@eminuckan/spine 0.2.2 → 0.3.0

package/dist/{server-CouYoZiw.js.map → server-hGrElJMG.js.map}

@@ -1 +1 @@
-{"version":3,"file":"server-CouYoZiw.js","names":["details: ForbiddenPermissionDetails","permissionRouteProtectionConfig: PermissionRouteProtectionConfig","config: PermissionRouteProtectionConfig","request: Request","permission: PermissionCode | PermissionCode[]","options: PermissionCheckOptions","loader: (args: any) => Promise<TLoaderData>","options?: PermissionCheckOptions","args: any"],"sources":["../src/permissions/route-protection.server.ts"],"sourcesContent":["import { PermissionChecker } from './permission-service';\nimport type { PermissionCheckOptions, PermissionCode } from './types';\n\nexport interface PermissionRouteSession {\n  user?: {\n    sub?: string;\n    email?: string | null;\n  } | null;\n  accessToken?: string | null;\n}\n\nexport interface PermissionRouteContext {\n  permissions: PermissionCode[];\n  currentTenant?: string | null;\n}\n\nexport interface ForbiddenPermissionDetails {\n  request: Request;\n  permission: PermissionCode | PermissionCode[];\n  permissionsToCheck: PermissionCode[];\n  missingPermissions?: PermissionCode[];\n  options: PermissionCheckOptions;\n  session: PermissionRouteSession;\n  context: PermissionRouteContext;\n}\n\nexport interface PermissionRouteProtectionConfig {\n  getSession?: (request: Request) => Promise<PermissionRouteSession>;\n  resolveContext?: (\n    request: Request,\n    session: PermissionRouteSession\n  ) => Promise<PermissionRouteContext>;\n  createUnauthorizedResponse?: (\n    request: Request,\n    session: PermissionRouteSession\n  ) => Response;\n  createForbiddenResponse?: (details: ForbiddenPermissionDetails) => Response;\n}\n\nconst DEFAULT_UNAUTHORIZED_RESPONSE = () =>\n  new Response('Unauthorized', {\n    status: 401,\n    statusText: 'You must be logged in to access this resource',\n  });\n\nconst DEFAULT_FORBIDDEN_RESPONSE = (details: ForbiddenPermissionDetails) => {\n  const message =\n    process.env.NODE_ENV === 'development'\n      ? `Missing permissions: ${details.missingPermissions?.join(', ')}`\n      : \"You don't have permission to access this resource\";\n\n  return new Response(message, {\n    status: 403,\n    statusText: 'Forbidden',\n  });\n};\n\nlet permissionRouteProtectionConfig: PermissionRouteProtectionConfig = {};\n\nfunction getPermissionRouteProtectionConfig(): Required<PermissionRouteProtectionConfig> {\n  if (!permissionRouteProtectionConfig.getSession) {\n    throw new Error(\n      'Permission route protection session getter not configured. Call configurePermissionRouteProtection first.'\n    );\n  }\n\n  if (!permissionRouteProtectionConfig.resolveContext) {\n    throw new Error(\n      'Permission route protection context resolver not configured. Call configurePermissionRouteProtection first.'\n    );\n  }\n\n  return {\n    getSession: permissionRouteProtectionConfig.getSession,\n    resolveContext: permissionRouteProtectionConfig.resolveContext,\n    createUnauthorizedResponse:\n      permissionRouteProtectionConfig.createUnauthorizedResponse || DEFAULT_UNAUTHORIZED_RESPONSE,\n    createForbiddenResponse:\n      permissionRouteProtectionConfig.createForbiddenResponse || DEFAULT_FORBIDDEN_RESPONSE,\n  };\n}\n\nexport function configurePermissionRouteProtection(\n  config: PermissionRouteProtectionConfig\n): void {\n  permissionRouteProtectionConfig = {\n    ...permissionRouteProtectionConfig,\n    ...config,\n  };\n}\n\nexport function resetPermissionRouteProtection(): void {\n  permissionRouteProtectionConfig = {};\n}\n\nasync function getPermissionRouteState(request: Request): Promise<{\n  config: Required<PermissionRouteProtectionConfig>;\n  session: PermissionRouteSession;\n  context: PermissionRouteContext;\n}> {\n  const config = getPermissionRouteProtectionConfig();\n  const session = await config.getSession(request);\n  const context = await config.resolveContext(request, session);\n\n  return {\n    config,\n    session,\n    context,\n  };\n}\n\nexport async function requirePermission(\n  request: Request,\n  permission: PermissionCode | PermissionCode[],\n  options: PermissionCheckOptions = {}\n): Promise<void> {\n  const { config, session, context } = await getPermissionRouteState(request);\n\n  if (!session.user || !session.accessToken) {\n    throw config.createUnauthorizedResponse(request, session);\n  }\n\n  const checker = new PermissionChecker(context.permissions || []);\n  const permissionsToCheck = Array.isArray(permission) ? permission : [permission];\n  const result = checker.hasPermissions(permissionsToCheck, options);\n\n  if (!result.hasPermission) {\n    throw config.createForbiddenResponse({\n      request,\n      permission,\n      permissionsToCheck,\n      missingPermissions: result.missingPermissions,\n      options,\n      session,\n      context,\n    });\n  }\n}\n\nexport async function checkPermission(\n  request: Request,\n  permission: PermissionCode | PermissionCode[],\n  options: PermissionCheckOptions = {}\n): Promise<boolean> {\n  try {\n    await requirePermission(request, permission, options);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function withPermission<TLoaderData>(\n  permission: PermissionCode | PermissionCode[],\n  loader: (args: any) => Promise<TLoaderData>,\n  options?: PermissionCheckOptions\n) {\n  return async (args: any): Promise<TLoaderData> => {\n    await requirePermission(args.request, permission, options);\n    return loader(args);\n  };\n}\n"],"mappings":";;;AAuCA,MAAM,gCAAgC,MACpC,IAAI,SAAS,gBAAgB;CAC3B,QAAQ;CACR,YAAY;AACb;AAEH,MAAM,6BAA6B,CAACA,YAAwC;CAC1E,MAAM,UACJ,QAAQ,IAAI,aAAa,iBACpB,uBAAuB,QAAQ,oBAAoB,KAAK,KAAK,CAAC,IAC/D;AAEN,QAAO,IAAI,SAAS,SAAS;EAC3B,QAAQ;EACR,YAAY;CACb;AACF;AAED,IAAIC,kCAAmE,CAAE;AAEzE,SAAS,qCAAgF;AACvF,MAAK,gCAAgC,WACnC,OAAM,IAAI,MACR;AAIJ,MAAK,gCAAgC,eACnC,OAAM,IAAI,MACR;AAIJ,QAAO;EACL,YAAY,gCAAgC;EAC5C,gBAAgB,gCAAgC;EAChD,4BACE,gCAAgC,8BAA8B;EAChE,yBACE,gCAAgC,2BAA2B;CAC9D;AACF;AAED,SAAgB,mCACdC,QACM;AACN,mCAAkC;EAChC,GAAG;EACH,GAAG;CACJ;AACF;AAED,SAAgB,iCAAuC;AACrD,mCAAkC,CAAE;AACrC;AAED,eAAe,wBAAwBC,SAIpC;CACD,MAAM,SAAS,oCAAoC;CACnD,MAAM,UAAU,MAAM,OAAO,WAAW,QAAQ;CAChD,MAAM,UAAU,MAAM,OAAO,eAAe,SAAS,QAAQ;AAE7D,QAAO;EACL;EACA;EACA;CACD;AACF;AAED,eAAsB,kBACpBA,SACAC,YACAC,UAAkC,CAAE,GACrB;CACf,MAAM,EAAE,QAAQ,SAAS,SAAS,GAAG,MAAM,wBAAwB,QAAQ;AAE3E,MAAK,QAAQ,SAAS,QAAQ,YAC5B,OAAM,OAAO,2BAA2B,SAAS,QAAQ;CAG3D,MAAM,UAAU,IAAI,kBAAkB,QAAQ,eAAe,CAAE;CAC/D,MAAM,qBAAqB,MAAM,QAAQ,WAAW,GAAG,aAAa,CAAC,UAAW;CAChF,MAAM,SAAS,QAAQ,eAAe,oBAAoB,QAAQ;AAElE,MAAK,OAAO,cACV,OAAM,OAAO,wBAAwB;EACnC;EACA;EACA;EACA,oBAAoB,OAAO;EAC3B;EACA;EACA;CACD,EAAC;AAEL;AAED,eAAsB,gBACpBF,SACAC,YACAC,UAAkC,CAAE,GAClB;AAClB,KAAI;AACF,QAAM,kBAAkB,SAAS,YAAY,QAAQ;AACrD,SAAO;CACR,QAAO;AACN,SAAO;CACR;AACF;AAED,SAAgB,eACdD,YACAE,QACAC,SACA;AACA,QAAO,OAAOC,SAAoC;AAChD,QAAM,kBAAkB,KAAK,SAAS,YAAY,QAAQ;AAC1D,SAAO,OAAO,KAAK;CACpB;AACF"}
+{"version":3,"file":"server-hGrElJMG.js","names":["details: ForbiddenPermissionDetails","permissionRouteProtectionConfig: PermissionRouteProtectionConfig","config: PermissionRouteProtectionConfig","request: Request","permission: PermissionCode | PermissionCode[]","options: PermissionCheckOptions","loader: (args: any) => Promise<TLoaderData>","options?: PermissionCheckOptions","args: any"],"sources":["../src/permissions/route-protection.server.ts"],"sourcesContent":["import { PermissionChecker } from './permission-service';\nimport type { PermissionCheckOptions, PermissionCode } from './types';\n\nexport interface PermissionRouteSession {\n  user?: {\n    sub?: string;\n    email?: string | null;\n  } | null;\n  accessToken?: string | null;\n}\n\nexport interface PermissionRouteContext {\n  permissions: PermissionCode[];\n  currentTenant?: string | null;\n}\n\nexport interface ForbiddenPermissionDetails {\n  request: Request;\n  permission: PermissionCode | PermissionCode[];\n  permissionsToCheck: PermissionCode[];\n  missingPermissions?: PermissionCode[];\n  options: PermissionCheckOptions;\n  session: PermissionRouteSession;\n  context: PermissionRouteContext;\n}\n\nexport interface PermissionRouteProtectionConfig {\n  getSession?: (request: Request) => Promise<PermissionRouteSession>;\n  resolveContext?: (\n    request: Request,\n    session: PermissionRouteSession\n  ) => Promise<PermissionRouteContext>;\n  createUnauthorizedResponse?: (\n    request: Request,\n    session: PermissionRouteSession\n  ) => Response;\n  createForbiddenResponse?: (details: ForbiddenPermissionDetails) => Response;\n}\n\nconst DEFAULT_UNAUTHORIZED_RESPONSE = () =>\n  new Response('Unauthorized', {\n    status: 401,\n    statusText: 'You must be logged in to access this resource',\n  });\n\nconst DEFAULT_FORBIDDEN_RESPONSE = (details: ForbiddenPermissionDetails) => {\n  const message =\n    process.env.NODE_ENV === 'development'\n      ? `Missing permissions: ${details.missingPermissions?.join(', ')}`\n      : \"You don't have permission to access this resource\";\n\n  return new Response(message, {\n    status: 403,\n    statusText: 'Forbidden',\n  });\n};\n\nlet permissionRouteProtectionConfig: PermissionRouteProtectionConfig = {};\n\nfunction getPermissionRouteProtectionConfig(): Required<PermissionRouteProtectionConfig> {\n  if (!permissionRouteProtectionConfig.getSession) {\n    throw new Error(\n      'Permission route protection session getter not configured. Call configurePermissionRouteProtection first.'\n    );\n  }\n\n  if (!permissionRouteProtectionConfig.resolveContext) {\n    throw new Error(\n      'Permission route protection context resolver not configured. Call configurePermissionRouteProtection first.'\n    );\n  }\n\n  return {\n    getSession: permissionRouteProtectionConfig.getSession,\n    resolveContext: permissionRouteProtectionConfig.resolveContext,\n    createUnauthorizedResponse:\n      permissionRouteProtectionConfig.createUnauthorizedResponse || DEFAULT_UNAUTHORIZED_RESPONSE,\n    createForbiddenResponse:\n      permissionRouteProtectionConfig.createForbiddenResponse || DEFAULT_FORBIDDEN_RESPONSE,\n  };\n}\n\nexport function configurePermissionRouteProtection(\n  config: PermissionRouteProtectionConfig\n): void {\n  permissionRouteProtectionConfig = {\n    ...permissionRouteProtectionConfig,\n    ...config,\n  };\n}\n\nexport function resetPermissionRouteProtection(): void {\n  permissionRouteProtectionConfig = {};\n}\n\nasync function getPermissionRouteState(request: Request): Promise<{\n  config: Required<PermissionRouteProtectionConfig>;\n  session: PermissionRouteSession;\n  context: PermissionRouteContext;\n}> {\n  const config = getPermissionRouteProtectionConfig();\n  const session = await config.getSession(request);\n  const context = await config.resolveContext(request, session);\n\n  return {\n    config,\n    session,\n    context,\n  };\n}\n\nexport async function requirePermission(\n  request: Request,\n  permission: PermissionCode | PermissionCode[],\n  options: PermissionCheckOptions = {}\n): Promise<void> {\n  const { config, session, context } = await getPermissionRouteState(request);\n\n  if (!session.user || !session.accessToken) {\n    throw config.createUnauthorizedResponse(request, session);\n  }\n\n  const checker = new PermissionChecker(context.permissions || []);\n  const permissionsToCheck = Array.isArray(permission) ? permission : [permission];\n  const result = checker.hasPermissions(permissionsToCheck, options);\n\n  if (!result.hasPermission) {\n    throw config.createForbiddenResponse({\n      request,\n      permission,\n      permissionsToCheck,\n      missingPermissions: result.missingPermissions,\n      options,\n      session,\n      context,\n    });\n  }\n}\n\nexport async function checkPermission(\n  request: Request,\n  permission: PermissionCode | PermissionCode[],\n  options: PermissionCheckOptions = {}\n): Promise<boolean> {\n  try {\n    await requirePermission(request, permission, options);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function withPermission<TLoaderData>(\n  permission: PermissionCode | PermissionCode[],\n  loader: (args: any) => Promise<TLoaderData>,\n  options?: PermissionCheckOptions\n) {\n  return async (args: any): Promise<TLoaderData> => {\n    await requirePermission(args.request, permission, options);\n    return loader(args);\n  };\n}\n"],"mappings":";;;AAuCA,MAAM,gCAAgC,MACpC,IAAI,SAAS,gBAAgB;CAC3B,QAAQ;CACR,YAAY;AACb;AAEH,MAAM,6BAA6B,CAACA,YAAwC;CAC1E,MAAM,UACJ,QAAQ,IAAI,aAAa,iBACpB,uBAAuB,QAAQ,oBAAoB,KAAK,KAAK,CAAC,IAC/D;AAEN,QAAO,IAAI,SAAS,SAAS;EAC3B,QAAQ;EACR,YAAY;CACb;AACF;AAED,IAAIC,kCAAmE,CAAE;AAEzE,SAAS,qCAAgF;AACvF,MAAK,gCAAgC,WACnC,OAAM,IAAI,MACR;AAIJ,MAAK,gCAAgC,eACnC,OAAM,IAAI,MACR;AAIJ,QAAO;EACL,YAAY,gCAAgC;EAC5C,gBAAgB,gCAAgC;EAChD,4BACE,gCAAgC,8BAA8B;EAChE,yBACE,gCAAgC,2BAA2B;CAC9D;AACF;AAED,SAAgB,mCACdC,QACM;AACN,mCAAkC;EAChC,GAAG;EACH,GAAG;CACJ;AACF;AAED,SAAgB,iCAAuC;AACrD,mCAAkC,CAAE;AACrC;AAED,eAAe,wBAAwBC,SAIpC;CACD,MAAM,SAAS,oCAAoC;CACnD,MAAM,UAAU,MAAM,OAAO,WAAW,QAAQ;CAChD,MAAM,UAAU,MAAM,OAAO,eAAe,SAAS,QAAQ;AAE7D,QAAO;EACL;EACA;EACA;CACD;AACF;AAED,eAAsB,kBACpBA,SACAC,YACAC,UAAkC,CAAE,GACrB;CACf,MAAM,EAAE,QAAQ,SAAS,SAAS,GAAG,MAAM,wBAAwB,QAAQ;AAE3E,MAAK,QAAQ,SAAS,QAAQ,YAC5B,OAAM,OAAO,2BAA2B,SAAS,QAAQ;CAG3D,MAAM,UAAU,IAAI,kBAAkB,QAAQ,eAAe,CAAE;CAC/D,MAAM,qBAAqB,MAAM,QAAQ,WAAW,GAAG,aAAa,CAAC,UAAW;CAChF,MAAM,SAAS,QAAQ,eAAe,oBAAoB,QAAQ;AAElE,MAAK,OAAO,cACV,OAAM,OAAO,wBAAwB;EACnC;EACA;EACA;EACA,oBAAoB,OAAO;EAC3B;EACA;EACA;CACD,EAAC;AAEL;AAED,eAAsB,gBACpBF,SACAC,YACAC,UAAkC,CAAE,GAClB;AAClB,KAAI;AACF,QAAM,kBAAkB,SAAS,YAAY,QAAQ;AACrD,SAAO;CACR,QAAO;AACN,SAAO;CACR;AACF;AAED,SAAgB,eACdD,YACAE,QACAC,SACA;AACA,QAAO,OAAOC,SAAoC;AAChD,QAAM,kBAAkB,KAAK,SAAS,YAAY,QAAQ;AAC1D,SAAO,OAAO,KAAK;CACpB;AACF"}

package/dist/server.js

@@ -1,18 +1,20 @@
-import { LOG_LEVEL_PRIORITY, LogLevel, Logger, createLogger, defaultLoggerConfig, logger } from "./logging-_h2mi3L9.js";
-import { PERMISSION_MODULES, PermissionChecker, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, getPermissionChecker, getPermissions, initializePermissions, useAllPermissions, useHasModulePermission, useHasPermission, useHasPermissions, useModulePermission, usePermission, usePermissionChecker, usePermissionStore, usePermissions } from "./permissions-D5ScGGnd.js";
-import { TenantProvider, configureTenantEndpoints, initializeTenantStore, useCurrentOrganization, useCurrentTenant, useOrganization, useTenant, useTenantStore, useTenantSwitcher } from "./tenant-C6KPaSCX.js";
-import { IdentityContextProvider, configureIdentityEndpoints, configureIdentityStore, resetIdentityStoreConfig, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useUserPermissions, useUserTenants } from "./identity-CFa1txoj.js";
-import { isApiClientError } from "./types-BnKaWdfe.js";
-import { ApiError, ErrorCodes, ErrorHandler, calculateBackoffDelay, createRetryFetch, fetchWithTimeout, handleApiError, isRetryableError, withRetry } from "./api-client-DsrxK05Z.js";
-import { IdentitySignalRClient, SignalRClient, cleanupSignalR, createIdentitySignalRClient, getIdentitySignalRClient, initializeSignalR } from "./signalr-SJ-1sIxw.js";
-import { cachePresets, createQueryClient, createQueryKeyFactory, invalidationHelpers } from "./query-client-Bpe08pk9.js";
-import "./src-CJ2RLi94.js";
-import { AUTH_ERROR_COOKIE_PREFIX, cleanupExpiredOAuthStates, closeRedisConnection, createAuthSession, createOAuthState, deleteOAuthState, destroyAuthSession, getAuthSession, getOAuthState, isSessionValid, requireAuthSession, updateAuthSession } from "./redis-session-storage.server-BR_0y-QO.js";
-import { clearAuthErrorHeaders, clearAuthServerCache, configureAuthClaimMapping, extractUserInfo, getAccessToken, getAuthError, getUser, handleCallback, hasAuthError, login, logout, refreshTokens, requireAuth, resetAuthClaimMapping } from "./auth.server-Cx2h2qu3.js";
-import { attemptTokenRefresh, authRoute, configureRouteProtection, isTokenExpiredResponse, onboardingRoute, protectRoute, publicRoute, resetRouteProtectionConfig, shouldAttemptTokenRefresh, shouldRefreshToken, subscriptionRoute } from "./server-BHfKHKF_.js";
-import { clearActiveTenant, clearCurrentTenant, configureIdentityContextFetcher, configureTenantCookie, getActiveTenant, getAvailableTenants, getCurrentTenant, getTenantFromIdentityContext, initializeTenant, resetTenantCookieConfig, setActiveTenant, setCurrentTenant } from "./server-BxvRxjCK.js";
-import { clearIdentityContextCache, configureIdentityAPIFetcher, configurePermissionFetcher, contextToUserInfo, fetchIdentityContext, fetchUserPermissions, getIdentityContext, hasContextVersionChanged, updateContextVersion } from "./server-C3L8J7iE.js";
-import { checkPermission, configurePermissionRouteProtection, requirePermission, resetPermissionRouteProtection, withPermission } from "./server-CouYoZiw.js";
-import { createAPIConfigFactory, createApiClient, createFetchMiddleware } from "./server-DZmcd2Lr.js";
+import { LOG_LEVEL_PRIORITY, LogLevel, Logger, createLogger, defaultLoggerConfig, logger } from "./logging-DviiAkLx.js";
+import { PermissionChecker } from "./permission-service-CvGpwI0d.js";
+import { PERMISSION_MODULES, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, getPermissionChecker, getPermissions, initializePermissions, useAllPermissions, useHasModulePermission, useHasPermission, useHasPermissions, useModulePermission, usePermission, usePermissionChecker, usePermissionStore, usePermissions } from "./permissions-_n1hIG7Q.js";
+import { evaluateAccessRequirement } from "./access-CGrsDMwu.js";
+import { TenantProvider, configureTenantClient, configureTenantEndpoints, getTenantCookieName, initializeTenantStore, normalizeTenantDataPayload, normalizeTenantSwitchPayload, resetTenantClientConfig, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useOrganization, useTenant, useTenantData, useTenantStore, useTenantSwitcher } from "./tenant-DfLemb6n.js";
+import { IdentityContextProvider, configureIdentityEndpoints, configureIdentityStore, initialIdentityContext, normalizeIdentityContextPayload, normalizeIdentityPermissionsPayload, resetIdentityStoreConfig, useHasEntitlement, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useUserPermissions, useUserTenants } from "./identity-C5un-xAs.js";
+import { isApiClientError } from "./types-BaaE6wjY.js";
+import { ApiError, ErrorCodes, ErrorHandler, calculateBackoffDelay, createRetryFetch, fetchWithTimeout, handleApiError, isRetryableError, withRetry } from "./api-client-CgZUMukO.js";
+import { IdentitySignalRClient, SignalRClient, cleanupSignalR, createIdentitySignalRClient, getIdentitySignalRClient, initializeSignalR } from "./signalr-k-70VHKo.js";
+import { cachePresets, createQueryClient, createQueryKeyFactory, invalidationHelpers } from "./query-client-Bh3TyB8W.js";
+import "./src-B9rDUgSb.js";
+import { AUTH_ERROR_COOKIE_PREFIX, cleanupExpiredOAuthStates, closeRedisConnection, createAuthSession, createOAuthState, deleteOAuthState, destroyAuthSession, destroyAuthSessionById, destroyAuthSessionsByIdentitySession, destroyAuthSessionsBySessionState, destroyAuthSessionsBySid, destroyAuthSessionsForUser, getAuthSession, getAuthSessionById, getCurrentAuthSessionId, getOAuthState, isSessionValid, listAuthSessionDataForUser, listAuthSessionsForUser, listCurrentUserAuthSessions, requireAuthSession, updateAuthSession } from "./redis-session-storage.server-v2VcpFsQ.js";
+import { clearAuthErrorHeaders, clearAuthServerCache, configureAuthClaimMapping, extractUserInfo, getAccessToken, getAuthError, getUser, handleBackChannelLogout, handleCallback, handleFrontChannelLogout, hasAuthError, login, logout, refreshTokens, requireAuth, resetAuthClaimMapping } from "./auth.server-D5oiz9aF.js";
+import { attemptTokenRefresh, authRoute, configureRouteProtection, isTokenExpiredResponse, onboardingRoute, policyRoute, protectRoute, protectedRoute, publicRoute, resetRouteProtectionConfig, shouldAttemptTokenRefresh, shouldRefreshToken, subscriptionRoute } from "./server-B6PCxc-T.js";
+import { clearActiveTenant, clearCurrentTenant, configureIdentityContextFetcher, configureTenantCookie, configureTenantResolution, getActiveTenant, getAvailableTenants, getCurrentTenant, getTenantFromIdentityContext, initializeTenant, resetTenantCookieConfig, resetTenantResolutionConfig, setActiveTenant, setCurrentTenant } from "./server-Ca-3DJf2.js";
+import { clearIdentityContextCache, configureIdentityAPIFetcher, configurePermissionFetcher, contextToUserInfo, fetchIdentityContext, fetchUserPermissions, getIdentityContext, hasContextVersionChanged, updateContextVersion } from "./server-Dxsww9v9.js";
+import { checkPermission, configurePermissionRouteProtection, requirePermission, resetPermissionRouteProtection, withPermission } from "./server-hGrElJMG.js";
+import { createAPIConfigFactory, createApiClient, createFetchMiddleware } from "./server-C96NMFBy.js";
 
-export { AUTH_ERROR_COOKIE_PREFIX, ApiError, ErrorCodes, ErrorHandler, IdentityContextProvider, IdentitySignalRClient, LOG_LEVEL_PRIORITY, LogLevel, Logger, PERMISSION_MODULES, PermissionChecker, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, SignalRClient, TenantProvider, attemptTokenRefresh, authRoute, cachePresets, calculateBackoffDelay, checkPermission, cleanupExpiredOAuthStates, cleanupSignalR, clearActiveTenant, clearAuthErrorHeaders, clearAuthServerCache, clearCurrentTenant, clearIdentityContextCache, closeRedisConnection, configureAuthClaimMapping, configureIdentityAPIFetcher, configureIdentityContextFetcher, configureIdentityEndpoints, configureIdentityStore, configurePermissionFetcher, configurePermissionRouteProtection, configureRouteProtection, configureTenantCookie, configureTenantEndpoints, contextToUserInfo, createAPIConfigFactory, createApiClient, createAuthSession, createFetchMiddleware, createIdentitySignalRClient, createLogger, createOAuthState, createQueryClient, createQueryKeyFactory, createRetryFetch, defaultLoggerConfig, deleteOAuthState, destroyAuthSession, extractUserInfo, fetchIdentityContext, fetchUserPermissions, fetchWithTimeout, getAccessToken, getActiveTenant, getAuthError, getAuthSession, getAvailableTenants, getCurrentTenant, getIdentityContext, getIdentitySignalRClient, getOAuthState, getPermissionChecker, getPermissions, getTenantFromIdentityContext, getUser, handleApiError, handleCallback, hasAuthError, hasContextVersionChanged, initializePermissions, initializeSignalR, initializeTenant, initializeTenantStore, invalidationHelpers, isApiClientError, isRetryableError, isSessionValid, isTokenExpiredResponse, logger, login, logout, onboardingRoute, protectRoute, publicRoute, refreshTokens, requireAuth, requireAuthSession, requirePermission, resetAuthClaimMapping, resetIdentityStoreConfig, resetPermissionRouteProtection, resetRouteProtectionConfig, resetTenantCookieConfig, setActiveTenant, setCurrentTenant, shouldAttemptTokenRefresh, shouldRefreshToken, subscriptionRoute, updateAuthSession, updateContextVersion, useAllPermissions, useCurrentOrganization, useCurrentTenant, useHasModulePermission, useHasPermission, useHasPermissions, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useModulePermission, useOrganization, usePermission, usePermissionChecker, usePermissionStore, usePermissions, useTenant, useTenantStore, useTenantSwitcher, useUserPermissions, useUserTenants, withPermission, withRetry };
+export { AUTH_ERROR_COOKIE_PREFIX, ApiError, ErrorCodes, ErrorHandler, IdentityContextProvider, IdentitySignalRClient, LOG_LEVEL_PRIORITY, LogLevel, Logger, PERMISSION_MODULES, PermissionChecker, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, SignalRClient, TenantProvider, attemptTokenRefresh, authRoute, cachePresets, calculateBackoffDelay, checkPermission, cleanupExpiredOAuthStates, cleanupSignalR, clearActiveTenant, clearAuthErrorHeaders, clearAuthServerCache, clearCurrentTenant, clearIdentityContextCache, closeRedisConnection, configureAuthClaimMapping, configureIdentityAPIFetcher, configureIdentityContextFetcher, configureIdentityEndpoints, configureIdentityStore, configurePermissionFetcher, configurePermissionRouteProtection, configureRouteProtection, configureTenantClient, configureTenantCookie, configureTenantEndpoints, configureTenantResolution, contextToUserInfo, createAPIConfigFactory, createApiClient, createAuthSession, createFetchMiddleware, createIdentitySignalRClient, createLogger, createOAuthState, createQueryClient, createQueryKeyFactory, createRetryFetch, defaultLoggerConfig, deleteOAuthState, destroyAuthSession, destroyAuthSessionById, destroyAuthSessionsByIdentitySession, destroyAuthSessionsBySessionState, destroyAuthSessionsBySid, destroyAuthSessionsForUser, evaluateAccessRequirement, extractUserInfo, fetchIdentityContext, fetchUserPermissions, fetchWithTimeout, getAccessToken, getActiveTenant, getAuthError, getAuthSession, getAuthSessionById, getAvailableTenants, getCurrentAuthSessionId, getCurrentTenant, getIdentityContext, getIdentitySignalRClient, getOAuthState, getPermissionChecker, getPermissions, getTenantCookieName, getTenantFromIdentityContext, getUser, handleApiError, handleBackChannelLogout, handleCallback, handleFrontChannelLogout, hasAuthError, hasContextVersionChanged, initialIdentityContext, initializePermissions, initializeSignalR, initializeTenant, initializeTenantStore, invalidationHelpers, isApiClientError, isRetryableError, isSessionValid, isTokenExpiredResponse, listAuthSessionDataForUser, listAuthSessionsForUser, listCurrentUserAuthSessions, logger, login, logout, normalizeIdentityContextPayload, normalizeIdentityPermissionsPayload, normalizeTenantDataPayload, normalizeTenantSwitchPayload, onboardingRoute, policyRoute, protectRoute, protectedRoute, publicRoute, refreshTokens, requireAuth, requireAuthSession, requirePermission, resetAuthClaimMapping, resetIdentityStoreConfig, resetPermissionRouteProtection, resetRouteProtectionConfig, resetTenantClientConfig, resetTenantCookieConfig, resetTenantResolutionConfig, setActiveTenant, setCurrentTenant, shouldAttemptTokenRefresh, shouldRefreshToken, subscriptionRoute, updateAuthSession, updateContextVersion, useAllPermissions, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useHasEntitlement, useHasModulePermission, useHasPermission, useHasPermissions, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useModulePermission, useOrganization, usePermission, usePermissionChecker, usePermissionStore, usePermissions, useTenant, useTenantData, useTenantStore, useTenantSwitcher, useUserPermissions, useUserTenants, withPermission, withRetry };

package/dist/signalr/index.js

@@ -1,3 +1,3 @@
-import { IdentitySignalRClient, SignalRClient, cleanupSignalR, createIdentitySignalRClient, getIdentitySignalRClient, initializeSignalR } from "../signalr-SJ-1sIxw.js";
+import { IdentitySignalRClient, SignalRClient, cleanupSignalR, createIdentitySignalRClient, getIdentitySignalRClient, initializeSignalR } from "../signalr-k-70VHKo.js";
 
 export { IdentitySignalRClient, SignalRClient, cleanupSignalR, createIdentitySignalRClient, getIdentitySignalRClient, initializeSignalR };

package/dist/signalr/types.d.ts

@@ -15,7 +15,7 @@ export type SignalRConnectionState = 'Connecting' | 'Connected' | 'Reconnecting'
  */
 export interface SignalRClientConfig {
     /**
-     * Base URL for SignalR hub (defaults to API base URL)
+     * Base URL for SignalR hub. Defaults to window.location.origin in browsers.
      */
     baseUrl?: string;
     /**

package/dist/{signalr-SJ-1sIxw.js → signalr-k-70VHKo.js}

@@ -87,7 +87,8 @@ var SignalRClient = class {
 	*/
 	buildHubUrl() {
 		let baseUrl = this.config.baseUrl;
-		if (!baseUrl && typeof window !== "undefined") baseUrl = window.location.hostname === "localhost" ? "https://localhost:5001" : window.location.origin;
+		if (!baseUrl && typeof window !== "undefined") baseUrl = window.location.origin;
+		if (!baseUrl) throw new Error("SignalR baseUrl is required outside browser runtimes");
 		return `${baseUrl}${this.config.hubPath}`;
 	}
 	/**
@@ -271,4 +272,4 @@ async function cleanupSignalR() {
 
 //#endregion
 export { IdentitySignalRClient, SignalRClient, cleanupSignalR, createIdentitySignalRClient, getIdentitySignalRClient, initializeSignalR };
-//# sourceMappingURL=signalr-SJ-1sIxw.js.map
+//# sourceMappingURL=signalr-k-70VHKo.js.map

package/dist/signalr-k-70VHKo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signalr-k-70VHKo.js","names":["DEFAULT_CONFIG: Required<Omit<SignalRClientConfig, 'hubPath' | 'baseUrl'>>","config: SignalRClientConfig","accessToken: string | null","event: unknown","eventName: string","handler: SignalREventHandler<T>","methodName: string","message: string","level: 'info' | 'warn' | 'error'","options: Omit<SignalRClientConfig, 'hubPath'>","handler: IdentityContextChangeHandler","identityClientInstance: IdentitySignalRClient | null"],"sources":["../src/signalr/signalr-client.ts"],"sourcesContent":["/**\n * SignalR Client for Real-time Updates\n * \n * This client connects to SignalR hub and listens for real-time events.\n * Supports identity context changes, permissions updates, etc.\n */\n\nimport { HubConnection, HubConnectionBuilder, LogLevel } from '@microsoft/signalr';\nimport type {\n  SignalRClientConfig,\n  SignalRConnectionState,\n  SignalREventHandler,\n  IdentityContextChangedEvent,\n  IdentityContextChangeHandler,\n} from './types';\n\n/**\n * Default configuration\n */\nconst DEFAULT_CONFIG: Required<Omit<SignalRClientConfig, 'hubPath' | 'baseUrl'>> = {\n  maxReconnectAttempts: 5,\n  reconnectDelay: 1000,\n  verbose: false,\n  autoReconnectOnVisibility: true,\n};\n\n/**\n * SignalR Client Class\n * \n * Generic SignalR client that can be used for any hub connection.\n */\nexport class SignalRClient {\n  private connection: HubConnection | null = null;\n  private accessToken: string | null = null;\n  private isConnecting = false;\n  private reconnectAttempts = 0;\n  private config: Required<Omit<SignalRClientConfig, 'baseUrl'>> & { baseUrl?: string };\n  private eventHandlers: Map<string, Set<SignalREventHandler>> = new Map();\n  private visibilityHandler: (() => void) | null = null;\n\n  constructor(config: SignalRClientConfig) {\n    this.config = {\n      ...DEFAULT_CONFIG,\n      ...config,\n    };\n\n    // Auto-reconnect on page visibility change\n    if (typeof document !== 'undefined' && this.config.autoReconnectOnVisibility) {\n      this.visibilityHandler = () => {\n        if (document.visibilityState === 'visible' && this.connection?.state === 'Disconnected') {\n          this.log('🔄 Page became visible, attempting reconnection...');\n          this.connect(this.accessToken);\n        }\n      };\n      document.addEventListener('visibilitychange', this.visibilityHandler);\n    }\n  }\n\n  /**\n   * Connect to SignalR hub\n   */\n  async connect(accessToken: string | null): Promise<void> {\n    if (!accessToken) {\n      this.log('⚠️ No access token provided for SignalR connection', 'warn');\n      return;\n    }\n\n    if (this.isConnecting) {\n      this.log('🔄 Connection already in progress...');\n      return;\n    }\n\n    if (this.connection?.state === 'Connected') {\n      this.log('✅ Already connected');\n      return;\n    }\n\n    this.accessToken = accessToken;\n    this.isConnecting = true;\n\n    try {\n      const hubUrl = this.buildHubUrl();\n\n      this.connection = new HubConnectionBuilder()\n        .withUrl(hubUrl, {\n          accessTokenFactory: () => accessToken,\n        })\n        .withAutomaticReconnect({\n          nextRetryDelayInMilliseconds: (retryContext) => {\n            // Exponential backoff: 1s, 2s, 4s, 8s, 16s\n            const delay = Math.min(\n              this.config.reconnectDelay * Math.pow(2, retryContext.previousRetryCount),\n              16000\n            );\n            this.log(`🔄 Reconnect attempt ${retryContext.previousRetryCount + 1} in ${delay}ms`);\n            return delay;\n          },\n        })\n        .configureLogging(this.config.verbose ? LogLevel.Information : LogLevel.Warning)\n        .build();\n\n      // Setup event handlers\n      this.setupConnectionHandlers();\n\n      // Connect\n      this.log(`🔄 Connecting to SignalR hub: ${hubUrl}`);\n      await this.connection.start();\n\n      this.log(`✅ Connected successfully (ID: ${this.connection.connectionId})`);\n      this.reconnectAttempts = 0;\n    } catch (error) {\n      this.log(`❌ Connection failed: ${error}`, 'error');\n      this.reconnectAttempts++;\n\n      // Retry with exponential backoff\n      if (this.reconnectAttempts <= this.config.maxReconnectAttempts) {\n        const delay = Math.min(\n          this.config.reconnectDelay * Math.pow(2, this.reconnectAttempts - 1),\n          30000\n        );\n        this.log(\n          `🔄 Retrying in ${delay}ms (attempt ${this.reconnectAttempts}/${this.config.maxReconnectAttempts})`\n        );\n\n        setTimeout(() => {\n          this.connect(accessToken);\n        }, delay);\n      } else {\n        this.log('❌ Max reconnection attempts reached', 'error');\n      }\n    } finally {\n      this.isConnecting = false;\n    }\n  }\n\n  /**\n   * Build hub URL\n   */\n  private buildHubUrl(): string {\n    let baseUrl = this.config.baseUrl;\n\n    if (!baseUrl && typeof window !== 'undefined') {\n      baseUrl = window.location.origin;\n    }\n\n    if (!baseUrl) {\n      throw new Error('SignalR baseUrl is required outside browser runtimes');\n    }\n\n    return `${baseUrl}${this.config.hubPath}`;\n  }\n\n  /**\n   * Setup connection lifecycle handlers\n   */\n  private setupConnectionHandlers(): void {\n    if (!this.connection) return;\n\n    this.connection.onreconnecting((error) => {\n      this.log(`🔄 Reconnecting... ${error?.message || ''}`);\n    });\n\n    this.connection.onreconnected((connectionId) => {\n      this.log(`✅ Reconnected (ID: ${connectionId})`);\n      this.reconnectAttempts = 0;\n    });\n\n    this.connection.onclose((error) => {\n      this.log(`🔌 Connection closed: ${error?.message || 'No error'}`);\n\n      // Auto-reconnect if we have a token and it wasn't a manual disconnect\n      if (this.accessToken && error) {\n        setTimeout(() => {\n          this.connect(this.accessToken);\n        }, 5000);\n      }\n    });\n\n    // Re-register all event handlers\n    this.eventHandlers.forEach((handlers, eventName) => {\n      this.connection!.on(eventName, (event: unknown) => {\n        handlers.forEach((handler) => {\n          try {\n            handler(event);\n          } catch (err) {\n            this.log(`❌ Error in ${eventName} handler: ${err}`, 'error');\n          }\n        });\n      });\n    });\n  }\n\n  /**\n   * Disconnect from SignalR hub\n   */\n  async disconnect(): Promise<void> {\n    if (this.connection) {\n      this.log('🔌 Disconnecting...');\n      await this.connection.stop();\n      this.connection = null;\n      this.accessToken = null;\n      this.reconnectAttempts = 0;\n    }\n  }\n\n  /**\n   * Register event handler\n   */\n  on<T = unknown>(eventName: string, handler: SignalREventHandler<T>): () => void {\n    // Add to handlers map\n    if (!this.eventHandlers.has(eventName)) {\n      this.eventHandlers.set(eventName, new Set());\n    }\n    this.eventHandlers.get(eventName)!.add(handler as SignalREventHandler);\n\n    // If already connected, register immediately\n    if (this.connection) {\n      this.connection.on(eventName, handler);\n    }\n\n    // Return unsubscribe function\n    return () => {\n      this.eventHandlers.get(eventName)?.delete(handler as SignalREventHandler);\n      this.connection?.off(eventName, handler);\n    };\n  }\n\n  /**\n   * Invoke hub method\n   */\n  async invoke<T = void>(methodName: string, ...args: unknown[]): Promise<T> {\n    if (!this.connection || this.connection.state !== 'Connected') {\n      throw new Error('SignalR not connected');\n    }\n    return this.connection.invoke<T>(methodName, ...args);\n  }\n\n  /**\n   * Get current connection state\n   */\n  get connectionState(): SignalRConnectionState {\n    return (this.connection?.state as SignalRConnectionState) || 'Disconnected';\n  }\n\n  /**\n   * Check if connected\n   */\n  get isConnected(): boolean {\n    return this.connection?.state === 'Connected';\n  }\n\n  /**\n   * Get connection ID\n   */\n  get connectionId(): string | null {\n    return this.connection?.connectionId || null;\n  }\n\n  /**\n   * Cleanup resources\n   */\n  dispose(): void {\n    if (this.visibilityHandler && typeof document !== 'undefined') {\n      document.removeEventListener('visibilitychange', this.visibilityHandler);\n    }\n    this.disconnect();\n    this.eventHandlers.clear();\n  }\n\n  /**\n   * Log message\n   */\n  private log(message: string, level: 'info' | 'warn' | 'error' = 'info'): void {\n    if (!this.config.verbose && level === 'info') return;\n\n    const prefix = '[SignalR]';\n    switch (level) {\n      case 'warn':\n        console.warn(prefix, message);\n        break;\n      case 'error':\n        console.error(prefix, message);\n        break;\n      default:\n        console.log(prefix, message);\n    }\n  }\n}\n\n/**\n * Create Identity SignalR Client\n * \n * Factory function to create a SignalR client for identity hub.\n */\nexport function createIdentitySignalRClient(\n  options: Omit<SignalRClientConfig, 'hubPath'> = {}\n): SignalRClient {\n  return new SignalRClient({\n    ...options,\n    hubPath: '/hubs/identity',\n  });\n}\n\n/**\n * Identity SignalR Client\n * \n * Specialized client for identity context changes.\n */\nexport class IdentitySignalRClient extends SignalRClient {\n  private identityHandlers: IdentityContextChangeHandler[] = [];\n\n  constructor(options: Omit<SignalRClientConfig, 'hubPath'> = {}) {\n    super({\n      ...options,\n      hubPath: '/hubs/identity',\n    });\n\n    // Register identity context change handler\n    this.on<IdentityContextChangedEvent>('IdentityContextChanged', (event) => {\n      this.identityHandlers.forEach((handler) => {\n        try {\n          handler(event);\n        } catch (error) {\n          console.error('Error in identity context change handler:', error);\n        }\n      });\n    });\n  }\n\n  /**\n   * Add handler for identity context changes\n   */\n  onIdentityContextChanged(handler: IdentityContextChangeHandler): () => void {\n    this.identityHandlers.push(handler);\n\n    return () => {\n      const index = this.identityHandlers.indexOf(handler);\n      if (index > -1) {\n        this.identityHandlers.splice(index, 1);\n      }\n    };\n  }\n}\n\n/**\n * Singleton identity client instance\n */\nlet identityClientInstance: IdentitySignalRClient | null = null;\n\n/**\n * Get or create singleton identity SignalR client\n */\nexport function getIdentitySignalRClient(\n  options: Omit<SignalRClientConfig, 'hubPath'> = {}\n): IdentitySignalRClient {\n  if (!identityClientInstance) {\n    identityClientInstance = new IdentitySignalRClient(options);\n  }\n  return identityClientInstance;\n}\n\n/**\n * Initialize SignalR with access token\n */\nexport async function initializeSignalR(\n  accessToken: string | null,\n  options: Omit<SignalRClientConfig, 'hubPath'> = {}\n): Promise<IdentitySignalRClient> {\n  if (typeof window === 'undefined') {\n    throw new Error('SignalR can only be initialized on the client');\n  }\n\n  const client = getIdentitySignalRClient(options);\n  await client.connect(accessToken);\n  return client;\n}\n\n/**\n * Cleanup SignalR connection\n */\nexport async function cleanupSignalR(): Promise<void> {\n  if (identityClientInstance) {\n    await identityClientInstance.disconnect();\n    identityClientInstance.dispose();\n    identityClientInstance = null;\n  }\n}\n"],"mappings":";;;;;;AAmBA,MAAMA,iBAA6E;CACjF,sBAAsB;CACtB,gBAAgB;CAChB,SAAS;CACT,2BAA2B;AAC5B;;;;;;AAOD,IAAa,gBAAb,MAA2B;CACzB,AAAQ,aAAmC;CAC3C,AAAQ,cAA6B;CACrC,AAAQ,eAAe;CACvB,AAAQ,oBAAoB;CAC5B,AAAQ;CACR,AAAQ,gBAAuD,IAAI;CACnE,AAAQ,oBAAyC;CAEjD,YAAYC,QAA6B;AACvC,OAAK,SAAS;GACZ,GAAG;GACH,GAAG;EACJ;AAGD,aAAW,aAAa,eAAe,KAAK,OAAO,2BAA2B;AAC5E,QAAK,oBAAoB,MAAM;AAC7B,QAAI,SAAS,oBAAoB,aAAa,KAAK,YAAY,UAAU,gBAAgB;AACvF,UAAK,IAAI,qDAAqD;AAC9D,UAAK,QAAQ,KAAK,YAAY;IAC/B;GACF;AACD,YAAS,iBAAiB,oBAAoB,KAAK,kBAAkB;EACtE;CACF;;;;CAKD,MAAM,QAAQC,aAA2C;AACvD,OAAK,aAAa;AAChB,QAAK,IAAI,sDAAsD,OAAO;AACtE;EACD;AAED,MAAI,KAAK,cAAc;AACrB,QAAK,IAAI,uCAAuC;AAChD;EACD;AAED,MAAI,KAAK,YAAY,UAAU,aAAa;AAC1C,QAAK,IAAI,sBAAsB;AAC/B;EACD;AAED,OAAK,cAAc;AACnB,OAAK,eAAe;AAEpB,MAAI;GACF,MAAM,SAAS,KAAK,aAAa;AAEjC,QAAK,aAAa,IAAI,uBACnB,QAAQ,QAAQ,EACf,oBAAoB,MAAM,YAC3B,EAAC,CACD,uBAAuB,EACtB,8BAA8B,CAAC,iBAAiB;IAE9C,MAAM,QAAQ,KAAK,IACjB,KAAK,OAAO,iBAAiB,KAAK,IAAI,GAAG,aAAa,mBAAmB,EACzE,KACD;AACD,SAAK,KAAK,uBAAuB,aAAa,qBAAqB,EAAE,MAAM,MAAM,IAAI;AACrF,WAAO;GACR,EACF,EAAC,CACD,iBAAiB,KAAK,OAAO,UAAU,SAAS,cAAc,SAAS,QAAQ,CAC/E,OAAO;AAGV,QAAK,yBAAyB;AAG9B,QAAK,KAAK,gCAAgC,OAAO,EAAE;AACnD,SAAM,KAAK,WAAW,OAAO;AAE7B,QAAK,KAAK,gCAAgC,KAAK,WAAW,aAAa,GAAG;AAC1E,QAAK,oBAAoB;EAC1B,SAAQ,OAAO;AACd,QAAK,KAAK,uBAAuB,MAAM,GAAG,QAAQ;AAClD,QAAK;AAGL,OAAI,KAAK,qBAAqB,KAAK,OAAO,sBAAsB;IAC9D,MAAM,QAAQ,KAAK,IACjB,KAAK,OAAO,iBAAiB,KAAK,IAAI,GAAG,KAAK,oBAAoB,EAAE,EACpE,IACD;AACD,SAAK,KACF,iBAAiB,MAAM,cAAc,KAAK,kBAAkB,GAAG,KAAK,OAAO,qBAAqB,GAClG;AAED,eAAW,MAAM;AACf,UAAK,QAAQ,YAAY;IAC1B,GAAE,MAAM;GACV,MACC,MAAK,IAAI,uCAAuC,QAAQ;EAE3D,UAAS;AACR,QAAK,eAAe;EACrB;CACF;;;;CAKD,AAAQ,cAAsB;EAC5B,IAAI,UAAU,KAAK,OAAO;AAE1B,OAAK,kBAAkB,WAAW,YAChC,WAAU,OAAO,SAAS;AAG5B,OAAK,QACH,OAAM,IAAI,MAAM;AAGlB,UAAQ,EAAE,QAAQ,EAAE,KAAK,OAAO,QAAQ;CACzC;;;;CAKD,AAAQ,0BAAgC;AACtC,OAAK,KAAK,WAAY;AAEtB,OAAK,WAAW,eAAe,CAAC,UAAU;AACxC,QAAK,KAAK,qBAAqB,OAAO,WAAW,GAAG,EAAE;EACvD,EAAC;AAEF,OAAK,WAAW,cAAc,CAAC,iBAAiB;AAC9C,QAAK,KAAK,qBAAqB,aAAa,GAAG;AAC/C,QAAK,oBAAoB;EAC1B,EAAC;AAEF,OAAK,WAAW,QAAQ,CAAC,UAAU;AACjC,QAAK,KAAK,wBAAwB,OAAO,WAAW,WAAW,EAAE;AAGjE,OAAI,KAAK,eAAe,MACtB,YAAW,MAAM;AACf,SAAK,QAAQ,KAAK,YAAY;GAC/B,GAAE,IAAK;EAEX,EAAC;AAGF,OAAK,cAAc,QAAQ,CAAC,UAAU,cAAc;AAClD,QAAK,WAAY,GAAG,WAAW,CAACC,UAAmB;AACjD,aAAS,QAAQ,CAAC,YAAY;AAC5B,SAAI;AACF,cAAQ,MAAM;KACf,SAAQ,KAAK;AACZ,WAAK,KAAK,aAAa,UAAU,YAAY,IAAI,GAAG,QAAQ;KAC7D;IACF,EAAC;GACH,EAAC;EACH,EAAC;CACH;;;;CAKD,MAAM,aAA4B;AAChC,MAAI,KAAK,YAAY;AACnB,QAAK,IAAI,sBAAsB;AAC/B,SAAM,KAAK,WAAW,MAAM;AAC5B,QAAK,aAAa;AAClB,QAAK,cAAc;AACnB,QAAK,oBAAoB;EAC1B;CACF;;;;CAKD,GAAgBC,WAAmBC,SAA6C;AAE9E,OAAK,KAAK,cAAc,IAAI,UAAU,CACpC,MAAK,cAAc,IAAI,WAAW,IAAI,MAAM;AAE9C,OAAK,cAAc,IAAI,UAAU,CAAE,IAAI,QAA+B;AAGtE,MAAI,KAAK,WACP,MAAK,WAAW,GAAG,WAAW,QAAQ;AAIxC,SAAO,MAAM;AACX,QAAK,cAAc,IAAI,UAAU,EAAE,OAAO,QAA+B;AACzE,QAAK,YAAY,IAAI,WAAW,QAAQ;EACzC;CACF;;;;CAKD,MAAM,OAAiBC,YAAoB,GAAG,MAA6B;AACzE,OAAK,KAAK,cAAc,KAAK,WAAW,UAAU,YAChD,OAAM,IAAI,MAAM;AAElB,SAAO,KAAK,WAAW,OAAU,YAAY,GAAG,KAAK;CACtD;;;;CAKD,IAAI,kBAA0C;AAC5C,SAAQ,KAAK,YAAY,SAAoC;CAC9D;;;;CAKD,IAAI,cAAuB;AACzB,SAAO,KAAK,YAAY,UAAU;CACnC;;;;CAKD,IAAI,eAA8B;AAChC,SAAO,KAAK,YAAY,gBAAgB;CACzC;;;;CAKD,UAAgB;AACd,MAAI,KAAK,4BAA4B,aAAa,YAChD,UAAS,oBAAoB,oBAAoB,KAAK,kBAAkB;AAE1E,OAAK,YAAY;AACjB,OAAK,cAAc,OAAO;CAC3B;;;;CAKD,AAAQ,IAAIC,SAAiBC,QAAmC,QAAc;AAC5E,OAAK,KAAK,OAAO,WAAW,UAAU,OAAQ;EAE9C,MAAM,SAAS;AACf,UAAQ,OAAR;GACE,KAAK;AACH,YAAQ,KAAK,QAAQ,QAAQ;AAC7B;GACF,KAAK;AACH,YAAQ,MAAM,QAAQ,QAAQ;AAC9B;GACF,QACE,SAAQ,IAAI,QAAQ,QAAQ;EAC/B;CACF;AACF;;;;;;AAOD,SAAgB,4BACdC,UAAgD,CAAE,GACnC;AACf,QAAO,IAAI,cAAc;EACvB,GAAG;EACH,SAAS;CACV;AACF;;;;;;AAOD,IAAa,wBAAb,cAA2C,cAAc;CACvD,AAAQ,mBAAmD,CAAE;CAE7D,YAAYA,UAAgD,CAAE,GAAE;AAC9D,QAAM;GACJ,GAAG;GACH,SAAS;EACV,EAAC;AAGF,OAAK,GAAgC,0BAA0B,CAAC,UAAU;AACxE,QAAK,iBAAiB,QAAQ,CAAC,YAAY;AACzC,QAAI;AACF,aAAQ,MAAM;IACf,SAAQ,OAAO;AACd,aAAQ,MAAM,6CAA6C,MAAM;IAClE;GACF,EAAC;EACH,EAAC;CACH;;;;CAKD,yBAAyBC,SAAmD;AAC1E,OAAK,iBAAiB,KAAK,QAAQ;AAEnC,SAAO,MAAM;GACX,MAAM,QAAQ,KAAK,iBAAiB,QAAQ,QAAQ;AACpD,OAAI,QAAQ,GACV,MAAK,iBAAiB,OAAO,OAAO,EAAE;EAEzC;CACF;AACF;;;;AAKD,IAAIC,yBAAuD;;;;AAK3D,SAAgB,yBACdF,UAAgD,CAAE,GAC3B;AACvB,MAAK,uBACH,0BAAyB,IAAI,sBAAsB;AAErD,QAAO;AACR;;;;AAKD,eAAsB,kBACpBP,aACAO,UAAgD,CAAE,GAClB;AAChC,YAAW,WAAW,YACpB,OAAM,IAAI,MAAM;CAGlB,MAAM,SAAS,yBAAyB,QAAQ;AAChD,OAAM,OAAO,QAAQ,YAAY;AACjC,QAAO;AACR;;;;AAKD,eAAsB,iBAAgC;AACpD,KAAI,wBAAwB;AAC1B,QAAM,uBAAuB,YAAY;AACzC,yBAAuB,SAAS;AAChC,2BAAyB;CAC1B;AACF"}

package/dist/tenant/index.js

@@ -1,3 +1,3 @@
-import { TenantProvider, configureTenantEndpoints, initializeTenantStore, useCurrentOrganization, useCurrentTenant, useOrganization, useTenant, useTenantStore, useTenantSwitcher } from "../tenant-C6KPaSCX.js";
+import { TenantProvider, configureTenantClient, configureTenantEndpoints, getTenantCookieName, initializeTenantStore, normalizeTenantDataPayload, normalizeTenantSwitchPayload, resetTenantClientConfig, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useOrganization, useTenant, useTenantData, useTenantStore, useTenantSwitcher } from "../tenant-DfLemb6n.js";
 
-export { TenantProvider, configureTenantEndpoints, initializeTenantStore, useCurrentOrganization, useCurrentTenant, useOrganization, useTenant, useTenantStore, useTenantSwitcher };
+export { TenantProvider, configureTenantClient, configureTenantEndpoints, getTenantCookieName, initializeTenantStore, normalizeTenantDataPayload, normalizeTenantSwitchPayload, resetTenantClientConfig, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useOrganization, useTenant, useTenantData, useTenantStore, useTenantSwitcher };

package/dist/tenant/server.js

@@ -1,5 +1,5 @@
-import "../logging-_h2mi3L9.js";
-import "../redis-session-storage.server-BR_0y-QO.js";
-import { clearActiveTenant, clearCurrentTenant, configureIdentityContextFetcher, configureTenantCookie, getActiveTenant, getAvailableTenants, getCurrentTenant, getTenantFromIdentityContext, initializeTenant, resetTenantCookieConfig, setActiveTenant, setCurrentTenant } from "../server-BxvRxjCK.js";
+import "../logging-DviiAkLx.js";
+import "../redis-session-storage.server-v2VcpFsQ.js";
+import { clearActiveTenant, clearCurrentTenant, configureIdentityContextFetcher, configureTenantCookie, configureTenantResolution, getActiveTenant, getAvailableTenants, getCurrentTenant, getTenantFromIdentityContext, initializeTenant, resetTenantCookieConfig, resetTenantResolutionConfig, setActiveTenant, setCurrentTenant } from "../server-Ca-3DJf2.js";
 
-export { clearActiveTenant, clearCurrentTenant, configureIdentityContextFetcher, configureTenantCookie, getActiveTenant, getAvailableTenants, getCurrentTenant, getTenantFromIdentityContext, initializeTenant, resetTenantCookieConfig, setActiveTenant, setCurrentTenant };
+export { clearActiveTenant, clearCurrentTenant, configureIdentityContextFetcher, configureTenantCookie, configureTenantResolution, getActiveTenant, getAvailableTenants, getCurrentTenant, getTenantFromIdentityContext, initializeTenant, resetTenantCookieConfig, resetTenantResolutionConfig, setActiveTenant, setCurrentTenant };

package/dist/tenant/tenant-context.d.ts

@@ -4,7 +4,7 @@
  * React context for tenant management.
  */
 import { type ReactNode } from 'react';
-import type { OrganizationData, TenantContextType, TenantMembership } from './types';
+import type { OrganizationData, TenantContextType, TenantData, TenantMembership } from './types';
 interface TenantProviderProps {
     children: ReactNode;
     initialTenant?: string | null;
@@ -29,12 +29,28 @@ export declare function useTenantSwitcher(): {
     isLoading: boolean;
     availableTenants: string[];
 };
+/**
+ * Hook for current tenant data
+ */
+export declare function useCurrentTenantData(): TenantData | null;
+/**
+ * Hook for tenant data operations
+ */
+export declare function useTenantData(): {
+    tenantData: TenantData | null;
+    refreshTenantData: () => void;
+    isLoading: boolean;
+};
 /**
  * Hook for current organization
+ *
+ * @deprecated Use useCurrentTenantData instead.
  */
 export declare function useCurrentOrganization(): OrganizationData | null;
 /**
  * Hook for organization operations
+ *
+ * @deprecated Use useTenantData instead.
  */
 export declare function useOrganization(): {
     organization: OrganizationData | null;

package/dist/tenant/tenant-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-context.d.ts","sourceRoot":"","sources":["../../src/tenant/tenant-context.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAwC,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAIrF,UAAU,mBAAmB;IAC3B,QAAQ,EAAE,SAAS,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,wBAAgB,cAAc,CAAC,EAC7B,QAAQ,EACR,aAAoB,EACpB,cAAmB,EACnB,kBAAuB,EACvB,cAAc,GACf,EAAE,mBAAmB,2CA+GrB;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,iBAAiB,CAQ7C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAGhD;AAED;;GAEG;AACH,wBAAgB,iBAAiB;;;;EAGhC;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,gBAAgB,GAAG,IAAI,CAGhE;AAED;;GAEG;AACH,wBAAgB,eAAe;;;;EAQ9B"}
+{"version":3,"file":"tenant-context.d.ts","sourceRoot":"","sources":["../../src/tenant/tenant-context.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAwC,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAE7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAIjG,UAAU,mBAAmB;IAC3B,QAAQ,EAAE,SAAS,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,wBAAgB,cAAc,CAAC,EAC7B,QAAQ,EACR,aAAoB,EACpB,cAAmB,EACnB,kBAAuB,EACvB,cAAc,GACf,EAAE,mBAAmB,2CA0HrB;AAED;;GAEG;AACH,wBAAgB,SAAS,IAAI,iBAAiB,CAQ7C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAGhD;AAED;;GAEG;AACH,wBAAgB,iBAAiB;;;;EAGhC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,UAAU,GAAG,IAAI,CAGxD;AAED;;GAEG;AACH,wBAAgB,aAAa;;;;EAQ5B;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,gBAAgB,GAAG,IAAI,CAGhE;AAED;;;;GAIG;AACH,wBAAgB,eAAe;;;;EAQ9B"}

package/dist/tenant/tenant-cookie.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-cookie.server.d.ts","sourceRoot":"","sources":["../../src/tenant/tenant-cookie.server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE7D,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAmBD;;GAEG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAS9E;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKvE;AAED;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAKzD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAKtE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAI9C"}
+{"version":3,"file":"tenant-cookie.server.d.ts","sourceRoot":"","sources":["../../src/tenant/tenant-cookie.server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE7D,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAgCD;;GAEG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAM9E;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKvE;AAED;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAKzD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAKtE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAI9C"}

package/dist/tenant/tenant-store.d.ts

@@ -1,38 +1,84 @@
 /**
  * Tenant Store (Zustand)
  *
- * Client-side state management for tenant and organization data.
+ * Client-side state management for tenant data.
  */
-import type { OrganizationData, TenantMembership } from './types';
-interface TenantState {
+import type { OrganizationData, TenantData, TenantMembership } from './types';
+export interface TenantDataFetcherContext {
+    tenantId: string;
+    endpoint: string;
+    fetch: typeof fetch;
+}
+export interface TenantSwitchContext {
+    tenantId: string;
+    endpoint: string;
+    fetch: typeof fetch;
+    currentTenant: string | null;
+}
+export interface TenantSwitchResult {
+    success: boolean;
+    tenantData?: TenantData | null;
+    reload?: boolean;
+    error?: unknown;
+}
+export interface TenantClientConfig {
+    tenantDataEndpoint?: string;
+    /** @deprecated Use tenantDataEndpoint instead. */
+    organizationEndpoint?: string;
+    tenantSwitchEndpoint?: string;
+    tenantCookieName?: string;
+    fetchTenantData?: (context: TenantDataFetcherContext) => Promise<TenantData | null>;
+    switchTenant?: (context: TenantSwitchContext) => Promise<TenantSwitchResult>;
+    reloadOnSwitch?: boolean;
+}
+export interface TenantState {
     currentTenant: string | null;
     availableTenants: string[];
     memberships: Map<string, TenantMembership>;
+    tenantData: Map<string, TenantData>;
+    /** @deprecated Use tenantData instead. */
     organizations: Map<string, OrganizationData>;
     isLoading: boolean;
     isSwitching: boolean;
     setCurrentTenant: (tenantId: string | null) => void;
     setAvailableTenants: (tenants: string[]) => void;
     setMemberships: (memberships: TenantMembership[]) => void;
+    setTenantData: (tenantId: string, data: TenantData) => void;
+    addTenantData: (tenantId: string, data: TenantData) => void;
+    /** @deprecated Use setTenantData instead. */
     setOrganization: (tenantId: string, data: OrganizationData) => void;
+    /** @deprecated Use addTenantData instead. */
     addOrganization: (tenantId: string, data: OrganizationData) => void;
     setLoading: (loading: boolean) => void;
     setSwitching: (switching: boolean) => void;
+    fetchTenantData: (tenantId: string) => Promise<void>;
+    /** @deprecated Use fetchTenantData instead. */
     fetchOrganization: (tenantId: string) => Promise<void>;
     switchTenant: (tenantId: string) => Promise<void>;
     getMembership: (tenantId: string) => TenantMembership | null;
     getCurrentMembership: () => TenantMembership | null;
     getTenantName: (tenantId: string) => string;
+    getTenantData: (tenantId: string) => TenantData | null;
+    getCurrentTenantData: () => TenantData | null;
+    /** @deprecated Use getTenantData instead. */
     getOrganization: (tenantId: string) => OrganizationData | null;
+    /** @deprecated Use getCurrentTenantData instead. */
     getCurrentOrganization: () => OrganizationData | null;
 }
 /**
- * Configure tenant store endpoints
+ * Configure tenant client behavior for any backend contract.
  */
-export declare function configureTenantEndpoints(config: {
-    organizationEndpoint?: string;
-    tenantSwitchEndpoint?: string;
-}): void;
+export declare function configureTenantClient(config: TenantClientConfig): void;
+/**
+ * Configure tenant store endpoints.
+ *
+ * @deprecated Use configureTenantClient for endpoint and contract customization.
+ */
+export declare function configureTenantEndpoints(config: TenantClientConfig): void;
+export declare function getTenantCookieName(): string;
+export declare function resetTenantClientConfig(): void;
+export declare function normalizeTenantDataPayload(payload: unknown): TenantData | null;
+export declare function normalizeTenantSwitchPayload(payload: unknown): TenantSwitchResult;
 export declare const useTenantStore: import("zustand").UseBoundStore<Omit<import("zustand").StoreApi<TenantState>, "setState" | "devtools"> & {
     setState(partial: TenantState | Partial<TenantState> | ((state: TenantState) => TenantState | Partial<TenantState>), replace?: false | undefined, action?: (string | {
         [x: string]: unknown;
@@ -54,5 +100,4 @@ export declare const useTenantStore: import("zustand").UseBoundStore<Omit<import
  * Initialize store with server data
  */
 export declare function initializeTenantStore(currentTenant: string | null, availableTenants: string[], memberships?: TenantMembership[]): void;
-export {};
 //# sourceMappingURL=tenant-store.d.ts.map

package/dist/tenant/tenant-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-store.d.ts","sourceRoot":"","sources":["../../src/tenant/tenant-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAElE,UAAU,WAAW;IAEnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IAGrB,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACpD,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IACjD,cAAc,EAAE,CAAC,WAAW,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;IAC1D,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACpE,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACpE,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,CAAC;IAG3C,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAGlD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IAC7D,oBAAoB,EAAE,MAAM,gBAAgB,GAAG,IAAI,CAAC;IACpD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IAC5C,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IAC/D,sBAAsB,EAAE,MAAM,gBAAgB,GAAG,IAAI,CAAC;CACvD;AAQD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,QAOA;AAED,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;EA4I1B,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,gBAAgB,EAAE,MAAM,EAAE,EAC1B,WAAW,CAAC,EAAE,gBAAgB,EAAE,QAQjC"}
+{"version":3,"file":"tenant-store.d.ts","sourceRoot":"","sources":["../../src/tenant/tenant-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE9E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,KAAK,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAE1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACpC,0CAA0C;IAC1C,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IAGrB,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACpD,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IACjD,cAAc,EAAE,CAAC,WAAW,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;IAC1D,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IAC5D,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IAC5D,6CAA6C;IAC7C,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACpE,6CAA6C;IAC7C,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACpE,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,CAAC;IAG3C,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,+CAA+C;IAC/C,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAGlD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IAC7D,oBAAoB,EAAE,MAAM,gBAAgB,GAAG,IAAI,CAAC;IACpD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IAC5C,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACvD,oBAAoB,EAAE,MAAM,UAAU,GAAG,IAAI,CAAC;IAC9C,6CAA6C;IAC7C,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IAC/D,oDAAoD;IACpD,sBAAsB,EAAE,MAAM,gBAAgB,GAAG,IAAI,CAAC;CACvD;AAYD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAmBtE;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAEzE;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAO9C;AAmBD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAe9E;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,kBAAkB,CAkBjF;AAyBD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;EAwK1B,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,gBAAgB,EAAE,MAAM,EAAE,EAC1B,WAAW,CAAC,EAAE,gBAAgB,EAAE,QAQjC"}

package/dist/tenant/tenant.server.d.ts

@@ -3,18 +3,37 @@
  *
  * Server-side tenant management.
  */
+import type { SessionData } from '../auth/types';
 /**
  * Identity context fetcher type (to avoid circular dependency)
  */
 export type IdentityContextFetcher = (request: Request) => Promise<{
     memberships?: Array<{
-        tenantId: string;
+        tenantId?: string;
+        id?: string;
+        [key: string]: unknown;
     }>;
+    [key: string]: unknown;
 } | null>;
+export interface TenantResolutionContext {
+    request: Request;
+    session: SessionData;
+    identityContext: Awaited<ReturnType<IdentityContextFetcher>>;
+}
+export interface TenantResolutionConfig {
+    identityContextFetcher?: IdentityContextFetcher;
+    resolveInitialTenant?: (context: TenantResolutionContext) => Promise<string | null> | string | null;
+    resolveAvailableTenants?: (context: TenantResolutionContext) => Promise<string[]> | string[];
+}
 /**
  * Configure identity context fetcher
  */
 export declare function configureIdentityContextFetcher(fetcher: IdentityContextFetcher): void;
+/**
+ * Configure tenant resolution for custom backend identity contracts.
+ */
+export declare function configureTenantResolution(config: TenantResolutionConfig): void;
+export declare function resetTenantResolutionConfig(): void;
 /**
  * Get current active tenant from cookie
  */

package/dist/tenant/tenant.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.server.d.ts","sourceRoot":"","sources":["../../src/tenant/tenant.server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;IACjE,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3C,GAAG,IAAI,CAAC,CAAC;AAIV;;GAEG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAErF;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAW/E;AAED;;GAEG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuB3F;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAuB7E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAqBjE;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA4BxD;AAED;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC,CAK3D"}
+{"version":3,"file":"tenant.server.d.ts","sourceRoot":"","sources":["../../src/tenant/tenant.server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;IACjE,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAC;IAChF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,GAAG,IAAI,CAAC,CAAC;AAEV,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,WAAW,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,sBAAsB;IACrC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;IACpG,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC;CAC9F;AAcD;;GAEG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAErF;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAU9E;AAED,wBAAgB,2BAA2B,IAAI,IAAI,CAUlD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAW/E;AAED;;GAEG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkB3F;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAkB7E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAqBjE;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA4BxD;AAED;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC,CAK3D"}

package/dist/tenant/types.d.ts

@@ -15,37 +15,57 @@ export interface TenantMembership {
     roles?: string[];
     ownerUserId?: string | null;
     isOwner?: boolean;
+    [key: string]: unknown;
 }
-export interface OrganizationBranding {
+export interface TenantBranding {
     logoUrl?: string | null;
     themePrimary?: string | null;
     themeMode?: string | null;
     emailBranding?: string | null;
 }
-export interface OrganizationData {
-    organizationId: string;
-    name: string;
+export interface TenantData {
+    id?: string;
+    tenantId?: string;
+    organizationId?: string;
+    name?: string;
     slug?: string | null;
     timeZone?: string | null;
     currency?: string | null;
-    branding?: OrganizationBranding | null;
+    branding?: TenantBranding | null;
     ownerUserId?: string | null;
     ownerAssignedAtUtc?: string | null;
     defaultOperatingAccountId?: string | null;
+    [key: string]: unknown;
 }
+/** @deprecated Use TenantBranding instead. */
+export type OrganizationBranding = TenantBranding;
+/** @deprecated Use TenantData instead. */
+export type OrganizationData = TenantData & {
+    organizationId: string;
+    name: string;
+    branding?: OrganizationBranding | null;
+};
 export interface TenantContextType {
     currentTenant: string | null;
     availableTenants: string[];
     memberships: Map<string, TenantMembership>;
-    currentOrganization: OrganizationData | null;
+    currentTenantData: TenantData | null;
+    tenantData: Map<string, TenantData>;
     currentMembership: TenantMembership | null;
-    organizations: Map<string, OrganizationData>;
     isLoading: boolean;
     switchTenant: (tenantId: string) => void;
     refreshTenants: () => void;
-    refreshOrganization: () => void;
-    getOrganization: (tenantId: string) => OrganizationData | null;
+    refreshTenantData: () => void;
+    getTenantData: (tenantId: string) => TenantData | null;
     getMembership: (tenantId: string) => TenantMembership | null;
     getTenantName: (tenantId: string) => string;
+    /** @deprecated Use currentTenantData instead. */
+    currentOrganization: OrganizationData | null;
+    /** @deprecated Use tenantData instead. */
+    organizations: Map<string, OrganizationData>;
+    /** @deprecated Use refreshTenantData instead. */
+    refreshOrganization: () => void;
+    /** @deprecated Use getTenantData instead. */
+    getOrganization: (tenantId: string) => OrganizationData | null;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/tenant/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tenant/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,mBAAmB,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC7C,iBAAiB,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,mBAAmB,EAAE,MAAM,IAAI,CAAC;IAChC,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IAC/D,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IAC7D,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CAC7C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tenant/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,8CAA8C;AAC9C,MAAM,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAElD,0CAA0C;AAC1C,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACxC,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,iBAAiB,EAAE,UAAU,GAAG,IAAI,CAAC;IACrC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACpC,iBAAiB,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACvD,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IAC7D,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IAC5C,iDAAiD;IACjD,mBAAmB,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC7C,0CAA0C;IAC1C,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7C,iDAAiD;IACjD,mBAAmB,EAAE,MAAM,IAAI,CAAC;IAChC,6CAA6C;IAC7C,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;CAChE"}