npm - rivet-design - Versions diffs - 0.9.9 → 0.10.0 - Mend

rivet-design 0.9.9 → 0.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (97) hide show

package/dist/config/flags.d.ts +3 -0
package/dist/config/flags.d.ts.map +1 -1
package/dist/config/flags.js +1 -0
package/dist/config/flags.js.map +1 -1
package/dist/config/proxy.d.ts +1 -0
package/dist/config/proxy.d.ts.map +1 -1
package/dist/config/proxy.js +9 -1
package/dist/config/proxy.js.map +1 -1
package/dist/demo/sessionRuntime.js +1 -1
package/dist/demo/sessionRuntime.js.map +1 -1
package/dist/hosted-demo.js +4 -1
package/dist/hosted-demo.js.map +1 -1
package/dist/index.d.ts.map +1 -1
package/dist/index.js +4 -1
package/dist/index.js.map +1 -1
package/dist/mcp/agent-variants/contracts.d.ts +50 -49
package/dist/mcp/agent-variants/contracts.d.ts.map +1 -1
package/dist/mcp/agent-variants/contracts.js.map +1 -1
package/dist/mcp/agent-variants/createZeroToOneTool.d.ts +4 -4
package/dist/mcp/agent-variants/createZeroToOneTool.js +1 -1
package/dist/mcp/agent-variants/createZeroToOneTool.js.map +1 -1
package/dist/mcp/agent-variants/tools.d.ts.map +1 -1
package/dist/mcp/agent-variants/tools.js +36 -14
package/dist/mcp/agent-variants/tools.js.map +1 -1
package/dist/mcp/auth/tools.d.ts +36 -0
package/dist/mcp/auth/tools.d.ts.map +1 -0
package/dist/mcp/auth/tools.js +164 -0
package/dist/mcp/auth/tools.js.map +1 -0
package/dist/mcp/server.d.ts.map +1 -1
package/dist/mcp/server.js +23 -9
package/dist/mcp/server.js.map +1 -1
package/dist/prototype-host.d.ts +2 -0
package/dist/prototype-host.d.ts.map +1 -0
package/dist/prototype-host.js +56 -0
package/dist/prototype-host.js.map +1 -0
package/dist/routes/agentVariants.d.ts +2 -1
package/dist/routes/agentVariants.d.ts.map +1 -1
package/dist/routes/agentVariants.js +104 -1
package/dist/routes/agentVariants.js.map +1 -1
package/dist/routes/prototypeHost.d.ts +13 -0
package/dist/routes/prototypeHost.d.ts.map +1 -0
package/dist/routes/prototypeHost.js +207 -0
package/dist/routes/prototypeHost.js.map +1 -0
package/dist/server.d.ts.map +1 -1
package/dist/server.js +8 -2
package/dist/server.js.map +1 -1
package/dist/services/AuthService.d.ts +27 -1
package/dist/services/AuthService.d.ts.map +1 -1
package/dist/services/AuthService.js +302 -8
package/dist/services/AuthService.js.map +1 -1
package/dist/services/BundleStore.d.ts +36 -0
package/dist/services/BundleStore.d.ts.map +1 -0
package/dist/services/BundleStore.js +102 -0
package/dist/services/BundleStore.js.map +1 -0
package/dist/services/ConfigManager.d.ts +20 -2
package/dist/services/ConfigManager.d.ts.map +1 -1
package/dist/services/ConfigManager.js +46 -2
package/dist/services/ConfigManager.js.map +1 -1
package/dist/services/HostedDemoAuthSessionService.d.ts +2 -0
package/dist/services/HostedDemoAuthSessionService.d.ts.map +1 -1
package/dist/services/HostedDemoAuthSessionService.js.map +1 -1
package/dist/services/HostedDemoAuthSessionStore.d.ts +1 -0
package/dist/services/HostedDemoAuthSessionStore.d.ts.map +1 -1
package/dist/services/HostedDemoAuthSessionStore.js.map +1 -1
package/dist/services/PrototypeBuildService.d.ts +38 -0
package/dist/services/PrototypeBuildService.d.ts.map +1 -0
package/dist/services/PrototypeBuildService.js +165 -0
package/dist/services/PrototypeBuildService.js.map +1 -0
package/dist/services/PrototypeDeployService.d.ts +34 -0
package/dist/services/PrototypeDeployService.d.ts.map +1 -0
package/dist/services/PrototypeDeployService.js +115 -0
package/dist/services/PrototypeDeployService.js.map +1 -0
package/dist/services/RequestAuthContext.d.ts +1 -0
package/dist/services/RequestAuthContext.d.ts.map +1 -1
package/dist/services/RequestAuthContext.js.map +1 -1
package/dist/services/SupabaseAuthService.d.ts +25 -0
package/dist/services/SupabaseAuthService.d.ts.map +1 -0
package/dist/services/SupabaseAuthService.js +56 -0
package/dist/services/SupabaseAuthService.js.map +1 -0
package/dist/services/TelemetryService.d.ts +26 -8
package/dist/services/TelemetryService.d.ts.map +1 -1
package/dist/services/TelemetryService.js +42 -20
package/dist/services/TelemetryService.js.map +1 -1
package/dist/services/VariantHistoryService.d.ts +23 -0
package/dist/services/VariantHistoryService.d.ts.map +1 -1
package/dist/services/VariantHistoryService.js +37 -1
package/dist/services/VariantHistoryService.js.map +1 -1
package/dist/services/accessTokenRefresh.d.ts +6 -0
package/dist/services/accessTokenRefresh.d.ts.map +1 -1
package/dist/services/accessTokenRefresh.js +27 -1
package/dist/services/accessTokenRefresh.js.map +1 -1
package/dist/utils/skills/claude-skill.js +1 -1
package/dist/utils/skills/cursor-rules.js +1 -1
package/dist/utils/skills/shared-variants-protocol.js +5 -5
package/package.json +3 -2
package/src/ui/dist/assets/{main-DXMHtjqM.js → main-CIJUZXe8.js} +120 -120
package/src/ui/dist/index.html +1 -1

package/dist/services/AuthService.js CHANGED Viewed

@@ -36,7 +36,160 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthService = void 0;
 const logger_1 = require("../utils/logger");
 const ConfigManager_1 = require("./ConfigManager");
+const http_1 = require("http");
+const accessTokenRefresh_1 = require("./accessTokenRefresh");
 const log = (0, logger_1.createLogger)('AuthService');
+const LOOPBACK_HOST = '127.0.0.1';
+const LOOPBACK_PORT = 0;
+const CALLBACK_COMPLETE_PATH = '/complete';
+const OAUTH_CALLBACK_TIMEOUT_MS = 120_000;
+const MAX_CALLBACK_BODY_BYTES = 64 * 1024;
+/** Sends a small text response from the loopback OAuth callback server. */
+const sendTextResponse = (response, statusCode, body) => {
+    response.statusCode = statusCode;
+    response.setHeader('Content-Type', 'text/html; charset=utf-8');
+    response.end(body);
+};
+/** Reads a bounded request body from the local OAuth callback server. */
+const readRequestBody = (request) => {
+    return new Promise((resolve, reject) => {
+        let body = '';
+        request.on('data', (chunk) => {
+            body += chunk.toString('utf8');
+            if (Buffer.byteLength(body) > MAX_CALLBACK_BODY_BYTES) {
+                reject(new Error('OAuth callback payload too large'));
+                request.destroy();
+            }
+        });
+        request.on('end', () => resolve(body));
+        request.on('error', reject);
+    });
+};
+/** Serves the browser page that forwards OAuth hash tokens to localhost. */
+const getLoopbackCallbackHtml = () => {
+    return `<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Rivet authentication</title>
+    <style>
+      body {
+        margin: 0;
+        min-height: 100vh;
+        display: grid;
+        place-items: center;
+        font-family: system-ui, sans-serif;
+        background: #0b0b0f;
+        color: #fff;
+      }
+      main {
+        max-width: 420px;
+        padding: 32px;
+        text-align: center;
+      }
+    </style>
+  </head>
+  <body>
+    <main>
+      <h1>Finishing Rivet sign in...</h1>
+      <p>You can return to your editor after this page completes.</p>
+    </main>
+    <script>
+      const params = new URLSearchParams(window.location.search);
+      const hash = new URLSearchParams(window.location.hash.slice(1));
+      if (window.location.hash) {
+        window.history.replaceState(
+          null,
+          document.title,
+          window.location.pathname + window.location.search
+        );
+      }
+      fetch('/complete', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+          sessionId: params.get('session'),
+          accessToken: hash.get('access_token'),
+          refreshToken: hash.get('refresh_token')
+        })
+      }).then((response) => {
+        document.querySelector('h1').textContent = response.ok
+          ? 'Rivet sign in complete'
+          : 'Rivet sign in failed';
+      }).catch(() => {
+        document.querySelector('h1').textContent = 'Rivet sign in failed';
+      });
+    </script>
+  </body>
+</html>`;
+};
+/** Creates a localhost OAuth callback endpoint for browserless MCP login. */
+const createLoopbackOAuthCallback = async () => {
+    let resolveTokens = () => { };
+    let rejectTokens = () => { };
+    let timeout = null;
+    const clearCallbackTimeout = () => {
+        if (timeout) {
+            clearTimeout(timeout);
+            timeout = null;
+        }
+    };
+    const waitForTokens = new Promise((resolve, reject) => {
+        resolveTokens = resolve;
+        rejectTokens = reject;
+        timeout = setTimeout(() => {
+            timeout = null;
+            reject(new Error('OAuth callback timed out'));
+        }, OAUTH_CALLBACK_TIMEOUT_MS);
+    });
+    const server = (0, http_1.createServer)((request, response) => {
+        const url = new URL(request.url ?? '/', `http://${LOOPBACK_HOST}`);
+        if (request.method === 'GET') {
+            sendTextResponse(response, 200, getLoopbackCallbackHtml());
+            return;
+        }
+        if (request.method !== 'POST' ||
+            url.pathname !== CALLBACK_COMPLETE_PATH) {
+            sendTextResponse(response, 404, 'Not found');
+            return;
+        }
+        void readRequestBody(request)
+            .then((body) => {
+            const payload = JSON.parse(body);
+            if (!payload.sessionId || !payload.accessToken) {
+                throw new Error('OAuth callback missing session or token');
+            }
+            clearCallbackTimeout();
+            resolveTokens({
+                sessionId: payload.sessionId,
+                accessToken: payload.accessToken,
+                refreshToken: payload.refreshToken,
+            });
+            sendTextResponse(response, 200, 'Authentication complete');
+        })
+            .catch((error) => {
+            clearCallbackTimeout();
+            rejectTokens(error instanceof Error ? error : new Error(String(error)));
+            sendTextResponse(response, 400, 'Authentication failed');
+        });
+    });
+    await new Promise((resolve) => {
+        server.listen(LOOPBACK_PORT, LOOPBACK_HOST, () => resolve());
+    });
+    const address = server.address();
+    if (!address || typeof address === 'string') {
+        throw new Error('Unable to start OAuth callback server');
+    }
+    return {
+        redirectOrigin: `http://${LOOPBACK_HOST}:${address.port}`,
+        waitForTokens,
+        close: () => new Promise((resolve) => {
+            clearCallbackTimeout();
+            server.close(() => resolve());
+        }),
+    };
+};
 /**
  * AuthService handles authentication with the Rivet proxy server
  */
@@ -77,7 +230,7 @@ class AuthService {
                 };
             }
             if (result.token && result.user?.email) {
-                this.configManager.setAuth(result.token, result.user.email, result.refreshToken);
+                this.configManager.setAuth(result.token, result.user.email, result.refreshToken, result.user.id);
                 log.info(`Signed in as ${result.user.email} (CI)`);
             }
             return result;
@@ -94,14 +247,36 @@ class AuthService {
     /**
      * Start Google OAuth flow
      * Opens browser for user to authenticate, then polls for token.
+     *
+     * Accepts either a bare `redirectOrigin` string (legacy call sites) or an
+     * options object carrying the login `source`/`editor`/`version` recorded by
+     * the proxy for analytics + login_events.
      * redirectOrigin: e.g. http://localhost:4000 or http://localhost:4000/rivet — OAuth callback redirects there with ?session= (used when Rivet runs on a dynamic port).
      */
-    async loginWithGoogle(redirectOrigin) {
+    async loginWithGoogle(optionsOrRedirectOrigin) {
+        const options = typeof optionsOrRedirectOrigin === 'string'
+            ? { redirectOrigin: optionsOrRedirectOrigin }
+            : optionsOrRedirectOrigin ?? {};
+        const requestOptions = { ...options };
+        let loopbackCallback = null;
         try {
+            if (requestOptions.source === 'mcp' && !requestOptions.redirectOrigin) {
+                loopbackCallback = await createLoopbackOAuthCallback();
+                requestOptions.redirectOrigin = loopbackCallback.redirectOrigin;
+            }
             log.info(`Requesting OAuth URL from: ${this.proxyUrl}/api/auth/google/start`);
             const body = {};
-            if (redirectOrigin) {
-                body.redirectOrigin = redirectOrigin;
+            if (requestOptions.redirectOrigin) {
+                body.redirectOrigin = requestOptions.redirectOrigin;
+            }
+            if (requestOptions.source) {
+                body.source = requestOptions.source;
+            }
+            if (requestOptions.editor) {
+                body.editor = requestOptions.editor;
+            }
+            if (requestOptions.version) {
+                body.version = requestOptions.version;
             }
             // Request OAuth URL from proxy
             const response = await fetch(`${this.proxyUrl}/api/auth/google/start`, {
@@ -127,9 +302,51 @@ class AuthService {
             log.info('Waiting for authentication...');
             // Poll for completion
             const sessionId = result.sessionId;
-            const tokenResult = await this.pollForToken(sessionId);
+            const pollSecret = result.pollSecret;
+            const completionSecret = result.completionSecret;
+            if (!sessionId || !pollSecret) {
+                return {
+                    success: false,
+                    error: 'Invalid response from server',
+                    message: 'Authentication response missing session or poll secret',
+                };
+            }
+            if (loopbackCallback) {
+                if (!completionSecret) {
+                    return {
+                        success: false,
+                        error: 'Invalid response from server',
+                        message: 'Authentication response missing completion secret',
+                    };
+                }
+                const callbackTokens = await loopbackCallback.waitForTokens;
+                if (callbackTokens.sessionId !== sessionId) {
+                    return {
+                        success: false,
+                        error: 'Invalid OAuth callback',
+                        message: 'OAuth callback session did not match login session',
+                    };
+                }
+                const completeResponse = await fetch(`${this.proxyUrl}/api/auth/google/complete`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({
+                        ...callbackTokens,
+                        completionSecret,
+                    }),
+                });
+                const completeResult = await completeResponse.json();
+                if (!completeResponse.ok || !completeResult.success) {
+                    return {
+                        success: false,
+                        error: completeResult.error || 'Authentication failed',
+                        message: completeResult.message,
+                    };
+                }
+            }
+            const tokenResult = await this.pollForToken(sessionId, pollSecret);
             if (tokenResult.success && tokenResult.token && tokenResult.user) {
-                this.configManager.setAuth(tokenResult.token, tokenResult.user.email, tokenResult.refreshToken);
+                this.configManager.setAuth(tokenResult.token, tokenResult.user.email, tokenResult.refreshToken, tokenResult.user.id);
                 log.info(`Logged in as ${tokenResult.user.email}`);
             }
             return tokenResult;
@@ -142,14 +359,24 @@ class AuthService {
                 message: error instanceof Error ? error.message : 'Unknown error occurred',
             };
         }
+        finally {
+            await loopbackCallback?.close();
+        }
     }
     /**
      * Poll the proxy server for authentication token after OAuth
      */
-    async pollForToken(sessionId, maxAttempts = 60) {
+    async pollForToken(sessionId, pollSecret, maxAttempts = 60) {
         for (let i = 0; i < maxAttempts; i++) {
             try {
-                const response = await fetch(`${this.proxyUrl}/api/auth/google/token?session=${sessionId}`);
+                const response = await fetch(`${this.proxyUrl}/api/auth/google/token`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({
+                        session: sessionId,
+                        pollSecret,
+                    }),
+                });
                 const result = await response.json();
                 if (result.success) {
                     return result;
@@ -223,6 +450,73 @@ class AuthService {
             return null;
         }
     }
+    /**
+     * Server-validates auth for per-tool MCP gating. A local token only counts as
+     * authenticated after the proxy accepts it, and rejected tokens get one
+     * refresh-and-retry attempt through `getValidatedProfile()`.
+     */
+    async ensureAuthenticated() {
+        const profile = await this.getValidatedProfile();
+        return profile !== null;
+    }
+    /**
+     * Server-validated auth check: fetch the profile, and if the token is
+     * rejected (401), refresh once and retry. Returns the profile when the user
+     * is genuinely authenticated, otherwise null. Use this instead of
+     * `isAuthenticated()` (which only checks for a token's presence) wherever a
+     * stale token must be treated as logged-out.
+     */
+    async getValidatedProfile() {
+        const token = this.configManager.getAuthToken();
+        if (!token) {
+            return null;
+        }
+        const fetchProfile = async (bearer) => {
+            const response = await fetch(`${this.proxyUrl}/api/user/profile`, {
+                method: 'GET',
+                headers: {
+                    'Content-Type': 'application/json',
+                    Authorization: `Bearer ${bearer}`,
+                },
+            });
+            if (!response.ok) {
+                return { status: response.status, profile: null };
+            }
+            const result = await response.json().catch(() => null);
+            return {
+                status: response.status,
+                profile: result?.success ? result : null,
+            };
+        };
+        try {
+            const first = await fetchProfile(token);
+            if (first.profile) {
+                return first.profile;
+            }
+            if (first.status !== 401) {
+                return null;
+            }
+            // Token rejected — try a single refresh, then retry.
+            const refreshToken = this.configManager.getRefreshToken();
+            if (!refreshToken) {
+                return null;
+            }
+            const refreshed = await (0, accessTokenRefresh_1.refreshAccessTokenViaProxy)({
+                refreshToken,
+                proxyUrl: this.proxyUrl,
+            });
+            if (!refreshed) {
+                return null;
+            }
+            this.configManager.setAuth(refreshed.token, this.configManager.getEmail() || '', refreshed.refreshToken);
+            const retry = await fetchProfile(refreshed.token);
+            return retry.profile;
+        }
+        catch (error) {
+            log.warn('Validated profile fetch error:', error);
+            return null;
+        }
+    }
     /**
      * Check if user is authenticated
      */

package/dist/services/AuthService.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"AuthService.js","sourceRoot":"","sources":["../../src/services/AuthService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA+C;AAC/C,mDAAmD;AAEnD,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;AAoCxC;;GAEG;AACH,MAAa,WAAW;IACd,QAAQ,CAAS;IACjB,aAAa,GAAG,IAAA,gCAAgB,GAAE,CAAC;IAE3C,YAAY,QAAiB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,2CAA2C,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,QAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,wBAAwB,EAAE;gBACrE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC;aACtE,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,IAAI,CAAC,oCAAoC,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC;gBACvE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;oBAChC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;iBAChC,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,sBAAsB;oBAC7C,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,aAAa,CAAC,OAAO,CACxB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,IAAI,CAAC,KAAK,EACjB,MAAM,CAAC,YAAY,CACpB,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,eAAe;gBACtB,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,cAAuB;QAC3C,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CACN,8BAA8B,IAAI,CAAC,QAAQ,wBAAwB,CACpE,CAAC;YAEF,MAAM,IAAI,GAAgC,EAAE,CAAC;YAC7C,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;YACvC,CAAC;YAED,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,wBAAwB,EAAE;gBACrE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAErC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,GAAG,CAAC,IAAI,CACN,+BAA+B,EAC/B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,CACf,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,gCAAgC;oBACvD,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC;YACJ,CAAC;YAED,wCAAwC;YACxC,MAAM,IAAI,GAAG,CAAC,wDAAa,MAAM,GAAC,CAAC,CAAC,OAAO,CAAC;YAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE3B,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAE1C,sBAAsB;YACtB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAEvD,IAAI,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;gBACjE,IAAI,CAAC,aAAa,CAAC,OAAO,CACxB,WAAW,CAAC,KAAK,EACjB,WAAW,CAAC,IAAI,CAAC,KAAK,EACtB,WAAW,CAAC,YAAY,CACzB,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC,gBAAgB,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACrD,CAAC;YAED,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,eAAe;gBACtB,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CACxB,SAAiB,EACjB,cAAsB,EAAE;QAExB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,IAAI,CAAC,QAAQ,kCAAkC,SAAS,EAAE,CAC9D,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAErC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAED,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC/C,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAED,kCAAkC;gBAClC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,0CAA0C;SACpD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;QAEhD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,kBAAkB,EAAE;oBAC9C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;qBACjC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;gBACjC,0DAA0D;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;QAEhD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,mBAAmB,EAAE;gBAChE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;IAC3C,CAAC;CACF;AApPD,kCAoPC"}
1	+ {"version":3,"file":"AuthService.js","sourceRoot":"","sources":["../../src/services/AuthService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA+C;AAC/C,mDAAmD;AACnD,+BAAqE;AACrE,6DAAkE;AAElE,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;AACxC,MAAM,aAAa,GAAG,WAAW,CAAC;AAClC,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAC3C,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAC1C,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AA0D1C,2EAA2E;AAC3E,MAAM,gBAAgB,GAAG,CACvB,QAAwB,EACxB,UAAkB,EAClB,IAAY,EACN,EAAE;IACR,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,eAAe,GAAG,CAAC,OAAwB,EAAmB,EAAE;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,uBAAuB,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACtD,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,uBAAuB,GAAG,GAAW,EAAE;IAC3C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAuDD,CAAC;AACT,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,2BAA2B,GAC/B,KAAK,IAAoC,EAAE;IACzC,IAAI,aAAa,GAA0C,GAAG,EAAE,GAAE,CAAC,CAAC;IACpE,IAAI,YAAY,GAA2B,GAAG,EAAE,GAAE,CAAC,CAAC;IACpD,IAAI,OAAO,GAA0B,IAAI,CAAC;IAC1C,MAAM,oBAAoB,GAAG,GAAG,EAAE;QAChC,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzE,aAAa,GAAG,OAAO,CAAC;QACxB,YAAY,GAAG,MAAM,CAAC;QACtB,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAChD,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,aAAa,EAAE,CAAC,CAAC;QAEnE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,IACE,OAAO,CAAC,MAAM,KAAK,MAAM;YACzB,GAAG,CAAC,QAAQ,KAAK,sBAAsB,EACvC,CAAC;YACD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,KAAK,eAAe,CAAC,OAAO,CAAC;aAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiC,CAAC;YACjE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,oBAAoB,EAAE,CAAC;YACvB,aAAa,CAAC;gBACZ,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC,CAAC;YACH,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QAC7D,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,oBAAoB,EAAE,CAAC;YACvB,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,cAAc,EAAE,UAAU,aAAa,IAAI,OAAO,CAAC,IAAI,EAAE;QACzD,aAAa;QACb,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,oBAAoB,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC,CAAC;AAEJ;;GAEG;AACH,MAAa,WAAW;IACd,QAAQ,CAAS;IACjB,aAAa,GAAG,IAAA,gCAAgB,GAAE,CAAC;IAE3C,YAAY,QAAiB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,2CAA2C,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,QAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,wBAAwB,EAAE;gBACrE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC;aACtE,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,IAAI,CAAC,oCAAoC,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC;gBACvE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;oBAChC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;iBAChC,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,sBAAsB;oBAC7C,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,aAAa,CAAC,OAAO,CACxB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,IAAI,CAAC,KAAK,EACjB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,eAAe;gBACtB,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CACnB,uBAAqD;QAErD,MAAM,OAAO,GACX,OAAO,uBAAuB,KAAK,QAAQ;YACzC,CAAC,CAAC,EAAE,cAAc,EAAE,uBAAuB,EAAE;YAC7C,CAAC,CAAC,uBAAuB,IAAI,EAAE,CAAC;QACpC,MAAM,cAAc,GAAuB,EAAE,GAAG,OAAO,EAAE,CAAC;QAC1D,IAAI,gBAAgB,GAAiC,IAAI,CAAC;QAC1D,IAAI,CAAC;YACH,IAAI,cAAc,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;gBACtE,gBAAgB,GAAG,MAAM,2BAA2B,EAAE,CAAC;gBACvD,cAAc,CAAC,cAAc,GAAG,gBAAgB,CAAC,cAAc,CAAC;YAClE,CAAC;YAED,GAAG,CAAC,IAAI,CACN,8BAA8B,IAAI,CAAC,QAAQ,wBAAwB,CACpE,CAAC;YAEF,MAAM,IAAI,GAKN,EAAE,CAAC;YACP,IAAI,cAAc,CAAC,cAAc,EAAE,CAAC;gBAClC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC,cAAc,CAAC;YACtD,CAAC;YACD,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;YACtC,CAAC;YACD,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;YACtC,CAAC;YACD,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC;YACxC,CAAC;YAED,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,wBAAwB,EAAE;gBACrE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAErC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,GAAG,CAAC,IAAI,CACN,+BAA+B,EAC/B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,CACf,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,gCAAgC;oBACvD,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC;YACJ,CAAC;YAED,wCAAwC;YACxC,MAAM,IAAI,GAAG,CAAC,wDAAa,MAAM,GAAC,CAAC,CAAC,OAAO,CAAC;YAC5C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE3B,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAE1C,sBAAsB;YACtB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACrC,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;YACjD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC9B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,8BAA8B;oBACrC,OAAO,EAAE,wDAAwD;iBAClE,CAAC;YACJ,CAAC;YAED,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACtB,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,8BAA8B;wBACrC,OAAO,EAAE,mDAAmD;qBAC7D,CAAC;gBACJ,CAAC;gBAED,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC;gBAC5D,IAAI,cAAc,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC3C,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,wBAAwB;wBAC/B,OAAO,EAAE,oDAAoD;qBAC9D,CAAC;gBACJ,CAAC;gBAED,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAClC,GAAG,IAAI,CAAC,QAAQ,2BAA2B,EAC3C;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,GAAG,cAAc;wBACjB,gBAAgB;qBACjB,CAAC;iBACH,CACF,CAAC;gBACF,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC;gBACrD,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;oBACpD,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,cAAc,CAAC,KAAK,IAAI,uBAAuB;wBACtD,OAAO,EAAE,cAAc,CAAC,OAAO;qBAChC,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAEnE,IAAI,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;gBACjE,IAAI,CAAC,aAAa,CAAC,OAAO,CACxB,WAAW,CAAC,KAAK,EACjB,WAAW,CAAC,IAAI,CAAC,KAAK,EACtB,WAAW,CAAC,YAAY,EACxB,WAAW,CAAC,IAAI,CAAC,EAAE,CACpB,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC,gBAAgB,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACrD,CAAC;YAED,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,eAAe;gBACtB,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aACpE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CACxB,SAAiB,EACjB,UAAkB,EAClB,cAAsB,EAAE;QAExB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,IAAI,CAAC,QAAQ,wBAAwB,EACxC;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,OAAO,EAAE,SAAS;wBAClB,UAAU;qBACX,CAAC;iBACH,CACF,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAErC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAED,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC/C,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAED,kCAAkC;gBAClC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,0CAA0C;SACpD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;QAEhD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,kBAAkB,EAAE;oBAC9C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;qBACjC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;gBACjC,0DAA0D;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;QAEhD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,mBAAmB,EAAE;gBAChE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACjD,OAAO,OAAO,KAAK,IAAI,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,EACxB,MAAc,EAC4C,EAAE;YAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,mBAAmB,EAAE;gBAChE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;iBAClC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACpD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACvD,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,MAAsB,CAAC,CAAC,CAAC,IAAI;aAC1D,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,OAAO,CAAC;YACvB,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,qDAAqD;YACrD,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;YAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAA,+CAA0B,EAAC;gBACjD,YAAY;gBACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,OAAO,CACxB,SAAS,CAAC,KAAK,EACf,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EACnC,SAAS,CAAC,YAAY,CACvB,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;IAC3C,CAAC;CACF;AA9ZD,kCA8ZC"}

package/dist/services/BundleStore.d.ts ADDED Viewed

@@ -0,0 +1,36 @@
+/** One file in a prototype bundle. `path` is POSIX-relative to the bundle root
+ *  (e.g. `assets/index-abc.js`); `content` is base64-encoded bytes. This is the
+ *  wire shape the client uploads and the host stores — kept dependency-free so
+ *  no tar/zip library is needed on either side. */
+export interface BundleFile {
+    path: string;
+    content: string;
+}
+export interface BundleStore {
+    /** Write a bundle's files under `deployId`. Overwrites any prior content. */
+    put(deployId: string, files: BundleFile[]): Promise<void>;
+    /** Read a single asset (already validated/normalized by the caller's router).
+     *  Returns null when the bundle or asset doesn't exist. */
+    read(deployId: string, assetPath: string): Promise<Buffer | null>;
+    /** True when a bundle directory exists for `deployId`. */
+    has(deployId: string): Promise<boolean>;
+    /** Absolute on-disk root for a bundle (used by the static-serving worker). */
+    rootFor(deployId: string): string;
+}
+/**
+ * Filesystem-backed bundle store. Extracts each uploaded file under
+ * `<root>/<deployId>/`. Single-instance only (a Render persistent disk is not
+ * shared across instances) — fine for the MVP; swap for object storage later
+ * behind this same interface.
+ */
+export declare class DiskBundleStore implements BundleStore {
+    private readonly root;
+    constructor(root: string);
+    rootFor(deployId: string): string;
+    put(deployId: string, files: BundleFile[]): Promise<void>;
+    has(deployId: string): Promise<boolean>;
+    read(deployId: string, assetPath: string): Promise<Buffer | null>;
+}
+/** Best-effort check that the configured bundle root is writable at boot. */
+export declare const ensureBundleRoot: (root: string) => Promise<void>;
+//# sourceMappingURL=BundleStore.d.ts.map

package/dist/services/BundleStore.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"BundleStore.d.ts","sourceRoot":"","sources":["../../src/services/BundleStore.ts"],"names":[],"mappings":"AAOA;;;mDAGmD;AACnD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;+DAC2D;IAC3D,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClE,0DAA0D;IAC1D,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,WAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,MAAM;IAEzC,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAI3B,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BzD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASvC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAgBxE;AAED,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,GAAU,MAAM,MAAM,KAAG,OAAO,CAAC,IAAI,CAKjE,CAAC"}

package/dist/services/BundleStore.js ADDED Viewed

@@ -0,0 +1,102 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureBundleRoot = exports.DiskBundleStore = void 0;
+const fs_1 = __importDefault(require("fs"));
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
+const logger_1 = require("../utils/logger");
+const log = (0, logger_1.createLogger)('BundleStore');
+/** Reject paths that try to escape the bundle root. Mirrors the lexical
+ *  containment + traversal checks used in VariantHistoryService. */
+const assertSafeBundlePath = (relPath) => {
+    if (relPath.length === 0 ||
+        relPath.includes('\0') ||
+        path_1.default.isAbsolute(relPath) ||
+        relPath.split(/[\\/]+/).some((part) => part === '..')) {
+        throw new Error(`BundleStore: invalid bundle path '${relPath}'`);
+    }
+};
+/**
+ * Filesystem-backed bundle store. Extracts each uploaded file under
+ * `<root>/<deployId>/`. Single-instance only (a Render persistent disk is not
+ * shared across instances) — fine for the MVP; swap for object storage later
+ * behind this same interface.
+ */
+class DiskBundleStore {
+    root;
+    constructor(root) {
+        this.root = root;
+    }
+    rootFor(deployId) {
+        return path_1.default.join(this.root, deployId);
+    }
+    async put(deployId, files) {
+        const bundleRoot = this.rootFor(deployId);
+        // Stage then atomically swap so a partially written bundle is never served.
+        const stagingRoot = `${bundleRoot}.tmp-${process.pid}-${Date.now()}`;
+        await promises_1.default.rm(stagingRoot, { recursive: true, force: true });
+        await promises_1.default.mkdir(stagingRoot, { recursive: true });
+        try {
+            for (const file of files) {
+                assertSafeBundlePath(file.path);
+                const target = path_1.default.join(stagingRoot, file.path);
+                // Defense in depth: ensure the resolved path is still inside staging.
+                const rel = path_1.default.relative(stagingRoot, target);
+                if (rel.startsWith('..') || path_1.default.isAbsolute(rel)) {
+                    throw new Error(`BundleStore: path escapes bundle root '${file.path}'`);
+                }
+                await promises_1.default.mkdir(path_1.default.dirname(target), { recursive: true });
+                await promises_1.default.writeFile(target, Buffer.from(file.content, 'base64'));
+            }
+            await promises_1.default.rm(bundleRoot, { recursive: true, force: true });
+            await promises_1.default.rename(stagingRoot, bundleRoot);
+            log.info(`Stored bundle ${deployId} (${files.length} files)`);
+        }
+        catch (err) {
+            await promises_1.default.rm(stagingRoot, { recursive: true, force: true });
+            throw err;
+        }
+    }
+    async has(deployId) {
+        try {
+            const stat = await promises_1.default.stat(this.rootFor(deployId));
+            return stat.isDirectory();
+        }
+        catch {
+            return false;
+        }
+    }
+    async read(deployId, assetPath) {
+        assertSafeBundlePath(assetPath);
+        const bundleRoot = this.rootFor(deployId);
+        const target = path_1.default.join(bundleRoot, assetPath);
+        const rel = path_1.default.relative(bundleRoot, target);
+        if (rel.startsWith('..') || path_1.default.isAbsolute(rel))
+            return null;
+        try {
+            const stat = await promises_1.default.stat(target);
+            if (!stat.isFile())
+                return null;
+            return await promises_1.default.readFile(target);
+        }
+        catch (err) {
+            const code = err.code;
+            if (code !== 'ENOENT')
+                log.warn(`read failed for ${deployId}/${assetPath}`, err);
+            return null;
+        }
+    }
+}
+exports.DiskBundleStore = DiskBundleStore;
+/** Best-effort check that the configured bundle root is writable at boot. */
+const ensureBundleRoot = async (root) => {
+    await promises_1.default.mkdir(root, { recursive: true });
+    if (!fs_1.default.existsSync(root)) {
+        throw new Error(`BundleStore: bundle root '${root}' could not be created`);
+    }
+};
+exports.ensureBundleRoot = ensureBundleRoot;
+//# sourceMappingURL=BundleStore.js.map

package/dist/services/BundleStore.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"BundleStore.js","sourceRoot":"","sources":["../../src/services/BundleStore.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,2DAAqC;AACrC,gDAAwB;AACxB,4CAA+C;AAE/C,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;AAWxC;oEACoE;AACpE,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAQ,EAAE;IACrD,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,cAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,GAAG,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC;AAcF;;;;;GAKG;AACH,MAAa,eAAe;IACG;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,OAAO,CAAC,QAAgB;QACtB,OAAO,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB,EAAE,KAAmB;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,MAAM,WAAW,GAAG,GAAG,UAAU,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrE,MAAM,kBAAU,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,kBAAU,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjD,sEAAsE;gBACtE,MAAM,GAAG,GAAG,cAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjD,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,kBAAU,CAAC,KAAK,CAAC,cAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,MAAM,kBAAU,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,kBAAU,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,MAAM,kBAAU,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,iBAAiB,QAAQ,KAAK,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,kBAAU,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,SAAiB;QAC5C,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,cAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO,MAAM,kBAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,mBAAmB,QAAQ,IAAI,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA3DD,0CA2DC;AAED,6EAA6E;AACtE,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IACpE,MAAM,kBAAU,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,wBAAwB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC,CAAC;AALW,QAAA,gBAAgB,oBAK3B"}

package/dist/services/ConfigManager.d.ts CHANGED Viewed

@@ -2,9 +2,11 @@ type RivetConfig = {
     authToken?: string;
     refreshToken?: string;
     email?: string;
+    userId?: string;
     proxyUrl?: string;
     anonymousId?: string;
     telemetryIdentifiedEmail?: string;
+    telemetryIdentifiedUserId?: string;
 };
 /**
  * ConfigManager handles local storage of Rivet configuration
@@ -23,9 +25,12 @@ declare class ConfigManager {
      */
     private saveConfig;
     /**
-     * Set authentication tokens and email
+     * Set authentication tokens, email, and (optionally) the Supabase user id.
+     * `userId` is the canonical cross-surface identity — when omitted, an
+     * existing stored value is preserved (callers that don't have it shouldn't
+     * clobber it).
      */
-    setAuth(token: string, email: string, refreshToken?: string): void;
+    setAuth(token: string, email: string, refreshToken?: string, userId?: string): void;
     /**
      * Get authentication token
      */
@@ -38,6 +43,13 @@ declare class ConfigManager {
      * Get user email
      */
     getEmail(): string | undefined;
+    /**
+     * Get the canonical Supabase user id. Falls back to the request-scoped
+     * context, then to the stored value, and finally backfills it by decoding
+     * the `sub` claim of the stored access token (no verification — we already
+     * trust the token locally). Backfill persists so we only decode once.
+     */
+    getUserId(): string | undefined;
     /**
      * Check if user is authenticated
      */
@@ -62,6 +74,12 @@ declare class ConfigManager {
      */
     getTelemetryIdentifiedEmail(): string | undefined;
     setTelemetryIdentifiedEmail(email: string): void;
+    /**
+     * Supabase user id last identified to PostHog. Used to suppress redundant
+     * alias/identify calls once analytics identity is keyed on user id.
+     */
+    getTelemetryIdentifiedUserId(): string | undefined;
+    setTelemetryIdentifiedUserId(userId: string): void;
     /**
      * Get proxy URL
      */

package/dist/services/ConfigManager.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ConfigManager.d.ts","sourceRoot":"","sources":["../../src/services/ConfigManager.ts"],"names":[],"mappings":"~~AAUA~~,KAAK,WAAW,GAAG;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC;~~CACnC~~,CAAC;AAEF;;;GAGG;AACH,cAAM,aAAa;IACjB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAc;;IAiB5B;;OAEG;IACH,OAAO,CAAC,UAAU;IAalB;;OAEG;IACH,OAAO,CAAC,UAAU;IAYlB~~;;OAEG~~;IACH,OAAO,~~CAAC~~,KAAK,EAAE,MAAM,~~EAAE~~,KAAK,EAAE,MAAM,~~EAAE~~,YAAY,CAAC,EAAE,MAAM,~~GAAG~~,IAAI;~~IAQlE~~;;OAEG;IACH,YAAY,IAAI,MAAM,GAAG,SAAS;IAQlC;;OAEG;IACH,eAAe,IAAI,MAAM,GAAG,SAAS;IAQrC;;OAEG;IACH,QAAQ,IAAI,MAAM,GAAG,SAAS;IAQ9B;;OAEG;IACH,eAAe,IAAI,OAAO;IAI1B;;OAEG;IACH,SAAS,IAAI,IAAI;~~IASjB~~;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAM9B;;;OAGG;IACH,cAAc,IAAI,MAAM;IASxB;;;;OAIG;IACH,2BAA2B,IAAI,MAAM,GAAG,SAAS;IAIjD,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAKhD;;OAEG;IACH,WAAW,IAAI,MAAM;IAIrB;;OAEG;IACH,SAAS,IAAI,WAAW;IAIxB;;OAEG;IACH,aAAa,IAAI,MAAM;CAGxB;AAKD,eAAO,MAAM,gBAAgB,QAAO,aAKnC,CAAC"}
1	+ {"version":3,"file":"ConfigManager.d.ts","sourceRoot":"","sources":["../../src/services/ConfigManager.ts"],"names":[],"mappings":"AAWA,KAAK,WAAW,GAAG;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC,CAAC;AAEF;;;GAGG;AACH,cAAM,aAAa;IACjB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAc;;IAiB5B;;OAEG;IACH,OAAO,CAAC,UAAU;IAalB;;OAEG;IACH,OAAO,CAAC,UAAU;IAYlB;;;;;OAKG;IACH,OAAO,CACL,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,GACd,IAAI;IAWP;;OAEG;IACH,YAAY,IAAI,MAAM,GAAG,SAAS;IAQlC;;OAEG;IACH,eAAe,IAAI,MAAM,GAAG,SAAS;IAQrC;;OAEG;IACH,QAAQ,IAAI,MAAM,GAAG,SAAS;IAQ9B;;;;;OAKG;IACH,SAAS,IAAI,MAAM,GAAG,SAAS;IAmB/B;;OAEG;IACH,eAAe,IAAI,OAAO;IAI1B;;OAEG;IACH,SAAS,IAAI,IAAI;IAWjB;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAM9B;;;OAGG;IACH,cAAc,IAAI,MAAM;IASxB;;;;OAIG;IACH,2BAA2B,IAAI,MAAM,GAAG,SAAS;IAIjD,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAKhD;;;OAGG;IACH,4BAA4B,IAAI,MAAM,GAAG,SAAS;IAIlD,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKlD;;OAEG;IACH,WAAW,IAAI,MAAM;IAIrB;;OAEG;IACH,SAAS,IAAI,WAAW;IAIxB;;OAEG;IACH,aAAa,IAAI,MAAM;CAGxB;AAKD,eAAO,MAAM,gBAAgB,QAAO,aAKnC,CAAC"}