{"version":3,"file":"index.mjs","names":["scope"],"sources":["../src/index.ts"],"sourcesContent":["export type {\n  NextgenSession,\n  AuthState,\n  UnauthState,\n  AuthResult,\n  NextgenMiddlewareOptions,\n} from \"./middleware.js\";\nexport {\n  HOP_BY_HOP,\n  INTERNAL_HEADERS,\n  matchesRoutes,\n  filterResponseHeaders,\n  requiresProjectSecret,\n  checkOpaqueSessionToken,\n  validateOpaqueSessionToken,\n  jwtNamesProject,\n  resolveSession,\n  SESSION_PROJECT_MISMATCH,\n  SERVER_SESSION_COOKIE,\n  sessionCookieName,\n  serializeSessionCookie,\n  proxySessionCookies,\n  clearSessionCheckCache,\n  SESSION_COOKIE_CACHE_CONTROL,\n} from \"./middleware.js\";\nexport type {\n  OpaqueSession,\n  OpaqueSessionCheck,\n  SessionRequest,\n  SessionCookie,\n  ResolveSessionOptions,\n  ResolvedSession,\n  ProxiedRequest,\n  ProxiedAnswer,\n  ProxiedSessionCookies,\n  ProxyUpstream,\n  BrowserRequest,\n} from \"./middleware.js\";\nexport {\n  verifyJwt,\n  decodeJwt,\n  isJwtShaped,\n  base64UrlDecode,\n  JWKS_TTL_MS,\n  JWKS_MIN_REFRESH_MS,\n  clearJwksCache,\n} from \"./jwt.js\";\nexport type { JwtPayload, JwtHeader, DecodedJwt, VerifyJwtOptions } from \"./jwt.js\";\n\nexport type ZitadelEnvironment = \"development\" | \"preview\" | \"production\";\n\nexport type ZitadelRuntime = {\n  projectId: string;\n  environment: ZitadelEnvironment;\n  issuer?: string;\n};\n\nexport type ZitadelRuntimeInput = {\n  projectId?: string;\n  environment?: ZitadelEnvironment;\n  issuer?: string;\n};\n\nexport class ZitadelRuntimeError extends Error {\n  readonly code: string;\n\n  constructor(code: string, message: string) {\n    super(message);\n    this.name = \"ZitadelRuntimeError\";\n    this.code = code;\n  }\n}\n\nexport function resolveZitadelRuntimeEnv(\n  env: Record<string, string | undefined> = currentEnv(),\n): ZitadelRuntime {\n  return resolveZitadelRuntime({\n    projectId: env.NEXT_PUBLIC_ZITADEL_PROJECT_ID ?? env.ZITADEL_PROJECT_ID,\n    environment: parseEnvironment(env.NEXT_PUBLIC_ZITADEL_ENVIRONMENT ?? env.ZITADEL_ENVIRONMENT),\n    issuer: env.NEXT_PUBLIC_ZITADEL_ISSUER ?? env.ZITADEL_ISSUER,\n  });\n}\n\nexport function resolveZitadelRuntime(input: ZitadelRuntimeInput): ZitadelRuntime {\n  const environment = input.environment ?? \"development\";\n  if (!input.projectId) {\n    throw new ZitadelRuntimeError(\n      \"E_ZITADEL_CONFIG\",\n      \"ZITADEL_PROJECT_ID is required for Zitadel runtime.\",\n    );\n  }\n  if (environment === \"production\" && !input.issuer) {\n    throw new ZitadelRuntimeError(\"E_ZITADEL_CONFIG\", \"ZITADEL_ISSUER is required in production.\");\n  }\n  return {\n    projectId: input.projectId,\n    environment,\n    issuer: input.issuer,\n  };\n}\n\nfunction parseEnvironment(value: string | undefined): ZitadelEnvironment {\n  if (!value || value === \"development\") return \"development\";\n  if (value === \"preview\" || value === \"production\") return value;\n  throw new ZitadelRuntimeError(\"E_ZITADEL_CONFIG\", `Unsupported ZITADEL_ENVIRONMENT \"${value}\".`);\n}\n\nfunction currentEnv(): Record<string, string | undefined> {\n  const scope = globalThis as { process?: { env?: Record<string, string | undefined> } };\n  return scope.process?.env ?? {};\n}\n"],"mappings":";;;AA+DA,IAAa,sBAAb,cAAyC,MAAM;CAC7C;CAEA,YAAY,MAAc,SAAiB;EACzC,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO;CACd;AACF;AAEA,SAAgB,yBACd,MAA0C,WAAW,GACrC;CAChB,OAAO,sBAAsB;EAC3B,WAAW,IAAI,kCAAkC,IAAI;EACrD,aAAa,iBAAiB,IAAI,mCAAmC,IAAI,mBAAmB;EAC5F,QAAQ,IAAI,8BAA8B,IAAI;CAChD,CAAC;AACH;AAEA,SAAgB,sBAAsB,OAA4C;CAChF,MAAM,cAAc,MAAM,eAAe;CACzC,IAAI,CAAC,MAAM,WACT,MAAM,IAAI,oBACR,oBACA,qDACF;CAEF,IAAI,gBAAgB,gBAAgB,CAAC,MAAM,QACzC,MAAM,IAAI,oBAAoB,oBAAoB,2CAA2C;CAE/F,OAAO;EACL,WAAW,MAAM;EACjB;EACA,QAAQ,MAAM;CAChB;AACF;AAEA,SAAS,iBAAiB,OAA+C;CACvE,IAAI,CAAC,SAAS,UAAU,eAAe,OAAO;CAC9C,IAAI,UAAU,aAAa,UAAU,cAAc,OAAO;CAC1D,MAAM,IAAI,oBAAoB,oBAAoB,oCAAoC,MAAM,GAAG;AACjG;AAEA,SAAS,aAAiD;CAExD,OAAOA,WAAM,SAAS,OAAO,CAAC;AAChC"}