tapimo 0.4.1 → 0.4.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (263) hide show
  1. package/README.md +1 -1
  2. package/dist/ApiKey.d.ts +1 -9
  3. package/dist/ApiKey.d.ts.map +1 -1
  4. package/dist/ApiKey.js +2 -3
  5. package/dist/ApiKey.js.map +1 -1
  6. package/dist/ApiKeys.d.ts +53 -27
  7. package/dist/ApiKeys.d.ts.map +1 -1
  8. package/dist/ApiKeys.js +32 -17
  9. package/dist/ApiKeys.js.map +1 -1
  10. package/dist/App.d.ts +1990 -1442
  11. package/dist/App.d.ts.map +1 -1
  12. package/dist/App.js +23 -9
  13. package/dist/App.js.map +1 -1
  14. package/dist/Assets.d.ts +10 -0
  15. package/dist/Assets.d.ts.map +1 -1
  16. package/dist/Assets.js +4 -0
  17. package/dist/Assets.js.map +1 -1
  18. package/dist/Auth.d.ts +2 -1
  19. package/dist/Auth.d.ts.map +1 -1
  20. package/dist/Auth.js +2 -1
  21. package/dist/Auth.js.map +1 -1
  22. package/dist/Scope.d.ts +40 -15
  23. package/dist/Scope.d.ts.map +1 -1
  24. package/dist/Scope.js +44 -13
  25. package/dist/Scope.js.map +1 -1
  26. package/dist/admin/App.d.ts +560 -9
  27. package/dist/admin/App.d.ts.map +1 -1
  28. package/dist/admin/App.js +38 -6
  29. package/dist/admin/App.js.map +1 -1
  30. package/dist/admin/apps/api-keys.d.ts +10 -24
  31. package/dist/admin/apps/api-keys.d.ts.map +1 -1
  32. package/dist/admin/apps/api-keys.js +10 -3
  33. package/dist/admin/apps/api-keys.js.map +1 -1
  34. package/dist/admin/apps/organizations.d.ts +833 -0
  35. package/dist/admin/apps/organizations.d.ts.map +1 -0
  36. package/dist/admin/apps/organizations.js +733 -0
  37. package/dist/admin/apps/organizations.js.map +1 -0
  38. package/dist/admin/apps/scopes.d.ts +8 -0
  39. package/dist/admin/apps/scopes.d.ts.map +1 -1
  40. package/dist/admin/apps/verified-tokens.d.ts +57 -57
  41. package/dist/admin/ui.generated.d.ts +1 -1
  42. package/dist/admin/ui.generated.d.ts.map +1 -1
  43. package/dist/admin/ui.generated.js +53 -13
  44. package/dist/admin/ui.generated.js.map +1 -1
  45. package/dist/analytics/Analytics.d.ts +10 -0
  46. package/dist/analytics/Analytics.d.ts.map +1 -1
  47. package/dist/analytics/Analytics.js +8 -0
  48. package/dist/analytics/Analytics.js.map +1 -1
  49. package/dist/analytics/tables/requestEvents.d.ts +9 -0
  50. package/dist/analytics/tables/requestEvents.d.ts.map +1 -1
  51. package/dist/analytics/tables/requestEvents.js +14 -0
  52. package/dist/analytics/tables/requestEvents.js.map +1 -1
  53. package/dist/apps/data/App.d.ts +1304 -1304
  54. package/dist/apps/data/FundingRouteProviders.d.ts +4 -22
  55. package/dist/apps/data/FundingRouteProviders.d.ts.map +1 -1
  56. package/dist/apps/data/FundingRouteProviders.js +10 -120
  57. package/dist/apps/data/FundingRouteProviders.js.map +1 -1
  58. package/dist/apps/data/routes/activities.d.ts +38 -38
  59. package/dist/apps/data/routes/addresses.d.ts +24 -24
  60. package/dist/apps/data/routes/blocks.d.ts +39 -39
  61. package/dist/apps/data/routes/fee-amm.d.ts +20 -20
  62. package/dist/apps/data/routes/funding.js +7 -7
  63. package/dist/apps/data/routes/funding.js.map +1 -1
  64. package/dist/apps/data/routes/indexer.d.ts +5 -5
  65. package/dist/apps/data/routes/tokenlist.d.ts +12 -12
  66. package/dist/apps/data/routes/verified-tokens.d.ts +36 -36
  67. package/dist/apps/management/App.d.ts +808 -267
  68. package/dist/apps/management/App.d.ts.map +1 -1
  69. package/dist/apps/management/App.js +2 -2
  70. package/dist/apps/management/Billing.d.ts +3 -0
  71. package/dist/apps/management/Billing.d.ts.map +1 -1
  72. package/dist/apps/management/Billing.js +7 -2
  73. package/dist/apps/management/Billing.js.map +1 -1
  74. package/dist/apps/management/routes/api-keys.d.ts +116 -100
  75. package/dist/apps/management/routes/api-keys.d.ts.map +1 -1
  76. package/dist/apps/management/routes/api-keys.js +41 -30
  77. package/dist/apps/management/routes/api-keys.js.map +1 -1
  78. package/dist/apps/management/routes/billing.d.ts +182 -50
  79. package/dist/apps/management/routes/billing.d.ts.map +1 -1
  80. package/dist/apps/management/routes/billing.js +14 -14
  81. package/dist/apps/management/routes/billing.js.map +1 -1
  82. package/dist/apps/management/routes/invitations.d.ts +93 -20
  83. package/dist/apps/management/routes/invitations.d.ts.map +1 -1
  84. package/dist/apps/management/routes/invitations.js +12 -15
  85. package/dist/apps/management/routes/invitations.js.map +1 -1
  86. package/dist/apps/management/routes/members.d.ts +89 -18
  87. package/dist/apps/management/routes/members.d.ts.map +1 -1
  88. package/dist/apps/management/routes/members.js +10 -10
  89. package/dist/apps/management/routes/members.js.map +1 -1
  90. package/dist/apps/management/routes/orgs.d.ts +100 -40
  91. package/dist/apps/management/routes/orgs.d.ts.map +1 -1
  92. package/dist/apps/management/routes/orgs.js +19 -19
  93. package/dist/apps/management/routes/orgs.js.map +1 -1
  94. package/dist/apps/management/routes/projects.d.ts +122 -33
  95. package/dist/apps/management/routes/projects.d.ts.map +1 -1
  96. package/dist/apps/management/routes/projects.js +12 -13
  97. package/dist/apps/management/routes/projects.js.map +1 -1
  98. package/dist/apps/management/routes/scopes.d.ts +4 -18
  99. package/dist/apps/management/routes/scopes.d.ts.map +1 -1
  100. package/dist/apps/management/routes/scopes.js +6 -7
  101. package/dist/apps/management/routes/scopes.js.map +1 -1
  102. package/dist/apps/management/routes/usage.d.ts +63 -19
  103. package/dist/apps/management/routes/usage.d.ts.map +1 -1
  104. package/dist/apps/management/routes/usage.js +9 -10
  105. package/dist/apps/management/routes/usage.js.map +1 -1
  106. package/dist/apps/mcp.d.ts.map +1 -1
  107. package/dist/apps/mcp.js +38 -4
  108. package/dist/apps/mcp.js.map +1 -1
  109. package/dist/apps/relay/App.d.ts +26 -4
  110. package/dist/apps/relay/App.d.ts.map +1 -1
  111. package/dist/apps/relay/App.js +17 -14
  112. package/dist/apps/relay/App.js.map +1 -1
  113. package/dist/cloudflare.d.ts +2 -0
  114. package/dist/cloudflare.d.ts.map +1 -1
  115. package/dist/cloudflare.js +4 -0
  116. package/dist/cloudflare.js.map +1 -1
  117. package/dist/db/Db.d.ts +5 -3
  118. package/dist/db/Db.d.ts.map +1 -1
  119. package/dist/db/Db.js +52 -0
  120. package/dist/db/Db.js.map +1 -1
  121. package/dist/db/Schema.d.ts +13 -0
  122. package/dist/db/Schema.d.ts.map +1 -1
  123. package/dist/db/Schema.js +16 -1
  124. package/dist/db/Schema.js.map +1 -1
  125. package/dist/db/tables/adminAuditLogs.d.ts +27 -0
  126. package/dist/db/tables/adminAuditLogs.d.ts.map +1 -0
  127. package/dist/db/tables/adminAuditLogs.js +19 -0
  128. package/dist/db/tables/adminAuditLogs.js.map +1 -0
  129. package/dist/db/tables/invitations.d.ts +1 -1
  130. package/dist/db/tables/invitations.d.ts.map +1 -1
  131. package/dist/db/tables/memberships.d.ts +32 -4
  132. package/dist/db/tables/memberships.d.ts.map +1 -1
  133. package/dist/db/tables/memberships.js +31 -0
  134. package/dist/db/tables/memberships.js.map +1 -1
  135. package/dist/db/tables/organizations.d.ts +43 -1
  136. package/dist/db/tables/organizations.d.ts.map +1 -1
  137. package/dist/db/tables/organizations.js +103 -0
  138. package/dist/db/tables/organizations.js.map +1 -1
  139. package/dist/db/tables/projects.d.ts +25 -0
  140. package/dist/db/tables/projects.d.ts.map +1 -1
  141. package/dist/db/tables/projects.js +22 -0
  142. package/dist/db/tables/projects.js.map +1 -1
  143. package/dist/db/tables/webhookDeliveries.d.ts +26 -0
  144. package/dist/db/tables/webhookDeliveries.d.ts.map +1 -1
  145. package/dist/db/tables/webhookDeliveries.js +37 -0
  146. package/dist/db/tables/webhookDeliveries.js.map +1 -1
  147. package/dist/internal/Auth.d.ts +46 -40
  148. package/dist/internal/Auth.d.ts.map +1 -1
  149. package/dist/internal/Auth.js +118 -69
  150. package/dist/internal/Auth.js.map +1 -1
  151. package/dist/internal/Cursor.d.ts +1 -1
  152. package/dist/internal/Cursor.d.ts.map +1 -1
  153. package/dist/internal/Cursor.js +4 -0
  154. package/dist/internal/Cursor.js.map +1 -1
  155. package/dist/internal/EdgeCache.d.ts.map +1 -1
  156. package/dist/internal/EdgeCache.js +2 -0
  157. package/dist/internal/EdgeCache.js.map +1 -1
  158. package/dist/internal/Errors.d.ts +6 -0
  159. package/dist/internal/Errors.d.ts.map +1 -0
  160. package/dist/internal/Errors.js +16 -0
  161. package/dist/internal/Errors.js.map +1 -0
  162. package/dist/internal/FundingRoutes.d.ts +15 -43
  163. package/dist/internal/FundingRoutes.d.ts.map +1 -1
  164. package/dist/internal/FundingRoutes.js +8 -17
  165. package/dist/internal/FundingRoutes.js.map +1 -1
  166. package/dist/internal/Log.d.ts +16 -1
  167. package/dist/internal/Log.d.ts.map +1 -1
  168. package/dist/internal/Log.js +5 -3
  169. package/dist/internal/Log.js.map +1 -1
  170. package/dist/internal/Store.d.ts +61 -16
  171. package/dist/internal/Store.d.ts.map +1 -1
  172. package/dist/internal/Store.js +72 -17
  173. package/dist/internal/Store.js.map +1 -1
  174. package/dist/internal/Viem.d.ts +1 -1
  175. package/dist/internal/index.d.ts +27 -0
  176. package/dist/internal/index.d.ts.map +1 -0
  177. package/dist/internal/index.js +27 -0
  178. package/dist/internal/index.js.map +1 -0
  179. package/package.json +8 -3
  180. package/src/ApiKey.ts +2 -3
  181. package/src/ApiKeys.ts +95 -17
  182. package/src/App.test.ts +104 -6
  183. package/src/App.ts +29 -9
  184. package/src/Assets.ts +8 -0
  185. package/src/Auth.test-d.ts +36 -0
  186. package/src/Auth.ts +20 -1
  187. package/src/Client.test-d.ts +17 -17
  188. package/src/Scope.test.ts +34 -0
  189. package/src/Scope.ts +53 -17
  190. package/src/admin/App.test.ts +33 -3
  191. package/src/admin/App.ts +49 -14
  192. package/src/admin/apps/api-keys.ts +10 -3
  193. package/src/admin/apps/organizations.test.ts +455 -0
  194. package/src/admin/apps/organizations.ts +953 -0
  195. package/src/admin/apps/scopes.test.ts +10 -0
  196. package/src/admin/ui/plugin.ts +1 -1
  197. package/src/admin/ui/src/components/MobileProfile.tsx +2 -0
  198. package/src/admin/ui/src/components/ThemeToggle.tsx +20 -0
  199. package/src/admin/ui/src/lib/api-keys.ts +36 -19
  200. package/src/admin/ui/src/lib/config.ts +2 -3
  201. package/src/admin/ui/src/lib/organizations.test.ts +89 -0
  202. package/src/admin/ui/src/lib/organizations.ts +262 -0
  203. package/src/admin/ui/src/lib/query-client.ts +3 -1
  204. package/src/admin/ui/src/lib/theme.ts +57 -0
  205. package/src/admin/ui/src/routeTree.gen.ts +47 -4
  206. package/src/admin/ui/src/routes/__root.tsx +18 -3
  207. package/src/admin/ui/src/routes/api-keys.tsx +52 -7
  208. package/src/admin/ui/src/routes/index.tsx +1 -1
  209. package/src/admin/ui/src/routes/organizations.tsx +158 -0
  210. package/src/admin/ui/src/routes/organizations_.$orgId.tsx +710 -0
  211. package/src/admin/ui/src/start.ts +6 -0
  212. package/src/admin/ui.generated.ts +63 -13
  213. package/src/analytics/Analytics.ts +25 -0
  214. package/src/analytics/tables/requestEvents.ts +33 -0
  215. package/src/apps/composition.test.ts +82 -2
  216. package/src/apps/data/FundingRouteProviders.test.ts +37 -93
  217. package/src/apps/data/FundingRouteProviders.ts +14 -161
  218. package/src/apps/data/routes/funding.test.ts +7 -42
  219. package/src/apps/data/routes/funding.ts +8 -8
  220. package/src/apps/data/routes/indexer.test.ts +2 -2
  221. package/src/apps/data/routes/webhooks.test.ts +2 -2
  222. package/src/apps/management/App.ts +2 -2
  223. package/src/apps/management/Billing.ts +10 -2
  224. package/src/apps/management/routes/api-keys.test.ts +137 -1
  225. package/src/apps/management/routes/api-keys.ts +63 -38
  226. package/src/apps/management/routes/billing.ts +14 -14
  227. package/src/apps/management/routes/invitations.test.ts +102 -1
  228. package/src/apps/management/routes/invitations.ts +13 -15
  229. package/src/apps/management/routes/members.ts +10 -10
  230. package/src/apps/management/routes/orgs.test.ts +78 -16
  231. package/src/apps/management/routes/orgs.ts +21 -20
  232. package/src/apps/management/routes/projects.ts +12 -13
  233. package/src/apps/management/routes/scopes.test.ts +16 -0
  234. package/src/apps/management/routes/scopes.ts +6 -7
  235. package/src/apps/management/routes/usage.ts +9 -14
  236. package/src/apps/mcp.test.ts +72 -7
  237. package/src/apps/mcp.ts +46 -4
  238. package/src/apps/relay/App.test.ts +23 -18
  239. package/src/apps/relay/App.ts +35 -14
  240. package/src/cloudflare.ts +5 -0
  241. package/src/db/Db.ts +59 -3
  242. package/src/db/Schema.ts +20 -1
  243. package/src/db/tables/adminAuditLogs.ts +47 -0
  244. package/src/db/tables/invitations.ts +1 -1
  245. package/src/db/tables/memberships.ts +59 -3
  246. package/src/db/tables/organizations.ts +148 -1
  247. package/src/db/tables/projects.ts +47 -0
  248. package/src/db/tables/webhookDeliveries.ts +83 -0
  249. package/src/internal/Auth.test.ts +571 -23
  250. package/src/internal/Auth.ts +166 -94
  251. package/src/internal/Cursor.test.ts +10 -0
  252. package/src/internal/Cursor.ts +5 -1
  253. package/src/internal/EdgeCache.test.ts +11 -0
  254. package/src/internal/EdgeCache.ts +2 -0
  255. package/src/internal/FundingRoutes.test.ts +8 -8
  256. package/src/internal/FundingRoutes.ts +25 -29
  257. package/src/internal/Log.test.ts +41 -3
  258. package/src/internal/Log.ts +23 -4
  259. package/src/internal/Store.test-d.ts +15 -0
  260. package/src/internal/Store.test.ts +153 -2
  261. package/src/internal/Store.ts +157 -41
  262. package/src/internal/index.test.ts +34 -0
  263. package/src/internal/index.ts +26 -0
@@ -1 +1 @@
1
- {"version":3,"file":"Auth.d.ts","sourceRoot":"","sources":["../../src/internal/Auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,IAAI,WAAW,EAAE,MAAM,YAAY,CAAA;AAG/E,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,MAAM,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAGvC,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AAEtC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAA;AAExC,OAAO,KAAK,WAAW,MAAM,6BAA6B,CAAA;AAG1D,OAAO,KAAK,aAAa,MAAM,+BAA+B,CAAA;AAC9D,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAA;AACpD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AAMpC,mDAAmD;AACnD,MAAM,MAAM,OAAO,GAAG;IACpB,4CAA4C;IAC5C,MAAM,CAAC,EACH;QACE;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;QACxD,oEAAoE;QACpE,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAC3E,GACD,SAAS,CAAA;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,GAAG,GAAG,SAAS,CAAA;IACrB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IAC7C,6CAA6C;IAC7C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,4GAA4G;IAC5G,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,oGAAoG;IACpG,UAAU,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CAC/C,CAAA;AAED,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IACzE,GAAG,SAAS,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,SAAS,WAAW,EAAE,GAAG,CAAC,GAC5D,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAClC,KAAK,CAAA;AAEX,wCAAwC;AACxC,MAAM,MAAM,OAAO,GAAG;IACpB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,gDAAgD;IAChD,MAAM,EAAE,oBAAoB,GAAG,mBAAmB,CAAA;IAClD,6BAA6B;IAC7B,IAAI,EAAE,KAAK,CAAA;CACZ,CAAA;AAED,wDAAwD;AACxD,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG;IAC7E,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,uDAAuD;IACvD,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,CAAA;IACnC,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;IACzC,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3B,CAAA;AAED,qDAAqD;AACrD,KAAK,GAAG,GAAG;IACT,oDAAoD;IACpD,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAAA;CAC3C,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,iFAAiF;IACjF,MAAM,CAAC,EACH;QACE,0EAA0E;QAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,uDAAuD;QACvD,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;KACzC,GACD,OAAO,GACP,SAAS,CAAA;IACb,kFAAkF;IAClF,GAAG,CAAC,EACA;QACE,4CAA4C;QAC5C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,MAAM,CAAC,EACH;QACE,sDAAsD;QACtD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;KACxC,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,yCAAyC;AACzC,MAAM,MAAM,SAAS,GACjB;IACE,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAA;IACrB,wFAAwF;IACxF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACzC,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,QAAQ,CAAA;CACf,GACD;IACE,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAA;IACV,sGAAsG;IACtG,QAAQ,EAAE;QACR,8EAA8E;QAC9E,QAAQ,EAAE,MAAM,CAAA;QAChB,iEAAiE;QACjE,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAA;IACb,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,aAAa,CAAA;CACpB,CAAA;AAEL,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,mDAAmD;IACnD,IAAI,EAAE,OAAO,CAAA;IACb,mFAAmF;IACnF,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,GAAG,SAAS,CAAA;IAC3C,0EAA0E;IAC1E,GAAG,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,CAAA;IACtC,yCAAyC;IACzC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACjC,yEAAyE;IACzE,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,WAAW,SAAS,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC;;mDAEzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,SAAS,CAAC,OAAY,GAAG,iBAAiB,CAiC5E;AAED,MAAM,CAAC,OAAO,WAAW,SAAS,CAAC;IACjC,iCAAiC;IACjC,KAAK,OAAO,GAAG;QACb,oEAAoE;QACpE,IAAI,CAAC,EAAE,WAAW,CAAC,IAAI,GAAG,SAAS,CAAA;KACpC,CAAA;CACF;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,iBAAiB,CAoBjD;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAY,OAAO,CAAA;AAE3C,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAM7C;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAWjD;AAED,kGAAkG;AAClG,wBAAgB,UAAU,CAAC,WAAW,SAAS,WAAW,EACxD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,WAAW,CAAC,MAAM,GAAG,SAAS,CAEhC;AAED,oGAAoG;AACpG,wBAAgB,GAAG,CAAC,WAAW,SAAS,WAAW,EACjD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,aAAa,CAAC,MAAM,CAItB;AAED,mGAAmG;AACnG,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,EACrD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,QAAQ,CAAC,MAAM,CAIjB;AAQD;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAY,OAAO,CAAA;AAE5C,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC1C;AAED,iGAAiG;AACjG,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;iBAwBpD;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;gFAM9C;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CACxB,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,WAAW,SAAS,WAAW,GAAG,WAAW,EAC7C,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAqEvE;AAED,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,yDAAyD;IACzD,KAAK,SAAS,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CACxD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,KAAK,GAAG,SAAS,CAAC,CAC9D,CAAA;IAED,4CAA4C;IAC5C,KAAK,OAAO,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI;QAC/C,2EAA2E;QAC3E,MAAM,CAAC,EACH;YACE;;;;;eAKG;YACH,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAA;YACjC,kFAAkF;YAClF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;YACxD,+BAA+B;YAC/B,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;SACzC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gEAAgE;QAChE,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAA;QACpC,oFAAoF;QACpF,SAAS,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;QAC3C,4EAA4E;QAC5E,MAAM,CAAC,EACH;YACE,mDAAmD;YACnD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;SACxC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gCAAgC;QAChC,SAAS,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;QAChD,yGAAyG;QACzG,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAC7B;;;;WAIG;QACH,UAAU,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAC5C,CAAA;IAED,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,6BAA6B;QAC7B,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAA;QAChC,yDAAyD;QACzD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;IAED,mDAAmD;IACnD,KAAK,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG;QAClF,yEAAyE;QACzE,MAAM,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;KACrE,CAAA;CACF;AA4FD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO;;;;;EA4N/C;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,qDAAqD;IACrD,KAAK,OAAO,GAAG;QACb,IAAI,EACA,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG;YACrC,wKAAwK;YACxK,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;SAC9B,CAAC,GACF,KAAK,GACL,SAAS,CAAA;QACb,gDAAgD;QAChD,EAAE,EAAE,EAAE,CAAC,MAAM,CAAA;QACb,4DAA4D;QAC5D,EAAE,EAAE;YAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;SAAE,GAAG,SAAS,CAAA;KACvC,CAAA;IAED,sFAAsF;IACtF,KAAK,OAAO,GACR,OAAO,GACP;QACE,2JAA2J;QAC3J,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;QAC9C,yCAAyC;QACzC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,CAAA;IAEL,yCAAyC;IACzC,KAAK,MAAM,GAAG;QACZ,uGAAuG;QACvG,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,sIAAsI;QACtI,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,mGAAmG;QACnG,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAClC,uDAAuD;QACvD,GAAG,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KACnF,CAAA;CACF;AAED,yEAAyE;AACzE,wBAAgB,MAAM,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,CAIjE;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC;;;;;;OAMG;IACH,KAAK,UAAU,CAAC,MAAM,SAAS,WAAW,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IAAI,MAAM,SAAS,MAAM,CAAC,GAC5F;SACG,IAAI,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG;aACzB,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,GACtB,IAAI,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE;SACrE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;KAChC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GACnB,KAAK,CAAA;IAET,kEAAkE;IAClE,KAAK,MAAM,CAAC,MAAM,SAAS,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,KAAK,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;IAEhG,sEAAsE;IACtE,KAAK,IAAI,CAAC,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,GAAG,MAAM,IAAI,IAAI,MAAM,IAAI,EAAE,GACvE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,GAChC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB,sEAAsE;IACtE,KAAK,OAAO,CAAC,OAAO,SAAS,MAAM,IAAI,OAAO,SAAS,IAAI,MAAM,SAAS,IAAI,MAAM,EAAE,GAClF,IAAI,SAAS,EAAE,GACf,OAAO,CAAA;CACZ;AAqKD,0DAA0D;AAC1D,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAA;IACf,sFAAsF;IACtF,GAAG,EAAE,OAAO,CAAA;IACZ,8FAA8F;IAC9F,MAAM,EAAE,OAAO,CAAA;IACf,qGAAqG;IACrG,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,CAAA;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CA+BnF;AA+BD,2EAA2E;AAC3E,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,GAAG,WAAW,EACnE,MAAM,EAAE,OAAO,CAAC,MAAM,GACrB,iBAAiB,CAAC,WAAW,CAAC,CAuMhC;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,2BAA2B;IAC3B,KAAK,MAAM,GAAG;QACZ,6BAA6B;QAC7B,MAAM,CAAC,EACH;YACE,0EAA0E;YAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC;;;;eAIG;YACH,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAA;SACtD,GACD,SAAS,CAAA;QACb,iCAAiC;QACjC,GAAG,CAAC,EACA;YACE,2BAA2B;YAC3B,MAAM,EAAE,MAAM,CAAA;SACf,GACD,SAAS,CAAA;QACb,4BAA4B;QAC5B,MAAM,CAAC,EACH;YACE,6CAA6C;YAC7C,SAAS,EAAE,SAAS,CAAC,KAAK,CAAA;SAC3B,GACD,SAAS,CAAA;QACb,sEAAsE;QACtE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAC9B,CAAA;CACF;AAsSD,sDAAsD;AACtD,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEtE;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,8EAA8E;IAC9E,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;CAC/D,CAAA;AAmED,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,SAA+B;IAC5C,YAAY,EAAE,EAAE,MAAM,EAErB;CACF"}
1
+ {"version":3,"file":"Auth.d.ts","sourceRoot":"","sources":["../../src/internal/Auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,IAAI,WAAW,EAAE,MAAM,YAAY,CAAA;AAG/E,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,MAAM,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAIvC,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AAEtC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAA;AAExC,OAAO,KAAK,WAAW,MAAM,6BAA6B,CAAA;AAG1D,OAAO,KAAK,aAAa,MAAM,+BAA+B,CAAA;AAC9D,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAA;AACpD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AAOpC,mDAAmD;AACnD,MAAM,MAAM,OAAO,GAAG;IACpB,4CAA4C;IAC5C,MAAM,CAAC,EACH;QACE;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;QACxD,oEAAoE;QACpE,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAC3E,GACD,SAAS,CAAA;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IAC5B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IAC7C,6CAA6C;IAC7C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,4GAA4G;IAC5G,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,oGAAoG;IACpG,UAAU,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CAC/C,CAAA;AAED,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IACzE,GAAG,SAAS,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,SAAS,WAAW,EAAE,GAAG,CAAC,GAC5D,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAClC,KAAK,CAAA;AAEX,wCAAwC;AACxC,MAAM,MAAM,OAAO,GAAG;IACpB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,gDAAgD;IAChD,MAAM,EAAE,oBAAoB,GAAG,mBAAmB,CAAA;IAClD,6BAA6B;IAC7B,IAAI,EAAE,KAAK,CAAA;CACZ,CAAA;AAED,iFAAiF;AACjF,MAAM,CAAC,OAAO,WAAW,GAAG,CAAC;IAC3B,iEAAiE;IACjE,KAAK,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG;QACxE,mDAAmD;QACnD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,uDAAuD;QACvD,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,CAAA;QACnC,gDAAgD;QAChD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;QACzC,4DAA4D;QAC5D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,CAAA;CACF;AAED,qDAAqD;AACrD,KAAK,UAAU,GAAG;IAChB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,6DAA6D;IAC7D,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,GAAG,iBAAiB,CAAA;CACjD,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,iFAAiF;IACjF,MAAM,CAAC,EACH;QACE,0EAA0E;QAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,uDAAuD;QACvD,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;KACzC,GACD,OAAO,GACP,SAAS,CAAA;IACb,2FAA2F;IAC3F,GAAG,CAAC,EACA;QACE,+EAA+E;QAC/E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,qDAAqD;QACrD,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,GAAG,SAAS,CAAA;KAClC,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,MAAM,CAAC,EACH;QACE,sDAAsD;QACtD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;KACxC,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,yCAAyC;AACzC,MAAM,MAAM,SAAS,GACjB;IACE,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAA;IACrB,wFAAwF;IACxF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACzC,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,QAAQ,CAAA;CACf,GACD;IACE,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAA;IACV,sGAAsG;IACtG,QAAQ,EAAE;QACR,8EAA8E;QAC9E,QAAQ,EAAE,MAAM,CAAA;QAChB,iEAAiE;QACjE,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAA;IACb,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,aAAa,CAAA;CACpB,CAAA;AAEL,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,mDAAmD;IACnD,IAAI,EAAE,OAAO,CAAA;IACb,yHAAyH;IACzH,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,GAAG,SAAS,CAAA;IAC3C,mGAAmG;IACnG,GAAG,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,CAAA;IACtC,yCAAyC;IACzC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACjC,yEAAyE;IACzE,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,WAAW,SAAS,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC;;mDAEzF;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,SAAS,CAAC,OAAY,GAAG,iBAAiB,CAuC5E;AAED,MAAM,CAAC,OAAO,WAAW,SAAS,CAAC;IACjC,iCAAiC;IACjC,KAAK,OAAO,GAAG;QACb,kDAAkD;QAClD,IAAI,CAAC,EAAE,WAAW,CAAC,IAAI,GAAG,SAAS,CAAA;KACpC,CAAA;CACF;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,iBAAiB,CA0CjD;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAY,OAAO,CAAA;AAE3C,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAM7C;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAWjD;AAED,+HAA+H;AAC/H,wBAAgB,UAAU,CAAC,WAAW,SAAS,WAAW,EACxD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,WAAW,CAAC,MAAM,GAAG,SAAS,CAEhC;AAED,gHAAgH;AAChH,wBAAgB,GAAG,CAAC,WAAW,SAAS,WAAW,EACjD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,aAAa,CAAC,MAAM,CAKtB;AAED,mGAAmG;AACnG,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,EACrD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,QAAQ,CAAC,MAAM,CAIjB;AAQD;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAY,OAAO,CAAA;AAE5C,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC1C;AAED,iGAAiG;AACjG,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;iBAwBpD;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;gFAM9C;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CACxB,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,WAAW,SAAS,WAAW,GAAG,WAAW,EAC7C,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAuFvE;AAED,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,yDAAyD;IACzD,KAAK,SAAS,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CACxD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,KAAK,GAAG,SAAS,CAAC,CAC9D,CAAA;IAED,4CAA4C;IAC5C,KAAK,OAAO,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI;QAC/C,2EAA2E;QAC3E,MAAM,CAAC,EACH;YACE;;;;;eAKG;YACH,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAA;YACjC,kFAAkF;YAClF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;YACxD,+BAA+B;YAC/B,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;SACzC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gEAAgE;QAChE,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAA;QACpC,oFAAoF;QACpF,SAAS,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;QAC3C,4EAA4E;QAC5E,MAAM,CAAC,EACH;YACE,mDAAmD;YACnD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;SACxC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gCAAgC;QAChC,SAAS,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;QAChD,8DAA8D;QAC9D,YAAY,CAAC,EAAE,KAAK,CAAC,OAAO,GAAG,SAAS,CAAA;QACxC,yGAAyG;QACzG,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAC7B;;;;WAIG;QACH,UAAU,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAC5C,CAAA;IAED,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,6BAA6B;QAC7B,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAA;QAChC,yDAAyD;QACzD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;IAED,mDAAmD;IACnD,KAAK,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG;QAClF,2EAA2E;QAC3E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,0EAA0E;QAC1E,OAAO,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;KACvE,CAAA;CACF;AA4FD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO;;;;;EAgO/C;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,qDAAqD;IACrD,KAAK,OAAO,GAAG;QACb,IAAI,EACA,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAC,GAAG;YACtD,wKAAwK;YACxK,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;SAC9B,CAAC,GACF,KAAK,GACL,SAAS,CAAA;QACb,gDAAgD;QAChD,EAAE,EAAE,EAAE,CAAC,MAAM,CAAA;QACb,4DAA4D;QAC5D,EAAE,EAAE;YAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;SAAE,GAAG,SAAS,CAAA;QACtC,8DAA8D;QAC9D,YAAY,EAAE,KAAK,CAAC,OAAO,CAAA;KAC5B,CAAA;IAED,sFAAsF;IACtF,KAAK,OAAO,GACR,OAAO,GACP;QACE,2JAA2J;QAC3J,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;QAC9C,yCAAyC;QACzC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,CAAA;IAEL,yCAAyC;IACzC,KAAK,MAAM,GAAG;QACZ,uGAAuG;QACvG,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,sIAAsI;QACtI,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,mGAAmG;QACnG,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAClC,uDAAuD;QACvD,GAAG,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KACnF,CAAA;CACF;AAED,yEAAyE;AACzE,wBAAgB,MAAM,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,CAIjE;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC;;;;;;OAMG;IACH,KAAK,UAAU,CAAC,MAAM,SAAS,WAAW,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IAAI,MAAM,SAAS,MAAM,CAAC,GAC5F;SACG,IAAI,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG;aACzB,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,GACtB,IAAI,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE;SACrE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;KAChC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GACnB,KAAK,CAAA;IAET,kEAAkE;IAClE,KAAK,MAAM,CAAC,MAAM,SAAS,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,KAAK,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;IAEhG,sEAAsE;IACtE,KAAK,IAAI,CAAC,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,GAAG,MAAM,IAAI,IAAI,MAAM,IAAI,EAAE,GACvE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,GAChC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB,sEAAsE;IACtE,KAAK,OAAO,CAAC,OAAO,SAAS,MAAM,IAAI,OAAO,SAAS,IAAI,MAAM,SAAS,IAAI,MAAM,EAAE,GAClF,IAAI,SAAS,EAAE,GACf,OAAO,CAAA;CACZ;AAwKD,0DAA0D;AAC1D,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAA;IACf,sFAAsF;IACtF,GAAG,EAAE,OAAO,CAAA;IACZ,8FAA8F;IAC9F,MAAM,EAAE,OAAO,CAAA;IACf,qGAAqG;IACrG,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,CAAA;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CA+BnF;AA+BD,2EAA2E;AAC3E,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,GAAG,WAAW,EACnE,MAAM,EAAE,OAAO,CAAC,MAAM,GACrB,iBAAiB,CAAC,WAAW,CAAC,CA+MhC;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,2BAA2B;IAC3B,KAAK,MAAM,GAAG;QACZ,6BAA6B;QAC7B,MAAM,CAAC,EACH;YACE,0EAA0E;YAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC;;;;eAIG;YACH,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAA;SACtD,GACD,SAAS,CAAA;QACb,iCAAiC;QACjC,GAAG,CAAC,EACA;YACE,+EAA+E;YAC/E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC,oCAAoC;YACpC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAA;SACrB,GACD,SAAS,CAAA;QACb,4BAA4B;QAC5B,MAAM,CAAC,EACH;YACE,6CAA6C;YAC7C,SAAS,EAAE,SAAS,CAAC,KAAK,CAAA;SAC3B,GACD,SAAS,CAAA;QACb,sEAAsE;QACtE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAC9B,CAAA;CACF;AAwSD,sDAAsD;AACtD,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEtE;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,8EAA8E;IAC9E,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;CAC/D,CAAA;AAmED,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,SAA+B;IAC5C,YAAY,EAAE,EAAE,MAAM,EAErB;CACF"}
@@ -6,6 +6,7 @@ import { findTargetHandler } from 'hono/utils/handler';
6
6
  import { decodeJwt } from 'jose';
7
7
  import { Credential } from 'mppx';
8
8
  import { Mppx, tempo } from 'mppx/hono';
9
+ import { Addresses } from 'viem/tempo';
9
10
  import * as z from 'zod/mini';
10
11
  import * as ApiKey from '../ApiKey.js';
11
12
  import * as ApiKeys from '../ApiKeys.js';
@@ -23,18 +24,13 @@ import * as Scope from '../Scope.js';
23
24
  import * as Users from '../db/tables/users.js';
24
25
  import * as Viem from './Viem.js';
25
26
  const policySymbol = Symbol('tempo-api.auth.policy');
27
+ const defaultMppRateLimit = { perMinute: 100 };
26
28
  /** Reads the authenticated principal from a Hono context. */
27
29
  export function getPrincipal(c) {
28
30
  return c.get('principal') ?? null;
29
31
  }
30
32
  /**
31
- * Guards org-scoped routes (`:orgId`). Sessions reach only organizations they
32
- * are members of; the super admin reaches any. Missing or foreign
33
- * organizations return `404`, so foreign org ids are indistinguishable from
34
- * absent ones; a member below the required role gets `403` (the resource is
35
- * visible to them, the action is not). The resolved organization and
36
- * membership land on context — read them with {@link org} and
37
- * {@link membership}.
33
+ * Guards `:orgId` routes and resolves the organization. Sessions require membership, API keys require ownership, and the super admin bypasses ownership.
38
34
  */
39
35
  export function ensureOrg(options = {}) {
40
36
  const { role: minimum = 'member' } = options;
@@ -50,13 +46,17 @@ export function ensureOrg(options = {}) {
50
46
  if (!orgId)
51
47
  return notFound();
52
48
  const principal = getPrincipal(c);
53
- if (principal?.type !== 'session' && principal?.type !== 'super_admin')
49
+ if (principal?.type !== 'api_key' &&
50
+ principal?.type !== 'session' &&
51
+ principal?.type !== 'super_admin')
52
+ return notFound();
53
+ if (principal.type === 'api_key' && principal.orgId !== orgId)
54
54
  return notFound();
55
55
  const db = Db.get(contextDb(c));
56
56
  const record = await Organizations.get(db, orgId);
57
57
  if (!record)
58
58
  return notFound();
59
- if (principal.type !== 'super_admin') {
59
+ if (principal.type === 'session') {
60
60
  const member = await Memberships.get(db, orgId, principal.id);
61
61
  if (!member)
62
62
  return notFound();
@@ -74,10 +74,7 @@ export function ensureOrg(options = {}) {
74
74
  });
75
75
  }
76
76
  /**
77
- * Guards project-scoped routes (`:projectId`) nested under {@link ensureOrg},
78
- * which must run first. Projects resolve only within the scoped organization;
79
- * missing or cross-org projects return `404`. The resolved project lands on
80
- * context — read it with {@link project}.
77
+ * Guards `:projectId` routes and resolves the project. Flat routes authorize against its organization; nested routes preserve the scope from {@link ensureOrg}.
81
78
  */
82
79
  export function ensureProject() {
83
80
  // Typed loosely (like {@link policy}) so route chains keep their inferred
@@ -91,12 +88,35 @@ export function ensureProject() {
91
88
  const projectId = c.req.param('projectId');
92
89
  if (!projectId)
93
90
  return notFound();
91
+ const principal = getPrincipal(c);
92
+ if (principal?.type !== 'api_key' &&
93
+ principal?.type !== 'session' &&
94
+ principal?.type !== 'super_admin')
95
+ return notFound();
96
+ const db = Db.get(contextDb(c));
97
+ const record = await Projects.get(db, projectId);
98
+ if (!record)
99
+ return notFound();
94
100
  const scoped = c.get('org');
95
- if (!scoped)
101
+ if (scoped) {
102
+ if (record.orgId !== scoped.id)
103
+ return notFound();
104
+ c.set('project', record);
105
+ await next();
106
+ return undefined;
107
+ }
108
+ if (principal.type === 'api_key' && principal.orgId !== record.orgId)
96
109
  return notFound();
97
- const record = await Projects.get(Db.get(contextDb(c)), projectId);
98
- if (!record || record.orgId !== scoped.id)
110
+ const organization = await Organizations.get(db, record.orgId);
111
+ if (!organization)
99
112
  return notFound();
113
+ if (principal.type === 'session') {
114
+ const member = await Memberships.get(db, record.orgId, principal.id);
115
+ if (!member)
116
+ return notFound();
117
+ c.set('membership', member);
118
+ }
119
+ c.set('org', organization);
100
120
  c.set('project', record);
101
121
  await next();
102
122
  return undefined;
@@ -118,7 +138,7 @@ export function ensureOrgError(c) {
118
138
  }
119
139
  /** Typed project-scope error response for Hono client inference. Never reached at runtime. */
120
140
  export function ensureProjectError(c) {
121
- // Project routes run the org scope first, so either not-found can surface.
141
+ // Nested project routes run the org scope first, so either not-found can surface.
122
142
  const code = c.req.header('tempo-narrow-scope-code') === 'organization_not_found'
123
143
  ? 'organization_not_found'
124
144
  : 'project_not_found';
@@ -128,22 +148,22 @@ export function ensureProjectError(c) {
128
148
  status: 404,
129
149
  });
130
150
  }
131
- /** Reads the caller's membership resolved by {@link ensureOrg}; `undefined` for `super_admin`. */
151
+ /** Reads the caller's membership resolved by the organization or project guard; `undefined` for API keys and `super_admin`. */
132
152
  export function membership(c) {
133
153
  return c.get('membership');
134
154
  }
135
- /** Reads the organization resolved by {@link ensureOrg}; throws when the middleware did not run. */
155
+ /** Reads the organization resolved by the organization or project guard; throws when neither middleware ran. */
136
156
  export function org(c) {
137
157
  const record = c.get('org');
138
158
  if (!record)
139
- throw new Error('`orgScope` middleware must run before reading the organization');
159
+ throw new Error('`ensureOrg` or `ensureProject` must run before reading the organization');
140
160
  return record;
141
161
  }
142
162
  /** Reads the project resolved by {@link ensureProject}; throws when the middleware did not run. */
143
163
  export function project(c) {
144
164
  const record = c.get('project');
145
165
  if (!record)
146
- throw new Error('`projectScope` middleware must run before reading the project');
166
+ throw new Error('`ensureProject` must run before reading the project');
147
167
  return record;
148
168
  }
149
169
  // Reads the app's database source from request context (set by `App.create`
@@ -226,7 +246,7 @@ export function paidAccessError(c) {
226
246
  }
227
247
  /** Creates auth middleware for protected OpenAPI routes. */
228
248
  export function middleware(options) {
229
- const { charge = {}, ...mpp } = options.mpp === false ? {} : (options.mpp ?? {});
249
+ const { rateLimit: mppRateLimit = defaultMppRateLimit, session: session_ = {}, ...mpp } = options.mpp === false ? {} : (options.mpp ?? {});
230
250
  const defaults = laneDefaults(options);
231
251
  // Default-deny: no lanes open until a route grants them via `policy`.
232
252
  // Otherwise the `super_admin` principal bypasses lane checks entirely.
@@ -241,7 +261,9 @@ export function middleware(options) {
241
261
  const resolve = (() => {
242
262
  const uncached = (c, token) => {
243
263
  const kv = contextKv(c);
244
- return kv ? ApiKeys.resolve(kv.store, token) : Promise.resolve(null);
264
+ return kv
265
+ ? ApiKeys.resolve(kv.store, token, { scopeCatalog: options.scopeCatalog })
266
+ : Promise.resolve(null);
245
267
  };
246
268
  if (options.apiKey === false || options.apiKey?.cache === false)
247
269
  return uncached;
@@ -263,11 +285,23 @@ export function middleware(options) {
263
285
  ...(options.mpp === false
264
286
  ? {}
265
287
  : {
266
- mpp: Mppx.create({
267
- ...mpp,
268
- methods: [tempo.charge({ amount: '0.001', ...charge })],
269
- secretKey: mpp.secretKey ?? crypto.randomUUID(),
270
- }),
288
+ mpp: {
289
+ rateLimit: mppRateLimit,
290
+ session: Mppx.create({
291
+ ...mpp,
292
+ // Defaults only; global `session` options may override, including
293
+ // enabling same-route HEAD bootstrap.
294
+ methods: [
295
+ tempo.session({
296
+ amount: '0.0001',
297
+ bootstrap: false,
298
+ currency: Addresses.pathUsd,
299
+ unitType: 'request',
300
+ ...session_,
301
+ }),
302
+ ],
303
+ }).session,
304
+ },
271
305
  }),
272
306
  rateLimit: RateLimit.memory(options.rateLimit),
273
307
  ...(options.session ? { session: options.session } : {}),
@@ -356,7 +390,7 @@ function handlerError(description) {
356
390
  * disables both.
357
391
  */
358
392
  export function install(options) {
359
- const { db, kv } = options;
393
+ const { db, kv, scopeCatalog } = options;
360
394
  const { session: options_session, ...options_middleware } = options.auth === false ? {} : (options.auth ?? {});
361
395
  if (options_session && !kv)
362
396
  throw new Error('`auth.session` requires the `kv` state store: sessions and sign-in challenges persist there.'); // prettier-ignore
@@ -545,7 +579,11 @@ export function install(options) {
545
579
  })();
546
580
  const middleware_ = options.auth === false
547
581
  ? undefined
548
- : middleware({ ...options_middleware, ...(app ? { session: app.session } : {}) });
582
+ : middleware({
583
+ ...options_middleware,
584
+ ...(app ? { session: app.session } : {}),
585
+ scopeCatalog,
586
+ });
549
587
  return { app, middleware: middleware_ };
550
588
  }
551
589
  /** Creates route middleware that contributes an auth policy override. */
@@ -570,7 +608,7 @@ function laneDefaults(options) {
570
608
  // catalog scopes via `Auth.policy`.
571
609
  scopes: apiKey?.scopes ?? [Scope.wildcard],
572
610
  },
573
- mpp: { charge: {} },
611
+ mpp: { session: {} },
574
612
  public: { rateLimit: public_?.rateLimit ?? { perMinute: 60 } },
575
613
  session: true,
576
614
  };
@@ -593,8 +631,8 @@ function resolvePolicy(base, defaults, overrides, description) {
593
631
  // The OpenAPI summary/description rides along as the payment-challenge
594
632
  // description. It is metadata, not a policy override, so it only applies when
595
633
  // the paid lane is actually enabled and has no explicit description already.
596
- if (mpp && description !== undefined && mpp.charge.description === undefined)
597
- mpp = { charge: { ...mpp.charge, description } };
634
+ if (mpp && description !== undefined && mpp.session.description === undefined)
635
+ mpp = { ...mpp, session: { ...mpp.session, description } };
598
636
  // A lane-less policy stays enforced for super admin; only an explicit
599
637
  // `false` override opts a route out of auth entirely.
600
638
  return {
@@ -625,7 +663,10 @@ function resolveMppLane(current, override, default_) {
625
663
  if (override === true)
626
664
  return current ?? default_;
627
665
  const base = current ?? default_;
628
- return { charge: { ...base.charge, ...override.charge } };
666
+ return {
667
+ rateLimit: override.rateLimit ?? base.rateLimit,
668
+ session: { ...base.session, ...override.session },
669
+ };
629
670
  }
630
671
  function resolvePublicLane(current, override, default_) {
631
672
  if (override === undefined)
@@ -755,12 +796,18 @@ export function require(policy) {
755
796
  return createMiddleware(async (c, next) => {
756
797
  const auth = c.get('auth');
757
798
  const credential = getApiKeyCredential(c);
758
- // The deprecated `key` query param has now been consumed for auth. Strip it
759
- // from the request URL so it never reaches a route's query validator —
760
- // endpoint query schemas are `z.strictObject`, so an unexpected `key`
761
- // param would otherwise fail validation with `query_invalid`, breaking the
762
- // legacy `?key=...` lane on every strict-query endpoint.
763
- stripLegacyAuthQuery(c);
799
+ const hasQueryApiKey = new URL(c.req.url).searchParams.has('key');
800
+ // Auth owns `key`; strict route schemas must not validate it.
801
+ stripApiKeyQuery(c);
802
+ const proceed = async () => {
803
+ await next();
804
+ // Query credential responses must not enter shared caches.
805
+ const cacheControl = c.res.headers.get('Cache-Control')?.toLowerCase();
806
+ if (hasQueryApiKey &&
807
+ !cacheControl?.includes('no-store') &&
808
+ !cacheControl?.includes('private'))
809
+ c.res.headers.set('Cache-Control', 'private');
810
+ };
764
811
  if (credential === false)
765
812
  return jsonError(c, {
766
813
  code: 'api_key_malformed',
@@ -773,7 +820,7 @@ export function require(policy) {
773
820
  // It must never reach KV resolution or scope/quota checks.
774
821
  if (auth.superAdmin && ApiKey.hash(credential.token) === auth.superAdmin.tokenHash) {
775
822
  c.set('principal', { actor: 'super_admin', id: 'super_admin', type: 'super_admin' });
776
- return next();
823
+ return proceed();
777
824
  }
778
825
  const apiKey = await auth.apiKey?.resolve(c, credential.token);
779
826
  if (!apiKey) {
@@ -784,7 +831,7 @@ export function require(policy) {
784
831
  const session = await resolveSession(c, auth);
785
832
  if (session) {
786
833
  c.set('principal', session);
787
- return next();
834
+ return proceed();
788
835
  }
789
836
  }
790
837
  return jsonError(c, {
@@ -835,7 +882,7 @@ export function require(policy) {
835
882
  // can't buy past the throttle: sandbox is non-billable testnet.
836
883
  const throttled = apiKey.environment === 'sandbox' && apiKey.billingActive !== true;
837
884
  if (hasPayment && !throttled)
838
- return requirePayment(c, next, {
885
+ return requirePayment(c, proceed, {
839
886
  auth,
840
887
  payment: { reason: 'api_key_over_quota', type: 'mpp' },
841
888
  policy,
@@ -867,7 +914,7 @@ export function require(policy) {
867
914
  // it must activate billing to lift the ceiling, not pay per request.
868
915
  if (throttled)
869
916
  return rateLimitExceeded(c, result);
870
- return requirePaymentOrRateLimit(c, next, {
917
+ return requirePaymentOrRateLimit(c, proceed, {
871
918
  auth,
872
919
  payment: { reason: 'api_key_over_quota', type: 'mpp' },
873
920
  policy,
@@ -876,7 +923,7 @@ export function require(policy) {
876
923
  });
877
924
  }
878
925
  }
879
- return next();
926
+ return proceed();
880
927
  }
881
928
  // Cookie sessions carry no Authorization credential; resolve the session
882
929
  // lane before the public/paid lanes so signed-in browsers skip anonymous
@@ -885,13 +932,13 @@ export function require(policy) {
885
932
  const session = await resolveSession(c, auth);
886
933
  if (session) {
887
934
  c.set('principal', session);
888
- return next();
935
+ return proceed();
889
936
  }
890
937
  }
891
938
  const publicPrincipal = principalFromPublic(c);
892
939
  if (hasPayment) {
893
940
  c.set('principal', publicPrincipal);
894
- return requirePayment(c, next, {
941
+ return requirePayment(c, proceed, {
895
942
  auth,
896
943
  payment: { reason: 'public_over_quota', type: 'mpp' },
897
944
  policy,
@@ -908,10 +955,10 @@ export function require(policy) {
908
955
  setRateLimitHeaders(c, result);
909
956
  if (!result || result.allowed) {
910
957
  c.set('principal', publicPrincipal);
911
- return next();
958
+ return proceed();
912
959
  }
913
960
  c.set('principal', publicPrincipal);
914
- return requirePaymentOrRateLimit(c, next, {
961
+ return requirePaymentOrRateLimit(c, proceed, {
915
962
  auth,
916
963
  payment: { reason: 'public_over_quota', type: 'mpp' },
917
964
  policy,
@@ -921,7 +968,7 @@ export function require(policy) {
921
968
  }
922
969
  if (isPaymentEnabled(auth, policy)) {
923
970
  c.set('principal', publicPrincipal);
924
- return requirePayment(c, next, {
971
+ return requirePayment(c, proceed, {
925
972
  auth,
926
973
  payment: { reason: 'public_over_quota', type: 'mpp' },
927
974
  policy,
@@ -1007,10 +1054,8 @@ function getApiKeyCredential(c) {
1007
1054
  const header = c.req.header('tempo-api-key');
1008
1055
  if (header)
1009
1056
  return { token: header };
1010
- // `Authorization: Bearer` compatibility fallback. Must not consume or reject
1011
- // `Authorization: Payment` (MPP), which is a distinct credential — a request
1012
- // carrying only a payment scheme falls through to the deprecated lanes below
1013
- // (which find nothing) and resolves to no API-key credential.
1057
+ // Bearer supports clients unable to set the canonical header. Payment
1058
+ // credentials belong to MPP and must pass through untouched.
1014
1059
  const authorization = c.req.header('authorization');
1015
1060
  if (authorization && !Credential.extractPaymentScheme(authorization)) {
1016
1061
  const match = /^Bearer\s+(.+)$/i.exec(authorization);
@@ -1018,25 +1063,17 @@ function getApiKeyCredential(c) {
1018
1063
  return false;
1019
1064
  return { token: match[1] };
1020
1065
  }
1021
- // Deprecated fallbacks carried over from the v1 API so existing integrations
1022
- // keep authenticating: the `x-api-key` header and the `key` query parameter.
1066
+ // `x-api-key` remains a deprecated compatibility header.
1023
1067
  const legacyHeader = c.req.header('x-api-key');
1024
1068
  if (legacyHeader)
1025
1069
  return { token: legacyHeader };
1026
- const legacyQuery = c.req.query('key');
1027
- if (legacyQuery)
1028
- return { token: legacyQuery };
1070
+ const apiKey = c.req.query('key');
1071
+ if (apiKey)
1072
+ return { token: apiKey };
1029
1073
  return null;
1030
1074
  }
1031
- /**
1032
- * Remove the deprecated `key` auth query param from the request URL once it has
1033
- * been read for authentication. Route query schemas are strict
1034
- * (`z.strictObject`), so leaving `key` in the query string would make the
1035
- * downstream validator reject the request as `query_invalid`. Stripping it
1036
- * keeps the legacy `?key=...` auth lane working on strict-query endpoints
1037
- * (e.g. `GET /v1/tokens`).
1038
- */
1039
- function stripLegacyAuthQuery(c) {
1075
+ /** Removes the reserved auth query parameter before route validation. */
1076
+ function stripApiKeyQuery(c) {
1040
1077
  const url = new URL(c.req.url);
1041
1078
  if (!url.searchParams.has('key'))
1042
1079
  return;
@@ -1112,7 +1149,19 @@ function principalFromPublic(c) {
1112
1149
  };
1113
1150
  }
1114
1151
  async function requirePayment(c, next, options) {
1115
- const middleware = options.auth.mpp?.charge(options.policy.mpp?.charge ?? {});
1152
+ if (hasPaymentCredential(c)) {
1153
+ const result = await consumeRateLimit(options.auth, {
1154
+ key: `mpp:${options.principal.type}:${options.principal.id}`,
1155
+ limit: options.policy.mpp?.rateLimit ?? options.auth.mpp?.rateLimit ?? defaultMppRateLimit,
1156
+ });
1157
+ if (result) {
1158
+ setRateLimitHeaders(c, result);
1159
+ c.header('RateLimit-Scope', 'mpp');
1160
+ if (!result.allowed)
1161
+ return rateLimitExceeded(c, result);
1162
+ }
1163
+ }
1164
+ const middleware = options.auth.mpp?.session(options.policy.mpp?.session ?? {});
1116
1165
  if (!middleware)
1117
1166
  return jsonError(c, {
1118
1167
  code: 'payment_required',