@djangocfg/api 2.1.541 → 2.1.543

package/dist/auth.mjs

@@ -16,10 +16,10 @@ var AUTH_CONSTANTS = {
 import { usePathname as usePathname3 } from "next/navigation";
 import {
   createContext as createContext2,
-  memo as memo2,
+  memo,
   useCallback as useCallback11,
   useContext as useContext2,
-  useEffect as useEffect7,
+  useEffect as useEffect6,
   useMemo as useMemo3,
   useRef as useRef6,
   useState as useState11
@@ -873,9 +873,6 @@ __name(withBasePath, "withBasePath");
 function useCfgRouter() {
   const router = useNextRouter();
   const basePath = useMemo(() => getBasePath(), []);
-  const isStaticBuild2 = useMemo(() => {
-    return typeof process !== "undefined" && process.env.NEXT_PUBLIC_STATIC_BUILD === "true";
-  }, []);
   const push = useCallback((href, options) => {
     if (basePath) {
       window.location.href = withBasePath(href, basePath);
@@ -2472,6 +2469,33 @@ var Analytics = {
 
 // src/auth/hooks/useSessionStorage.ts
 import { useState as useState3 } from "react";
+
+// src/auth/utils/storage.ts
+var MAX_ITEM_KB = 1024;
+function isQuotaExceededError(error) {
+  if (typeof error !== "object" || error === null) return false;
+  const { name, code, message } = error;
+  return name === "QuotaExceededError" || code === 22 || typeof message === "string" && message.includes("quota");
+}
+__name(isQuotaExceededError, "isQuotaExceededError");
+function isWithinSizeLimit(data, key) {
+  try {
+    const sizeInKB = new Blob([JSON.stringify(data)]).size / 1024;
+    if (sizeInKB > MAX_ITEM_KB) {
+      authLogger.warn(
+        `Data size (${sizeInKB.toFixed(2)}KB) exceeds 1MB limit for key "${key}"`
+      );
+      return false;
+    }
+    return true;
+  } catch (error) {
+    authLogger.error(`Error checking data size for key "${key}":`, error);
+    return false;
+  }
+}
+__name(isWithinSizeLimit, "isWithinSizeLimit");
+
+// src/auth/hooks/useSessionStorage.ts
 function useSessionStorage(key, initialValue) {
   const [storedValue, setStoredValue] = useState3(() => {
     if (typeof window === "undefined") {
@@ -2485,21 +2509,6 @@ function useSessionStorage(key, initialValue) {
       return initialValue;
     }
   });
-  const checkDataSize = /* @__PURE__ */ __name((data) => {
-    try {
-      const jsonString = JSON.stringify(data);
-      const sizeInBytes = new Blob([jsonString]).size;
-      const sizeInKB = sizeInBytes / 1024;
-      if (sizeInKB > 1024) {
-        authLogger.warn(`Data size (${sizeInKB.toFixed(2)}KB) exceeds 1MB limit for key "${key}"`);
-        return false;
-      }
-      return true;
-    } catch (error) {
-      authLogger.error(`Error checking data size for key "${key}":`, error);
-      return false;
-    }
-  }, "checkDataSize");
   const clearOldData = /* @__PURE__ */ __name(() => {
     try {
       const keys = Object.keys(sessionStorage).filter((key2) => key2 && typeof key2 === "string");
@@ -2536,7 +2545,7 @@ function useSessionStorage(key, initialValue) {
   const setValue = /* @__PURE__ */ __name((value) => {
     try {
       const valueToStore = value instanceof Function ? value(storedValue) : value;
-      if (!checkDataSize(valueToStore)) {
+      if (!isWithinSizeLimit(valueToStore, key)) {
         authLogger.warn(`Data size too large for key "${key}", removing key`);
         try {
           window.sessionStorage.removeItem(key);
@@ -2552,7 +2561,7 @@ function useSessionStorage(key, initialValue) {
           window.sessionStorage.setItem(key, JSON.stringify(valueToStore));
           window.sessionStorage.setItem(`${key}_timestamp`, Date.now().toString());
         } catch (storageError) {
-          if (storageError.name === "QuotaExceededError" || storageError.code === 22 || storageError.message?.includes("quota")) {
+          if (isQuotaExceededError(storageError)) {
             authLogger.warn("sessionStorage quota exceeded, clearing old data...");
             clearOldData();
             try {
@@ -2588,7 +2597,7 @@ function useSessionStorage(key, initialValue) {
           window.sessionStorage.removeItem(key);
           window.sessionStorage.removeItem(`${key}_timestamp`);
         } catch (removeError) {
-          if (removeError.name === "QuotaExceededError" || removeError.code === 22 || removeError.message?.includes("quota")) {
+          if (isQuotaExceededError(removeError)) {
             authLogger.warn("sessionStorage quota exceeded during removal, clearing old data...");
             clearOldData();
             try {
@@ -2863,7 +2872,6 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
   const {
     identifier,
     otp,
-    isLoading,
     acceptedTerms,
     marketingConsent,
     rememberMe,
@@ -3215,7 +3223,9 @@ var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
       if (response.user?.id) {
         Analytics.setUser(String(response.user.id));
       }
-      onSuccess?.(response.user, response.is_new_user || false);
+      if (response.user) {
+        onSuccess?.(response.user, response.is_new_user || false);
+      }
       if (!skipRedirect) {
         const finalRedirectUrl = redirectUrl || "/private";
         router.hardPush(finalRedirectUrl);
@@ -3448,21 +3458,6 @@ function useLocalStorage(key, initialValue) {
       return initialValue;
     }
   });
-  const checkDataSize = /* @__PURE__ */ __name((data) => {
-    try {
-      const jsonString = JSON.stringify(data);
-      const sizeInBytes = new Blob([jsonString]).size;
-      const sizeInKB = sizeInBytes / 1024;
-      if (sizeInKB > 1024) {
-        authLogger.warn(`Data size (${sizeInKB.toFixed(2)}KB) exceeds 1MB limit for key "${key}"`);
-        return false;
-      }
-      return true;
-    } catch (error) {
-      authLogger.error(`Error checking data size for key "${key}":`, error);
-      return false;
-    }
-  }, "checkDataSize");
   const clearOldData = /* @__PURE__ */ __name(() => {
     try {
       const keys = Object.keys(localStorage).filter((key2) => key2 && typeof key2 === "string");
@@ -3499,7 +3494,7 @@ function useLocalStorage(key, initialValue) {
   const setValue = /* @__PURE__ */ __name((value) => {
     try {
       const valueToStore = value instanceof Function ? value(storedValue) : value;
-      if (!checkDataSize(valueToStore)) {
+      if (!isWithinSizeLimit(valueToStore, key)) {
         authLogger.warn(`Data size too large for key "${key}", removing key`);
         try {
           window.localStorage.removeItem(key);
@@ -3519,7 +3514,7 @@ function useLocalStorage(key, initialValue) {
           }
           window.localStorage.setItem(`${key}_timestamp`, Date.now().toString());
         } catch (storageError) {
-          if (storageError.name === "QuotaExceededError" || storageError.code === 22 || storageError.message?.includes("quota")) {
+          if (isQuotaExceededError(storageError)) {
             authLogger.warn("localStorage quota exceeded, clearing old data...");
             clearOldData();
             try {
@@ -3563,7 +3558,7 @@ function useLocalStorage(key, initialValue) {
           window.localStorage.removeItem(key);
           window.localStorage.removeItem(`${key}_timestamp`);
         } catch (removeError) {
-          if (removeError.name === "QuotaExceededError" || removeError.code === 22 || removeError.message?.includes("quota")) {
+          if (isQuotaExceededError(removeError)) {
             authLogger.warn("localStorage quota exceeded during removal, clearing old data...");
             clearOldData();
             try {
@@ -3767,7 +3762,7 @@ import {
   createContext,
   useCallback as useCallback10,
   useContext,
-  useEffect as useEffect6,
+  useEffect as useEffect5,
   useMemo as useMemo2,
   useRef as useRef5,
   useState as useState10
@@ -3982,53 +3977,41 @@ __name(useCfgAccountsOtpRequestCreate, "useCfgAccountsOtpRequestCreate");
 import useSWRMutation8 from "swr/mutation";
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyResponse.ts
-import { z as z19 } from "zod";
-
-// src/_api/generated/_cfg_accounts/schemas/User.ts
 import { z as z18 } from "zod";
 
-// src/_api/generated/_cfg_accounts/schemas/CentrifugoToken.ts
-import { z as z17 } from "zod";
-var CentrifugoTokenSchema = z17.object({
-  token: z17.string(),
-  centrifugo_url: z17.string(),
-  expires_at: z17.string().datetime({ offset: true }),
-  channels: z17.array(z17.string())
-});
-
 // src/_api/generated/_cfg_accounts/schemas/User.ts
-var UserSchema = z18.object({
-  id: z18.number().int(),
-  email: z18.email(),
-  first_name: z18.string().max(50).nullable().optional(),
-  last_name: z18.string().max(50).nullable().optional(),
-  full_name: z18.string(),
-  initials: z18.string(),
-  display_username: z18.string(),
-  company: z18.string().max(100).nullable().optional(),
-  phone: z18.string().max(20).nullable().optional(),
-  position: z18.string().max(100).nullable().optional(),
-  language: z18.string().max(10).nullable().optional(),
-  timezone: z18.string().max(64).nullable().optional(),
-  avatar: z18.string().nullable(),
-  is_staff: z18.boolean(),
-  is_superuser: z18.boolean(),
-  date_joined: z18.string().datetime({ offset: true }),
-  last_login: z18.string().datetime({ offset: true }).nullable(),
-  unanswered_messages_count: z18.number().int().default(0),
-  centrifugo: CentrifugoTokenSchema.nullable(),
-  api_key: z18.string().nullable()
+import { z as z17 } from "zod";
+var UserSchema = z17.object({
+  id: z17.number().int(),
+  email: z17.email(),
+  first_name: z17.string().max(50).nullable().optional(),
+  last_name: z17.string().max(50).nullable().optional(),
+  full_name: z17.string(),
+  initials: z17.string(),
+  display_username: z17.string(),
+  company: z17.string().max(100).nullable().optional(),
+  phone: z17.string().max(20).nullable().optional(),
+  position: z17.string().max(100).nullable().optional(),
+  language: z17.string().max(10).nullable().optional(),
+  timezone: z17.string().max(64).nullable().optional(),
+  avatar: z17.string().nullable(),
+  is_staff: z17.boolean(),
+  is_superuser: z17.boolean(),
+  date_joined: z17.string().datetime({ offset: true }),
+  last_login: z17.string().datetime({ offset: true }).nullable(),
+  unanswered_messages_count: z17.number().int().default(0),
+  api_key: z17.string().nullable()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyResponse.ts
-var OTPVerifyResponseSchema = z19.object({
-  requires_2fa: z19.boolean().default(false).optional(),
-  session_id: z19.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
-  refresh: z19.string().nullable().optional(),
-  access: z19.string().nullable().optional(),
+var OTPVerifyResponseSchema = z18.object({
+  requires_2fa: z18.boolean().default(false).optional(),
+  session_id: z18.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
+  refresh: z18.string().nullable().optional(),
+  access: z18.string().nullable().optional(),
   user: UserSchema.nullable().optional(),
-  should_prompt_2fa: z19.boolean().optional(),
-  persistent_session: z19.boolean().optional()
+  should_prompt_2fa: z18.boolean().optional(),
+  persistent_session: z18.boolean().optional()
 });
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsOtpVerifyCreate.ts
@@ -4130,10 +4113,10 @@ __name(useCfgAccountsProfileAvatarCreate, "useCfgAccountsProfileAvatarCreate");
 import useSWRMutation10 from "swr/mutation";
 
 // src/_api/generated/_cfg_accounts/schemas/AccountDeleteResponse.ts
-import { z as z20 } from "zod";
-var AccountDeleteResponseSchema = z20.object({
-  success: z20.boolean(),
-  message: z20.string()
+import { z as z19 } from "zod";
+var AccountDeleteResponseSchema = z19.object({
+  success: z19.boolean(),
+  message: z19.string()
 });
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsProfilePartialPartialUpdate.ts
@@ -4248,117 +4231,117 @@ import useSWRMutation15 from "swr/mutation";
 import useSWRMutation16 from "swr/mutation";
 
 // src/_api/generated/_cfg_accounts/schemas/TokenRefresh.ts
-import { z as z21 } from "zod";
-var TokenRefreshSchema = z21.object({
-  access: z21.string(),
-  refresh: z21.string()
+import { z as z20 } from "zod";
+var TokenRefreshSchema = z20.object({
+  access: z20.string(),
+  refresh: z20.string()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/APIKeyRequest.ts
-import { z as z22 } from "zod";
-var APIKeyRequestSchema = z22.object({
-  key: z22.string().min(1),
-  reissued_at: z22.string().datetime({ offset: true }).nullable(),
-  created_at: z22.string().datetime({ offset: true })
+import { z as z21 } from "zod";
+var APIKeyRequestSchema = z21.object({
+  key: z21.string().min(1),
+  reissued_at: z21.string().datetime({ offset: true }).nullable(),
+  created_at: z21.string().datetime({ offset: true })
 });
 
 // src/_api/generated/_cfg_accounts/schemas/APIKeyTestRequest.ts
-import { z as z23 } from "zod";
-var APIKeyTestRequestSchema = z23.object({
-  key: z23.string().min(1)
+import { z as z22 } from "zod";
+var APIKeyTestRequestSchema = z22.object({
+  key: z22.string().min(1)
 });
 
 // src/_api/generated/_cfg_accounts/schemas/CfgUserUpdateRequest.ts
-import { z as z24 } from "zod";
-var CfgUserUpdateRequestSchema = z24.object({
-  first_name: z24.string().max(50).optional(),
-  last_name: z24.string().max(50).optional(),
-  company: z24.string().max(100).optional(),
-  phone: z24.string().max(20).optional(),
-  position: z24.string().max(100).optional(),
-  language: z24.string().max(10).optional(),
-  timezone: z24.string().max(64).optional()
+import { z as z23 } from "zod";
+var CfgUserUpdateRequestSchema = z23.object({
+  first_name: z23.string().max(50).optional(),
+  last_name: z23.string().max(50).optional(),
+  company: z23.string().max(100).optional(),
+  phone: z23.string().max(20).optional(),
+  position: z23.string().max(100).optional(),
+  language: z23.string().max(10).optional(),
+  timezone: z23.string().max(64).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthAuthorizeRequestRequest.ts
-import { z as z25 } from "zod";
-var OAuthAuthorizeRequestRequestSchema = z25.object({
-  redirect_uri: z25.string().optional(),
-  source_url: z25.string().optional()
+import { z as z24 } from "zod";
+var OAuthAuthorizeRequestRequestSchema = z24.object({
+  redirect_uri: z24.string().optional(),
+  source_url: z24.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthCallbackRequestRequest.ts
-import { z as z26 } from "zod";
-var OAuthCallbackRequestRequestSchema = z26.object({
-  code: z26.string().min(10).max(500),
-  state: z26.string().min(20).max(100),
-  redirect_uri: z26.string().optional(),
-  remember_me: z26.boolean().default(false).optional()
+import { z as z25 } from "zod";
+var OAuthCallbackRequestRequestSchema = z25.object({
+  code: z25.string().min(10).max(500),
+  state: z25.string().min(20).max(100),
+  redirect_uri: z25.string().optional(),
+  remember_me: z25.boolean().default(false).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthDisconnectRequestRequest.ts
-import { z as z27 } from "zod";
-var OAuthDisconnectRequestRequestSchema = z27.object({
+import { z as z26 } from "zod";
+var OAuthDisconnectRequestRequestSchema = z26.object({
   provider: OAuthProviderEnumSchema
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthError.ts
+import { z as z27 } from "zod";
+var OAuthErrorSchema = z27.object({
+  error: z27.string(),
+  error_description: z27.string().optional()
+});
+
+// src/_api/generated/_cfg_accounts/schemas/OTPErrorResponse.ts
 import { z as z28 } from "zod";
-var OAuthErrorSchema = z28.object({
+var OTPErrorResponseSchema = z28.object({
   error: z28.string(),
-  error_description: z28.string().optional()
+  error_code: z28.string().nullable().optional(),
+  retry_after: z28.number().int().nullable().optional()
 });
 
-// src/_api/generated/_cfg_accounts/schemas/OTPErrorResponse.ts
+// src/_api/generated/_cfg_accounts/schemas/OTPRequestRequest.ts
 import { z as z29 } from "zod";
-var OTPErrorResponseSchema = z29.object({
-  error: z29.string(),
-  error_code: z29.string().nullable().optional(),
-  retry_after: z29.number().int().nullable().optional()
+var OTPRequestRequestSchema = z29.object({
+  identifier: z29.string().min(1),
+  source_url: z29.string().optional(),
+  marketing_consent: z29.boolean().nullable().optional(),
+  consent_disclosure_version: z29.string().max(64).optional()
 });
 
-// src/_api/generated/_cfg_accounts/schemas/OTPRequestRequest.ts
+// src/_api/generated/_cfg_accounts/schemas/OTPVerifyRequest.ts
 import { z as z30 } from "zod";
-var OTPRequestRequestSchema = z30.object({
+var OTPVerifyRequestSchema = z30.object({
   identifier: z30.string().min(1),
+  otp: z30.string().min(4).max(4),
   source_url: z30.string().optional(),
-  marketing_consent: z30.boolean().nullable().optional(),
-  consent_disclosure_version: z30.string().max(64).optional()
+  remember_me: z30.boolean().default(false).optional()
 });
 
-// src/_api/generated/_cfg_accounts/schemas/OTPVerifyRequest.ts
+// src/_api/generated/_cfg_accounts/schemas/PatchedCfgUserUpdateRequest.ts
 import { z as z31 } from "zod";
-var OTPVerifyRequestSchema = z31.object({
-  identifier: z31.string().min(1),
-  otp: z31.string().min(4).max(4),
-  source_url: z31.string().optional(),
-  remember_me: z31.boolean().default(false).optional()
+var PatchedCfgUserUpdateRequestSchema = z31.object({
+  first_name: z31.string().max(50).optional(),
+  last_name: z31.string().max(50).optional(),
+  company: z31.string().max(100).optional(),
+  phone: z31.string().max(20).optional(),
+  position: z31.string().max(100).optional(),
+  language: z31.string().max(10).optional(),
+  timezone: z31.string().max(64).optional()
 });
 
-// src/_api/generated/_cfg_accounts/schemas/PatchedCfgUserUpdateRequest.ts
+// src/_api/generated/_cfg_accounts/schemas/TokenBlacklistRequest.ts
 import { z as z32 } from "zod";
-var PatchedCfgUserUpdateRequestSchema = z32.object({
-  first_name: z32.string().max(50).optional(),
-  last_name: z32.string().max(50).optional(),
-  company: z32.string().max(100).optional(),
-  phone: z32.string().max(20).optional(),
-  position: z32.string().max(100).optional(),
-  language: z32.string().max(10).optional(),
-  timezone: z32.string().max(64).optional()
+var TokenBlacklistRequestSchema = z32.object({
+  refresh: z32.string().min(1)
 });
 
-// src/_api/generated/_cfg_accounts/schemas/TokenBlacklistRequest.ts
+// src/_api/generated/_cfg_accounts/schemas/TokenRefreshRequest.ts
 import { z as z33 } from "zod";
-var TokenBlacklistRequestSchema = z33.object({
+var TokenRefreshRequestSchema = z33.object({
   refresh: z33.string().min(1)
 });
 
-// src/_api/generated/_cfg_accounts/schemas/TokenRefreshRequest.ts
-import { z as z34 } from "zod";
-var TokenRefreshRequestSchema = z34.object({
-  refresh: z34.string().min(1)
-});
-
 // src/auth/context/AccountsContext.tsx
 import { jsx } from "react/jsx-runtime";
 function hasApiOrigin() {
@@ -4382,10 +4365,10 @@ function AccountsProvider({ children }) {
   const [profileError, setProfileError] = useState10(null);
   const profileRef = useRef5(profile);
   const isLoadingRef = useRef5(false);
-  useEffect6(() => {
+  useEffect5(() => {
     profileRef.current = profile;
   }, [profile]);
-  useEffect6(() => {
+  useEffect5(() => {
     isLoadingRef.current = isLoadingProfile;
   }, [isLoadingProfile]);
   const { trigger: triggerProfileUpdate } = useCfgAccountsProfileUpdateUpdate();
@@ -4423,26 +4406,26 @@ function AccountsProvider({ children }) {
       isLoadingRef.current = false;
     }
   }, []);
-  const updateProfile = /* @__PURE__ */ __name(async (data) => {
+  const updateProfile = useCallback10(async (data) => {
     await triggerProfileUpdate({ body: data });
     const user = await refreshProfile({ callerId: "updateProfile", force: true });
     return user;
-  }, "updateProfile");
-  const partialUpdateProfile = /* @__PURE__ */ __name(async (data) => {
+  }, [triggerProfileUpdate, refreshProfile]);
+  const partialUpdateProfile = useCallback10(async (data) => {
     await triggerProfilePartialUpdate({ body: data });
     const user = await refreshProfile({ callerId: "partialUpdateProfile", force: true });
     return user;
-  }, "partialUpdateProfile");
-  const uploadAvatar = /* @__PURE__ */ __name(async (avatar) => {
+  }, [triggerProfilePartialUpdate, refreshProfile]);
+  const uploadAvatar = useCallback10(async (avatar) => {
     await triggerAvatar({ body: { avatar } });
     const user = await refreshProfile({ callerId: "uploadAvatar", force: true });
     return user;
-  }, "uploadAvatar");
-  const requestOTP = /* @__PURE__ */ __name(async (data) => {
+  }, [triggerAvatar, refreshProfile]);
+  const requestOTP = useCallback10(async (data) => {
     const result = await triggerOtpRequest({ body: data });
     return result;
-  }, "requestOTP");
-  const verifyOTP = /* @__PURE__ */ __name(async (data) => {
+  }, [triggerOtpRequest]);
+  const verifyOTP = useCallback10(async (data) => {
     const result = await triggerOtpVerify({ body: data });
     if (result.requires_2fa && result.session_id) {
       authLogger.info("2FA required, session:", result.session_id);
@@ -4457,7 +4440,7 @@ function AccountsProvider({ children }) {
       }
     }
     return result;
-  }, "verifyOTP");
+  }, [triggerOtpVerify, refreshProfile]);
   const logout = useCallback10(() => {
     const refresh = auth.getRefreshToken();
     if (refresh) {
@@ -4536,7 +4519,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
   );
   const routes = useMemo3(() => resolveAuthRoutes(config?.routes), [config?.routes]);
   const routesRef = useRef6(routes);
-  useEffect7(() => {
+  useEffect6(() => {
     routesRef.current = routes;
   }, [routes]);
   const redirectManager = useAuthRedirectManager({
@@ -4544,18 +4527,18 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     clearOnUse: true
   });
   const configRef = useRef6(config);
-  useEffect7(() => {
+  useEffect6(() => {
     configRef.current = config;
   }, [config]);
   const accountsRef = useRef6(accounts);
-  useEffect7(() => {
+  useEffect6(() => {
     accountsRef.current = accounts;
   }, [accounts]);
   const pendingManualNavRef = useRef6(false);
   const [profileSettled, setProfileSettled] = useState11(false);
   const hasProfile = Boolean(accounts.profile);
   const profileAttemptedRef = useRef6(false);
-  useEffect7(() => {
+  useEffect6(() => {
     if (!isAuthenticated) {
       profileAttemptedRef.current = false;
       const hasTokens = Boolean(auth.getToken() || auth.getRefreshToken());
@@ -4584,7 +4567,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
   }, [isAuthenticated, hasProfile]);
   const isLoading = !profileSettled;
   const expiredHandledRef = useRef6(false);
-  useEffect7(() => {
+  useEffect6(() => {
     const unsubscribe = auth.onSessionExpired(() => {
       if (expiredHandledRef.current) return;
       expiredHandledRef.current = true;
@@ -4597,7 +4580,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     });
     return unsubscribe;
   }, [router]);
-  useEffect7(() => {
+  useEffect6(() => {
     if (!isAuthenticated || pendingManualNavRef.current) return;
     if (pathname === routes.auth && !queryParams.get("flow")) {
       const saved = redirectManager.hasRedirect() ? redirectManager.getRedirect() : null;
@@ -4749,7 +4732,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
   }, [router]);
   const user = accounts.profile ?? null;
   const isAdminUser = Boolean(user?.is_staff || user?.is_superuser);
-  useEffect7(() => {
+  useEffect6(() => {
     applyRoleLogPolicy({ isAdmin: isAdminUser });
   }, [isAdminUser]);
   const updateProfile = useCallback11(
@@ -4817,7 +4800,7 @@ function AuthProviderRaw({ children, config, enabled = true }) {
   return /* @__PURE__ */ jsx2(AccountsProvider, { children: /* @__PURE__ */ jsx2(AuthProviderInternal, { config, children }) });
 }
 __name(AuthProviderRaw, "AuthProviderRaw");
-var AuthProvider = memo2(AuthProviderRaw);
+var AuthProvider = memo(AuthProviderRaw);
 var defaultAuthState = {
   user: null,
   isLoading: false,
@@ -4887,18 +4870,20 @@ var validateEmail = /* @__PURE__ */ __name((email) => {
 }, "validateEmail");
 
 // src/auth/utils/errors.ts
+var prop = /* @__PURE__ */ __name((value, key) => typeof value === "object" && value !== null ? value[key] : void 0, "prop");
 var formatAuthError = /* @__PURE__ */ __name((error) => {
   if (typeof error === "string") {
     return error;
   }
-  if (error?.message) {
-    return error.message;
-  }
-  if (error?.detail) {
-    return error.detail;
-  }
-  if (error?.response?.data?.detail) {
-    return error.response.data.detail;
+  const candidates = [
+    prop(error, "message"),
+    prop(error, "detail"),
+    prop(prop(prop(error, "response"), "data"), "detail")
+  ];
+  for (const candidate of candidates) {
+    if (typeof candidate === "string" && candidate) {
+      return candidate;
+    }
   }
   return "An unexpected error occurred";
 }, "formatAuthError");