@elevasis/ui 1.17.0 → 1.17.1

package/dist/api/index.d.ts

@@ -1,20 +1,100 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+
 /**
- * API module - HTTP client with Provider pattern
+ * API module types
+ */
+interface ApiClientContextValue {
+    getAccessToken: () => Promise<string | undefined>;
+    /** @deprecated Read via getOrganizationId() instead. Kept for downstream context consumers during migration. */
+    organizationId: string | null;
+    isOrganizationReady: boolean;
+    getOrganizationId: () => string | null;
+    onError?: (endpoint: string, error: Error, details?: ApiErrorDetails) => void;
+}
+interface ApiErrorDetails {
+    method: string;
+    statusCode: number;
+    requestId?: string;
+}
+interface ApiClientProviderProps {
+    children: React.ReactNode;
+    getAccessToken: () => Promise<string | undefined>;
+    /**
+     * Static org ID. Used when org ID is stable at render time.
+     * Cannot reflect org switches without re-rendering the provider.
+     * Prefer getOrganizationId for dynamic org context.
+     * @deprecated Pass getOrganizationId instead for dynamic org resolution.
+     */
+    organizationId?: string | null;
+    /**
+     * Callback invoked on every request to read the current org ID.
+     * Takes precedence over organizationId when provided.
+     * Allows org switching without re-rendering the provider tree.
+     */
+    getOrganizationId?: () => string | null;
+    isOrganizationReady: boolean;
+    onError?: (endpoint: string, error: Error, details?: ApiErrorDetails) => void;
+}
+
+/**
+ * Hook to access the API client context
+ * Must be used within an ApiClientProvider
+ */
+declare function useApiClientContext(): ApiClientContextValue;
+/**
+ * Provider component that configures the API client context
+ *
+ * Configure this at your app root with auth and organization dependencies.
+ * All components using useApiClient will automatically get the configured values.
+ *
+ * @example
+ * ```tsx
+ * function App() {
+ *   const { getAccessToken } = useAuth()
+ *   const { currentWorkOSOrganizationId, currentMembership } = useOrganizations()
+ *
+ *   return (
+ *     <ApiClientProvider
+ *       getAccessToken={getAccessToken}
+ *       organizationId={currentWorkOSOrganizationId}
+ *       isOrganizationReady={!!currentMembership}
+ *       onError={(endpoint, error, details) => logError(endpoint, error, details)}
+ *     >
+ *       <YourApp />
+ *     </ApiClientProvider>
+ *   )
+ * }
+ * ```
+ */
+declare function ApiClientProvider({ children, getAccessToken, organizationId, getOrganizationId: getOrganizationIdProp, isOrganizationReady, onError }: ApiClientProviderProps): react_jsx_runtime.JSX.Element;
+
+/**
+ * Hook that returns apiRequest and deferredApiRequest bound to the current
+ * ApiClientContext. apiUrl is the only parameter because org ID is resolved
+ * at call time via getOrganizationId() from context.
  *
- * Exports:
- * - ApiClientProvider: Configure API client at app root
- * - useApiClientContext: Hook to access API client context directly
- * - useApiClient: Org-aware hook that reads OrganizationContext for readiness
- * - Types for API client configuration
+ * When OrganizationProvider is present in the tree, isOrganizationReady and
+ * isInitializing reflect the live org state (currentWorkOSOrganizationId,
+ * isInitializing, isOrgRefreshing). When OrganizationProvider is absent
+ * (e.g. theme-only mode, testing), the hook falls back to the values from
+ * ApiClientContext.
  *
  * Usage:
  * ```typescript
  * import { useApiClient } from '@repo/ui/api'
+ * import { API_URL } from '@/lib/constants/api'
  *
- * const { apiRequest, isOrganizationReady } = useApiClient(API_URL)
+ * function useMyClient() {
+ *   return useApiClient(API_URL)
+ * }
  * ```
  */
-export { ApiClientProvider, useApiClientContext } from './context/ApiClientProvider';
-export { useApiClient } from './hooks/useApiClient';
-export type { ApiClientContextValue, ApiClientProviderProps, ApiErrorDetails } from './types';
-//# sourceMappingURL=index.d.ts.map
+declare function useApiClient(apiUrl: string): {
+    apiRequest: <T>(endpoint: string, options?: RequestInit) => Promise<T>;
+    deferredApiRequest: <T>(endpoint: string, options?: RequestInit) => Promise<T>;
+    isOrganizationReady: boolean;
+    isInitializing: boolean;
+};
+
+export { ApiClientProvider, useApiClient, useApiClientContext };
+export type { ApiClientContextValue, ApiClientProviderProps, ApiErrorDetails };

package/dist/auth/index.d.ts

@@ -1,16 +1,176 @@
+import * as react from 'react';
+import { ReactNode } from 'react';
+import * as react_jsx_runtime from 'react/jsx-runtime';
+
+interface AuthContextValue {
+    user: {
+        id: string;
+    } | null;
+    isLoading: boolean;
+    getAccessToken: () => Promise<string>;
+    organizationId?: string | null;
+    /**
+     * Trigger WorkOS AuthKit's sign-in flow (redirect to WorkOS hosted auth page).
+     * Used by ProtectedRoute for auto-recovery when `canRecover()` returns true.
+     */
+    signIn: (options?: {
+        state?: {
+            returnTo?: string;
+        };
+    }) => void;
+    /**
+     * Returns true when a previous session can be recovered (refresh token
+     * exists in storage). ProtectedRoute calls `signIn()` only when this returns
+     * true; otherwise it navigates to the login page.
+     *
+     * Explicit logout clears the stored token, so canRecover() returns false
+     * and the user sees the login page as expected.
+     */
+    canRecover: () => boolean;
+}
+declare function useAuthContext(): AuthContextValue;
+declare function AuthProvider({ value, children }: {
+    value: AuthContextValue;
+    children: ReactNode;
+}): react.FunctionComponentElement<react.ProviderProps<AuthContextValue | null>>;
+
 /**
- * Auth module - Pure authentication concerns
- *
- * Exports:
- * - AuthContextValue: Interface for auth state (user, isLoading, getAccessToken, organizationId, signIn, canRecover)
- * - AuthProvider: React context provider for AuthContextValue
- * - useAuthContext: Hook to consume AuthContextValue from context
- * - useStableAccessToken: Stable reference to getAccessToken for SSE connections
- * - useSessionCheck: Validates session on tab refocus
+ * Returns a stable reference to getAccessToken that won't change between renders
+ *
+ * This prevents SSE connections from reconnecting unnecessarily when the
+ * WorkOS useAuth hook returns a new getAccessToken function reference
+ *
+ * @example
+ * ```tsx
+ * const getAccessToken = useStableAccessToken()
+ *
+ * useEffect(() => {
+ *   fetchEventSourceWithTokenRefresh({
+ *     getToken: getAccessToken,
+ *     // ...
+ *   })
+ * }, [getAccessToken]) // Won't re-run on every render
+ * ```
+ */
+declare function useStableAccessToken(): () => Promise<string>;
+
+/**
+ * Checks WorkOS session validity when window/tab regains focus
+ *
+ * When window or tab becomes visible after inactivity, validates session
+ * by attempting to get access token. If session expired (WorkOS inactivity
+ * timeout exceeded), signs out user and redirects to login.
+ *
+ * How it works:
+ * 1. Window/tab regains focus after inactivity
+ * 2. Cancel all pending queries to prevent 401 error cascade
+ * 3. Attempt to get access token from WorkOS
+ * 4. If successful: Resume queries with fresh token
+ * 5. If failed (session expired): Sign out and redirect to login
+ *
+ * @example
+ * // In __root.tsx
+ * export function RootLayoutComponent() {
+ *   useSessionCheck()
+ *   return <YourApp />
+ * }
+ */
+declare function useSessionCheck(): void;
+
+interface InitializationError {
+    layer: 'auth' | 'profile' | 'organization';
+    message: string;
+    originalError?: Error;
+}
+
+interface ProtectedRouteProps {
+    children: ReactNode;
+    /**
+     * Path to redirect to when user is unauthenticated and the auth adapter
+     * does not provide a `signIn` function.
+     * @default '/login'
+     */
+    redirectTo?: string;
+    /**
+     * Rendered while initialization is in progress.
+     * When not provided, nothing is rendered during initialization.
+     */
+    fallback?: ReactNode;
+    /**
+     * Rendered when initialization fails with a non-organization error.
+     * Receives the error and a retry callback.
+     * When not provided, the error is silently swallowed (children not rendered).
+     */
+    errorFallback?: (error: InitializationError, retry: () => void) => ReactNode;
+    /**
+     * When true (default), waits for both user AND organization to be ready
+     * before rendering children. When false, only waits for user readiness.
+     * @default true
+     */
+    waitForOrganization?: boolean;
+}
+/**
+ * Headless route guard for authenticated pages.
+ *
+ * Reads initialization state from the nearest InitializationProvider.
+ *
+ * When `canRecover()` returns true (refresh token exists), unauthenticated users
+ * are sent directly to WorkOS AuthKit via `signIn()`. WorkOS checks its
+ * server-side session and either signs the user in immediately (page-reload case)
+ * or shows a login form (logged-out case). Explicit logout destroys the
+ * server-side session, so the next auto-signIn correctly presents a login form
+ * rather than looping.
+ *
+ * When `canRecover()` returns false, falls back to navigating to `redirectTo`
+ * (default: '/login') with a `returnTo` search param.
+ *
+ * Organization-layer errors are allowed through -- routes like /invitations
+ * must be accessible even when the user has no org membership.
+ *
+ * @example
+ * // With custom fallback (your Mantine loader):
+ * <ProtectedRoute fallback={<AppShellLoader />}>
+ *   <DashboardPage />
+ * </ProtectedRoute>
+ *
+ * @example
+ * // Wait only for user, not org (e.g. /invitations route):
+ * <ProtectedRoute waitForOrganization={false}>
+ *   <InvitationsPage />
+ * </ProtectedRoute>
+ */
+declare function ProtectedRoute({ children, redirectTo, fallback, errorFallback, waitForOrganization }: ProtectedRouteProps): react_jsx_runtime.JSX.Element | null;
+
+interface AdminGuardProps {
+    children: ReactNode;
+    /**
+     * Path to redirect non-admin users to.
+     * @default '/'
+     */
+    redirectTo?: string;
+    /**
+     * Rendered while user readiness is being determined.
+     * When not provided, nothing is rendered during initialization.
+     */
+    fallback?: ReactNode;
+}
+/**
+ * Headless route guard for platform admin pages.
+ *
+ * Reads `profile.is_platform_admin` from the nearest InitializationProvider.
+ * Non-admin users are redirected to `redirectTo` (default: '/').
+ *
+ * Must be nested inside a ProtectedRoute (or equivalent) so that
+ * `userReady` is guaranteed to be true when this guard runs.
+ *
+ * @example
+ * <ProtectedRoute>
+ *   <AdminGuard fallback={<AppShellLoader />}>
+ *     <AdminDashboard />
+ *   </AdminGuard>
+ * </ProtectedRoute>
  */
-export { AuthProvider, useAuthContext, type AuthContextValue } from './context';
-export * from './hooks/useStableAccessToken';
-export * from './hooks/useSessionCheck';
-export { ProtectedRoute, type ProtectedRouteProps } from './guards/ProtectedRoute';
-export { AdminGuard, type AdminGuardProps } from './guards/AdminGuard';
-//# sourceMappingURL=index.d.ts.map
+declare function AdminGuard({ children, redirectTo, fallback }: AdminGuardProps): react_jsx_runtime.JSX.Element | null;
+
+export { AdminGuard, AuthProvider, ProtectedRoute, useAuthContext, useSessionCheck as useRefocusSessionCheck, useSessionCheck, useStableAccessToken };
+export type { AdminGuardProps, AuthContextValue, ProtectedRouteProps };

package/dist/{chunk-IVHJRJFK.js → chunk-F25DUOWI.js}

@@ -1,6 +1,6 @@
 import { AppBackground } from './chunk-NUULWBAD.js';
 import { ElevasisLoader } from './chunk-SZHARWKU.js';
-import { PRESETS, getPreset, generateShades, mantineThemeOverride, createCssVariablesResolver, PresetsProvider } from './chunk-4AKGF454.js';
+import { PRESETS, getPreset, generateShades, mantineThemeOverride, createCssVariablesResolver, PresetsProvider } from './chunk-UEYUPTAD.js';
 import { ElevasisCoreProvider } from './chunk-53GNREDV.js';
 import { AppearanceProvider } from './chunk-QJ2KCHKX.js';
 import { getErrorInfo, formatErrorMessage, getErrorTitle } from './chunk-FCFLBMVI.js';

package/dist/{chunk-UUXXUPOC.js → chunk-RYSPAQGW.js}

@@ -1,4 +1,4 @@
-import { usePresetsContext } from './chunk-4AKGF454.js';
+import { usePresetsContext } from './chunk-UEYUPTAD.js';
 import { useMemo } from 'react';
 
 var BUILT_IN_NAMES = /* @__PURE__ */ new Set([
@@ -16,7 +16,7 @@ var BUILT_IN_NAMES = /* @__PURE__ */ new Set([
   "canopy",
   "slate",
   "cyber-strike",
-  "cyber-flux",
+  "cyber-punk",
   "cyber-void"
 ]);
 function titleCase(str) {

package/dist/{chunk-4AKGF454.js → chunk-UEYUPTAD.js}

@@ -829,8 +829,8 @@ var cyberStrikePreset = {
     "https://fonts.googleapis.com/css2?family=Exo+2:wght@400;500;600;700&display=swap"
   ]
 };
-var cyberFluxPreset = {
-  background: createElement(CyberBackground, { variant: "flux" }),
+var cyberPunkPreset = {
+  background: createElement(CyberBackground, { variant: "punk" }),
   light: {
     primary: "#7C4DFF",
     primaryContrast: "#ffffff",
@@ -864,7 +864,7 @@ var cyberFluxPreset = {
     text: "#F0EAFF",
     textDimmed: "#D0BBEE",
     textSubtle: "#B0A0D0",
-    border: "rgba(149, 117, 205, 0.21)",
+    border: "rgba(149, 117, 205, 0.20)",
     error: "#FF1744",
     warning: "#FF9100",
     success: "#00E676",
@@ -1175,9 +1175,9 @@ var PRESETS = {
     description: "Cold synthetic digital depths",
     colors: ["#2979FF", "#0A0D14", "#E8ECF2"]
   },
-  "cyber-flux": {
-    ...cyberFluxPreset,
-    label: "Cyber-Flux",
+  "cyber-punk": {
+    ...cyberPunkPreset,
+    label: "Cyber-Punk",
     description: "High-voltage violet neon",
     colors: ["#7C4DFF", "#0E0A1E", "#E9E6F2"]
   },