@abyss-project/commons-front-core 5.0.1 → 7.0.0

package/dist/CookieConsentSettings.component-CE2qOlyC.js

@@ -0,0 +1,299 @@
+import { jsxs as r, Fragment as S, jsx as e } from "react/jsx-runtime";
+import { useState as b, createContext as I, useContext as P, useMemo as j, useEffect as F } from "react";
+import { useTheme as R, Paper as _, Typography as s, Link as z, Stack as f, Button as m, Box as p, Switch as E, Card as T, CardContent as L, FormControlLabel as x, Checkbox as y } from "@mui/material";
+import { b as v, l as k, D as Y, A as $, u as D } from "./AbyssModal.component-Be9980v8.js";
+const C = ({ category: i, checked: o, locked: t = !1, onChange: c }) => {
+  const n = R(), a = v();
+  return /* @__PURE__ */ r(
+    f,
+    {
+      direction: "row",
+      spacing: 2,
+      alignItems: "flex-start",
+      sx: {
+        p: 2,
+        borderRadius: "12px",
+        border: "1px solid",
+        borderColor: k(n.palette.mode).glass.border,
+        bgcolor: k(n.palette.mode).glass.background
+      },
+      children: [
+        /* @__PURE__ */ r(p, { sx: { flex: 1, minWidth: 0 }, children: [
+          /* @__PURE__ */ r(f, { direction: "row", spacing: 1, alignItems: "center", children: [
+            /* @__PURE__ */ e(s, { variant: "body2", fontWeight: 600, children: a.formatRichMessage({
+              id: `cookies.category.${i}.title`
+            }) }),
+            t && /* @__PURE__ */ e(
+              s,
+              {
+                variant: "caption",
+                sx: {
+                  px: 0.75,
+                  py: 0.125,
+                  borderRadius: "6px",
+                  color: n.palette.primary.main,
+                  border: "1px solid",
+                  borderColor: k(n.palette.mode).glass.borderHover,
+                  whiteSpace: "nowrap"
+                },
+                children: a.formatRichMessage({
+                  id: "cookies.category.essentials.always-on"
+                })
+              }
+            )
+          ] }),
+          /* @__PURE__ */ e(
+            s,
+            {
+              variant: "caption",
+              color: "text.secondary",
+              sx: { display: "block", mt: 0.5 },
+              children: a.formatRichMessage({
+                id: `cookies.category.${i}.description`
+              })
+            }
+          )
+        ] }),
+        /* @__PURE__ */ e(
+          E,
+          {
+            checked: o,
+            disabled: t,
+            onChange: (d, l) => c == null ? void 0 : c(l),
+            inputProps: {
+              "aria-label": a.formatRichMessage({
+                id: `cookies.category.${i}.title`
+              })
+            }
+          }
+        )
+      ]
+    }
+  );
+}, H = ({
+  api: i
+}) => {
+  const o = R(), t = v(), { acceptAll: c, rejectAll: n, save: a } = i, [d, l] = b(!1), [h, u] = b(!1), [g, w] = b(!1), A = () => {
+    a({ analytics: h, marketing: g }), l(!1);
+  };
+  return /* @__PURE__ */ r(S, { children: [
+    /* @__PURE__ */ r(
+      _,
+      {
+        elevation: 0,
+        role: "dialog",
+        "aria-modal": !1,
+        "aria-labelledby": "cookie-consent-title",
+        "aria-describedby": "cookie-consent-description",
+        sx: {
+          position: "fixed",
+          bottom: { xs: 12, md: 24 },
+          left: { xs: 12, md: "auto" },
+          right: { xs: 12, md: 24 },
+          width: { xs: "auto", md: 420 },
+          zIndex: (W) => W.zIndex.snackbar,
+          p: { xs: 2.5, md: 3 },
+          borderRadius: "16px",
+          border: "1px solid",
+          borderColor: k(o.palette.mode).glass.border,
+          // Opaque base under the gradient: the surface gradient is translucent,
+          // and on its own it let the page text behind the card show through.
+          backgroundColor: o.palette.background.paper,
+          backgroundImage: k(o.palette.mode).gradients.surface,
+          backdropFilter: k(o.palette.mode).glass.blurStrong,
+          boxShadow: "0 16px 48px rgba(0, 0, 0, 0.45)",
+          animation: "cookie-consent-in 320ms cubic-bezier(0.16, 1, 0.3, 1)",
+          "@keyframes cookie-consent-in": {
+            from: { opacity: 0, transform: "translateY(12px)" },
+            to: { opacity: 1, transform: "translateY(0)" }
+          },
+          "@media (prefers-reduced-motion: reduce)": {
+            animation: "none"
+          }
+        },
+        children: [
+          /* @__PURE__ */ e(
+            s,
+            {
+              id: "cookie-consent-title",
+              variant: "subtitle1",
+              fontWeight: 700,
+              children: t.formatRichMessage({ id: "cookies.banner.title" })
+            }
+          ),
+          /* @__PURE__ */ e(
+            s,
+            {
+              id: "cookie-consent-description",
+              variant: "body2",
+              color: "text.secondary",
+              sx: { mt: 1 },
+              children: t.formatRichMessage({ id: "cookies.banner.description" })
+            }
+          ),
+          /* @__PURE__ */ e(
+            z,
+            {
+              href: Y,
+              rel: "noreferrer",
+              underline: "hover",
+              variant: "body2",
+              sx: {
+                display: "inline-block",
+                mt: 1.5,
+                color: o.palette.primary.main
+              },
+              children: t.formatRichMessage({ id: "cookies.banner.privacy-link" })
+            }
+          ),
+          /* @__PURE__ */ r(f, { direction: "row", spacing: 1, sx: { mt: 2.5 }, children: [
+            /* @__PURE__ */ e(m, { variant: "contained", onClick: c, sx: { flex: 1 }, children: t.formatRichMessage({ id: "cookies.action.accept-all" }) }),
+            /* @__PURE__ */ e(m, { variant: "outlined", onClick: n, sx: { flex: 1 }, children: t.formatRichMessage({ id: "cookies.action.reject-all" }) })
+          ] }),
+          /* @__PURE__ */ e(
+            m,
+            {
+              variant: "text",
+              size: "small",
+              onClick: () => l(!0),
+              sx: { mt: 1, width: "100%", color: "text.secondary" },
+              children: t.formatRichMessage({ id: "cookies.action.configure" })
+            }
+          )
+        ]
+      }
+    ),
+    /* @__PURE__ */ r(
+      $,
+      {
+        open: d,
+        onClose: () => l(!1),
+        maxWidth: "sm",
+        fullWidth: !0,
+        children: [
+          /* @__PURE__ */ e(s, { variant: "h6", fontWeight: 700, children: t.formatRichMessage({ id: "cookies.configure.title" }) }),
+          /* @__PURE__ */ r(f, { spacing: 1.5, sx: { mt: 3 }, children: [
+            /* @__PURE__ */ e(C, { category: "essentials", checked: !0, locked: !0 }),
+            /* @__PURE__ */ e(
+              C,
+              {
+                category: "analytics",
+                checked: h,
+                onChange: u
+              }
+            ),
+            /* @__PURE__ */ e(
+              C,
+              {
+                category: "marketing",
+                checked: g,
+                onChange: w
+              }
+            )
+          ] }),
+          /* @__PURE__ */ r(
+            f,
+            {
+              direction: "row",
+              spacing: 1,
+              justifyContent: "flex-end",
+              sx: { mt: 3 },
+              children: [
+                /* @__PURE__ */ e(m, { variant: "text", onClick: () => l(!1), children: t.formatRichMessage({ id: "cookies.action.cancel" }) }),
+                /* @__PURE__ */ e(m, { variant: "contained", onClick: A, children: t.formatRichMessage({ id: "cookies.action.save" }) })
+              ]
+            }
+          )
+        ]
+      }
+    )
+  ] });
+}, M = I(null), O = () => {
+  const i = P(M);
+  if (!i)
+    throw new Error(
+      "useAbyssCookieConsent must be used inside <AbyssCookieConsentProvider>"
+    );
+  return i;
+}, G = ({ children: i, consentVersion: o, isAuthenticated: t, domain: c, renderBanner: n }) => {
+  const a = D({ isAuthenticated: t, consentVersion: o, domain: c }), d = j(() => a.isResolved ? null : n ? n(a) : /* @__PURE__ */ e(H, { api: a }), [a, n]);
+  return /* @__PURE__ */ r(M.Provider, { value: a, children: [
+    i,
+    d
+  ] });
+}, J = () => {
+  const i = v(), { consent: o, save: t } = O(), [c, n] = b((o == null ? void 0 : o.analytics) ?? !1), [a, d] = b((o == null ? void 0 : o.marketing) ?? !1), l = o == null ? void 0 : o.analytics, h = o == null ? void 0 : o.marketing;
+  return F(() => {
+    l !== void 0 && n(l), h !== void 0 && d(h);
+  }, [l, h]), /* @__PURE__ */ e(T, { sx: { borderRadius: 3 }, children: /* @__PURE__ */ e(L, { children: /* @__PURE__ */ r(f, { spacing: 2, children: [
+    /* @__PURE__ */ e(s, { variant: "h6", children: i.formatRichMessage({ id: "cookies.configure.title" }) }),
+    /* @__PURE__ */ e(
+      x,
+      {
+        control: /* @__PURE__ */ e(y, { checked: !0, disabled: !0 }),
+        label: /* @__PURE__ */ r(p, { children: [
+          /* @__PURE__ */ e(s, { variant: "body2", fontWeight: 600, children: i.formatRichMessage({
+            id: "cookies.category.essentials.title"
+          }) }),
+          /* @__PURE__ */ e(s, { variant: "caption", color: "text.secondary", children: i.formatRichMessage({
+            id: "cookies.category.essentials.description"
+          }) })
+        ] })
+      }
+    ),
+    /* @__PURE__ */ e(
+      x,
+      {
+        control: /* @__PURE__ */ e(
+          y,
+          {
+            checked: c,
+            onChange: (u, g) => n(g)
+          }
+        ),
+        label: /* @__PURE__ */ r(p, { children: [
+          /* @__PURE__ */ e(s, { variant: "body2", fontWeight: 600, children: i.formatRichMessage({
+            id: "cookies.category.analytics.title"
+          }) }),
+          /* @__PURE__ */ e(s, { variant: "caption", color: "text.secondary", children: i.formatRichMessage({
+            id: "cookies.category.analytics.description"
+          }) })
+        ] })
+      }
+    ),
+    /* @__PURE__ */ e(
+      x,
+      {
+        control: /* @__PURE__ */ e(
+          y,
+          {
+            checked: a,
+            onChange: (u, g) => d(g)
+          }
+        ),
+        label: /* @__PURE__ */ r(p, { children: [
+          /* @__PURE__ */ e(s, { variant: "body2", fontWeight: 600, children: i.formatRichMessage({
+            id: "cookies.category.marketing.title"
+          }) }),
+          /* @__PURE__ */ e(s, { variant: "caption", color: "text.secondary", children: i.formatRichMessage({
+            id: "cookies.category.marketing.description"
+          }) })
+        ] })
+      }
+    ),
+    /* @__PURE__ */ e(p, { children: /* @__PURE__ */ e(
+      m,
+      {
+        variant: "contained",
+        onClick: () => t({ analytics: c, marketing: a }),
+        children: i.formatRichMessage({ id: "cookies.action.save" })
+      }
+    ) })
+  ] }) }) });
+};
+export {
+  G as A,
+  H as C,
+  J as a,
+  O as u
+};

package/dist/auth/client/abyss-login.d.ts

@@ -0,0 +1,61 @@
+import { AbyssService } from '@abyss-project/main';
+import { AuthClient } from './auth-client';
+/** Where a web satellite sends its users to sign in: abyss-main's single login page. */
+export interface AbyssLoginTarget {
+    /** abyss-main's web origin (`VITE_ABYSS_URL`), with or without a trailing `/`. */
+    abyssSite: string;
+    /** The satellite asking: abyss-main brings the user back to its site once signed in. */
+    service: AbyssService;
+    /**
+     * The satellite page to come back to (`pathname + search`, see `currentReturnPath`). Absent:
+     * abyss-main brings the user back to the satellite's home page.
+     */
+    redirectPath?: string;
+}
+/** `sessionStorage` key of the guard against redirect loops (one automatic redirect per tab). */
+export declare const LOGIN_REDIRECT_GUARD_KEY = "abyss-login-redirect";
+/** A tab back from the login page still signed out within this delay does not redirect again. */
+export declare const LOGIN_REDIRECT_GUARD_TTL_MS = 300000;
+/**
+ * `<abyssSite>/auth/login?abyss_service=<service>[&redirect_path=<redirectPath>]`, each value
+ * percent-encoded (`&`, `+`, `#`, `%` and `/` included) so that abyss-main reads back the exact path.
+ */
+export declare const buildAbyssLoginUrl: ({ abyssSite, service, redirectPath, }: AbyssLoginTarget) => string;
+/**
+ * The page to come back to after signing in: `pathname + search`. The hash is dropped on purpose:
+ * it never reaches abyss-main's server-side checks and no satellite route depends on it.
+ */
+export declare const currentReturnPath: (location?: Pick<Location, "pathname" | "search">) => string;
+/**
+ * `true` while this tab was sent to the login page less than `LOGIN_REDIRECT_GUARD_TTL_MS` ago. An
+ * expired or unreadable guard is removed.
+ */
+export declare const readLoginRedirectGuard: () => boolean;
+/** Forgets the guard: the session is back, or the user asked to try again. */
+export declare const clearLoginRedirectGuard: () => void;
+/**
+ * The user asked to sign in (a **Sign in** button): leaves for abyss-main's login page. The guard
+ * is left as it is: it only counts automatic redirects (D8), so an explicit click never turns a
+ * later protected page into the "still signed out" screen.
+ */
+export declare const redirectToAbyssLogin: (target: AbyssLoginTarget) => void;
+/**
+ * The automatic redirect of a protected page opened without a session (`RequireSession`): sets the
+ * guard (now), then leaves for abyss-main's login page.
+ */
+export declare const autoRedirectToAbyssLogin: (target: AbyssLoginTarget) => void;
+/**
+ * `true` once `logoutToAbyss` started: the ANONYMOUS state that follows is this sign-out, not a
+ * session to restore, and must not redirect again (with this page's `redirect_path`).
+ */
+export declare const isLeavingForAbyssLogin: () => boolean;
+/**
+ * Revokes the session (abyss-main's single web session: every web service is signed out), then
+ * opens abyss-main's login page for this service, without `redirect_path`: signing in again brings
+ * the user to the service's home page. The page is marked as leaving first
+ * (`isLeavingForAbyssLogin`), so that `RequireSession` does not answer the sign-out with a redirect
+ * of its own, back to the page being left (CA8). The page is left even if the revocation call
+ * failed (the session is forgotten locally either way, `AuthClient.logout`); the failure still
+ * rejects.
+ */
+export declare const logoutToAbyss: (client: AuthClient, { abyssSite, service }: Omit<AbyssLoginTarget, "redirectPath">) => Promise<void>;

package/dist/auth/client/auth-refresh-interceptor.d.ts

@@ -0,0 +1,41 @@
+import { AuthClient } from './auth-client';
+/** The request config an axios error carries, as far as the replay reads and writes it. */
+interface ReplayableRequest {
+    url?: string;
+    headers?: Record<string, unknown>;
+    /** Set on the one replay of a request that met an expired access token. */
+    abyssAuthReplayed?: boolean;
+}
+interface RejectedRequest {
+    config?: ReplayableRequest;
+    response?: {
+        status?: number;
+        data?: {
+            error?: {
+                message?: string;
+            };
+        };
+    };
+}
+/**
+ * The parts of an axios instance the interceptor uses. Structural: every SDK core bundles its own
+ * axios, whose types are not the same declarations.
+ */
+export interface AuthRefreshAxios {
+    interceptors: {
+        response: {
+            use(onFulfilled: null, onRejected: (error: RejectedRequest) => Promise<unknown>): number;
+            eject(id: number): void;
+        };
+    };
+    request(config: ReplayableRequest): Promise<unknown>;
+}
+/**
+ * On every given axios instance (the SDK cores of the app: `AbyssCore.axios`, its own core, the
+ * other cores it calls): a 401 `Token Expired`, outside abyss-main's `auth/` routes, triggers one
+ * `client.refresh()` then one replay with the new access token. A second 401 on the replay, any
+ * other 401, or no session after the refresh: the error is propagated as is. Returns the removal
+ * of these interceptors.
+ */
+export declare const attachAuthRefreshInterceptor: (client: AuthClient, axiosInstances: readonly AuthRefreshAxios[]) => (() => void);
+export {};

package/dist/auth/client/index.d.ts

@@ -1,5 +1,7 @@
+export * from './abyss-login';
 export * from './auth-bridge';
 export * from './auth-client';
+export * from './auth-refresh-interceptor';
 export * from './native-plugin';
 export * from './token-storage';
 export * from './web-bridge';

package/dist/auth/client/web-bridge.d.ts

@@ -1,13 +1,18 @@
 import { AuthBridge } from './auth-bridge';
 export declare const GOOGLE_IDENTITY_SCRIPT_URL = "https://accounts.google.com/gsi/client";
 export declare const APPLE_ID_SCRIPT_URL = "https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1.0/en_US/appleid.auth.js";
+/**
+ * The provider identifiers of the site. Only abyss-main's login page offers Google and Apple on the
+ * web: a web satellite passes none, and `google()` / `apple()` then reject with
+ * `AuthBridgeErrorCode.UNSUPPORTED`. Passkeys never depend on them.
+ */
 export interface WebBridgeConfig {
-    /** Google OAuth client id (web application type). */
-    googleClientId: string;
-    /** Apple Services ID of the site. */
-    appleServiceId: string;
+    /** Google OAuth client id (web application type). Absent: `google()` is unsupported. */
+    googleClientId?: string;
+    /** Apple Services ID of the site. Absent (or no `appleRedirectUri`): `apple()` is unsupported. */
+    appleServiceId?: string;
     /** Return URL declared on the Services ID; required by Apple JS even in popup mode. */
-    appleRedirectUri: string;
+    appleRedirectUri?: string;
 }
 /** The bridge of every web front: WebAuthn, Google Identity Services, Sign in with Apple JS. */
 export declare const createWebBridge: (config: WebBridgeConfig) => AuthBridge;

package/dist/auth/components/RequireSession/RequireSession.component.d.ts

@@ -0,0 +1,17 @@
+import { ReactNode } from 'react';
+import { AbyssService } from '@abyss-project/main';
+export type RequireSessionProps = {
+    service: AbyssService;
+    /** abyss-main's web origin (`VITE_ABYSS_URL`). */
+    abyssSite: string;
+    children: ReactNode;
+};
+/**
+ * Wraps the protected layouts of a web satellite (D1, D8). Signed in: the guard against redirect
+ * loops is cleared and the page renders. Signed out: one automatic redirect to abyss-main's login
+ * page per tab and per 5 min, back to this exact page (`pathname + search`); signed out again
+ * within that delay, or abyss-main unreachable: a terminal screen, never a new redirect. Signed
+ * out by `logoutToAbyss`: that function already leaves for the login page, so nothing more here
+ * than the loading screen (CA8).
+ */
+export declare const RequireSession: ({ service, abyssSite, children, }: RequireSessionProps) => import("react/jsx-runtime").JSX.Element;

package/dist/auth/components/SessionBoundary/AbyssSessionBoundary.component.d.ts

@@ -0,0 +1,27 @@
+import { ReactNode } from 'react';
+import { AbyssService, IUser } from '@abyss-project/main';
+export type AbyssSessionBoundaryProps = {
+    service: AbyssService;
+    /** abyss-main's web origin (`VITE_ABYSS_URL`). */
+    abyssSite: string;
+    /**
+     * Opens the service for the signed-in user before anything renders (`activateService` if
+     * needed, `user.me`…): run once per user id. A rejection shows the `prepare-failed` screen.
+     */
+    prepare?: (user: IUser) => Promise<void>;
+    /**
+     * **Sign out** of the `prepare-failed` screen, when the host signs out its own way (a native app,
+     * which has no abyss-main login page to leave for). Absent: `logoutToAbyss`.
+     */
+    onSignOut?: () => Promise<void> | void;
+    children: ReactNode;
+};
+/**
+ * The root of a web satellite, inside `<AuthProvider>` (D1): restores the session
+ * (`client.bootstrap()`) behind the loading screen, then prepares the service for the signed-in
+ * user. Signed out, it renders its children: public pages stay reachable, and `<RequireSession>`
+ * guards the protected ones. Signed in but offline (a native app started without network, its user
+ * restored): the children render unprepared, and the preparation runs once back online, the app
+ * staying on screen meanwhile.
+ */
+export declare const AbyssSessionBoundary: ({ service, abyssSite, prepare, onSignOut, children, }: AbyssSessionBoundaryProps) => import("react/jsx-runtime").JSX.Element;

package/dist/auth/components/SessionErrorScreen/SessionErrorScreen.component.d.ts

@@ -0,0 +1,27 @@
+import { AbyssService } from '@abyss-project/main';
+/** Why a web satellite stops on this screen instead of redirecting (D8). */
+export declare enum SessionErrorReason {
+    /** Back from abyss-main's login page still signed out, less than 5 min after leaving for it. */
+    STILL_ANONYMOUS = "still-anonymous",
+    /** abyss-main could not be reached at launch: no session to restore, no redirect either. */
+    UNREACHABLE = "unreachable",
+    /** Signed in, but the satellite could not open its service (`activateService`, `user.me`…). */
+    PREPARE_FAILED = "prepare-failed"
+}
+export type SessionErrorScreenProps = {
+    reason: SessionErrorReason;
+    /** The satellite: its name is said when it could not be opened. */
+    service: AbyssService;
+    /** **Try again**, always offered. */
+    onRetry: () => void;
+    /** **Sign in**, offered when given. */
+    onSignIn?: () => void;
+    /** **Sign out**, offered only for `PREPARE_FAILED` (a session exists then). */
+    onSignOut?: () => void;
+};
+/**
+ * The terminal screen of a web satellite's session (D8): it says why the page cannot open (a title
+ * and one sentence of explanation per reason), and never redirects by itself — every way out is a
+ * button.
+ */
+export declare const SessionErrorScreen: ({ reason, service, onRetry, onSignIn, onSignOut, }: SessionErrorScreenProps) => import("react/jsx-runtime").JSX.Element;

package/dist/auth/components/index.d.ts

@@ -9,3 +9,9 @@ export type { ReauthDialogProps } from './ReauthDialog/ReauthDialog.component';
 export { AuthReauthHost } from './ReauthDialog/AuthReauthHost.component';
 export { MfaRequirementBanner } from './MfaRequirementBanner/MfaRequirementBanner.component';
 export type { MfaRequirementBannerProps } from './MfaRequirementBanner/MfaRequirementBanner.component';
+export { AbyssSessionBoundary } from './SessionBoundary/AbyssSessionBoundary.component';
+export type { AbyssSessionBoundaryProps } from './SessionBoundary/AbyssSessionBoundary.component';
+export { RequireSession } from './RequireSession/RequireSession.component';
+export type { RequireSessionProps } from './RequireSession/RequireSession.component';
+export { SessionErrorReason, SessionErrorScreen, } from './SessionErrorScreen/SessionErrorScreen.component';
+export type { SessionErrorScreenProps } from './SessionErrorScreen/SessionErrorScreen.component';

package/dist/auth-client.js

@@ -1,26 +1,37 @@
-import { a as e, A as R, R as _, b as s, c as S, s as r } from "./token-storage-CbWrBeIP.js";
-import { g as A, i as T, j as o, A as u, G as L, c as h, L as M, d as O, e as P, a as C, b as I, R as c, U as d, f as H, h as N, u as g } from "./use-auth.hook-DatVLGxS.js";
+import { q as e, t as R, u as r, A as E, G as t, L as _, a as o, k as A, j as S, m as T, n as L, g as u, h as i, R as c, U as d, p as h, f as n, b as g, d as I, o as G, s as M, c as O, i as b, l as C, r as P, e as N, v as U } from "./use-auth.hook-oRxzI95f.js";
+import { a as H, A as Y, R as l, b as F, c as y, s as f } from "./token-storage-CbWrBeIP.js";
 export {
-  A as APPLE_ID_SCRIPT_URL,
-  e as AuthBridgeError,
-  R as AuthBridgeErrorCode,
-  T as AuthContext,
-  o as AuthProvider,
-  u as AuthStatus,
-  L as GOOGLE_IDENTITY_SCRIPT_URL,
-  h as LOST_RESPONSE_LATE_RETRIES_AT_MS,
-  M as LOST_RESPONSE_RETRY_DELAYS_MS,
-  O as REFRESH_ATTEMPT_TIMEOUT_MS,
-  P as REFRESH_LOCK_NAME,
-  C as REFRESH_MARGIN_MS,
-  I as REFRESH_REPLAY_GRACE_MS,
-  _ as REFRESH_TOKEN_STORAGE_KEY,
+  e as APPLE_ID_SCRIPT_URL,
+  H as AuthBridgeError,
+  Y as AuthBridgeErrorCode,
+  R as AuthContext,
+  r as AuthProvider,
+  E as AuthStatus,
+  t as GOOGLE_IDENTITY_SCRIPT_URL,
+  _ as LOGIN_REDIRECT_GUARD_KEY,
+  o as LOGIN_REDIRECT_GUARD_TTL_MS,
+  A as LOST_RESPONSE_LATE_RETRIES_AT_MS,
+  S as LOST_RESPONSE_RETRY_DELAYS_MS,
+  T as REFRESH_ATTEMPT_TIMEOUT_MS,
+  L as REFRESH_LOCK_NAME,
+  u as REFRESH_MARGIN_MS,
+  i as REFRESH_REPLAY_GRACE_MS,
+  l as REFRESH_TOKEN_STORAGE_KEY,
   c as ReauthMethod,
   d as UNREACHABLE_RETRY_MS,
-  H as createAuthClient,
-  s as createSecureTokenStorage,
-  N as createWebBridge,
-  S as createWebTokenStorage,
-  r as sha256Hex,
-  g as useAuth
+  h as attachAuthRefreshInterceptor,
+  n as autoRedirectToAbyssLogin,
+  g as buildAbyssLoginUrl,
+  I as clearLoginRedirectGuard,
+  G as createAuthClient,
+  F as createSecureTokenStorage,
+  M as createWebBridge,
+  y as createWebTokenStorage,
+  O as currentReturnPath,
+  b as isLeavingForAbyssLogin,
+  C as logoutToAbyss,
+  P as readLoginRedirectGuard,
+  N as redirectToAbyssLogin,
+  f as sha256Hex,
+  U as useAuth
 };

package/dist/components/business/InfectedDownloadModal/InfectedDownloadModal.d.ts

@@ -0,0 +1,10 @@
+export interface InfectedDownloadModalProps {
+    open: boolean;
+    fileName: string;
+    threats: string[];
+    onCancel(): void;
+    /** Without it the modal offers no way to download the file. */
+    onDownloadAnyway?(): void;
+}
+/** Warns that a scanned file carries threats; the download stays opt-in, behind an explicit button. */
+export declare const InfectedDownloadModal: ({ open, fileName, threats, onCancel, onDownloadAnyway, }: InfectedDownloadModalProps) => import("react/jsx-runtime").JSX.Element;

package/dist/components/business/index.d.ts

@@ -0,0 +1 @@
+export * from './InfectedDownloadModal/InfectedDownloadModal';

package/dist/components/data/DataTable/DataTable.d.ts

@@ -0,0 +1,8 @@
+import { DataTableProps } from './data-table.types';
+export * from './data-table.types';
+/**
+ * A data table (`.tbl`): sortable headers, selection with a bulk bar, row click and keyboard
+ * navigation. Below 768 px it becomes a two-level list built from `mobileRow`; the selection is
+ * kept and the bulk actions move into an `ActionBar`.
+ */
+export declare function DataTable<T>(props: DataTableProps<T>): import("react/jsx-runtime").JSX.Element;

package/dist/components/data/DataTable/DataTableDesktop.d.ts

@@ -0,0 +1,6 @@
+import { DataTableProps } from './data-table.types';
+/**
+ * The table form of `DataTable`, from 768 px up. From 768 to 1199 px (next to the icon rail) the
+ * `Optional` columns are hidden.
+ */
+export declare function DataTableDesktop<T>({ columns: allColumns, rows, getRowId, density, selection, sort, onRowClick, loading, empty, }: DataTableProps<T>): import("react/jsx-runtime").JSX.Element;

package/dist/components/data/DataTable/DataTableMobile.d.ts

@@ -0,0 +1,6 @@
+import { DataTableProps } from './data-table.types';
+/**
+ * The two-level list form of `DataTable` below 768 px (`.mli`): the selection stays, and the bulk
+ * actions move into an `ActionBar` at the bottom of the screen.
+ */
+export declare function DataTableMobile<T>({ rows, getRowId, selection, onRowClick, loading, empty, mobileRow, }: DataTableProps<T>): import("react/jsx-runtime").JSX.Element;