@atlasauth/chrome-extension 0.2.2 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @atlasauth/chrome-extension changelog
 
+## 0.3.0
+
+### Changed
+- **`AtlasClient.signOut(options?: SignOutOptions)` now resolves `Promise<SignOutResult>`** (`{ revoked: boolean;
+  activeSessionId?: string }`) instead of `Promise<void>`; existing `await client.signOut()` call sites keep working. The
+  revoke is no longer fire-and-forget: it is sent with the token being dropped, retried once, then re-tried in the
+  background (still authenticated as that token after `chrome.storage` was cleared). `{ strict: true }` rejects with
+  `SignOutError` (`code: 'SIGN_OUT_REVOKE_FAILED'`, `sessionId`, `status`) after the local sign-out. A token without a
+  `sid` claim no longer skips the revoke (`GET /v1/client` finds the session). `activeSessionId` (a server-promoted
+  session) is reported but not adopted: the bearer revoke returns no credential for it.
+- **A signed-out session is never re-adopted by any extension surface.** Its id is recorded (a tombstone, via
+  `SignOutGuard` from `@atlasauth/js`) in `chrome.storage.local` before the revoke, and re-read before every decision, so
+  a popup, options page, content script or service worker that booted before the sign-out neither sends a stored token of
+  that session (it is removed and its revoke re-tried in the background) nor writes back a token its in-flight refresh
+  rotated for it (`syncSessionToken`, `persistingBearerFetch`). The tombstone is dropped once a revoke is confirmed.
+- `AtlasClient.store` is now the guarded store (refuses a signed-out session's token on read and write).
+- `@atlasauth/chrome-extension/react` `<AtlasProvider>`: `signOut` is `@atlasauth/react`'s (`Promise<SignOutResult>`,
+  strict `SignOutError`); revoking the stored token's session now also tombstones it in `chrome.storage.local` and drops
+  the token for every surface, and a stored token of a signed-out session is never sent nor written back.
+
+### Added
+- `ExtensionSignOutGuard` (with `ExtensionSignOutGuardOptions`): the shared-`chrome.storage` sign-out guard —
+  `guard`, `bearerRequest(token)`, `isSignedOut(sid)`, `guardStore(store)`, `remember(sid, token)`, `droppedToken(sid)`.
+- `CreateAtlasClientOptions.tombstoneStore?: TombstoneStore` and `CreateAtlasClientOptions.signOutRetryDelaysMs?: number[]`;
+  `ChromeAtlasProviderProps.tombstoneStore?: TombstoneStore`.
+- `createChromeTombstoneStore(area?)` and `StorageCache.tombstoneStore()`.
+- `persistingBearerFetch(fetchImpl, store, signOutGuard?)` — optional third argument.
+- Re-exports `SignOutError`, `SignOutOptions`, `SignOutResult` and `TombstoneStore` from `@atlasauth/js`.
+
 ## 0.2.2
 - Picks up `@atlasauth/react` 0.6.0 / `@atlasauth/js` 0.7.0: popup sign-in completes when the opener page
   sends `Cross-Origin-Opener-Policy: same-origin`; a tab opened after a failed sign-out stays signed out

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { FapiClient, type ProviderToken } from '@atlasauth/js';
+import { FapiClient, SignOutGuard, type FapiRequest, type ProviderToken, type SignOutOptions, type SignOutResult, type TombstoneStore } from '@atlasauth/js';
 import { type TokenStore } from './storage';
 /**
  * The extension FAPI layer.
@@ -27,6 +27,57 @@ export declare function decodeTokenClaims(jwt: string): SessionTokenClaims | nul
  * while signed out simply carries no `Authorization` header.
  */
 export declare function bearerFetch(fetchImpl: typeof fetch, store: TokenStore): typeof fetch;
+export interface ExtensionSignOutGuardOptions {
+    publishableKey: string;
+    /** The (validated) Frontend API base URL. Tombstones are kept per Frontend API origin. */
+    frontendApi: string;
+    /** Injectable for tests; defaults to the platform `fetch`. */
+    fetchImpl?: typeof fetch;
+    /** Where tombstones live. Defaults to `chrome.storage.local`. */
+    tombstoneStore?: TombstoneStore;
+    /** Delays (ms) between background re-tries of a failed revoke. @default `[15_000, 60_000, 300_000]` */
+    retryDelaysMs?: number[];
+}
+/**
+ * The safer sign-out for an extension, where several surfaces (popup, options
+ * page, content scripts, the service worker) share one token in
+ * `chrome.storage` but each has its own memory.
+ *
+ * Wraps `@atlasauth/js`'s {@link SignOutGuard} with tombstones in
+ * `chrome.storage.local`, and re-reads them before every decision — so a surface
+ * that booted before another one signed out still sees the sign-out: it neither
+ * adopts the signed-out session's token ({@link guardStore} `getToken`) nor
+ * writes back a token a refresh rotated for it (`setToken`). Revokes ride on the
+ * very token being dropped ({@link bearerRequest}), so a background re-try can
+ * still authenticate after the store was cleared.
+ */
+export declare class ExtensionSignOutGuard {
+    readonly guard: SignOutGuard;
+    private readonly baseUrl;
+    private readonly publishableKey;
+    private readonly fetchImpl;
+    private readonly store;
+    /** Tokens dropped at sign-out, by session id, for a revoke re-tried after the store was cleared. */
+    private readonly dropped;
+    constructor(options: ExtensionSignOutGuardOptions);
+    /** A Frontend API request carrying exactly `token` as its bearer (none for null). */
+    bearerRequest(token: string | null): FapiRequest;
+    /**
+     * Whether the extension signed out of `sessionId` — on ANY surface: the
+     * tombstones another surface wrote to the shared store are learned first.
+     */
+    isSignedOut(sessionId: string | null | undefined): Promise<boolean>;
+    /** Remember the token of a session being signed out of, for later re-tries of its revoke. */
+    remember(sessionId: string, token: string): void;
+    /** The token a session was signed out with, if this surface dropped it. */
+    droppedToken(sessionId: string): string | null;
+    /**
+     * Wrap a {@link TokenStore} so it never hands out — nor accepts — a token of
+     * a session the extension signed out of. A refused stored token is removed
+     * and its session revoked again in the background, as itself.
+     */
+    guardStore(store: TokenStore): TokenStore;
+}
 /**
  * A {@link bearerFetch} that ALSO captures a freshly-minted session token out of
  * the response and persists it to the store.
@@ -40,7 +91,13 @@ export declare function bearerFetch(fetchImpl: typeof fetch, store: TokenStore):
  * `/v1/client` responses and guarded by JSON parsing, so a non-JSON or unrelated
  * response is left untouched.
  */
-export declare function persistingBearerFetch(fetchImpl: typeof fetch, store: TokenStore): typeof fetch;
+export declare function persistingBearerFetch(fetchImpl: typeof fetch, store: TokenStore, 
+/**
+ * Make it sign-out safe: a stored token of a signed-out session is never
+ * sent nor written back, and a revoke of the stored token's session
+ * tombstones it and drops the token from `chrome.storage` for every surface.
+ */
+signOutGuard?: ExtensionSignOutGuard): typeof fetch;
 export interface CreateAtlasClientOptions {
     publishableKey: string;
     /** The instance's FAPI origin, e.g. `https://fapi.your-instance.atlasauth.net`. */
@@ -49,6 +106,17 @@ export interface CreateAtlasClientOptions {
     store?: TokenStore;
     /** Injectable for tests; defaults to the platform `fetch`. */
     fetchImpl?: typeof fetch;
+    /**
+     * Where the ids of sessions the extension signed out of are kept, shared by
+     * every surface. Defaults to the {@link StorageCache}'s storage area (else
+     * `chrome.storage.local`).
+     */
+    tombstoneStore?: TombstoneStore;
+    /**
+     * Delays (ms) between background re-tries of a revoke `signOut()` could not
+     * complete. @default `[15_000, 60_000, 300_000]`
+     */
+    signOutRetryDelaysMs?: number[];
 }
 /**
  * The extension client. A thin, React-free handle the background service worker
@@ -58,7 +126,10 @@ export interface CreateAtlasClientOptions {
 export interface AtlasClient {
     /** The bearer-wired `@atlasauth/js` client for any raw FAPI call. */
     readonly fapi: FapiClient;
-    /** The token store this client reads and writes. */
+    /**
+     * The token store this client reads and writes. It never hands out — nor
+     * writes back — a token of a session the extension signed out of.
+     */
     readonly store: TokenStore;
     /** The current session token, or null when signed out. */
     getToken(): Promise<string | null>;
@@ -68,8 +139,17 @@ export interface AtlasClient {
     getProviderToken(provider: string): Promise<ProviderToken | null>;
     /** Refresh the token if it is near expiry (or `force`) and persist it. */
     syncSessionToken(options?: SyncOptions): Promise<string | null>;
-    /** Revoke the session server-side and clear the stored token. */
-    signOut(): Promise<void>;
+    /**
+     * Sign out: remember the session id in `chrome.storage` (so no surface
+     * re-adopts it, and a refresh in flight anywhere cannot write its token
+     * back), revoke it on the Frontend API with the token being dropped (retried
+     * once, then in the background), and clear the stored token. Resolves
+     * `{ revoked }` — `false` when the server could not be reached (signed out
+     * locally regardless); `{ strict: true }` rejects with a `SignOutError`
+     * instead, after the local sign-out. A promoted `activeSessionId` is only
+     * reported: the bearer revoke returns no credential for it.
+     */
+    signOut(options?: SignOutOptions): Promise<SignOutResult>;
 }
 /**
  * Build an {@link AtlasClient}. `background: true` is accepted for parity with
@@ -99,4 +179,4 @@ export interface SyncOptions {
  * can retry on its next tick, and the server rejects a truly-dead token on use.
  */
 export declare function syncSessionToken(client: AtlasClient, options?: SyncOptions): Promise<string | null>;
-export type { ProviderToken };
+export { SignOutError, type ProviderToken, type SignOutOptions, type SignOutResult, type TombstoneStore } from '@atlasauth/js';

package/dist/client.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.SignOutError = exports.ExtensionSignOutGuard = void 0;
 exports.decodeTokenClaims = decodeTokenClaims;
 exports.bearerFetch = bearerFetch;
 exports.persistingBearerFetch = persistingBearerFetch;
@@ -44,6 +45,108 @@ function urlOf(input) {
         return input.toString();
     return input.url;
 }
+/** The session id in a stored token, or null. */
+function sidOf(token) {
+    const sid = token ? decodeTokenClaims(token)?.sid : undefined;
+    return typeof sid === 'string' && sid ? sid : null;
+}
+/**
+ * The safer sign-out for an extension, where several surfaces (popup, options
+ * page, content scripts, the service worker) share one token in
+ * `chrome.storage` but each has its own memory.
+ *
+ * Wraps `@atlasauth/js`'s {@link SignOutGuard} with tombstones in
+ * `chrome.storage.local`, and re-reads them before every decision — so a surface
+ * that booted before another one signed out still sees the sign-out: it neither
+ * adopts the signed-out session's token ({@link guardStore} `getToken`) nor
+ * writes back a token a refresh rotated for it (`setToken`). Revokes ride on the
+ * very token being dropped ({@link bearerRequest}), so a background re-try can
+ * still authenticate after the store was cleared.
+ */
+class ExtensionSignOutGuard {
+    guard;
+    baseUrl;
+    publishableKey;
+    fetchImpl;
+    store;
+    /** Tokens dropped at sign-out, by session id, for a revoke re-tried after the store was cleared. */
+    dropped = new Map();
+    constructor(options) {
+        this.baseUrl = options.frontendApi;
+        this.publishableKey = options.publishableKey;
+        this.fetchImpl = options.fetchImpl ?? ((input, init) => fetch(input, init));
+        this.store = options.tombstoneStore ?? (0, storage_1.createChromeTombstoneStore)();
+        this.guard = new js_1.SignOutGuard({
+            request: this.bearerRequest(null),
+            frontendApi: options.frontendApi,
+            store: this.store,
+            ...(options.retryDelaysMs ? { retryDelaysMs: options.retryDelaysMs } : {}),
+        });
+    }
+    /** A Frontend API request carrying exactly `token` as its bearer (none for null). */
+    bearerRequest(token) {
+        return (path, init) => {
+            const headers = new Headers(init?.headers);
+            headers.set('x-publishable-key', this.publishableKey);
+            if (token)
+                headers.set('authorization', `Bearer ${token}`);
+            return this.fetchImpl(`${this.baseUrl}${path}`, { ...init, headers });
+        };
+    }
+    /**
+     * Whether the extension signed out of `sessionId` — on ANY surface: the
+     * tombstones another surface wrote to the shared store are learned first.
+     */
+    async isSignedOut(sessionId) {
+        if (!sessionId)
+            return false;
+        await this.guard.ready;
+        if (this.guard.isSignedOut(sessionId))
+            return true;
+        const shared = new js_1.SessionTombstones({ frontendApi: this.baseUrl, store: this.store });
+        await shared.ready;
+        this.guard.learn({ signedOut: shared.list() });
+        return this.guard.isSignedOut(sessionId);
+    }
+    /** Remember the token of a session being signed out of, for later re-tries of its revoke. */
+    remember(sessionId, token) {
+        this.dropped.set(sessionId, token);
+    }
+    /** The token a session was signed out with, if this surface dropped it. */
+    droppedToken(sessionId) {
+        return this.dropped.get(sessionId) ?? null;
+    }
+    /**
+     * Wrap a {@link TokenStore} so it never hands out — nor accepts — a token of
+     * a session the extension signed out of. A refused stored token is removed
+     * and its session revoked again in the background, as itself.
+     */
+    guardStore(store) {
+        return {
+            getToken: async () => {
+                const token = await store.getToken();
+                const sid = sidOf(token);
+                if (!token || !sid || !(await this.isSignedOut(sid)))
+                    return token;
+                this.guard.refuse(sid, this.bearerRequest(token));
+                // Only if no surface has stored a newer token meanwhile.
+                if ((await store.getToken().catch(() => null)) === token) {
+                    await store.removeToken().catch(() => undefined);
+                }
+                return null;
+            },
+            setToken: async (token) => {
+                // A refresh that was in flight at sign-out (here or on another surface)
+                // must not write the signed-out session's token back.
+                if (await this.isSignedOut(sidOf(token)))
+                    return;
+                await store.setToken(token);
+            },
+            removeToken: () => store.removeToken(),
+        };
+    }
+}
+exports.ExtensionSignOutGuard = ExtensionSignOutGuard;
 /**
  * A {@link bearerFetch} that ALSO captures a freshly-minted session token out of
  * the response and persists it to the store.
@@ -57,18 +160,64 @@ function urlOf(input) {
  * `/v1/client` responses and guarded by JSON parsing, so a non-JSON or unrelated
  * response is left untouched.
  */
-function persistingBearerFetch(fetchImpl, store) {
+function persistingBearerFetch(fetchImpl, store, 
+/**
+ * Make it sign-out safe: a stored token of a signed-out session is never
+ * sent nor written back, and a revoke of the stored token's session
+ * tombstones it and drops the token from `chrome.storage` for every surface.
+ */
+signOutGuard) {
+    const tokens = signOutGuard ? signOutGuard.guardStore(store) : store;
     return async (input, init) => {
-        const token = await store.getToken();
+        let token = await tokens.getToken();
+        const url = urlOf(input);
+        const method = (init?.method ?? (typeof input === 'object' && 'method' in input ? input.method : 'GET')).toUpperCase();
+        const revoking = signOutGuard && method === 'POST' ? /\/v1\/client\/sessions\/([^/?#]+)\/revoke(?:[?#]|$)/.exec(url) : null;
+        let dropping = null;
+        if (signOutGuard && revoking) {
+            const sid = decodeURIComponent(revoking[1]);
+            if (token && sidOf(token) === sid) {
+                // Signing out of the session this extension is signed in with:
+                // remember it first, so no surface re-adopts it from here on.
+                await signOutGuard.guard.ready;
+                signOutGuard.guard.tombstones.add(sid);
+                signOutGuard.remember(sid, token);
+                dropping = sid;
+            }
+            else if (!token) {
+                // A re-try after the token was dropped: authenticate as that session.
+                token = signOutGuard.droppedToken(sid);
+            }
+        }
         const headers = new Headers(init?.headers);
         if (token)
             headers.set('authorization', `Bearer ${token}`);
-        const response = await fetchImpl(input, { ...init, headers });
-        if (response.ok && /\/v1\/client(\/|\?|$)/.test(urlOf(input))) {
+        const dropped = async (response) => {
+            if (!signOutGuard || !dropping || !token)
+                return;
+            // Signed out locally whatever the server said — but only if no surface
+            // stored a newer token meanwhile.
+            if ((await store.getToken().catch(() => null)) === token)
+                await store.removeToken().catch(() => undefined);
+            if (!response || (!response.ok && response.status !== 404)) {
+                // Keep trying in the background (retried once, then on the guard's delays).
+                void signOutGuard.guard.revoke(dropping, { request: signOutGuard.bearerRequest(token), frontchannel: false });
+            }
+        };
+        let response;
+        try {
+            response = await fetchImpl(input, { ...init, headers });
+        }
+        catch (error) {
+            await dropped(null);
+            throw error;
+        }
+        await dropped(response);
+        if (response.ok && /\/v1\/client(\/|\?|$)/.test(url)) {
             try {
                 const body = (await response.clone().json());
                 if (typeof body.jwt === 'string')
-                    await store.setToken(body.jwt);
+                    await tokens.setToken(body.jwt);
             }
             catch {
                 // Not JSON, or no body (a 204 revoke). Nothing to capture.
@@ -90,8 +239,17 @@ function createAtlasClient(options) {
         component: 'createAtlasClient()',
         allowSameOrigin: false,
     });
-    const store = options.store ?? new storage_1.StorageCache();
+    const rawStore = options.store ?? new storage_1.StorageCache();
     const fetchImpl = options.fetchImpl ?? fetch;
+    const signOutGuard = new ExtensionSignOutGuard({
+        publishableKey: options.publishableKey,
+        frontendApi: baseUrl,
+        fetchImpl,
+        tombstoneStore: options.tombstoneStore ??
+            (rawStore instanceof storage_1.StorageCache ? rawStore.tombstoneStore() : (0, storage_1.createChromeTombstoneStore)()),
+        ...(options.signOutRetryDelaysMs ? { retryDelaysMs: options.signOutRetryDelaysMs } : {}),
+    });
+    const store = signOutGuard.guardStore(rawStore);
     const fapi = new js_1.FapiClient({
         publishableKey: options.publishableKey,
         baseUrl,
@@ -104,15 +262,20 @@ function createAtlasClient(options) {
         setToken: (token) => store.setToken(token),
         getProviderToken: (provider) => getProviderTokenFor(fapi, provider),
         syncSessionToken: (opts) => syncSessionToken(client, opts),
-        signOut: async () => {
-            const current = await store.getToken();
-            const sid = current ? decodeTokenClaims(current)?.sid : undefined;
-            if (sid) {
-                // Best-effort server revoke; the local token is cleared regardless so
-                // the extension never keeps showing a signed-in state after sign-out.
-                await fapi.post(`/v1/client/sessions/${sid}/revoke`).catch(() => undefined);
-            }
-            await store.removeToken();
+        signOut: async (opts = {}) => {
+            const token = await rawStore.getToken().catch(() => null);
+            await signOutGuard.guard.ready;
+            // Tombstones the session (when the token names it) before anything below
+            // yields; with a token but no `sid`, GET /v1/client finds it. The revoke
+            // rides on the token being dropped, so its background re-try still can.
+            const pending = token
+                ? signOutGuard.guard.revoke(sidOf(token), { ...opts, request: signOutGuard.bearerRequest(token) })
+                : null;
+            // The local token is cleared regardless, so no surface keeps showing a
+            // signed-in state after sign-out (the tombstone covers a failed clear).
+            await rawStore.removeToken().catch(() => undefined);
+            const attempt = pending ? await pending : { sessionId: null, outcome: { revoked: true, status: 200 } };
+            return signOutGuard.guard.settle(attempt, opts);
         },
     };
     return client;
@@ -172,4 +335,6 @@ async function getProviderTokenFor(fapi, provider) {
         scopes: response.data.scopes ?? [],
     };
 }
+var js_2 = require("@atlasauth/js");
+Object.defineProperty(exports, "SignOutError", { enumerable: true, get: function () { return js_2.SignOutError; } });
 //# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;AA8BA,8CAUC;AAQD,kCAOC;AAsBD,sDAoBC;AAuCD,8CAqCC;AAsBD,4CA6BC;AAhOD,sCAMuB;AACvB,uCAA0D;AAoB1D;;6EAE6E;AAC7E,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAChC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,SAAuB,EAAE,KAAiB;IACpE,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAS,KAAK,CAAC,KAAwB;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClD,OAAQ,KAAiB,CAAC,GAAG,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,qBAAqB,CACnC,SAAuB,EACvB,KAAiB;IAEjB,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAE9D,IAAI,QAAQ,CAAC,EAAE,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAsB,CAAC;gBAClE,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAkCD;;;;GAIG;AACH,SAAgB,iBAAiB,CAC/B,OAA4D;IAE5D,8EAA8E;IAC9E,wEAAwE;IACxE,8CAA8C;IAC9C,MAAM,OAAO,GAAG,IAAA,uBAAkB,EAAC,OAAO,CAAC,WAAW,EAAE;QACtD,SAAS,EAAE,qBAAqB;QAChC,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,sBAAY,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,eAAU,CAAC;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,OAAO;QACP,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;KACzC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAgB;QAC1B,IAAI;QACJ,KAAK;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;QAChC,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClD,gBAAgB,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC3E,gBAAgB,EAAE,CAAC,IAAkB,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;QACxE,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,IAAI,GAAG,EAAE,CAAC;gBACR,sEAAsE;gBACtE,sEAAsE;gBACtE,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,gBAAgB,CACpC,MAAmB,EACnB,UAAuB,EAAE;IAEzB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAA,eAAU,EAAC,OAAO,CAAC,CAAC;IAEtC,8EAA8E;IAC9E,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAA,mBAAc,EAAC;YAC1B,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE;YAChE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;SAChB,CAAC,CAAC;QACH,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,CAAC;IACxB,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC;IAEzB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CACrC,uBAAuB,GAAG,SAAS,CACpC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG;QAAE,OAAO,OAAO,CAAC;IAExD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAgB,EAChB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAK5B,mCAAmC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE5E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;QAChC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QACvC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI;QAC3C,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;KACnC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAoCA,8CAUC;AAQD,kCAOC;AA0ID,sDA8DC;AA8DD,8CAoDC;AAsBD,4CA6BC;AA1aD,sCAYuB;AACvB,uCAAsF;AAoBtF;;6EAE6E;AAC7E,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAChC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,SAAuB,EAAE,KAAiB;IACpE,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAS,KAAK,CAAC,KAAwB;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClD,OAAQ,KAAiB,CAAC,GAAG,CAAC;AAChC,CAAC;AAED,iDAAiD;AACjD,SAAS,KAAK,CAAC,KAAgC;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAcD;;;;;;;;;;;;GAYG;AACH,MAAa,qBAAqB;IACvB,KAAK,CAAe;IACZ,OAAO,CAAS;IAChB,cAAc,CAAS;IACvB,SAAS,CAAe;IACxB,KAAK,CAAiB;IACvC,oGAAoG;IACnF,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,YAAY,OAAqC;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;QACnC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,cAAc,IAAI,IAAA,oCAA0B,GAAE,CAAC;QACpE,IAAI,CAAC,KAAK,GAAG,IAAI,iBAAY,CAAC;YAC5B,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YACjC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,qFAAqF;IACrF,aAAa,CAAC,KAAoB;QAChC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACpB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACtD,IAAI,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,SAAoC;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,sBAAiB,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACvF,MAAM,MAAM,CAAC,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,6FAA6F;IAC7F,QAAQ,CAAC,SAAiB,EAAE,KAAa;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,2EAA2E;IAC3E,YAAY,CAAC,SAAiB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,KAAiB;QAC1B,OAAO;YACL,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACnB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACnE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClD,yDAAyD;gBACzD,IAAI,CAAC,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;oBACzD,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACnD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,QAAQ,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBAChC,wEAAwE;gBACxE,sDAAsD;gBACtD,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO;gBACjD,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;SACvC,CAAC;IACJ,CAAC;CACF;AAnFD,sDAmFC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,qBAAqB,CACnC,SAAuB,EACvB,KAAiB;AACjB;;;;GAIG;AACH,YAAoC;IAEpC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;QAC5D,IAAI,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvH,MAAM,QAAQ,GAAG,YAAY,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,qDAAqD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5H,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;YAC7C,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAClC,+DAA+D;gBAC/D,8DAA8D;gBAC9D,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC/B,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClC,QAAQ,GAAG,GAAG,CAAC;YACjB,CAAC;iBAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClB,sEAAsE;gBACtE,KAAK,GAAG,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,KAAK,EAAE,QAAyB,EAAE,EAAE;YAClD,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;gBAAE,OAAO;YACjD,uEAAuE;YACvE,kCAAkC;YAClC,IAAI,CAAC,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK;gBAAE,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3G,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC3D,4EAA4E;gBAC5E,KAAK,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YAChH,CAAC;QACH,CAAC,CAAC;QACF,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,IAAI,QAAQ,CAAC,EAAE,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAsB,CAAC;gBAClE,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;oBAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAyDD;;;;GAIG;AACH,SAAgB,iBAAiB,CAC/B,OAA4D;IAE5D,8EAA8E;IAC9E,wEAAwE;IACxE,8CAA8C;IAC9C,MAAM,OAAO,GAAG,IAAA,uBAAkB,EAAC,OAAO,CAAC,WAAW,EAAE;QACtD,SAAS,EAAE,qBAAqB;QAChC,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,sBAAY,EAAE,CAAC;IACrD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,qBAAqB,CAAC;QAC7C,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,WAAW,EAAE,OAAO;QACpB,SAAS;QACT,cAAc,EACZ,OAAO,CAAC,cAAc;YACtB,CAAC,QAAQ,YAAY,sBAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAA,oCAA0B,GAAE,CAAC;QAC/F,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,eAAU,CAAC;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,OAAO;QACP,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;KACzC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAgB;QAC1B,IAAI;QACJ,KAAK;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;QAChC,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClD,gBAAgB,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC3E,gBAAgB,EAAE,CAAC,IAAkB,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;QACxE,OAAO,EAAE,KAAK,EAAE,OAAuB,EAAE,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/B,yEAAyE;YACzE,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,OAAO,GAAG,KAAK;gBACnB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClG,CAAC,CAAC,IAAI,CAAC;YACT,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;YACvG,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,gBAAgB,CACpC,MAAmB,EACnB,UAAuB,EAAE;IAEzB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAA,eAAU,EAAC,OAAO,CAAC,CAAC;IAEtC,8EAA8E;IAC9E,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAA,mBAAc,EAAC;YAC1B,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE;YAChE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;SAChB,CAAC,CAAC;QACH,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,CAAC;IACxB,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC;IAEzB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CACrC,uBAAuB,GAAG,SAAS,CACpC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG;QAAE,OAAO,OAAO,CAAC;IAExD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAgB,EAChB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAK5B,mCAAmC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE5E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;QAChC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QACvC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI;QAC3C,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,oCAA+H;AAAtH,kGAAA,YAAY,OAAA"}

package/dist/react.d.ts

@@ -1,3 +1,4 @@
+import { type TombstoneStore } from '@atlasauth/js';
 import { type AtlasProviderProps } from '@atlasauth/react';
 import { type TokenStore } from './storage';
 /**
@@ -19,6 +20,14 @@ import { type TokenStore } from './storage';
  * `syncSessionToken`, `StorageCache`) from the package root instead and never
  * pulls React in.
  *
+ * Sign-out is `@atlasauth/react`'s (`signOut(options?)` resolving
+ * `SignOutResult`, `{ strict: true }` rejecting with `SignOutError`), made safe
+ * for the surfaces sharing `chrome.storage`: revoking the stored token's session
+ * tombstones it in `chrome.storage.local` and drops the token for every surface,
+ * a stored token of a signed-out session is never sent (so a boot on any surface
+ * stays signed out — its revoke is re-tried in the background) nor written back
+ * by a refresh that was in flight.
+ *
  * The token must already be in the store (seed it with `client.setToken(jwt)`
  * after a hosted sign-in, or let a prior session persist it). This provider does
  * not itself drive the sign-in UI flow.
@@ -28,6 +37,11 @@ export interface ChromeAtlasProviderProps extends Omit<AtlasProviderProps, 'fetc
     store?: TokenStore;
     /** Base `fetch` to wrap (before bearer/persist). Defaults to the platform `fetch`. */
     fetchImpl?: typeof fetch;
+    /**
+     * Where the ids of sessions the extension signed out of are kept, shared by
+     * every surface. Defaults to the {@link StorageCache}'s area (else `chrome.storage.local`).
+     */
+    tombstoneStore?: TombstoneStore;
 }
 export declare function AtlasProvider(props: ChromeAtlasProviderProps): import("react").FunctionComponentElement<AtlasProviderProps>;
 export * from '@atlasauth/react';

package/dist/react.js

@@ -16,12 +16,24 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AtlasProvider = AtlasProvider;
 const react_1 = require("react");
+const js_1 = require("@atlasauth/js");
 const react_2 = require("@atlasauth/react");
 const client_1 = require("./client");
 const storage_1 = require("./storage");
 function AtlasProvider(props) {
-    const { store, fetchImpl, ...rest } = props;
-    const wrappedFetch = (0, react_1.useMemo)(() => (0, client_1.persistingBearerFetch)(fetchImpl ?? fetch, store ?? new storage_1.StorageCache()), [store, fetchImpl]);
+    const { store, fetchImpl, tombstoneStore, ...rest } = props;
+    const tokenStore = (0, react_1.useMemo)(() => store ?? new storage_1.StorageCache(), [store]);
+    const signOutGuard = (0, react_1.useMemo)(() => new client_1.ExtensionSignOutGuard({
+        publishableKey: rest.publishableKey,
+        // Throws the same AtlasConfigError the React provider would.
+        frontendApi: (0, js_1.resolveFrontendApi)(rest.frontendApi, { component: '<AtlasProvider>' }),
+        ...(fetchImpl ? { fetchImpl } : {}),
+        tombstoneStore: tombstoneStore ??
+            (tokenStore instanceof storage_1.StorageCache ? tokenStore.tombstoneStore() : (0, storage_1.createChromeTombstoneStore)()),
+    }), [rest.publishableKey, rest.frontendApi, fetchImpl, tombstoneStore, tokenStore]);
+    // Cancel scheduled background revokes when the provider goes away.
+    (0, react_1.useEffect)(() => () => signOutGuard.guard.dispose(), [signOutGuard]);
+    const wrappedFetch = (0, react_1.useMemo)(() => (0, client_1.persistingBearerFetch)(fetchImpl ?? fetch, tokenStore, signOutGuard), [tokenStore, fetchImpl, signOutGuard]);
     return (0, react_1.createElement)(react_2.AtlasProvider, { ...rest, fetchImpl: wrappedFetch });
 }
 // Re-export the React SDK surface so extension code has one import site for the

package/dist/react.js.map

@@ -1 +1 @@
-{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.tsx"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAmCA,sCASC;AA5CD,iCAA+C;AAC/C,4CAAgG;AAChG,qCAAiD;AACjD,uCAA0D;AAgC1D,SAAgB,aAAa,CAAC,KAA+B;IAC3D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAE5C,MAAM,YAAY,GAAG,IAAA,eAAO,EAC1B,GAAG,EAAE,CAAC,IAAA,8BAAqB,EAAC,SAAS,IAAI,KAAK,EAAE,KAAK,IAAI,IAAI,sBAAY,EAAE,CAAC,EAC5E,CAAC,KAAK,EAAE,SAAS,CAAC,CACnB,CAAC;IAEF,OAAO,IAAA,qBAAa,EAAC,qBAAkB,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,gFAAgF;AAChF,0DAA0D;AAC1D,mDAAiC"}
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.tsx"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAiDA,sCA0BC;AA3ED,iCAA0D;AAC1D,sCAAwE;AACxE,4CAAgG;AAChG,qCAAwE;AACxE,uCAAsF;AA6CtF,SAAgB,aAAa,CAAC,KAA+B;IAC3D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAE5D,MAAM,UAAU,GAAG,IAAA,eAAO,EAAC,GAAG,EAAE,CAAC,KAAK,IAAI,IAAI,sBAAY,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,IAAA,eAAO,EAC1B,GAAG,EAAE,CACH,IAAI,8BAAqB,CAAC;QACxB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,6DAA6D;QAC7D,WAAW,EAAE,IAAA,uBAAkB,EAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;QACnF,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,cAAc,EACZ,cAAc;YACd,CAAC,UAAU,YAAY,sBAAY,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAA,oCAA0B,GAAE,CAAC;KACpG,CAAC,EACJ,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CAC/E,CAAC;IACF,mEAAmE;IACnE,IAAA,iBAAS,EAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEpE,MAAM,YAAY,GAAG,IAAA,eAAO,EAC1B,GAAG,EAAE,CAAC,IAAA,8BAAqB,EAAC,SAAS,IAAI,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,EACzE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CACtC,CAAC;IAEF,OAAO,IAAA,qBAAa,EAAC,qBAAkB,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,gFAAgF;AAChF,0DAA0D;AAC1D,mDAAiC"}

package/dist/storage.d.ts

@@ -20,6 +20,7 @@
  * (the FAPI client, the background sync, the React provider) reads and writes it
  * only through the {@link TokenStore} interface below.
  */
+import type { TombstoneStore } from '@atlasauth/js';
 /**
  * The minimal, structural shape of the two `chrome.storage.local` methods this
  * package uses. Declared here — rather than pulled from `@types/chrome` — so the
@@ -69,7 +70,20 @@ export declare class StorageCache implements TokenStore {
     getToken(): Promise<string | null>;
     setToken(token: string): Promise<void>;
     removeToken(): Promise<void>;
+    /**
+     * A {@link TombstoneStore} over this cache's storage area — where the ids of
+     * sessions the extension signed out of are kept, so no surface re-adopts one.
+     */
+    tombstoneStore(): TombstoneStore;
 }
+/**
+ * A {@link TombstoneStore} over `chrome.storage.local` (or the given area): the
+ * sign-out tombstones `SignOutGuard` keeps (session ids, never tokens), shared by
+ * every extension surface and surviving the service worker being torn down.
+ * `chrome` is resolved on first use; with none, reads and writes reject (the
+ * guard then falls back to memory).
+ */
+export declare function createChromeTombstoneStore(area?: ChromeStorageArea | (() => ChromeStorageArea)): TombstoneStore;
 /**
  * An in-memory `ChromeStorageArea`, for tests and for prototyping outside an
  * extension. It implements the same async contract as the real thing but keeps

package/dist/storage.js

@@ -23,6 +23,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StorageCache = exports.DEFAULT_TOKEN_KEY = void 0;
+exports.createChromeTombstoneStore = createChromeTombstoneStore;
 exports.createMemoryStorageArea = createMemoryStorageArea;
 /** The storage key the token is kept under. Namespaced to avoid collisions. */
 exports.DEFAULT_TOKEN_KEY = '__atlas_session_token';
@@ -69,8 +70,34 @@ class StorageCache {
     async removeToken() {
         await this.storage().remove(this.key);
     }
+    /**
+     * A {@link TombstoneStore} over this cache's storage area — where the ids of
+     * sessions the extension signed out of are kept, so no surface re-adopts one.
+     */
+    tombstoneStore() {
+        return createChromeTombstoneStore(() => this.storage());
+    }
 }
 exports.StorageCache = StorageCache;
+/**
+ * A {@link TombstoneStore} over `chrome.storage.local` (or the given area): the
+ * sign-out tombstones `SignOutGuard` keeps (session ids, never tokens), shared by
+ * every extension surface and surviving the service worker being torn down.
+ * `chrome` is resolved on first use; with none, reads and writes reject (the
+ * guard then falls back to memory).
+ */
+function createChromeTombstoneStore(area) {
+    const resolve = () => typeof area === 'function' ? area() : (area ?? resolveChromeLocal());
+    return {
+        getItem: async (key) => {
+            const value = (await resolve().get(key))[key];
+            return typeof value === 'string' ? value : null;
+        },
+        setItem: async (key, value) => {
+            await resolve().set({ [key]: value });
+        },
+    };
+}
 /**
  * An in-memory `ChromeStorageArea`, for tests and for prototyping outside an
  * extension. It implements the same async contract as the real thing but keeps

package/dist/storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAuGH,0DAwBC;AAlGD,+EAA+E;AAClE,QAAA,iBAAiB,GAAG,uBAAuB,CAAC;AAazD;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,MAAM,OAAO,GACX,UACD,CAAC,MAAM,CAAC;IACT,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,6EAA6E;YAC7E,mEAAmE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAa,YAAY;IACN,GAAG,CAAS;IACrB,IAAI,CAA2B;IAEvC,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,yBAAiB,CAAC;QAC5C,oEAAoE;QACpE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;IACnC,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;CACF;AA5BD,oCA4BC;AAED;;;;;GAKG;AACH,SAAgB,uBAAuB;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEvC,MAAM,IAAI,GAAG,CAAC,IAA8B,EAA2B,EAAE;QACvE,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;YACb,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAkHH,gEAcC;AAQD,0DAwBC;AAjID,+EAA+E;AAClE,QAAA,iBAAiB,GAAG,uBAAuB,CAAC;AAazD;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,MAAM,OAAO,GACX,UACD,CAAC,MAAM,CAAC;IACT,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,6EAA6E;YAC7E,mEAAmE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAa,YAAY;IACN,GAAG,CAAS;IACrB,IAAI,CAA2B;IAEvC,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,yBAAiB,CAAC;QAC5C,oEAAoE;QACpE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;IACnC,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,OAAO,0BAA0B,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF;AApCD,oCAoCC;AAED;;;;;;GAMG;AACH,SAAgB,0BAA0B,CACxC,IAAoD;IAEpD,MAAM,OAAO,GAAG,GAAsB,EAAE,CACtC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC,CAAC;IACvE,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,uBAAuB;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEvC,MAAM,IAAI,GAAG,CAAC,IAA8B,EAA2B,EAAE;QACvE,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;YACb,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/chrome-extension",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -18,8 +18,8 @@
     }
   },
   "dependencies": {
-    "@atlasauth/react": "0.6.0",
-    "@atlasauth/js": "0.7.0"
+    "@atlasauth/react": "0.7.0",
+    "@atlasauth/js": "0.8.0"
   },
   "peerDependencies": {
     "react": ">=18"