@djangocfg/api 2.1.541 → 2.1.543

package/README.md

@@ -32,7 +32,6 @@ import {
   CfgTotpSetup,         // TOTP setup / confirm
   CfgTotpVerify,        // TOTP verify / backup
   CfgTotpBackupCodes,   // Backup codes
-  CfgCentrifugo,        // Centrifugo token
 } from '@djangocfg/api';
 
 // OTP login
@@ -137,7 +136,7 @@ import { isDev, isProd, isBrowser, isStaticBuild, dpopEnabled } from '@djangocfg
 ## Type Namespaces
 
 ```typescript
-import type { AccountsTypes, TotpTypes, CentrifugoTypes } from '@djangocfg/api';
+import type { AccountsTypes, TotpTypes } from '@djangocfg/api';
 
 type User = AccountsTypes.User;
 type Device = TotpTypes.TotpDevice;

package/dist/auth-server.cjs

@@ -1,3 +1,4 @@
+"use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;

package/dist/auth-server.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth/server.ts","../src/auth/middlewares/proxy.ts"],"sourcesContent":["/**\n * @djangocfg/api/auth/server\n *\n * Server-side authentication utilities.\n * Use this entry point in server components, API routes, and middleware.\n *\n * @example\n * ```typescript\n * // middleware.ts\n * import { proxyMiddleware } from '@djangocfg/api/auth/server';\n *\n * export function middleware(request: NextRequest) {\n *   return proxyMiddleware(request);\n * }\n * ```\n */\n\n// Middlewares\nexport * from './middlewares';\n","import { NextRequest, NextResponse } from 'next/server';\n\n/**\n * Proxy middleware for media and API endpoints\n * Use this in your middleware.ts file\n */\nexport function proxyMiddleware(request: NextRequest) {\n  const { pathname, search } = request.nextUrl;\n  const apiUrl = process.env.NEXT_PUBLIC_API_URL;\n\n  // Proxy /media/* - Images and static files\n  if (pathname.startsWith('/media/')) {\n    const targetUrl = `${apiUrl}${pathname}${search}`;\n    return NextResponse.rewrite(targetUrl, { request: { headers: request.headers } });\n  }\n\n  // Proxy /api/* - API endpoints\n  if (pathname.startsWith('/api/')) {\n    const targetUrl = `${apiUrl}${pathname}${search}`;\n    return NextResponse.rewrite(targetUrl, { request: { headers: request.headers } });\n  }\n\n  return NextResponse.next();\n}\n\n/**\n * Recommended matcher config for proxy middleware\n * Add this to your middleware.ts config\n */\nexport const proxyMiddlewareConfig = {\n  matcher: ['/media/:path*', '/api/:path*'],\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAA0C;AAMnC,SAAS,gBAAgB,SAAsB;AACpD,QAAM,EAAE,UAAU,OAAO,IAAI,QAAQ;AACrC,QAAM,SAAS,QAAQ,IAAI;AAG3B,MAAI,SAAS,WAAW,SAAS,GAAG;AAClC,UAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM;AAC/C,WAAO,2BAAa,QAAQ,WAAW,EAAE,SAAS,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAAA,EAClF;AAGA,MAAI,SAAS,WAAW,OAAO,GAAG;AAChC,UAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM;AAC/C,WAAO,2BAAa,QAAQ,WAAW,EAAE,SAAS,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAAA,EAClF;AAEA,SAAO,2BAAa,KAAK;AAC3B;AAjBgB;AAuBT,IAAM,wBAAwB;AAAA,EACnC,SAAS,CAAC,iBAAiB,aAAa;AAC1C;","names":[]}
+{"version":3,"sources":["../src/auth/server.ts","../src/auth/middlewares/proxy.ts"],"sourcesContent":["/**\n * @djangocfg/api/auth/server\n *\n * Server-side authentication utilities.\n * Use this entry point in server components, API routes, and middleware.\n *\n * @example\n * ```typescript\n * // middleware.ts\n * import { proxyMiddleware } from '@djangocfg/api/auth/server';\n *\n * export function middleware(request: NextRequest) {\n *   return proxyMiddleware(request);\n * }\n * ```\n */\n\n// Middlewares\nexport * from './middlewares';\n","import { NextRequest, NextResponse } from 'next/server';\n\n/**\n * Proxy middleware for media and API endpoints\n * Use this in your middleware.ts file\n */\nexport function proxyMiddleware(request: NextRequest) {\n  const { pathname, search } = request.nextUrl;\n  const apiUrl = process.env.NEXT_PUBLIC_API_URL;\n\n  // Proxy /media/* - Images and static files\n  if (pathname.startsWith('/media/')) {\n    const targetUrl = `${apiUrl}${pathname}${search}`;\n    return NextResponse.rewrite(targetUrl, { request: { headers: request.headers } });\n  }\n\n  // Proxy /api/* - API endpoints\n  if (pathname.startsWith('/api/')) {\n    const targetUrl = `${apiUrl}${pathname}${search}`;\n    return NextResponse.rewrite(targetUrl, { request: { headers: request.headers } });\n  }\n\n  return NextResponse.next();\n}\n\n/**\n * Recommended matcher config for proxy middleware\n * Add this to your middleware.ts config\n */\nexport const proxyMiddlewareConfig = {\n  matcher: ['/media/:path*', '/api/:path*'],\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAA0C;AAMnC,SAAS,gBAAgB,SAAsB;AACpD,QAAM,EAAE,UAAU,OAAO,IAAI,QAAQ;AACrC,QAAM,SAAS,QAAQ,IAAI;AAG3B,MAAI,SAAS,WAAW,SAAS,GAAG;AAClC,UAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM;AAC/C,WAAO,2BAAa,QAAQ,WAAW,EAAE,SAAS,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAAA,EAClF;AAGA,MAAI,SAAS,WAAW,OAAO,GAAG;AAChC,UAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM;AAC/C,WAAO,2BAAa,QAAQ,WAAW,EAAE,SAAS,EAAE,SAAS,QAAQ,QAAQ,EAAE,CAAC;AAAA,EAClF;AAEA,SAAO,2BAAa,KAAK;AAC3B;AAjBgB;AAuBT,IAAM,wBAAwB;AAAA,EACnC,SAAS,CAAC,iBAAiB,aAAa;AAC1C;","names":[]}

package/dist/auth.cjs

@@ -1,4 +1,5 @@
 "use client";
+"use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -943,9 +944,6 @@ __name(withBasePath, "withBasePath");
 function useCfgRouter() {
   const router = (0, import_navigation.useRouter)();
   const basePath = (0, import_react2.useMemo)(() => getBasePath(), []);
-  const isStaticBuild2 = (0, import_react2.useMemo)(() => {
-    return typeof process !== "undefined" && process.env.NEXT_PUBLIC_STATIC_BUILD === "true";
-  }, []);
   const push = (0, import_react2.useCallback)((href, options) => {
     if (basePath) {
       window.location.href = withBasePath(href, basePath);
@@ -2542,6 +2540,33 @@ var Analytics = {
 
 // src/auth/hooks/useSessionStorage.ts
 var import_react7 = require("react");
+
+// src/auth/utils/storage.ts
+var MAX_ITEM_KB = 1024;
+function isQuotaExceededError(error) {
+  if (typeof error !== "object" || error === null) return false;
+  const { name, code, message } = error;
+  return name === "QuotaExceededError" || code === 22 || typeof message === "string" && message.includes("quota");
+}
+__name(isQuotaExceededError, "isQuotaExceededError");
+function isWithinSizeLimit(data, key) {
+  try {
+    const sizeInKB = new Blob([JSON.stringify(data)]).size / 1024;
+    if (sizeInKB > MAX_ITEM_KB) {
+      authLogger.warn(
+        `Data size (${sizeInKB.toFixed(2)}KB) exceeds 1MB limit for key "${key}"`
+      );
+      return false;
+    }
+    return true;
+  } catch (error) {
+    authLogger.error(`Error checking data size for key "${key}":`, error);
+    return false;
+  }
+}
+__name(isWithinSizeLimit, "isWithinSizeLimit");
+
+// src/auth/hooks/useSessionStorage.ts
 function useSessionStorage(key, initialValue) {
   const [storedValue, setStoredValue] = (0, import_react7.useState)(() => {
     if (typeof window === "undefined") {
@@ -2555,21 +2580,6 @@ function useSessionStorage(key, initialValue) {
       return initialValue;
     }
   });
-  const checkDataSize = /* @__PURE__ */ __name((data) => {
-    try {
-      const jsonString = JSON.stringify(data);
-      const sizeInBytes = new Blob([jsonString]).size;
-      const sizeInKB = sizeInBytes / 1024;
-      if (sizeInKB > 1024) {
-        authLogger.warn(`Data size (${sizeInKB.toFixed(2)}KB) exceeds 1MB limit for key "${key}"`);
-        return false;
-      }
-      return true;
-    } catch (error) {
-      authLogger.error(`Error checking data size for key "${key}":`, error);
-      return false;
-    }
-  }, "checkDataSize");
   const clearOldData = /* @__PURE__ */ __name(() => {
     try {
       const keys = Object.keys(sessionStorage).filter((key2) => key2 && typeof key2 === "string");
@@ -2606,7 +2616,7 @@ function useSessionStorage(key, initialValue) {
   const setValue = /* @__PURE__ */ __name((value) => {
     try {
       const valueToStore = value instanceof Function ? value(storedValue) : value;
-      if (!checkDataSize(valueToStore)) {
+      if (!isWithinSizeLimit(valueToStore, key)) {
         authLogger.warn(`Data size too large for key "${key}", removing key`);
         try {
           window.sessionStorage.removeItem(key);
@@ -2622,7 +2632,7 @@ function useSessionStorage(key, initialValue) {
           window.sessionStorage.setItem(key, JSON.stringify(valueToStore));
           window.sessionStorage.setItem(`${key}_timestamp`, Date.now().toString());
         } catch (storageError) {
-          if (storageError.name === "QuotaExceededError" || storageError.code === 22 || storageError.message?.includes("quota")) {
+          if (isQuotaExceededError(storageError)) {
             authLogger.warn("sessionStorage quota exceeded, clearing old data...");
             clearOldData();
             try {
@@ -2658,7 +2668,7 @@ function useSessionStorage(key, initialValue) {
           window.sessionStorage.removeItem(key);
           window.sessionStorage.removeItem(`${key}_timestamp`);
         } catch (removeError) {
-          if (removeError.name === "QuotaExceededError" || removeError.code === 22 || removeError.message?.includes("quota")) {
+          if (isQuotaExceededError(removeError)) {
             authLogger.warn("sessionStorage quota exceeded during removal, clearing old data...");
             clearOldData();
             try {
@@ -2933,7 +2943,6 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
   const {
     identifier,
     otp,
-    isLoading,
     acceptedTerms,
     marketingConsent,
     rememberMe,
@@ -3285,7 +3294,9 @@ var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
       if (response.user?.id) {
         Analytics.setUser(String(response.user.id));
       }
-      onSuccess?.(response.user, response.is_new_user || false);
+      if (response.user) {
+        onSuccess?.(response.user, response.is_new_user || false);
+      }
       if (!skipRedirect) {
         const finalRedirectUrl = redirectUrl || "/private";
         router.hardPush(finalRedirectUrl);
@@ -3518,21 +3529,6 @@ function useLocalStorage(key, initialValue) {
       return initialValue;
     }
   });
-  const checkDataSize = /* @__PURE__ */ __name((data) => {
-    try {
-      const jsonString = JSON.stringify(data);
-      const sizeInBytes = new Blob([jsonString]).size;
-      const sizeInKB = sizeInBytes / 1024;
-      if (sizeInKB > 1024) {
-        authLogger.warn(`Data size (${sizeInKB.toFixed(2)}KB) exceeds 1MB limit for key "${key}"`);
-        return false;
-      }
-      return true;
-    } catch (error) {
-      authLogger.error(`Error checking data size for key "${key}":`, error);
-      return false;
-    }
-  }, "checkDataSize");
   const clearOldData = /* @__PURE__ */ __name(() => {
     try {
       const keys = Object.keys(localStorage).filter((key2) => key2 && typeof key2 === "string");
@@ -3569,7 +3565,7 @@ function useLocalStorage(key, initialValue) {
   const setValue = /* @__PURE__ */ __name((value) => {
     try {
       const valueToStore = value instanceof Function ? value(storedValue) : value;
-      if (!checkDataSize(valueToStore)) {
+      if (!isWithinSizeLimit(valueToStore, key)) {
         authLogger.warn(`Data size too large for key "${key}", removing key`);
         try {
           window.localStorage.removeItem(key);
@@ -3589,7 +3585,7 @@ function useLocalStorage(key, initialValue) {
           }
           window.localStorage.setItem(`${key}_timestamp`, Date.now().toString());
         } catch (storageError) {
-          if (storageError.name === "QuotaExceededError" || storageError.code === 22 || storageError.message?.includes("quota")) {
+          if (isQuotaExceededError(storageError)) {
             authLogger.warn("localStorage quota exceeded, clearing old data...");
             clearOldData();
             try {
@@ -3633,7 +3629,7 @@ function useLocalStorage(key, initialValue) {
           window.localStorage.removeItem(key);
           window.localStorage.removeItem(`${key}_timestamp`);
         } catch (removeError) {
-          if (removeError.name === "QuotaExceededError" || removeError.code === 22 || removeError.message?.includes("quota")) {
+          if (isQuotaExceededError(removeError)) {
             authLogger.warn("localStorage quota exceeded during removal, clearing old data...");
             clearOldData();
             try {
@@ -4044,53 +4040,41 @@ __name(useCfgAccountsOtpRequestCreate, "useCfgAccountsOtpRequestCreate");
 var import_mutation8 = __toESM(require("swr/mutation"), 1);
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyResponse.ts
-var import_zod19 = require("zod");
-
-// src/_api/generated/_cfg_accounts/schemas/User.ts
 var import_zod18 = require("zod");
 
-// src/_api/generated/_cfg_accounts/schemas/CentrifugoToken.ts
-var import_zod17 = require("zod");
-var CentrifugoTokenSchema = import_zod17.z.object({
-  token: import_zod17.z.string(),
-  centrifugo_url: import_zod17.z.string(),
-  expires_at: import_zod17.z.string().datetime({ offset: true }),
-  channels: import_zod17.z.array(import_zod17.z.string())
-});
-
 // src/_api/generated/_cfg_accounts/schemas/User.ts
-var UserSchema = import_zod18.z.object({
-  id: import_zod18.z.number().int(),
-  email: import_zod18.z.email(),
-  first_name: import_zod18.z.string().max(50).nullable().optional(),
-  last_name: import_zod18.z.string().max(50).nullable().optional(),
-  full_name: import_zod18.z.string(),
-  initials: import_zod18.z.string(),
-  display_username: import_zod18.z.string(),
-  company: import_zod18.z.string().max(100).nullable().optional(),
-  phone: import_zod18.z.string().max(20).nullable().optional(),
-  position: import_zod18.z.string().max(100).nullable().optional(),
-  language: import_zod18.z.string().max(10).nullable().optional(),
-  timezone: import_zod18.z.string().max(64).nullable().optional(),
-  avatar: import_zod18.z.string().nullable(),
-  is_staff: import_zod18.z.boolean(),
-  is_superuser: import_zod18.z.boolean(),
-  date_joined: import_zod18.z.string().datetime({ offset: true }),
-  last_login: import_zod18.z.string().datetime({ offset: true }).nullable(),
-  unanswered_messages_count: import_zod18.z.number().int().default(0),
-  centrifugo: CentrifugoTokenSchema.nullable(),
-  api_key: import_zod18.z.string().nullable()
+var import_zod17 = require("zod");
+var UserSchema = import_zod17.z.object({
+  id: import_zod17.z.number().int(),
+  email: import_zod17.z.email(),
+  first_name: import_zod17.z.string().max(50).nullable().optional(),
+  last_name: import_zod17.z.string().max(50).nullable().optional(),
+  full_name: import_zod17.z.string(),
+  initials: import_zod17.z.string(),
+  display_username: import_zod17.z.string(),
+  company: import_zod17.z.string().max(100).nullable().optional(),
+  phone: import_zod17.z.string().max(20).nullable().optional(),
+  position: import_zod17.z.string().max(100).nullable().optional(),
+  language: import_zod17.z.string().max(10).nullable().optional(),
+  timezone: import_zod17.z.string().max(64).nullable().optional(),
+  avatar: import_zod17.z.string().nullable(),
+  is_staff: import_zod17.z.boolean(),
+  is_superuser: import_zod17.z.boolean(),
+  date_joined: import_zod17.z.string().datetime({ offset: true }),
+  last_login: import_zod17.z.string().datetime({ offset: true }).nullable(),
+  unanswered_messages_count: import_zod17.z.number().int().default(0),
+  api_key: import_zod17.z.string().nullable()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyResponse.ts
-var OTPVerifyResponseSchema = import_zod19.z.object({
-  requires_2fa: import_zod19.z.boolean().default(false).optional(),
-  session_id: import_zod19.z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
-  refresh: import_zod19.z.string().nullable().optional(),
-  access: import_zod19.z.string().nullable().optional(),
+var OTPVerifyResponseSchema = import_zod18.z.object({
+  requires_2fa: import_zod18.z.boolean().default(false).optional(),
+  session_id: import_zod18.z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
+  refresh: import_zod18.z.string().nullable().optional(),
+  access: import_zod18.z.string().nullable().optional(),
   user: UserSchema.nullable().optional(),
-  should_prompt_2fa: import_zod19.z.boolean().optional(),
-  persistent_session: import_zod19.z.boolean().optional()
+  should_prompt_2fa: import_zod18.z.boolean().optional(),
+  persistent_session: import_zod18.z.boolean().optional()
 });
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsOtpVerifyCreate.ts
@@ -4192,10 +4176,10 @@ __name(useCfgAccountsProfileAvatarCreate, "useCfgAccountsProfileAvatarCreate");
 var import_mutation10 = __toESM(require("swr/mutation"), 1);
 
 // src/_api/generated/_cfg_accounts/schemas/AccountDeleteResponse.ts
-var import_zod20 = require("zod");
-var AccountDeleteResponseSchema = import_zod20.z.object({
-  success: import_zod20.z.boolean(),
-  message: import_zod20.z.string()
+var import_zod19 = require("zod");
+var AccountDeleteResponseSchema = import_zod19.z.object({
+  success: import_zod19.z.boolean(),
+  message: import_zod19.z.string()
 });
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsProfilePartialPartialUpdate.ts
@@ -4310,117 +4294,117 @@ var import_mutation15 = __toESM(require("swr/mutation"), 1);
 var import_mutation16 = __toESM(require("swr/mutation"), 1);
 
 // src/_api/generated/_cfg_accounts/schemas/TokenRefresh.ts
-var import_zod21 = require("zod");
-var TokenRefreshSchema = import_zod21.z.object({
-  access: import_zod21.z.string(),
-  refresh: import_zod21.z.string()
+var import_zod20 = require("zod");
+var TokenRefreshSchema = import_zod20.z.object({
+  access: import_zod20.z.string(),
+  refresh: import_zod20.z.string()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/APIKeyRequest.ts
-var import_zod22 = require("zod");
-var APIKeyRequestSchema = import_zod22.z.object({
-  key: import_zod22.z.string().min(1),
-  reissued_at: import_zod22.z.string().datetime({ offset: true }).nullable(),
-  created_at: import_zod22.z.string().datetime({ offset: true })
+var import_zod21 = require("zod");
+var APIKeyRequestSchema = import_zod21.z.object({
+  key: import_zod21.z.string().min(1),
+  reissued_at: import_zod21.z.string().datetime({ offset: true }).nullable(),
+  created_at: import_zod21.z.string().datetime({ offset: true })
 });
 
 // src/_api/generated/_cfg_accounts/schemas/APIKeyTestRequest.ts
-var import_zod23 = require("zod");
-var APIKeyTestRequestSchema = import_zod23.z.object({
-  key: import_zod23.z.string().min(1)
+var import_zod22 = require("zod");
+var APIKeyTestRequestSchema = import_zod22.z.object({
+  key: import_zod22.z.string().min(1)
 });
 
 // src/_api/generated/_cfg_accounts/schemas/CfgUserUpdateRequest.ts
-var import_zod24 = require("zod");
-var CfgUserUpdateRequestSchema = import_zod24.z.object({
-  first_name: import_zod24.z.string().max(50).optional(),
-  last_name: import_zod24.z.string().max(50).optional(),
-  company: import_zod24.z.string().max(100).optional(),
-  phone: import_zod24.z.string().max(20).optional(),
-  position: import_zod24.z.string().max(100).optional(),
-  language: import_zod24.z.string().max(10).optional(),
-  timezone: import_zod24.z.string().max(64).optional()
+var import_zod23 = require("zod");
+var CfgUserUpdateRequestSchema = import_zod23.z.object({
+  first_name: import_zod23.z.string().max(50).optional(),
+  last_name: import_zod23.z.string().max(50).optional(),
+  company: import_zod23.z.string().max(100).optional(),
+  phone: import_zod23.z.string().max(20).optional(),
+  position: import_zod23.z.string().max(100).optional(),
+  language: import_zod23.z.string().max(10).optional(),
+  timezone: import_zod23.z.string().max(64).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthAuthorizeRequestRequest.ts
-var import_zod25 = require("zod");
-var OAuthAuthorizeRequestRequestSchema = import_zod25.z.object({
-  redirect_uri: import_zod25.z.string().optional(),
-  source_url: import_zod25.z.string().optional()
+var import_zod24 = require("zod");
+var OAuthAuthorizeRequestRequestSchema = import_zod24.z.object({
+  redirect_uri: import_zod24.z.string().optional(),
+  source_url: import_zod24.z.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthCallbackRequestRequest.ts
-var import_zod26 = require("zod");
-var OAuthCallbackRequestRequestSchema = import_zod26.z.object({
-  code: import_zod26.z.string().min(10).max(500),
-  state: import_zod26.z.string().min(20).max(100),
-  redirect_uri: import_zod26.z.string().optional(),
-  remember_me: import_zod26.z.boolean().default(false).optional()
+var import_zod25 = require("zod");
+var OAuthCallbackRequestRequestSchema = import_zod25.z.object({
+  code: import_zod25.z.string().min(10).max(500),
+  state: import_zod25.z.string().min(20).max(100),
+  redirect_uri: import_zod25.z.string().optional(),
+  remember_me: import_zod25.z.boolean().default(false).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthDisconnectRequestRequest.ts
-var import_zod27 = require("zod");
-var OAuthDisconnectRequestRequestSchema = import_zod27.z.object({
+var import_zod26 = require("zod");
+var OAuthDisconnectRequestRequestSchema = import_zod26.z.object({
   provider: OAuthProviderEnumSchema
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthError.ts
+var import_zod27 = require("zod");
+var OAuthErrorSchema = import_zod27.z.object({
+  error: import_zod27.z.string(),
+  error_description: import_zod27.z.string().optional()
+});
+
+// src/_api/generated/_cfg_accounts/schemas/OTPErrorResponse.ts
 var import_zod28 = require("zod");
-var OAuthErrorSchema = import_zod28.z.object({
+var OTPErrorResponseSchema = import_zod28.z.object({
   error: import_zod28.z.string(),
-  error_description: import_zod28.z.string().optional()
+  error_code: import_zod28.z.string().nullable().optional(),
+  retry_after: import_zod28.z.number().int().nullable().optional()
 });
 
-// src/_api/generated/_cfg_accounts/schemas/OTPErrorResponse.ts
+// src/_api/generated/_cfg_accounts/schemas/OTPRequestRequest.ts
 var import_zod29 = require("zod");
-var OTPErrorResponseSchema = import_zod29.z.object({
-  error: import_zod29.z.string(),
-  error_code: import_zod29.z.string().nullable().optional(),
-  retry_after: import_zod29.z.number().int().nullable().optional()
+var OTPRequestRequestSchema = import_zod29.z.object({
+  identifier: import_zod29.z.string().min(1),
+  source_url: import_zod29.z.string().optional(),
+  marketing_consent: import_zod29.z.boolean().nullable().optional(),
+  consent_disclosure_version: import_zod29.z.string().max(64).optional()
 });
 
-// src/_api/generated/_cfg_accounts/schemas/OTPRequestRequest.ts
+// src/_api/generated/_cfg_accounts/schemas/OTPVerifyRequest.ts
 var import_zod30 = require("zod");
-var OTPRequestRequestSchema = import_zod30.z.object({
+var OTPVerifyRequestSchema = import_zod30.z.object({
   identifier: import_zod30.z.string().min(1),
+  otp: import_zod30.z.string().min(4).max(4),
   source_url: import_zod30.z.string().optional(),
-  marketing_consent: import_zod30.z.boolean().nullable().optional(),
-  consent_disclosure_version: import_zod30.z.string().max(64).optional()
+  remember_me: import_zod30.z.boolean().default(false).optional()
 });
 
-// src/_api/generated/_cfg_accounts/schemas/OTPVerifyRequest.ts
+// src/_api/generated/_cfg_accounts/schemas/PatchedCfgUserUpdateRequest.ts
 var import_zod31 = require("zod");
-var OTPVerifyRequestSchema = import_zod31.z.object({
-  identifier: import_zod31.z.string().min(1),
-  otp: import_zod31.z.string().min(4).max(4),
-  source_url: import_zod31.z.string().optional(),
-  remember_me: import_zod31.z.boolean().default(false).optional()
+var PatchedCfgUserUpdateRequestSchema = import_zod31.z.object({
+  first_name: import_zod31.z.string().max(50).optional(),
+  last_name: import_zod31.z.string().max(50).optional(),
+  company: import_zod31.z.string().max(100).optional(),
+  phone: import_zod31.z.string().max(20).optional(),
+  position: import_zod31.z.string().max(100).optional(),
+  language: import_zod31.z.string().max(10).optional(),
+  timezone: import_zod31.z.string().max(64).optional()
 });
 
-// src/_api/generated/_cfg_accounts/schemas/PatchedCfgUserUpdateRequest.ts
+// src/_api/generated/_cfg_accounts/schemas/TokenBlacklistRequest.ts
 var import_zod32 = require("zod");
-var PatchedCfgUserUpdateRequestSchema = import_zod32.z.object({
-  first_name: import_zod32.z.string().max(50).optional(),
-  last_name: import_zod32.z.string().max(50).optional(),
-  company: import_zod32.z.string().max(100).optional(),
-  phone: import_zod32.z.string().max(20).optional(),
-  position: import_zod32.z.string().max(100).optional(),
-  language: import_zod32.z.string().max(10).optional(),
-  timezone: import_zod32.z.string().max(64).optional()
+var TokenBlacklistRequestSchema = import_zod32.z.object({
+  refresh: import_zod32.z.string().min(1)
 });
 
-// src/_api/generated/_cfg_accounts/schemas/TokenBlacklistRequest.ts
+// src/_api/generated/_cfg_accounts/schemas/TokenRefreshRequest.ts
 var import_zod33 = require("zod");
-var TokenBlacklistRequestSchema = import_zod33.z.object({
+var TokenRefreshRequestSchema = import_zod33.z.object({
   refresh: import_zod33.z.string().min(1)
 });
 
-// src/_api/generated/_cfg_accounts/schemas/TokenRefreshRequest.ts
-var import_zod34 = require("zod");
-var TokenRefreshRequestSchema = import_zod34.z.object({
-  refresh: import_zod34.z.string().min(1)
-});
-
 // src/auth/context/AccountsContext.tsx
 var import_jsx_runtime = require("react/jsx-runtime");
 function hasApiOrigin() {
@@ -4485,26 +4469,26 @@ function AccountsProvider({ children }) {
       isLoadingRef.current = false;
     }
   }, []);
-  const updateProfile = /* @__PURE__ */ __name(async (data) => {
+  const updateProfile = (0, import_react15.useCallback)(async (data) => {
     await triggerProfileUpdate({ body: data });
     const user = await refreshProfile({ callerId: "updateProfile", force: true });
     return user;
-  }, "updateProfile");
-  const partialUpdateProfile = /* @__PURE__ */ __name(async (data) => {
+  }, [triggerProfileUpdate, refreshProfile]);
+  const partialUpdateProfile = (0, import_react15.useCallback)(async (data) => {
     await triggerProfilePartialUpdate({ body: data });
     const user = await refreshProfile({ callerId: "partialUpdateProfile", force: true });
     return user;
-  }, "partialUpdateProfile");
-  const uploadAvatar = /* @__PURE__ */ __name(async (avatar) => {
+  }, [triggerProfilePartialUpdate, refreshProfile]);
+  const uploadAvatar = (0, import_react15.useCallback)(async (avatar) => {
     await triggerAvatar({ body: { avatar } });
     const user = await refreshProfile({ callerId: "uploadAvatar", force: true });
     return user;
-  }, "uploadAvatar");
-  const requestOTP = /* @__PURE__ */ __name(async (data) => {
+  }, [triggerAvatar, refreshProfile]);
+  const requestOTP = (0, import_react15.useCallback)(async (data) => {
     const result = await triggerOtpRequest({ body: data });
     return result;
-  }, "requestOTP");
-  const verifyOTP = /* @__PURE__ */ __name(async (data) => {
+  }, [triggerOtpRequest]);
+  const verifyOTP = (0, import_react15.useCallback)(async (data) => {
     const result = await triggerOtpVerify({ body: data });
     if (result.requires_2fa && result.session_id) {
       authLogger.info("2FA required, session:", result.session_id);
@@ -4519,7 +4503,7 @@ function AccountsProvider({ children }) {
       }
     }
     return result;
-  }, "verifyOTP");
+  }, [triggerOtpVerify, refreshProfile]);
   const logout = (0, import_react15.useCallback)(() => {
     const refresh = auth.getRefreshToken();
     if (refresh) {
@@ -4949,18 +4933,20 @@ var validateEmail = /* @__PURE__ */ __name((email) => {
 }, "validateEmail");
 
 // src/auth/utils/errors.ts
+var prop = /* @__PURE__ */ __name((value, key) => typeof value === "object" && value !== null ? value[key] : void 0, "prop");
 var formatAuthError = /* @__PURE__ */ __name((error) => {
   if (typeof error === "string") {
     return error;
   }
-  if (error?.message) {
-    return error.message;
-  }
-  if (error?.detail) {
-    return error.detail;
-  }
-  if (error?.response?.data?.detail) {
-    return error.response.data.detail;
+  const candidates = [
+    prop(error, "message"),
+    prop(error, "detail"),
+    prop(prop(prop(error, "response"), "data"), "detail")
+  ];
+  for (const candidate of candidates) {
+    if (typeof candidate === "string" && candidate) {
+      return candidate;
+    }
   }
   return "An unexpected error occurred";
 }, "formatAuthError");