@eminuckan/spine 0.3.1 → 0.3.3

package/dist/logging/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/logging/types.ts","../../src/logging/config.ts","../../src/logging/logger.ts"],"sourcesContent":["/**\n * Logging Types\n */\n\nexport enum LogLevel {\n  DEBUG = 'debug',\n  INFO = 'info',\n  WARN = 'warn',\n  ERROR = 'error',\n}\n\nexport interface LogContext {\n  [key: string]: unknown;\n}\n\nexport interface LogEntry {\n  timestamp: string;\n  level: LogLevel;\n  message: string;\n  context?: LogContext;\n  error?: Error;\n}\n\nexport interface LoggerConfig {\n  minLevel: LogLevel;\n  enableConsole: boolean;\n  enableRemote: boolean;\n  remoteEndpoint?: string;\n  serviceName?: string;\n}\n","/**\n * Logger Configuration\n */\n\nimport { LogLevel, type LoggerConfig } from './types';\n\nexport const LOG_LEVEL_PRIORITY: Record<LogLevel, number> = {\n  [LogLevel.DEBUG]: 0,\n  [LogLevel.INFO]: 1,\n  [LogLevel.WARN]: 2,\n  [LogLevel.ERROR]: 3,\n};\n\nexport const defaultLoggerConfig: LoggerConfig = {\n  minLevel: process.env.NODE_ENV === 'production' ? LogLevel.INFO : LogLevel.DEBUG,\n  enableConsole: true,\n  enableRemote: false,\n  serviceName: 'spine',\n};\n","/**\n * Logger Service\n * \n * Centralized logging implementation with structured logging format.\n */\n\nimport { LogLevel, type LogContext, type LogEntry, type LoggerConfig } from './types';\nimport { defaultLoggerConfig, LOG_LEVEL_PRIORITY } from './config';\n\nexport class Logger {\n  private config: LoggerConfig;\n\n  constructor(config?: Partial<LoggerConfig>) {\n    this.config = {\n      ...defaultLoggerConfig,\n      ...config,\n    };\n  }\n\n  debug(message: string, context?: LogContext): void {\n    this.log(LogLevel.DEBUG, message, context);\n  }\n\n  info(message: string, context?: LogContext): void {\n    this.log(LogLevel.INFO, message, context);\n  }\n\n  warn(message: string, context?: LogContext): void {\n    this.log(LogLevel.WARN, message, context);\n  }\n\n  error(message: string, error?: Error, context?: LogContext): void {\n    this.log(LogLevel.ERROR, message, context, error);\n  }\n\n  private log(\n    level: LogLevel,\n    message: string,\n    context?: LogContext,\n    error?: Error\n  ): void {\n    if (!this.shouldLog(level)) {\n      return;\n    }\n\n    const entry: LogEntry = {\n      timestamp: new Date().toISOString(),\n      level,\n      message,\n      context,\n      error,\n    };\n\n    if (this.config.enableConsole) {\n      this.logToConsole(entry);\n    }\n\n    if (this.config.enableRemote && this.config.remoteEndpoint) {\n      this.sendToRemote(entry).catch((err) => {\n        console.error('Failed to send log to remote endpoint:', err);\n      });\n    }\n  }\n\n  private shouldLog(level: LogLevel): boolean {\n    return LOG_LEVEL_PRIORITY[level] >= LOG_LEVEL_PRIORITY[this.config.minLevel];\n  }\n\n  private logToConsole(entry: LogEntry): void {\n    const formatted = this.formatEntry(entry);\n\n    switch (entry.level) {\n      case LogLevel.DEBUG:\n        console.debug(formatted);\n        break;\n      case LogLevel.INFO:\n        console.info(formatted);\n        break;\n      case LogLevel.WARN:\n        console.warn(formatted);\n        break;\n      case LogLevel.ERROR:\n        console.error(formatted);\n        if (entry.error) {\n          console.error(entry.error);\n        }\n        break;\n    }\n  }\n\n  private formatEntry(entry: LogEntry): string {\n    const parts = [\n      `[${entry.timestamp}]`,\n      `[${entry.level.toUpperCase()}]`,\n      entry.message,\n    ];\n\n    if (entry.context && Object.keys(entry.context).length > 0) {\n      parts.push(JSON.stringify(entry.context));\n    }\n\n    return parts.join(' ');\n  }\n\n  private async sendToRemote(entry: LogEntry): Promise<void> {\n    if (!this.config.remoteEndpoint) return;\n\n    await fetch(this.config.remoteEndpoint, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        ...entry,\n        serviceName: this.config.serviceName,\n        error: entry.error\n          ? {\n              name: entry.error.name,\n              message: entry.error.message,\n              stack: entry.error.stack,\n            }\n          : undefined,\n      }),\n    });\n  }\n}\n\n// Default logger instance\nexport const logger = new Logger();\n\n// Create logger with custom config\nexport function createLogger(config?: Partial<LoggerConfig>): Logger {\n  return new Logger(config);\n}\n"],"mappings":";;;;AAIA,IAAY,WAAL,yBAAA,UAAA;CACL,SAAA,WAAA;CACA,SAAA,UAAA;CACA,SAAA,UAAA;CACA,SAAA,WAAA;;AACF,EAAA,CAAA,CAAA;;;ACHA,MAAa,qBAA+C;YACxC;WACD;WACA;YACC;AACpB;AAEA,MAAa,sBAAoC;CAC/C,UAAU,QAAQ,IAAI,aAAa,eAAA,SAAA;CACnC,eAAe;CACf,cAAc;CACd,aAAa;AACf;;;ACTA,IAAa,SAAb,MAAoB;CAClB;CAEA,YAAY,QAAgC;EAC1C,KAAK,SAAS;GACZ,GAAG;GACH,GAAG;EACL;CACF;CAEA,MAAM,SAAiB,SAA4B;EACjD,KAAK,IAAA,SAAoB,SAAS,OAAO;CAC3C;CAEA,KAAK,SAAiB,SAA4B;EAChD,KAAK,IAAA,QAAmB,SAAS,OAAO;CAC1C;CAEA,KAAK,SAAiB,SAA4B;EAChD,KAAK,IAAA,QAAmB,SAAS,OAAO;CAC1C;CAEA,MAAM,SAAiB,OAAe,SAA4B;EAChE,KAAK,IAAA,SAAoB,SAAS,SAAS,KAAK;CAClD;CAEA,IACE,OACA,SACA,SACA,OACM;EACN,IAAI,CAAC,KAAK,UAAU,KAAK,GACvB;EAGF,MAAM,QAAkB;GACtB,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;GAClC;GACA;GACA;GACA;EACF;EAEA,IAAI,KAAK,OAAO,eACd,KAAK,aAAa,KAAK;EAGzB,IAAI,KAAK,OAAO,gBAAgB,KAAK,OAAO,gBAC1C,KAAK,aAAa,KAAK,CAAC,CAAC,OAAO,QAAQ;GACtC,QAAQ,MAAM,0CAA0C,GAAG;EAC7D,CAAC;CAEL;CAEA,UAAkB,OAA0B;EAC1C,OAAO,mBAAmB,UAAU,mBAAmB,KAAK,OAAO;CACrE;CAEA,aAAqB,OAAuB;EAC1C,MAAM,YAAY,KAAK,YAAY,KAAK;EAExC,QAAQ,MAAM,OAAd;GACE,KAAA;IACE,QAAQ,MAAM,SAAS;IACvB;GACF,KAAA;IACE,QAAQ,KAAK,SAAS;IACtB;GACF,KAAA;IACE,QAAQ,KAAK,SAAS;IACtB;GACF,KAAA;IACE,QAAQ,MAAM,SAAS;IACvB,IAAI,MAAM,OACR,QAAQ,MAAM,MAAM,KAAK;IAE3B;EACJ;CACF;CAEA,YAAoB,OAAyB;EAC3C,MAAM,QAAQ;GACZ,IAAI,MAAM,UAAU;GACpB,IAAI,MAAM,MAAM,YAAY,EAAE;GAC9B,MAAM;EACR;EAEA,IAAI,MAAM,WAAW,OAAO,KAAK,MAAM,OAAO,CAAC,CAAC,SAAS,GACvD,MAAM,KAAK,KAAK,UAAU,MAAM,OAAO,CAAC;EAG1C,OAAO,MAAM,KAAK,GAAG;CACvB;CAEA,MAAc,aAAa,OAAgC;EACzD,IAAI,CAAC,KAAK,OAAO,gBAAgB;EAEjC,MAAM,MAAM,KAAK,OAAO,gBAAgB;GACtC,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,MAAM,KAAK,UAAU;IACnB,GAAG;IACH,aAAa,KAAK,OAAO;IACzB,OAAO,MAAM,QACT;KACE,MAAM,MAAM,MAAM;KAClB,SAAS,MAAM,MAAM;KACrB,OAAO,MAAM,MAAM;IACrB,IACA,KAAA;GACN,CAAC;EACH,CAAC;CACH;AACF;AAGA,MAAa,SAAS,IAAI,OAAO;AAGjC,SAAgB,aAAa,QAAwC;CACnE,OAAO,IAAI,OAAO,MAAM;AAC1B"}

package/dist/{permission-service-CvGpwI0d.js → permission-service-DUyKomU3.mjs}

@@ -24,14 +24,10 @@ var PermissionChecker = class {
 		const { operator = "OR", wildcard = false } = options;
 		const matchedPermissions = [];
 		const missingPermissions = [];
-		for (const permission of permissions) {
-			const hasIt = wildcard ? this.hasWildcardPermission(permission) : this.hasPermission(permission);
-			if (hasIt) matchedPermissions.push(permission);
-			else missingPermissions.push(permission);
-		}
-		const hasPermission = operator === "AND" ? missingPermissions.length === 0 : matchedPermissions.length > 0;
+		for (const permission of permissions) if (wildcard ? this.hasWildcardPermission(permission) : this.hasPermission(permission)) matchedPermissions.push(permission);
+		else missingPermissions.push(permission);
 		return {
-			hasPermission,
+			hasPermission: operator === "AND" ? missingPermissions.length === 0 : matchedPermissions.length > 0,
 			matchedPermissions,
 			missingPermissions
 		};
@@ -89,7 +85,7 @@ var PermissionChecker = class {
 		return this.permissionArray.length;
 	}
 };
-
 //#endregion
-export { PermissionChecker };
-//# sourceMappingURL=permission-service-CvGpwI0d.js.map
+export { PermissionChecker as t };
+
+//# sourceMappingURL=permission-service-DUyKomU3.mjs.map

package/dist/permission-service-DUyKomU3.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-service-DUyKomU3.mjs","names":[],"sources":["../src/permissions/permission-service.ts"],"sourcesContent":["/**\n * Permission Service\n * \n * Core permission checking logic.\n */\n\nimport type {\n  PermissionCode,\n  PermissionModule,\n  PermissionCheckOptions,\n  PermissionCheckResult,\n  FieldPermissionResult,\n} from './types';\n\n/**\n * Permission Checker Class\n * \n * Provides methods for checking user permissions.\n */\nexport class PermissionChecker {\n  private permissions: Set<PermissionCode>;\n  private permissionArray: PermissionCode[];\n\n  constructor(permissions: PermissionCode[]) {\n    this.permissionArray = permissions;\n    this.permissions = new Set(permissions);\n  }\n\n  /**\n   * Check if user has a single permission\n   */\n  hasPermission(permission: PermissionCode): boolean {\n    return this.permissions.has(permission);\n  }\n\n  /**\n   * Check multiple permissions with AND/OR logic\n   */\n  hasPermissions(\n    permissions: PermissionCode[],\n    options: PermissionCheckOptions = {}\n  ): PermissionCheckResult {\n    const { operator = 'OR', wildcard = false } = options;\n\n    const matchedPermissions: PermissionCode[] = [];\n    const missingPermissions: PermissionCode[] = [];\n\n    for (const permission of permissions) {\n      const hasIt = wildcard\n        ? this.hasWildcardPermission(permission)\n        : this.hasPermission(permission);\n\n      if (hasIt) {\n        matchedPermissions.push(permission);\n      } else {\n        missingPermissions.push(permission);\n      }\n    }\n\n    const hasPermission =\n      operator === 'AND'\n        ? missingPermissions.length === 0\n        : matchedPermissions.length > 0;\n\n    return {\n      hasPermission,\n      matchedPermissions,\n      missingPermissions,\n    };\n  }\n\n  /**\n   * Check wildcard permission pattern\n   */\n  private hasWildcardPermission(pattern: PermissionCode): boolean {\n    if (!pattern.includes('*')) {\n      return this.hasPermission(pattern);\n    }\n\n    const regex = new RegExp(\n      '^' + pattern.replace(/\\./g, '\\\\.').replace(/\\*/g, '.*') + '$'\n    );\n\n    return this.permissionArray.some((p) => regex.test(p));\n  }\n\n  /**\n   * Check if user has any permission in a module\n   */\n  hasModulePermission(module: PermissionModule): boolean {\n    const prefix = `${module}.`;\n    return this.permissionArray.some((p) => p.startsWith(prefix));\n  }\n\n  /**\n   * Get field-level permissions for an entity\n   */\n  getFieldPermissions(\n    module: PermissionModule,\n    entity: string\n  ): FieldPermissionResult {\n    const base = `${module}.${entity}`;\n\n    return {\n      canView: this.hasPermission(`${base}.View`),\n      canEdit: this.hasPermission(`${base}.Edit`),\n      canCreate: this.hasPermission(`${base}.Create`),\n      canDelete: this.hasPermission(`${base}.Delete`),\n    };\n  }\n\n  /**\n   * Get all permissions\n   */\n  getAllPermissions(): readonly PermissionCode[] {\n    return Object.freeze([...this.permissionArray]);\n  }\n\n  /**\n   * Get permissions for a specific module\n   */\n  getModulePermissions(module: PermissionModule): PermissionCode[] {\n    const prefix = `${module}.`;\n    return this.permissionArray.filter((p) => p.startsWith(prefix));\n  }\n\n  /**\n   * Check if user has any permissions\n   */\n  hasAnyPermissions(): boolean {\n    return this.permissionArray.length > 0;\n  }\n\n  /**\n   * Get permission count\n   */\n  getPermissionCount(): number {\n    return this.permissionArray.length;\n  }\n}\n"],"mappings":";;;;;;AAmBA,IAAa,oBAAb,MAA+B;CAC7B;CACA;CAEA,YAAY,aAA+B;EACzC,KAAK,kBAAkB;EACvB,KAAK,cAAc,IAAI,IAAI,WAAW;CACxC;;;;CAKA,cAAc,YAAqC;EACjD,OAAO,KAAK,YAAY,IAAI,UAAU;CACxC;;;;CAKA,eACE,aACA,UAAkC,CAAC,GACZ;EACvB,MAAM,EAAE,WAAW,MAAM,WAAW,UAAU;EAE9C,MAAM,qBAAuC,CAAC;EAC9C,MAAM,qBAAuC,CAAC;EAE9C,KAAK,MAAM,cAAc,aAKvB,IAJc,WACV,KAAK,sBAAsB,UAAU,IACrC,KAAK,cAAc,UAAU,GAG/B,mBAAmB,KAAK,UAAU;OAElC,mBAAmB,KAAK,UAAU;EAStC,OAAO;GACL,eALA,aAAa,QACT,mBAAmB,WAAW,IAC9B,mBAAmB,SAAS;GAIhC;GACA;EACF;CACF;;;;CAKA,sBAA8B,SAAkC;EAC9D,IAAI,CAAC,QAAQ,SAAS,GAAG,GACvB,OAAO,KAAK,cAAc,OAAO;EAGnC,MAAM,QAAQ,IAAI,OAChB,MAAM,QAAQ,QAAQ,OAAO,KAAK,CAAC,CAAC,QAAQ,OAAO,IAAI,IAAI,GAC7D;EAEA,OAAO,KAAK,gBAAgB,MAAM,MAAM,MAAM,KAAK,CAAC,CAAC;CACvD;;;;CAKA,oBAAoB,QAAmC;EACrD,MAAM,SAAS,GAAG,OAAO;EACzB,OAAO,KAAK,gBAAgB,MAAM,MAAM,EAAE,WAAW,MAAM,CAAC;CAC9D;;;;CAKA,oBACE,QACA,QACuB;EACvB,MAAM,OAAO,GAAG,OAAO,GAAG;EAE1B,OAAO;GACL,SAAS,KAAK,cAAc,GAAG,KAAK,MAAM;GAC1C,SAAS,KAAK,cAAc,GAAG,KAAK,MAAM;GAC1C,WAAW,KAAK,cAAc,GAAG,KAAK,QAAQ;GAC9C,WAAW,KAAK,cAAc,GAAG,KAAK,QAAQ;EAChD;CACF;;;;CAKA,oBAA+C;EAC7C,OAAO,OAAO,OAAO,CAAC,GAAG,KAAK,eAAe,CAAC;CAChD;;;;CAKA,qBAAqB,QAA4C;EAC/D,MAAM,SAAS,GAAG,OAAO;EACzB,OAAO,KAAK,gBAAgB,QAAQ,MAAM,EAAE,WAAW,MAAM,CAAC;CAChE;;;;CAKA,oBAA6B;EAC3B,OAAO,KAAK,gBAAgB,SAAS;CACvC;;;;CAKA,qBAA6B;EAC3B,OAAO,KAAK,gBAAgB;CAC9B;AACF"}

package/dist/permissions/index.mjs

@@ -0,0 +1,3 @@
+import { t as PermissionChecker } from "../permission-service-DUyKomU3.mjs";
+import { _ as initializePermissions, a as ProtectedSection, c as useHasPermission, d as usePermission, f as usePermissionChecker, g as getPermissions, h as getPermissionChecker, i as ProtectedLink, l as useHasPermissions, m as PermissionInitializer, n as ProtectedAction, o as useAllPermissions, p as usePermissions, r as ProtectedButton, s as useHasModulePermission, t as PERMISSION_MODULES, u as useModulePermission, v as usePermissionStore } from "../permissions-C5dTP9y4.mjs";
+export { PERMISSION_MODULES, PermissionChecker, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, getPermissionChecker, getPermissions, initializePermissions, useAllPermissions, useHasModulePermission, useHasPermission, useHasPermissions, useModulePermission, usePermission, usePermissionChecker, usePermissionStore, usePermissions };

package/dist/{permissions-_n1hIG7Q.js → permissions-C5dTP9y4.mjs}

@@ -1,10 +1,14 @@
-import { PermissionChecker } from "./permission-service-CvGpwI0d.js";
+import { t as PermissionChecker } from "./permission-service-DUyKomU3.mjs";
 import { create } from "zustand";
 import { useCallback, useEffect, useMemo } from "react";
 import { Fragment, jsx } from "react/jsx-runtime";
-
 //#region src/permissions/permission-store.ts
 /**
+* Permission Store (Zustand)
+* 
+* State management for permissions.
+*/
+/**
 * Selectors for focused store reads
 */
 const selectChecker = (state) => state.checker;
@@ -53,10 +57,14 @@ function getPermissionChecker() {
 function getPermissions() {
 	return usePermissionStore.getState().permissions;
 }
-
 //#endregion
 //#region src/permissions/permission-initializer.tsx
 /**
+* Permission Initializer Component
+* 
+* Initializes permission store from identity context.
+*/
+/**
 * Component that initializes permissions from props
 */
 function PermissionInitializer({ permissions, isLoading = false, children }) {
@@ -65,10 +73,14 @@ function PermissionInitializer({ permissions, isLoading = false, children }) {
 	}, [permissions, isLoading]);
 	return /* @__PURE__ */ jsx(Fragment, { children });
 }
-
 //#endregion
 //#region src/permissions/hooks.ts
 /**
+* Permission Hooks
+* 
+* React hooks for permission checks.
+*/
+/**
 * Hook for checking a single permission
 */
 function usePermission(permission) {
@@ -119,15 +131,13 @@ function useAllPermissions() {
 	const checker = usePermissionStore(selectChecker);
 	return useMemo(() => checker.getAllPermissions(), [checker]);
 }
-
 //#endregion
 //#region src/permissions/components.tsx
 /**
 * Button that only renders if user has the required permission
 */
-function ProtectedButton({ permission, fallback = null, children,...props }) {
-	const hasPermission = usePermission(permission);
-	if (!hasPermission) return /* @__PURE__ */ jsx(Fragment, { children: fallback });
+function ProtectedButton({ permission, fallback = null, children, ...props }) {
+	if (!usePermission(permission)) return /* @__PURE__ */ jsx(Fragment, { children: fallback });
 	return /* @__PURE__ */ jsx("button", {
 		...props,
 		children
@@ -136,9 +146,8 @@ function ProtectedButton({ permission, fallback = null, children,...props }) {
 /**
 * Link that only renders if user has the required permission
 */
-function ProtectedLink({ permission, fallback = null, children,...props }) {
-	const hasPermission = usePermission(permission);
-	if (!hasPermission) return /* @__PURE__ */ jsx(Fragment, { children: fallback });
+function ProtectedLink({ permission, fallback = null, children, ...props }) {
+	if (!usePermission(permission)) return /* @__PURE__ */ jsx(Fragment, { children: fallback });
 	return /* @__PURE__ */ jsx("a", {
 		...props,
 		children
@@ -167,7 +176,6 @@ function ProtectedAction({ permission, onAction, children }) {
 		disabled: !hasPermission
 	}) });
 }
-
 //#endregion
 //#region src/permissions/constants.ts
 /**
@@ -177,7 +185,7 @@ function ProtectedAction({ permission, onAction, children }) {
 * module constants in the consuming app instead.
 */
 const PERMISSION_MODULES = [];
-
 //#endregion
-export { PERMISSION_MODULES, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, getPermissionChecker, getPermissions, initializePermissions, useAllPermissions, useHasModulePermission, useHasPermission, useHasPermissions, useModulePermission, usePermission, usePermissionChecker, usePermissionStore, usePermissions };
-//# sourceMappingURL=permissions-_n1hIG7Q.js.map
+export { initializePermissions as _, ProtectedSection as a, useHasPermission as c, usePermission as d, usePermissionChecker as f, getPermissions as g, getPermissionChecker as h, ProtectedLink as i, useHasPermissions as l, PermissionInitializer as m, ProtectedAction as n, useAllPermissions as o, usePermissions as p, ProtectedButton as r, useHasModulePermission as s, PERMISSION_MODULES as t, useModulePermission as u, usePermissionStore as v };
+
+//# sourceMappingURL=permissions-C5dTP9y4.mjs.map

package/dist/permissions-C5dTP9y4.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-C5dTP9y4.mjs","names":[],"sources":["../src/permissions/permission-store.ts","../src/permissions/permission-initializer.tsx","../src/permissions/hooks.ts","../src/permissions/components.tsx","../src/permissions/constants.ts"],"sourcesContent":["/**\n * Permission Store (Zustand)\n * \n * State management for permissions.\n */\n\nimport { create } from 'zustand';\nimport { PermissionChecker } from './permission-service';\nimport type { PermissionCode } from './types';\n\n/**\n * Permission store state interface\n */\ninterface PermissionState {\n  checker: PermissionChecker;\n  permissions: PermissionCode[];\n  isLoading: boolean;\n  setPermissions: (permissions: PermissionCode[]) => void;\n  setLoading: (isLoading: boolean) => void;\n  reset: () => void;\n}\n\n/**\n * Selectors for focused store reads\n */\nexport const selectChecker = (state: PermissionState) => state.checker;\nexport const selectPermissions = (state: PermissionState) => state.permissions;\nexport const selectIsLoading = (state: PermissionState) => state.isLoading;\n\n/**\n * Initial state\n */\nconst initialState = {\n  checker: new PermissionChecker([]),\n  permissions: [] as PermissionCode[],\n  isLoading: false,\n};\n\n/**\n * Permission store\n */\nexport const usePermissionStore = create<PermissionState>((set) => ({\n  ...initialState,\n\n  setPermissions: (permissions: PermissionCode[]) => {\n    set({\n      permissions,\n      checker: new PermissionChecker(permissions),\n    });\n  },\n\n  setLoading: (isLoading: boolean) => {\n    set({ isLoading });\n  },\n\n  reset: () => {\n    set(initialState);\n  },\n}));\n\n/**\n * Initialize permission store\n */\nexport function initializePermissions(\n  permissions: PermissionCode[],\n  isLoading: boolean = false\n): void {\n  usePermissionStore.getState().setPermissions(permissions);\n  usePermissionStore.getState().setLoading(isLoading);\n}\n\n/**\n * Get permission checker outside React components\n */\nexport function getPermissionChecker(): PermissionChecker {\n  return usePermissionStore.getState().checker;\n}\n\n/**\n * Get all permissions outside React components\n */\nexport function getPermissions(): PermissionCode[] {\n  return usePermissionStore.getState().permissions;\n}\n","/**\n * Permission Initializer Component\n * \n * Initializes permission store from identity context.\n */\n\nimport { useEffect, type ReactNode } from 'react';\nimport { initializePermissions } from './permission-store';\nimport type { PermissionCode } from './types';\n\ninterface PermissionInitializerProps {\n  permissions: PermissionCode[];\n  isLoading?: boolean;\n  children: ReactNode;\n}\n\n/**\n * Component that initializes permissions from props\n */\nexport function PermissionInitializer({\n  permissions,\n  isLoading = false,\n  children,\n}: PermissionInitializerProps) {\n  useEffect(() => {\n    initializePermissions(permissions, isLoading);\n  }, [permissions, isLoading]);\n\n  return <>{children}</>;\n}\n","/**\n * Permission Hooks\n * \n * React hooks for permission checks.\n */\n\nimport { useMemo, useCallback } from 'react';\nimport { usePermissionStore, selectChecker } from './permission-store';\nimport type { PermissionCode, PermissionCheckOptions, PermissionModule } from './types';\n\n/**\n * Hook for checking a single permission\n */\nexport function usePermission(permission: PermissionCode): boolean {\n  const checker = usePermissionStore(selectChecker);\n  return useMemo(() => checker.hasPermission(permission), [checker, permission]);\n}\n\n/**\n * Alias for usePermission\n */\nexport const useHasPermission = usePermission;\n\n/**\n * Hook for checking multiple permissions\n */\nexport function usePermissions(\n  permissions: PermissionCode[],\n  options?: PermissionCheckOptions\n) {\n  const checker = usePermissionStore(selectChecker);\n  return useMemo(\n    () => checker.hasPermissions(permissions, options),\n    [checker, permissions, options]\n  );\n}\n\n/**\n * Alias for usePermissions\n */\nexport const useHasPermissions = usePermissions;\n\n/**\n * Hook for checking module-level permissions\n */\nexport function useModulePermission(module: PermissionModule): boolean {\n  const checker = usePermissionStore(selectChecker);\n  return useMemo(() => checker.hasModulePermission(module), [checker, module]);\n}\n\n/**\n * Alias for useModulePermission\n */\nexport const useHasModulePermission = useModulePermission;\n\n/**\n * Hook for getting a memoized permission checker function\n */\nexport function usePermissionChecker() {\n  const checker = usePermissionStore(selectChecker);\n  return useCallback(\n    (permission: PermissionCode) => checker.hasPermission(permission),\n    [checker]\n  );\n}\n\n/**\n * Hook for getting all user permissions\n */\nexport function useAllPermissions(): readonly PermissionCode[] {\n  const checker = usePermissionStore(selectChecker);\n  return useMemo(() => checker.getAllPermissions(), [checker]);\n}\n\n/**\n * Hook for field-level permissions\n */\nexport function useFieldPermissions(module: PermissionModule, entity: string) {\n  const checker = usePermissionStore(selectChecker);\n  return useMemo(\n    () => checker.getFieldPermissions(module, entity),\n    [checker, module, entity]\n  );\n}\n\n/**\n * Hook for permission loading state\n */\nexport function usePermissionLoading(): boolean {\n  return usePermissionStore((state) => state.isLoading);\n}\n","/**\n * Permission Components\n * \n * Protected UI components that conditionally render based on permissions.\n */\n\nimport React, { type ReactNode, type ComponentProps } from 'react';\nimport { usePermission, usePermissions } from './hooks';\nimport type { PermissionCode, PermissionCheckOptions } from './types';\n\n// ============================================================================\n// ProtectedButton\n// ============================================================================\n\ninterface ProtectedButtonProps extends ComponentProps<'button'> {\n  permission: PermissionCode;\n  fallback?: ReactNode;\n}\n\n/**\n * Button that only renders if user has the required permission\n */\nexport function ProtectedButton({\n  permission,\n  fallback = null,\n  children,\n  ...props\n}: ProtectedButtonProps) {\n  const hasPermission = usePermission(permission);\n\n  if (!hasPermission) {\n    return <>{fallback}</>;\n  }\n\n  return <button {...props}>{children}</button>;\n}\n\n// ============================================================================\n// ProtectedLink\n// ============================================================================\n\ninterface ProtectedLinkProps extends ComponentProps<'a'> {\n  permission: PermissionCode;\n  fallback?: ReactNode;\n}\n\n/**\n * Link that only renders if user has the required permission\n */\nexport function ProtectedLink({\n  permission,\n  fallback = null,\n  children,\n  ...props\n}: ProtectedLinkProps) {\n  const hasPermission = usePermission(permission);\n\n  if (!hasPermission) {\n    return <>{fallback}</>;\n  }\n\n  return <a {...props}>{children}</a>;\n}\n\n// ============================================================================\n// ProtectedSection\n// ============================================================================\n\ninterface ProtectedSectionProps {\n  permission?: PermissionCode;\n  permissions?: PermissionCode[];\n  options?: PermissionCheckOptions;\n  fallback?: ReactNode;\n  children: ReactNode;\n}\n\n/**\n * Section that only renders if user has the required permission(s)\n */\nexport function ProtectedSection({\n  permission,\n  permissions,\n  options,\n  fallback = null,\n  children,\n}: ProtectedSectionProps) {\n  // Single permission check\n  const singlePermissionResult = usePermission(permission || '');\n  \n  // Multiple permissions check\n  const multiplePermissionsResult = usePermissions(permissions || [], options);\n\n  // Determine if we should render\n  let hasPermission = false;\n  \n  if (permission) {\n    hasPermission = singlePermissionResult;\n  } else if (permissions && permissions.length > 0) {\n    hasPermission = multiplePermissionsResult.hasPermission;\n  } else {\n    // No permission specified, render by default\n    hasPermission = true;\n  }\n\n  if (!hasPermission) {\n    return <>{fallback}</>;\n  }\n\n  return <>{children}</>;\n}\n\n// ============================================================================\n// ProtectedAction\n// ============================================================================\n\ninterface ProtectedActionProps {\n  permission: PermissionCode;\n  onAction: () => void;\n  children: (props: { onClick: () => void; disabled: boolean }) => ReactNode;\n}\n\n/**\n * Render prop component for protected actions\n */\nexport function ProtectedAction({\n  permission,\n  onAction,\n  children,\n}: ProtectedActionProps) {\n  const hasPermission = usePermission(permission);\n\n  return (\n    <>\n      {children({\n        onClick: hasPermission ? onAction : () => {},\n        disabled: !hasPermission,\n      })}\n    </>\n  );\n}\n","/**\n * Permission Constants\n */\n\nimport type { PermissionModule } from './types';\n\n/**\n * Available permission modules\n *\n * @deprecated Spine does not own an application's permission taxonomy. Define\n * module constants in the consuming app instead.\n */\nexport const PERMISSION_MODULES: PermissionModule[] = [];\n"],"mappings":";;;;;;;;;;;;;AAyBA,MAAa,iBAAiB,UAA2B,MAAM;;;;AAO/D,MAAM,eAAe;CACnB,SAAS,IAAI,kBAAkB,CAAC,CAAC;CACjC,aAAa,CAAC;CACd,WAAW;AACb;;;;AAKA,MAAa,qBAAqB,QAAyB,SAAS;CAClE,GAAG;CAEH,iBAAiB,gBAAkC;EACjD,IAAI;GACF;GACA,SAAS,IAAI,kBAAkB,WAAW;EAC5C,CAAC;CACH;CAEA,aAAa,cAAuB;EAClC,IAAI,EAAE,UAAU,CAAC;CACnB;CAEA,aAAa;EACX,IAAI,YAAY;CAClB;AACF,EAAE;;;;AAKF,SAAgB,sBACd,aACA,YAAqB,OACf;CACN,mBAAmB,SAAS,CAAC,CAAC,eAAe,WAAW;CACxD,mBAAmB,SAAS,CAAC,CAAC,WAAW,SAAS;AACpD;;;;AAKA,SAAgB,uBAA0C;CACxD,OAAO,mBAAmB,SAAS,CAAC,CAAC;AACvC;;;;AAKA,SAAgB,iBAAmC;CACjD,OAAO,mBAAmB,SAAS,CAAC,CAAC;AACvC;;;;;;;;;;;AChEA,SAAgB,sBAAsB,EACpC,aACA,YAAY,OACZ,YAC6B;CAC7B,gBAAgB;EACd,sBAAsB,aAAa,SAAS;CAC9C,GAAG,CAAC,aAAa,SAAS,CAAC;CAE3B,OAAO,oBAAA,UAAA,EAAG,SAAW,CAAA;AACvB;;;;;;;;;;;AChBA,SAAgB,cAAc,YAAqC;CACjE,MAAM,UAAU,mBAAmB,aAAa;CAChD,OAAO,cAAc,QAAQ,cAAc,UAAU,GAAG,CAAC,SAAS,UAAU,CAAC;AAC/E;;;;AAKA,MAAa,mBAAmB;;;;AAKhC,SAAgB,eACd,aACA,SACA;CACA,MAAM,UAAU,mBAAmB,aAAa;CAChD,OAAO,cACC,QAAQ,eAAe,aAAa,OAAO,GACjD;EAAC;EAAS;EAAa;CAAO,CAChC;AACF;;;;AAKA,MAAa,oBAAoB;;;;AAKjC,SAAgB,oBAAoB,QAAmC;CACrE,MAAM,UAAU,mBAAmB,aAAa;CAChD,OAAO,cAAc,QAAQ,oBAAoB,MAAM,GAAG,CAAC,SAAS,MAAM,CAAC;AAC7E;;;;AAKA,MAAa,yBAAyB;;;;AAKtC,SAAgB,uBAAuB;CACrC,MAAM,UAAU,mBAAmB,aAAa;CAChD,OAAO,aACJ,eAA+B,QAAQ,cAAc,UAAU,GAChE,CAAC,OAAO,CACV;AACF;;;;AAKA,SAAgB,oBAA+C;CAC7D,MAAM,UAAU,mBAAmB,aAAa;CAChD,OAAO,cAAc,QAAQ,kBAAkB,GAAG,CAAC,OAAO,CAAC;AAC7D;;;;;;AClDA,SAAgB,gBAAgB,EAC9B,YACA,WAAW,MACX,UACA,GAAG,SACoB;CAGvB,IAAI,CAFkB,cAAc,UAEnB,GACf,OAAO,oBAAA,UAAA,EAAA,UAAG,SAAW,CAAA;CAGvB,OAAO,oBAAC,UAAD;EAAQ,GAAI;EAAQ;CAAiB,CAAA;AAC9C;;;;AAcA,SAAgB,cAAc,EAC5B,YACA,WAAW,MACX,UACA,GAAG,SACkB;CAGrB,IAAI,CAFkB,cAAc,UAEnB,GACf,OAAO,oBAAA,UAAA,EAAA,UAAG,SAAW,CAAA;CAGvB,OAAO,oBAAC,KAAD;EAAG,GAAI;EAAQ;CAAY,CAAA;AACpC;;;;AAiBA,SAAgB,iBAAiB,EAC/B,YACA,aACA,SACA,WAAW,MACX,YACwB;CAExB,MAAM,yBAAyB,cAAc,cAAc,EAAE;CAG7D,MAAM,4BAA4B,eAAe,eAAe,CAAC,GAAG,OAAO;CAG3E,IAAI,gBAAgB;CAEpB,IAAI,YACF,gBAAgB;MACX,IAAI,eAAe,YAAY,SAAS,GAC7C,gBAAgB,0BAA0B;MAG1C,gBAAgB;CAGlB,IAAI,CAAC,eACH,OAAO,oBAAA,UAAA,EAAA,UAAG,SAAW,CAAA;CAGvB,OAAO,oBAAA,UAAA,EAAG,SAAW,CAAA;AACvB;;;;AAeA,SAAgB,gBAAgB,EAC9B,YACA,UACA,YACuB;CACvB,MAAM,gBAAgB,cAAc,UAAU;CAE9C,OACE,oBAAA,UAAA,EAAA,UACG,SAAS;EACR,SAAS,gBAAgB,iBAAiB,CAAC;EAC3C,UAAU,CAAC;CACb,CAAC,EACD,CAAA;AAEN;;;;;;;;;AC/HA,MAAa,qBAAyC,CAAC"}

package/dist/query-client/index.mjs

@@ -0,0 +1,2 @@
+import { i as invalidationHelpers, n as createQueryClient, r as createQueryKeyFactory, t as cachePresets } from "../query-client-_xB300gc.mjs";
+export { cachePresets, createQueryClient, createQueryKeyFactory, invalidationHelpers };

package/dist/{query-client-Bh3TyB8W.js → query-client-_xB300gc.mjs}

@@ -1,12 +1,19 @@
 import { MutationCache, QueryCache, QueryClient } from "@tanstack/react-query";
-
 //#region src/query-client/query-config.ts
 /**
+* Query Client Configuration
+* 
+* Optimized caching strategy for different types of data:
+* - Static data (rarely changes): Long staleTime and gcTime
+* - Dynamic data (changes frequently): Short staleTime
+* - Critical data (needs to be fresh): Very short staleTime with prefetching
+*/
+/**
 * Default configuration
 */
 const DEFAULT_CONFIG = {
-	staleTime: 5 * 60 * 1e3,
-	gcTime: 10 * 60 * 1e3,
+	staleTime: 300 * 1e3,
+	gcTime: 600 * 1e3,
 	maxRetries: 3,
 	maxMutationRetries: 1,
 	refetchOnWindowFocus: true,
@@ -54,7 +61,7 @@ function createQueryClient(config = {}) {
 		...config
 	};
 	const handleLogout = onLogout || createDefaultLogoutHandler();
-	const queryClient = new QueryClient({
+	return new QueryClient({
 		defaultOptions: {
 			queries: {
 				staleTime,
@@ -97,7 +104,6 @@ function createQueryClient(config = {}) {
 			logger?.error?.("Mutation error", error instanceof Error ? error : void 0, { is401: is401Error(error) });
 		} })
 	});
-	return queryClient;
 }
 /**
 * Cache Presets for different data types
@@ -105,24 +111,40 @@ function createQueryClient(config = {}) {
 * Use these presets for consistent caching across the application.
 */
 const cachePresets = {
+	/**
+	* Static data - rarely changes
+	* Good for: permissions, roles, system settings
+	*/
 	static: {
-		staleTime: 30 * 60 * 1e3,
-		gcTime: 60 * 60 * 1e3,
+		staleTime: 1800 * 1e3,
+		gcTime: 3600 * 1e3,
 		refetchOnWindowFocus: false
 	},
+	/**
+	* Normal data - changes occasionally
+	* Good for: resources, users, tenant data
+	*/
 	normal: {
-		staleTime: 5 * 60 * 1e3,
-		gcTime: 10 * 60 * 1e3,
+		staleTime: 300 * 1e3,
+		gcTime: 600 * 1e3,
 		refetchOnWindowFocus: true
 	},
+	/**
+	* Dynamic data - changes frequently
+	* Good for: transactions, activities, notifications
+	*/
 	dynamic: {
-		staleTime: 1 * 60 * 1e3,
-		gcTime: 5 * 60 * 1e3,
+		staleTime: 60 * 1e3,
+		gcTime: 300 * 1e3,
 		refetchOnWindowFocus: true
 	},
+	/**
+	* Realtime data - always fresh
+	* Good for: live status, counters, dashboards
+	*/
 	realtime: {
 		staleTime: 0,
-		gcTime: 1 * 60 * 1e3,
+		gcTime: 60 * 1e3,
 		refetchOnWindowFocus: true
 	}
 };
@@ -150,12 +172,21 @@ function createQueryKeyFactory(module) {
 * Invalidation helpers for common patterns
 */
 const invalidationHelpers = {
+	/**
+	* Invalidate all queries for a module
+	*/
 	invalidateModule: async (queryClient, module) => {
 		await queryClient.invalidateQueries({ queryKey: [module] });
 	},
+	/**
+	* Invalidate all list queries for a module
+	*/
 	invalidateLists: async (queryClient, module) => {
 		await queryClient.invalidateQueries({ queryKey: [module, "list"] });
 	},
+	/**
+	* Invalidate a specific detail query
+	*/
 	invalidateDetail: async (queryClient, module, id) => {
 		await queryClient.invalidateQueries({ queryKey: [
 			module,
@@ -163,12 +194,15 @@ const invalidationHelpers = {
 			id
 		] });
 	},
+	/**
+	* Invalidate and refetch (useful for critical data)
+	*/
 	invalidateAndRefetch: async (queryClient, queryKey) => {
 		await queryClient.invalidateQueries({ queryKey });
 		await queryClient.refetchQueries({ queryKey });
 	}
 };
-
 //#endregion
-export { cachePresets, createQueryClient, createQueryKeyFactory, invalidationHelpers };
-//# sourceMappingURL=query-client-Bh3TyB8W.js.map
+export { invalidationHelpers as i, createQueryClient as n, createQueryKeyFactory as r, cachePresets as t };
+
+//# sourceMappingURL=query-client-_xB300gc.mjs.map

package/dist/query-client-_xB300gc.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-client-_xB300gc.mjs","names":[],"sources":["../src/query-client/query-config.ts"],"sourcesContent":["/**\n * Query Client Configuration\n * \n * Optimized caching strategy for different types of data:\n * - Static data (rarely changes): Long staleTime and gcTime\n * - Dynamic data (changes frequently): Short staleTime\n * - Critical data (needs to be fresh): Very short staleTime with prefetching\n */\n\nimport { QueryClient, QueryCache, MutationCache } from '@tanstack/react-query';\nimport type { QueryClientConfig, CachePresets } from './types';\n\n/**\n * Default configuration\n */\nconst DEFAULT_CONFIG: Required<Omit<QueryClientConfig, 'logger' | 'onLogout'>> = {\n  staleTime: 5 * 60 * 1000, // 5 minutes\n  gcTime: 10 * 60 * 1000, // 10 minutes\n  maxRetries: 3,\n  maxMutationRetries: 1,\n  refetchOnWindowFocus: true,\n  refetchOnReconnect: false,\n  refetchOnMount: false,\n};\n\n/**\n * Check if error is a 401 Unauthorized error\n */\nfunction is401Error(error: unknown): boolean {\n  if (error instanceof Response) {\n    return error.status === 401;\n  }\n\n  if (error && typeof error === 'object' && 'status' in error) {\n    return (error as any).status === 401;\n  }\n\n  return false;\n}\n\n/**\n * Check if error requires logout (refresh token expired)\n */\nfunction shouldLogout(error: unknown): boolean {\n  if (error && typeof error === 'object') {\n    // Check for shouldLogout flag from server\n    if ('shouldLogout' in error && (error as any).shouldLogout === true) {\n      return true;\n    }\n\n    // Check for SESSION_EXPIRED code\n    if ('code' in error && (error as any).code === 'SESSION_EXPIRED') {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * Create default logout handler\n */\nfunction createDefaultLogoutHandler(): (returnUrl?: string) => void {\n  return (returnUrl?: string) => {\n    if (typeof window !== 'undefined') {\n      const currentUrl = returnUrl || window.location.pathname + window.location.search;\n      window.location.href = `/auth/logout?logout=local&returnUrl=${encodeURIComponent(currentUrl)}`;\n    }\n  };\n}\n\n/**\n * Create optimized QueryClient instance\n * \n * @param config - Configuration options\n * @returns Configured QueryClient with optimized defaults\n */\nexport function createQueryClient(config: QueryClientConfig = {}): QueryClient {\n  const {\n    staleTime,\n    gcTime,\n    maxRetries,\n    maxMutationRetries,\n    refetchOnWindowFocus,\n    refetchOnReconnect,\n    refetchOnMount,\n    logger,\n    onLogout,\n  } = { ...DEFAULT_CONFIG, ...config };\n\n  const handleLogout = onLogout || createDefaultLogoutHandler();\n\n  const queryClient = new QueryClient({\n    defaultOptions: {\n      queries: {\n        staleTime,\n        gcTime,\n        retry: (failureCount, error) => {\n          // Don't retry 401 errors - the fetch client handles refresh flows separately\n          if (is401Error(error)) {\n            logger?.debug?.('Query failed with 401, not retrying');\n            return false;\n          }\n          return failureCount < maxRetries;\n        },\n        retryDelay: (attemptIndex) => Math.min(1000 * 2 ** attemptIndex, 30000),\n        refetchOnWindowFocus,\n        refetchOnReconnect,\n        refetchOnMount,\n      },\n      mutations: {\n        retry: (failureCount, error) => {\n          if (is401Error(error)) {\n            logger?.debug?.('Mutation failed with 401, not retrying');\n            return false;\n          }\n          return failureCount < maxMutationRetries;\n        },\n        retryDelay: 1000,\n      },\n    },\n    queryCache: new QueryCache({\n      onError: (error) => {\n        if (shouldLogout(error)) {\n          handleLogout();\n          return;\n        }\n        logger?.error?.('Query error', error instanceof Error ? error : undefined, {\n          is401: is401Error(error),\n        });\n      },\n    }),\n    mutationCache: new MutationCache({\n      onError: (error) => {\n        if (shouldLogout(error)) {\n          handleLogout();\n          return;\n        }\n        logger?.error?.('Mutation error', error instanceof Error ? error : undefined, {\n          is401: is401Error(error),\n        });\n      },\n    }),\n  });\n\n  return queryClient;\n}\n\n/**\n * Cache Presets for different data types\n * \n * Use these presets for consistent caching across the application.\n */\nexport const cachePresets: CachePresets = {\n  /**\n   * Static data - rarely changes\n   * Good for: permissions, roles, system settings\n   */\n  static: {\n    staleTime: 30 * 60 * 1000, // 30 minutes\n    gcTime: 60 * 60 * 1000, // 1 hour\n    refetchOnWindowFocus: false,\n  },\n\n  /**\n   * Normal data - changes occasionally\n   * Good for: resources, users, tenant data\n   */\n  normal: {\n    staleTime: 5 * 60 * 1000, // 5 minutes\n    gcTime: 10 * 60 * 1000, // 10 minutes\n    refetchOnWindowFocus: true,\n  },\n\n  /**\n   * Dynamic data - changes frequently\n   * Good for: transactions, activities, notifications\n   */\n  dynamic: {\n    staleTime: 1 * 60 * 1000, // 1 minute\n    gcTime: 5 * 60 * 1000, // 5 minutes\n    refetchOnWindowFocus: true,\n  },\n\n  /**\n   * Realtime data - always fresh\n   * Good for: live status, counters, dashboards\n   */\n  realtime: {\n    staleTime: 0, // Always stale\n    gcTime: 1 * 60 * 1000, // 1 minute\n    refetchOnWindowFocus: true,\n  },\n};\n\n/**\n * Create base query keys for a module\n */\nexport function createQueryKeyFactory<T extends string>(\n  module: T\n): {\n  all: readonly [T];\n  lists: () => readonly [T, 'list'];\n  list: (filters?: Record<string, unknown>) => readonly [T, 'list', Record<string, unknown>?];\n  details: () => readonly [T, 'detail'];\n  detail: (id: string) => readonly [T, 'detail', string];\n} {\n  return {\n    all: [module] as const,\n    lists: () => [module, 'list'] as const,\n    list: (filters?: Record<string, unknown>) => [module, 'list', filters] as const,\n    details: () => [module, 'detail'] as const,\n    detail: (id: string) => [module, 'detail', id] as const,\n  };\n}\n\n/**\n * Invalidation helpers for common patterns\n */\nexport const invalidationHelpers = {\n  /**\n   * Invalidate all queries for a module\n   */\n  invalidateModule: async (queryClient: QueryClient, module: string): Promise<void> => {\n    await queryClient.invalidateQueries({ queryKey: [module] });\n  },\n\n  /**\n   * Invalidate all list queries for a module\n   */\n  invalidateLists: async (queryClient: QueryClient, module: string): Promise<void> => {\n    await queryClient.invalidateQueries({ queryKey: [module, 'list'] });\n  },\n\n  /**\n   * Invalidate a specific detail query\n   */\n  invalidateDetail: async (\n    queryClient: QueryClient,\n    module: string,\n    id: string\n  ): Promise<void> => {\n    await queryClient.invalidateQueries({ queryKey: [module, 'detail', id] });\n  },\n\n  /**\n   * Invalidate and refetch (useful for critical data)\n   */\n  invalidateAndRefetch: async (queryClient: QueryClient, queryKey: readonly unknown[]): Promise<void> => {\n    await queryClient.invalidateQueries({ queryKey });\n    await queryClient.refetchQueries({ queryKey });\n  },\n};\n"],"mappings":";;;;;;;;;;;;;AAeA,MAAM,iBAA2E;CAC/E,WAAW,MAAS;CACpB,QAAQ,MAAU;CAClB,YAAY;CACZ,oBAAoB;CACpB,sBAAsB;CACtB,oBAAoB;CACpB,gBAAgB;AAClB;;;;AAKA,SAAS,WAAW,OAAyB;CAC3C,IAAI,iBAAiB,UACnB,OAAO,MAAM,WAAW;CAG1B,IAAI,SAAS,OAAO,UAAU,YAAY,YAAY,OACpD,OAAQ,MAAc,WAAW;CAGnC,OAAO;AACT;;;;AAKA,SAAS,aAAa,OAAyB;CAC7C,IAAI,SAAS,OAAO,UAAU,UAAU;EAEtC,IAAI,kBAAkB,SAAU,MAAc,iBAAiB,MAC7D,OAAO;EAIT,IAAI,UAAU,SAAU,MAAc,SAAS,mBAC7C,OAAO;CAEX;CAEA,OAAO;AACT;;;;AAKA,SAAS,6BAA2D;CAClE,QAAQ,cAAuB;EAC7B,IAAI,OAAO,WAAW,aAAa;GACjC,MAAM,aAAa,aAAa,OAAO,SAAS,WAAW,OAAO,SAAS;GAC3E,OAAO,SAAS,OAAO,uCAAuC,mBAAmB,UAAU;EAC7F;CACF;AACF;;;;;;;AAQA,SAAgB,kBAAkB,SAA4B,CAAC,GAAgB;CAC7E,MAAM,EACJ,WACA,QACA,YACA,oBACA,sBACA,oBACA,gBACA,QACA,aACE;EAAE,GAAG;EAAgB,GAAG;CAAO;CAEnC,MAAM,eAAe,YAAY,2BAA2B;CAuD5D,OAAO,IArDiB,YAAY;EAClC,gBAAgB;GACd,SAAS;IACP;IACA;IACA,QAAQ,cAAc,UAAU;KAE9B,IAAI,WAAW,KAAK,GAAG;MACrB,QAAQ,QAAQ,qCAAqC;MACrD,OAAO;KACT;KACA,OAAO,eAAe;IACxB;IACA,aAAa,iBAAiB,KAAK,IAAI,MAAO,KAAK,cAAc,GAAK;IACtE;IACA;IACA;GACF;GACA,WAAW;IACT,QAAQ,cAAc,UAAU;KAC9B,IAAI,WAAW,KAAK,GAAG;MACrB,QAAQ,QAAQ,wCAAwC;MACxD,OAAO;KACT;KACA,OAAO,eAAe;IACxB;IACA,YAAY;GACd;EACF;EACA,YAAY,IAAI,WAAW,EACzB,UAAU,UAAU;GAClB,IAAI,aAAa,KAAK,GAAG;IACvB,aAAa;IACb;GACF;GACA,QAAQ,QAAQ,eAAe,iBAAiB,QAAQ,QAAQ,KAAA,GAAW,EACzE,OAAO,WAAW,KAAK,EACzB,CAAC;EACH,EACF,CAAC;EACD,eAAe,IAAI,cAAc,EAC/B,UAAU,UAAU;GAClB,IAAI,aAAa,KAAK,GAAG;IACvB,aAAa;IACb;GACF;GACA,QAAQ,QAAQ,kBAAkB,iBAAiB,QAAQ,QAAQ,KAAA,GAAW,EAC5E,OAAO,WAAW,KAAK,EACzB,CAAC;EACH,EACF,CAAC;CACH,CAEiB;AACnB;;;;;;AAOA,MAAa,eAA6B;;;;;CAKxC,QAAQ;EACN,WAAW,OAAU;EACrB,QAAQ,OAAU;EAClB,sBAAsB;CACxB;;;;;CAMA,QAAQ;EACN,WAAW,MAAS;EACpB,QAAQ,MAAU;EAClB,sBAAsB;CACxB;;;;;CAMA,SAAS;EACP,WAAW,KAAS;EACpB,QAAQ,MAAS;EACjB,sBAAsB;CACxB;;;;;CAMA,UAAU;EACR,WAAW;EACX,QAAQ,KAAS;EACjB,sBAAsB;CACxB;AACF;;;;AAKA,SAAgB,sBACd,QAOA;CACA,OAAO;EACL,KAAK,CAAC,MAAM;EACZ,aAAa,CAAC,QAAQ,MAAM;EAC5B,OAAO,YAAsC;GAAC;GAAQ;GAAQ;EAAO;EACrE,eAAe,CAAC,QAAQ,QAAQ;EAChC,SAAS,OAAe;GAAC;GAAQ;GAAU;EAAE;CAC/C;AACF;;;;AAKA,MAAa,sBAAsB;;;;CAIjC,kBAAkB,OAAO,aAA0B,WAAkC;EACnF,MAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;CAC5D;;;;CAKA,iBAAiB,OAAO,aAA0B,WAAkC;EAClF,MAAM,YAAY,kBAAkB,EAAE,UAAU,CAAC,QAAQ,MAAM,EAAE,CAAC;CACpE;;;;CAKA,kBAAkB,OAChB,aACA,QACA,OACkB;EAClB,MAAM,YAAY,kBAAkB,EAAE,UAAU;GAAC;GAAQ;GAAU;EAAE,EAAE,CAAC;CAC1E;;;;CAKA,sBAAsB,OAAO,aAA0B,aAAgD;EACrG,MAAM,YAAY,kBAAkB,EAAE,SAAS,CAAC;EAChD,MAAM,YAAY,eAAe,EAAE,SAAS,CAAC;CAC/C;AACF"}

package/dist/react-router/{index.js → index.mjs}

@@ -1,13 +1,11 @@
-import { LOG_LEVEL_PRIORITY, LogLevel, Logger, createLogger, defaultLoggerConfig, logger } from "../logging-DviiAkLx.js";
-import { PermissionChecker } from "../permission-service-CvGpwI0d.js";
-import { PERMISSION_MODULES, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, getPermissionChecker, getPermissions, initializePermissions, useAllPermissions, useHasModulePermission, useHasPermission, useHasPermissions, useModulePermission, usePermission, usePermissionChecker, usePermissionStore, usePermissions } from "../permissions-_n1hIG7Q.js";
-import { evaluateAccessRequirement } from "../access-CGrsDMwu.js";
-import { TenantProvider, configureTenantClient, configureTenantEndpoints, getTenantCookieName, initializeTenantStore, normalizeTenantDataPayload, normalizeTenantSwitchPayload, resetTenantClientConfig, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useOrganization, useTenant, useTenantData, useTenantStore, useTenantSwitcher } from "../tenant-DfLemb6n.js";
-import { IdentityContextProvider, configureIdentityEndpoints, configureIdentityStore, initialIdentityContext, normalizeIdentityContextPayload, normalizeIdentityPermissionsPayload, resetIdentityStoreConfig, useHasEntitlement, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useUserPermissions, useUserTenants } from "../identity-C5un-xAs.js";
-import { isApiClientError } from "../types-BaaE6wjY.js";
-import { ApiError, ErrorCodes, ErrorHandler, calculateBackoffDelay, createRetryFetch, fetchWithTimeout, handleApiError, isRetryableError, withRetry } from "../api-client-CgZUMukO.js";
-import { IdentitySignalRClient, SignalRClient, cleanupSignalR, createIdentitySignalRClient, getIdentitySignalRClient, initializeSignalR } from "../signalr-k-70VHKo.js";
-import { cachePresets, createQueryClient, createQueryKeyFactory, invalidationHelpers } from "../query-client-Bh3TyB8W.js";
-import "../src-B9rDUgSb.js";
-
-export { ApiError, ErrorCodes, ErrorHandler, IdentityContextProvider, IdentitySignalRClient, LOG_LEVEL_PRIORITY, LogLevel, Logger, PERMISSION_MODULES, PermissionChecker, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, SignalRClient, TenantProvider, cachePresets, calculateBackoffDelay, cleanupSignalR, configureIdentityEndpoints, configureIdentityStore, configureTenantClient, configureTenantEndpoints, createIdentitySignalRClient, createLogger, createQueryClient, createQueryKeyFactory, createRetryFetch, defaultLoggerConfig, evaluateAccessRequirement, fetchWithTimeout, getIdentitySignalRClient, getPermissionChecker, getPermissions, getTenantCookieName, handleApiError, initialIdentityContext, initializePermissions, initializeSignalR, initializeTenantStore, invalidationHelpers, isApiClientError, isRetryableError, logger, normalizeIdentityContextPayload, normalizeIdentityPermissionsPayload, normalizeTenantDataPayload, normalizeTenantSwitchPayload, resetIdentityStoreConfig, resetTenantClientConfig, useAllPermissions, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useHasEntitlement, useHasModulePermission, useHasPermission, useHasPermissions, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useModulePermission, useOrganization, usePermission, usePermissionChecker, usePermissionStore, usePermissions, useTenant, useTenantData, useTenantStore, useTenantSwitcher, useUserPermissions, useUserTenants, withRetry };
+import { LOG_LEVEL_PRIORITY, LogLevel, Logger, createLogger, defaultLoggerConfig, logger } from "../logging/index.mjs";
+import { t as PermissionChecker } from "../permission-service-DUyKomU3.mjs";
+import { _ as initializePermissions, a as ProtectedSection, c as useHasPermission, d as usePermission, f as usePermissionChecker, g as getPermissions, h as getPermissionChecker, i as ProtectedLink, l as useHasPermissions, m as PermissionInitializer, n as ProtectedAction, o as useAllPermissions, p as usePermissions, r as ProtectedButton, s as useHasModulePermission, t as PERMISSION_MODULES, u as useModulePermission, v as usePermissionStore } from "../permissions-C5dTP9y4.mjs";
+import { t as evaluateAccessRequirement } from "../access-BHy1v5sr.mjs";
+import { TenantProvider, configureTenantClient, configureTenantEndpoints, getTenantCookieName, initializeTenantStore, normalizeTenantDataPayload, normalizeTenantSwitchPayload, resetTenantClientConfig, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useOrganization, useTenant, useTenantData, useTenantStore, useTenantSwitcher } from "../tenant/index.mjs";
+import { IdentityContextProvider, configureIdentityEndpoints, configureIdentityStore, initialIdentityContext, normalizeIdentityContextPayload, normalizeIdentityPermissionsPayload, resetIdentityStoreConfig, useHasEntitlement, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useUserPermissions, useUserTenants } from "../identity/index.mjs";
+import { t as isApiClientError } from "../types-DqCXinAk.mjs";
+import { a as withRetry, c as handleApiError, i as isRetryableError, l as ErrorCodes, n as createRetryFetch, o as ApiError, r as fetchWithTimeout, s as ErrorHandler, t as calculateBackoffDelay } from "../api-client-CB7XZaMg.mjs";
+import { a as getIdentitySignalRClient, i as createIdentitySignalRClient, n as SignalRClient, o as initializeSignalR, r as cleanupSignalR, t as IdentitySignalRClient } from "../signalr-C-TA8nEE.mjs";
+import { i as invalidationHelpers, n as createQueryClient, r as createQueryKeyFactory, t as cachePresets } from "../query-client-_xB300gc.mjs";
+export { ApiError, ErrorCodes, ErrorHandler, IdentityContextProvider, IdentitySignalRClient, LOG_LEVEL_PRIORITY, LogLevel, Logger, PERMISSION_MODULES, PermissionChecker, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, SignalRClient, TenantProvider, cachePresets, calculateBackoffDelay, cleanupSignalR, configureIdentityEndpoints, configureIdentityStore, configureTenantClient, configureTenantEndpoints, createIdentitySignalRClient, createLogger, createQueryClient, createQueryKeyFactory, createRetryFetch, defaultLoggerConfig, evaluateAccessRequirement, fetchWithTimeout, getIdentitySignalRClient, getPermissionChecker, getPermissions, getTenantCookieName, handleApiError, initialIdentityContext, initializePermissions, initializeSignalR, initializeTenantStore, invalidationHelpers, isApiClientError, isRetryableError, logger, normalizeIdentityContextPayload, normalizeIdentityPermissionsPayload, normalizeTenantDataPayload, normalizeTenantSwitchPayload, resetIdentityStoreConfig, resetTenantClientConfig, useAllPermissions, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useHasEntitlement, useHasModulePermission, useHasPermission, useHasPermissions, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useModulePermission, useOrganization, usePermission, usePermissionChecker, usePermissionStore, usePermissions, useTenant, useTenantData, useTenantStore, useTenantSwitcher, useUserPermissions, useUserTenants, withRetry };

package/dist/react-router/server.mjs

@@ -0,0 +1,17 @@
+import { LOG_LEVEL_PRIORITY, LogLevel, Logger, createLogger, defaultLoggerConfig, logger } from "../logging/index.mjs";
+import { t as PermissionChecker } from "../permission-service-DUyKomU3.mjs";
+import { _ as initializePermissions, a as ProtectedSection, c as useHasPermission, d as usePermission, f as usePermissionChecker, g as getPermissions, h as getPermissionChecker, i as ProtectedLink, l as useHasPermissions, m as PermissionInitializer, n as ProtectedAction, o as useAllPermissions, p as usePermissions, r as ProtectedButton, s as useHasModulePermission, t as PERMISSION_MODULES, u as useModulePermission, v as usePermissionStore } from "../permissions-C5dTP9y4.mjs";
+import { t as evaluateAccessRequirement } from "../access-BHy1v5sr.mjs";
+import { TenantProvider, configureTenantClient, configureTenantEndpoints, getTenantCookieName, initializeTenantStore, normalizeTenantDataPayload, normalizeTenantSwitchPayload, resetTenantClientConfig, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useOrganization, useTenant, useTenantData, useTenantStore, useTenantSwitcher } from "../tenant/index.mjs";
+import { IdentityContextProvider, configureIdentityEndpoints, configureIdentityStore, initialIdentityContext, normalizeIdentityContextPayload, normalizeIdentityPermissionsPayload, resetIdentityStoreConfig, useHasEntitlement, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useUserPermissions, useUserTenants } from "../identity/index.mjs";
+import { t as isApiClientError } from "../types-DqCXinAk.mjs";
+import { a as withRetry, c as handleApiError, i as isRetryableError, l as ErrorCodes, n as createRetryFetch, o as ApiError, r as fetchWithTimeout, s as ErrorHandler, t as calculateBackoffDelay } from "../api-client-CB7XZaMg.mjs";
+import { a as getIdentitySignalRClient, i as createIdentitySignalRClient, n as SignalRClient, o as initializeSignalR, r as cleanupSignalR, t as IdentitySignalRClient } from "../signalr-C-TA8nEE.mjs";
+import { i as invalidationHelpers, n as createQueryClient, r as createQueryKeyFactory, t as cachePresets } from "../query-client-_xB300gc.mjs";
+import { S as updateAuthSession, _ as isSessionValid, a as createOAuthState, b as listCurrentUserAuthSessions, c as destroyAuthSessionById, d as destroyAuthSessionsBySid, f as destroyAuthSessionsForUser, g as getOAuthState, h as getCurrentAuthSessionId, i as createAuthSession, l as destroyAuthSessionsByIdentitySession, m as getAuthSessionById, n as cleanupExpiredOAuthStates, o as deleteOAuthState, p as getAuthSession, r as closeRedisConnection, s as destroyAuthSession, t as AUTH_ERROR_COOKIE_PREFIX, u as destroyAuthSessionsBySessionState, v as listAuthSessionDataForUser, x as requireAuthSession, y as listAuthSessionsForUser } from "../redis-session-storage.server-DGgQcJ9B.mjs";
+import { A as resetAuthClaimMapping, C as handleCallback, D as logout, E as login, O as refreshTokens, S as handleBackChannelLogout, T as hasAuthError, _ as createAuthorizationResponseUrl, a as configureRouteProtection, b as getAuthError, c as protectRoute, d as resetRouteProtectionConfig, f as shouldRefreshToken, g as configureAuthClaimMapping, h as clearAuthServerCache, i as authRoute, k as requireAuth, l as protectedRoute, m as clearAuthErrorHeaders, n as isTokenExpiredResponse, o as onboardingRoute, p as subscriptionRoute, r as shouldAttemptTokenRefresh, s as policyRoute, t as attemptTokenRefresh, u as publicRoute, v as extractUserInfo, w as handleFrontChannelLogout, x as getUser, y as getAccessToken } from "../server-CqX2yCa4.mjs";
+import { clearActiveTenant, clearCurrentTenant, configureIdentityContextFetcher, configureTenantCookie, configureTenantResolution, getActiveTenant, getAvailableTenants, getCurrentTenant, getTenantFromIdentityContext, initializeTenant, resetTenantCookieConfig, resetTenantResolutionConfig, setActiveTenant, setCurrentTenant } from "../tenant/server.mjs";
+import { clearIdentityContextCache, configureIdentityAPIFetcher, configurePermissionFetcher, contextToUserInfo, fetchIdentityContext, fetchUserPermissions, getIdentityContext, hasContextVersionChanged, updateContextVersion } from "../identity/server.mjs";
+import { n as createFetchMiddleware, r as createAPIConfigFactory, t as createApiClient } from "../server-ByScGRXA.mjs";
+import { checkPermission, configurePermissionRouteProtection, requirePermission, resetPermissionRouteProtection, withPermission } from "../server.mjs";
+export { AUTH_ERROR_COOKIE_PREFIX, ApiError, ErrorCodes, ErrorHandler, IdentityContextProvider, IdentitySignalRClient, LOG_LEVEL_PRIORITY, LogLevel, Logger, PERMISSION_MODULES, PermissionChecker, PermissionInitializer, ProtectedAction, ProtectedButton, ProtectedLink, ProtectedSection, SignalRClient, TenantProvider, attemptTokenRefresh, authRoute, cachePresets, calculateBackoffDelay, checkPermission, cleanupExpiredOAuthStates, cleanupSignalR, clearActiveTenant, clearAuthErrorHeaders, clearAuthServerCache, clearCurrentTenant, clearIdentityContextCache, closeRedisConnection, configureAuthClaimMapping, configureIdentityAPIFetcher, configureIdentityContextFetcher, configureIdentityEndpoints, configureIdentityStore, configurePermissionFetcher, configurePermissionRouteProtection, configureRouteProtection, configureTenantClient, configureTenantCookie, configureTenantEndpoints, configureTenantResolution, contextToUserInfo, createAPIConfigFactory, createApiClient, createAuthSession, createAuthorizationResponseUrl, createFetchMiddleware, createIdentitySignalRClient, createLogger, createOAuthState, createQueryClient, createQueryKeyFactory, createRetryFetch, defaultLoggerConfig, deleteOAuthState, destroyAuthSession, destroyAuthSessionById, destroyAuthSessionsByIdentitySession, destroyAuthSessionsBySessionState, destroyAuthSessionsBySid, destroyAuthSessionsForUser, evaluateAccessRequirement, extractUserInfo, fetchIdentityContext, fetchUserPermissions, fetchWithTimeout, getAccessToken, getActiveTenant, getAuthError, getAuthSession, getAuthSessionById, getAvailableTenants, getCurrentAuthSessionId, getCurrentTenant, getIdentityContext, getIdentitySignalRClient, getOAuthState, getPermissionChecker, getPermissions, getTenantCookieName, getTenantFromIdentityContext, getUser, handleApiError, handleBackChannelLogout, handleCallback, handleFrontChannelLogout, hasAuthError, hasContextVersionChanged, initialIdentityContext, initializePermissions, initializeSignalR, initializeTenant, initializeTenantStore, invalidationHelpers, isApiClientError, isRetryableError, isSessionValid, isTokenExpiredResponse, listAuthSessionDataForUser, listAuthSessionsForUser, listCurrentUserAuthSessions, logger, login, logout, normalizeIdentityContextPayload, normalizeIdentityPermissionsPayload, normalizeTenantDataPayload, normalizeTenantSwitchPayload, onboardingRoute, policyRoute, protectRoute, protectedRoute, publicRoute, refreshTokens, requireAuth, requireAuthSession, requirePermission, resetAuthClaimMapping, resetIdentityStoreConfig, resetPermissionRouteProtection, resetRouteProtectionConfig, resetTenantClientConfig, resetTenantCookieConfig, resetTenantResolutionConfig, setActiveTenant, setCurrentTenant, shouldAttemptTokenRefresh, shouldRefreshToken, subscriptionRoute, updateAuthSession, updateContextVersion, useAllPermissions, useCurrentOrganization, useCurrentTenant, useCurrentTenantData, useHasEntitlement, useHasModulePermission, useHasPermission, useHasPermissions, useHasSubscription, useIdentityContext, useIdentityStore, useIsOnboarded, useModulePermission, useOrganization, usePermission, usePermissionChecker, usePermissionStore, usePermissions, useTenant, useTenantData, useTenantStore, useTenantSwitcher, useUserPermissions, useUserTenants, withPermission, withRetry };

package/dist/{redis-session-storage.server-v2VcpFsQ.js → redis-session-storage.server-DGgQcJ9B.mjs}

@@ -1,8 +1,14 @@
-import { logger } from "./logging-DviiAkLx.js";
+import { logger } from "./logging/index.mjs";
 import Redis from "ioredis";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, timingSafeEqual } from "node:crypto";
-
 //#region src/auth/redis-session-storage.server.ts
+/**
+* Redis Session Storage Server Module
+*
+* Redis-backed session storage for authentication.
+* Provides secure session management with automatic expiration,
+* without depending on a framework-specific session implementation.
+*/
 let redis = null;
 function getRedis() {
 	if (!redis) {
@@ -25,9 +31,8 @@ const REDIS_KEYS = {
 	sessionBySessionState: (sessionState) => `${KEY_PREFIX}session:index:session_state:${sessionState}`
 };
 const DEFAULT_SESSION_SECRET = "default-secret-change-in-production";
-const DEFAULT_SESSION_TTL = 60 * 60 * 24 * 7;
-const DEFAULT_OAUTH_STATE_TTL = 10 * 60;
-const OAUTH_STATE_TTL = resolvePositiveIntegerEnv("OAUTH_STATE_TTL", DEFAULT_OAUTH_STATE_TTL);
+const DEFAULT_SESSION_TTL = 3600 * 24 * 7;
+const OAUTH_STATE_TTL = resolvePositiveIntegerEnv("OAUTH_STATE_TTL", 600);
 const SESSION_TTL = resolvePositiveIntegerEnv("SESSION_DEFAULT_TTL", resolvePositiveIntegerEnv("SESSION_TTL", DEFAULT_SESSION_TTL));
 const SESSION_COOKIE_NAME = process.env.SESSION_COOKIE_NAME || "__session_id";
 const SESSION_SECRET = resolveSessionSecret();
@@ -120,8 +125,7 @@ function safelyCompareValues(left, right) {
 	return timingSafeEqual(leftBuffer, rightBuffer);
 }
 function signSessionId(sessionId) {
-	const signature = createCookieSignature(sessionId, SESSION_SECRET);
-	return `${sessionId}.${signature}`;
+	return `${sessionId}.${createCookieSignature(sessionId, SESSION_SECRET)}`;
 }
 function unsignSessionId(cookieValue) {
 	if (!cookieValue) return null;
@@ -134,9 +138,7 @@ function unsignSessionId(cookieValue) {
 	const separatorIndex = decodedValue.lastIndexOf(".");
 	if (separatorIndex <= 0 || separatorIndex === decodedValue.length - 1) return null;
 	const sessionId = decodedValue.slice(0, separatorIndex);
-	const signature = decodedValue.slice(separatorIndex + 1);
-	const expectedSignature = createCookieSignature(sessionId, SESSION_SECRET);
-	return safelyCompareValues(signature, expectedSignature) ? sessionId : null;
+	return safelyCompareValues(decodedValue.slice(separatorIndex + 1), createCookieSignature(sessionId, SESSION_SECRET)) ? sessionId : null;
 }
 function serializeSessionCookieValue(sessionId, options) {
 	const signedValue = encodeURIComponent(signSessionId(sessionId));
@@ -164,11 +166,10 @@ function serializeExpiredSessionCookie() {
 	return segments.join("; ");
 }
 async function getSessionIdFromRequest(request) {
-	const cookies = parseCookieHeader(request.headers.get("Cookie"));
-	return unsignSessionId(cookies[SESSION_COOKIE_NAME]);
+	return unsignSessionId(parseCookieHeader(request.headers.get("Cookie"))[SESSION_COOKIE_NAME]);
 }
 function getSessionIndexKeys(data) {
-	const keys = new Set();
+	const keys = /* @__PURE__ */ new Set();
 	if (data.userId) keys.add(REDIS_KEYS.sessionByUser(data.userId));
 	if (data.sid) keys.add(REDIS_KEYS.sessionBySid(data.sid));
 	if (data.sessionState) keys.add(REDIS_KEYS.sessionBySessionState(data.sessionState));
@@ -177,8 +178,7 @@ function getSessionIndexKeys(data) {
 async function registerSessionIndexes(sessionId, data) {
 	const indexKeys = getSessionIndexKeys(data);
 	if (indexKeys.length === 0) return;
-	const redisClient = getRedis();
-	const pipeline = redisClient.pipeline();
+	const pipeline = getRedis().pipeline();
 	for (const indexKey of indexKeys) {
 		pipeline.sadd(indexKey, sessionId);
 		pipeline.expire(indexKey, SESSION_TTL);
@@ -188,8 +188,7 @@ async function registerSessionIndexes(sessionId, data) {
 async function unregisterSessionIndexes(sessionId, data) {
 	const indexKeys = getSessionIndexKeys(data);
 	if (indexKeys.length === 0) return;
-	const redisClient = getRedis();
-	const pipeline = redisClient.pipeline();
+	const pipeline = getRedis().pipeline();
 	for (const indexKey of indexKeys) pipeline.srem(indexKey, sessionId);
 	await pipeline.exec();
 }
@@ -279,11 +278,8 @@ async function getSessionIdsFromIndex(indexKey) {
 	const sessionIds = await getRedis().smembers(indexKey);
 	const activeSessionIds = [];
 	const staleSessionIds = [];
-	for (const sessionId of sessionIds) {
-		const exists = await getRedis().exists(REDIS_KEYS.session(sessionId));
-		if (exists) activeSessionIds.push(sessionId);
-		else staleSessionIds.push(sessionId);
-	}
+	for (const sessionId of sessionIds) if (await getRedis().exists(REDIS_KEYS.session(sessionId))) activeSessionIds.push(sessionId);
+	else staleSessionIds.push(sessionId);
 	if (staleSessionIds.length > 0) await getRedis().srem(indexKey, ...staleSessionIds);
 	return activeSessionIds;
 }
@@ -317,8 +313,7 @@ async function listSessionDataByIds(sessionIds) {
 	return sessions;
 }
 function getRequestIpAddress(request) {
-	const forwardedFor = request.headers.get("x-forwarded-for")?.split(",")[0]?.trim();
-	return forwardedFor || request.headers.get("cf-connecting-ip")?.trim() || request.headers.get("x-real-ip")?.trim() || void 0;
+	return request.headers.get("x-forwarded-for")?.split(",")[0]?.trim() || request.headers.get("cf-connecting-ip")?.trim() || request.headers.get("x-real-ip")?.trim() || void 0;
 }
 async function createAuthSession(request, sessionData) {
 	const currentSessionId = await getSessionIdFromRequest(request);
@@ -361,11 +356,10 @@ async function updateAuthSession(request, updates) {
 	const currentSessionId = await getSessionIdFromRequest(request);
 	const currentSessionData = currentSessionId ? await readSessionData(currentSessionId) ?? {} : {};
 	const nextSessionId = currentSessionId ?? crypto.randomUUID();
-	const nextSessionData = mergeSessionData(currentSessionData, {
+	await writeSessionData(nextSessionId, mergeSessionData(currentSessionData, {
 		...updates,
 		sessionId: nextSessionId
-	});
-	await writeSessionData(nextSessionId, nextSessionData);
+	}));
 	return new Headers({ "Set-Cookie": serializeSessionCookieValue(nextSessionId, { maxAge: SESSION_TTL }) });
 }
 async function destroyAuthSession(request) {
@@ -384,12 +378,10 @@ async function getAuthSessionById(sessionId) {
 	} : null;
 }
 async function listAuthSessionDataForUser(userId) {
-	const sessionIds = await getSessionIdsFromIndex(REDIS_KEYS.sessionByUser(userId));
-	return await listSessionDataByIds(sessionIds);
+	return await listSessionDataByIds(await getSessionIdsFromIndex(REDIS_KEYS.sessionByUser(userId)));
 }
 async function listAuthSessionsForUser(userId, currentSessionId) {
-	const sessions = await listAuthSessionDataForUser(userId);
-	return sessions.map(({ sessionId, data }) => toAuthSessionSummary(sessionId, data, currentSessionId)).sort((left, right) => (right.lastActivity ?? right.createdAt ?? 0) - (left.lastActivity ?? left.createdAt ?? 0));
+	return (await listAuthSessionDataForUser(userId)).map(({ sessionId, data }) => toAuthSessionSummary(sessionId, data, currentSessionId)).sort((left, right) => (right.lastActivity ?? right.createdAt ?? 0) - (left.lastActivity ?? left.createdAt ?? 0));
 }
 async function listCurrentUserAuthSessions(request) {
 	const currentSession = await getAuthSession(request);
@@ -397,8 +389,7 @@ async function listCurrentUserAuthSessions(request) {
 	return await listAuthSessionsForUser(currentSession.userId, currentSession.sessionId);
 }
 async function destroyAuthSessionById(sessionId) {
-	const session = await readSessionData(sessionId);
-	if (!session) return false;
+	if (!await readSessionData(sessionId)) return false;
 	await deleteSessionData(sessionId);
 	return true;
 }
@@ -474,12 +465,9 @@ async function cleanupExpiredOAuthStates() {
 	const pattern = REDIS_KEYS.oauthState("*");
 	const keys = await getRedis().keys(pattern);
 	let cleaned = 0;
-	for (const key of keys) {
-		const ttl = await getRedis().ttl(key);
-		if (ttl === -1) {
-			await getRedis().del(key);
-			cleaned++;
-		}
+	for (const key of keys) if (await getRedis().ttl(key) === -1) {
+		await getRedis().del(key);
+		cleaned++;
 	}
 	logger.info("OAuth state cleanup completed", {
 		cleaned,
@@ -494,7 +482,7 @@ async function closeRedisConnection() {
 		logger.info("Redis connection closed");
 	}
 }
-
 //#endregion
-export { AUTH_ERROR_COOKIE_PREFIX, cleanupExpiredOAuthStates, closeRedisConnection, createAuthSession, createOAuthState, deleteOAuthState, destroyAuthSession, destroyAuthSessionById, destroyAuthSessionsByIdentitySession, destroyAuthSessionsBySessionState, destroyAuthSessionsBySid, destroyAuthSessionsForUser, getAuthSession, getAuthSessionById, getCurrentAuthSessionId, getOAuthState, isSessionValid, listAuthSessionDataForUser, listAuthSessionsForUser, listCurrentUserAuthSessions, requireAuthSession, updateAuthSession };
-//# sourceMappingURL=redis-session-storage.server-v2VcpFsQ.js.map
+export { updateAuthSession as S, isSessionValid as _, createOAuthState as a, listCurrentUserAuthSessions as b, destroyAuthSessionById as c, destroyAuthSessionsBySid as d, destroyAuthSessionsForUser as f, getOAuthState as g, getCurrentAuthSessionId as h, createAuthSession as i, destroyAuthSessionsByIdentitySession as l, getAuthSessionById as m, cleanupExpiredOAuthStates as n, deleteOAuthState as o, getAuthSession as p, closeRedisConnection as r, destroyAuthSession as s, AUTH_ERROR_COOKIE_PREFIX as t, destroyAuthSessionsBySessionState as u, listAuthSessionDataForUser as v, requireAuthSession as x, listAuthSessionsForUser as y };
+
+//# sourceMappingURL=redis-session-storage.server-DGgQcJ9B.mjs.map