@fayz-ai/auth 0.44.0 → 0.48.0

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/lib/url-intent.ts","../src/adapters/supabase.ts","../src/adapters/mock.ts","../src/store.ts","../src/context.tsx"],"names":[],"mappings":";;;;;;;;;AA2BO,IAAM,iBAAA,GAAoB;AAIjC,IAAM,UAAA,GAAa,sBAAA;AAQnB,SAAS,QAAA,GAA+B;AAMtC,EAAA,MAAM,GAAA,GAAM,OAAO,MAAA,KAAW,WAAA,GAAc,SAAY,MAAA,CAAO,QAAA;AAC/D,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,IAAI,QAAA,IAAY,EAAA;AAAA,IAC1B,MAAA,EAAQ,IAAI,MAAA,IAAU,EAAA;AAAA,IACtB,IAAA,EAAM,IAAI,IAAA,IAAQ;AAAA,GACpB;AACF;AAGA,IAAM,aAAiC,QAAA,EAAS;AAIhD,SAAS,WAAW,IAAA,EAA+B;AACjD,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAA;AACjC,EAAA,IAAI,CAAC,OAAO,CAAC,GAAA,CAAI,SAAS,GAAG,CAAA,EAAG,OAAO,IAAI,eAAA,EAAgB;AAC3D,EAAA,OAAO,IAAI,gBAAgB,GAAG,CAAA;AAChC;AAEO,SAAS,kBAAkB,GAAA,EAAgD;AAChF,EAAA,MAAM,MAAM,GAAA,IAAO,UAAA;AACnB,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AAEjB,EAAA,MAAM,KAAA,GAAQ,IAAI,eAAA,CAAgB,GAAA,CAAI,MAAM,CAAA;AAC5C,EAAA,MAAM,IAAA,GAAO,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA;AAChC,EAAA,MAAM,KAAA,GAAQ,CAAC,GAAA,KAAgB,IAAA,CAAK,IAAI,GAAG,CAAA,IAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAE7D,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,YAAY,CAAA,IAAK,MAAM,OAAO,CAAA;AACtD,EAAA,MAAM,mBAAmB,KAAA,CAAM,mBAAmB,CAAA,EAAG,OAAA,CAAQ,OAAO,GAAG,CAAA;AAKvE,EAAA,IAAI,SAAA,IAAa,oBAAoB,IAAA,CAAK,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,gBAAA,IAAoB,EAAE,CAAA,CAAE,CAAA,EAAG;AACnF,IAAA,OAAO,EAAE,IAAA,EAAM,SAAA,EAAW,OAAA,EAAS,oBAAoB,MAAA,EAAU;AAAA,EACnE;AAEA,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,iBAAiB,CAAA;AAC1C,EAAA,MAAM,IAAA,GAAO,MAAM,MAAM,CAAA;AACzB,EAAA,IAAI,SAAS,UAAA,IAAc,MAAA,KAAW,YAAY,OAAO,EAAE,MAAM,UAAA,EAAW;AAI5E,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,QAAA,CAAS,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC5C,EAAA,IAAI,KAAK,QAAA,CAAS,UAAU,GAAG,OAAO,EAAE,MAAM,UAAA,EAAW;AAEzD,EAAA,OAAO,IAAA;AACT;AAuCO,IAAM,iBAAA,GAAoB;AAC1B,IAAM,yBAAA,GAA4B;AAElC,IAAM,wBAAA,GAA2B;AAejC,SAAS,eAAe,GAAA,EAA6C;AAC1E,EAAA,MAAM,MAAM,GAAA,IAAO,UAAA;AACnB,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AAEjB,EAAA,MAAM,IAAA,GAAO,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA;AAChC,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,GAAA,CAAI,iBAAiB,CAAA;AAC9C,EAAA,MAAM,YAAA,GAAe,IAAA,CAAK,GAAA,CAAI,yBAAyB,CAAA;AACvD,EAAA,IAAI,CAAC,WAAA,IAAe,CAAC,YAAA,EAAc,OAAO,IAAA;AAE1C,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,YAAA;AAAA,IACA,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,wBAAwB,CAAA,IAAK;AAAA,GAClD;AACF;AAGO,SAAS,kBAAA,CACd,MAAA,EACA,OAAA,EACA,QAAA,EACQ;AACR,EAAA,IAAI,CAAC,OAAA,CAAQ,WAAA,IAAe,CAAC,OAAA,CAAQ,cAAc,OAAO,MAAA;AAC1D,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,EAAgB;AACnC,EAAA,MAAA,CAAO,GAAA,CAAI,iBAAA,EAAmB,OAAA,CAAQ,WAAW,CAAA;AACjD,EAAA,MAAA,CAAO,GAAA,CAAI,yBAAA,EAA2B,OAAA,CAAQ,YAAY,CAAA;AAC1D,EAAA,IAAI,QAAA,EAAU,MAAA,CAAO,GAAA,CAAI,wBAAA,EAA0B,QAAQ,CAAA;AAG3D,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAChC,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,MAAA,CAAO,UAAU,CAAA,CAAA;AACrC;AAKO,SAAS,kBAAA,GAA2B;AACzC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACnC,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,MAAA,CAAO,SAAS,IAAI,CAAA;AACxC,EAAA,GAAA,CAAI,YAAA,CAAa,OAAO,iBAAiB,CAAA;AACzC,EAAA,IAAI,IAAI,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,MAAO,IAAA,GAAO,EAAA;AACvC,EAAA,MAAA,CAAO,OAAA,CAAQ,aAAa,MAAA,CAAO,OAAA,CAAQ,OAAO,EAAA,EAAI,GAAA,CAAI,UAAU,CAAA;AACtE;AAIO,SAAS,cAAA,CAAe,KAAa,MAAA,EAA4B;AACtE,EAAA,MAAM,OAAO,OAAO,MAAA,KAAW,WAAA,GAAc,kBAAA,GAAqB,OAAO,QAAA,CAAS,MAAA;AAClF,EAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAChC,EAAA,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,iBAAA,EAAmB,MAAM,CAAA;AACjD,EAAA,OAAO,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAA,GAAI,OAAO,QAAA,EAAS,GAAI,CAAA,EAAG,MAAA,CAAO,QAAQ,CAAA,EAAG,MAAA,CAAO,MAAM,CAAA,EAAG,OAAO,IAAI,CAAA,CAAA;AACzG;AAyBA,IAAM,UAAiC,EAAE,MAAA,EAAQ,MAAM,OAAA,EAAS,KAAA,EAAO,UAAU,KAAA,EAAM;AAEhF,SAAS,oBAAoB,KAAA,EAAkD;AACpF,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAW,eAAA,EAAiB,iBAAgB,GAAI,KAAA;AAEhE,EAAA,IAAI,MAAA,EAAQ,IAAA,KAAS,SAAA,EAAW,OAAO,EAAE,QAAQ,UAAA,EAAY,OAAA,EAAS,IAAA,EAAM,QAAA,EAAU,KAAA,EAAM;AAE5F,EAAA,IAAI,MAAA,EAAQ,SAAS,UAAA,EAAY;AAC/B,IAAA,IAAI,SAAA,SAAkB,EAAE,MAAA,EAAQ,YAAY,OAAA,EAAS,KAAA,EAAO,UAAU,IAAA,EAAK;AAE3E,IAAA,OAAO,EAAE,MAAA,EAAQ,UAAA,EAAY,SAAS,CAAC,eAAA,EAAiB,UAAU,KAAA,EAAM;AAAA,EAC1E;AAEA,EAAA,IAAI,CAAC,SAAA,IAAa,eAAA,IAAmB,eAAA,EAAiB;AACpD,IAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,OAAA,EAAS,KAAA,EAAO,UAAU,KAAA,EAAM;AAAA,EAC7D;AAEA,EAAA,OAAO,OAAA;AACT;;;AC3OO,IAAM,sBAAA,GAAyB;AAUtC,SAAS,gBAAgB,YAAA,EAQZ;AACX,EAAA,OAAO;AAAA,IACL,IAAI,YAAA,CAAa,EAAA;AAAA,IACjB,KAAA,EAAO,aAAa,KAAA,IAAS,EAAA;AAAA,IAC7B,QAAA,EACG,aAAa,aAAA,GAAgB,WAAW,KACxC,YAAA,CAAa,aAAA,GAAgB,MAAM,CAAA,IACpC,EAAA;AAAA,IACF,SAAA,EAAW,YAAA,CAAa,aAAA,GAAgB,YAAY,CAAA;AAAA;AAAA,IAEpD,iBAAiB,YAAA,CAAa,aAAA,GAAgB,sBAAsB,CAAA,KAAM,IAAA,IAAQ,CAAC,eAAA;AAAgB,GACrG;AACF;AAEA,SAAS,mBAAmB,OAAA,EAMZ;AACd,EAAA,OAAO;AAAA,IACL,aAAa,OAAA,CAAQ,YAAA;AAAA,IACrB,cAAc,OAAA,CAAQ,aAAA;AAAA,IACtB,SAAA,EACE,OAAA,CAAQ,UAAA,IACR,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,EAAI,GAAI,GAAI,CAAA,IAAK,OAAA,CAAQ,UAAA,IAAc,IAAA,CAAA;AAAA,IACzD,IAAA,EAAM,eAAA,CAAgB,OAAA,CAAQ,IAAI;AAAA,GACpC;AACF;AAEO,SAAS,0BAA0B,MAAA,EAAyC;AACjF,EAAA,MAAM,WAAW,MAAA,CAAO,cAAA,IAAkB,aAAa,MAAA,CAAO,WAAA,EAAa,OAAO,eAAe,CAAA;AAEjG,EAAA,OAAO;AAAA,IACL,MAAM,UAAA,GAAa;AACjB,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,EAAE,OAAA;AAAQ,OAClB,GAAI,MAAM,QAAA,CAAS,IAAA,CAAK,UAAA,EAAW;AACnC,MAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AACrB,MAAA,MAAM,MAAA,GAAS,mBAAmB,OAAO,CAAA;AACzC,MAAA,OAAO,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,SAAS,MAAA,EAAO;AAAA,IAC9C,CAAA;AAAA,IAEA,kBAAkB,EAAA,EAAI;AACpB,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,EAAE,YAAA;AAAa,UACnB,QAAA,CAAS,IAAA,CAAK,iBAAA,CAAkB,CAAC,QAAQ,OAAA,KAAY;AACvD,QAAA,EAAA,CAAG,OAAA,GAAU,eAAA,CAAgB,OAAA,CAAQ,IAAI,IAAI,IAAI,CAAA;AAAA,MACnD,CAAC,CAAA;AACD,MAAA,OAAO,MAAM,aAAa,WAAA,EAAY;AAAA,IACxC,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,QAAA,EAAU;AAC5B,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,QAAA,CAAS,IAAA,CAAK,kBAAA,CAAmB,EAAE,KAAA,EAAO,QAAA,EAAU,CAAA;AAClF,MAAA,IAAI,OAAO,MAAM,KAAA;AACjB,MAAA,OAAO,kBAAA,CAAmB,KAAK,OAAO,CAAA;AAAA,IACxC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAM,YAAA,CAAa,WAAA,EAAqB,YAAA,EAAsB;AAC5D,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,KAAU,MAAM,QAAA,CAAS,KAAK,UAAA,CAAW;AAAA,QACrD,YAAA,EAAc,WAAA;AAAA,QACd,aAAA,EAAe;AAAA,OAChB,CAAA;AACD,MAAA,IAAI,KAAA,IAAS,CAAC,IAAA,CAAK,OAAA,EAAS,OAAO,IAAA;AACnC,MAAA,OAAO,kBAAA,CAAmB,KAAK,OAAO,CAAA;AAAA,IACxC,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,QAAA,EAAU,QAAA,EAAU;AACtC,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,KAAU,MAAM,QAAA,CAAS,KAAK,MAAA,CAAO;AAAA,QACjD,KAAA;AAAA,QACA,QAAA;AAAA,QACA,SAAS,EAAE,IAAA,EAAM,EAAE,SAAA,EAAW,UAAS;AAAE,OAC1C,CAAA;AACD,MAAA,IAAI,OAAO,MAAM,KAAA;AAGjB,MAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,MAAM,IAAI,MAAM,iCAAiC,CAAA;AACjE,QAAA,OAAO;AAAA,UACL,WAAA,EAAa,EAAA;AAAA,UACb,YAAA,EAAc,EAAA;AAAA,UACd,SAAA,EAAW,CAAA;AAAA,UACX,IAAA,EAAM,eAAA,CAAgB,IAAA,CAAK,IAAI;AAAA,SACjC;AAAA,MACF;AAEA,MAAA,OAAO,kBAAA,CAAmB,KAAK,OAAO,CAAA;AAAA,IACxC,CAAA;AAAA,IAEA,MAAM,kBAAA,CAAmB,KAAA,EAAe,OAAA,EAAmC;AACzE,MAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,QAAA,CAAS,KAAK,MAAA,CAAO;AAAA,QAC3C,IAAA,EAAM,QAAA;AAAA,QACN,KAAA;AAAA,QACA,OAAA,EAAS;AAAA,UACP,eAAA,EACE,OAAA,EAAS,UAAA,IACT,MAAA,CAAO,WAAA,KACN,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,MAAA;AAAA;AAC9D,OACD,CAAA;AACD,MAAA,IAAI,OAAO,MAAM,KAAA;AAAA,IACnB,CAAA;AAAA,IAEA,MAAM,OAAA,GAAU;AACd,MAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,QAAA,CAAS,KAAK,OAAA,EAAQ;AAC9C,MAAA,IAAI,OAAO,MAAM,KAAA;AAAA,IACnB,CAAA;AAAA,IAEA,MAAM,gBAAgB,QAAA,EAAwB;AAC5C,MAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,QAAA,CAAS,KAAK,eAAA,CAAgB;AAAA,QACpD,QAAA;AAAA,QACA,OAAA,EAAS;AAAA,UACP,UAAA,EACE,MAAA,CAAO,WAAA,KACN,OAAO,MAAA,KAAW,cAAc,CAAA,EAAG,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,cAAA,CAAA,GAAmB,MAAA;AAAA;AACjF,OACD,CAAA;AACD,MAAA,IAAI,OAAO,MAAM,KAAA;AAAA,IACnB,CAAA;AAAA,IAEA,MAAM,aAAA,CAAc,KAAA,EAAO,OAAA,EAAS;AAQlC,MAAA,MAAM,QAAA,GAAW,OAAA,EAAS,UAAA,IAAc,MAAA,CAAO,gBAAA;AAC/C,MAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,QAAA,CAAS,IAAA,CAAK,sBAAsB,KAAA,EAAO;AAAA,QACjE,UAAA,EAAY,QAAA,GACR,cAAA,CAAe,QAAA,EAAU,UAAU,CAAA,GACnC,OAAO,MAAA,KAAW,WAAA,GAChB,CAAA,EAAG,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,CAAA,CAAA,GACzB;AAAA,OACP,CAAA;AACD,MAAA,IAAI,OAAO,MAAM,KAAA;AAAA,IACnB,CAAA;AAAA,IAEA,MAAM,eAAe,QAAA,EAAU;AAG7B,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,KAAU,MAAM,QAAA,CAAS,KAAK,UAAA,CAAW;AAAA,QACrD,QAAA;AAAA,QACA,IAAA,EAAM,EAAE,CAAC,sBAAsB,GAAG,KAAA;AAAM,OACzC,CAAA;AACD,MAAA,IAAI,OAAO,MAAM,KAAA;AACjB,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,EAAE,OAAA;AAAQ,OAClB,GAAI,MAAM,QAAA,CAAS,IAAA,CAAK,UAAA,EAAW;AACnC,MAAA,IAAI,OAAA,EAAS,OAAO,kBAAA,CAAmB,OAAO,CAAA;AAC9C,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAM,OAAO,MAAA;AACvB,MAAA,OAAO;AAAA,QACL,WAAA,EAAa,EAAA;AAAA,QACb,YAAA,EAAc,EAAA;AAAA,QACd,SAAA,EAAW,CAAA;AAAA,QACX,IAAA,EAAM,eAAA,CAAgB,IAAA,CAAK,IAAI;AAAA,OACjC;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,eAAe,GAAA,EAAK;AACxB,MAAA,MAAM,SAAS,GAAA,KAAQ,OAAO,WAAW,WAAA,GAAc,MAAA,CAAO,SAAS,IAAA,GAAO,EAAA,CAAA;AAC9E,MAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,MAAM,CAAA;AAG7B,MAAA,MAAM,QAAA,GAAW,IAAI,eAAA,CAAgB,MAAA,CAAO,KAAK,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAC,CAAA;AAClE,MAAA,MAAM,KAAA,GAAQ,CAAC,GAAA,KAAgB,MAAA,CAAO,YAAA,CAAa,IAAI,GAAG,CAAA,IAAK,QAAA,CAAS,GAAA,CAAI,GAAG,CAAA;AAE/E,MAAA,MAAM,IAAA,GAAO,MAAM,MAAM,CAAA;AACzB,MAAA,IAAI,IAAA,EAAM;AACR,QAAA,MAAM,EAAE,MAAM,KAAA,EAAM,GAAI,MAAM,QAAA,CAAS,IAAA,CAAK,uBAAuB,IAAI,CAAA;AACvE,QAAA,IAAI,OAAO,MAAM,KAAA;AACjB,QAAA,OAAO,IAAA,CAAK,OAAA,GAAU,kBAAA,CAAmB,IAAA,CAAK,OAAO,CAAA,GAAI,IAAA;AAAA,MAC3D;AAIA,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,YAAY,CAAA,IAAK,MAAM,OAAO,CAAA;AACtD,MAAA,MAAM,IAAA,GAAO,MAAM,MAAM,CAAA;AACzB,MAAA,IAAI,aAAa,IAAA,EAAM;AACrB,QAAA,MAAM,EAAE,IAAA,EAAM,KAAA,KAAU,MAAM,QAAA,CAAS,KAAK,SAAA,CAAU;AAAA,UACpD,UAAA,EAAY,SAAA;AAAA,UACZ;AAAA,SACD,CAAA;AACD,QAAA,IAAI,OAAO,MAAM,KAAA;AACjB,QAAA,OAAO,IAAA,CAAK,OAAA,GAAU,kBAAA,CAAmB,IAAA,CAAK,OAAO,CAAA,GAAI,IAAA;AAAA,MAC3D;AAEA,MAAA,MAAM;AAAA,QACJ,IAAA,EAAM,EAAE,OAAA;AAAQ,OAClB,GAAI,MAAM,QAAA,CAAS,IAAA,CAAK,UAAA,EAAW;AACnC,MAAA,OAAO,OAAA,GAAU,kBAAA,CAAmB,OAAO,CAAA,GAAI,IAAA;AAAA,IACjD,CAAA;AAAA,IAEA,MAAM,UAAA,CAAW,KAAA,EAAO,OAAA,EAAS;AAK/B,MAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,QAAA,CAAS,KAAK,aAAA,CAAc;AAAA,QAClD,KAAA;AAAA,QACA,OAAA,EAAS;AAAA,UACP,gBAAA,EAAkB,IAAA;AAAA,UAClB,eAAA,EACE,OAAA,EAAS,UAAA,KACR,OAAO,MAAA,KAAW,cAAc,CAAA,EAAG,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,CAAA,CAAA,GAAM,MAAA,CAAA;AAAA;AAAA;AAAA;AAAA,UAIlE,IAAA,EAAM,EAAE,GAAG,OAAA,EAAS,MAAM,CAAC,sBAAsB,GAAG,IAAA;AAAK;AAC3D,OACD,CAAA;AACD,MAAA,IAAI,OAAO,MAAM,KAAA;AAAA,IACnB;AAAA,GACF;AACF;;;ACjPA,IAAM,iBAAA,GAA8B;AAAA,EAClC,EAAA,EAAI,cAAA;AAAA,EACJ,KAAA,EAAO,eAAA;AAAA,EACP,QAAA,EAAU,WAAA;AAAA,EACV,IAAA,EAAM;AACR,CAAA;AAEA,IAAM,WAAA,GAAc,gBAAA;AAEpB,SAAS,WAAW,QAAA,EAA8B;AAChD,EAAA,OAAO;AAAA,IACL,IAAI,QAAA,CAAS,EAAA;AAAA,IACb,OAAO,QAAA,CAAS,KAAA;AAAA,IAChB,UAAU,QAAA,CAAS;AAAA,GACrB;AACF;AAEA,SAAS,kBAAkB,IAAA,EAA6B;AACtD,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,CAAA,WAAA,EAAc,IAAA,CAAK,EAAE,CAAA,CAAA;AAAA,IAClC,YAAA,EAAc,CAAA,aAAA,EAAgB,IAAA,CAAK,EAAE,CAAA,CAAA;AAAA,IACrC,WAAW,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,EAAI,GAAI,GAAI,CAAA,GAAI,IAAA;AAAA,IAC3C;AAAA,GACF;AACF;AAEA,SAAS,SAAA,GAA6D;AACpE,EAAA,IAAI;AACF,IAAA,IAAI,OAAO,YAAA,KAAiB,WAAA,EAAa,OAAO,IAAA;AAChD,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,OAAA,CAAQ,WAAW,CAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACvB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,UAAU,IAAA,EAA6D;AAC9E,EAAA,IAAI;AACF,IAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACzC,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,YAAA,CAAa,OAAA,CAAQ,WAAA,EAAa,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,IACxD,CAAA,MAAO;AACL,MAAA,YAAA,CAAa,WAAW,WAAW,CAAA;AAAA,IACrC;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAEO,SAAS,qBAAA,CAAsB,WAAqB,iBAAA,EAAgC;AACzF,EAAA,MAAM,SAAA,uBAAgB,GAAA,EAAqC;AAE3D,EAAA,SAAS,gBAAgB,IAAA,EAA6B;AACpD,IAAA,KAAA,MAAW,EAAA,IAAM,SAAA,EAAW,EAAA,CAAG,IAAI,CAAA;AAAA,EACrC;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,UAAA,GAAa;AACjB,MAAA,OAAO,SAAA,EAAU;AAAA,IACnB,CAAA;AAAA,IAEA,kBAAkB,EAAA,EAAI;AACpB,MAAA,SAAA,CAAU,IAAI,EAAE,CAAA;AAChB,MAAA,OAAO,MAAM;AACX,QAAA,SAAA,CAAU,OAAO,EAAE,CAAA;AAAA,MACrB,CAAA;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,SAAA,EAAW;AAI7B,MAAA,MAAM,SAAS,SAAA,EAAU;AACzB,MAAA,MAAM,OACJ,MAAA,IAAU,MAAA,CAAO,KAAK,KAAA,KAAU,KAAA,GAC5B,OAAO,IAAA,GACP;AAAA,QACE,IAAI,KAAA,KAAU,QAAA,CAAS,QAAQ,QAAA,CAAS,EAAA,GAAK,QAAQ,KAAK,CAAA,CAAA;AAAA,QAC1D,KAAA;AAAA,QACA,QAAA,EAAU,KAAA,KAAU,QAAA,CAAS,KAAA,GAAQ,QAAA,CAAS,QAAA,GAAY,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK;AAAA,OACnF;AACN,MAAA,MAAM,OAAA,GAAU,kBAAkB,IAAI,CAAA;AACtC,MAAA,SAAA,CAAU,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAC3B,MAAA,eAAA,CAAgB,IAAI,CAAA;AACpB,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,SAAA,EAAW,QAAA,EAAU;AAEvC,MAAA,MAAM,IAAA,GAAiB;AAAA,QACrB,EAAA,EAAI,QAAQ,KAAK,CAAA,CAAA;AAAA,QACjB,KAAA;AAAA,QACA,UAAU,QAAA,KAAa,KAAA,CAAM,MAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,SAAA;AAAA,OAChD;AACA,MAAA,MAAM,OAAA,GAAU,kBAAkB,IAAI,CAAA;AACtC,MAAA,SAAA,CAAU,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAC3B,MAAA,eAAA,CAAgB,IAAI,CAAA;AACpB,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IAEA,MAAM,OAAA,GAAU;AACd,MAAA,SAAA,CAAU,IAAI,CAAA;AACd,MAAA,eAAA,CAAgB,IAAI,CAAA;AAAA,IACtB,CAAA;AAAA,IAEA,MAAM,gBAAgB,SAAA,EAAW;AAE/B,MAAA,MAAM,IAAA,GAAO,WAAW,QAAQ,CAAA;AAChC,MAAA,MAAM,OAAA,GAAU,kBAAkB,IAAI,CAAA;AACtC,MAAA,SAAA,CAAU,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAC3B,MAAA,eAAA,CAAgB,IAAI,CAAA;AAAA,IACtB,CAAA;AAAA,IAEA,MAAM,cAAc,MAAA,EAAQ;AAAA,IAE5B,CAAA;AAAA,IAEA,MAAM,eAAe,SAAA,EAAW;AAC9B,MAAA,MAAM,SAAS,SAAA,EAAU;AACzB,MAAA,OAAO,MAAA,EAAQ,OAAA;AAAA,IACjB,CAAA;AAAA,IAEA,MAAM,cAAA,GAAiB;AACrB,MAAA,OAAO,SAAA,IAAa,OAAA,IAAW,IAAA;AAAA,IACjC,CAAA;AAAA,IAEA,MAAM,UAAA,CAAW,MAAA,EAAQ,QAAA,EAAU;AAAA,IAGnC;AAAA,GACF;AACF;AClHA,IAAM,YAAA,GAA0B;AAAA,EAC9B,IAAA,EAAM,IAAA;AAAA,EACN,OAAA,EAAS,IAAA;AAAA,EACT,SAAA,EAAW,IAAA;AAAA,EACX,eAAA,EAAiB,KAAA;AAAA,EACjB,KAAA,EAAO,IAAA;AAAA,EACP,mBAAA,EAAqB;AACvB,CAAA;AAEO,IAAM,YAAA,GAAe,MAAA,CAAkB,CAAC,GAAA,MAAS;AAAA,EACtD,GAAG,YAAA;AAAA,EAEH,OAAA,EAAS,CAAC,IAAA,KACR,GAAA,CAAI,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,KAAS,IAAA,EAAM,CAAA;AAAA,EAE9C,UAAA,EAAY,CAAC,OAAA,KACX,GAAA,CAAI;AAAA,IACF,OAAA;AAAA,IACA,IAAA,EAAM,SAAS,IAAA,IAAQ,IAAA;AAAA,IACvB,iBAAiB,OAAA,KAAY,IAAA;AAAA;AAAA;AAAA,IAG7B,GAAI,OAAA,GAAU,EAAE,mBAAA,EAAqB,IAAA,KAAS;AAAC,GAChD,CAAA;AAAA,EAEH,YAAY,CAAC,SAAA,KAAc,GAAA,CAAI,EAAE,WAAW,CAAA;AAAA,EAE5C,UAAU,CAAC,KAAA,KAAU,GAAA,CAAI,EAAE,OAAO,CAAA;AAAA,EAElC,wBAAwB,CAAC,mBAAA,KAAwB,GAAA,CAAI,EAAE,qBAAqB,CAAA;AAAA,EAE5E,KAAA,EAAO,MAAM,GAAA,CAAI,YAAY;AAC/B,CAAA,CAAE;AC7BF,IAAM,WAAA,GAAc,cAAuC,IAAI,CAAA;AAWxD,SAAS,YAAA,CAAa,EAAE,OAAA,EAAS,QAAA,EAAS,EAAsB;AACrE,EAAA,MAAM,EAAE,UAAA,EAAY,UAAA,EAAY,UAAU,sBAAA,EAAwB,KAAA,KAAU,YAAA,EAAa;AAGzF,EAAA,MAAM,UAAA,GAAa,OAAO,OAAO,CAAA;AACjC,EAAA,UAAA,CAAW,OAAA,GAAU,OAAA;AAErB,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,WAAA;AAEJ,IAAA,eAAe,IAAA,GAAO;AACpB,MAAA,IAAI;AACF,QAAA,UAAA,CAAW,IAAI,CAAA;AAOf,QAAA,MAAM,UAAU,cAAA,EAAe;AAC/B,QAAA,MAAM,KAAA,GAAS,WAAW,OAAA,CAA2C,YAAA;AACrE,QAAA,IAAI,OAAA,GAA8B,IAAA;AAClC,QAAA,IAAI,OAAA,IAAW,OAAO,KAAA,KAAU,UAAA,EAAY;AAC1C,UAAA,OAAA,GAAU,MAAM,MAAM,IAAA,CAAK,UAAA,CAAW,SAAS,OAAA,CAAQ,WAAA,EAAa,QAAQ,YAAY,CAAA;AACxF,UAAA,kBAAA,EAAmB;AAAA,QACrB;AAKA,QAAA,MAAM,MAAA,GAAS,UAAU,EAAE,OAAA,EAAS,SAAQ,GAAI,MAAM,UAAA,CAAW,OAAA,CAAQ,UAAA,EAAW;AACpF,QAAA,UAAA,CAAW,MAAA,EAAQ,WAAW,IAAI,CAAA;AAAA,MACpC,SAAS,GAAA,EAAK;AACZ,QAAA,QAAA,CAAS,GAAA,YAAe,QAAQ,GAAA,GAAM,IAAI,MAAM,MAAA,CAAO,GAAG,CAAC,CAAC,CAAA;AAAA,MAC9D,CAAA,SAAE;AACA,QAAA,UAAA,CAAW,KAAK,CAAA;AAAA,MAClB;AAGA,MAAA,WAAA,GAAc,UAAA,CAAW,OAAA,CAAQ,iBAAA,CAAkB,CAAC,IAAA,KAAS;AAC3D,QAAA,IAAI,CAAC,IAAA,EAAM;AACT,UAAA,KAAA,EAAM;AAEN,UAAA,UAAA,CAAW,KAAK,CAAA;AAChB,UAAA;AAAA,QACF;AAIA,QAAA,KAAK,UAAA,CAAW,OAAA,CAAQ,UAAA,EAAW,CAAE,KAAK,CAAC,MAAA,KAAW,UAAA,CAAW,MAAA,EAAQ,OAAA,IAAW,IAAI,CAAC,CAAA,CAAE,MAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAAA,MAC3G,CAAC,CAAA;AAAA,IACH;AAEA,IAAA,KAAK,IAAA,EAAK;AAEV,IAAA,OAAO,MAAM;AACX,MAAA,WAAA,IAAc;AAAA,IAChB,CAAA;AAAA,EAEF,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,KAAA,GAA0B;AAAA,IAC9B,MAAM,MAAA,CAAO,KAAA,EAAO,QAAA,EAAU;AAC5B,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAA,IAAI;AACF,QAAA,MAAM,UAAU,MAAM,UAAA,CAAW,OAAA,CAAQ,MAAA,CAAO,OAAO,QAAQ,CAAA;AAC/D,QAAA,UAAA,CAAW,OAAO,CAAA;AAClB,QAAA,OAAO,OAAA;AAAA,MACT,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,QAAA,QAAA,CAAS,KAAK,CAAA;AACd,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,KAAA,EAAO,QAAA,EAAU,QAAA,EAAU;AACtC,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAA,IAAI;AACF,QAAA,MAAM,UAAU,MAAM,UAAA,CAAW,QAAQ,MAAA,CAAO,KAAA,EAAO,UAAU,QAAQ,CAAA;AAKzE,QAAA,IAAI,CAAC,QAAQ,WAAA,EAAa;AACxB,UAAA,sBAAA,CAAuB,EAAE,OAAO,CAAA;AAChC,UAAA,OAAO,OAAA;AAAA,QACT;AACA,QAAA,UAAA,CAAW,OAAO,CAAA;AAClB,QAAA,OAAO,OAAA;AAAA,MACT,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,QAAA,QAAA,CAAS,KAAK,CAAA;AACd,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,GAAU;AACd,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAA,IAAI;AACF,QAAA,MAAM,UAAA,CAAW,QAAQ,OAAA,EAAQ;AACjC,QAAA,KAAA,EAAM;AACN,QAAA,UAAA,CAAW,KAAK,CAAA;AAAA,MAClB,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,QAAA,QAAA,CAAS,KAAK,CAAA;AACd,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,gBAAgB,QAAA,EAAU;AAC9B,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAA,IAAI;AACF,QAAA,MAAM,UAAA,CAAW,OAAA,CAAQ,eAAA,CAAgB,QAAQ,CAAA;AAAA,MACnD,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,QAAA,QAAA,CAAS,KAAK,CAAA;AACd,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,aAAA,CAAc,KAAA,EAAO,OAAA,EAAS;AAClC,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAA,IAAI;AACF,QAAA,MAAM,UAAA,CAAW,OAAA,CAAQ,aAAA,CAAc,KAAA,EAAO,OAAO,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,QAAA,QAAA,CAAS,KAAK,CAAA;AACd,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,eAAe,QAAA,EAAU;AAC7B,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAW,OAAA,CAAQ,iBAAiB,QAAQ,CAAA;AAClE,QAAA,IAAI,OAAA,aAAoB,OAAO,CAAA;AAC/B,QAAA,OAAO,OAAA;AAAA,MACT,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,QAAA,QAAA,CAAS,KAAK,CAAA;AACd,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,eAAe,GAAA,EAAK;AACxB,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAA,IAAI;AACF,QAAA,MAAM,UAAU,MAAM,UAAA,CAAW,OAAA,CAAQ,cAAA,GAAiB,GAAG,CAAA,IAAK,IAAA;AAClE,QAAA,IAAI,OAAA,aAAoB,OAAO,CAAA;AAC/B,QAAA,OAAO,OAAA;AAAA,MACT,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,QAAA,QAAA,CAAS,KAAK,CAAA;AACd,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,UAAA,CAAW,KAAA,EAAO,OAAA,EAAS;AAC/B,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAA,IAAI;AACF,QAAA,MAAM,UAAA,CAAW,OAAA,CAAQ,UAAA,GAAa,KAAA,EAAO,OAAO,CAAA;AAAA,MACtD,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,QAAA,QAAA,CAAS,KAAK,CAAA;AACd,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,kBAAA,CAAmB,KAAA,EAAO,OAAA,EAAS;AACvC,MAAA,QAAA,CAAS,IAAI,CAAA;AACb,MAAA,IAAI,CAAC,UAAA,CAAW,OAAA,CAAQ,kBAAA,EAAoB,OAAO,KAAA;AACnD,MAAA,IAAI;AACF,QAAA,MAAM,UAAA,CAAW,OAAA,CAAQ,kBAAA,CAAmB,KAAA,EAAO,OAAO,CAAA;AAC1D,QAAA,OAAO,IAAA;AAAA,MACT,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,QAAA,QAAA,CAAS,KAAK,CAAA;AACd,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IAEA,wBAAA,GAA2B;AACzB,MAAA,sBAAA,CAAuB,IAAI,CAAA;AAC3B,MAAA,QAAA,CAAS,IAAI,CAAA;AAAA,IACf;AAAA,GACF;AAEA,EAAA,uBAAO,GAAA,CAAC,WAAA,CAAY,QAAA,EAAZ,EAAqB,OAAe,QAAA,EAAS,CAAA;AACvD;AAMO,SAAS,OAAA,GAAU;AACxB,EAAA,MAAM,GAAA,GAAM,WAAW,WAAW,CAAA;AAClC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AAEA,EAAA,MAAM,EAAE,MAAM,OAAA,EAAS,SAAA,EAAW,iBAAiB,KAAA,EAAO,mBAAA,KAAwB,YAAA,EAAa;AAE/F,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA,eAAA;AAAA,IACA,KAAA;AAAA,IACA,mBAAA;AAAA,IACA,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,SAAS,GAAA,CAAI,OAAA;AAAA,IACb,iBAAiB,GAAA,CAAI,eAAA;AAAA,IACrB,eAAe,GAAA,CAAI,aAAA;AAAA,IACnB,gBAAgB,GAAA,CAAI,cAAA;AAAA,IACpB,gBAAgB,GAAA,CAAI,cAAA;AAAA,IACpB,YAAY,GAAA,CAAI,UAAA;AAAA,IAChB,oBAAoB,GAAA,CAAI,kBAAA;AAAA,IACxB,0BAA0B,GAAA,CAAI;AAAA,GAChC;AACF","file":"index.js","sourcesContent":["// ---------------------------------------------------------------------------\n// Auth link intent — what the URL the user just arrived on is asking for.\n//\n// A Supabase recovery / magic link lands on the app with the tokens in the URL\n// FRAGMENT (implicit flow is the supabase-js default), e.g.\n//\n//   https://app.example.com/#access_token=…&refresh_token=…&type=recovery\n//\n// GoTrue then consumes that fragment and wipes it (`window.location.hash = ''`)\n// as soon as the client initialises — so by the time React renders, the reason\n// the user is here is gone. Hence the module-load snapshot: this file is\n// imported long before any createClient() call, so it always sees the original\n// URL.\n//\n// Errors arrive the same way, without a `type`:\n//\n//   https://app.example.com/#error=access_denied&error_code=otp_expired&…\n// ---------------------------------------------------------------------------\n\nexport type AuthUrlIntent =\n  /** A password-recovery link — the user must choose a new password now. */\n  | { kind: 'recovery' }\n  /** A one-time link that was already used or has expired. */\n  | { kind: 'expired'; message?: string }\n\n/** Query param apps can put on their own redirect URLs to force the\n *  set-password screen (e.g. when they override `resetPasswordUrl`). */\nexport const AUTH_INTENT_PARAM = 'fayz_auth'\n\n/** Path segment the SDK historically used as the reset-password redirect.\n *  Still honoured so apps that configured it keep working. */\nconst RESET_PATH = '/auth/reset-password'\n\ninterface UrlSnapshot {\n  pathname: string\n  search: string\n  hash: string\n}\n\nfunction snapshot(): UrlSnapshot | null {\n  // `window` without a `location` is a real environment, not a hypothetical:\n  // the SSR shim the manifest derivation runs under defines the global and not\n  // the URL. This module is imported at the top of the auth context, so it is\n  // evaluated anywhere the context is — including there, where reading\n  // `window.location.pathname` threw and took the whole derivation with it.\n  const loc = typeof window === 'undefined' ? undefined : window.location\n  if (!loc) return null\n  return {\n    pathname: loc.pathname ?? '',\n    search: loc.search ?? '',\n    hash: loc.hash ?? '',\n  }\n}\n\n/** Taken at import time — before any Supabase client can strip the fragment. */\nconst initialUrl: UrlSnapshot | null = snapshot()\n\n/** The fragment can be either auth params (`access_token=…&type=recovery`) or a\n *  hash-router path (`#/dashboard`). Only the former parses into pairs. */\nfunction hashParams(hash: string): URLSearchParams {\n  const raw = hash.replace(/^#/, '')\n  if (!raw || !raw.includes('=')) return new URLSearchParams()\n  return new URLSearchParams(raw)\n}\n\nexport function readAuthUrlIntent(url?: UrlSnapshot | null): AuthUrlIntent | null {\n  const loc = url ?? initialUrl\n  if (!loc) return null\n\n  const query = new URLSearchParams(loc.search)\n  const hash = hashParams(loc.hash)\n  const param = (key: string) => hash.get(key) ?? query.get(key)\n\n  const errorCode = param('error_code') ?? param('error')\n  const errorDescription = param('error_description')?.replace(/\\+/g, ' ')\n  // A dead one-time link (`error_code=otp_expired`). Deliberately narrow: an\n  // OAuth `access_denied` is a different failure and must not land here. GoTrue\n  // does not echo `type` on error redirects, so recovery and invite links are\n  // indistinguishable at this point — the screen offers a fresh link either way.\n  if (errorCode && /otp|expired|link/i.test(`${errorCode} ${errorDescription ?? ''}`)) {\n    return { kind: 'expired', message: errorDescription ?? undefined }\n  }\n\n  const marker = query.get(AUTH_INTENT_PARAM)\n  const type = param('type')\n  if (type === 'recovery' || marker === 'recovery') return { kind: 'recovery' }\n\n  // `/auth/reset-password` with no tokens at all: the user opened the reset URL\n  // directly, or the tokens were already consumed by a previous page load.\n  const path = loc.pathname.replace(/\\/+$/, '')\n  if (path.endsWith(RESET_PATH)) return { kind: 'recovery' }\n\n  return null\n}\n\n// ---------------------------------------------------------------------------\n// App handoff — arriving from a sibling application already signed in.\n//\n// The products share one Supabase project now, so the same person is one\n// `auth.users` row across all of them. They do NOT share a session: each app is\n// its own origin, and supabase-js keeps the session in that origin's\n// localStorage. Same account, same database, and still a password prompt — which\n// is the friction the switcher exists to remove.\n//\n// So the switcher carries the session over in the URL FRAGMENT, which is the\n// same channel GoTrue's own magic links use and for the same reason: a fragment\n// is never sent to a server, never reaches an access log, and never lands in a\n// Referer header. The module-load snapshot above is what makes reading it\n// reliable — supabase-js wipes the hash as soon as it initialises.\n//\n// Two things keep this from being a hole, and both are required:\n//\n//   • The DESTINATION only adopts a handoff whose tokens actually verify — it\n//     calls setSession, so a forged fragment fails at GoTrue, not at us.\n//   • The SOURCE only ever writes this fragment to an origin listed in\n//     `app.apps.url`. A tile is not a free-form link.\n//\n// The honest alternative is one origin with paths per app (/app/resto,\n// /app/loja), where localStorage is shared and no token travels at all. That is\n// a deployment change, and this is the same result without one.\n// ---------------------------------------------------------------------------\n\n/**\n * Fragment keys carrying a sibling app's session.\n *\n * Two keys and not one packed value: a JWT is `header.payload.signature`, so\n * any separator that looked natural — a dot above all — also occurs inside the\n * access token. Packing them cost an afternoon and produced `Invalid JWT\n * structure` at the far end, which reads like a forged token rather than like a\n * string that was cut in the wrong place. Both keys are required, so a\n * half-copied fragment is still a miss.\n */\nexport const APP_HANDOFF_PARAM = 'handoff'\nexport const APP_HANDOFF_REFRESH_PARAM = 'handoff_r'\n/** Fragment key naming the account to land in, so the arrival is not a guess. */\nexport const APP_HANDOFF_TENANT_PARAM = 'account'\n\nexport interface AppHandoff {\n  accessToken: string\n  refreshToken: string\n  /** Which account the user was looking at. Null means \"whichever you'd pick\". */\n  tenantId: string | null\n}\n\n/**\n * The session a sibling app handed over, if this page load is such an arrival.\n *\n * Returns null for every ordinary load, which is the overwhelming majority —\n * so a caller can ask on every boot without paying for it.\n */\nexport function readAppHandoff(url?: UrlSnapshot | null): AppHandoff | null {\n  const loc = url ?? initialUrl\n  if (!loc) return null\n\n  const hash = hashParams(loc.hash)\n  const accessToken = hash.get(APP_HANDOFF_PARAM)\n  const refreshToken = hash.get(APP_HANDOFF_REFRESH_PARAM)\n  if (!accessToken || !refreshToken) return null\n\n  return {\n    accessToken,\n    refreshToken,\n    tenantId: hash.get(APP_HANDOFF_TENANT_PARAM) || null,\n  }\n}\n\n/** Pack a session into the fragment the destination will read. */\nexport function buildAppHandoffUrl(\n  appUrl: string,\n  session: { accessToken: string; refreshToken: string },\n  tenantId?: string | null,\n): string {\n  if (!session.accessToken || !session.refreshToken) return appUrl\n  const params = new URLSearchParams()\n  params.set(APP_HANDOFF_PARAM, session.accessToken)\n  params.set(APP_HANDOFF_REFRESH_PARAM, session.refreshToken)\n  if (tenantId) params.set(APP_HANDOFF_TENANT_PARAM, tenantId)\n  // The hash is replaced, not appended to: an app URL that already carries a\n  // hash-router path would otherwise arrive with both, and neither would parse.\n  const base = appUrl.split('#')[0]\n  return `${base}#${params.toString()}`\n}\n\n/** Strip auth leftovers from the address bar once the flow is finished, so a\n *  reload does not put the user back on the set-password screen (and so the\n *  hash router gets a clean slate). */\nexport function clearAuthUrlTokens(): void {\n  if (typeof window === 'undefined') return\n  const url = new URL(window.location.href)\n  url.searchParams.delete(AUTH_INTENT_PARAM)\n  if (url.hash.includes('=')) url.hash = ''\n  window.history.replaceState(window.history.state, '', url.toString())\n}\n\n/** Add the intent marker to a redirect URL. Absolute or relative; existing\n *  params are preserved. */\nexport function withAuthIntent(url: string, intent: 'recovery'): string {\n  const base = typeof window === 'undefined' ? 'http://localhost' : window.location.origin\n  const parsed = new URL(url, base)\n  parsed.searchParams.set(AUTH_INTENT_PARAM, intent)\n  return /^https?:\\/\\//i.test(url) ? parsed.toString() : `${parsed.pathname}${parsed.search}${parsed.hash}`\n}\n\n// ---------------------------------------------------------------------------\n// Whether the user owes us a password before they reach the app. Pure, so the\n// decision is testable without a browser; the React wrapper lives in\n// @fayz-ai/plugin-auth (usePasswordSetupGate).\n// ---------------------------------------------------------------------------\n\nexport type PasswordSetupReason = 'recovery' | 'invite'\n\nexport interface PasswordSetupInput {\n  intent: AuthUrlIntent | null\n  /** Session still resolving — the link's tokens are exchanged asynchronously. */\n  isLoading: boolean\n  isAuthenticated: boolean\n  /** AuthUser.mustSetPassword — an invitee who never chose one. */\n  mustSetPassword?: boolean\n}\n\nexport interface PasswordSetupDecision {\n  reason: PasswordSetupReason | null\n  expired: boolean\n  checking: boolean\n}\n\nconst NOTHING: PasswordSetupDecision = { reason: null, expired: false, checking: false }\n\nexport function decidePasswordSetup(input: PasswordSetupInput): PasswordSetupDecision {\n  const { intent, isLoading, isAuthenticated, mustSetPassword } = input\n\n  if (intent?.kind === 'expired') return { reason: 'recovery', expired: true, checking: false }\n\n  if (intent?.kind === 'recovery') {\n    if (isLoading) return { reason: 'recovery', expired: false, checking: true }\n    // A recovery link with no session behind it was already used or has expired.\n    return { reason: 'recovery', expired: !isAuthenticated, checking: false }\n  }\n\n  if (!isLoading && isAuthenticated && mustSetPassword) {\n    return { reason: 'invite', expired: false, checking: false }\n  }\n\n  return NOTHING\n}\n","import { createClient, type SupabaseClient } from '@supabase/supabase-js'\nimport type { AuthAdapter, AuthUser, AuthSession, AuthProvider } from '@fayz-ai/core'\nimport { isImpersonating } from '@fayz-ai/core'\nimport { withAuthIntent } from '../lib/url-intent'\n\n/** Metadata flag stamped on invited users (created by a magic link, so they have\n *  no password yet) and cleared the moment they choose one. Metadata, not a URL\n *  param: it survives the link being opened later, in another browser, or twice —\n *  and it needs no new entry in Supabase's redirect allow-list. */\nexport const MUST_SET_PASSWORD_FLAG = 'fayz_must_set_password'\n\nexport interface SupabaseAuthConfig {\n  supabaseUrl: string\n  supabaseAnonKey: string\n  supabaseClient?: SupabaseClient\n  callbackUrl?: string\n  resetPasswordUrl?: string\n}\n\nfunction mapSupabaseUser(supabaseUser: {\n  id: string\n  email?: string | null\n  created_at?: string\n  updated_at?: string | null\n  email_confirmed_at?: string | null\n  user_metadata?: Record<string, unknown>\n  app_metadata?: { providers?: string[]; provider?: string }\n}): AuthUser {\n  return {\n    id: supabaseUser.id,\n    email: supabaseUser.email ?? '',\n    fullName:\n      (supabaseUser.user_metadata?.['full_name'] as string | undefined) ??\n      (supabaseUser.user_metadata?.['name'] as string | undefined) ??\n      '',\n    avatarUrl: supabaseUser.user_metadata?.['avatar_url'] as string | undefined,\n    // An admin viewing as this person must not be pushed into choosing THEIR password.\n    mustSetPassword: supabaseUser.user_metadata?.[MUST_SET_PASSWORD_FLAG] === true && !isImpersonating(),\n  }\n}\n\nfunction mapSupabaseSession(session: {\n  access_token: string\n  refresh_token?: string\n  expires_at?: number\n  expires_in?: number\n  user: Parameters<typeof mapSupabaseUser>[0]\n}): AuthSession {\n  return {\n    accessToken: session.access_token,\n    refreshToken: session.refresh_token,\n    expiresAt:\n      session.expires_at ??\n      Math.floor(Date.now() / 1000) + (session.expires_in ?? 3600),\n    user: mapSupabaseUser(session.user),\n  }\n}\n\nexport function createSupabaseAuthAdapter(config: SupabaseAuthConfig): AuthAdapter {\n  const supabase = config.supabaseClient ?? createClient(config.supabaseUrl, config.supabaseAnonKey)\n\n  return {\n    async getSession() {\n      const {\n        data: { session },\n      } = await supabase.auth.getSession()\n      if (!session) return null\n      const mapped = mapSupabaseSession(session)\n      return { user: mapped.user, session: mapped }\n    },\n\n    onAuthStateChange(cb) {\n      const {\n        data: { subscription },\n      } = supabase.auth.onAuthStateChange((_event, session) => {\n        cb(session ? mapSupabaseUser(session.user) : null)\n      })\n      return () => subscription.unsubscribe()\n    },\n\n    async signIn(email, password) {\n      const { data, error } = await supabase.auth.signInWithPassword({ email, password })\n      if (error) throw error\n      return mapSupabaseSession(data.session)\n    },\n\n    /**\n     * Adopt a session handed over by a sibling application (see url-intent).\n     *\n     * `setSession` is the verification, not a formality: GoTrue validates the\n     * tokens and rotates the refresh token, so a forged or replayed fragment\n     * fails here rather than being trusted because it looked well-formed.\n     */\n    async adoptSession(accessToken: string, refreshToken: string) {\n      const { data, error } = await supabase.auth.setSession({\n        access_token: accessToken,\n        refresh_token: refreshToken,\n      })\n      if (error || !data.session) return null\n      return mapSupabaseSession(data.session)\n    },\n\n    async signUp(email, password, fullName) {\n      const { data, error } = await supabase.auth.signUp({\n        email,\n        password,\n        options: { data: { full_name: fullName } },\n      })\n      if (error) throw error\n\n      // When email confirmation is required, session is null\n      if (!data.session) {\n        if (!data.user) throw new Error('Signup failed: no user returned')\n        return {\n          accessToken: '',\n          refreshToken: '',\n          expiresAt: 0,\n          user: mapSupabaseUser(data.user),\n        }\n      }\n\n      return mapSupabaseSession(data.session)\n    },\n\n    async resendConfirmation(email: string, options?: { redirectTo?: string }) {\n      const { error } = await supabase.auth.resend({\n        type: 'signup',\n        email,\n        options: {\n          emailRedirectTo:\n            options?.redirectTo ??\n            config.callbackUrl ??\n            (typeof window !== 'undefined' ? window.location.origin : undefined),\n        },\n      })\n      if (error) throw error\n    },\n\n    async signOut() {\n      const { error } = await supabase.auth.signOut()\n      if (error) throw error\n    },\n\n    async signInWithOAuth(provider: AuthProvider) {\n      const { error } = await supabase.auth.signInWithOAuth({\n        provider: provider as 'google' | 'github' | 'apple',\n        options: {\n          redirectTo:\n            config.callbackUrl ??\n            (typeof window !== 'undefined' ? `${window.location.origin}/auth/callback` : undefined),\n        },\n      })\n      if (error) throw error\n    },\n\n    async resetPassword(email, options) {\n      // Root, not `/auth/reset-password`: the shell recognises a recovery link by\n      // the link's own `type=recovery` param, so the flow needs no route of its\n      // own — and the app root is the one URL every deployment already serves and\n      // every Supabase project already allow-lists (a URL outside the allow-list\n      // is silently swapped for the project's Site URL, i.e. another app).\n      // A host that DOES point recovery somewhere else gets the explicit intent\n      // marker, since we cannot assume its landing page carries the params.\n      const explicit = options?.redirectTo ?? config.resetPasswordUrl\n      const { error } = await supabase.auth.resetPasswordForEmail(email, {\n        redirectTo: explicit\n          ? withAuthIntent(explicit, 'recovery')\n          : typeof window !== 'undefined'\n            ? `${window.location.origin}/`\n            : undefined,\n      })\n      if (error) throw error\n    },\n\n    async updatePassword(password) {\n      // Clearing the flag in the same call as the password: one round-trip, and\n      // no window where the password is set but the screen still demands one.\n      const { data, error } = await supabase.auth.updateUser({\n        password,\n        data: { [MUST_SET_PASSWORD_FLAG]: false },\n      })\n      if (error) throw error\n      const {\n        data: { session },\n      } = await supabase.auth.getSession()\n      if (session) return mapSupabaseSession(session)\n      if (!data.user) return undefined\n      return {\n        accessToken: '',\n        refreshToken: '',\n        expiresAt: 0,\n        user: mapSupabaseUser(data.user),\n      }\n    },\n\n    async handleCallback(url) {\n      const target = url ?? (typeof window !== 'undefined' ? window.location.href : '')\n      const parsed = new URL(target)\n      // The fragment carries the params on the implicit flow; the query on PKCE\n      // and on `{{ .TokenHash }}`-style e-mail templates.\n      const fragment = new URLSearchParams(parsed.hash.replace(/^#/, ''))\n      const param = (key: string) => parsed.searchParams.get(key) ?? fragment.get(key)\n\n      const code = param('code')\n      if (code) {\n        const { data, error } = await supabase.auth.exchangeCodeForSession(code)\n        if (error) throw error\n        return data.session ? mapSupabaseSession(data.session) : null\n      }\n\n      // Templates that link straight at the app with a token instead of routing\n      // through GoTrue's /verify never produce a session on their own.\n      const tokenHash = param('token_hash') ?? param('token')\n      const type = param('type')\n      if (tokenHash && type) {\n        const { data, error } = await supabase.auth.verifyOtp({\n          token_hash: tokenHash,\n          type: type as 'recovery' | 'invite' | 'magiclink' | 'signup' | 'email',\n        })\n        if (error) throw error\n        return data.session ? mapSupabaseSession(data.session) : null\n      }\n\n      const {\n        data: { session },\n      } = await supabase.auth.getSession()\n      return session ? mapSupabaseSession(session) : null\n    },\n\n    async inviteUser(email, options) {\n      // Native, edge-function-free invite: a passwordless magic link. Sends the\n      // e-mail + creates the auth user (anon-callable, no service-role/admin).\n      // Membership is NOT granted from `data` (a client could forge it) — the\n      // accept-time trigger trusts the RLS-protected public.invitations row.\n      const { error } = await supabase.auth.signInWithOtp({\n        email,\n        options: {\n          shouldCreateUser: true,\n          emailRedirectTo:\n            options?.redirectTo ??\n            (typeof window !== 'undefined' ? `${window.location.origin}/` : undefined),\n          // `data` only lands on users the OTP actually creates, which is exactly\n          // who needs a password: the shell holds them on the set-password screen\n          // until they choose one, so they can sign in normally from then on.\n          data: { ...options?.data, [MUST_SET_PASSWORD_FLAG]: true },\n        },\n      })\n      if (error) throw error\n    },\n  }\n}\n","import type { AuthAdapter, AuthUser, AuthSession } from '@fayz-ai/core'\n\nexport interface MockUser {\n  id: string\n  email: string\n  fullName: string\n  role?: string\n}\n\nconst DEFAULT_MOCK_USER: MockUser = {\n  id: 'mock-user-id',\n  email: 'demo@fayz.dev',\n  fullName: 'Demo User',\n  role: 'admin',\n}\n\nconst STORAGE_KEY = 'fayz:mock-auth'\n\nfunction toAuthUser(mockUser: MockUser): AuthUser {\n  return {\n    id: mockUser.id,\n    email: mockUser.email,\n    fullName: mockUser.fullName,\n  }\n}\n\nfunction createMockSession(user: AuthUser): AuthSession {\n  return {\n    accessToken: `mock-token-${user.id}`,\n    refreshToken: `mock-refresh-${user.id}`,\n    expiresAt: Math.floor(Date.now() / 1000) + 3600,\n    user,\n  }\n}\n\nfunction getStored(): { user: AuthUser; session: AuthSession } | null {\n  try {\n    if (typeof localStorage === 'undefined') return null\n    const raw = localStorage.getItem(STORAGE_KEY)\n    if (!raw) return null\n    return JSON.parse(raw) as { user: AuthUser; session: AuthSession }\n  } catch {\n    return null\n  }\n}\n\nfunction setStored(data: { user: AuthUser; session: AuthSession } | null): void {\n  try {\n    if (typeof localStorage === 'undefined') return\n    if (data) {\n      localStorage.setItem(STORAGE_KEY, JSON.stringify(data))\n    } else {\n      localStorage.removeItem(STORAGE_KEY)\n    }\n  } catch {\n    // SSR or storage unavailable — silently skip\n  }\n}\n\nexport function createMockAuthAdapter(mockUser: MockUser = DEFAULT_MOCK_USER): AuthAdapter {\n  const listeners = new Set<(user: AuthUser | null) => void>()\n\n  function notifyListeners(user: AuthUser | null): void {\n    for (const cb of listeners) cb(user)\n  }\n\n  return {\n    async getSession() {\n      return getStored()\n    },\n\n    onAuthStateChange(cb) {\n      listeners.add(cb)\n      return () => {\n        listeners.delete(cb)\n      }\n    },\n\n    async signIn(email, _password) {\n      // Mock accepts any credentials, but the identity FOLLOWS the email —\n      // storefront customers and saas users keep their own purchase/session\n      // history instead of all becoming the configured demo user.\n      const stored = getStored()\n      const user: AuthUser =\n        stored && stored.user.email === email\n          ? stored.user\n          : {\n              id: email === mockUser.email ? mockUser.id : `mock-${email}`,\n              email,\n              fullName: email === mockUser.email ? mockUser.fullName : (email.split('@')[0] ?? 'Cliente'),\n            }\n      const session = createMockSession(user)\n      setStored({ user, session })\n      notifyListeners(user)\n      return session\n    },\n\n    async signUp(email, _password, fullName) {\n      // Mock signup creates a user from the provided details\n      const user: AuthUser = {\n        id: `mock-${email}`,\n        email,\n        fullName: fullName || (email.split('@')[0] ?? 'Cliente'),\n      }\n      const session = createMockSession(user)\n      setStored({ user, session })\n      notifyListeners(user)\n      return session\n    },\n\n    async signOut() {\n      setStored(null)\n      notifyListeners(null)\n    },\n\n    async signInWithOAuth(_provider) {\n      // Mock OAuth signs in as the configured user\n      const user = toAuthUser(mockUser)\n      const session = createMockSession(user)\n      setStored({ user, session })\n      notifyListeners(user)\n    },\n\n    async resetPassword(_email) {\n      // No-op in mock\n    },\n\n    async updatePassword(_password) {\n      const stored = getStored()\n      return stored?.session\n    },\n\n    async handleCallback() {\n      return getStored()?.session ?? null\n    },\n\n    async inviteUser(_email, _options) {\n      // No admin path in mock — the org mock adapter still records the pending\n      // invite so the Team UI shows it. Delivery is a no-op locally.\n    },\n  }\n}\n","import { create } from 'zustand'\nimport type { AuthUser, AuthSession } from '@fayz-ai/core'\n\nexport interface AuthState {\n  user: AuthUser | null\n  session: AuthSession | null\n  isLoading: boolean\n  isAuthenticated: boolean\n  error: Error | null\n  /**\n   * Set when a sign-up succeeded but the account cannot be used until the\n   * address is confirmed. Deliberately NOT a session: an account in this state\n   * has no access token, and treating it as signed in is what used to let\n   * someone into the app where every request came back 401.\n   */\n  pendingVerification: { email: string } | null\n}\n\nexport interface AuthStore extends AuthState {\n  setUser: (user: AuthUser | null) => void\n  setSession: (session: AuthSession | null) => void\n  setLoading: (isLoading: boolean) => void\n  setError: (error: Error | null) => void\n  setPendingVerification: (pending: { email: string } | null) => void\n  reset: () => void\n}\n\nconst initialState: AuthState = {\n  user: null,\n  session: null,\n  isLoading: true,\n  isAuthenticated: false,\n  error: null,\n  pendingVerification: null,\n}\n\nexport const useAuthStore = create<AuthStore>((set) => ({\n  ...initialState,\n\n  setUser: (user) =>\n    set({ user, isAuthenticated: user !== null }),\n\n  setSession: (session) =>\n    set({\n      session,\n      user: session?.user ?? null,\n      isAuthenticated: session !== null,\n      // A real session arriving is the confirmation landing — the notice it\n      // would otherwise keep showing is now about an address already verified.\n      ...(session ? { pendingVerification: null } : {}),\n    }),\n\n  setLoading: (isLoading) => set({ isLoading }),\n\n  setError: (error) => set({ error }),\n\n  setPendingVerification: (pendingVerification) => set({ pendingVerification }),\n\n  reset: () => set(initialState),\n}))\n","import React, { createContext, useContext, useEffect, useRef } from 'react'\nimport type { AuthAdapter, AuthProvider as OAuthProvider, AuthSession } from '@fayz-ai/core'\nimport { useAuthStore } from './store'\nimport { readAppHandoff, clearAuthUrlTokens } from './lib/url-intent'\n\n/** Adapters that can adopt a session a sibling app handed over. Optional by\n *  design: the mock adapter and any third-party one simply do not have it. */\ninterface HandoffCapableAdapter {\n  adoptSession(accessToken: string, refreshToken: string): Promise<AuthSession | null>\n}\n\n// ---------------------------------------------------------------------------\n// Context\n// ---------------------------------------------------------------------------\n\ninterface AuthContextValue {\n  signIn: (email: string, password: string) => Promise<AuthSession>\n  signUp: (email: string, password: string, fullName: string) => Promise<AuthSession>\n  signOut: () => Promise<void>\n  signInWithOAuth: (provider: OAuthProvider) => Promise<void>\n  resetPassword: (email: string, options?: { redirectTo?: string }) => Promise<void>\n  updatePassword: (password: string) => Promise<AuthSession | void>\n  handleCallback: (url?: string) => Promise<AuthSession | null>\n  inviteUser: (email: string, options?: { redirectTo?: string; data?: Record<string, unknown> }) => Promise<void>\n  /** Re-send the sign-up confirmation. Resolves `false` when the adapter has no such path. */\n  resendConfirmation: (email: string, options?: { redirectTo?: string }) => Promise<boolean>\n  /** Abandon the pending sign-up so the login screen goes back to its form. */\n  clearPendingVerification: () => void\n}\n\nconst AuthContext = createContext<AuthContextValue | null>(null)\n\n// ---------------------------------------------------------------------------\n// Provider\n// ---------------------------------------------------------------------------\n\nexport interface AuthProviderProps {\n  adapter: AuthAdapter\n  children: React.ReactNode\n}\n\nexport function AuthProvider({ adapter, children }: AuthProviderProps) {\n  const { setSession, setLoading, setError, setPendingVerification, reset } = useAuthStore()\n\n  // Keep a stable ref to the adapter so the effect only runs once on mount\n  const adapterRef = useRef(adapter)\n  adapterRef.current = adapter\n\n  useEffect(() => {\n    let unsubscribe: (() => void) | undefined\n\n    async function init() {\n      try {\n        setLoading(true)\n\n        // Arriving from a sibling app's switcher: adopt the session it handed\n        // over BEFORE asking for our own, because this origin has none. Adapters\n        // without the capability (mock, tests) simply fall through, and a\n        // handoff GoTrue rejects also falls through — to the login screen, which\n        // is the correct answer for tokens that do not verify.\n        const handoff = readAppHandoff()\n        const adopt = (adapterRef.current as Partial<HandoffCapableAdapter>).adoptSession\n        let adopted: AuthSession | null = null\n        if (handoff && typeof adopt === 'function') {\n          adopted = await adopt.call(adapterRef.current, handoff.accessToken, handoff.refreshToken)\n          clearAuthUrlTokens()\n        }\n\n        // Falling through on a failed adoption is deliberate: getSession() then\n        // finds nothing and the user meets the login screen, which is the right\n        // answer for tokens that did not verify.\n        const result = adopted ? { session: adopted } : await adapterRef.current.getSession()\n        setSession(result?.session ?? null)\n      } catch (err) {\n        setError(err instanceof Error ? err : new Error(String(err)))\n      } finally {\n        setLoading(false)\n      }\n\n      // Subscribe to future auth state changes\n      unsubscribe = adapterRef.current.onAuthStateChange((user) => {\n        if (!user) {\n          reset()\n          // Keep isLoading false after an explicit sign-out\n          setLoading(false)\n          return\n        }\n        // Positive change (adapter-driven sign-in — e.g. an external callback,\n        // another tab, or a direct adapter.signUp bridge) — sync the session so\n        // consumers reflect it even when the call didn't go through ctx.signIn.\n        void adapterRef.current.getSession().then((result) => setSession(result?.session ?? null)).catch(() => {})\n      })\n    }\n\n    void init()\n\n    return () => {\n      unsubscribe?.()\n    }\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [])\n\n  const value: AuthContextValue = {\n    async signIn(email, password) {\n      setError(null)\n      try {\n        const session = await adapterRef.current.signIn(email, password)\n        setSession(session)\n        return session\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err))\n        setError(error)\n        throw error\n      }\n    },\n\n    async signUp(email, password, fullName) {\n      setError(null)\n      try {\n        const session = await adapterRef.current.signUp(email, password, fullName)\n        // A project with \"confirm email\" on returns a session with no access\n        // token — the account exists but cannot do anything yet. Storing it as\n        // a session marked the user authenticated, the AuthGate waved them into\n        // the app, and every request 401'd. Park it as pending instead.\n        if (!session.accessToken) {\n          setPendingVerification({ email })\n          return session\n        }\n        setSession(session)\n        return session\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err))\n        setError(error)\n        throw error\n      }\n    },\n\n    async signOut() {\n      setError(null)\n      try {\n        await adapterRef.current.signOut()\n        reset()\n        setLoading(false)\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err))\n        setError(error)\n        throw error\n      }\n    },\n\n    async signInWithOAuth(provider) {\n      setError(null)\n      try {\n        await adapterRef.current.signInWithOAuth(provider)\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err))\n        setError(error)\n        throw error\n      }\n    },\n\n    async resetPassword(email, options) {\n      setError(null)\n      try {\n        await adapterRef.current.resetPassword(email, options)\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err))\n        setError(error)\n        throw error\n      }\n    },\n\n    async updatePassword(password) {\n      setError(null)\n      try {\n        const session = await adapterRef.current.updatePassword?.(password)\n        if (session) setSession(session)\n        return session\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err))\n        setError(error)\n        throw error\n      }\n    },\n\n    async handleCallback(url) {\n      setError(null)\n      try {\n        const session = await adapterRef.current.handleCallback?.(url) ?? null\n        if (session) setSession(session)\n        return session\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err))\n        setError(error)\n        throw error\n      }\n    },\n\n    async inviteUser(email, options) {\n      setError(null)\n      try {\n        await adapterRef.current.inviteUser?.(email, options)\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err))\n        setError(error)\n        throw error\n      }\n    },\n\n    async resendConfirmation(email, options) {\n      setError(null)\n      if (!adapterRef.current.resendConfirmation) return false\n      try {\n        await adapterRef.current.resendConfirmation(email, options)\n        return true\n      } catch (err) {\n        const error = err instanceof Error ? err : new Error(String(err))\n        setError(error)\n        throw error\n      }\n    },\n\n    clearPendingVerification() {\n      setPendingVerification(null)\n      setError(null)\n    },\n  }\n\n  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>\n}\n\n// ---------------------------------------------------------------------------\n// Hook\n// ---------------------------------------------------------------------------\n\nexport function useAuth() {\n  const ctx = useContext(AuthContext)\n  if (!ctx) {\n    throw new Error('useAuth must be used inside <AuthProvider>')\n  }\n\n  const { user, session, isLoading, isAuthenticated, error, pendingVerification } = useAuthStore()\n\n  return {\n    user,\n    session,\n    isLoading,\n    isAuthenticated,\n    error,\n    pendingVerification,\n    signIn: ctx.signIn,\n    signUp: ctx.signUp,\n    signOut: ctx.signOut,\n    signInWithOAuth: ctx.signInWithOAuth,\n    resetPassword: ctx.resetPassword,\n    updatePassword: ctx.updatePassword,\n    handleCallback: ctx.handleCallback,\n    inviteUser: ctx.inviteUser,\n    resendConfirmation: ctx.resendConfirmation,\n    clearPendingVerification: ctx.clearPendingVerification,\n  }\n}\n"]}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}

package/dist/lib/runtime.d.ts

@@ -0,0 +1,6 @@
+import type { AuthAdapter } from '@fayz-ai/core';
+import { type AuthPluginOptions, type ResolvedAuthPlugin } from '../domain/auth-config';
+export declare function resolveAuthAdapter(options?: AuthPluginOptions): AuthAdapter;
+export declare function createAuthRuntime(options?: AuthPluginOptions): ResolvedAuthPlugin;
+export declare function createAuthPlugin(options?: AuthPluginOptions): ResolvedAuthPlugin;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/lib/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/lib/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAGhD,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAA;AAQ9B,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,iBAAsB,GAAG,WAAW,CAoB/E;AAED,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,iBAAsB,GAAG,kBAAkB,CAcrF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,GAAG,kBAAkB,CAEpF"}

package/dist/lib/runtime.js

@@ -0,0 +1,51 @@
+import { chooseAuthProvider, resolveAuthRoutes, resolveOAuth } from '../chunk-4HVM2UJS.js';
+import { createMockAuthAdapter } from '../chunk-CV4LQYNX.js';
+import { createSupabaseAuthAdapter } from '../chunk-BGCCXJJA.js';
+import '../chunk-2MO4QTQA.js';
+
+// src/lib/runtime.ts
+function absoluteUrl(path) {
+  if (typeof window === "undefined") return void 0;
+  if (/^https?:\/\//.test(path)) return path;
+  return `${window.location.origin}${path.startsWith("/") ? path : `/${path}`}`;
+}
+function resolveAuthAdapter(options = {}) {
+  const provider = chooseAuthProvider(options);
+  if (typeof provider === "object") return provider;
+  if (provider !== "supabase") return createMockAuthAdapter();
+  const url = options.supabase?.url;
+  const anonKey = options.supabase?.anonKey;
+  if (!url || !anonKey) {
+    throw new Error('plugin-auth provider="supabase" requires supabase.url and supabase.anonKey.');
+  }
+  return createSupabaseAuthAdapter({
+    supabaseUrl: url,
+    supabaseAnonKey: anonKey,
+    supabaseClient: options.supabase?.client,
+    callbackUrl: options.supabase?.callbackUrl ?? absoluteUrl(options.routes?.callback ?? "/auth/callback"),
+    // Left undefined, the adapter points recovery at the app root, which needs no extra redirect allow-list entry.
+    resetPasswordUrl: options.supabase?.resetPasswordUrl ?? (options.routes?.resetPassword ? absoluteUrl(options.routes.resetPassword) : void 0)
+  });
+}
+function createAuthRuntime(options = {}) {
+  return {
+    kind: "auth",
+    adapter: resolveAuthAdapter(options),
+    requireAuth: options.requireAuth ?? true,
+    layout: options.layout ?? "split",
+    logo: options.logo,
+    tagline: options.tagline,
+    description: options.description,
+    loginAmbassadors: options.loginAmbassadors,
+    loginAmbassadorsLabel: options.loginAmbassadorsLabel,
+    oauth: resolveOAuth(options.oauth),
+    routes: resolveAuthRoutes(options.routes)
+  };
+}
+function createAuthPlugin(options = {}) {
+  return createAuthRuntime(options);
+}
+
+export { createAuthPlugin, createAuthRuntime, resolveAuthAdapter };
+//# sourceMappingURL=runtime.js.map
+//# sourceMappingURL=runtime.js.map

package/dist/lib/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lib/runtime.ts"],"names":[],"mappings":";;;;;;AAWA,SAAS,YAAY,IAAA,EAAkC;AACrD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,MAAA;AAC1C,EAAA,IAAI,cAAA,CAAe,IAAA,CAAK,IAAI,CAAA,EAAG,OAAO,IAAA;AACtC,EAAA,OAAO,CAAA,EAAG,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,CAAA,CAAA;AAC7E;AAEO,SAAS,kBAAA,CAAmB,OAAA,GAA6B,EAAC,EAAgB;AAC/E,EAAA,MAAM,QAAA,GAAW,mBAAmB,OAAO,CAAA;AAC3C,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,EAAU,OAAO,QAAA;AACzC,EAAA,IAAI,QAAA,KAAa,UAAA,EAAY,OAAO,qBAAA,EAAsB;AAE1D,EAAA,MAAM,GAAA,GAAM,QAAQ,QAAA,EAAU,GAAA;AAC9B,EAAA,MAAM,OAAA,GAAU,QAAQ,QAAA,EAAU,OAAA;AAClC,EAAA,IAAI,CAAC,GAAA,IAAO,CAAC,OAAA,EAAS;AACpB,IAAA,MAAM,IAAI,MAAM,6EAA6E,CAAA;AAAA,EAC/F;AACA,EAAA,OAAO,yBAAA,CAA0B;AAAA,IAC/B,WAAA,EAAa,GAAA;AAAA,IACb,eAAA,EAAiB,OAAA;AAAA,IACjB,cAAA,EAAgB,QAAQ,QAAA,EAAU,MAAA;AAAA,IAClC,WAAA,EAAa,QAAQ,QAAA,EAAU,WAAA,IAAe,YAAY,OAAA,CAAQ,MAAA,EAAQ,YAAY,gBAAgB,CAAA;AAAA;AAAA,IAEtG,gBAAA,EACE,OAAA,CAAQ,QAAA,EAAU,gBAAA,KACjB,OAAA,CAAQ,MAAA,EAAQ,aAAA,GAAgB,WAAA,CAAY,OAAA,CAAQ,MAAA,CAAO,aAAa,CAAA,GAAI,MAAA;AAAA,GAChF,CAAA;AACH;AAEO,SAAS,iBAAA,CAAkB,OAAA,GAA6B,EAAC,EAAuB;AACrF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAA;AAAA,IACN,OAAA,EAAS,mBAAmB,OAAO,CAAA;AAAA,IACnC,WAAA,EAAa,QAAQ,WAAA,IAAe,IAAA;AAAA,IACpC,MAAA,EAAQ,QAAQ,MAAA,IAAU,OAAA;AAAA,IAC1B,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,SAAS,OAAA,CAAQ,OAAA;AAAA,IACjB,aAAa,OAAA,CAAQ,WAAA;AAAA,IACrB,kBAAkB,OAAA,CAAQ,gBAAA;AAAA,IAC1B,uBAAuB,OAAA,CAAQ,qBAAA;AAAA,IAC/B,KAAA,EAAO,YAAA,CAAa,OAAA,CAAQ,KAAK,CAAA;AAAA,IACjC,MAAA,EAAQ,iBAAA,CAAkB,OAAA,CAAQ,MAAM;AAAA,GAC1C;AACF;AAEO,SAAS,gBAAA,CAAiB,OAAA,GAA6B,EAAC,EAAuB;AACpF,EAAA,OAAO,kBAAkB,OAAO,CAAA;AAClC","file":"runtime.js","sourcesContent":["import type { AuthAdapter } from '@fayz-ai/core'\nimport { createMockAuthAdapter } from '../data/mock'\nimport { createSupabaseAuthAdapter } from '../data/supabase'\nimport {\n  chooseAuthProvider,\n  resolveAuthRoutes,\n  resolveOAuth,\n  type AuthPluginOptions,\n  type ResolvedAuthPlugin,\n} from '../domain/auth-config'\n\nfunction absoluteUrl(path: string): string | undefined {\n  if (typeof window === 'undefined') return undefined\n  if (/^https?:\\/\\//.test(path)) return path\n  return `${window.location.origin}${path.startsWith('/') ? path : `/${path}`}`\n}\n\nexport function resolveAuthAdapter(options: AuthPluginOptions = {}): AuthAdapter {\n  const provider = chooseAuthProvider(options)\n  if (typeof provider === 'object') return provider\n  if (provider !== 'supabase') return createMockAuthAdapter()\n\n  const url = options.supabase?.url\n  const anonKey = options.supabase?.anonKey\n  if (!url || !anonKey) {\n    throw new Error('plugin-auth provider=\"supabase\" requires supabase.url and supabase.anonKey.')\n  }\n  return createSupabaseAuthAdapter({\n    supabaseUrl: url,\n    supabaseAnonKey: anonKey,\n    supabaseClient: options.supabase?.client,\n    callbackUrl: options.supabase?.callbackUrl ?? absoluteUrl(options.routes?.callback ?? '/auth/callback'),\n    // Left undefined, the adapter points recovery at the app root, which needs no extra redirect allow-list entry.\n    resetPasswordUrl:\n      options.supabase?.resetPasswordUrl ??\n      (options.routes?.resetPassword ? absoluteUrl(options.routes.resetPassword) : undefined),\n  })\n}\n\nexport function createAuthRuntime(options: AuthPluginOptions = {}): ResolvedAuthPlugin {\n  return {\n    kind: 'auth',\n    adapter: resolveAuthAdapter(options),\n    requireAuth: options.requireAuth ?? true,\n    layout: options.layout ?? 'split',\n    logo: options.logo,\n    tagline: options.tagline,\n    description: options.description,\n    loginAmbassadors: options.loginAmbassadors,\n    loginAmbassadorsLabel: options.loginAmbassadorsLabel,\n    oauth: resolveOAuth(options.oauth),\n    routes: resolveAuthRoutes(options.routes),\n  }\n}\n\nexport function createAuthPlugin(options: AuthPluginOptions = {}): ResolvedAuthPlugin {\n  return createAuthRuntime(options)\n}\n"]}

package/dist/lib/url-intent.d.ts

@@ -1,13 +1,4 @@
-export type AuthUrlIntent = 
-/** A password-recovery link — the user must choose a new password now. */
-{
-    kind: 'recovery';
-}
-/** A one-time link that was already used or has expired. */
- | {
-    kind: 'expired';
-    message?: string;
-};
+import type { AuthUrlIntent } from '../domain/auth-link';
 /** Query param apps can put on their own redirect URLs to force the
  *  set-password screen (e.g. when they override `resetPasswordUrl`). */
 export declare const AUTH_INTENT_PARAM = "fayz_auth";
@@ -56,20 +47,5 @@ export declare function clearAuthUrlTokens(): void;
 /** Add the intent marker to a redirect URL. Absolute or relative; existing
  *  params are preserved. */
 export declare function withAuthIntent(url: string, intent: 'recovery'): string;
-export type PasswordSetupReason = 'recovery' | 'invite';
-export interface PasswordSetupInput {
-    intent: AuthUrlIntent | null;
-    /** Session still resolving — the link's tokens are exchanged asynchronously. */
-    isLoading: boolean;
-    isAuthenticated: boolean;
-    /** AuthUser.mustSetPassword — an invitee who never chose one. */
-    mustSetPassword?: boolean;
-}
-export interface PasswordSetupDecision {
-    reason: PasswordSetupReason | null;
-    expired: boolean;
-    checking: boolean;
-}
-export declare function decidePasswordSetup(input: PasswordSetupInput): PasswordSetupDecision;
 export {};
 //# sourceMappingURL=url-intent.d.ts.map

package/dist/lib/url-intent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url-intent.d.ts","sourceRoot":"","sources":["../../src/lib/url-intent.ts"],"names":[],"mappings":"AAmBA,MAAM,MAAM,aAAa;AACvB,0EAA0E;AACxE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE;AACtB,4DAA4D;GAC1D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzC;wEACwE;AACxE,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAM5C,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;CACb;AA4BD,wBAAgB,iBAAiB,CAAC,GAAG,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CA4BhF;AA6BD;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,YAAY,CAAA;AAC1C,eAAO,MAAM,yBAAyB,cAAc,CAAA;AACpD,iFAAiF;AACjF,eAAO,MAAM,wBAAwB,YAAY,CAAA;AAEjD,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,UAAU,GAAG,IAAI,CAc1E;AAED,kEAAkE;AAClE,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EACtD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CAUR;AAED;;uCAEuC;AACvC,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED;4BAC4B;AAC5B,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAKtE;AAQD,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,QAAQ,CAAA;AAEvD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC5B,gFAAgF;IAChF,SAAS,EAAE,OAAO,CAAA;IAClB,eAAe,EAAE,OAAO,CAAA;IACxB,iEAAiE;IACjE,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAID,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,qBAAqB,CAgBpF"}
+{"version":3,"file":"url-intent.d.ts","sourceRoot":"","sources":["../../src/lib/url-intent.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAExD;wEACwE;AACxE,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAM5C,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;CACb;AA4BD,wBAAgB,iBAAiB,CAAC,GAAG,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CA4BhF;AA6BD;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,YAAY,CAAA;AAC1C,eAAO,MAAM,yBAAyB,cAAc,CAAA;AACpD,iFAAiF;AACjF,eAAO,MAAM,wBAAwB,YAAY,CAAA;AAEjD,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,UAAU,GAAG,IAAI,CAc1E;AAED,kEAAkE;AAClE,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EACtD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CAUR;AAED;;uCAEuC;AACvC,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED;4BAC4B;AAC5B,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAKtE"}

package/dist/lib/url-intent.js

@@ -0,0 +1,3 @@
+export { APP_HANDOFF_PARAM, APP_HANDOFF_REFRESH_PARAM, APP_HANDOFF_TENANT_PARAM, AUTH_INTENT_PARAM, buildAppHandoffUrl, clearAuthUrlTokens, readAppHandoff, readAuthUrlIntent, withAuthIntent } from '../chunk-2MO4QTQA.js';
+//# sourceMappingURL=url-intent.js.map
+//# sourceMappingURL=url-intent.js.map

package/dist/lib/url-intent.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"url-intent.js"}

package/dist/store.js

@@ -0,0 +1,3 @@
+export { useAuthStore } from './chunk-OI74ER2Z.js';
+//# sourceMappingURL=store.js.map
+//# sourceMappingURL=store.js.map

package/dist/store.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"store.js"}

package/dist/views/AuthCallbackPage.d.ts

@@ -0,0 +1,7 @@
+import * as React from 'react';
+export interface AuthCallbackPageProps {
+    onSuccess?: () => void;
+    onError?: (error: Error) => void;
+}
+export declare function AuthCallbackPage({ onSuccess, onError }: AuthCallbackPageProps): React.JSX.Element;
+//# sourceMappingURL=AuthCallbackPage.d.ts.map

package/dist/views/AuthCallbackPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthCallbackPage.d.ts","sourceRoot":"","sources":["../../src/views/AuthCallbackPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAG9B,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;CACjC;AAED,wBAAgB,gBAAgB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,qBAAqB,qBA8B7E"}

package/dist/views/AuthCallbackPage.js

@@ -0,0 +1,33 @@
+import { useAuth } from '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-2MO4QTQA.js';
+import * as React from 'react';
+import { jsx, jsxs } from 'react/jsx-runtime';
+
+function AuthCallbackPage({ onSuccess, onError }) {
+  const { handleCallback } = useAuth();
+  const [error, setError] = React.useState(null);
+  React.useEffect(() => {
+    let cancelled = false;
+    handleCallback(typeof window === "undefined" ? void 0 : window.location.href).then(() => {
+      if (!cancelled) onSuccess?.();
+    }).catch((err) => {
+      const errorObject = err instanceof Error ? err : new Error(String(err));
+      if (!cancelled) {
+        setError(errorObject.message);
+        onError?.(errorObject);
+      }
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [handleCallback, onError, onSuccess]);
+  return /* @__PURE__ */ jsx("div", { className: "flex min-h-screen items-center justify-center bg-background p-6 text-center", children: /* @__PURE__ */ jsxs("div", { children: [
+    /* @__PURE__ */ jsx("h1", { className: "text-xl font-semibold text-foreground", children: error ? "Authentication failed" : "Completing sign in..." }),
+    error && /* @__PURE__ */ jsx("p", { className: "mt-2 text-sm text-destructive", children: error })
+  ] }) });
+}
+
+export { AuthCallbackPage };
+//# sourceMappingURL=AuthCallbackPage.js.map
+//# sourceMappingURL=AuthCallbackPage.js.map

package/dist/views/AuthCallbackPage.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/views/AuthCallbackPage.tsx"],"names":[],"mappings":";;;;;;AAQO,SAAS,gBAAA,CAAiB,EAAE,SAAA,EAAW,OAAA,EAAQ,EAA0B;AAC9E,EAAA,MAAM,EAAE,cAAA,EAAe,GAAI,OAAA,EAAQ;AACnC,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAU,eAAwB,IAAI,CAAA;AAE5D,EAAM,gBAAU,MAAM;AACpB,IAAA,IAAI,SAAA,GAAY,KAAA;AAChB,IAAA,cAAA,CAAe,OAAO,WAAW,WAAA,GAAc,MAAA,GAAY,OAAO,QAAA,CAAS,IAAI,CAAA,CAC5E,IAAA,CAAK,MAAM;AACV,MAAA,IAAI,CAAC,WAAW,SAAA,IAAY;AAAA,IAC9B,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,GAAA,KAAiB;AACvB,MAAA,MAAM,WAAA,GAAc,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AACtE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,QAAA,CAAS,YAAY,OAAO,CAAA;AAC5B,QAAA,OAAA,GAAU,WAAW,CAAA;AAAA,MACvB;AAAA,IACF,CAAC,CAAA;AACH,IAAA,OAAO,MAAM;AACX,MAAA,SAAA,GAAY,IAAA;AAAA,IACd,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,cAAA,EAAgB,OAAA,EAAS,SAAS,CAAC,CAAA;AAEvC,EAAA,uBACE,GAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6EAAA,EACb,+BAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,oBAAA,GAAA,CAAC,IAAA,EAAA,EAAG,SAAA,EAAU,uCAAA,EAAyC,QAAA,EAAA,KAAA,GAAQ,0BAA0B,uBAAA,EAAwB,CAAA;AAAA,IAChH,KAAA,oBAAS,GAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,iCAAiC,QAAA,EAAA,KAAA,EAAM;AAAA,GAAA,EAChE,CAAA,EACF,CAAA;AAEJ","file":"AuthCallbackPage.js","sourcesContent":["import * as React from 'react'\nimport { useAuth } from '../context'\n\nexport interface AuthCallbackPageProps {\n  onSuccess?: () => void\n  onError?: (error: Error) => void\n}\n\nexport function AuthCallbackPage({ onSuccess, onError }: AuthCallbackPageProps) {\n  const { handleCallback } = useAuth()\n  const [error, setError] = React.useState<string | null>(null)\n\n  React.useEffect(() => {\n    let cancelled = false\n    handleCallback(typeof window === 'undefined' ? undefined : window.location.href)\n      .then(() => {\n        if (!cancelled) onSuccess?.()\n      })\n      .catch((err: unknown) => {\n        const errorObject = err instanceof Error ? err : new Error(String(err))\n        if (!cancelled) {\n          setError(errorObject.message)\n          onError?.(errorObject)\n        }\n      })\n    return () => {\n      cancelled = true\n    }\n  }, [handleCallback, onError, onSuccess])\n\n  return (\n    <div className=\"flex min-h-screen items-center justify-center bg-background p-6 text-center\">\n      <div>\n        <h1 className=\"text-xl font-semibold text-foreground\">{error ? 'Authentication failed' : 'Completing sign in...'}</h1>\n        {error && <p className=\"mt-2 text-sm text-destructive\">{error}</p>}\n      </div>\n    </div>\n  )\n}\n"]}

package/dist/views/AuthGate.d.ts

@@ -0,0 +1,9 @@
+import type * as React from 'react';
+import { type LoginPageProps } from './LoginPage';
+export interface AuthGateProps extends LoginPageProps {
+    requireAuth?: boolean;
+    loadingFallback?: React.ReactNode;
+    children: React.ReactNode;
+}
+export declare function AuthGate({ requireAuth, loadingFallback, children, ...loginProps }: AuthGateProps): React.JSX.Element;
+//# sourceMappingURL=AuthGate.d.ts.map

package/dist/views/AuthGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthGate.d.ts","sourceRoot":"","sources":["../../src/views/AuthGate.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,KAAK,MAAM,OAAO,CAAA;AAEnC,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5D,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,eAAe,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACjC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAC1B;AAED,wBAAgB,QAAQ,CAAC,EAAE,WAAkB,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,EAAE,aAAa,qBAevG"}

package/dist/views/AuthGate.js

@@ -0,0 +1,28 @@
+import { LoginPage } from '../chunk-7JYNJQJJ.js';
+import '../chunk-W35GQEGU.js';
+import '../chunk-HKILBDG2.js';
+import '../chunk-WZVZMNLB.js';
+import '../chunk-QJRTW7Q3.js';
+import '../chunk-KLQDHFVS.js';
+import '../chunk-4HVM2UJS.js';
+import '../chunk-W7565FXD.js';
+import { useAuth } from '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-REU4D5UF.js';
+import '../chunk-SMFXGZN7.js';
+import '../chunk-55RFOMW5.js';
+import '../chunk-2MO4QTQA.js';
+import { jsx, Fragment } from 'react/jsx-runtime';
+
+function AuthGate({ requireAuth = true, loadingFallback, children, ...loginProps }) {
+  const { isAuthenticated, isLoading } = useAuth();
+  if (!requireAuth || isAuthenticated) return /* @__PURE__ */ jsx(Fragment, { children });
+  if (isLoading) {
+    return /* @__PURE__ */ jsx(Fragment, { children: loadingFallback ?? /* @__PURE__ */ jsx("div", { className: "flex min-h-screen items-center justify-center bg-background", children: /* @__PURE__ */ jsx("span", { className: "text-sm text-muted-foreground", children: "Loading..." }) }) });
+  }
+  return /* @__PURE__ */ jsx(LoginPage, { ...loginProps });
+}
+
+export { AuthGate };
+//# sourceMappingURL=AuthGate.js.map
+//# sourceMappingURL=AuthGate.js.map

package/dist/views/AuthGate.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/views/AuthGate.tsx"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAUO,SAAS,QAAA,CAAS,EAAE,WAAA,GAAc,IAAA,EAAM,iBAAiB,QAAA,EAAU,GAAG,YAAW,EAAkB;AACxG,EAAA,MAAM,EAAE,eAAA,EAAiB,SAAA,EAAU,GAAI,OAAA,EAAQ;AAC/C,EAAA,IAAI,CAAC,WAAA,IAAe,eAAA,EAAiB,uCAAU,QAAA,EAAS,CAAA;AACxD,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,uBACE,GAAA,CAAA,QAAA,EAAA,EACG,QAAA,EAAA,eAAA,oBACC,GAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,6DAAA,EACb,QAAA,kBAAA,GAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,+BAAA,EAAgC,QAAA,EAAA,YAAA,EAAU,CAAA,EAC5D,CAAA,EAEJ,CAAA;AAAA,EAEJ;AACA,EAAA,uBAAO,GAAA,CAAC,SAAA,EAAA,EAAW,GAAG,UAAA,EAAY,CAAA;AACpC","file":"AuthGate.js","sourcesContent":["import type * as React from 'react'\nimport { useAuth } from '../context'\nimport { LoginPage, type LoginPageProps } from './LoginPage'\n\nexport interface AuthGateProps extends LoginPageProps {\n  requireAuth?: boolean\n  loadingFallback?: React.ReactNode\n  children: React.ReactNode\n}\n\nexport function AuthGate({ requireAuth = true, loadingFallback, children, ...loginProps }: AuthGateProps) {\n  const { isAuthenticated, isLoading } = useAuth()\n  if (!requireAuth || isAuthenticated) return <>{children}</>\n  if (isLoading) {\n    return (\n      <>\n        {loadingFallback ?? (\n          <div className=\"flex min-h-screen items-center justify-center bg-background\">\n            <span className=\"text-sm text-muted-foreground\">Loading...</span>\n          </div>\n        )}\n      </>\n    )\n  }\n  return <LoginPage {...loginProps} />\n}\n"]}

package/dist/views/ForgotPasswordForm.d.ts

@@ -0,0 +1,18 @@
+import * as React from 'react';
+export interface ForgotPasswordFormProps {
+    redirectTo?: string;
+    onSent?: (email: string) => void;
+    onBackToLogin?: () => void;
+    /** Pre-filled with whatever the user already typed on the login form. */
+    initialEmail?: string;
+    onEmailChange?: (email: string) => void;
+    /** Copy overrides — the set-password screen reuses this form to hand out a
+     *  fresh link, where "Send reset link" is the wrong label. */
+    emailLabel?: string;
+    submitLabel?: string;
+    sendingLabel?: string;
+    sentLabel?: string;
+    backLabel?: string;
+}
+export declare function ForgotPasswordForm({ redirectTo, onSent, onBackToLogin, initialEmail, onEmailChange, emailLabel, submitLabel, sendingLabel, sentLabel, backLabel, }: ForgotPasswordFormProps): React.JSX.Element;
+//# sourceMappingURL=ForgotPasswordForm.d.ts.map

package/dist/views/ForgotPasswordForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ForgotPasswordForm.d.ts","sourceRoot":"","sources":["../../src/views/ForgotPasswordForm.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAK9B,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAA;IAC1B,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACvC;kEAC8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,kBAAkB,CAAC,EACjC,UAAU,EACV,MAAM,EACN,aAAa,EACb,YAAiB,EACjB,aAAa,EACb,UAAkC,EAClC,WAAiE,EACjE,YAA8C,EAC9C,SAA0F,EAC1F,SAAsD,GACvD,EAAE,uBAAuB,qBAiDzB"}

package/dist/views/ForgotPasswordForm.js

@@ -0,0 +1,7 @@
+export { ForgotPasswordForm } from '../chunk-W7565FXD.js';
+import '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-55RFOMW5.js';
+import '../chunk-2MO4QTQA.js';
+//# sourceMappingURL=ForgotPasswordForm.js.map
+//# sourceMappingURL=ForgotPasswordForm.js.map

package/dist/views/ForgotPasswordForm.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"ForgotPasswordForm.js"}

package/dist/views/LoginForm.d.ts

@@ -0,0 +1,16 @@
+import * as React from 'react';
+import type { OAuthProviderKey } from '../domain/auth-config';
+export interface LoginFormProps {
+    onSuccess?: () => void;
+    onForgotPassword?: () => void;
+    showOAuth?: boolean;
+    oauthProviders?: OAuthProviderKey[];
+    /** Providers rendered as "em breve" — declared but not wired yet. */
+    oauthComingSoon?: OAuthProviderKey[];
+    /** Seeds the field, so switching between login and recovery never asks for the
+     *  e-mail the user already typed. */
+    initialEmail?: string;
+    onEmailChange?: (email: string) => void;
+}
+export declare function LoginForm({ onSuccess, onForgotPassword, showOAuth, oauthProviders, oauthComingSoon, initialEmail, onEmailChange, }: LoginFormProps): React.JSX.Element;
+//# sourceMappingURL=LoginForm.d.ts.map

package/dist/views/LoginForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginForm.d.ts","sourceRoot":"","sources":["../../src/views/LoginForm.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAI9B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAI7D,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAA;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAA;IACnC,qEAAqE;IACrE,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAA;IACpC;yCACqC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CACxC;AAED,wBAAgB,SAAS,CAAC,EACxB,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,eAAe,EACf,YAAiB,EACjB,aAAa,GACd,EAAE,cAAc,qBAqEhB"}

package/dist/views/LoginForm.js

@@ -0,0 +1,8 @@
+export { LoginForm } from '../chunk-W35GQEGU.js';
+import '../chunk-WZVZMNLB.js';
+import '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-55RFOMW5.js';
+import '../chunk-2MO4QTQA.js';
+//# sourceMappingURL=LoginForm.js.map
+//# sourceMappingURL=LoginForm.js.map

package/dist/views/LoginForm.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"LoginForm.js"}

package/dist/views/LoginPage.d.ts

@@ -0,0 +1,34 @@
+import * as React from 'react';
+import { type AuthLayout, type LoginAmbassador, type OAuthProviderKey } from '../domain/auth-config';
+export interface LoginPageProps {
+    appName?: string;
+    logo?: React.ReactNode;
+    loginLogo?: React.ReactNode;
+    layout?: AuthLayout;
+    tagline?: string;
+    description?: string;
+    /** Product ambassadors shown as a small social-proof avatar strip above the
+     *  tagline on the split-layout brand panel. Renders nothing when empty/imageless. */
+    loginAmbassadors?: LoginAmbassador[];
+    /** Optional microtext beside the ambassador strip, e.g. "+2 mil profissionais". */
+    loginAmbassadorsLabel?: string;
+    showOAuth?: boolean;
+    oauthProviders?: OAuthProviderKey[];
+    /** Providers shown as "em breve" — declared but not wired yet. */
+    oauthComingSoon?: OAuthProviderKey[];
+    resetPasswordUrl?: string;
+    /**
+     * Length of the free trial, in days, as the sign-up screen promises it.
+     *
+     * Display only — the window itself is stamped by the database when the
+     * workspace is created. Absent means the app has no trial to offer, and the
+     * screen says nothing rather than inventing one.
+     */
+    trialDays?: number;
+    /** Shown under the sign-up button when the app has them. */
+    termsUrl?: string;
+    privacyUrl?: string;
+    onSuccess?: () => void;
+}
+export declare function LoginPage({ appName, logo, loginLogo, layout, tagline, description, loginAmbassadors, loginAmbassadorsLabel, showOAuth, oauthProviders, oauthComingSoon, resetPasswordUrl, trialDays, termsUrl, privacyUrl, onSuccess, }: LoginPageProps): React.JSX.Element;
+//# sourceMappingURL=LoginPage.d.ts.map

package/dist/views/LoginPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginPage.d.ts","sourceRoot":"","sources":["../../src/views/LoginPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAG9B,OAAO,EAAmC,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAQrI,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACtB,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC3B,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;yFACqF;IACrF,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAA;IACpC,mFAAmF;IACnF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAA;IACnC,kEAAkE;IAClE,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAA;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CACvB;AAQD,wBAAgB,SAAS,CAAC,EACxB,OAAe,EACf,IAAI,EACJ,SAAS,EACT,MAAgB,EAChB,OAAO,EACP,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,SAAS,EACT,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,QAAQ,EACR,UAAU,EACV,SAAS,GACV,EAAE,cAAc,qBAkJhB"}

package/dist/views/LoginPage.js

@@ -0,0 +1,16 @@
+export { LoginPage } from '../chunk-7JYNJQJJ.js';
+import '../chunk-W35GQEGU.js';
+import '../chunk-HKILBDG2.js';
+import '../chunk-WZVZMNLB.js';
+import '../chunk-QJRTW7Q3.js';
+import '../chunk-KLQDHFVS.js';
+import '../chunk-4HVM2UJS.js';
+import '../chunk-W7565FXD.js';
+import '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-REU4D5UF.js';
+import '../chunk-SMFXGZN7.js';
+import '../chunk-55RFOMW5.js';
+import '../chunk-2MO4QTQA.js';
+//# sourceMappingURL=LoginPage.js.map
+//# sourceMappingURL=LoginPage.js.map

package/dist/views/LoginPage.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"LoginPage.js"}

package/dist/views/OAuthButtons.d.ts

@@ -0,0 +1,18 @@
+import * as React from 'react';
+import type { AuthProvider } from '@fayz-ai/core';
+import type { OAuthProviderKey } from '../domain/auth-config';
+export interface OAuthButtonsProps {
+    providers?: OAuthProviderKey[];
+    disabled?: boolean;
+    /**
+     * Providers that are on screen but cannot sign anybody in yet.
+     *
+     * Shown rather than hidden because the app declares them and the merchant asks
+     * for them — but a button that opens a broken consent screen is worse than one
+     * that says it is not ready. Enabling later is removing the id from this list.
+     */
+    comingSoon?: OAuthProviderKey[];
+    onProviderClick?: (provider: AuthProvider) => void | Promise<void>;
+}
+export declare function OAuthButtons({ providers, disabled, comingSoon, onProviderClick }: OAuthButtonsProps): React.JSX.Element;
+//# sourceMappingURL=OAuthButtons.d.ts.map

package/dist/views/OAuthButtons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthButtons.d.ts","sourceRoot":"","sources":["../../src/views/OAuthButtons.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAE9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAwB7D,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC/B,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE;AAED,wBAAgB,YAAY,CAAC,EAAE,SAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,iBAAiB,qBA0BhH"}

package/dist/views/OAuthButtons.js

@@ -0,0 +1,7 @@
+export { OAuthButtons } from '../chunk-WZVZMNLB.js';
+import '../chunk-Q6DFI35B.js';
+import '../chunk-OI74ER2Z.js';
+import '../chunk-55RFOMW5.js';
+import '../chunk-2MO4QTQA.js';
+//# sourceMappingURL=OAuthButtons.js.map
+//# sourceMappingURL=OAuthButtons.js.map

package/dist/views/OAuthButtons.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"OAuthButtons.js"}

package/dist/views/ResetPasswordForm.d.ts

@@ -0,0 +1,6 @@
+import * as React from 'react';
+export interface ResetPasswordFormProps {
+    onSuccess?: () => void;
+}
+export declare function ResetPasswordForm({ onSuccess }: ResetPasswordFormProps): React.JSX.Element;
+//# sourceMappingURL=ResetPasswordForm.d.ts.map

package/dist/views/ResetPasswordForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetPasswordForm.d.ts","sourceRoot":"","sources":["../../src/views/ResetPasswordForm.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAM9B,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CACvB;AAED,wBAAgB,iBAAiB,CAAC,EAAE,SAAS,EAAE,EAAE,sBAAsB,qBA6CtE"}