@blimu/react 0.6.0

package/README.md

@@ -0,0 +1,552 @@
+# @blimu/react
+
+React components and hooks for [Blimu](https://blimu.dev) authentication and authorization.
+
+## Features
+
+- 🔐 **Drop-in Authentication Components** - Pre-built UI components like `UserButton`
+- 🎨 **Fully Customizable** - Theme system with CSS variables and className overrides
+- 🌓 **Dark Mode Support** - Built-in light and dark theme variants
+- 🎯 **TypeScript First** - Complete type safety with IntelliSense support
+- ⚡ **Tailwind CSS v4** - Modern CSS-first configuration
+- 🪝 **React Hooks** - `useAuth`, `useUser`, and more
+- 🧩 **Headless UI** - Built on Radix UI primitives
+
+## Installation
+
+```bash
+npm install @blimu/react
+# or
+yarn add @blimu/react
+# or
+pnpm add @blimu/react
+```
+
+### Peer Dependencies
+
+This library requires:
+- `react` ^18.0.0 || ^19.0.0
+- `react-dom` ^18.0.0 || ^19.0.0
+- `tailwindcss` ^4.0.0 (optional, but recommended)
+
+## Quick Start
+
+### 1. Wrap your app with BlimuProvider
+
+```tsx
+import { BlimuProvider } from '@blimu/react';
+import '@blimu/react/styles';
+
+function App() {
+  return (
+    <BlimuProvider publishableKey="pk_...">
+      <YourApp />
+    </BlimuProvider>
+  );
+}
+```
+
+### 2. Use authentication components
+
+```tsx
+import { UserButton } from '@blimu/react';
+
+function Header() {
+  return (
+    <header>
+      <h1>My App</h1>
+      <UserButton />
+    </header>
+  );
+}
+```
+
+### 3. Access authentication state
+
+```tsx
+import { useAuth, useUser } from '@blimu/react';
+
+function Dashboard() {
+  const { isAuthenticated, login, logout } = useAuth();
+  const { user } = useUser();
+
+  if (!isAuthenticated) {
+    return <button onClick={() => login()}>Sign In</button>;
+  }
+
+  return (
+    <div>
+      <h1>Welcome, {user?.firstName}!</h1>
+      <button onClick={() => logout()}>Sign Out</button>
+    </div>
+  );
+}
+```
+
+## Styling & Customization
+
+### Default Setup (with Tailwind CSS v4)
+
+If you're using Tailwind CSS v4, import the stylesheet in your app:
+
+```tsx
+import '@blimu/react/styles';
+```
+
+This gives you the default Blimu theme with dark mode support.
+
+### Theme Customization
+
+#### Option 1: Theme Prop (Easiest)
+
+Customize colors and border radius via the `theme` prop:
+
+```tsx
+<BlimuProvider
+  publishableKey="pk_..."
+  theme={{
+    colors: {
+      primary: 'oklch(0.5 0.2 250)',      // Custom blue
+      background: '#ffffff',              // Hex colors work too
+      foreground: 'rgb(0, 0, 0)',         // Or RGB
+    },
+    radius: 'lg',  // 'none' | 'sm' | 'md' | 'lg' | 'xl' | 'full' | custom CSS value
+  }}
+>
+  <YourApp />
+</BlimuProvider>
+```
+
+#### Option 2: CSS Variables (Maximum Control)
+
+Override CSS variables in your global styles:
+
+```css
+/* your-app.css */
+:root {
+  --blimu-primary: oklch(0.45 0.25 264);
+  --blimu-primary-foreground: oklch(1 0 0);
+  --blimu-radius: 0.5rem;
+  /* See full list of variables below */
+}
+
+.dark {
+  --blimu-primary: oklch(0.7 0.2 264);
+  --blimu-background: oklch(0.15 0 0);
+}
+```
+
+**Available CSS Variables:**
+
+```css
+/* Colors */
+--blimu-background
+--blimu-foreground
+--blimu-card
+--blimu-card-foreground
+--blimu-popover
+--blimu-popover-foreground
+--blimu-primary
+--blimu-primary-foreground
+--blimu-secondary
+--blimu-secondary-foreground
+--blimu-muted
+--blimu-muted-foreground
+--blimu-accent
+--blimu-accent-foreground
+--blimu-destructive
+--blimu-destructive-foreground
+--blimu-border
+--blimu-input
+--blimu-ring
+
+/* Border Radius */
+--blimu-radius
+```
+
+#### Option 3: className Overrides (Component Level)
+
+Every component accepts `className` and `classes` props:
+
+```tsx
+<UserButton
+  className="custom-user-button"
+  classes={{
+    trigger: 'hover:scale-105 transition-transform',
+    avatar: 'ring-2 ring-blue-500',
+    popover: 'shadow-2xl',
+    userName: 'font-bold',
+  }}
+  onManageAccount={() => router.push('/settings')}
+/>
+```
+
+### Dark Mode
+
+Blimu components automatically support dark mode when a `.dark` class is present on any parent element:
+
+```tsx
+// Using next-themes
+import { ThemeProvider } from 'next-themes';
+
+<ThemeProvider attribute="class">
+  <BlimuProvider publishableKey="pk_...">
+    <YourApp />
+  </BlimuProvider>
+</ThemeProvider>
+```
+
+Or manually:
+
+```tsx
+<div className="dark">
+  <BlimuProvider publishableKey="pk_...">
+    <YourApp />
+  </BlimuProvider>
+</div>
+```
+
+## Components
+
+### UserButton
+
+A button that displays the current user's avatar and provides account management options.
+
+```tsx
+import { UserButton } from '@blimu/react';
+
+<UserButton
+  className="custom-class"
+  classes={{
+    trigger: 'hover:opacity-90',
+    avatar: 'ring-2 ring-primary',
+    popover: 'shadow-xl',
+    userName: 'font-semibold',
+    manageAccountButton: 'hover:bg-accent',
+    signOutButton: 'hover:bg-destructive/10',
+  }}
+  onManageAccount={() => {
+    // Navigate to account settings
+  }}
+/>
+```
+
+**Props:**
+- `className?: string` - Custom class for the root element
+- `classes?: object` - Object of classes for sub-elements
+- `onManageAccount?: () => void` - Callback when "Manage account" is clicked
+
+### RedirectToSignIn
+
+Redirects unauthenticated users to the sign-in page.
+
+```tsx
+import { RedirectToSignIn } from '@blimu/react';
+
+function ProtectedPage() {
+  return (
+    <>
+      <RedirectToSignIn returnUrl="/dashboard" />
+      <Dashboard />
+    </>
+  );
+}
+```
+
+## Hooks
+
+### useAuth
+
+Access authentication state and methods.
+
+```tsx
+import { useAuth } from '@blimu/react';
+
+function Component() {
+  const {
+    state,              // Full auth state object
+    isAuthenticated,    // Boolean
+    isLoading,          // Boolean
+    login,              // (returnUrl?) => void
+    logout,             // () => Promise<void>
+    getToken,           // (options) => Promise<string | null>
+  } = useAuth();
+}
+```
+
+### useUser
+
+Get the current user object.
+
+```tsx
+import { useUser } from '@blimu/react';
+
+function Profile() {
+  const { user } = useUser();
+
+  return (
+    <div>
+      <h1>{user?.firstName} {user?.lastName}</h1>
+      <p>{user?.email}</p>
+    </div>
+  );
+}
+```
+
+**User object:**
+```ts
+interface User {
+  id: string;
+  email: string;
+  firstName?: string | null;
+  lastName?: string | null;
+  emailVerified: boolean;
+}
+```
+
+### useBlimu
+
+Access the Blimu client and configuration.
+
+```tsx
+import { useBlimu } from '@blimu/react';
+
+function Component() {
+  const { client, config } = useBlimu();
+}
+```
+
+## TypeScript
+
+Full TypeScript support with exported types:
+
+```tsx
+import type {
+  User,
+  AuthState,
+  BlimuConfig,
+  BlimuTheme,
+  BlimuThemeColors,
+  UserButtonProps,
+} from '@blimu/react';
+
+// Type-safe theme configuration
+const theme: BlimuTheme = {
+  colors: {
+    primary: 'oklch(0.5 0.2 250)',
+  },
+  radius: 'lg',
+};
+
+// Component props are fully typed
+const userButtonProps: UserButtonProps = {
+  className: 'my-button',
+  onManageAccount: () => console.log('Account'),
+};
+```
+
+## Framework Guides
+
+### Next.js (App Router)
+
+```tsx
+// app/layout.tsx
+import { BlimuProvider } from '@blimu/react';
+import '@blimu/react/styles';
+
+export default function RootLayout({ children }) {
+  return (
+    <html>
+      <body>
+        <BlimuProvider publishableKey={process.env.NEXT_PUBLIC_BLIMU_PUBLISHABLE_KEY!}>
+          {children}
+        </BlimuProvider>
+      </body>
+    </html>
+  );
+}
+```
+
+### Next.js (Pages Router)
+
+```tsx
+// pages/_app.tsx
+import { BlimuProvider } from '@blimu/react';
+import '@blimu/react/styles';
+import type { AppProps } from 'next/app';
+
+export default function App({ Component, pageProps }: AppProps) {
+  return (
+    <BlimuProvider publishableKey={process.env.NEXT_PUBLIC_BLIMU_PUBLISHABLE_KEY!}>
+      <Component {...pageProps} />
+    </BlimuProvider>
+  );
+}
+```
+
+### Vite + React
+
+```tsx
+// main.tsx
+import { BlimuProvider } from '@blimu/react';
+import '@blimu/react/styles';
+import ReactDOM from 'react-dom/client';
+import App from './App';
+
+ReactDOM.createRoot(document.getElementById('root')!).render(
+  <BlimuProvider publishableKey={import.meta.env.VITE_BLIMU_PUBLISHABLE_KEY}>
+    <App />
+  </BlimuProvider>
+);
+```
+
+### Remix
+
+```tsx
+// app/root.tsx
+import { BlimuProvider } from '@blimu/react';
+import styles from '@blimu/react/styles';
+
+export const links = () => [
+  { rel: 'stylesheet', href: styles },
+];
+
+export default function Root() {
+  return (
+    <html>
+      <head>
+        <Links />
+      </head>
+      <body>
+        <BlimuProvider publishableKey={process.env.BLIMU_PUBLISHABLE_KEY!}>
+          <Outlet />
+        </BlimuProvider>
+      </body>
+    </html>
+  );
+}
+```
+
+## Advanced Usage
+
+### Protected Routes
+
+```tsx
+import { useAuth, RedirectToSignIn } from '@blimu/react';
+
+function ProtectedRoute({ children }) {
+  const { isAuthenticated, isLoading } = useAuth();
+
+  if (isLoading) {
+    return <div>Loading...</div>;
+  }
+
+  if (!isAuthenticated) {
+    return <RedirectToSignIn />;
+  }
+
+  return <>{children}</>;
+}
+```
+
+### Getting Tokens
+
+```tsx
+import { useAuth } from '@blimu/react';
+
+function ApiCall() {
+  const { getToken } = useAuth();
+
+  const fetchData = async () => {
+    const token = await getToken({ template: 'web' });
+
+    const response = await fetch('/api/data', {
+      headers: {
+        Authorization: `Bearer ${token}`,
+      },
+    });
+  };
+}
+```
+
+### Custom Components
+
+Build your own components using the hooks:
+
+```tsx
+import { useUser, useAuth } from '@blimu/react';
+
+function CustomUserMenu() {
+  const { user } = useUser();
+  const { logout } = useAuth();
+
+  if (!user) return null;
+
+  return (
+    <div className="menu">
+      <img src={user.avatarUrl} alt={user.firstName} />
+      <span>{user.email}</span>
+      <button onClick={logout}>Sign Out</button>
+    </div>
+  );
+}
+```
+
+## Examples
+
+See the [examples directory](../../examples) for complete working examples:
+
+- Next.js App Router
+- Next.js Pages Router
+- Vite + React
+- Remix
+- Custom styling examples
+
+## Troubleshooting
+
+### Tailwind classes not working
+
+Make sure you've imported the styles:
+
+```tsx
+import '@blimu/react/styles';
+```
+
+If you're using Tailwind CSS v4 in your app, the Blimu components will inherit your Tailwind configuration.
+
+### Dark mode not working
+
+Ensure a `.dark` class is added to a parent element:
+
+```tsx
+<div className="dark">
+  <BlimuProvider>...</BlimuProvider>
+</div>
+```
+
+### TypeScript errors
+
+Make sure `@blimu/react` is installed and your `tsconfig.json` has:
+
+```json
+{
+  "compilerOptions": {
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx"
+  }
+}
+```
+
+## API Reference
+
+Full API documentation available at [docs.blimu.dev](https://docs.blimu.dev)
+
+## License
+
+MIT
+
+## Support
+
+- Documentation: [docs.blimu.dev](https://docs.blimu.dev)
+- Issues: [GitHub Issues](https://github.com/blimu/blimu/issues)
+- Discord: [Join our community](https://discord.gg/blimu)

package/dist/_virtual/index.cjs

@@ -0,0 +1,2 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("../node_modules/use-sync-external-store/shim/index.cjs");var r=e.__require();exports.shimExports=r;
+//# sourceMappingURL=index.cjs.map

package/dist/_virtual/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/_virtual/index.js

@@ -0,0 +1,6 @@
+import { __require as r } from "../node_modules/use-sync-external-store/shim/index.js";
+var i = r();
+export {
+  i as s
+};
+//# sourceMappingURL=index.js.map

package/dist/_virtual/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;"}

package/dist/_virtual/index2.cjs

@@ -0,0 +1,2 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});var e={exports:{}};exports.__module=e;
+//# sourceMappingURL=index2.cjs.map

package/dist/_virtual/index2.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index2.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/_virtual/index2.js

@@ -0,0 +1,5 @@
+var e = { exports: {} };
+export {
+  e as __module
+};
+//# sourceMappingURL=index2.js.map

package/dist/_virtual/index2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index2.js","sources":[],"sourcesContent":[],"names":[],"mappings":";"}

package/dist/_virtual/use-sync-external-store-shim.development.cjs

@@ -0,0 +1,2 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});var e={};exports.__exports=e;
+//# sourceMappingURL=use-sync-external-store-shim.development.cjs.map

package/dist/_virtual/use-sync-external-store-shim.development.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-sync-external-store-shim.development.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/_virtual/use-sync-external-store-shim.development.js

@@ -0,0 +1,5 @@
+var e = {};
+export {
+  e as __exports
+};
+//# sourceMappingURL=use-sync-external-store-shim.development.js.map

package/dist/_virtual/use-sync-external-store-shim.development.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-sync-external-store-shim.development.js","sources":[],"sourcesContent":[],"names":[],"mappings":";"}

package/dist/_virtual/use-sync-external-store-shim.production.cjs

@@ -0,0 +1,2 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});var e={};exports.__exports=e;
+//# sourceMappingURL=use-sync-external-store-shim.production.cjs.map

package/dist/_virtual/use-sync-external-store-shim.production.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-sync-external-store-shim.production.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/_virtual/use-sync-external-store-shim.production.js

@@ -0,0 +1,5 @@
+var r = {};
+export {
+  r as __exports
+};
+//# sourceMappingURL=use-sync-external-store-shim.production.js.map

package/dist/_virtual/use-sync-external-store-shim.production.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-sync-external-store-shim.production.js","sources":[],"sourcesContent":[],"names":[],"mappings":";"}

package/dist/client/auth.service.cjs

@@ -0,0 +1,2 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const E=require("@blimu/client"),o=require("../node_modules/js-cookie/dist/js.cookie.cjs"),A=require("../node_modules/jwt-decode/build/esm/index.cjs"),a="__bli_session",d="__lh_jwt",u="__lh_jwt",S=10,_=1e3,m=t=>Math.floor(t*_),O=t=>Math.floor(t/_),C=()=>O(Date.now()),T=t=>m(t),b=(t,e)=>{const s=T(t),r=m(e),n=Date.now();return Math.max(s-r-n,0)},c=(t,e)=>{const s=C();return t-e<s};class P{constructor(e,s,r,n,l){this.isLive=e,this.client=s,this.store=r,this.pendingRefresher=null,this.refreshPromise=null,this.refreshingSignals=new Set,this.refreshingSignalAbortController=null,this.localClient=new E.Blimu({baseURL:n,credentials:"include",headers:{"x-blimu-publishable-key":l}}),this.handleRequestError=this.handleRequestError.bind(this)}setCookie(e,s,r={}){const n={secure:this.isLive,sameSite:"lax",path:"/"};r.maxAge!==void 0&&(n.expires=r.maxAge/(1440*60)),o.set(e,s,n)}getSessionPayload(){const e=o.get(a);return e?A.jwtDecode(e):null}async getSessionToken(){const e=this.getSessionPayload();if(e)return this.refreshPromise?(await this.refreshPromise,o.get(a)):(c(e.exp,0)&&await this.refreshSession(),o.get(a))}async handleRequestError(e){return e instanceof E.BlimuError&&[401,500].includes(e.status)?(o.remove(a),o.remove(u),{error:e.message,user:null}):e instanceof DOMException?{error:e.message,user:null}:e instanceof Error?{error:e.message,user:null}:{error:"unknown error",user:null}}async initialize({signal:e}={}){const s=new URL(window.location.href),r=s.searchParams.get(d)??void 0;if(r&&(s.searchParams.delete(d),window.history.replaceState({},"",s.toString())),r&&this.setCookie(u,r,{maxAge:720*60*60}),o.get(u)&&!o.get(a)){const i=await this.refreshSession({signal:e}).catch(this.handleRequestError);if("error"in i)return i}const l=this.getSessionPayload();if(!l)return{error:null,user:null};if(c(l.exp,S)){const i=await this.refreshSession().catch(this.handleRequestError);if("error"in i)return i}const h=await this.client.auth.getSession().catch(this.handleRequestError);return"error"in h?h:{error:null,user:h.user}}scheduleRefresh(){const e=new AbortController;let s=!0,r=null;const n=()=>{s=!0,this.pendingRefresher&&(this.pendingRefresher(),this.pendingRefresher=null)},l=()=>{s=!1};window.addEventListener("online",n),window.addEventListener("offline",l);const h=()=>{r!==null&&(window.clearTimeout(r),r=null);const i=this.getSessionPayload();if(!i||c(i.exp,0))return;const g=b(i.exp,S);if(g<0)return;const w=async()=>{if(r=null,!s){this.pendingRefresher=w;return}const f=await this.refreshSession({signal:e.signal});if("error"in f){if(f.error==="aborted")return;this.store.setState({status:"error",user:null,error:f.error});return}else h()};r=window.setTimeout(w,g)};return h(),()=>{r&&window.clearTimeout(r),e.abort(),window.removeEventListener("online",n),window.removeEventListener("offline",l)}}async refreshSession({signal:e}={}){if(e&&(this.refreshingSignals.add(e),e.addEventListener("abort",()=>{this.refreshingSignals.delete(e),this.refreshingSignals.size===0&&this.refreshingSignalAbortController?.abort()})),this.refreshPromise)return this.refreshPromise;this.refreshingSignalAbortController=new AbortController,this.refreshingSignalAbortController.signal.addEventListener("abort",()=>{this.refreshPromise=null,this.refreshingSignalAbortController=null,this.refreshingSignals.clear()});const s=o.get(u);this.refreshPromise=this.localClient.auth.refresh({__lh_jwt:s},{signal:this.refreshingSignalAbortController.signal}).then(r=>(r.sessionToken&&this.setCookie(a,r.sessionToken,{maxAge:720*60*60}),r)).catch(this.handleRequestError);try{return await this.refreshPromise}finally{this.refreshPromise=null,this.refreshingSignalAbortController=null,this.refreshingSignals.clear()}}}exports.AuthSessionService=P;exports.LOCALHOST_JWT_COOKIE_NAME=u;exports.LOCALHOST_JWT_URL_PARAM_NAME=d;exports.SESSION_COOKIE_NAME=a;exports.SESSION_EXPIRATION_BUFFER=S;exports.isExpiredIn=c;
+//# sourceMappingURL=auth.service.cjs.map

package/dist/client/auth.service.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.cjs","sources":["../../src/client/auth.service.ts"],"sourcesContent":["import { Blimu, BlimuError } from '@blimu/client';\nimport type { RefreshResponse } from '@blimu/client/schema';\nimport Cookies from 'js-cookie';\nimport { jwtDecode } from 'jwt-decode';\n\nimport type { AuthState, User } from '../types';\nimport { ExternalStore } from './external-store';\n\nexport const SESSION_COOKIE_NAME = '__bli_session';\nexport const LOCALHOST_JWT_URL_PARAM_NAME = '__lh_jwt';\nexport const LOCALHOST_JWT_COOKIE_NAME = '__lh_jwt';\nexport const SESSION_EXPIRATION_BUFFER = 10;\n\n/**\n * Time conversion utilities\n * JWT tokens use seconds (Unix timestamp), JavaScript Date uses milliseconds\n */\nconst SECONDS_TO_MS = 1000;\n\n/**\n * Convert seconds to milliseconds\n */\nconst secondsToMilliseconds = (seconds: number): number => Math.floor(seconds * SECONDS_TO_MS);\n\n/**\n * Convert milliseconds to seconds\n */\nconst millisecondsToSeconds = (ms: number): number => Math.floor(ms / SECONDS_TO_MS);\n\n/**\n * Get current time in seconds (Unix timestamp)\n */\nconst nowInSeconds = (): number => millisecondsToSeconds(Date.now());\n\n/**\n * Convert JWT expiration time (seconds) to milliseconds\n */\nconst jwtExpToMilliseconds = (exp: number): number => secondsToMilliseconds(exp);\n\n/**\n * Calculate timeout delay in milliseconds for refreshing before expiration\n * @param expirationSeconds - JWT exp claim in seconds\n * @param bufferSeconds - Buffer time in seconds before expiration\n * @returns Timeout delay in milliseconds\n */\nconst calculateTimeoutDelay = (expirationSeconds: number, bufferSeconds: number): number => {\n  const expirationMS = jwtExpToMilliseconds(expirationSeconds);\n  const bufferMS = secondsToMilliseconds(bufferSeconds);\n  const nowMS = Date.now();\n  return Math.max(expirationMS - bufferMS - nowMS, 0);\n};\n\n/**\n * Check if a JWT expiration time (in seconds) is expired or will expire within the buffer\n * @param expiration - JWT exp claim in seconds (Unix timestamp)\n * @param buffer - Buffer time in seconds before expiration to consider it expired\n * @returns true if expired or will expire within buffer\n */\nexport const isExpiredIn = (expiration: number, buffer: number): boolean => {\n  const now = nowInSeconds();\n  return expiration - buffer < now;\n};\n\nexport class AuthSessionService {\n  private pendingRefresher: (() => void) | null = null;\n  private refreshPromise: Promise<RefreshResponse | { error: string; user: null }> | null = null;\n  private refreshingSignals: Set<AbortSignal> = new Set();\n  private refreshingSignalAbortController: AbortController | null = null;\n  // A local client that doesn't call getSessionToken() which calls refreshSession().\n  private localClient: Blimu;\n\n  constructor(\n    private readonly isLive: boolean,\n    private readonly client: Blimu,\n    private readonly store: ExternalStore<AuthState>,\n    baseURL: string,\n    publishableKey: string,\n  ) {\n    this.localClient = new Blimu({\n      baseURL,\n      credentials: 'include',\n      headers: { 'x-blimu-publishable-key': publishableKey },\n    });\n    this.handleRequestError = this.handleRequestError.bind(this);\n  }\n\n  /**\n   * Set cookie with appropriate security settings based on environment\n   */\n  private setCookie(name: string, value: string, options: { maxAge?: number } = {}): void {\n    const cookieOptions: Cookies.CookieAttributes = {\n      secure: this.isLive, // true for live environments, false for localhost\n      sameSite: 'lax',\n      path: '/',\n    };\n\n    if (options.maxAge !== undefined) {\n      cookieOptions.expires = options.maxAge / (24 * 60 * 60); // Convert seconds to days\n    }\n\n    Cookies.set(name, value, cookieOptions);\n  }\n\n  getSessionPayload(): {\n    sub: string;\n    environmentId: string;\n    type: string;\n    iat: number;\n    exp: number;\n  } | null {\n    const token = Cookies.get(SESSION_COOKIE_NAME);\n\n    if (!token) {\n      return null;\n    }\n\n    const decoded = jwtDecode<{\n      sub: string;\n      environmentId: string;\n      type: string;\n      iat: number;\n      exp: number;\n    }>(token);\n\n    return decoded;\n  }\n\n  async getSessionToken(): Promise<string | undefined> {\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return undefined;\n    }\n\n    // If a refresh is already in progress, wait for it to complete\n    // This prevents infinite recursion when refreshSession() calls client.auth.refresh()\n    // which triggers accessToken() which calls getSessionToken()\n    if (this.refreshPromise) {\n      await this.refreshPromise;\n      // After refresh completes, return the updated token from cookie\n      return Cookies.get(SESSION_COOKIE_NAME);\n    }\n\n    if (isExpiredIn(sessionPayload.exp, 0)) {\n      await this.refreshSession();\n    }\n\n    return Cookies.get(SESSION_COOKIE_NAME);\n  }\n\n  async handleRequestError(error: unknown): Promise<{ error: string; user: null }> {\n    if (error instanceof BlimuError && [401, 500].includes(error.status)) {\n      Cookies.remove(SESSION_COOKIE_NAME);\n      Cookies.remove(LOCALHOST_JWT_COOKIE_NAME);\n\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    if (error instanceof DOMException)\n      return {\n        error: error.message,\n        user: null,\n      };\n\n    if (error instanceof Error) {\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    return {\n      error: 'unknown error',\n      user: null,\n    };\n  }\n\n  async initialize({ signal }: { signal?: AbortSignal } = {}): Promise<{\n    error: string | null;\n    user: User | null;\n  }> {\n    const url = new URL(window.location.href);\n    const localhostJWT = url.searchParams.get(LOCALHOST_JWT_URL_PARAM_NAME) ?? undefined;\n\n    // Clean up URL parameters immediately to prevent re-processing on re-renders\n    if (localhostJWT) {\n      url.searchParams.delete(LOCALHOST_JWT_URL_PARAM_NAME);\n      window.history.replaceState({}, '', url.toString());\n    }\n\n    // Handle localhost JWT from URL parameter\n    if (localhostJWT) {\n      // Set localhost JWT cookie on customer app domain\n      this.setCookie(LOCALHOST_JWT_COOKIE_NAME, localhostJWT, {\n        maxAge: 30 * 24 * 60 * 60, // 30 days\n      });\n    }\n\n    const localhostJWTCookie = Cookies.get(LOCALHOST_JWT_COOKIE_NAME);\n\n    if (localhostJWTCookie && !Cookies.get(SESSION_COOKIE_NAME)) {\n      const result = await this.refreshSession({ signal }).catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return {\n        error: null,\n        user: null,\n      };\n    }\n\n    if (isExpiredIn(sessionPayload.exp, SESSION_EXPIRATION_BUFFER)) {\n      const result = await this.refreshSession().catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const result = await this.client.auth.getSession().catch(this.handleRequestError);\n    if ('error' in result) return result;\n\n    return {\n      error: null,\n      user: result.user,\n    };\n  }\n\n  scheduleRefresh() {\n    const abortController = new AbortController();\n    let isOnline = true;\n    let timeoutId: number | null = null;\n\n    const onlineHandler = () => {\n      isOnline = true;\n      if (this.pendingRefresher) {\n        this.pendingRefresher();\n        this.pendingRefresher = null;\n      }\n    };\n    const offlineHandler = () => {\n      isOnline = false;\n    };\n\n    window.addEventListener('online', onlineHandler);\n    window.addEventListener('offline', offlineHandler);\n\n    const refresh = () => {\n      // Clear any existing timeout before scheduling a new one\n      // This prevents infinite loops when refresh() is called recursively\n      if (timeoutId !== null) {\n        window.clearTimeout(timeoutId);\n        timeoutId = null;\n      }\n\n      const sessionPayload = this.getSessionPayload();\n\n      if (!sessionPayload || isExpiredIn(sessionPayload.exp, 0)) return;\n\n      // Calculate timeout delay: refresh SESSION_EXPIRATION_BUFFER seconds before expiration\n      const timeoutDelayMS = calculateTimeoutDelay(sessionPayload.exp, SESSION_EXPIRATION_BUFFER);\n\n      // Prevent scheduling if timeout is negative (token already expired)\n      // Allow 0ms delays to handle edge cases where we're exactly at the refresh point\n      // This prevents immediate re-scheduling that could cause infinite loops\n      if (timeoutDelayMS < 0) {\n        return;\n      }\n\n      // Having this function outside timeout, allows us to call refresh immediately when back online\n      const refresher = async () => {\n        // Clear timeoutId since we're executing now\n        timeoutId = null;\n\n        if (!isOnline) {\n          // Keep closure of refresh function alive\n          this.pendingRefresher = refresher;\n          return;\n        }\n\n        const result = await this.refreshSession({ signal: abortController.signal });\n\n        if ('error' in result) {\n          // If the refresh was aborted (e.g., due to React strict mode unmounting),\n          // don't treat it as an error - just return and let the component remount handle it\n          if (result.error === 'aborted') {\n            return;\n          }\n          // For real errors, update the store\n          this.store.setState({\n            status: 'error',\n            user: null,\n            error: result.error,\n          });\n          return;\n        } else {\n          // After successful refresh, schedule the next refresh with the new token\n          refresh();\n        }\n      };\n\n      timeoutId = window.setTimeout(refresher, timeoutDelayMS);\n    };\n\n    refresh();\n\n    return () => {\n      if (timeoutId) {\n        window.clearTimeout(timeoutId);\n      }\n      abortController.abort();\n      window.removeEventListener('online', onlineHandler);\n      window.removeEventListener('offline', offlineHandler);\n    };\n  }\n\n  private async refreshSession({ signal }: { signal?: AbortSignal } = {}) {\n    if (signal) {\n      // Add signal to tracking set (was using .has() instead of .add() - bug fix)\n      this.refreshingSignals.add(signal);\n\n      signal.addEventListener('abort', () => {\n        this.refreshingSignals.delete(signal);\n\n        if (this.refreshingSignals.size === 0) {\n          this.refreshingSignalAbortController?.abort();\n        }\n      });\n    }\n\n    if (this.refreshPromise) {\n      return this.refreshPromise;\n    }\n\n    this.refreshingSignalAbortController = new AbortController();\n\n    this.refreshingSignalAbortController.signal.addEventListener('abort', () => {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    });\n\n    // Get localhost_jwt from cookie to send as query parameter\n    const localhostJWT = Cookies.get(LOCALHOST_JWT_COOKIE_NAME);\n\n    // Use local client to avoid infinite recursion. Regular client calls getSessionToken() which calls refreshSession().\n    // There are hacks to avoid infinite recursion, but they are not reliable.\n    // The localhost_jwt is sent as a query parameter\n    // Note: Type assertion needed because the generated SDK type doesn't include 'query' in RequestInit,\n    // but the underlying CoreClient.request() method does support it\n    this.refreshPromise = this.localClient.auth\n      .refresh(\n        { __lh_jwt: localhostJWT },\n        {\n          signal: this.refreshingSignalAbortController.signal,\n        },\n      )\n      .then((response) => {\n        // Update cookie with new session token from response body\n        // Server also sets it via Set-Cookie header on auth domain, but we set it manually on customer domain\n        if (response.sessionToken) {\n          this.setCookie(SESSION_COOKIE_NAME, response.sessionToken, {\n            maxAge: 30 * 24 * 60 * 60, // 30 days\n          });\n        }\n        return response;\n      })\n      .catch(this.handleRequestError);\n\n    try {\n      return await this.refreshPromise;\n    } finally {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    }\n  }\n}\n"],"names":["SESSION_COOKIE_NAME","LOCALHOST_JWT_URL_PARAM_NAME","LOCALHOST_JWT_COOKIE_NAME","SESSION_EXPIRATION_BUFFER","SECONDS_TO_MS","secondsToMilliseconds","seconds","millisecondsToSeconds","ms","nowInSeconds","jwtExpToMilliseconds","exp","calculateTimeoutDelay","expirationSeconds","bufferSeconds","expirationMS","bufferMS","nowMS","isExpiredIn","expiration","buffer","now","AuthSessionService","isLive","client","store","baseURL","publishableKey","Blimu","name","value","options","cookieOptions","Cookies","token","jwtDecode","sessionPayload","error","BlimuError","signal","url","localhostJWT","result","abortController","isOnline","timeoutId","onlineHandler","offlineHandler","refresh","timeoutDelayMS","refresher","response"],"mappings":"uOAQaA,EAAsB,gBACtBC,EAA+B,WAC/BC,EAA4B,WAC5BC,EAA4B,GAMnCC,EAAgB,IAKhBC,EAAyBC,GAA4B,KAAK,MAAMA,EAAUF,CAAa,EAKvFG,EAAyBC,GAAuB,KAAK,MAAMA,EAAKJ,CAAa,EAK7EK,EAAe,IAAcF,EAAsB,KAAK,KAAK,EAK7DG,EAAwBC,GAAwBN,EAAsBM,CAAG,EAQzEC,EAAwB,CAACC,EAA2BC,IAAkC,CAC1F,MAAMC,EAAeL,EAAqBG,CAAiB,EACrDG,EAAWX,EAAsBS,CAAa,EAC9CG,EAAQ,KAAK,IAAA,EACnB,OAAO,KAAK,IAAIF,EAAeC,EAAWC,EAAO,CAAC,CACpD,EAQaC,EAAc,CAACC,EAAoBC,IAA4B,CAC1E,MAAMC,EAAMZ,EAAA,EACZ,OAAOU,EAAaC,EAASC,CAC/B,EAEO,MAAMC,CAAmB,CAQ9B,YACmBC,EACAC,EACAC,EACjBC,EACAC,EACA,CALiB,KAAA,OAAAJ,EACA,KAAA,OAAAC,EACA,KAAA,MAAAC,EAVnB,KAAQ,iBAAwC,KAChD,KAAQ,eAAkF,KAC1F,KAAQ,sBAA0C,IAClD,KAAQ,gCAA0D,KAWhE,KAAK,YAAc,IAAIG,QAAM,CAC3B,QAAAF,EACA,YAAa,UACb,QAAS,CAAE,0BAA2BC,CAAA,CAAe,CACtD,EACD,KAAK,mBAAqB,KAAK,mBAAmB,KAAK,IAAI,CAC7D,CAKQ,UAAUE,EAAcC,EAAeC,EAA+B,CAAA,EAAU,CACtF,MAAMC,EAA0C,CAC9C,OAAQ,KAAK,OACb,SAAU,MACV,KAAM,GAAA,EAGJD,EAAQ,SAAW,SACrBC,EAAc,QAAUD,EAAQ,QAAU,KAAU,KAGtDE,EAAQ,IAAIJ,EAAMC,EAAOE,CAAa,CACxC,CAEA,mBAMS,CACP,MAAME,EAAQD,EAAQ,IAAIjC,CAAmB,EAE7C,OAAKkC,EAIWC,EAAAA,UAMbD,CAAK,EATC,IAYX,CAEA,MAAM,iBAA+C,CACnD,MAAME,EAAiB,KAAK,kBAAA,EAE5B,GAAKA,EAOL,OAAI,KAAK,gBACP,MAAM,KAAK,eAEJH,EAAQ,IAAIjC,CAAmB,IAGpCkB,EAAYkB,EAAe,IAAK,CAAC,GACnC,MAAM,KAAK,eAAA,EAGNH,EAAQ,IAAIjC,CAAmB,EACxC,CAEA,MAAM,mBAAmBqC,EAAwD,CAC/E,OAAIA,aAAiBC,EAAAA,YAAc,CAAC,IAAK,GAAG,EAAE,SAASD,EAAM,MAAM,GACjEJ,EAAQ,OAAOjC,CAAmB,EAClCiC,EAAQ,OAAO/B,CAAyB,EAEjC,CACL,MAAOmC,EAAM,QACb,KAAM,IAAA,GAINA,aAAiB,aACZ,CACL,MAAOA,EAAM,QACb,KAAM,IAAA,EAGNA,aAAiB,MACZ,CACL,MAAOA,EAAM,QACb,KAAM,IAAA,EAIH,CACL,MAAO,gBACP,KAAM,IAAA,CAEV,CAEA,MAAM,WAAW,CAAE,OAAAE,CAAA,EAAqC,GAGrD,CACD,MAAMC,EAAM,IAAI,IAAI,OAAO,SAAS,IAAI,EAClCC,EAAeD,EAAI,aAAa,IAAIvC,CAA4B,GAAK,OAkB3E,GAfIwC,IACFD,EAAI,aAAa,OAAOvC,CAA4B,EACpD,OAAO,QAAQ,aAAa,CAAA,EAAI,GAAIuC,EAAI,UAAU,GAIhDC,GAEF,KAAK,UAAUvC,EAA2BuC,EAAc,CACtD,OAAQ,IAAU,GAAK,EAAA,CACxB,EAGwBR,EAAQ,IAAI/B,CAAyB,GAEtC,CAAC+B,EAAQ,IAAIjC,CAAmB,EAAG,CAC3D,MAAM0C,EAAS,MAAM,KAAK,eAAe,CAAE,OAAAH,EAAQ,EAAE,MAAM,KAAK,kBAAkB,EAClF,GAAI,UAAWG,EAAQ,OAAOA,CAChC,CAEA,MAAMN,EAAiB,KAAK,kBAAA,EAE5B,GAAI,CAACA,EACH,MAAO,CACL,MAAO,KACP,KAAM,IAAA,EAIV,GAAIlB,EAAYkB,EAAe,IAAKjC,CAAyB,EAAG,CAC9D,MAAMuC,EAAS,MAAM,KAAK,iBAAiB,MAAM,KAAK,kBAAkB,EACxE,GAAI,UAAWA,EAAQ,OAAOA,CAChC,CAEA,MAAMA,EAAS,MAAM,KAAK,OAAO,KAAK,aAAa,MAAM,KAAK,kBAAkB,EAChF,MAAI,UAAWA,EAAeA,EAEvB,CACL,MAAO,KACP,KAAMA,EAAO,IAAA,CAEjB,CAEA,iBAAkB,CAChB,MAAMC,EAAkB,IAAI,gBAC5B,IAAIC,EAAW,GACXC,EAA2B,KAE/B,MAAMC,EAAgB,IAAM,CAC1BF,EAAW,GACP,KAAK,mBACP,KAAK,iBAAA,EACL,KAAK,iBAAmB,KAE5B,EACMG,EAAiB,IAAM,CAC3BH,EAAW,EACb,EAEA,OAAO,iBAAiB,SAAUE,CAAa,EAC/C,OAAO,iBAAiB,UAAWC,CAAc,EAEjD,MAAMC,EAAU,IAAM,CAGhBH,IAAc,OAChB,OAAO,aAAaA,CAAS,EAC7BA,EAAY,MAGd,MAAMT,EAAiB,KAAK,kBAAA,EAE5B,GAAI,CAACA,GAAkBlB,EAAYkB,EAAe,IAAK,CAAC,EAAG,OAG3D,MAAMa,EAAiBrC,EAAsBwB,EAAe,IAAKjC,CAAyB,EAK1F,GAAI8C,EAAiB,EACnB,OAIF,MAAMC,EAAY,SAAY,CAI5B,GAFAL,EAAY,KAER,CAACD,EAAU,CAEb,KAAK,iBAAmBM,EACxB,MACF,CAEA,MAAMR,EAAS,MAAM,KAAK,eAAe,CAAE,OAAQC,EAAgB,OAAQ,EAE3E,GAAI,UAAWD,EAAQ,CAGrB,GAAIA,EAAO,QAAU,UACnB,OAGF,KAAK,MAAM,SAAS,CAClB,OAAQ,QACR,KAAM,KACN,MAAOA,EAAO,KAAA,CACf,EACD,MACF,MAEEM,EAAA,CAEJ,EAEAH,EAAY,OAAO,WAAWK,EAAWD,CAAc,CACzD,EAEA,OAAAD,EAAA,EAEO,IAAM,CACPH,GACF,OAAO,aAAaA,CAAS,EAE/BF,EAAgB,MAAA,EAChB,OAAO,oBAAoB,SAAUG,CAAa,EAClD,OAAO,oBAAoB,UAAWC,CAAc,CACtD,CACF,CAEA,MAAc,eAAe,CAAE,OAAAR,CAAA,EAAqC,GAAI,CActE,GAbIA,IAEF,KAAK,kBAAkB,IAAIA,CAAM,EAEjCA,EAAO,iBAAiB,QAAS,IAAM,CACrC,KAAK,kBAAkB,OAAOA,CAAM,EAEhC,KAAK,kBAAkB,OAAS,GAClC,KAAK,iCAAiC,MAAA,CAE1C,CAAC,GAGC,KAAK,eACP,OAAO,KAAK,eAGd,KAAK,gCAAkC,IAAI,gBAE3C,KAAK,gCAAgC,OAAO,iBAAiB,QAAS,IAAM,CAC1E,KAAK,eAAiB,KACtB,KAAK,gCAAkC,KACvC,KAAK,kBAAkB,MAAA,CACzB,CAAC,EAGD,MAAME,EAAeR,EAAQ,IAAI/B,CAAyB,EAO1D,KAAK,eAAiB,KAAK,YAAY,KACpC,QACC,CAAE,SAAUuC,CAAA,EACZ,CACE,OAAQ,KAAK,gCAAgC,MAAA,CAC/C,EAED,KAAMU,IAGDA,EAAS,cACX,KAAK,UAAUnD,EAAqBmD,EAAS,aAAc,CACzD,OAAQ,IAAU,GAAK,EAAA,CACxB,EAEIA,EACR,EACA,MAAM,KAAK,kBAAkB,EAEhC,GAAI,CACF,OAAO,MAAM,KAAK,cACpB,QAAA,CACE,KAAK,eAAiB,KACtB,KAAK,gCAAkC,KACvC,KAAK,kBAAkB,MAAA,CACzB,CACF,CACF"}