veryfront 0.0.66 → 0.0.67

package/dist/oauth/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/_shims/deno-env.ts", "../../../src/platform/compat/runtime.ts", "../../../src/platform/compat/process.ts", "../../../src/core/oauth/providers/base.ts", "../../../src/core/oauth/providers/google.ts", "../../../src/core/oauth/providers/microsoft.ts", "../../../src/core/oauth/providers/atlassian.ts", "../../../src/core/oauth/providers/common.ts", "../../../src/core/oauth/token-store/memory.ts", "../../../src/core/oauth/handlers/callback-handler.ts", "../../../src/core/oauth/handlers/init-handler.ts"],
-  "sourcesContent": ["/**\n * Shim for Deno.env.get() to work in Node.js\n * This provides a proper function that reads from process.env\n */\n\n// Create a shim that matches Deno.env.get(key) signature\nconst denoEnvShim = {\n  get(key: string): string | undefined {\n    return process.env[key];\n  },\n  set(key: string, value: string): void {\n    process.env[key] = value;\n  },\n  delete(key: string): void {\n    delete process.env[key];\n  },\n  has(key: string): boolean {\n    return key in process.env;\n  },\n  toObject(): Record<string, string> {\n    return { ...process.env } as Record<string, string>;\n  },\n};\n\n// Assign to globalThis.Deno if it doesn't exist\nif (typeof globalThis.Deno === \"undefined\") {\n  (globalThis as any).Deno = {\n    env: denoEnvShim,\n    cwd: () => process.cwd(),\n  };\n} else if (typeof (globalThis as any).Deno.env === \"undefined\") {\n  (globalThis as any).Deno.env = denoEnvShim;\n}\n\nexport { denoEnvShim };\n", "export const isDeno = typeof Deno !== \"undefined\";\nexport const isNode =\n  typeof (globalThis as { process?: { versions?: { node?: string } } }).process !== \"undefined\" &&\n  (globalThis as { process?: { versions?: { node?: string } } }).process?.versions?.node !==\n    undefined;\nexport const isBun = typeof (globalThis as { Bun?: unknown }).Bun !== \"undefined\";\nexport const isCloudflare = typeof globalThis !== \"undefined\" && \"caches\" in globalThis &&\n  \"WebSocketPair\" in globalThis;\n\n/**\n * Detect if running in Node.js (vs Deno)\n * Use this function instead of the constant when runtime detection needs to happen\n * at call time (e.g., when bundled with esbuild's __esm lazy initialization pattern)\n */\nexport function isNodeRuntime(): boolean {\n  // deno-lint-ignore no-explicit-any\n  const _global = globalThis as any;\n  return typeof Deno === \"undefined\" && typeof _global.process !== \"undefined\" &&\n    !!_global.process?.versions?.node;\n}\n", "import { isDeno as IS_DENO } from \"./runtime.ts\";\n\nconst nodeProcess = (globalThis as { process?: typeof import(\"node:process\") }).process;\nconst hasNodeProcess = !!nodeProcess?.versions?.node;\n\nexport function getArgs(): string[] {\n  if (IS_DENO) {\n    return Deno.args;\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.argv.slice(2);\n  }\n  return [];\n}\n\nexport function exit(code?: number): never {\n  if (IS_DENO) {\n    Deno.exit(code);\n  }\n  if (hasNodeProcess) {\n    nodeProcess!.exit(code);\n  }\n  throw new Error(\"exit() is not supported in this runtime\");\n}\n\nexport function cwd(): string {\n  if (IS_DENO) {\n    return Deno.cwd();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.cwd();\n  }\n  throw new Error(\"cwd() is not supported in this runtime\");\n}\n\nexport function chdir(directory: string): void {\n  if (IS_DENO) {\n    Deno.chdir(directory);\n  } else {\n    if (hasNodeProcess) {\n      nodeProcess!.chdir(directory);\n      return;\n    }\n    throw new Error(\"chdir() is not supported in this runtime\");\n  }\n}\n\nexport function env(): Record<string, string> {\n  if (IS_DENO) {\n    return Deno.env.toObject();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.env as Record<string, string>;\n  }\n  return {};\n}\n\nexport function getEnv(key: string): string | undefined {\n  if (IS_DENO) {\n    return Deno.env.get(key);\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.env[key];\n  }\n  return undefined;\n}\n\n/**\n * Get an environment variable or throw if not set\n * @throws Error if the environment variable is not set\n */\nexport function requireEnv(key: string): string {\n  const value = getEnv(key);\n  if (value === undefined) {\n    throw new Error(`Required environment variable \"${key}\" is not set`);\n  }\n  return value;\n}\n\nexport function setEnv(key: string, value: string): void {\n  if (IS_DENO) {\n    Deno.env.set(key, value);\n  } else {\n    if (hasNodeProcess) {\n      nodeProcess!.env[key] = value;\n      return;\n    }\n    throw new Error(\"setEnv() is not supported in this runtime\");\n  }\n}\n\nexport function deleteEnv(key: string): void {\n  if (IS_DENO) {\n    Deno.env.delete(key);\n  } else {\n    if (hasNodeProcess) {\n      delete nodeProcess!.env[key];\n      return;\n    }\n    throw new Error(\"deleteEnv() is not supported in this runtime\");\n  }\n}\n\nexport function pid(): number {\n  if (IS_DENO) {\n    return Deno.pid;\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.pid;\n  }\n  return 0;\n}\n\nexport function ppid(): number {\n  if (IS_DENO && \"ppid\" in Deno) {\n    return Deno.ppid || 0;\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.ppid || 0;\n  }\n  return 0;\n}\n\nexport function memoryUsage(): {\n  rss: number;\n  heapTotal: number;\n  heapUsed: number;\n  external: number;\n} {\n  if (IS_DENO) {\n    const usage = Deno.memoryUsage();\n    return {\n      rss: usage.rss,\n      heapTotal: usage.heapTotal,\n      heapUsed: usage.heapUsed,\n      external: usage.external,\n    };\n  }\n\n  if (!hasNodeProcess) {\n    throw new Error(\"memoryUsage() is not supported in this runtime\");\n  }\n\n  const usage = nodeProcess!.memoryUsage();\n  return {\n    rss: usage.rss,\n    heapTotal: usage.heapTotal,\n    heapUsed: usage.heapUsed,\n    external: usage.external || 0,\n  };\n}\n\n/**\n * Check if stdin is a TTY (terminal)\n */\nexport function isInteractive(): boolean {\n  if (IS_DENO) {\n    return Deno.stdin.isTerminal();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.stdin.isTTY ?? false;\n  }\n  return false;\n}\n\n/**\n * Get network interfaces\n */\nexport async function getNetworkInterfaces(): Promise<\n  Array<{ name: string; address: string; family: \"IPv4\" | \"IPv6\" }>\n> {\n  if (IS_DENO) {\n    const interfaces = Deno.networkInterfaces();\n    return interfaces.map((iface) => ({\n      name: iface.name,\n      address: iface.address,\n      family: iface.family as \"IPv4\" | \"IPv6\",\n    }));\n  }\n\n  if (!hasNodeProcess) {\n    throw new Error(\"networkInterfaces() is not supported in this runtime\");\n  }\n\n  const os = await import(\"node:os\");\n  const interfaces = os.networkInterfaces();\n  const result: Array<{ name: string; address: string; family: \"IPv4\" | \"IPv6\" }> = [];\n\n  for (const [name, addrs] of Object.entries(interfaces)) {\n    if (!addrs) continue;\n    for (const addr of addrs) {\n      result.push({\n        name,\n        address: addr.address,\n        family: addr.family as \"IPv4\" | \"IPv6\",\n      });\n    }\n  }\n\n  return result;\n}\n\n/**\n * Get runtime version string\n */\nexport function getRuntimeVersion(): string {\n  if (IS_DENO) {\n    return `Deno ${Deno.version.deno}`;\n  }\n  if (\"Bun\" in globalThis) {\n    return `Bun ${(globalThis as unknown as { Bun: { version: string } }).Bun.version}`;\n  }\n  if (hasNodeProcess) {\n    return `Node.js ${nodeProcess!.version}`;\n  }\n  return \"unknown\";\n}\n\n/**\n * Register a signal handler (SIGINT, SIGTERM) for graceful shutdown\n */\nexport function onSignal(signal: \"SIGINT\" | \"SIGTERM\", handler: () => void): void {\n  if (IS_DENO) {\n    Deno.addSignalListener(signal, handler);\n  } else if (hasNodeProcess) {\n    nodeProcess!.on(signal, handler);\n  }\n}\n\n/**\n * Unreference a timer to prevent it from keeping the process alive\n */\nexport function unrefTimer(timerId: ReturnType<typeof setInterval>): void {\n  if (IS_DENO) {\n    Deno.unrefTimer(timerId as number);\n  } else if (timerId && typeof timerId === \"object\" && \"unref\" in timerId) {\n    (timerId as { unref: () => void }).unref();\n  }\n}\n\n/**\n * Get the executable path of the current runtime\n */\nexport function execPath(): string {\n  if (IS_DENO) {\n    return Deno.execPath();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.execPath;\n  }\n  return \"\";\n}\n\n/**\n * Get process uptime in seconds\n * Returns OS uptime on Deno, process uptime on Node.js\n */\nexport function uptime(): number {\n  if (IS_DENO) {\n    // Deno.osUptime() returns system uptime in seconds\n    return Deno.osUptime?.() ?? 0;\n  }\n  if (hasNodeProcess) {\n    // process.uptime() returns process uptime in seconds\n    return nodeProcess!.uptime?.() ?? 0;\n  }\n  return 0;\n}\n\n/**\n * Get stdout stream for writing\n * Returns null if not available (e.g., in browser/workers)\n */\nexport function getStdout(): { write: (data: string) => void } | null {\n  if (IS_DENO) {\n    const encoder = new TextEncoder();\n    return {\n      write: (data: string) => {\n        Deno.stdout.writeSync(encoder.encode(data));\n      },\n    };\n  }\n  if (hasNodeProcess && nodeProcess!.stdout) {\n    return {\n      write: (data: string) => {\n        nodeProcess!.stdout.write(data);\n      },\n    };\n  }\n  return null;\n}\n\n// Cached Node.js modules for synchronous prompt\nlet cachedNodeFs: typeof import(\"node:fs\") | null = null;\n\n/**\n * Synchronous prompt function that works across Deno and Node.js\n * Displays a message and reads user input from stdin\n */\nexport function promptSync(message?: string): string | null {\n  if (IS_DENO) {\n    // Deno has a built-in prompt() function\n    return prompt(message);\n  }\n\n  if (hasNodeProcess) {\n    // Print the message\n    if (message) {\n      nodeProcess!.stdout.write(message + \" \");\n    }\n\n    // Lazy load fs module\n    if (!cachedNodeFs) {\n      // Dynamic import converted to sync require for bundling\n      // @ts-ignore - dynamic require for Node.js\n      cachedNodeFs = globalThis.require?.(\"node:fs\") || null;\n      if (!cachedNodeFs) {\n        // Try alternative approach\n        try {\n          // @ts-ignore: __require is injected by bundlers for Node.js require\n          cachedNodeFs = __require(\"node:fs\");\n        } catch {\n          return null;\n        }\n      }\n    }\n\n    if (!cachedNodeFs) {\n      return null;\n    }\n\n    // Read synchronously using fs\n    // This works by reading from file descriptor 0 (stdin)\n    // Use Uint8Array for cross-platform compatibility\n    const bufferSize = 1024;\n    const uint8Array = new Uint8Array(bufferSize);\n    let input = \"\";\n\n    try {\n      // Read from stdin (fd 0) synchronously\n      const bytesRead = cachedNodeFs.readSync(0, uint8Array, 0, bufferSize, null);\n      if (bytesRead > 0) {\n        const decoder = new TextDecoder(\"utf-8\");\n        input = decoder.decode(uint8Array.subarray(0, bytesRead)).trim();\n      }\n    } catch {\n      // If stdin is not available or EOF, return null\n      return null;\n    }\n\n    return input || null;\n  }\n\n  return null;\n}\n", "/**\n * Base OAuth Provider\n *\n * Generic OAuth 2.0 implementation that can be extended for specific providers.\n */\n\nimport type {\n  AuthorizationUrlOptions,\n  OAuthProviderConfig,\n  OAuthServiceConfig,\n  OAuthState,\n  OAuthTokens,\n  TokenExchangeOptions,\n  TokenExchangeResult,\n  TokenStore,\n} from \"../types.ts\";\nimport { getEnv } from \"../../../platform/compat/process.ts\";\n\n/**\n * Generate cryptographically secure random string\n */\nfunction generateRandomString(length: number): string {\n  const array = new Uint8Array(length);\n  crypto.getRandomValues(array);\n  return Array.from(array, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\").slice(0, length);\n}\n\n/**\n * Generate PKCE code verifier\n */\nfunction generateCodeVerifier(): string {\n  return generateRandomString(64);\n}\n\n/**\n * Generate PKCE code challenge from verifier\n */\nasync function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const hash = await crypto.subtle.digest(\"SHA-256\", data);\n  return btoa(String.fromCharCode(...new Uint8Array(hash)))\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=+$/, \"\");\n}\n\n/**\n * Base OAuth provider class\n */\nexport class OAuthProvider {\n  protected config: OAuthProviderConfig;\n\n  constructor(config: OAuthProviderConfig) {\n    this.config = config;\n  }\n\n  /**\n   * Get client ID from environment\n   */\n  getClientId(): string | null {\n    return getEnv(this.config.clientIdEnvVar) || null;\n  }\n\n  /**\n   * Get client secret from environment\n   */\n  getClientSecret(): string | null {\n    return getEnv(this.config.clientSecretEnvVar) || null;\n  }\n\n  /**\n   * Check if provider is configured\n   */\n  isConfigured(): boolean {\n    return !!(this.getClientId() && this.getClientSecret());\n  }\n\n  /**\n   * Create authorization URL\n   */\n  async createAuthorizationUrl(\n    options: AuthorizationUrlOptions & { defaultScopes?: string[] } = {},\n  ): Promise<{ url: string; state: OAuthState }> {\n    const clientId = this.getClientId();\n    if (!clientId) {\n      throw new Error(`${this.config.clientIdEnvVar} not configured`);\n    }\n\n    const state = options.state || generateRandomString(32);\n    const scopes = options.scopes || options.defaultScopes || [];\n    const redirectUri = options.redirectUri || \"\";\n    const usePkce = options.usePkce !== false;\n\n    let codeVerifier: string | undefined;\n    let codeChallenge: string | undefined;\n\n    if (usePkce) {\n      codeVerifier = generateCodeVerifier();\n      codeChallenge = await generateCodeChallenge(codeVerifier);\n    }\n\n    const params = new URLSearchParams({\n      client_id: clientId,\n      redirect_uri: redirectUri,\n      response_type: \"code\",\n      state,\n      ...(scopes.length > 0 && { scope: scopes.join(\" \") }),\n      ...(codeChallenge && {\n        code_challenge: codeChallenge,\n        code_challenge_method: \"S256\",\n      }),\n      ...this.config.additionalAuthParams,\n      ...options.additionalParams,\n    });\n\n    const oauthState: OAuthState = {\n      state,\n      codeVerifier,\n      redirectUri,\n      scopes,\n      createdAt: Date.now(),\n    };\n\n    return {\n      url: `${this.config.authorizationUrl}?${params.toString()}`,\n      state: oauthState,\n    };\n  }\n\n  /**\n   * Exchange authorization code for tokens\n   */\n  async exchangeCode(options: TokenExchangeOptions): Promise<TokenExchangeResult> {\n    const clientId = this.getClientId();\n    const clientSecret = this.getClientSecret();\n\n    if (!clientId || !clientSecret) {\n      return {\n        success: false,\n        error: \"OAuth not configured\",\n        errorDescription:\n          `Missing ${this.config.clientIdEnvVar} or ${this.config.clientSecretEnvVar}`,\n      };\n    }\n\n    const body = new URLSearchParams({\n      grant_type: \"authorization_code\",\n      code: options.code,\n      redirect_uri: options.redirectUri,\n      ...(options.codeVerifier && { code_verifier: options.codeVerifier }),\n      ...(!this.config.useBasicAuth && {\n        client_id: clientId,\n        client_secret: clientSecret,\n      }),\n      ...this.config.additionalTokenParams,\n    });\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      Accept: \"application/json\",\n    };\n\n    if (this.config.useBasicAuth) {\n      const credentials = btoa(`${clientId}:${clientSecret}`);\n      headers.Authorization = `Basic ${credentials}`;\n    }\n\n    try {\n      const response = await fetch(this.config.tokenUrl, {\n        method: \"POST\",\n        headers,\n        body: body.toString(),\n      });\n\n      const data = await response.json();\n\n      if (!response.ok) {\n        return {\n          success: false,\n          error: data.error || \"token_exchange_failed\",\n          errorDescription: data.error_description || `Status ${response.status}`,\n        };\n      }\n\n      const mapping = this.config.tokenResponseMapping || {};\n      const tokens: OAuthTokens = {\n        accessToken: data[mapping.accessToken || \"access_token\"],\n        refreshToken: data[mapping.refreshToken || \"refresh_token\"],\n        tokenType: data[mapping.tokenType || \"token_type\"],\n        scope: data[mapping.scope || \"scope\"],\n        idToken: data.id_token,\n      };\n\n      const expiresIn = data[mapping.expiresIn || \"expires_in\"];\n      if (expiresIn) {\n        tokens.expiresAt = Date.now() + expiresIn * 1000;\n      }\n\n      return { success: true, tokens };\n    } catch (error) {\n      return {\n        success: false,\n        error: \"network_error\",\n        errorDescription: error instanceof Error ? error.message : \"Unknown error\",\n      };\n    }\n  }\n\n  /**\n   * Refresh access token\n   */\n  async refreshTokens(refreshToken: string): Promise<TokenExchangeResult> {\n    const clientId = this.getClientId();\n    const clientSecret = this.getClientSecret();\n\n    if (!clientId || !clientSecret) {\n      return {\n        success: false,\n        error: \"OAuth not configured\",\n      };\n    }\n\n    const body = new URLSearchParams({\n      grant_type: \"refresh_token\",\n      refresh_token: refreshToken,\n      ...(!this.config.useBasicAuth && {\n        client_id: clientId,\n        client_secret: clientSecret,\n      }),\n    });\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      Accept: \"application/json\",\n    };\n\n    if (this.config.useBasicAuth) {\n      const credentials = btoa(`${clientId}:${clientSecret}`);\n      headers.Authorization = `Basic ${credentials}`;\n    }\n\n    try {\n      const response = await fetch(this.config.tokenUrl, {\n        method: \"POST\",\n        headers,\n        body: body.toString(),\n      });\n\n      const data = await response.json();\n\n      if (!response.ok) {\n        return {\n          success: false,\n          error: data.error || \"refresh_failed\",\n          errorDescription: data.error_description,\n        };\n      }\n\n      const mapping = this.config.tokenResponseMapping || {};\n      const tokens: OAuthTokens = {\n        accessToken: data[mapping.accessToken || \"access_token\"],\n        refreshToken: data[mapping.refreshToken || \"refresh_token\"] || refreshToken,\n        tokenType: data[mapping.tokenType || \"token_type\"],\n        scope: data[mapping.scope || \"scope\"],\n      };\n\n      const expiresIn = data[mapping.expiresIn || \"expires_in\"];\n      if (expiresIn) {\n        tokens.expiresAt = Date.now() + expiresIn * 1000;\n      }\n\n      return { success: true, tokens };\n    } catch (error) {\n      return {\n        success: false,\n        error: \"network_error\",\n        errorDescription: error instanceof Error ? error.message : \"Unknown error\",\n      };\n    }\n  }\n\n  /**\n   * Revoke tokens\n   */\n  async revokeToken(token: string): Promise<boolean> {\n    if (!this.config.revocationUrl) {\n      return false;\n    }\n\n    try {\n      const response = await fetch(this.config.revocationUrl, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/x-www-form-urlencoded\",\n        },\n        body: new URLSearchParams({ token }).toString(),\n      });\n\n      return response.ok;\n    } catch {\n      return false;\n    }\n  }\n}\n\n/**\n * Service-specific OAuth handler\n */\nexport class OAuthService extends OAuthProvider {\n  protected serviceConfig: OAuthServiceConfig;\n  protected tokenStore?: TokenStore;\n\n  constructor(config: OAuthServiceConfig, tokenStore?: TokenStore) {\n    super(config);\n    this.serviceConfig = config;\n    this.tokenStore = tokenStore;\n  }\n\n  /**\n   * Get service ID\n   */\n  get serviceId(): string {\n    return this.serviceConfig.serviceId;\n  }\n\n  /**\n   * Get API base URL\n   */\n  get apiBaseUrl(): string {\n    return this.serviceConfig.apiBaseUrl;\n  }\n\n  /**\n   * Create authorization URL with service defaults\n   */\n  override createAuthorizationUrl(\n    options: AuthorizationUrlOptions = {},\n  ): Promise<{ url: string; state: OAuthState }> {\n    return super.createAuthorizationUrl({\n      ...options,\n      defaultScopes: this.serviceConfig.defaultScopes,\n    });\n  }\n\n  /**\n   * Get valid access token (refreshing if needed)\n   */\n  async getAccessToken(): Promise<string | null> {\n    if (!this.tokenStore) {\n      return null;\n    }\n\n    const tokens = await this.tokenStore.getTokens(this.serviceId);\n    if (!tokens) {\n      return null;\n    }\n\n    // Check if token is expired (with 5 min buffer)\n    if (tokens.expiresAt && Date.now() > tokens.expiresAt - 300000) {\n      if (tokens.refreshToken) {\n        const result = await this.refreshTokens(tokens.refreshToken);\n        if (result.success && result.tokens) {\n          await this.tokenStore.setTokens(this.serviceId, result.tokens);\n          return result.tokens.accessToken;\n        }\n      }\n      return null;\n    }\n\n    return tokens.accessToken;\n  }\n\n  /**\n   * Make authenticated API request\n   */\n  async fetch<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const token = await this.getAccessToken();\n    if (!token) {\n      throw new Error(`Not authenticated with ${this.serviceConfig.displayName}`);\n    }\n\n    const url = endpoint.startsWith(\"http\") ? endpoint : `${this.apiBaseUrl}${endpoint}`;\n\n    const response = await fetch(url, {\n      ...options,\n      headers: {\n        Authorization: `Bearer ${token}`,\n        \"Content-Type\": \"application/json\",\n        ...options.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`${this.serviceConfig.displayName} API error: ${response.status} ${error}`);\n    }\n\n    return response.json();\n  }\n}\n", "/**\n * Google OAuth Provider\n *\n * Pre-configured OAuth for Google services: Gmail, Calendar, Sheets, Drive\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * Base Google OAuth configuration\n */\nconst googleBase = {\n  providerId: \"google\",\n  displayName: \"Google\",\n  authorizationUrl: \"https://accounts.google.com/o/oauth2/v2/auth\",\n  tokenUrl: \"https://oauth2.googleapis.com/token\",\n  userInfoUrl: \"https://www.googleapis.com/oauth2/v2/userinfo\",\n  revocationUrl: \"https://oauth2.googleapis.com/revoke\",\n  clientIdEnvVar: \"GOOGLE_CLIENT_ID\",\n  clientSecretEnvVar: \"GOOGLE_CLIENT_SECRET\",\n  additionalAuthParams: {\n    access_type: \"offline\",\n    prompt: \"consent\",\n  },\n};\n\n/**\n * Gmail OAuth configuration\n */\nexport const gmailConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"gmail\",\n  displayName: \"Gmail\",\n  apiBaseUrl: \"https://gmail.googleapis.com/gmail/v1\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/gmail.readonly\",\n    \"https://www.googleapis.com/auth/gmail.send\",\n    \"https://www.googleapis.com/auth/gmail.compose\",\n    \"https://www.googleapis.com/auth/gmail.labels\",\n  ],\n};\n\n/**\n * Google Calendar OAuth configuration\n */\nexport const calendarConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"calendar\",\n  displayName: \"Google Calendar\",\n  apiBaseUrl: \"https://www.googleapis.com/calendar/v3\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/calendar.readonly\",\n    \"https://www.googleapis.com/auth/calendar.events\",\n  ],\n};\n\n/**\n * Google Sheets OAuth configuration\n */\nexport const sheetsConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"sheets\",\n  displayName: \"Google Sheets\",\n  apiBaseUrl: \"https://sheets.googleapis.com/v4\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/spreadsheets.readonly\",\n    \"https://www.googleapis.com/auth/spreadsheets\",\n  ],\n};\n\n/**\n * Google Drive OAuth configuration\n */\nexport const driveConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"drive\",\n  displayName: \"Google Drive\",\n  apiBaseUrl: \"https://www.googleapis.com/drive/v3\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/drive.readonly\",\n    \"https://www.googleapis.com/auth/drive.file\",\n  ],\n};\n\n/**\n * All Google service configurations\n */\nexport const googleServices = {\n  gmail: gmailConfig,\n  calendar: calendarConfig,\n  sheets: sheetsConfig,\n  drive: driveConfig,\n} as const;\n", "/**\n * Microsoft OAuth Provider\n *\n * Pre-configured OAuth for Microsoft services: Outlook, Teams, SharePoint, OneDrive\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * Base Microsoft OAuth configuration\n */\nconst microsoftBase = {\n  providerId: \"microsoft\",\n  displayName: \"Microsoft\",\n  authorizationUrl: \"https://login.microsoftonline.com/common/oauth2/v2.0/authorize\",\n  tokenUrl: \"https://login.microsoftonline.com/common/oauth2/v2.0/token\",\n  userInfoUrl: \"https://graph.microsoft.com/v1.0/me\",\n  clientIdEnvVar: \"MICROSOFT_CLIENT_ID\",\n  clientSecretEnvVar: \"MICROSOFT_CLIENT_SECRET\",\n  additionalAuthParams: {\n    response_mode: \"query\",\n  },\n};\n\n/**\n * Microsoft Outlook OAuth configuration\n */\nexport const outlookConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"outlook\",\n  displayName: \"Outlook\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Mail.Read\",\n    \"Mail.Send\",\n    \"Mail.ReadWrite\",\n    \"Calendars.Read\",\n    \"Calendars.ReadWrite\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Microsoft Teams OAuth configuration\n */\nexport const teamsConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"teams\",\n  displayName: \"Microsoft Teams\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Team.ReadBasic.All\",\n    \"Channel.ReadBasic.All\",\n    \"Chat.Read\",\n    \"Chat.ReadWrite\",\n    \"ChannelMessage.Read.All\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Microsoft SharePoint OAuth configuration\n */\nexport const sharePointConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"sharepoint\",\n  displayName: \"SharePoint\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Sites.Read.All\",\n    \"Sites.ReadWrite.All\",\n    \"Files.Read.All\",\n    \"Files.ReadWrite.All\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Microsoft OneDrive OAuth configuration\n */\nexport const oneDriveConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"onedrive\",\n  displayName: \"OneDrive\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Files.Read\",\n    \"Files.ReadWrite\",\n    \"Files.Read.All\",\n    \"Files.ReadWrite.All\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * All Microsoft service configurations\n */\nexport const microsoftServices = {\n  outlook: outlookConfig,\n  teams: teamsConfig,\n  sharepoint: sharePointConfig,\n  onedrive: oneDriveConfig,\n} as const;\n", "/**\n * Atlassian OAuth Provider\n *\n * Pre-configured OAuth for Atlassian services: Jira, Confluence\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * Base Atlassian OAuth configuration\n */\nconst atlassianBase = {\n  providerId: \"atlassian\",\n  displayName: \"Atlassian\",\n  authorizationUrl: \"https://auth.atlassian.com/authorize\",\n  tokenUrl: \"https://auth.atlassian.com/oauth/token\",\n  userInfoUrl: \"https://api.atlassian.com/me\",\n  clientIdEnvVar: \"ATLASSIAN_CLIENT_ID\",\n  clientSecretEnvVar: \"ATLASSIAN_CLIENT_SECRET\",\n  additionalAuthParams: {\n    audience: \"api.atlassian.com\",\n    prompt: \"consent\",\n  },\n};\n\n/**\n * Jira OAuth configuration\n */\nexport const jiraConfig: OAuthServiceConfig = {\n  ...atlassianBase,\n  serviceId: \"jira\",\n  displayName: \"Jira\",\n  apiBaseUrl: \"https://api.atlassian.com/ex/jira\",\n  defaultScopes: [\n    \"read:jira-work\",\n    \"write:jira-work\",\n    \"read:jira-user\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Confluence OAuth configuration\n */\nexport const confluenceConfig: OAuthServiceConfig = {\n  ...atlassianBase,\n  serviceId: \"confluence\",\n  displayName: \"Confluence\",\n  apiBaseUrl: \"https://api.atlassian.com/ex/confluence\",\n  defaultScopes: [\n    \"read:confluence-content.all\",\n    \"write:confluence-content\",\n    \"read:confluence-space.summary\",\n    \"read:confluence-user\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Bitbucket OAuth configuration (also Atlassian)\n */\nexport const bitbucketConfig: OAuthServiceConfig = {\n  ...atlassianBase,\n  serviceId: \"bitbucket\",\n  displayName: \"Bitbucket\",\n  // Bitbucket has its own OAuth endpoints\n  authorizationUrl: \"https://bitbucket.org/site/oauth2/authorize\",\n  tokenUrl: \"https://bitbucket.org/site/oauth2/access_token\",\n  clientIdEnvVar: \"BITBUCKET_CLIENT_ID\",\n  clientSecretEnvVar: \"BITBUCKET_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.bitbucket.org/2.0\",\n  additionalAuthParams: {},\n  defaultScopes: [\n    \"repository\",\n    \"repository:write\",\n    \"pullrequest\",\n    \"pullrequest:write\",\n    \"account\",\n  ],\n};\n\n/**\n * All Atlassian service configurations\n */\nexport const atlassianServices = {\n  jira: jiraConfig,\n  confluence: confluenceConfig,\n  bitbucket: bitbucketConfig,\n} as const;\n", "/**\n * Common OAuth Providers\n *\n * Pre-configured OAuth service configurations for popular SaaS providers.\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * GitHub OAuth configuration\n */\nexport const githubConfig: OAuthServiceConfig = {\n  providerId: \"github\",\n  serviceId: \"github\",\n  displayName: \"GitHub\",\n  authorizationUrl: \"https://github.com/login/oauth/authorize\",\n  tokenUrl: \"https://github.com/login/oauth/access_token\",\n  clientIdEnvVar: \"GITHUB_CLIENT_ID\",\n  clientSecretEnvVar: \"GITHUB_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.github.com\",\n  defaultScopes: [\"repo\", \"user\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Slack OAuth configuration\n */\nexport const slackConfig: OAuthServiceConfig = {\n  providerId: \"slack\",\n  serviceId: \"slack\",\n  displayName: \"Slack\",\n  authorizationUrl: \"https://slack.com/oauth/v2/authorize\",\n  tokenUrl: \"https://slack.com/api/oauth.v2.access\",\n  clientIdEnvVar: \"SLACK_CLIENT_ID\",\n  clientSecretEnvVar: \"SLACK_CLIENT_SECRET\",\n  apiBaseUrl: \"https://slack.com/api\",\n  defaultScopes: [\"channels:read\", \"chat:write\", \"users:read\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Notion OAuth configuration\n */\nexport const notionConfig: OAuthServiceConfig = {\n  providerId: \"notion\",\n  serviceId: \"notion\",\n  displayName: \"Notion\",\n  authorizationUrl: \"https://api.notion.com/v1/oauth/authorize\",\n  tokenUrl: \"https://api.notion.com/v1/oauth/token\",\n  clientIdEnvVar: \"NOTION_CLIENT_ID\",\n  clientSecretEnvVar: \"NOTION_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.notion.com/v1\",\n  defaultScopes: [],\n  useBasicAuth: true,\n  additionalAuthParams: {\n    owner: \"user\",\n  },\n};\n\n/**\n * Figma OAuth configuration\n */\nexport const figmaConfig: OAuthServiceConfig = {\n  providerId: \"figma\",\n  serviceId: \"figma\",\n  displayName: \"Figma\",\n  authorizationUrl: \"https://www.figma.com/oauth\",\n  tokenUrl: \"https://www.figma.com/api/oauth/token\",\n  clientIdEnvVar: \"FIGMA_CLIENT_ID\",\n  clientSecretEnvVar: \"FIGMA_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.figma.com/v1\",\n  defaultScopes: [\"file_read\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Discord OAuth configuration\n */\nexport const discordConfig: OAuthServiceConfig = {\n  providerId: \"discord\",\n  serviceId: \"discord\",\n  displayName: \"Discord\",\n  authorizationUrl: \"https://discord.com/api/oauth2/authorize\",\n  tokenUrl: \"https://discord.com/api/oauth2/token\",\n  clientIdEnvVar: \"DISCORD_CLIENT_ID\",\n  clientSecretEnvVar: \"DISCORD_CLIENT_SECRET\",\n  apiBaseUrl: \"https://discord.com/api/v10\",\n  defaultScopes: [\"identify\", \"guilds\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Linear OAuth configuration\n */\nexport const linearConfig: OAuthServiceConfig = {\n  providerId: \"linear\",\n  serviceId: \"linear\",\n  displayName: \"Linear\",\n  authorizationUrl: \"https://linear.app/oauth/authorize\",\n  tokenUrl: \"https://api.linear.app/oauth/token\",\n  clientIdEnvVar: \"LINEAR_CLIENT_ID\",\n  clientSecretEnvVar: \"LINEAR_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.linear.app\",\n  defaultScopes: [\"read\", \"write\"],\n  additionalAuthParams: {},\n};\n\n/**\n * GitLab OAuth configuration\n */\nexport const gitlabConfig: OAuthServiceConfig = {\n  providerId: \"gitlab\",\n  serviceId: \"gitlab\",\n  displayName: \"GitLab\",\n  authorizationUrl: \"https://gitlab.com/oauth/authorize\",\n  tokenUrl: \"https://gitlab.com/oauth/token\",\n  clientIdEnvVar: \"GITLAB_CLIENT_ID\",\n  clientSecretEnvVar: \"GITLAB_CLIENT_SECRET\",\n  apiBaseUrl: \"https://gitlab.com/api/v4\",\n  defaultScopes: [\"read_user\", \"api\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Airtable OAuth configuration\n */\nexport const airtableConfig: OAuthServiceConfig = {\n  providerId: \"airtable\",\n  serviceId: \"airtable\",\n  displayName: \"Airtable\",\n  authorizationUrl: \"https://airtable.com/oauth2/v1/authorize\",\n  tokenUrl: \"https://airtable.com/oauth2/v1/token\",\n  clientIdEnvVar: \"AIRTABLE_CLIENT_ID\",\n  clientSecretEnvVar: \"AIRTABLE_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.airtable.com/v0\",\n  defaultScopes: [\"data.records:read\", \"data.records:write\", \"schema.bases:read\"],\n  useBasicAuth: true,\n  additionalAuthParams: {},\n};\n\n/**\n * Dropbox OAuth configuration\n */\nexport const dropboxConfig: OAuthServiceConfig = {\n  providerId: \"dropbox\",\n  serviceId: \"dropbox\",\n  displayName: \"Dropbox\",\n  authorizationUrl: \"https://www.dropbox.com/oauth2/authorize\",\n  tokenUrl: \"https://api.dropbox.com/oauth2/token\",\n  clientIdEnvVar: \"DROPBOX_CLIENT_ID\",\n  clientSecretEnvVar: \"DROPBOX_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.dropboxapi.com/2\",\n  defaultScopes: [],\n  additionalAuthParams: {\n    token_access_type: \"offline\",\n  },\n};\n\n/**\n * HubSpot OAuth configuration\n */\nexport const hubspotConfig: OAuthServiceConfig = {\n  providerId: \"hubspot\",\n  serviceId: \"hubspot\",\n  displayName: \"HubSpot\",\n  authorizationUrl: \"https://app.hubspot.com/oauth/authorize\",\n  tokenUrl: \"https://api.hubapi.com/oauth/v1/token\",\n  clientIdEnvVar: \"HUBSPOT_CLIENT_ID\",\n  clientSecretEnvVar: \"HUBSPOT_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.hubapi.com\",\n  defaultScopes: [\"crm.objects.contacts.read\", \"crm.objects.contacts.write\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Salesforce OAuth configuration\n */\nexport const salesforceConfig: OAuthServiceConfig = {\n  providerId: \"salesforce\",\n  serviceId: \"salesforce\",\n  displayName: \"Salesforce\",\n  authorizationUrl: \"https://login.salesforce.com/services/oauth2/authorize\",\n  tokenUrl: \"https://login.salesforce.com/services/oauth2/token\",\n  clientIdEnvVar: \"SALESFORCE_CLIENT_ID\",\n  clientSecretEnvVar: \"SALESFORCE_CLIENT_SECRET\",\n  apiBaseUrl: \"https://login.salesforce.com/services/data/v59.0\",\n  defaultScopes: [\"api\", \"refresh_token\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Twitter/X OAuth configuration\n */\nexport const twitterConfig: OAuthServiceConfig = {\n  providerId: \"twitter\",\n  serviceId: \"twitter\",\n  displayName: \"Twitter/X\",\n  authorizationUrl: \"https://twitter.com/i/oauth2/authorize\",\n  tokenUrl: \"https://api.twitter.com/2/oauth2/token\",\n  clientIdEnvVar: \"TWITTER_CLIENT_ID\",\n  clientSecretEnvVar: \"TWITTER_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.twitter.com/2\",\n  defaultScopes: [\"tweet.read\", \"users.read\", \"offline.access\"],\n  useBasicAuth: true,\n  additionalAuthParams: {},\n};\n\n/**\n * Asana OAuth configuration\n */\nexport const asanaConfig: OAuthServiceConfig = {\n  providerId: \"asana\",\n  serviceId: \"asana\",\n  displayName: \"Asana\",\n  authorizationUrl: \"https://app.asana.com/-/oauth_authorize\",\n  tokenUrl: \"https://app.asana.com/-/oauth_token\",\n  clientIdEnvVar: \"ASANA_CLIENT_ID\",\n  clientSecretEnvVar: \"ASANA_CLIENT_SECRET\",\n  apiBaseUrl: \"https://app.asana.com/api/1.0\",\n  defaultScopes: [\"default\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Monday.com OAuth configuration\n */\nexport const mondayConfig: OAuthServiceConfig = {\n  providerId: \"monday\",\n  serviceId: \"monday\",\n  displayName: \"Monday.com\",\n  authorizationUrl: \"https://auth.monday.com/oauth2/authorize\",\n  tokenUrl: \"https://auth.monday.com/oauth2/token\",\n  clientIdEnvVar: \"MONDAY_CLIENT_ID\",\n  clientSecretEnvVar: \"MONDAY_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.monday.com/v2\",\n  defaultScopes: [\"me:read\", \"boards:read\", \"boards:write\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Zoom OAuth configuration\n */\nexport const zoomConfig: OAuthServiceConfig = {\n  providerId: \"zoom\",\n  serviceId: \"zoom\",\n  displayName: \"Zoom\",\n  authorizationUrl: \"https://zoom.us/oauth/authorize\",\n  tokenUrl: \"https://zoom.us/oauth/token\",\n  clientIdEnvVar: \"ZOOM_CLIENT_ID\",\n  clientSecretEnvVar: \"ZOOM_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.zoom.us/v2\",\n  defaultScopes: [\"meeting:read\", \"meeting:write\", \"user:read\"],\n  useBasicAuth: true,\n  additionalAuthParams: {},\n};\n\n/**\n * Intercom OAuth configuration\n */\nexport const intercomConfig: OAuthServiceConfig = {\n  providerId: \"intercom\",\n  serviceId: \"intercom\",\n  displayName: \"Intercom\",\n  authorizationUrl: \"https://app.intercom.com/oauth\",\n  tokenUrl: \"https://api.intercom.io/auth/eagle/token\",\n  clientIdEnvVar: \"INTERCOM_CLIENT_ID\",\n  clientSecretEnvVar: \"INTERCOM_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.intercom.io\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Freshdesk OAuth configuration\n */\nexport const freshdeskConfig: OAuthServiceConfig = {\n  providerId: \"freshdesk\",\n  serviceId: \"freshdesk\",\n  displayName: \"Freshdesk\",\n  authorizationUrl: \"https://accounts.freshworks.com/authorize\",\n  tokenUrl: \"https://accounts.freshworks.com/oauth/token\",\n  clientIdEnvVar: \"FRESHDESK_CLIENT_ID\",\n  clientSecretEnvVar: \"FRESHDESK_CLIENT_SECRET\",\n  apiBaseUrl: \"https://domain.freshdesk.com/api/v2\",\n  defaultScopes: [\"freshdesk\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Mailchimp OAuth configuration\n */\nexport const mailchimpConfig: OAuthServiceConfig = {\n  providerId: \"mailchimp\",\n  serviceId: \"mailchimp\",\n  displayName: \"Mailchimp\",\n  authorizationUrl: \"https://login.mailchimp.com/oauth2/authorize\",\n  tokenUrl: \"https://login.mailchimp.com/oauth2/token\",\n  clientIdEnvVar: \"MAILCHIMP_CLIENT_ID\",\n  clientSecretEnvVar: \"MAILCHIMP_CLIENT_SECRET\",\n  apiBaseUrl: \"https://server.api.mailchimp.com/3.0\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Shopify OAuth configuration\n */\nexport const shopifyConfig: OAuthServiceConfig = {\n  providerId: \"shopify\",\n  serviceId: \"shopify\",\n  displayName: \"Shopify\",\n  authorizationUrl: \"https://shop.myshopify.com/admin/oauth/authorize\",\n  tokenUrl: \"https://shop.myshopify.com/admin/oauth/access_token\",\n  clientIdEnvVar: \"SHOPIFY_CLIENT_ID\",\n  clientSecretEnvVar: \"SHOPIFY_CLIENT_SECRET\",\n  apiBaseUrl: \"https://shop.myshopify.com/admin/api/2024-01\",\n  defaultScopes: [\"read_products\", \"write_products\", \"read_orders\"],\n  additionalAuthParams: {},\n};\n\n/**\n * QuickBooks OAuth configuration\n */\nexport const quickbooksConfig: OAuthServiceConfig = {\n  providerId: \"quickbooks\",\n  serviceId: \"quickbooks\",\n  displayName: \"QuickBooks\",\n  authorizationUrl: \"https://appcenter.intuit.com/connect/oauth2\",\n  tokenUrl: \"https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer\",\n  clientIdEnvVar: \"QUICKBOOKS_CLIENT_ID\",\n  clientSecretEnvVar: \"QUICKBOOKS_CLIENT_SECRET\",\n  apiBaseUrl: \"https://quickbooks.api.intuit.com/v3\",\n  defaultScopes: [\"com.intuit.quickbooks.accounting\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Xero OAuth configuration\n */\nexport const xeroConfig: OAuthServiceConfig = {\n  providerId: \"xero\",\n  serviceId: \"xero\",\n  displayName: \"Xero\",\n  authorizationUrl: \"https://login.xero.com/identity/connect/authorize\",\n  tokenUrl: \"https://identity.xero.com/connect/token\",\n  clientIdEnvVar: \"XERO_CLIENT_ID\",\n  clientSecretEnvVar: \"XERO_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.xero.com/api.xro/2.0\",\n  defaultScopes: [\"openid\", \"profile\", \"email\", \"accounting.transactions\", \"offline_access\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Box OAuth configuration\n */\nexport const boxConfig: OAuthServiceConfig = {\n  providerId: \"box\",\n  serviceId: \"box\",\n  displayName: \"Box\",\n  authorizationUrl: \"https://account.box.com/api/oauth2/authorize\",\n  tokenUrl: \"https://api.box.com/oauth2/token\",\n  clientIdEnvVar: \"BOX_CLIENT_ID\",\n  clientSecretEnvVar: \"BOX_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.box.com/2.0\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Webex OAuth configuration\n */\nexport const webexConfig: OAuthServiceConfig = {\n  providerId: \"webex\",\n  serviceId: \"webex\",\n  displayName: \"Webex\",\n  authorizationUrl: \"https://webexapis.com/v1/authorize\",\n  tokenUrl: \"https://webexapis.com/v1/access_token\",\n  clientIdEnvVar: \"WEBEX_CLIENT_ID\",\n  clientSecretEnvVar: \"WEBEX_CLIENT_SECRET\",\n  apiBaseUrl: \"https://webexapis.com/v1\",\n  defaultScopes: [\"spark:all\", \"spark:kms\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Trello OAuth configuration\n */\nexport const trelloConfig: OAuthServiceConfig = {\n  providerId: \"trello\",\n  serviceId: \"trello\",\n  displayName: \"Trello\",\n  authorizationUrl: \"https://trello.com/1/authorize\",\n  tokenUrl: \"https://trello.com/1/OAuthGetAccessToken\",\n  clientIdEnvVar: \"TRELLO_CLIENT_ID\",\n  clientSecretEnvVar: \"TRELLO_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.trello.com/1\",\n  defaultScopes: [\"read\", \"write\"],\n  additionalAuthParams: {\n    expiration: \"never\",\n  },\n};\n\n/**\n * Clickup OAuth configuration\n */\nexport const clickupConfig: OAuthServiceConfig = {\n  providerId: \"clickup\",\n  serviceId: \"clickup\",\n  displayName: \"ClickUp\",\n  authorizationUrl: \"https://app.clickup.com/api\",\n  tokenUrl: \"https://api.clickup.com/api/v2/oauth/token\",\n  clientIdEnvVar: \"CLICKUP_CLIENT_ID\",\n  clientSecretEnvVar: \"CLICKUP_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.clickup.com/api/v2\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Pipedrive OAuth configuration\n */\nexport const pipedriveConfig: OAuthServiceConfig = {\n  providerId: \"pipedrive\",\n  serviceId: \"pipedrive\",\n  displayName: \"Pipedrive\",\n  authorizationUrl: \"https://oauth.pipedrive.com/oauth/authorize\",\n  tokenUrl: \"https://oauth.pipedrive.com/oauth/token\",\n  clientIdEnvVar: \"PIPEDRIVE_CLIENT_ID\",\n  clientSecretEnvVar: \"PIPEDRIVE_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.pipedrive.com/v1\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Export grouped services for convenience\n */\nexport const commonServices = {\n  github: githubConfig,\n  slack: slackConfig,\n  notion: notionConfig,\n  figma: figmaConfig,\n  discord: discordConfig,\n  linear: linearConfig,\n  gitlab: gitlabConfig,\n  airtable: airtableConfig,\n  dropbox: dropboxConfig,\n  hubspot: hubspotConfig,\n  salesforce: salesforceConfig,\n  twitter: twitterConfig,\n  asana: asanaConfig,\n  monday: mondayConfig,\n  zoom: zoomConfig,\n  intercom: intercomConfig,\n  freshdesk: freshdeskConfig,\n  mailchimp: mailchimpConfig,\n  shopify: shopifyConfig,\n  quickbooks: quickbooksConfig,\n  xero: xeroConfig,\n  box: boxConfig,\n  webex: webexConfig,\n  trello: trelloConfig,\n  clickup: clickupConfig,\n  pipedrive: pipedriveConfig,\n};\n", "/**\n * In-Memory Token Store\n *\n * Simple in-memory storage for OAuth tokens and state.\n * Suitable for development and single-instance deployments.\n */\n\nimport type { OAuthState, OAuthTokens, TokenStore } from \"../types.ts\";\n\n/**\n * In-memory token store implementation\n */\nexport class MemoryTokenStore implements TokenStore {\n  private tokens: Map<string, OAuthTokens> = new Map();\n  private states: Map<string, OAuthState> = new Map();\n\n  /** State expiration time in ms (10 minutes) */\n  private stateExpirationMs = 10 * 60 * 1000;\n\n  getTokens(serviceId: string): Promise<OAuthTokens | null> {\n    return Promise.resolve(this.tokens.get(serviceId) || null);\n  }\n\n  setTokens(serviceId: string, tokens: OAuthTokens): Promise<void> {\n    this.tokens.set(serviceId, tokens);\n    return Promise.resolve();\n  }\n\n  clearTokens(serviceId: string): Promise<void> {\n    this.tokens.delete(serviceId);\n    return Promise.resolve();\n  }\n\n  getState(state: string): Promise<OAuthState | null> {\n    const oauthState = this.states.get(state);\n    if (!oauthState) {\n      return Promise.resolve(null);\n    }\n\n    // Check if state has expired\n    if (Date.now() - oauthState.createdAt > this.stateExpirationMs) {\n      this.states.delete(state);\n      return Promise.resolve(null);\n    }\n\n    return Promise.resolve(oauthState);\n  }\n\n  setState(oauthState: OAuthState): Promise<void> {\n    this.states.set(oauthState.state, oauthState);\n    this.cleanupExpiredStates();\n    return Promise.resolve();\n  }\n\n  clearState(state: string): Promise<void> {\n    this.states.delete(state);\n    return Promise.resolve();\n  }\n\n  /**\n   * Clean up expired states\n   */\n  private cleanupExpiredStates(): void {\n    const now = Date.now();\n    for (const [state, oauthState] of this.states) {\n      if (now - oauthState.createdAt > this.stateExpirationMs) {\n        this.states.delete(state);\n      }\n    }\n  }\n\n  /**\n   * Get all stored service IDs\n   */\n  getConnectedServices(): string[] {\n    return Array.from(this.tokens.keys());\n  }\n\n  /**\n   * Check if a service is connected\n   */\n  isConnected(serviceId: string): boolean {\n    const tokens = this.tokens.get(serviceId);\n    if (!tokens) return false;\n\n    // Check if token is expired\n    if (tokens.expiresAt && Date.now() > tokens.expiresAt) {\n      // Token expired, but might be refreshable\n      return !!tokens.refreshToken;\n    }\n\n    return true;\n  }\n\n  /**\n   * Clear all tokens\n   */\n  clearAll(): void {\n    this.tokens.clear();\n    this.states.clear();\n  }\n}\n\n/**\n * Default in-memory token store instance\n */\nexport const memoryTokenStore = new MemoryTokenStore();\n", "/**\n * OAuth Callback Handler\n *\n * Reusable handler for OAuth callback routes.\n */\n\nimport { OAuthService } from \"../providers/base.ts\";\nimport type { OAuthServiceConfig, TokenStore } from \"../types.ts\";\nimport { memoryTokenStore } from \"../token-store/memory.ts\";\nimport { getEnv } from \"../../../platform/compat/process.ts\";\n\nexport interface OAuthCallbackHandlerOptions {\n  /** Token store to use (defaults to memory store) */\n  tokenStore?: TokenStore;\n\n  /** Base URL for redirects (defaults to APP_URL or localhost) */\n  baseUrl?: string;\n\n  /** Success redirect path */\n  successRedirect?: string;\n\n  /** Error redirect path */\n  errorRedirect?: string;\n\n  /** Custom success callback */\n  onSuccess?: (serviceId: string, tokens: unknown) => void | Promise<void>;\n\n  /** Custom error callback */\n  onError?: (serviceId: string, error: string) => void | Promise<void>;\n}\n\n/**\n * Create an OAuth callback route handler\n *\n * @example\n * ```typescript\n * // app/api/auth/gmail/callback/route.ts\n * import { createOAuthCallbackHandler } from \"veryfront/oauth\";\n * import { gmailConfig } from \"veryfront/oauth/providers\";\n *\n * export const GET = createOAuthCallbackHandler(gmailConfig);\n * ```\n */\nexport function createOAuthCallbackHandler(\n  config: OAuthServiceConfig,\n  options: OAuthCallbackHandlerOptions = {},\n): (request: Request) => Promise<Response> {\n  const {\n    tokenStore = memoryTokenStore,\n    baseUrl,\n    successRedirect = \"/\",\n    errorRedirect = \"/\",\n    onSuccess,\n    onError,\n  } = options;\n\n  return async (request: Request): Promise<Response> => {\n    const url = new URL(request.url);\n    const code = url.searchParams.get(\"code\");\n    const state = url.searchParams.get(\"state\");\n    const error = url.searchParams.get(\"error\");\n    const errorDescription = url.searchParams.get(\"error_description\");\n\n    const appUrl = baseUrl ||\n      getEnv(\"APP_URL\") ||\n      getEnv(\"NEXT_PUBLIC_APP_URL\") ||\n      \"http://localhost:3000\";\n\n    // Handle OAuth errors\n    if (error) {\n      console.error(`OAuth error for ${config.serviceId}:`, error, errorDescription);\n      if (onError) {\n        await onError(config.serviceId, error);\n      }\n      const errorUrl = new URL(errorRedirect, appUrl);\n      errorUrl.searchParams.set(\"error\", error);\n      if (errorDescription) {\n        errorUrl.searchParams.set(\"error_description\", errorDescription);\n      }\n      return Response.redirect(errorUrl.toString());\n    }\n\n    // Validate code\n    if (!code) {\n      if (onError) {\n        await onError(config.serviceId, \"no_code\");\n      }\n      const errorUrl = new URL(errorRedirect, appUrl);\n      errorUrl.searchParams.set(\"error\", \"no_code\");\n      return Response.redirect(errorUrl.toString());\n    }\n\n    // Validate and retrieve state\n    let oauthState = null;\n    if (state) {\n      oauthState = await tokenStore.getState(state);\n      if (!oauthState) {\n        console.warn(`Invalid or expired state for ${config.serviceId}`);\n        // Continue anyway - some providers don't properly return state\n      }\n    }\n\n    const service = new OAuthService(config, tokenStore);\n    const redirectUri = `${appUrl}/api/auth/${config.serviceId}/callback`;\n\n    try {\n      const result = await service.exchangeCode({\n        code,\n        redirectUri,\n        codeVerifier: oauthState?.codeVerifier,\n      });\n\n      if (!result.success || !result.tokens) {\n        console.error(`Token exchange failed for ${config.serviceId}:`, result.error);\n        if (onError) {\n          await onError(config.serviceId, result.error || \"exchange_failed\");\n        }\n        const errorUrl = new URL(errorRedirect, appUrl);\n        errorUrl.searchParams.set(\"error\", result.error || \"token_exchange_failed\");\n        return Response.redirect(errorUrl.toString());\n      }\n\n      // Store tokens\n      await tokenStore.setTokens(config.serviceId, result.tokens);\n\n      // Clear state\n      if (state) {\n        await tokenStore.clearState(state);\n      }\n\n      // Call success callback\n      if (onSuccess) {\n        await onSuccess(config.serviceId, result.tokens);\n      }\n\n      // Redirect to success URL\n      const successUrl = new URL(successRedirect, appUrl);\n      successUrl.searchParams.set(\"connected\", config.serviceId);\n      return Response.redirect(successUrl.toString());\n    } catch (err) {\n      console.error(`OAuth callback error for ${config.serviceId}:`, err);\n      if (onError) {\n        await onError(config.serviceId, \"callback_error\");\n      }\n      const errorUrl = new URL(errorRedirect, appUrl);\n      errorUrl.searchParams.set(\"error\", \"callback_error\");\n      return Response.redirect(errorUrl.toString());\n    }\n  };\n}\n", "/**\n * OAuth Init Handler\n *\n * Reusable handler for initiating OAuth flows.\n */\n\nimport { OAuthService } from \"../providers/base.ts\";\nimport type { AuthorizationUrlOptions, OAuthServiceConfig, TokenStore } from \"../types.ts\";\nimport { memoryTokenStore } from \"../token-store/memory.ts\";\nimport { getEnv } from \"../../../platform/compat/process.ts\";\n\nexport interface OAuthInitHandlerOptions {\n  /** Token store to use (defaults to memory store) */\n  tokenStore?: TokenStore;\n\n  /** Base URL for callbacks (defaults to APP_URL or localhost) */\n  baseUrl?: string;\n\n  /** Additional authorization options */\n  authOptions?: AuthorizationUrlOptions;\n}\n\n/**\n * Create an OAuth init route handler\n *\n * @example\n * ```typescript\n * // app/api/auth/gmail/route.ts\n * import { createOAuthInitHandler } from \"veryfront/oauth\";\n * import { gmailConfig } from \"veryfront/oauth/providers\";\n *\n * export const GET = createOAuthInitHandler(gmailConfig);\n * ```\n */\nexport function createOAuthInitHandler(\n  config: OAuthServiceConfig,\n  options: OAuthInitHandlerOptions = {},\n): () => Promise<Response> {\n  const { tokenStore = memoryTokenStore, baseUrl, authOptions = {} } = options;\n\n  return async (): Promise<Response> => {\n    const service = new OAuthService(config, tokenStore);\n\n    if (!service.isConfigured()) {\n      return Response.json(\n        {\n          error: `${config.displayName} OAuth not configured`,\n          details: `Missing ${config.clientIdEnvVar} or ${config.clientSecretEnvVar}`,\n        },\n        { status: 500 },\n      );\n    }\n\n    // Use APP_URL from env, or default to localhost:3000 (the standard veryfront dev port)\n    const appUrl = baseUrl ||\n      getEnv(\"APP_URL\") ||\n      getEnv(\"NEXT_PUBLIC_APP_URL\") ||\n      \"http://localhost:3000\";\n\n    const redirectUri = `${appUrl}/api/auth/${config.serviceId}/callback`;\n\n    try {\n      const { url, state } = await service.createAuthorizationUrl({\n        ...authOptions,\n        redirectUri,\n      });\n\n      // Store state for CSRF protection\n      await tokenStore.setState(state);\n\n      return Response.redirect(url);\n    } catch (error) {\n      console.error(`OAuth init error for ${config.serviceId}:`, error);\n      return Response.json(\n        {\n          error: \"Failed to initiate OAuth flow\",\n          details: error instanceof Error ? error.message : \"Unknown error\",\n        },\n        { status: 500 },\n      );\n    }\n  };\n}\n\n/**\n * Create an OAuth status check handler\n *\n * @example\n * ```typescript\n * // app/api/auth/gmail/status/route.ts\n * import { createOAuthStatusHandler } from \"veryfront/oauth\";\n * import { gmailConfig } from \"veryfront/oauth/providers\";\n *\n * export const GET = createOAuthStatusHandler(gmailConfig);\n * ```\n */\nexport function createOAuthStatusHandler(\n  config: OAuthServiceConfig,\n  options: { tokenStore?: TokenStore } = {},\n): () => Promise<Response> {\n  const { tokenStore = memoryTokenStore } = options;\n\n  return async (): Promise<Response> => {\n    const tokens = await tokenStore.getTokens(config.serviceId);\n\n    const isConnected = !!tokens?.accessToken;\n    const isExpired = tokens?.expiresAt ? Date.now() > tokens.expiresAt : false;\n    const hasRefreshToken = !!tokens?.refreshToken;\n\n    return Response.json({\n      service: config.serviceId,\n      displayName: config.displayName,\n      connected: isConnected && (!isExpired || hasRefreshToken),\n      configured: !!(getEnv(config.clientIdEnvVar) && getEnv(config.clientSecretEnvVar)),\n      expiresAt: tokens?.expiresAt,\n      hasRefreshToken,\n    });\n  };\n}\n\n/**\n * Create an OAuth disconnect handler\n *\n * @example\n * ```typescript\n * // app/api/auth/gmail/route.ts\n * import { createOAuthDisconnectHandler } from \"veryfront/oauth\";\n * import { gmailConfig } from \"veryfront/oauth/providers\";\n *\n * export const DELETE = createOAuthDisconnectHandler(gmailConfig);\n * ```\n */\nexport function createOAuthDisconnectHandler(\n  config: OAuthServiceConfig,\n  options: { tokenStore?: TokenStore } = {},\n): () => Promise<Response> {\n  const { tokenStore = memoryTokenStore } = options;\n\n  return async (): Promise<Response> => {\n    await tokenStore.clearTokens(config.serviceId);\n\n    return Response.json({\n      success: true,\n      message: `Disconnected from ${config.displayName}`,\n    });\n  };\n}\n"],
-  "mappings": ";AAMA,IAAM,cAAc;AAAA,EAClB,IAAI,KAAiC;AACnC,WAAO,QAAQ,IAAI,GAAG;AAAA,EACxB;AAAA,EACA,IAAI,KAAa,OAAqB;AACpC,YAAQ,IAAI,GAAG,IAAI;AAAA,EACrB;AAAA,EACA,OAAO,KAAmB;AACxB,WAAO,QAAQ,IAAI,GAAG;AAAA,EACxB;AAAA,EACA,IAAI,KAAsB;AACxB,WAAO,OAAO,QAAQ;AAAA,EACxB;AAAA,EACA,WAAmC;AACjC,WAAO,EAAE,GAAG,QAAQ,IAAI;AAAA,EAC1B;AACF;AAGA,IAAI,OAAO,WAAW,SAAS,aAAa;AAC1C,EAAC,WAAmB,OAAO;AAAA,IACzB,KAAK;AAAA,IACL,KAAK,MAAM,QAAQ,IAAI;AAAA,EACzB;AACF,WAAW,OAAQ,WAAmB,KAAK,QAAQ,aAAa;AAC9D,EAAC,WAAmB,KAAK,MAAM;AACjC;;;AChCO,IAAM,SAAS,OAAO,SAAS;AAC/B,IAAM,SACX,OAAQ,WAA8D,YAAY,eACjF,WAA8D,SAAS,UAAU,SAChF;AACG,IAAM,QAAQ,OAAQ,WAAiC,QAAQ;AAC/D,IAAM,eAAe,OAAO,eAAe,eAAe,YAAY,cAC3E,mBAAmB;;;ACLrB,IAAM,cAAe,WAA2D;AAChF,IAAM,iBAAiB,CAAC,CAAC,aAAa,UAAU;AAsDzC,SAAS,OAAO,KAAiC;AACtD,MAAI,QAAS;AACX,WAAO,KAAK,IAAI,IAAI,GAAG;AAAA,EACzB;AACA,MAAI,gBAAgB;AAClB,WAAO,YAAa,IAAI,GAAG;AAAA,EAC7B;AACA,SAAO;AACT;;;AC5CA,SAAS,qBAAqB,QAAwB;AACpD,QAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,SAAO,gBAAgB,KAAK;AAC5B,SAAO,MAAM,KAAK,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,GAAG,MAAM;AACjG;AAKA,SAAS,uBAA+B;AACtC,SAAO,qBAAqB,EAAE;AAChC;AAKA,eAAe,sBAAsB,UAAmC;AACtE,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,QAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;AACvD,SAAO,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,IAAI,CAAC,CAAC,EACrD,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,EAAE;AACtB;AAKO,IAAM,gBAAN,MAAoB;AAAA,EAGzB,YAAY,QAA6B;AACvC,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,cAA6B;AAC3B,WAAO,OAAO,KAAK,OAAO,cAAc,KAAK;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAiC;AAC/B,WAAO,OAAO,KAAK,OAAO,kBAAkB,KAAK;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA,EAKA,eAAwB;AACtB,WAAO,CAAC,EAAE,KAAK,YAAY,KAAK,KAAK,gBAAgB;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,uBACJ,UAAkE,CAAC,GACtB;AAC7C,UAAM,WAAW,KAAK,YAAY;AAClC,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,MAAM,GAAG,KAAK,OAAO,cAAc,iBAAiB;AAAA,IAChE;AAEA,UAAM,QAAQ,QAAQ,SAAS,qBAAqB,EAAE;AACtD,UAAM,SAAS,QAAQ,UAAU,QAAQ,iBAAiB,CAAC;AAC3D,UAAM,cAAc,QAAQ,eAAe;AAC3C,UAAM,UAAU,QAAQ,YAAY;AAEpC,QAAI;AACJ,QAAI;AAEJ,QAAI,SAAS;AACX,qBAAe,qBAAqB;AACpC,sBAAgB,MAAM,sBAAsB,YAAY;AAAA,IAC1D;AAEA,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,WAAW;AAAA,MACX,cAAc;AAAA,MACd,eAAe;AAAA,MACf;AAAA,MACA,GAAI,OAAO,SAAS,KAAK,EAAE,OAAO,OAAO,KAAK,GAAG,EAAE;AAAA,MACnD,GAAI,iBAAiB;AAAA,QACnB,gBAAgB;AAAA,QAChB,uBAAuB;AAAA,MACzB;AAAA,MACA,GAAG,KAAK,OAAO;AAAA,MACf,GAAG,QAAQ;AAAA,IACb,CAAC;AAED,UAAM,aAAyB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,KAAK,IAAI;AAAA,IACtB;AAEA,WAAO;AAAA,MACL,KAAK,GAAG,KAAK,OAAO,gBAAgB,IAAI,OAAO,SAAS,CAAC;AAAA,MACzD,OAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,SAA6D;AAC9E,UAAM,WAAW,KAAK,YAAY;AAClC,UAAM,eAAe,KAAK,gBAAgB;AAE1C,QAAI,CAAC,YAAY,CAAC,cAAc;AAC9B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,kBACE,WAAW,KAAK,OAAO,cAAc,OAAO,KAAK,OAAO,kBAAkB;AAAA,MAC9E;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,cAAc,QAAQ;AAAA,MACtB,GAAI,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,aAAa;AAAA,MAClE,GAAI,CAAC,KAAK,OAAO,gBAAgB;AAAA,QAC/B,WAAW;AAAA,QACX,eAAe;AAAA,MACjB;AAAA,MACA,GAAG,KAAK,OAAO;AAAA,IACjB,CAAC;AAED,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,OAAO,cAAc;AAC5B,YAAM,cAAc,KAAK,GAAG,QAAQ,IAAI,YAAY,EAAE;AACtD,cAAQ,gBAAgB,SAAS,WAAW;AAAA,IAC9C;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK,OAAO,UAAU;AAAA,QACjD,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB,CAAC;AAED,YAAM,OAAO,MAAM,SAAS,KAAK;AAEjC,UAAI,CAAC,SAAS,IAAI;AAChB,eAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO,KAAK,SAAS;AAAA,UACrB,kBAAkB,KAAK,qBAAqB,UAAU,SAAS,MAAM;AAAA,QACvE;AAAA,MACF;AAEA,YAAM,UAAU,KAAK,OAAO,wBAAwB,CAAC;AACrD,YAAM,SAAsB;AAAA,QAC1B,aAAa,KAAK,QAAQ,eAAe,cAAc;AAAA,QACvD,cAAc,KAAK,QAAQ,gBAAgB,eAAe;AAAA,QAC1D,WAAW,KAAK,QAAQ,aAAa,YAAY;AAAA,QACjD,OAAO,KAAK,QAAQ,SAAS,OAAO;AAAA,QACpC,SAAS,KAAK;AAAA,MAChB;AAEA,YAAM,YAAY,KAAK,QAAQ,aAAa,YAAY;AACxD,UAAI,WAAW;AACb,eAAO,YAAY,KAAK,IAAI,IAAI,YAAY;AAAA,MAC9C;AAEA,aAAO,EAAE,SAAS,MAAM,OAAO;AAAA,IACjC,SAAS,OAAO;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAc,cAAoD;AACtE,UAAM,WAAW,KAAK,YAAY;AAClC,UAAM,eAAe,KAAK,gBAAgB;AAE1C,QAAI,CAAC,YAAY,CAAC,cAAc;AAC9B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,MACT;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,GAAI,CAAC,KAAK,OAAO,gBAAgB;AAAA,QAC/B,WAAW;AAAA,QACX,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,OAAO,cAAc;AAC5B,YAAM,cAAc,KAAK,GAAG,QAAQ,IAAI,YAAY,EAAE;AACtD,cAAQ,gBAAgB,SAAS,WAAW;AAAA,IAC9C;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK,OAAO,UAAU;AAAA,QACjD,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB,CAAC;AAED,YAAM,OAAO,MAAM,SAAS,KAAK;AAEjC,UAAI,CAAC,SAAS,IAAI;AAChB,eAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO,KAAK,SAAS;AAAA,UACrB,kBAAkB,KAAK;AAAA,QACzB;AAAA,MACF;AAEA,YAAM,UAAU,KAAK,OAAO,wBAAwB,CAAC;AACrD,YAAM,SAAsB;AAAA,QAC1B,aAAa,KAAK,QAAQ,eAAe,cAAc;AAAA,QACvD,cAAc,KAAK,QAAQ,gBAAgB,eAAe,KAAK;AAAA,QAC/D,WAAW,KAAK,QAAQ,aAAa,YAAY;AAAA,QACjD,OAAO,KAAK,QAAQ,SAAS,OAAO;AAAA,MACtC;AAEA,YAAM,YAAY,KAAK,QAAQ,aAAa,YAAY;AACxD,UAAI,WAAW;AACb,eAAO,YAAY,KAAK,IAAI,IAAI,YAAY;AAAA,MAC9C;AAEA,aAAO,EAAE,SAAS,MAAM,OAAO;AAAA,IACjC,SAAS,OAAO;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,OAAiC;AACjD,QAAI,CAAC,KAAK,OAAO,eAAe;AAC9B,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK,OAAO,eAAe;AAAA,QACtD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,IAAI,gBAAgB,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,MAChD,CAAC;AAED,aAAO,SAAS;AAAA,IAClB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAKO,IAAM,eAAN,cAA2B,cAAc;AAAA,EAI9C,YAAY,QAA4B,YAAyB;AAC/D,UAAM,MAAM;AACZ,SAAK,gBAAgB;AACrB,SAAK,aAAa;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,YAAoB;AACtB,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,aAAqB;AACvB,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKS,uBACP,UAAmC,CAAC,GACS;AAC7C,WAAO,MAAM,uBAAuB;AAAA,MAClC,GAAG;AAAA,MACH,eAAe,KAAK,cAAc;AAAA,IACpC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAyC;AAC7C,QAAI,CAAC,KAAK,YAAY;AACpB,aAAO;AAAA,IACT;AAEA,UAAM,SAAS,MAAM,KAAK,WAAW,UAAU,KAAK,SAAS;AAC7D,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAGA,QAAI,OAAO,aAAa,KAAK,IAAI,IAAI,OAAO,YAAY,KAAQ;AAC9D,UAAI,OAAO,cAAc;AACvB,cAAM,SAAS,MAAM,KAAK,cAAc,OAAO,YAAY;AAC3D,YAAI,OAAO,WAAW,OAAO,QAAQ;AACnC,gBAAM,KAAK,WAAW,UAAU,KAAK,WAAW,OAAO,MAAM;AAC7D,iBAAO,OAAO,OAAO;AAAA,QACvB;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAEA,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MACJ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,QAAQ,MAAM,KAAK,eAAe;AACxC,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,0BAA0B,KAAK,cAAc,WAAW,EAAE;AAAA,IAC5E;AAEA,UAAM,MAAM,SAAS,WAAW,MAAM,IAAI,WAAW,GAAG,KAAK,UAAU,GAAG,QAAQ;AAElF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,GAAG;AAAA,MACH,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACb;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,GAAG,KAAK,cAAc,WAAW,eAAe,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IAC5F;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AACF;;;ACxYA,IAAM,aAAa;AAAA,EACjB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,aAAa;AAAA,EACb,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,IACpB,aAAa;AAAA,IACb,QAAQ;AAAA,EACV;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,iBAAqC;AAAA,EAChD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,eAAmC;AAAA,EAC9C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,iBAAiB;AAAA,EAC5B,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,OAAO;AACT;;;ACjFA,IAAM,gBAAgB;AAAA,EACpB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,IACpB,eAAe;AAAA,EACjB;AACF;AAKO,IAAM,gBAAoC;AAAA,EAC/C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,mBAAuC;AAAA,EAClD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,iBAAqC;AAAA,EAChD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,oBAAoB;AAAA,EAC/B,SAAS;AAAA,EACT,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,UAAU;AACZ;;;AC/FA,IAAM,gBAAgB;AAAA,EACpB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,IACpB,UAAU;AAAA,IACV,QAAQ;AAAA,EACV;AACF;AAKO,IAAM,aAAiC;AAAA,EAC5C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,mBAAuC;AAAA,EAClD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,kBAAsC;AAAA,EACjD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA;AAAA,EAEb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,sBAAsB,CAAC;AAAA,EACvB,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,oBAAoB;AAAA,EAC/B,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,WAAW;AACb;;;AC7EO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,QAAQ,MAAM;AAAA,EAC9B,sBAAsB,CAAC;AACzB;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,iBAAiB,cAAc,YAAY;AAAA,EAC3D,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,cAAc;AAAA,EACd,sBAAsB;AAAA,IACpB,OAAO;AAAA,EACT;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,WAAW;AAAA,EAC3B,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,YAAY,QAAQ;AAAA,EACpC,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,QAAQ,OAAO;AAAA,EAC/B,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,aAAa,KAAK;AAAA,EAClC,sBAAsB,CAAC;AACzB;AAKO,IAAM,iBAAqC;AAAA,EAChD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,qBAAqB,sBAAsB,mBAAmB;AAAA,EAC9E,cAAc;AAAA,EACd,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB;AAAA,IACpB,mBAAmB;AAAA,EACrB;AACF;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,6BAA6B,4BAA4B;AAAA,EACzE,sBAAsB,CAAC;AACzB;AAKO,IAAM,mBAAuC;AAAA,EAClD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,OAAO,eAAe;AAAA,EACtC,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,cAAc,cAAc,gBAAgB;AAAA,EAC5D,cAAc;AAAA,EACd,sBAAsB,CAAC;AACzB;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,SAAS;AAAA,EACzB,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,WAAW,eAAe,cAAc;AAAA,EACxD,sBAAsB,CAAC;AACzB;AAKO,IAAM,aAAiC;AAAA,EAC5C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,gBAAgB,iBAAiB,WAAW;AAAA,EAC5D,cAAc;AAAA,EACd,sBAAsB,CAAC;AACzB;AAKO,IAAM,iBAAqC;AAAA,EAChD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,kBAAsC;AAAA,EACjD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,WAAW;AAAA,EAC3B,sBAAsB,CAAC;AACzB;AAKO,IAAM,kBAAsC;AAAA,EACjD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,iBAAiB,kBAAkB,aAAa;AAAA,EAChE,sBAAsB,CAAC;AACzB;AAKO,IAAM,mBAAuC;AAAA,EAClD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,kCAAkC;AAAA,EAClD,sBAAsB,CAAC;AACzB;AAKO,IAAM,aAAiC;AAAA,EAC5C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,UAAU,WAAW,SAAS,2BAA2B,gBAAgB;AAAA,EACzF,sBAAsB,CAAC;AACzB;AAKO,IAAM,YAAgC;AAAA,EAC3C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,aAAa,WAAW;AAAA,EACxC,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,QAAQ,OAAO;AAAA,EAC/B,sBAAsB;AAAA,IACpB,YAAY;AAAA,EACd;AACF;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,kBAAsC;AAAA,EACjD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,iBAAiB;AAAA,EAC5B,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,UAAU;AAAA,EACV,WAAW;AAAA,EACX,WAAW;AAAA,EACX,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,WAAW;AACb;;;ACpcO,IAAM,mBAAN,MAA6C;AAAA,EAA7C;AACL,SAAQ,SAAmC,oBAAI,IAAI;AACnD,SAAQ,SAAkC,oBAAI,IAAI;AAGlD;AAAA,SAAQ,oBAAoB,KAAK,KAAK;AAAA;AAAA,EAEtC,UAAU,WAAgD;AACxD,WAAO,QAAQ,QAAQ,KAAK,OAAO,IAAI,SAAS,KAAK,IAAI;AAAA,EAC3D;AAAA,EAEA,UAAU,WAAmB,QAAoC;AAC/D,SAAK,OAAO,IAAI,WAAW,MAAM;AACjC,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,YAAY,WAAkC;AAC5C,SAAK,OAAO,OAAO,SAAS;AAC5B,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,SAAS,OAA2C;AAClD,UAAM,aAAa,KAAK,OAAO,IAAI,KAAK;AACxC,QAAI,CAAC,YAAY;AACf,aAAO,QAAQ,QAAQ,IAAI;AAAA,IAC7B;AAGA,QAAI,KAAK,IAAI,IAAI,WAAW,YAAY,KAAK,mBAAmB;AAC9D,WAAK,OAAO,OAAO,KAAK;AACxB,aAAO,QAAQ,QAAQ,IAAI;AAAA,IAC7B;AAEA,WAAO,QAAQ,QAAQ,UAAU;AAAA,EACnC;AAAA,EAEA,SAAS,YAAuC;AAC9C,SAAK,OAAO,IAAI,WAAW,OAAO,UAAU;AAC5C,SAAK,qBAAqB;AAC1B,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,WAAW,OAA8B;AACvC,SAAK,OAAO,OAAO,KAAK;AACxB,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAA6B;AACnC,UAAM,MAAM,KAAK,IAAI;AACrB,eAAW,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ;AAC7C,UAAI,MAAM,WAAW,YAAY,KAAK,mBAAmB;AACvD,aAAK,OAAO,OAAO,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,uBAAiC;AAC/B,WAAO,MAAM,KAAK,KAAK,OAAO,KAAK,CAAC;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,WAA4B;AACtC,UAAM,SAAS,KAAK,OAAO,IAAI,SAAS;AACxC,QAAI,CAAC;AAAQ,aAAO;AAGpB,QAAI,OAAO,aAAa,KAAK,IAAI,IAAI,OAAO,WAAW;AAErD,aAAO,CAAC,CAAC,OAAO;AAAA,IAClB;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,WAAiB;AACf,SAAK,OAAO,MAAM;AAClB,SAAK,OAAO,MAAM;AAAA,EACpB;AACF;AAKO,IAAM,mBAAmB,IAAI,iBAAiB;;;AC/D9C,SAAS,2BACd,QACA,UAAuC,CAAC,GACC;AACzC,QAAM;AAAA,IACJ,aAAa;AAAA,IACb;AAAA,IACA,kBAAkB;AAAA,IAClB,gBAAgB;AAAA,IAChB;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,SAAO,OAAO,YAAwC;AACpD,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,UAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,UAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,UAAM,mBAAmB,IAAI,aAAa,IAAI,mBAAmB;AAEjE,UAAM,SAAS,WACb,OAAO,SAAS,KAChB,OAAO,qBAAqB,KAC5B;AAGF,QAAI,OAAO;AACT,cAAQ,MAAM,mBAAmB,OAAO,SAAS,KAAK,OAAO,gBAAgB;AAC7E,UAAI,SAAS;AACX,cAAM,QAAQ,OAAO,WAAW,KAAK;AAAA,MACvC;AACA,YAAM,WAAW,IAAI,IAAI,eAAe,MAAM;AAC9C,eAAS,aAAa,IAAI,SAAS,KAAK;AACxC,UAAI,kBAAkB;AACpB,iBAAS,aAAa,IAAI,qBAAqB,gBAAgB;AAAA,MACjE;AACA,aAAO,SAAS,SAAS,SAAS,SAAS,CAAC;AAAA,IAC9C;AAGA,QAAI,CAAC,MAAM;AACT,UAAI,SAAS;AACX,cAAM,QAAQ,OAAO,WAAW,SAAS;AAAA,MAC3C;AACA,YAAM,WAAW,IAAI,IAAI,eAAe,MAAM;AAC9C,eAAS,aAAa,IAAI,SAAS,SAAS;AAC5C,aAAO,SAAS,SAAS,SAAS,SAAS,CAAC;AAAA,IAC9C;AAGA,QAAI,aAAa;AACjB,QAAI,OAAO;AACT,mBAAa,MAAM,WAAW,SAAS,KAAK;AAC5C,UAAI,CAAC,YAAY;AACf,gBAAQ,KAAK,gCAAgC,OAAO,SAAS,EAAE;AAAA,MAEjE;AAAA,IACF;AAEA,UAAM,UAAU,IAAI,aAAa,QAAQ,UAAU;AACnD,UAAM,cAAc,GAAG,MAAM,aAAa,OAAO,SAAS;AAE1D,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,aAAa;AAAA,QACxC;AAAA,QACA;AAAA,QACA,cAAc,YAAY;AAAA,MAC5B,CAAC;AAED,UAAI,CAAC,OAAO,WAAW,CAAC,OAAO,QAAQ;AACrC,gBAAQ,MAAM,6BAA6B,OAAO,SAAS,KAAK,OAAO,KAAK;AAC5E,YAAI,SAAS;AACX,gBAAM,QAAQ,OAAO,WAAW,OAAO,SAAS,iBAAiB;AAAA,QACnE;AACA,cAAM,WAAW,IAAI,IAAI,eAAe,MAAM;AAC9C,iBAAS,aAAa,IAAI,SAAS,OAAO,SAAS,uBAAuB;AAC1E,eAAO,SAAS,SAAS,SAAS,SAAS,CAAC;AAAA,MAC9C;AAGA,YAAM,WAAW,UAAU,OAAO,WAAW,OAAO,MAAM;AAG1D,UAAI,OAAO;AACT,cAAM,WAAW,WAAW,KAAK;AAAA,MACnC;AAGA,UAAI,WAAW;AACb,cAAM,UAAU,OAAO,WAAW,OAAO,MAAM;AAAA,MACjD;AAGA,YAAM,aAAa,IAAI,IAAI,iBAAiB,MAAM;AAClD,iBAAW,aAAa,IAAI,aAAa,OAAO,SAAS;AACzD,aAAO,SAAS,SAAS,WAAW,SAAS,CAAC;AAAA,IAChD,SAAS,KAAK;AACZ,cAAQ,MAAM,4BAA4B,OAAO,SAAS,KAAK,GAAG;AAClE,UAAI,SAAS;AACX,cAAM,QAAQ,OAAO,WAAW,gBAAgB;AAAA,MAClD;AACA,YAAM,WAAW,IAAI,IAAI,eAAe,MAAM;AAC9C,eAAS,aAAa,IAAI,SAAS,gBAAgB;AACnD,aAAO,SAAS,SAAS,SAAS,SAAS,CAAC;AAAA,IAC9C;AAAA,EACF;AACF;;;ACnHO,SAAS,uBACd,QACA,UAAmC,CAAC,GACX;AACzB,QAAM,EAAE,aAAa,kBAAkB,SAAS,cAAc,CAAC,EAAE,IAAI;AAErE,SAAO,YAA+B;AACpC,UAAM,UAAU,IAAI,aAAa,QAAQ,UAAU;AAEnD,QAAI,CAAC,QAAQ,aAAa,GAAG;AAC3B,aAAO,SAAS;AAAA,QACd;AAAA,UACE,OAAO,GAAG,OAAO,WAAW;AAAA,UAC5B,SAAS,WAAW,OAAO,cAAc,OAAO,OAAO,kBAAkB;AAAA,QAC3E;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,SAAS,WACb,OAAO,SAAS,KAChB,OAAO,qBAAqB,KAC5B;AAEF,UAAM,cAAc,GAAG,MAAM,aAAa,OAAO,SAAS;AAE1D,QAAI;AACF,YAAM,EAAE,KAAK,MAAM,IAAI,MAAM,QAAQ,uBAAuB;AAAA,QAC1D,GAAG;AAAA,QACH;AAAA,MACF,CAAC;AAGD,YAAM,WAAW,SAAS,KAAK;AAE/B,aAAO,SAAS,SAAS,GAAG;AAAA,IAC9B,SAAS,OAAO;AACd,cAAQ,MAAM,wBAAwB,OAAO,SAAS,KAAK,KAAK;AAChE,aAAO,SAAS;AAAA,QACd;AAAA,UACE,OAAO;AAAA,UACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QACpD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;AAcO,SAAS,yBACd,QACA,UAAuC,CAAC,GACf;AACzB,QAAM,EAAE,aAAa,iBAAiB,IAAI;AAE1C,SAAO,YAA+B;AACpC,UAAM,SAAS,MAAM,WAAW,UAAU,OAAO,SAAS;AAE1D,UAAM,cAAc,CAAC,CAAC,QAAQ;AAC9B,UAAM,YAAY,QAAQ,YAAY,KAAK,IAAI,IAAI,OAAO,YAAY;AACtE,UAAM,kBAAkB,CAAC,CAAC,QAAQ;AAElC,WAAO,SAAS,KAAK;AAAA,MACnB,SAAS,OAAO;AAAA,MAChB,aAAa,OAAO;AAAA,MACpB,WAAW,gBAAgB,CAAC,aAAa;AAAA,MACzC,YAAY,CAAC,EAAE,OAAO,OAAO,cAAc,KAAK,OAAO,OAAO,kBAAkB;AAAA,MAChF,WAAW,QAAQ;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAcO,SAAS,6BACd,QACA,UAAuC,CAAC,GACf;AACzB,QAAM,EAAE,aAAa,iBAAiB,IAAI;AAE1C,SAAO,YAA+B;AACpC,UAAM,WAAW,YAAY,OAAO,SAAS;AAE7C,WAAO,SAAS,KAAK;AAAA,MACnB,SAAS;AAAA,MACT,SAAS,qBAAqB,OAAO,WAAW;AAAA,IAClD,CAAC;AAAA,EACH;AACF;",
+  "sourcesContent": ["/**\n * Shim for Deno.env in Node.js environment\n * This file is injected by esbuild to provide Deno.env compatibility\n */\n\n// @ts-ignore - Global Deno shim for Node.js\nglobalThis.Deno = globalThis.Deno || {\n  env: {\n    get(key: string): string | undefined {\n      return process.env[key];\n    },\n    set(key: string, value: string): void {\n      process.env[key] = value;\n    },\n    delete(key: string): void {\n      delete process.env[key];\n    },\n    has(key: string): boolean {\n      return key in process.env;\n    },\n    toObject(): Record<string, string> {\n      return { ...process.env } as Record<string, string>;\n    },\n  },\n};\n", "export const isDeno = typeof Deno !== \"undefined\";\nexport const isNode =\n  typeof (globalThis as { process?: { versions?: { node?: string } } }).process !== \"undefined\" &&\n  (globalThis as { process?: { versions?: { node?: string } } }).process?.versions?.node !==\n    undefined;\nexport const isBun = typeof (globalThis as { Bun?: unknown }).Bun !== \"undefined\";\nexport const isCloudflare = typeof globalThis !== \"undefined\" && \"caches\" in globalThis &&\n  \"WebSocketPair\" in globalThis;\n\n/**\n * Detect if running in Node.js (vs Deno)\n * Use this function instead of the constant when runtime detection needs to happen\n * at call time (e.g., when bundled with esbuild's __esm lazy initialization pattern)\n */\nexport function isNodeRuntime(): boolean {\n  // deno-lint-ignore no-explicit-any\n  const _global = globalThis as any;\n  return typeof Deno === \"undefined\" && typeof _global.process !== \"undefined\" &&\n    !!_global.process?.versions?.node;\n}\n", "import { isDeno as IS_DENO } from \"./runtime.ts\";\n\nconst nodeProcess = (globalThis as { process?: typeof import(\"node:process\") }).process;\nconst hasNodeProcess = !!nodeProcess?.versions?.node;\n\nexport function getArgs(): string[] {\n  if (IS_DENO) {\n    return Deno.args;\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.argv.slice(2);\n  }\n  return [];\n}\n\nexport function exit(code?: number): never {\n  if (IS_DENO) {\n    Deno.exit(code);\n  }\n  if (hasNodeProcess) {\n    nodeProcess!.exit(code);\n  }\n  throw new Error(\"exit() is not supported in this runtime\");\n}\n\nexport function cwd(): string {\n  if (IS_DENO) {\n    return Deno.cwd();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.cwd();\n  }\n  throw new Error(\"cwd() is not supported in this runtime\");\n}\n\nexport function chdir(directory: string): void {\n  if (IS_DENO) {\n    Deno.chdir(directory);\n  } else {\n    if (hasNodeProcess) {\n      nodeProcess!.chdir(directory);\n      return;\n    }\n    throw new Error(\"chdir() is not supported in this runtime\");\n  }\n}\n\nexport function env(): Record<string, string> {\n  if (IS_DENO) {\n    return Deno.env.toObject();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.env as Record<string, string>;\n  }\n  return {};\n}\n\nexport function getEnv(key: string): string | undefined {\n  if (IS_DENO) {\n    return Deno.env.get(key);\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.env[key];\n  }\n  return undefined;\n}\n\n/**\n * Get an environment variable or throw if not set\n * @throws Error if the environment variable is not set\n */\nexport function requireEnv(key: string): string {\n  const value = getEnv(key);\n  if (value === undefined) {\n    throw new Error(`Required environment variable \"${key}\" is not set`);\n  }\n  return value;\n}\n\nexport function setEnv(key: string, value: string): void {\n  if (IS_DENO) {\n    Deno.env.set(key, value);\n  } else {\n    if (hasNodeProcess) {\n      nodeProcess!.env[key] = value;\n      return;\n    }\n    throw new Error(\"setEnv() is not supported in this runtime\");\n  }\n}\n\nexport function deleteEnv(key: string): void {\n  if (IS_DENO) {\n    Deno.env.delete(key);\n  } else {\n    if (hasNodeProcess) {\n      delete nodeProcess!.env[key];\n      return;\n    }\n    throw new Error(\"deleteEnv() is not supported in this runtime\");\n  }\n}\n\nexport function pid(): number {\n  if (IS_DENO) {\n    return Deno.pid;\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.pid;\n  }\n  return 0;\n}\n\nexport function ppid(): number {\n  if (IS_DENO && \"ppid\" in Deno) {\n    return Deno.ppid || 0;\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.ppid || 0;\n  }\n  return 0;\n}\n\nexport function memoryUsage(): {\n  rss: number;\n  heapTotal: number;\n  heapUsed: number;\n  external: number;\n} {\n  if (IS_DENO) {\n    const usage = Deno.memoryUsage();\n    return {\n      rss: usage.rss,\n      heapTotal: usage.heapTotal,\n      heapUsed: usage.heapUsed,\n      external: usage.external,\n    };\n  }\n\n  if (!hasNodeProcess) {\n    throw new Error(\"memoryUsage() is not supported in this runtime\");\n  }\n\n  const usage = nodeProcess!.memoryUsage();\n  return {\n    rss: usage.rss,\n    heapTotal: usage.heapTotal,\n    heapUsed: usage.heapUsed,\n    external: usage.external || 0,\n  };\n}\n\n/**\n * Check if stdin is a TTY (terminal)\n */\nexport function isInteractive(): boolean {\n  if (IS_DENO) {\n    return Deno.stdin.isTerminal();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.stdin.isTTY ?? false;\n  }\n  return false;\n}\n\n/**\n * Get network interfaces\n */\nexport async function getNetworkInterfaces(): Promise<\n  Array<{ name: string; address: string; family: \"IPv4\" | \"IPv6\" }>\n> {\n  if (IS_DENO) {\n    const interfaces = Deno.networkInterfaces();\n    return interfaces.map((iface) => ({\n      name: iface.name,\n      address: iface.address,\n      family: iface.family as \"IPv4\" | \"IPv6\",\n    }));\n  }\n\n  if (!hasNodeProcess) {\n    throw new Error(\"networkInterfaces() is not supported in this runtime\");\n  }\n\n  const os = await import(\"node:os\");\n  const interfaces = os.networkInterfaces();\n  const result: Array<{ name: string; address: string; family: \"IPv4\" | \"IPv6\" }> = [];\n\n  for (const [name, addrs] of Object.entries(interfaces)) {\n    if (!addrs) continue;\n    for (const addr of addrs) {\n      result.push({\n        name,\n        address: addr.address,\n        family: addr.family as \"IPv4\" | \"IPv6\",\n      });\n    }\n  }\n\n  return result;\n}\n\n/**\n * Get runtime version string\n */\nexport function getRuntimeVersion(): string {\n  if (IS_DENO) {\n    return `Deno ${Deno.version.deno}`;\n  }\n  if (\"Bun\" in globalThis) {\n    return `Bun ${(globalThis as unknown as { Bun: { version: string } }).Bun.version}`;\n  }\n  if (hasNodeProcess) {\n    return `Node.js ${nodeProcess!.version}`;\n  }\n  return \"unknown\";\n}\n\n/**\n * Register a signal handler (SIGINT, SIGTERM) for graceful shutdown\n */\nexport function onSignal(signal: \"SIGINT\" | \"SIGTERM\", handler: () => void): void {\n  if (IS_DENO) {\n    Deno.addSignalListener(signal, handler);\n  } else if (hasNodeProcess) {\n    nodeProcess!.on(signal, handler);\n  }\n}\n\n/**\n * Unreference a timer to prevent it from keeping the process alive\n */\nexport function unrefTimer(timerId: ReturnType<typeof setInterval>): void {\n  if (IS_DENO) {\n    Deno.unrefTimer(timerId as number);\n  } else if (timerId && typeof timerId === \"object\" && \"unref\" in timerId) {\n    (timerId as { unref: () => void }).unref();\n  }\n}\n\n/**\n * Get the executable path of the current runtime\n */\nexport function execPath(): string {\n  if (IS_DENO) {\n    return Deno.execPath();\n  }\n  if (hasNodeProcess) {\n    return nodeProcess!.execPath;\n  }\n  return \"\";\n}\n\n/**\n * Get process uptime in seconds\n * Returns OS uptime on Deno, process uptime on Node.js\n */\nexport function uptime(): number {\n  if (IS_DENO) {\n    // Deno.osUptime() returns system uptime in seconds\n    return Deno.osUptime?.() ?? 0;\n  }\n  if (hasNodeProcess) {\n    // process.uptime() returns process uptime in seconds\n    return nodeProcess!.uptime?.() ?? 0;\n  }\n  return 0;\n}\n\n/**\n * Get stdout stream for writing\n * Returns null if not available (e.g., in browser/workers)\n */\nexport function getStdout(): { write: (data: string) => void } | null {\n  if (IS_DENO) {\n    const encoder = new TextEncoder();\n    return {\n      write: (data: string) => {\n        Deno.stdout.writeSync(encoder.encode(data));\n      },\n    };\n  }\n  if (hasNodeProcess && nodeProcess!.stdout) {\n    return {\n      write: (data: string) => {\n        nodeProcess!.stdout.write(data);\n      },\n    };\n  }\n  return null;\n}\n\n// Cached Node.js modules for synchronous prompt\nlet cachedNodeFs: typeof import(\"node:fs\") | null = null;\n\n/**\n * Synchronous prompt function that works across Deno and Node.js\n * Displays a message and reads user input from stdin\n */\nexport function promptSync(message?: string): string | null {\n  if (IS_DENO) {\n    // Deno has a built-in prompt() function\n    return prompt(message);\n  }\n\n  if (hasNodeProcess) {\n    // Print the message\n    if (message) {\n      nodeProcess!.stdout.write(message + \" \");\n    }\n\n    // Lazy load fs module\n    if (!cachedNodeFs) {\n      // Dynamic import converted to sync require for bundling\n      // @ts-ignore - dynamic require for Node.js\n      cachedNodeFs = globalThis.require?.(\"node:fs\") || null;\n      if (!cachedNodeFs) {\n        // Try alternative approach\n        try {\n          // @ts-ignore: __require is injected by bundlers for Node.js require\n          cachedNodeFs = __require(\"node:fs\");\n        } catch {\n          return null;\n        }\n      }\n    }\n\n    if (!cachedNodeFs) {\n      return null;\n    }\n\n    // Read synchronously using fs\n    // This works by reading from file descriptor 0 (stdin)\n    // Use Uint8Array for cross-platform compatibility\n    const bufferSize = 1024;\n    const uint8Array = new Uint8Array(bufferSize);\n    let input = \"\";\n\n    try {\n      // Read from stdin (fd 0) synchronously\n      const bytesRead = cachedNodeFs.readSync(0, uint8Array, 0, bufferSize, null);\n      if (bytesRead > 0) {\n        const decoder = new TextDecoder(\"utf-8\");\n        input = decoder.decode(uint8Array.subarray(0, bytesRead)).trim();\n      }\n    } catch {\n      // If stdin is not available or EOF, return null\n      return null;\n    }\n\n    return input || null;\n  }\n\n  return null;\n}\n", "/**\n * Base OAuth Provider\n *\n * Generic OAuth 2.0 implementation that can be extended for specific providers.\n */\n\nimport type {\n  AuthorizationUrlOptions,\n  OAuthProviderConfig,\n  OAuthServiceConfig,\n  OAuthState,\n  OAuthTokens,\n  TokenExchangeOptions,\n  TokenExchangeResult,\n  TokenStore,\n} from \"../types.ts\";\nimport { getEnv } from \"../../../platform/compat/process.ts\";\n\n/**\n * Generate cryptographically secure random string\n */\nfunction generateRandomString(length: number): string {\n  const array = new Uint8Array(length);\n  crypto.getRandomValues(array);\n  return Array.from(array, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\").slice(0, length);\n}\n\n/**\n * Generate PKCE code verifier\n */\nfunction generateCodeVerifier(): string {\n  return generateRandomString(64);\n}\n\n/**\n * Generate PKCE code challenge from verifier\n */\nasync function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const hash = await crypto.subtle.digest(\"SHA-256\", data);\n  return btoa(String.fromCharCode(...new Uint8Array(hash)))\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=+$/, \"\");\n}\n\n/**\n * Base OAuth provider class\n */\nexport class OAuthProvider {\n  protected config: OAuthProviderConfig;\n\n  constructor(config: OAuthProviderConfig) {\n    this.config = config;\n  }\n\n  /**\n   * Get client ID from environment\n   */\n  getClientId(): string | null {\n    return getEnv(this.config.clientIdEnvVar) || null;\n  }\n\n  /**\n   * Get client secret from environment\n   */\n  getClientSecret(): string | null {\n    return getEnv(this.config.clientSecretEnvVar) || null;\n  }\n\n  /**\n   * Check if provider is configured\n   */\n  isConfigured(): boolean {\n    return !!(this.getClientId() && this.getClientSecret());\n  }\n\n  /**\n   * Create authorization URL\n   */\n  async createAuthorizationUrl(\n    options: AuthorizationUrlOptions & { defaultScopes?: string[] } = {},\n  ): Promise<{ url: string; state: OAuthState }> {\n    const clientId = this.getClientId();\n    if (!clientId) {\n      throw new Error(`${this.config.clientIdEnvVar} not configured`);\n    }\n\n    const state = options.state || generateRandomString(32);\n    const scopes = options.scopes || options.defaultScopes || [];\n    const redirectUri = options.redirectUri || \"\";\n    const usePkce = options.usePkce !== false;\n\n    let codeVerifier: string | undefined;\n    let codeChallenge: string | undefined;\n\n    if (usePkce) {\n      codeVerifier = generateCodeVerifier();\n      codeChallenge = await generateCodeChallenge(codeVerifier);\n    }\n\n    const params = new URLSearchParams({\n      client_id: clientId,\n      redirect_uri: redirectUri,\n      response_type: \"code\",\n      state,\n      ...(scopes.length > 0 && { scope: scopes.join(\" \") }),\n      ...(codeChallenge && {\n        code_challenge: codeChallenge,\n        code_challenge_method: \"S256\",\n      }),\n      ...this.config.additionalAuthParams,\n      ...options.additionalParams,\n    });\n\n    const oauthState: OAuthState = {\n      state,\n      codeVerifier,\n      redirectUri,\n      scopes,\n      createdAt: Date.now(),\n    };\n\n    return {\n      url: `${this.config.authorizationUrl}?${params.toString()}`,\n      state: oauthState,\n    };\n  }\n\n  /**\n   * Exchange authorization code for tokens\n   */\n  async exchangeCode(options: TokenExchangeOptions): Promise<TokenExchangeResult> {\n    const clientId = this.getClientId();\n    const clientSecret = this.getClientSecret();\n\n    if (!clientId || !clientSecret) {\n      return {\n        success: false,\n        error: \"OAuth not configured\",\n        errorDescription:\n          `Missing ${this.config.clientIdEnvVar} or ${this.config.clientSecretEnvVar}`,\n      };\n    }\n\n    const body = new URLSearchParams({\n      grant_type: \"authorization_code\",\n      code: options.code,\n      redirect_uri: options.redirectUri,\n      ...(options.codeVerifier && { code_verifier: options.codeVerifier }),\n      ...(!this.config.useBasicAuth && {\n        client_id: clientId,\n        client_secret: clientSecret,\n      }),\n      ...this.config.additionalTokenParams,\n    });\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      Accept: \"application/json\",\n    };\n\n    if (this.config.useBasicAuth) {\n      const credentials = btoa(`${clientId}:${clientSecret}`);\n      headers.Authorization = `Basic ${credentials}`;\n    }\n\n    try {\n      const response = await fetch(this.config.tokenUrl, {\n        method: \"POST\",\n        headers,\n        body: body.toString(),\n      });\n\n      const data = await response.json();\n\n      if (!response.ok) {\n        return {\n          success: false,\n          error: data.error || \"token_exchange_failed\",\n          errorDescription: data.error_description || `Status ${response.status}`,\n        };\n      }\n\n      const mapping = this.config.tokenResponseMapping || {};\n      const tokens: OAuthTokens = {\n        accessToken: data[mapping.accessToken || \"access_token\"],\n        refreshToken: data[mapping.refreshToken || \"refresh_token\"],\n        tokenType: data[mapping.tokenType || \"token_type\"],\n        scope: data[mapping.scope || \"scope\"],\n        idToken: data.id_token,\n      };\n\n      const expiresIn = data[mapping.expiresIn || \"expires_in\"];\n      if (expiresIn) {\n        tokens.expiresAt = Date.now() + expiresIn * 1000;\n      }\n\n      return { success: true, tokens };\n    } catch (error) {\n      return {\n        success: false,\n        error: \"network_error\",\n        errorDescription: error instanceof Error ? error.message : \"Unknown error\",\n      };\n    }\n  }\n\n  /**\n   * Refresh access token\n   */\n  async refreshTokens(refreshToken: string): Promise<TokenExchangeResult> {\n    const clientId = this.getClientId();\n    const clientSecret = this.getClientSecret();\n\n    if (!clientId || !clientSecret) {\n      return {\n        success: false,\n        error: \"OAuth not configured\",\n      };\n    }\n\n    const body = new URLSearchParams({\n      grant_type: \"refresh_token\",\n      refresh_token: refreshToken,\n      ...(!this.config.useBasicAuth && {\n        client_id: clientId,\n        client_secret: clientSecret,\n      }),\n    });\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/x-www-form-urlencoded\",\n      Accept: \"application/json\",\n    };\n\n    if (this.config.useBasicAuth) {\n      const credentials = btoa(`${clientId}:${clientSecret}`);\n      headers.Authorization = `Basic ${credentials}`;\n    }\n\n    try {\n      const response = await fetch(this.config.tokenUrl, {\n        method: \"POST\",\n        headers,\n        body: body.toString(),\n      });\n\n      const data = await response.json();\n\n      if (!response.ok) {\n        return {\n          success: false,\n          error: data.error || \"refresh_failed\",\n          errorDescription: data.error_description,\n        };\n      }\n\n      const mapping = this.config.tokenResponseMapping || {};\n      const tokens: OAuthTokens = {\n        accessToken: data[mapping.accessToken || \"access_token\"],\n        refreshToken: data[mapping.refreshToken || \"refresh_token\"] || refreshToken,\n        tokenType: data[mapping.tokenType || \"token_type\"],\n        scope: data[mapping.scope || \"scope\"],\n      };\n\n      const expiresIn = data[mapping.expiresIn || \"expires_in\"];\n      if (expiresIn) {\n        tokens.expiresAt = Date.now() + expiresIn * 1000;\n      }\n\n      return { success: true, tokens };\n    } catch (error) {\n      return {\n        success: false,\n        error: \"network_error\",\n        errorDescription: error instanceof Error ? error.message : \"Unknown error\",\n      };\n    }\n  }\n\n  /**\n   * Revoke tokens\n   */\n  async revokeToken(token: string): Promise<boolean> {\n    if (!this.config.revocationUrl) {\n      return false;\n    }\n\n    try {\n      const response = await fetch(this.config.revocationUrl, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/x-www-form-urlencoded\",\n        },\n        body: new URLSearchParams({ token }).toString(),\n      });\n\n      return response.ok;\n    } catch {\n      return false;\n    }\n  }\n}\n\n/**\n * Service-specific OAuth handler\n */\nexport class OAuthService extends OAuthProvider {\n  protected serviceConfig: OAuthServiceConfig;\n  protected tokenStore?: TokenStore;\n\n  constructor(config: OAuthServiceConfig, tokenStore?: TokenStore) {\n    super(config);\n    this.serviceConfig = config;\n    this.tokenStore = tokenStore;\n  }\n\n  /**\n   * Get service ID\n   */\n  get serviceId(): string {\n    return this.serviceConfig.serviceId;\n  }\n\n  /**\n   * Get API base URL\n   */\n  get apiBaseUrl(): string {\n    return this.serviceConfig.apiBaseUrl;\n  }\n\n  /**\n   * Create authorization URL with service defaults\n   */\n  override createAuthorizationUrl(\n    options: AuthorizationUrlOptions = {},\n  ): Promise<{ url: string; state: OAuthState }> {\n    return super.createAuthorizationUrl({\n      ...options,\n      defaultScopes: this.serviceConfig.defaultScopes,\n    });\n  }\n\n  /**\n   * Get valid access token (refreshing if needed)\n   */\n  async getAccessToken(): Promise<string | null> {\n    if (!this.tokenStore) {\n      return null;\n    }\n\n    const tokens = await this.tokenStore.getTokens(this.serviceId);\n    if (!tokens) {\n      return null;\n    }\n\n    // Check if token is expired (with 5 min buffer)\n    if (tokens.expiresAt && Date.now() > tokens.expiresAt - 300000) {\n      if (tokens.refreshToken) {\n        const result = await this.refreshTokens(tokens.refreshToken);\n        if (result.success && result.tokens) {\n          await this.tokenStore.setTokens(this.serviceId, result.tokens);\n          return result.tokens.accessToken;\n        }\n      }\n      return null;\n    }\n\n    return tokens.accessToken;\n  }\n\n  /**\n   * Make authenticated API request\n   */\n  async fetch<T>(\n    endpoint: string,\n    options: RequestInit = {},\n  ): Promise<T> {\n    const token = await this.getAccessToken();\n    if (!token) {\n      throw new Error(`Not authenticated with ${this.serviceConfig.displayName}`);\n    }\n\n    const url = endpoint.startsWith(\"http\") ? endpoint : `${this.apiBaseUrl}${endpoint}`;\n\n    const response = await fetch(url, {\n      ...options,\n      headers: {\n        Authorization: `Bearer ${token}`,\n        \"Content-Type\": \"application/json\",\n        ...options.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`${this.serviceConfig.displayName} API error: ${response.status} ${error}`);\n    }\n\n    return response.json();\n  }\n}\n", "/**\n * Google OAuth Provider\n *\n * Pre-configured OAuth for Google services: Gmail, Calendar, Sheets, Drive\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * Base Google OAuth configuration\n */\nconst googleBase = {\n  providerId: \"google\",\n  displayName: \"Google\",\n  authorizationUrl: \"https://accounts.google.com/o/oauth2/v2/auth\",\n  tokenUrl: \"https://oauth2.googleapis.com/token\",\n  userInfoUrl: \"https://www.googleapis.com/oauth2/v2/userinfo\",\n  revocationUrl: \"https://oauth2.googleapis.com/revoke\",\n  clientIdEnvVar: \"GOOGLE_CLIENT_ID\",\n  clientSecretEnvVar: \"GOOGLE_CLIENT_SECRET\",\n  additionalAuthParams: {\n    access_type: \"offline\",\n    prompt: \"consent\",\n  },\n};\n\n/**\n * Gmail OAuth configuration\n */\nexport const gmailConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"gmail\",\n  displayName: \"Gmail\",\n  apiBaseUrl: \"https://gmail.googleapis.com/gmail/v1\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/gmail.readonly\",\n    \"https://www.googleapis.com/auth/gmail.send\",\n    \"https://www.googleapis.com/auth/gmail.compose\",\n    \"https://www.googleapis.com/auth/gmail.labels\",\n  ],\n};\n\n/**\n * Google Calendar OAuth configuration\n */\nexport const calendarConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"calendar\",\n  displayName: \"Google Calendar\",\n  apiBaseUrl: \"https://www.googleapis.com/calendar/v3\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/calendar.readonly\",\n    \"https://www.googleapis.com/auth/calendar.events\",\n  ],\n};\n\n/**\n * Google Sheets OAuth configuration\n */\nexport const sheetsConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"sheets\",\n  displayName: \"Google Sheets\",\n  apiBaseUrl: \"https://sheets.googleapis.com/v4\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/spreadsheets.readonly\",\n    \"https://www.googleapis.com/auth/spreadsheets\",\n  ],\n};\n\n/**\n * Google Drive OAuth configuration\n */\nexport const driveConfig: OAuthServiceConfig = {\n  ...googleBase,\n  serviceId: \"drive\",\n  displayName: \"Google Drive\",\n  apiBaseUrl: \"https://www.googleapis.com/drive/v3\",\n  defaultScopes: [\n    \"https://www.googleapis.com/auth/drive.readonly\",\n    \"https://www.googleapis.com/auth/drive.file\",\n  ],\n};\n\n/**\n * All Google service configurations\n */\nexport const googleServices = {\n  gmail: gmailConfig,\n  calendar: calendarConfig,\n  sheets: sheetsConfig,\n  drive: driveConfig,\n} as const;\n", "/**\n * Microsoft OAuth Provider\n *\n * Pre-configured OAuth for Microsoft services: Outlook, Teams, SharePoint, OneDrive\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * Base Microsoft OAuth configuration\n */\nconst microsoftBase = {\n  providerId: \"microsoft\",\n  displayName: \"Microsoft\",\n  authorizationUrl: \"https://login.microsoftonline.com/common/oauth2/v2.0/authorize\",\n  tokenUrl: \"https://login.microsoftonline.com/common/oauth2/v2.0/token\",\n  userInfoUrl: \"https://graph.microsoft.com/v1.0/me\",\n  clientIdEnvVar: \"MICROSOFT_CLIENT_ID\",\n  clientSecretEnvVar: \"MICROSOFT_CLIENT_SECRET\",\n  additionalAuthParams: {\n    response_mode: \"query\",\n  },\n};\n\n/**\n * Microsoft Outlook OAuth configuration\n */\nexport const outlookConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"outlook\",\n  displayName: \"Outlook\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Mail.Read\",\n    \"Mail.Send\",\n    \"Mail.ReadWrite\",\n    \"Calendars.Read\",\n    \"Calendars.ReadWrite\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Microsoft Teams OAuth configuration\n */\nexport const teamsConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"teams\",\n  displayName: \"Microsoft Teams\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Team.ReadBasic.All\",\n    \"Channel.ReadBasic.All\",\n    \"Chat.Read\",\n    \"Chat.ReadWrite\",\n    \"ChannelMessage.Read.All\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Microsoft SharePoint OAuth configuration\n */\nexport const sharePointConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"sharepoint\",\n  displayName: \"SharePoint\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Sites.Read.All\",\n    \"Sites.ReadWrite.All\",\n    \"Files.Read.All\",\n    \"Files.ReadWrite.All\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Microsoft OneDrive OAuth configuration\n */\nexport const oneDriveConfig: OAuthServiceConfig = {\n  ...microsoftBase,\n  serviceId: \"onedrive\",\n  displayName: \"OneDrive\",\n  apiBaseUrl: \"https://graph.microsoft.com/v1.0\",\n  defaultScopes: [\n    \"Files.Read\",\n    \"Files.ReadWrite\",\n    \"Files.Read.All\",\n    \"Files.ReadWrite.All\",\n    \"User.Read\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * All Microsoft service configurations\n */\nexport const microsoftServices = {\n  outlook: outlookConfig,\n  teams: teamsConfig,\n  sharepoint: sharePointConfig,\n  onedrive: oneDriveConfig,\n} as const;\n", "/**\n * Atlassian OAuth Provider\n *\n * Pre-configured OAuth for Atlassian services: Jira, Confluence\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * Base Atlassian OAuth configuration\n */\nconst atlassianBase = {\n  providerId: \"atlassian\",\n  displayName: \"Atlassian\",\n  authorizationUrl: \"https://auth.atlassian.com/authorize\",\n  tokenUrl: \"https://auth.atlassian.com/oauth/token\",\n  userInfoUrl: \"https://api.atlassian.com/me\",\n  clientIdEnvVar: \"ATLASSIAN_CLIENT_ID\",\n  clientSecretEnvVar: \"ATLASSIAN_CLIENT_SECRET\",\n  additionalAuthParams: {\n    audience: \"api.atlassian.com\",\n    prompt: \"consent\",\n  },\n};\n\n/**\n * Jira OAuth configuration\n */\nexport const jiraConfig: OAuthServiceConfig = {\n  ...atlassianBase,\n  serviceId: \"jira\",\n  displayName: \"Jira\",\n  apiBaseUrl: \"https://api.atlassian.com/ex/jira\",\n  defaultScopes: [\n    \"read:jira-work\",\n    \"write:jira-work\",\n    \"read:jira-user\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Confluence OAuth configuration\n */\nexport const confluenceConfig: OAuthServiceConfig = {\n  ...atlassianBase,\n  serviceId: \"confluence\",\n  displayName: \"Confluence\",\n  apiBaseUrl: \"https://api.atlassian.com/ex/confluence\",\n  defaultScopes: [\n    \"read:confluence-content.all\",\n    \"write:confluence-content\",\n    \"read:confluence-space.summary\",\n    \"read:confluence-user\",\n    \"offline_access\",\n  ],\n};\n\n/**\n * Bitbucket OAuth configuration (also Atlassian)\n */\nexport const bitbucketConfig: OAuthServiceConfig = {\n  ...atlassianBase,\n  serviceId: \"bitbucket\",\n  displayName: \"Bitbucket\",\n  // Bitbucket has its own OAuth endpoints\n  authorizationUrl: \"https://bitbucket.org/site/oauth2/authorize\",\n  tokenUrl: \"https://bitbucket.org/site/oauth2/access_token\",\n  clientIdEnvVar: \"BITBUCKET_CLIENT_ID\",\n  clientSecretEnvVar: \"BITBUCKET_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.bitbucket.org/2.0\",\n  additionalAuthParams: {},\n  defaultScopes: [\n    \"repository\",\n    \"repository:write\",\n    \"pullrequest\",\n    \"pullrequest:write\",\n    \"account\",\n  ],\n};\n\n/**\n * All Atlassian service configurations\n */\nexport const atlassianServices = {\n  jira: jiraConfig,\n  confluence: confluenceConfig,\n  bitbucket: bitbucketConfig,\n} as const;\n", "/**\n * Common OAuth Providers\n *\n * Pre-configured OAuth service configurations for popular SaaS providers.\n */\n\nimport type { OAuthServiceConfig } from \"../types.ts\";\n\n/**\n * GitHub OAuth configuration\n */\nexport const githubConfig: OAuthServiceConfig = {\n  providerId: \"github\",\n  serviceId: \"github\",\n  displayName: \"GitHub\",\n  authorizationUrl: \"https://github.com/login/oauth/authorize\",\n  tokenUrl: \"https://github.com/login/oauth/access_token\",\n  clientIdEnvVar: \"GITHUB_CLIENT_ID\",\n  clientSecretEnvVar: \"GITHUB_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.github.com\",\n  defaultScopes: [\"repo\", \"user\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Slack OAuth configuration\n */\nexport const slackConfig: OAuthServiceConfig = {\n  providerId: \"slack\",\n  serviceId: \"slack\",\n  displayName: \"Slack\",\n  authorizationUrl: \"https://slack.com/oauth/v2/authorize\",\n  tokenUrl: \"https://slack.com/api/oauth.v2.access\",\n  clientIdEnvVar: \"SLACK_CLIENT_ID\",\n  clientSecretEnvVar: \"SLACK_CLIENT_SECRET\",\n  apiBaseUrl: \"https://slack.com/api\",\n  defaultScopes: [\"channels:read\", \"chat:write\", \"users:read\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Notion OAuth configuration\n */\nexport const notionConfig: OAuthServiceConfig = {\n  providerId: \"notion\",\n  serviceId: \"notion\",\n  displayName: \"Notion\",\n  authorizationUrl: \"https://api.notion.com/v1/oauth/authorize\",\n  tokenUrl: \"https://api.notion.com/v1/oauth/token\",\n  clientIdEnvVar: \"NOTION_CLIENT_ID\",\n  clientSecretEnvVar: \"NOTION_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.notion.com/v1\",\n  defaultScopes: [],\n  useBasicAuth: true,\n  additionalAuthParams: {\n    owner: \"user\",\n  },\n};\n\n/**\n * Figma OAuth configuration\n */\nexport const figmaConfig: OAuthServiceConfig = {\n  providerId: \"figma\",\n  serviceId: \"figma\",\n  displayName: \"Figma\",\n  authorizationUrl: \"https://www.figma.com/oauth\",\n  tokenUrl: \"https://www.figma.com/api/oauth/token\",\n  clientIdEnvVar: \"FIGMA_CLIENT_ID\",\n  clientSecretEnvVar: \"FIGMA_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.figma.com/v1\",\n  defaultScopes: [\"file_read\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Discord OAuth configuration\n */\nexport const discordConfig: OAuthServiceConfig = {\n  providerId: \"discord\",\n  serviceId: \"discord\",\n  displayName: \"Discord\",\n  authorizationUrl: \"https://discord.com/api/oauth2/authorize\",\n  tokenUrl: \"https://discord.com/api/oauth2/token\",\n  clientIdEnvVar: \"DISCORD_CLIENT_ID\",\n  clientSecretEnvVar: \"DISCORD_CLIENT_SECRET\",\n  apiBaseUrl: \"https://discord.com/api/v10\",\n  defaultScopes: [\"identify\", \"guilds\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Linear OAuth configuration\n */\nexport const linearConfig: OAuthServiceConfig = {\n  providerId: \"linear\",\n  serviceId: \"linear\",\n  displayName: \"Linear\",\n  authorizationUrl: \"https://linear.app/oauth/authorize\",\n  tokenUrl: \"https://api.linear.app/oauth/token\",\n  clientIdEnvVar: \"LINEAR_CLIENT_ID\",\n  clientSecretEnvVar: \"LINEAR_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.linear.app\",\n  defaultScopes: [\"read\", \"write\"],\n  additionalAuthParams: {},\n};\n\n/**\n * GitLab OAuth configuration\n */\nexport const gitlabConfig: OAuthServiceConfig = {\n  providerId: \"gitlab\",\n  serviceId: \"gitlab\",\n  displayName: \"GitLab\",\n  authorizationUrl: \"https://gitlab.com/oauth/authorize\",\n  tokenUrl: \"https://gitlab.com/oauth/token\",\n  clientIdEnvVar: \"GITLAB_CLIENT_ID\",\n  clientSecretEnvVar: \"GITLAB_CLIENT_SECRET\",\n  apiBaseUrl: \"https://gitlab.com/api/v4\",\n  defaultScopes: [\"read_user\", \"api\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Airtable OAuth configuration\n */\nexport const airtableConfig: OAuthServiceConfig = {\n  providerId: \"airtable\",\n  serviceId: \"airtable\",\n  displayName: \"Airtable\",\n  authorizationUrl: \"https://airtable.com/oauth2/v1/authorize\",\n  tokenUrl: \"https://airtable.com/oauth2/v1/token\",\n  clientIdEnvVar: \"AIRTABLE_CLIENT_ID\",\n  clientSecretEnvVar: \"AIRTABLE_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.airtable.com/v0\",\n  defaultScopes: [\"data.records:read\", \"data.records:write\", \"schema.bases:read\"],\n  useBasicAuth: true,\n  additionalAuthParams: {},\n};\n\n/**\n * Dropbox OAuth configuration\n */\nexport const dropboxConfig: OAuthServiceConfig = {\n  providerId: \"dropbox\",\n  serviceId: \"dropbox\",\n  displayName: \"Dropbox\",\n  authorizationUrl: \"https://www.dropbox.com/oauth2/authorize\",\n  tokenUrl: \"https://api.dropbox.com/oauth2/token\",\n  clientIdEnvVar: \"DROPBOX_CLIENT_ID\",\n  clientSecretEnvVar: \"DROPBOX_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.dropboxapi.com/2\",\n  defaultScopes: [],\n  additionalAuthParams: {\n    token_access_type: \"offline\",\n  },\n};\n\n/**\n * HubSpot OAuth configuration\n */\nexport const hubspotConfig: OAuthServiceConfig = {\n  providerId: \"hubspot\",\n  serviceId: \"hubspot\",\n  displayName: \"HubSpot\",\n  authorizationUrl: \"https://app.hubspot.com/oauth/authorize\",\n  tokenUrl: \"https://api.hubapi.com/oauth/v1/token\",\n  clientIdEnvVar: \"HUBSPOT_CLIENT_ID\",\n  clientSecretEnvVar: \"HUBSPOT_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.hubapi.com\",\n  defaultScopes: [\"crm.objects.contacts.read\", \"crm.objects.contacts.write\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Salesforce OAuth configuration\n */\nexport const salesforceConfig: OAuthServiceConfig = {\n  providerId: \"salesforce\",\n  serviceId: \"salesforce\",\n  displayName: \"Salesforce\",\n  authorizationUrl: \"https://login.salesforce.com/services/oauth2/authorize\",\n  tokenUrl: \"https://login.salesforce.com/services/oauth2/token\",\n  clientIdEnvVar: \"SALESFORCE_CLIENT_ID\",\n  clientSecretEnvVar: \"SALESFORCE_CLIENT_SECRET\",\n  apiBaseUrl: \"https://login.salesforce.com/services/data/v59.0\",\n  defaultScopes: [\"api\", \"refresh_token\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Twitter/X OAuth configuration\n */\nexport const twitterConfig: OAuthServiceConfig = {\n  providerId: \"twitter\",\n  serviceId: \"twitter\",\n  displayName: \"Twitter/X\",\n  authorizationUrl: \"https://twitter.com/i/oauth2/authorize\",\n  tokenUrl: \"https://api.twitter.com/2/oauth2/token\",\n  clientIdEnvVar: \"TWITTER_CLIENT_ID\",\n  clientSecretEnvVar: \"TWITTER_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.twitter.com/2\",\n  defaultScopes: [\"tweet.read\", \"users.read\", \"offline.access\"],\n  useBasicAuth: true,\n  additionalAuthParams: {},\n};\n\n/**\n * Asana OAuth configuration\n */\nexport const asanaConfig: OAuthServiceConfig = {\n  providerId: \"asana\",\n  serviceId: \"asana\",\n  displayName: \"Asana\",\n  authorizationUrl: \"https://app.asana.com/-/oauth_authorize\",\n  tokenUrl: \"https://app.asana.com/-/oauth_token\",\n  clientIdEnvVar: \"ASANA_CLIENT_ID\",\n  clientSecretEnvVar: \"ASANA_CLIENT_SECRET\",\n  apiBaseUrl: \"https://app.asana.com/api/1.0\",\n  defaultScopes: [\"default\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Monday.com OAuth configuration\n */\nexport const mondayConfig: OAuthServiceConfig = {\n  providerId: \"monday\",\n  serviceId: \"monday\",\n  displayName: \"Monday.com\",\n  authorizationUrl: \"https://auth.monday.com/oauth2/authorize\",\n  tokenUrl: \"https://auth.monday.com/oauth2/token\",\n  clientIdEnvVar: \"MONDAY_CLIENT_ID\",\n  clientSecretEnvVar: \"MONDAY_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.monday.com/v2\",\n  defaultScopes: [\"me:read\", \"boards:read\", \"boards:write\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Zoom OAuth configuration\n */\nexport const zoomConfig: OAuthServiceConfig = {\n  providerId: \"zoom\",\n  serviceId: \"zoom\",\n  displayName: \"Zoom\",\n  authorizationUrl: \"https://zoom.us/oauth/authorize\",\n  tokenUrl: \"https://zoom.us/oauth/token\",\n  clientIdEnvVar: \"ZOOM_CLIENT_ID\",\n  clientSecretEnvVar: \"ZOOM_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.zoom.us/v2\",\n  defaultScopes: [\"meeting:read\", \"meeting:write\", \"user:read\"],\n  useBasicAuth: true,\n  additionalAuthParams: {},\n};\n\n/**\n * Intercom OAuth configuration\n */\nexport const intercomConfig: OAuthServiceConfig = {\n  providerId: \"intercom\",\n  serviceId: \"intercom\",\n  displayName: \"Intercom\",\n  authorizationUrl: \"https://app.intercom.com/oauth\",\n  tokenUrl: \"https://api.intercom.io/auth/eagle/token\",\n  clientIdEnvVar: \"INTERCOM_CLIENT_ID\",\n  clientSecretEnvVar: \"INTERCOM_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.intercom.io\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Freshdesk OAuth configuration\n */\nexport const freshdeskConfig: OAuthServiceConfig = {\n  providerId: \"freshdesk\",\n  serviceId: \"freshdesk\",\n  displayName: \"Freshdesk\",\n  authorizationUrl: \"https://accounts.freshworks.com/authorize\",\n  tokenUrl: \"https://accounts.freshworks.com/oauth/token\",\n  clientIdEnvVar: \"FRESHDESK_CLIENT_ID\",\n  clientSecretEnvVar: \"FRESHDESK_CLIENT_SECRET\",\n  apiBaseUrl: \"https://domain.freshdesk.com/api/v2\",\n  defaultScopes: [\"freshdesk\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Mailchimp OAuth configuration\n */\nexport const mailchimpConfig: OAuthServiceConfig = {\n  providerId: \"mailchimp\",\n  serviceId: \"mailchimp\",\n  displayName: \"Mailchimp\",\n  authorizationUrl: \"https://login.mailchimp.com/oauth2/authorize\",\n  tokenUrl: \"https://login.mailchimp.com/oauth2/token\",\n  clientIdEnvVar: \"MAILCHIMP_CLIENT_ID\",\n  clientSecretEnvVar: \"MAILCHIMP_CLIENT_SECRET\",\n  apiBaseUrl: \"https://server.api.mailchimp.com/3.0\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Shopify OAuth configuration\n */\nexport const shopifyConfig: OAuthServiceConfig = {\n  providerId: \"shopify\",\n  serviceId: \"shopify\",\n  displayName: \"Shopify\",\n  authorizationUrl: \"https://shop.myshopify.com/admin/oauth/authorize\",\n  tokenUrl: \"https://shop.myshopify.com/admin/oauth/access_token\",\n  clientIdEnvVar: \"SHOPIFY_CLIENT_ID\",\n  clientSecretEnvVar: \"SHOPIFY_CLIENT_SECRET\",\n  apiBaseUrl: \"https://shop.myshopify.com/admin/api/2024-01\",\n  defaultScopes: [\"read_products\", \"write_products\", \"read_orders\"],\n  additionalAuthParams: {},\n};\n\n/**\n * QuickBooks OAuth configuration\n */\nexport const quickbooksConfig: OAuthServiceConfig = {\n  providerId: \"quickbooks\",\n  serviceId: \"quickbooks\",\n  displayName: \"QuickBooks\",\n  authorizationUrl: \"https://appcenter.intuit.com/connect/oauth2\",\n  tokenUrl: \"https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer\",\n  clientIdEnvVar: \"QUICKBOOKS_CLIENT_ID\",\n  clientSecretEnvVar: \"QUICKBOOKS_CLIENT_SECRET\",\n  apiBaseUrl: \"https://quickbooks.api.intuit.com/v3\",\n  defaultScopes: [\"com.intuit.quickbooks.accounting\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Xero OAuth configuration\n */\nexport const xeroConfig: OAuthServiceConfig = {\n  providerId: \"xero\",\n  serviceId: \"xero\",\n  displayName: \"Xero\",\n  authorizationUrl: \"https://login.xero.com/identity/connect/authorize\",\n  tokenUrl: \"https://identity.xero.com/connect/token\",\n  clientIdEnvVar: \"XERO_CLIENT_ID\",\n  clientSecretEnvVar: \"XERO_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.xero.com/api.xro/2.0\",\n  defaultScopes: [\"openid\", \"profile\", \"email\", \"accounting.transactions\", \"offline_access\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Box OAuth configuration\n */\nexport const boxConfig: OAuthServiceConfig = {\n  providerId: \"box\",\n  serviceId: \"box\",\n  displayName: \"Box\",\n  authorizationUrl: \"https://account.box.com/api/oauth2/authorize\",\n  tokenUrl: \"https://api.box.com/oauth2/token\",\n  clientIdEnvVar: \"BOX_CLIENT_ID\",\n  clientSecretEnvVar: \"BOX_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.box.com/2.0\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Webex OAuth configuration\n */\nexport const webexConfig: OAuthServiceConfig = {\n  providerId: \"webex\",\n  serviceId: \"webex\",\n  displayName: \"Webex\",\n  authorizationUrl: \"https://webexapis.com/v1/authorize\",\n  tokenUrl: \"https://webexapis.com/v1/access_token\",\n  clientIdEnvVar: \"WEBEX_CLIENT_ID\",\n  clientSecretEnvVar: \"WEBEX_CLIENT_SECRET\",\n  apiBaseUrl: \"https://webexapis.com/v1\",\n  defaultScopes: [\"spark:all\", \"spark:kms\"],\n  additionalAuthParams: {},\n};\n\n/**\n * Trello OAuth configuration\n */\nexport const trelloConfig: OAuthServiceConfig = {\n  providerId: \"trello\",\n  serviceId: \"trello\",\n  displayName: \"Trello\",\n  authorizationUrl: \"https://trello.com/1/authorize\",\n  tokenUrl: \"https://trello.com/1/OAuthGetAccessToken\",\n  clientIdEnvVar: \"TRELLO_CLIENT_ID\",\n  clientSecretEnvVar: \"TRELLO_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.trello.com/1\",\n  defaultScopes: [\"read\", \"write\"],\n  additionalAuthParams: {\n    expiration: \"never\",\n  },\n};\n\n/**\n * Clickup OAuth configuration\n */\nexport const clickupConfig: OAuthServiceConfig = {\n  providerId: \"clickup\",\n  serviceId: \"clickup\",\n  displayName: \"ClickUp\",\n  authorizationUrl: \"https://app.clickup.com/api\",\n  tokenUrl: \"https://api.clickup.com/api/v2/oauth/token\",\n  clientIdEnvVar: \"CLICKUP_CLIENT_ID\",\n  clientSecretEnvVar: \"CLICKUP_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.clickup.com/api/v2\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Pipedrive OAuth configuration\n */\nexport const pipedriveConfig: OAuthServiceConfig = {\n  providerId: \"pipedrive\",\n  serviceId: \"pipedrive\",\n  displayName: \"Pipedrive\",\n  authorizationUrl: \"https://oauth.pipedrive.com/oauth/authorize\",\n  tokenUrl: \"https://oauth.pipedrive.com/oauth/token\",\n  clientIdEnvVar: \"PIPEDRIVE_CLIENT_ID\",\n  clientSecretEnvVar: \"PIPEDRIVE_CLIENT_SECRET\",\n  apiBaseUrl: \"https://api.pipedrive.com/v1\",\n  defaultScopes: [],\n  additionalAuthParams: {},\n};\n\n/**\n * Export grouped services for convenience\n */\nexport const commonServices = {\n  github: githubConfig,\n  slack: slackConfig,\n  notion: notionConfig,\n  figma: figmaConfig,\n  discord: discordConfig,\n  linear: linearConfig,\n  gitlab: gitlabConfig,\n  airtable: airtableConfig,\n  dropbox: dropboxConfig,\n  hubspot: hubspotConfig,\n  salesforce: salesforceConfig,\n  twitter: twitterConfig,\n  asana: asanaConfig,\n  monday: mondayConfig,\n  zoom: zoomConfig,\n  intercom: intercomConfig,\n  freshdesk: freshdeskConfig,\n  mailchimp: mailchimpConfig,\n  shopify: shopifyConfig,\n  quickbooks: quickbooksConfig,\n  xero: xeroConfig,\n  box: boxConfig,\n  webex: webexConfig,\n  trello: trelloConfig,\n  clickup: clickupConfig,\n  pipedrive: pipedriveConfig,\n};\n", "/**\n * In-Memory Token Store\n *\n * Simple in-memory storage for OAuth tokens and state.\n * Suitable for development and single-instance deployments.\n */\n\nimport type { OAuthState, OAuthTokens, TokenStore } from \"../types.ts\";\n\n/**\n * In-memory token store implementation\n */\nexport class MemoryTokenStore implements TokenStore {\n  private tokens: Map<string, OAuthTokens> = new Map();\n  private states: Map<string, OAuthState> = new Map();\n\n  /** State expiration time in ms (10 minutes) */\n  private stateExpirationMs = 10 * 60 * 1000;\n\n  getTokens(serviceId: string): Promise<OAuthTokens | null> {\n    return Promise.resolve(this.tokens.get(serviceId) || null);\n  }\n\n  setTokens(serviceId: string, tokens: OAuthTokens): Promise<void> {\n    this.tokens.set(serviceId, tokens);\n    return Promise.resolve();\n  }\n\n  clearTokens(serviceId: string): Promise<void> {\n    this.tokens.delete(serviceId);\n    return Promise.resolve();\n  }\n\n  getState(state: string): Promise<OAuthState | null> {\n    const oauthState = this.states.get(state);\n    if (!oauthState) {\n      return Promise.resolve(null);\n    }\n\n    // Check if state has expired\n    if (Date.now() - oauthState.createdAt > this.stateExpirationMs) {\n      this.states.delete(state);\n      return Promise.resolve(null);\n    }\n\n    return Promise.resolve(oauthState);\n  }\n\n  setState(oauthState: OAuthState): Promise<void> {\n    this.states.set(oauthState.state, oauthState);\n    this.cleanupExpiredStates();\n    return Promise.resolve();\n  }\n\n  clearState(state: string): Promise<void> {\n    this.states.delete(state);\n    return Promise.resolve();\n  }\n\n  /**\n   * Clean up expired states\n   */\n  private cleanupExpiredStates(): void {\n    const now = Date.now();\n    for (const [state, oauthState] of this.states) {\n      if (now - oauthState.createdAt > this.stateExpirationMs) {\n        this.states.delete(state);\n      }\n    }\n  }\n\n  /**\n   * Get all stored service IDs\n   */\n  getConnectedServices(): string[] {\n    return Array.from(this.tokens.keys());\n  }\n\n  /**\n   * Check if a service is connected\n   */\n  isConnected(serviceId: string): boolean {\n    const tokens = this.tokens.get(serviceId);\n    if (!tokens) return false;\n\n    // Check if token is expired\n    if (tokens.expiresAt && Date.now() > tokens.expiresAt) {\n      // Token expired, but might be refreshable\n      return !!tokens.refreshToken;\n    }\n\n    return true;\n  }\n\n  /**\n   * Clear all tokens\n   */\n  clearAll(): void {\n    this.tokens.clear();\n    this.states.clear();\n  }\n}\n\n/**\n * Default in-memory token store instance\n */\nexport const memoryTokenStore = new MemoryTokenStore();\n", "/**\n * OAuth Callback Handler\n *\n * Reusable handler for OAuth callback routes.\n */\n\nimport { OAuthService } from \"../providers/base.ts\";\nimport type { OAuthServiceConfig, TokenStore } from \"../types.ts\";\nimport { memoryTokenStore } from \"../token-store/memory.ts\";\nimport { getEnv } from \"../../../platform/compat/process.ts\";\n\nexport interface OAuthCallbackHandlerOptions {\n  /** Token store to use (defaults to memory store) */\n  tokenStore?: TokenStore;\n\n  /** Base URL for redirects (defaults to APP_URL or localhost) */\n  baseUrl?: string;\n\n  /** Success redirect path */\n  successRedirect?: string;\n\n  /** Error redirect path */\n  errorRedirect?: string;\n\n  /** Custom success callback */\n  onSuccess?: (serviceId: string, tokens: unknown) => void | Promise<void>;\n\n  /** Custom error callback */\n  onError?: (serviceId: string, error: string) => void | Promise<void>;\n}\n\n/**\n * Create an OAuth callback route handler\n *\n * @example\n * ```typescript\n * // app/api/auth/gmail/callback/route.ts\n * import { createOAuthCallbackHandler } from \"veryfront/oauth\";\n * import { gmailConfig } from \"veryfront/oauth/providers\";\n *\n * export const GET = createOAuthCallbackHandler(gmailConfig);\n * ```\n */\nexport function createOAuthCallbackHandler(\n  config: OAuthServiceConfig,\n  options: OAuthCallbackHandlerOptions = {},\n): (request: Request) => Promise<Response> {\n  const {\n    tokenStore = memoryTokenStore,\n    baseUrl,\n    successRedirect = \"/\",\n    errorRedirect = \"/\",\n    onSuccess,\n    onError,\n  } = options;\n\n  return async (request: Request): Promise<Response> => {\n    const url = new URL(request.url);\n    const code = url.searchParams.get(\"code\");\n    const state = url.searchParams.get(\"state\");\n    const error = url.searchParams.get(\"error\");\n    const errorDescription = url.searchParams.get(\"error_description\");\n\n    const appUrl = baseUrl ||\n      getEnv(\"APP_URL\") ||\n      getEnv(\"NEXT_PUBLIC_APP_URL\") ||\n      \"http://localhost:3000\";\n\n    // Handle OAuth errors\n    if (error) {\n      console.error(`OAuth error for ${config.serviceId}:`, error, errorDescription);\n      if (onError) {\n        await onError(config.serviceId, error);\n      }\n      const errorUrl = new URL(errorRedirect, appUrl);\n      errorUrl.searchParams.set(\"error\", error);\n      if (errorDescription) {\n        errorUrl.searchParams.set(\"error_description\", errorDescription);\n      }\n      return Response.redirect(errorUrl.toString());\n    }\n\n    // Validate code\n    if (!code) {\n      if (onError) {\n        await onError(config.serviceId, \"no_code\");\n      }\n      const errorUrl = new URL(errorRedirect, appUrl);\n      errorUrl.searchParams.set(\"error\", \"no_code\");\n      return Response.redirect(errorUrl.toString());\n    }\n\n    // Validate and retrieve state\n    let oauthState = null;\n    if (state) {\n      oauthState = await tokenStore.getState(state);\n      if (!oauthState) {\n        console.warn(`Invalid or expired state for ${config.serviceId}`);\n        // Continue anyway - some providers don't properly return state\n      }\n    }\n\n    const service = new OAuthService(config, tokenStore);\n    const redirectUri = `${appUrl}/api/auth/${config.serviceId}/callback`;\n\n    try {\n      const result = await service.exchangeCode({\n        code,\n        redirectUri,\n        codeVerifier: oauthState?.codeVerifier,\n      });\n\n      if (!result.success || !result.tokens) {\n        console.error(`Token exchange failed for ${config.serviceId}:`, result.error);\n        if (onError) {\n          await onError(config.serviceId, result.error || \"exchange_failed\");\n        }\n        const errorUrl = new URL(errorRedirect, appUrl);\n        errorUrl.searchParams.set(\"error\", result.error || \"token_exchange_failed\");\n        return Response.redirect(errorUrl.toString());\n      }\n\n      // Store tokens\n      await tokenStore.setTokens(config.serviceId, result.tokens);\n\n      // Clear state\n      if (state) {\n        await tokenStore.clearState(state);\n      }\n\n      // Call success callback\n      if (onSuccess) {\n        await onSuccess(config.serviceId, result.tokens);\n      }\n\n      // Redirect to success URL\n      const successUrl = new URL(successRedirect, appUrl);\n      successUrl.searchParams.set(\"connected\", config.serviceId);\n      return Response.redirect(successUrl.toString());\n    } catch (err) {\n      console.error(`OAuth callback error for ${config.serviceId}:`, err);\n      if (onError) {\n        await onError(config.serviceId, \"callback_error\");\n      }\n      const errorUrl = new URL(errorRedirect, appUrl);\n      errorUrl.searchParams.set(\"error\", \"callback_error\");\n      return Response.redirect(errorUrl.toString());\n    }\n  };\n}\n", "/**\n * OAuth Init Handler\n *\n * Reusable handler for initiating OAuth flows.\n */\n\nimport { OAuthService } from \"../providers/base.ts\";\nimport type { AuthorizationUrlOptions, OAuthServiceConfig, TokenStore } from \"../types.ts\";\nimport { memoryTokenStore } from \"../token-store/memory.ts\";\nimport { getEnv } from \"../../../platform/compat/process.ts\";\n\nexport interface OAuthInitHandlerOptions {\n  /** Token store to use (defaults to memory store) */\n  tokenStore?: TokenStore;\n\n  /** Base URL for callbacks (defaults to APP_URL or localhost) */\n  baseUrl?: string;\n\n  /** Additional authorization options */\n  authOptions?: AuthorizationUrlOptions;\n}\n\n/**\n * Create an OAuth init route handler\n *\n * @example\n * ```typescript\n * // app/api/auth/gmail/route.ts\n * import { createOAuthInitHandler } from \"veryfront/oauth\";\n * import { gmailConfig } from \"veryfront/oauth/providers\";\n *\n * export const GET = createOAuthInitHandler(gmailConfig);\n * ```\n */\nexport function createOAuthInitHandler(\n  config: OAuthServiceConfig,\n  options: OAuthInitHandlerOptions = {},\n): () => Promise<Response> {\n  const { tokenStore = memoryTokenStore, baseUrl, authOptions = {} } = options;\n\n  return async (): Promise<Response> => {\n    const service = new OAuthService(config, tokenStore);\n\n    if (!service.isConfigured()) {\n      return Response.json(\n        {\n          error: `${config.displayName} OAuth not configured`,\n          details: `Missing ${config.clientIdEnvVar} or ${config.clientSecretEnvVar}`,\n        },\n        { status: 500 },\n      );\n    }\n\n    // Use APP_URL from env, or default to localhost:3000 (the standard veryfront dev port)\n    const appUrl = baseUrl ||\n      getEnv(\"APP_URL\") ||\n      getEnv(\"NEXT_PUBLIC_APP_URL\") ||\n      \"http://localhost:3000\";\n\n    const redirectUri = `${appUrl}/api/auth/${config.serviceId}/callback`;\n\n    try {\n      const { url, state } = await service.createAuthorizationUrl({\n        ...authOptions,\n        redirectUri,\n      });\n\n      // Store state for CSRF protection\n      await tokenStore.setState(state);\n\n      return Response.redirect(url);\n    } catch (error) {\n      console.error(`OAuth init error for ${config.serviceId}:`, error);\n      return Response.json(\n        {\n          error: \"Failed to initiate OAuth flow\",\n          details: error instanceof Error ? error.message : \"Unknown error\",\n        },\n        { status: 500 },\n      );\n    }\n  };\n}\n\n/**\n * Create an OAuth status check handler\n *\n * @example\n * ```typescript\n * // app/api/auth/gmail/status/route.ts\n * import { createOAuthStatusHandler } from \"veryfront/oauth\";\n * import { gmailConfig } from \"veryfront/oauth/providers\";\n *\n * export const GET = createOAuthStatusHandler(gmailConfig);\n * ```\n */\nexport function createOAuthStatusHandler(\n  config: OAuthServiceConfig,\n  options: { tokenStore?: TokenStore } = {},\n): () => Promise<Response> {\n  const { tokenStore = memoryTokenStore } = options;\n\n  return async (): Promise<Response> => {\n    const tokens = await tokenStore.getTokens(config.serviceId);\n\n    const isConnected = !!tokens?.accessToken;\n    const isExpired = tokens?.expiresAt ? Date.now() > tokens.expiresAt : false;\n    const hasRefreshToken = !!tokens?.refreshToken;\n\n    return Response.json({\n      service: config.serviceId,\n      displayName: config.displayName,\n      connected: isConnected && (!isExpired || hasRefreshToken),\n      configured: !!(getEnv(config.clientIdEnvVar) && getEnv(config.clientSecretEnvVar)),\n      expiresAt: tokens?.expiresAt,\n      hasRefreshToken,\n    });\n  };\n}\n\n/**\n * Create an OAuth disconnect handler\n *\n * @example\n * ```typescript\n * // app/api/auth/gmail/route.ts\n * import { createOAuthDisconnectHandler } from \"veryfront/oauth\";\n * import { gmailConfig } from \"veryfront/oauth/providers\";\n *\n * export const DELETE = createOAuthDisconnectHandler(gmailConfig);\n * ```\n */\nexport function createOAuthDisconnectHandler(\n  config: OAuthServiceConfig,\n  options: { tokenStore?: TokenStore } = {},\n): () => Promise<Response> {\n  const { tokenStore = memoryTokenStore } = options;\n\n  return async (): Promise<Response> => {\n    await tokenStore.clearTokens(config.serviceId);\n\n    return Response.json({\n      success: true,\n      message: `Disconnected from ${config.displayName}`,\n    });\n  };\n}\n"],
+  "mappings": ";AAMA,WAAW,OAAO,WAAW,QAAQ;AAAA,EACnC,KAAK;AAAA,IACH,IAAI,KAAiC;AACnC,aAAO,QAAQ,IAAI,GAAG;AAAA,IACxB;AAAA,IACA,IAAI,KAAa,OAAqB;AACpC,cAAQ,IAAI,GAAG,IAAI;AAAA,IACrB;AAAA,IACA,OAAO,KAAmB;AACxB,aAAO,QAAQ,IAAI,GAAG;AAAA,IACxB;AAAA,IACA,IAAI,KAAsB;AACxB,aAAO,OAAO,QAAQ;AAAA,IACxB;AAAA,IACA,WAAmC;AACjC,aAAO,EAAE,GAAG,QAAQ,IAAI;AAAA,IAC1B;AAAA,EACF;AACF;;;ACxBO,IAAM,SAAS,OAAO,SAAS;AAC/B,IAAM,SACX,OAAQ,WAA8D,YAAY,eACjF,WAA8D,SAAS,UAAU,SAChF;AACG,IAAM,QAAQ,OAAQ,WAAiC,QAAQ;AAC/D,IAAM,eAAe,OAAO,eAAe,eAAe,YAAY,cAC3E,mBAAmB;;;ACLrB,IAAM,cAAe,WAA2D;AAChF,IAAM,iBAAiB,CAAC,CAAC,aAAa,UAAU;AAsDzC,SAAS,OAAO,KAAiC;AACtD,MAAI,QAAS;AACX,WAAO,KAAK,IAAI,IAAI,GAAG;AAAA,EACzB;AACA,MAAI,gBAAgB;AAClB,WAAO,YAAa,IAAI,GAAG;AAAA,EAC7B;AACA,SAAO;AACT;;;AC5CA,SAAS,qBAAqB,QAAwB;AACpD,QAAM,QAAQ,IAAI,WAAW,MAAM;AACnC,SAAO,gBAAgB,KAAK;AAC5B,SAAO,MAAM,KAAK,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,GAAG,MAAM;AACjG;AAKA,SAAS,uBAA+B;AACtC,SAAO,qBAAqB,EAAE;AAChC;AAKA,eAAe,sBAAsB,UAAmC;AACtE,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,QAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;AACvD,SAAO,KAAK,OAAO,aAAa,GAAG,IAAI,WAAW,IAAI,CAAC,CAAC,EACrD,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,EAAE;AACtB;AAKO,IAAM,gBAAN,MAAoB;AAAA,EACf;AAAA,EAEV,YAAY,QAA6B;AACvC,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,cAA6B;AAC3B,WAAO,OAAO,KAAK,OAAO,cAAc,KAAK;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAiC;AAC/B,WAAO,OAAO,KAAK,OAAO,kBAAkB,KAAK;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA,EAKA,eAAwB;AACtB,WAAO,CAAC,EAAE,KAAK,YAAY,KAAK,KAAK,gBAAgB;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,uBACJ,UAAkE,CAAC,GACtB;AAC7C,UAAM,WAAW,KAAK,YAAY;AAClC,QAAI,CAAC,UAAU;AACb,YAAM,IAAI,MAAM,GAAG,KAAK,OAAO,cAAc,iBAAiB;AAAA,IAChE;AAEA,UAAM,QAAQ,QAAQ,SAAS,qBAAqB,EAAE;AACtD,UAAM,SAAS,QAAQ,UAAU,QAAQ,iBAAiB,CAAC;AAC3D,UAAM,cAAc,QAAQ,eAAe;AAC3C,UAAM,UAAU,QAAQ,YAAY;AAEpC,QAAI;AACJ,QAAI;AAEJ,QAAI,SAAS;AACX,qBAAe,qBAAqB;AACpC,sBAAgB,MAAM,sBAAsB,YAAY;AAAA,IAC1D;AAEA,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,WAAW;AAAA,MACX,cAAc;AAAA,MACd,eAAe;AAAA,MACf;AAAA,MACA,GAAI,OAAO,SAAS,KAAK,EAAE,OAAO,OAAO,KAAK,GAAG,EAAE;AAAA,MACnD,GAAI,iBAAiB;AAAA,QACnB,gBAAgB;AAAA,QAChB,uBAAuB;AAAA,MACzB;AAAA,MACA,GAAG,KAAK,OAAO;AAAA,MACf,GAAG,QAAQ;AAAA,IACb,CAAC;AAED,UAAM,aAAyB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,KAAK,IAAI;AAAA,IACtB;AAEA,WAAO;AAAA,MACL,KAAK,GAAG,KAAK,OAAO,gBAAgB,IAAI,OAAO,SAAS,CAAC;AAAA,MACzD,OAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,SAA6D;AAC9E,UAAM,WAAW,KAAK,YAAY;AAClC,UAAM,eAAe,KAAK,gBAAgB;AAE1C,QAAI,CAAC,YAAY,CAAC,cAAc;AAC9B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,kBACE,WAAW,KAAK,OAAO,cAAc,OAAO,KAAK,OAAO,kBAAkB;AAAA,MAC9E;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,cAAc,QAAQ;AAAA,MACtB,GAAI,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,aAAa;AAAA,MAClE,GAAI,CAAC,KAAK,OAAO,gBAAgB;AAAA,QAC/B,WAAW;AAAA,QACX,eAAe;AAAA,MACjB;AAAA,MACA,GAAG,KAAK,OAAO;AAAA,IACjB,CAAC;AAED,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,OAAO,cAAc;AAC5B,YAAM,cAAc,KAAK,GAAG,QAAQ,IAAI,YAAY,EAAE;AACtD,cAAQ,gBAAgB,SAAS,WAAW;AAAA,IAC9C;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK,OAAO,UAAU;AAAA,QACjD,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB,CAAC;AAED,YAAM,OAAO,MAAM,SAAS,KAAK;AAEjC,UAAI,CAAC,SAAS,IAAI;AAChB,eAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO,KAAK,SAAS;AAAA,UACrB,kBAAkB,KAAK,qBAAqB,UAAU,SAAS,MAAM;AAAA,QACvE;AAAA,MACF;AAEA,YAAM,UAAU,KAAK,OAAO,wBAAwB,CAAC;AACrD,YAAM,SAAsB;AAAA,QAC1B,aAAa,KAAK,QAAQ,eAAe,cAAc;AAAA,QACvD,cAAc,KAAK,QAAQ,gBAAgB,eAAe;AAAA,QAC1D,WAAW,KAAK,QAAQ,aAAa,YAAY;AAAA,QACjD,OAAO,KAAK,QAAQ,SAAS,OAAO;AAAA,QACpC,SAAS,KAAK;AAAA,MAChB;AAEA,YAAM,YAAY,KAAK,QAAQ,aAAa,YAAY;AACxD,UAAI,WAAW;AACb,eAAO,YAAY,KAAK,IAAI,IAAI,YAAY;AAAA,MAC9C;AAEA,aAAO,EAAE,SAAS,MAAM,OAAO;AAAA,IACjC,SAAS,OAAO;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAc,cAAoD;AACtE,UAAM,WAAW,KAAK,YAAY;AAClC,UAAM,eAAe,KAAK,gBAAgB;AAE1C,QAAI,CAAC,YAAY,CAAC,cAAc;AAC9B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,MACT;AAAA,IACF;AAEA,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,GAAI,CAAC,KAAK,OAAO,gBAAgB;AAAA,QAC/B,WAAW;AAAA,QACX,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IACV;AAEA,QAAI,KAAK,OAAO,cAAc;AAC5B,YAAM,cAAc,KAAK,GAAG,QAAQ,IAAI,YAAY,EAAE;AACtD,cAAQ,gBAAgB,SAAS,WAAW;AAAA,IAC9C;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK,OAAO,UAAU;AAAA,QACjD,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB,CAAC;AAED,YAAM,OAAO,MAAM,SAAS,KAAK;AAEjC,UAAI,CAAC,SAAS,IAAI;AAChB,eAAO;AAAA,UACL,SAAS;AAAA,UACT,OAAO,KAAK,SAAS;AAAA,UACrB,kBAAkB,KAAK;AAAA,QACzB;AAAA,MACF;AAEA,YAAM,UAAU,KAAK,OAAO,wBAAwB,CAAC;AACrD,YAAM,SAAsB;AAAA,QAC1B,aAAa,KAAK,QAAQ,eAAe,cAAc;AAAA,QACvD,cAAc,KAAK,QAAQ,gBAAgB,eAAe,KAAK;AAAA,QAC/D,WAAW,KAAK,QAAQ,aAAa,YAAY;AAAA,QACjD,OAAO,KAAK,QAAQ,SAAS,OAAO;AAAA,MACtC;AAEA,YAAM,YAAY,KAAK,QAAQ,aAAa,YAAY;AACxD,UAAI,WAAW;AACb,eAAO,YAAY,KAAK,IAAI,IAAI,YAAY;AAAA,MAC9C;AAEA,aAAO,EAAE,SAAS,MAAM,OAAO;AAAA,IACjC,SAAS,OAAO;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,kBAAkB,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,OAAiC;AACjD,QAAI,CAAC,KAAK,OAAO,eAAe;AAC9B,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK,OAAO,eAAe;AAAA,QACtD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,IAAI,gBAAgB,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,MAChD,CAAC;AAED,aAAO,SAAS;AAAA,IAClB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAKO,IAAM,eAAN,cAA2B,cAAc;AAAA,EACpC;AAAA,EACA;AAAA,EAEV,YAAY,QAA4B,YAAyB;AAC/D,UAAM,MAAM;AACZ,SAAK,gBAAgB;AACrB,SAAK,aAAa;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,YAAoB;AACtB,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,aAAqB;AACvB,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKS,uBACP,UAAmC,CAAC,GACS;AAC7C,WAAO,MAAM,uBAAuB;AAAA,MAClC,GAAG;AAAA,MACH,eAAe,KAAK,cAAc;AAAA,IACpC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAyC;AAC7C,QAAI,CAAC,KAAK,YAAY;AACpB,aAAO;AAAA,IACT;AAEA,UAAM,SAAS,MAAM,KAAK,WAAW,UAAU,KAAK,SAAS;AAC7D,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAGA,QAAI,OAAO,aAAa,KAAK,IAAI,IAAI,OAAO,YAAY,KAAQ;AAC9D,UAAI,OAAO,cAAc;AACvB,cAAM,SAAS,MAAM,KAAK,cAAc,OAAO,YAAY;AAC3D,YAAI,OAAO,WAAW,OAAO,QAAQ;AACnC,gBAAM,KAAK,WAAW,UAAU,KAAK,WAAW,OAAO,MAAM;AAC7D,iBAAO,OAAO,OAAO;AAAA,QACvB;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAEA,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MACJ,UACA,UAAuB,CAAC,GACZ;AACZ,UAAM,QAAQ,MAAM,KAAK,eAAe;AACxC,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,0BAA0B,KAAK,cAAc,WAAW,EAAE;AAAA,IAC5E;AAEA,UAAM,MAAM,SAAS,WAAW,MAAM,IAAI,WAAW,GAAG,KAAK,UAAU,GAAG,QAAQ;AAElF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,GAAG;AAAA,MACH,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,QAChB,GAAG,QAAQ;AAAA,MACb;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,GAAG,KAAK,cAAc,WAAW,eAAe,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IAC5F;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AACF;;;ACxYA,IAAM,aAAa;AAAA,EACjB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,aAAa;AAAA,EACb,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,IACpB,aAAa;AAAA,IACb,QAAQ;AAAA,EACV;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,iBAAqC;AAAA,EAChD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,eAAmC;AAAA,EAC9C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,iBAAiB;AAAA,EAC5B,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,OAAO;AACT;;;ACjFA,IAAM,gBAAgB;AAAA,EACpB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,IACpB,eAAe;AAAA,EACjB;AACF;AAKO,IAAM,gBAAoC;AAAA,EAC/C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,mBAAuC;AAAA,EAClD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,iBAAqC;AAAA,EAChD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,oBAAoB;AAAA,EAC/B,SAAS;AAAA,EACT,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,UAAU;AACZ;;;AC/FA,IAAM,gBAAgB;AAAA,EACpB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,IACpB,UAAU;AAAA,IACV,QAAQ;AAAA,EACV;AACF;AAKO,IAAM,aAAiC;AAAA,EAC5C,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,mBAAuC;AAAA,EAClD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,kBAAsC;AAAA,EACjD,GAAG;AAAA,EACH,WAAW;AAAA,EACX,aAAa;AAAA;AAAA,EAEb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,sBAAsB,CAAC;AAAA,EACvB,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,oBAAoB;AAAA,EAC/B,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,WAAW;AACb;;;AC7EO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,QAAQ,MAAM;AAAA,EAC9B,sBAAsB,CAAC;AACzB;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,iBAAiB,cAAc,YAAY;AAAA,EAC3D,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,cAAc;AAAA,EACd,sBAAsB;AAAA,IACpB,OAAO;AAAA,EACT;AACF;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,WAAW;AAAA,EAC3B,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,YAAY,QAAQ;AAAA,EACpC,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,QAAQ,OAAO;AAAA,EAC/B,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,aAAa,KAAK;AAAA,EAClC,sBAAsB,CAAC;AACzB;AAKO,IAAM,iBAAqC;AAAA,EAChD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,qBAAqB,sBAAsB,mBAAmB;AAAA,EAC9E,cAAc;AAAA,EACd,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB;AAAA,IACpB,mBAAmB;AAAA,EACrB;AACF;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,6BAA6B,4BAA4B;AAAA,EACzE,sBAAsB,CAAC;AACzB;AAKO,IAAM,mBAAuC;AAAA,EAClD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,OAAO,eAAe;AAAA,EACtC,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,cAAc,cAAc,gBAAgB;AAAA,EAC5D,cAAc;AAAA,EACd,sBAAsB,CAAC;AACzB;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,SAAS;AAAA,EACzB,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,WAAW,eAAe,cAAc;AAAA,EACxD,sBAAsB,CAAC;AACzB;AAKO,IAAM,aAAiC;AAAA,EAC5C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,gBAAgB,iBAAiB,WAAW;AAAA,EAC5D,cAAc;AAAA,EACd,sBAAsB,CAAC;AACzB;AAKO,IAAM,iBAAqC;AAAA,EAChD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,kBAAsC;AAAA,EACjD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,WAAW;AAAA,EAC3B,sBAAsB,CAAC;AACzB;AAKO,IAAM,kBAAsC;AAAA,EACjD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,iBAAiB,kBAAkB,aAAa;AAAA,EAChE,sBAAsB,CAAC;AACzB;AAKO,IAAM,mBAAuC;AAAA,EAClD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,kCAAkC;AAAA,EAClD,sBAAsB,CAAC;AACzB;AAKO,IAAM,aAAiC;AAAA,EAC5C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,UAAU,WAAW,SAAS,2BAA2B,gBAAgB;AAAA,EACzF,sBAAsB,CAAC;AACzB;AAKO,IAAM,YAAgC;AAAA,EAC3C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,cAAkC;AAAA,EAC7C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,aAAa,WAAW;AAAA,EACxC,sBAAsB,CAAC;AACzB;AAKO,IAAM,eAAmC;AAAA,EAC9C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC,QAAQ,OAAO;AAAA,EAC/B,sBAAsB;AAAA,IACpB,YAAY;AAAA,EACd;AACF;AAKO,IAAM,gBAAoC;AAAA,EAC/C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,kBAAsC;AAAA,EACjD,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,YAAY;AAAA,EACZ,eAAe,CAAC;AAAA,EAChB,sBAAsB,CAAC;AACzB;AAKO,IAAM,iBAAiB;AAAA,EAC5B,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,UAAU;AAAA,EACV,WAAW;AAAA,EACX,WAAW;AAAA,EACX,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,WAAW;AACb;;;ACpcO,IAAM,mBAAN,MAA6C;AAAA,EAC1C,SAAmC,oBAAI,IAAI;AAAA,EAC3C,SAAkC,oBAAI,IAAI;AAAA;AAAA,EAG1C,oBAAoB,KAAK,KAAK;AAAA,EAEtC,UAAU,WAAgD;AACxD,WAAO,QAAQ,QAAQ,KAAK,OAAO,IAAI,SAAS,KAAK,IAAI;AAAA,EAC3D;AAAA,EAEA,UAAU,WAAmB,QAAoC;AAC/D,SAAK,OAAO,IAAI,WAAW,MAAM;AACjC,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,YAAY,WAAkC;AAC5C,SAAK,OAAO,OAAO,SAAS;AAC5B,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,SAAS,OAA2C;AAClD,UAAM,aAAa,KAAK,OAAO,IAAI,KAAK;AACxC,QAAI,CAAC,YAAY;AACf,aAAO,QAAQ,QAAQ,IAAI;AAAA,IAC7B;AAGA,QAAI,KAAK,IAAI,IAAI,WAAW,YAAY,KAAK,mBAAmB;AAC9D,WAAK,OAAO,OAAO,KAAK;AACxB,aAAO,QAAQ,QAAQ,IAAI;AAAA,IAC7B;AAEA,WAAO,QAAQ,QAAQ,UAAU;AAAA,EACnC;AAAA,EAEA,SAAS,YAAuC;AAC9C,SAAK,OAAO,IAAI,WAAW,OAAO,UAAU;AAC5C,SAAK,qBAAqB;AAC1B,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,WAAW,OAA8B;AACvC,SAAK,OAAO,OAAO,KAAK;AACxB,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAA6B;AACnC,UAAM,MAAM,KAAK,IAAI;AACrB,eAAW,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ;AAC7C,UAAI,MAAM,WAAW,YAAY,KAAK,mBAAmB;AACvD,aAAK,OAAO,OAAO,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,uBAAiC;AAC/B,WAAO,MAAM,KAAK,KAAK,OAAO,KAAK,CAAC;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,WAA4B;AACtC,UAAM,SAAS,KAAK,OAAO,IAAI,SAAS;AACxC,QAAI,CAAC;AAAQ,aAAO;AAGpB,QAAI,OAAO,aAAa,KAAK,IAAI,IAAI,OAAO,WAAW;AAErD,aAAO,CAAC,CAAC,OAAO;AAAA,IAClB;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,WAAiB;AACf,SAAK,OAAO,MAAM;AAClB,SAAK,OAAO,MAAM;AAAA,EACpB;AACF;AAKO,IAAM,mBAAmB,IAAI,iBAAiB;;;AC/D9C,SAAS,2BACd,QACA,UAAuC,CAAC,GACC;AACzC,QAAM;AAAA,IACJ,aAAa;AAAA,IACb;AAAA,IACA,kBAAkB;AAAA,IAClB,gBAAgB;AAAA,IAChB;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,SAAO,OAAO,YAAwC;AACpD,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,UAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,UAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,UAAM,mBAAmB,IAAI,aAAa,IAAI,mBAAmB;AAEjE,UAAM,SAAS,WACb,OAAO,SAAS,KAChB,OAAO,qBAAqB,KAC5B;AAGF,QAAI,OAAO;AACT,cAAQ,MAAM,mBAAmB,OAAO,SAAS,KAAK,OAAO,gBAAgB;AAC7E,UAAI,SAAS;AACX,cAAM,QAAQ,OAAO,WAAW,KAAK;AAAA,MACvC;AACA,YAAM,WAAW,IAAI,IAAI,eAAe,MAAM;AAC9C,eAAS,aAAa,IAAI,SAAS,KAAK;AACxC,UAAI,kBAAkB;AACpB,iBAAS,aAAa,IAAI,qBAAqB,gBAAgB;AAAA,MACjE;AACA,aAAO,SAAS,SAAS,SAAS,SAAS,CAAC;AAAA,IAC9C;AAGA,QAAI,CAAC,MAAM;AACT,UAAI,SAAS;AACX,cAAM,QAAQ,OAAO,WAAW,SAAS;AAAA,MAC3C;AACA,YAAM,WAAW,IAAI,IAAI,eAAe,MAAM;AAC9C,eAAS,aAAa,IAAI,SAAS,SAAS;AAC5C,aAAO,SAAS,SAAS,SAAS,SAAS,CAAC;AAAA,IAC9C;AAGA,QAAI,aAAa;AACjB,QAAI,OAAO;AACT,mBAAa,MAAM,WAAW,SAAS,KAAK;AAC5C,UAAI,CAAC,YAAY;AACf,gBAAQ,KAAK,gCAAgC,OAAO,SAAS,EAAE;AAAA,MAEjE;AAAA,IACF;AAEA,UAAM,UAAU,IAAI,aAAa,QAAQ,UAAU;AACnD,UAAM,cAAc,GAAG,MAAM,aAAa,OAAO,SAAS;AAE1D,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,aAAa;AAAA,QACxC;AAAA,QACA;AAAA,QACA,cAAc,YAAY;AAAA,MAC5B,CAAC;AAED,UAAI,CAAC,OAAO,WAAW,CAAC,OAAO,QAAQ;AACrC,gBAAQ,MAAM,6BAA6B,OAAO,SAAS,KAAK,OAAO,KAAK;AAC5E,YAAI,SAAS;AACX,gBAAM,QAAQ,OAAO,WAAW,OAAO,SAAS,iBAAiB;AAAA,QACnE;AACA,cAAM,WAAW,IAAI,IAAI,eAAe,MAAM;AAC9C,iBAAS,aAAa,IAAI,SAAS,OAAO,SAAS,uBAAuB;AAC1E,eAAO,SAAS,SAAS,SAAS,SAAS,CAAC;AAAA,MAC9C;AAGA,YAAM,WAAW,UAAU,OAAO,WAAW,OAAO,MAAM;AAG1D,UAAI,OAAO;AACT,cAAM,WAAW,WAAW,KAAK;AAAA,MACnC;AAGA,UAAI,WAAW;AACb,cAAM,UAAU,OAAO,WAAW,OAAO,MAAM;AAAA,MACjD;AAGA,YAAM,aAAa,IAAI,IAAI,iBAAiB,MAAM;AAClD,iBAAW,aAAa,IAAI,aAAa,OAAO,SAAS;AACzD,aAAO,SAAS,SAAS,WAAW,SAAS,CAAC;AAAA,IAChD,SAAS,KAAK;AACZ,cAAQ,MAAM,4BAA4B,OAAO,SAAS,KAAK,GAAG;AAClE,UAAI,SAAS;AACX,cAAM,QAAQ,OAAO,WAAW,gBAAgB;AAAA,MAClD;AACA,YAAM,WAAW,IAAI,IAAI,eAAe,MAAM;AAC9C,eAAS,aAAa,IAAI,SAAS,gBAAgB;AACnD,aAAO,SAAS,SAAS,SAAS,SAAS,CAAC;AAAA,IAC9C;AAAA,EACF;AACF;;;ACnHO,SAAS,uBACd,QACA,UAAmC,CAAC,GACX;AACzB,QAAM,EAAE,aAAa,kBAAkB,SAAS,cAAc,CAAC,EAAE,IAAI;AAErE,SAAO,YAA+B;AACpC,UAAM,UAAU,IAAI,aAAa,QAAQ,UAAU;AAEnD,QAAI,CAAC,QAAQ,aAAa,GAAG;AAC3B,aAAO,SAAS;AAAA,QACd;AAAA,UACE,OAAO,GAAG,OAAO,WAAW;AAAA,UAC5B,SAAS,WAAW,OAAO,cAAc,OAAO,OAAO,kBAAkB;AAAA,QAC3E;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAGA,UAAM,SAAS,WACb,OAAO,SAAS,KAChB,OAAO,qBAAqB,KAC5B;AAEF,UAAM,cAAc,GAAG,MAAM,aAAa,OAAO,SAAS;AAE1D,QAAI;AACF,YAAM,EAAE,KAAK,MAAM,IAAI,MAAM,QAAQ,uBAAuB;AAAA,QAC1D,GAAG;AAAA,QACH;AAAA,MACF,CAAC;AAGD,YAAM,WAAW,SAAS,KAAK;AAE/B,aAAO,SAAS,SAAS,GAAG;AAAA,IAC9B,SAAS,OAAO;AACd,cAAQ,MAAM,wBAAwB,OAAO,SAAS,KAAK,KAAK;AAChE,aAAO,SAAS;AAAA,QACd;AAAA,UACE,OAAO;AAAA,UACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QACpD;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;AAcO,SAAS,yBACd,QACA,UAAuC,CAAC,GACf;AACzB,QAAM,EAAE,aAAa,iBAAiB,IAAI;AAE1C,SAAO,YAA+B;AACpC,UAAM,SAAS,MAAM,WAAW,UAAU,OAAO,SAAS;AAE1D,UAAM,cAAc,CAAC,CAAC,QAAQ;AAC9B,UAAM,YAAY,QAAQ,YAAY,KAAK,IAAI,IAAI,OAAO,YAAY;AACtE,UAAM,kBAAkB,CAAC,CAAC,QAAQ;AAElC,WAAO,SAAS,KAAK;AAAA,MACnB,SAAS,OAAO;AAAA,MAChB,aAAa,OAAO;AAAA,MACpB,WAAW,gBAAgB,CAAC,aAAa;AAAA,MACzC,YAAY,CAAC,EAAE,OAAO,OAAO,cAAc,KAAK,OAAO,OAAO,kBAAkB;AAAA,MAChF,WAAW,QAAQ;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAcO,SAAS,6BACd,QACA,UAAuC,CAAC,GACf;AACzB,QAAM,EAAE,aAAa,iBAAiB,IAAI;AAE1C,SAAO,YAA+B;AACpC,UAAM,WAAW,YAAY,OAAO,SAAS;AAE7C,WAAO,SAAS,KAAK;AAAA,MACnB,SAAS;AAAA,MACT,SAAS,qBAAqB,OAAO,WAAW;AAAA,IAClD,CAAC;AAAA,EACH;AACF;",
   "names": []
 }

package/dist/oauth/providers.js

@@ -1,29 +1,23 @@
 // src/_shims/deno-env.ts
-var denoEnvShim = {
-  get(key) {
-    return process.env[key];
-  },
-  set(key, value) {
-    process.env[key] = value;
-  },
-  delete(key) {
-    delete process.env[key];
-  },
-  has(key) {
-    return key in process.env;
-  },
-  toObject() {
-    return { ...process.env };
+globalThis.Deno = globalThis.Deno || {
+  env: {
+    get(key) {
+      return process.env[key];
+    },
+    set(key, value) {
+      process.env[key] = value;
+    },
+    delete(key) {
+      delete process.env[key];
+    },
+    has(key) {
+      return key in process.env;
+    },
+    toObject() {
+      return { ...process.env };
+    }
   }
 };
-if (typeof globalThis.Deno === "undefined") {
-  globalThis.Deno = {
-    env: denoEnvShim,
-    cwd: () => process.cwd()
-  };
-} else if (typeof globalThis.Deno.env === "undefined") {
-  globalThis.Deno.env = denoEnvShim;
-}
 
 // src/platform/compat/runtime.ts
 var isDeno = typeof Deno !== "undefined";
@@ -60,6 +54,7 @@ async function generateCodeChallenge(verifier) {
   return btoa(String.fromCharCode(...new Uint8Array(hash))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 var OAuthProvider = class {
+  config;
   constructor(config) {
     this.config = config;
   }
@@ -275,6 +270,8 @@ var OAuthProvider = class {
   }
 };
 var OAuthService = class extends OAuthProvider {
+  serviceConfig;
+  tokenStore;
   constructor(config, tokenStore) {
     super(config);
     this.serviceConfig = config;