@arow-software/auth-client 1.1.0

package/dist/index.js

@@ -0,0 +1,548 @@
+'use strict';
+
+var react = require('react');
+var jsxRuntime = require('react/jsx-runtime');
+
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+// src/tokenManager.ts
+var DEFAULT_STORAGE_PREFIX = "arowauth";
+var ACCESS_TOKEN_KEY = "access_token";
+var REFRESH_TOKEN_KEY = "refresh_token";
+var EXPIRY_BUFFER_SECONDS = 300;
+var config = null;
+var isRefreshing = false;
+var refreshPromise = null;
+function initTokenManager(authConfig) {
+  config = authConfig;
+}
+function getStorage() {
+  if (typeof window === "undefined") {
+    return {
+      getItem: () => null,
+      setItem: () => {
+      },
+      removeItem: () => {
+      },
+      clear: () => {
+      },
+      key: () => null,
+      length: 0
+    };
+  }
+  return config?.useSessionStorage ? sessionStorage : localStorage;
+}
+function getKey(key) {
+  const prefix = config?.storagePrefix || DEFAULT_STORAGE_PREFIX;
+  return `${prefix}_${key}`;
+}
+function decodeJwt(token) {
+  try {
+    const parts = token.split(".");
+    if (parts.length !== 3) return null;
+    const payload = parts[1];
+    const base64 = payload.replace(/-/g, "+").replace(/_/g, "/");
+    const jsonPayload = decodeURIComponent(
+      atob(base64).split("").map((c) => "%" + ("00" + c.charCodeAt(0).toString(16)).slice(-2)).join("")
+    );
+    return JSON.parse(jsonPayload);
+  } catch {
+    return null;
+  }
+}
+function getAccessToken() {
+  return getStorage().getItem(getKey(ACCESS_TOKEN_KEY));
+}
+function getRefreshToken() {
+  return getStorage().getItem(getKey(REFRESH_TOKEN_KEY));
+}
+function setTokens(accessToken, refreshToken) {
+  const storage = getStorage();
+  storage.setItem(getKey(ACCESS_TOKEN_KEY), accessToken);
+  storage.setItem(getKey(REFRESH_TOKEN_KEY), refreshToken);
+}
+function clearTokens() {
+  const storage = getStorage();
+  storage.removeItem(getKey(ACCESS_TOKEN_KEY));
+  storage.removeItem(getKey(REFRESH_TOKEN_KEY));
+}
+function isTokenExpired(token) {
+  const accessToken = token ?? getAccessToken();
+  if (!accessToken) return true;
+  const payload = decodeJwt(accessToken);
+  if (!payload || !payload.exp) return true;
+  const now = Math.floor(Date.now() / 1e3);
+  return payload.exp <= now + EXPIRY_BUFFER_SECONDS;
+}
+function hasValidToken() {
+  const token = getAccessToken();
+  return token !== null && !isTokenExpired(token);
+}
+function getUserFromToken() {
+  const token = getAccessToken();
+  if (!token) return null;
+  return decodeJwt(token);
+}
+async function refreshTokens() {
+  if (!config) {
+    throw new Error("TokenManager not initialized. Call initTokenManager first.");
+  }
+  const refreshToken = getRefreshToken();
+  if (!refreshToken) {
+    clearTokens();
+    return null;
+  }
+  if (isRefreshing && refreshPromise) {
+    return refreshPromise;
+  }
+  isRefreshing = true;
+  refreshPromise = performRefresh(refreshToken);
+  try {
+    const result = await refreshPromise;
+    return result;
+  } finally {
+    isRefreshing = false;
+    refreshPromise = null;
+  }
+}
+async function performRefresh(refreshToken) {
+  if (!config) return null;
+  try {
+    const response = await fetch(`${config.ssoBaseUrl}/api/auth/refresh`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({ refreshToken })
+    });
+    if (!response.ok) {
+      clearTokens();
+      config.onAuthError?.(new Error("Token refresh failed"));
+      return null;
+    }
+    const data = await response.json();
+    const tokens = {
+      accessToken: data.accessToken || data.access_token,
+      refreshToken: data.refreshToken || data.refresh_token,
+      expiresIn: data.expiresIn || data.expires_in,
+      tokenType: data.tokenType || data.token_type || "Bearer"
+    };
+    setTokens(tokens.accessToken, tokens.refreshToken);
+    config.onTokenRefresh?.(tokens);
+    return tokens;
+  } catch (error) {
+    clearTokens();
+    config.onAuthError?.(error instanceof Error ? error : new Error("Token refresh failed"));
+    return null;
+  }
+}
+async function getValidAccessToken() {
+  const token = getAccessToken();
+  if (token && !isTokenExpired(token)) {
+    return token;
+  }
+  const refreshed = await refreshTokens();
+  return refreshed?.accessToken ?? null;
+}
+
+// src/apiInterceptor.ts
+var isRefreshing2 = false;
+var requestQueue = [];
+function processQueue(token, error = null) {
+  requestQueue.forEach((request) => {
+    if (error) {
+      request.reject(error);
+    } else {
+      request.resolve(token);
+    }
+  });
+  requestQueue = [];
+}
+function createAuthClient(axiosInstance, config2) {
+  axiosInstance.interceptors.request.use(
+    async (requestConfig) => {
+      if (requestConfig.url?.includes("/api/auth/refresh")) {
+        return requestConfig;
+      }
+      const token = getAccessToken();
+      if (token) {
+        requestConfig.headers = requestConfig.headers || {};
+        requestConfig.headers.Authorization = `Bearer ${token}`;
+      }
+      return requestConfig;
+    },
+    (error) => Promise.reject(error)
+  );
+  axiosInstance.interceptors.response.use(
+    (response) => response,
+    async (error) => {
+      const originalRequest = error.config;
+      if (error.response?.status !== 401) {
+        return Promise.reject(error);
+      }
+      if (originalRequest._retry || !originalRequest) {
+        clearTokens();
+        config2.onAuthError?.(new Error("Authentication failed"));
+        return Promise.reject(error);
+      }
+      if (originalRequest.url?.includes("/api/auth/refresh")) {
+        clearTokens();
+        config2.onAuthError?.(new Error("Token refresh failed"));
+        return Promise.reject(error);
+      }
+      if (isRefreshing2) {
+        return new Promise((resolve, reject) => {
+          requestQueue.push({
+            resolve: (token) => {
+              if (token) {
+                originalRequest.headers = originalRequest.headers || {};
+                originalRequest.headers.Authorization = `Bearer ${token}`;
+                resolve(axiosInstance(originalRequest));
+              } else {
+                reject(new Error("Token refresh failed"));
+              }
+            },
+            reject
+          });
+        });
+      }
+      originalRequest._retry = true;
+      isRefreshing2 = true;
+      try {
+        const token = await getValidAccessToken();
+        if (!token) {
+          processQueue(null, new Error("Token refresh failed"));
+          clearTokens();
+          config2.onAuthError?.(new Error("Token refresh failed"));
+          return Promise.reject(error);
+        }
+        processQueue(token);
+        originalRequest.headers = originalRequest.headers || {};
+        originalRequest.headers.Authorization = `Bearer ${token}`;
+        return axiosInstance(originalRequest);
+      } catch (refreshError) {
+        processQueue(null, refreshError instanceof Error ? refreshError : new Error("Token refresh failed"));
+        clearTokens();
+        config2.onAuthError?.(refreshError instanceof Error ? refreshError : new Error("Token refresh failed"));
+        return Promise.reject(refreshError);
+      } finally {
+        isRefreshing2 = false;
+      }
+    }
+  );
+  return axiosInstance;
+}
+function createApiClient(config2) {
+  const axios = __require("axios");
+  const instance = axios.create({
+    baseURL: config2.apiBaseUrl,
+    headers: {
+      "Content-Type": "application/json"
+    }
+  });
+  return createAuthClient(instance, config2);
+}
+var AuthContext = react.createContext(void 0);
+function parseUserFromToken(token) {
+  const payload = decodeJwt(token);
+  if (!payload) return null;
+  return {
+    id: payload.sub,
+    email: payload.email,
+    firstName: payload.given_name,
+    lastName: payload.family_name,
+    displayName: payload.name,
+    avatarUrl: payload.picture,
+    emailVerified: payload.email_verified ?? false,
+    roles: payload.roles,
+    permissions: payload.permissions
+  };
+}
+function buildAuthUrl(ssoBaseUrl, clientId, redirectUri, scopes = ["openid", "email", "profile"], redirectPath) {
+  const finalRedirectUri = redirectUri || `${window.location.origin}/callback`;
+  if (redirectPath) {
+    sessionStorage.setItem("arowauth_redirect_path", redirectPath);
+  }
+  const params = new URLSearchParams({
+    client_id: clientId,
+    redirect_uri: finalRedirectUri,
+    response_type: "token",
+    scope: scopes.join(" ")
+  });
+  return `${ssoBaseUrl}/oauth/authorize?${params.toString()}`;
+}
+function parseTokensFromHash() {
+  if (typeof window === "undefined") return null;
+  const hash = window.location.hash;
+  if (!hash) return null;
+  const params = new URLSearchParams(hash.substring(1));
+  const accessToken = params.get("access_token") || params.get("token");
+  const refreshToken = params.get("refresh_token");
+  if (accessToken && refreshToken) {
+    return {
+      accessToken,
+      refreshToken,
+      expiresIn: params.get("expires_in") ? parseInt(params.get("expires_in"), 10) : void 0,
+      tokenType: params.get("token_type") || "Bearer"
+    };
+  }
+  return null;
+}
+function AuthProvider(props) {
+  const { children, onTokenRefresh, onAuthError, onLogout, ...config2 } = props;
+  const [state, setState] = react.useState({
+    user: null,
+    isAuthenticated: false,
+    isLoading: true,
+    error: null
+  });
+  react.useEffect(() => {
+    const fullConfig = {
+      ...config2,
+      onTokenRefresh,
+      onAuthError: (error) => {
+        setState((prev) => ({ ...prev, error: error.message }));
+        onAuthError?.(error);
+      },
+      onLogout
+    };
+    initTokenManager(fullConfig);
+  }, [config2.ssoBaseUrl, config2.clientId, config2.apiBaseUrl, onTokenRefresh, onAuthError, onLogout]);
+  react.useEffect(() => {
+    const initAuth = async () => {
+      try {
+        const hashTokens = parseTokensFromHash();
+        if (hashTokens) {
+          setTokens(hashTokens.accessToken, hashTokens.refreshToken);
+          window.history.replaceState(null, "", window.location.pathname + window.location.search);
+          const redirectPath = sessionStorage.getItem("arowauth_redirect_path");
+          if (redirectPath) {
+            sessionStorage.removeItem("arowauth_redirect_path");
+            window.history.replaceState(null, "", redirectPath);
+          }
+          onTokenRefresh?.(hashTokens);
+        }
+        const token = getAccessToken();
+        if (token && !isTokenExpired(token)) {
+          const user = parseUserFromToken(token);
+          setState({
+            user,
+            isAuthenticated: true,
+            isLoading: false,
+            error: null
+          });
+          return;
+        }
+        if (token) {
+          const newToken = await getValidAccessToken();
+          if (newToken) {
+            const user = parseUserFromToken(newToken);
+            setState({
+              user,
+              isAuthenticated: true,
+              isLoading: false,
+              error: null
+            });
+            return;
+          }
+        }
+        setState({
+          user: null,
+          isAuthenticated: false,
+          isLoading: false,
+          error: null
+        });
+      } catch (error) {
+        setState({
+          user: null,
+          isAuthenticated: false,
+          isLoading: false,
+          error: error instanceof Error ? error.message : "Authentication error"
+        });
+      }
+    };
+    initAuth();
+  }, [onTokenRefresh]);
+  const login = react.useCallback((redirectPath) => {
+    const authUrl = buildAuthUrl(
+      config2.ssoBaseUrl,
+      config2.clientId,
+      config2.redirectUri,
+      config2.scopes,
+      redirectPath || window.location.pathname
+    );
+    window.location.href = authUrl;
+  }, [config2.ssoBaseUrl, config2.clientId, config2.redirectUri, config2.scopes]);
+  const logout = react.useCallback(async () => {
+    clearTokens();
+    setState({
+      user: null,
+      isAuthenticated: false,
+      isLoading: false,
+      error: null
+    });
+    onLogout?.();
+  }, [onLogout]);
+  const refreshUser = react.useCallback(async () => {
+    const token = await getValidAccessToken();
+    if (token) {
+      const user = parseUserFromToken(token);
+      setState((prev) => ({
+        ...prev,
+        user,
+        isAuthenticated: true,
+        error: null
+      }));
+    } else {
+      setState({
+        user: null,
+        isAuthenticated: false,
+        isLoading: false,
+        error: null
+      });
+    }
+  }, []);
+  const contextValue = react.useMemo(
+    () => ({
+      ...state,
+      login,
+      logout,
+      refreshUser
+    }),
+    [state, login, logout, refreshUser]
+  );
+  return /* @__PURE__ */ jsxRuntime.jsx(AuthContext.Provider, { value: contextValue, children });
+}
+function useAuth() {
+  const context = react.useContext(AuthContext);
+  if (context === void 0) {
+    throw new Error("useAuth must be used within an AuthProvider");
+  }
+  return context;
+}
+function useIsAuthenticated() {
+  const { isAuthenticated } = useAuth();
+  return isAuthenticated;
+}
+function useUser() {
+  const { user } = useAuth();
+  return user;
+}
+function useAuthClient() {
+  const context = react.useContext(AuthContext);
+  if (context === void 0) {
+    throw new Error("useAuthClient must be used within an AuthProvider");
+  }
+  const client = react.useMemo(() => {
+    const axios = __require("axios");
+    const instance = axios.create({
+      headers: {
+        "Content-Type": "application/json"
+      }
+    });
+    let isRefreshing3 = false;
+    let requestQueue2 = [];
+    const processQueue2 = (token, error = null) => {
+      requestQueue2.forEach((req) => {
+        if (error) {
+          req.reject(error);
+        } else {
+          req.resolve(token);
+        }
+      });
+      requestQueue2 = [];
+    };
+    instance.interceptors.request.use(
+      async (config2) => {
+        if (config2.url?.includes("/api/auth/refresh")) {
+          return config2;
+        }
+        const token = getAccessToken();
+        if (token) {
+          config2.headers = config2.headers || {};
+          config2.headers.Authorization = `Bearer ${token}`;
+        }
+        return config2;
+      },
+      (error) => Promise.reject(error)
+    );
+    instance.interceptors.response.use(
+      (response) => response,
+      async (error) => {
+        const originalRequest = error.config;
+        if (error.response?.status !== 401 || originalRequest._retry) {
+          return Promise.reject(error);
+        }
+        if (originalRequest.url?.includes("/api/auth/refresh")) {
+          clearTokens();
+          return Promise.reject(error);
+        }
+        if (isRefreshing3) {
+          return new Promise((resolve, reject) => {
+            requestQueue2.push({
+              resolve: (token) => {
+                if (token) {
+                  originalRequest.headers = originalRequest.headers || {};
+                  originalRequest.headers.Authorization = `Bearer ${token}`;
+                  resolve(instance(originalRequest));
+                } else {
+                  reject(new Error("Token refresh failed"));
+                }
+              },
+              reject
+            });
+          });
+        }
+        originalRequest._retry = true;
+        isRefreshing3 = true;
+        try {
+          const token = await getValidAccessToken();
+          if (!token) {
+            processQueue2(null, new Error("Token refresh failed"));
+            clearTokens();
+            return Promise.reject(error);
+          }
+          processQueue2(token);
+          originalRequest.headers = originalRequest.headers || {};
+          originalRequest.headers.Authorization = `Bearer ${token}`;
+          return instance(originalRequest);
+        } catch (refreshError) {
+          processQueue2(null, refreshError instanceof Error ? refreshError : new Error("Refresh failed"));
+          clearTokens();
+          return Promise.reject(refreshError);
+        } finally {
+          isRefreshing3 = false;
+        }
+      }
+    );
+    return instance;
+  }, []);
+  return client;
+}
+
+exports.AuthContext = AuthContext;
+exports.AuthProvider = AuthProvider;
+exports.clearTokens = clearTokens;
+exports.createApiClient = createApiClient;
+exports.createAuthClient = createAuthClient;
+exports.decodeJwt = decodeJwt;
+exports.getAccessToken = getAccessToken;
+exports.getRefreshToken = getRefreshToken;
+exports.getUserFromToken = getUserFromToken;
+exports.getValidAccessToken = getValidAccessToken;
+exports.hasValidToken = hasValidToken;
+exports.initTokenManager = initTokenManager;
+exports.isTokenExpired = isTokenExpired;
+exports.refreshTokens = refreshTokens;
+exports.setTokens = setTokens;
+exports.useAuth = useAuth;
+exports.useAuthClient = useAuthClient;
+exports.useIsAuthenticated = useIsAuthenticated;
+exports.useUser = useUser;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tokenManager.ts","../src/apiInterceptor.ts","../src/AuthProvider.tsx","../src/hooks/useAuth.ts","../src/hooks/useAuthClient.ts"],"names":["isRefreshing","config","createContext","useState","useEffect","useCallback","useMemo","useContext","requestQueue","processQueue"],"mappings":";;;;;;;;;;;;;AAEA,IAAM,sBAAA,GAAyB,UAAA;AAC/B,IAAM,gBAAA,GAAmB,cAAA;AACzB,IAAM,iBAAA,GAAoB,eAAA;AAG1B,IAAM,qBAAA,GAAwB,GAAA;AAE9B,IAAI,MAAA,GAA4B,IAAA;AAChC,IAAI,YAAA,GAAe,KAAA;AACnB,IAAI,cAAA,GAAmD,IAAA;AAKhD,SAAS,iBAAiB,UAAA,EAA8B;AAC7D,EAAA,MAAA,GAAS,UAAA;AACX;AAKA,SAAS,UAAA,GAAsB;AAC7B,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAEjC,IAAA,OAAO;AAAA,MACL,SAAS,MAAM,IAAA;AAAA,MACf,SAAS,MAAM;AAAA,MAAC,CAAA;AAAA,MAChB,YAAY,MAAM;AAAA,MAAC,CAAA;AAAA,MACnB,OAAO,MAAM;AAAA,MAAC,CAAA;AAAA,MACd,KAAK,MAAM,IAAA;AAAA,MACX,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AACA,EAAA,OAAO,MAAA,EAAQ,oBAAoB,cAAA,GAAiB,YAAA;AACtD;AAKA,SAAS,OAAO,GAAA,EAAqB;AACnC,EAAA,MAAM,MAAA,GAAS,QAAQ,aAAA,IAAiB,sBAAA;AACxC,EAAA,OAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA;AACzB;AAKO,SAAS,UAAU,KAAA,EAAkC;AAC1D,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA;AAC7B,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAE/B,IAAA,MAAM,OAAA,GAAU,MAAM,CAAC,CAAA;AAEvB,IAAA,MAAM,MAAA,GAAS,QAAQ,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC3D,IAAA,MAAM,WAAA,GAAc,kBAAA;AAAA,MAClB,IAAA,CAAK,MAAM,CAAA,CACR,KAAA,CAAM,EAAE,CAAA,CACR,GAAA,CAAI,CAAC,CAAA,KAAM,GAAA,GAAA,CAAO,IAAA,GAAO,EAAE,UAAA,CAAW,CAAC,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,EAAG,MAAM,CAAA,CAAE,CAAC,CAAA,CAChE,IAAA,CAAK,EAAE;AAAA,KACZ;AAEA,IAAA,OAAO,IAAA,CAAK,MAAM,WAAW,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAKO,SAAS,cAAA,GAAgC;AAC9C,EAAA,OAAO,UAAA,EAAW,CAAE,OAAA,CAAQ,MAAA,CAAO,gBAAgB,CAAC,CAAA;AACtD;AAKO,SAAS,eAAA,GAAiC;AAC/C,EAAA,OAAO,UAAA,EAAW,CAAE,OAAA,CAAQ,MAAA,CAAO,iBAAiB,CAAC,CAAA;AACvD;AAKO,SAAS,SAAA,CAAU,aAAqB,YAAA,EAA4B;AACzE,EAAA,MAAM,UAAU,UAAA,EAAW;AAC3B,EAAA,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,gBAAgB,CAAA,EAAG,WAAW,CAAA;AACrD,EAAA,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,iBAAiB,CAAA,EAAG,YAAY,CAAA;AACzD;AAKO,SAAS,WAAA,GAAoB;AAClC,EAAA,MAAM,UAAU,UAAA,EAAW;AAC3B,EAAA,OAAA,CAAQ,UAAA,CAAW,MAAA,CAAO,gBAAgB,CAAC,CAAA;AAC3C,EAAA,OAAA,CAAQ,UAAA,CAAW,MAAA,CAAO,iBAAiB,CAAC,CAAA;AAC9C;AAKO,SAAS,eAAe,KAAA,EAAgC;AAC7D,EAAA,MAAM,WAAA,GAAc,SAAS,cAAA,EAAe;AAC5C,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AAEzB,EAAA,MAAM,OAAA,GAAU,UAAU,WAAW,CAAA;AACrC,EAAA,IAAI,CAAC,OAAA,IAAW,CAAC,OAAA,CAAQ,KAAK,OAAO,IAAA;AAGrC,EAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,EAAA,OAAO,OAAA,CAAQ,OAAO,GAAA,GAAM,qBAAA;AAC9B;AAKO,SAAS,aAAA,GAAyB;AACvC,EAAA,MAAM,QAAQ,cAAA,EAAe;AAC7B,EAAA,OAAO,KAAA,KAAU,IAAA,IAAQ,CAAC,cAAA,CAAe,KAAK,CAAA;AAChD;AAKO,SAAS,gBAAA,GAAsC;AACpD,EAAA,MAAM,QAAQ,cAAA,EAAe;AAC7B,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,OAAO,UAAU,KAAK,CAAA;AACxB;AAMA,eAAsB,aAAA,GAA2C;AAC/D,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,MAAM,4DAA4D,CAAA;AAAA,EAC9E;AAEA,EAAA,MAAM,eAAe,eAAA,EAAgB;AACrC,EAAA,IAAI,CAAC,YAAA,EAAc;AACjB,IAAA,WAAA,EAAY;AACZ,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,gBAAgB,cAAA,EAAgB;AAClC,IAAA,OAAO,cAAA;AAAA,EACT;AAEA,EAAA,YAAA,GAAe,IAAA;AACf,EAAA,cAAA,GAAiB,eAAe,YAAY,CAAA;AAE5C,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,cAAA;AACrB,IAAA,OAAO,MAAA;AAAA,EACT,CAAA,SAAE;AACA,IAAA,YAAA,GAAe,KAAA;AACf,IAAA,cAAA,GAAiB,IAAA;AAAA,EACnB;AACF;AAKA,eAAe,eAAe,YAAA,EAAiD;AAC7E,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AAEpB,EAAA,IAAI;AACF,IAAA,MAAM,WAAW,MAAM,KAAA,CAAM,CAAA,EAAG,MAAA,CAAO,UAAU,CAAA,iBAAA,CAAA,EAAqB;AAAA,MACpE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,cAAc;AAAA,KACtC,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,WAAA,EAAY;AACZ,MAAA,MAAA,CAAO,WAAA,GAAc,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AACtD,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,MAAM,MAAA,GAAoB;AAAA,MACxB,WAAA,EAAa,IAAA,CAAK,WAAA,IAAe,IAAA,CAAK,YAAA;AAAA,MACtC,YAAA,EAAc,IAAA,CAAK,YAAA,IAAgB,IAAA,CAAK,aAAA;AAAA,MACxC,SAAA,EAAW,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,UAAA;AAAA,MAClC,SAAA,EAAW,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,UAAA,IAAc;AAAA,KAClD;AAEA,IAAA,SAAA,CAAU,MAAA,CAAO,WAAA,EAAa,MAAA,CAAO,YAAY,CAAA;AACjD,IAAA,MAAA,CAAO,iBAAiB,MAAM,CAAA;AAE9B,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,WAAA,EAAY;AACZ,IAAA,MAAA,CAAO,cAAc,KAAA,YAAiB,KAAA,GAAQ,QAAQ,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AACvF,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAKA,eAAsB,mBAAA,GAA8C;AAClE,EAAA,MAAM,QAAQ,cAAA,EAAe;AAE7B,EAAA,IAAI,KAAA,IAAS,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AACnC,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,SAAA,GAAY,MAAM,aAAA,EAAc;AACtC,EAAA,OAAO,WAAW,WAAA,IAAe,IAAA;AACnC;;;ACjNA,IAAIA,aAAAA,GAAe,KAAA;AACnB,IAAI,eAAgC,EAAC;AAKrC,SAAS,YAAA,CAAa,KAAA,EAAsB,KAAA,GAAsB,IAAA,EAAY;AAC5E,EAAA,YAAA,CAAa,OAAA,CAAQ,CAAC,OAAA,KAAY;AAChC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,IACtB,CAAA,MAAO;AACL,MAAA,OAAA,CAAQ,QAAQ,KAAK,CAAA;AAAA,IACvB;AAAA,EACF,CAAC,CAAA;AACD,EAAA,YAAA,GAAe,EAAC;AAClB;AAKO,SAAS,gBAAA,CACd,eACAC,OAAAA,EACe;AAEf,EAAA,aAAA,CAAc,aAAa,OAAA,CAAQ,GAAA;AAAA,IACjC,OAAO,aAAA,KAAmF;AAExF,MAAA,IAAI,aAAA,CAAc,GAAA,EAAK,QAAA,CAAS,mBAAmB,CAAA,EAAG;AACpD,QAAA,OAAO,aAAA;AAAA,MACT;AAEA,MAAA,MAAM,QAAQ,cAAA,EAAe;AAC7B,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,aAAA,CAAc,OAAA,GAAU,aAAA,CAAc,OAAA,IAAW,EAAC;AAClD,QAAA,aAAA,CAAc,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AAAA,MACvD;AACA,MAAA,OAAO,aAAA;AAAA,IACT,CAAA;AAAA,IACA,CAAC,KAAA,KAAmB,OAAA,CAAQ,MAAA,CAAO,KAAK;AAAA,GAC1C;AAGA,EAAA,aAAA,CAAc,aAAa,QAAA,CAAS,GAAA;AAAA,IAClC,CAAC,QAAA,KAA4B,QAAA;AAAA,IAC7B,OAAO,KAAA,KAA8C;AACnD,MAAA,MAAM,kBAAkB,KAAA,CAAM,MAAA;AAK9B,MAAA,IAAI,KAAA,CAAM,QAAA,EAAU,MAAA,KAAW,GAAA,EAAK;AAClC,QAAA,OAAO,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,MAC7B;AAGA,MAAA,IAAI,eAAA,CAAgB,MAAA,IAAU,CAAC,eAAA,EAAiB;AAC9C,QAAA,WAAA,EAAY;AACZ,QAAAA,OAAAA,CAAO,WAAA,GAAc,IAAI,KAAA,CAAM,uBAAuB,CAAC,CAAA;AACvD,QAAA,OAAO,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,MAC7B;AAGA,MAAA,IAAI,eAAA,CAAgB,GAAA,EAAK,QAAA,CAAS,mBAAmB,CAAA,EAAG;AACtD,QAAA,WAAA,EAAY;AACZ,QAAAA,OAAAA,CAAO,WAAA,GAAc,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AACtD,QAAA,OAAO,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,MAC7B;AAGA,MAAA,IAAID,aAAAA,EAAc;AAChB,QAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,UAAA,YAAA,CAAa,IAAA,CAAK;AAAA,YAChB,OAAA,EAAS,CAAC,KAAA,KAAU;AAClB,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,eAAA,CAAgB,OAAA,GAAU,eAAA,CAAgB,OAAA,IAAW,EAAC;AACtD,gBAAA,eAAA,CAAgB,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AACvD,gBAAA,OAAA,CAAQ,aAAA,CAAc,eAAe,CAAC,CAAA;AAAA,cACxC,CAAA,MAAO;AACL,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAAA,cAC1C;AAAA,YACF,CAAA;AAAA,YACA;AAAA,WACD,CAAA;AAAA,QACH,CAAC,CAAA;AAAA,MACH;AAEA,MAAA,eAAA,CAAgB,MAAA,GAAS,IAAA;AACzB,MAAAA,aAAAA,GAAe,IAAA;AAEf,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAQ,MAAM,mBAAA,EAAoB;AAExC,QAAA,IAAI,CAAC,KAAA,EAAO;AACV,UAAA,YAAA,CAAa,IAAA,EAAM,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AACpD,UAAA,WAAA,EAAY;AACZ,UAAAC,OAAAA,CAAO,WAAA,GAAc,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AACtD,UAAA,OAAO,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,QAC7B;AAEA,QAAA,YAAA,CAAa,KAAK,CAAA;AAElB,QAAA,eAAA,CAAgB,OAAA,GAAU,eAAA,CAAgB,OAAA,IAAW,EAAC;AACtD,QAAA,eAAA,CAAgB,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AAEvD,QAAA,OAAO,cAAc,eAAe,CAAA;AAAA,MACtC,SAAS,YAAA,EAAc;AACrB,QAAA,YAAA,CAAa,MAAM,YAAA,YAAwB,KAAA,GAAQ,eAAe,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AACnG,QAAA,WAAA,EAAY;AACZ,QAAAA,OAAAA,CAAO,cAAc,YAAA,YAAwB,KAAA,GAAQ,eAAe,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AACrG,QAAA,OAAO,OAAA,CAAQ,OAAO,YAAY,CAAA;AAAA,MACpC,CAAA,SAAE;AACA,QAAAD,aAAAA,GAAe,KAAA;AAAA,MACjB;AAAA,IACF;AAAA,GACF;AAEA,EAAA,OAAO,aAAA;AACT;AAKO,SAAS,gBAAgBC,OAAAA,EAAmC;AAGjE,EAAA,MAAM,KAAA,GAAQ,UAAQ,OAAO,CAAA;AAE7B,EAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO;AAAA,IAC5B,SAASA,OAAAA,CAAO,UAAA;AAAA,IAChB,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB;AAAA;AAClB,GACD,CAAA;AAED,EAAA,OAAO,gBAAA,CAAiB,UAAUA,OAAM,CAAA;AAC1C;ACpIO,IAAM,WAAA,GAAcC,oBAA4C,MAAS;AAKhF,SAAS,mBAAmB,KAAA,EAA4B;AACtD,EAAA,MAAM,OAAA,GAAU,UAAU,KAAK,CAAA;AAC/B,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,EAAA,OAAO;AAAA,IACL,IAAI,OAAA,CAAQ,GAAA;AAAA,IACZ,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,WAAW,OAAA,CAAQ,UAAA;AAAA,IACnB,UAAU,OAAA,CAAQ,WAAA;AAAA,IAClB,aAAa,OAAA,CAAQ,IAAA;AAAA,IACrB,WAAW,OAAA,CAAQ,OAAA;AAAA,IACnB,aAAA,EAAe,QAAQ,cAAA,IAAkB,KAAA;AAAA,IACzC,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,aAAa,OAAA,CAAQ;AAAA,GACvB;AACF;AAKA,SAAS,YAAA,CACP,UAAA,EACA,QAAA,EACA,WAAA,EACA,MAAA,GAAmB,CAAC,QAAA,EAAU,OAAA,EAAS,SAAS,CAAA,EAChD,YAAA,EACQ;AACR,EAAA,MAAM,gBAAA,GAAmB,WAAA,IAAe,CAAA,EAAG,MAAA,CAAO,SAAS,MAAM,CAAA,SAAA,CAAA;AAGjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,cAAA,CAAe,OAAA,CAAQ,0BAA0B,YAAY,CAAA;AAAA,EAC/D;AAEA,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,IACjC,SAAA,EAAW,QAAA;AAAA,IACX,YAAA,EAAc,gBAAA;AAAA,IACd,aAAA,EAAe,OAAA;AAAA,IACf,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,GAAG;AAAA,GACvB,CAAA;AAED,EAAA,OAAO,CAAA,EAAG,UAAU,CAAA,iBAAA,EAAoB,MAAA,CAAO,UAAU,CAAA,CAAA;AAC3D;AAKA,SAAS,mBAAA,GAAwC;AAC/C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAE1C,EAAA,MAAM,IAAA,GAAO,OAAO,QAAA,CAAS,IAAA;AAC7B,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAGlB,EAAA,MAAM,SAAS,IAAI,eAAA,CAAgB,IAAA,CAAK,SAAA,CAAU,CAAC,CAAC,CAAA;AAEpD,EAAA,MAAM,cAAc,MAAA,CAAO,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA,CAAO,IAAI,OAAO,CAAA;AACpE,EAAA,MAAM,YAAA,GAAe,MAAA,CAAO,GAAA,CAAI,eAAe,CAAA;AAE/C,EAAA,IAAI,eAAe,YAAA,EAAc;AAC/B,IAAA,OAAO;AAAA,MACL,WAAA;AAAA,MACA,YAAA;AAAA,MACA,SAAA,EAAW,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA,GAAI,QAAA,CAAS,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA,EAAI,EAAE,CAAA,GAAI,MAAA;AAAA,MAChF,SAAA,EAAW,MAAA,CAAO,GAAA,CAAI,YAAY,CAAA,IAAK;AAAA,KACzC;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT;AAKO,SAAS,aAAa,KAAA,EAA8C;AACzE,EAAA,MAAM,EAAE,QAAA,EAAU,cAAA,EAAgB,aAAa,QAAA,EAAU,GAAGD,SAAO,GAAI,KAAA;AAEvE,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAIE,cAAA,CAAoB;AAAA,IAC5C,IAAA,EAAM,IAAA;AAAA,IACN,eAAA,EAAiB,KAAA;AAAA,IACjB,SAAA,EAAW,IAAA;AAAA,IACX,KAAA,EAAO;AAAA,GACR,CAAA;AAGD,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,MAAM,UAAA,GAAyB;AAAA,MAC7B,GAAGH,OAAAA;AAAA,MACH,cAAA;AAAA,MACA,WAAA,EAAa,CAAC,KAAA,KAAiB;AAC7B,QAAA,QAAA,CAAS,CAAC,UAAqB,EAAE,GAAG,MAAM,KAAA,EAAO,KAAA,CAAM,SAAQ,CAAE,CAAA;AACjE,QAAA,WAAA,GAAc,KAAK,CAAA;AAAA,MACrB,CAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,gBAAA,CAAiB,UAAU,CAAA;AAAA,EAC7B,CAAA,EAAG,CAACA,OAAAA,CAAO,UAAA,EAAYA,OAAAA,CAAO,QAAA,EAAUA,OAAAA,CAAO,UAAA,EAAY,cAAA,EAAgB,WAAA,EAAa,QAAQ,CAAC,CAAA;AAGjG,EAAAG,eAAA,CAAU,MAAM;AACd,IAAA,MAAM,WAAW,YAAY;AAC3B,MAAA,IAAI;AAEF,QAAA,MAAM,aAAa,mBAAA,EAAoB;AACvC,QAAA,IAAI,UAAA,EAAY;AACd,UAAA,SAAA,CAAU,UAAA,CAAW,WAAA,EAAa,UAAA,CAAW,YAAY,CAAA;AAGzD,UAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,IAAA,EAAM,EAAA,EAAI,OAAO,QAAA,CAAS,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AAGvF,UAAA,MAAM,YAAA,GAAe,cAAA,CAAe,OAAA,CAAQ,wBAAwB,CAAA;AACpE,UAAA,IAAI,YAAA,EAAc;AAChB,YAAA,cAAA,CAAe,WAAW,wBAAwB,CAAA;AAClD,YAAA,MAAA,CAAO,OAAA,CAAQ,YAAA,CAAa,IAAA,EAAM,EAAA,EAAI,YAAY,CAAA;AAAA,UACpD;AAEA,UAAA,cAAA,GAAiB,UAAU,CAAA;AAAA,QAC7B;AAGA,QAAA,MAAM,QAAQ,cAAA,EAAe;AAC7B,QAAA,IAAI,KAAA,IAAS,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AACnC,UAAA,MAAM,IAAA,GAAO,mBAAmB,KAAK,CAAA;AACrC,UAAA,QAAA,CAAS;AAAA,YACP,IAAA;AAAA,YACA,eAAA,EAAiB,IAAA;AAAA,YACjB,SAAA,EAAW,KAAA;AAAA,YACX,KAAA,EAAO;AAAA,WACR,CAAA;AACD,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,MAAM,QAAA,GAAW,MAAM,mBAAA,EAAoB;AAC3C,UAAA,IAAI,QAAA,EAAU;AACZ,YAAA,MAAM,IAAA,GAAO,mBAAmB,QAAQ,CAAA;AACxC,YAAA,QAAA,CAAS;AAAA,cACP,IAAA;AAAA,cACA,eAAA,EAAiB,IAAA;AAAA,cACjB,SAAA,EAAW,KAAA;AAAA,cACX,KAAA,EAAO;AAAA,aACR,CAAA;AACD,YAAA;AAAA,UACF;AAAA,QACF;AAGA,QAAA,QAAA,CAAS;AAAA,UACP,IAAA,EAAM,IAAA;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH,SAAS,KAAA,EAAO;AACd,QAAA,QAAA,CAAS;AAAA,UACP,IAAA,EAAM,IAAA;AAAA,UACN,eAAA,EAAiB,KAAA;AAAA,UACjB,SAAA,EAAW,KAAA;AAAA,UACX,KAAA,EAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,SACjD,CAAA;AAAA,MACH;AAAA,IACF,CAAA;AAEA,IAAA,QAAA,EAAS;AAAA,EACX,CAAA,EAAG,CAAC,cAAc,CAAC,CAAA;AAGnB,EAAA,MAAM,KAAA,GAAQC,iBAAA,CAAY,CAAC,YAAA,KAA0B;AACnD,IAAA,MAAM,OAAA,GAAU,YAAA;AAAA,MACdJ,OAAAA,CAAO,UAAA;AAAA,MACPA,OAAAA,CAAO,QAAA;AAAA,MACPA,OAAAA,CAAO,WAAA;AAAA,MACPA,OAAAA,CAAO,MAAA;AAAA,MACP,YAAA,IAAgB,OAAO,QAAA,CAAS;AAAA,KAClC;AACA,IAAA,MAAA,CAAO,SAAS,IAAA,GAAO,OAAA;AAAA,EACzB,CAAA,EAAG,CAACA,OAAAA,CAAO,UAAA,EAAYA,OAAAA,CAAO,UAAUA,OAAAA,CAAO,WAAA,EAAaA,OAAAA,CAAO,MAAM,CAAC,CAAA;AAG1E,EAAA,MAAM,MAAA,GAASI,kBAAY,YAAY;AACrC,IAAA,WAAA,EAAY;AACZ,IAAA,QAAA,CAAS;AAAA,MACP,IAAA,EAAM,IAAA;AAAA,MACN,eAAA,EAAiB,KAAA;AAAA,MACjB,SAAA,EAAW,KAAA;AAAA,MACX,KAAA,EAAO;AAAA,KACR,CAAA;AACD,IAAA,QAAA,IAAW;AAAA,EACb,CAAA,EAAG,CAAC,QAAQ,CAAC,CAAA;AAGb,EAAA,MAAM,WAAA,GAAcA,kBAAY,YAAY;AAC1C,IAAA,MAAM,KAAA,GAAQ,MAAM,mBAAA,EAAoB;AACxC,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAM,IAAA,GAAO,mBAAmB,KAAK,CAAA;AACrC,MAAA,QAAA,CAAS,CAAC,IAAA,MAAqB;AAAA,QAC7B,GAAG,IAAA;AAAA,QACH,IAAA;AAAA,QACA,eAAA,EAAiB,IAAA;AAAA,QACjB,KAAA,EAAO;AAAA,OACT,CAAE,CAAA;AAAA,IACJ,CAAA,MAAO;AACL,MAAA,QAAA,CAAS;AAAA,QACP,IAAA,EAAM,IAAA;AAAA,QACN,eAAA,EAAiB,KAAA;AAAA,QACjB,SAAA,EAAW,KAAA;AAAA,QACX,KAAA,EAAO;AAAA,OACR,CAAA;AAAA,IACH;AAAA,EACF,CAAA,EAAG,EAAE,CAAA;AAGL,EAAA,MAAM,YAAA,GAAeC,aAAA;AAAA,IACnB,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,KAAA;AAAA,MACA,MAAA;AAAA,MACA;AAAA,KACF,CAAA;AAAA,IACA,CAAC,KAAA,EAAO,KAAA,EAAO,MAAA,EAAQ,WAAW;AAAA,GACpC;AAEA,EAAA,sCACG,WAAA,CAAY,QAAA,EAAZ,EAAqB,KAAA,EAAO,cAC1B,QAAA,EACH,CAAA;AAEJ;ACzNO,SAAS,OAAA,GAA4B;AAC1C,EAAA,MAAM,OAAA,GAAUC,iBAAW,WAAW,CAAA;AAEtC,EAAA,IAAI,YAAY,MAAA,EAAW;AACzB,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EAC/D;AAEA,EAAA,OAAO,OAAA;AACT;AAOO,SAAS,kBAAA,GAA8B;AAC5C,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,OAAA,EAAQ;AACpC,EAAA,OAAO,eAAA;AACT;AAOO,SAAS,OAAA,GAAuB;AACrC,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,OAAA,EAAQ;AACzB,EAAA,OAAO,IAAA;AACT;ACnBO,SAAS,aAAA,GAA+B;AAC7C,EAAA,MAAM,OAAA,GAAUA,iBAAW,WAAW,CAAA;AAEtC,EAAA,IAAI,YAAY,MAAA,EAAW;AACzB,IAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,MAAA,GAASD,cAAQ,MAAM;AAE3B,IAAA,MAAM,KAAA,GAAQ,UAAQ,OAAO,CAAA;AAE7B,IAAA,MAAM,QAAA,GAA0B,MAAM,MAAA,CAAO;AAAA,MAC3C,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB;AAAA;AAClB,KACD,CAAA;AAED,IAAA,IAAIN,aAAAA,GAAe,KAAA;AACnB,IAAA,IAAIQ,gBAAgC,EAAC;AAErC,IAAA,MAAMC,aAAAA,GAAe,CAAC,KAAA,EAAsB,KAAA,GAAsB,IAAA,KAAe;AAC/E,MAAAD,aAAAA,CAAa,OAAA,CAAQ,CAAC,GAAA,KAAQ;AAC5B,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,GAAA,CAAI,OAAO,KAAK,CAAA;AAAA,QAClB,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,QAAQ,KAAK,CAAA;AAAA,QACnB;AAAA,MACF,CAAC,CAAA;AACD,MAAAA,gBAAe,EAAC;AAAA,IAClB,CAAA;AAGA,IAAA,QAAA,CAAS,aAAa,OAAA,CAAQ,GAAA;AAAA,MAC5B,OAAOP,OAAAA,KAA4E;AACjF,QAAA,IAAIA,OAAAA,CAAO,GAAA,EAAK,QAAA,CAAS,mBAAmB,CAAA,EAAG;AAC7C,UAAA,OAAOA,OAAAA;AAAA,QACT;AACA,QAAA,MAAM,QAAQ,cAAA,EAAe;AAC7B,QAAA,IAAI,KAAA,EAAO;AACT,UAAAA,OAAAA,CAAO,OAAA,GAAUA,OAAAA,CAAO,OAAA,IAAW,EAAC;AACpC,UAAAA,OAAAA,CAAO,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AAAA,QAChD;AACA,QAAA,OAAOA,OAAAA;AAAA,MACT,CAAA;AAAA,MACA,CAAC,KAAA,KAAmB,OAAA,CAAQ,MAAA,CAAO,KAAK;AAAA,KAC1C;AAGA,IAAA,QAAA,CAAS,aAAa,QAAA,CAAS,GAAA;AAAA,MAC7B,CAAC,QAAA,KAA4B,QAAA;AAAA,MAC7B,OAAO,KAAA,KAA8C;AACnD,QAAA,MAAM,kBAAkB,KAAA,CAAM,MAAA;AAI9B,QAAA,IAAI,KAAA,CAAM,QAAA,EAAU,MAAA,KAAW,GAAA,IAAO,gBAAgB,MAAA,EAAQ;AAC5D,UAAA,OAAO,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,QAC7B;AAEA,QAAA,IAAI,eAAA,CAAgB,GAAA,EAAK,QAAA,CAAS,mBAAmB,CAAA,EAAG;AACtD,UAAA,WAAA,EAAY;AACZ,UAAA,OAAO,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,QAC7B;AAEA,QAAA,IAAID,aAAAA,EAAc;AAChB,UAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,YAAAQ,cAAa,IAAA,CAAK;AAAA,cAChB,OAAA,EAAS,CAAC,KAAA,KAAU;AAClB,gBAAA,IAAI,KAAA,EAAO;AACT,kBAAA,eAAA,CAAgB,OAAA,GAAU,eAAA,CAAgB,OAAA,IAAW,EAAC;AACtD,kBAAA,eAAA,CAAgB,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AACvD,kBAAA,OAAA,CAAQ,QAAA,CAAS,eAAe,CAAC,CAAA;AAAA,gBACnC,CAAA,MAAO;AACL,kBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAAA,gBAC1C;AAAA,cACF,CAAA;AAAA,cACA;AAAA,aACD,CAAA;AAAA,UACH,CAAC,CAAA;AAAA,QACH;AAEA,QAAA,eAAA,CAAgB,MAAA,GAAS,IAAA;AACzB,QAAAR,aAAAA,GAAe,IAAA;AAEf,QAAA,IAAI;AACF,UAAA,MAAM,KAAA,GAAQ,MAAM,mBAAA,EAAoB;AACxC,UAAA,IAAI,CAAC,KAAA,EAAO;AACV,YAAAS,aAAAA,CAAa,IAAA,EAAM,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AACpD,YAAA,WAAA,EAAY;AACZ,YAAA,OAAO,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,UAC7B;AAEA,UAAAA,cAAa,KAAK,CAAA;AAClB,UAAA,eAAA,CAAgB,OAAA,GAAU,eAAA,CAAgB,OAAA,IAAW,EAAC;AACtD,UAAA,eAAA,CAAgB,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA;AACvD,UAAA,OAAO,SAAS,eAAe,CAAA;AAAA,QACjC,SAAS,YAAA,EAAc;AACrB,UAAAA,aAAAA,CAAa,MAAM,YAAA,YAAwB,KAAA,GAAQ,eAAe,IAAI,KAAA,CAAM,gBAAgB,CAAC,CAAA;AAC7F,UAAA,WAAA,EAAY;AACZ,UAAA,OAAO,OAAA,CAAQ,OAAO,YAAY,CAAA;AAAA,QACpC,CAAA,SAAE;AACA,UAAAT,aAAAA,GAAe,KAAA;AAAA,QACjB;AAAA,MACF;AAAA,KACF;AAEA,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,OAAO,MAAA;AACT","file":"index.js","sourcesContent":["import type { JwtPayload, TokenPair, AuthConfig } from './types';\n\nconst DEFAULT_STORAGE_PREFIX = 'arowauth';\nconst ACCESS_TOKEN_KEY = 'access_token';\nconst REFRESH_TOKEN_KEY = 'refresh_token';\n\n// Buffer time before expiry to trigger refresh (5 minutes)\nconst EXPIRY_BUFFER_SECONDS = 300;\n\nlet config: AuthConfig | null = null;\nlet isRefreshing = false;\nlet refreshPromise: Promise<TokenPair | null> | null = null;\n\n/**\n * Initialize token manager with configuration\n */\nexport function initTokenManager(authConfig: AuthConfig): void {\n  config = authConfig;\n}\n\n/**\n * Get the storage instance (localStorage or sessionStorage)\n */\nfunction getStorage(): Storage {\n  if (typeof window === 'undefined') {\n    // SSR fallback - return a no-op storage\n    return {\n      getItem: () => null,\n      setItem: () => {},\n      removeItem: () => {},\n      clear: () => {},\n      key: () => null,\n      length: 0,\n    };\n  }\n  return config?.useSessionStorage ? sessionStorage : localStorage;\n}\n\n/**\n * Get storage key with prefix\n */\nfunction getKey(key: string): string {\n  const prefix = config?.storagePrefix || DEFAULT_STORAGE_PREFIX;\n  return `${prefix}_${key}`;\n}\n\n/**\n * Decode a JWT token without verification\n */\nexport function decodeJwt(token: string): JwtPayload | null {\n  try {\n    const parts = token.split('.');\n    if (parts.length !== 3) return null;\n    \n    const payload = parts[1];\n    // Handle URL-safe base64\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');\n    const jsonPayload = decodeURIComponent(\n      atob(base64)\n        .split('')\n        .map((c) => '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2))\n        .join('')\n    );\n    \n    return JSON.parse(jsonPayload) as JwtPayload;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Get the access token from storage\n */\nexport function getAccessToken(): string | null {\n  return getStorage().getItem(getKey(ACCESS_TOKEN_KEY));\n}\n\n/**\n * Get the refresh token from storage\n */\nexport function getRefreshToken(): string | null {\n  return getStorage().getItem(getKey(REFRESH_TOKEN_KEY));\n}\n\n/**\n * Store tokens in storage\n */\nexport function setTokens(accessToken: string, refreshToken: string): void {\n  const storage = getStorage();\n  storage.setItem(getKey(ACCESS_TOKEN_KEY), accessToken);\n  storage.setItem(getKey(REFRESH_TOKEN_KEY), refreshToken);\n}\n\n/**\n * Clear all tokens from storage\n */\nexport function clearTokens(): void {\n  const storage = getStorage();\n  storage.removeItem(getKey(ACCESS_TOKEN_KEY));\n  storage.removeItem(getKey(REFRESH_TOKEN_KEY));\n}\n\n/**\n * Check if the access token is expired or about to expire\n */\nexport function isTokenExpired(token?: string | null): boolean {\n  const accessToken = token ?? getAccessToken();\n  if (!accessToken) return true;\n  \n  const payload = decodeJwt(accessToken);\n  if (!payload || !payload.exp) return true;\n  \n  // Check if token expires within buffer period\n  const now = Math.floor(Date.now() / 1000);\n  return payload.exp <= now + EXPIRY_BUFFER_SECONDS;\n}\n\n/**\n * Check if we have a valid (non-expired) access token\n */\nexport function hasValidToken(): boolean {\n  const token = getAccessToken();\n  return token !== null && !isTokenExpired(token);\n}\n\n/**\n * Get user info from the current access token\n */\nexport function getUserFromToken(): JwtPayload | null {\n  const token = getAccessToken();\n  if (!token) return null;\n  return decodeJwt(token);\n}\n\n/**\n * Refresh tokens using the refresh token\n * Handles concurrent refresh requests by returning the same promise\n */\nexport async function refreshTokens(): Promise<TokenPair | null> {\n  if (!config) {\n    throw new Error('TokenManager not initialized. Call initTokenManager first.');\n  }\n\n  const refreshToken = getRefreshToken();\n  if (!refreshToken) {\n    clearTokens();\n    return null;\n  }\n\n  // If already refreshing, return the existing promise\n  if (isRefreshing && refreshPromise) {\n    return refreshPromise;\n  }\n\n  isRefreshing = true;\n  refreshPromise = performRefresh(refreshToken);\n\n  try {\n    const result = await refreshPromise;\n    return result;\n  } finally {\n    isRefreshing = false;\n    refreshPromise = null;\n  }\n}\n\n/**\n * Perform the actual token refresh request\n */\nasync function performRefresh(refreshToken: string): Promise<TokenPair | null> {\n  if (!config) return null;\n\n  try {\n    const response = await fetch(`${config.ssoBaseUrl}/api/auth/refresh`, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({ refreshToken }),\n    });\n\n    if (!response.ok) {\n      clearTokens();\n      config.onAuthError?.(new Error('Token refresh failed'));\n      return null;\n    }\n\n    const data = await response.json();\n    const tokens: TokenPair = {\n      accessToken: data.accessToken || data.access_token,\n      refreshToken: data.refreshToken || data.refresh_token,\n      expiresIn: data.expiresIn || data.expires_in,\n      tokenType: data.tokenType || data.token_type || 'Bearer',\n    };\n\n    setTokens(tokens.accessToken, tokens.refreshToken);\n    config.onTokenRefresh?.(tokens);\n\n    return tokens;\n  } catch (error) {\n    clearTokens();\n    config.onAuthError?.(error instanceof Error ? error : new Error('Token refresh failed'));\n    return null;\n  }\n}\n\n/**\n * Get a valid access token, refreshing if necessary\n */\nexport async function getValidAccessToken(): Promise<string | null> {\n  const token = getAccessToken();\n  \n  if (token && !isTokenExpired(token)) {\n    return token;\n  }\n\n  const refreshed = await refreshTokens();\n  return refreshed?.accessToken ?? null;\n}\n","import type { AxiosInstance, InternalAxiosRequestConfig, AxiosResponse, AxiosError } from 'axios';\nimport { getAccessToken, getValidAccessToken, clearTokens } from './tokenManager';\nimport type { AuthConfig } from './types';\n\ninterface QueuedRequest {\n  resolve: (token: string | null) => void;\n  reject: (error: Error) => void;\n}\n\nlet isRefreshing = false;\nlet requestQueue: QueuedRequest[] = [];\n\n/**\n * Process queued requests after token refresh\n */\nfunction processQueue(token: string | null, error: Error | null = null): void {\n  requestQueue.forEach((request) => {\n    if (error) {\n      request.reject(error);\n    } else {\n      request.resolve(token);\n    }\n  });\n  requestQueue = [];\n}\n\n/**\n * Create and configure axios instance with auth interceptors\n */\nexport function createAuthClient(\n  axiosInstance: AxiosInstance,\n  config: AuthConfig\n): AxiosInstance {\n  // Request interceptor - attach Bearer token\n  axiosInstance.interceptors.request.use(\n    async (requestConfig: InternalAxiosRequestConfig): Promise<InternalAxiosRequestConfig> => {\n      // Skip auth for refresh endpoint to avoid infinite loop\n      if (requestConfig.url?.includes('/api/auth/refresh')) {\n        return requestConfig;\n      }\n\n      const token = getAccessToken();\n      if (token) {\n        requestConfig.headers = requestConfig.headers || {};\n        requestConfig.headers.Authorization = `Bearer ${token}`;\n      }\n      return requestConfig;\n    },\n    (error: unknown) => Promise.reject(error)\n  );\n\n  // Response interceptor - handle 401 and refresh token\n  axiosInstance.interceptors.response.use(\n    (response: AxiosResponse) => response,\n    async (error: AxiosError): Promise<AxiosResponse> => {\n      const originalRequest = error.config as InternalAxiosRequestConfig & {\n        _retry?: boolean;\n      };\n\n      // Only handle 401 errors\n      if (error.response?.status !== 401) {\n        return Promise.reject(error);\n      }\n\n      // Don't retry if already retried or no config\n      if (originalRequest._retry || !originalRequest) {\n        clearTokens();\n        config.onAuthError?.(new Error('Authentication failed'));\n        return Promise.reject(error);\n      }\n\n      // Don't retry refresh endpoint\n      if (originalRequest.url?.includes('/api/auth/refresh')) {\n        clearTokens();\n        config.onAuthError?.(new Error('Token refresh failed'));\n        return Promise.reject(error);\n      }\n\n      // If already refreshing, queue this request\n      if (isRefreshing) {\n        return new Promise((resolve, reject) => {\n          requestQueue.push({\n            resolve: (token) => {\n              if (token) {\n                originalRequest.headers = originalRequest.headers || {};\n                originalRequest.headers.Authorization = `Bearer ${token}`;\n                resolve(axiosInstance(originalRequest));\n              } else {\n                reject(new Error('Token refresh failed'));\n              }\n            },\n            reject,\n          });\n        });\n      }\n\n      originalRequest._retry = true;\n      isRefreshing = true;\n\n      try {\n        const token = await getValidAccessToken();\n        \n        if (!token) {\n          processQueue(null, new Error('Token refresh failed'));\n          clearTokens();\n          config.onAuthError?.(new Error('Token refresh failed'));\n          return Promise.reject(error);\n        }\n\n        processQueue(token);\n        \n        originalRequest.headers = originalRequest.headers || {};\n        originalRequest.headers.Authorization = `Bearer ${token}`;\n        \n        return axiosInstance(originalRequest);\n      } catch (refreshError) {\n        processQueue(null, refreshError instanceof Error ? refreshError : new Error('Token refresh failed'));\n        clearTokens();\n        config.onAuthError?.(refreshError instanceof Error ? refreshError : new Error('Token refresh failed'));\n        return Promise.reject(refreshError);\n      } finally {\n        isRefreshing = false;\n      }\n    }\n  );\n\n  return axiosInstance;\n}\n\n/**\n * Create a new axios instance with auth interceptors\n */\nexport function createApiClient(config: AuthConfig): AxiosInstance {\n  // Dynamic import to avoid bundling axios if not used\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const axios = require('axios');\n  \n  const instance = axios.create({\n    baseURL: config.apiBaseUrl,\n    headers: {\n      'Content-Type': 'application/json',\n    },\n  });\n\n  return createAuthClient(instance, config);\n}\n","import React, { createContext, useEffect, useState, useCallback, useMemo } from 'react';\nimport type { User, AuthState, AuthContextValue, AuthProviderProps, TokenPair, AuthConfig } from './types';\nimport {\n  initTokenManager,\n  getAccessToken,\n  setTokens,\n  clearTokens,\n  isTokenExpired,\n  decodeJwt,\n  getValidAccessToken,\n} from './tokenManager';\n\n// Create context with undefined default\nexport const AuthContext = createContext<AuthContextValue | undefined>(undefined);\n\n/**\n * Parse user from JWT payload\n */\nfunction parseUserFromToken(token: string): User | null {\n  const payload = decodeJwt(token);\n  if (!payload) return null;\n\n  return {\n    id: payload.sub,\n    email: payload.email,\n    firstName: payload.given_name,\n    lastName: payload.family_name,\n    displayName: payload.name,\n    avatarUrl: payload.picture,\n    emailVerified: payload.email_verified ?? false,\n    roles: payload.roles,\n    permissions: payload.permissions,\n  };\n}\n\n/**\n * Build the SSO authorization URL\n */\nfunction buildAuthUrl(\n  ssoBaseUrl: string,\n  clientId: string,\n  redirectUri: string | undefined,\n  scopes: string[] = ['openid', 'email', 'profile'],\n  redirectPath?: string\n): string {\n  const finalRedirectUri = redirectUri || `${window.location.origin}/callback`;\n  \n  // Store the original path to redirect back after login\n  if (redirectPath) {\n    sessionStorage.setItem('arowauth_redirect_path', redirectPath);\n  }\n\n  const params = new URLSearchParams({\n    client_id: clientId,\n    redirect_uri: finalRedirectUri,\n    response_type: 'token',\n    scope: scopes.join(' '),\n  });\n\n  return `${ssoBaseUrl}/oauth/authorize?${params.toString()}`;\n}\n\n/**\n * Parse tokens from URL hash fragment (SSO callback)\n */\nfunction parseTokensFromHash(): TokenPair | null {\n  if (typeof window === 'undefined') return null;\n  \n  const hash = window.location.hash;\n  if (!hash) return null;\n\n  // Parse hash fragment: #access_token=xxx&refresh_token=yyy&...\n  const params = new URLSearchParams(hash.substring(1));\n  \n  const accessToken = params.get('access_token') || params.get('token');\n  const refreshToken = params.get('refresh_token');\n\n  if (accessToken && refreshToken) {\n    return {\n      accessToken,\n      refreshToken,\n      expiresIn: params.get('expires_in') ? parseInt(params.get('expires_in')!, 10) : undefined,\n      tokenType: params.get('token_type') || 'Bearer',\n    };\n  }\n\n  return null;\n}\n\n/**\n * AuthProvider component - wraps app with auth context\n */\nexport function AuthProvider(props: AuthProviderProps): React.ReactElement {\n  const { children, onTokenRefresh, onAuthError, onLogout, ...config } = props;\n\n  const [state, setState] = useState<AuthState>({\n    user: null,\n    isAuthenticated: false,\n    isLoading: true,\n    error: null,\n  });\n\n  // Initialize token manager with config\n  useEffect(() => {\n    const fullConfig: AuthConfig = {\n      ...config,\n      onTokenRefresh,\n      onAuthError: (error: Error) => {\n        setState((prev: AuthState) => ({ ...prev, error: error.message }));\n        onAuthError?.(error);\n      },\n      onLogout,\n    };\n    initTokenManager(fullConfig);\n  }, [config.ssoBaseUrl, config.clientId, config.apiBaseUrl, onTokenRefresh, onAuthError, onLogout]);\n\n  // Handle SSO callback and initial auth check\n  useEffect(() => {\n    const initAuth = async () => {\n      try {\n        // Check for tokens in URL hash (SSO callback)\n        const hashTokens = parseTokensFromHash();\n        if (hashTokens) {\n          setTokens(hashTokens.accessToken, hashTokens.refreshToken);\n          \n          // Clean up URL\n          window.history.replaceState(null, '', window.location.pathname + window.location.search);\n          \n          // Redirect to original path if stored\n          const redirectPath = sessionStorage.getItem('arowauth_redirect_path');\n          if (redirectPath) {\n            sessionStorage.removeItem('arowauth_redirect_path');\n            window.history.replaceState(null, '', redirectPath);\n          }\n\n          onTokenRefresh?.(hashTokens);\n        }\n\n        // Check for existing valid token\n        const token = getAccessToken();\n        if (token && !isTokenExpired(token)) {\n          const user = parseUserFromToken(token);\n          setState({\n            user,\n            isAuthenticated: true,\n            isLoading: false,\n            error: null,\n          });\n          return;\n        }\n\n        // Try to refresh if we have a token but it's expired\n        if (token) {\n          const newToken = await getValidAccessToken();\n          if (newToken) {\n            const user = parseUserFromToken(newToken);\n            setState({\n              user,\n              isAuthenticated: true,\n              isLoading: false,\n              error: null,\n            });\n            return;\n          }\n        }\n\n        // No valid auth\n        setState({\n          user: null,\n          isAuthenticated: false,\n          isLoading: false,\n          error: null,\n        });\n      } catch (error) {\n        setState({\n          user: null,\n          isAuthenticated: false,\n          isLoading: false,\n          error: error instanceof Error ? error.message : 'Authentication error',\n        });\n      }\n    };\n\n    initAuth();\n  }, [onTokenRefresh]);\n\n  // Login - redirect to SSO\n  const login = useCallback((redirectPath?: string) => {\n    const authUrl = buildAuthUrl(\n      config.ssoBaseUrl,\n      config.clientId,\n      config.redirectUri,\n      config.scopes,\n      redirectPath || window.location.pathname\n    );\n    window.location.href = authUrl;\n  }, [config.ssoBaseUrl, config.clientId, config.redirectUri, config.scopes]);\n\n  // Logout - clear tokens and optionally call SSO logout\n  const logout = useCallback(async () => {\n    clearTokens();\n    setState({\n      user: null,\n      isAuthenticated: false,\n      isLoading: false,\n      error: null,\n    });\n    onLogout?.();\n  }, [onLogout]);\n\n  // Refresh user data from token\n  const refreshUser = useCallback(async () => {\n    const token = await getValidAccessToken();\n    if (token) {\n      const user = parseUserFromToken(token);\n      setState((prev: AuthState) => ({\n        ...prev,\n        user,\n        isAuthenticated: true,\n        error: null,\n      }));\n    } else {\n      setState({\n        user: null,\n        isAuthenticated: false,\n        isLoading: false,\n        error: null,\n      });\n    }\n  }, []);\n\n  // Memoize context value\n  const contextValue = useMemo<AuthContextValue>(\n    () => ({\n      ...state,\n      login,\n      logout,\n      refreshUser,\n    }),\n    [state, login, logout, refreshUser]\n  );\n\n  return (\n    <AuthContext.Provider value={contextValue}>\n      {children}\n    </AuthContext.Provider>\n  );\n}\n","import { useContext } from 'react';\nimport { AuthContext } from '../AuthProvider';\nimport type { AuthContextValue, User } from '../types';\n\n/**\n * Hook to access auth state and actions\n * \n * @returns Auth context value with user, isAuthenticated, login, logout, etc.\n * @throws Error if used outside of AuthProvider\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, isAuthenticated, login, logout, isLoading } = useAuth();\n * \n *   if (isLoading) return <div>Loading...</div>;\n * \n *   if (!isAuthenticated) {\n *     return <button onClick={() => login()}>Login</button>;\n *   }\n * \n *   return (\n *     <div>\n *       <p>Welcome, {user?.displayName || user?.email}!</p>\n *       <button onClick={logout}>Logout</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useAuth(): AuthContextValue {\n  const context = useContext(AuthContext);\n  \n  if (context === undefined) {\n    throw new Error('useAuth must be used within an AuthProvider');\n  }\n  \n  return context;\n}\n\n/**\n * Hook to check if user is authenticated (convenience wrapper)\n * \n * @returns Boolean indicating if user is authenticated\n */\nexport function useIsAuthenticated(): boolean {\n  const { isAuthenticated } = useAuth();\n  return isAuthenticated;\n}\n\n/**\n * Hook to get current user (convenience wrapper)\n * \n * @returns Current user or null\n */\nexport function useUser(): User | null {\n  const { user } = useAuth();\n  return user;\n}\n","import { useMemo, useContext } from 'react';\nimport type { AxiosInstance, InternalAxiosRequestConfig, AxiosResponse, AxiosError } from 'axios';\nimport { AuthContext } from '../AuthProvider';\nimport { getAccessToken, getValidAccessToken, clearTokens } from '../tokenManager';\n\ninterface QueuedRequest {\n  resolve: (token: string | null) => void;\n  reject: (error: Error) => void;\n}\n\n/**\n * Hook to get a configured axios instance with auth interceptors\n * \n * The returned axios instance will:\n * - Automatically attach Bearer token to requests\n * - Handle 401 responses by refreshing tokens and retrying\n * - Queue concurrent requests during token refresh\n * \n * @returns Configured axios instance\n * @throws Error if used outside of AuthProvider\n * \n * @example\n * ```tsx\n * function MyComponent() {\n *   const client = useAuthClient();\n * \n *   const fetchData = async () => {\n *     try {\n *       const response = await client.get('/api/data');\n *       console.log(response.data);\n *     } catch (error) {\n *       console.error('Failed to fetch data', error);\n *     }\n *   };\n * \n *   return <button onClick={fetchData}>Fetch Data</button>;\n * }\n * ```\n */\nexport function useAuthClient(): AxiosInstance {\n  const context = useContext(AuthContext);\n  \n  if (context === undefined) {\n    throw new Error('useAuthClient must be used within an AuthProvider');\n  }\n\n  const client = useMemo(() => {\n    // eslint-disable-next-line @typescript-eslint/no-require-imports\n    const axios = require('axios');\n    \n    const instance: AxiosInstance = axios.create({\n      headers: {\n        'Content-Type': 'application/json',\n      },\n    });\n\n    let isRefreshing = false;\n    let requestQueue: QueuedRequest[] = [];\n\n    const processQueue = (token: string | null, error: Error | null = null): void => {\n      requestQueue.forEach((req) => {\n        if (error) {\n          req.reject(error);\n        } else {\n          req.resolve(token);\n        }\n      });\n      requestQueue = [];\n    };\n\n    // Request interceptor\n    instance.interceptors.request.use(\n      async (config: InternalAxiosRequestConfig): Promise<InternalAxiosRequestConfig> => {\n        if (config.url?.includes('/api/auth/refresh')) {\n          return config;\n        }\n        const token = getAccessToken();\n        if (token) {\n          config.headers = config.headers || {};\n          config.headers.Authorization = `Bearer ${token}`;\n        }\n        return config;\n      },\n      (error: unknown) => Promise.reject(error)\n    );\n\n    // Response interceptor\n    instance.interceptors.response.use(\n      (response: AxiosResponse) => response,\n      async (error: AxiosError): Promise<AxiosResponse> => {\n        const originalRequest = error.config as InternalAxiosRequestConfig & {\n          _retry?: boolean;\n        };\n\n        if (error.response?.status !== 401 || originalRequest._retry) {\n          return Promise.reject(error);\n        }\n\n        if (originalRequest.url?.includes('/api/auth/refresh')) {\n          clearTokens();\n          return Promise.reject(error);\n        }\n\n        if (isRefreshing) {\n          return new Promise((resolve, reject) => {\n            requestQueue.push({\n              resolve: (token) => {\n                if (token) {\n                  originalRequest.headers = originalRequest.headers || {};\n                  originalRequest.headers.Authorization = `Bearer ${token}`;\n                  resolve(instance(originalRequest));\n                } else {\n                  reject(new Error('Token refresh failed'));\n                }\n              },\n              reject,\n            });\n          });\n        }\n\n        originalRequest._retry = true;\n        isRefreshing = true;\n\n        try {\n          const token = await getValidAccessToken();\n          if (!token) {\n            processQueue(null, new Error('Token refresh failed'));\n            clearTokens();\n            return Promise.reject(error);\n          }\n\n          processQueue(token);\n          originalRequest.headers = originalRequest.headers || {};\n          originalRequest.headers.Authorization = `Bearer ${token}`;\n          return instance(originalRequest);\n        } catch (refreshError) {\n          processQueue(null, refreshError instanceof Error ? refreshError : new Error('Refresh failed'));\n          clearTokens();\n          return Promise.reject(refreshError);\n        } finally {\n          isRefreshing = false;\n        }\n      }\n    );\n\n    return instance;\n  }, []);\n\n  return client;\n}\n"]}