@djangocfg/api 2.1.591 → 2.1.592

package/dist/auth.cjs

@@ -205,6 +205,7 @@ __export(auth_exports, {
   useQueryParams: () => useQueryParams,
   useSession: () => useSession,
   useSessionStorage: () => useSessionStorage,
+  useTimezone: () => useTimezone,
   useTwoFactor: () => useTwoFactor,
   useTwoFactorChallenge: () => useTwoFactorChallenge,
   useTwoFactorSetup: () => useTwoFactorSetup,
@@ -229,7 +230,7 @@ var AUTH_CONSTANTS = {
 
 // src/auth/context/AuthContext.tsx
 var import_navigation4 = require("next/navigation");
-var import_react17 = require("react");
+var import_react18 = require("react");
 
 // src/_api/generated/helpers/errors.ts
 var APIError = class extends Error {
@@ -593,6 +594,14 @@ function defaultBaseUrl() {
   return "";
 }
 __name(defaultBaseUrl, "defaultBaseUrl");
+function detectTimezone() {
+  try {
+    return Intl.DateTimeFormat().resolvedOptions().timeZone || null;
+  } catch {
+    return null;
+  }
+}
+__name(detectTimezone, "detectTimezone");
 function defaultApiKey() {
   try {
     if (typeof process !== "undefined" && process.env?.NEXT_PUBLIC_API_KEY) {
@@ -604,6 +613,7 @@ function defaultApiKey() {
 }
 __name(defaultApiKey, "defaultApiKey");
 var _localeOverride = null;
+var _timezoneOverride = null;
 var _apiKeyOverride = null;
 var _baseUrlOverride = null;
 var _withCredentials = true;
@@ -830,6 +840,14 @@ var auth = {
   setLocale(locale) {
     _localeOverride = locale;
   },
+  // ── Time zone ─────────────────────────────────────────────────────
+  // IANA name sent as `X-Timezone`. `null` override = follow the browser.
+  getTimezone() {
+    return _timezoneOverride ?? detectTimezone();
+  },
+  setTimezone(timezone) {
+    _timezoneOverride = timezone;
+  },
   // ── Base URL ──────────────────────────────────────────────────────
   getBaseUrl() {
     const url = _baseUrlOverride ?? defaultBaseUrl();
@@ -1037,11 +1055,8 @@ function installAuthOnClient(client2) {
     if (locale) request.headers.set("Accept-Language", locale);
     const apiKey = auth.getApiKey();
     if (apiKey && !request.headers.has("X-API-Key")) request.headers.set("X-API-Key", apiKey);
-    try {
-      const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
-      if (tz) request.headers.set("X-Timezone", tz);
-    } catch {
-    }
+    const tz = auth.getTimezone();
+    if (tz) request.headers.set("X-Timezone", tz);
     request.headers.set("X-Client-Time", (/* @__PURE__ */ new Date()).toISOString());
     if (dpopEnabled() && typeof window !== "undefined") {
       const proof = await _makeDpopProof(request.method, request.url);
@@ -1252,9 +1267,54 @@ function useSession() {
 }
 __name(useSession, "useSession");
 
+// src/auth/hooks/useTimezone.ts
+var import_react2 = require("react");
+var STORAGE_KEY = "djangocfg.timezone";
+var listeners = /* @__PURE__ */ new Set();
+function read() {
+  try {
+    return localStorage.getItem(STORAGE_KEY) || null;
+  } catch {
+    return null;
+  }
+}
+__name(read, "read");
+function hydrate() {
+  if (typeof window === "undefined") return;
+  auth.setTimezone(read());
+}
+__name(hydrate, "hydrate");
+hydrate();
+function write(timezone) {
+  try {
+    if (timezone) localStorage.setItem(STORAGE_KEY, timezone);
+    else localStorage.removeItem(STORAGE_KEY);
+  } catch {
+  }
+  auth.setTimezone(timezone);
+  listeners.forEach((l) => l());
+}
+__name(write, "write");
+function subscribe(listener) {
+  listeners.add(listener);
+  return () => listeners.delete(listener);
+}
+__name(subscribe, "subscribe");
+function useTimezone() {
+  const preference = (0, import_react2.useSyncExternalStore)(subscribe, read, () => null);
+  const setTimezone = (0, import_react2.useCallback)((tz) => write(tz), []);
+  return {
+    timezone: preference ?? auth.getTimezone(),
+    preference,
+    isAuto: preference === null,
+    setTimezone
+  };
+}
+__name(useTimezone, "useTimezone");
+
 // src/auth/hooks/useCfgRouter.ts
 var import_navigation = require("next/navigation");
-var import_react2 = require("react");
+var import_react3 = require("react");
 function getBasePath() {
   if (typeof process === "undefined") {
     return "";
@@ -1273,37 +1333,37 @@ function withBasePath(path, basePath) {
 __name(withBasePath, "withBasePath");
 function useCfgRouter() {
   const router = (0, import_navigation.useRouter)();
-  const basePath = (0, import_react2.useMemo)(() => getBasePath(), []);
-  const push = (0, import_react2.useCallback)((href, options) => {
+  const basePath = (0, import_react3.useMemo)(() => getBasePath(), []);
+  const push = (0, import_react3.useCallback)((href, options) => {
     if (basePath) {
       window.location.href = withBasePath(href, basePath);
     } else {
       router.push(href, options);
     }
   }, [router, basePath]);
-  const replace = (0, import_react2.useCallback)((href, options) => {
+  const replace = (0, import_react3.useCallback)((href, options) => {
     if (basePath) {
       window.location.replace(withBasePath(href, basePath));
     } else {
       router.replace(href, options);
     }
   }, [router, basePath]);
-  const hardPush = (0, import_react2.useCallback)((href) => {
+  const hardPush = (0, import_react3.useCallback)((href) => {
     window.location.href = withBasePath(href, basePath);
   }, [basePath]);
-  const hardReplace = (0, import_react2.useCallback)((href) => {
+  const hardReplace = (0, import_react3.useCallback)((href) => {
     window.location.replace(withBasePath(href, basePath));
   }, [basePath]);
-  const prefetch = (0, import_react2.useCallback)((href) => {
+  const prefetch = (0, import_react3.useCallback)((href) => {
     router.prefetch(href);
   }, [router]);
-  const back = (0, import_react2.useCallback)(() => {
+  const back = (0, import_react3.useCallback)(() => {
     router.back();
   }, [router]);
-  const forward = (0, import_react2.useCallback)(() => {
+  const forward = (0, import_react3.useCallback)(() => {
     router.forward();
   }, [router]);
-  const refresh = (0, import_react2.useCallback)(() => {
+  const refresh = (0, import_react3.useCallback)(() => {
     router.refresh();
   }, [router]);
   return {
@@ -1321,17 +1381,17 @@ __name(useCfgRouter, "useCfgRouter");
 
 // src/auth/hooks/useQueryParams.ts
 var import_navigation2 = require("next/navigation");
-var import_react3 = require("react");
+var import_react4 = require("react");
 function useQueryParams() {
   const pathname = (0, import_navigation2.usePathname)();
-  const [queryParams, setQueryParams] = (0, import_react3.useState)(() => {
+  const [queryParams, setQueryParams] = (0, import_react4.useState)(() => {
     if (typeof window === "undefined") {
       return new URLSearchParams();
     }
     return new URLSearchParams(window.location.search);
   });
-  const lastSearchRef = (0, import_react3.useRef)("");
-  (0, import_react3.useEffect)(() => {
+  const lastSearchRef = (0, import_react4.useRef)("");
+  (0, import_react4.useEffect)(() => {
     if (typeof window === "undefined") return;
     const updateQueryParams = /* @__PURE__ */ __name(() => {
       const currentSearch = window.location.search;
@@ -1365,16 +1425,16 @@ function useQueryParams() {
 __name(useQueryParams, "useQueryParams");
 
 // src/auth/hooks/useAuthFormState.ts
-var import_react4 = require("react");
+var import_react5 = require("react");
 var formatCountdown = /* @__PURE__ */ __name((s) => {
   if (s <= 0) return "";
   const m = Math.floor(s / 60);
   return m > 0 ? `${m}:${String(s % 60).padStart(2, "0")}` : `${s}s`;
 }, "formatCountdown");
 var useCountdown = /* @__PURE__ */ __name(() => {
-  const [seconds, setSeconds] = (0, import_react4.useState)(0);
-  const timerRef = (0, import_react4.useRef)(null);
-  const start = (0, import_react4.useCallback)((from) => {
+  const [seconds, setSeconds] = (0, import_react5.useState)(0);
+  const timerRef = (0, import_react5.useRef)(null);
+  const start = (0, import_react5.useCallback)((from) => {
     if (timerRef.current) clearInterval(timerRef.current);
     setSeconds(from);
     timerRef.current = setInterval(() => {
@@ -1388,24 +1448,24 @@ var useCountdown = /* @__PURE__ */ __name(() => {
       });
     }, 1e3);
   }, []);
-  (0, import_react4.useEffect)(() => () => {
+  (0, import_react5.useEffect)(() => () => {
     if (timerRef.current) clearInterval(timerRef.current);
   }, []);
   return { seconds, start };
 }, "useCountdown");
 var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
-  const [identifier, setIdentifier] = (0, import_react4.useState)(initialIdentifier);
-  const [otp, setOtp] = (0, import_react4.useState)("");
-  const [password, setPassword] = (0, import_react4.useState)("");
-  const [isLoading, setIsLoading] = (0, import_react4.useState)(false);
-  const [acceptedTerms, setAcceptedTerms] = (0, import_react4.useState)(true);
-  const [marketingConsent, setMarketingConsent] = (0, import_react4.useState)(null);
-  const [step, setStep] = (0, import_react4.useState)("identifier");
-  const [error, setError] = (0, import_react4.useState)("");
-  const [webmail, setWebmail] = (0, import_react4.useState)(null);
+  const [identifier, setIdentifier] = (0, import_react5.useState)(initialIdentifier);
+  const [otp, setOtp] = (0, import_react5.useState)("");
+  const [password, setPassword] = (0, import_react5.useState)("");
+  const [isLoading, setIsLoading] = (0, import_react5.useState)(false);
+  const [acceptedTerms, setAcceptedTerms] = (0, import_react5.useState)(true);
+  const [marketingConsent, setMarketingConsent] = (0, import_react5.useState)(null);
+  const [step, setStep] = (0, import_react5.useState)("identifier");
+  const [error, setError] = (0, import_react5.useState)("");
+  const [webmail, setWebmail] = (0, import_react5.useState)(null);
   const rateLimit = useCountdown();
   const resend = useCountdown();
-  const clearError = (0, import_react4.useCallback)(() => setError(""), []);
+  const clearError = (0, import_react5.useCallback)(() => setError(""), []);
   return {
     // State
     identifier,
@@ -1439,10 +1499,10 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
 }, "useAuthFormState");
 
 // src/auth/hooks/useAuthValidation.ts
-var import_react5 = require("react");
+var import_react6 = require("react");
 var EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 var useAuthValidation = /* @__PURE__ */ __name(() => {
-  const validateIdentifier2 = (0, import_react5.useCallback)((id) => {
+  const validateIdentifier2 = (0, import_react6.useCallback)((id) => {
     return EMAIL_REGEX.test(id);
   }, []);
   return { validateIdentifier: validateIdentifier2 };
@@ -1450,7 +1510,7 @@ var useAuthValidation = /* @__PURE__ */ __name(() => {
 var validateIdentifier = /* @__PURE__ */ __name((id) => EMAIL_REGEX.test(id), "validateIdentifier");
 
 // src/auth/hooks/useAuthForm.ts
-var import_react8 = require("react");
+var import_react9 = require("react");
 
 // src/auth/utils/logger.ts
 var import_consola2 = require("consola");
@@ -1464,7 +1524,7 @@ var authLogger = logger.withTag("auth");
 
 // src/auth/hooks/useAutoAuth.ts
 var import_navigation3 = require("next/navigation");
-var import_react6 = require("react");
+var import_react7 = require("react");
 
 // src/auth/utils/path.ts
 var normalizePath = /* @__PURE__ */ __name((path) => {
@@ -1492,14 +1552,14 @@ var useAutoAuth = /* @__PURE__ */ __name((options = {}) => {
   const hasOTP = !!queryOtp;
   const isReady = !!pathname && hasOTP && isAllowedPath;
   const otpValid = queryOtp.length === AUTH_CONSTANTS.EMAIL_OTP_LENGTH;
-  const onOTPDetectedRef = (0, import_react6.useRef)(onOTPDetected);
+  const onOTPDetectedRef = (0, import_react7.useRef)(onOTPDetected);
   onOTPDetectedRef.current = onOTPDetected;
-  (0, import_react6.useEffect)(() => {
+  (0, import_react7.useEffect)(() => {
     if (!isReady || !otpValid) return;
     authLogger.info("OTP detected in URL on auth page:", queryOtp);
     onOTPDetectedRef.current?.(queryOtp, queryEmail);
   }, [isReady, otpValid, queryOtp, queryEmail]);
-  (0, import_react6.useEffect)(() => {
+  (0, import_react7.useEffect)(() => {
     if (!isReady || !cleanupUrl || !queryOtp) return;
     const cleanQuery = Object.fromEntries(queryParams.entries());
     delete cleanQuery.otp;
@@ -1516,22 +1576,22 @@ var useAutoAuth = /* @__PURE__ */ __name((options = {}) => {
 }, "useAutoAuth");
 
 // src/auth/hooks/useTwoFactorChallenge.ts
-var import_react7 = require("react");
+var import_react8 = require("react");
 var current = null;
-var listeners = /* @__PURE__ */ new Set();
+var listeners2 = /* @__PURE__ */ new Set();
 var set = /* @__PURE__ */ __name((next) => {
   current = next;
-  for (const listener of [...listeners]) listener();
+  for (const listener of [...listeners2]) listener();
 }, "set");
-var subscribe = /* @__PURE__ */ __name((listener) => {
-  listeners.add(listener);
+var subscribe2 = /* @__PURE__ */ __name((listener) => {
+  listeners2.add(listener);
   return () => {
-    listeners.delete(listener);
+    listeners2.delete(listener);
   };
 }, "subscribe");
 var beginTwoFactorChallenge = /* @__PURE__ */ __name((challenge) => set(challenge), "beginTwoFactorChallenge");
 var endTwoFactorChallenge = /* @__PURE__ */ __name(() => set(null), "endTwoFactorChallenge");
-var useTwoFactorChallenge = /* @__PURE__ */ __name(() => (0, import_react7.useSyncExternalStore)(subscribe, () => current, () => null), "useTwoFactorChallenge");
+var useTwoFactorChallenge = /* @__PURE__ */ __name(() => (0, import_react8.useSyncExternalStore)(subscribe2, () => current, () => null), "useTwoFactorChallenge");
 
 // src/auth/hooks/useAuthForm.ts
 var useAuthForm = /* @__PURE__ */ __name((options) => {
@@ -1547,8 +1607,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
   } = options;
   const formState = useAuthFormState();
   const validation = useAuthValidation();
-  const isAutoSubmitFromUrlRef = (0, import_react8.useRef)(false);
-  const processedOtpKeyRef = (0, import_react8.useRef)(null);
+  const isAutoSubmitFromUrlRef = (0, import_react9.useRef)(false);
+  const processedOtpKeyRef = (0, import_react9.useRef)(null);
   const {
     requestOTP,
     verifyOTP,
@@ -1573,16 +1633,16 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setWebmail
   } = formState;
   const { validateIdentifier: validateIdentifier2 } = validation;
-  const saveIdentifierToStorage = (0, import_react8.useCallback)((id) => {
+  const saveIdentifierToStorage = (0, import_react9.useCallback)((id) => {
     saveEmail(id);
   }, [saveEmail]);
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     const savedEmail = getSavedEmail();
     if (savedEmail) {
       setIdentifier(savedEmail);
     }
   }, []);
-  const handleIdentifierSubmit = (0, import_react8.useCallback)(async (e) => {
+  const handleIdentifierSubmit = (0, import_react9.useCallback)(async (e) => {
     e.preventDefault();
     if (!identifier) {
       const msg = "Please enter your email address";
@@ -1648,7 +1708,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     onError,
     sourceUrl
   ]);
-  const submitOTP = (0, import_react8.useCallback)(async (submitIdentifier, submitOtp) => {
+  const submitOTP = (0, import_react9.useCallback)(async (submitIdentifier, submitOtp) => {
     if (!submitOtp || submitOtp.length < AUTH_CONSTANTS.EMAIL_OTP_LENGTH) {
       const msg = `Please enter the ${AUTH_CONSTANTS.EMAIL_OTP_LENGTH}-digit verification code`;
       setError(msg);
@@ -1685,11 +1745,11 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
       setIsLoading(false);
     }
   }, [verifyOTP, saveIdentifierToStorage, setError, setIsLoading, clearError, onOTPSuccess, onError, sourceUrl, redirectUrl, setStep]);
-  const handleOTPSubmit = (0, import_react8.useCallback)(async (e) => {
+  const handleOTPSubmit = (0, import_react9.useCallback)(async (e) => {
     e.preventDefault();
     await submitOTP(identifier, otp);
   }, [identifier, otp, submitOTP]);
-  const submitPassword = (0, import_react8.useCallback)(async (submitIdentifier, submitPassword_) => {
+  const submitPassword = (0, import_react9.useCallback)(async (submitIdentifier, submitPassword_) => {
     if (!submitIdentifier || !validateIdentifier2(submitIdentifier)) {
       const msg = "Please enter a valid email address";
       setError(msg);
@@ -1751,11 +1811,11 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     redirectUrl,
     setStep
   ]);
-  const handlePasswordSubmit = (0, import_react8.useCallback)(async (e) => {
+  const handlePasswordSubmit = (0, import_react9.useCallback)(async (e) => {
     e.preventDefault();
     await submitPassword(identifier, password);
   }, [identifier, password, submitPassword]);
-  const handleResendOTP = (0, import_react8.useCallback)(async () => {
+  const handleResendOTP = (0, import_react9.useCallback)(async () => {
     setIsLoading(true);
     clearError();
     try {
@@ -1783,15 +1843,15 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
       setIsLoading(false);
     }
   }, [identifier, marketingConsent, marketingConsentOption, requestOTP, saveIdentifierToStorage, setOtp, setError, setIsLoading, clearError, startRateLimitCountdown, startResendCountdown, setWebmail, onError, sourceUrl]);
-  const handleBackToIdentifier = (0, import_react8.useCallback)(() => {
+  const handleBackToIdentifier = (0, import_react9.useCallback)(() => {
     setStep("identifier");
     clearError();
   }, [setStep, clearError]);
-  const forceOTPStep = (0, import_react8.useCallback)(() => {
+  const forceOTPStep = (0, import_react9.useCallback)(() => {
     setStep("otp");
     clearError();
   }, [setStep, clearError]);
-  const handleOTPFromUrl = (0, import_react8.useCallback)((detectedOtp, detectedEmail) => {
+  const handleOTPFromUrl = (0, import_react9.useCallback)((detectedOtp, detectedEmail) => {
     const autoIdentifier = detectedEmail || getSavedEmail() || "";
     if (!autoIdentifier) {
       authLogger.warn("No identifier found for auto-submit (no email in URL or storage)");
@@ -1837,7 +1897,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
 }, "useAuthForm");
 
 // src/auth/hooks/useGithubAuth.ts
-var import_react9 = require("react");
+var import_react10 = require("react");
 
 // src/_api/generated/core/bodySerializer.gen.ts
 var serializeFormDataPair = /* @__PURE__ */ __name((data, key, value) => {
@@ -3271,9 +3331,9 @@ var OAUTH_PROVIDER_KEY = CFG_KEYS.oauthProvider.key;
 var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
   const { sourceUrl, onSuccess, onError, onRequires2FA, redirectUrl, skipRedirect = false } = options;
   const router = useCfgRouter();
-  const [isLoading, setIsLoading] = (0, import_react9.useState)(false);
-  const [error, setError] = (0, import_react9.useState)(null);
-  const startGithubAuth = (0, import_react9.useCallback)(async () => {
+  const [isLoading, setIsLoading] = (0, import_react10.useState)(false);
+  const [error, setError] = (0, import_react10.useState)(null);
+  const startGithubAuth = (0, import_react10.useCallback)(async () => {
     setIsLoading(true);
     setError(null);
     auth.clearSession();
@@ -3312,7 +3372,7 @@ var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
       setIsLoading(false);
     }
   }, [sourceUrl, onError]);
-  const handleGithubCallback = (0, import_react9.useCallback)(async (code, state) => {
+  const handleGithubCallback = (0, import_react10.useCallback)(async (code, state) => {
     setIsLoading(true);
     setError(null);
     try {
@@ -3381,10 +3441,10 @@ var useGithubAuth = /* @__PURE__ */ __name((options = {}) => {
 }, "useGithubAuth");
 
 // src/auth/hooks/useTwoFactorVerify.ts
-var import_react11 = require("react");
+var import_react12 = require("react");
 
 // src/auth/hooks/useSessionStorage.ts
-var import_react10 = require("react");
+var import_react11 = require("react");
 
 // src/auth/utils/storage.ts
 var MAX_ITEM_KB = 1024;
@@ -3413,7 +3473,7 @@ __name(isWithinSizeLimit, "isWithinSizeLimit");
 
 // src/auth/hooks/useSessionStorage.ts
 function useSessionStorage(key, initialValue) {
-  const [storedValue, setStoredValue] = (0, import_react10.useState)(() => {
+  const [storedValue, setStoredValue] = (0, import_react11.useState)(() => {
     if (typeof window === "undefined") {
       return initialValue;
     }
@@ -3620,15 +3680,15 @@ __name(isValidTotpCode, "isValidTotpCode");
 var useTwoFactorVerify = /* @__PURE__ */ __name((options = {}) => {
   const { onSuccess, onError, redirectUrl, skipRedirect = false } = options;
   const router = useCfgRouter();
-  const [isLoading, setIsLoading] = (0, import_react11.useState)(false);
-  const [error, setError] = (0, import_react11.useState)(null);
-  const [warning, setWarning] = (0, import_react11.useState)(null);
-  const [remainingBackupCodes, setRemainingBackupCodes] = (0, import_react11.useState)(null);
-  const [attemptsRemaining, setAttemptsRemaining] = (0, import_react11.useState)(null);
-  const clearError = (0, import_react11.useCallback)(() => {
+  const [isLoading, setIsLoading] = (0, import_react12.useState)(false);
+  const [error, setError] = (0, import_react12.useState)(null);
+  const [warning, setWarning] = (0, import_react12.useState)(null);
+  const [remainingBackupCodes, setRemainingBackupCodes] = (0, import_react12.useState)(null);
+  const [attemptsRemaining, setAttemptsRemaining] = (0, import_react12.useState)(null);
+  const clearError = (0, import_react12.useCallback)(() => {
     setError(null);
   }, []);
-  const handleSuccess = (0, import_react11.useCallback)((response) => {
+  const handleSuccess = (0, import_react12.useCallback)((response) => {
     auth.setSession({ access: response.access_token, refresh: response.refresh_token });
     if (response.warning) {
       setWarning(response.warning);
@@ -3650,7 +3710,7 @@ var useTwoFactorVerify = /* @__PURE__ */ __name((options = {}) => {
       router.hardPush(finalRedirectUrl);
     }
   }, [onSuccess, redirectUrl, router, skipRedirect]);
-  const verifyTOTP = (0, import_react11.useCallback)(async (sessionId, code) => {
+  const verifyTOTP = (0, import_react12.useCallback)(async (sessionId, code) => {
     if (!sessionId) {
       const msg = "Missing 2FA session ID";
       setError(msg);
@@ -3693,7 +3753,7 @@ var useTwoFactorVerify = /* @__PURE__ */ __name((options = {}) => {
       setIsLoading(false);
     }
   }, [handleSuccess, onError]);
-  const verifyBackupCode = (0, import_react11.useCallback)(async (sessionId, backupCode) => {
+  const verifyBackupCode = (0, import_react12.useCallback)(async (sessionId, backupCode) => {
     if (!sessionId) {
       const msg = "Missing 2FA session ID";
       setError(msg);
@@ -3752,26 +3812,26 @@ var useTwoFactorVerify = /* @__PURE__ */ __name((options = {}) => {
 }, "useTwoFactorVerify");
 
 // src/auth/hooks/useTwoFactorSetup.ts
-var import_react12 = require("react");
+var import_react13 = require("react");
 var useTwoFactorSetup = /* @__PURE__ */ __name((options = {}) => {
   const { onComplete, onError } = options;
-  const [isLoading, setIsLoading] = (0, import_react12.useState)(false);
-  const [error, setError] = (0, import_react12.useState)(null);
-  const [setupData, setSetupData] = (0, import_react12.useState)(null);
-  const [backupCodes, setBackupCodes] = (0, import_react12.useState)(null);
-  const [backupCodesWarning, setBackupCodesWarning] = (0, import_react12.useState)(null);
-  const [setupStep, setSetupStep] = (0, import_react12.useState)("idle");
-  const clearError = (0, import_react12.useCallback)(() => {
+  const [isLoading, setIsLoading] = (0, import_react13.useState)(false);
+  const [error, setError] = (0, import_react13.useState)(null);
+  const [setupData, setSetupData] = (0, import_react13.useState)(null);
+  const [backupCodes, setBackupCodes] = (0, import_react13.useState)(null);
+  const [backupCodesWarning, setBackupCodesWarning] = (0, import_react13.useState)(null);
+  const [setupStep, setSetupStep] = (0, import_react13.useState)("idle");
+  const clearError = (0, import_react13.useCallback)(() => {
     setError(null);
   }, []);
-  const resetSetup = (0, import_react12.useCallback)(() => {
+  const resetSetup = (0, import_react13.useCallback)(() => {
     setSetupData(null);
     setBackupCodes(null);
     setBackupCodesWarning(null);
     setSetupStep("idle");
     setError(null);
   }, []);
-  const startSetup = (0, import_react12.useCallback)(async (deviceName) => {
+  const startSetup = (0, import_react13.useCallback)(async (deviceName) => {
     setIsLoading(true);
     setError(null);
     setSetupStep("scanning");
@@ -3803,7 +3863,7 @@ var useTwoFactorSetup = /* @__PURE__ */ __name((options = {}) => {
       setIsLoading(false);
     }
   }, [onError]);
-  const confirmSetup = (0, import_react12.useCallback)(async (code) => {
+  const confirmSetup = (0, import_react13.useCallback)(async (code) => {
     if (!setupData) {
       const msg = "Setup not started. Call startSetup() first.";
       setError(msg);
@@ -3859,16 +3919,16 @@ var useTwoFactorSetup = /* @__PURE__ */ __name((options = {}) => {
 }, "useTwoFactorSetup");
 
 // src/auth/hooks/useTwoFactorStatus.ts
-var import_react13 = require("react");
+var import_react14 = require("react");
 var useTwoFactorStatus = /* @__PURE__ */ __name(() => {
-  const [isLoading, setIsLoading] = (0, import_react13.useState)(false);
-  const [error, setError] = (0, import_react13.useState)(null);
-  const [has2FAEnabled, setHas2FAEnabled] = (0, import_react13.useState)(null);
-  const [devices, setDevices] = (0, import_react13.useState)([]);
-  const clearError = (0, import_react13.useCallback)(() => {
+  const [isLoading, setIsLoading] = (0, import_react14.useState)(false);
+  const [error, setError] = (0, import_react14.useState)(null);
+  const [has2FAEnabled, setHas2FAEnabled] = (0, import_react14.useState)(null);
+  const [devices, setDevices] = (0, import_react14.useState)([]);
+  const clearError = (0, import_react14.useCallback)(() => {
     setError(null);
   }, []);
-  const fetchStatus = (0, import_react13.useCallback)(async () => {
+  const fetchStatus = (0, import_react14.useCallback)(async () => {
     setIsLoading(true);
     setError(null);
     try {
@@ -3893,7 +3953,7 @@ var useTwoFactorStatus = /* @__PURE__ */ __name(() => {
       setIsLoading(false);
     }
   }, []);
-  const disable2FA = (0, import_react13.useCallback)(async (code) => {
+  const disable2FA = (0, import_react14.useCallback)(async (code) => {
     if (!isValidTotpCode(code)) {
       setError("Please enter a 6-digit code");
       return false;
@@ -3936,9 +3996,9 @@ var useTwoFactor = /* @__PURE__ */ __name((options = {}) => {
 }, "useTwoFactor");
 
 // src/auth/hooks/useLocalStorage.ts
-var import_react14 = require("react");
+var import_react15 = require("react");
 function useLocalStorage(key, initialValue) {
-  const [storedValue, setStoredValue] = (0, import_react14.useState)(() => {
+  const [storedValue, setStoredValue] = (0, import_react15.useState)(() => {
     if (typeof window === "undefined") {
       return initialValue;
     }
@@ -4219,15 +4279,15 @@ function getCacheMetadata() {
 __name(getCacheMetadata, "getCacheMetadata");
 
 // src/auth/hooks/useDeleteAccount.ts
-var import_react15 = require("react");
+var import_react16 = require("react");
 var useDeleteAccount = /* @__PURE__ */ __name(() => {
-  const [isLoading, setIsLoading] = (0, import_react15.useState)(false);
-  const [error, setError] = (0, import_react15.useState)(null);
+  const [isLoading, setIsLoading] = (0, import_react16.useState)(false);
+  const [error, setError] = (0, import_react16.useState)(null);
   const { logout } = useAuth();
-  const clearError = (0, import_react15.useCallback)(() => {
+  const clearError = (0, import_react16.useCallback)(() => {
     setError(null);
   }, []);
-  const deleteAccount = (0, import_react15.useCallback)(async () => {
+  const deleteAccount = (0, import_react16.useCallback)(async () => {
     setIsLoading(true);
     setError(null);
     try {
@@ -4257,7 +4317,7 @@ var useDeleteAccount = /* @__PURE__ */ __name(() => {
 }, "useDeleteAccount");
 
 // src/auth/context/AccountsContext.tsx
-var import_react16 = require("react");
+var import_react17 = require("react");
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsApiKeyRegenerateCreate.ts
 var import_mutation = __toESM(require("swr/mutation"), 1);
@@ -4614,21 +4674,21 @@ function hasApiOrigin() {
   }
 }
 __name(hasApiOrigin, "hasApiOrigin");
-var AccountsContext = (0, import_react16.createContext)(void 0);
+var AccountsContext = (0, import_react17.createContext)(void 0);
 function AccountsProvider({ children }) {
-  const [profile, setProfile] = (0, import_react16.useState)(() => {
+  const [profile, setProfile] = (0, import_react17.useState)(() => {
     const cached = getCachedProfile();
     return cached || void 0;
   });
-  const [isLoadingProfile, setIsLoadingProfile] = (0, import_react16.useState)(false);
-  const [profileError, setProfileError] = (0, import_react16.useState)(null);
-  const profileRef = (0, import_react16.useRef)(profile);
-  const isLoadingRef = (0, import_react16.useRef)(false);
-  const fetchSeqRef = (0, import_react16.useRef)(0);
-  (0, import_react16.useEffect)(() => {
+  const [isLoadingProfile, setIsLoadingProfile] = (0, import_react17.useState)(false);
+  const [profileError, setProfileError] = (0, import_react17.useState)(null);
+  const profileRef = (0, import_react17.useRef)(profile);
+  const isLoadingRef = (0, import_react17.useRef)(false);
+  const fetchSeqRef = (0, import_react17.useRef)(0);
+  (0, import_react17.useEffect)(() => {
     profileRef.current = profile;
   }, [profile]);
-  (0, import_react16.useEffect)(() => {
+  (0, import_react17.useEffect)(() => {
     isLoadingRef.current = isLoadingProfile;
   }, [isLoadingProfile]);
   const { trigger: triggerProfileUpdate } = useCfgAccountsProfileUpdateUpdate();
@@ -4637,7 +4697,7 @@ function AccountsProvider({ children }) {
   const { trigger: triggerOtpRequest } = useCfgAccountsOtpRequestCreate();
   const { trigger: triggerOtpVerify } = useCfgAccountsOtpVerifyCreate();
   const { trigger: triggerPasswordLogin } = useCfgAccountsTokenCreate();
-  const refreshProfile = (0, import_react16.useCallback)(async (options) => {
+  const refreshProfile = (0, import_react17.useCallback)(async (options) => {
     const { callerId, force } = options || {};
     if (!hasApiOrigin()) {
       authLogger.debug(`No API origin configured, skipping profile fetch (caller: ${callerId})`);
@@ -4671,26 +4731,26 @@ function AccountsProvider({ children }) {
       }
     }
   }, []);
-  const updateProfile = (0, import_react16.useCallback)(async (data) => {
+  const updateProfile = (0, import_react17.useCallback)(async (data) => {
     await triggerProfileUpdate({ body: data });
     const user = await refreshProfile({ callerId: "updateProfile", force: true });
     return user;
   }, [triggerProfileUpdate, refreshProfile]);
-  const partialUpdateProfile = (0, import_react16.useCallback)(async (data) => {
+  const partialUpdateProfile = (0, import_react17.useCallback)(async (data) => {
     await triggerProfilePartialUpdate({ body: data });
     const user = await refreshProfile({ callerId: "partialUpdateProfile", force: true });
     return user;
   }, [triggerProfilePartialUpdate, refreshProfile]);
-  const uploadAvatar = (0, import_react16.useCallback)(async (avatar) => {
+  const uploadAvatar = (0, import_react17.useCallback)(async (avatar) => {
     await triggerAvatar({ body: { avatar } });
     const user = await refreshProfile({ callerId: "uploadAvatar", force: true });
     return user;
   }, [triggerAvatar, refreshProfile]);
-  const requestOTP = (0, import_react16.useCallback)(async (data) => {
+  const requestOTP = (0, import_react17.useCallback)(async (data) => {
     const result = await triggerOtpRequest({ body: data });
     return result;
   }, [triggerOtpRequest]);
-  const settleLoginEnvelope = (0, import_react16.useCallback)(async (result, callerId) => {
+  const settleLoginEnvelope = (0, import_react17.useCallback)(async (result, callerId) => {
     if (result.requires_2fa && result.session_id) {
       authLogger.info("2FA required, session:", result.session_id);
       return;
@@ -4704,17 +4764,17 @@ function AccountsProvider({ children }) {
       }
     }
   }, [refreshProfile]);
-  const verifyOTP = (0, import_react16.useCallback)(async (data) => {
+  const verifyOTP = (0, import_react17.useCallback)(async (data) => {
     const result = await triggerOtpVerify({ body: data });
     await settleLoginEnvelope(result, "verifyOTP");
     return result;
   }, [triggerOtpVerify, settleLoginEnvelope]);
-  const loginWithPassword = (0, import_react16.useCallback)(async (data) => {
+  const loginWithPassword = (0, import_react17.useCallback)(async (data) => {
     const result = await triggerPasswordLogin({ body: data });
     await settleLoginEnvelope(result, "loginWithPassword");
     return result;
   }, [triggerPasswordLogin, settleLoginEnvelope]);
-  const logout = (0, import_react16.useCallback)(() => {
+  const logout = (0, import_react17.useCallback)(() => {
     const refresh = auth.getRefreshToken();
     if (refresh) {
       CfgAccountsAuth.cfgAccountsTokenBlacklistCreate({ body: { refresh } }).catch(() => {
@@ -4726,7 +4786,7 @@ function AccountsProvider({ children }) {
     setProfileError(null);
     clearProfileCache();
   }, []);
-  const value = (0, import_react16.useMemo)(() => ({
+  const value = (0, import_react17.useMemo)(() => ({
     profile,
     isLoadingProfile,
     profileError,
@@ -4755,7 +4815,7 @@ function AccountsProvider({ children }) {
 }
 __name(AccountsProvider, "AccountsProvider");
 function useAccountsContext() {
-  const context = (0, import_react16.useContext)(AccountsContext);
+  const context = (0, import_react17.useContext)(AccountsContext);
   if (!context) {
     throw new Error("useAccountsContext must be used within AccountsProvider");
   }
@@ -4776,7 +4836,7 @@ var resolveAuthRoutes = /* @__PURE__ */ __name((routes) => ({
   defaultAuthCallback: routes?.defaultAuthCallback || routes?.auth || defaultRoutes.defaultAuthCallback
 }), "resolveAuthRoutes");
 var EMAIL_STORAGE_KEY = CFG_KEYS.email.key;
-var AuthContext = (0, import_react17.createContext)(void 0);
+var AuthContext = (0, import_react18.createContext)(void 0);
 var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
   const accounts = useAccountsContext();
   const session = useSession();
@@ -4788,28 +4848,28 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     EMAIL_STORAGE_KEY,
     null
   );
-  const routes = (0, import_react17.useMemo)(() => resolveAuthRoutes(config?.routes), [config?.routes]);
-  const routesRef = (0, import_react17.useRef)(routes);
-  (0, import_react17.useEffect)(() => {
+  const routes = (0, import_react18.useMemo)(() => resolveAuthRoutes(config?.routes), [config?.routes]);
+  const routesRef = (0, import_react18.useRef)(routes);
+  (0, import_react18.useEffect)(() => {
     routesRef.current = routes;
   }, [routes]);
   const redirectManager = useAuthRedirectManager({
     fallbackUrl: routes.defaultCallback,
     clearOnUse: true
   });
-  const configRef = (0, import_react17.useRef)(config);
-  (0, import_react17.useEffect)(() => {
+  const configRef = (0, import_react18.useRef)(config);
+  (0, import_react18.useEffect)(() => {
     configRef.current = config;
   }, [config]);
-  const accountsRef = (0, import_react17.useRef)(accounts);
-  (0, import_react17.useEffect)(() => {
+  const accountsRef = (0, import_react18.useRef)(accounts);
+  (0, import_react18.useEffect)(() => {
     accountsRef.current = accounts;
   }, [accounts]);
-  const pendingManualNavRef = (0, import_react17.useRef)(false);
-  const [profileSettled, setProfileSettled] = (0, import_react17.useState)(false);
+  const pendingManualNavRef = (0, import_react18.useRef)(false);
+  const [profileSettled, setProfileSettled] = (0, import_react18.useState)(false);
   const hasProfile = Boolean(accounts.profile);
-  const profileAttemptedRef = (0, import_react17.useRef)(false);
-  (0, import_react17.useEffect)(() => {
+  const profileAttemptedRef = (0, import_react18.useRef)(false);
+  (0, import_react18.useEffect)(() => {
     if (!isAuthenticated) {
       profileAttemptedRef.current = false;
       const hasTokens = Boolean(auth.getToken() || auth.getRefreshToken());
@@ -4837,8 +4897,8 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     };
   }, [isAuthenticated, hasProfile]);
   const isLoading = !profileSettled;
-  const expiredHandledRef = (0, import_react17.useRef)(false);
-  (0, import_react17.useEffect)(() => {
+  const expiredHandledRef = (0, import_react18.useRef)(false);
+  (0, import_react18.useEffect)(() => {
     const unsubscribe = auth.onSessionExpired(() => {
       if (expiredHandledRef.current) return;
       expiredHandledRef.current = true;
@@ -4851,7 +4911,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     });
     return unsubscribe;
   }, [router]);
-  (0, import_react17.useEffect)(() => {
+  (0, import_react18.useEffect)(() => {
     if (!isAuthenticated || pendingManualNavRef.current) return;
     if (pathname === routes.auth && !queryParams.get("flow")) {
       const saved = redirectManager.hasRedirect() ? redirectManager.getRedirect() : null;
@@ -4859,7 +4919,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       router.push(saved || routes.defaultCallback);
     }
   }, [isAuthenticated, pathname, queryParams, routes, router, redirectManager]);
-  const loadCurrentProfile = (0, import_react17.useCallback)(async (callerId) => {
+  const loadCurrentProfile = (0, import_react18.useCallback)(async (callerId) => {
     if (!auth.isAuthenticated()) {
       throw new Error("No valid authentication token");
     }
@@ -4867,7 +4927,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       callerId: callerId || "AuthContext.loadCurrentProfile"
     });
   }, []);
-  const checkAuthAndRedirect = (0, import_react17.useCallback)(async () => {
+  const checkAuthAndRedirect = (0, import_react18.useCallback)(async () => {
     if (auth.isAuthenticated()) {
       try {
         await loadCurrentProfile("checkAuthAndRedirect");
@@ -4879,7 +4939,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       router.push(routesRef.current.defaultAuthCallback);
     }
   }, [loadCurrentProfile, router]);
-  const requestOTP = (0, import_react17.useCallback)(
+  const requestOTP = (0, import_react18.useCallback)(
     async (identifier, sourceUrl, consent) => {
       auth.clearSession();
       try {
@@ -4921,7 +4981,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     },
     []
   );
-  const verifyOTP = (0, import_react17.useCallback)(
+  const verifyOTP = (0, import_react18.useCallback)(
     async (identifier, otpCode, sourceUrl, redirectUrl, skipRedirect) => {
       try {
         pendingManualNavRef.current = Boolean(skipRedirect);
@@ -4981,7 +5041,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     },
     [setStoredEmail, redirectManager, router]
   );
-  const login = (0, import_react17.useCallback)(
+  const login = (0, import_react18.useCallback)(
     async (email, password, options) => {
       const { redirectUrl, skipRedirect } = options || {};
       try {
@@ -5046,7 +5106,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     },
     [setStoredEmail, redirectManager, router]
   );
-  const refreshToken = (0, import_react17.useCallback)(async () => {
+  const refreshToken = (0, import_react18.useCallback)(async () => {
     const access = await auth.refreshNow();
     if (access) {
       Analytics.event("auth_token_refresh" /* AUTH_TOKEN_REFRESH */, {
@@ -5059,7 +5119,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     });
     return { success: false, message: "Error refreshing token" };
   }, []);
-  const logout = (0, import_react17.useCallback)(() => {
+  const logout = (0, import_react18.useCallback)(() => {
     Analytics.event("auth_logout" /* AUTH_LOGOUT */, {
       category: "auth" /* AUTH */
     });
@@ -5068,21 +5128,21 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
   }, [router]);
   const user = accounts.profile ?? null;
   const isAdminUser = Boolean(user?.is_staff || user?.is_superuser);
-  (0, import_react17.useEffect)(() => {
+  (0, import_react18.useEffect)(() => {
     applyRoleLogPolicy({ isAdmin: isAdminUser });
   }, [isAdminUser]);
-  const updateProfile = (0, import_react17.useCallback)(
+  const updateProfile = (0, import_react18.useCallback)(
     async (data) => {
       const result = await accountsRef.current.partialUpdateProfile(data);
       return result;
     },
     []
   );
-  const uploadAvatar = (0, import_react17.useCallback)(async (avatar) => {
+  const uploadAvatar = (0, import_react18.useCallback)(async (avatar) => {
     const result = await accountsRef.current.uploadAvatar(avatar);
     return result;
   }, []);
-  const value = (0, import_react17.useMemo)(
+  const value = (0, import_react18.useMemo)(
     () => ({
       user,
       isLoading,
@@ -5138,7 +5198,7 @@ function AuthProviderRaw({ children, config, enabled = true }) {
   return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(AccountsProvider, { children: /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(AuthProviderInternal, { config, children }) });
 }
 __name(AuthProviderRaw, "AuthProviderRaw");
-var AuthProvider = (0, import_react17.memo)(AuthProviderRaw);
+var AuthProvider = (0, import_react18.memo)(AuthProviderRaw);
 var defaultAuthState = {
   user: null,
   isLoading: false,
@@ -5194,7 +5254,7 @@ var defaultAuthState = {
   }, "uploadAvatar")
 };
 var useAuth = /* @__PURE__ */ __name(() => {
-  const context = (0, import_react17.useContext)(AuthContext);
+  const context = (0, import_react18.useContext)(AuthContext);
   if (context === void 0) {
     if (isBrowser2 && isDev) {
       authLogger.debug("useAuth called outside AuthProvider, returning default state");