 'SETUP_ERROR',\r\n  PONG: 'PONG',\r\n  LOG: 'LOG',\r\n  AUTH_STATE_CHANGED: 'AUTH_STATE_CHANGED',\r\n  AUTH_CALL_RESULT: 'AUTH_CALL_RESULT',\r\n  FETCH_RESULT: 'FETCH_RESULT',\r\n  FETCH_ERROR: 'FETCH_ERROR'\r\n}) as { readonly [K in MessageType]: K }\r\n","/**\n * FetchGuard Default Configuration Values\n */\n\n/**\n * Default time (in milliseconds) to refresh token before expiry\n * @default 60000 (60 seconds)\n */\nexport const DEFAULT_REFRESH_EARLY_MS = 60_000\n","/**\n * Error definitions organized by domain\n * Using ts-micro-result's defineError for consistency\n */\n\nimport { defineError, defineErrorAdvanced } from 'ts-micro-result'\n\n/**\n * General errors\n */\nexport const GeneralErrors = {\n  Unexpected: defineError('UNEXPECTED', 'Unexpected error', 500),\n  UnknownMessage: defineError('UNKNOWN_MESSAGE', 'Unknown message type', 400),\n  ResultParse: defineError('RESULT_PARSE_ERROR', 'Failed to parse result', 500),\n} as const\n\n/**\n * Initialization errors\n */\nexport const InitErrors = {\n  NotInitialized: defineError('INIT_ERROR', 'Worker not initialized', 500),\n  ProviderInitFailed: defineError('PROVIDER_INIT_FAILED', 'Failed to initialize provider', 500),\n  InitFailed: defineError('INIT_FAILED', 'Initialization failed', 500),\n} as const\n\n/**\n * Authentication & Token errors\n */\nexport const AuthErrors = {\n  TokenRefreshFailed: defineError('TOKEN_REFRESH_FAILED', 'Token refresh failed', 401),\n  LoginFailed: defineError('LOGIN_FAILED', 'Login failed', 401),\n  LogoutFailed: defineError('LOGOUT_FAILED', 'Logout failed', 500),\n  NotAuthenticated: defineError('NOT_AUTHENTICATED', 'User is not authenticated', 401),\n} as const\n\n/**\n * Domain validation errors\n */\nexport const DomainErrors = {\n  NotAllowed: defineErrorAdvanced('DOMAIN_NOT_ALLOWED', 'Domain not allowed: {url}', 403),\n} as const\n\n/**\n * Request/Response errors (network, HTTP, parsing)\n */\nexport const RequestErrors = {\n  // Network errors (connection failed, no response)\n  NetworkError: defineError('NETWORK_ERROR', 'Network error', 500),\n  Cancelled: defineError('REQUEST_CANCELLED', 'Request was cancelled', 499),\n\n  // HTTP errors (server responded with error status)\n  HttpError: defineErrorAdvanced('HTTP_ERROR', 'HTTP {status} error', 500),\n\n  // Response parsing errors\n  ResponseParseFailed: defineError('RESPONSE_PARSE_FAILED', 'Failed to parse response body', 500),\n} as const\n","/**\r\n * Worker postMessage helpers\r\n * Utilities to send messages from worker thread to main thread\r\n */\r\n\r\nimport type { WorkerToMainMessage } from './messages'\r\nimport type { Result } from 'ts-micro-result'\r\nimport type { AuthResult, ApiResponse } from './types'\r\nimport { MSG } from './messages'\r\n\r\n/**\r\n * Internal helper to post message to main thread\r\n */\r\nfunction post(message: WorkerToMainMessage): void {\r\n  ;(self as DedicatedWorkerGlobalScope).postMessage(message)\r\n}\r\n\r\n/**\r\n * Send error result (generic errors for auth operations, etc.)\r\n */\r\nexport function sendError(id: string, result: Result<unknown>): void {\r\n  post({\r\n    type: MSG.ERROR,\r\n    id,\r\n    payload: { errors: result.errors || [] }\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send successful fetch response\r\n */\r\nexport function sendFetchResult(id: string, response: ApiResponse): void {\r\n  post({\r\n    type: MSG.FETCH_RESULT,\r\n    id,\r\n    payload: response\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send fetch error response\r\n */\r\nexport function sendFetchError(id: string, error: string, status?: number): void {\r\n  post({\r\n    type: MSG.FETCH_ERROR,\r\n    id,\r\n    payload: { error, status }\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send READY event (worker initialized)\r\n */\r\nexport function sendReady(): void {\r\n  post({\r\n    type: MSG.READY,\r\n    id: `evt_${Date.now()}`\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send SETUP_ERROR event (worker setup failed)\r\n */\r\nexport function sendSetupError(error: string): void {\r\n  post({\r\n    type: MSG.SETUP_ERROR,\r\n    id: `evt_${Date.now()}`,\r\n    payload: { error }\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send PONG response to PING\r\n */\r\nexport function sendPong(id: string, timestamp: number): void {\r\n  post({\r\n    type: MSG.PONG,\r\n    id,\r\n    payload: { timestamp }\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send AUTH_STATE_CHANGED event\r\n */\r\nexport function sendAuthStateChanged(authResult: AuthResult): void {\r\n  post({\r\n    type: MSG.AUTH_STATE_CHANGED,\r\n    id: `evt_${Date.now()}`,\r\n    payload: authResult\r\n  } as any)\r\n}\r\n\r\n/**\r\n * Send AUTH_CALL_RESULT (auth method result)\r\n */\r\nexport function sendAuthCallResult(id: string, authResult: AuthResult): void {\r\n  post({\r\n    type: MSG.AUTH_CALL_RESULT,\r\n    id,\r\n    payload: authResult\r\n  } as any)\r\n}\r\n","import type { TokenProvider } from '../types'\r\n\r\n/**\r\n * Registry to manage token providers\r\n */\r\nconst registry = new Map<string, TokenProvider>()\r\n\r\n/**\r\n * Register a token provider with name\r\n */\r\nexport function registerProvider(name: string, provider: TokenProvider): void {\r\n  if (typeof name !== 'string' || !name.trim()) {\r\n    throw new Error('Provider name must be a non-empty string')\r\n  }\r\n  \r\n  if (!provider || typeof provider.refreshToken !== 'function') {\r\n    throw new Error('Provider must implement TokenProvider interface')\r\n  }\r\n  \r\n  registry.set(name, provider)\r\n}\r\n\r\n/**\r\n * Get provider by name\r\n */\r\nexport function getProvider(name: string): TokenProvider {\r\n  const provider = registry.get(name)\r\n  if (!provider) {\r\n    throw new Error(`Provider '${name}' not found. Available providers: ${Array.from(registry.keys()).join(', ')}`)\r\n  }\r\n  return provider\r\n}\r\n\r\n/**\r\n * Check if provider exists\r\n */\r\nexport function hasProvider(name: string): boolean {\r\n  return registry.has(name)\r\n}\r\n\r\n/**\r\n * Get list of all provider names\r\n */\r\nexport function listProviders(): string[] {\r\n  return Array.from(registry.keys())\r\n}\r\n\r\n/**\r\n * Remove provider\r\n */\r\nexport function unregisterProvider(name: string): boolean {\r\n  return registry.delete(name)\r\n}\r\n\r\n/**\r\n * Remove all providers\r\n */\r\nexport function clearProviders(): void {\r\n  registry.clear()\r\n}\r\n","import type {\r\n  TokenProvider,\r\n  RefreshTokenStorage,\r\n  TokenParser,\r\n  AuthStrategy,\r\n  TokenInfo\r\n} from '../types'\r\nimport { ok, err, type Result } from 'ts-micro-result'\r\nimport { AuthErrors, RequestErrors } from '../errors'\r\n\r\n/**\r\n * Custom auth method type\r\n */\r\ntype CustomAuthMethod = (...args: unknown[]) => Promise<Result<TokenInfo>>\r\n\r\n/**\r\n * Configuration for creating provider\r\n *\r\n * refreshStorage: OPTIONAL - to load refresh token initially when worker starts\r\n * - undefined: cookie-based auth (httpOnly cookie, no need to load)\r\n * - RefreshTokenStorage: body-based auth (load from IndexedDB on startup)\r\n *\r\n * strategy: AuthStrategy with refresh (required), login/logout (required)\r\n *\r\n * customMethods: OPTIONAL - custom auth methods (loginWithPhone, loginWithGoogle, etc.)\r\n */\r\nexport interface ProviderConfig {\r\n  refreshStorage?: RefreshTokenStorage\r\n  parser: TokenParser\r\n  strategy: AuthStrategy\r\n  customMethods?: Record<string, CustomAuthMethod>\r\n}\r\n\r\n/**\r\n * Factory function to create TokenProvider from modular components\r\n *\r\n * Provider automatically handles refresh token:\r\n * - If refreshToken is null and storage exists → load from storage initially\r\n * - If refreshToken exists → use token from worker memory\r\n * - Cookie-based (no storage) → always null\r\n *\r\n * Custom methods:\r\n * - User can add custom auth methods (loginWithPhone, loginWithGoogle, etc.)\r\n * - Custom methods will be spread into provider object\r\n */\r\nexport function createProvider(config: ProviderConfig): TokenProvider {\r\n  const baseProvider: Pick<TokenProvider, 'refreshToken' | 'login' | 'logout'> = {\r\n    async refreshToken(refreshToken: string | null) {\r\n      let currentRefreshToken = refreshToken\r\n      if (currentRefreshToken === null && config.refreshStorage) {\r\n        currentRefreshToken = await config.refreshStorage.get()\r\n      }\r\n\r\n      try {\r\n        const response = await config.strategy.refresh(currentRefreshToken)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.TokenRefreshFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        const tokenInfo = await config.parser.parse(response)\r\n        if (!tokenInfo.token) {\r\n          return err(AuthErrors.TokenRefreshFailed({ message: 'No access token in response' }))\r\n        }\r\n\r\n        if (config.refreshStorage && tokenInfo.refreshToken) {\r\n          await config.refreshStorage.set(tokenInfo.refreshToken)\r\n        }\r\n\r\n        return ok(tokenInfo)\r\n      } catch (error) {\r\n        return err(RequestErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    },\r\n\r\n    async login(payload: unknown, url?: string) {\r\n      try {\r\n        const response = await config.strategy.login(payload, url)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.LoginFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        const tokenInfo = await config.parser.parse(response)\r\n        if (!tokenInfo.token) {\r\n          return err(AuthErrors.LoginFailed({ message: 'No access token in response' }))\r\n        }\r\n\r\n        if (config.refreshStorage && tokenInfo.refreshToken) {\r\n          await config.refreshStorage.set(tokenInfo.refreshToken)\r\n        }\r\n\r\n        return ok(tokenInfo)\r\n      } catch (error) {\r\n        return err(RequestErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    },\r\n\r\n    async logout(payload?: unknown) {\r\n      try {\r\n        const response = await config.strategy.logout(payload)\r\n\r\n        if (!response.ok) {\r\n          return err(AuthErrors.LogoutFailed({ message: `HTTP ${response.status}` }))\r\n        }\r\n\r\n        if (config.refreshStorage) {\r\n          await config.refreshStorage.set(null)\r\n        }\r\n\r\n        return ok({\r\n          token: '',\r\n          refreshToken: undefined,\r\n          expiresAt: undefined,\r\n          user: null  // Explicitly clear user on logout\r\n        })\r\n      } catch (error) {\r\n        return err(RequestErrors.NetworkError({ message: String(error) }))\r\n      }\r\n    }\r\n  }\r\n\r\n  // Merge custom methods if provided\r\n  if (config.customMethods) {\r\n    return {\r\n      ...baseProvider,\r\n      ...config.customMethods\r\n    } as TokenProvider\r\n  }\r\n\r\n  return baseProvider as TokenProvider\r\n}\r\n","import type { RefreshTokenStorage } from '../../types'\r\n\r\n/**\r\n * IndexedDB storage - only stores refresh token in IndexedDB\r\n * Suitable for body-based refresh strategy\r\n * Persists refresh token for reuse after reload\r\n */\r\nexport function createIndexedDBStorage(dbName = 'FetchGuardDB', refreshTokenKey = 'refreshToken'): RefreshTokenStorage {\r\n  const storeName = 'tokens'\r\n\r\n  const openDB = (): Promise<IDBDatabase> => {\r\n    return new Promise((resolve, reject) => {\r\n      const request = indexedDB.open(dbName, 1)\r\n      \r\n      request.onerror = () => reject(request.error)\r\n      request.onsuccess = () => resolve(request.result)\r\n      \r\n      request.onupgradeneeded = (event) => {\r\n        const db = (event.target as IDBOpenDBRequest).result\r\n        if (!db.objectStoreNames.contains(storeName)) {\r\n          const store = db.createObjectStore(storeName, { keyPath: 'key' })\r\n          store.createIndex('timestamp', 'timestamp', { unique: false })\r\n        }\r\n      }\r\n    })\r\n  }\r\n\r\n  const promisifyRequest = <T>(request: IDBRequest<T>): Promise<T> => {\r\n    return new Promise((resolve, reject) => {\r\n      request.onsuccess = () => resolve(request.result)\r\n      request.onerror = () => reject(request.error)\r\n    })\r\n  }\r\n\r\n  return {\r\n    async get() {\r\n      try {\r\n        const db = await openDB()\r\n        const transaction = db.transaction([storeName], 'readonly')\r\n        const store = transaction.objectStore(storeName)\r\n        const result = await promisifyRequest(store.get(refreshTokenKey))\r\n        return result?.value || null\r\n      } catch (error) {\r\n        console.warn('Failed to get refresh token from IndexedDB:', error)\r\n        return null\r\n      }\r\n    },\r\n    async set(token) {\r\n      try {\r\n        const db = await openDB()\r\n        const transaction = db.transaction([storeName], 'readwrite')\r\n        const store = transaction.objectStore(storeName)\r\n\r\n        if (token) {\r\n          await promisifyRequest(store.put({ key: refreshTokenKey, value: token, timestamp: Date.now() }))\r\n        } else {\r\n          await promisifyRequest(store.delete(refreshTokenKey))\r\n        }\r\n      } catch (error) {\r\n        console.warn('Failed to save refresh token to IndexedDB:', error)\r\n      }\r\n    }\r\n  }\r\n}\r\n","import type { TokenParser } from '../../types'\r\n\r\n/**\r\n * Body parser - parse token from response body (JSON)\r\n * Expects response format: { data: { accessToken, refreshToken, expiresAt?, user? } }\r\n */\r\nexport const bodyParser: TokenParser = {\r\n  async parse(response) {\r\n    const json = await response.clone().json()\r\n    return {\r\n      token: json.data.accessToken,\r\n      refreshToken: json.data.refreshToken,\r\n      expiresAt: json.data.expiresAt,\r\n      user: json.data.user\r\n    }\r\n  }\r\n}\r\n","import type { TokenParser } from '../../types'\r\n\r\n/**\r\n * Cookie parser - parse access token from response body\r\n * Expects response format: { data: { accessToken, expiresAt?, user? } }\r\n * Refresh token is automatically set by backend into httpOnly cookie\r\n */\r\nexport const cookieParser: TokenParser = {\r\n  async parse(response) {\r\n    const json = await response.clone().json()\r\n    return {\r\n      token: json.data.accessToken,\r\n      expiresAt: json.data.expiresAt,\r\n      user: json.data.user\r\n    }\r\n  }\r\n}\r\n","import type { AuthStrategy } from '../../types'\r\n\r\n/**\r\n * Cookie auth strategy - all auth operations via httpOnly cookies\r\n * Suitable for SSR and cross-domain authentication\r\n *\r\n * Refresh token is sent automatically via httpOnly cookie\r\n * Credentials are sent in request body\r\n *\r\n * Login URL can be:\r\n * - Configured once: loginUrl: 'https://api.example.com/auth/login'\r\n * - Passed per call: login(payload, 'https://...')\r\n */\r\nexport function createCookieStrategy(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): AuthStrategy {\r\n  return {\r\n    async refresh() {\r\n      return fetch(config.refreshUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async login(payload, url) {\r\n      return fetch(url || config.loginUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify(payload),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async logout(payload) {\r\n      return fetch(config.logoutUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: payload ? JSON.stringify(payload) : undefined,\r\n        credentials: 'include'\r\n      })\r\n    }\r\n  }\r\n}\r\n\r\n/**\r\n * Standard cookie strategy\r\n */\r\nexport const cookieStrategy = createCookieStrategy({\r\n  refreshUrl: '/auth/refresh',\r\n  loginUrl: '/auth/login',\r\n  logoutUrl: '/auth/logout'\r\n})\r\n","import type { AuthStrategy } from '../../types'\r\n\r\n/**\r\n * Body auth strategy - all auth operations via request body\r\n * Suitable for SPA applications\r\n *\r\n * All tokens/credentials are sent in request body\r\n *\r\n * Login URL can be:\r\n * - Configured once: loginUrl: 'https://api.example.com/auth/login'\r\n * - Passed per call: login(payload, 'https://...')\r\n */\r\nexport function createBodyStrategy(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): AuthStrategy {\r\n  return {\r\n    async refresh(refreshToken) {\r\n      if (!refreshToken) {\r\n        throw new Error('No refresh token available')\r\n      }\r\n\r\n      return fetch(config.refreshUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify({ refreshToken }),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async login(payload, url) {\r\n      return fetch(url || config.loginUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: JSON.stringify(payload),\r\n        credentials: 'include'\r\n      })\r\n    },\r\n\r\n    async logout(payload) {\r\n      return fetch(config.logoutUrl, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/json' },\r\n        body: payload ? JSON.stringify(payload) : undefined,\r\n        credentials: 'include'\r\n      })\r\n    }\r\n  }\r\n}\r\n\r\n/**\r\n * Standard body strategy\r\n */\r\nexport const bodyStrategy = createBodyStrategy({\r\n  refreshUrl: '/auth/refresh',\r\n  loginUrl: '/auth/login',\r\n  logoutUrl: '/auth/logout'\r\n})\r\n","import { createProvider } from './create-provider'\r\nimport { createIndexedDBStorage } from './storage/indexeddb'\r\nimport { bodyParser } from './parser/body'\r\nimport { cookieParser } from './parser/cookie'\r\nimport { createCookieStrategy } from './strategy/cookie'\r\nimport { createBodyStrategy } from './strategy/body'\r\nimport type { TokenProvider } from '../types'\r\n\r\n/**\r\n * Cookie Provider - uses httpOnly cookies\r\n * Suitable for SSR and cross-domain authentication\r\n *\r\n * Access token: Worker memory\r\n * Refresh token: httpOnly cookie (managed by backend)\r\n */\r\nexport function createCookieProvider(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n}): TokenProvider {\r\n  return createProvider({\r\n    refreshStorage: undefined,\r\n    parser: cookieParser,\r\n    strategy: createCookieStrategy(config)\r\n  })\r\n}\r\n\r\n/**\r\n * Body Provider - refresh token in response body, persisted to IndexedDB\r\n * Suitable for SPA applications\r\n *\r\n * Access token: Worker memory\r\n * Refresh token: IndexedDB (persists across reload)\r\n */\r\nexport function createBodyProvider(config: {\r\n  refreshUrl: string\r\n  loginUrl: string\r\n  logoutUrl: string\r\n  refreshTokenKey?: string\r\n}): TokenProvider {\r\n  return createProvider({\r\n    refreshStorage: createIndexedDBStorage('FetchGuardDB', config.refreshTokenKey || 'refreshToken'),\r\n    parser: bodyParser,\r\n    strategy: createBodyStrategy(config)\r\n  })\r\n}\r\n","import { createCookieProvider, createBodyProvider } from './presets'\r\nimport type { TokenProvider, ProviderPresetConfig } from '../types'\r\n\r\n/**\r\n * Build provider from preset config\r\n * This is called in worker when receiving SETUP message\r\n */\r\nexport function buildProviderFromPreset(config: ProviderPresetConfig): TokenProvider {\r\n  switch (config.type) {\r\n    case 'cookie-auth':\r\n      return createCookieProvider({\r\n        refreshUrl: config.refreshUrl,\r\n        loginUrl: config.loginUrl,\r\n        logoutUrl: config.logoutUrl\r\n      })\r\n\r\n    case 'body-auth':\r\n      return createBodyProvider({\r\n        refreshUrl: config.refreshUrl,\r\n        loginUrl: config.loginUrl,\r\n        logoutUrl: config.logoutUrl,\r\n        refreshTokenKey: config.refreshTokenKey\r\n      })\r\n\r\n    default:\r\n      throw new Error(`Unknown provider type: ${String((config as { type?: unknown }).type)}`)\r\n  }\r\n}\r\n","import type { SerializedFormData, SerializedFormDataEntry, SerializedFile } from '../types'\r\n\r\n/**\r\n * Serialize FormData for transfer over postMessage\r\n * Inspired by api-worker.js:484-518\r\n *\r\n * FormData cannot be cloned via postMessage, so we need to serialize it first\r\n * Files are converted to ArrayBuffer -> number[] for transfer\r\n */\r\nexport async function serializeFormData(formData: FormData): Promise<SerializedFormData> {\r\n  const entries: Array<[string, SerializedFormDataEntry]> = []\r\n\r\n  // Use forEach instead of entries() for better TS compatibility\r\n  formData.forEach((value, key) => {\r\n    // Push async operations to promises array for parallel processing\r\n    if (value instanceof File) {\r\n      // We need to handle this synchronously in forEach, so we'll collect promises\r\n      // and await them all at once\r\n    } else {\r\n      entries.push([key, String(value)])\r\n    }\r\n  })\r\n\r\n  // Handle File entries separately with Promise.all\r\n  const filePromises: Promise<void>[] = []\r\n  formData.forEach((value, key) => {\r\n    if (value instanceof File) {\r\n      const promise = (async () => {\r\n        const arrayBuffer = await value.arrayBuffer()\r\n        const uint8Array = new Uint8Array(arrayBuffer)\r\n        const serializedFile: SerializedFile = {\r\n          name: value.name,\r\n          type: value.type,\r\n          data: Array.from(uint8Array) // Convert to number array\r\n        }\r\n        entries.push([key, serializedFile])\r\n      })()\r\n      filePromises.push(promise)\r\n    }\r\n  })\r\n\r\n  await Promise.all(filePromises)\r\n\r\n  return {\r\n    _type: 'FormData',\r\n    entries\r\n  }\r\n}\r\n\r\n/**\r\n * Deserialize SerializedFormData back to FormData in worker\r\n * Reconstructs File objects from serialized data\r\n */\r\nexport function deserializeFormData(serialized: SerializedFormData): FormData {\r\n  const formData = new FormData()\r\n\r\n  for (const [key, value] of serialized.entries) {\r\n    if (typeof value === 'string') {\r\n      formData.append(key, value)\r\n    } else {\r\n      // Reconstruct File from SerializedFile\r\n      const uint8Array = new Uint8Array(value.data)\r\n      const file = new File([uint8Array], value.name, { type: value.type })\r\n      formData.append(key, file)\r\n    }\r\n  }\r\n\r\n  return formData\r\n}\r\n\r\n/**\r\n * Check if body is FormData\r\n */\r\nexport function isFormData(body: unknown): body is FormData {\r\n  return body instanceof FormData\r\n}\r\n\r\n/**\r\n * Check if serialized body is SerializedFormData\r\n */\r\nexport function isSerializedFormData(body: unknown): body is SerializedFormData {\r\n  return body !== null && typeof body === 'object' && (body as SerializedFormData)._type === 'FormData'\r\n}\r\n","/**\r\n * Binary data utilities for Worker\r\n * Handles ArrayBuffer <-> Base64 conversion for binary responses\r\n */\r\n\r\n/**\r\n * Convert ArrayBuffer to base64 string\r\n * Used in worker to encode binary responses for postMessage transfer\r\n */\r\nexport function arrayBufferToBase64(buffer: ArrayBuffer): string {\r\n  const bytes = new Uint8Array(buffer)\r\n  let binary = ''\r\n  for (let i = 0; i < bytes.length; i++) {\r\n    binary += String.fromCharCode(bytes[i])\r\n  }\r\n  return btoa(binary)\r\n}\r\n\r\n/**\r\n * Convert base64 string to ArrayBuffer\r\n * Used in client to decode binary responses\r\n */\r\nexport function base64ToArrayBuffer(base64: string): ArrayBuffer {\r\n  const binary = atob(base64)\r\n  const bytes = new Uint8Array(binary.length)\r\n  for (let i = 0; i < binary.length; i++) {\r\n    bytes[i] = binary.charCodeAt(i)\r\n  }\r\n  return bytes.buffer\r\n}\r\n\r\n/**\r\n * Check if content type is binary (should be base64 encoded)\r\n * Returns true for images, PDFs, videos, etc.\r\n */\r\nexport function isBinaryContentType(contentType: string): boolean {\r\n  const normalized = contentType.toLowerCase()\r\n\r\n  // Text types - NOT binary\r\n  if (normalized.includes('text/')) return false\r\n  if (normalized.includes('json')) return false\r\n  if (normalized.includes('xml')) return false\r\n  if (normalized.includes('javascript')) return false\r\n  if (normalized.includes('ecmascript')) return false\r\n  if (normalized.includes('html')) return false\r\n\r\n  // Everything else is considered binary\r\n  return true\r\n}\r\n"],"mappings":";AAIA,SAAS,MAAAA,KAAI,OAAAC,YAAwB;;;ACwE9B,IAAM,MAAM,OAAO,OAAO;AAAA;AAAA,EAE/B,OAAO;AAAA,EACP,OAAO;AAAA,EACP,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,MAAM;AAAA;AAAA,EAGN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,KAAK;AAAA,EACL,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,cAAc;AAAA,EACd,aAAa;AACf,CAAC;;;ACtFM,IAAM,2BAA2B;;;ACHxC,SAAS,aAAa,2BAA2B;AAK1C,IAAM,gBAAgB;AAAA,EAC3B,YAAY,YAAY,cAAc,oBAAoB,GAAG;AAAA,EAC7D,gBAAgB,YAAY,mBAAmB,wBAAwB,GAAG;AAAA,EAC1E,aAAa,YAAY,sBAAsB,0BAA0B,GAAG;AAC9E;AAKO,IAAM,aAAa;AAAA,EACxB,gBAAgB,YAAY,cAAc,0BAA0B,GAAG;AAAA,EACvE,oBAAoB,YAAY,wBAAwB,iCAAiC,GAAG;AAAA,EAC5F,YAAY,YAAY,eAAe,yBAAyB,GAAG;AACrE;AAKO,IAAM,aAAa;AAAA,EACxB,oBAAoB,YAAY,wBAAwB,wBAAwB,GAAG;AAAA,EACnF,aAAa,YAAY,gBAAgB,gBAAgB,GAAG;AAAA,EAC5D,cAAc,YAAY,iBAAiB,iBAAiB,GAAG;AAAA,EAC/D,kBAAkB,YAAY,qBAAqB,6BAA6B,GAAG;AACrF;AAKO,IAAM,eAAe;AAAA,EAC1B,YAAY,oBAAoB,sBAAsB,6BAA6B,GAAG;AACxF;AAKO,IAAM,gBAAgB;AAAA;AAAA,EAE3B,cAAc,YAAY,iBAAiB,iBAAiB,GAAG;AAAA,EAC/D,WAAW,YAAY,qBAAqB,yBAAyB,GAAG;AAAA;AAAA,EAGxE,WAAW,oBAAoB,cAAc,uBAAuB,GAAG;AAAA;AAAA,EAGvE,qBAAqB,YAAY,yBAAyB,iCAAiC,GAAG;AAChG;;;AC1CA,SAAS,KAAK,SAAoC;AAChD;AAAC,EAAC,KAAoC,YAAY,OAAO;AAC3D;AAKO,SAAS,UAAU,IAAY,QAA+B;AACnE,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS,EAAE,QAAQ,OAAO,UAAU,CAAC,EAAE;AAAA,EACzC,CAAQ;AACV;AAKO,SAAS,gBAAgB,IAAY,UAA6B;AACvE,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS;AAAA,EACX,CAAQ;AACV;AAKO,SAAS,eAAe,IAAY,OAAe,QAAuB;AAC/E,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS,EAAE,OAAO,OAAO;AAAA,EAC3B,CAAQ;AACV;AAKO,SAAS,YAAkB;AAChC,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV,IAAI,OAAO,KAAK,IAAI,CAAC;AAAA,EACvB,CAAQ;AACV;AAKO,SAAS,eAAe,OAAqB;AAClD,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV,IAAI,OAAO,KAAK,IAAI,CAAC;AAAA,IACrB,SAAS,EAAE,MAAM;AAAA,EACnB,CAAQ;AACV;AAKO,SAAS,SAAS,IAAY,WAAyB;AAC5D,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS,EAAE,UAAU;AAAA,EACvB,CAAQ;AACV;AAKO,SAAS,qBAAqB,YAA8B;AACjE,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV,IAAI,OAAO,KAAK,IAAI,CAAC;AAAA,IACrB,SAAS;AAAA,EACX,CAAQ;AACV;AAKO,SAAS,mBAAmB,IAAY,YAA8B;AAC3E,OAAK;AAAA,IACH,MAAM,IAAI;AAAA,IACV;AAAA,IACA,SAAS;AAAA,EACX,CAAQ;AACV;;;ACjGA,IAAM,WAAW,oBAAI,IAA2B;AAoBzC,SAAS,YAAY,MAA6B;AACvD,QAAM,WAAW,SAAS,IAAI,IAAI;AAClC,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,aAAa,IAAI,qCAAqC,MAAM,KAAK,SAAS,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;AAAA,EAChH;AACA,SAAO;AACT;;;ACxBA,SAAS,IAAI,WAAwB;AAsC9B,SAAS,eAAe,QAAuC;AACpE,QAAM,eAAyE;AAAA,IAC7E,MAAM,aAAa,cAA6B;AAC9C,UAAI,sBAAsB;AAC1B,UAAI,wBAAwB,QAAQ,OAAO,gBAAgB;AACzD,8BAAsB,MAAM,OAAO,eAAe,IAAI;AAAA,MACxD;AAEA,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,QAAQ,mBAAmB;AAElE,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI,WAAW,mBAAmB,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAClF;AAEA,cAAM,YAAY,MAAM,OAAO,OAAO,MAAM,QAAQ;AACpD,YAAI,CAAC,UAAU,OAAO;AACpB,iBAAO,IAAI,WAAW,mBAAmB,EAAE,SAAS,8BAA8B,CAAC,CAAC;AAAA,QACtF;AAEA,YAAI,OAAO,kBAAkB,UAAU,cAAc;AACnD,gBAAM,OAAO,eAAe,IAAI,UAAU,YAAY;AAAA,QACxD;AAEA,eAAO,GAAG,SAAS;AAAA,MACrB,SAAS,OAAO;AACd,eAAO,IAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,MAAM,SAAkB,KAAc;AAC1C,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,MAAM,SAAS,GAAG;AAEzD,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI,WAAW,YAAY,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAC3E;AAEA,cAAM,YAAY,MAAM,OAAO,OAAO,MAAM,QAAQ;AACpD,YAAI,CAAC,UAAU,OAAO;AACpB,iBAAO,IAAI,WAAW,YAAY,EAAE,SAAS,8BAA8B,CAAC,CAAC;AAAA,QAC/E;AAEA,YAAI,OAAO,kBAAkB,UAAU,cAAc;AACnD,gBAAM,OAAO,eAAe,IAAI,UAAU,YAAY;AAAA,QACxD;AAEA,eAAO,GAAG,SAAS;AAAA,MACrB,SAAS,OAAO;AACd,eAAO,IAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,IAEA,MAAM,OAAO,SAAmB;AAC9B,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,SAAS,OAAO,OAAO;AAErD,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,IAAI,WAAW,aAAa,EAAE,SAAS,QAAQ,SAAS,MAAM,GAAG,CAAC,CAAC;AAAA,QAC5E;AAEA,YAAI,OAAO,gBAAgB;AACzB,gBAAM,OAAO,eAAe,IAAI,IAAI;AAAA,QACtC;AAEA,eAAO,GAAG;AAAA,UACR,OAAO;AAAA,UACP,cAAc;AAAA,UACd,WAAW;AAAA,UACX,MAAM;AAAA;AAAA,QACR,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,IAAI,cAAc,aAAa,EAAE,SAAS,OAAO,KAAK,EAAE,CAAC,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AAGA,MAAI,OAAO,eAAe;AACxB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,GAAG,OAAO;AAAA,IACZ;AAAA,EACF;AAEA,SAAO;AACT;;;AC5HO,SAAS,uBAAuB,SAAS,gBAAgB,kBAAkB,gBAAqC;AACrH,QAAM,YAAY;AAElB,QAAM,SAAS,MAA4B;AACzC,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAU,UAAU,KAAK,QAAQ,CAAC;AAExC,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAC5C,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAEhD,cAAQ,kBAAkB,CAAC,UAAU;AACnC,cAAM,KAAM,MAAM,OAA4B;AAC9C,YAAI,CAAC,GAAG,iBAAiB,SAAS,SAAS,GAAG;AAC5C,gBAAM,QAAQ,GAAG,kBAAkB,WAAW,EAAE,SAAS,MAAM,CAAC;AAChE,gBAAM,YAAY,aAAa,aAAa,EAAE,QAAQ,MAAM,CAAC;AAAA,QAC/D;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,CAAI,YAAuC;AAClE,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,cAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAChD,cAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,IAC9C,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM,MAAM;AACV,UAAI;AACF,cAAM,KAAK,MAAM,OAAO;AACxB,cAAM,cAAc,GAAG,YAAY,CAAC,SAAS,GAAG,UAAU;AAC1D,cAAM,QAAQ,YAAY,YAAY,SAAS;AAC/C,cAAM,SAAS,MAAM,iBAAiB,MAAM,IAAI,eAAe,CAAC;AAChE,eAAO,QAAQ,SAAS;AAAA,MAC1B,SAAS,OAAO;AACd,gBAAQ,KAAK,+CAA+C,KAAK;AACjE,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,MAAM,IAAI,OAAO;AACf,UAAI;AACF,cAAM,KAAK,MAAM,OAAO;AACxB,cAAM,cAAc,GAAG,YAAY,CAAC,SAAS,GAAG,WAAW;AAC3D,cAAM,QAAQ,YAAY,YAAY,SAAS;AAE/C,YAAI,OAAO;AACT,gBAAM,iBAAiB,MAAM,IAAI,EAAE,KAAK,iBAAiB,OAAO,OAAO,WAAW,KAAK,IAAI,EAAE,CAAC,CAAC;AAAA,QACjG,OAAO;AACL,gBAAM,iBAAiB,MAAM,OAAO,eAAe,CAAC;AAAA,QACtD;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,KAAK,8CAA8C,KAAK;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;;;ACzDO,IAAM,aAA0B;AAAA,EACrC,MAAM,MAAM,UAAU;AACpB,UAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,WAAO;AAAA,MACL,OAAO,KAAK,KAAK;AAAA,MACjB,cAAc,KAAK,KAAK;AAAA,MACxB,WAAW,KAAK,KAAK;AAAA,MACrB,MAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACTO,IAAM,eAA4B;AAAA,EACvC,MAAM,MAAM,UAAU;AACpB,UAAM,OAAO,MAAM,SAAS,MAAM,EAAE,KAAK;AACzC,WAAO;AAAA,MACL,OAAO,KAAK,KAAK;AAAA,MACjB,WAAW,KAAK,KAAK;AAAA,MACrB,MAAM,KAAK,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACHO,SAAS,qBAAqB,QAIpB;AACf,SAAO;AAAA,IACL,MAAM,UAAU;AACd,aAAO,MAAM,OAAO,YAAY;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,MAAM,SAAS,KAAK;AACxB,aAAO,MAAM,OAAO,OAAO,UAAU;AAAA,QACnC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,SAAS;AACpB,aAAO,MAAM,OAAO,WAAW;AAAA,QAC7B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,UAAU,KAAK,UAAU,OAAO,IAAI;AAAA,QAC1C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAKO,IAAM,iBAAiB,qBAAqB;AAAA,EACjD,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb,CAAC;;;AC1CM,SAAS,mBAAmB,QAIlB;AACf,SAAO;AAAA,IACL,MAAM,QAAQ,cAAc;AAC1B,UAAI,CAAC,cAAc;AACjB,cAAM,IAAI,MAAM,4BAA4B;AAAA,MAC9C;AAEA,aAAO,MAAM,OAAO,YAAY;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,aAAa,CAAC;AAAA,QACrC,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,MAAM,SAAS,KAAK;AACxB,aAAO,MAAM,OAAO,OAAO,UAAU;AAAA,QACnC,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,OAAO;AAAA,QAC5B,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,OAAO,SAAS;AACpB,aAAO,MAAM,OAAO,WAAW;AAAA,QAC7B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,UAAU,KAAK,UAAU,OAAO,IAAI;AAAA,QAC1C,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAKO,IAAM,eAAe,mBAAmB;AAAA,EAC7C,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb,CAAC;;;AC3CM,SAAS,qBAAqB,QAInB;AAChB,SAAO,eAAe;AAAA,IACpB,gBAAgB;AAAA,IAChB,QAAQ;AAAA,IACR,UAAU,qBAAqB,MAAM;AAAA,EACvC,CAAC;AACH;AASO,SAAS,mBAAmB,QAKjB;AAChB,SAAO,eAAe;AAAA,IACpB,gBAAgB,uBAAuB,gBAAgB,OAAO,mBAAmB,cAAc;AAAA,IAC/F,QAAQ;AAAA,IACR,UAAU,mBAAmB,MAAM;AAAA,EACrC,CAAC;AACH;;;ACtCO,SAAS,wBAAwB,QAA6C;AACnF,UAAQ,OAAO,MAAM;AAAA,IACnB,KAAK;AACH,aAAO,qBAAqB;AAAA,QAC1B,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,MACpB,CAAC;AAAA,IAEH,KAAK;AACH,aAAO,mBAAmB;AAAA,QACxB,YAAY,OAAO;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,iBAAiB,OAAO;AAAA,MAC1B,CAAC;AAAA,IAEH;AACE,YAAM,IAAI,MAAM,0BAA0B,OAAQ,OAA8B,IAAI,CAAC,EAAE;AAAA,EAC3F;AACF;;;AC0BO,SAAS,oBAAoB,YAA0C;AAC5E,QAAM,WAAW,IAAI,SAAS;AAE9B,aAAW,CAAC,KAAK,KAAK,KAAK,WAAW,SAAS;AAC7C,QAAI,OAAO,UAAU,UAAU;AAC7B,eAAS,OAAO,KAAK,KAAK;AAAA,IAC5B,OAAO;AAEL,YAAM,aAAa,IAAI,WAAW,MAAM,IAAI;AAC5C,YAAM,OAAO,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,MAAM,EAAE,MAAM,MAAM,KAAK,CAAC;AACpE,eAAS,OAAO,KAAK,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAYO,SAAS,qBAAqB,MAA2C;AAC9E,SAAO,SAAS,QAAQ,OAAO,SAAS,YAAa,KAA4B,UAAU;AAC7F;;;ACzEO,SAAS,oBAAoB,QAA6B;AAC/D,QAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,cAAU,OAAO,aAAa,MAAM,CAAC,CAAC;AAAA,EACxC;AACA,SAAO,KAAK,MAAM;AACpB;AAmBO,SAAS,oBAAoB,aAA8B;AAChE,QAAM,aAAa,YAAY,YAAY;AAG3C,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,MAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AACxC,MAAI,WAAW,SAAS,KAAK,EAAG,QAAO;AACvC,MAAI,WAAW,SAAS,YAAY,EAAG,QAAO;AAC9C,MAAI,WAAW,SAAS,YAAY,EAAG,QAAO;AAC9C,MAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AAGxC,SAAO;AACT;;;CfxBE,WAAY;AACZ,MAAI,SAA8B;AAClC,MAAI,WAAiC;AACrC,MAAI,cAA6B;AACjC,MAAI,eAA8B;AAClC,MAAI,YAA2B;AAC/B,MAAI;AACJ,QAAM,qBAAqB,oBAAI,IAA6B;AAC5D,MAAI,iBAAiD;AASvD,iBAAe,mBAA4C;AAEzD,QAAI,CAAC,UAAU;AACb,aAAOC,KAAI,WAAW,eAAe,CAAC;AAAA,IACxC;AAEA,QAAI,eAAe,WAAW;AAC5B,YAAM,iBAAiB,QAAQ,kBAAkB;AACjD,YAAM,WAAW,YAAY,KAAK,IAAI;AACtC,UAAI,WAAW,gBAAgB;AAC7B,eAAOC,IAAG,WAAW;AAAA,MACvB;AAAA,IACF;AAEA,QAAI,gBAAgB;AAClB,YAAM,SAAS,MAAM;AACrB,aAAO;AAAA,IACT;AAEA,sBAAkB,YAAqC;AACrD,UAAI;AAEF,YAAI,CAAC,UAAU;AACb,iBAAOD,KAAI,WAAW,eAAe,CAAC;AAAA,QACxC;AAEA,cAAM,WAAW,MAAM,SAAS,aAAa,YAAY;AAEzD,YAAI,SAAS,QAAQ,GAAG;AACtB,wBAAc,EAAE,OAAO,MAAM,WAAW,MAAM,MAAM,QAAW,cAAc,OAAU,CAAC;AACxF,iBAAOA,KAAI,SAAS,MAAM;AAAA,QAC5B;AAEA,cAAM,YAAY,SAAS;AAC3B,YAAI,CAAC,WAAW;AACd,iBAAOA,KAAI,WAAW,mBAAmB,EAAE,SAAS,oCAAoC,CAAC,CAAC;AAAA,QAC5F;AAEA,sBAAc,SAAS;AAGvB,YAAI,CAAC,aAAa;AAChB,iBAAOA,KAAI,WAAW,mBAAmB,EAAE,SAAS,qCAAqC,CAAC,CAAC;AAAA,QAC7F;AAEA,eAAOC,IAAG,WAAW;AAAA,MACvB,UAAE;AACA,yBAAiB;AAAA,MACnB;AAAA,IACF,GAAG;AAEH,WAAO;AAAA,EACT;AAKA,WAAS,eAAe,KAAsB;AAC5C,QAAI,CAAC,QAAQ,gBAAgB,QAAQ;AACnC,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,YAAM,WAAW,OAAO;AACxB,YAAM,OAAO,OAAO;AAEpB,iBAAW,SAAS,OAAO,gBAAgB;AACzC,cAAM,MAAM,MAAM,YAAY,GAAG;AACjC,cAAM,UAAU,MAAM,MAAM,MAAM,QAAQ,GAAG,MAAM;AACnD,cAAM,UAAU,UAAU,MAAM,MAAM,GAAG,GAAG,IAAI;AAChD,cAAM,YAAY,UAAU,MAAM,MAAM,MAAM,CAAC,IAAI;AACnD,cAAM,aAAa,QAAQ,WAAW,IAAI;AAC1C,cAAM,OAAO,aAAa,QAAQ,MAAM,CAAC,IAAI;AAE7C,cAAM,gBAAgB,aACjB,aAAa,QAAQ,SAAS,SAAS,MAAM,IAAI,IACjD,aAAa;AAElB,YAAI,CAAC,cAAe;AAEpB,YAAI,SAAS;AACX,cAAI,SAAS,UAAW,QAAO;AAC/B;AAAA,QACF;AACA,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAKA,iBAAe,eAAe,KAAa,UAAiC,CAAC,GAAiC;AAC5G,QAAI,CAAC,QAAQ;AACX,aAAOD,KAAI,WAAW,eAAe,CAAC;AAAA,IACxC;AAEA,QAAI,CAAC,eAAe,GAAG,GAAG;AACxB,aAAOA,KAAI,aAAa,WAAW,EAAE,IAAI,CAAC,CAAC;AAAA,IAC7C;AAEA,UAAM,eAAe,QAAQ,iBAAiB;AAC9C,UAAM,iBAAiB,QAAQ,mBAAmB;AAElD,UAAM,EAAE,cAAc,GAAG,gBAAgB,IAAI,GAAG,aAAa,IAAI;AAGjE,QAAI,aAAa,QAAQ,qBAAqB,aAAa,IAAI,GAAG;AAChE,mBAAa,OAAO,oBAAoB,aAAa,IAAI;AAAA,IAC3D;AAEA,UAAM,UAAkC;AAAA,MACtC,GAAI,aAAa,WAAqC,CAAC;AAAA,IACzD;AAGA,QAAI,CAAC,QAAQ,cAAc,KAAK,CAAC,QAAQ,cAAc,KAAK,aAAa,MAAM;AAC7E,UAAI,OAAO,aAAa,SAAS,YAAY,EAAE,aAAa,gBAAgB,aAAa,EAAE,aAAa,gBAAgB,kBAAkB;AACxI,gBAAQ,cAAc,IAAI;AAAA,MAC5B;AAAA,IACF;AAEA,QAAI,cAAc;AAChB,YAAM,WAAW,MAAM,iBAAiB;AACxC,UAAI,SAAS,QAAQ,GAAG;AAEtB,eAAOA,KAAI,SAAS,MAAM;AAAA,MAC5B;AAEA,YAAM,QAAQ,SAAS;AACvB,UAAI,OAAO;AACT,gBAAQ,eAAe,IAAI,UAAU,KAAK;AAAA,MAC5C;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK,EAAE,GAAG,cAAc,SAAS,aAAa,UAAU,CAAC;AAAA,IAClF,SAAS,GAAG;AACV,YAAM,UAAW,KAAM,EAAU,SAAS;AAC1C,aAAO,UACHA,KAAI,cAAc,UAAU,CAAC,IAC7BA,KAAI,cAAc,aAAa,EAAE,SAAS,OAAO,CAAC,EAAE,CAAC,CAAC;AAAA,IAC5D;AAGA,UAAM,cAAc,SAAS,QAAQ,IAAI,cAAc,KAAK;AAG5D,UAAM,WAAW,oBAAoB,WAAW;AAGhD,QAAI;AACJ,QAAI;AACF,UAAI,UAAU;AACZ,cAAM,SAAS,MAAM,SAAS,YAAY;AAC1C,eAAO,oBAAoB,MAAM;AAAA,MACnC,OAAO;AACL,eAAO,MAAM,SAAS,KAAK;AAAA,MAC7B;AAAA,IACF,SAAS,GAAG;AAEV,aAAOA,KAAI,cAAc,oBAAoB,EAAE,SAAS,OAAO,CAAC,EAAE,CAAC,CAAC;AAAA,IACtE;AAGA,UAAM,kBAA0C,CAAC;AACjD,QAAI,gBAAgB;AAClB,eAAS,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACvC,wBAAgB,GAAG,IAAI;AAAA,MACzB,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,EAAE,MAAM,QAAQ,SAAS,QAAQ,aAAa,SAAS,gBAAgB;AAC5F,WAAOC,IAAG,YAAY;AAAA,EACxB;AAgBA,WAAS,cAAc,WAA+G,YAAqB,MAAM;AAE/J,QAAI,WAAW,WAAW;AACxB,oBAAc,UAAU,SAAS;AAAA,IACnC;AAEA,QAAI,eAAe,WAAW;AAC5B,kBAAY,UAAU,aAAa;AAAA,IACrC;AAEA,QAAI,UAAU,WAAW;AACvB,oBAAc,UAAU;AAAA,IAC1B;AAEA,QAAI,kBAAkB,WAAW;AAC/B,qBAAe,UAAU,gBAAgB;AAAA,IAC3C;AAEA,QAAI,WAAW;AACb,sBAAgB;AAAA,IAClB;AAAA,EACF;AAMA,WAAS,kBAAkB;AACzB,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,gBAAgB,gBAAgB,QAAQ,gBAAgB,OAAO,cAAc,QAAQ,YAAY;AACvG,yBAAqB;AAAA,MACnB;AAAA,MACA;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAMA,OAAK,YAAY,OAAO,UAA6C;AACnE,UAAM,OAAO,MAAM;AACnB,YAAQ,KAAK,MAAM;AAAA,MACjB,KAAK,IAAI,OAAO;AACd,YAAI;AACF,gBAAM,UAAU,KAAK;AACrB,mBAAS,QAAQ;AAEjB,gBAAM,iBAAiB,QAAQ;AAG/B,cAAI,OAAO,mBAAmB,UAAU;AAEtC,uBAAW,YAAY,cAAc;AAAA,UACvC,WAAW,kBAAkB,OAAO,mBAAmB,YAAY,UAAU,gBAAgB;AAE3F,uBAAW,wBAAwB,cAAsC;AAAA,UAC3E,OAAO;AACL,2BAAe,yBAAyB;AACxC;AAAA,UACF;AAGA,cAAI,CAAC,UAAU;AACb,2BAAe,mDAAmD;AAClE;AAAA,UACF;AAEA,oBAAU;AAAA,QACZ,SAAS,OAAO;AACd,gBAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,kBAAQ,MAAM,qCAAqC,YAAY;AAC/D,yBAAe,YAAY;AAAA,QAC7B;AACA;AAAA,MACF;AAAA,MAEA,KAAK,IAAI,OAAO;AACd,cAAM,EAAE,GAAG,IAAI;AACf,YAAI;AACF,gBAAM,EAAE,KAAK,QAAQ,IAAI,KAAK;AAC9B,gBAAM,aAAa,IAAI,gBAAgB;AACvC,6BAAmB,IAAI,IAAI,UAAU;AACrC,gBAAM,SAAsB,EAAE,GAAI,WAAW,CAAC,GAAI,QAAQ,WAAW,OAAO;AAC5E,gBAAM,SAAS,MAAM,eAAe,KAAK,MAAM;AAE/C,cAAI,OAAO,aAAa,GAAG;AACzB,4BAAgB,IAAI,OAAO,IAAI;AAAA,UACjC,OAAO;AAEL,kBAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,kBAAM,UAAU,OAAO,WAAW;AAClC,kBAAM,SAAS,OAAO;AACtB,2BAAe,IAAI,SAAS,MAAM;AAAA,UACpC;AAEA,6BAAmB,OAAO,EAAE;AAAA,QAC9B,SAAS,OAAO;AACd,6BAAmB,OAAO,EAAE;AAC5B,yBAAe,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAS;AAAA,QACtF;AACA;AAAA,MACF;AAAA,MAEA,KAAK,IAAI,WAAW;AAClB,cAAM,EAAE,IAAI,QAAQ,IAAI;AACxB,YAAI;AACF,gBAAM,EAAE,QAAQ,MAAM,UAAU,IAAI;AACpC,gBAAM,kBAAkB,aAAa;AAErC,cAAI,CAAC,UAAU;AACb,sBAAU,IAAID,KAAI,WAAW,eAAe,CAAC,CAAC;AAC9C;AAAA,UACF;AAEA,cAAI,OAAO,SAAS,MAAM,MAAM,YAAY;AAC1C,sBAAU,IAAIA,KAAI,cAAc,WAAW,EAAE,SAAS,WAAW,MAAM,0BAA0B,CAAC,CAAC,CAAC;AACpG;AAAA,UACF;AAEA,gBAAM,SAAS,MAAM,SAAS,MAAM,EAAE,GAAG,IAAI;AAC7C,cAAI,OAAO,QAAQ,GAAG;AACpB,sBAAU,IAAI,MAAM;AACpB;AAAA,UACF;AAEA,gBAAM,YAAY,OAAO;AACzB,cAAI,CAAC,WAAW;AACd,sBAAU,IAAIA,KAAI,cAAc,WAAW,EAAE,SAAS,oCAAoC,CAAC,CAAC,CAAC;AAC7F;AAAA,UACF;AAGA,wBAAc,WAAW,eAAe;AAGxC,gBAAM,MAAM,KAAK,IAAI;AACrB,gBAAM,gBACJ,gBAAgB,QAAQ,gBAAgB,OAAO,cAAc,QAAQ,YAAY;AAEnF,6BAAmB,IAAI;AAAA,YACrB;AAAA,YACA;AAAA,YACA,MAAM;AAAA,UACR,CAAC;AAAA,QACH,SAAS,OAAO;AACd,oBAAU,IAAIA,KAAI,cAAc,WAAW,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;AAAA,QAClH;AACA;AAAA,MACF;AAAA,MAEA,KAAK,IAAI,QAAQ;AACf,YAAI;AACF,gBAAM,EAAE,GAAG,IAAI;AACf,gBAAM,aAAa,mBAAmB,IAAI,EAAE;AAC5C,cAAI,YAAY;AACd,uBAAW,MAAM;AACjB,+BAAmB,OAAO,EAAE;AAAA,UAC9B;AAAA,QACF,SAAS,OAAO;AAAA,QAEhB;AACA;AAAA,MACF;AAAA,MAEA,KAAK,IAAI,MAAM;AACb,cAAM,EAAE,GAAG,IAAI;AACf,YAAI;AACF,gBAAM,KAAK,KAAK,SAAS,aAAa,KAAK,IAAI;AAC/C,mBAAS,IAAI,EAAE;AAAA,QACjB,SAAS,OAAO;AACd,oBAAU,IAAIA,KAAI,cAAc,WAAW,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;AAAA,QAClH;AACA;AAAA,MACF;AAAA,MAEA,SAAS;AACP,cAAM,UAAe;AACrB,kBAAU,QAAQ,IAAIA,KAAI,cAAc,eAAe,EAAE,SAAS,yBAAyB,OAAO,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAAA,MACvH;AAAA,IACF;AAAA,EACF;AAEA,GAAG;","names":["ok","err","err","ok"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fetchguard",
-  "version": "1.5.2",
+  "version": "1.5.4",
   "description": "A secure fetch API library that runs in Web Workers with automatic token management",
   "type": "module",
   "main": "dist/index.js",