@blimu/react 1.1.1 → 1.2.0

package/README.md

@@ -269,7 +269,7 @@ function Component() {
     isLoading,          // Boolean
     login,              // (returnUrl?) => void
     logout,             // () => Promise<void>
-    getToken,           // (options) => Promise<string | null>
+    getToken,           // (options) => Promise<string | undefined>
   } = useAuth();
 }
 ```

package/dist/client/auth.service.cjs

@@ -51,10 +51,10 @@ class AuthSessionService {
     if (options.maxAge !== void 0) {
       cookieOptions.expires = options.maxAge / (24 * 60 * 60);
     }
-    js_cookie.set(name, value, cookieOptions);
+    js_cookie.default.set(name, value, cookieOptions);
   }
   getSessionPayload() {
-    const token = js_cookie.get(SESSION_COOKIE_NAME);
+    const token = js_cookie.default.get(SESSION_COOKIE_NAME);
     if (!token) {
       return null;
     }
@@ -68,17 +68,17 @@ class AuthSessionService {
     }
     if (this.refreshPromise) {
       await this.refreshPromise;
-      return js_cookie.get(SESSION_COOKIE_NAME);
+      return js_cookie.default.get(SESSION_COOKIE_NAME);
     }
     if (isExpiredIn(sessionPayload.exp, 0)) {
       await this.refreshSession();
     }
-    return js_cookie.get(SESSION_COOKIE_NAME);
+    return js_cookie.default.get(SESSION_COOKIE_NAME);
   }
   async handleRequestError(error) {
     if (error instanceof client.BlimuError && [401, 500].includes(error.status)) {
-      js_cookie.remove(SESSION_COOKIE_NAME);
-      js_cookie.remove(LOCALHOST_JWT_COOKIE_NAME);
+      js_cookie.default.remove(SESSION_COOKIE_NAME);
+      js_cookie.default.remove(LOCALHOST_JWT_COOKIE_NAME);
       return {
         error: error.message,
         user: null
@@ -113,9 +113,8 @@ class AuthSessionService {
         // 30 days
       });
     }
-    const localhostJWTCookie = js_cookie.get(LOCALHOST_JWT_COOKIE_NAME);
-    console.log("localhostJWTCookie", localhostJWTCookie);
-    if (localhostJWTCookie && !js_cookie.get(SESSION_COOKIE_NAME)) {
+    const localhostJWTCookie = js_cookie.default.get(LOCALHOST_JWT_COOKIE_NAME);
+    if (localhostJWTCookie && !js_cookie.default.get(SESSION_COOKIE_NAME)) {
       const result2 = await this.refreshSession({ signal }).catch(this.handleRequestError);
       if ("error" in result2) return result2;
     }
@@ -216,7 +215,7 @@ class AuthSessionService {
       this.refreshingSignalAbortController = null;
       this.refreshingSignals.clear();
     });
-    const localhostJWT = !this.isLive ? js_cookie.get(LOCALHOST_JWT_COOKIE_NAME) : void 0;
+    const localhostJWT = !this.isLive ? js_cookie.default.get(LOCALHOST_JWT_COOKIE_NAME) : void 0;
     const queryParams = {};
     if (localhostJWT) {
       queryParams.__lh_jwt = localhostJWT;

package/dist/client/auth.service.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.cjs","sources":["../../src/client/auth.service.ts"],"sourcesContent":["import { Blimu, BlimuError } from '@blimu/client';\nimport type { RefreshResponse } from '@blimu/client/schema';\nimport Cookies from 'js-cookie';\nimport { jwtDecode } from 'jwt-decode';\n\nimport type { AuthState, User } from '../types';\nimport { ExternalStore } from './external-store';\n\nexport const SESSION_COOKIE_NAME = '__bli_session';\nexport const LOCALHOST_JWT_URL_PARAM_NAME = '__lh_jwt';\nexport const LOCALHOST_JWT_COOKIE_NAME = '__lh_jwt';\nexport const SESSION_EXPIRATION_BUFFER = 10;\n\n/**\n * Time conversion utilities\n * JWT tokens use seconds (Unix timestamp), JavaScript Date uses milliseconds\n */\nconst SECONDS_TO_MS = 1000;\n\n/**\n * Convert seconds to milliseconds\n */\nconst secondsToMilliseconds = (seconds: number): number => Math.floor(seconds * SECONDS_TO_MS);\n\n/**\n * Convert milliseconds to seconds\n */\nconst millisecondsToSeconds = (ms: number): number => Math.floor(ms / SECONDS_TO_MS);\n\n/**\n * Get current time in seconds (Unix timestamp)\n */\nconst nowInSeconds = (): number => millisecondsToSeconds(Date.now());\n\n/**\n * Convert JWT expiration time (seconds) to milliseconds\n */\nconst jwtExpToMilliseconds = (exp: number): number => secondsToMilliseconds(exp);\n\n/**\n * Calculate timeout delay in milliseconds for refreshing before expiration\n * @param expirationSeconds - JWT exp claim in seconds\n * @param bufferSeconds - Buffer time in seconds before expiration\n * @returns Timeout delay in milliseconds\n */\nconst calculateTimeoutDelay = (expirationSeconds: number, bufferSeconds: number): number => {\n  const expirationMS = jwtExpToMilliseconds(expirationSeconds);\n  const bufferMS = secondsToMilliseconds(bufferSeconds);\n  const nowMS = Date.now();\n  return Math.max(expirationMS - bufferMS - nowMS, 0);\n};\n\n/**\n * Check if a JWT expiration time (in seconds) is expired or will expire within the buffer\n * @param expiration - JWT exp claim in seconds (Unix timestamp)\n * @param buffer - Buffer time in seconds before expiration to consider it expired\n * @returns true if expired or will expire within buffer\n */\nexport const isExpiredIn = (expiration: number, buffer: number): boolean => {\n  const now = nowInSeconds();\n  return expiration - buffer < now;\n};\n\nexport class AuthSessionService {\n  private pendingRefresher: (() => void) | null = null;\n  private refreshPromise: Promise<RefreshResponse | { error: string; user: null }> | null = null;\n  private refreshingSignals: Set<AbortSignal> = new Set();\n  private refreshingSignalAbortController: AbortController | null = null;\n  // A local client that doesn't call getSessionToken() which calls refreshSession().\n  private localClient: Blimu;\n\n  constructor(\n    private readonly isLive: boolean,\n    private readonly client: Blimu,\n    private readonly store: ExternalStore<AuthState>,\n    baseURL: string,\n    publishableKey: string,\n  ) {\n    this.localClient = new Blimu({\n      baseURL,\n      credentials: 'include',\n      headers: { 'x-blimu-publishable-key': publishableKey },\n    });\n    this.handleRequestError = this.handleRequestError.bind(this);\n  }\n\n  /**\n   * Set cookie with appropriate security settings based on environment\n   */\n  private setCookie(name: string, value: string, options: { maxAge?: number } = {}): void {\n    const cookieOptions: Cookies.CookieAttributes = {\n      secure: this.isLive, // true for live environments, false for localhost\n      sameSite: 'lax',\n      path: '/',\n    };\n\n    if (options.maxAge !== undefined) {\n      cookieOptions.expires = options.maxAge / (24 * 60 * 60); // Convert seconds to days\n    }\n\n    Cookies.set(name, value, cookieOptions);\n  }\n\n  getSessionPayload(): {\n    sub: string;\n    environmentId: string;\n    type: string;\n    iat: number;\n    exp: number;\n  } | null {\n    const token = Cookies.get(SESSION_COOKIE_NAME);\n\n    if (!token) {\n      return null;\n    }\n\n    const decoded = jwtDecode<{\n      sub: string;\n      environmentId: string;\n      type: string;\n      iat: number;\n      exp: number;\n    }>(token);\n\n    return decoded;\n  }\n\n  async getSessionToken(): Promise<string | undefined> {\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return undefined;\n    }\n\n    // If a refresh is already in progress, wait for it to complete\n    // This prevents infinite recursion when refreshSession() calls client.auth.refresh()\n    // which triggers accessToken() which calls getSessionToken()\n    if (this.refreshPromise) {\n      await this.refreshPromise;\n      // After refresh completes, return the updated token from cookie\n      return Cookies.get(SESSION_COOKIE_NAME);\n    }\n\n    if (isExpiredIn(sessionPayload.exp, 0)) {\n      await this.refreshSession();\n    }\n\n    return Cookies.get(SESSION_COOKIE_NAME);\n  }\n\n  async handleRequestError(error: unknown): Promise<{ error: string; user: null }> {\n    if (error instanceof BlimuError && [401, 500].includes(error.status)) {\n      Cookies.remove(SESSION_COOKIE_NAME);\n      Cookies.remove(LOCALHOST_JWT_COOKIE_NAME);\n\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    if (error instanceof DOMException)\n      return {\n        error: error.message,\n        user: null,\n      };\n\n    if (error instanceof Error) {\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    return {\n      error: 'unknown error',\n      user: null,\n    };\n  }\n\n  async initialize({ signal }: { signal?: AbortSignal } = {}): Promise<{\n    error: string | null;\n    user: User | null;\n  }> {\n    const url = new URL(window.location.href);\n    const localhostJWT = url.searchParams.get(LOCALHOST_JWT_URL_PARAM_NAME) ?? undefined;\n\n    // Clean up URL parameters immediately to prevent re-processing on re-renders\n    if (localhostJWT) {\n      url.searchParams.delete(LOCALHOST_JWT_URL_PARAM_NAME);\n      window.history.replaceState({}, '', url.toString());\n    }\n\n    // Handle localhost JWT from URL parameter\n    if (localhostJWT) {\n      // Set localhost JWT cookie on customer app domain\n      this.setCookie(LOCALHOST_JWT_COOKIE_NAME, localhostJWT, {\n        maxAge: 30 * 24 * 60 * 60, // 30 days\n      });\n    }\n\n    const localhostJWTCookie = Cookies.get(LOCALHOST_JWT_COOKIE_NAME);\n\n    console.log('localhostJWTCookie', localhostJWTCookie);\n\n    if (localhostJWTCookie && !Cookies.get(SESSION_COOKIE_NAME)) {\n      const result = await this.refreshSession({ signal }).catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return {\n        error: null,\n        user: null,\n      };\n    }\n\n    if (isExpiredIn(sessionPayload.exp, SESSION_EXPIRATION_BUFFER)) {\n      const result = await this.refreshSession().catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const result = await this.client.auth.getSession().catch(this.handleRequestError);\n    if ('error' in result) return result;\n\n    return {\n      error: null,\n      user: result.user,\n    };\n  }\n\n  scheduleRefresh() {\n    const abortController = new AbortController();\n    let isOnline = true;\n    let timeoutId: number | null = null;\n\n    const onlineHandler = () => {\n      isOnline = true;\n      if (this.pendingRefresher) {\n        this.pendingRefresher();\n        this.pendingRefresher = null;\n      }\n    };\n    const offlineHandler = () => {\n      isOnline = false;\n    };\n\n    window.addEventListener('online', onlineHandler);\n    window.addEventListener('offline', offlineHandler);\n\n    const refresh = () => {\n      // Clear any existing timeout before scheduling a new one\n      // This prevents infinite loops when refresh() is called recursively\n      if (timeoutId !== null) {\n        window.clearTimeout(timeoutId);\n        timeoutId = null;\n      }\n\n      const sessionPayload = this.getSessionPayload();\n\n      if (!sessionPayload || isExpiredIn(sessionPayload.exp, 0)) return;\n\n      // Calculate timeout delay: refresh SESSION_EXPIRATION_BUFFER seconds before expiration\n      const timeoutDelayMS = calculateTimeoutDelay(sessionPayload.exp, SESSION_EXPIRATION_BUFFER);\n\n      // Prevent scheduling if timeout is negative (token already expired)\n      // Allow 0ms delays to handle edge cases where we're exactly at the refresh point\n      // This prevents immediate re-scheduling that could cause infinite loops\n      if (timeoutDelayMS < 0) {\n        return;\n      }\n\n      // Having this function outside timeout, allows us to call refresh immediately when back online\n      const refresher = async () => {\n        // Clear timeoutId since we're executing now\n        timeoutId = null;\n\n        if (!isOnline) {\n          // Keep closure of refresh function alive\n          this.pendingRefresher = refresher;\n          return;\n        }\n\n        const result = await this.refreshSession({ signal: abortController.signal });\n\n        if ('error' in result) {\n          // If the refresh was aborted (e.g., due to React strict mode unmounting),\n          // don't treat it as an error - just return and let the component remount handle it\n          if (result.error === 'aborted') {\n            return;\n          }\n          // For real errors, update the store\n          this.store.setState({\n            status: 'error',\n            user: null,\n            error: result.error,\n          });\n          return;\n        } else {\n          // After successful refresh, schedule the next refresh with the new token\n          refresh();\n        }\n      };\n\n      timeoutId = window.setTimeout(refresher, timeoutDelayMS);\n    };\n\n    refresh();\n\n    return () => {\n      if (timeoutId) {\n        window.clearTimeout(timeoutId);\n      }\n      abortController.abort();\n      window.removeEventListener('online', onlineHandler);\n      window.removeEventListener('offline', offlineHandler);\n    };\n  }\n\n  private async refreshSession({ signal }: { signal?: AbortSignal } = {}) {\n    if (signal) {\n      // Add signal to tracking set (was using .has() instead of .add() - bug fix)\n      this.refreshingSignals.add(signal);\n\n      signal.addEventListener('abort', () => {\n        this.refreshingSignals.delete(signal);\n\n        if (this.refreshingSignals.size === 0) {\n          this.refreshingSignalAbortController?.abort();\n        }\n      });\n    }\n\n    if (this.refreshPromise) {\n      return this.refreshPromise;\n    }\n\n    this.refreshingSignalAbortController = new AbortController();\n\n    this.refreshingSignalAbortController.signal.addEventListener('abort', () => {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    });\n\n    // Get localhost_jwt from cookie to send as query parameter (only for non-live environments)\n    const localhostJWT = !this.isLive ? Cookies.get(LOCALHOST_JWT_COOKIE_NAME) : undefined;\n\n    // Build query parameters - only include __lh_jwt for non-live environments when cookie exists\n    const queryParams: { __lh_jwt?: string } = {};\n    if (localhostJWT) {\n      queryParams.__lh_jwt = localhostJWT;\n    }\n\n    // Use local client to avoid infinite recursion. Regular client calls getSessionToken() which calls refreshSession().\n    // There are hacks to avoid infinite recursion, but they are not reliable.\n    // The localhost_jwt is sent as a query parameter only in non-live environments\n    // Note: Type assertion needed because the generated SDK type doesn't include 'query' in RequestInit,\n    // but the underlying CoreClient.request() method does support it\n    this.refreshPromise = this.localClient.auth\n      .refresh(queryParams, {\n        signal: this.refreshingSignalAbortController.signal,\n      })\n      .then((response) => {\n        // Update cookie with new session token from response body\n        // Server also sets it via Set-Cookie header on auth domain, but we set it manually on customer domain\n        if (!this.isLive) {\n          this.setCookie(SESSION_COOKIE_NAME, response.sessionToken, {\n            maxAge: 30 * 24 * 60 * 60, // 30 days\n          });\n        }\n        return response;\n      })\n      .catch(this.handleRequestError);\n\n    try {\n      return await this.refreshPromise;\n    } finally {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    }\n  }\n}\n"],"names":["client","Blimu","Cookies","jwtDecode","BlimuError","result"],"mappings":";;;;;AAQO,MAAM,sBAAsB;AAC5B,MAAM,+BAA+B;AACrC,MAAM,4BAA4B;AAClC,MAAM,4BAA4B;AAMzC,MAAM,gBAAgB;AAKtB,MAAM,wBAAwB,CAAC,YAA4B,KAAK,MAAM,UAAU,aAAa;AAK7F,MAAM,wBAAwB,CAAC,OAAuB,KAAK,MAAM,KAAK,aAAa;AAKnF,MAAM,eAAe,MAAc,sBAAsB,KAAK,KAAK;AAKnE,MAAM,uBAAuB,CAAC,QAAwB,sBAAsB,GAAG;AAQ/E,MAAM,wBAAwB,CAAC,mBAA2B,kBAAkC;AAC1F,QAAM,eAAe,qBAAqB,iBAAiB;AAC3D,QAAM,WAAW,sBAAsB,aAAa;AACpD,QAAM,QAAQ,KAAK,IAAA;AACnB,SAAO,KAAK,IAAI,eAAe,WAAW,OAAO,CAAC;AACpD;AAQO,MAAM,cAAc,CAAC,YAAoB,WAA4B;AAC1E,QAAM,MAAM,aAAA;AACZ,SAAO,aAAa,SAAS;AAC/B;AAEO,MAAM,mBAAmB;AAAA,EAQ9B,YACmB,QACAA,UACA,OACjB,SACA,gBACA;AALiB,SAAA,SAAA;AACA,SAAA,SAAAA;AACA,SAAA,QAAA;AAVnB,SAAQ,mBAAwC;AAChD,SAAQ,iBAAkF;AAC1F,SAAQ,wCAA0C,IAAA;AAClD,SAAQ,kCAA0D;AAWhE,SAAK,cAAc,IAAIC,aAAM;AAAA,MAC3B;AAAA,MACA,aAAa;AAAA,MACb,SAAS,EAAE,2BAA2B,eAAA;AAAA,IAAe,CACtD;AACD,SAAK,qBAAqB,KAAK,mBAAmB,KAAK,IAAI;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA,EAKQ,UAAU,MAAc,OAAe,UAA+B,CAAA,GAAU;AACtF,UAAM,gBAA0C;AAAA,MAC9C,QAAQ,KAAK;AAAA;AAAA,MACb,UAAU;AAAA,MACV,MAAM;AAAA,IAAA;AAGR,QAAI,QAAQ,WAAW,QAAW;AAChC,oBAAc,UAAU,QAAQ,UAAU,KAAK,KAAK;AAAA,IACtD;AAEAC,cAAQ,IAAI,MAAM,OAAO,aAAa;AAAA,EACxC;AAAA,EAEA,oBAMS;AACP,UAAM,QAAQA,UAAQ,IAAI,mBAAmB;AAE7C,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAEA,UAAM,UAAUC,MAAAA,UAMb,KAAK;AAER,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBAA+C;AACnD,UAAM,iBAAiB,KAAK,kBAAA;AAE5B,QAAI,CAAC,gBAAgB;AACnB,aAAO;AAAA,IACT;AAKA,QAAI,KAAK,gBAAgB;AACvB,YAAM,KAAK;AAEX,aAAOD,UAAQ,IAAI,mBAAmB;AAAA,IACxC;AAEA,QAAI,YAAY,eAAe,KAAK,CAAC,GAAG;AACtC,YAAM,KAAK,eAAA;AAAA,IACb;AAEA,WAAOA,UAAQ,IAAI,mBAAmB;AAAA,EACxC;AAAA,EAEA,MAAM,mBAAmB,OAAwD;AAC/E,QAAI,iBAAiBE,OAAAA,cAAc,CAAC,KAAK,GAAG,EAAE,SAAS,MAAM,MAAM,GAAG;AACpEF,gBAAQ,OAAO,mBAAmB;AAClCA,gBAAQ,OAAO,yBAAyB;AAExC,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,QAAI,iBAAiB;AACnB,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAGV,QAAI,iBAAiB,OAAO;AAC1B,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,IAAA;AAAA,EAEV;AAAA,EAEA,MAAM,WAAW,EAAE,OAAA,IAAqC,IAGrD;AACD,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,UAAM,eAAe,IAAI,aAAa,IAAI,4BAA4B,KAAK;AAG3E,QAAI,cAAc;AAChB,UAAI,aAAa,OAAO,4BAA4B;AACpD,aAAO,QAAQ,aAAa,CAAA,GAAI,IAAI,IAAI,UAAU;AAAA,IACpD;AAGA,QAAI,cAAc;AAEhB,WAAK,UAAU,2BAA2B,cAAc;AAAA,QACtD,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,MAAA,CACxB;AAAA,IACH;AAEA,UAAM,qBAAqBA,UAAQ,IAAI,yBAAyB;AAEhE,YAAQ,IAAI,sBAAsB,kBAAkB;AAEpD,QAAI,sBAAsB,CAACA,UAAQ,IAAI,mBAAmB,GAAG;AAC3D,YAAMG,UAAS,MAAM,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,KAAK,kBAAkB;AAClF,UAAI,WAAWA,QAAQ,QAAOA;AAAAA,IAChC;AAEA,UAAM,iBAAiB,KAAK,kBAAA;AAE5B,QAAI,CAAC,gBAAgB;AACnB,aAAO;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,QAAI,YAAY,eAAe,KAAK,yBAAyB,GAAG;AAC9D,YAAMA,UAAS,MAAM,KAAK,iBAAiB,MAAM,KAAK,kBAAkB;AACxE,UAAI,WAAWA,QAAQ,QAAOA;AAAAA,IAChC;AAEA,UAAM,SAAS,MAAM,KAAK,OAAO,KAAK,aAAa,MAAM,KAAK,kBAAkB;AAChF,QAAI,WAAW,OAAQ,QAAO;AAE9B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM,OAAO;AAAA,IAAA;AAAA,EAEjB;AAAA,EAEA,kBAAkB;AAChB,UAAM,kBAAkB,IAAI,gBAAA;AAC5B,QAAI,WAAW;AACf,QAAI,YAA2B;AAE/B,UAAM,gBAAgB,MAAM;AAC1B,iBAAW;AACX,UAAI,KAAK,kBAAkB;AACzB,aAAK,iBAAA;AACL,aAAK,mBAAmB;AAAA,MAC1B;AAAA,IACF;AACA,UAAM,iBAAiB,MAAM;AAC3B,iBAAW;AAAA,IACb;AAEA,WAAO,iBAAiB,UAAU,aAAa;AAC/C,WAAO,iBAAiB,WAAW,cAAc;AAEjD,UAAM,UAAU,MAAM;AAGpB,UAAI,cAAc,MAAM;AACtB,eAAO,aAAa,SAAS;AAC7B,oBAAY;AAAA,MACd;AAEA,YAAM,iBAAiB,KAAK,kBAAA;AAE5B,UAAI,CAAC,kBAAkB,YAAY,eAAe,KAAK,CAAC,EAAG;AAG3D,YAAM,iBAAiB,sBAAsB,eAAe,KAAK,yBAAyB;AAK1F,UAAI,iBAAiB,GAAG;AACtB;AAAA,MACF;AAGA,YAAM,YAAY,YAAY;AAE5B,oBAAY;AAEZ,YAAI,CAAC,UAAU;AAEb,eAAK,mBAAmB;AACxB;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,KAAK,eAAe,EAAE,QAAQ,gBAAgB,QAAQ;AAE3E,YAAI,WAAW,QAAQ;AAGrB,cAAI,OAAO,UAAU,WAAW;AAC9B;AAAA,UACF;AAEA,eAAK,MAAM,SAAS;AAAA,YAClB,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,OAAO,OAAO;AAAA,UAAA,CACf;AACD;AAAA,QACF,OAAO;AAEL,kBAAA;AAAA,QACF;AAAA,MACF;AAEA,kBAAY,OAAO,WAAW,WAAW,cAAc;AAAA,IACzD;AAEA,YAAA;AAEA,WAAO,MAAM;AACX,UAAI,WAAW;AACb,eAAO,aAAa,SAAS;AAAA,MAC/B;AACA,sBAAgB,MAAA;AAChB,aAAO,oBAAoB,UAAU,aAAa;AAClD,aAAO,oBAAoB,WAAW,cAAc;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,EAAE,OAAA,IAAqC,IAAI;AACtE,QAAI,QAAQ;AAEV,WAAK,kBAAkB,IAAI,MAAM;AAEjC,aAAO,iBAAiB,SAAS,MAAM;AACrC,aAAK,kBAAkB,OAAO,MAAM;AAEpC,YAAI,KAAK,kBAAkB,SAAS,GAAG;AACrC,eAAK,iCAAiC,MAAA;AAAA,QACxC;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,KAAK,gBAAgB;AACvB,aAAO,KAAK;AAAA,IACd;AAEA,SAAK,kCAAkC,IAAI,gBAAA;AAE3C,SAAK,gCAAgC,OAAO,iBAAiB,SAAS,MAAM;AAC1E,WAAK,iBAAiB;AACtB,WAAK,kCAAkC;AACvC,WAAK,kBAAkB,MAAA;AAAA,IACzB,CAAC;AAGD,UAAM,eAAe,CAAC,KAAK,SAASH,UAAQ,IAAI,yBAAyB,IAAI;AAG7E,UAAM,cAAqC,CAAA;AAC3C,QAAI,cAAc;AAChB,kBAAY,WAAW;AAAA,IACzB;AAOA,SAAK,iBAAiB,KAAK,YAAY,KACpC,QAAQ,aAAa;AAAA,MACpB,QAAQ,KAAK,gCAAgC;AAAA,IAAA,CAC9C,EACA,KAAK,CAAC,aAAa;AAGlB,UAAI,CAAC,KAAK,QAAQ;AAChB,aAAK,UAAU,qBAAqB,SAAS,cAAc;AAAA,UACzD,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,QAAA,CACxB;AAAA,MACH;AACA,aAAO;AAAA,IACT,CAAC,EACA,MAAM,KAAK,kBAAkB;AAEhC,QAAI;AACF,aAAO,MAAM,KAAK;AAAA,IACpB,UAAA;AACE,WAAK,iBAAiB;AACtB,WAAK,kCAAkC;AACvC,WAAK,kBAAkB,MAAA;AAAA,IACzB;AAAA,EACF;AACF;;;;;;;"}
+{"version":3,"file":"auth.service.cjs","sources":["../../src/client/auth.service.ts"],"sourcesContent":["import { Blimu, BlimuError } from '@blimu/client';\nimport type { RefreshResponse } from '@blimu/client/schema';\nimport Cookies from 'js-cookie';\nimport { jwtDecode } from 'jwt-decode';\n\nimport type { AuthState, User } from '../types';\nimport { ExternalStore } from './external-store';\n\nexport const SESSION_COOKIE_NAME = '__bli_session';\nexport const LOCALHOST_JWT_URL_PARAM_NAME = '__lh_jwt';\nexport const LOCALHOST_JWT_COOKIE_NAME = '__lh_jwt';\nexport const SESSION_EXPIRATION_BUFFER = 10;\n\n/**\n * Time conversion utilities\n * JWT tokens use seconds (Unix timestamp), JavaScript Date uses milliseconds\n */\nconst SECONDS_TO_MS = 1000;\n\n/**\n * Convert seconds to milliseconds\n */\nconst secondsToMilliseconds = (seconds: number): number => Math.floor(seconds * SECONDS_TO_MS);\n\n/**\n * Convert milliseconds to seconds\n */\nconst millisecondsToSeconds = (ms: number): number => Math.floor(ms / SECONDS_TO_MS);\n\n/**\n * Get current time in seconds (Unix timestamp)\n */\nconst nowInSeconds = (): number => millisecondsToSeconds(Date.now());\n\n/**\n * Convert JWT expiration time (seconds) to milliseconds\n */\nconst jwtExpToMilliseconds = (exp: number): number => secondsToMilliseconds(exp);\n\n/**\n * Calculate timeout delay in milliseconds for refreshing before expiration\n * @param expirationSeconds - JWT exp claim in seconds\n * @param bufferSeconds - Buffer time in seconds before expiration\n * @returns Timeout delay in milliseconds\n */\nconst calculateTimeoutDelay = (expirationSeconds: number, bufferSeconds: number): number => {\n  const expirationMS = jwtExpToMilliseconds(expirationSeconds);\n  const bufferMS = secondsToMilliseconds(bufferSeconds);\n  const nowMS = Date.now();\n  return Math.max(expirationMS - bufferMS - nowMS, 0);\n};\n\n/**\n * Check if a JWT expiration time (in seconds) is expired or will expire within the buffer\n * @param expiration - JWT exp claim in seconds (Unix timestamp)\n * @param buffer - Buffer time in seconds before expiration to consider it expired\n * @returns true if expired or will expire within buffer\n */\nexport const isExpiredIn = (expiration: number, buffer: number): boolean => {\n  const now = nowInSeconds();\n  return expiration - buffer < now;\n};\n\nexport class AuthSessionService {\n  private pendingRefresher: (() => void) | null = null;\n  private refreshPromise: Promise<RefreshResponse | { error: string; user: null }> | null = null;\n  private refreshingSignals: Set<AbortSignal> = new Set();\n  private refreshingSignalAbortController: AbortController | null = null;\n  // A local client that doesn't call getSessionToken() which calls refreshSession().\n  private localClient: Blimu;\n\n  constructor(\n    private readonly isLive: boolean,\n    private readonly client: Blimu,\n    private readonly store: ExternalStore<AuthState>,\n    baseURL: string,\n    publishableKey: string,\n  ) {\n    this.localClient = new Blimu({\n      baseURL,\n      credentials: 'include',\n      headers: { 'x-blimu-publishable-key': publishableKey },\n    });\n    this.handleRequestError = this.handleRequestError.bind(this);\n  }\n\n  /**\n   * Set cookie with appropriate security settings based on environment\n   */\n  private setCookie(name: string, value: string, options: { maxAge?: number } = {}): void {\n    const cookieOptions: Cookies.CookieAttributes = {\n      secure: this.isLive, // true for live environments, false for localhost\n      sameSite: 'lax',\n      path: '/',\n    };\n\n    if (options.maxAge !== undefined) {\n      cookieOptions.expires = options.maxAge / (24 * 60 * 60); // Convert seconds to days\n    }\n\n    Cookies.set(name, value, cookieOptions);\n  }\n\n  getSessionPayload(): {\n    sub: string;\n    environmentId: string;\n    type: string;\n    iat: number;\n    exp: number;\n  } | null {\n    const token = Cookies.get(SESSION_COOKIE_NAME);\n\n    if (!token) {\n      return null;\n    }\n\n    const decoded = jwtDecode<{\n      sub: string;\n      environmentId: string;\n      type: string;\n      iat: number;\n      exp: number;\n    }>(token);\n\n    return decoded;\n  }\n\n  async getSessionToken(): Promise<string | undefined> {\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return undefined;\n    }\n\n    // If a refresh is already in progress, wait for it to complete\n    // This prevents infinite recursion when refreshSession() calls client.auth.refresh()\n    // which triggers accessToken() which calls getSessionToken()\n    if (this.refreshPromise) {\n      await this.refreshPromise;\n      // After refresh completes, return the updated token from cookie\n      return Cookies.get(SESSION_COOKIE_NAME);\n    }\n\n    if (isExpiredIn(sessionPayload.exp, 0)) {\n      await this.refreshSession();\n    }\n\n    return Cookies.get(SESSION_COOKIE_NAME);\n  }\n\n  async handleRequestError(error: unknown): Promise<{ error: string; user: null }> {\n    if (error instanceof BlimuError && [401, 500].includes(error.status)) {\n      Cookies.remove(SESSION_COOKIE_NAME);\n      Cookies.remove(LOCALHOST_JWT_COOKIE_NAME);\n\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    if (error instanceof DOMException)\n      return {\n        error: error.message,\n        user: null,\n      };\n\n    if (error instanceof Error) {\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    return {\n      error: 'unknown error',\n      user: null,\n    };\n  }\n\n  async initialize({ signal }: { signal?: AbortSignal } = {}): Promise<{\n    error: string | null;\n    user: User | null;\n  }> {\n    const url = new URL(window.location.href);\n    const localhostJWT = url.searchParams.get(LOCALHOST_JWT_URL_PARAM_NAME) ?? undefined;\n\n    // Clean up URL parameters immediately to prevent re-processing on re-renders\n    if (localhostJWT) {\n      url.searchParams.delete(LOCALHOST_JWT_URL_PARAM_NAME);\n      window.history.replaceState({}, '', url.toString());\n    }\n\n    // Handle localhost JWT from URL parameter\n    if (localhostJWT) {\n      // Set localhost JWT cookie on customer app domain\n      this.setCookie(LOCALHOST_JWT_COOKIE_NAME, localhostJWT, {\n        maxAge: 30 * 24 * 60 * 60, // 30 days\n      });\n    }\n\n    const localhostJWTCookie = Cookies.get(LOCALHOST_JWT_COOKIE_NAME);\n\n    if (localhostJWTCookie && !Cookies.get(SESSION_COOKIE_NAME)) {\n      const result = await this.refreshSession({ signal }).catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return {\n        error: null,\n        user: null,\n      };\n    }\n\n    if (isExpiredIn(sessionPayload.exp, SESSION_EXPIRATION_BUFFER)) {\n      const result = await this.refreshSession().catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const result = await this.client.auth.getSession().catch(this.handleRequestError);\n    if ('error' in result) return result;\n\n    return {\n      error: null,\n      user: result.user,\n    };\n  }\n\n  scheduleRefresh() {\n    const abortController = new AbortController();\n    let isOnline = true;\n    let timeoutId: number | null = null;\n\n    const onlineHandler = () => {\n      isOnline = true;\n      if (this.pendingRefresher) {\n        this.pendingRefresher();\n        this.pendingRefresher = null;\n      }\n    };\n    const offlineHandler = () => {\n      isOnline = false;\n    };\n\n    window.addEventListener('online', onlineHandler);\n    window.addEventListener('offline', offlineHandler);\n\n    const refresh = () => {\n      // Clear any existing timeout before scheduling a new one\n      // This prevents infinite loops when refresh() is called recursively\n      if (timeoutId !== null) {\n        window.clearTimeout(timeoutId);\n        timeoutId = null;\n      }\n\n      const sessionPayload = this.getSessionPayload();\n\n      if (!sessionPayload || isExpiredIn(sessionPayload.exp, 0)) return;\n\n      // Calculate timeout delay: refresh SESSION_EXPIRATION_BUFFER seconds before expiration\n      const timeoutDelayMS = calculateTimeoutDelay(sessionPayload.exp, SESSION_EXPIRATION_BUFFER);\n\n      // Prevent scheduling if timeout is negative (token already expired)\n      // Allow 0ms delays to handle edge cases where we're exactly at the refresh point\n      // This prevents immediate re-scheduling that could cause infinite loops\n      if (timeoutDelayMS < 0) {\n        return;\n      }\n\n      // Having this function outside timeout, allows us to call refresh immediately when back online\n      const refresher = async () => {\n        // Clear timeoutId since we're executing now\n        timeoutId = null;\n\n        if (!isOnline) {\n          // Keep closure of refresh function alive\n          this.pendingRefresher = refresher;\n          return;\n        }\n\n        const result = await this.refreshSession({ signal: abortController.signal });\n\n        if ('error' in result) {\n          // If the refresh was aborted (e.g., due to React strict mode unmounting),\n          // don't treat it as an error - just return and let the component remount handle it\n          if (result.error === 'aborted') {\n            return;\n          }\n          // For real errors, update the store\n          this.store.setState({\n            status: 'error',\n            user: null,\n            error: result.error,\n          });\n          return;\n        } else {\n          // After successful refresh, schedule the next refresh with the new token\n          refresh();\n        }\n      };\n\n      timeoutId = window.setTimeout(refresher, timeoutDelayMS);\n    };\n\n    refresh();\n\n    return () => {\n      if (timeoutId) {\n        window.clearTimeout(timeoutId);\n      }\n      abortController.abort();\n      window.removeEventListener('online', onlineHandler);\n      window.removeEventListener('offline', offlineHandler);\n    };\n  }\n\n  private async refreshSession({ signal }: { signal?: AbortSignal | undefined } = {}) {\n    if (signal) {\n      // Add signal to tracking set (was using .has() instead of .add() - bug fix)\n      this.refreshingSignals.add(signal);\n\n      signal.addEventListener('abort', () => {\n        this.refreshingSignals.delete(signal);\n\n        if (this.refreshingSignals.size === 0) {\n          this.refreshingSignalAbortController?.abort();\n        }\n      });\n    }\n\n    if (this.refreshPromise) {\n      return this.refreshPromise;\n    }\n\n    this.refreshingSignalAbortController = new AbortController();\n\n    this.refreshingSignalAbortController.signal.addEventListener('abort', () => {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    });\n\n    // Get localhost_jwt from cookie to send as query parameter (only for non-live environments)\n    const localhostJWT = !this.isLive ? Cookies.get(LOCALHOST_JWT_COOKIE_NAME) : undefined;\n\n    // Build query parameters - only include __lh_jwt for non-live environments when cookie exists\n    const queryParams: { __lh_jwt?: string } = {};\n    if (localhostJWT) {\n      queryParams.__lh_jwt = localhostJWT;\n    }\n\n    // Use local client to avoid infinite recursion. Regular client calls getSessionToken() which calls refreshSession().\n    // There are hacks to avoid infinite recursion, but they are not reliable.\n    // The localhost_jwt is sent as a query parameter only in non-live environments\n    // Note: Type assertion needed because the generated SDK type doesn't include 'query' in RequestInit,\n    // but the underlying CoreClient.request() method does support it\n    this.refreshPromise = this.localClient.auth\n      .refresh(queryParams, {\n        signal: this.refreshingSignalAbortController.signal,\n      })\n      .then((response) => {\n        // Update cookie with new session token from response body\n        // Server also sets it via Set-Cookie header on auth domain, but we set it manually on customer domain\n        if (!this.isLive) {\n          this.setCookie(SESSION_COOKIE_NAME, response.sessionToken, {\n            maxAge: 30 * 24 * 60 * 60, // 30 days\n          });\n        }\n        return response;\n      })\n      .catch(this.handleRequestError);\n\n    try {\n      return await this.refreshPromise;\n    } finally {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    }\n  }\n}\n"],"names":["client","Blimu","Cookies","jwtDecode","BlimuError","result"],"mappings":";;;;;AAQO,MAAM,sBAAsB;AAC5B,MAAM,+BAA+B;AACrC,MAAM,4BAA4B;AAClC,MAAM,4BAA4B;AAMzC,MAAM,gBAAgB;AAKtB,MAAM,wBAAwB,CAAC,YAA4B,KAAK,MAAM,UAAU,aAAa;AAK7F,MAAM,wBAAwB,CAAC,OAAuB,KAAK,MAAM,KAAK,aAAa;AAKnF,MAAM,eAAe,MAAc,sBAAsB,KAAK,KAAK;AAKnE,MAAM,uBAAuB,CAAC,QAAwB,sBAAsB,GAAG;AAQ/E,MAAM,wBAAwB,CAAC,mBAA2B,kBAAkC;AAC1F,QAAM,eAAe,qBAAqB,iBAAiB;AAC3D,QAAM,WAAW,sBAAsB,aAAa;AACpD,QAAM,QAAQ,KAAK,IAAA;AACnB,SAAO,KAAK,IAAI,eAAe,WAAW,OAAO,CAAC;AACpD;AAQO,MAAM,cAAc,CAAC,YAAoB,WAA4B;AAC1E,QAAM,MAAM,aAAA;AACZ,SAAO,aAAa,SAAS;AAC/B;AAEO,MAAM,mBAAmB;AAAA,EAQ9B,YACmB,QACAA,UACA,OACjB,SACA,gBACA;AALiB,SAAA,SAAA;AACA,SAAA,SAAAA;AACA,SAAA,QAAA;AAVnB,SAAQ,mBAAwC;AAChD,SAAQ,iBAAkF;AAC1F,SAAQ,wCAA0C,IAAA;AAClD,SAAQ,kCAA0D;AAWhE,SAAK,cAAc,IAAIC,aAAM;AAAA,MAC3B;AAAA,MACA,aAAa;AAAA,MACb,SAAS,EAAE,2BAA2B,eAAA;AAAA,IAAe,CACtD;AACD,SAAK,qBAAqB,KAAK,mBAAmB,KAAK,IAAI;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA,EAKQ,UAAU,MAAc,OAAe,UAA+B,CAAA,GAAU;AACtF,UAAM,gBAA0C;AAAA,MAC9C,QAAQ,KAAK;AAAA;AAAA,MACb,UAAU;AAAA,MACV,MAAM;AAAA,IAAA;AAGR,QAAI,QAAQ,WAAW,QAAW;AAChC,oBAAc,UAAU,QAAQ,UAAU,KAAK,KAAK;AAAA,IACtD;AAEAC,cAAAA,QAAQ,IAAI,MAAM,OAAO,aAAa;AAAA,EACxC;AAAA,EAEA,oBAMS;AACP,UAAM,QAAQA,UAAAA,QAAQ,IAAI,mBAAmB;AAE7C,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAEA,UAAM,UAAUC,MAAAA,UAMb,KAAK;AAER,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBAA+C;AACnD,UAAM,iBAAiB,KAAK,kBAAA;AAE5B,QAAI,CAAC,gBAAgB;AACnB,aAAO;AAAA,IACT;AAKA,QAAI,KAAK,gBAAgB;AACvB,YAAM,KAAK;AAEX,aAAOD,UAAAA,QAAQ,IAAI,mBAAmB;AAAA,IACxC;AAEA,QAAI,YAAY,eAAe,KAAK,CAAC,GAAG;AACtC,YAAM,KAAK,eAAA;AAAA,IACb;AAEA,WAAOA,UAAAA,QAAQ,IAAI,mBAAmB;AAAA,EACxC;AAAA,EAEA,MAAM,mBAAmB,OAAwD;AAC/E,QAAI,iBAAiBE,OAAAA,cAAc,CAAC,KAAK,GAAG,EAAE,SAAS,MAAM,MAAM,GAAG;AACpEF,gBAAAA,QAAQ,OAAO,mBAAmB;AAClCA,gBAAAA,QAAQ,OAAO,yBAAyB;AAExC,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,QAAI,iBAAiB;AACnB,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAGV,QAAI,iBAAiB,OAAO;AAC1B,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,IAAA;AAAA,EAEV;AAAA,EAEA,MAAM,WAAW,EAAE,OAAA,IAAqC,IAGrD;AACD,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,UAAM,eAAe,IAAI,aAAa,IAAI,4BAA4B,KAAK;AAG3E,QAAI,cAAc;AAChB,UAAI,aAAa,OAAO,4BAA4B;AACpD,aAAO,QAAQ,aAAa,CAAA,GAAI,IAAI,IAAI,UAAU;AAAA,IACpD;AAGA,QAAI,cAAc;AAEhB,WAAK,UAAU,2BAA2B,cAAc;AAAA,QACtD,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,MAAA,CACxB;AAAA,IACH;AAEA,UAAM,qBAAqBA,UAAAA,QAAQ,IAAI,yBAAyB;AAEhE,QAAI,sBAAsB,CAACA,UAAAA,QAAQ,IAAI,mBAAmB,GAAG;AAC3D,YAAMG,UAAS,MAAM,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,KAAK,kBAAkB;AAClF,UAAI,WAAWA,QAAQ,QAAOA;AAAAA,IAChC;AAEA,UAAM,iBAAiB,KAAK,kBAAA;AAE5B,QAAI,CAAC,gBAAgB;AACnB,aAAO;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,QAAI,YAAY,eAAe,KAAK,yBAAyB,GAAG;AAC9D,YAAMA,UAAS,MAAM,KAAK,iBAAiB,MAAM,KAAK,kBAAkB;AACxE,UAAI,WAAWA,QAAQ,QAAOA;AAAAA,IAChC;AAEA,UAAM,SAAS,MAAM,KAAK,OAAO,KAAK,aAAa,MAAM,KAAK,kBAAkB;AAChF,QAAI,WAAW,OAAQ,QAAO;AAE9B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM,OAAO;AAAA,IAAA;AAAA,EAEjB;AAAA,EAEA,kBAAkB;AAChB,UAAM,kBAAkB,IAAI,gBAAA;AAC5B,QAAI,WAAW;AACf,QAAI,YAA2B;AAE/B,UAAM,gBAAgB,MAAM;AAC1B,iBAAW;AACX,UAAI,KAAK,kBAAkB;AACzB,aAAK,iBAAA;AACL,aAAK,mBAAmB;AAAA,MAC1B;AAAA,IACF;AACA,UAAM,iBAAiB,MAAM;AAC3B,iBAAW;AAAA,IACb;AAEA,WAAO,iBAAiB,UAAU,aAAa;AAC/C,WAAO,iBAAiB,WAAW,cAAc;AAEjD,UAAM,UAAU,MAAM;AAGpB,UAAI,cAAc,MAAM;AACtB,eAAO,aAAa,SAAS;AAC7B,oBAAY;AAAA,MACd;AAEA,YAAM,iBAAiB,KAAK,kBAAA;AAE5B,UAAI,CAAC,kBAAkB,YAAY,eAAe,KAAK,CAAC,EAAG;AAG3D,YAAM,iBAAiB,sBAAsB,eAAe,KAAK,yBAAyB;AAK1F,UAAI,iBAAiB,GAAG;AACtB;AAAA,MACF;AAGA,YAAM,YAAY,YAAY;AAE5B,oBAAY;AAEZ,YAAI,CAAC,UAAU;AAEb,eAAK,mBAAmB;AACxB;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,KAAK,eAAe,EAAE,QAAQ,gBAAgB,QAAQ;AAE3E,YAAI,WAAW,QAAQ;AAGrB,cAAI,OAAO,UAAU,WAAW;AAC9B;AAAA,UACF;AAEA,eAAK,MAAM,SAAS;AAAA,YAClB,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,OAAO,OAAO;AAAA,UAAA,CACf;AACD;AAAA,QACF,OAAO;AAEL,kBAAA;AAAA,QACF;AAAA,MACF;AAEA,kBAAY,OAAO,WAAW,WAAW,cAAc;AAAA,IACzD;AAEA,YAAA;AAEA,WAAO,MAAM;AACX,UAAI,WAAW;AACb,eAAO,aAAa,SAAS;AAAA,MAC/B;AACA,sBAAgB,MAAA;AAChB,aAAO,oBAAoB,UAAU,aAAa;AAClD,aAAO,oBAAoB,WAAW,cAAc;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,EAAE,OAAA,IAAiD,IAAI;AAClF,QAAI,QAAQ;AAEV,WAAK,kBAAkB,IAAI,MAAM;AAEjC,aAAO,iBAAiB,SAAS,MAAM;AACrC,aAAK,kBAAkB,OAAO,MAAM;AAEpC,YAAI,KAAK,kBAAkB,SAAS,GAAG;AACrC,eAAK,iCAAiC,MAAA;AAAA,QACxC;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,KAAK,gBAAgB;AACvB,aAAO,KAAK;AAAA,IACd;AAEA,SAAK,kCAAkC,IAAI,gBAAA;AAE3C,SAAK,gCAAgC,OAAO,iBAAiB,SAAS,MAAM;AAC1E,WAAK,iBAAiB;AACtB,WAAK,kCAAkC;AACvC,WAAK,kBAAkB,MAAA;AAAA,IACzB,CAAC;AAGD,UAAM,eAAe,CAAC,KAAK,SAASH,UAAAA,QAAQ,IAAI,yBAAyB,IAAI;AAG7E,UAAM,cAAqC,CAAA;AAC3C,QAAI,cAAc;AAChB,kBAAY,WAAW;AAAA,IACzB;AAOA,SAAK,iBAAiB,KAAK,YAAY,KACpC,QAAQ,aAAa;AAAA,MACpB,QAAQ,KAAK,gCAAgC;AAAA,IAAA,CAC9C,EACA,KAAK,CAAC,aAAa;AAGlB,UAAI,CAAC,KAAK,QAAQ;AAChB,aAAK,UAAU,qBAAqB,SAAS,cAAc;AAAA,UACzD,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,QAAA,CACxB;AAAA,MACH;AACA,aAAO;AAAA,IACT,CAAC,EACA,MAAM,KAAK,kBAAkB;AAEhC,QAAI;AACF,aAAO,MAAM,KAAK;AAAA,IACpB,UAAA;AACE,WAAK,iBAAiB;AACtB,WAAK,kCAAkC;AACvC,WAAK,kBAAkB,MAAA;AAAA,IACzB;AAAA,EACF;AACF;;;;;;;"}

package/dist/client/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/client/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAc,MAAM,eAAe,CAAC;AAKlD,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AACnD,eAAO,MAAM,4BAA4B,aAAa,CAAC;AACvD,eAAO,MAAM,yBAAyB,aAAa,CAAC;AACpD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAyC5C;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,YAAY,MAAM,EAAE,QAAQ,MAAM,KAAG,OAGhE,CAAC;AAEF,qBAAa,kBAAkB;IAS3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAVxB,OAAO,CAAC,gBAAgB,CAA6B;IACrD,OAAO,CAAC,cAAc,CAAyE;IAC/F,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,+BAA+B,CAAgC;IAEvE,OAAO,CAAC,WAAW,CAAQ;gBAGR,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,KAAK,EACb,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,EAChD,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM;IAUxB;;OAEG;IACH,OAAO,CAAC,SAAS;IAcjB,iBAAiB,IAAI;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,GAAG,IAAI;IAkBF,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAuB9C,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC;IA8B1E,UAAU,CAAC,EAAE,MAAM,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GAAG,OAAO,CAAC;QACnE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KACnB,CAAC;IAkDF,eAAe;YAwFD,cAAc;CAgE7B"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/client/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAc,MAAM,eAAe,CAAC;AAKlD,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AACnD,eAAO,MAAM,4BAA4B,aAAa,CAAC;AACvD,eAAO,MAAM,yBAAyB,aAAa,CAAC;AACpD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAyC5C;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,YAAY,MAAM,EAAE,QAAQ,MAAM,KAAG,OAGhE,CAAC;AAEF,qBAAa,kBAAkB;IAS3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAVxB,OAAO,CAAC,gBAAgB,CAA6B;IACrD,OAAO,CAAC,cAAc,CAAyE;IAC/F,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,+BAA+B,CAAgC;IAEvE,OAAO,CAAC,WAAW,CAAQ;gBAGR,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,KAAK,EACb,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,EAChD,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM;IAUxB;;OAEG;IACH,OAAO,CAAC,SAAS;IAcjB,iBAAiB,IAAI;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,GAAG,IAAI;IAkBF,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAuB9C,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC;IA8B1E,UAAU,CAAC,EAAE,MAAM,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GAAG,OAAO,CAAC;QACnE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;KACnB,CAAC;IAgDF,eAAe;YAwFD,cAAc;CAgE7B"}

package/dist/client/auth.service.js

@@ -112,7 +112,6 @@ class AuthSessionService {
       });
     }
     const localhostJWTCookie = api.get(LOCALHOST_JWT_COOKIE_NAME);
-    console.log("localhostJWTCookie", localhostJWTCookie);
     if (localhostJWTCookie && !api.get(SESSION_COOKIE_NAME)) {
       const result2 = await this.refreshSession({ signal }).catch(this.handleRequestError);
       if ("error" in result2) return result2;

package/dist/client/auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.js","sources":["../../src/client/auth.service.ts"],"sourcesContent":["import { Blimu, BlimuError } from '@blimu/client';\nimport type { RefreshResponse } from '@blimu/client/schema';\nimport Cookies from 'js-cookie';\nimport { jwtDecode } from 'jwt-decode';\n\nimport type { AuthState, User } from '../types';\nimport { ExternalStore } from './external-store';\n\nexport const SESSION_COOKIE_NAME = '__bli_session';\nexport const LOCALHOST_JWT_URL_PARAM_NAME = '__lh_jwt';\nexport const LOCALHOST_JWT_COOKIE_NAME = '__lh_jwt';\nexport const SESSION_EXPIRATION_BUFFER = 10;\n\n/**\n * Time conversion utilities\n * JWT tokens use seconds (Unix timestamp), JavaScript Date uses milliseconds\n */\nconst SECONDS_TO_MS = 1000;\n\n/**\n * Convert seconds to milliseconds\n */\nconst secondsToMilliseconds = (seconds: number): number => Math.floor(seconds * SECONDS_TO_MS);\n\n/**\n * Convert milliseconds to seconds\n */\nconst millisecondsToSeconds = (ms: number): number => Math.floor(ms / SECONDS_TO_MS);\n\n/**\n * Get current time in seconds (Unix timestamp)\n */\nconst nowInSeconds = (): number => millisecondsToSeconds(Date.now());\n\n/**\n * Convert JWT expiration time (seconds) to milliseconds\n */\nconst jwtExpToMilliseconds = (exp: number): number => secondsToMilliseconds(exp);\n\n/**\n * Calculate timeout delay in milliseconds for refreshing before expiration\n * @param expirationSeconds - JWT exp claim in seconds\n * @param bufferSeconds - Buffer time in seconds before expiration\n * @returns Timeout delay in milliseconds\n */\nconst calculateTimeoutDelay = (expirationSeconds: number, bufferSeconds: number): number => {\n  const expirationMS = jwtExpToMilliseconds(expirationSeconds);\n  const bufferMS = secondsToMilliseconds(bufferSeconds);\n  const nowMS = Date.now();\n  return Math.max(expirationMS - bufferMS - nowMS, 0);\n};\n\n/**\n * Check if a JWT expiration time (in seconds) is expired or will expire within the buffer\n * @param expiration - JWT exp claim in seconds (Unix timestamp)\n * @param buffer - Buffer time in seconds before expiration to consider it expired\n * @returns true if expired or will expire within buffer\n */\nexport const isExpiredIn = (expiration: number, buffer: number): boolean => {\n  const now = nowInSeconds();\n  return expiration - buffer < now;\n};\n\nexport class AuthSessionService {\n  private pendingRefresher: (() => void) | null = null;\n  private refreshPromise: Promise<RefreshResponse | { error: string; user: null }> | null = null;\n  private refreshingSignals: Set<AbortSignal> = new Set();\n  private refreshingSignalAbortController: AbortController | null = null;\n  // A local client that doesn't call getSessionToken() which calls refreshSession().\n  private localClient: Blimu;\n\n  constructor(\n    private readonly isLive: boolean,\n    private readonly client: Blimu,\n    private readonly store: ExternalStore<AuthState>,\n    baseURL: string,\n    publishableKey: string,\n  ) {\n    this.localClient = new Blimu({\n      baseURL,\n      credentials: 'include',\n      headers: { 'x-blimu-publishable-key': publishableKey },\n    });\n    this.handleRequestError = this.handleRequestError.bind(this);\n  }\n\n  /**\n   * Set cookie with appropriate security settings based on environment\n   */\n  private setCookie(name: string, value: string, options: { maxAge?: number } = {}): void {\n    const cookieOptions: Cookies.CookieAttributes = {\n      secure: this.isLive, // true for live environments, false for localhost\n      sameSite: 'lax',\n      path: '/',\n    };\n\n    if (options.maxAge !== undefined) {\n      cookieOptions.expires = options.maxAge / (24 * 60 * 60); // Convert seconds to days\n    }\n\n    Cookies.set(name, value, cookieOptions);\n  }\n\n  getSessionPayload(): {\n    sub: string;\n    environmentId: string;\n    type: string;\n    iat: number;\n    exp: number;\n  } | null {\n    const token = Cookies.get(SESSION_COOKIE_NAME);\n\n    if (!token) {\n      return null;\n    }\n\n    const decoded = jwtDecode<{\n      sub: string;\n      environmentId: string;\n      type: string;\n      iat: number;\n      exp: number;\n    }>(token);\n\n    return decoded;\n  }\n\n  async getSessionToken(): Promise<string | undefined> {\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return undefined;\n    }\n\n    // If a refresh is already in progress, wait for it to complete\n    // This prevents infinite recursion when refreshSession() calls client.auth.refresh()\n    // which triggers accessToken() which calls getSessionToken()\n    if (this.refreshPromise) {\n      await this.refreshPromise;\n      // After refresh completes, return the updated token from cookie\n      return Cookies.get(SESSION_COOKIE_NAME);\n    }\n\n    if (isExpiredIn(sessionPayload.exp, 0)) {\n      await this.refreshSession();\n    }\n\n    return Cookies.get(SESSION_COOKIE_NAME);\n  }\n\n  async handleRequestError(error: unknown): Promise<{ error: string; user: null }> {\n    if (error instanceof BlimuError && [401, 500].includes(error.status)) {\n      Cookies.remove(SESSION_COOKIE_NAME);\n      Cookies.remove(LOCALHOST_JWT_COOKIE_NAME);\n\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    if (error instanceof DOMException)\n      return {\n        error: error.message,\n        user: null,\n      };\n\n    if (error instanceof Error) {\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    return {\n      error: 'unknown error',\n      user: null,\n    };\n  }\n\n  async initialize({ signal }: { signal?: AbortSignal } = {}): Promise<{\n    error: string | null;\n    user: User | null;\n  }> {\n    const url = new URL(window.location.href);\n    const localhostJWT = url.searchParams.get(LOCALHOST_JWT_URL_PARAM_NAME) ?? undefined;\n\n    // Clean up URL parameters immediately to prevent re-processing on re-renders\n    if (localhostJWT) {\n      url.searchParams.delete(LOCALHOST_JWT_URL_PARAM_NAME);\n      window.history.replaceState({}, '', url.toString());\n    }\n\n    // Handle localhost JWT from URL parameter\n    if (localhostJWT) {\n      // Set localhost JWT cookie on customer app domain\n      this.setCookie(LOCALHOST_JWT_COOKIE_NAME, localhostJWT, {\n        maxAge: 30 * 24 * 60 * 60, // 30 days\n      });\n    }\n\n    const localhostJWTCookie = Cookies.get(LOCALHOST_JWT_COOKIE_NAME);\n\n    console.log('localhostJWTCookie', localhostJWTCookie);\n\n    if (localhostJWTCookie && !Cookies.get(SESSION_COOKIE_NAME)) {\n      const result = await this.refreshSession({ signal }).catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return {\n        error: null,\n        user: null,\n      };\n    }\n\n    if (isExpiredIn(sessionPayload.exp, SESSION_EXPIRATION_BUFFER)) {\n      const result = await this.refreshSession().catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const result = await this.client.auth.getSession().catch(this.handleRequestError);\n    if ('error' in result) return result;\n\n    return {\n      error: null,\n      user: result.user,\n    };\n  }\n\n  scheduleRefresh() {\n    const abortController = new AbortController();\n    let isOnline = true;\n    let timeoutId: number | null = null;\n\n    const onlineHandler = () => {\n      isOnline = true;\n      if (this.pendingRefresher) {\n        this.pendingRefresher();\n        this.pendingRefresher = null;\n      }\n    };\n    const offlineHandler = () => {\n      isOnline = false;\n    };\n\n    window.addEventListener('online', onlineHandler);\n    window.addEventListener('offline', offlineHandler);\n\n    const refresh = () => {\n      // Clear any existing timeout before scheduling a new one\n      // This prevents infinite loops when refresh() is called recursively\n      if (timeoutId !== null) {\n        window.clearTimeout(timeoutId);\n        timeoutId = null;\n      }\n\n      const sessionPayload = this.getSessionPayload();\n\n      if (!sessionPayload || isExpiredIn(sessionPayload.exp, 0)) return;\n\n      // Calculate timeout delay: refresh SESSION_EXPIRATION_BUFFER seconds before expiration\n      const timeoutDelayMS = calculateTimeoutDelay(sessionPayload.exp, SESSION_EXPIRATION_BUFFER);\n\n      // Prevent scheduling if timeout is negative (token already expired)\n      // Allow 0ms delays to handle edge cases where we're exactly at the refresh point\n      // This prevents immediate re-scheduling that could cause infinite loops\n      if (timeoutDelayMS < 0) {\n        return;\n      }\n\n      // Having this function outside timeout, allows us to call refresh immediately when back online\n      const refresher = async () => {\n        // Clear timeoutId since we're executing now\n        timeoutId = null;\n\n        if (!isOnline) {\n          // Keep closure of refresh function alive\n          this.pendingRefresher = refresher;\n          return;\n        }\n\n        const result = await this.refreshSession({ signal: abortController.signal });\n\n        if ('error' in result) {\n          // If the refresh was aborted (e.g., due to React strict mode unmounting),\n          // don't treat it as an error - just return and let the component remount handle it\n          if (result.error === 'aborted') {\n            return;\n          }\n          // For real errors, update the store\n          this.store.setState({\n            status: 'error',\n            user: null,\n            error: result.error,\n          });\n          return;\n        } else {\n          // After successful refresh, schedule the next refresh with the new token\n          refresh();\n        }\n      };\n\n      timeoutId = window.setTimeout(refresher, timeoutDelayMS);\n    };\n\n    refresh();\n\n    return () => {\n      if (timeoutId) {\n        window.clearTimeout(timeoutId);\n      }\n      abortController.abort();\n      window.removeEventListener('online', onlineHandler);\n      window.removeEventListener('offline', offlineHandler);\n    };\n  }\n\n  private async refreshSession({ signal }: { signal?: AbortSignal } = {}) {\n    if (signal) {\n      // Add signal to tracking set (was using .has() instead of .add() - bug fix)\n      this.refreshingSignals.add(signal);\n\n      signal.addEventListener('abort', () => {\n        this.refreshingSignals.delete(signal);\n\n        if (this.refreshingSignals.size === 0) {\n          this.refreshingSignalAbortController?.abort();\n        }\n      });\n    }\n\n    if (this.refreshPromise) {\n      return this.refreshPromise;\n    }\n\n    this.refreshingSignalAbortController = new AbortController();\n\n    this.refreshingSignalAbortController.signal.addEventListener('abort', () => {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    });\n\n    // Get localhost_jwt from cookie to send as query parameter (only for non-live environments)\n    const localhostJWT = !this.isLive ? Cookies.get(LOCALHOST_JWT_COOKIE_NAME) : undefined;\n\n    // Build query parameters - only include __lh_jwt for non-live environments when cookie exists\n    const queryParams: { __lh_jwt?: string } = {};\n    if (localhostJWT) {\n      queryParams.__lh_jwt = localhostJWT;\n    }\n\n    // Use local client to avoid infinite recursion. Regular client calls getSessionToken() which calls refreshSession().\n    // There are hacks to avoid infinite recursion, but they are not reliable.\n    // The localhost_jwt is sent as a query parameter only in non-live environments\n    // Note: Type assertion needed because the generated SDK type doesn't include 'query' in RequestInit,\n    // but the underlying CoreClient.request() method does support it\n    this.refreshPromise = this.localClient.auth\n      .refresh(queryParams, {\n        signal: this.refreshingSignalAbortController.signal,\n      })\n      .then((response) => {\n        // Update cookie with new session token from response body\n        // Server also sets it via Set-Cookie header on auth domain, but we set it manually on customer domain\n        if (!this.isLive) {\n          this.setCookie(SESSION_COOKIE_NAME, response.sessionToken, {\n            maxAge: 30 * 24 * 60 * 60, // 30 days\n          });\n        }\n        return response;\n      })\n      .catch(this.handleRequestError);\n\n    try {\n      return await this.refreshPromise;\n    } finally {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    }\n  }\n}\n"],"names":["Cookies","result"],"mappings":";;;AAQO,MAAM,sBAAsB;AAC5B,MAAM,+BAA+B;AACrC,MAAM,4BAA4B;AAClC,MAAM,4BAA4B;AAMzC,MAAM,gBAAgB;AAKtB,MAAM,wBAAwB,CAAC,YAA4B,KAAK,MAAM,UAAU,aAAa;AAK7F,MAAM,wBAAwB,CAAC,OAAuB,KAAK,MAAM,KAAK,aAAa;AAKnF,MAAM,eAAe,MAAc,sBAAsB,KAAK,KAAK;AAKnE,MAAM,uBAAuB,CAAC,QAAwB,sBAAsB,GAAG;AAQ/E,MAAM,wBAAwB,CAAC,mBAA2B,kBAAkC;AAC1F,QAAM,eAAe,qBAAqB,iBAAiB;AAC3D,QAAM,WAAW,sBAAsB,aAAa;AACpD,QAAM,QAAQ,KAAK,IAAA;AACnB,SAAO,KAAK,IAAI,eAAe,WAAW,OAAO,CAAC;AACpD;AAQO,MAAM,cAAc,CAAC,YAAoB,WAA4B;AAC1E,QAAM,MAAM,aAAA;AACZ,SAAO,aAAa,SAAS;AAC/B;AAEO,MAAM,mBAAmB;AAAA,EAQ9B,YACmB,QACA,QACA,OACjB,SACA,gBACA;AALiB,SAAA,SAAA;AACA,SAAA,SAAA;AACA,SAAA,QAAA;AAVnB,SAAQ,mBAAwC;AAChD,SAAQ,iBAAkF;AAC1F,SAAQ,wCAA0C,IAAA;AAClD,SAAQ,kCAA0D;AAWhE,SAAK,cAAc,IAAI,MAAM;AAAA,MAC3B;AAAA,MACA,aAAa;AAAA,MACb,SAAS,EAAE,2BAA2B,eAAA;AAAA,IAAe,CACtD;AACD,SAAK,qBAAqB,KAAK,mBAAmB,KAAK,IAAI;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA,EAKQ,UAAU,MAAc,OAAe,UAA+B,CAAA,GAAU;AACtF,UAAM,gBAA0C;AAAA,MAC9C,QAAQ,KAAK;AAAA;AAAA,MACb,UAAU;AAAA,MACV,MAAM;AAAA,IAAA;AAGR,QAAI,QAAQ,WAAW,QAAW;AAChC,oBAAc,UAAU,QAAQ,UAAU,KAAK,KAAK;AAAA,IACtD;AAEAA,QAAQ,IAAI,MAAM,OAAO,aAAa;AAAA,EACxC;AAAA,EAEA,oBAMS;AACP,UAAM,QAAQA,IAAQ,IAAI,mBAAmB;AAE7C,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAEA,UAAM,UAAU,UAMb,KAAK;AAER,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBAA+C;AACnD,UAAM,iBAAiB,KAAK,kBAAA;AAE5B,QAAI,CAAC,gBAAgB;AACnB,aAAO;AAAA,IACT;AAKA,QAAI,KAAK,gBAAgB;AACvB,YAAM,KAAK;AAEX,aAAOA,IAAQ,IAAI,mBAAmB;AAAA,IACxC;AAEA,QAAI,YAAY,eAAe,KAAK,CAAC,GAAG;AACtC,YAAM,KAAK,eAAA;AAAA,IACb;AAEA,WAAOA,IAAQ,IAAI,mBAAmB;AAAA,EACxC;AAAA,EAEA,MAAM,mBAAmB,OAAwD;AAC/E,QAAI,iBAAiB,cAAc,CAAC,KAAK,GAAG,EAAE,SAAS,MAAM,MAAM,GAAG;AACpEA,UAAQ,OAAO,mBAAmB;AAClCA,UAAQ,OAAO,yBAAyB;AAExC,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,QAAI,iBAAiB;AACnB,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAGV,QAAI,iBAAiB,OAAO;AAC1B,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,IAAA;AAAA,EAEV;AAAA,EAEA,MAAM,WAAW,EAAE,OAAA,IAAqC,IAGrD;AACD,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,UAAM,eAAe,IAAI,aAAa,IAAI,4BAA4B,KAAK;AAG3E,QAAI,cAAc;AAChB,UAAI,aAAa,OAAO,4BAA4B;AACpD,aAAO,QAAQ,aAAa,CAAA,GAAI,IAAI,IAAI,UAAU;AAAA,IACpD;AAGA,QAAI,cAAc;AAEhB,WAAK,UAAU,2BAA2B,cAAc;AAAA,QACtD,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,MAAA,CACxB;AAAA,IACH;AAEA,UAAM,qBAAqBA,IAAQ,IAAI,yBAAyB;AAEhE,YAAQ,IAAI,sBAAsB,kBAAkB;AAEpD,QAAI,sBAAsB,CAACA,IAAQ,IAAI,mBAAmB,GAAG;AAC3D,YAAMC,UAAS,MAAM,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,KAAK,kBAAkB;AAClF,UAAI,WAAWA,QAAQ,QAAOA;AAAAA,IAChC;AAEA,UAAM,iBAAiB,KAAK,kBAAA;AAE5B,QAAI,CAAC,gBAAgB;AACnB,aAAO;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,QAAI,YAAY,eAAe,KAAK,yBAAyB,GAAG;AAC9D,YAAMA,UAAS,MAAM,KAAK,iBAAiB,MAAM,KAAK,kBAAkB;AACxE,UAAI,WAAWA,QAAQ,QAAOA;AAAAA,IAChC;AAEA,UAAM,SAAS,MAAM,KAAK,OAAO,KAAK,aAAa,MAAM,KAAK,kBAAkB;AAChF,QAAI,WAAW,OAAQ,QAAO;AAE9B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM,OAAO;AAAA,IAAA;AAAA,EAEjB;AAAA,EAEA,kBAAkB;AAChB,UAAM,kBAAkB,IAAI,gBAAA;AAC5B,QAAI,WAAW;AACf,QAAI,YAA2B;AAE/B,UAAM,gBAAgB,MAAM;AAC1B,iBAAW;AACX,UAAI,KAAK,kBAAkB;AACzB,aAAK,iBAAA;AACL,aAAK,mBAAmB;AAAA,MAC1B;AAAA,IACF;AACA,UAAM,iBAAiB,MAAM;AAC3B,iBAAW;AAAA,IACb;AAEA,WAAO,iBAAiB,UAAU,aAAa;AAC/C,WAAO,iBAAiB,WAAW,cAAc;AAEjD,UAAM,UAAU,MAAM;AAGpB,UAAI,cAAc,MAAM;AACtB,eAAO,aAAa,SAAS;AAC7B,oBAAY;AAAA,MACd;AAEA,YAAM,iBAAiB,KAAK,kBAAA;AAE5B,UAAI,CAAC,kBAAkB,YAAY,eAAe,KAAK,CAAC,EAAG;AAG3D,YAAM,iBAAiB,sBAAsB,eAAe,KAAK,yBAAyB;AAK1F,UAAI,iBAAiB,GAAG;AACtB;AAAA,MACF;AAGA,YAAM,YAAY,YAAY;AAE5B,oBAAY;AAEZ,YAAI,CAAC,UAAU;AAEb,eAAK,mBAAmB;AACxB;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,KAAK,eAAe,EAAE,QAAQ,gBAAgB,QAAQ;AAE3E,YAAI,WAAW,QAAQ;AAGrB,cAAI,OAAO,UAAU,WAAW;AAC9B;AAAA,UACF;AAEA,eAAK,MAAM,SAAS;AAAA,YAClB,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,OAAO,OAAO;AAAA,UAAA,CACf;AACD;AAAA,QACF,OAAO;AAEL,kBAAA;AAAA,QACF;AAAA,MACF;AAEA,kBAAY,OAAO,WAAW,WAAW,cAAc;AAAA,IACzD;AAEA,YAAA;AAEA,WAAO,MAAM;AACX,UAAI,WAAW;AACb,eAAO,aAAa,SAAS;AAAA,MAC/B;AACA,sBAAgB,MAAA;AAChB,aAAO,oBAAoB,UAAU,aAAa;AAClD,aAAO,oBAAoB,WAAW,cAAc;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,EAAE,OAAA,IAAqC,IAAI;AACtE,QAAI,QAAQ;AAEV,WAAK,kBAAkB,IAAI,MAAM;AAEjC,aAAO,iBAAiB,SAAS,MAAM;AACrC,aAAK,kBAAkB,OAAO,MAAM;AAEpC,YAAI,KAAK,kBAAkB,SAAS,GAAG;AACrC,eAAK,iCAAiC,MAAA;AAAA,QACxC;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,KAAK,gBAAgB;AACvB,aAAO,KAAK;AAAA,IACd;AAEA,SAAK,kCAAkC,IAAI,gBAAA;AAE3C,SAAK,gCAAgC,OAAO,iBAAiB,SAAS,MAAM;AAC1E,WAAK,iBAAiB;AACtB,WAAK,kCAAkC;AACvC,WAAK,kBAAkB,MAAA;AAAA,IACzB,CAAC;AAGD,UAAM,eAAe,CAAC,KAAK,SAASD,IAAQ,IAAI,yBAAyB,IAAI;AAG7E,UAAM,cAAqC,CAAA;AAC3C,QAAI,cAAc;AAChB,kBAAY,WAAW;AAAA,IACzB;AAOA,SAAK,iBAAiB,KAAK,YAAY,KACpC,QAAQ,aAAa;AAAA,MACpB,QAAQ,KAAK,gCAAgC;AAAA,IAAA,CAC9C,EACA,KAAK,CAAC,aAAa;AAGlB,UAAI,CAAC,KAAK,QAAQ;AAChB,aAAK,UAAU,qBAAqB,SAAS,cAAc;AAAA,UACzD,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,QAAA,CACxB;AAAA,MACH;AACA,aAAO;AAAA,IACT,CAAC,EACA,MAAM,KAAK,kBAAkB;AAEhC,QAAI;AACF,aAAO,MAAM,KAAK;AAAA,IACpB,UAAA;AACE,WAAK,iBAAiB;AACtB,WAAK,kCAAkC;AACvC,WAAK,kBAAkB,MAAA;AAAA,IACzB;AAAA,EACF;AACF;"}
+{"version":3,"file":"auth.service.js","sources":["../../src/client/auth.service.ts"],"sourcesContent":["import { Blimu, BlimuError } from '@blimu/client';\nimport type { RefreshResponse } from '@blimu/client/schema';\nimport Cookies from 'js-cookie';\nimport { jwtDecode } from 'jwt-decode';\n\nimport type { AuthState, User } from '../types';\nimport { ExternalStore } from './external-store';\n\nexport const SESSION_COOKIE_NAME = '__bli_session';\nexport const LOCALHOST_JWT_URL_PARAM_NAME = '__lh_jwt';\nexport const LOCALHOST_JWT_COOKIE_NAME = '__lh_jwt';\nexport const SESSION_EXPIRATION_BUFFER = 10;\n\n/**\n * Time conversion utilities\n * JWT tokens use seconds (Unix timestamp), JavaScript Date uses milliseconds\n */\nconst SECONDS_TO_MS = 1000;\n\n/**\n * Convert seconds to milliseconds\n */\nconst secondsToMilliseconds = (seconds: number): number => Math.floor(seconds * SECONDS_TO_MS);\n\n/**\n * Convert milliseconds to seconds\n */\nconst millisecondsToSeconds = (ms: number): number => Math.floor(ms / SECONDS_TO_MS);\n\n/**\n * Get current time in seconds (Unix timestamp)\n */\nconst nowInSeconds = (): number => millisecondsToSeconds(Date.now());\n\n/**\n * Convert JWT expiration time (seconds) to milliseconds\n */\nconst jwtExpToMilliseconds = (exp: number): number => secondsToMilliseconds(exp);\n\n/**\n * Calculate timeout delay in milliseconds for refreshing before expiration\n * @param expirationSeconds - JWT exp claim in seconds\n * @param bufferSeconds - Buffer time in seconds before expiration\n * @returns Timeout delay in milliseconds\n */\nconst calculateTimeoutDelay = (expirationSeconds: number, bufferSeconds: number): number => {\n  const expirationMS = jwtExpToMilliseconds(expirationSeconds);\n  const bufferMS = secondsToMilliseconds(bufferSeconds);\n  const nowMS = Date.now();\n  return Math.max(expirationMS - bufferMS - nowMS, 0);\n};\n\n/**\n * Check if a JWT expiration time (in seconds) is expired or will expire within the buffer\n * @param expiration - JWT exp claim in seconds (Unix timestamp)\n * @param buffer - Buffer time in seconds before expiration to consider it expired\n * @returns true if expired or will expire within buffer\n */\nexport const isExpiredIn = (expiration: number, buffer: number): boolean => {\n  const now = nowInSeconds();\n  return expiration - buffer < now;\n};\n\nexport class AuthSessionService {\n  private pendingRefresher: (() => void) | null = null;\n  private refreshPromise: Promise<RefreshResponse | { error: string; user: null }> | null = null;\n  private refreshingSignals: Set<AbortSignal> = new Set();\n  private refreshingSignalAbortController: AbortController | null = null;\n  // A local client that doesn't call getSessionToken() which calls refreshSession().\n  private localClient: Blimu;\n\n  constructor(\n    private readonly isLive: boolean,\n    private readonly client: Blimu,\n    private readonly store: ExternalStore<AuthState>,\n    baseURL: string,\n    publishableKey: string,\n  ) {\n    this.localClient = new Blimu({\n      baseURL,\n      credentials: 'include',\n      headers: { 'x-blimu-publishable-key': publishableKey },\n    });\n    this.handleRequestError = this.handleRequestError.bind(this);\n  }\n\n  /**\n   * Set cookie with appropriate security settings based on environment\n   */\n  private setCookie(name: string, value: string, options: { maxAge?: number } = {}): void {\n    const cookieOptions: Cookies.CookieAttributes = {\n      secure: this.isLive, // true for live environments, false for localhost\n      sameSite: 'lax',\n      path: '/',\n    };\n\n    if (options.maxAge !== undefined) {\n      cookieOptions.expires = options.maxAge / (24 * 60 * 60); // Convert seconds to days\n    }\n\n    Cookies.set(name, value, cookieOptions);\n  }\n\n  getSessionPayload(): {\n    sub: string;\n    environmentId: string;\n    type: string;\n    iat: number;\n    exp: number;\n  } | null {\n    const token = Cookies.get(SESSION_COOKIE_NAME);\n\n    if (!token) {\n      return null;\n    }\n\n    const decoded = jwtDecode<{\n      sub: string;\n      environmentId: string;\n      type: string;\n      iat: number;\n      exp: number;\n    }>(token);\n\n    return decoded;\n  }\n\n  async getSessionToken(): Promise<string | undefined> {\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return undefined;\n    }\n\n    // If a refresh is already in progress, wait for it to complete\n    // This prevents infinite recursion when refreshSession() calls client.auth.refresh()\n    // which triggers accessToken() which calls getSessionToken()\n    if (this.refreshPromise) {\n      await this.refreshPromise;\n      // After refresh completes, return the updated token from cookie\n      return Cookies.get(SESSION_COOKIE_NAME);\n    }\n\n    if (isExpiredIn(sessionPayload.exp, 0)) {\n      await this.refreshSession();\n    }\n\n    return Cookies.get(SESSION_COOKIE_NAME);\n  }\n\n  async handleRequestError(error: unknown): Promise<{ error: string; user: null }> {\n    if (error instanceof BlimuError && [401, 500].includes(error.status)) {\n      Cookies.remove(SESSION_COOKIE_NAME);\n      Cookies.remove(LOCALHOST_JWT_COOKIE_NAME);\n\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    if (error instanceof DOMException)\n      return {\n        error: error.message,\n        user: null,\n      };\n\n    if (error instanceof Error) {\n      return {\n        error: error.message,\n        user: null,\n      };\n    }\n\n    return {\n      error: 'unknown error',\n      user: null,\n    };\n  }\n\n  async initialize({ signal }: { signal?: AbortSignal } = {}): Promise<{\n    error: string | null;\n    user: User | null;\n  }> {\n    const url = new URL(window.location.href);\n    const localhostJWT = url.searchParams.get(LOCALHOST_JWT_URL_PARAM_NAME) ?? undefined;\n\n    // Clean up URL parameters immediately to prevent re-processing on re-renders\n    if (localhostJWT) {\n      url.searchParams.delete(LOCALHOST_JWT_URL_PARAM_NAME);\n      window.history.replaceState({}, '', url.toString());\n    }\n\n    // Handle localhost JWT from URL parameter\n    if (localhostJWT) {\n      // Set localhost JWT cookie on customer app domain\n      this.setCookie(LOCALHOST_JWT_COOKIE_NAME, localhostJWT, {\n        maxAge: 30 * 24 * 60 * 60, // 30 days\n      });\n    }\n\n    const localhostJWTCookie = Cookies.get(LOCALHOST_JWT_COOKIE_NAME);\n\n    if (localhostJWTCookie && !Cookies.get(SESSION_COOKIE_NAME)) {\n      const result = await this.refreshSession({ signal }).catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const sessionPayload = this.getSessionPayload();\n\n    if (!sessionPayload) {\n      return {\n        error: null,\n        user: null,\n      };\n    }\n\n    if (isExpiredIn(sessionPayload.exp, SESSION_EXPIRATION_BUFFER)) {\n      const result = await this.refreshSession().catch(this.handleRequestError);\n      if ('error' in result) return result;\n    }\n\n    const result = await this.client.auth.getSession().catch(this.handleRequestError);\n    if ('error' in result) return result;\n\n    return {\n      error: null,\n      user: result.user,\n    };\n  }\n\n  scheduleRefresh() {\n    const abortController = new AbortController();\n    let isOnline = true;\n    let timeoutId: number | null = null;\n\n    const onlineHandler = () => {\n      isOnline = true;\n      if (this.pendingRefresher) {\n        this.pendingRefresher();\n        this.pendingRefresher = null;\n      }\n    };\n    const offlineHandler = () => {\n      isOnline = false;\n    };\n\n    window.addEventListener('online', onlineHandler);\n    window.addEventListener('offline', offlineHandler);\n\n    const refresh = () => {\n      // Clear any existing timeout before scheduling a new one\n      // This prevents infinite loops when refresh() is called recursively\n      if (timeoutId !== null) {\n        window.clearTimeout(timeoutId);\n        timeoutId = null;\n      }\n\n      const sessionPayload = this.getSessionPayload();\n\n      if (!sessionPayload || isExpiredIn(sessionPayload.exp, 0)) return;\n\n      // Calculate timeout delay: refresh SESSION_EXPIRATION_BUFFER seconds before expiration\n      const timeoutDelayMS = calculateTimeoutDelay(sessionPayload.exp, SESSION_EXPIRATION_BUFFER);\n\n      // Prevent scheduling if timeout is negative (token already expired)\n      // Allow 0ms delays to handle edge cases where we're exactly at the refresh point\n      // This prevents immediate re-scheduling that could cause infinite loops\n      if (timeoutDelayMS < 0) {\n        return;\n      }\n\n      // Having this function outside timeout, allows us to call refresh immediately when back online\n      const refresher = async () => {\n        // Clear timeoutId since we're executing now\n        timeoutId = null;\n\n        if (!isOnline) {\n          // Keep closure of refresh function alive\n          this.pendingRefresher = refresher;\n          return;\n        }\n\n        const result = await this.refreshSession({ signal: abortController.signal });\n\n        if ('error' in result) {\n          // If the refresh was aborted (e.g., due to React strict mode unmounting),\n          // don't treat it as an error - just return and let the component remount handle it\n          if (result.error === 'aborted') {\n            return;\n          }\n          // For real errors, update the store\n          this.store.setState({\n            status: 'error',\n            user: null,\n            error: result.error,\n          });\n          return;\n        } else {\n          // After successful refresh, schedule the next refresh with the new token\n          refresh();\n        }\n      };\n\n      timeoutId = window.setTimeout(refresher, timeoutDelayMS);\n    };\n\n    refresh();\n\n    return () => {\n      if (timeoutId) {\n        window.clearTimeout(timeoutId);\n      }\n      abortController.abort();\n      window.removeEventListener('online', onlineHandler);\n      window.removeEventListener('offline', offlineHandler);\n    };\n  }\n\n  private async refreshSession({ signal }: { signal?: AbortSignal | undefined } = {}) {\n    if (signal) {\n      // Add signal to tracking set (was using .has() instead of .add() - bug fix)\n      this.refreshingSignals.add(signal);\n\n      signal.addEventListener('abort', () => {\n        this.refreshingSignals.delete(signal);\n\n        if (this.refreshingSignals.size === 0) {\n          this.refreshingSignalAbortController?.abort();\n        }\n      });\n    }\n\n    if (this.refreshPromise) {\n      return this.refreshPromise;\n    }\n\n    this.refreshingSignalAbortController = new AbortController();\n\n    this.refreshingSignalAbortController.signal.addEventListener('abort', () => {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    });\n\n    // Get localhost_jwt from cookie to send as query parameter (only for non-live environments)\n    const localhostJWT = !this.isLive ? Cookies.get(LOCALHOST_JWT_COOKIE_NAME) : undefined;\n\n    // Build query parameters - only include __lh_jwt for non-live environments when cookie exists\n    const queryParams: { __lh_jwt?: string } = {};\n    if (localhostJWT) {\n      queryParams.__lh_jwt = localhostJWT;\n    }\n\n    // Use local client to avoid infinite recursion. Regular client calls getSessionToken() which calls refreshSession().\n    // There are hacks to avoid infinite recursion, but they are not reliable.\n    // The localhost_jwt is sent as a query parameter only in non-live environments\n    // Note: Type assertion needed because the generated SDK type doesn't include 'query' in RequestInit,\n    // but the underlying CoreClient.request() method does support it\n    this.refreshPromise = this.localClient.auth\n      .refresh(queryParams, {\n        signal: this.refreshingSignalAbortController.signal,\n      })\n      .then((response) => {\n        // Update cookie with new session token from response body\n        // Server also sets it via Set-Cookie header on auth domain, but we set it manually on customer domain\n        if (!this.isLive) {\n          this.setCookie(SESSION_COOKIE_NAME, response.sessionToken, {\n            maxAge: 30 * 24 * 60 * 60, // 30 days\n          });\n        }\n        return response;\n      })\n      .catch(this.handleRequestError);\n\n    try {\n      return await this.refreshPromise;\n    } finally {\n      this.refreshPromise = null;\n      this.refreshingSignalAbortController = null;\n      this.refreshingSignals.clear();\n    }\n  }\n}\n"],"names":["Cookies","result"],"mappings":";;;AAQO,MAAM,sBAAsB;AAC5B,MAAM,+BAA+B;AACrC,MAAM,4BAA4B;AAClC,MAAM,4BAA4B;AAMzC,MAAM,gBAAgB;AAKtB,MAAM,wBAAwB,CAAC,YAA4B,KAAK,MAAM,UAAU,aAAa;AAK7F,MAAM,wBAAwB,CAAC,OAAuB,KAAK,MAAM,KAAK,aAAa;AAKnF,MAAM,eAAe,MAAc,sBAAsB,KAAK,KAAK;AAKnE,MAAM,uBAAuB,CAAC,QAAwB,sBAAsB,GAAG;AAQ/E,MAAM,wBAAwB,CAAC,mBAA2B,kBAAkC;AAC1F,QAAM,eAAe,qBAAqB,iBAAiB;AAC3D,QAAM,WAAW,sBAAsB,aAAa;AACpD,QAAM,QAAQ,KAAK,IAAA;AACnB,SAAO,KAAK,IAAI,eAAe,WAAW,OAAO,CAAC;AACpD;AAQO,MAAM,cAAc,CAAC,YAAoB,WAA4B;AAC1E,QAAM,MAAM,aAAA;AACZ,SAAO,aAAa,SAAS;AAC/B;AAEO,MAAM,mBAAmB;AAAA,EAQ9B,YACmB,QACA,QACA,OACjB,SACA,gBACA;AALiB,SAAA,SAAA;AACA,SAAA,SAAA;AACA,SAAA,QAAA;AAVnB,SAAQ,mBAAwC;AAChD,SAAQ,iBAAkF;AAC1F,SAAQ,wCAA0C,IAAA;AAClD,SAAQ,kCAA0D;AAWhE,SAAK,cAAc,IAAI,MAAM;AAAA,MAC3B;AAAA,MACA,aAAa;AAAA,MACb,SAAS,EAAE,2BAA2B,eAAA;AAAA,IAAe,CACtD;AACD,SAAK,qBAAqB,KAAK,mBAAmB,KAAK,IAAI;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA,EAKQ,UAAU,MAAc,OAAe,UAA+B,CAAA,GAAU;AACtF,UAAM,gBAA0C;AAAA,MAC9C,QAAQ,KAAK;AAAA;AAAA,MACb,UAAU;AAAA,MACV,MAAM;AAAA,IAAA;AAGR,QAAI,QAAQ,WAAW,QAAW;AAChC,oBAAc,UAAU,QAAQ,UAAU,KAAK,KAAK;AAAA,IACtD;AAEAA,QAAQ,IAAI,MAAM,OAAO,aAAa;AAAA,EACxC;AAAA,EAEA,oBAMS;AACP,UAAM,QAAQA,IAAQ,IAAI,mBAAmB;AAE7C,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAEA,UAAM,UAAU,UAMb,KAAK;AAER,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBAA+C;AACnD,UAAM,iBAAiB,KAAK,kBAAA;AAE5B,QAAI,CAAC,gBAAgB;AACnB,aAAO;AAAA,IACT;AAKA,QAAI,KAAK,gBAAgB;AACvB,YAAM,KAAK;AAEX,aAAOA,IAAQ,IAAI,mBAAmB;AAAA,IACxC;AAEA,QAAI,YAAY,eAAe,KAAK,CAAC,GAAG;AACtC,YAAM,KAAK,eAAA;AAAA,IACb;AAEA,WAAOA,IAAQ,IAAI,mBAAmB;AAAA,EACxC;AAAA,EAEA,MAAM,mBAAmB,OAAwD;AAC/E,QAAI,iBAAiB,cAAc,CAAC,KAAK,GAAG,EAAE,SAAS,MAAM,MAAM,GAAG;AACpEA,UAAQ,OAAO,mBAAmB;AAClCA,UAAQ,OAAO,yBAAyB;AAExC,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,QAAI,iBAAiB;AACnB,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAGV,QAAI,iBAAiB,OAAO;AAC1B,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,IAAA;AAAA,EAEV;AAAA,EAEA,MAAM,WAAW,EAAE,OAAA,IAAqC,IAGrD;AACD,UAAM,MAAM,IAAI,IAAI,OAAO,SAAS,IAAI;AACxC,UAAM,eAAe,IAAI,aAAa,IAAI,4BAA4B,KAAK;AAG3E,QAAI,cAAc;AAChB,UAAI,aAAa,OAAO,4BAA4B;AACpD,aAAO,QAAQ,aAAa,CAAA,GAAI,IAAI,IAAI,UAAU;AAAA,IACpD;AAGA,QAAI,cAAc;AAEhB,WAAK,UAAU,2BAA2B,cAAc;AAAA,QACtD,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,MAAA,CACxB;AAAA,IACH;AAEA,UAAM,qBAAqBA,IAAQ,IAAI,yBAAyB;AAEhE,QAAI,sBAAsB,CAACA,IAAQ,IAAI,mBAAmB,GAAG;AAC3D,YAAMC,UAAS,MAAM,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,KAAK,kBAAkB;AAClF,UAAI,WAAWA,QAAQ,QAAOA;AAAAA,IAChC;AAEA,UAAM,iBAAiB,KAAK,kBAAA;AAE5B,QAAI,CAAC,gBAAgB;AACnB,aAAO;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,MAAA;AAAA,IAEV;AAEA,QAAI,YAAY,eAAe,KAAK,yBAAyB,GAAG;AAC9D,YAAMA,UAAS,MAAM,KAAK,iBAAiB,MAAM,KAAK,kBAAkB;AACxE,UAAI,WAAWA,QAAQ,QAAOA;AAAAA,IAChC;AAEA,UAAM,SAAS,MAAM,KAAK,OAAO,KAAK,aAAa,MAAM,KAAK,kBAAkB;AAChF,QAAI,WAAW,OAAQ,QAAO;AAE9B,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM,OAAO;AAAA,IAAA;AAAA,EAEjB;AAAA,EAEA,kBAAkB;AAChB,UAAM,kBAAkB,IAAI,gBAAA;AAC5B,QAAI,WAAW;AACf,QAAI,YAA2B;AAE/B,UAAM,gBAAgB,MAAM;AAC1B,iBAAW;AACX,UAAI,KAAK,kBAAkB;AACzB,aAAK,iBAAA;AACL,aAAK,mBAAmB;AAAA,MAC1B;AAAA,IACF;AACA,UAAM,iBAAiB,MAAM;AAC3B,iBAAW;AAAA,IACb;AAEA,WAAO,iBAAiB,UAAU,aAAa;AAC/C,WAAO,iBAAiB,WAAW,cAAc;AAEjD,UAAM,UAAU,MAAM;AAGpB,UAAI,cAAc,MAAM;AACtB,eAAO,aAAa,SAAS;AAC7B,oBAAY;AAAA,MACd;AAEA,YAAM,iBAAiB,KAAK,kBAAA;AAE5B,UAAI,CAAC,kBAAkB,YAAY,eAAe,KAAK,CAAC,EAAG;AAG3D,YAAM,iBAAiB,sBAAsB,eAAe,KAAK,yBAAyB;AAK1F,UAAI,iBAAiB,GAAG;AACtB;AAAA,MACF;AAGA,YAAM,YAAY,YAAY;AAE5B,oBAAY;AAEZ,YAAI,CAAC,UAAU;AAEb,eAAK,mBAAmB;AACxB;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,KAAK,eAAe,EAAE,QAAQ,gBAAgB,QAAQ;AAE3E,YAAI,WAAW,QAAQ;AAGrB,cAAI,OAAO,UAAU,WAAW;AAC9B;AAAA,UACF;AAEA,eAAK,MAAM,SAAS;AAAA,YAClB,QAAQ;AAAA,YACR,MAAM;AAAA,YACN,OAAO,OAAO;AAAA,UAAA,CACf;AACD;AAAA,QACF,OAAO;AAEL,kBAAA;AAAA,QACF;AAAA,MACF;AAEA,kBAAY,OAAO,WAAW,WAAW,cAAc;AAAA,IACzD;AAEA,YAAA;AAEA,WAAO,MAAM;AACX,UAAI,WAAW;AACb,eAAO,aAAa,SAAS;AAAA,MAC/B;AACA,sBAAgB,MAAA;AAChB,aAAO,oBAAoB,UAAU,aAAa;AAClD,aAAO,oBAAoB,WAAW,cAAc;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,EAAE,OAAA,IAAiD,IAAI;AAClF,QAAI,QAAQ;AAEV,WAAK,kBAAkB,IAAI,MAAM;AAEjC,aAAO,iBAAiB,SAAS,MAAM;AACrC,aAAK,kBAAkB,OAAO,MAAM;AAEpC,YAAI,KAAK,kBAAkB,SAAS,GAAG;AACrC,eAAK,iCAAiC,MAAA;AAAA,QACxC;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,KAAK,gBAAgB;AACvB,aAAO,KAAK;AAAA,IACd;AAEA,SAAK,kCAAkC,IAAI,gBAAA;AAE3C,SAAK,gCAAgC,OAAO,iBAAiB,SAAS,MAAM;AAC1E,WAAK,iBAAiB;AACtB,WAAK,kCAAkC;AACvC,WAAK,kBAAkB,MAAA;AAAA,IACzB,CAAC;AAGD,UAAM,eAAe,CAAC,KAAK,SAASD,IAAQ,IAAI,yBAAyB,IAAI;AAG7E,UAAM,cAAqC,CAAA;AAC3C,QAAI,cAAc;AAChB,kBAAY,WAAW;AAAA,IACzB;AAOA,SAAK,iBAAiB,KAAK,YAAY,KACpC,QAAQ,aAAa;AAAA,MACpB,QAAQ,KAAK,gCAAgC;AAAA,IAAA,CAC9C,EACA,KAAK,CAAC,aAAa;AAGlB,UAAI,CAAC,KAAK,QAAQ;AAChB,aAAK,UAAU,qBAAqB,SAAS,cAAc;AAAA,UACzD,QAAQ,KAAK,KAAK,KAAK;AAAA;AAAA,QAAA,CACxB;AAAA,MACH;AACA,aAAO;AAAA,IACT,CAAC,EACA,MAAM,KAAK,kBAAkB;AAEhC,QAAI;AACF,aAAO,MAAM,KAAK;AAAA,IACpB,UAAA;AACE,WAAK,iBAAiB;AACtB,WAAK,kCAAkC;AACvC,WAAK,kBAAkB,MAAA;AAAA,IACzB;AAAA,EACF;AACF;"}

package/dist/client/runtime-client.cjs

@@ -38,7 +38,7 @@ class BlimuRuntimeClientWrapper {
       }
     };
     this.getAccessToken = async (_options) => {
-      return await this.session.getSessionToken() ?? null;
+      return await this.session.getSessionToken();
     };
     this.config = config;
     this.store = new externalStore.ExternalStore({

package/dist/client/runtime-client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-client.cjs","sources":["../../src/client/runtime-client.ts"],"sourcesContent":["import { Blimu } from '@blimu/client';\n\nimport type { AuthState, BlimuConfig, User } from '../types';\nimport { getAuthApiUrl, getAuthDomainFromPublishableKey } from '../utils/publishable-key';\nimport { AuthSessionService, LOCALHOST_JWT_URL_PARAM_NAME } from './auth.service';\nimport { ExternalStore } from './external-store';\n\nexport class BlimuRuntimeClientWrapper {\n  private client: Blimu;\n  private authDomain: string | null = null;\n  private initialized: boolean = false;\n  private readonly session: AuthSessionService;\n\n  public config: BlimuConfig;\n  public isLive: boolean;\n  private initializePromise: Promise<void> | null = null;\n  private initializeAbortController: AbortController | null = null;\n\n  public readonly store: ExternalStore<AuthState>;\n\n  constructor(config: BlimuConfig) {\n    this.config = config;\n    this.store = new ExternalStore<AuthState>({\n      user: null,\n      error: null,\n      status: 'idle',\n    });\n    this.isLive = config.publishableKey.includes('live');\n\n    // Get auth UI domain from publishable key\n    this.authDomain = getAuthDomainFromPublishableKey(config.publishableKey);\n    if (!this.authDomain) {\n      throw new Error('Failed to determine auth domain from publishable key');\n    }\n\n    // Get auth API URL from publishable key\n    const authApiUrl = getAuthApiUrl(config.publishableKey);\n\n    if (!authApiUrl) {\n      throw new Error('Failed to determine auth API URL from publishable key');\n    }\n\n    this.client = new Blimu({\n      baseURL: authApiUrl,\n      bearer: () => this.session.getSessionToken(),\n      headers: { 'x-blimu-publishable-key': config.publishableKey },\n    });\n\n    this.session = new AuthSessionService(\n      this.isLive,\n      this.client,\n      this.store,\n      authApiUrl,\n      config.publishableKey,\n    );\n\n    this.initialize = this.initialize.bind(this);\n  }\n\n  /**\n   * Initialize authentication by checking for existing session\n   * Reads session token from cookie and validates it\n   * This method is idempotent - if initialization is already in progress, it will wait for that to complete\n   */\n  initialize(): (() => void) | void {\n    // If already initialized, return early\n    if (this.initialized) return;\n\n    // If initialization is in progress, return early (prevents concurrent calls)\n    if (this.initializePromise) return;\n\n    this.initializeAbortController = new AbortController();\n\n    this.initializePromise = this.session\n      .initialize({\n        signal: this.initializeAbortController.signal,\n      })\n      .then((result) => {\n        if (result.error) {\n          this.store.setState({\n            user: null,\n            error: result.error,\n            status: 'error',\n          });\n        } else if (result.user) {\n          this.store.setState({\n            user: result.user,\n            error: null,\n            status: 'authenticated',\n          });\n        } else {\n          this.store.setState({\n            user: null,\n            error: null,\n            status: 'unauthenticated',\n          });\n        }\n      })\n      .catch((error) => {\n        console.error('Initialize error:', error);\n        this.store.setState({\n          user: null,\n          error: error instanceof Error ? error.message : 'Initialization failed',\n          status: 'error',\n        });\n      })\n      .finally(() => {\n        // Mark as initialized after completion (success or failure)\n        // This prevents infinite loops from re-renders\n        this.initialized = true;\n        this.initializePromise = null;\n      });\n\n    return () => {\n      console.log('aborting initialize');\n      this.initializeAbortController?.abort('unmounting');\n      this.initializePromise = null;\n      // Don't reset initialized flag here - let the promise handle it\n    };\n  }\n\n  /**\n   * Refresh session token using the client token from httpOnly cookie\n   * The client token is stored in an httpOnly cookie and sent automatically\n   * Note: The auth worker should extract the __bli_client cookie and include it in the request body\n   * This method is idempotent - if a refresh is already in progress, it will wait for that refresh to complete\n   */\n  public scheduleRefresh() {\n    return this.session.scheduleRefresh();\n  }\n\n  /**\n   * Redirect user to auth domain for authentication\n   * Uses the auth domain derived from the publishable key\n   */\n  public redirectToAuth = (returnUrl?: string): void => {\n    const redirectUrl = returnUrl || window.location.href;\n\n    // Build auth URL on the auth domain\n    const authUrl = new URL(`${this.authDomain}/login`);\n    authUrl.searchParams.set('redirect_url', encodeURIComponent(redirectUrl));\n\n    // Redirect to auth domain\n    window.location.href = authUrl.toString();\n  };\n\n  /**\n   * Logout user\n   * Calls the logout endpoint on the API domain using this.client\n   */\n  public logout = async (): Promise<void> => {\n    try {\n      const sessionToken = this.session.getSessionToken();\n\n      if (sessionToken) {\n        await this.client.auth.logout({\n          headers: {\n            'x-blimu-publishable-key': this.config.publishableKey,\n            Authorization: `Bearer ${sessionToken}`,\n          },\n        });\n      }\n    } catch (error) {\n      console.error('Logout error:', error);\n    } finally {\n      this.store.setState({\n        user: null,\n        error: null,\n        status: 'unauthenticated',\n      });\n    }\n  };\n\n  /**\n   * Get the current session token\n   */\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  getAccessToken = async (_options: { template: 'web' }): Promise<string | null> => {\n    return (await this.session.getSessionToken()) ?? null;\n  };\n\n  /**\n   * Get the runtime client for direct API calls\n   */\n  getClient(): Blimu {\n    return this.client;\n  }\n}\n"],"names":["ExternalStore","getAuthDomainFromPublishableKey","getAuthApiUrl","Blimu","AuthSessionService"],"mappings":";;;;;;AAOO,MAAM,0BAA0B;AAAA,EAarC,YAAY,QAAqB;AAXjC,SAAQ,aAA4B;AACpC,SAAQ,cAAuB;AAK/B,SAAQ,oBAA0C;AAClD,SAAQ,4BAAoD;AAuH5D,SAAO,iBAAiB,CAAC,cAA6B;AACpD,YAAM,cAAc,aAAa,OAAO,SAAS;AAGjD,YAAM,UAAU,IAAI,IAAI,GAAG,KAAK,UAAU,QAAQ;AAClD,cAAQ,aAAa,IAAI,gBAAgB,mBAAmB,WAAW,CAAC;AAGxE,aAAO,SAAS,OAAO,QAAQ,SAAA;AAAA,IACjC;AAMA,SAAO,SAAS,YAA2B;AACzC,UAAI;AACF,cAAM,eAAe,KAAK,QAAQ,gBAAA;AAElC,YAAI,cAAc;AAChB,gBAAM,KAAK,OAAO,KAAK,OAAO;AAAA,YAC5B,SAAS;AAAA,cACP,2BAA2B,KAAK,OAAO;AAAA,cACvC,eAAe,UAAU,YAAY;AAAA,YAAA;AAAA,UACvC,CACD;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,iBAAiB,KAAK;AAAA,MACtC,UAAA;AACE,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH;AAAA,IACF;AAMA,SAAA,iBAAiB,OAAO,aAA0D;AAChF,aAAQ,MAAM,KAAK,QAAQ,gBAAA,KAAsB;AAAA,IACnD;AA9JE,SAAK,SAAS;AACd,SAAK,QAAQ,IAAIA,4BAAyB;AAAA,MACxC,MAAM;AAAA,MACN,OAAO;AAAA,MACP,QAAQ;AAAA,IAAA,CACT;AACD,SAAK,SAAS,OAAO,eAAe,SAAS,MAAM;AAGnD,SAAK,aAAaC,+CAAgC,OAAO,cAAc;AACvE,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI,MAAM,sDAAsD;AAAA,IACxE;AAGA,UAAM,aAAaC,eAAAA,cAAc,OAAO,cAAc;AAEtD,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AAEA,SAAK,SAAS,IAAIC,aAAM;AAAA,MACtB,SAAS;AAAA,MACT,QAAQ,MAAM,KAAK,QAAQ,gBAAA;AAAA,MAC3B,SAAS,EAAE,2BAA2B,OAAO,eAAA;AAAA,IAAe,CAC7D;AAED,SAAK,UAAU,IAAIC,aAAAA;AAAAA,MACjB,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,OAAO;AAAA,IAAA;AAGT,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAkC;AAEhC,QAAI,KAAK,YAAa;AAGtB,QAAI,KAAK,kBAAmB;AAE5B,SAAK,4BAA4B,IAAI,gBAAA;AAErC,SAAK,oBAAoB,KAAK,QAC3B,WAAW;AAAA,MACV,QAAQ,KAAK,0BAA0B;AAAA,IAAA,CACxC,EACA,KAAK,CAAC,WAAW;AAChB,UAAI,OAAO,OAAO;AAChB,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO,OAAO;AAAA,UACd,QAAQ;AAAA,QAAA,CACT;AAAA,MACH,WAAW,OAAO,MAAM;AACtB,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM,OAAO;AAAA,UACb,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH,OAAO;AACL,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH;AAAA,IACF,CAAC,EACA,MAAM,CAAC,UAAU;AAChB,cAAQ,MAAM,qBAAqB,KAAK;AACxC,WAAK,MAAM,SAAS;AAAA,QAClB,MAAM;AAAA,QACN,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAChD,QAAQ;AAAA,MAAA,CACT;AAAA,IACH,CAAC,EACA,QAAQ,MAAM;AAGb,WAAK,cAAc;AACnB,WAAK,oBAAoB;AAAA,IAC3B,CAAC;AAEH,WAAO,MAAM;AACX,cAAQ,IAAI,qBAAqB;AACjC,WAAK,2BAA2B,MAAM,YAAY;AAClD,WAAK,oBAAoB;AAAA,IAE3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQO,kBAAkB;AACvB,WAAO,KAAK,QAAQ,gBAAA;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAuDA,YAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AACF;;"}
+{"version":3,"file":"runtime-client.cjs","sources":["../../src/client/runtime-client.ts"],"sourcesContent":["import { Blimu } from '@blimu/client';\n\nimport type { AuthState, BlimuConfig } from '../types';\nimport { getAuthApiUrl, getAuthDomainFromPublishableKey } from '../utils/publishable-key';\nimport { AuthSessionService } from './auth.service';\nimport { ExternalStore } from './external-store';\n\nexport class BlimuRuntimeClientWrapper {\n  private client: Blimu;\n  private authDomain: string | null = null;\n  private initialized: boolean = false;\n  private readonly session: AuthSessionService;\n\n  public config: BlimuConfig;\n  public isLive: boolean;\n  private initializePromise: Promise<void> | null = null;\n  private initializeAbortController: AbortController | null = null;\n\n  public readonly store: ExternalStore<AuthState>;\n\n  constructor(config: BlimuConfig) {\n    this.config = config;\n    this.store = new ExternalStore<AuthState>({\n      user: null,\n      error: null,\n      status: 'idle',\n    });\n    this.isLive = config.publishableKey.includes('live');\n\n    // Get auth UI domain from publishable key\n    this.authDomain = getAuthDomainFromPublishableKey(config.publishableKey);\n    if (!this.authDomain) {\n      throw new Error('Failed to determine auth domain from publishable key');\n    }\n\n    // Get auth API URL from publishable key\n    const authApiUrl = getAuthApiUrl(config.publishableKey);\n\n    if (!authApiUrl) {\n      throw new Error('Failed to determine auth API URL from publishable key');\n    }\n\n    this.client = new Blimu({\n      baseURL: authApiUrl,\n      bearer: () => this.session.getSessionToken(),\n      headers: { 'x-blimu-publishable-key': config.publishableKey },\n    });\n\n    this.session = new AuthSessionService(\n      this.isLive,\n      this.client,\n      this.store,\n      authApiUrl,\n      config.publishableKey,\n    );\n\n    this.initialize = this.initialize.bind(this);\n  }\n\n  /**\n   * Initialize authentication by checking for existing session\n   * Reads session token from cookie and validates it\n   * This method is idempotent - if initialization is already in progress, it will wait for that to complete\n   */\n  initialize(): (() => void) | void {\n    // If already initialized, return early\n    if (this.initialized) return;\n\n    // If initialization is in progress, return early (prevents concurrent calls)\n    if (this.initializePromise) return;\n\n    this.initializeAbortController = new AbortController();\n\n    this.initializePromise = this.session\n      .initialize({\n        signal: this.initializeAbortController.signal,\n      })\n      .then((result) => {\n        if (result.error) {\n          this.store.setState({\n            user: null,\n            error: result.error,\n            status: 'error',\n          });\n        } else if (result.user) {\n          this.store.setState({\n            user: result.user,\n            error: null,\n            status: 'authenticated',\n          });\n        } else {\n          this.store.setState({\n            user: null,\n            error: null,\n            status: 'unauthenticated',\n          });\n        }\n      })\n      .catch((error) => {\n        console.error('Initialize error:', error);\n        this.store.setState({\n          user: null,\n          error: error instanceof Error ? error.message : 'Initialization failed',\n          status: 'error',\n        });\n      })\n      .finally(() => {\n        // Mark as initialized after completion (success or failure)\n        // This prevents infinite loops from re-renders\n        this.initialized = true;\n        this.initializePromise = null;\n      });\n\n    return () => {\n      console.log('aborting initialize');\n      this.initializeAbortController?.abort('unmounting');\n      this.initializePromise = null;\n      // Don't reset initialized flag here - let the promise handle it\n    };\n  }\n\n  /**\n   * Refresh session token using the client token from httpOnly cookie\n   * The client token is stored in an httpOnly cookie and sent automatically\n   * Note: The auth worker should extract the __bli_client cookie and include it in the request body\n   * This method is idempotent - if a refresh is already in progress, it will wait for that refresh to complete\n   */\n  public scheduleRefresh() {\n    return this.session.scheduleRefresh();\n  }\n\n  /**\n   * Redirect user to auth domain for authentication\n   * Uses the auth domain derived from the publishable key\n   */\n  public redirectToAuth = (returnUrl?: string): void => {\n    const redirectUrl = returnUrl || window.location.href;\n\n    // Build auth URL on the auth domain\n    const authUrl = new URL(`${this.authDomain}/login`);\n    authUrl.searchParams.set('redirect_url', encodeURIComponent(redirectUrl));\n\n    // Redirect to auth domain\n    window.location.href = authUrl.toString();\n  };\n\n  /**\n   * Logout user\n   * Calls the logout endpoint on the API domain using this.client\n   */\n  public logout = async (): Promise<void> => {\n    try {\n      const sessionToken = this.session.getSessionToken();\n\n      if (sessionToken) {\n        await this.client.auth.logout({\n          headers: {\n            'x-blimu-publishable-key': this.config.publishableKey,\n            Authorization: `Bearer ${sessionToken}`,\n          },\n        });\n      }\n    } catch (error) {\n      console.error('Logout error:', error);\n    } finally {\n      this.store.setState({\n        user: null,\n        error: null,\n        status: 'unauthenticated',\n      });\n    }\n  };\n\n  /**\n   * Get the current session token\n   */\n\n  getAccessToken = async (_options: { template: 'web' }): Promise<string | undefined> => {\n    return await this.session.getSessionToken();\n  };\n\n  /**\n   * Get the runtime client for direct API calls\n   */\n  getClient(): Blimu {\n    return this.client;\n  }\n}\n"],"names":["ExternalStore","getAuthDomainFromPublishableKey","getAuthApiUrl","Blimu","AuthSessionService"],"mappings":";;;;;;AAOO,MAAM,0BAA0B;AAAA,EAarC,YAAY,QAAqB;AAXjC,SAAQ,aAA4B;AACpC,SAAQ,cAAuB;AAK/B,SAAQ,oBAA0C;AAClD,SAAQ,4BAAoD;AAuH5D,SAAO,iBAAiB,CAAC,cAA6B;AACpD,YAAM,cAAc,aAAa,OAAO,SAAS;AAGjD,YAAM,UAAU,IAAI,IAAI,GAAG,KAAK,UAAU,QAAQ;AAClD,cAAQ,aAAa,IAAI,gBAAgB,mBAAmB,WAAW,CAAC;AAGxE,aAAO,SAAS,OAAO,QAAQ,SAAA;AAAA,IACjC;AAMA,SAAO,SAAS,YAA2B;AACzC,UAAI;AACF,cAAM,eAAe,KAAK,QAAQ,gBAAA;AAElC,YAAI,cAAc;AAChB,gBAAM,KAAK,OAAO,KAAK,OAAO;AAAA,YAC5B,SAAS;AAAA,cACP,2BAA2B,KAAK,OAAO;AAAA,cACvC,eAAe,UAAU,YAAY;AAAA,YAAA;AAAA,UACvC,CACD;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,iBAAiB,KAAK;AAAA,MACtC,UAAA;AACE,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH;AAAA,IACF;AAMA,SAAA,iBAAiB,OAAO,aAA+D;AACrF,aAAO,MAAM,KAAK,QAAQ,gBAAA;AAAA,IAC5B;AA9JE,SAAK,SAAS;AACd,SAAK,QAAQ,IAAIA,4BAAyB;AAAA,MACxC,MAAM;AAAA,MACN,OAAO;AAAA,MACP,QAAQ;AAAA,IAAA,CACT;AACD,SAAK,SAAS,OAAO,eAAe,SAAS,MAAM;AAGnD,SAAK,aAAaC,+CAAgC,OAAO,cAAc;AACvE,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI,MAAM,sDAAsD;AAAA,IACxE;AAGA,UAAM,aAAaC,eAAAA,cAAc,OAAO,cAAc;AAEtD,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AAEA,SAAK,SAAS,IAAIC,aAAM;AAAA,MACtB,SAAS;AAAA,MACT,QAAQ,MAAM,KAAK,QAAQ,gBAAA;AAAA,MAC3B,SAAS,EAAE,2BAA2B,OAAO,eAAA;AAAA,IAAe,CAC7D;AAED,SAAK,UAAU,IAAIC,aAAAA;AAAAA,MACjB,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,OAAO;AAAA,IAAA;AAGT,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAkC;AAEhC,QAAI,KAAK,YAAa;AAGtB,QAAI,KAAK,kBAAmB;AAE5B,SAAK,4BAA4B,IAAI,gBAAA;AAErC,SAAK,oBAAoB,KAAK,QAC3B,WAAW;AAAA,MACV,QAAQ,KAAK,0BAA0B;AAAA,IAAA,CACxC,EACA,KAAK,CAAC,WAAW;AAChB,UAAI,OAAO,OAAO;AAChB,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO,OAAO;AAAA,UACd,QAAQ;AAAA,QAAA,CACT;AAAA,MACH,WAAW,OAAO,MAAM;AACtB,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM,OAAO;AAAA,UACb,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH,OAAO;AACL,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH;AAAA,IACF,CAAC,EACA,MAAM,CAAC,UAAU;AAChB,cAAQ,MAAM,qBAAqB,KAAK;AACxC,WAAK,MAAM,SAAS;AAAA,QAClB,MAAM;AAAA,QACN,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAChD,QAAQ;AAAA,MAAA,CACT;AAAA,IACH,CAAC,EACA,QAAQ,MAAM;AAGb,WAAK,cAAc;AACnB,WAAK,oBAAoB;AAAA,IAC3B,CAAC;AAEH,WAAO,MAAM;AACX,cAAQ,IAAI,qBAAqB;AACjC,WAAK,2BAA2B,MAAM,YAAY;AAClD,WAAK,oBAAoB;AAAA,IAE3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQO,kBAAkB;AACvB,WAAO,KAAK,QAAQ,gBAAA;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAuDA,YAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AACF;;"}

package/dist/client/runtime-client.d.ts

@@ -40,7 +40,7 @@ export declare class BlimuRuntimeClientWrapper {
      */
     getAccessToken: (_options: {
         template: "web";
-    }) => Promise<string | null>;
+    }) => Promise<string | undefined>;
     /**
      * Get the runtime client for direct API calls
      */

package/dist/client/runtime-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-client.d.ts","sourceRoot":"","sources":["../../src/client/runtime-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAQ,MAAM,UAAU,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,qBAAa,yBAAyB;IACpC,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAEtC,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,iBAAiB,CAA8B;IACvD,OAAO,CAAC,yBAAyB,CAAgC;IAEjE,SAAgB,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;gBAEpC,MAAM,EAAE,WAAW;IAuC/B;;;;OAIG;IACH,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI;IAyDjC;;;;;OAKG;IACI,eAAe;IAItB;;;OAGG;IACI,cAAc,GAAI,YAAY,MAAM,KAAG,IAAI,CAShD;IAEF;;;OAGG;IACI,MAAM,QAAa,OAAO,CAAC,IAAI,CAAC,CAqBrC;IAEF;;OAEG;IAEH,cAAc,GAAU,UAAU;QAAE,QAAQ,EAAE,KAAK,CAAA;KAAE,KAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE5E;IAEF;;OAEG;IACH,SAAS,IAAI,KAAK;CAGnB"}
+{"version":3,"file":"runtime-client.d.ts","sourceRoot":"","sources":["../../src/client/runtime-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,qBAAa,yBAAyB;IACpC,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAEtC,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,iBAAiB,CAA8B;IACvD,OAAO,CAAC,yBAAyB,CAAgC;IAEjE,SAAgB,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;gBAEpC,MAAM,EAAE,WAAW;IAuC/B;;;;OAIG;IACH,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI;IAyDjC;;;;;OAKG;IACI,eAAe;IAItB;;;OAGG;IACI,cAAc,GAAI,YAAY,MAAM,KAAG,IAAI,CAShD;IAEF;;;OAGG;IACI,MAAM,QAAa,OAAO,CAAC,IAAI,CAAC,CAqBrC;IAEF;;OAEG;IAEH,cAAc,GAAU,UAAU;QAAE,QAAQ,EAAE,KAAK,CAAA;KAAE,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEjF;IAEF;;OAEG;IACH,SAAS,IAAI,KAAK;CAGnB"}

package/dist/client/runtime-client.js

@@ -36,7 +36,7 @@ class BlimuRuntimeClientWrapper {
       }
     };
     this.getAccessToken = async (_options) => {
-      return await this.session.getSessionToken() ?? null;
+      return await this.session.getSessionToken();
     };
     this.config = config;
     this.store = new ExternalStore({

package/dist/client/runtime-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-client.js","sources":["../../src/client/runtime-client.ts"],"sourcesContent":["import { Blimu } from '@blimu/client';\n\nimport type { AuthState, BlimuConfig, User } from '../types';\nimport { getAuthApiUrl, getAuthDomainFromPublishableKey } from '../utils/publishable-key';\nimport { AuthSessionService, LOCALHOST_JWT_URL_PARAM_NAME } from './auth.service';\nimport { ExternalStore } from './external-store';\n\nexport class BlimuRuntimeClientWrapper {\n  private client: Blimu;\n  private authDomain: string | null = null;\n  private initialized: boolean = false;\n  private readonly session: AuthSessionService;\n\n  public config: BlimuConfig;\n  public isLive: boolean;\n  private initializePromise: Promise<void> | null = null;\n  private initializeAbortController: AbortController | null = null;\n\n  public readonly store: ExternalStore<AuthState>;\n\n  constructor(config: BlimuConfig) {\n    this.config = config;\n    this.store = new ExternalStore<AuthState>({\n      user: null,\n      error: null,\n      status: 'idle',\n    });\n    this.isLive = config.publishableKey.includes('live');\n\n    // Get auth UI domain from publishable key\n    this.authDomain = getAuthDomainFromPublishableKey(config.publishableKey);\n    if (!this.authDomain) {\n      throw new Error('Failed to determine auth domain from publishable key');\n    }\n\n    // Get auth API URL from publishable key\n    const authApiUrl = getAuthApiUrl(config.publishableKey);\n\n    if (!authApiUrl) {\n      throw new Error('Failed to determine auth API URL from publishable key');\n    }\n\n    this.client = new Blimu({\n      baseURL: authApiUrl,\n      bearer: () => this.session.getSessionToken(),\n      headers: { 'x-blimu-publishable-key': config.publishableKey },\n    });\n\n    this.session = new AuthSessionService(\n      this.isLive,\n      this.client,\n      this.store,\n      authApiUrl,\n      config.publishableKey,\n    );\n\n    this.initialize = this.initialize.bind(this);\n  }\n\n  /**\n   * Initialize authentication by checking for existing session\n   * Reads session token from cookie and validates it\n   * This method is idempotent - if initialization is already in progress, it will wait for that to complete\n   */\n  initialize(): (() => void) | void {\n    // If already initialized, return early\n    if (this.initialized) return;\n\n    // If initialization is in progress, return early (prevents concurrent calls)\n    if (this.initializePromise) return;\n\n    this.initializeAbortController = new AbortController();\n\n    this.initializePromise = this.session\n      .initialize({\n        signal: this.initializeAbortController.signal,\n      })\n      .then((result) => {\n        if (result.error) {\n          this.store.setState({\n            user: null,\n            error: result.error,\n            status: 'error',\n          });\n        } else if (result.user) {\n          this.store.setState({\n            user: result.user,\n            error: null,\n            status: 'authenticated',\n          });\n        } else {\n          this.store.setState({\n            user: null,\n            error: null,\n            status: 'unauthenticated',\n          });\n        }\n      })\n      .catch((error) => {\n        console.error('Initialize error:', error);\n        this.store.setState({\n          user: null,\n          error: error instanceof Error ? error.message : 'Initialization failed',\n          status: 'error',\n        });\n      })\n      .finally(() => {\n        // Mark as initialized after completion (success or failure)\n        // This prevents infinite loops from re-renders\n        this.initialized = true;\n        this.initializePromise = null;\n      });\n\n    return () => {\n      console.log('aborting initialize');\n      this.initializeAbortController?.abort('unmounting');\n      this.initializePromise = null;\n      // Don't reset initialized flag here - let the promise handle it\n    };\n  }\n\n  /**\n   * Refresh session token using the client token from httpOnly cookie\n   * The client token is stored in an httpOnly cookie and sent automatically\n   * Note: The auth worker should extract the __bli_client cookie and include it in the request body\n   * This method is idempotent - if a refresh is already in progress, it will wait for that refresh to complete\n   */\n  public scheduleRefresh() {\n    return this.session.scheduleRefresh();\n  }\n\n  /**\n   * Redirect user to auth domain for authentication\n   * Uses the auth domain derived from the publishable key\n   */\n  public redirectToAuth = (returnUrl?: string): void => {\n    const redirectUrl = returnUrl || window.location.href;\n\n    // Build auth URL on the auth domain\n    const authUrl = new URL(`${this.authDomain}/login`);\n    authUrl.searchParams.set('redirect_url', encodeURIComponent(redirectUrl));\n\n    // Redirect to auth domain\n    window.location.href = authUrl.toString();\n  };\n\n  /**\n   * Logout user\n   * Calls the logout endpoint on the API domain using this.client\n   */\n  public logout = async (): Promise<void> => {\n    try {\n      const sessionToken = this.session.getSessionToken();\n\n      if (sessionToken) {\n        await this.client.auth.logout({\n          headers: {\n            'x-blimu-publishable-key': this.config.publishableKey,\n            Authorization: `Bearer ${sessionToken}`,\n          },\n        });\n      }\n    } catch (error) {\n      console.error('Logout error:', error);\n    } finally {\n      this.store.setState({\n        user: null,\n        error: null,\n        status: 'unauthenticated',\n      });\n    }\n  };\n\n  /**\n   * Get the current session token\n   */\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  getAccessToken = async (_options: { template: 'web' }): Promise<string | null> => {\n    return (await this.session.getSessionToken()) ?? null;\n  };\n\n  /**\n   * Get the runtime client for direct API calls\n   */\n  getClient(): Blimu {\n    return this.client;\n  }\n}\n"],"names":[],"mappings":";;;;AAOO,MAAM,0BAA0B;AAAA,EAarC,YAAY,QAAqB;AAXjC,SAAQ,aAA4B;AACpC,SAAQ,cAAuB;AAK/B,SAAQ,oBAA0C;AAClD,SAAQ,4BAAoD;AAuH5D,SAAO,iBAAiB,CAAC,cAA6B;AACpD,YAAM,cAAc,aAAa,OAAO,SAAS;AAGjD,YAAM,UAAU,IAAI,IAAI,GAAG,KAAK,UAAU,QAAQ;AAClD,cAAQ,aAAa,IAAI,gBAAgB,mBAAmB,WAAW,CAAC;AAGxE,aAAO,SAAS,OAAO,QAAQ,SAAA;AAAA,IACjC;AAMA,SAAO,SAAS,YAA2B;AACzC,UAAI;AACF,cAAM,eAAe,KAAK,QAAQ,gBAAA;AAElC,YAAI,cAAc;AAChB,gBAAM,KAAK,OAAO,KAAK,OAAO;AAAA,YAC5B,SAAS;AAAA,cACP,2BAA2B,KAAK,OAAO;AAAA,cACvC,eAAe,UAAU,YAAY;AAAA,YAAA;AAAA,UACvC,CACD;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,iBAAiB,KAAK;AAAA,MACtC,UAAA;AACE,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH;AAAA,IACF;AAMA,SAAA,iBAAiB,OAAO,aAA0D;AAChF,aAAQ,MAAM,KAAK,QAAQ,gBAAA,KAAsB;AAAA,IACnD;AA9JE,SAAK,SAAS;AACd,SAAK,QAAQ,IAAI,cAAyB;AAAA,MACxC,MAAM;AAAA,MACN,OAAO;AAAA,MACP,QAAQ;AAAA,IAAA,CACT;AACD,SAAK,SAAS,OAAO,eAAe,SAAS,MAAM;AAGnD,SAAK,aAAa,gCAAgC,OAAO,cAAc;AACvE,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI,MAAM,sDAAsD;AAAA,IACxE;AAGA,UAAM,aAAa,cAAc,OAAO,cAAc;AAEtD,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AAEA,SAAK,SAAS,IAAI,MAAM;AAAA,MACtB,SAAS;AAAA,MACT,QAAQ,MAAM,KAAK,QAAQ,gBAAA;AAAA,MAC3B,SAAS,EAAE,2BAA2B,OAAO,eAAA;AAAA,IAAe,CAC7D;AAED,SAAK,UAAU,IAAI;AAAA,MACjB,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,OAAO;AAAA,IAAA;AAGT,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAkC;AAEhC,QAAI,KAAK,YAAa;AAGtB,QAAI,KAAK,kBAAmB;AAE5B,SAAK,4BAA4B,IAAI,gBAAA;AAErC,SAAK,oBAAoB,KAAK,QAC3B,WAAW;AAAA,MACV,QAAQ,KAAK,0BAA0B;AAAA,IAAA,CACxC,EACA,KAAK,CAAC,WAAW;AAChB,UAAI,OAAO,OAAO;AAChB,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO,OAAO;AAAA,UACd,QAAQ;AAAA,QAAA,CACT;AAAA,MACH,WAAW,OAAO,MAAM;AACtB,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM,OAAO;AAAA,UACb,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH,OAAO;AACL,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH;AAAA,IACF,CAAC,EACA,MAAM,CAAC,UAAU;AAChB,cAAQ,MAAM,qBAAqB,KAAK;AACxC,WAAK,MAAM,SAAS;AAAA,QAClB,MAAM;AAAA,QACN,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAChD,QAAQ;AAAA,MAAA,CACT;AAAA,IACH,CAAC,EACA,QAAQ,MAAM;AAGb,WAAK,cAAc;AACnB,WAAK,oBAAoB;AAAA,IAC3B,CAAC;AAEH,WAAO,MAAM;AACX,cAAQ,IAAI,qBAAqB;AACjC,WAAK,2BAA2B,MAAM,YAAY;AAClD,WAAK,oBAAoB;AAAA,IAE3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQO,kBAAkB;AACvB,WAAO,KAAK,QAAQ,gBAAA;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAuDA,YAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AACF;"}
+{"version":3,"file":"runtime-client.js","sources":["../../src/client/runtime-client.ts"],"sourcesContent":["import { Blimu } from '@blimu/client';\n\nimport type { AuthState, BlimuConfig } from '../types';\nimport { getAuthApiUrl, getAuthDomainFromPublishableKey } from '../utils/publishable-key';\nimport { AuthSessionService } from './auth.service';\nimport { ExternalStore } from './external-store';\n\nexport class BlimuRuntimeClientWrapper {\n  private client: Blimu;\n  private authDomain: string | null = null;\n  private initialized: boolean = false;\n  private readonly session: AuthSessionService;\n\n  public config: BlimuConfig;\n  public isLive: boolean;\n  private initializePromise: Promise<void> | null = null;\n  private initializeAbortController: AbortController | null = null;\n\n  public readonly store: ExternalStore<AuthState>;\n\n  constructor(config: BlimuConfig) {\n    this.config = config;\n    this.store = new ExternalStore<AuthState>({\n      user: null,\n      error: null,\n      status: 'idle',\n    });\n    this.isLive = config.publishableKey.includes('live');\n\n    // Get auth UI domain from publishable key\n    this.authDomain = getAuthDomainFromPublishableKey(config.publishableKey);\n    if (!this.authDomain) {\n      throw new Error('Failed to determine auth domain from publishable key');\n    }\n\n    // Get auth API URL from publishable key\n    const authApiUrl = getAuthApiUrl(config.publishableKey);\n\n    if (!authApiUrl) {\n      throw new Error('Failed to determine auth API URL from publishable key');\n    }\n\n    this.client = new Blimu({\n      baseURL: authApiUrl,\n      bearer: () => this.session.getSessionToken(),\n      headers: { 'x-blimu-publishable-key': config.publishableKey },\n    });\n\n    this.session = new AuthSessionService(\n      this.isLive,\n      this.client,\n      this.store,\n      authApiUrl,\n      config.publishableKey,\n    );\n\n    this.initialize = this.initialize.bind(this);\n  }\n\n  /**\n   * Initialize authentication by checking for existing session\n   * Reads session token from cookie and validates it\n   * This method is idempotent - if initialization is already in progress, it will wait for that to complete\n   */\n  initialize(): (() => void) | void {\n    // If already initialized, return early\n    if (this.initialized) return;\n\n    // If initialization is in progress, return early (prevents concurrent calls)\n    if (this.initializePromise) return;\n\n    this.initializeAbortController = new AbortController();\n\n    this.initializePromise = this.session\n      .initialize({\n        signal: this.initializeAbortController.signal,\n      })\n      .then((result) => {\n        if (result.error) {\n          this.store.setState({\n            user: null,\n            error: result.error,\n            status: 'error',\n          });\n        } else if (result.user) {\n          this.store.setState({\n            user: result.user,\n            error: null,\n            status: 'authenticated',\n          });\n        } else {\n          this.store.setState({\n            user: null,\n            error: null,\n            status: 'unauthenticated',\n          });\n        }\n      })\n      .catch((error) => {\n        console.error('Initialize error:', error);\n        this.store.setState({\n          user: null,\n          error: error instanceof Error ? error.message : 'Initialization failed',\n          status: 'error',\n        });\n      })\n      .finally(() => {\n        // Mark as initialized after completion (success or failure)\n        // This prevents infinite loops from re-renders\n        this.initialized = true;\n        this.initializePromise = null;\n      });\n\n    return () => {\n      console.log('aborting initialize');\n      this.initializeAbortController?.abort('unmounting');\n      this.initializePromise = null;\n      // Don't reset initialized flag here - let the promise handle it\n    };\n  }\n\n  /**\n   * Refresh session token using the client token from httpOnly cookie\n   * The client token is stored in an httpOnly cookie and sent automatically\n   * Note: The auth worker should extract the __bli_client cookie and include it in the request body\n   * This method is idempotent - if a refresh is already in progress, it will wait for that refresh to complete\n   */\n  public scheduleRefresh() {\n    return this.session.scheduleRefresh();\n  }\n\n  /**\n   * Redirect user to auth domain for authentication\n   * Uses the auth domain derived from the publishable key\n   */\n  public redirectToAuth = (returnUrl?: string): void => {\n    const redirectUrl = returnUrl || window.location.href;\n\n    // Build auth URL on the auth domain\n    const authUrl = new URL(`${this.authDomain}/login`);\n    authUrl.searchParams.set('redirect_url', encodeURIComponent(redirectUrl));\n\n    // Redirect to auth domain\n    window.location.href = authUrl.toString();\n  };\n\n  /**\n   * Logout user\n   * Calls the logout endpoint on the API domain using this.client\n   */\n  public logout = async (): Promise<void> => {\n    try {\n      const sessionToken = this.session.getSessionToken();\n\n      if (sessionToken) {\n        await this.client.auth.logout({\n          headers: {\n            'x-blimu-publishable-key': this.config.publishableKey,\n            Authorization: `Bearer ${sessionToken}`,\n          },\n        });\n      }\n    } catch (error) {\n      console.error('Logout error:', error);\n    } finally {\n      this.store.setState({\n        user: null,\n        error: null,\n        status: 'unauthenticated',\n      });\n    }\n  };\n\n  /**\n   * Get the current session token\n   */\n\n  getAccessToken = async (_options: { template: 'web' }): Promise<string | undefined> => {\n    return await this.session.getSessionToken();\n  };\n\n  /**\n   * Get the runtime client for direct API calls\n   */\n  getClient(): Blimu {\n    return this.client;\n  }\n}\n"],"names":[],"mappings":";;;;AAOO,MAAM,0BAA0B;AAAA,EAarC,YAAY,QAAqB;AAXjC,SAAQ,aAA4B;AACpC,SAAQ,cAAuB;AAK/B,SAAQ,oBAA0C;AAClD,SAAQ,4BAAoD;AAuH5D,SAAO,iBAAiB,CAAC,cAA6B;AACpD,YAAM,cAAc,aAAa,OAAO,SAAS;AAGjD,YAAM,UAAU,IAAI,IAAI,GAAG,KAAK,UAAU,QAAQ;AAClD,cAAQ,aAAa,IAAI,gBAAgB,mBAAmB,WAAW,CAAC;AAGxE,aAAO,SAAS,OAAO,QAAQ,SAAA;AAAA,IACjC;AAMA,SAAO,SAAS,YAA2B;AACzC,UAAI;AACF,cAAM,eAAe,KAAK,QAAQ,gBAAA;AAElC,YAAI,cAAc;AAChB,gBAAM,KAAK,OAAO,KAAK,OAAO;AAAA,YAC5B,SAAS;AAAA,cACP,2BAA2B,KAAK,OAAO;AAAA,cACvC,eAAe,UAAU,YAAY;AAAA,YAAA;AAAA,UACvC,CACD;AAAA,QACH;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,iBAAiB,KAAK;AAAA,MACtC,UAAA;AACE,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH;AAAA,IACF;AAMA,SAAA,iBAAiB,OAAO,aAA+D;AACrF,aAAO,MAAM,KAAK,QAAQ,gBAAA;AAAA,IAC5B;AA9JE,SAAK,SAAS;AACd,SAAK,QAAQ,IAAI,cAAyB;AAAA,MACxC,MAAM;AAAA,MACN,OAAO;AAAA,MACP,QAAQ;AAAA,IAAA,CACT;AACD,SAAK,SAAS,OAAO,eAAe,SAAS,MAAM;AAGnD,SAAK,aAAa,gCAAgC,OAAO,cAAc;AACvE,QAAI,CAAC,KAAK,YAAY;AACpB,YAAM,IAAI,MAAM,sDAAsD;AAAA,IACxE;AAGA,UAAM,aAAa,cAAc,OAAO,cAAc;AAEtD,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AAEA,SAAK,SAAS,IAAI,MAAM;AAAA,MACtB,SAAS;AAAA,MACT,QAAQ,MAAM,KAAK,QAAQ,gBAAA;AAAA,MAC3B,SAAS,EAAE,2BAA2B,OAAO,eAAA;AAAA,IAAe,CAC7D;AAED,SAAK,UAAU,IAAI;AAAA,MACjB,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,OAAO;AAAA,IAAA;AAGT,SAAK,aAAa,KAAK,WAAW,KAAK,IAAI;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,aAAkC;AAEhC,QAAI,KAAK,YAAa;AAGtB,QAAI,KAAK,kBAAmB;AAE5B,SAAK,4BAA4B,IAAI,gBAAA;AAErC,SAAK,oBAAoB,KAAK,QAC3B,WAAW;AAAA,MACV,QAAQ,KAAK,0BAA0B;AAAA,IAAA,CACxC,EACA,KAAK,CAAC,WAAW;AAChB,UAAI,OAAO,OAAO;AAChB,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO,OAAO;AAAA,UACd,QAAQ;AAAA,QAAA,CACT;AAAA,MACH,WAAW,OAAO,MAAM;AACtB,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM,OAAO;AAAA,UACb,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH,OAAO;AACL,aAAK,MAAM,SAAS;AAAA,UAClB,MAAM;AAAA,UACN,OAAO;AAAA,UACP,QAAQ;AAAA,QAAA,CACT;AAAA,MACH;AAAA,IACF,CAAC,EACA,MAAM,CAAC,UAAU;AAChB,cAAQ,MAAM,qBAAqB,KAAK;AACxC,WAAK,MAAM,SAAS;AAAA,QAClB,MAAM;AAAA,QACN,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAChD,QAAQ;AAAA,MAAA,CACT;AAAA,IACH,CAAC,EACA,QAAQ,MAAM;AAGb,WAAK,cAAc;AACnB,WAAK,oBAAoB;AAAA,IAC3B,CAAC;AAEH,WAAO,MAAM;AACX,cAAQ,IAAI,qBAAqB;AACjC,WAAK,2BAA2B,MAAM,YAAY;AAClD,WAAK,oBAAoB;AAAA,IAE3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQO,kBAAkB;AACvB,WAAO,KAAK,QAAQ,gBAAA;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAuDA,YAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AACF;"}

package/dist/components/index.cjs

@@ -1,13 +1,13 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const membersList = require("./members-list.cjs");
 const redirectToSignIn = require("./redirect-to-sign-in.cjs");
-const userButton = require("./user-button/user-button.cjs");
-const userAvatar = require("./user-avatar.cjs");
 const signInButton = require("./sign-in-button.cjs");
-const membersList = require("./members-list.cjs");
+const userAvatar = require("./user-avatar.cjs");
+const userButton = require("./user-button/user-button.cjs");
+exports.MembersList = membersList.MembersList;
 exports.RedirectToSignIn = redirectToSignIn.RedirectToSignIn;
-exports.UserButton = userButton.UserButton;
-exports.UserAvatar = userAvatar.UserAvatar;
 exports.SignInButton = signInButton.SignInButton;
-exports.MembersList = membersList.MembersList;
+exports.UserAvatar = userAvatar.UserAvatar;
+exports.UserButton = userButton.UserButton;
 //# sourceMappingURL=index.cjs.map

package/dist/components/index.d.ts

@@ -1,11 +1,11 @@
+export type { MembersListProps } from './members-list';
+export { MembersList } from './members-list';
 export type { RedirectToSignInProps } from './redirect-to-sign-in';
 export { RedirectToSignIn } from './redirect-to-sign-in';
-export type { UserButtonProps } from './user-button/user-button';
-export { UserButton } from './user-button/user-button';
-export type { UserAvatarProps } from './user-avatar';
-export { UserAvatar } from './user-avatar';
 export type { SignInButtonProps } from './sign-in-button';
 export { SignInButton } from './sign-in-button';
-export type { MembersListProps } from './members-list';
-export { MembersList } from './members-list';
+export type { UserAvatarProps } from './user-avatar';
+export { UserAvatar } from './user-avatar';
+export type { UserButtonProps } from './user-button/user-button';
+export { UserButton } from './user-button/user-button';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,YAAY,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/components/index.js

@@ -1,8 +1,8 @@
+import { MembersList } from "./members-list.js";
 import { RedirectToSignIn } from "./redirect-to-sign-in.js";
-import { UserButton } from "./user-button/user-button.js";
-import { UserAvatar } from "./user-avatar.js";
 import { SignInButton } from "./sign-in-button.js";
-import { MembersList } from "./members-list.js";
+import { UserAvatar } from "./user-avatar.js";
+import { UserButton } from "./user-button/user-button.js";
 export {
   MembersList,
   RedirectToSignIn,

package/dist/components/members-list.cjs

@@ -2,9 +2,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const jsxRuntime = require("react/jsx-runtime");
 const React = require("react");
-const userAvatar = require("./user-avatar.cjs");
-const utils = require("../lib/utils.cjs");
 const useMembers = require("../hooks/use-members.cjs");
+const utils = require("../lib/utils.cjs");
+const userAvatar = require("./user-avatar.cjs");
 function _interopNamespaceDefault(e) {
   const n = Object.create(null, { [Symbol.toStringTag]: { value: "Module" } });
   if (e) {

package/dist/components/members-list.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"members-list.cjs","sources":["../../src/components/members-list.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { UserAvatar } from './user-avatar';\nimport { cn } from '../lib/utils';\n\nimport { useMembers, type ResourceMember } from '../hooks/use-members';\n\nexport interface MembersListProps {\n  /**\n   * Resource type (e.g., 'organization', 'workspace')\n   */\n  resourceType: string;\n\n  /**\n   * Resource ID\n   */\n  resourceId: string;\n\n  /**\n   * Initial page number\n   * @default 1\n   */\n  initialPage?: number;\n\n  /**\n   * Items per page\n   * @default 20\n   */\n  pageSize?: number;\n\n  /**\n   * Search query\n   */\n  search?: string;\n\n  /**\n   * Custom render function for each member\n   */\n  renderMember?: (member: ResourceMember) => React.ReactNode;\n\n  /**\n   * Custom className\n   */\n  className?: string;\n\n  /**\n   * Show pagination controls\n   * @default true\n   */\n  showPagination?: boolean;\n}\n\n/**\n * Paginated list of organization/resource members\n *\n * @example\n * ```tsx\n * <MembersList\n *   resourceType=\"organization\"\n *   resourceId=\"org_123\"\n * />\n * ```\n *\n * @example With custom rendering\n * ```tsx\n * <MembersList\n *   resourceType=\"workspace\"\n *   resourceId=\"ws_456\"\n *   renderMember={(member) => (\n *     <div className=\"flex items-center gap-2\">\n *       <UserAvatar src={member.user.avatarUrl} alt={member.user.email} />\n *       <div>\n *         <p>{member.user.firstName} {member.user.lastName}</p>\n *         <p className=\"text-sm text-muted-foreground\">{member.user.email}</p>\n *       </div>\n *       <Badge>{member.role}</Badge>\n *     </div>\n *   )}\n * />\n * ```\n */\nexport function MembersList({\n  resourceType,\n  resourceId,\n  initialPage = 1,\n  pageSize = 20,\n  search,\n  renderMember,\n  className,\n  showPagination = true,\n}: MembersListProps) {\n  const [page, setPage] = React.useState(initialPage);\n  const { members, total, isLoading, error, hasNextPage, hasPreviousPage, refetch } = useMembers({\n    resourceType,\n    resourceId,\n    page,\n    limit: pageSize,\n    search,\n  });\n\n  const defaultRenderMember = (member: ResourceMember) => {\n    const displayName =\n      member.user.firstName && member.user.lastName\n        ? `${member.user.firstName} ${member.user.lastName}`\n        : member.user.firstName || member.user.email?.split('@')[0] || 'User';\n\n    return (\n      <div className=\"flex items-center justify-between p-3 rounded-blimu hover:bg-blimu-accent transition-colors\">\n        <div className=\"flex items-center gap-3\">\n          <UserAvatar\n            src={member.user.avatarUrl || undefined}\n            alt={member.user.email}\n            fallback={displayName}\n            size=\"default\"\n          />\n          <div className=\"flex flex-col\">\n            <p className=\"text-sm font-medium text-blimu-foreground\">{displayName}</p>\n            <p className=\"text-xs text-blimu-muted-foreground\">{member.user.email}</p>\n          </div>\n        </div>\n        <div className=\"flex items-center gap-2\">\n          {member.inherited && (\n            <span className=\"text-xs text-blimu-muted-foreground\">(inherited)</span>\n          )}\n          <span className=\"text-xs font-medium text-blimu-foreground bg-blimu-muted px-2 py-1 rounded-blimu-sm\">\n            {member.role}\n          </span>\n        </div>\n      </div>\n    );\n  };\n\n  if (error) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-destructive\">Error loading members: {error.message}</p>\n        <button\n          onClick={() => refetch()}\n          className=\"mt-2 text-sm text-blimu-primary hover:underline\"\n        >\n          Retry\n        </button>\n      </div>\n    );\n  }\n\n  if (isLoading && members.length === 0) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-muted-foreground\">Loading members...</p>\n      </div>\n    );\n  }\n\n  if (members.length === 0) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-muted-foreground\">No members found</p>\n      </div>\n    );\n  }\n\n  const totalPages = Math.ceil(total / pageSize);\n\n  return (\n    <div className={cn('flex flex-col', className)}>\n      <div className=\"flex flex-col divide-y divide-blimu-border\">\n        {members.map((member) => (\n          <div key={member.userId}>\n            {renderMember ? renderMember(member) : defaultRenderMember(member)}\n          </div>\n        ))}\n      </div>\n\n      {showPagination && totalPages > 1 && (\n        <div className=\"flex items-center justify-between mt-4 pt-4 border-t border-blimu-border\">\n          <div className=\"text-sm text-blimu-muted-foreground\">\n            Showing {(page - 1) * pageSize + 1} to {Math.min(page * pageSize, total)} of {total}{' '}\n            members\n          </div>\n          <div className=\"flex items-center gap-2\">\n            <button\n              onClick={() => setPage((p) => Math.max(1, p - 1))}\n              disabled={!hasPreviousPage || isLoading}\n              className=\"px-3 py-1 text-sm rounded-blimu border border-blimu-input bg-blimu-background hover:bg-blimu-accent disabled:opacity-50 disabled:cursor-not-allowed\"\n            >\n              Previous\n            </button>\n            <span className=\"text-sm text-blimu-foreground\">\n              Page {page} of {totalPages}\n            </span>\n            <button\n              onClick={() => setPage((p) => Math.min(totalPages, p + 1))}\n              disabled={!hasNextPage || isLoading}\n              className=\"px-3 py-1 text-sm rounded-blimu border border-blimu-input bg-blimu-background hover:bg-blimu-accent disabled:opacity-50 disabled:cursor-not-allowed\"\n            >\n              Next\n            </button>\n          </div>\n        </div>\n      )}\n    </div>\n  );\n}\n"],"names":["React","useMembers","jsxs","jsx","UserAvatar","cn"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAiFO,SAAS,YAAY;AAAA,EAC1B;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA,iBAAiB;AACnB,GAAqB;AACnB,QAAM,CAAC,MAAM,OAAO,IAAIA,iBAAM,SAAS,WAAW;AAClD,QAAM,EAAE,SAAS,OAAO,WAAW,OAAO,aAAa,iBAAiB,QAAA,IAAYC,sBAAW;AAAA,IAC7F;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP;AAAA,EAAA,CACD;AAED,QAAM,sBAAsB,CAAC,WAA2B;AACtD,UAAM,cACJ,OAAO,KAAK,aAAa,OAAO,KAAK,WACjC,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,KAChD,OAAO,KAAK,aAAa,OAAO,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AAEnE,WACEC,2BAAAA,KAAC,OAAA,EAAI,WAAU,+FACb,UAAA;AAAA,MAAAA,2BAAAA,KAAC,OAAA,EAAI,WAAU,2BACb,UAAA;AAAA,QAAAC,2BAAAA;AAAAA,UAACC,WAAAA;AAAAA,UAAA;AAAA,YACC,KAAK,OAAO,KAAK,aAAa;AAAA,YAC9B,KAAK,OAAO,KAAK;AAAA,YACjB,UAAU;AAAA,YACV,MAAK;AAAA,UAAA;AAAA,QAAA;AAAA,QAEPF,2BAAAA,KAAC,OAAA,EAAI,WAAU,iBACb,UAAA;AAAA,UAAAC,2BAAAA,IAAC,KAAA,EAAE,WAAU,6CAA6C,UAAA,aAAY;AAAA,yCACrE,KAAA,EAAE,WAAU,uCAAuC,UAAA,OAAO,KAAK,MAAA,CAAM;AAAA,QAAA,EAAA,CACxE;AAAA,MAAA,GACF;AAAA,MACAD,2BAAAA,KAAC,OAAA,EAAI,WAAU,2BACZ,UAAA;AAAA,QAAA,OAAO,aACNC,2BAAAA,IAAC,QAAA,EAAK,WAAU,uCAAsC,UAAA,eAAW;AAAA,QAEnEA,2BAAAA,IAAC,QAAA,EAAK,WAAU,uFACb,iBAAO,KAAA,CACV;AAAA,MAAA,EAAA,CACF;AAAA,IAAA,GACF;AAAA,EAEJ;AAEA,MAAI,OAAO;AACT,2CACG,OAAA,EAAI,WAAWE,MAAAA,GAAG,mBAAmB,SAAS,GAC7C,UAAA;AAAA,MAAAH,2BAAAA,KAAC,KAAA,EAAE,WAAU,kCAAiC,UAAA;AAAA,QAAA;AAAA,QAAwB,MAAM;AAAA,MAAA,GAAQ;AAAA,MACpFC,2BAAAA;AAAAA,QAAC;AAAA,QAAA;AAAA,UACC,SAAS,MAAM,QAAA;AAAA,UACf,WAAU;AAAA,UACX,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,IAED,GACF;AAAA,EAEJ;AAEA,MAAI,aAAa,QAAQ,WAAW,GAAG;AACrC,WACEA,2BAAAA,IAAC,OAAA,EAAI,WAAWE,MAAAA,GAAG,mBAAmB,SAAS,GAC7C,UAAAF,2BAAAA,IAAC,KAAA,EAAE,WAAU,uCAAsC,UAAA,qBAAA,CAAkB,GACvE;AAAA,EAEJ;AAEA,MAAI,QAAQ,WAAW,GAAG;AACxB,WACEA,2BAAAA,IAAC,OAAA,EAAI,WAAWE,MAAAA,GAAG,mBAAmB,SAAS,GAC7C,UAAAF,2BAAAA,IAAC,KAAA,EAAE,WAAU,uCAAsC,UAAA,mBAAA,CAAgB,GACrE;AAAA,EAEJ;AAEA,QAAM,aAAa,KAAK,KAAK,QAAQ,QAAQ;AAE7C,yCACG,OAAA,EAAI,WAAWE,MAAAA,GAAG,iBAAiB,SAAS,GAC3C,UAAA;AAAA,IAAAF,2BAAAA,IAAC,SAAI,WAAU,8CACZ,kBAAQ,IAAI,CAAC,WACZA,2BAAAA,IAAC,OAAA,EACE,yBAAe,aAAa,MAAM,IAAI,oBAAoB,MAAM,KADzD,OAAO,MAEjB,CACD,GACH;AAAA,IAEC,kBAAkB,aAAa,KAC9BD,2BAAAA,KAAC,OAAA,EAAI,WAAU,4EACb,UAAA;AAAA,MAAAA,2BAAAA,KAAC,OAAA,EAAI,WAAU,uCAAsC,UAAA;AAAA,QAAA;AAAA,SACzC,OAAO,KAAK,WAAW;AAAA,QAAE;AAAA,QAAK,KAAK,IAAI,OAAO,UAAU,KAAK;AAAA,QAAE;AAAA,QAAK;AAAA,QAAO;AAAA,QAAI;AAAA,MAAA,GAE3F;AAAA,MACAA,2BAAAA,KAAC,OAAA,EAAI,WAAU,2BACb,UAAA;AAAA,QAAAC,2BAAAA;AAAAA,UAAC;AAAA,UAAA;AAAA,YACC,SAAS,MAAM,QAAQ,CAAC,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;AAAA,YAChD,UAAU,CAAC,mBAAmB;AAAA,YAC9B,WAAU;AAAA,YACX,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,QAGDD,2BAAAA,KAAC,QAAA,EAAK,WAAU,iCAAgC,UAAA;AAAA,UAAA;AAAA,UACxC;AAAA,UAAK;AAAA,UAAK;AAAA,QAAA,GAClB;AAAA,QACAC,2BAAAA;AAAAA,UAAC;AAAA,UAAA;AAAA,YACC,SAAS,MAAM,QAAQ,CAAC,MAAM,KAAK,IAAI,YAAY,IAAI,CAAC,CAAC;AAAA,YACzD,UAAU,CAAC,eAAe;AAAA,YAC1B,WAAU;AAAA,YACX,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,MAED,EAAA,CACF;AAAA,IAAA,EAAA,CACF;AAAA,EAAA,GAEJ;AAEJ;;"}
+{"version":3,"file":"members-list.cjs","sources":["../../src/components/members-list.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { type ResourceMember, useMembers } from '../hooks/use-members';\nimport { cn } from '../lib/utils';\nimport { UserAvatar } from './user-avatar';\n\nexport interface MembersListProps {\n  /**\n   * Resource type (e.g., 'organization', 'workspace')\n   */\n  resourceType: string;\n\n  /**\n   * Resource ID\n   */\n  resourceId: string;\n\n  /**\n   * Initial page number\n   * @default 1\n   */\n  initialPage?: number;\n\n  /**\n   * Items per page\n   * @default 20\n   */\n  pageSize?: number;\n\n  /**\n   * Search query\n   */\n  search?: string;\n\n  /**\n   * Custom render function for each member\n   */\n  renderMember?: (member: ResourceMember) => React.ReactNode;\n\n  /**\n   * Custom className\n   */\n  className?: string;\n\n  /**\n   * Show pagination controls\n   * @default true\n   */\n  showPagination?: boolean;\n}\n\n/**\n * Paginated list of organization/resource members\n *\n * @example\n * ```tsx\n * <MembersList\n *   resourceType=\"organization\"\n *   resourceId=\"org_123\"\n * />\n * ```\n *\n * @example With custom rendering\n * ```tsx\n * <MembersList\n *   resourceType=\"workspace\"\n *   resourceId=\"ws_456\"\n *   renderMember={(member) => (\n *     <div className=\"flex items-center gap-2\">\n *       <UserAvatar src={member.user.avatarUrl} alt={member.user.email} />\n *       <div>\n *         <p>{member.user.firstName} {member.user.lastName}</p>\n *         <p className=\"text-sm text-muted-foreground\">{member.user.email}</p>\n *       </div>\n *       <Badge>{member.role}</Badge>\n *     </div>\n *   )}\n * />\n * ```\n */\nexport function MembersList({\n  resourceType,\n  resourceId,\n  initialPage = 1,\n  pageSize = 20,\n  search,\n  renderMember,\n  className,\n  showPagination = true,\n}: MembersListProps) {\n  const [page, setPage] = React.useState(initialPage);\n  const { members, total, isLoading, error, hasNextPage, hasPreviousPage, refetch } = useMembers({\n    resourceType,\n    resourceId,\n    page,\n    limit: pageSize,\n    search,\n  });\n\n  const defaultRenderMember = (member: ResourceMember) => {\n    const displayName =\n      member.user.firstName && member.user.lastName\n        ? `${member.user.firstName} ${member.user.lastName}`\n        : member.user.firstName || member.user.email?.split('@')[0] || 'User';\n\n    return (\n      <div className=\"flex items-center justify-between p-3 rounded-blimu hover:bg-blimu-accent transition-colors\">\n        <div className=\"flex items-center gap-3\">\n          <UserAvatar\n            src={member.user.avatarUrl || undefined}\n            alt={member.user.email}\n            fallback={displayName}\n            size=\"default\"\n          />\n          <div className=\"flex flex-col\">\n            <p className=\"text-sm font-medium text-blimu-foreground\">{displayName}</p>\n            <p className=\"text-xs text-blimu-muted-foreground\">{member.user.email}</p>\n          </div>\n        </div>\n        <div className=\"flex items-center gap-2\">\n          {member.inherited && (\n            <span className=\"text-xs text-blimu-muted-foreground\">(inherited)</span>\n          )}\n          <span className=\"text-xs font-medium text-blimu-foreground bg-blimu-muted px-2 py-1 rounded-blimu-sm\">\n            {member.role}\n          </span>\n        </div>\n      </div>\n    );\n  };\n\n  if (error) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-destructive\">Error loading members: {error.message}</p>\n        <button\n          onClick={() => refetch()}\n          className=\"mt-2 text-sm text-blimu-primary hover:underline\"\n        >\n          Retry\n        </button>\n      </div>\n    );\n  }\n\n  if (isLoading && members.length === 0) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-muted-foreground\">Loading members...</p>\n      </div>\n    );\n  }\n\n  if (members.length === 0) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-muted-foreground\">No members found</p>\n      </div>\n    );\n  }\n\n  const totalPages = Math.ceil(total / pageSize);\n\n  return (\n    <div className={cn('flex flex-col', className)}>\n      <div className=\"flex flex-col divide-y divide-blimu-border\">\n        {members.map((member) => (\n          <div key={member.userId}>\n            {renderMember ? renderMember(member) : defaultRenderMember(member)}\n          </div>\n        ))}\n      </div>\n\n      {showPagination && totalPages > 1 && (\n        <div className=\"flex items-center justify-between mt-4 pt-4 border-t border-blimu-border\">\n          <div className=\"text-sm text-blimu-muted-foreground\">\n            Showing {(page - 1) * pageSize + 1} to {Math.min(page * pageSize, total)} of {total}{' '}\n            members\n          </div>\n          <div className=\"flex items-center gap-2\">\n            <button\n              onClick={() => setPage((p) => Math.max(1, p - 1))}\n              disabled={!hasPreviousPage || isLoading}\n              className=\"px-3 py-1 text-sm rounded-blimu border border-blimu-input bg-blimu-background hover:bg-blimu-accent disabled:opacity-50 disabled:cursor-not-allowed\"\n            >\n              Previous\n            </button>\n            <span className=\"text-sm text-blimu-foreground\">\n              Page {page} of {totalPages}\n            </span>\n            <button\n              onClick={() => setPage((p) => Math.min(totalPages, p + 1))}\n              disabled={!hasNextPage || isLoading}\n              className=\"px-3 py-1 text-sm rounded-blimu border border-blimu-input bg-blimu-background hover:bg-blimu-accent disabled:opacity-50 disabled:cursor-not-allowed\"\n            >\n              Next\n            </button>\n          </div>\n        </div>\n      )}\n    </div>\n  );\n}\n"],"names":["React","useMembers","jsxs","jsx","UserAvatar","cn"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAgFO,SAAS,YAAY;AAAA,EAC1B;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA,iBAAiB;AACnB,GAAqB;AACnB,QAAM,CAAC,MAAM,OAAO,IAAIA,iBAAM,SAAS,WAAW;AAClD,QAAM,EAAE,SAAS,OAAO,WAAW,OAAO,aAAa,iBAAiB,QAAA,IAAYC,sBAAW;AAAA,IAC7F;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP;AAAA,EAAA,CACD;AAED,QAAM,sBAAsB,CAAC,WAA2B;AACtD,UAAM,cACJ,OAAO,KAAK,aAAa,OAAO,KAAK,WACjC,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,KAChD,OAAO,KAAK,aAAa,OAAO,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AAEnE,WACEC,2BAAAA,KAAC,OAAA,EAAI,WAAU,+FACb,UAAA;AAAA,MAAAA,2BAAAA,KAAC,OAAA,EAAI,WAAU,2BACb,UAAA;AAAA,QAAAC,2BAAAA;AAAAA,UAACC,WAAAA;AAAAA,UAAA;AAAA,YACC,KAAK,OAAO,KAAK,aAAa;AAAA,YAC9B,KAAK,OAAO,KAAK;AAAA,YACjB,UAAU;AAAA,YACV,MAAK;AAAA,UAAA;AAAA,QAAA;AAAA,QAEPF,2BAAAA,KAAC,OAAA,EAAI,WAAU,iBACb,UAAA;AAAA,UAAAC,2BAAAA,IAAC,KAAA,EAAE,WAAU,6CAA6C,UAAA,aAAY;AAAA,yCACrE,KAAA,EAAE,WAAU,uCAAuC,UAAA,OAAO,KAAK,MAAA,CAAM;AAAA,QAAA,EAAA,CACxE;AAAA,MAAA,GACF;AAAA,MACAD,2BAAAA,KAAC,OAAA,EAAI,WAAU,2BACZ,UAAA;AAAA,QAAA,OAAO,aACNC,2BAAAA,IAAC,QAAA,EAAK,WAAU,uCAAsC,UAAA,eAAW;AAAA,QAEnEA,2BAAAA,IAAC,QAAA,EAAK,WAAU,uFACb,iBAAO,KAAA,CACV;AAAA,MAAA,EAAA,CACF;AAAA,IAAA,GACF;AAAA,EAEJ;AAEA,MAAI,OAAO;AACT,2CACG,OAAA,EAAI,WAAWE,MAAAA,GAAG,mBAAmB,SAAS,GAC7C,UAAA;AAAA,MAAAH,2BAAAA,KAAC,KAAA,EAAE,WAAU,kCAAiC,UAAA;AAAA,QAAA;AAAA,QAAwB,MAAM;AAAA,MAAA,GAAQ;AAAA,MACpFC,2BAAAA;AAAAA,QAAC;AAAA,QAAA;AAAA,UACC,SAAS,MAAM,QAAA;AAAA,UACf,WAAU;AAAA,UACX,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,IAED,GACF;AAAA,EAEJ;AAEA,MAAI,aAAa,QAAQ,WAAW,GAAG;AACrC,WACEA,2BAAAA,IAAC,OAAA,EAAI,WAAWE,MAAAA,GAAG,mBAAmB,SAAS,GAC7C,UAAAF,2BAAAA,IAAC,KAAA,EAAE,WAAU,uCAAsC,UAAA,qBAAA,CAAkB,GACvE;AAAA,EAEJ;AAEA,MAAI,QAAQ,WAAW,GAAG;AACxB,WACEA,2BAAAA,IAAC,OAAA,EAAI,WAAWE,MAAAA,GAAG,mBAAmB,SAAS,GAC7C,UAAAF,2BAAAA,IAAC,KAAA,EAAE,WAAU,uCAAsC,UAAA,mBAAA,CAAgB,GACrE;AAAA,EAEJ;AAEA,QAAM,aAAa,KAAK,KAAK,QAAQ,QAAQ;AAE7C,yCACG,OAAA,EAAI,WAAWE,MAAAA,GAAG,iBAAiB,SAAS,GAC3C,UAAA;AAAA,IAAAF,2BAAAA,IAAC,SAAI,WAAU,8CACZ,kBAAQ,IAAI,CAAC,WACZA,2BAAAA,IAAC,OAAA,EACE,yBAAe,aAAa,MAAM,IAAI,oBAAoB,MAAM,KADzD,OAAO,MAEjB,CACD,GACH;AAAA,IAEC,kBAAkB,aAAa,KAC9BD,2BAAAA,KAAC,OAAA,EAAI,WAAU,4EACb,UAAA;AAAA,MAAAA,2BAAAA,KAAC,OAAA,EAAI,WAAU,uCAAsC,UAAA;AAAA,QAAA;AAAA,SACzC,OAAO,KAAK,WAAW;AAAA,QAAE;AAAA,QAAK,KAAK,IAAI,OAAO,UAAU,KAAK;AAAA,QAAE;AAAA,QAAK;AAAA,QAAO;AAAA,QAAI;AAAA,MAAA,GAE3F;AAAA,MACAA,2BAAAA,KAAC,OAAA,EAAI,WAAU,2BACb,UAAA;AAAA,QAAAC,2BAAAA;AAAAA,UAAC;AAAA,UAAA;AAAA,YACC,SAAS,MAAM,QAAQ,CAAC,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;AAAA,YAChD,UAAU,CAAC,mBAAmB;AAAA,YAC9B,WAAU;AAAA,YACX,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,QAGDD,2BAAAA,KAAC,QAAA,EAAK,WAAU,iCAAgC,UAAA;AAAA,UAAA;AAAA,UACxC;AAAA,UAAK;AAAA,UAAK;AAAA,QAAA,GAClB;AAAA,QACAC,2BAAAA;AAAAA,UAAC;AAAA,UAAA;AAAA,YACC,SAAS,MAAM,QAAQ,CAAC,MAAM,KAAK,IAAI,YAAY,IAAI,CAAC,CAAC;AAAA,YACzD,UAAU,CAAC,eAAe;AAAA,YAC1B,WAAU;AAAA,YACX,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,MAED,EAAA,CACF;AAAA,IAAA,EAAA,CACF;AAAA,EAAA,GAEJ;AAEJ;;"}

package/dist/components/members-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"members-list.d.ts","sourceRoot":"","sources":["../../src/components/members-list.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAK/B,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEvE,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,KAAK,CAAC,SAAS,CAAC;IAE3D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,WAAW,CAAC,EAC1B,YAAY,EACZ,UAAU,EACV,WAAe,EACf,QAAa,EACb,MAAM,EACN,YAAY,EACZ,SAAS,EACT,cAAqB,GACtB,EAAE,gBAAgB,qBAiHlB"}
+{"version":3,"file":"members-list.d.ts","sourceRoot":"","sources":["../../src/components/members-list.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,EAAE,KAAK,cAAc,EAAc,MAAM,sBAAsB,CAAC;AAIvE,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,KAAK,CAAC,SAAS,CAAC;IAE3D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,WAAW,CAAC,EAC1B,YAAY,EACZ,UAAU,EACV,WAAe,EACf,QAAa,EACb,MAAM,EACN,YAAY,EACZ,SAAS,EACT,cAAqB,GACtB,EAAE,gBAAgB,qBAiHlB"}

package/dist/components/members-list.js

@@ -1,8 +1,8 @@
 import { jsxs, jsx } from "react/jsx-runtime";
 import * as React from "react";
-import { UserAvatar } from "./user-avatar.js";
-import { cn } from "../lib/utils.js";
 import { useMembers } from "../hooks/use-members.js";
+import { cn } from "../lib/utils.js";
+import { UserAvatar } from "./user-avatar.js";
 function MembersList({
   resourceType,
   resourceId,

package/dist/components/members-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"members-list.js","sources":["../../src/components/members-list.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { UserAvatar } from './user-avatar';\nimport { cn } from '../lib/utils';\n\nimport { useMembers, type ResourceMember } from '../hooks/use-members';\n\nexport interface MembersListProps {\n  /**\n   * Resource type (e.g., 'organization', 'workspace')\n   */\n  resourceType: string;\n\n  /**\n   * Resource ID\n   */\n  resourceId: string;\n\n  /**\n   * Initial page number\n   * @default 1\n   */\n  initialPage?: number;\n\n  /**\n   * Items per page\n   * @default 20\n   */\n  pageSize?: number;\n\n  /**\n   * Search query\n   */\n  search?: string;\n\n  /**\n   * Custom render function for each member\n   */\n  renderMember?: (member: ResourceMember) => React.ReactNode;\n\n  /**\n   * Custom className\n   */\n  className?: string;\n\n  /**\n   * Show pagination controls\n   * @default true\n   */\n  showPagination?: boolean;\n}\n\n/**\n * Paginated list of organization/resource members\n *\n * @example\n * ```tsx\n * <MembersList\n *   resourceType=\"organization\"\n *   resourceId=\"org_123\"\n * />\n * ```\n *\n * @example With custom rendering\n * ```tsx\n * <MembersList\n *   resourceType=\"workspace\"\n *   resourceId=\"ws_456\"\n *   renderMember={(member) => (\n *     <div className=\"flex items-center gap-2\">\n *       <UserAvatar src={member.user.avatarUrl} alt={member.user.email} />\n *       <div>\n *         <p>{member.user.firstName} {member.user.lastName}</p>\n *         <p className=\"text-sm text-muted-foreground\">{member.user.email}</p>\n *       </div>\n *       <Badge>{member.role}</Badge>\n *     </div>\n *   )}\n * />\n * ```\n */\nexport function MembersList({\n  resourceType,\n  resourceId,\n  initialPage = 1,\n  pageSize = 20,\n  search,\n  renderMember,\n  className,\n  showPagination = true,\n}: MembersListProps) {\n  const [page, setPage] = React.useState(initialPage);\n  const { members, total, isLoading, error, hasNextPage, hasPreviousPage, refetch } = useMembers({\n    resourceType,\n    resourceId,\n    page,\n    limit: pageSize,\n    search,\n  });\n\n  const defaultRenderMember = (member: ResourceMember) => {\n    const displayName =\n      member.user.firstName && member.user.lastName\n        ? `${member.user.firstName} ${member.user.lastName}`\n        : member.user.firstName || member.user.email?.split('@')[0] || 'User';\n\n    return (\n      <div className=\"flex items-center justify-between p-3 rounded-blimu hover:bg-blimu-accent transition-colors\">\n        <div className=\"flex items-center gap-3\">\n          <UserAvatar\n            src={member.user.avatarUrl || undefined}\n            alt={member.user.email}\n            fallback={displayName}\n            size=\"default\"\n          />\n          <div className=\"flex flex-col\">\n            <p className=\"text-sm font-medium text-blimu-foreground\">{displayName}</p>\n            <p className=\"text-xs text-blimu-muted-foreground\">{member.user.email}</p>\n          </div>\n        </div>\n        <div className=\"flex items-center gap-2\">\n          {member.inherited && (\n            <span className=\"text-xs text-blimu-muted-foreground\">(inherited)</span>\n          )}\n          <span className=\"text-xs font-medium text-blimu-foreground bg-blimu-muted px-2 py-1 rounded-blimu-sm\">\n            {member.role}\n          </span>\n        </div>\n      </div>\n    );\n  };\n\n  if (error) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-destructive\">Error loading members: {error.message}</p>\n        <button\n          onClick={() => refetch()}\n          className=\"mt-2 text-sm text-blimu-primary hover:underline\"\n        >\n          Retry\n        </button>\n      </div>\n    );\n  }\n\n  if (isLoading && members.length === 0) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-muted-foreground\">Loading members...</p>\n      </div>\n    );\n  }\n\n  if (members.length === 0) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-muted-foreground\">No members found</p>\n      </div>\n    );\n  }\n\n  const totalPages = Math.ceil(total / pageSize);\n\n  return (\n    <div className={cn('flex flex-col', className)}>\n      <div className=\"flex flex-col divide-y divide-blimu-border\">\n        {members.map((member) => (\n          <div key={member.userId}>\n            {renderMember ? renderMember(member) : defaultRenderMember(member)}\n          </div>\n        ))}\n      </div>\n\n      {showPagination && totalPages > 1 && (\n        <div className=\"flex items-center justify-between mt-4 pt-4 border-t border-blimu-border\">\n          <div className=\"text-sm text-blimu-muted-foreground\">\n            Showing {(page - 1) * pageSize + 1} to {Math.min(page * pageSize, total)} of {total}{' '}\n            members\n          </div>\n          <div className=\"flex items-center gap-2\">\n            <button\n              onClick={() => setPage((p) => Math.max(1, p - 1))}\n              disabled={!hasPreviousPage || isLoading}\n              className=\"px-3 py-1 text-sm rounded-blimu border border-blimu-input bg-blimu-background hover:bg-blimu-accent disabled:opacity-50 disabled:cursor-not-allowed\"\n            >\n              Previous\n            </button>\n            <span className=\"text-sm text-blimu-foreground\">\n              Page {page} of {totalPages}\n            </span>\n            <button\n              onClick={() => setPage((p) => Math.min(totalPages, p + 1))}\n              disabled={!hasNextPage || isLoading}\n              className=\"px-3 py-1 text-sm rounded-blimu border border-blimu-input bg-blimu-background hover:bg-blimu-accent disabled:opacity-50 disabled:cursor-not-allowed\"\n            >\n              Next\n            </button>\n          </div>\n        </div>\n      )}\n    </div>\n  );\n}\n"],"names":[],"mappings":";;;;;AAiFO,SAAS,YAAY;AAAA,EAC1B;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA,iBAAiB;AACnB,GAAqB;AACnB,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,WAAW;AAClD,QAAM,EAAE,SAAS,OAAO,WAAW,OAAO,aAAa,iBAAiB,QAAA,IAAY,WAAW;AAAA,IAC7F;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP;AAAA,EAAA,CACD;AAED,QAAM,sBAAsB,CAAC,WAA2B;AACtD,UAAM,cACJ,OAAO,KAAK,aAAa,OAAO,KAAK,WACjC,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,KAChD,OAAO,KAAK,aAAa,OAAO,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AAEnE,WACE,qBAAC,OAAA,EAAI,WAAU,+FACb,UAAA;AAAA,MAAA,qBAAC,OAAA,EAAI,WAAU,2BACb,UAAA;AAAA,QAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,KAAK,OAAO,KAAK,aAAa;AAAA,YAC9B,KAAK,OAAO,KAAK;AAAA,YACjB,UAAU;AAAA,YACV,MAAK;AAAA,UAAA;AAAA,QAAA;AAAA,QAEP,qBAAC,OAAA,EAAI,WAAU,iBACb,UAAA;AAAA,UAAA,oBAAC,KAAA,EAAE,WAAU,6CAA6C,UAAA,aAAY;AAAA,8BACrE,KAAA,EAAE,WAAU,uCAAuC,UAAA,OAAO,KAAK,MAAA,CAAM;AAAA,QAAA,EAAA,CACxE;AAAA,MAAA,GACF;AAAA,MACA,qBAAC,OAAA,EAAI,WAAU,2BACZ,UAAA;AAAA,QAAA,OAAO,aACN,oBAAC,QAAA,EAAK,WAAU,uCAAsC,UAAA,eAAW;AAAA,QAEnE,oBAAC,QAAA,EAAK,WAAU,uFACb,iBAAO,KAAA,CACV;AAAA,MAAA,EAAA,CACF;AAAA,IAAA,GACF;AAAA,EAEJ;AAEA,MAAI,OAAO;AACT,gCACG,OAAA,EAAI,WAAW,GAAG,mBAAmB,SAAS,GAC7C,UAAA;AAAA,MAAA,qBAAC,KAAA,EAAE,WAAU,kCAAiC,UAAA;AAAA,QAAA;AAAA,QAAwB,MAAM;AAAA,MAAA,GAAQ;AAAA,MACpF;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,SAAS,MAAM,QAAA;AAAA,UACf,WAAU;AAAA,UACX,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,IAED,GACF;AAAA,EAEJ;AAEA,MAAI,aAAa,QAAQ,WAAW,GAAG;AACrC,WACE,oBAAC,OAAA,EAAI,WAAW,GAAG,mBAAmB,SAAS,GAC7C,UAAA,oBAAC,KAAA,EAAE,WAAU,uCAAsC,UAAA,qBAAA,CAAkB,GACvE;AAAA,EAEJ;AAEA,MAAI,QAAQ,WAAW,GAAG;AACxB,WACE,oBAAC,OAAA,EAAI,WAAW,GAAG,mBAAmB,SAAS,GAC7C,UAAA,oBAAC,KAAA,EAAE,WAAU,uCAAsC,UAAA,mBAAA,CAAgB,GACrE;AAAA,EAEJ;AAEA,QAAM,aAAa,KAAK,KAAK,QAAQ,QAAQ;AAE7C,8BACG,OAAA,EAAI,WAAW,GAAG,iBAAiB,SAAS,GAC3C,UAAA;AAAA,IAAA,oBAAC,SAAI,WAAU,8CACZ,kBAAQ,IAAI,CAAC,WACZ,oBAAC,OAAA,EACE,yBAAe,aAAa,MAAM,IAAI,oBAAoB,MAAM,KADzD,OAAO,MAEjB,CACD,GACH;AAAA,IAEC,kBAAkB,aAAa,KAC9B,qBAAC,OAAA,EAAI,WAAU,4EACb,UAAA;AAAA,MAAA,qBAAC,OAAA,EAAI,WAAU,uCAAsC,UAAA;AAAA,QAAA;AAAA,SACzC,OAAO,KAAK,WAAW;AAAA,QAAE;AAAA,QAAK,KAAK,IAAI,OAAO,UAAU,KAAK;AAAA,QAAE;AAAA,QAAK;AAAA,QAAO;AAAA,QAAI;AAAA,MAAA,GAE3F;AAAA,MACA,qBAAC,OAAA,EAAI,WAAU,2BACb,UAAA;AAAA,QAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,SAAS,MAAM,QAAQ,CAAC,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;AAAA,YAChD,UAAU,CAAC,mBAAmB;AAAA,YAC9B,WAAU;AAAA,YACX,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,QAGD,qBAAC,QAAA,EAAK,WAAU,iCAAgC,UAAA;AAAA,UAAA;AAAA,UACxC;AAAA,UAAK;AAAA,UAAK;AAAA,QAAA,GAClB;AAAA,QACA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,SAAS,MAAM,QAAQ,CAAC,MAAM,KAAK,IAAI,YAAY,IAAI,CAAC,CAAC;AAAA,YACzD,UAAU,CAAC,eAAe;AAAA,YAC1B,WAAU;AAAA,YACX,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,MAED,EAAA,CACF;AAAA,IAAA,EAAA,CACF;AAAA,EAAA,GAEJ;AAEJ;"}
+{"version":3,"file":"members-list.js","sources":["../../src/components/members-list.tsx"],"sourcesContent":["import * as React from 'react';\n\nimport { type ResourceMember, useMembers } from '../hooks/use-members';\nimport { cn } from '../lib/utils';\nimport { UserAvatar } from './user-avatar';\n\nexport interface MembersListProps {\n  /**\n   * Resource type (e.g., 'organization', 'workspace')\n   */\n  resourceType: string;\n\n  /**\n   * Resource ID\n   */\n  resourceId: string;\n\n  /**\n   * Initial page number\n   * @default 1\n   */\n  initialPage?: number;\n\n  /**\n   * Items per page\n   * @default 20\n   */\n  pageSize?: number;\n\n  /**\n   * Search query\n   */\n  search?: string;\n\n  /**\n   * Custom render function for each member\n   */\n  renderMember?: (member: ResourceMember) => React.ReactNode;\n\n  /**\n   * Custom className\n   */\n  className?: string;\n\n  /**\n   * Show pagination controls\n   * @default true\n   */\n  showPagination?: boolean;\n}\n\n/**\n * Paginated list of organization/resource members\n *\n * @example\n * ```tsx\n * <MembersList\n *   resourceType=\"organization\"\n *   resourceId=\"org_123\"\n * />\n * ```\n *\n * @example With custom rendering\n * ```tsx\n * <MembersList\n *   resourceType=\"workspace\"\n *   resourceId=\"ws_456\"\n *   renderMember={(member) => (\n *     <div className=\"flex items-center gap-2\">\n *       <UserAvatar src={member.user.avatarUrl} alt={member.user.email} />\n *       <div>\n *         <p>{member.user.firstName} {member.user.lastName}</p>\n *         <p className=\"text-sm text-muted-foreground\">{member.user.email}</p>\n *       </div>\n *       <Badge>{member.role}</Badge>\n *     </div>\n *   )}\n * />\n * ```\n */\nexport function MembersList({\n  resourceType,\n  resourceId,\n  initialPage = 1,\n  pageSize = 20,\n  search,\n  renderMember,\n  className,\n  showPagination = true,\n}: MembersListProps) {\n  const [page, setPage] = React.useState(initialPage);\n  const { members, total, isLoading, error, hasNextPage, hasPreviousPage, refetch } = useMembers({\n    resourceType,\n    resourceId,\n    page,\n    limit: pageSize,\n    search,\n  });\n\n  const defaultRenderMember = (member: ResourceMember) => {\n    const displayName =\n      member.user.firstName && member.user.lastName\n        ? `${member.user.firstName} ${member.user.lastName}`\n        : member.user.firstName || member.user.email?.split('@')[0] || 'User';\n\n    return (\n      <div className=\"flex items-center justify-between p-3 rounded-blimu hover:bg-blimu-accent transition-colors\">\n        <div className=\"flex items-center gap-3\">\n          <UserAvatar\n            src={member.user.avatarUrl || undefined}\n            alt={member.user.email}\n            fallback={displayName}\n            size=\"default\"\n          />\n          <div className=\"flex flex-col\">\n            <p className=\"text-sm font-medium text-blimu-foreground\">{displayName}</p>\n            <p className=\"text-xs text-blimu-muted-foreground\">{member.user.email}</p>\n          </div>\n        </div>\n        <div className=\"flex items-center gap-2\">\n          {member.inherited && (\n            <span className=\"text-xs text-blimu-muted-foreground\">(inherited)</span>\n          )}\n          <span className=\"text-xs font-medium text-blimu-foreground bg-blimu-muted px-2 py-1 rounded-blimu-sm\">\n            {member.role}\n          </span>\n        </div>\n      </div>\n    );\n  };\n\n  if (error) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-destructive\">Error loading members: {error.message}</p>\n        <button\n          onClick={() => refetch()}\n          className=\"mt-2 text-sm text-blimu-primary hover:underline\"\n        >\n          Retry\n        </button>\n      </div>\n    );\n  }\n\n  if (isLoading && members.length === 0) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-muted-foreground\">Loading members...</p>\n      </div>\n    );\n  }\n\n  if (members.length === 0) {\n    return (\n      <div className={cn('p-4 text-center', className)}>\n        <p className=\"text-sm text-blimu-muted-foreground\">No members found</p>\n      </div>\n    );\n  }\n\n  const totalPages = Math.ceil(total / pageSize);\n\n  return (\n    <div className={cn('flex flex-col', className)}>\n      <div className=\"flex flex-col divide-y divide-blimu-border\">\n        {members.map((member) => (\n          <div key={member.userId}>\n            {renderMember ? renderMember(member) : defaultRenderMember(member)}\n          </div>\n        ))}\n      </div>\n\n      {showPagination && totalPages > 1 && (\n        <div className=\"flex items-center justify-between mt-4 pt-4 border-t border-blimu-border\">\n          <div className=\"text-sm text-blimu-muted-foreground\">\n            Showing {(page - 1) * pageSize + 1} to {Math.min(page * pageSize, total)} of {total}{' '}\n            members\n          </div>\n          <div className=\"flex items-center gap-2\">\n            <button\n              onClick={() => setPage((p) => Math.max(1, p - 1))}\n              disabled={!hasPreviousPage || isLoading}\n              className=\"px-3 py-1 text-sm rounded-blimu border border-blimu-input bg-blimu-background hover:bg-blimu-accent disabled:opacity-50 disabled:cursor-not-allowed\"\n            >\n              Previous\n            </button>\n            <span className=\"text-sm text-blimu-foreground\">\n              Page {page} of {totalPages}\n            </span>\n            <button\n              onClick={() => setPage((p) => Math.min(totalPages, p + 1))}\n              disabled={!hasNextPage || isLoading}\n              className=\"px-3 py-1 text-sm rounded-blimu border border-blimu-input bg-blimu-background hover:bg-blimu-accent disabled:opacity-50 disabled:cursor-not-allowed\"\n            >\n              Next\n            </button>\n          </div>\n        </div>\n      )}\n    </div>\n  );\n}\n"],"names":[],"mappings":";;;;;AAgFO,SAAS,YAAY;AAAA,EAC1B;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA,iBAAiB;AACnB,GAAqB;AACnB,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,WAAW;AAClD,QAAM,EAAE,SAAS,OAAO,WAAW,OAAO,aAAa,iBAAiB,QAAA,IAAY,WAAW;AAAA,IAC7F;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP;AAAA,EAAA,CACD;AAED,QAAM,sBAAsB,CAAC,WAA2B;AACtD,UAAM,cACJ,OAAO,KAAK,aAAa,OAAO,KAAK,WACjC,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,KAChD,OAAO,KAAK,aAAa,OAAO,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AAEnE,WACE,qBAAC,OAAA,EAAI,WAAU,+FACb,UAAA;AAAA,MAAA,qBAAC,OAAA,EAAI,WAAU,2BACb,UAAA;AAAA,QAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,KAAK,OAAO,KAAK,aAAa;AAAA,YAC9B,KAAK,OAAO,KAAK;AAAA,YACjB,UAAU;AAAA,YACV,MAAK;AAAA,UAAA;AAAA,QAAA;AAAA,QAEP,qBAAC,OAAA,EAAI,WAAU,iBACb,UAAA;AAAA,UAAA,oBAAC,KAAA,EAAE,WAAU,6CAA6C,UAAA,aAAY;AAAA,8BACrE,KAAA,EAAE,WAAU,uCAAuC,UAAA,OAAO,KAAK,MAAA,CAAM;AAAA,QAAA,EAAA,CACxE;AAAA,MAAA,GACF;AAAA,MACA,qBAAC,OAAA,EAAI,WAAU,2BACZ,UAAA;AAAA,QAAA,OAAO,aACN,oBAAC,QAAA,EAAK,WAAU,uCAAsC,UAAA,eAAW;AAAA,QAEnE,oBAAC,QAAA,EAAK,WAAU,uFACb,iBAAO,KAAA,CACV;AAAA,MAAA,EAAA,CACF;AAAA,IAAA,GACF;AAAA,EAEJ;AAEA,MAAI,OAAO;AACT,gCACG,OAAA,EAAI,WAAW,GAAG,mBAAmB,SAAS,GAC7C,UAAA;AAAA,MAAA,qBAAC,KAAA,EAAE,WAAU,kCAAiC,UAAA;AAAA,QAAA;AAAA,QAAwB,MAAM;AAAA,MAAA,GAAQ;AAAA,MACpF;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,SAAS,MAAM,QAAA;AAAA,UACf,WAAU;AAAA,UACX,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,IAED,GACF;AAAA,EAEJ;AAEA,MAAI,aAAa,QAAQ,WAAW,GAAG;AACrC,WACE,oBAAC,OAAA,EAAI,WAAW,GAAG,mBAAmB,SAAS,GAC7C,UAAA,oBAAC,KAAA,EAAE,WAAU,uCAAsC,UAAA,qBAAA,CAAkB,GACvE;AAAA,EAEJ;AAEA,MAAI,QAAQ,WAAW,GAAG;AACxB,WACE,oBAAC,OAAA,EAAI,WAAW,GAAG,mBAAmB,SAAS,GAC7C,UAAA,oBAAC,KAAA,EAAE,WAAU,uCAAsC,UAAA,mBAAA,CAAgB,GACrE;AAAA,EAEJ;AAEA,QAAM,aAAa,KAAK,KAAK,QAAQ,QAAQ;AAE7C,8BACG,OAAA,EAAI,WAAW,GAAG,iBAAiB,SAAS,GAC3C,UAAA;AAAA,IAAA,oBAAC,SAAI,WAAU,8CACZ,kBAAQ,IAAI,CAAC,WACZ,oBAAC,OAAA,EACE,yBAAe,aAAa,MAAM,IAAI,oBAAoB,MAAM,KADzD,OAAO,MAEjB,CACD,GACH;AAAA,IAEC,kBAAkB,aAAa,KAC9B,qBAAC,OAAA,EAAI,WAAU,4EACb,UAAA;AAAA,MAAA,qBAAC,OAAA,EAAI,WAAU,uCAAsC,UAAA;AAAA,QAAA;AAAA,SACzC,OAAO,KAAK,WAAW;AAAA,QAAE;AAAA,QAAK,KAAK,IAAI,OAAO,UAAU,KAAK;AAAA,QAAE;AAAA,QAAK;AAAA,QAAO;AAAA,QAAI;AAAA,MAAA,GAE3F;AAAA,MACA,qBAAC,OAAA,EAAI,WAAU,2BACb,UAAA;AAAA,QAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,SAAS,MAAM,QAAQ,CAAC,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;AAAA,YAChD,UAAU,CAAC,mBAAmB;AAAA,YAC9B,WAAU;AAAA,YACX,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,QAGD,qBAAC,QAAA,EAAK,WAAU,iCAAgC,UAAA;AAAA,UAAA;AAAA,UACxC;AAAA,UAAK;AAAA,UAAK;AAAA,QAAA,GAClB;AAAA,QACA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,SAAS,MAAM,QAAQ,CAAC,MAAM,KAAK,IAAI,YAAY,IAAI,CAAC,CAAC;AAAA,YACzD,UAAU,CAAC,eAAe;AAAA,YAC1B,WAAU;AAAA,YACX,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,MAED,EAAA,CACF;AAAA,IAAA,EAAA,CACF;AAAA,EAAA,GAEJ;AAEJ;"}

package/dist/components/sign-in-button.cjs

@@ -2,9 +2,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const jsxRuntime = require("react/jsx-runtime");
 require("react");
+const useAuth = require("../hooks/use-auth.cjs");
 const utils = require("../lib/utils.cjs");
 const variants = require("../lib/variants.cjs");
-const useAuth = require("../hooks/use-auth.cjs");
 function SignInButton({
   variant = "default",
   size = "default",