@hexclave/next 1.0.125 → 1.0.126

package/dist/esm/lib/hexclave-app/apps/implementations/common.js

@@ -15,8 +15,8 @@ import { envVars } from "../../../../generated/env.js";
 import { suspendIfSsr } from "../../../../utils/react.js";
 import { resolveHandlerUrls } from "../../url-targets.js";
 //#region src/lib/hexclave-app/apps/implementations/common.ts
-const clientVersion = "js @hexclave/next@1.0.125";
-if ("js @hexclave/next@1.0.125".startsWith("STACK_COMPILE_TIME"));
+const clientVersion = "js @hexclave/next@1.0.126";
+if ("js @hexclave/next@1.0.126".startsWith("STACK_COMPILE_TIME"));
 const replaceHexclavePortPrefix = (input) => {
 	if (!input) return input;
 	const prefix = envVars.HEXCLAVE_PORT_PREFIX;

package/dist/esm/lib/hexclave-app/apps/implementations/external-token-store-session-adapter.d.ts

@@ -0,0 +1,31 @@
+import { TokenObject } from "./common.js";
+import { ExternalTokenStore } from "../../common.js";
+import { AccessToken, InternalSession } from "@hexclave/shared/dist/sessions";
+import { Store } from "@hexclave/shared/dist/utils/stores";
+import { ExternalAuthProviderId } from "@hexclave/shared/dist/interface/external-auth";
+
+//#region src/lib/hexclave-app/apps/implementations/external-token-store-session-adapter.d.ts
+type SessionOptions = {
+  refreshToken: string | null;
+  accessToken?: string | null;
+  sessionKey?: string;
+  refreshAccessTokenWithoutRefreshTokenCallback?: () => Promise<AccessToken | null>;
+};
+declare function isExternalTokenStore(value: object): value is ExternalTokenStore;
+declare class ExternalTokenStoreSessionAdapter {
+  private readonly createSession;
+  private readonly exchangeToken;
+  private readonly storesByExternalTokenStore;
+  private readonly externalTokenStoresByStore;
+  private readonly externalTokenStoresBySession;
+  private readonly states;
+  constructor(createSession: (options: SessionOptions) => InternalSession, exchangeToken: (providerId: ExternalAuthProviderId, token: string) => Promise<string>);
+  getOrCreateTokenStore(externalTokenStore: ExternalTokenStore, onProviderChange: (store: Store<TokenObject>, previousSessionKey: string) => void): Store<TokenObject>;
+  getSessionKey(tokenStore: Store<TokenObject>, tokenObject: TokenObject): string;
+  private buildSessionKey;
+  createSessionForTokenStore(tokenStore: Store<TokenObject>, tokenObject: TokenObject, sessionKey: string): InternalSession;
+  getExternalTokenStoreForSession(session: InternalSession): ExternalTokenStore | undefined;
+}
+//#endregion
+export { ExternalTokenStoreSessionAdapter, isExternalTokenStore };
+//# sourceMappingURL=external-token-store-session-adapter.d.ts.map

package/dist/esm/lib/hexclave-app/apps/implementations/external-token-store-session-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-token-store-session-adapter.d.ts","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/external-token-store-session-adapter.ts"],"mappings":";;;;;;;KAiBK,cAAA;EACH,YAAA;EACA,WAAA;EACA,UAAA;EACA,6CAAA,SAAsD,OAAO,CAAC,WAAA;AAAA;AAAA,iBAGhD,oBAAA,CAAqB,KAAA,WAAgB,KAAA,IAAS,kBAAkB;AAAA,cAInE,gCAAA;EAAA,iBAOQ,aAAA;EAAA,iBACA,aAAA;EAAA,iBAPF,0BAAA;EAAA,iBACA,0BAAA;EAAA,iBACA,4BAAA;EAAA,iBACA,MAAA;cAGE,aAAA,GAAgB,OAAA,EAAS,cAAA,KAAmB,eAAA,EAC5C,aAAA,GAAgB,UAAA,EAAY,sBAAA,EAAwB,KAAA,aAAkB,OAAA;EAGzF,qBAAA,CACE,kBAAA,EAAoB,kBAAA,EACpB,gBAAA,GAAmB,KAAA,EAAO,KAAA,CAAM,WAAA,GAAc,kBAAA,oBAC7C,KAAA,CAAM,WAAA;EA8BT,aAAA,CAAc,UAAA,EAAY,KAAA,CAAM,WAAA,GAAc,WAAA,EAAa,WAAA;EAAA,QAenD,eAAA;EASR,0BAAA,CACE,UAAA,EAAY,KAAA,CAAM,WAAA,GAClB,WAAA,EAAa,WAAA,EACb,UAAA,WACC,eAAA;EAsFH,+BAAA,CAAgC,OAAA,EAAS,eAAA,GAAkB,kBAAA;AAAA"}

package/dist/esm/lib/hexclave-app/apps/implementations/external-token-store-session-adapter.js

@@ -0,0 +1,115 @@
+import { throwErr } from "@hexclave/shared/dist/utils/errors";
+import { KnownErrors } from "@hexclave/shared";
+import { createEmptyTokenStore } from "./common.js";
+import { AccessToken, InternalSession } from "@hexclave/shared/dist/sessions";
+//#region src/lib/hexclave-app/apps/implementations/external-token-store-session-adapter.ts
+function isExternalTokenStore(value) {
+	return "type" in value && value.type === "external";
+}
+var ExternalTokenStoreSessionAdapter = class {
+	constructor(createSession, exchangeToken) {
+		this.createSession = createSession;
+		this.exchangeToken = exchangeToken;
+		this.storesByExternalTokenStore = /* @__PURE__ */ new WeakMap();
+		this.externalTokenStoresByStore = /* @__PURE__ */ new WeakMap();
+		this.externalTokenStoresBySession = /* @__PURE__ */ new WeakMap();
+		this.states = /* @__PURE__ */ new WeakMap();
+	}
+	getOrCreateTokenStore(externalTokenStore, onProviderChange) {
+		const existing = this.storesByExternalTokenStore.get(externalTokenStore);
+		if (existing != null) return existing;
+		const store = createEmptyTokenStore();
+		this.storesByExternalTokenStore.set(externalTokenStore, store);
+		this.externalTokenStoresByStore.set(store, externalTokenStore);
+		this.states.set(externalTokenStore, {
+			generation: 0,
+			providerSessionId: externalTokenStore.getSessionId?.()
+		});
+		externalTokenStore.subscribe?.(() => {
+			const state = this.states.get(externalTokenStore) ?? throwErr("External token store state was not initialized");
+			const previousSessionKey = this.buildSessionKey(externalTokenStore, state);
+			const providerSessionId = externalTokenStore.getSessionId?.();
+			if (externalTokenStore.getSessionId == null || providerSessionId !== state.providerSessionId) {
+				state.generation += 1;
+				state.providerSessionId = providerSessionId;
+			}
+			onProviderChange(store, previousSessionKey);
+			store.set({
+				accessToken: null,
+				refreshToken: null
+			});
+		});
+		return store;
+	}
+	getSessionKey(tokenStore, tokenObject) {
+		const externalTokenStore = this.externalTokenStoresByStore.get(tokenStore);
+		if (externalTokenStore == null) return InternalSession.calculateSessionKey(tokenObject);
+		const state = this.states.get(externalTokenStore) ?? throwErr("External token store state was not initialized");
+		return this.buildSessionKey(externalTokenStore, {
+			generation: state.generation,
+			providerSessionId: externalTokenStore.getSessionId?.()
+		});
+	}
+	buildSessionKey(externalTokenStore, state) {
+		if (externalTokenStore.getSessionId == null) return `external-${externalTokenStore.providerId}-${state.generation}`;
+		return state.providerSessionId == null ? "not-logged-in" : `external-${externalTokenStore.providerId}-${state.providerSessionId}`;
+	}
+	createSessionForTokenStore(tokenStore, tokenObject, sessionKey) {
+		const externalTokenStore = this.externalTokenStoresByStore.get(tokenStore);
+		let session;
+		if (externalTokenStore == null) session = this.createSession({
+			refreshToken: tokenObject.refreshToken,
+			accessToken: tokenObject.accessToken
+		});
+		else if (sessionKey === "not-logged-in") session = this.createSession({
+			refreshToken: null,
+			accessToken: null,
+			sessionKey
+		});
+		else session = this.createSession({
+			refreshToken: null,
+			accessToken: tokenObject.accessToken,
+			sessionKey,
+			refreshAccessTokenWithoutRefreshTokenCallback: async () => {
+				const state = this.states.get(externalTokenStore) ?? throwErr("External token store state was not initialized");
+				const expectedGeneration = state.generation;
+				const assertSessionIdentityUnchanged = () => {
+					const liveSessionKey = this.buildSessionKey(externalTokenStore, {
+						generation: state.generation,
+						providerSessionId: externalTokenStore.getSessionId?.()
+					});
+					if (state.generation !== expectedGeneration || liveSessionKey !== sessionKey) throw new Error("The external provider session changed while exchanging a token; retrying with the current provider session.");
+				};
+				const attemptExchange = async (isRetry) => {
+					assertSessionIdentityUnchanged();
+					const externalToken = await externalTokenStore.getToken();
+					assertSessionIdentityUnchanged();
+					if (externalToken == null) {
+						if (externalTokenStore.getSessionId?.() != null) throw new Error("The external token store returned no token even though it reports an active provider session. This is usually transient (eg. the provider SDK is still initializing) and the exchange will be retried on the next request.");
+						return null;
+					}
+					try {
+						const accessToken = await this.exchangeToken(externalTokenStore.providerId, externalToken);
+						const validatedAccessToken = AccessToken.createIfValid(accessToken) ?? throwErr("External authentication exchange returned an invalid Hexclave access token");
+						assertSessionIdentityUnchanged();
+						return validatedAccessToken;
+					} catch (error) {
+						if (!KnownErrors.InvalidExternalAuthToken.isInstance(error)) throw error;
+						if (isRetry) throw error;
+						return await attemptExchange(true);
+					}
+				};
+				return await attemptExchange(false);
+			}
+		});
+		if (externalTokenStore != null) this.externalTokenStoresBySession.set(session, externalTokenStore);
+		return session;
+	}
+	getExternalTokenStoreForSession(session) {
+		return this.externalTokenStoresBySession.get(session);
+	}
+};
+//#endregion
+export { ExternalTokenStoreSessionAdapter, isExternalTokenStore };
+
+//# sourceMappingURL=external-token-store-session-adapter.js.map

package/dist/esm/lib/hexclave-app/apps/implementations/external-token-store-session-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-token-store-session-adapter.js","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/external-token-store-session-adapter.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { KnownErrors } from \"@hexclave/shared\";\nimport type { ExternalAuthProviderId } from \"@hexclave/shared/dist/interface/external-auth\";\nimport { AccessToken, InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport { throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { Store } from \"@hexclave/shared/dist/utils/stores\";\nimport type { ExternalTokenStore } from \"../../common\";\nimport { createEmptyTokenStore, type TokenObject } from \"./common\";\n\ntype ExternalTokenStoreState = {\n  generation: number,\n  providerSessionId: string | null | undefined,\n};\n\ntype SessionOptions = {\n  refreshToken: string | null,\n  accessToken?: string | null,\n  sessionKey?: string,\n  refreshAccessTokenWithoutRefreshTokenCallback?: () => Promise<AccessToken | null>,\n};\n\nexport function isExternalTokenStore(value: object): value is ExternalTokenStore {\n  return \"type\" in value && value.type === \"external\";\n}\n\nexport class ExternalTokenStoreSessionAdapter {\n  private readonly storesByExternalTokenStore = new WeakMap<ExternalTokenStore, Store<TokenObject>>();\n  private readonly externalTokenStoresByStore = new WeakMap<Store<TokenObject>, ExternalTokenStore>();\n  private readonly externalTokenStoresBySession = new WeakMap<InternalSession, ExternalTokenStore>();\n  private readonly states = new WeakMap<ExternalTokenStore, ExternalTokenStoreState>();\n\n  constructor(\n    private readonly createSession: (options: SessionOptions) => InternalSession,\n    private readonly exchangeToken: (providerId: ExternalAuthProviderId, token: string) => Promise<string>,\n  ) {}\n\n  getOrCreateTokenStore(\n    externalTokenStore: ExternalTokenStore,\n    onProviderChange: (store: Store<TokenObject>, previousSessionKey: string) => void,\n  ): Store<TokenObject> {\n    const existing = this.storesByExternalTokenStore.get(externalTokenStore);\n    if (existing != null) {\n      return existing;\n    }\n\n    const store = createEmptyTokenStore();\n    this.storesByExternalTokenStore.set(externalTokenStore, store);\n    this.externalTokenStoresByStore.set(store, externalTokenStore);\n    this.states.set(externalTokenStore, {\n      generation: 0,\n      providerSessionId: externalTokenStore.getSessionId?.(),\n    });\n    externalTokenStore.subscribe?.(() => {\n      const state = this.states.get(externalTokenStore) ?? throwErr(\"External token store state was not initialized\");\n      // Derive the previous session's key from the recorded state, not from a live getSessionId()\n      // read: by the time this notification fires, the provider has already switched sessions, so a\n      // live read would compute the *new* key and the expiry hint would target the wrong session.\n      const previousSessionKey = this.buildSessionKey(externalTokenStore, state);\n      const providerSessionId = externalTokenStore.getSessionId?.();\n      if (externalTokenStore.getSessionId == null || providerSessionId !== state.providerSessionId) {\n        state.generation += 1;\n        state.providerSessionId = providerSessionId;\n      }\n      onProviderChange(store, previousSessionKey);\n      store.set({ accessToken: null, refreshToken: null });\n    });\n    return store;\n  }\n\n  getSessionKey(tokenStore: Store<TokenObject>, tokenObject: TokenObject): string {\n    const externalTokenStore = this.externalTokenStoresByStore.get(tokenStore);\n    if (externalTokenStore == null) {\n      return InternalSession.calculateSessionKey(tokenObject);\n    }\n\n    const state = this.states.get(externalTokenStore) ?? throwErr(\"External token store state was not initialized\");\n    // Read the provider session id live (instead of from state) so a session switch is reflected\n    // immediately, even before the store's subscribe notification has fired.\n    return this.buildSessionKey(externalTokenStore, {\n      generation: state.generation,\n      providerSessionId: externalTokenStore.getSessionId?.(),\n    });\n  }\n\n  private buildSessionKey(externalTokenStore: ExternalTokenStore, state: ExternalTokenStoreState): string {\n    if (externalTokenStore.getSessionId == null) {\n      return `external-${externalTokenStore.providerId}-${state.generation}`;\n    }\n    return state.providerSessionId == null\n      ? \"not-logged-in\"\n      : `external-${externalTokenStore.providerId}-${state.providerSessionId}`;\n  }\n\n  createSessionForTokenStore(\n    tokenStore: Store<TokenObject>,\n    tokenObject: TokenObject,\n    sessionKey: string,\n  ): InternalSession {\n    const externalTokenStore = this.externalTokenStoresByStore.get(tokenStore);\n    let session: InternalSession;\n    if (externalTokenStore == null) {\n      session = this.createSession({\n        refreshToken: tokenObject.refreshToken,\n        accessToken: tokenObject.accessToken,\n      });\n    } else if (sessionKey === \"not-logged-in\") {\n      // A provider can clear its session before its token store notification arrives; never let\n      // that transiently expose the previous provider session's cached Hexclave token.\n      session = this.createSession({\n        refreshToken: null,\n        accessToken: null,\n        sessionKey,\n      });\n    } else {\n      session = this.createSession({\n        refreshToken: null,\n        accessToken: tokenObject.accessToken,\n        sessionKey,\n        refreshAccessTokenWithoutRefreshTokenCallback: async () => {\n          const state = this.states.get(externalTokenStore) ?? throwErr(\"External token store state was not initialized\");\n          const expectedGeneration = state.generation;\n          const assertSessionIdentityUnchanged = () => {\n            const liveSessionKey = this.buildSessionKey(externalTokenStore, {\n              generation: state.generation,\n              providerSessionId: externalTokenStore.getSessionId?.(),\n            });\n            if (state.generation !== expectedGeneration || liveSessionKey !== sessionKey) {\n              throw new Error(\"The external provider session changed while exchanging a token; retrying with the current provider session.\");\n            }\n          };\n          // Returning null from this callback permanently invalidates the cached InternalSession, so\n          // we must only do it when the provider session is definitively gone — for transient states\n          // we throw instead, which surfaces the failure to the current caller but lets the next\n          // request retry the exchange.\n          const attemptExchange = async (isRetry: boolean): Promise<AccessToken | null> => {\n            assertSessionIdentityUnchanged();\n            const externalToken = await externalTokenStore.getToken();\n            assertSessionIdentityUnchanged();\n            if (externalToken == null) {\n              if (externalTokenStore.getSessionId?.() != null) {\n                // The provider reports an active session but handed out no token; this is usually a\n                // transient state (eg. its SDK is still initializing), so don't treat it as signed out.\n                throw new Error(\"The external token store returned no token even though it reports an active provider session. This is usually transient (eg. the provider SDK is still initializing) and the exchange will be retried on the next request.\");\n              }\n              return null;\n            }\n            try {\n              const accessToken = await this.exchangeToken(externalTokenStore.providerId, externalToken);\n              const validatedAccessToken = AccessToken.createIfValid(accessToken)\n                ?? throwErr(\"External authentication exchange returned an invalid Hexclave access token\");\n              // An explicit session key bypasses InternalSession's identity check. Refuse to install\n              // a token if the provider switched accounts while the exchange was in flight instead\n              // of returning null, which would permanently invalidate the reusable session.\n              assertSessionIdentityUnchanged();\n              return validatedAccessToken;\n            } catch (error) {\n              if (!KnownErrors.InvalidExternalAuthToken.isInstance(error)) {\n                throw error;\n              }\n              // The server rejects provider tokens that expired in flight with the same error as\n              // genuinely bad ones, so retry once with a freshly fetched provider token: the provider\n              // SDK replaces an expired token. If the fresh token is rejected too, the cause is not\n              // transient (eg. an issuer or client-ID misconfiguration), and it does not mean the\n              // provider session ended either: the backend re-establishes a Hexclave session for any\n              // valid provider token, so a rejection never signals revocation. Propagate the error\n              // instead of returning null, which would permanently invalidate this session and make\n              // a misconfiguration look like a silent sign-out.\n              if (isRetry) {\n                throw error;\n              }\n              return await attemptExchange(true);\n            }\n          };\n          return await attemptExchange(false);\n        },\n      });\n    }\n    if (externalTokenStore != null) {\n      this.externalTokenStoresBySession.set(session, externalTokenStore);\n    }\n    return session;\n  }\n\n  getExternalTokenStoreForSession(session: InternalSession): ExternalTokenStore | undefined {\n    return this.externalTokenStoresBySession.get(session);\n  }\n}\n"],"mappings":";;;;;AAwBA,SAAgB,qBAAqB,OAA4C;CAC/E,OAAO,UAAU,SAAS,MAAM,SAAS;AAC3C;AAEA,IAAa,mCAAb,MAA8C;CAM5C,YACE,eACA,eACA;EAFiB,KAAA,gBAAA;EACA,KAAA,gBAAA;oDAP2B,IAAI,QAAgD;oDACpD,IAAI,QAAgD;sDAClD,IAAI,QAA6C;gCACvE,IAAI,QAAqD;CAKhF;CAEH,sBACE,oBACA,kBACoB;EACpB,MAAM,WAAW,KAAK,2BAA2B,IAAI,kBAAkB;EACvE,IAAI,YAAY,MACd,OAAO;EAGT,MAAM,QAAQ,sBAAsB;EACpC,KAAK,2BAA2B,IAAI,oBAAoB,KAAK;EAC7D,KAAK,2BAA2B,IAAI,OAAO,kBAAkB;EAC7D,KAAK,OAAO,IAAI,oBAAoB;GAClC,YAAY;GACZ,mBAAmB,mBAAmB,eAAe;EACvD,CAAC;EACD,mBAAmB,kBAAkB;GACnC,MAAM,QAAQ,KAAK,OAAO,IAAI,kBAAkB,KAAK,SAAS,gDAAgD;GAI9G,MAAM,qBAAqB,KAAK,gBAAgB,oBAAoB,KAAK;GACzE,MAAM,oBAAoB,mBAAmB,eAAe;GAC5D,IAAI,mBAAmB,gBAAgB,QAAQ,sBAAsB,MAAM,mBAAmB;IAC5F,MAAM,cAAc;IACpB,MAAM,oBAAoB;GAC5B;GACA,iBAAiB,OAAO,kBAAkB;GAC1C,MAAM,IAAI;IAAE,aAAa;IAAM,cAAc;GAAK,CAAC;EACrD,CAAC;EACD,OAAO;CACT;CAEA,cAAc,YAAgC,aAAkC;EAC9E,MAAM,qBAAqB,KAAK,2BAA2B,IAAI,UAAU;EACzE,IAAI,sBAAsB,MACxB,OAAO,gBAAgB,oBAAoB,WAAW;EAGxD,MAAM,QAAQ,KAAK,OAAO,IAAI,kBAAkB,KAAK,SAAS,gDAAgD;EAG9G,OAAO,KAAK,gBAAgB,oBAAoB;GAC9C,YAAY,MAAM;GAClB,mBAAmB,mBAAmB,eAAe;EACvD,CAAC;CACH;CAEA,gBAAwB,oBAAwC,OAAwC;EACtG,IAAI,mBAAmB,gBAAgB,MACrC,OAAO,YAAY,mBAAmB,WAAW,GAAG,MAAM;EAE5D,OAAO,MAAM,qBAAqB,OAC9B,kBACA,YAAY,mBAAmB,WAAW,GAAG,MAAM;CACzD;CAEA,2BACE,YACA,aACA,YACiB;EACjB,MAAM,qBAAqB,KAAK,2BAA2B,IAAI,UAAU;EACzE,IAAI;EACJ,IAAI,sBAAsB,MACxB,UAAU,KAAK,cAAc;GAC3B,cAAc,YAAY;GAC1B,aAAa,YAAY;EAC3B,CAAC;OACI,IAAI,eAAe,iBAGxB,UAAU,KAAK,cAAc;GAC3B,cAAc;GACd,aAAa;GACb;EACF,CAAC;OAED,UAAU,KAAK,cAAc;GAC3B,cAAc;GACd,aAAa,YAAY;GACzB;GACA,+CAA+C,YAAY;IACzD,MAAM,QAAQ,KAAK,OAAO,IAAI,kBAAkB,KAAK,SAAS,gDAAgD;IAC9G,MAAM,qBAAqB,MAAM;IACjC,MAAM,uCAAuC;KAC3C,MAAM,iBAAiB,KAAK,gBAAgB,oBAAoB;MAC9D,YAAY,MAAM;MAClB,mBAAmB,mBAAmB,eAAe;KACvD,CAAC;KACD,IAAI,MAAM,eAAe,sBAAsB,mBAAmB,YAChE,MAAM,IAAI,MAAM,6GAA6G;IAEjI;IAKA,MAAM,kBAAkB,OAAO,YAAkD;KAC/E,+BAA+B;KAC/B,MAAM,gBAAgB,MAAM,mBAAmB,SAAS;KACxD,+BAA+B;KAC/B,IAAI,iBAAiB,MAAM;MACzB,IAAI,mBAAmB,eAAe,KAAK,MAGzC,MAAM,IAAI,MAAM,4NAA4N;MAE9O,OAAO;KACT;KACA,IAAI;MACF,MAAM,cAAc,MAAM,KAAK,cAAc,mBAAmB,YAAY,aAAa;MACzF,MAAM,uBAAuB,YAAY,cAAc,WAAW,KAC7D,SAAS,4EAA4E;MAI1F,+BAA+B;MAC/B,OAAO;KACT,SAAS,OAAO;MACd,IAAI,CAAC,YAAY,yBAAyB,WAAW,KAAK,GACxD,MAAM;MAUR,IAAI,SACF,MAAM;MAER,OAAO,MAAM,gBAAgB,IAAI;KACnC;IACF;IACA,OAAO,MAAM,gBAAgB,KAAK;GACpC;EACF,CAAC;EAEH,IAAI,sBAAsB,MACxB,KAAK,6BAA6B,IAAI,SAAS,kBAAkB;EAEnE,OAAO;CACT;CAEA,gCAAgC,SAA0D;EACxF,OAAO,KAAK,6BAA6B,IAAI,OAAO;CACtD;AACF"}

package/dist/esm/lib/hexclave-app/apps/interfaces/client-app.d.ts

@@ -77,7 +77,22 @@ type StackClientApp<HasTokenStore extends boolean = boolean, ProjectId extends s
    * cross-domain auth, or sign-out state. Use the matching `redirectToXyz()` method instead, for example
    * `redirectToSignIn()`, `redirectToSignUp()`, `redirectToSignOut()`, or `redirectToAccountSettings()`.
    */
-  readonly urls: Readonly<ResolvedHandlerUrls>;
+  readonly urls: Readonly<ResolvedHandlerUrls>; /** Whether this app delegates authentication to an external provider token store. */
+  isExternalAuthApp(): boolean;
+  /**
+   * Marks the current page as one that should record analytics (page views, clicks, session replays, and clickmaps).
+   *
+   * Analytics capture starts automatically when the client app is constructed in the browser, so this function doesn't
+   * start anything itself. Call it at the top level of a client-side module that is loaded on every page you want to
+   * track (for example, your app's root layout or entry file); the call guarantees that the module creating the client
+   * app is actually imported, and therefore constructed, on that page.
+   *
+   * Throws if this app will never record analytics because of its constructor options (`analytics.enabled: false`,
+   * `automaticSideEffects: false`, or a `null` token store). If the Analytics app turns out to be disabled on the
+   * project, an error is reported as soon as the backend rejects the first upload. Outside the browser (eg. during
+   * server-side rendering), it doesn't throw for that reason alone.
+   */
+  initAnalytics(): void;
   signInWithOAuth(provider: string, options?: {
     returnTo?: string;
   }): Promise<void>;

package/dist/esm/lib/hexclave-app/apps/interfaces/client-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-app.d.ts","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/interfaces/client-app.ts"],"mappings":";;;;;;;;;;;;KAgBY,gCAAA;EACV,OAAA;IAAqB,OAAA;IAAiB,MAAA;EAAA;EACtC,mBAAA,GAAsB,MAAA;EACtB,SAAA,GAAY,SAAA;EACZ,oBAAA;EACA,IAAA,GAAO,iBAAA;EACP,mBAAA,GAAsB,OAAA,CAAQ,mBAAA;EAC9B,UAAA,GAAa,cAAA,CAAe,aAAA;EAC5B,cAAA,GAAiB,cAAA;EACjB,YAAA,GAAe,cAAA;EA8BH;;;;;;;EArBZ,OAAA;EAyBiF;;;;;EAlBjF,mBAAA;EAxBqB;;;;;;EAgCrB,oBAAA;EA5BA;;;;EAkCA,SAAA,GAAY,gBAAA;AAAA;EAEV,UAAA,EAAY,cAAA,CAAe,aAAA;AAAA;EAAqB,UAAA;EAAwB,YAAA,EAAc,cAAA,CAAe,aAAA;AAAA,qBAExF,SAAA;EAAyB,SAAA,EAAW,SAAA;AAAA;EAAgB,YAAA,EAAc,cAAA,MAAoB,SAAA;AAAA;;KAK3F,kBAAA,4DAA8E,gCAAA,CAAiC,aAAA,EAAe,SAAA;EAAe,YAAA;AAAA;EACvJ,gBAAA;AAAA;;KAKU,cAAA;EAAA,SAEC,SAAA,EAAW,SAAA;EAbP;;;EAAA,SAkBJ,OAAA;EAlBsE;;;AAA6B;AAKhH;EALmF,SAyBtE,IAAA,EAAM,QAAA,CAAS,mBAAA;EAExB,eAAA,CAAgB,QAAA,UAAkB,OAAA;IAAY,QAAA;EAAA,IAAsB,OAAA;EACpE,oBAAA,CAAqB,OAAA;IAAW,KAAA;IAAe,QAAA;IAAkB,UAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EAC3J,oBAAA,CAAqB,OAAA;IACnB,KAAA;IACA,QAAA;IACA,UAAA;EAAA;IACK,sBAAA;EAAA;IAAmC,sBAAA;IAAgC,uBAAA;EAAA,KAAsC,OAAA,CAAQ,MAAA,YAAkB,WAAA,iCAA4C,WAAA,oDAA+D,WAAA,iCAA4C,WAAA;EACjS,iBAAA,IAAqB,OAAA,CAAQ,MAAA,YAAkB,WAAA,kCAA6C,WAAA,sBAAiC,WAAA;EAC7H,iBAAA,IAAqB,OAAA;EACrB,cAAA,CAAe,OAAA;IAAW,MAAA;IAAgB,eAAA;IAA0B,gBAAA;IAA2B,UAAA,IAAc,GAAA,UAAa,SAAA;EAAA,IAA+B,OAAA,CAAQ,MAAA,SAAe,WAAA,mBAA8B,WAAA,0BAAqC,WAAA;EACnP,uBAAA,CAAwB,KAAA,UAAe,OAAA;IAAY,WAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA,YAAkB,WAAA;EACtG,kBAAA,CAAmB,KAAA,UAAe,OAAA;IAAY,WAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA;IAAS,KAAA;EAAA,GAAiB,WAAA,gCAA2C,WAAA;EACpJ,aAAA,CAAc,OAAA;IAAW,IAAA;IAAc,QAAA;EAAA,IAAqB,OAAA,CAAQ,MAAA,YAAkB,WAAA;EACtF,uBAAA,CAAwB,IAAA,WAAe,OAAA,CAAQ,MAAA,YAAkB,WAAA;EACjE,wBAAA,CAAyB,IAAA,WAAe,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EACzG,oBAAA,CAAqB,IAAA,WAAe,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EACrG,wBAAA,CAAyB,IAAA,WAAe,OAAA,CAAQ,MAAA;IAAS,eAAA;EAAA,GAA2B,WAAA,4BAAuC,WAAA;EAC3H,WAAA,CAAY,IAAA,WAAe,OAAA,CAAQ,MAAA,YAAkB,WAAA;EACrD,mBAAA,CAAoB,IAAA,UAAc,OAAA;IAAY,UAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EACxI,aAAA,CAAc,GAAA,UAAa,IAAA,UAAc,OAAA;IAAY,UAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EAE/I,uBAAA,IAA2B,OAAA;EAE3B,mBAAA,CAAoB,OAAA,EAAS,aAAA;IAAgC,UAAA,EAAY,cAAA;EAAA;IAAqB,UAAA,GAAa,cAAA;EAAA,KAAoB,IAAA;IAAQ,iBAAA;EAAA,MAAiC,OAAA;EACxK,uBAAA,CAAwB,OAAA;IAAW,UAAA,EAAY,cAAA;EAAA,IAAmB,OAAA;EAElE,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAmB,kBAAA,CAAmB,SAAA;EAChG,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAgB,kBAAA,CAAmB,SAAA;EAC7F,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAoB,kBAAA,CAAmB,SAAA;EACjG,OAAA,CAAQ,OAAA,GAAU,qBAAA,CAAsB,aAAA,IAAiB,kBAAA,CAAmB,SAAA;EAX4D;;;;;;EAmBxI,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAmB,OAAA,CAAQ,kBAAA,CAAmB,SAAA;EACxG,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAgB,OAAA,CAAQ,kBAAA,CAAmB,SAAA;EACrG,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAoB,OAAA,CAAQ,kBAAA,CAAmB,SAAA;EACzG,OAAA,CAAQ,OAAA,GAAU,qBAAA,CAAsB,aAAA,IAAiB,OAAA,CAAQ,kBAAA,CAAmB,SAAA;EAEpF,kBAAA,CAAmB,OAAA;IAAW,SAAA;IAAmB,cAAA;EAAA;IAA8B,SAAA;IAAmB,cAAA;IAAyB,MAAA;EAAA,IAAmB,OAAA;EAG9I,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA;IAAmB,IAAA;EAAA,IAAkB,OAAA,CAAQ,gBAAA;EAClG,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA;IAAmB,IAAA;EAAA,IAAmB,OAAA,CAAQ,gBAAA;EACnG,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA,IAAiB,OAAA,CAAQ,iBAAA,GAAoB,gBAAA;EAClG,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA;IAAmB,IAAA;EAAA,IAAkB,gBAAA;EAC1F,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA;IAAmB,IAAA;EAAA,IAAmB,gBAAA;EAC3F,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA,IAAiB,iBAAA,GAAoB,gBAAA;EAC1F,WAAA,KAAgB,EAAA;EAAA,CAEf,0BAAA;IACC,YAAA,IAAgB,kBAAA,CAAmB,aAAA,EAAe,SAAA;IAClD,cAAA,CAAe,eAAA,EAAiB,OAAA,CAAQ,eAAA;IACxC,qBAAA,IAAyB,gCAAA,CAAiC,aAAA,EAAe,SAAA;MAAe,YAAA;IAAA;IACxF,sBAAA,CAAuB,IAAA,UAAc,OAAA;MAAW,SAAA;IAAA,IAAuB,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU,KAAA;IAChG,uBAAA,CAAwB,IAAA,UAAc,OAAA;MAAW,SAAA;IAAA,IAAuB,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU,KAAA;IACjG,kBAAA,CAAmB,QAAA,EAAU,eAAA;IAC7B,WAAA,CAAY,IAAA,UAAc,cAAA,EAAgB,WAAA,EAAa,WAAA,mCAA8C,OAAA,CAAQ,QAAA;IAC7G,OAAA,IAAW,QAAA,CAAS,mBAAA;IACpB,iBAAA,IAAqB,cAAA;IACrB,aAAA,CAAc,GAAA,WAAc,GAAA,EAAK,OAAA;MAAY,OAAA;IAAA,IAAsB,OAAA;IACnE,uBAAA,CAAwB,WAAA,QAAmB,WAAA,EAAa,OAAA,GAAU,iBAAA,GAAoB,OAAA;IACtF,iBAAA,CAAkB,WAAA,QAAmB,WAAA,EAAa,OAAA,GAAU,iBAAA,GAAoB,OAAA,QAlB1D;IAoBtB,uBAAA;IACA,gBAAA,CAAiB,MAAA;MAAU,WAAA;MAAqB,YAAA;IAAA,IAAyB,OAAA;IACzE,2BAAA,IAA+B,OAAA;IAC/B,oBAAA,CAAqB,GAAA,WAAc,OAAA;EAAA;AAAA,IAGrC,kBAAA,gBAAkC,OAAA,WAClC,kBAAA;EAEG,MAAA;EAAgB,MAAA;AAAA;EAAqB,MAAA;EAAgB,MAAA;AAAA;EAAqB,MAAA;EAAgB,gBAAA;AAAA,IAC7F,IAAA,WAGA,kBAAA,cAEC,OAAA,EAAS,8BAAA,GACV,oBAAA,UAGA,kBAAA,cAEC,OAAA,EAAS,8BAAA,GACV,oBAAA,+BAGqB,UAAA,OAAiB,IAAA,CAAK,WAAA,qCAAgD,OAAA,GAAU,iBAAA,KAAsB,OAAA,WAC3H,QAAA,CAAS,aAAA;EAAgC,UAAA,EAAY,cAAA;AAAA;EAAqB,UAAA,GAAa,cAAA;AAAA;;KAG/E,yBAAA;EAAA,2DAGe,cAAA,yDAEvB,OAAA,EAAS,gCAAA,CAAiC,aAAA,EAAe,SAAA,IAAa,cAAA,CAAe,aAAA,EAAe,SAAA;EAAA,KAClG,OAAA,EAAS,gCAAA,oBAAoD,cAAA;EAAA,CAEhE,0BAAA;IACC,cAAA,0DACE,IAAA,EAAM,kBAAA,CAAmB,aAAA,EAAe,SAAA,IACvC,cAAA,CAAe,aAAA,EAAe,SAAA;EAAA;AAAA;AAAA,KAGzB,mCAAA,4DAA+F,gCAAA,CAAiC,aAAA,EAAe,SAAA;AAAA,KAC/I,qBAAA,4DAAiF,kBAAA,CAAmB,aAAA,EAAe,SAAA;AAAA,KACnH,iBAAA,+EAAgG,cAAA,CAAe,aAAA,EAAe,SAAA;AAAA,KAC9H,4BAAA,GAA+B,yBAAyB;AAAA,cACvD,iBAAA,EAAmB,4BAAqD;;cAExE,cAAA,EAAgB,yBAA6C"}
+{"version":3,"file":"client-app.d.ts","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/interfaces/client-app.ts"],"mappings":";;;;;;;;;;;;KAgBY,gCAAA;EACV,OAAA;IAAqB,OAAA;IAAiB,MAAA;EAAA;EACtC,mBAAA,GAAsB,MAAA;EACtB,SAAA,GAAY,SAAA;EACZ,oBAAA;EACA,IAAA,GAAO,iBAAA;EACP,mBAAA,GAAsB,OAAA,CAAQ,mBAAA;EAC9B,UAAA,GAAa,cAAA,CAAe,aAAA;EAC5B,cAAA,GAAiB,cAAA;EACjB,YAAA,GAAe,cAAA;EA8BH;;;;;;;EArBZ,OAAA;EAyBiF;;;;;EAlBjF,mBAAA;EAxBqB;;;;;;EAgCrB,oBAAA;EA5BA;;;;EAkCA,SAAA,GAAY,gBAAA;AAAA;EAEV,UAAA,EAAY,cAAA,CAAe,aAAA;AAAA;EAAqB,UAAA;EAAwB,YAAA,EAAc,cAAA,CAAe,aAAA;AAAA,qBAExF,SAAA;EAAyB,SAAA,EAAW,SAAA;AAAA;EAAgB,YAAA,EAAc,cAAA,MAAoB,SAAA;AAAA;;KAK3F,kBAAA,4DAA8E,gCAAA,CAAiC,aAAA,EAAe,SAAA;EAAe,YAAA;AAAA;EACvJ,gBAAA;AAAA;;KAKU,cAAA;EAAA,SAEC,SAAA,EAAW,SAAA;EAbP;;;EAAA,SAkBJ,OAAA;EAlBsE;;;AAA6B;AAKhH;EALmF,SAyBtE,IAAA,EAAM,QAAA,CAAS,mBAAA,GApBE;EAsB1B,iBAAA;EAtBsI;;;;;;;;;;;;AACxH;EAoCd,aAAA;EAEA,eAAA,CAAgB,QAAA,UAAkB,OAAA;IAAY,QAAA;EAAA,IAAsB,OAAA;EACpE,oBAAA,CAAqB,OAAA;IAAW,KAAA;IAAe,QAAA;IAAkB,UAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EAC3J,oBAAA,CAAqB,OAAA;IACnB,KAAA;IACA,QAAA;IACA,UAAA;EAAA;IACK,sBAAA;EAAA;IAAmC,sBAAA;IAAgC,uBAAA;EAAA,KAAsC,OAAA,CAAQ,MAAA,YAAkB,WAAA,iCAA4C,WAAA,oDAA+D,WAAA,iCAA4C,WAAA;EACjS,iBAAA,IAAqB,OAAA,CAAQ,MAAA,YAAkB,WAAA,kCAA6C,WAAA,sBAAiC,WAAA;EAC7H,iBAAA,IAAqB,OAAA;EACrB,cAAA,CAAe,OAAA;IAAW,MAAA;IAAgB,eAAA;IAA0B,gBAAA;IAA2B,UAAA,IAAc,GAAA,UAAa,SAAA;EAAA,IAA+B,OAAA,CAAQ,MAAA,SAAe,WAAA,mBAA8B,WAAA,0BAAqC,WAAA;EACnP,uBAAA,CAAwB,KAAA,UAAe,OAAA;IAAY,WAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA,YAAkB,WAAA;EACtG,kBAAA,CAAmB,KAAA,UAAe,OAAA;IAAY,WAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA;IAAS,KAAA;EAAA,GAAiB,WAAA,gCAA2C,WAAA;EACpJ,aAAA,CAAc,OAAA;IAAW,IAAA;IAAc,QAAA;EAAA,IAAqB,OAAA,CAAQ,MAAA,YAAkB,WAAA;EACtF,uBAAA,CAAwB,IAAA,WAAe,OAAA,CAAQ,MAAA,YAAkB,WAAA;EACjE,wBAAA,CAAyB,IAAA,WAAe,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EACzG,oBAAA,CAAqB,IAAA,WAAe,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EACrG,wBAAA,CAAyB,IAAA,WAAe,OAAA,CAAQ,MAAA;IAAS,eAAA;EAAA,GAA2B,WAAA,4BAAuC,WAAA;EAC3H,WAAA,CAAY,IAAA,WAAe,OAAA,CAAQ,MAAA,YAAkB,WAAA;EACrD,mBAAA,CAAoB,IAAA,UAAc,OAAA;IAAY,UAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EACxI,aAAA,CAAc,GAAA,UAAa,IAAA,UAAc,OAAA;IAAY,UAAA;EAAA,IAAyB,OAAA,CAAQ,MAAA,YAAkB,WAAA,4BAAuC,WAAA;EAE/I,uBAAA,IAA2B,OAAA;EAE3B,mBAAA,CAAoB,OAAA,EAAS,aAAA;IAAgC,UAAA,EAAY,cAAA;EAAA;IAAqB,UAAA,GAAa,cAAA;EAAA,KAAoB,IAAA;IAAQ,iBAAA;EAAA,MAAiC,OAAA;EACxK,uBAAA,CAAwB,OAAA;IAAW,UAAA,EAAY,cAAA;EAAA,IAAmB,OAAA;EAElE,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAmB,kBAAA,CAAmB,SAAA;EAChG,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAgB,kBAAA,CAAmB,SAAA;EAC7F,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAoB,kBAAA,CAAmB,SAAA;EACjG,OAAA,CAAQ,OAAA,GAAU,qBAAA,CAAsB,aAAA,IAAiB,kBAAA,CAAmB,SAAA;EAHoB;;;;;;EAWhG,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAmB,OAAA,CAAQ,kBAAA,CAAmB,SAAA;EACxG,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAgB,OAAA,CAAQ,kBAAA,CAAmB,SAAA;EACrG,OAAA,CAAQ,OAAA,EAAS,qBAAA,CAAsB,aAAA;IAAmB,EAAA;EAAA,IAAoB,OAAA,CAAQ,kBAAA,CAAmB,SAAA;EACzG,OAAA,CAAQ,OAAA,GAAU,qBAAA,CAAsB,aAAA,IAAiB,OAAA,CAAQ,kBAAA,CAAmB,SAAA;EAEpF,kBAAA,CAAmB,OAAA;IAAW,SAAA;IAAmB,cAAA;EAAA;IAA8B,SAAA;IAAmB,cAAA;IAAyB,MAAA;EAAA,IAAmB,OAAA;EAG9I,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA;IAAmB,IAAA;EAAA,IAAkB,OAAA,CAAQ,gBAAA;EAClG,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA;IAAmB,IAAA;EAAA,IAAmB,OAAA,CAAQ,gBAAA;EACnG,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA,IAAiB,OAAA,CAAQ,iBAAA,GAAoB,gBAAA;EAClG,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA;IAAmB,IAAA;EAAA,IAAkB,gBAAA;EAC1F,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA;IAAmB,IAAA;EAAA,IAAmB,gBAAA;EAC3F,cAAA,CAAe,OAAA,EAAS,4BAAA,CAA6B,aAAA,IAAiB,iBAAA,GAAoB,gBAAA;EAC1F,WAAA,KAAgB,EAAA;EAAA,CAEf,0BAAA;IACC,YAAA,IAAgB,kBAAA,CAAmB,aAAA,EAAe,SAAA;IAClD,cAAA,CAAe,eAAA,EAAiB,OAAA,CAAQ,eAAA;IACxC,qBAAA,IAAyB,gCAAA,CAAiC,aAAA,EAAe,SAAA;MAAe,YAAA;IAAA;IACxF,sBAAA,CAAuB,IAAA,UAAc,OAAA;MAAW,SAAA;IAAA,IAAuB,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU,KAAA;IAChG,uBAAA,CAAwB,IAAA,UAAc,OAAA;MAAW,SAAA;IAAA,IAAuB,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU,KAAA;IACjG,kBAAA,CAAmB,QAAA,EAAU,eAAA;IAC7B,WAAA,CAAY,IAAA,UAAc,cAAA,EAAgB,WAAA,EAAa,WAAA,mCAA8C,OAAA,CAAQ,QAAA;IAC7G,OAAA,IAAW,QAAA,CAAS,mBAAA;IACpB,iBAAA,IAAqB,cAAA;IACrB,aAAA,CAAc,GAAA,WAAc,GAAA,EAAK,OAAA;MAAY,OAAA;IAAA,IAAsB,OAAA;IACnE,uBAAA,CAAwB,WAAA,QAAmB,WAAA,EAAa,OAAA,GAAU,iBAAA,GAAoB,OAAA;IACtF,iBAAA,CAAkB,WAAA,QAAmB,WAAA,EAAa,OAAA,GAAU,iBAAA,GAAoB,OAAA,QAXhE;IAahB,uBAAA;IACA,gBAAA,CAAiB,MAAA;MAAU,WAAA;MAAqB,YAAA;IAAA,IAAyB,OAAA;IACzE,2BAAA,IAA+B,OAAA;IAC/B,oBAAA,CAAqB,GAAA,WAAc,OAAA;EAAA;AAAA,IAGrC,kBAAA,gBAAkC,OAAA,WAClC,kBAAA;EAEG,MAAA;EAAgB,MAAA;AAAA;EAAqB,MAAA;EAAgB,MAAA;AAAA;EAAqB,MAAA;EAAgB,gBAAA;AAAA,IAC7F,IAAA,WAGA,kBAAA,cAEC,OAAA,EAAS,8BAAA,GACV,oBAAA,UAGA,kBAAA,cAEC,OAAA,EAAS,8BAAA,GACV,oBAAA,+BAGqB,UAAA,OAAiB,IAAA,CAAK,WAAA,qCAAgD,OAAA,GAAU,iBAAA,KAAsB,OAAA,WAC3H,QAAA,CAAS,aAAA;EAAgC,UAAA,EAAY,cAAA;AAAA;EAAqB,UAAA,GAAa,cAAA;AAAA;;KAG/E,yBAAA;EAAA,2DAGe,cAAA,yDAEvB,OAAA,EAAS,gCAAA,CAAiC,aAAA,EAAe,SAAA,IAAa,cAAA,CAAe,aAAA,EAAe,SAAA;EAAA,KAClG,OAAA,EAAS,gCAAA,oBAAoD,cAAA;EAAA,CAEhE,0BAAA;IACC,cAAA,0DACE,IAAA,EAAM,kBAAA,CAAmB,aAAA,EAAe,SAAA,IACvC,cAAA,CAAe,aAAA,EAAe,SAAA;EAAA;AAAA;AAAA,KAGzB,mCAAA,4DAA+F,gCAAA,CAAiC,aAAA,EAAe,SAAA;AAAA,KAC/I,qBAAA,4DAAiF,kBAAA,CAAmB,aAAA,EAAe,SAAA;AAAA,KACnH,iBAAA,+EAAgG,cAAA,CAAe,aAAA,EAAe,SAAA;AAAA,KAC9H,4BAAA,GAA+B,yBAAyB;AAAA,cACvD,iBAAA,EAAmB,4BAAqD;;cAExE,cAAA,EAAgB,yBAA6C"}

package/dist/esm/lib/hexclave-app/apps/interfaces/client-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-app.js","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/interfaces/client-app.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { KnownErrors } from \"@hexclave/shared\";\nimport type { RequestListener } from \"@hexclave/shared/dist/interface/client-interface\";\nimport { CurrentUserCrud } from \"@hexclave/shared/dist/interface/crud/current-user\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { AsyncStoreProperty, AuthLike, GetCurrentPartialUserOptions, GetCurrentUserOptions, HandlerUrlOptions, HandlerUrls, hexclaveAppInternalsSymbol, OAuthScopesOnSignIn, RedirectMethod, RedirectToOptions, ResolvedHandlerUrls, TokenStoreInit } from \"../../common\";\nimport { CustomerInvoicesList, CustomerInvoicesRequestOptions, CustomerProductsList, CustomerProductsRequestOptions, Item } from \"../../customers\";\nimport { Project } from \"../../projects\";\nimport { ProjectCurrentUser, SyncedPartialUser, TokenPartialUser } from \"../../users\";\nimport { _HexclaveClientAppImpl } from \"../implementations\";\nimport { AnalyticsOptions } from \"../implementations/session-replay\";\n\n/** @deprecated Use `HexclaveClientAppConstructorOptions` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = {\n  baseUrl?: string | { browser: string, server: string },\n  extraRequestHeaders?: Record<string, string>,\n  projectId?: ProjectId,\n  publishableClientKey?: string,\n  urls?: HandlerUrlOptions,\n  oauthScopesOnSignIn?: Partial<OAuthScopesOnSignIn>,\n  tokenStore?: TokenStoreInit<HasTokenStore>,\n  redirectMethod?: RedirectMethod,\n  inheritsFrom?: StackClientApp<any, any>,\n\n  /**\n   * Whether to show the Hexclave dev tool indicator in browser-like environments.\n   *\n   * - `true`: always show\n   * - `false`: never show\n   * - `\"auto\"` (default): show based on NODE_ENV or origin heuristics\n   */\n  devTool?: boolean | \"auto\",\n\n  /**\n   * By default, the Stack app will automatically prefetch some data from Stack's server when this app is first\n   * constructed. This improves the performance of your app, but will create network requests that are unnecessary if\n   * the app is never used or disposed of immediately. To disable this behavior, set this option to true.\n   */\n  noAutomaticPrefetch?: boolean,\n\n  /**\n   * Whether the constructor starts browser integrations and other automatic side effects. Defaults to `true`.\n   *\n   * Set this to `false` when the app is instantiated inside a custom dashboard. Explicit method calls remain\n   * available and can still perform their documented side effects.\n   */\n  automaticSideEffects?: boolean,\n\n  /**\n   * Options for analytics and session recording. Replays are enabled by default;\n   * set `{ replays: { enabled: false } }` to opt out.\n   */\n  analytics?: AnalyticsOptions,\n} & (\n  { tokenStore: TokenStoreInit<HasTokenStore> } | { tokenStore?: undefined, inheritsFrom: StackClientApp<HasTokenStore, any> }\n) & (\n  string extends ProjectId ? unknown : ({ projectId: ProjectId } | { inheritsFrom: StackClientApp<any, ProjectId> })\n);\n\n\n/** @deprecated Use `HexclaveClientAppJson` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppJson<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppConstructorOptions<HasTokenStore, ProjectId> & { inheritsFrom?: undefined } & {\n  uniqueIdentifier: string,\n  // note: if you add more fields here, make sure to ensure the checkString in the constructor has/doesn't have them\n};\n\n/** @deprecated Use `HexclaveClientApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = (\n  & {\n    readonly projectId: ProjectId,\n\n    /**\n     * The version of the Hexclave SDK.\n     */\n    readonly version: string,\n\n    /**\n     * @deprecated Do not use `app.urls` for navigation. It is static and does not include runtime redirect-back,\n     * cross-domain auth, or sign-out state. Use the matching `redirectToXyz()` method instead, for example\n     * `redirectToSignIn()`, `redirectToSignUp()`, `redirectToSignOut()`, or `redirectToAccountSettings()`.\n     */\n    readonly urls: Readonly<ResolvedHandlerUrls>,\n\n    signInWithOAuth(provider: string, options?: { returnTo?: string }): Promise<void>,\n    signInWithCredential(options: { email: string, password: string, noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"EmailPasswordMismatch\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n    signUpWithCredential(options: {\n      email: string,\n      password: string,\n      noRedirect?: boolean,\n    } & ({ noVerificationCallback: true } | { noVerificationCallback?: false, verificationCallbackUrl?: string })): Promise<Result<undefined, KnownErrors[\"UserWithEmailAlreadyExists\"] | KnownErrors[\"ContactChannelAlreadyUsedForAuthBySomeoneElse\"] | KnownErrors[\"PasswordRequirementsNotMet\"] | KnownErrors[\"BotChallengeFailed\"]>>,\n    signInWithPasskey(): Promise<Result<undefined, KnownErrors[\"PasskeyAuthenticationFailed\"] | KnownErrors[\"InvalidTotpCode\"] | KnownErrors[\"PasskeyWebAuthnError\"]>>,\n    callOAuthCallback(): Promise<boolean>,\n    promptCliLogin(options: { appUrl: string, expiresInMillis?: number, anonRefreshToken?: string, promptLink?: (url: string, loginCode: string) => void }): Promise<Result<string, KnownErrors[\"CliAuthError\"] | KnownErrors[\"CliAuthExpiredError\"] | KnownErrors[\"CliAuthUsedError\"]>>,\n    sendForgotPasswordEmail(email: string, options?: { callbackUrl?: string }): Promise<Result<undefined, KnownErrors[\"UserNotFound\"]>>,\n    sendMagicLinkEmail(email: string, options?: { callbackUrl?: string }): Promise<Result<{ nonce: string }, KnownErrors[\"RedirectUrlNotWhitelisted\"] | KnownErrors[\"BotChallengeFailed\"]>>,\n    resetPassword(options: { code: string, password: string }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    verifyPasswordResetCode(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    verifyTeamInvitationCode(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    acceptTeamInvitation(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    getTeamInvitationDetails(code: string): Promise<Result<{ teamDisplayName: string }, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    verifyEmail(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    signInWithMagicLink(code: string, options?: { noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n    signInWithMfa(otp: string, code: string, options?: { noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n\n    redirectToOAuthCallback(): Promise<void>,\n\n    getConvexClientAuth(options: HasTokenStore extends false ? { tokenStore: TokenStoreInit } : { tokenStore?: TokenStoreInit }): (args: { forceRefreshToken: boolean }) => Promise<string | null>,\n    getConvexHttpClientAuth(options: { tokenStore: TokenStoreInit }): Promise<string>,\n\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): ProjectCurrentUser<ProjectId>,\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): ProjectCurrentUser<ProjectId>,\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): ProjectCurrentUser<ProjectId>,\n    useUser(options?: GetCurrentUserOptions<HasTokenStore>): ProjectCurrentUser<ProjectId> | null,\n\n    /**\n     * @deprecated Whether an app object has server permissions does not determine whether this\n     * call runs in a browser, so an async read should not implicitly choose a navigation strategy.\n     * In React, use useUser({ or: \"redirect\" }). Otherwise, call getUser() and explicitly invoke\n     * redirectToSignIn() from browser code when it returns null.\n     */\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options?: GetCurrentUserOptions<HasTokenStore>): Promise<ProjectCurrentUser<ProjectId> | null>,\n\n    cancelSubscription(options: { productId: string, subscriptionId?: string } | { productId: string, subscriptionId?: string, teamId: string }): Promise<void>,\n\n    // note: we don't special-case 'anonymous' here to return non-null, see GetPartialUserOptions for more details\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'token' }): Promise<TokenPartialUser | null>,\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'convex' }): Promise<TokenPartialUser | null>,\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore>): Promise<SyncedPartialUser | TokenPartialUser | null>,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'token' }): TokenPartialUser | null,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'convex' }): TokenPartialUser | null,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore>): SyncedPartialUser | TokenPartialUser | null,\n    useNavigate(): (to: string) => void, // THIS_LINE_PLATFORM react-like\n\n    [hexclaveAppInternalsSymbol]: {\n      toClientJson(): StackClientAppJson<HasTokenStore, ProjectId>,\n      setCurrentUser(userJsonPromise: Promise<CurrentUserCrud['Client']['Read'] | null>): void,\n      getConstructorOptions(): StackClientAppConstructorOptions<HasTokenStore, ProjectId> & { inheritsFrom?: undefined },\n      sendSessionReplayBatch(body: string, options: { keepalive: boolean }): Promise<Result<Response, Error>>,\n      sendAnalyticsEventBatch(body: string, options: { keepalive: boolean }): Promise<Result<Response, Error>>,\n      addRequestListener(listener: RequestListener): () => void,\n      sendRequest(path: string, requestOptions: RequestInit, requestType?: \"client\" | \"server\" | \"admin\"): Promise<Response>,\n      getUrls(): Readonly<ResolvedHandlerUrls>,\n      getRedirectMethod(): RedirectMethod,\n      redirectToUrl(url: string | URL, options?: { replace?: boolean }): Promise<void>,\n      getRedirectToHandlerUrl(handlerName: keyof HandlerUrls, options?: RedirectToOptions): Promise<string>,\n      redirectToHandler(handlerName: keyof HandlerUrls, options?: RedirectToOptions): Promise<void>,\n      /** Raw flow metadata only. Never navigate to this value without normal redirect validation. */\n      getRawAfterAuthReturnTo(): string | null,\n      signInWithTokens(tokens: { accessToken: string, refreshToken: string }): Promise<void>,\n      awaitPendingAuthResolutions(): Promise<void>,\n      isTrustedRedirectUrl(url: string): Promise<boolean>,\n    },\n  }\n  & AsyncStoreProperty<\"project\", [], Project, false>\n  & AsyncStoreProperty<\n    \"item\",\n    [{ itemId: string, userId: string } | { itemId: string, teamId: string } | { itemId: string, customCustomerId: string }],\n    Item,\n    false\n  >\n  & AsyncStoreProperty<\n    \"products\",\n    [options: CustomerProductsRequestOptions],\n    CustomerProductsList,\n    true\n  >\n  & AsyncStoreProperty<\n    \"invoices\",\n    [options: CustomerInvoicesRequestOptions],\n    CustomerInvoicesList,\n    true\n  >\n  & { [K in `redirectTo${Capitalize<keyof Omit<HandlerUrls, 'handler' | 'oauthCallback'>>}`]: (options?: RedirectToOptions) => Promise<void> }\n  & AuthLike<HasTokenStore extends false ? { tokenStore: TokenStoreInit } : { tokenStore?: TokenStoreInit }>\n);\n/** @deprecated Use `HexclaveClientAppConstructor` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppConstructor = {\n  new <\n    TokenStoreType extends string,\n    HasTokenStore extends (TokenStoreType extends {} ? true : boolean),\n    ProjectId extends string\n  >(options: StackClientAppConstructorOptions<HasTokenStore, ProjectId>): StackClientApp<HasTokenStore, ProjectId>,\n  new(options: StackClientAppConstructorOptions<boolean, string>): StackClientApp<boolean, string>,\n\n  [hexclaveAppInternalsSymbol]: {\n    fromClientJson<HasTokenStore extends boolean, ProjectId extends string>(\n      json: StackClientAppJson<HasTokenStore, ProjectId>\n    ): StackClientApp<HasTokenStore, ProjectId>,\n  },\n};\nexport type HexclaveClientAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppConstructorOptions<HasTokenStore, ProjectId>;\nexport type HexclaveClientAppJson<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppJson<HasTokenStore, ProjectId>;\nexport type HexclaveClientApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = StackClientApp<HasTokenStore, ProjectId>;\nexport type HexclaveClientAppConstructor = StackClientAppConstructor;\nexport const HexclaveClientApp: HexclaveClientAppConstructor = _HexclaveClientAppImpl;\n/** @deprecated Use `HexclaveClientApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport const StackClientApp: StackClientAppConstructor = HexclaveClientApp;\n"],"mappings":";;AAwMA,MAAa,oBAAkD;;AAE/D,MAAa,iBAA4C"}
+{"version":3,"file":"client-app.js","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/interfaces/client-app.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { KnownErrors } from \"@hexclave/shared\";\nimport type { RequestListener } from \"@hexclave/shared/dist/interface/client-interface\";\nimport { CurrentUserCrud } from \"@hexclave/shared/dist/interface/crud/current-user\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { AsyncStoreProperty, AuthLike, GetCurrentPartialUserOptions, GetCurrentUserOptions, HandlerUrlOptions, HandlerUrls, hexclaveAppInternalsSymbol, OAuthScopesOnSignIn, RedirectMethod, RedirectToOptions, ResolvedHandlerUrls, TokenStoreInit } from \"../../common\";\nimport { CustomerInvoicesList, CustomerInvoicesRequestOptions, CustomerProductsList, CustomerProductsRequestOptions, Item } from \"../../customers\";\nimport { Project } from \"../../projects\";\nimport { ProjectCurrentUser, SyncedPartialUser, TokenPartialUser } from \"../../users\";\nimport { _HexclaveClientAppImpl } from \"../implementations\";\nimport { AnalyticsOptions } from \"../implementations/session-replay\";\n\n/** @deprecated Use `HexclaveClientAppConstructorOptions` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = {\n  baseUrl?: string | { browser: string, server: string },\n  extraRequestHeaders?: Record<string, string>,\n  projectId?: ProjectId,\n  publishableClientKey?: string,\n  urls?: HandlerUrlOptions,\n  oauthScopesOnSignIn?: Partial<OAuthScopesOnSignIn>,\n  tokenStore?: TokenStoreInit<HasTokenStore>,\n  redirectMethod?: RedirectMethod,\n  inheritsFrom?: StackClientApp<any, any>,\n\n  /**\n   * Whether to show the Hexclave dev tool indicator in browser-like environments.\n   *\n   * - `true`: always show\n   * - `false`: never show\n   * - `\"auto\"` (default): show based on NODE_ENV or origin heuristics\n   */\n  devTool?: boolean | \"auto\",\n\n  /**\n   * By default, the Stack app will automatically prefetch some data from Stack's server when this app is first\n   * constructed. This improves the performance of your app, but will create network requests that are unnecessary if\n   * the app is never used or disposed of immediately. To disable this behavior, set this option to true.\n   */\n  noAutomaticPrefetch?: boolean,\n\n  /**\n   * Whether the constructor starts browser integrations and other automatic side effects. Defaults to `true`.\n   *\n   * Set this to `false` when the app is instantiated inside a custom dashboard. Explicit method calls remain\n   * available and can still perform their documented side effects.\n   */\n  automaticSideEffects?: boolean,\n\n  /**\n   * Options for analytics and session recording. Replays are enabled by default;\n   * set `{ replays: { enabled: false } }` to opt out.\n   */\n  analytics?: AnalyticsOptions,\n} & (\n  { tokenStore: TokenStoreInit<HasTokenStore> } | { tokenStore?: undefined, inheritsFrom: StackClientApp<HasTokenStore, any> }\n) & (\n  string extends ProjectId ? unknown : ({ projectId: ProjectId } | { inheritsFrom: StackClientApp<any, ProjectId> })\n);\n\n\n/** @deprecated Use `HexclaveClientAppJson` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppJson<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppConstructorOptions<HasTokenStore, ProjectId> & { inheritsFrom?: undefined } & {\n  uniqueIdentifier: string,\n  // note: if you add more fields here, make sure to ensure the checkString in the constructor has/doesn't have them\n};\n\n/** @deprecated Use `HexclaveClientApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = (\n  & {\n    readonly projectId: ProjectId,\n\n    /**\n     * The version of the Hexclave SDK.\n     */\n    readonly version: string,\n\n    /**\n     * @deprecated Do not use `app.urls` for navigation. It is static and does not include runtime redirect-back,\n     * cross-domain auth, or sign-out state. Use the matching `redirectToXyz()` method instead, for example\n     * `redirectToSignIn()`, `redirectToSignUp()`, `redirectToSignOut()`, or `redirectToAccountSettings()`.\n     */\n    readonly urls: Readonly<ResolvedHandlerUrls>,\n    /** Whether this app delegates authentication to an external provider token store. */\n    isExternalAuthApp(): boolean,\n\n    /**\n     * Marks the current page as one that should record analytics (page views, clicks, session replays, and clickmaps).\n     *\n     * Analytics capture starts automatically when the client app is constructed in the browser, so this function doesn't\n     * start anything itself. Call it at the top level of a client-side module that is loaded on every page you want to\n     * track (for example, your app's root layout or entry file); the call guarantees that the module creating the client\n     * app is actually imported, and therefore constructed, on that page.\n     *\n     * Throws if this app will never record analytics because of its constructor options (`analytics.enabled: false`,\n     * `automaticSideEffects: false`, or a `null` token store). If the Analytics app turns out to be disabled on the\n     * project, an error is reported as soon as the backend rejects the first upload. Outside the browser (eg. during\n     * server-side rendering), it doesn't throw for that reason alone.\n     */\n    initAnalytics(): void,\n\n    signInWithOAuth(provider: string, options?: { returnTo?: string }): Promise<void>,\n    signInWithCredential(options: { email: string, password: string, noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"EmailPasswordMismatch\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n    signUpWithCredential(options: {\n      email: string,\n      password: string,\n      noRedirect?: boolean,\n    } & ({ noVerificationCallback: true } | { noVerificationCallback?: false, verificationCallbackUrl?: string })): Promise<Result<undefined, KnownErrors[\"UserWithEmailAlreadyExists\"] | KnownErrors[\"ContactChannelAlreadyUsedForAuthBySomeoneElse\"] | KnownErrors[\"PasswordRequirementsNotMet\"] | KnownErrors[\"BotChallengeFailed\"]>>,\n    signInWithPasskey(): Promise<Result<undefined, KnownErrors[\"PasskeyAuthenticationFailed\"] | KnownErrors[\"InvalidTotpCode\"] | KnownErrors[\"PasskeyWebAuthnError\"]>>,\n    callOAuthCallback(): Promise<boolean>,\n    promptCliLogin(options: { appUrl: string, expiresInMillis?: number, anonRefreshToken?: string, promptLink?: (url: string, loginCode: string) => void }): Promise<Result<string, KnownErrors[\"CliAuthError\"] | KnownErrors[\"CliAuthExpiredError\"] | KnownErrors[\"CliAuthUsedError\"]>>,\n    sendForgotPasswordEmail(email: string, options?: { callbackUrl?: string }): Promise<Result<undefined, KnownErrors[\"UserNotFound\"]>>,\n    sendMagicLinkEmail(email: string, options?: { callbackUrl?: string }): Promise<Result<{ nonce: string }, KnownErrors[\"RedirectUrlNotWhitelisted\"] | KnownErrors[\"BotChallengeFailed\"]>>,\n    resetPassword(options: { code: string, password: string }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    verifyPasswordResetCode(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    verifyTeamInvitationCode(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    acceptTeamInvitation(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    getTeamInvitationDetails(code: string): Promise<Result<{ teamDisplayName: string }, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    verifyEmail(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    signInWithMagicLink(code: string, options?: { noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n    signInWithMfa(otp: string, code: string, options?: { noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n\n    redirectToOAuthCallback(): Promise<void>,\n\n    getConvexClientAuth(options: HasTokenStore extends false ? { tokenStore: TokenStoreInit } : { tokenStore?: TokenStoreInit }): (args: { forceRefreshToken: boolean }) => Promise<string | null>,\n    getConvexHttpClientAuth(options: { tokenStore: TokenStoreInit }): Promise<string>,\n\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): ProjectCurrentUser<ProjectId>,\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): ProjectCurrentUser<ProjectId>,\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): ProjectCurrentUser<ProjectId>,\n    useUser(options?: GetCurrentUserOptions<HasTokenStore>): ProjectCurrentUser<ProjectId> | null,\n\n    /**\n     * @deprecated Whether an app object has server permissions does not determine whether this\n     * call runs in a browser, so an async read should not implicitly choose a navigation strategy.\n     * In React, use useUser({ or: \"redirect\" }). Otherwise, call getUser() and explicitly invoke\n     * redirectToSignIn() from browser code when it returns null.\n     */\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options?: GetCurrentUserOptions<HasTokenStore>): Promise<ProjectCurrentUser<ProjectId> | null>,\n\n    cancelSubscription(options: { productId: string, subscriptionId?: string } | { productId: string, subscriptionId?: string, teamId: string }): Promise<void>,\n\n    // note: we don't special-case 'anonymous' here to return non-null, see GetPartialUserOptions for more details\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'token' }): Promise<TokenPartialUser | null>,\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'convex' }): Promise<TokenPartialUser | null>,\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore>): Promise<SyncedPartialUser | TokenPartialUser | null>,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'token' }): TokenPartialUser | null,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'convex' }): TokenPartialUser | null,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore>): SyncedPartialUser | TokenPartialUser | null,\n    useNavigate(): (to: string) => void, // THIS_LINE_PLATFORM react-like\n\n    [hexclaveAppInternalsSymbol]: {\n      toClientJson(): StackClientAppJson<HasTokenStore, ProjectId>,\n      setCurrentUser(userJsonPromise: Promise<CurrentUserCrud['Client']['Read'] | null>): void,\n      getConstructorOptions(): StackClientAppConstructorOptions<HasTokenStore, ProjectId> & { inheritsFrom?: undefined },\n      sendSessionReplayBatch(body: string, options: { keepalive: boolean }): Promise<Result<Response, Error>>,\n      sendAnalyticsEventBatch(body: string, options: { keepalive: boolean }): Promise<Result<Response, Error>>,\n      addRequestListener(listener: RequestListener): () => void,\n      sendRequest(path: string, requestOptions: RequestInit, requestType?: \"client\" | \"server\" | \"admin\"): Promise<Response>,\n      getUrls(): Readonly<ResolvedHandlerUrls>,\n      getRedirectMethod(): RedirectMethod,\n      redirectToUrl(url: string | URL, options?: { replace?: boolean }): Promise<void>,\n      getRedirectToHandlerUrl(handlerName: keyof HandlerUrls, options?: RedirectToOptions): Promise<string>,\n      redirectToHandler(handlerName: keyof HandlerUrls, options?: RedirectToOptions): Promise<void>,\n      /** Raw flow metadata only. Never navigate to this value without normal redirect validation. */\n      getRawAfterAuthReturnTo(): string | null,\n      signInWithTokens(tokens: { accessToken: string, refreshToken: string }): Promise<void>,\n      awaitPendingAuthResolutions(): Promise<void>,\n      isTrustedRedirectUrl(url: string): Promise<boolean>,\n    },\n  }\n  & AsyncStoreProperty<\"project\", [], Project, false>\n  & AsyncStoreProperty<\n    \"item\",\n    [{ itemId: string, userId: string } | { itemId: string, teamId: string } | { itemId: string, customCustomerId: string }],\n    Item,\n    false\n  >\n  & AsyncStoreProperty<\n    \"products\",\n    [options: CustomerProductsRequestOptions],\n    CustomerProductsList,\n    true\n  >\n  & AsyncStoreProperty<\n    \"invoices\",\n    [options: CustomerInvoicesRequestOptions],\n    CustomerInvoicesList,\n    true\n  >\n  & { [K in `redirectTo${Capitalize<keyof Omit<HandlerUrls, 'handler' | 'oauthCallback'>>}`]: (options?: RedirectToOptions) => Promise<void> }\n  & AuthLike<HasTokenStore extends false ? { tokenStore: TokenStoreInit } : { tokenStore?: TokenStoreInit }>\n);\n/** @deprecated Use `HexclaveClientAppConstructor` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppConstructor = {\n  new <\n    TokenStoreType extends string,\n    HasTokenStore extends (TokenStoreType extends {} ? true : boolean),\n    ProjectId extends string\n  >(options: StackClientAppConstructorOptions<HasTokenStore, ProjectId>): StackClientApp<HasTokenStore, ProjectId>,\n  new(options: StackClientAppConstructorOptions<boolean, string>): StackClientApp<boolean, string>,\n\n  [hexclaveAppInternalsSymbol]: {\n    fromClientJson<HasTokenStore extends boolean, ProjectId extends string>(\n      json: StackClientAppJson<HasTokenStore, ProjectId>\n    ): StackClientApp<HasTokenStore, ProjectId>,\n  },\n};\nexport type HexclaveClientAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppConstructorOptions<HasTokenStore, ProjectId>;\nexport type HexclaveClientAppJson<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppJson<HasTokenStore, ProjectId>;\nexport type HexclaveClientApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = StackClientApp<HasTokenStore, ProjectId>;\nexport type HexclaveClientAppConstructor = StackClientAppConstructor;\nexport const HexclaveClientApp: HexclaveClientAppConstructor = _HexclaveClientAppImpl;\n/** @deprecated Use `HexclaveClientApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport const StackClientApp: StackClientAppConstructor = HexclaveClientApp;\n"],"mappings":";;AAyNA,MAAa,oBAAkD;;AAE/D,MAAa,iBAA4C"}

package/dist/esm/lib/hexclave-app/common.d.ts

@@ -1,6 +1,7 @@
 import { DefaultHandlerUrlTarget, HandlerPageUrls, HandlerRedirectUrls, HandlerUrlOptions, HandlerUrlTarget, HandlerUrls, ResolvedHandlerUrls } from "@hexclave/shared/dist/interface/handler-urls";
 import { GenericQueryCtx, UserIdentity } from "convex/server";
 import { ProviderType } from "@hexclave/shared/dist/utils/oauth";
+import { ExternalAuthProviderId } from "@hexclave/shared/dist/interface/external-auth";
 
 //#region src/lib/hexclave-app/common.d.ts
 type RedirectToOptions = {
@@ -56,10 +57,21 @@ type RequestLike = {
     get: (name: string) => string | null;
   } | Record<string, string | null>;
 };
+type ExternalTokenStore = {
+  readonly type: "external";
+  readonly providerId: ExternalAuthProviderId;
+  getSessionId?(): string | null;
+  getToken(): Promise<string | null>; /** The adapter retains this subscription for its own lifetime and does not unsubscribe it. */
+  subscribe?(callback: () => void): () => void;
+};
+type ExternalTokenStoreOptions = Omit<ExternalTokenStore, "type" | "providerId">;
+declare function clerkTokenStore(options: ExternalTokenStoreOptions): ExternalTokenStore;
+declare function betterAuthTokenStore(options: ExternalTokenStoreOptions): ExternalTokenStore;
+declare function workosTokenStore(options: ExternalTokenStoreOptions): ExternalTokenStore;
 type TokenStoreInit<HasTokenStore extends boolean = boolean> = HasTokenStore extends true ? ("cookie" | "nextjs-cookie" | "memory" | RequestLike | {
   accessToken: string;
   refreshToken: string;
-}) : HasTokenStore extends false ? null : TokenStoreInit<true> | TokenStoreInit<false>;
+} | ExternalTokenStore) : HasTokenStore extends false ? null : TokenStoreInit<true> | TokenStoreInit<false>;
 type OAuthScopesOnSignIn = { [key in ProviderType]: string[] };
 /**
  * Contains the authentication methods without session-related fields.
@@ -179,5 +191,5 @@ type AuthLike<ExtraOptions = {}> = {
 /** @internal */
 declare const hexclaveAppInternalsSymbol: unique symbol;
 //#endregion
-export { AsyncStoreProperty, AuthLike, ConvexCtx, type DefaultHandlerUrlTarget, EmailConfig, GetCurrentPartialUserOptions, GetCurrentUserOptions, type HandlerPageUrls, type HandlerRedirectUrls, type HandlerUrlOptions, type HandlerUrlTarget, type HandlerUrls, OAuthScopesOnSignIn, RedirectMethod, RedirectToOptions, RequestLike, type ResolvedHandlerUrls, TokenStoreInit, hexclaveAppInternalsSymbol };
+export { AsyncStoreProperty, AuthLike, ConvexCtx, type DefaultHandlerUrlTarget, EmailConfig, ExternalTokenStore, GetCurrentPartialUserOptions, GetCurrentUserOptions, type HandlerPageUrls, type HandlerRedirectUrls, type HandlerUrlOptions, type HandlerUrlTarget, type HandlerUrls, OAuthScopesOnSignIn, RedirectMethod, RedirectToOptions, RequestLike, type ResolvedHandlerUrls, TokenStoreInit, betterAuthTokenStore, clerkTokenStore, hexclaveAppInternalsSymbol, workosTokenStore };
 //# sourceMappingURL=common.d.ts.map

package/dist/esm/lib/hexclave-app/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","names":[],"sources":["../../../../src/lib/hexclave-app/common.ts"],"mappings":";;;;;KAgBY,iBAAA;EACV,OAAA;EACA,cAAc;AAAA;AAAA,KAGJ,kBAAA,4FACK,UAAA,iCAA2C,UAAA,CAAW,IAAA,UAAc,IAAA,EAAM,IAAA,KAAS,OAAA,CAAQ,KAAA,sBACxF,UAAA,CAAW,IAAA,UAAc,IAAA,EAAM,IAAA,KAAS,KAAA;AAAA,KAEhD,WAAA;EACV,IAAA;EACA,IAAA;EACA,QAAA;EACA,QAAA;EACA,WAAA;EACA,UAAA;AAAA;AAAA,KAGU,cAAA;EAIR,WAAA,SAAoB,EAAA;EACpB,QAAA,IAAY,EAAA;AAAA;AAAA,KAIJ,qBAAA;EAER,EAAA,wDAxB2B;EAAqB;;;;;;;;EAiChD,iBAAA;EACA,UAAA,GAAa,cAAA;AAAA,KAEZ,aAAA;EACD,UAAA,EAAY,cAAA;AAAA;AAAA,KAGJ,SAAA,GACV,eAAA;EACE,IAAA;IAAQ,eAAA,QAAuB,OAAA,CAAQ,YAAA;EAAA;AAAA;AAAA,KAE/B,4BAAA;EAER,EAAA;EACA,UAAA,GAAa,cAAA;AAAA;EAIX,IAAA;AAAA;EAGA,IAAA;EACA,GAAA,EAAK,SAAA;AAAA,MAGN,aAAA;EACD,UAAA,EAAY,cAAA;AAAA;AAAA,KAGJ,WAAA;EACV,OAAA;IAEI,GAAA,GAAM,IAAA;EAAA,IAEN,MAAM;AAAA;AAAA,KAGA,cAAA,4CACV,aAAA,yDAII,WAAA;EACE,WAAA;EAAqB,YAAA;AAAA,KAEzB,aAAA,wBACA,cAAA,SAAuB,cAAA;AAAA,KAEf,mBAAA,aACF,YAAY;AA5DtB;;;;AAAA,KAmEY,QAAA;EACV,OAAA,CAAQ,OAAA;IAAY,WAAA,GAAc,GAAA;EAAA,IAAiB,YAAA,GAAe,OAAA;EAClE,OAAA,CAAQ,OAAA;IAAY,WAAA,GAAc,GAAA;EAAA,IAAiB,OAAA;EAzDjD;;;;;;EAiEF,cAAA,CAAe,OAAA,QAAe,YAAA,GAAe,OAAA;EAC7C,cAAA,CAAe,OAAA,QAAe,YAAA;EA5DX;;;;;;EAoEnB,eAAA,CAAgB,OAAA,QAAe,YAAA,GAAe,OAAA;EAC9C,eAAA,CAAgB,OAAA,QAAe,YAAA;EAnE7B;;;;;AAAmD;AAEvD;;;;;;;;;;;;;;;;;;;;;AAe8B;AAG9B;;;;;;;;;AAKY;EAkFV,sBAAA,CAAuB,OAAA,QAAe,YAAA,GAAe,OAAA;EACrD,sBAAA,CAAuB,OAAA,QAAe,YAAA;EAhFd;;;;;;EAwFxB,cAAA,CAAe,OAAA,QAAe,YAAA,GAAe,OAAA;IAAU,cAAA;EAAA,IAvFvD;EAyFA,cAAA,CAAe,OAAA,QAAe,YAAA;IAAiB,cAAA;EAAA;EAlF7C;;;;AACqC;AAEzC;;;;AACsB;AAOtB;;;;;;;;;;;;;;;;;EAoGE,WAAA,CAAY,OAAA,QAAe,YAAA,GAAe,OAAA;IAAU,WAAA;IAA4B,YAAA;EAAA;EAChF,WAAA,CAAY,OAAA,QAAe,YAAA;IAAiB,WAAA;IAA4B,YAAA;EAAA;AAAA;;cAI7D,0BAAA"}
+{"version":3,"file":"common.d.ts","names":[],"sources":["../../../../src/lib/hexclave-app/common.ts"],"mappings":";;;;;;KAiBY,iBAAA;EACV,OAAA;EACA,cAAc;AAAA;AAAA,KAGJ,kBAAA,4FACK,UAAA,iCAA2C,UAAA,CAAW,IAAA,UAAc,IAAA,EAAM,IAAA,KAAS,OAAA,CAAQ,KAAA,sBACxF,UAAA,CAAW,IAAA,UAAc,IAAA,EAAM,IAAA,KAAS,KAAA;AAAA,KAEhD,WAAA;EACV,IAAA;EACA,IAAA;EACA,QAAA;EACA,QAAA;EACA,WAAA;EACA,UAAA;AAAA;AAAA,KAGU,cAAA;EAIR,WAAA,SAAoB,EAAA;EACpB,QAAA,IAAY,EAAA;AAAA;AAAA,KAIJ,qBAAA;EAER,EAAA,wDAxB2B;EAAqB;;;;;;;;EAiChD,iBAAA;EACA,UAAA,GAAa,cAAA;AAAA,KAEZ,aAAA;EACD,UAAA,EAAY,cAAA;AAAA;AAAA,KAGJ,SAAA,GACV,eAAA;EACE,IAAA;IAAQ,eAAA,QAAuB,OAAA,CAAQ,YAAA;EAAA;AAAA;AAAA,KAE/B,4BAAA;EAER,EAAA;EACA,UAAA,GAAa,cAAA;AAAA;EAIX,IAAA;AAAA;EAGA,IAAA;EACA,GAAA,EAAK,SAAA;AAAA,MAGN,aAAA;EACD,UAAA,EAAY,cAAA;AAAA;AAAA,KAGJ,WAAA;EACV,OAAA;IAEI,GAAA,GAAM,IAAA;EAAA,IAEN,MAAM;AAAA;AAAA,KAGA,kBAAA;EAAA,SACD,IAAA;EAAA,SACA,UAAA,EAAY,sBAAA;EACrB,YAAA;EACA,QAAA,IAAY,OAAO,iBAxDK;EA0DxB,SAAA,EAAW,QAAA;AAAA;AAAA,KAGR,yBAAA,GAA4B,IAAI,CAAC,kBAAA;AAAA,iBAUtB,eAAA,CAAgB,OAAA,EAAS,yBAAA,GAA4B,kBAAkB;AAAA,iBAIvE,oBAAA,CAAqB,OAAA,EAAS,yBAAA,GAA4B,kBAAkB;AAAA,iBAI5E,gBAAA,CAAiB,OAAA,EAAS,yBAAA,GAA4B,kBAAkB;AAAA,KAI5E,cAAA,4CACV,aAAA,yDAII,WAAA;EACE,WAAA;EAAqB,YAAA;AAAA,IACvB,kBAAA,IAEF,aAAA,wBACA,cAAA,SAAuB,cAAA;AAAA,KAEf,mBAAA,aACF,YAAY;;;;;KAOV,QAAA;EACV,OAAA,CAAQ,OAAA;IAAY,WAAA,GAAc,GAAA;EAAA,IAAiB,YAAA,GAAe,OAAA;EAClE,OAAA,CAAQ,OAAA;IAAY,WAAA,GAAc,GAAA;EAAA,IAAiB,OAAA;EAjFlB;;;;;;EAyFjC,cAAA,CAAe,OAAA,QAAe,YAAA,GAAe,OAAA;EAC7C,cAAA,CAAe,OAAA,QAAe,YAAA;EA1FuB;AAAA;AAEvD;;;;EAgGE,eAAA,CAAgB,OAAA,QAAe,YAAA,GAAe,OAAA;EAC9C,eAAA,CAAgB,OAAA,QAAe,YAAA;EAlFjB;;;;;;;;;;;;;;;AAAc;AAG9B;;;;;;;;;AAKY;AAGZ;;;;;;;;;;;;EA+GE,sBAAA,CAAuB,OAAA,QAAe,YAAA,GAAe,OAAA;EACrD,sBAAA,CAAuB,OAAA,QAAe,YAAA;EAvGnC;;;;AAAmD;AAUxD;EAqGE,cAAA,CAAe,OAAA,QAAe,YAAA,GAAe,OAAA;IAAU,cAAA;EAAA,IArGhB;EAuGvC,cAAA,CAAe,OAAA,QAAe,YAAA;IAAiB,cAAA;EAAA;EAvGsC;AAIvF;;;;;;;;AAA4F;AAI5F;;;;;;;;AAAwF;AAIxF;;;;;;;;EAwHE,WAAA,CAAY,OAAA,QAAe,YAAA,GAAe,OAAA;IAAU,WAAA;IAA4B,YAAA;EAAA;EAChF,WAAA,CAAY,OAAA,QAAe,YAAA;IAAiB,WAAA;IAA4B,YAAA;EAAA;AAAA;;cAI7D,0BAAA"}

package/dist/esm/lib/hexclave-app/common.js

@@ -1,7 +1,23 @@
 //#region src/lib/hexclave-app/common.ts
+function createExternalTokenStore(providerId, options) {
+	return {
+		...options,
+		type: "external",
+		providerId
+	};
+}
+function clerkTokenStore(options) {
+	return createExternalTokenStore("clerk-integration", options);
+}
+function betterAuthTokenStore(options) {
+	return createExternalTokenStore("better-auth-integration", options);
+}
+function workosTokenStore(options) {
+	return createExternalTokenStore("workos-integration", options);
+}
 /** @internal */
 const hexclaveAppInternalsSymbol = Symbol.for("StackAuth--DO-NOT-USE-OR-YOU-WILL-BE-FIRED--StackAppInternals");
 //#endregion
-export { hexclaveAppInternalsSymbol };
+export { betterAuthTokenStore, clerkTokenStore, hexclaveAppInternalsSymbol, workosTokenStore };
 
 //# sourceMappingURL=common.js.map

package/dist/esm/lib/hexclave-app/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","names":[],"sources":["../../../../src/lib/hexclave-app/common.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { ProviderType } from \"@hexclave/shared/dist/utils/oauth\";\nimport type { GenericQueryCtx, UserIdentity } from \"convex/server\";\nexport type {\n  DefaultHandlerUrlTarget,\n  HandlerPageUrls,\n  HandlerRedirectUrls,\n  HandlerUrlOptions,\n  HandlerUrlTarget,\n  HandlerUrls,\n  ResolvedHandlerUrls,\n} from \"@hexclave/shared/dist/interface/handler-urls\";\n\nexport type RedirectToOptions = {\n  replace?: boolean,\n  noRedirectBack?: boolean,\n};\n\nexport type AsyncStoreProperty<Name extends string, Args extends any[], Value, IsMultiple extends boolean> =\n  & { [key in `${IsMultiple extends true ? \"list\" : \"get\"}${Capitalize<Name>}`]: (...args: Args) => Promise<Value> }\n  & { [key in `use${Capitalize<Name>}`]: (...args: Args) => Value } // THIS_LINE_PLATFORM react-like\n\nexport type EmailConfig = {\n  host: string,\n  port: number,\n  username: string,\n  password: string,\n  senderEmail: string,\n  senderName: string,\n}\n\nexport type RedirectMethod = \"window\"\n  | \"nextjs\" // THIS_LINE_PLATFORM next\n  | \"none\"\n  | {\n    useNavigate: () => (to: string) => void,\n    navigate?: (to: string) => void,\n  }\n\n\nexport type GetCurrentUserOptions<HasTokenStore> =\n  & {\n    or?: 'redirect' | 'throw' | 'return-null' | 'anonymous' | /** @deprecated */ 'anonymous-if-exists[deprecated]',\n    /**\n     * Whether to include restricted users (users who haven't completed onboarding requirements like email verification).\n     * By default, restricted users are filtered out (treated similar to anonymous users).\n     *\n     * Note: This option cannot be set to false when `or: 'anonymous'` is used, as all anonymous users are also restricted.\n     *\n     * @default false\n     */\n    includeRestricted?: boolean,\n    tokenStore?: TokenStoreInit,\n  }\n  & (HasTokenStore extends false ? {\n    tokenStore: TokenStoreInit,\n  } : {});\n\nexport type ConvexCtx =\n| GenericQueryCtx<any>\n| { auth: { getUserIdentity: () => Promise<UserIdentity | null> } };\n\nexport type GetCurrentPartialUserOptions<HasTokenStore> =\n  & {\n    or?: 'return-null' | 'anonymous-if-exists',  // note: unlike normal getUser, 'anonymous' still returns null sometimes (eg. if no token is present)\n    tokenStore?: TokenStoreInit,\n  }\n  & (\n    | {\n      from: 'token',\n    }\n    | {\n      from: 'convex',\n      ctx: ConvexCtx,\n    }\n  )\n  & (HasTokenStore extends false ? {\n    tokenStore: TokenStoreInit,\n  } : {});\n\nexport type RequestLike = {\n  headers:\n    | {\n      get: (name: string) => string | null,\n    }\n    | Record<string, string | null>,\n};\n\nexport type TokenStoreInit<HasTokenStore extends boolean = boolean> =\n  HasTokenStore extends true ? (\n    | \"cookie\"\n    | \"nextjs-cookie\"\n    | \"memory\"\n    | RequestLike\n    | { accessToken: string, refreshToken: string }\n  )\n  : HasTokenStore extends false ? null\n  : TokenStoreInit<true> | TokenStoreInit<false>;\n\nexport type OAuthScopesOnSignIn = {\n  [key in ProviderType]: string[];\n};\n\n/**\n * Contains the authentication methods without session-related fields.\n * Used for apps that have token storage capabilities.\n */\nexport type AuthLike<ExtraOptions = {}> = {\n  signOut(options?: { redirectUrl?: URL | string } & ExtraOptions): Promise<void>,\n  signOut(options?: { redirectUrl?: URL | string }): Promise<void>,\n\n  /**\n   * Returns the current access token, or null if the user is not signed in.\n   *\n   * The access token is a short-lived JWT that can be used to authenticate requests to external servers.\n   * It will be automatically refreshed when it expires.\n   */\n  getAccessToken(options?: {} & ExtraOptions): Promise<string | null>,\n  useAccessToken(options?: {} & ExtraOptions): string | null, // THIS_LINE_PLATFORM react-like\n\n  /**\n   * Returns the current refresh token, or null if the user is not signed in.\n   *\n   * The refresh token is a long-lived token that can be used to obtain new access tokens.\n   * It should be kept secret and never exposed to the client.\n   */\n  getRefreshToken(options?: {} & ExtraOptions): Promise<string | null>,\n  useRefreshToken(options?: {} & ExtraOptions): string | null, // THIS_LINE_PLATFORM react-like\n\n  /**\n   * Returns the value for the HTTP `Authorization` header for authenticated requests to external servers.\n   * Most commonly used in cross-origin requests. Similar to `getAuthJson`, but specifically for HTTP requests.\n   *\n   * If you are using `tokenStore: \"cookie\"`, you don't need this for same-origin requests. However, most\n   * browsers now disable third-party cookies by default, so we must pass authentication tokens by header instead\n   * if the client and server are on different origins.\n   *\n   * This function returns the header value in this format:\n   * `Bearer stackauth_<base64(getAuthJson())>`, or `null` if the user is not signed in.\n   * You can use this with `fetch` or other HTTP request libraries to send authenticated requests.\n   *\n   * On the server, you can then pass in the `Request` object to the `tokenStore` option\n   * of your Stack app. Please note that CORS does not allow most headers by default, so you\n   * must include `authorization` in the [`Access-Control-Allow-Headers` header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers)\n   * of the CORS preflight response.\n   *\n   * If you are not using HTTP (and hence cannot set headers), use `getAuthJson()` instead.\n   *\n   * Example:\n   *\n   * ```ts\n   * // client\n   * const authorizationHeader = await hexclaveApp.getAuthorizationHeader();\n   * const res = await fetch(\"https://api.example.com\", {\n   *   headers: {\n   *     ...(authorizationHeader ? { Authorization: authorizationHeader } : {})\n   *     // you can also add your own headers here\n   *   },\n   * });\n   *\n   * // server\n   * function handleRequest(req: Request) {\n   *   const user = await hexclaveServerApp.getUser({ tokenStore: req });\n   *   return new Response(\"Welcome, \" + user.displayName);\n   * }\n   * ```\n   */\n  getAuthorizationHeader(options?: {} & ExtraOptions): Promise<string | null>,\n  useAuthorizationHeader(options?: {} & ExtraOptions): string | null, // THIS_LINE_PLATFORM react-like\n\n  /**\n   * @deprecated Use `getAuthorizationHeader()` instead.\n   *\n   * Returns the legacy `x-stack-auth` headers for authenticated HTTP requests. This remains for backwards\n   * compatibility with existing integrations.\n   */\n  getAuthHeaders(options?: {} & ExtraOptions): Promise<{ \"x-stack-auth\": string }>,\n  /** @deprecated Use `useAuthorizationHeader()` instead. */\n  useAuthHeaders(options?: {} & ExtraOptions): { \"x-stack-auth\": string }, // THIS_LINE_PLATFORM react-like\n\n  /**\n   * Creates a JSON-serializable object containing the information to authenticate a user on an external server.\n   * Similar to `getAuthorizationHeader`, but returns an object that can be sent over any protocol instead of just\n   * HTTP headers.\n   *\n   * While `getAuthorizationHeader` is the recommended way to send authentication tokens over HTTP, your app may use\n   * a different protocol, for example WebSockets or gRPC. This function returns a token object that can be JSON-serialized and sent to the server in any way you like.\n   *\n   * On the server, you can pass in this token object into the `tokenStore` option to fetch user details.\n   *\n   * Example:\n   *\n   * ```ts\n   * // client\n   * const res = await rpcCall(rpcEndpoint, {\n   *   data: {\n   *     auth: await hexclaveApp.getAuthJson(),\n   *   },\n   * });\n   *\n   * // server\n   * function handleRequest(data) {\n   *   const user = await hexclaveServerApp.getUser({ tokenStore: data.auth });\n   *   return new Response(\"Welcome, \" + user.displayName);\n   * }\n   * ```\n   */\n  getAuthJson(options?: {} & ExtraOptions): Promise<{ accessToken: string | null, refreshToken: string | null }>,\n  useAuthJson(options?: {} & ExtraOptions): { accessToken: string | null, refreshToken: string | null }, // THIS_LINE_PLATFORM react-like\n};\n\n/** @internal */\nexport const hexclaveAppInternalsSymbol = Symbol.for(\"StackAuth--DO-NOT-USE-OR-YOU-WILL-BE-FIRED--StackAppInternals\");\n"],"mappings":";;AAuNA,MAAa,6BAA6B,OAAO,IAAI,+DAA+D"}
+{"version":3,"file":"common.js","names":[],"sources":["../../../../src/lib/hexclave-app/common.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { ProviderType } from \"@hexclave/shared/dist/utils/oauth\";\nimport type { ExternalAuthProviderId } from \"@hexclave/shared/dist/interface/external-auth\";\nimport type { GenericQueryCtx, UserIdentity } from \"convex/server\";\nexport type {\n  DefaultHandlerUrlTarget,\n  HandlerPageUrls,\n  HandlerRedirectUrls,\n  HandlerUrlOptions,\n  HandlerUrlTarget,\n  HandlerUrls,\n  ResolvedHandlerUrls,\n} from \"@hexclave/shared/dist/interface/handler-urls\";\n\nexport type RedirectToOptions = {\n  replace?: boolean,\n  noRedirectBack?: boolean,\n};\n\nexport type AsyncStoreProperty<Name extends string, Args extends any[], Value, IsMultiple extends boolean> =\n  & { [key in `${IsMultiple extends true ? \"list\" : \"get\"}${Capitalize<Name>}`]: (...args: Args) => Promise<Value> }\n  & { [key in `use${Capitalize<Name>}`]: (...args: Args) => Value } // THIS_LINE_PLATFORM react-like\n\nexport type EmailConfig = {\n  host: string,\n  port: number,\n  username: string,\n  password: string,\n  senderEmail: string,\n  senderName: string,\n}\n\nexport type RedirectMethod = \"window\"\n  | \"nextjs\" // THIS_LINE_PLATFORM next\n  | \"none\"\n  | {\n    useNavigate: () => (to: string) => void,\n    navigate?: (to: string) => void,\n  }\n\n\nexport type GetCurrentUserOptions<HasTokenStore> =\n  & {\n    or?: 'redirect' | 'throw' | 'return-null' | 'anonymous' | /** @deprecated */ 'anonymous-if-exists[deprecated]',\n    /**\n     * Whether to include restricted users (users who haven't completed onboarding requirements like email verification).\n     * By default, restricted users are filtered out (treated similar to anonymous users).\n     *\n     * Note: This option cannot be set to false when `or: 'anonymous'` is used, as all anonymous users are also restricted.\n     *\n     * @default false\n     */\n    includeRestricted?: boolean,\n    tokenStore?: TokenStoreInit,\n  }\n  & (HasTokenStore extends false ? {\n    tokenStore: TokenStoreInit,\n  } : {});\n\nexport type ConvexCtx =\n| GenericQueryCtx<any>\n| { auth: { getUserIdentity: () => Promise<UserIdentity | null> } };\n\nexport type GetCurrentPartialUserOptions<HasTokenStore> =\n  & {\n    or?: 'return-null' | 'anonymous-if-exists',  // note: unlike normal getUser, 'anonymous' still returns null sometimes (eg. if no token is present)\n    tokenStore?: TokenStoreInit,\n  }\n  & (\n    | {\n      from: 'token',\n    }\n    | {\n      from: 'convex',\n      ctx: ConvexCtx,\n    }\n  )\n  & (HasTokenStore extends false ? {\n    tokenStore: TokenStoreInit,\n  } : {});\n\nexport type RequestLike = {\n  headers:\n    | {\n      get: (name: string) => string | null,\n    }\n    | Record<string, string | null>,\n};\n\nexport type ExternalTokenStore = {\n  readonly type: \"external\",\n  readonly providerId: ExternalAuthProviderId,\n  getSessionId?(): string | null,\n  getToken(): Promise<string | null>,\n  /** The adapter retains this subscription for its own lifetime and does not unsubscribe it. */\n  subscribe?(callback: () => void): () => void,\n};\n\ntype ExternalTokenStoreOptions = Omit<ExternalTokenStore, \"type\" | \"providerId\">;\n\nfunction createExternalTokenStore(providerId: ExternalAuthProviderId, options: ExternalTokenStoreOptions): ExternalTokenStore {\n  return {\n    ...options,\n    type: \"external\",\n    providerId,\n  };\n}\n\nexport function clerkTokenStore(options: ExternalTokenStoreOptions): ExternalTokenStore {\n  return createExternalTokenStore(\"clerk-integration\", options);\n}\n\nexport function betterAuthTokenStore(options: ExternalTokenStoreOptions): ExternalTokenStore {\n  return createExternalTokenStore(\"better-auth-integration\", options);\n}\n\nexport function workosTokenStore(options: ExternalTokenStoreOptions): ExternalTokenStore {\n  return createExternalTokenStore(\"workos-integration\", options);\n}\n\nexport type TokenStoreInit<HasTokenStore extends boolean = boolean> =\n  HasTokenStore extends true ? (\n    | \"cookie\"\n    | \"nextjs-cookie\"\n    | \"memory\"\n    | RequestLike\n    | { accessToken: string, refreshToken: string }\n    | ExternalTokenStore\n  )\n  : HasTokenStore extends false ? null\n  : TokenStoreInit<true> | TokenStoreInit<false>;\n\nexport type OAuthScopesOnSignIn = {\n  [key in ProviderType]: string[];\n};\n\n/**\n * Contains the authentication methods without session-related fields.\n * Used for apps that have token storage capabilities.\n */\nexport type AuthLike<ExtraOptions = {}> = {\n  signOut(options?: { redirectUrl?: URL | string } & ExtraOptions): Promise<void>,\n  signOut(options?: { redirectUrl?: URL | string }): Promise<void>,\n\n  /**\n   * Returns the current access token, or null if the user is not signed in.\n   *\n   * The access token is a short-lived JWT that can be used to authenticate requests to external servers.\n   * It will be automatically refreshed when it expires.\n   */\n  getAccessToken(options?: {} & ExtraOptions): Promise<string | null>,\n  useAccessToken(options?: {} & ExtraOptions): string | null, // THIS_LINE_PLATFORM react-like\n\n  /**\n   * Returns the current refresh token, or null if the user is not signed in.\n   *\n   * The refresh token is a long-lived token that can be used to obtain new access tokens.\n   * It should be kept secret and never exposed to the client.\n   */\n  getRefreshToken(options?: {} & ExtraOptions): Promise<string | null>,\n  useRefreshToken(options?: {} & ExtraOptions): string | null, // THIS_LINE_PLATFORM react-like\n\n  /**\n   * Returns the value for the HTTP `Authorization` header for authenticated requests to external servers.\n   * Most commonly used in cross-origin requests. Similar to `getAuthJson`, but specifically for HTTP requests.\n   *\n   * If you are using `tokenStore: \"cookie\"`, you don't need this for same-origin requests. However, most\n   * browsers now disable third-party cookies by default, so we must pass authentication tokens by header instead\n   * if the client and server are on different origins.\n   *\n   * This function returns the header value in this format:\n   * `Bearer stackauth_<base64(getAuthJson())>`, or `null` if the user is not signed in.\n   * You can use this with `fetch` or other HTTP request libraries to send authenticated requests.\n   *\n   * On the server, you can then pass in the `Request` object to the `tokenStore` option\n   * of your Stack app. Please note that CORS does not allow most headers by default, so you\n   * must include `authorization` in the [`Access-Control-Allow-Headers` header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers)\n   * of the CORS preflight response.\n   *\n   * If you are not using HTTP (and hence cannot set headers), use `getAuthJson()` instead.\n   *\n   * Example:\n   *\n   * ```ts\n   * // client\n   * const authorizationHeader = await hexclaveApp.getAuthorizationHeader();\n   * const res = await fetch(\"https://api.example.com\", {\n   *   headers: {\n   *     ...(authorizationHeader ? { Authorization: authorizationHeader } : {})\n   *     // you can also add your own headers here\n   *   },\n   * });\n   *\n   * // server\n   * function handleRequest(req: Request) {\n   *   const user = await hexclaveServerApp.getUser({ tokenStore: req });\n   *   return new Response(\"Welcome, \" + user.displayName);\n   * }\n   * ```\n   */\n  getAuthorizationHeader(options?: {} & ExtraOptions): Promise<string | null>,\n  useAuthorizationHeader(options?: {} & ExtraOptions): string | null, // THIS_LINE_PLATFORM react-like\n\n  /**\n   * @deprecated Use `getAuthorizationHeader()` instead.\n   *\n   * Returns the legacy `x-stack-auth` headers for authenticated HTTP requests. This remains for backwards\n   * compatibility with existing integrations.\n   */\n  getAuthHeaders(options?: {} & ExtraOptions): Promise<{ \"x-stack-auth\": string }>,\n  /** @deprecated Use `useAuthorizationHeader()` instead. */\n  useAuthHeaders(options?: {} & ExtraOptions): { \"x-stack-auth\": string }, // THIS_LINE_PLATFORM react-like\n\n  /**\n   * Creates a JSON-serializable object containing the information to authenticate a user on an external server.\n   * Similar to `getAuthorizationHeader`, but returns an object that can be sent over any protocol instead of just\n   * HTTP headers.\n   *\n   * While `getAuthorizationHeader` is the recommended way to send authentication tokens over HTTP, your app may use\n   * a different protocol, for example WebSockets or gRPC. This function returns a token object that can be JSON-serialized and sent to the server in any way you like.\n   *\n   * On the server, you can pass in this token object into the `tokenStore` option to fetch user details.\n   *\n   * Example:\n   *\n   * ```ts\n   * // client\n   * const res = await rpcCall(rpcEndpoint, {\n   *   data: {\n   *     auth: await hexclaveApp.getAuthJson(),\n   *   },\n   * });\n   *\n   * // server\n   * function handleRequest(data) {\n   *   const user = await hexclaveServerApp.getUser({ tokenStore: data.auth });\n   *   return new Response(\"Welcome, \" + user.displayName);\n   * }\n   * ```\n   */\n  getAuthJson(options?: {} & ExtraOptions): Promise<{ accessToken: string | null, refreshToken: string | null }>,\n  useAuthJson(options?: {} & ExtraOptions): { accessToken: string | null, refreshToken: string | null }, // THIS_LINE_PLATFORM react-like\n};\n\n/** @internal */\nexport const hexclaveAppInternalsSymbol = Symbol.for(\"StackAuth--DO-NOT-USE-OR-YOU-WILL-BE-FIRED--StackAppInternals\");\n"],"mappings":";AAuGA,SAAS,yBAAyB,YAAoC,SAAwD;CAC5H,OAAO;EACL,GAAG;EACH,MAAM;EACN;CACF;AACF;AAEA,SAAgB,gBAAgB,SAAwD;CACtF,OAAO,yBAAyB,qBAAqB,OAAO;AAC9D;AAEA,SAAgB,qBAAqB,SAAwD;CAC3F,OAAO,yBAAyB,2BAA2B,OAAO;AACpE;AAEA,SAAgB,iBAAiB,SAAwD;CACvF,OAAO,yBAAyB,sBAAsB,OAAO;AAC/D;;AA+HA,MAAa,6BAA6B,OAAO,IAAI,+DAA+D"}

package/dist/esm/lib/hexclave-app/index.d.ts

@@ -1,5 +1,5 @@
 import { HexclaveAdminApp, HexclaveAdminAppConstructor, HexclaveAdminAppConstructorOptions, HexclaveClientApp, HexclaveClientAppConstructor, HexclaveClientAppConstructorOptions, HexclaveClientAppJson, HexclaveServerApp, HexclaveServerAppConstructor, HexclaveServerAppConstructorOptions, StackAdminApp, StackAdminAppConstructor, StackAdminAppConstructorOptions, StackClientApp, StackClientAppConstructor, StackClientAppConstructorOptions, StackClientAppJson, StackServerApp, StackServerAppConstructor, StackServerAppConstructorOptions } from "./apps/index.js";
-import { GetCurrentUserOptions, GetCurrentUserOptions as GetUserOptions, HandlerUrlOptions, HandlerUrls, OAuthScopesOnSignIn, ResolvedHandlerUrls, hexclaveAppInternalsSymbol } from "./common.js";
+import { ExternalTokenStore, GetCurrentUserOptions, GetCurrentUserOptions as GetUserOptions, HandlerUrlOptions, HandlerUrls, OAuthScopesOnSignIn, ResolvedHandlerUrls, betterAuthTokenStore, clerkTokenStore, hexclaveAppInternalsSymbol, workosTokenStore } from "./common.js";
 import { getPagePrompt } from "./url-targets.js";
 import { AdminWorkflow, AdminWorkflowDivergenceDiagnostic, AdminWorkflowRun, AdminWorkflowRunDetails, AdminWorkflowRunState, AdminWorkflowRunsFilter, AdminWorkflowStep, AdminWorkflowStepAttempt, AdminWorkflowSyncResult, AdminWorkflowTrigger, AdminWorkflowUpgradeResult, AdminWorkflowVersion } from "./workflows.js";
 import { EmailOutboxListOptions, EmailOutboxListResult, EmailOutboxUpdateOptions } from "./apps/interfaces/admin-app.js";
@@ -14,4 +14,4 @@ import { AdminDeploymentDomainJson, AdminDeploymentEnvVarJson, AdminDeploymentJs
 import { PlanUsage, PlanUsageKind, PlanUsageNextPlanId, PlanUsagePlanId, PlanUsageRow } from "./plan-usage/index.js";
 import { EditableTeamMemberProfile, ReceivedTeamInvitation, SentTeamInvitation, ServerListUsersOptions, ServerTeam, ServerTeamCreateOptions, ServerTeamMemberProfile, ServerTeamUpdateOptions, ServerTeamUser, Team, TeamCreateOptions, TeamInvitation, TeamMemberProfile, TeamUpdateOptions, TeamUser } from "./teams/index.js";
 import { Auth, CurrentInternalServerUser, CurrentInternalUser, CurrentServerUser, CurrentUser, OAuthProvider, ServerOAuthProvider, ServerUser, User } from "./users/index.js";
-export { type AdminDeploymentDomainJson, type AdminDeploymentEnvVarJson, type AdminDeploymentJson, type AdminDeploymentServiceJson, type AdminDeploymentServiceLogLineJson, type AdminDeploymentServiceOutcomeJson, type AdminDomainConfig, type AdminEmailConfig, type AdminEmailOutbox, type AdminEmailOutboxRecipient, type AdminEmailOutboxSimpleStatus, type AdminEmailOutboxStatus, type AdminOAuthProviderConfig, type AdminOwnedProject, type AdminProject, type AdminProjectConfig, type AdminProjectConfigUpdateOptions, type AdminProjectCreateOptions, type AdminProjectPermission, type AdminProjectPermissionDefinition, type AdminProjectPermissionDefinitionCreateOptions, type AdminProjectPermissionDefinitionUpdateOptions, type AdminProjectSecretJson, type AdminProjectUpdateOptions, type AdminSendAttemptError, type AdminSentEmail, type AdminSessionReplay, type AdminSessionReplayChunk, type AdminTeamPermission, type AdminTeamPermissionDefinition, type AdminTeamPermissionDefinitionCreateOptions, type AdminTeamPermissionDefinitionUpdateOptions, type AdminWorkflow, type AdminWorkflowDivergenceDiagnostic, type AdminWorkflowRun, type AdminWorkflowRunDetails, type AdminWorkflowRunState, type AdminWorkflowRunsFilter, type AdminWorkflowStep, type AdminWorkflowStepAttempt, type AdminWorkflowSyncResult, type AdminWorkflowTrigger, type AdminWorkflowUpgradeResult, type AdminWorkflowVersion, type Auth, type Connection, type ContactChannel, type CurrentInternalServerUser, type CurrentInternalUser, type CurrentServerUser, type CurrentUser, type EditableTeamMemberProfile, type EmailOutboxListOptions, type EmailOutboxListResult, type EmailOutboxUpdateOptions, type GetCurrentUserOptions, type GetUserOptions, type HandlerUrlOptions, type HandlerUrls, HexclaveAdminApp, type HexclaveAdminAppConstructor, type HexclaveAdminAppConstructorOptions, HexclaveClientApp, type HexclaveClientAppConstructor, type HexclaveClientAppConstructorOptions, type HexclaveClientAppJson, HexclaveServerApp, type HexclaveServerAppConstructor, type HexclaveServerAppConstructorOptions, type InternalApiKey, type InternalApiKeyBase, type InternalApiKeyBaseCrudRead, type InternalApiKeyCreateOptions, type InternalApiKeyFirstView, type ListSessionReplayChunksOptions, type ListSessionReplayChunksResult, type ListSessionReplaysOptions, type ListSessionReplaysResult, type OAuthConnection, type OAuthProvider, type OAuthProviderConfig, type OAuthScopesOnSignIn, type PlanUsage, type PlanUsageKind, type PlanUsageNextPlanId, type PlanUsagePlanId, type PlanUsageRow, type Project, type ProjectConfig, type PushedConfigSource, type ReceivedTeamInvitation, type ResolvedHandlerUrls, type SentTeamInvitation, type ServerContactChannel, type ServerListUsersOptions, type ServerOAuthProvider, type ServerTeam, type ServerTeamCreateOptions, type ServerTeamMemberProfile, type ServerTeamUpdateOptions, type ServerTeamUser, type ServerUser, type SessionReplayAllEventsResult, StackAdminApp, type StackAdminAppConstructor, type StackAdminAppConstructorOptions, StackClientApp, type StackClientAppConstructor, type StackClientAppConstructorOptions, type StackClientAppJson, StackServerApp, type StackServerAppConstructor, type StackServerAppConstructorOptions, type Team, type TeamCreateOptions, type TeamInvitation, type TeamMemberProfile, type TeamUpdateOptions, type TeamUser, type User, getPagePrompt, hexclaveAppInternalsSymbol };
+export { type AdminDeploymentDomainJson, type AdminDeploymentEnvVarJson, type AdminDeploymentJson, type AdminDeploymentServiceJson, type AdminDeploymentServiceLogLineJson, type AdminDeploymentServiceOutcomeJson, type AdminDomainConfig, type AdminEmailConfig, type AdminEmailOutbox, type AdminEmailOutboxRecipient, type AdminEmailOutboxSimpleStatus, type AdminEmailOutboxStatus, type AdminOAuthProviderConfig, type AdminOwnedProject, type AdminProject, type AdminProjectConfig, type AdminProjectConfigUpdateOptions, type AdminProjectCreateOptions, type AdminProjectPermission, type AdminProjectPermissionDefinition, type AdminProjectPermissionDefinitionCreateOptions, type AdminProjectPermissionDefinitionUpdateOptions, type AdminProjectSecretJson, type AdminProjectUpdateOptions, type AdminSendAttemptError, type AdminSentEmail, type AdminSessionReplay, type AdminSessionReplayChunk, type AdminTeamPermission, type AdminTeamPermissionDefinition, type AdminTeamPermissionDefinitionCreateOptions, type AdminTeamPermissionDefinitionUpdateOptions, type AdminWorkflow, type AdminWorkflowDivergenceDiagnostic, type AdminWorkflowRun, type AdminWorkflowRunDetails, type AdminWorkflowRunState, type AdminWorkflowRunsFilter, type AdminWorkflowStep, type AdminWorkflowStepAttempt, type AdminWorkflowSyncResult, type AdminWorkflowTrigger, type AdminWorkflowUpgradeResult, type AdminWorkflowVersion, type Auth, type Connection, type ContactChannel, type CurrentInternalServerUser, type CurrentInternalUser, type CurrentServerUser, type CurrentUser, type EditableTeamMemberProfile, type EmailOutboxListOptions, type EmailOutboxListResult, type EmailOutboxUpdateOptions, type ExternalTokenStore, type GetCurrentUserOptions, type GetUserOptions, type HandlerUrlOptions, type HandlerUrls, HexclaveAdminApp, type HexclaveAdminAppConstructor, type HexclaveAdminAppConstructorOptions, HexclaveClientApp, type HexclaveClientAppConstructor, type HexclaveClientAppConstructorOptions, type HexclaveClientAppJson, HexclaveServerApp, type HexclaveServerAppConstructor, type HexclaveServerAppConstructorOptions, type InternalApiKey, type InternalApiKeyBase, type InternalApiKeyBaseCrudRead, type InternalApiKeyCreateOptions, type InternalApiKeyFirstView, type ListSessionReplayChunksOptions, type ListSessionReplayChunksResult, type ListSessionReplaysOptions, type ListSessionReplaysResult, type OAuthConnection, type OAuthProvider, type OAuthProviderConfig, type OAuthScopesOnSignIn, type PlanUsage, type PlanUsageKind, type PlanUsageNextPlanId, type PlanUsagePlanId, type PlanUsageRow, type Project, type ProjectConfig, type PushedConfigSource, type ReceivedTeamInvitation, type ResolvedHandlerUrls, type SentTeamInvitation, type ServerContactChannel, type ServerListUsersOptions, type ServerOAuthProvider, type ServerTeam, type ServerTeamCreateOptions, type ServerTeamMemberProfile, type ServerTeamUpdateOptions, type ServerTeamUser, type ServerUser, type SessionReplayAllEventsResult, StackAdminApp, type StackAdminAppConstructor, type StackAdminAppConstructorOptions, StackClientApp, type StackClientAppConstructor, type StackClientAppConstructorOptions, type StackClientAppJson, StackServerApp, type StackServerAppConstructor, type StackServerAppConstructorOptions, type Team, type TeamCreateOptions, type TeamInvitation, type TeamMemberProfile, type TeamUpdateOptions, type TeamUser, type User, betterAuthTokenStore, clerkTokenStore, getPagePrompt, hexclaveAppInternalsSymbol, workosTokenStore };

package/dist/esm/lib/hexclave-app/index.js

@@ -1,4 +1,4 @@
 import { HexclaveAdminApp, HexclaveClientApp, HexclaveServerApp, StackAdminApp, StackClientApp, StackServerApp } from "./apps/index.js";
-import { hexclaveAppInternalsSymbol } from "./common.js";
+import { betterAuthTokenStore, clerkTokenStore, hexclaveAppInternalsSymbol, workosTokenStore } from "./common.js";
 import { getPagePrompt } from "./url-targets.js";
-export { HexclaveAdminApp, HexclaveClientApp, HexclaveServerApp, StackAdminApp, StackClientApp, StackServerApp, getPagePrompt, hexclaveAppInternalsSymbol };
+export { HexclaveAdminApp, HexclaveClientApp, HexclaveServerApp, StackAdminApp, StackClientApp, StackServerApp, betterAuthTokenStore, clerkTokenStore, getPagePrompt, hexclaveAppInternalsSymbol, workosTokenStore };

package/dist/esm/lib/hexclave-app/users/index.d.ts

@@ -138,6 +138,9 @@ type BaseUser = {
   readonly oauthProviders: readonly {
     id: string;
   }[];
+  readonly externalAuthProviders: readonly {
+    id: string;
+  }[];
 };
 type UserExtra = {
   setDisplayName(displayName: string | null): Promise<void>; /** @deprecated Use contact channel's sendVerificationEmail instead */
@@ -266,7 +269,12 @@ type User = BaseUser;
 type CurrentUser = BaseUser & Auth & UserExtra & Customer;
 type CurrentInternalUser = CurrentUser & InternalUserExtra;
 type ProjectCurrentUser<ProjectId> = ProjectId extends "internal" ? CurrentInternalUser : CurrentUser;
-type TokenPartialUser = Pick<User, "id" | "displayName" | "primaryEmail" | "primaryEmailVerified" | "isAnonymous" | "isMultiFactorRequired" | "isRestricted" | "restrictedReason">;
+type TokenPartialUser = Pick<User, "id" | "displayName" | "primaryEmail" | "primaryEmailVerified" | "isAnonymous" | "isMultiFactorRequired" | "isRestricted" | "restrictedReason"> & {
+  /**
+   * The ID of the user's selected team, read from the `selected_team_id` claim of the access token or Convex identity.
+   */
+  readonly selectedTeamId: string | null;
+};
 type SyncedPartialUser = TokenPartialUser & Pick<User, "id" | "displayName" | "primaryEmail" | "primaryEmailVerified" | "profileImageUrl" | "signedUpAt" | "clientMetadata" | "clientReadOnlyMetadata" | "isAnonymous" | "hasPassword" | "isRestricted" | "restrictedReason">;
 type ActiveSession = {
   id: string;
@@ -289,6 +297,11 @@ type UserUpdateOptions = {
 };
 declare function userUpdateOptionsToCrud(options: UserUpdateOptions): CurrentUserCrud["Client"]["Update"];
 type ServerBaseUser = {
+  /**
+   * The selected team is a `ServerTeam` when non-null, so `listUsers()` returns full member details
+   * without fetching the team again.
+   */
+  readonly selectedTeam: ServerTeam | null;
   setPrimaryEmail(email: string | null, options?: {
     verified?: boolean | undefined;
   }): Promise<void>;

package/dist/esm/lib/hexclave-app/users/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../../../src/lib/hexclave-app/users/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;iBA0BgB,wBAAA,mBAA2C,MAAA,EAAQ,CAAA,GAAI,CAAC;AAAA,KAgB5D,aAAA;EAAA,SACD,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;EAAA,SACA,WAAA;EAAA,SACA,sBAAA;EACT,MAAA,CAAO,IAAA;IAAQ,WAAA;IAAuB,sBAAA;EAAA,IAAqC,OAAA,CAAQ,MAAA,OACjF,YAAA,QAAoB,WAAA,CAAY,0CAAA;EAElC,MAAA,IAAU,OAAA;AAAA;AAAA,KAGA,mBAAA;EAAA,SACD,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;EAAA,SACA,WAAA;EAAA,SACA,sBAAA;EACT,MAAA,CAAO,IAAA;IAAQ,SAAA;IAAoB,KAAA;IAAgB,WAAA;IAAuB,sBAAA;EAAA,IAAqC,OAAA,CAAQ,MAAA,OACrH,YAAA,QAAoB,WAAA,CAAY,0CAAA;EAElC,MAAA,IAAU,OAAA;AAAA;;;;KAOA,IAAA,GAAO,QAAA;EAAA,SACR,gBAAA,EAAkB,eAAA;EAAA,SAClB,cAAA;IACP,SAAA,IAAa,OAAA;MAAU,WAAA;MAA4B,YAAA;IAAA;IACnD,SAAA;MAAe,WAAA;MAA4B,YAAA;IAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;KA2BnC,QAAA;EAAA,SACD,EAAA;EAAA,SAEA,WAAA;EAzCQ;AAAA;AAOnB;;;EAPmB,SAgDR,YAAA;EAAA,SACA,oBAAA;EAAA,SACA,eAAA;EAAA,SAEA,UAAA,EAAY,IAAA;EAAA,SAEZ,cAAA;EAAA,SACA,sBAAA;EA/CA;;;EAAA,SAoDA,WAAA;EAAA,SACA,cAAA;EAAA,SACA,kBAAA;EAAA,SAEA,qBAAA;EAAA,SACA,WAAA;EAtDQ;;;AAAwC;EAAxC,SA2DR,YAAA;EAhCS;;;;EAAA,SAqCT,gBAAA,EAAkB,gBAAA,SAUI;EAAA,SARtB,iBAAA;EAtCA;;;;;;EAAA,SA6CA,uBAAA;EACT,YAAA,IAAgB,eAAA;EA9BP;;;EAAA,SAmCA,gBAAA;EA1BA;;;EAAA,SA8BA,cAAA;IAA2B,EAAA;EAAA;AAAA;AAAA,KAG1B,SAAA;EACV,cAAA,CAAe,WAAA,kBAA6B,OAAA,QARnC;EAUT,qBAAA,IAAyB,OAAA,CAAQ,WAAA;EACjC,iBAAA,CAAkB,QAAA,QAAgB,OAAA;EAClC,cAAA,CAAe,OAAA;IAAW,WAAA;IAAqB,WAAA;EAAA,IAAuB,OAAA,CAAQ,WAAA,mCAA8C,WAAA;EAC5H,WAAA,CAAY,OAAA;IAAW,QAAA;EAAA,IAAqB,OAAA,CAAQ,WAAA;EAH3B;;;EAQzB,MAAA,CAAO,MAAA,EAAQ,iBAAA,GAAoB,OAAA;EAEnC,kBAAA,IAAsB,cAAA;EACtB,mBAAA,IAAuB,OAAA,CAAQ,cAAA;EAC/B,oBAAA,CAAqB,IAAA,EAAM,2BAAA,GAA8B,OAAA,CAAQ,cAAA;EAEjE,yBAAA,IAA6B,oBAAA;EAC7B,0BAAA,IAA8B,OAAA,CAAQ,oBAAA;EAEtC,MAAA,IAAU,OAAA,QANqB;EAS/B,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAW,EAAA;IAAgB,MAAA;EAAA,IAAsB,OAAA,CAAQ,yBAAA,GANlE;EAQ7B,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAY,EAAA;IAA2C,MAAA;EAAA,IAAsB,OAAA,CAAQ,yBAAA,UAF5B;EAI/F,mBAAA,CAAoB,OAAA;IAAW,QAAA;IAAkB,iBAAA;EAAA,IAA8B,OAAA,CAAQ,eAAA,UAAA;EAGvF,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAW,EAAA;IAAgB,MAAA;EAAA,IAAsB,yBAAA,EAE4B;EAAnH,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAY,EAAA;IAA2C,MAAA;EAAA,IAAsB,yBAAA,SAS1C;EAPzE,mBAAA,CAAoB,OAAA;IAAW,QAAA;IAAkB,iBAAA;EAAA,IAA8B,eAAA,SAa7B;EAVlD,qBAAA,IAAyB,OAAA,CAAQ,eAAA,KAaZ;EAXrB,oBAAA,IAAwB,eAAA,IAW0B;EATlD,oBAAA,CAAqB,QAAA,UAAkB,OAAA;IAAY,MAAA;EAAA,IAAsB,OAAA,QAYA;EAVzE,yBAAA,CAA0B,QAAA,UAAkB,OAAA;IAAY,MAAA;EAAA,IAAsB,OAAA,CAAQ,eAAA,GAahE;EAXtB,yBAAA,CAA0B,QAAA,UAAkB,OAAA;IAAY,MAAA;EAAA,IAAsB,eAAA;EAE9E,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,OAAA;EAErC,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAC1D,aAAA,CAAc,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAE7C,eAAA,CAAgB,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EACzE,eAAA,CAAgB,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EAE5D,cAAA,CAAe,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,cAAA;EAChE,cAAA,CAAe,OAAA;IAAY,SAAA;EAAA,IAAwB,cAAA;EAEnD,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,cAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,cAAA;EAAA,SAE5B,YAAA,EAAc,IAAA;EACvB,eAAA,CAAgB,QAAA,WAAmB,IAAA,UAAc,OAAA;EACjD,UAAA,CAAW,IAAA,EAAM,iBAAA,GAAoB,OAAA,CAAQ,IAAA;EAC7C,SAAA,CAAU,IAAA,EAAM,IAAA,GAAO,OAAA;EAgCuC;;;;;;;;;;;;;;;;;EAb9D,mBAAA,IAAuB,OAAA,CAAQ,sBAAA;EA0BW;;;;;EApB1C,kBAAA,IAAsB,sBAAA;EAEtB,iBAAA,IAAqB,OAAA,CAAQ,aAAA;EAC7B,aAAA,CAAc,SAAA,WAAoB,OAAA;EAClC,cAAA,CAAe,IAAA,EAAM,IAAA,GAAO,OAAA,CAAQ,yBAAA;EACpC,cAAA,CAAe,IAAA,EAAM,IAAA,GAAO,yBAAA;EAE5B,YAAA,CAAa,OAAA,EAAS,qBAAA,WAAgC,OAAA,CAAQ,mBAAA;EAE9D,iBAAA,IAAqB,aAAA;EACrB,kBAAA,IAAsB,OAAA,CAAQ,aAAA;EAE9B,gBAAA,CAAiB,EAAA,WAAa,aAAA;EAC9B,gBAAA,CAAiB,EAAA,WAAa,OAAA,CAAQ,aAAA;EAEtC,eAAA,CAAgB,OAAA;IAAY,QAAA;EAAA,IAAsB,OAAA,CAAQ,MAAA,YAAkB,WAAA,gCAA2C,WAAA;AAAA,IAEvH,kBAAA,gBAAkC,UAAA,YAClC,kBAAA,UAA4B,EAAA,WAAa,IAAA,kBACzC,kBAAA,cAAgC,IAAA,YAChC,kBAAA,wBAA0C,sBAAA,YAC1C,kBAAA,gBAAkC,KAAA,EAAO,IAAA,EAAM,YAAA,UAAsB,OAAA;EAAY,SAAA;AAAA,IAAwB,cAAA,kBACzG,kBAAA,iBAAmC,KAAA,EAAO,IAAA,EAAM,OAAA;EAAY,SAAA;AAAA,IAAwB,cAAA;AAAA,KAE1E,iBAAA;EAER,aAAA,CAAc,UAAA,EAAY,yBAAA,GAA4B,OAAA,CAAQ,iBAAA;EAC9D,eAAA,CAAgB,mBAAA,UAA6B,SAAA,WAAoB,OAAA;AAAA,IAEjE,kBAAA,sBAAwC,iBAAA;AAAA,KAEhC,IAAA,GAAO,QAAQ;AAAA,KAEf,WAAA,GAAc,QAAA,GAAW,IAAA,GAAO,SAAA,GAAY,QAAA;AAAA,KAE5C,mBAAA,GAAsB,WAAA,GAAc,iBAAiB;AAAA,KAErD,kBAAA,cAAgC,SAAA,sBAA+B,mBAAA,GAAsB,WAAA;AAAA,KAErF,gBAAA,GAAmB,IAAI,CACjC,IAAA;AAAA,KAWU,iBAAA,GAAoB,gBAAA,GAAmB,IAAA,CACjD,IAAA;AAAA,KAgBU,aAAA;EACV,EAAA;EACA,MAAA;EACA,SAAA,EAAW,IAAA;EACX,eAAA;EACA,UAAA,EAAY,IAAA;EACZ,gBAAA;EACA,OAAA,GAAU,OAAA;AAAA;AAAA,KAGA,iBAAA;EACV,WAAA;EACA,cAAA,GAAiB,YAAA;EACjB,cAAA;EACA,qBAAA,GAAwB,UAAU;EAClC,eAAA;EACA,cAAA;EACA,kBAAA;EACA,YAAA;AAAA;AAAA,iBAEc,uBAAA,CAAwB,OAAA,EAAS,iBAAA,GAAoB,eAAe;AAAA,KAcxE,cAAA;EACV,eAAA,CAAgB,KAAA,iBAAsB,OAAA;IAAY,QAAA;EAAA,IAAmC,OAAA;EAAA,SAE5E,YAAA,EAAc,IAAA;EAAA,SAEd,cAAA;EACT,iBAAA,CAAkB,QAAA,QAAgB,OAAA;EAClC,yBAAA,CAA0B,QAAA,QAAgB,OAAA,QA9KlB;EAAA,SAiLf,+BAAA,iBAjLyC;EAAA,SAmLzC,WAAA,iBAnL6B;EAAA,SAqL7B,UAAA;IAAA,SACE,MAAA;MAAA,SACE,GAAA;MAAA,SACA,cAAA;IAAA;EAAA;EAIb,UAAA,CAAW,IAAA,EAAM,IAAA,CAAK,uBAAA,qBAA4C,OAAA,CAAQ,UAAA;EAE1E,kBAAA,IAAsB,oBAAA;EACtB,mBAAA,IAAuB,OAAA,CAAQ,oBAAA;EAC/B,oBAAA,CAAqB,IAAA,EAAM,iCAAA,GAAoC,OAAA,CAAQ,oBAAA;EAEvE,MAAA,CAAO,IAAA,EAAM,uBAAA,GAA0B,OAAA;EAEvC,eAAA,CAAgB,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EACpD,eAAA,CAAgB,YAAA,WAAuB,OAAA;EAEvC,gBAAA,CAAiB,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EACrD,gBAAA,CAAiB,YAAA,WAAuB,OAAA;EAExC,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAC1D,aAAA,CAAc,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAE7C,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,OAAA;EAErC,eAAA,CAAgB,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EACzE,eAAA,CAAgB,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EAE5D,cAAA,CAAe,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,cAAA;EAChE,cAAA,CAAe,OAAA;IAAY,SAAA;EAAA,IAAwB,cAAA;EAEnD,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,cAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,cAAA;EAErC,iBAAA,IAAqB,mBAAA;EACrB,kBAAA,IAAsB,OAAA,CAAQ,mBAAA;EAE9B,gBAAA,CAAiB,EAAA,WAAa,mBAAA;EAC9B,gBAAA,CAAiB,EAAA,WAAa,OAAA,CAAQ,mBAAA;EA3MtC;;;EAgNA,aAAA,CAAc,OAAA;IAAY,eAAA;IAA0B,eAAA;EAAA,IAA8B,OAAA;IAChF,SAAA,IAAa,OAAA;MAAU,WAAA;MAA4B,YAAA;IAAA;EAAA;AAAA,IAGrD,kBAAA,UAA4B,EAAA,WAAa,UAAA,kBACzC,kBAAA,WAA6B,OAAA,GAAU,sBAAA,GAAyB,UAAA;EAAiB,UAAA;AAAA,WACjF,kBAAA,gBAAkC,KAAA,EAAO,IAAA,EAAM,YAAA,UAAsB,OAAA;EAAY,MAAA;AAAA,IAAqB,mBAAA,kBACtG,kBAAA,iBAAmC,KAAA,EAAO,IAAA,EAAM,OAAA;EAAY,MAAA;AAAA,IAAqB,mBAAA;;;;;KAMvE,UAAA,GAAa,cAAA,GAAiB,QAAA,GAAW,SAAA,GAAY,QAAA;AAAA,KAErD,iBAAA,GAAoB,IAAA,GAAO,UAAU;AAAA,KAErC,yBAAA,GAA4B,iBAAA,GAAoB,iBAAiB;AAAA,KAEjE,wBAAA,cAAsC,SAAA,sBAA+B,yBAAA,GAA4B,iBAAA;AAAA,KAEjG,uBAAA,GAA0B,iBAAA,GAAoB,IAAA,CACxD,UAAA;AAAA,KAIU,uBAAA;EACV,YAAA;EACA,oBAAA;EACA,uBAAA;EACA,sBAAA,GAAyB,YAAA;EACzB,cAAA,GAAiB,YAAA;EACjB,QAAA;EACA,iBAAA;EACA,uBAAA;EACA,+BAAA;EACA,WAAA;EACA,UAAA;IACE,MAAA;MACE,GAAA;MACA,cAAA;IAAA;EAAA;AAAA,IAGF,iBAAA;AAAA,iBACY,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,eAAe;AAAA,KA+BpF,uBAAA;EACV,YAAA;EACA,uBAAA;EACA,QAAA;EACA,cAAA;EACA,WAAA;EACA,oBAAA;EACA,cAAA;EACA,sBAAA;EACA,cAAA;EACA,WAAA;EACA,UAAA;IACE,MAAA;MACE,GAAA;MACA,cAAA;IAAA;EAAA;AAAA;AAAA,iBAIU,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,SAAS"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../../../src/lib/hexclave-app/users/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;iBA0BgB,wBAAA,mBAA2C,MAAA,EAAQ,CAAA,GAAI,CAAC;AAAA,KAgB5D,aAAA;EAAA,SACD,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;EAAA,SACA,WAAA;EAAA,SACA,sBAAA;EACT,MAAA,CAAO,IAAA;IAAQ,WAAA;IAAuB,sBAAA;EAAA,IAAqC,OAAA,CAAQ,MAAA,OACjF,YAAA,QAAoB,WAAA,CAAY,0CAAA;EAElC,MAAA,IAAU,OAAA;AAAA;AAAA,KAGA,mBAAA;EAAA,SACD,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;EAAA,SACA,WAAA;EAAA,SACA,sBAAA;EACT,MAAA,CAAO,IAAA;IAAQ,SAAA;IAAoB,KAAA;IAAgB,WAAA;IAAuB,sBAAA;EAAA,IAAqC,OAAA,CAAQ,MAAA,OACrH,YAAA,QAAoB,WAAA,CAAY,0CAAA;EAElC,MAAA,IAAU,OAAA;AAAA;;;;KAOA,IAAA,GAAO,QAAA;EAAA,SACR,gBAAA,EAAkB,eAAA;EAAA,SAClB,cAAA;IACP,SAAA,IAAa,OAAA;MAAU,WAAA;MAA4B,YAAA;IAAA;IACnD,SAAA;MAAe,WAAA;MAA4B,YAAA;IAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;KA2BnC,QAAA;EAAA,SACD,EAAA;EAAA,SAEA,WAAA;EAzCQ;AAAA;AAOnB;;;EAPmB,SAgDR,YAAA;EAAA,SACA,oBAAA;EAAA,SACA,eAAA;EAAA,SAEA,UAAA,EAAY,IAAA;EAAA,SAEZ,cAAA;EAAA,SACA,sBAAA;EA/CA;;;EAAA,SAoDA,WAAA;EAAA,SACA,cAAA;EAAA,SACA,kBAAA;EAAA,SAEA,qBAAA;EAAA,SACA,WAAA;EAtDQ;;;AAAwC;EAAxC,SA2DR,YAAA;EAhCS;;;;EAAA,SAqCT,gBAAA,EAAkB,gBAAA,SAUI;EAAA,SARtB,iBAAA;EAtCA;;;;;;EAAA,SA6CA,uBAAA;EACT,YAAA,IAAgB,eAAA;EA9BP;;;EAAA,SAmCA,gBAAA;EA1BA;;;EAAA,SA8BA,cAAA;IAA2B,EAAA;EAAA;EAAA,SAC3B,qBAAA;IAAkC,EAAA;EAAA;AAAA;AAAA,KAGjC,SAAA;EACV,cAAA,CAAe,WAAA,kBAA6B,OAAA,QAJnC;EAMT,qBAAA,IAAyB,OAAA,CAAQ,WAAA;EACjC,iBAAA,CAAkB,QAAA,QAAgB,OAAA;EAClC,cAAA,CAAe,OAAA;IAAW,WAAA;IAAqB,WAAA;EAAA,IAAuB,OAAA,CAAQ,WAAA,mCAA8C,WAAA;EAC5H,WAAA,CAAY,OAAA;IAAW,QAAA;EAAA,IAAqB,OAAA,CAAQ,WAAA;EAFlB;;;EAOlC,MAAA,CAAO,MAAA,EAAQ,iBAAA,GAAoB,OAAA;EAEnC,kBAAA,IAAsB,cAAA;EACtB,mBAAA,IAAuB,OAAA,CAAQ,cAAA;EAC/B,oBAAA,CAAqB,IAAA,EAAM,2BAAA,GAA8B,OAAA,CAAQ,cAAA;EAEjE,yBAAA,IAA6B,oBAAA;EAC7B,0BAAA,IAA8B,OAAA,CAAQ,oBAAA;EAEtC,MAAA,IAAU,OAAA,QANa;EASvB,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAW,EAAA;IAAgB,MAAA;EAAA,IAAsB,OAAA,CAAQ,yBAAA,GALzD;EAOtC,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAY,EAAA;IAA2C,MAAA;EAAA,IAAsB,OAAA,CAAQ,yBAAA,UAFpC;EAIvF,mBAAA,CAAoB,OAAA;IAAW,QAAA;IAAkB,iBAAA;EAAA,IAA8B,OAAA,CAAQ,eAAA,UAAR;EAG/E,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAW,EAAA;IAAgB,MAAA;EAAA,IAAsB,yBAAA,EAIR;EAF/E,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAY,EAAA;IAA2C,MAAA;EAAA,IAAsB,yBAAA,SAW7B;EATtF,mBAAA,CAAoB,OAAA;IAAW,QAAA;IAAkB,iBAAA;EAAA,IAA8B,eAAA,SAc1C;EAXrC,qBAAA,IAAyB,OAAA,CAAQ,eAAA,KAayB;EAX1D,oBAAA,IAAwB,eAAA,IAYqB;EAV7C,oBAAA,CAAqB,QAAA,UAAkB,OAAA;IAAY,MAAA;EAAA,IAAsB,OAAA,QAYR;EAVjE,yBAAA,CAA0B,QAAA,UAAkB,OAAA;IAAY,MAAA;EAAA,IAAsB,OAAA,CAAQ,eAAA,GAatB;EAXhE,yBAAA,CAA0B,QAAA,UAAkB,OAAA;IAAY,MAAA;EAAA,IAAsB,eAAA;EAE9E,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,OAAA;EAErC,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAC1D,aAAA,CAAc,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAE7C,eAAA,CAAgB,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EACzE,eAAA,CAAgB,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EAE5D,cAAA,CAAe,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,cAAA;EAChE,cAAA,CAAe,OAAA;IAAY,SAAA;EAAA,IAAwB,cAAA;EAEnD,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,cAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,cAAA;EAAA,SAE5B,YAAA,EAAc,IAAA;EACvB,eAAA,CAAgB,QAAA,WAAmB,IAAA,UAAc,OAAA;EACjD,UAAA,CAAW,IAAA,EAAM,iBAAA,GAAoB,OAAA,CAAQ,IAAA;EAC7C,SAAA,CAAU,IAAA,EAAM,IAAA,GAAO,OAAA;EAgC+B;;;;;;;;;;;;;;;;;EAbtD,mBAAA,IAAuB,OAAA,CAAQ,sBAAA;EA0B/B;;;;;EApBA,kBAAA,IAAsB,sBAAA;EAEtB,iBAAA,IAAqB,OAAA,CAAQ,aAAA;EAC7B,aAAA,CAAc,SAAA,WAAoB,OAAA;EAClC,cAAA,CAAe,IAAA,EAAM,IAAA,GAAO,OAAA,CAAQ,yBAAA;EACpC,cAAA,CAAe,IAAA,EAAM,IAAA,GAAO,yBAAA;EAE5B,YAAA,CAAa,OAAA,EAAS,qBAAA,WAAgC,OAAA,CAAQ,mBAAA;EAE9D,iBAAA,IAAqB,aAAA;EACrB,kBAAA,IAAsB,OAAA,CAAQ,aAAA;EAE9B,gBAAA,CAAiB,EAAA,WAAa,aAAA;EAC9B,gBAAA,CAAiB,EAAA,WAAa,OAAA,CAAQ,aAAA;EAEtC,eAAA,CAAgB,OAAA;IAAY,QAAA;EAAA,IAAsB,OAAA,CAAQ,MAAA,YAAkB,WAAA,gCAA2C,WAAA;AAAA,IAEvH,kBAAA,gBAAkC,UAAA,YAClC,kBAAA,UAA4B,EAAA,WAAa,IAAA,kBACzC,kBAAA,cAAgC,IAAA,YAChC,kBAAA,wBAA0C,sBAAA,YAC1C,kBAAA,gBAAkC,KAAA,EAAO,IAAA,EAAM,YAAA,UAAsB,OAAA;EAAY,SAAA;AAAA,IAAwB,cAAA,kBACzG,kBAAA,iBAAmC,KAAA,EAAO,IAAA,EAAM,OAAA;EAAY,SAAA;AAAA,IAAwB,cAAA;AAAA,KAE1E,iBAAA;EAER,aAAA,CAAc,UAAA,EAAY,yBAAA,GAA4B,OAAA,CAAQ,iBAAA;EAC9D,eAAA,CAAgB,mBAAA,UAA6B,SAAA,WAAoB,OAAA;AAAA,IAEjE,kBAAA,sBAAwC,iBAAA;AAAA,KAEhC,IAAA,GAAO,QAAQ;AAAA,KAEf,WAAA,GAAc,QAAA,GAAW,IAAA,GAAO,SAAA,GAAY,QAAA;AAAA,KAE5C,mBAAA,GAAsB,WAAA,GAAc,iBAAiB;AAAA,KAErD,kBAAA,cAAgC,SAAA,sBAA+B,mBAAA,GAAsB,WAAA;AAAA,KAErF,gBAAA,GAAmB,IAAI,CACjC,IAAA;EAvHO;;;EAAA,SAoIE,cAAA;AAAA;AAAA,KAGC,iBAAA,GAAoB,gBAAA,GAAmB,IAAA,CACjD,IAAA;AAAA,KAgBU,aAAA;EACV,EAAA;EACA,MAAA;EACA,SAAA,EAAW,IAAA;EACX,eAAA;EACA,UAAA,EAAY,IAAA;EACZ,gBAAA;EACA,OAAA,GAAU,OAAA;AAAA;AAAA,KAGA,iBAAA;EACV,WAAA;EACA,cAAA,GAAiB,YAAA;EACjB,cAAA;EACA,qBAAA,GAAwB,UAAU;EAClC,eAAA;EACA,cAAA;EACA,kBAAA;EACA,YAAA;AAAA;AAAA,iBAEc,uBAAA,CAAwB,OAAA,EAAS,iBAAA,GAAoB,eAAe;AAAA,KAcxE,cAAA;EA5KV;;;;EAAA,SAiLS,YAAA,EAAc,UAAA;EAEvB,eAAA,CAAgB,KAAA,iBAAsB,OAAA;IAAY,QAAA;EAAA,IAAmC,OAAA;EAAA,SAE5E,YAAA,EAAc,IAAA;EAAA,SAEd,cAAA;EACT,iBAAA,CAAkB,QAAA,QAAgB,OAAA;EAClC,yBAAA,CAA0B,QAAA,QAAgB,OAAA,QAvLqC;EAAA,SA0LtE,+BAAA,iBAvLT;EAAA,SAyLS,WAAA,iBAzLW;EAAA,SA2LX,UAAA;IAAA,SACE,MAAA;MAAA,SACE,GAAA;MAAA,SACA,cAAA;IAAA;EAAA;EAIb,UAAA,CAAW,IAAA,EAAM,IAAA,CAAK,uBAAA,qBAA4C,OAAA,CAAQ,UAAA;EAE1E,kBAAA,IAAsB,oBAAA;EACtB,mBAAA,IAAuB,OAAA,CAAQ,oBAAA;EAC/B,oBAAA,CAAqB,IAAA,EAAM,iCAAA,GAAoC,OAAA,CAAQ,oBAAA;EAEvE,MAAA,CAAO,IAAA,EAAM,uBAAA,GAA0B,OAAA;EAEvC,eAAA,CAAgB,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EACpD,eAAA,CAAgB,YAAA,WAAuB,OAAA;EAEvC,gBAAA,CAAiB,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EACrD,gBAAA,CAAiB,YAAA,WAAuB,OAAA;EAExC,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAC1D,aAAA,CAAc,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAE7C,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,OAAA;EAErC,eAAA,CAAgB,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EACzE,eAAA,CAAgB,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EAE5D,cAAA,CAAe,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,cAAA;EAChE,cAAA,CAAe,OAAA;IAAY,SAAA;EAAA,IAAwB,cAAA;EAEnD,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,cAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,cAAA;EAErC,iBAAA,IAAqB,mBAAA;EACrB,kBAAA,IAAsB,OAAA,CAAQ,mBAAA;EAE9B,gBAAA,CAAiB,EAAA,WAAa,mBAAA;EAC9B,gBAAA,CAAiB,EAAA,WAAa,OAAA,CAAQ,mBAAA;EAlNtC;;;EAuNA,aAAA,CAAc,OAAA;IAAY,eAAA;IAA0B,eAAA;EAAA,IAA8B,OAAA;IAChF,SAAA,IAAa,OAAA;MAAU,WAAA;MAA4B,YAAA;IAAA;EAAA;AAAA,IAGrD,kBAAA,UAA4B,EAAA,WAAa,UAAA,kBACzC,kBAAA,WAA6B,OAAA,GAAU,sBAAA,GAAyB,UAAA;EAAiB,UAAA;AAAA,WACjF,kBAAA,gBAAkC,KAAA,EAAO,IAAA,EAAM,YAAA,UAAsB,OAAA;EAAY,MAAA;AAAA,IAAqB,mBAAA,kBACtG,kBAAA,iBAAmC,KAAA,EAAO,IAAA,EAAM,OAAA;EAAY,MAAA;AAAA,IAAqB,mBAAA;;;;;KAMvE,UAAA,GAAa,cAAA,GAAiB,QAAA,GAAW,SAAA,GAAY,QAAA;AAAA,KAErD,iBAAA,GAAoB,IAAA,GAAO,UAAU;AAAA,KAErC,yBAAA,GAA4B,iBAAA,GAAoB,iBAAiB;AAAA,KAEjE,wBAAA,cAAsC,SAAA,sBAA+B,yBAAA,GAA4B,iBAAA;AAAA,KAEjG,uBAAA,GAA0B,iBAAA,GAAoB,IAAA,CACxD,UAAA;AAAA,KAIU,uBAAA;EACV,YAAA;EACA,oBAAA;EACA,uBAAA;EACA,sBAAA,GAAyB,YAAA;EACzB,cAAA,GAAiB,YAAA;EACjB,QAAA;EACA,iBAAA;EACA,uBAAA;EACA,+BAAA;EACA,WAAA;EACA,UAAA;IACE,MAAA;MACE,GAAA;MACA,cAAA;IAAA;EAAA;AAAA,IAGF,iBAAA;AAAA,iBACY,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,eAAe;AAAA,KA+BpF,uBAAA;EACV,YAAA;EACA,uBAAA;EACA,QAAA;EACA,cAAA;EACA,WAAA;EACA,oBAAA;EACA,cAAA;EACA,sBAAA;EACA,cAAA;EACA,WAAA;EACA,UAAA;IACE,MAAA;MACE,GAAA;MACA,cAAA;IAAA;EAAA;AAAA;AAAA,iBAIU,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,SAAS"}