@elevasis/ui 2.73.0 → 2.75.0

package/dist/test-utils/index.d.ts

@@ -176,15 +176,26 @@ interface OrgOsUiRouteContractOptions {
     mode?: OrgOsUiRouteContractMode;
     /**
      * Route paths whose route file — or an ancestor layout route — wraps the page
-     * in an `AccessGuard`. Supply this to enable the `unguarded-beta-route` check.
+     * in an `AccessGuard`. Supply this to enable the `unguarded-route` check.
      *
-     * Omitted means the beta-guard check does not run. Hiding a System from
-     * navigation (`lifecycle: 'beta'`) does not make its route unreachable, so a
-     * caller that can resolve route files should always pass this.
+     * Omitted means the guard check does not run. A System's route is reachable
+     * by direct URL regardless of its lifecycle or whether it is currently
+     * surfaced in navigation, so a caller that can resolve route files should
+     * always pass this.
      */
     guardedRoutePaths?: Iterable<string>;
+    /**
+     * Explicit, named opt-out from the `unguarded-route` check for System paths
+     * that are intentionally reachable without an `AccessGuard` (a public or
+     * unauthenticated surface, for example). Each entry must be a normalized
+     * route path already present in `routePaths`/`routeTreeSource` — this is
+     * not a way to silence a path that simply has not been checked. Keep this
+     * empty unless a route genuinely should not be guarded; do not use it to
+     * paper over a route a guard was forgotten on.
+     */
+    publiclyReachableRoutePaths?: Iterable<string>;
 }
-type OrgOsUiRouteContractIssueKind = 'missing-system' | 'missing-route' | 'unguarded-beta-route';
+type OrgOsUiRouteContractIssueKind = 'missing-system' | 'missing-route' | 'unguarded-route';
 interface OrgOsUiRouteContractIssue {
     target: OrgOsUiRouteContractTarget;
     kind: OrgOsUiRouteContractIssueKind;

package/dist/test-utils/index.js

@@ -2,10 +2,10 @@ import { server, handlers } from '../chunk-7XKCG5CT.js';
 export { handlers, server } from '../chunk-7XKCG5CT.js';
 import { mockWorkOSUser, mockUseAuth, mockUnauthenticatedUser, mockAuthenticatedUser, mockAuthLoading, createMockUseAuth } from '../chunk-N7U24M2J.js';
 export { createMockUseAuth, mockAuthLoading, mockAuthenticatedUser, mockUnauthenticatedUser, mockUseAuth, mockWorkOSUser } from '../chunk-N7U24M2J.js';
-import '../chunk-5B2ZFO44.js';
-import { ApiClientProvider } from '../chunk-NHNTX6ZL.js';
+import '../chunk-3H5DIJN7.js';
+import { ApiClientProvider } from '../chunk-ZG6YJUT4.js';
 import '../chunk-DD3CCMCZ.js';
-import '../chunk-IBCEAVB2.js';
+import '../chunk-A2SB32YV.js';
 import '../chunk-Y6I3IC45.js';
 import '../chunk-6SSQGWK7.js';
 import { ElevasisServiceProvider } from '../chunk-BI5VDO2K.js';
@@ -179,19 +179,15 @@ function getOrgOsRouteContractSystems(organizationModel) {
   const { systems } = organizationModel;
   const arraySystems = systems.systems;
   if (Array.isArray(arraySystems)) {
-    return arraySystems.map((system) => ({
-      ...system,
-      betaByAncestry: system.lifecycle === "beta"
-    }));
+    return arraySystems;
   }
   const result = [];
-  const visit = (entries, prefix = "", ancestorBeta = false) => {
+  const visit = (entries, prefix = "") => {
     for (const [key, system] of Object.entries(entries)) {
       const id = prefix ? `${prefix}.${key}` : system.id || key;
-      const betaByAncestry = ancestorBeta || system.lifecycle === "beta";
-      result.push({ ...system, id, betaByAncestry });
-      if (system.systems) visit(system.systems, id, betaByAncestry);
-      if (system.subsystems) visit(system.subsystems, id, betaByAncestry);
+      result.push({ ...system, id });
+      if (system.systems) visit(system.systems, id);
+      if (system.subsystems) visit(system.subsystems, id);
     }
   };
   visit(systems);
@@ -205,6 +201,9 @@ function collectOrgOsUiRouteContractIssues(options) {
   }
   const normalizedRoutePaths = new Set([...routePaths].map(normalizeOrgOsRoutePath));
   const normalizedGuardedPaths = options.guardedRoutePaths ? new Set([...options.guardedRoutePaths].map(normalizeOrgOsRoutePath)) : void 0;
+  const normalizedPubliclyReachablePaths = new Set(
+    [...options.publiclyReachableRoutePaths ?? []].map(normalizeOrgOsRoutePath)
+  );
   const systems = getOrgOsRouteContractSystems(organizationModel);
   const modelSystemIds = new Set(systems.map((system) => system.id));
   const issues = [];
@@ -236,10 +235,10 @@ function collectOrgOsUiRouteContractIssues(options) {
       });
       continue;
     }
-    if (normalizedGuardedPaths && system.betaByAncestry && !normalizedGuardedPaths.has(normalizedPath)) {
+    if (normalizedGuardedPaths && !normalizedGuardedPaths.has(normalizedPath) && !normalizedPubliclyReachablePaths.has(normalizedPath)) {
       issues.push({
         target,
-        kind: "unguarded-beta-route",
+        kind: "unguarded-route",
         systemId: system.id,
         ownerSystemId,
         path: normalizedPath
@@ -257,17 +256,17 @@ function formatOrgOsUiRouteContractIssue(issue) {
       `- If it should not ship, remove that SystemModule from ${issue.target.shellSource}.`
     ].join("\n");
   }
-  if (issue.kind === "unguarded-beta-route") {
+  if (issue.kind === "unguarded-route") {
     return [
-      `[unguarded-beta-route] System "${issue.systemId}" is lifecycle "beta" (directly or via an ancestor) and routes to "${issue.path}", but neither that route file nor an ancestor layout route wraps it in an AccessGuard.`,
+      `[unguarded-route] System "${issue.systemId}" routes to "${issue.path}", but neither that route file nor an ancestor layout route wraps it in an AccessGuard.`,
       `Owner SystemModule: ${issue.ownerSystemId}`,
-      "A beta System is hidden from navigation, which is not the same as unreachable \u2014 the route still answers a direct URL.",
+      "Any System route answers a direct URL regardless of its lifecycle or navigation visibility, so every routable System needs its own guard.",
       "Fix one of:",
       // Phrased in prose rather than as a guard JSX tag on purpose. The
       // access-key drift scanner in @repo/core matches that tag shape anywhere
       // in a file and would read this message as a real runtime access key.
       `- Wrap the route (or its layout route) in an AccessGuard whose access key is "${issue.systemId}".`,
-      `- Or change the System's lifecycle in ${issue.target.orgModelSource} if it is actually meant to be publicly reachable.`
+      `- Or, if this route is genuinely meant to be reachable without an AccessGuard, add its path to the contract call's publiclyReachableRoutePaths with a comment naming why.`
     ].join("\n");
   }
   return [

package/dist/types/index.d.ts

@@ -2225,6 +2225,64 @@ type Database = {
                     }
                 ];
             };
+            content_distribution_metrics: {
+                Row: {
+                    captured_at: string;
+                    created_at: string;
+                    distribution_id: string;
+                    id: string;
+                    metrics: Json;
+                    organization_id: string;
+                    raw: Json;
+                    source: string;
+                    source_execution_id: string | null;
+                };
+                Insert: {
+                    captured_at?: string;
+                    created_at?: string;
+                    distribution_id: string;
+                    id?: string;
+                    metrics?: Json;
+                    organization_id: string;
+                    raw?: Json;
+                    source: string;
+                    source_execution_id?: string | null;
+                };
+                Update: {
+                    captured_at?: string;
+                    created_at?: string;
+                    distribution_id?: string;
+                    id?: string;
+                    metrics?: Json;
+                    organization_id?: string;
+                    raw?: Json;
+                    source?: string;
+                    source_execution_id?: string | null;
+                };
+                Relationships: [
+                    {
+                        foreignKeyName: "content_distribution_metrics_distribution_fkey";
+                        columns: ["distribution_id", "organization_id"];
+                        isOneToOne: false;
+                        referencedRelation: "content_distributions";
+                        referencedColumns: ["id", "organization_id"];
+                    },
+                    {
+                        foreignKeyName: "content_distribution_metrics_organization_id_fkey";
+                        columns: ["organization_id"];
+                        isOneToOne: false;
+                        referencedRelation: "organizations";
+                        referencedColumns: ["id"];
+                    },
+                    {
+                        foreignKeyName: "content_distribution_metrics_source_execution_id_fkey";
+                        columns: ["source_execution_id"];
+                        isOneToOne: false;
+                        referencedRelation: "execution_logs";
+                        referencedColumns: ["execution_id"];
+                    }
+                ];
+            };
             content_distributions: {
                 Row: {
                     adapted_body: string | null;
@@ -5109,6 +5167,20 @@ interface OAuthState {
     timestamp: number;
     credentialName: string;
     provider: string;
+    /**
+     * Origin of the app that started this flow (e.g. 'https://app.contemplativerecords.com').
+     *
+     * Validated against the platform allowed-origins list in `authorizeHandler`
+     * BEFORE it is sealed into the signed state, so the callback can hand it to
+     * the callback page without re-checking. Every app that renders the OAuth
+     * card runs on its own origin, and the callback page is served from a single
+     * deploy-global one — it cannot read `window.opener.location.origin` across
+     * that boundary, so the origin has to travel with the flow.
+     *
+     * Optional so a state issued before this field existed still decodes; the
+     * callback falls back to `FRONTEND_URL` when it is absent.
+     */
+    appOrigin?: string;
 }
 
 /**
@@ -5742,7 +5814,7 @@ type AIResourceDefinition = SerializedWorkflowDefinition | SerializedAgentDefini
  * Note: Concrete adapter implementations are deferred until needed.
  * This type provides compile-time safety and auto-completion for tool definitions.
  */
-type IntegrationType = 'gmail' | 'google-sheets' | 'slack' | 'github' | 'linear' | 'attio' | 'airtable' | 'salesforce' | 'hubspot' | 'stripe' | 'twilio' | 'sendgrid' | 'mailgun' | 'zapier' | 'webhook' | 'apify' | 'instantly' | 'resend' | 'signature-api' | 'dropbox' | 'anymailfinder' | 'tomba' | 'millionverifier';
+type IntegrationType = 'gmail' | 'google-sheets' | 'slack' | 'github' | 'linear' | 'attio' | 'airtable' | 'salesforce' | 'hubspot' | 'stripe' | 'twilio' | 'sendgrid' | 'mailgun' | 'zapier' | 'webhook' | 'apify' | 'instantly' | 'resend' | 'signature-api' | 'dropbox' | 'anymailfinder' | 'tomba' | 'millionverifier' | 'instagram';
 
 /**
  * Resource Registry type definitions

package/dist/utils/index.d.ts

@@ -266,6 +266,45 @@ declare const LinkSchema: z.ZodObject<{
 }, z.core.$strip>;
 type Link = z.infer<typeof LinkSchema>;
 
+/**
+ * Registration surface for the generic readiness engine (`./engine`).
+ *
+ * This module owns two independent extension points so `./engine` never has
+ * to import anything from `business/**`:
+ *
+ *  - `registerBuiltInReadinessProfile` — a profile id (e.g. `sales.lead-gen.api`)
+ *    maps to structural validation logic plus an optional model-preparation
+ *    hook run before ontology compilation (e.g. injecting a derived catalog).
+ *    This is the ONE readiness-profile registry (`_builtInProfileValidators`
+ *    below) — `../domains/systems`'s `isBuiltInReadinessProfile` /
+ *    `lookupReadinessProfile` read it directly via `getBuiltInReadinessProfile`
+ *    rather than mirroring registrations into a second map, so a profile id
+ *    can never read as built-in without an actual registered validator.
+ *  - `registerReadinessInterfaceMarker` — a `(systemPath, interfaceKey)` pair
+ *    maps to a synthesized interface marker for interfaces that are not
+ *    authored on `system.apiInterface` (e.g. the lead-gen/CRM handoff bridge,
+ *    which is derived from scoped resources rather than declared directly).
+ *
+ * `business/acquisition/ontology-validation.ts` calls both at module load to
+ * register its three built-in profiles. Both registries are module-level
+ * mutable maps with no reset function. Reachable by a tenant via the
+ * `./organization-model/readiness` subpath (see `./index`).
+ */
+
+type SystemInterfaceReadinessIssueFamily = 'SYSTEM_INTERFACE_MISSING' | 'SYSTEM_INTERFACE_DISABLED' | 'SYSTEM_INTERFACE_INVALID' | 'SYSTEM_INTERFACE_NOT_READY' | 'SYSTEM_BRIDGE_NOT_READY'
+/**
+ * The deployed OM snapshot hash does not match the canonical source hash.
+ * Redeploy with `pnpm operations:deploy` to refresh the snapshot.
+ */
+ | 'STALE_OM_SNAPSHOT';
+interface SystemInterfaceReadinessIssue {
+    family: SystemInterfaceReadinessIssueFamily;
+    code: string;
+    path?: string;
+    ref?: string;
+    message: string;
+}
+
 /**
  * Time range selector for dashboard metrics
  */
@@ -402,12 +441,53 @@ declare class APIClientError extends Error {
     readonly requestId?: string;
     readonly fields?: Record<string, string[]>;
     readonly retryAfter?: number;
-    constructor(message: string, code: APIErrorCode, statusCode: number, requestId?: string, fields?: Record<string, string[]>, retryAfter?: number);
+    /**
+     * Structured detail payload carried on `APIErrorResponse.details`
+     * (`packages/core/src/platform/api/types.ts`). Deliberately typed as a
+     * general bag rather than narrowed to any one error family — CONFLICT
+     * linked-row counts, SERVICE_UNAVAILABLE readiness payloads, and future
+     * error shapes all flow through the same field. Use a shape-specific
+     * accessor (e.g. `getSystemReadinessServerErrorDetails`) to narrow it.
+     */
+    readonly details?: Record<string, unknown>;
+    constructor(message: string, code: APIErrorCode, statusCode: number, requestId?: string, fields?: Record<string, string[]>, retryAfter?: number, details?: Record<string, unknown>);
 }
 /**
  * Type guard to check if an error is an APIClientError
  */
 declare function isAPIClientError(error: unknown): error is APIClientError;
+/**
+ * The structured 503 payload a System Interface readiness failure carries
+ * (`APIErrorResponse.details` shape produced by `createInterfaceReadinessApiError`
+ * in `apps/api/src/platform/organization-model/interface-readiness.ts`).
+ *
+ * Field-for-field identical to `SystemReadinessServerErrorDetails` in
+ * `packages/ui/src/components/display/SystemReadinessAlert.tsx` — same shape,
+ * different name to avoid a barrel export collision (both flow through
+ * `src/index.ts`) — so `getSystemReadinessServerErrorDetails`'s return value
+ * drops straight into that component's `serverError` prop. Declared
+ * independently here (rather than imported) to keep `utils` the dependency
+ * the `components` layer imports from, not the other way around.
+ */
+interface SystemReadinessErrorDetails {
+    systemPath: string;
+    interfaceKey: string;
+    readinessProfile?: string;
+    readinessCode: SystemInterfaceReadinessIssueFamily;
+    issues: SystemInterfaceReadinessIssue[];
+}
+/**
+ * Narrows an unknown caught error to a System Interface readiness 503's
+ * structured details, or `undefined` when the error is not an
+ * `APIClientError`, carries no `details`, or carries a `details` payload
+ * from a different error family (e.g. a CONFLICT's linked-row counts).
+ *
+ * Intended for a one-line call site:
+ * ```ts
+ * <SystemReadinessAlert ... serverError={getSystemReadinessServerErrorDetails(error)} />
+ * ```
+ */
+declare function getSystemReadinessServerErrorDetails(error: unknown): SystemReadinessErrorDetails | undefined;
 /**
  * Extract error information from any error type
  * Handles both APIClientError and generic Error instances
@@ -521,5 +601,5 @@ declare function restoreConsole(): void;
 
 declare function setupBrowserMocks(): void;
 
-export { APIClientError, API_URL, DEBOUNCE_FILTER, DEBOUNCE_SLIDER, GC_TIME_LONG, GC_TIME_MEDIUM, GC_TIME_SHORT, LIMIT_ACTIVITY_FEED, OAUTH_FLOW_TIMEOUT, PAGE_SIZE_DEFAULT, REFETCH_INTERVAL_DASHBOARD, REFETCH_INTERVAL_REALTIME, REFETCH_INTERVAL_RUNNING, REFETCH_INTERVAL_RUNNING_FAST, ResourceStatusColors, SSE_CLOSE_GRACE_PERIOD, SSE_TOKEN_REFRESH_DELAY, STALE_TIME_ADMIN, STALE_TIME_DEFAULT, STALE_TIME_MONITORING, WS_MAX_RETRIES_BEFORE_ERROR, WS_RECONNECT_BASE_DELAY, WS_RECONNECT_MAX_DELAY, debounce, formatChartAxisDate, formatDate, formatDateTime, formatErrorMessage, formatRelativeTime, formatTimeAgo, getErrorInfo, getErrorTitle, getResourceColor, getResourceIcon, getTimeRangeDates, getTimeRangeLabel, isAPIClientError, restoreConsole, setupBrowserMocks, suppressKnownWarnings, validateEmail };
-export type { TablerIcon };
+export { APIClientError, API_URL, DEBOUNCE_FILTER, DEBOUNCE_SLIDER, GC_TIME_LONG, GC_TIME_MEDIUM, GC_TIME_SHORT, LIMIT_ACTIVITY_FEED, OAUTH_FLOW_TIMEOUT, PAGE_SIZE_DEFAULT, REFETCH_INTERVAL_DASHBOARD, REFETCH_INTERVAL_REALTIME, REFETCH_INTERVAL_RUNNING, REFETCH_INTERVAL_RUNNING_FAST, ResourceStatusColors, SSE_CLOSE_GRACE_PERIOD, SSE_TOKEN_REFRESH_DELAY, STALE_TIME_ADMIN, STALE_TIME_DEFAULT, STALE_TIME_MONITORING, WS_MAX_RETRIES_BEFORE_ERROR, WS_RECONNECT_BASE_DELAY, WS_RECONNECT_MAX_DELAY, debounce, formatChartAxisDate, formatDate, formatDateTime, formatErrorMessage, formatRelativeTime, formatTimeAgo, getErrorInfo, getErrorTitle, getResourceColor, getResourceIcon, getSystemReadinessServerErrorDetails, getTimeRangeDates, getTimeRangeLabel, isAPIClientError, restoreConsole, setupBrowserMocks, suppressKnownWarnings, validateEmail };
+export type { SystemReadinessErrorDetails, TablerIcon };

package/dist/utils/index.js

@@ -1,4 +1,4 @@
-export { APIClientError, API_URL, DEBOUNCE_FILTER, DEBOUNCE_SLIDER, GC_TIME_LONG, GC_TIME_MEDIUM, GC_TIME_SHORT, LIMIT_ACTIVITY_FEED, OAUTH_FLOW_TIMEOUT, PAGE_SIZE_DEFAULT, STALE_TIME_ADMIN, STALE_TIME_DEFAULT, STALE_TIME_MONITORING, formatChartAxisDate, formatDate, formatDateTime, formatErrorMessage, formatRelativeTime, formatTimeAgo, getErrorInfo, getErrorTitle, getResourceColor, getResourceIcon, isAPIClientError, restoreConsole, setupBrowserMocks, suppressKnownWarnings, validateEmail } from '../chunk-IBCEAVB2.js';
+export { APIClientError, API_URL, DEBOUNCE_FILTER, DEBOUNCE_SLIDER, GC_TIME_LONG, GC_TIME_MEDIUM, GC_TIME_SHORT, LIMIT_ACTIVITY_FEED, OAUTH_FLOW_TIMEOUT, PAGE_SIZE_DEFAULT, STALE_TIME_ADMIN, STALE_TIME_DEFAULT, STALE_TIME_MONITORING, formatChartAxisDate, formatDate, formatDateTime, formatErrorMessage, formatRelativeTime, formatTimeAgo, getErrorInfo, getErrorTitle, getResourceColor, getResourceIcon, getSystemReadinessServerErrorDetails, isAPIClientError, restoreConsole, setupBrowserMocks, suppressKnownWarnings, validateEmail } from '../chunk-A2SB32YV.js';
 export { REFETCH_INTERVAL_DASHBOARD, REFETCH_INTERVAL_REALTIME, REFETCH_INTERVAL_RUNNING, REFETCH_INTERVAL_RUNNING_FAST, SSE_CLOSE_GRACE_PERIOD, SSE_TOKEN_REFRESH_DELAY, WS_MAX_RETRIES_BEFORE_ERROR, WS_RECONNECT_BASE_DELAY, WS_RECONNECT_MAX_DELAY, debounce, getTimeRangeDates, getTimeRangeLabel } from '../chunk-Y6I3IC45.js';
 export { ResourceStatusColors } from '../chunk-6SSQGWK7.js';
 import '../chunk-TVTSASST.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/ui",
-  "version": "2.73.0",
+  "version": "2.75.0",
   "description": "UI components and platform-aware hooks for building custom frontends on the Elevasis platform",
   "type": "module",
   "license": "MIT",
@@ -9,6 +9,7 @@
   ],
   "files": [
     "dist",
+    "!dist/metafile-*.json",
     "src/**/README.md"
   ],
   "exports": {
@@ -241,6 +242,7 @@
     "@mantine/charts": "8.2.7",
     "@mantine/notifications": "8.2.7",
     "@mantine/form": "8.2.7",
+    "@mantine/modals": "8.2.7",
     "@mantine/tiptap": "8.2.7",
     "@tiptap/extension-link": "^2.11.7",
     "@tiptap/extension-placeholder": "^2.11.7",
@@ -280,10 +282,10 @@
     "typescript": "5.9.2",
     "vite": "^7.0.0",
     "vitest": "^3.2.4",
-    "@elevasis/sdk": "1.48.0",
-    "@repo/core": "0.64.0",
-    "@repo/typescript-config": "0.0.0",
+    "@elevasis/sdk": "1.50.0",
     "@repo/elevasis-core": "1.0.0",
+    "@repo/core": "0.67.0",
+    "@repo/typescript-config": "0.0.0",
     "@repo/eslint-config": "0.0.0"
   },
   "dependencies": {
@@ -311,6 +313,9 @@
     "@mantine/form": {
       "optional": true
     },
+    "@mantine/modals": {
+      "optional": true
+    },
     "@tabler/icons-react": {
       "optional": true
     },
@@ -361,7 +366,7 @@
     "lint": "eslint src --max-warnings 0",
     "check-types": "tsc --noEmit",
     "test": "vitest run --passWithNoTests",
-    "test:publish-artifacts": "pnpm build:publish && vitest run src/__tests__/sdk-exports.test.ts src/provider/__tests__/published-surface.test.ts src/__tests__/published-artifact.test.ts src/__tests__/published-peer-dependencies.test.ts",
+    "test:publish-artifacts": "pnpm build:publish && vitest run src/__tests__/sdk-exports.test.ts src/provider/__tests__/published-surface.test.ts src/__tests__/published-artifact.test.ts src/__tests__/published-peer-dependencies.test.ts src/__tests__/published-subpath-identity.test.ts",
     "test:watch": "vitest watch"
   }
 }

package/dist/chunk-6M6OLGQY.js

@@ -1,36 +0,0 @@
-import { z } from 'zod';
-
-// src/components/typeform/schemas.ts
-var answerValueSchema = z.discriminatedUnion("type", [
-  z.object({ type: z.literal("preset"), value: z.string() }),
-  z.object({ type: z.literal("custom"), value: z.string() })
-]);
-var multiAnswerValueSchema = z.array(answerValueSchema);
-function radioWithOtherSchema(presetValues) {
-  return z.discriminatedUnion("type", [
-    z.object({
-      type: z.literal("preset"),
-      value: z.enum(presetValues)
-    }),
-    z.object({
-      type: z.literal("custom"),
-      value: z.string().min(1, "Please specify a value")
-    })
-  ]);
-}
-function checkboxWithOtherSchema(presetValues) {
-  return z.array(
-    z.discriminatedUnion("type", [
-      z.object({
-        type: z.literal("preset"),
-        value: z.enum(presetValues)
-      }),
-      z.object({
-        type: z.literal("custom"),
-        value: z.string().min(1, "Please specify a value")
-      })
-    ])
-  );
-}
-
-export { answerValueSchema, checkboxWithOtherSchema, multiAnswerValueSchema, radioWithOtherSchema };

package/dist/chunk-MKH2KOAO.js

@@ -1,39 +0,0 @@
-import { useAuthContext } from './chunk-BRJ3QZ4E.js';
-import { createClient } from '@supabase/supabase-js';
-import { useMemo } from 'react';
-
-function getSupabaseConfig() {
-  const url = import.meta.env?.VITE_SUPABASE_URL;
-  const anonKey = import.meta.env?.VITE_SUPABASE_ANON_KEY;
-  if (!url || !anonKey) {
-    throw new Error("Missing Supabase environment variables (VITE_SUPABASE_URL, VITE_SUPABASE_ANON_KEY)");
-  }
-  return { url, anonKey };
-}
-var useSupabase = () => {
-  const { getAccessToken } = useAuthContext();
-  const { url, anonKey } = getSupabaseConfig();
-  return useMemo(
-    () => createClient(url, anonKey, {
-      global: {
-        headers: {
-          // Additional headers if needed
-        }
-      },
-      accessToken: async () => {
-        try {
-          const token = await getAccessToken();
-          if (!token) {
-            return null;
-          }
-          return token;
-        } catch {
-          return null;
-        }
-      }
-    }),
-    [getAccessToken, url, anonKey]
-  );
-};
-
-export { useSupabase };