@djangocfg/api 2.1.621 → 2.1.623

package/dist/auth.cjs

@@ -240,6 +240,7 @@ __export(auth_exports, {
   peekSavedRedirect: () => peekSavedRedirect,
   readAuthTrace: () => readAuthTrace,
   readOAuthFailure: () => readOAuthFailure,
+  resetAuthTraceForTests: () => resetAuthTraceForTests,
   resolveAuthError: () => resolveAuthError,
   resolveAuthStatus: () => resolveAuthStatus,
   resolveGuardIsAuthenticated: () => resolveGuardIsAuthenticated,
@@ -292,7 +293,10 @@ var KEY = "cfg.auth.trace";
 var MAX = 200;
 var MAX_STRING = 120;
 var SENSITIVE = /token|otp|code|email|password|secret|cookie|authorization|key|identifier/i;
-var TAB = Math.random().toString(36).slice(2, 6);
+var TAB = (() => {
+  const g = globalThis;
+  return g.__cfgAuthTab ??= Math.random().toString(36).slice(2, 6);
+})();
 var hasWindow = typeof window !== "undefined";
 var memory = [];
 var loaded = false;
@@ -341,10 +345,30 @@ function clean(fields) {
   return Object.keys(out).length ? out : void 0;
 }
 __name(clean, "clean");
+function refresh() {
+  try {
+    const raw = backend()?.getItem(KEY);
+    const parsed = raw ? JSON.parse(raw) : null;
+    if (Array.isArray(parsed)) memory = parsed.filter((e) => typeof e === "object" && e !== null);
+  } catch {
+  }
+}
+__name(refresh, "refresh");
 function record(at, ev, fields) {
-  const entries = load();
+  load();
+  refresh();
+  const entries = memory;
   const p = hasWindow && typeof performance !== "undefined" ? Math.round(performance.now()) : 0;
-  entries.push({ t: at, p, tab: TAB, ev, f: clean(fields) });
+  const f2 = clean(fields);
+  const last = entries[entries.length - 1];
+  if (last && last.tab === TAB && last.ev === ev && JSON.stringify(last.f) === JSON.stringify(f2)) {
+    last.n = (last.n ?? 1) + 1;
+    last.t = at;
+    last.p = p;
+    persist();
+    return;
+  }
+  entries.push({ t: at, p, tab: TAB, ev, f: f2 });
   if (entries.length > MAX) entries.splice(0, entries.length - MAX);
   persist();
 }
@@ -357,6 +381,11 @@ function authTrace(ev, fields) {
   }
 }
 __name(authTrace, "authTrace");
+function resetAuthTraceForTests() {
+  memory = [];
+  loaded = true;
+}
+__name(resetAuthTraceForTests, "resetAuthTraceForTests");
 function readAuthTrace() {
   return load().slice();
 }
@@ -372,7 +401,8 @@ function clearAuthTrace() {
 __name(clearAuthTrace, "clearAuthTrace");
 function context() {
   if (!hasWindow) return [];
-  const lines = [`url: ${window.location.href.split("?")[0]}`, `online: ${navigator.onLine}`, `ua: ${navigator.userAgent}`];
+  const copies = globalThis.__cfgAuthCopies ?? 1;
+  const lines = [`url: ${window.location.href.split("?")[0]}`, `copies: ${String(copies)}`, `online: ${navigator.onLine}`, `ua: ${navigator.userAgent}`];
   try {
     const auth2 = globalThis.__cfgAuthNow;
     const now = auth2?.();
@@ -388,7 +418,7 @@ function dumpAuthTrace() {
   const rows = entries.map((e) => {
     const fields = e.f ? ` ${Object.entries(e.f).map(([k2, v]) => `${k2}=${String(v)}`).join(" ")}` : "";
     const at = new Date(e.t).toISOString().slice(11, 23);
-    return `${at} +${String(e.t - first).padStart(6)}ms [${e.tab} p${e.p}] ${e.ev}${fields}`;
+    return `${at} +${String(e.t - first).padStart(6)}ms [${e.tab} p${e.p}] ${e.ev}${fields}${e.n && e.n > 1 ? ` x${e.n}` : ""}`;
   });
   return [`# cfg auth trace, ${entries.length} events`, ...context(), "", ...rows].join("\n");
 }
@@ -404,7 +434,21 @@ function installAuthTrace() {
       console.log(text);
       return text;
     }, "dump"),
-    clear: clearAuthTrace
+    clear: clearAuthTrace,
+    /** Put the dump on the clipboard (works when the console output is blocked or too long to select). */
+    copy: /* @__PURE__ */ __name(() => {
+      const text = dumpAuthTrace();
+      void navigator.clipboard?.writeText(text);
+      return `${text.split("\n").length} lines copied`;
+    }, "copy"),
+    /** Download the raw trace as a JSON file. */
+    download: /* @__PURE__ */ __name(() => {
+      const blob = new Blob([JSON.stringify(readAuthTrace(), null, 1)], { type: "application/json" });
+      const a = document.createElement("a");
+      a.href = URL.createObjectURL(blob);
+      a.download = `auth-trace-${Date.now()}.json`;
+      a.click();
+    }, "download")
   };
   const queued = g.__cfgAuthTraceQ;
   if (Array.isArray(queued)) {
@@ -420,11 +464,25 @@ function installAuthTrace() {
   }
 }
 __name(installAuthTrace, "installAuthTrace");
+function registerCopy() {
+  if (!hasWindow) return;
+  const g = globalThis;
+  const n = (g.__cfgAuthCopies ?? 0) + 1;
+  g.__cfgAuthCopies = n;
+  if (n > 1) {
+    authTrace("dup.copy", { copies: n });
+    if (n === 2) {
+      console.warn("[@djangocfg/api] more than one copy of the auth package is loaded; see __cfgAuth.dump() (dup.copy). Align the peer set so pnpm installs one instance.");
+    }
+  }
+}
+__name(registerCopy, "registerCopy");
+registerCopy();
 installAuthTrace();
 
 // src/auth/context/AuthContext.tsx
 var import_navigation4 = require("next/navigation");
-var import_react20 = require("react");
+var import_react21 = require("react");
 
 // src/_api/generated/helpers/errors.ts
 var APIError = class extends Error {
@@ -826,10 +884,10 @@ function adoptLegacySession() {
     if (_storage.get(ACCESS_KEY) !== null || _storage.get(REFRESH_KEY) !== null) return;
     const legacy = backendFor("localStorage");
     const access = legacy.get(ACCESS_KEY);
-    const refresh = legacy.get(REFRESH_KEY);
-    if (access === null && refresh === null) return;
+    const refresh2 = legacy.get(REFRESH_KEY);
+    if (access === null && refresh2 === null) return;
     if (access !== null) _storage.set(ACCESS_KEY, access);
-    if (refresh !== null) _storage.set(REFRESH_KEY, refresh);
+    if (refresh2 !== null) _storage.set(REFRESH_KEY, refresh2);
     legacy.set(ACCESS_KEY, null);
     legacy.set(REFRESH_KEY, null);
   } catch {
@@ -914,12 +972,12 @@ function jwtExpMs(token) {
 __name(jwtExpMs, "jwtExpMs");
 function computeSnapshot() {
   const access = _storage.get(ACCESS_KEY);
-  const refresh = _storage.get(REFRESH_KEY);
+  const refresh2 = _storage.get(REFRESH_KEY);
   const now = Date.now();
   const accessExp = access ? jwtExpMs(access) : null;
   const accessAlive = access !== null && (accessExp === null || accessExp > now);
-  const refreshExp = refresh ? jwtExpMs(refresh) : null;
-  const refreshAlive = refresh !== null && (refreshExp === null || refreshExp > now);
+  const refreshExp = refresh2 ? jwtExpMs(refresh2) : null;
+  const refreshAlive = refresh2 !== null && (refreshExp === null || refreshExp > now);
   return {
     status: accessAlive || refreshAlive ? "authenticated" : "anonymous",
     accessExpiresAt: accessExp
@@ -942,9 +1000,9 @@ function scheduleExpiryFlip() {
   const now = Date.now();
   const exps = [];
   const access = _storage.get(ACCESS_KEY);
-  const refresh = _storage.get(REFRESH_KEY);
+  const refresh2 = _storage.get(REFRESH_KEY);
   const accessExp = access ? jwtExpMs(access) : null;
-  const refreshExp = refresh ? jwtExpMs(refresh) : null;
+  const refreshExp = refresh2 ? jwtExpMs(refresh2) : null;
   if (accessExp !== null && accessExp > now) exps.push(accessExp);
   if (refreshExp !== null && refreshExp > now) exps.push(refreshExp);
   if (!exps.length) return;
@@ -1213,9 +1271,9 @@ async function tryRefresh() {
   if (_refreshInflight) return _refreshInflight;
   if (!_refreshHandler) return null;
   const runRefresh = /* @__PURE__ */ __name(async () => {
-    const refresh = auth.getRefreshToken();
-    if (!refresh) return null;
-    const result = await _refreshHandler(refresh);
+    const refresh2 = auth.getRefreshToken();
+    if (!refresh2) return null;
+    const result = await _refreshHandler(refresh2);
     if (!result?.access) {
       trace("refresh", { ok: false, why: "no-access" });
       return null;
@@ -1416,7 +1474,7 @@ function installAuthOnClient(client2) {
 }
 __name(installAuthOnClient, "installAuthOnClient");
 var REFRESH_ENDPOINT = "/cfg/accounts/token/refresh/";
-auth.setRefreshHandler(async (refresh) => {
+auth.setRefreshHandler(async (refresh2) => {
   try {
     const url = `${auth.getBaseUrl()}${REFRESH_ENDPOINT}`;
     const headers = { "Content-Type": "application/json" };
@@ -1428,11 +1486,11 @@ auth.setRefreshHandler(async (refresh) => {
       method: "POST",
       headers,
       credentials: auth.getWithCredentials() ? "include" : "same-origin",
-      body: JSON.stringify({ refresh })
+      body: JSON.stringify({ refresh: refresh2 })
     });
     if (!res.ok) return null;
     const data = await res.json();
-    return data?.access ? { access: data.access, refresh: data.refresh ?? refresh } : null;
+    return data?.access ? { access: data.access, refresh: data.refresh ?? refresh2 } : null;
   } catch {
     return null;
   }
@@ -1703,7 +1761,7 @@ function useCfgRouter() {
   const forward = (0, import_react3.useCallback)(() => {
     router.forward();
   }, [router]);
-  const refresh = (0, import_react3.useCallback)(() => {
+  const refresh2 = (0, import_react3.useCallback)(() => {
     router.refresh();
   }, [router]);
   return {
@@ -1714,7 +1772,7 @@ function useCfgRouter() {
     prefetch,
     back,
     forward,
-    refresh
+    refresh: refresh2
   };
 }
 __name(useCfgRouter, "useCfgRouter");
@@ -4893,7 +4951,7 @@ function resolveAuthStatus(s) {
 __name(resolveAuthStatus, "resolveAuthStatus");
 
 // src/auth/context/AccountsContext.tsx
-var import_react19 = require("react");
+var import_react20 = require("react");
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsApiKeyRegenerateCreate.ts
 var import_mutation = __toESM(require("swr/mutation"), 1);
@@ -5240,6 +5298,15 @@ __name(useCfgAccountsTokenCreate, "useCfgAccountsTokenCreate");
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsTokenRefreshCreate.ts
 var import_mutation19 = __toESM(require("swr/mutation"), 1);
 
+// src/auth/context/sharedContext.ts
+var import_react19 = require("react");
+function sharedContext(key, initial) {
+  const g = globalThis;
+  const registry = g.__cfgAuthContexts ??= {};
+  return registry[key] ??= (0, import_react19.createContext)(initial);
+}
+__name(sharedContext, "sharedContext");
+
 // src/auth/context/AccountsContext.tsx
 var import_jsx_runtime = require("react/jsx-runtime");
 function hasApiOrigin() {
@@ -5253,9 +5320,9 @@ function hasApiOrigin() {
   }
 }
 __name(hasApiOrigin, "hasApiOrigin");
-var AccountsContext = (0, import_react19.createContext)(void 0);
+var AccountsContext = sharedContext("accounts", void 0);
 function AccountsProvider({ children }) {
-  const [profile, setProfile] = (0, import_react19.useState)(() => {
+  const [profile, setProfile] = (0, import_react20.useState)(() => {
     if (!auth.isAuthenticated()) {
       clearProfileCache();
       return void 0;
@@ -5263,15 +5330,15 @@ function AccountsProvider({ children }) {
     const cached = getCachedProfile();
     return cached || void 0;
   });
-  const [isLoadingProfile, setIsLoadingProfile] = (0, import_react19.useState)(false);
-  const [profileError, setProfileError] = (0, import_react19.useState)(null);
-  const profileRef = (0, import_react19.useRef)(profile);
-  const isLoadingRef = (0, import_react19.useRef)(false);
-  const fetchSeqRef = (0, import_react19.useRef)(0);
-  (0, import_react19.useEffect)(() => {
+  const [isLoadingProfile, setIsLoadingProfile] = (0, import_react20.useState)(false);
+  const [profileError, setProfileError] = (0, import_react20.useState)(null);
+  const profileRef = (0, import_react20.useRef)(profile);
+  const isLoadingRef = (0, import_react20.useRef)(false);
+  const fetchSeqRef = (0, import_react20.useRef)(0);
+  (0, import_react20.useEffect)(() => {
     profileRef.current = profile;
   }, [profile]);
-  (0, import_react19.useEffect)(() => {
+  (0, import_react20.useEffect)(() => {
     isLoadingRef.current = isLoadingProfile;
   }, [isLoadingProfile]);
   const { trigger: triggerProfileUpdate } = useCfgAccountsProfileUpdateUpdate();
@@ -5280,7 +5347,7 @@ function AccountsProvider({ children }) {
   const { trigger: triggerOtpRequest } = useCfgAccountsOtpRequestCreate();
   const { trigger: triggerOtpVerify } = useCfgAccountsOtpVerifyCreate();
   const { trigger: triggerPasswordLogin } = useCfgAccountsTokenCreate();
-  const refreshProfile = (0, import_react19.useCallback)(async (options) => {
+  const refreshProfile = (0, import_react20.useCallback)(async (options) => {
     const { callerId, force } = options || {};
     if (!hasApiOrigin()) {
       authLogger.debug(`No API origin configured, skipping profile fetch (caller: ${callerId})`);
@@ -5314,26 +5381,26 @@ function AccountsProvider({ children }) {
       }
     }
   }, []);
-  const updateProfile = (0, import_react19.useCallback)(async (data) => {
+  const updateProfile = (0, import_react20.useCallback)(async (data) => {
     await triggerProfileUpdate({ body: data });
     const user = await refreshProfile({ callerId: "updateProfile", force: true });
     return user;
   }, [triggerProfileUpdate, refreshProfile]);
-  const partialUpdateProfile = (0, import_react19.useCallback)(async (data) => {
+  const partialUpdateProfile = (0, import_react20.useCallback)(async (data) => {
     await triggerProfilePartialUpdate({ body: data });
     const user = await refreshProfile({ callerId: "partialUpdateProfile", force: true });
     return user;
   }, [triggerProfilePartialUpdate, refreshProfile]);
-  const uploadAvatar = (0, import_react19.useCallback)(async (avatar) => {
+  const uploadAvatar = (0, import_react20.useCallback)(async (avatar) => {
     await triggerAvatar({ body: { avatar } });
     const user = await refreshProfile({ callerId: "uploadAvatar", force: true });
     return user;
   }, [triggerAvatar, refreshProfile]);
-  const requestOTP = (0, import_react19.useCallback)(async (data) => {
+  const requestOTP = (0, import_react20.useCallback)(async (data) => {
     const result = await triggerOtpRequest({ body: data });
     return result;
   }, [triggerOtpRequest]);
-  const settleLoginEnvelope = (0, import_react19.useCallback)(async (result, callerId) => {
+  const settleLoginEnvelope = (0, import_react20.useCallback)(async (result, callerId) => {
     if (result.requires_2fa && result.session_id) {
       authLogger.info("2FA required, session:", result.session_id);
       return;
@@ -5348,20 +5415,20 @@ function AccountsProvider({ children }) {
       }
     }
   }, [refreshProfile]);
-  const verifyOTP = (0, import_react19.useCallback)(async (data) => {
+  const verifyOTP = (0, import_react20.useCallback)(async (data) => {
     const result = await triggerOtpVerify({ body: data });
     await settleLoginEnvelope(result, "verifyOTP");
     return result;
   }, [triggerOtpVerify, settleLoginEnvelope]);
-  const loginWithPassword = (0, import_react19.useCallback)(async (data) => {
+  const loginWithPassword = (0, import_react20.useCallback)(async (data) => {
     const result = await triggerPasswordLogin({ body: data });
     await settleLoginEnvelope(result, "loginWithPassword");
     return result;
   }, [triggerPasswordLogin, settleLoginEnvelope]);
-  const logout = (0, import_react19.useCallback)(() => {
-    const refresh = auth.getRefreshToken();
-    if (refresh) {
-      CfgAccountsAuth.cfgAccountsTokenBlacklistCreate({ body: { refresh } }).catch(() => {
+  const logout = (0, import_react20.useCallback)(() => {
+    const refresh2 = auth.getRefreshToken();
+    if (refresh2) {
+      CfgAccountsAuth.cfgAccountsTokenBlacklistCreate({ body: { refresh: refresh2 } }).catch(() => {
         authLogger.warn("Refresh-token blacklist failed (logged out locally anyway)");
       });
     }
@@ -5371,7 +5438,7 @@ function AccountsProvider({ children }) {
     setProfileError(null);
     clearProfileCache();
   }, []);
-  const value = (0, import_react19.useMemo)(() => ({
+  const value = (0, import_react20.useMemo)(() => ({
     profile,
     isLoadingProfile,
     profileError,
@@ -5400,7 +5467,7 @@ function AccountsProvider({ children }) {
 }
 __name(AccountsProvider, "AccountsProvider");
 function useAccountsContext() {
-  const context2 = (0, import_react19.useContext)(AccountsContext);
+  const context2 = (0, import_react20.useContext)(AccountsContext);
   if (!context2) {
     throw new Error("useAccountsContext must be used within AccountsProvider");
   }
@@ -5421,7 +5488,7 @@ var resolveAuthRoutes = /* @__PURE__ */ __name((routes) => ({
   defaultAuthCallback: routes?.defaultAuthCallback || routes?.auth || defaultRoutes.defaultAuthCallback
 }), "resolveAuthRoutes");
 var EMAIL_STORAGE_KEY = CFG_KEYS.email.key;
-var AuthContext = (0, import_react20.createContext)(void 0);
+var AuthContext = sharedContext("auth", void 0);
 var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
   const accounts = useAccountsContext();
   const session = useSession();
@@ -5433,28 +5500,28 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     EMAIL_STORAGE_KEY,
     null
   );
-  const routes = (0, import_react20.useMemo)(() => resolveAuthRoutes(config?.routes), [config?.routes]);
-  const routesRef = (0, import_react20.useRef)(routes);
-  (0, import_react20.useEffect)(() => {
+  const routes = (0, import_react21.useMemo)(() => resolveAuthRoutes(config?.routes), [config?.routes]);
+  const routesRef = (0, import_react21.useRef)(routes);
+  (0, import_react21.useEffect)(() => {
     routesRef.current = routes;
   }, [routes]);
   const redirectManager = useAuthRedirectManager({
     fallbackUrl: routes.defaultCallback,
     clearOnUse: true
   });
-  const configRef = (0, import_react20.useRef)(config);
-  (0, import_react20.useEffect)(() => {
+  const configRef = (0, import_react21.useRef)(config);
+  (0, import_react21.useEffect)(() => {
     configRef.current = config;
   }, [config]);
-  const accountsRef = (0, import_react20.useRef)(accounts);
-  (0, import_react20.useEffect)(() => {
+  const accountsRef = (0, import_react21.useRef)(accounts);
+  (0, import_react21.useEffect)(() => {
     accountsRef.current = accounts;
   }, [accounts]);
-  const pendingManualNavRef = (0, import_react20.useRef)(false);
-  const [profileSettled, setProfileSettled] = (0, import_react20.useState)(false);
+  const pendingManualNavRef = (0, import_react21.useRef)(false);
+  const [profileSettled, setProfileSettled] = (0, import_react21.useState)(false);
   const hasProfile = Boolean(accounts.profile);
-  const profileAttemptedRef = (0, import_react20.useRef)(false);
-  (0, import_react20.useEffect)(() => {
+  const profileAttemptedRef = (0, import_react21.useRef)(false);
+  (0, import_react21.useEffect)(() => {
     if (!isAuthenticated) {
       profileAttemptedRef.current = false;
       const hasTokens = Boolean(auth.getToken() || auth.getRefreshToken());
@@ -5492,9 +5559,9 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     };
   }, [isAuthenticated, hasProfile]);
   const isLoading = !profileSettled;
-  const [clientReady, setClientReady] = (0, import_react20.useState)(false);
-  const [timedOut, setTimedOut] = (0, import_react20.useState)(false);
-  (0, import_react20.useEffect)(() => {
+  const [clientReady, setClientReady] = (0, import_react21.useState)(false);
+  const [timedOut, setTimedOut] = (0, import_react21.useState)(false);
+  (0, import_react21.useEffect)(() => {
     setClientReady(true);
     const timer = setTimeout(() => setTimedOut(true), 8e3);
     return () => clearTimeout(timer);
@@ -5506,8 +5573,8 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     profileSettled,
     timedOut
   });
-  const lastStatusRef = (0, import_react20.useRef)("");
-  (0, import_react20.useEffect)(() => {
+  const lastStatusRef = (0, import_react21.useRef)("");
+  (0, import_react21.useEffect)(() => {
     if (lastStatusRef.current === status) return;
     lastStatusRef.current = status;
     authTrace("status", {
@@ -5519,7 +5586,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       path: pathname ?? ""
     });
   }, [status, isAuthenticated, profileSettled, timedOut, pathname]);
-  (0, import_react20.useEffect)(() => {
+  (0, import_react21.useEffect)(() => {
     globalThis.__cfgAuthNow = () => ({
       status,
       snapshot: isAuthenticated,
@@ -5530,7 +5597,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       timedOut
     });
   }, [status, isAuthenticated, profileSettled, timedOut]);
-  (0, import_react20.useEffect)(() => {
+  (0, import_react21.useEffect)(() => {
     const unsubscribe = auth.onSessionExpired(() => {
       authTrace("expired.handler", { path: pathname ?? "" });
       authLogger.warn("Session expired (terminal 401) \u2014 redirecting to login");
@@ -5542,7 +5609,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     });
     return unsubscribe;
   }, [router, pathname]);
-  (0, import_react20.useEffect)(() => {
+  (0, import_react21.useEffect)(() => {
     if (!isAuthenticated || pendingManualNavRef.current) return;
     if (pathname === routes.auth && !queryParams.get("flow")) {
       const saved = redirectManager.hasRedirect() ? redirectManager.getRedirect() : null;
@@ -5551,7 +5618,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       router.push(saved || routes.defaultCallback);
     }
   }, [isAuthenticated, pathname, queryParams, routes, router, redirectManager]);
-  const loadCurrentProfile = (0, import_react20.useCallback)(async (callerId) => {
+  const loadCurrentProfile = (0, import_react21.useCallback)(async (callerId) => {
     if (!auth.isAuthenticated()) {
       throw new Error("No valid authentication token");
     }
@@ -5559,7 +5626,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       callerId: callerId || "AuthContext.loadCurrentProfile"
     });
   }, []);
-  const checkAuthAndRedirect = (0, import_react20.useCallback)(async () => {
+  const checkAuthAndRedirect = (0, import_react21.useCallback)(async () => {
     if (auth.isAuthenticated()) {
       try {
         await loadCurrentProfile("checkAuthAndRedirect");
@@ -5571,7 +5638,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
       router.push(routesRef.current.defaultAuthCallback);
     }
   }, [loadCurrentProfile, router]);
-  const requestOTP = (0, import_react20.useCallback)(
+  const requestOTP = (0, import_react21.useCallback)(
     async (identifier, sourceUrl, consent) => {
       authTrace("otp.request");
       auth.clearSession();
@@ -5614,7 +5681,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     },
     []
   );
-  const verifyOTP = (0, import_react20.useCallback)(
+  const verifyOTP = (0, import_react21.useCallback)(
     async (identifier, otpCode, sourceUrl, redirectUrl, skipRedirect) => {
       try {
         pendingManualNavRef.current = Boolean(skipRedirect);
@@ -5675,7 +5742,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     },
     [setStoredEmail, redirectManager, router]
   );
-  const login = (0, import_react20.useCallback)(
+  const login = (0, import_react21.useCallback)(
     async (email, password, options) => {
       const { redirectUrl, skipRedirect } = options || {};
       try {
@@ -5741,7 +5808,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     },
     [setStoredEmail, redirectManager, router]
   );
-  const refreshToken = (0, import_react20.useCallback)(async () => {
+  const refreshToken = (0, import_react21.useCallback)(async () => {
     const access = await auth.refreshNow();
     if (access) {
       Analytics.event("auth_token_refresh" /* AUTH_TOKEN_REFRESH */, {
@@ -5754,7 +5821,7 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     });
     return { success: false, message: "Error refreshing token" };
   }, []);
-  const logout = (0, import_react20.useCallback)(() => {
+  const logout = (0, import_react21.useCallback)(() => {
     authTrace("logout");
     Analytics.event("auth_logout" /* AUTH_LOGOUT */, {
       category: "auth" /* AUTH */
@@ -5764,21 +5831,21 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
   }, [router]);
   const user = accounts.profile ?? null;
   const isAdminUser = Boolean(user?.is_staff || user?.is_superuser);
-  (0, import_react20.useEffect)(() => {
+  (0, import_react21.useEffect)(() => {
     applyRoleLogPolicy({ isAdmin: isAdminUser });
   }, [isAdminUser]);
-  const updateProfile = (0, import_react20.useCallback)(
+  const updateProfile = (0, import_react21.useCallback)(
     async (data) => {
       const result = await accountsRef.current.partialUpdateProfile(data);
       return result;
     },
     []
   );
-  const uploadAvatar = (0, import_react20.useCallback)(async (avatar) => {
+  const uploadAvatar = (0, import_react21.useCallback)(async (avatar) => {
     const result = await accountsRef.current.uploadAvatar(avatar);
     return result;
   }, []);
-  const value = (0, import_react20.useMemo)(
+  const value = (0, import_react21.useMemo)(
     () => ({
       user,
       isLoading,
@@ -5836,7 +5903,7 @@ function AuthProviderRaw({ children, config, enabled = true }) {
   return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(AccountsProvider, { children: /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(AuthProviderInternal, { config, children }) });
 }
 __name(AuthProviderRaw, "AuthProviderRaw");
-var AuthProvider = (0, import_react20.memo)(AuthProviderRaw);
+var AuthProvider = (0, import_react21.memo)(AuthProviderRaw);
 var defaultAuthState = {
   user: null,
   isLoading: false,
@@ -5893,7 +5960,7 @@ var defaultAuthState = {
   }, "uploadAvatar")
 };
 var useAuth = /* @__PURE__ */ __name(() => {
-  const context2 = (0, import_react20.useContext)(AuthContext);
+  const context2 = (0, import_react21.useContext)(AuthContext);
   if (context2 === void 0) {
     if (isBrowser2 && isDev) {
       authLogger.debug("useAuth called outside AuthProvider, returning default state");