@babelpeak/babel-suite-react-sdk 0.1.0

package/dist/broker.d.ts

@@ -0,0 +1,39 @@
+export interface ScopedClaims {
+    sub: string;
+    aud: string | string[];
+    org_id?: string;
+    permissions?: string[];
+    exp: number;
+    iat: number;
+    [key: string]: unknown;
+}
+export interface ScopedToken {
+    token: string;
+    claims: ScopedClaims;
+}
+export declare class ExchangeError extends Error {
+    readonly code: string;
+    constructor(code: string, message?: string);
+}
+export declare function decodeClaims(token: string): ScopedClaims;
+/**
+ * Ottiene e tiene in cache il JWT scoped del servizio via token exchange (RFC 8693).
+ * Il token di sessione ampio resta nella SPA: verso le API del servizio viaggia solo quello scoped.
+ */
+export declare class ScopedTokenBroker {
+    private readonly opts;
+    private cache;
+    private inflight;
+    constructor(opts: {
+        issuer: string;
+        clientId: string;
+        service: string;
+        fetch?: typeof fetch;
+        now?: () => number;
+    });
+    private now;
+    isFresh(t: ScopedToken | undefined): t is ScopedToken;
+    get(sessionToken: string, orgId?: string | null): Promise<ScopedToken>;
+    clear(): void;
+    private exchange;
+}

package/dist/broker.js

@@ -0,0 +1,82 @@
+export class ExchangeError extends Error {
+    code;
+    constructor(code, message) {
+        super(message ?? code);
+        this.code = code;
+    }
+}
+export function decodeClaims(token) {
+    const part = token.split('.')[1];
+    if (!part)
+        throw new Error('JWT non valido');
+    const json = atob(part.replace(/-/g, '+').replace(/_/g, '/'));
+    const bytes = Uint8Array.from(json, (c) => c.charCodeAt(0));
+    return JSON.parse(new TextDecoder().decode(bytes));
+}
+/** Margine prima della scadenza entro cui il token viene riemesso. */
+const REFRESH_MARGIN_SEC = 30;
+/**
+ * Ottiene e tiene in cache il JWT scoped del servizio via token exchange (RFC 8693).
+ * Il token di sessione ampio resta nella SPA: verso le API del servizio viaggia solo quello scoped.
+ */
+export class ScopedTokenBroker {
+    opts;
+    cache = new Map();
+    inflight = new Map();
+    constructor(opts) {
+        this.opts = opts;
+    }
+    now() {
+        return Math.floor((this.opts.now?.() ?? Date.now()) / 1000);
+    }
+    isFresh(t) {
+        return !!t && t.claims.exp - REFRESH_MARGIN_SEC > this.now();
+    }
+    async get(sessionToken, orgId) {
+        const key = `${sessionToken}|${orgId ?? ''}`;
+        const cached = this.cache.get(key);
+        if (this.isFresh(cached))
+            return cached;
+        const pending = this.inflight.get(key);
+        if (pending)
+            return pending;
+        const p = this.exchange(sessionToken, orgId)
+            .then((t) => {
+            this.cache.clear();
+            this.cache.set(key, t);
+            // Anche sotto l'org effettiva: evita un secondo exchange quando la SPA la adotta.
+            if (t.claims.org_id)
+                this.cache.set(`${sessionToken}|${t.claims.org_id}`, t);
+            return t;
+        })
+            .finally(() => this.inflight.delete(key));
+        this.inflight.set(key, p);
+        return p;
+    }
+    clear() {
+        this.cache.clear();
+    }
+    async exchange(sessionToken, orgId) {
+        const body = new URLSearchParams({
+            grant_type: 'urn:ietf:params:oauth:grant-type:token-exchange',
+            client_id: this.opts.clientId,
+            subject_token: sessionToken,
+            subject_token_type: 'urn:ietf:params:oauth:token-type:access_token',
+            audience: this.opts.service,
+        });
+        if (orgId)
+            body.set('org_id', orgId);
+        const doFetch = this.opts.fetch ?? fetch;
+        const res = await doFetch(`${this.opts.issuer.replace(/\/$/, '')}/oauth/token`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            body,
+        });
+        const json = (await res.json());
+        if (!res.ok || !json.access_token) {
+            throw new ExchangeError(json.error ?? `http_${res.status}`, json.error_description);
+        }
+        return { token: json.access_token, claims: decodeClaims(json.access_token) };
+    }
+}
+//# sourceMappingURL=broker.js.map

package/dist/broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.js","sourceRoot":"","sources":["../src/broker.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,aAAc,SAAQ,KAAK;IAEpB;IADlB,YACkB,IAAY,EAC5B,OAAgB;QAEhB,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QAHP,SAAI,GAAJ,IAAI,CAAQ;IAI9B,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAiB,CAAC;AACrE,CAAC;AAED,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAKT;IAJX,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IAE3D,YACmB,IAMhB;QANgB,SAAI,GAAJ,IAAI,CAMpB;IACA,CAAC;IAEI,GAAG;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,CAAC,CAA0B;QAChC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,YAAoB,EAAE,KAAqB;QACnD,MAAM,GAAG,GAAG,GAAG,YAAY,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC;aACzC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACvB,kFAAkF;YAClF,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7E,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,KAAqB;QAChE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,iDAAiD;YAC7D,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAC7B,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,+CAA+C;YACnE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,EAAE;YAC9E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACL,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;IAC/E,CAAC;CACF"}

package/dist/can.d.ts

@@ -0,0 +1,7 @@
+import type { ReactNode } from 'react';
+/** Mostra i figli solo se l'utente ha il permesso (ergonomia di UI, non sicurezza). */
+export declare function Can(props: {
+    permission: string;
+    children: ReactNode;
+    fallback?: ReactNode;
+}): import("react").JSX.Element;

package/dist/can.js

@@ -0,0 +1,8 @@
+import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
+import { useSuite } from './provider.js';
+/** Mostra i figli solo se l'utente ha il permesso (ergonomia di UI, non sicurezza). */
+export function Can(props) {
+    const { can } = useSuite();
+    return _jsx(_Fragment, { children: can(props.permission) ? props.children : (props.fallback ?? null) });
+}
+//# sourceMappingURL=can.js.map

package/dist/can.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can.js","sourceRoot":"","sources":["../src/can.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,uFAAuF;AACvF,MAAM,UAAU,GAAG,CAAC,KAAwE;IAC1F,MAAM,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC3B,OAAO,4BAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAI,CAAC;AAClF,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,21 @@
+declare global {
+    interface Window {
+        /** Configurazione globale opzionale, per app non costruite con Vite. */
+        __BABEL_SUITE__?: {
+            issuer?: string;
+            clientId?: string;
+        };
+    }
+}
+export interface ResolvedSuiteConfig {
+    issuer: string;
+    clientId: string;
+}
+/**
+ * Issuer e client id di Suite: props → window.__BABEL_SUITE__ → VITE_SUITE_ISSUER /
+ * VITE_SUITE_CLIENT_ID. Il client id di default è `<service>-web`.
+ */
+export declare function resolveSuiteConfig(service: string, props: {
+    issuer?: string;
+    clientId?: string;
+}): ResolvedSuiteConfig;

package/dist/config.js

@@ -0,0 +1,24 @@
+function viteEnv() {
+    // `import.meta.env` scritto per esteso: è il testo che Vite sostituisce nella build dell'app.
+    // Fuori da Vite vale undefined.
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore -- tipo fornito da vite/client solo nelle app che lo includono
+    return import.meta.env;
+}
+/**
+ * Issuer e client id di Suite: props → window.__BABEL_SUITE__ → VITE_SUITE_ISSUER /
+ * VITE_SUITE_CLIENT_ID. Il client id di default è `<service>-web`.
+ */
+export function resolveSuiteConfig(service, props) {
+    const global = typeof window !== 'undefined' ? window.__BABEL_SUITE__ : undefined;
+    const env = viteEnv();
+    const issuer = props.issuer ?? global?.issuer ?? env?.VITE_SUITE_ISSUER;
+    if (!issuer) {
+        throw new Error('Issuer di Suite non configurato: passa `issuer` a <SuiteProvider>, imposta VITE_SUITE_ISSUER o window.__BABEL_SUITE__');
+    }
+    return {
+        issuer,
+        clientId: props.clientId ?? global?.clientId ?? env?.VITE_SUITE_CLIENT_ID ?? `${service}-web`,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAYA,SAAS,OAAO;IACd,8FAA8F;IAC9F,gCAAgC;IAChC,6DAA6D;IAC7D,4EAA4E;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,GAA2B,CAAC;AACjD,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,KAA6C;IAE7C,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,MAAM,EAAE,MAAM,IAAI,GAAG,EAAE,iBAAiB,CAAC;IACxE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,uHAAuH,CACxH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,MAAM,EAAE,QAAQ,IAAI,GAAG,EAAE,oBAAoB,IAAI,GAAG,OAAO,MAAM;KAC9F,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { SuiteProvider, SuiteTestProvider, useSuite, type SuiteContextValue, type SuiteOrg, type SuiteProviderProps, type SuiteStatus, type SuiteUser, } from './provider.js';
+export { Can } from './can.js';
+export { ExchangeError, ScopedTokenBroker, decodeClaims, type ScopedClaims, type ScopedToken, } from './broker.js';
+export { resolveSuiteConfig, type ResolvedSuiteConfig } from './config.js';

package/dist/index.js

@@ -0,0 +1,5 @@
+export { SuiteProvider, SuiteTestProvider, useSuite, } from './provider.js';
+export { Can } from './can.js';
+export { ExchangeError, ScopedTokenBroker, decodeClaims, } from './broker.js';
+export { resolveSuiteConfig } from './config.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,QAAQ,GAMT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,YAAY,GAGb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAA4B,MAAM,aAAa,CAAC"}

package/dist/provider.d.ts

@@ -0,0 +1,49 @@
+import { type ReactNode } from 'react';
+export interface SuiteOrg {
+    id: string;
+    name: string;
+    role: string;
+}
+export interface SuiteUser {
+    id: string;
+    email?: string;
+    name?: string;
+}
+export type SuiteStatus = 'loading' | 'anonymous' | 'ready' | 'no-access' | 'error';
+export interface SuiteContextValue {
+    status: SuiteStatus;
+    user: SuiteUser | null;
+    orgs: SuiteOrg[];
+    org: SuiteOrg | null;
+    permissions: string[];
+    /** Solo ergonomia di UI: l'autorizzazione vera resta sulle API. */
+    can: (permission: string) => boolean;
+    /** JWT scoped del servizio (aud = service), da allegare alle chiamate API. */
+    token: string | null;
+    error: string | null;
+    selectOrg: (orgId: string) => void;
+    reloadOrgs: () => Promise<void>;
+    login: (returnTo?: string) => Promise<void>;
+    logout: () => Promise<void>;
+    /** fetch con bearer scoped; su 401 riemette il token e ritenta una volta. */
+    fetch: (input: string, init?: RequestInit) => Promise<Response>;
+}
+export interface SuiteProviderProps {
+    /** Default: window.__BABEL_SUITE__.issuer o VITE_SUITE_ISSUER. */
+    issuer?: string;
+    /** Default: window.__BABEL_SUITE__.clientId, VITE_SUITE_CLIENT_ID o `<service>-web`. */
+    clientId?: string;
+    service: string;
+    redirectUri?: string;
+    postLogoutRedirectUri?: string;
+    scope?: string;
+    children: ReactNode;
+}
+/** Provider OIDC preconfigurato sull'issuer di Suite + token scoped del servizio. */
+export declare function SuiteProvider(props: SuiteProviderProps): import("react").JSX.Element;
+export declare function useSuite(): SuiteContextValue;
+/** Per i test e le storybook: fornisce un contesto Suite statico senza OIDC. */
+export declare function SuiteTestProvider(props: {
+    value: Partial<SuiteContextValue>;
+    children: ReactNode;
+}): import("react").JSX.Element;

package/dist/provider.js

@@ -0,0 +1,226 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState, } from 'react';
+import { WebStorageStateStore } from 'oidc-client-ts';
+import { AuthProvider, useAuth } from 'react-oidc-context';
+import { ExchangeError, ScopedTokenBroker } from './broker.js';
+import { resolveSuiteConfig } from './config.js';
+const SuiteContext = createContext(null);
+const orgStorageKey = (service) => `babel-suite:${service}:org`;
+function readStorage(key) {
+    try {
+        return window.localStorage.getItem(key);
+    }
+    catch {
+        return null;
+    }
+}
+function writeStorage(key, value) {
+    try {
+        if (value === null)
+            window.localStorage.removeItem(key);
+        else
+            window.localStorage.setItem(key, value);
+    }
+    catch {
+        /* storage non disponibile: la scelta dell'org non viene ricordata */
+    }
+}
+/** Provider OIDC preconfigurato sull'issuer di Suite + token scoped del servizio. */
+export function SuiteProvider(props) {
+    const { redirectUri, postLogoutRedirectUri, scope } = props;
+    const { issuer, clientId } = resolveSuiteConfig(props.service, props);
+    const config = useMemo(() => ({
+        authority: issuer,
+        client_id: clientId,
+        redirect_uri: redirectUri ?? `${window.location.origin}/callback`,
+        post_logout_redirect_uri: postLogoutRedirectUri ?? `${window.location.origin}/`,
+        scope: scope ?? 'openid email profile offline_access orgs',
+        response_type: 'code',
+        loadUserInfo: true,
+        automaticSilentRenew: true,
+        // sessionStorage (non localStorage): i token non sopravvivono alla scheda. Una nuova
+        // scheda riparte dalla sessione OIDC di Suite con un redirect senza form di login.
+        userStore: new WebStorageStateStore({ store: window.sessionStorage }),
+        onSigninCallback: (user) => {
+            const returnTo = user?.state?.returnTo ?? '/';
+            window.history.replaceState({}, document.title, returnTo);
+        },
+    }), [issuer, clientId, redirectUri, postLogoutRedirectUri, scope]);
+    return (_jsx(AuthProvider, { ...config, children: _jsx(SuiteSession, { issuer: issuer, clientId: clientId, service: props.service, children: props.children }) }));
+}
+function SuiteSession(props) {
+    const { issuer, clientId, service } = props;
+    const auth = useAuth();
+    const broker = useMemo(() => new ScopedTokenBroker({ issuer, clientId, service }), [issuer, clientId, service]);
+    const [orgId, setOrgId] = useState(() => readStorage(orgStorageKey(service)));
+    const [scoped, setScoped] = useState(null);
+    const [error, setError] = useState(null);
+    const [exchanging, setExchanging] = useState(false);
+    const [orgs, setOrgs] = useState([]);
+    const sessionToken = auth.user?.access_token;
+    const tokenRef = useRef(null);
+    useEffect(() => {
+        setOrgs((auth.user?.profile?.orgs ?? []));
+    }, [auth.user]);
+    const refresh = useCallback(async (force = false) => {
+        if (!sessionToken)
+            return null;
+        if (force)
+            broker.clear();
+        setExchanging(true);
+        try {
+            const t = await broker.get(sessionToken, orgId);
+            tokenRef.current = t;
+            setScoped(t);
+            setError(null);
+            // L'org effettiva è quella del token: allinea la scelta salvata.
+            if (t.claims.org_id && t.claims.org_id !== orgId)
+                setOrgId(t.claims.org_id);
+            return t;
+        }
+        catch (err) {
+            if (err instanceof ExchangeError && err.code === 'access_denied' && orgId) {
+                // Org salvata non più valida: si riparte dalla prima disponibile.
+                writeStorage(orgStorageKey(service), null);
+                setOrgId(null);
+                return null;
+            }
+            tokenRef.current = null;
+            setScoped(null);
+            setError(err instanceof ExchangeError ? err.code : err.message);
+            return null;
+        }
+        finally {
+            setExchanging(false);
+        }
+    }, [broker, sessionToken, orgId, service]);
+    useEffect(() => {
+        if (sessionToken)
+            void refresh();
+        else {
+            tokenRef.current = null;
+            setScoped(null);
+        }
+    }, [sessionToken, refresh]);
+    // Riemissione poco prima della scadenza (TTL breve per design).
+    useEffect(() => {
+        if (!scoped)
+            return;
+        const ms = Math.max((scoped.claims.exp - 30) * 1000 - Date.now(), 5_000);
+        const id = window.setTimeout(() => void refresh(true), ms);
+        return () => window.clearTimeout(id);
+    }, [scoped, refresh]);
+    useEffect(() => {
+        writeStorage(orgStorageKey(service), orgId);
+    }, [orgId, service]);
+    const reloadOrgs = useCallback(async () => {
+        if (!sessionToken)
+            return;
+        const res = await fetch(`${issuer.replace(/\/$/, '')}/oauth/userinfo`, {
+            headers: { authorization: `Bearer ${sessionToken}` },
+        });
+        if (res.ok) {
+            const info = (await res.json());
+            setOrgs(info.orgs ?? []);
+        }
+    }, [issuer, sessionToken]);
+    const authedFetch = useCallback(async (input, init = {}) => {
+        const send = (t) => {
+            const headers = new Headers(init.headers);
+            if (t)
+                headers.set('authorization', `Bearer ${t.token}`);
+            return fetch(input, { ...init, headers });
+        };
+        let t = tokenRef.current && broker.isFresh(tokenRef.current) ? tokenRef.current : await refresh();
+        let res = await send(t);
+        if (res.status === 401) {
+            t = await refresh(true);
+            res = await send(t);
+        }
+        return res;
+    }, [broker, refresh]);
+    const value = useMemo(() => {
+        const profile = auth.user?.profile;
+        const permissions = scoped?.claims.permissions ?? [];
+        const currentOrgId = scoped?.claims.org_id ?? null;
+        const org = orgs.find((o) => o.id === currentOrgId) ??
+            (currentOrgId ? { id: currentOrgId, name: '', role: '' } : null);
+        let status;
+        if (auth.isLoading || (sessionToken && exchanging && !scoped))
+            status = 'loading';
+        else if (!auth.isAuthenticated)
+            status = 'anonymous';
+        else if (scoped)
+            status = 'ready';
+        else if (error === 'access_denied')
+            status = 'no-access';
+        else if (error)
+            status = 'error';
+        else
+            status = 'loading';
+        return {
+            status,
+            user: profile ? { id: profile.sub, email: profile.email, name: profile.name } : null,
+            orgs,
+            org,
+            permissions,
+            can: (p) => permissions.includes(p),
+            token: scoped?.token ?? null,
+            error: error ?? (auth.error ? auth.error.message : null),
+            selectOrg: (id) => {
+                broker.clear();
+                setOrgId(id);
+            },
+            reloadOrgs,
+            login: (returnTo) => auth.signinRedirect({
+                state: { returnTo: returnTo ?? window.location.pathname + window.location.search },
+            }),
+            logout: async () => {
+                broker.clear();
+                writeStorage(orgStorageKey(service), null);
+                await auth.signoutRedirect({ id_token_hint: auth.user?.id_token });
+            },
+            fetch: authedFetch,
+        };
+    }, [
+        auth,
+        scoped,
+        orgs,
+        exchanging,
+        error,
+        sessionToken,
+        broker,
+        reloadOrgs,
+        authedFetch,
+        service,
+    ]);
+    return _jsx(SuiteContext.Provider, { value: value, children: props.children });
+}
+export function useSuite() {
+    const ctx = useContext(SuiteContext);
+    if (!ctx)
+        throw new Error('useSuite va usato dentro <SuiteProvider>');
+    return ctx;
+}
+/** Per i test e le storybook: fornisce un contesto Suite statico senza OIDC. */
+export function SuiteTestProvider(props) {
+    const permissions = props.value.permissions ?? [];
+    const value = {
+        status: 'ready',
+        user: null,
+        orgs: [],
+        org: null,
+        token: null,
+        error: null,
+        selectOrg: () => { },
+        reloadOrgs: async () => { },
+        login: async () => { },
+        logout: async () => { },
+        fetch: (input, init) => fetch(input, init),
+        ...props.value,
+        permissions,
+        can: props.value.can ?? ((p) => permissions.includes(p)),
+    };
+    return _jsx(SuiteContext.Provider, { value: value, children: props.children });
+}
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":";AAAA,OAAO,EACL,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,OAAO,EACP,MAAM,EACN,QAAQ,GAET,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,oBAAoB,EAAa,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAoB,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAmCjD,MAAM,YAAY,GAAG,aAAa,CAA2B,IAAI,CAAC,CAAC;AAcnE,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,eAAe,OAAO,MAAM,CAAC;AAExE,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AACD,SAAS,YAAY,CAAC,GAAW,EAAE,KAAoB;IACrD,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;;YACnD,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC5D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,CAAC;QACL,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,WAAW,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,WAAW;QACjE,wBAAwB,EAAE,qBAAqB,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG;QAC/E,KAAK,EAAE,KAAK,IAAI,0CAA0C;QAC1D,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,IAAI;QAClB,oBAAoB,EAAE,IAAI;QAC1B,qFAAqF;QACrF,mFAAmF;QACnF,SAAS,EAAE,IAAI,oBAAoB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;QACrE,gBAAgB,EAAE,CAAC,IAAiB,EAAE,EAAE;YACtC,MAAM,QAAQ,GAAI,IAAI,EAAE,KAA2C,EAAE,QAAQ,IAAI,GAAG,CAAC;YACrF,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,CAAC;KACF,CAAC,EACF,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE,KAAK,CAAC,CAC9D,CAAC;IACF,OAAO,CACL,KAAC,YAAY,OAAK,MAAM,YACtB,KAAC,YAAY,IAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,YACrE,KAAK,CAAC,QAAQ,GACF,GACF,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAKrB;IACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CAAC,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAC1D,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAC5B,CAAC;IACF,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAqB,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAa,EAAE,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IAElD,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,CAAE,IAAI,CAAC,IAAI,EAAE,OAA6C,EAAE,IAAI,IAAI,EAAE,CAAe,CAAC,CAAC;IACjG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhB,MAAM,OAAO,GAAG,WAAW,CACzB,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,EAAE;QACtB,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/B,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,aAAa,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAChD,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;YACrB,SAAS,CAAC,CAAC,CAAC,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,iEAAiE;YACjE,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK;gBAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5E,OAAO,CAAC,CAAC;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,EAAE,CAAC;gBAC1E,kEAAkE;gBAClE,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC3C,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,OAAO,IAAI,CAAC;YACd,CAAC;YACD,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,QAAQ,CAAC,GAAG,YAAY,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EACD,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,CACvC,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,YAAY;YAAE,KAAK,OAAO,EAAE,CAAC;aAC5B,CAAC;YACJ,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IAE5B,gEAAgE;IAChE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAEtB,SAAS,CAAC,GAAG,EAAE;QACb,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAErB,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACxC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,EAAE;YACrE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,EAAE,EAAE;SACrD,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IAE3B,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,EAAE,KAAa,EAAE,OAAoB,EAAE,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC;QACF,IAAI,CAAC,GACH,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC;QAC5F,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACxB,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,EACD,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAAoB,GAAG,EAAE;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QACnC,MAAM,WAAW,GAAG,MAAM,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;QACnD,MAAM,GAAG,GACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC;YACvC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,MAAmB,CAAC;QACxB,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,IAAI,UAAU,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,GAAG,SAAS,CAAC;aAC7E,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,MAAM,GAAG,WAAW,CAAC;aAChD,IAAI,MAAM;YAAE,MAAM,GAAG,OAAO,CAAC;aAC7B,IAAI,KAAK,KAAK,eAAe;YAAE,MAAM,GAAG,WAAW,CAAC;aACpD,IAAI,KAAK;YAAE,MAAM,GAAG,OAAO,CAAC;;YAC5B,MAAM,GAAG,SAAS,CAAC;QACxB,OAAO;YACL,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;YACpF,IAAI;YACJ,GAAG;YACH,WAAW;YACX,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3C,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI;YAC5B,KAAK,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACxD,SAAS,EAAE,CAAC,EAAU,EAAE,EAAE;gBACxB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,EAAE,CAAC,CAAC;YACf,CAAC;YACD,UAAU;YACV,KAAK,EAAE,CAAC,QAAiB,EAAE,EAAE,CAC3B,IAAI,CAAC,cAAc,CAAC;gBAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;aACnF,CAAC;YACJ,MAAM,EAAE,KAAK,IAAI,EAAE;gBACjB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC3C,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,KAAK,EAAE,WAAW;SACnB,CAAC;IACJ,CAAC,EAAE;QACD,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,UAAU;QACV,KAAK;QACL,YAAY;QACZ,MAAM;QACN,UAAU;QACV,WAAW;QACX,OAAO;KACR,CAAC,CAAC;IAEH,OAAO,KAAC,YAAY,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,KAAK,CAAC,QAAQ,GAAyB,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,KAGjC;IACC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;IAClD,MAAM,KAAK,GAAsB;QAC/B,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,EAAE;QACR,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;QACnB,UAAU,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QAC1B,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACrB,MAAM,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACtB,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;QAC1C,GAAG,KAAK,CAAC,KAAK;QACd,WAAW;QACX,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;KACzD,CAAC;IACF,OAAO,KAAC,YAAY,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,KAAK,CAAC,QAAQ,GAAyB,CAAC;AACvF,CAAC"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@babelpeak/babel-suite-react-sdk",
+  "version": "0.1.0",
+  "description": "SDK React per le SPA dei servizi Babel: login OIDC, token scoped, permessi",
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Babel-Peak/babel-suite.git",
+    "directory": "packages/suite-react"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "@babel-suite/source": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "peerDependencies": {
+    "react": "^18.0.0 || ^19.0.0"
+  },
+  "dependencies": {
+    "oidc-client-ts": "^3.5.0",
+    "react-oidc-context": "^3.3.1"
+  },
+  "devDependencies": {
+    "@testing-library/react": "^16.3.3",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "jsdom": "^30.1.1",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0"
+  }
+}