@hexclave/next 1.0.5 → 1.0.6

package/dist/lib/hexclave-app/apps/implementations/common.d.ts

@@ -21,10 +21,10 @@ declare function resolveConstructorOptions<T extends {
 declare function getUrls(partial: HandlerUrlOptions, options: {
   projectId: string;
 }): ResolvedHandlerUrls;
-declare function getDefaultProjectId(): string;
-declare function getDefaultPublishableClientKey(): string | undefined;
-declare function getDefaultSecretServerKey(): string;
-declare function getDefaultSuperSecretAdminKey(): string;
+declare function getDefaultProjectId(): any;
+declare function getDefaultPublishableClientKey(): any;
+declare function getDefaultSecretServerKey(): any;
+declare function getDefaultSuperSecretAdminKey(): any;
 declare function getDefaultExtraRequestHeaders(): any;
 /**
  * Returns the base URL for the Stack API.
@@ -32,9 +32,9 @@ declare function getDefaultExtraRequestHeaders(): any;
  * The URL can be specified in several ways, in order of precedence:
  * 1. Directly through userSpecifiedBaseUrl parameter as string or browser/server object
  * 2. Through environment variables:
- *    - Browser: NEXT_PUBLIC_BROWSER_STACK_API_URL
- *    - Server: NEXT_PUBLIC_SERVER_STACK_API_URL
- *    - Fallback: NEXT_PUBLIC_STACK_API_URL or NEXT_PUBLIC_STACK_URL
+ *    - Browser: NEXT_PUBLIC_HEXCLAVE_API_URL_BROWSER/VITE_HEXCLAVE_API_URL_BROWSER
+ *    - Server: HEXCLAVE_API_URL_SERVER
+ *    - Default: HEXCLAVE_API_URL
  * 3. Default base URL if none of the above are specified
  *
  * The function also ensures the URL doesn't end with a trailing slash
@@ -47,7 +47,7 @@ declare function getDefaultExtraRequestHeaders(): any;
 declare function getBaseUrl(userSpecifiedBaseUrl: string | {
   browser: string;
   server: string;
-} | undefined): string;
+} | undefined): any;
 declare const defaultBaseUrl = "https://api.hexclave.com";
 declare const defaultAnalyticsBaseUrl = "https://r.hexclave.com";
 declare function getAnalyticsBaseUrl(regularBaseUrl: string): string;

package/dist/lib/hexclave-app/apps/implementations/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","names":[],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/common.ts"],"mappings":";;;;;;;cAoBa,aAAA;AAAA,cAYA,WAAA,uBAAmC,OAAA,GAAU,YAAA,EAAc,CAAA,KAAM,OAAA,CAAQ,CAAA,MAAE,UAAA,CAAA,CAAA,EAAA,MAAA,CAAA,CAAA;AAAA,cAO3E,oBAAA,uBAA4C,OAAA,GAAU,OAAA,EAAS,eAAA,EAAiB,iBAAA,EAAmB,CAAA,KAAM,OAAA,CAAQ,CAAA,MAAE,UAAA,EAAA,eAAA,KAAA,CAAA,GAAA,MAAA,CAAA,CAAA;AAAA,KAa3H,OAAA;EAAA,CAAa,0BAAA;IAA+B,qBAAA;EAAA;AAAA;AAAA,iBACjC,yBAAA;EAAsC,YAAA,GAAe,OAAA;AAAA,EAAA,CAAW,OAAA,EAAS,CAAA,GAAI,CAAA;EAAM,YAAA;AAAA;AAAA,iBAOnF,OAAA,CAAQ,OAAA,EAAS,iBAAA,EAAmB,OAAA;EAAW,SAAA;AAAA,IAAsB,mBAAA;AAAA,iBAOrE,mBAAA,CAAA;AAAA,iBAIA,8BAAA,CAAA;AAAA,iBAIA,yBAAA,CAAA;AAAA,iBAIA,6BAAA,CAAA;AAAA,iBAIA,6BAAA,CAAA;;;;;;;;;;;;AA5ChB;;;;;;;iBAkEgB,UAAA,CAAW,oBAAA;EAAiC,OAAA;EAAiB,MAAA;AAAA;AAAA,cAyBhE,cAAA;AAAA,cACA,uBAAA;AAAA,iBAOG,mBAAA,CAAoB,cAAA;AAAA,iBA0BpB,cAAA,CAAe,mBAAA;EAAgC,OAAA;EAAiB,MAAA;AAAA;AAAA,KAcpE,WAAA;EACV,WAAA;EACA,YAAA;AAAA;AAAA,iBAGc,qBAAA,CAAA,GAAqB,KAAA,CAAA,WAAA;AAAA,iBASrB,aAAA,oBAAA,CAAkC,KAAA,EAAO,UAAA,CAAW,CAAA,EAAG,MAAA,CAAO,CAAA,IAAK,YAAA,EAAc,CAAA,EAAG,MAAA,WAAiB,CAAA"}
+{"version":3,"file":"common.d.ts","names":[],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/common.ts"],"mappings":";;;;;;;cAoBa,aAAA;AAAA,cAgCA,WAAA,uBAAmC,OAAA,GAAU,YAAA,EAAc,CAAA,KAAM,OAAA,CAAQ,CAAA,MAAE,UAAA,CAAA,CAAA,EAAA,MAAA,CAAA,CAAA;AAAA,cAO3E,oBAAA,uBAA4C,OAAA,GAAU,OAAA,EAAS,eAAA,EAAiB,iBAAA,EAAmB,CAAA,KAAM,OAAA,CAAQ,CAAA,MAAE,UAAA,EAAA,eAAA,KAAA,CAAA,GAAA,MAAA,CAAA,CAAA;AAAA,KAa3H,OAAA;EAAA,CAAa,0BAAA;IAA+B,qBAAA;EAAA;AAAA;AAAA,iBACjC,yBAAA;EAAsC,YAAA,GAAe,OAAA;AAAA,EAAA,CAAW,OAAA,EAAS,CAAA,GAAI,CAAA;EAAM,YAAA;AAAA;AAAA,iBAOnF,OAAA,CAAQ,OAAA,EAAS,iBAAA,EAAmB,OAAA;EAAW,SAAA;AAAA,IAAsB,mBAAA;AAAA,iBAOrE,mBAAA,CAAA;AAAA,iBAIA,8BAAA,CAAA;AAAA,iBAIA,yBAAA,CAAA;AAAA,iBAIA,6BAAA,CAAA;AAAA,iBAIA,6BAAA,CAAA;;;;;;;;;;;;AA5ChB;;;;;;;iBAkEgB,UAAA,CAAW,oBAAA;EAAiC,OAAA;EAAiB,MAAA;AAAA;AAAA,cAwBhE,cAAA;AAAA,cACA,uBAAA;AAAA,iBAOG,mBAAA,CAAoB,cAAA;AAAA,iBA0BpB,cAAA,CAAe,mBAAA;EAAgC,OAAA;EAAiB,MAAA;AAAA;AAAA,KAcpE,WAAA;EACV,WAAA;EACA,YAAA;AAAA;AAAA,iBAGc,qBAAA,CAAA,GAAqB,KAAA,CAAA,WAAA;AAAA,iBASrB,aAAA,oBAAA,CAAkC,KAAA,EAAO,UAAA,CAAW,CAAA,EAAG,MAAA,CAAO,CAAA,IAAK,YAAA,EAAc,CAAA,EAAG,MAAA,WAAiB,CAAA"}

package/dist/lib/hexclave-app/apps/implementations/common.js

@@ -13,17 +13,31 @@ let _hexclave_shared_dist_utils_env = require("@hexclave/shared/dist/utils/env")
 let _hexclave_shared_dist_utils_globals = require("@hexclave/shared/dist/utils/globals");
 let ______common_js = require("../../common.js");
 let _hexclave_shared_dist_utils_stores = require("@hexclave/shared/dist/utils/stores");
-let _________env_js = require("../../../env.js");
+let ____________generated_env_js = require("../../../../generated/env.js");
 let ______url_targets_js = require("../../url-targets.js");
 
 //#region src/lib/hexclave-app/apps/implementations/common.ts
-const clientVersion = "js @hexclave/next@1.0.5";
+const clientVersion = "js @hexclave/next@1.0.6";
 if (clientVersion.startsWith("STACK_COMPILE_TIME")) throw new _hexclave_shared_dist_utils_errors.HexclaveAssertionError("Client version was not replaced. Something went wrong during build!");
 const replaceHexclavePortPrefix = (input) => {
 	if (!input) return input;
-	const prefix = _________env_js.envVars.NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX;
+	const prefix = ____________generated_env_js.envVars.HEXCLAVE_PORT_PREFIX;
 	return prefix ? input.replace(/\$\{NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX:-81\}/g, prefix) : input;
 };
+const showMissingConfigAlertInBrowser = (message) => {
+	if (!(0, _hexclave_shared_dist_utils_env.isBrowserLike)()) return;
+	const global = globalThis;
+	const alertAlreadyShownKey = "__hexclave_missing_config_alert_already_shown";
+	if (global[alertAlreadyShownKey]) return;
+	global[alertAlreadyShownKey] = true;
+	const alertFn = global.alert;
+	if (typeof alertFn === "function") alertFn(message);
+};
+const throwMissingProjectIdError = () => {
+	const message = "Welcome to Hexclave! It seems that you haven't provided a project ID. Please create a project on the Hexclave dashboard at https://app.hexclave.com and put it in the HEXCLAVE_PROJECT_ID environment variable.";
+	showMissingConfigAlertInBrowser(message);
+	return (0, _hexclave_shared_dist_utils_errors.throwErr)(new Error(message));
+};
 const createCache = (fetcher) => {
 	return new _hexclave_shared_dist_utils_caches.AsyncCache(async (dependencies) => await _hexclave_shared_dist_utils_results.Result.fromThrowingAsync(async () => await fetcher(dependencies)), {});
 };
@@ -46,19 +60,19 @@ function getUrls(partial, options) {
 	});
 }
 function getDefaultProjectId() {
-	return _________env_js.envVars.NEXT_PUBLIC_STACK_PROJECT_ID || _________env_js.envVars.STACK_PROJECT_ID || (0, _hexclave_shared_dist_utils_errors.throwErr)(/* @__PURE__ */ new Error("Welcome to Hexclave! It seems that you haven't provided a project ID. Please create a project on the Hexclave dashboard at https://app.hexclave.com and put it in the NEXT_PUBLIC_STACK_PROJECT_ID environment variable."));
+	return ____________generated_env_js.envVars.HEXCLAVE_PROJECT_ID || throwMissingProjectIdError();
 }
 function getDefaultPublishableClientKey() {
-	return _________env_js.envVars.NEXT_PUBLIC_STACK_PUBLISHABLE_CLIENT_KEY || _________env_js.envVars.STACK_PUBLISHABLE_CLIENT_KEY;
+	return ____________generated_env_js.envVars.HEXCLAVE_PUBLISHABLE_CLIENT_KEY;
 }
 function getDefaultSecretServerKey() {
-	return _________env_js.envVars.STACK_SECRET_SERVER_KEY || (0, _hexclave_shared_dist_utils_errors.throwErr)(/* @__PURE__ */ new Error("No secret server key provided. Please copy your key from the Hexclave dashboard and put it in the STACK_SECRET_SERVER_KEY environment variable."));
+	return ____________generated_env_js.envVars.HEXCLAVE_SECRET_SERVER_KEY || (0, _hexclave_shared_dist_utils_errors.throwErr)(/* @__PURE__ */ new Error("No secret server key provided. Please copy your key from the Hexclave dashboard and put it in the HEXCLAVE_SECRET_SERVER_KEY environment variable."));
 }
 function getDefaultSuperSecretAdminKey() {
-	return _________env_js.envVars.STACK_SUPER_SECRET_ADMIN_KEY || (0, _hexclave_shared_dist_utils_errors.throwErr)(/* @__PURE__ */ new Error("No super secret admin key provided. Please copy your key from the Hexclave dashboard and put it in the STACK_SUPER_SECRET_ADMIN_KEY environment variable."));
+	return ____________generated_env_js.envVars.HEXCLAVE_SUPER_SECRET_ADMIN_KEY || (0, _hexclave_shared_dist_utils_errors.throwErr)(/* @__PURE__ */ new Error("No super secret admin key provided. Please copy your key from the Hexclave dashboard and put it in the HEXCLAVE_SUPER_SECRET_ADMIN_KEY environment variable."));
 }
 function getDefaultExtraRequestHeaders() {
-	return JSON.parse(_________env_js.envVars.NEXT_PUBLIC_STACK_EXTRA_REQUEST_HEADERS || _________env_js.envVars.STACK_EXTRA_REQUEST_HEADERS || "{}");
+	return JSON.parse(____________generated_env_js.envVars.HEXCLAVE_EXTRA_REQUEST_HEADERS || "{}");
 }
 /**
 * Returns the base URL for the Stack API.
@@ -66,9 +80,9 @@ function getDefaultExtraRequestHeaders() {
 * The URL can be specified in several ways, in order of precedence:
 * 1. Directly through userSpecifiedBaseUrl parameter as string or browser/server object
 * 2. Through environment variables:
-*    - Browser: NEXT_PUBLIC_BROWSER_STACK_API_URL
-*    - Server: NEXT_PUBLIC_SERVER_STACK_API_URL
-*    - Fallback: NEXT_PUBLIC_STACK_API_URL or NEXT_PUBLIC_STACK_URL
+*    - Browser: NEXT_PUBLIC_HEXCLAVE_API_URL_BROWSER/VITE_HEXCLAVE_API_URL_BROWSER
+*    - Server: HEXCLAVE_API_URL_SERVER
+*    - Default: HEXCLAVE_API_URL
 * 3. Default base URL if none of the above are specified
 *
 * The function also ensures the URL doesn't end with a trailing slash
@@ -84,9 +98,9 @@ function getBaseUrl(userSpecifiedBaseUrl) {
 	else if ((0, _hexclave_shared_dist_utils_env.isBrowserLike)()) url = userSpecifiedBaseUrl.browser;
 	else url = userSpecifiedBaseUrl.server;
 	else {
-		if ((0, _hexclave_shared_dist_utils_env.isBrowserLike)()) url = _________env_js.envVars.NEXT_PUBLIC_BROWSER_STACK_API_URL || _________env_js.envVars.NEXT_PUBLIC_STACK_API_URL_BROWSER || _________env_js.envVars.STACK_API_URL_BROWSER;
-		else url = _________env_js.envVars.NEXT_PUBLIC_SERVER_STACK_API_URL || _________env_js.envVars.NEXT_PUBLIC_STACK_API_URL_SERVER || _________env_js.envVars.STACK_API_URL_SERVER;
-		url = url || _________env_js.envVars.NEXT_PUBLIC_STACK_API_URL || _________env_js.envVars.STACK_API_URL || _________env_js.envVars.NEXT_PUBLIC_STACK_URL || defaultBaseUrl;
+		if ((0, _hexclave_shared_dist_utils_env.isBrowserLike)()) url = ____________generated_env_js.envVars.HEXCLAVE_API_URL_BROWSER;
+		else url = ____________generated_env_js.envVars.HEXCLAVE_API_URL_SERVER;
+		url = url || ____________generated_env_js.envVars.HEXCLAVE_API_URL || defaultBaseUrl;
 	}
 	return replaceHexclavePortPrefix(url.endsWith("/") ? url.slice(0, -1) : url);
 }

package/dist/lib/hexclave-app/apps/implementations/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","names":[],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/common.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport { AsyncCache } from \"@hexclave/shared/dist/utils/caches\";\nimport { isBrowserLike } from \"@hexclave/shared/dist/utils/env\";\nimport { HexclaveAssertionError, captureError, concatStacktraces, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { createGlobal, getGlobal } from \"@hexclave/shared/dist/utils/globals\";\nimport { filterUndefined, omit } from \"@hexclave/shared/dist/utils/objects\";\nimport { ReactPromise, runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { suspendIfSsr, use } from \"@hexclave/shared/dist/utils/react\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { Store } from \"@hexclave/shared/dist/utils/stores\";\nimport { getDefaultApiUrls } from \"@hexclave/shared/dist/utils/urls\";\nimport React, { useCallback } from \"react\"; // THIS_LINE_PLATFORM react-like\nimport { envVars } from \"../../../env\";\nimport { HandlerUrlOptions, ResolvedHandlerUrls, hexclaveAppInternalsSymbol } from \"../../common\";\nimport { resolveHandlerUrls } from \"../../url-targets\";\n\nexport const clientVersion = \"STACK_COMPILE_TIME_CLIENT_PACKAGE_VERSION_SENTINEL\";\nif (clientVersion.startsWith(\"STACK_COMPILE_TIME\")) {\n  throw new HexclaveAssertionError(\"Client version was not replaced. Something went wrong during build!\");\n}\n\nconst replaceHexclavePortPrefix = <T extends string | undefined>(input: T): T => {\n  if (!input) return input;\n  const prefix = envVars.NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX;\n  return prefix ? input.replace(/\\$\\{NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX:-81\\}/g, prefix) as T : input;\n};\n\n\nexport const createCache = <D extends any[], T>(fetcher: (dependencies: D) => Promise<T>) => {\n  return new AsyncCache<D, Result<T>>(\n    async (dependencies) => await Result.fromThrowingAsync(async () => await fetcher(dependencies)),\n    {},\n  );\n};\n\nexport const createCacheBySession = <D extends any[], T>(fetcher: (session: InternalSession, extraDependencies: D) => Promise<T> ) => {\n  return new AsyncCache<[InternalSession, ...D], Result<T>>(\n    async ([session, ...extraDependencies]) => await Result.fromThrowingAsync(async () => await fetcher(session, extraDependencies)),\n    {\n      onSubscribe: ([session], refresh) => {\n        const handler = session.onInvalidate(() => refresh());\n        return () => handler.unsubscribe();\n      },\n    },\n  );\n};\n\n\ntype AppLike = { [hexclaveAppInternalsSymbol]: { getConstructorOptions: () => any } };\nexport function resolveConstructorOptions<T extends { inheritsFrom?: AppLike }>(options: T): T & { inheritsFrom?: undefined } {\n  return {\n    ...options.inheritsFrom?.[hexclaveAppInternalsSymbol].getConstructorOptions() ?? {},\n    ...filterUndefined(omit(options, [\"inheritsFrom\"])),\n  };\n}\n\nexport function getUrls(partial: HandlerUrlOptions, options: { projectId: string }): ResolvedHandlerUrls {\n  return resolveHandlerUrls({\n    urls: partial,\n    projectId: options.projectId,\n  });\n}\n\nexport function getDefaultProjectId() {\n  return envVars.NEXT_PUBLIC_STACK_PROJECT_ID || envVars.STACK_PROJECT_ID || throwErr(new Error(\"Welcome to Hexclave! It seems that you haven't provided a project ID. Please create a project on the Hexclave dashboard at https://app.hexclave.com and put it in the NEXT_PUBLIC_STACK_PROJECT_ID environment variable.\"));\n}\n\nexport function getDefaultPublishableClientKey() {\n  return envVars.NEXT_PUBLIC_STACK_PUBLISHABLE_CLIENT_KEY || envVars.STACK_PUBLISHABLE_CLIENT_KEY;\n}\n\nexport function getDefaultSecretServerKey() {\n  return envVars.STACK_SECRET_SERVER_KEY || throwErr(new Error(\"No secret server key provided. Please copy your key from the Hexclave dashboard and put it in the STACK_SECRET_SERVER_KEY environment variable.\"));\n}\n\nexport function getDefaultSuperSecretAdminKey() {\n  return envVars.STACK_SUPER_SECRET_ADMIN_KEY || throwErr(new Error(\"No super secret admin key provided. Please copy your key from the Hexclave dashboard and put it in the STACK_SUPER_SECRET_ADMIN_KEY environment variable.\"));\n}\n\nexport function getDefaultExtraRequestHeaders() {\n  return JSON.parse(envVars.NEXT_PUBLIC_STACK_EXTRA_REQUEST_HEADERS || envVars.STACK_EXTRA_REQUEST_HEADERS || '{}');\n}\n\n/**\n * Returns the base URL for the Stack API.\n *\n * The URL can be specified in several ways, in order of precedence:\n * 1. Directly through userSpecifiedBaseUrl parameter as string or browser/server object\n * 2. Through environment variables:\n *    - Browser: NEXT_PUBLIC_BROWSER_STACK_API_URL\n *    - Server: NEXT_PUBLIC_SERVER_STACK_API_URL\n *    - Fallback: NEXT_PUBLIC_STACK_API_URL or NEXT_PUBLIC_STACK_URL\n * 3. Default base URL if none of the above are specified\n *\n * The function also ensures the URL doesn't end with a trailing slash\n * by removing it if present.\n *\n * @param userSpecifiedBaseUrl - Optional URL override as string or {browser, server} object\n * @returns The configured base URL without trailing slash\n\n */\nexport function getBaseUrl(userSpecifiedBaseUrl: string | { browser: string, server: string } | undefined) {\n  let url;\n  if (userSpecifiedBaseUrl) {\n    if (typeof userSpecifiedBaseUrl === \"string\") {\n      url = userSpecifiedBaseUrl;\n    } else {\n      if (isBrowserLike()) {\n        url = userSpecifiedBaseUrl.browser;\n      } else {\n        url = userSpecifiedBaseUrl.server;\n      }\n    }\n  } else {\n    // note: NEXT_PUBLIC_BROWSER_STACK_API_URL was renamed to NEXT_PUBLIC_STACK_API_URL_BROWSER, and NEXT_PUBLIC_STACK_URL to NEXT_PUBLIC_STACK_API_URL\n    if (isBrowserLike()) {\n      url = envVars.NEXT_PUBLIC_BROWSER_STACK_API_URL || envVars.NEXT_PUBLIC_STACK_API_URL_BROWSER || envVars.STACK_API_URL_BROWSER;\n    } else {\n      url = envVars.NEXT_PUBLIC_SERVER_STACK_API_URL || envVars.NEXT_PUBLIC_STACK_API_URL_SERVER || envVars.STACK_API_URL_SERVER;\n    }\n    url = url || envVars.NEXT_PUBLIC_STACK_API_URL || envVars.STACK_API_URL || envVars.NEXT_PUBLIC_STACK_URL || defaultBaseUrl;\n  }\n\n  return replaceHexclavePortPrefix(url.endsWith('/') ? url.slice(0, -1) : url);\n}\n\nexport const defaultBaseUrl = \"https://api.hexclave.com\";\nexport const defaultAnalyticsBaseUrl = \"https://r.hexclave.com\";\n\nconst analyticsBaseUrlsByApiBaseUrl = new Map<string, string>([\n  [defaultBaseUrl, defaultAnalyticsBaseUrl],\n  [\"https://api.stack-auth.com\", \"https://r.stack-auth.com\"],\n]);\n\nexport function getAnalyticsBaseUrl(regularBaseUrl: string): string {\n  return analyticsBaseUrlsByApiBaseUrl.get(regularBaseUrl) ?? regularBaseUrl;\n}\n\n\nfunction fetchBackendUrlsInBackground(primaryBaseUrl: string): void {\n  createGlobal('__stack-fetch-backend-urls-started', () => {\n    runAsynchronously(async () => {\n      try {\n        const res = await fetch(`${primaryBaseUrl}/api/v1/internal/backend-urls`);\n        if (!res.ok) {\n          return;\n        }\n        const data = await res.json();\n        if (!Array.isArray(data.urls) || !data.urls.every((u: unknown) => typeof u === 'string')) {\n          return;\n        }\n        createGlobal('__stack-fetched-backend-urls', () => data.urls as string[]);\n      } catch (e) {\n        captureError('fetch-backend-urls-in-background', e);\n      }\n    });\n    return true;\n  });\n}\n\nexport function resolveApiUrls(userExplicitBaseUrl: string | { browser: string, server: string } | undefined): () => string[] {\n  return () => {\n    if (userExplicitBaseUrl != null) {\n      return [getBaseUrl(userExplicitBaseUrl)];\n    }\n    const primary = getBaseUrl(undefined);\n    // Always try to fetch server-configured URLs (supports custom domains via\n    // STACK_BACKEND_URLS_CONFIG). Hardcoded fallbacks are used as a default\n    // until the background fetch completes.\n    fetchBackendUrlsInBackground(primary);\n    return getGlobal('__stack-fetched-backend-urls') ?? getDefaultApiUrls(primary);\n  };\n}\n\nexport type TokenObject = {\n  accessToken: string | null,\n  refreshToken: string | null,\n};\n\nexport function createEmptyTokenStore() {\n  return new Store<TokenObject>({\n    refreshToken: null,\n    accessToken: null,\n  });\n}\n\n\nconst cachePromiseByHookId = new Map<string, ReactPromise<Result<unknown>>>();\nexport function useAsyncCache<D extends any[], T>(cache: AsyncCache<D, Result<T>>, dependencies: D, caller: string): T {\n  // we explicitly don't want to run this hook in SSR\n  suspendIfSsr(caller);\n\n  // on the dashboard, we do some perf monitoring for pre-fetching which should hook right in here\n  const asyncCacheHooks: any[] = getGlobal(\"use-async-cache-execution-hooks\") ?? [];\n  for (const hook of asyncCacheHooks) {\n    hook({ cache, caller, dependencies });\n  }\n\n  const id = React.useId();\n\n  // whenever the dependencies change, we need to refresh the promise cache\n  React.useEffect(() => {\n    cachePromiseByHookId.delete(id);\n  }, [...dependencies, id]);\n\n  const subscribe = useCallback((cb: () => void) => {\n    const { unsubscribe } = cache.onStateChange(dependencies, () => {\n      cachePromiseByHookId.delete(id);\n      cb();\n    });\n    return unsubscribe;\n  }, [cache, ...dependencies]);\n  const getSnapshot = useCallback(() => {\n    // React checks whether a promise passed to `use` is still the same as the previous one by comparing the reference.\n    // If we didn't cache here, this wouldn't work because the promise would be recreated every time the value changes.\n    if (!cachePromiseByHookId.has(id)) {\n      cachePromiseByHookId.set(id, cache.getOrWait(dependencies, \"read-write\"));\n    }\n    return cachePromiseByHookId.get(id) as ReactPromise<Result<T>>;\n  }, [cache, ...dependencies]);\n\n  // note: we must use React.useSyncExternalStore instead of importing the function directly, as it will otherwise\n  // throw an error on Next.js (\"can't import useSyncExternalStore from the server\")\n  const promise = React.useSyncExternalStore(\n    subscribe,\n    getSnapshot,\n    getSnapshot,\n  );\n\n  const result = use(promise);\n  if (result.status === \"error\") {\n    const error = result.error;\n    if (error instanceof Error && !(error as any).__stackHasConcatenatedStacktraces) {\n      concatStacktraces(error, new Error());\n      (error as any).__stackHasConcatenatedStacktraces = true;\n    }\n    throw error;\n  }\n  return result.data;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAoBA,MAAa,gBAAgB;AAC7B,IAAI,cAAc,WAAW,qBAAqB,CAChD,OAAM,IAAI,0DAAuB,sEAAsE;AAGzG,MAAM,6BAA2D,UAAgB;AAC/E,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,SAAS,wBAAQ;AACvB,QAAO,SAAS,MAAM,QAAQ,+CAA+C,OAAO,GAAQ;;AAI9F,MAAa,eAAmC,YAA6C;AAC3F,QAAO,IAAI,8CACT,OAAO,iBAAiB,MAAM,2CAAO,kBAAkB,YAAY,MAAM,QAAQ,aAAa,CAAC,EAC/F,EAAE,CACH;;AAGH,MAAa,wBAA4C,YAA6E;AACpI,QAAO,IAAI,8CACT,OAAO,CAAC,SAAS,GAAG,uBAAuB,MAAM,2CAAO,kBAAkB,YAAY,MAAM,QAAQ,SAAS,kBAAkB,CAAC,EAChI,EACE,cAAc,CAAC,UAAU,YAAY;EACnC,MAAM,UAAU,QAAQ,mBAAmB,SAAS,CAAC;AACrD,eAAa,QAAQ,aAAa;IAErC,CACF;;AAKH,SAAgB,0BAAgE,SAA8C;AAC5H,QAAO;EACL,GAAG,QAAQ,eAAe,4CAA4B,uBAAuB,IAAI,EAAE;EACnF,0GAAwB,SAAS,CAAC,eAAe,CAAC,CAAC;EACpD;;AAGH,SAAgB,QAAQ,SAA4B,SAAqD;AACvG,qDAA0B;EACxB,MAAM;EACN,WAAW,QAAQ;EACpB,CAAC;;AAGJ,SAAgB,sBAAsB;AACpC,QAAO,wBAAQ,gCAAgC,wBAAQ,qFAA6B,IAAI,MAAM,2NAA2N,CAAC;;AAG5T,SAAgB,iCAAiC;AAC/C,QAAO,wBAAQ,4CAA4C,wBAAQ;;AAGrE,SAAgB,4BAA4B;AAC1C,QAAO,wBAAQ,4FAAoC,IAAI,MAAM,kJAAkJ,CAAC;;AAGlN,SAAgB,gCAAgC;AAC9C,QAAO,wBAAQ,iGAAyC,IAAI,MAAM,4JAA4J,CAAC;;AAGjO,SAAgB,gCAAgC;AAC9C,QAAO,KAAK,MAAM,wBAAQ,2CAA2C,wBAAQ,+BAA+B,KAAK;;;;;;;;;;;;;;;;;;;;AAqBnH,SAAgB,WAAW,sBAAgF;CACzG,IAAI;AACJ,KAAI,qBACF,KAAI,OAAO,yBAAyB,SAClC,OAAM;8DAEa,CACjB,OAAM,qBAAqB;KAE3B,OAAM,qBAAqB;MAG1B;AAEL,0DAAmB,CACjB,OAAM,wBAAQ,qCAAqC,wBAAQ,qCAAqC,wBAAQ;MAExG,OAAM,wBAAQ,oCAAoC,wBAAQ,oCAAoC,wBAAQ;AAExG,QAAM,OAAO,wBAAQ,6BAA6B,wBAAQ,iBAAiB,wBAAQ,yBAAyB;;AAG9G,QAAO,0BAA0B,IAAI,SAAS,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI;;AAG9E,MAAa,iBAAiB;AAC9B,MAAa,0BAA0B;AAEvC,MAAM,gCAAgC,IAAI,IAAoB,CAC5D,CAAC,gBAAgB,wBAAwB,EACzC,CAAC,8BAA8B,2BAA2B,CAC3D,CAAC;AAEF,SAAgB,oBAAoB,gBAAgC;AAClE,QAAO,8BAA8B,IAAI,eAAe,IAAI;;AAI9D,SAAS,6BAA6B,gBAA8B;AAClE,uDAAa,4CAA4C;AACvD,8DAAkB,YAAY;AAC5B,OAAI;IACF,MAAM,MAAM,MAAM,MAAM,GAAG,eAAe,+BAA+B;AACzE,QAAI,CAAC,IAAI,GACP;IAEF,MAAM,OAAO,MAAM,IAAI,MAAM;AAC7B,QAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,OAAO,MAAe,OAAO,MAAM,SAAS,CACtF;AAEF,0DAAa,sCAAsC,KAAK,KAAiB;YAClE,GAAG;AACV,yDAAa,oCAAoC,EAAE;;IAErD;AACF,SAAO;GACP;;AAGJ,SAAgB,eAAe,qBAA+F;AAC5H,cAAa;AACX,MAAI,uBAAuB,KACzB,QAAO,CAAC,WAAW,oBAAoB,CAAC;EAE1C,MAAM,UAAU,WAAW,OAAU;AAIrC,+BAA6B,QAAQ;AACrC,4DAAiB,+BAA+B,4DAAsB,QAAQ;;;AASlF,SAAgB,wBAAwB;AACtC,QAAO,IAAI,yCAAmB;EAC5B,cAAc;EACd,aAAa;EACd,CAAC;;AAIJ,MAAM,uCAAuB,IAAI,KAA4C;AAC7E,SAAgB,cAAkC,OAAiC,cAAiB,QAAmB;AAErH,qDAAa,OAAO;CAGpB,MAAM,qEAAmC,kCAAkC,IAAI,EAAE;AACjF,MAAK,MAAM,QAAQ,gBACjB,MAAK;EAAE;EAAO;EAAQ;EAAc,CAAC;CAGvC,MAAM,KAAK,cAAM,OAAO;AAGxB,eAAM,gBAAgB;AACpB,uBAAqB,OAAO,GAAG;IAC9B,CAAC,GAAG,cAAc,GAAG,CAAC;CAEzB,MAAM,oCAAyB,OAAmB;EAChD,MAAM,EAAE,gBAAgB,MAAM,cAAc,oBAAoB;AAC9D,wBAAqB,OAAO,GAAG;AAC/B,OAAI;IACJ;AACF,SAAO;IACN,CAAC,OAAO,GAAG,aAAa,CAAC;CAC5B,MAAM,2CAAgC;AAGpC,MAAI,CAAC,qBAAqB,IAAI,GAAG,CAC/B,sBAAqB,IAAI,IAAI,MAAM,UAAU,cAAc,aAAa,CAAC;AAE3E,SAAO,qBAAqB,IAAI,GAAG;IAClC,CAAC,OAAO,GAAG,aAAa,CAAC;CAU5B,MAAM,oDANU,cAAM,qBACpB,WACA,aACA,YACD,CAE0B;AAC3B,KAAI,OAAO,WAAW,SAAS;EAC7B,MAAM,QAAQ,OAAO;AACrB,MAAI,iBAAiB,SAAS,CAAE,MAAc,mCAAmC;AAC/E,6DAAkB,uBAAO,IAAI,OAAO,CAAC;AACrC,GAAC,MAAc,oCAAoC;;AAErD,QAAM;;AAER,QAAO,OAAO"}
+{"version":3,"file":"common.js","names":[],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/common.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport { AsyncCache } from \"@hexclave/shared/dist/utils/caches\";\nimport { isBrowserLike } from \"@hexclave/shared/dist/utils/env\";\nimport { HexclaveAssertionError, captureError, concatStacktraces, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { createGlobal, getGlobal } from \"@hexclave/shared/dist/utils/globals\";\nimport { filterUndefined, omit } from \"@hexclave/shared/dist/utils/objects\";\nimport { ReactPromise, runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { suspendIfSsr, use } from \"@hexclave/shared/dist/utils/react\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { Store } from \"@hexclave/shared/dist/utils/stores\";\nimport { getDefaultApiUrls } from \"@hexclave/shared/dist/utils/urls\";\nimport React, { useCallback } from \"react\"; // THIS_LINE_PLATFORM react-like\nimport { envVars } from \"../../../../generated/env\";\nimport { HandlerUrlOptions, ResolvedHandlerUrls, hexclaveAppInternalsSymbol } from \"../../common\";\nimport { resolveHandlerUrls } from \"../../url-targets\";\n\nexport const clientVersion = \"STACK_COMPILE_TIME_CLIENT_PACKAGE_VERSION_SENTINEL\";\nif (clientVersion.startsWith(\"STACK_COMPILE_TIME\")) {\n  throw new HexclaveAssertionError(\"Client version was not replaced. Something went wrong during build!\");\n}\n\nconst replaceHexclavePortPrefix = <T extends string | undefined>(input: T): T => {\n  if (!input) return input;\n  const prefix = envVars.HEXCLAVE_PORT_PREFIX;\n  return prefix ? input.replace(/\\$\\{NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX:-81\\}/g, prefix) as T : input;\n};\n\nconst showMissingConfigAlertInBrowser = (message: string) => {\n  if (!isBrowserLike()) return;\n\n  const global = globalThis as any;\n  const alertAlreadyShownKey = \"__hexclave_missing_config_alert_already_shown\";\n  if (global[alertAlreadyShownKey]) return;\n  global[alertAlreadyShownKey] = true;\n\n  const alertFn = global.alert;\n  if (typeof alertFn === \"function\") {\n    alertFn(message);\n  }\n};\n\nconst throwMissingProjectIdError = (): never => {\n  const message = \"Welcome to Hexclave! It seems that you haven't provided a project ID. Please create a project on the Hexclave dashboard at https://app.hexclave.com and put it in the HEXCLAVE_PROJECT_ID environment variable.\";\n  showMissingConfigAlertInBrowser(message);\n  return throwErr(new Error(message));\n};\n\n\nexport const createCache = <D extends any[], T>(fetcher: (dependencies: D) => Promise<T>) => {\n  return new AsyncCache<D, Result<T>>(\n    async (dependencies) => await Result.fromThrowingAsync(async () => await fetcher(dependencies)),\n    {},\n  );\n};\n\nexport const createCacheBySession = <D extends any[], T>(fetcher: (session: InternalSession, extraDependencies: D) => Promise<T> ) => {\n  return new AsyncCache<[InternalSession, ...D], Result<T>>(\n    async ([session, ...extraDependencies]) => await Result.fromThrowingAsync(async () => await fetcher(session, extraDependencies)),\n    {\n      onSubscribe: ([session], refresh) => {\n        const handler = session.onInvalidate(() => refresh());\n        return () => handler.unsubscribe();\n      },\n    },\n  );\n};\n\n\ntype AppLike = { [hexclaveAppInternalsSymbol]: { getConstructorOptions: () => any } };\nexport function resolveConstructorOptions<T extends { inheritsFrom?: AppLike }>(options: T): T & { inheritsFrom?: undefined } {\n  return {\n    ...options.inheritsFrom?.[hexclaveAppInternalsSymbol].getConstructorOptions() ?? {},\n    ...filterUndefined(omit(options, [\"inheritsFrom\"])),\n  };\n}\n\nexport function getUrls(partial: HandlerUrlOptions, options: { projectId: string }): ResolvedHandlerUrls {\n  return resolveHandlerUrls({\n    urls: partial,\n    projectId: options.projectId,\n  });\n}\n\nexport function getDefaultProjectId() {\n  return envVars.HEXCLAVE_PROJECT_ID || throwMissingProjectIdError();\n}\n\nexport function getDefaultPublishableClientKey() {\n  return envVars.HEXCLAVE_PUBLISHABLE_CLIENT_KEY;\n}\n\nexport function getDefaultSecretServerKey() {\n  return envVars.HEXCLAVE_SECRET_SERVER_KEY || throwErr(new Error(\"No secret server key provided. Please copy your key from the Hexclave dashboard and put it in the HEXCLAVE_SECRET_SERVER_KEY environment variable.\"));\n}\n\nexport function getDefaultSuperSecretAdminKey() {\n  return envVars.HEXCLAVE_SUPER_SECRET_ADMIN_KEY || throwErr(new Error(\"No super secret admin key provided. Please copy your key from the Hexclave dashboard and put it in the HEXCLAVE_SUPER_SECRET_ADMIN_KEY environment variable.\"));\n}\n\nexport function getDefaultExtraRequestHeaders() {\n  return JSON.parse(envVars.HEXCLAVE_EXTRA_REQUEST_HEADERS || '{}');\n}\n\n/**\n * Returns the base URL for the Stack API.\n *\n * The URL can be specified in several ways, in order of precedence:\n * 1. Directly through userSpecifiedBaseUrl parameter as string or browser/server object\n * 2. Through environment variables:\n *    - Browser: NEXT_PUBLIC_HEXCLAVE_API_URL_BROWSER/VITE_HEXCLAVE_API_URL_BROWSER\n *    - Server: HEXCLAVE_API_URL_SERVER\n *    - Default: HEXCLAVE_API_URL\n * 3. Default base URL if none of the above are specified\n *\n * The function also ensures the URL doesn't end with a trailing slash\n * by removing it if present.\n *\n * @param userSpecifiedBaseUrl - Optional URL override as string or {browser, server} object\n * @returns The configured base URL without trailing slash\n\n */\nexport function getBaseUrl(userSpecifiedBaseUrl: string | { browser: string, server: string } | undefined) {\n  let url;\n  if (userSpecifiedBaseUrl) {\n    if (typeof userSpecifiedBaseUrl === \"string\") {\n      url = userSpecifiedBaseUrl;\n    } else {\n      if (isBrowserLike()) {\n        url = userSpecifiedBaseUrl.browser;\n      } else {\n        url = userSpecifiedBaseUrl.server;\n      }\n    }\n  } else {\n    if (isBrowserLike()) {\n      url = envVars.HEXCLAVE_API_URL_BROWSER;\n    } else {\n      url = envVars.HEXCLAVE_API_URL_SERVER;\n    }\n    url = url || envVars.HEXCLAVE_API_URL || defaultBaseUrl;\n  }\n\n  return replaceHexclavePortPrefix(url.endsWith('/') ? url.slice(0, -1) : url);\n}\n\nexport const defaultBaseUrl = \"https://api.hexclave.com\";\nexport const defaultAnalyticsBaseUrl = \"https://r.hexclave.com\";\n\nconst analyticsBaseUrlsByApiBaseUrl = new Map<string, string>([\n  [defaultBaseUrl, defaultAnalyticsBaseUrl],\n  [\"https://api.stack-auth.com\", \"https://r.stack-auth.com\"],\n]);\n\nexport function getAnalyticsBaseUrl(regularBaseUrl: string): string {\n  return analyticsBaseUrlsByApiBaseUrl.get(regularBaseUrl) ?? regularBaseUrl;\n}\n\n\nfunction fetchBackendUrlsInBackground(primaryBaseUrl: string): void {\n  createGlobal('__stack-fetch-backend-urls-started', () => {\n    runAsynchronously(async () => {\n      try {\n        const res = await fetch(`${primaryBaseUrl}/api/v1/internal/backend-urls`);\n        if (!res.ok) {\n          return;\n        }\n        const data = await res.json();\n        if (!Array.isArray(data.urls) || !data.urls.every((u: unknown) => typeof u === 'string')) {\n          return;\n        }\n        createGlobal('__stack-fetched-backend-urls', () => data.urls as string[]);\n      } catch (e) {\n        captureError('fetch-backend-urls-in-background', e);\n      }\n    });\n    return true;\n  });\n}\n\nexport function resolveApiUrls(userExplicitBaseUrl: string | { browser: string, server: string } | undefined): () => string[] {\n  return () => {\n    if (userExplicitBaseUrl != null) {\n      return [getBaseUrl(userExplicitBaseUrl)];\n    }\n    const primary = getBaseUrl(undefined);\n    // Always try to fetch server-configured URLs (supports custom domains via\n    // STACK_BACKEND_URLS_CONFIG). Hardcoded fallbacks are used as a default\n    // until the background fetch completes.\n    fetchBackendUrlsInBackground(primary);\n    return getGlobal('__stack-fetched-backend-urls') ?? getDefaultApiUrls(primary);\n  };\n}\n\nexport type TokenObject = {\n  accessToken: string | null,\n  refreshToken: string | null,\n};\n\nexport function createEmptyTokenStore() {\n  return new Store<TokenObject>({\n    refreshToken: null,\n    accessToken: null,\n  });\n}\n\n\nconst cachePromiseByHookId = new Map<string, ReactPromise<Result<unknown>>>();\nexport function useAsyncCache<D extends any[], T>(cache: AsyncCache<D, Result<T>>, dependencies: D, caller: string): T {\n  // we explicitly don't want to run this hook in SSR\n  suspendIfSsr(caller);\n\n  // on the dashboard, we do some perf monitoring for pre-fetching which should hook right in here\n  const asyncCacheHooks: any[] = getGlobal(\"use-async-cache-execution-hooks\") ?? [];\n  for (const hook of asyncCacheHooks) {\n    hook({ cache, caller, dependencies });\n  }\n\n  const id = React.useId();\n\n  // whenever the dependencies change, we need to refresh the promise cache\n  React.useEffect(() => {\n    cachePromiseByHookId.delete(id);\n  }, [...dependencies, id]);\n\n  const subscribe = useCallback((cb: () => void) => {\n    const { unsubscribe } = cache.onStateChange(dependencies, () => {\n      cachePromiseByHookId.delete(id);\n      cb();\n    });\n    return unsubscribe;\n  }, [cache, ...dependencies]);\n\n  const getSnapshot = useCallback(() => {\n    // React checks whether a promise passed to `use` is still the same as the previous one by comparing the reference.\n    // If we didn't cache here, this wouldn't work because the promise would be recreated every time the value changes.\n    if (!cachePromiseByHookId.has(id)) {\n      cachePromiseByHookId.set(id, cache.getOrWait(dependencies, \"read-write\"));\n    }\n    return cachePromiseByHookId.get(id) as ReactPromise<Result<T>>;\n  }, [cache, ...dependencies]);\n\n  // note: we must use React.useSyncExternalStore instead of importing the function directly, as it will otherwise\n  // throw an error on Next.js (\"can't import useSyncExternalStore from the server\")\n  const promise = React.useSyncExternalStore(\n    subscribe,\n    getSnapshot,\n    getSnapshot,\n  );\n\n  const result = use(promise);\n  if (result.status === \"error\") {\n    const error = result.error;\n    if (error instanceof Error && !(error as any).__stackHasConcatenatedStacktraces) {\n      concatStacktraces(error, new Error());\n      (error as any).__stackHasConcatenatedStacktraces = true;\n    }\n    throw error;\n  }\n  return result.data;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAoBA,MAAa,gBAAgB;AAC7B,IAAI,cAAc,WAAW,qBAAqB,CAChD,OAAM,IAAI,0DAAuB,sEAAsE;AAGzG,MAAM,6BAA2D,UAAgB;AAC/E,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,SAAS,qCAAQ;AACvB,QAAO,SAAS,MAAM,QAAQ,+CAA+C,OAAO,GAAQ;;AAG9F,MAAM,mCAAmC,YAAoB;AAC3D,KAAI,qDAAgB,CAAE;CAEtB,MAAM,SAAS;CACf,MAAM,uBAAuB;AAC7B,KAAI,OAAO,sBAAuB;AAClC,QAAO,wBAAwB;CAE/B,MAAM,UAAU,OAAO;AACvB,KAAI,OAAO,YAAY,WACrB,SAAQ,QAAQ;;AAIpB,MAAM,mCAA0C;CAC9C,MAAM,UAAU;AAChB,iCAAgC,QAAQ;AACxC,yDAAgB,IAAI,MAAM,QAAQ,CAAC;;AAIrC,MAAa,eAAmC,YAA6C;AAC3F,QAAO,IAAI,8CACT,OAAO,iBAAiB,MAAM,2CAAO,kBAAkB,YAAY,MAAM,QAAQ,aAAa,CAAC,EAC/F,EAAE,CACH;;AAGH,MAAa,wBAA4C,YAA6E;AACpI,QAAO,IAAI,8CACT,OAAO,CAAC,SAAS,GAAG,uBAAuB,MAAM,2CAAO,kBAAkB,YAAY,MAAM,QAAQ,SAAS,kBAAkB,CAAC,EAChI,EACE,cAAc,CAAC,UAAU,YAAY;EACnC,MAAM,UAAU,QAAQ,mBAAmB,SAAS,CAAC;AACrD,eAAa,QAAQ,aAAa;IAErC,CACF;;AAKH,SAAgB,0BAAgE,SAA8C;AAC5H,QAAO;EACL,GAAG,QAAQ,eAAe,4CAA4B,uBAAuB,IAAI,EAAE;EACnF,0GAAwB,SAAS,CAAC,eAAe,CAAC,CAAC;EACpD;;AAGH,SAAgB,QAAQ,SAA4B,SAAqD;AACvG,qDAA0B;EACxB,MAAM;EACN,WAAW,QAAQ;EACpB,CAAC;;AAGJ,SAAgB,sBAAsB;AACpC,QAAO,qCAAQ,uBAAuB,4BAA4B;;AAGpE,SAAgB,iCAAiC;AAC/C,QAAO,qCAAQ;;AAGjB,SAAgB,4BAA4B;AAC1C,QAAO,qCAAQ,+FAAuC,IAAI,MAAM,qJAAqJ,CAAC;;AAGxN,SAAgB,gCAAgC;AAC9C,QAAO,qCAAQ,oGAA4C,IAAI,MAAM,+JAA+J,CAAC;;AAGvO,SAAgB,gCAAgC;AAC9C,QAAO,KAAK,MAAM,qCAAQ,kCAAkC,KAAK;;;;;;;;;;;;;;;;;;;;AAqBnE,SAAgB,WAAW,sBAAgF;CACzG,IAAI;AACJ,KAAI,qBACF,KAAI,OAAO,yBAAyB,SAClC,OAAM;8DAEa,CACjB,OAAM,qBAAqB;KAE3B,OAAM,qBAAqB;MAG1B;AACL,0DAAmB,CACjB,OAAM,qCAAQ;MAEd,OAAM,qCAAQ;AAEhB,QAAM,OAAO,qCAAQ,oBAAoB;;AAG3C,QAAO,0BAA0B,IAAI,SAAS,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI;;AAG9E,MAAa,iBAAiB;AAC9B,MAAa,0BAA0B;AAEvC,MAAM,gCAAgC,IAAI,IAAoB,CAC5D,CAAC,gBAAgB,wBAAwB,EACzC,CAAC,8BAA8B,2BAA2B,CAC3D,CAAC;AAEF,SAAgB,oBAAoB,gBAAgC;AAClE,QAAO,8BAA8B,IAAI,eAAe,IAAI;;AAI9D,SAAS,6BAA6B,gBAA8B;AAClE,uDAAa,4CAA4C;AACvD,8DAAkB,YAAY;AAC5B,OAAI;IACF,MAAM,MAAM,MAAM,MAAM,GAAG,eAAe,+BAA+B;AACzE,QAAI,CAAC,IAAI,GACP;IAEF,MAAM,OAAO,MAAM,IAAI,MAAM;AAC7B,QAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,OAAO,MAAe,OAAO,MAAM,SAAS,CACtF;AAEF,0DAAa,sCAAsC,KAAK,KAAiB;YAClE,GAAG;AACV,yDAAa,oCAAoC,EAAE;;IAErD;AACF,SAAO;GACP;;AAGJ,SAAgB,eAAe,qBAA+F;AAC5H,cAAa;AACX,MAAI,uBAAuB,KACzB,QAAO,CAAC,WAAW,oBAAoB,CAAC;EAE1C,MAAM,UAAU,WAAW,OAAU;AAIrC,+BAA6B,QAAQ;AACrC,4DAAiB,+BAA+B,4DAAsB,QAAQ;;;AASlF,SAAgB,wBAAwB;AACtC,QAAO,IAAI,yCAAmB;EAC5B,cAAc;EACd,aAAa;EACd,CAAC;;AAIJ,MAAM,uCAAuB,IAAI,KAA4C;AAC7E,SAAgB,cAAkC,OAAiC,cAAiB,QAAmB;AAErH,qDAAa,OAAO;CAGpB,MAAM,qEAAmC,kCAAkC,IAAI,EAAE;AACjF,MAAK,MAAM,QAAQ,gBACjB,MAAK;EAAE;EAAO;EAAQ;EAAc,CAAC;CAGvC,MAAM,KAAK,cAAM,OAAO;AAGxB,eAAM,gBAAgB;AACpB,uBAAqB,OAAO,GAAG;IAC9B,CAAC,GAAG,cAAc,GAAG,CAAC;CAEzB,MAAM,oCAAyB,OAAmB;EAChD,MAAM,EAAE,gBAAgB,MAAM,cAAc,oBAAoB;AAC9D,wBAAqB,OAAO,GAAG;AAC/B,OAAI;IACJ;AACF,SAAO;IACN,CAAC,OAAO,GAAG,aAAa,CAAC;CAE5B,MAAM,2CAAgC;AAGpC,MAAI,CAAC,qBAAqB,IAAI,GAAG,CAC/B,sBAAqB,IAAI,IAAI,MAAM,UAAU,cAAc,aAAa,CAAC;AAE3E,SAAO,qBAAqB,IAAI,GAAG;IAClC,CAAC,OAAO,GAAG,aAAa,CAAC;CAU5B,MAAM,oDANU,cAAM,qBACpB,WACA,aACA,YACD,CAE0B;AAC3B,KAAI,OAAO,WAAW,SAAS;EAC7B,MAAM,QAAQ,OAAO;AACrB,MAAI,iBAAiB,SAAS,CAAE,MAAc,mCAAmC;AAC/E,6DAAkB,uBAAO,IAAI,OAAO,CAAC;AACrC,GAAC,MAAc,oCAAoC;;AAErD,QAAM;;AAER,QAAO,OAAO"}

package/dist/lib/hexclave-app/apps/implementations/server-app-impl.js

@@ -7,8 +7,8 @@ let _hexclave_shared = require("@hexclave/shared");
 let _hexclave_shared_dist_utils_react = require("@hexclave/shared/dist/utils/react");
 let _hexclave_shared_dist_utils_results = require("@hexclave/shared/dist/utils/results");
 let __common_js = require("./common.js");
-let _simplewebauthn_browser = require("@simplewebauthn/browser");
 let _hexclave_shared_dist_sessions = require("@hexclave/shared/dist/sessions");
+let _simplewebauthn_browser = require("@simplewebauthn/browser");
 let ____________utils_url_js = require("../../../../utils/url.js");
 let ______api_keys_index_js = require("../../api-keys/index.js");
 let ______contact_channels_index_js = require("../../contact-channels/index.js");

package/dist/lib/hexclave-app/url-targets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url-targets.d.ts","names":[],"sources":["../../../src/lib/hexclave-app/url-targets.ts"],"mappings":";;;cA2Ga,mBAAA,GAAuB,OAAA;EAAW,SAAA;EAAmB,QAAA;AAAA;AAAA,cAmBrD,uBAAA,GAA2B,OAAA;EACtC,SAAA;EACA,WAAA;EACA,aAAA;AAAA;AAAA,cA4DW,kBAAA,GAAsB,OAAA;EAAW,IAAA,EAAM,iBAAA;EAA+B,SAAA;AAAA,MAAsB,mBAAA;AAAA,cA4I5F,sBAAA,GAA0B,OAAA;EACrC,iBAAA,UA3MA;EA6MA,MAAA;EACA,SAAA;AAAA;AAAA,cAOW,oCAAA,GAAwC,OAAA;EACnD,aAAA,EAAe,uBAAA;EACf,SAAA;EACA,WAAA;AAAA;AAAA,iBAiBc,aAAA,CAAc,QAAA,UAAkB,cAAA;EAA4B,KAAA;EAAe,UAAA;EAAoB,aAAA;EAA8B,aAAA;AAAA;AAAA,cAuBhI,4BAAA,GAAgC,OAAA;EAAW,GAAA;EAAa,SAAA;AAAA"}
+{"version":3,"file":"url-targets.d.ts","names":[],"sources":["../../../src/lib/hexclave-app/url-targets.ts"],"mappings":";;;cA2Ga,mBAAA,GAAuB,OAAA;EAAW,SAAA;EAAmB,QAAA;AAAA;AAAA,cAyBrD,uBAAA,GAA2B,OAAA;EACtC,SAAA;EACA,WAAA;EACA,aAAA;AAAA;AAAA,cA+DW,kBAAA,GAAsB,OAAA;EAAW,IAAA,EAAM,iBAAA;EAA+B,SAAA;AAAA,MAAsB,mBAAA;AAAA,cAqJ5F,sBAAA,GAA0B,OAAA;EACrC,iBAAA,UAvNA;EAyNA,MAAA;EACA,SAAA;AAAA;AAAA,cAOW,oCAAA,GAAwC,OAAA;EACnD,aAAA,EAAe,uBAAA;EACf,SAAA;EACA,WAAA;AAAA;AAAA,iBAiBc,aAAA,CAAc,QAAA,UAAkB,cAAA;EAA4B,KAAA;EAAe,UAAA;EAAoB,aAAA;EAA8B,aAAA;AAAA;AAAA,cAuBhI,4BAAA,GAAgC,OAAA;EAAW,GAAA;EAAa,SAAA;AAAA"}

package/dist/lib/hexclave-app/url-targets.js

@@ -3,7 +3,7 @@ const require_chunk = require('../../chunk-BE-pF4vm.js');
 let _hexclave_shared_dist_utils_errors = require("@hexclave/shared/dist/utils/errors");
 let _hexclave_shared_dist_interface_handler_urls = require("@hexclave/shared/dist/interface/handler-urls");
 let _hexclave_shared_dist_utils_redirect_urls = require("@hexclave/shared/dist/utils/redirect-urls");
-let ___env_js = require("../env.js");
+let ______generated_env_js = require("../../generated/env.js");
 
 //#region src/lib/hexclave-app/url-targets.ts
 const localUrlPlaceholderOrigin = "http://example.com";
@@ -52,15 +52,20 @@ const getHostedHandlerUrl = (options) => {
 	return (0, _hexclave_shared_dist_utils_redirect_urls.getHostedHandlerUrlFromConfig)({
 		projectId: options.projectId,
 		hostedPath,
-		hostedHandlerDomainSuffix: ___env_js.envVars.NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX,
-		hostedHandlerUrlTemplate: ___env_js.envVars.NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE,
-		hexclavePortPrefix: ___env_js.envVars.NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX
+		hostedHandlerDomainSuffix: ______generated_env_js.envVars.HEXCLAVE_HOSTED_HANDLER_DOMAIN_SUFFIX,
+		hostedHandlerUrlTemplate: ______generated_env_js.envVars.HEXCLAVE_HOSTED_HANDLER_URL_TEMPLATE,
+		hexclavePortPrefix: ______generated_env_js.envVars.HEXCLAVE_PORT_PREFIX
 	});
 };
 const isRelativeUrlString = (url) => {
 	if (url.startsWith("//")) return false;
 	return !schemePrefixRegex.test(url);
 };
+const nonHostedHandlerNames = new Set([
+	"afterSignIn",
+	"afterSignUp",
+	"afterSignOut"
+]);
 const isLocalHandlerUrlTarget = (options) => {
 	const urlObject = new URL(options.targetUrl, localUrlPlaceholderOrigin);
 	if (!(urlObject.pathname === options.handlerPath || urlObject.pathname.startsWith(`${options.handlerPath}/`))) return false;
@@ -71,10 +76,12 @@ const resolveUrlTarget = (options) => {
 	if (typeof options.target === "string") return options.target;
 	switch (options.target.type) {
 		case "handler-component": return options.fallbackPath;
-		case "hosted": return getHostedHandlerUrl({
-			projectId: options.projectId,
-			pagePath: getHostedPagePathForHandlerName(options.handlerName)
-		});
+		case "hosted":
+			if (nonHostedHandlerNames.has(options.handlerName)) return options.fallbackPath;
+			return getHostedHandlerUrl({
+				projectId: options.projectId,
+				pagePath: getHostedPagePathForHandlerName(options.handlerName)
+			});
 		case "custom": return resolveCustomTargetUrl({
 			target: options.target,
 			handlerName: options.handlerName
@@ -99,15 +106,22 @@ const resolveHandlerUrls = (options) => {
 		target: configuredUrls.handler,
 		handlerName: "handler"
 	});
+	const homeTarget = configuredUrls?.home ?? defaultTarget;
+	const localHome = resolveUrlTarget({
+		target: typeof homeTarget !== "string" && homeTarget.type === "hosted" ? { type: "handler-component" } : homeTarget,
+		fallbackPath: "/",
+		handlerName: "home",
+		projectId: options.projectId
+	});
 	const home = resolveUrlTarget({
-		target: configuredUrls?.home ?? defaultTarget,
+		target: homeTarget,
 		fallbackPath: "/",
 		handlerName: "home",
 		projectId: options.projectId
 	});
 	const afterSignIn = resolveUrlTarget({
 		target: configuredUrls?.afterSignIn ?? defaultTarget,
-		fallbackPath: home,
+		fallbackPath: localHome,
 		handlerName: "afterSignIn",
 		projectId: options.projectId
 	});
@@ -145,7 +159,7 @@ const resolveHandlerUrls = (options) => {
 		}),
 		afterSignOut: resolveUrlTarget({
 			target: configuredUrls?.afterSignOut ?? defaultTarget,
-			fallbackPath: home,
+			fallbackPath: localHome,
 			handlerName: "afterSignOut",
 			projectId: options.projectId
 		}),

package/dist/lib/hexclave-app/url-targets.js.map

@@ -1 +1 @@
-{"version":3,"file":"url-targets.js","names":["envVars","HexclaveAssertionError"],"sources":["../../../src/lib/hexclave-app/url-targets.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { getCustomPagePrompts, type CustomPagePrompt } from \"@hexclave/shared/dist/interface/handler-urls\";\nimport { HexclaveAssertionError } from \"@hexclave/shared/dist/utils/errors\";\nimport { getHostedHandlerUrlFromConfig } from \"@hexclave/shared/dist/utils/redirect-urls\";\nimport { envVars } from \"../env\";\nimport { DefaultHandlerUrlTarget, HandlerPageUrls, HandlerUrlOptions, HandlerUrlTarget, HandlerUrls, ResolvedHandlerUrls } from \"./common\";\n\nconst localUrlPlaceholderOrigin = \"http://example.com\";\nconst schemePrefixRegex = /^[a-zA-Z][a-zA-Z\\d+\\-.]*:/;\n\nconst customPagePrompts: Record<keyof Omit<HandlerPageUrls, \"handler\">, CustomPagePrompt> = getCustomPagePrompts();\n\nconst joinHandlerComponentPath = (basePath: string, pagePath: string): string => {\n  const normalizedBasePath = basePath.endsWith(\"/\") && basePath.length > 1\n    ? basePath.slice(0, -1)\n    : basePath;\n  if (pagePath.length === 0) {\n    return normalizedBasePath;\n  }\n  if (normalizedBasePath === \"/\") {\n    return `/${pagePath}`;\n  }\n  return `${normalizedBasePath}/${pagePath}`;\n};\n\nconst getHostedPagePathForHandlerName = (handlerName: keyof HandlerUrls): string => {\n  switch (handlerName) {\n    case \"handler\": {\n      return \"\";\n    }\n    case \"home\": {\n      return \"\";\n    }\n    case \"afterSignIn\": {\n      return \"\";\n    }\n    case \"afterSignUp\": {\n      return \"\";\n    }\n    case \"afterSignOut\": {\n      return \"\";\n    }\n    case \"signIn\": {\n      return \"sign-in\";\n    }\n    case \"signUp\": {\n      return \"sign-up\";\n    }\n    case \"signOut\": {\n      return \"sign-out\";\n    }\n    case \"emailVerification\": {\n      return \"email-verification\";\n    }\n    case \"passwordReset\": {\n      return \"password-reset\";\n    }\n    case \"forgotPassword\": {\n      return \"forgot-password\";\n    }\n    case \"oauthCallback\": {\n      return \"oauth-callback\";\n    }\n    case \"magicLinkCallback\": {\n      return \"magic-link-callback\";\n    }\n    case \"accountSettings\": {\n      return \"account-settings\";\n    }\n    case \"teamInvitation\": {\n      return \"team-invitation\";\n    }\n    case \"cliAuthConfirm\": {\n      return \"cli-auth-confirm\";\n    }\n    case \"mfa\": {\n      return \"mfa\";\n    }\n    case \"error\": {\n      return \"error\";\n    }\n    case \"onboarding\": {\n      return \"onboarding\";\n    }\n  }\n};\n\nconst resolveCustomTargetUrl = (options: {\n  target: { type: \"custom\", url: string, version: number },\n  handlerName: keyof HandlerUrls,\n}): string => {\n  const handlerName = options.handlerName;\n  if (handlerName in customPagePrompts) {\n    const customPagePrompt = customPagePrompts[handlerName as keyof typeof customPagePrompts];\n    if (options.target.version === 0 || options.target.version in customPagePrompt.versions) {\n      return options.target.url;\n    }\n\n    throw new Error(`Unsupported custom page version ${options.target.version} for ${options.handlerName} page at ${options.target.url}. The latest supported version of this page is ${Math.max(0, ...Object.keys(customPagePrompt.versions).map(Number))}. Please upgrade your Hexclave SDK to a version that supports this version.`);\n  } else {\n    throw new Error(`URL target ${options.handlerName} cannot be a custom page. Please specify the URL as a string instead.`);\n  }\n};\n\nexport const getHostedHandlerUrl = (options: { projectId: string, pagePath: string }): string => {\n  const normalizedPagePath = options.pagePath.replace(/^\\/+/, \"\");\n  const hostedPath = normalizedPagePath.length > 0 ? `handler/${normalizedPagePath}` : \"handler\";\n  return getHostedHandlerUrlFromConfig({\n    projectId: options.projectId,\n    hostedPath,\n    hostedHandlerDomainSuffix: envVars.NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX,\n    hostedHandlerUrlTemplate: envVars.NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE,\n    hexclavePortPrefix: envVars.NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX,\n  });\n};\n\nconst isRelativeUrlString = (url: string): boolean => {\n  if (url.startsWith(\"//\")) {\n    return false;\n  }\n  return !schemePrefixRegex.test(url);\n};\n\nexport const isLocalHandlerUrlTarget = (options: {\n  targetUrl: string,\n  handlerPath: string,\n  currentOrigin?: string,\n}): boolean => {\n  const urlObject = new URL(options.targetUrl, localUrlPlaceholderOrigin);\n  const isHandlerPathTarget = urlObject.pathname === options.handlerPath\n    || urlObject.pathname.startsWith(`${options.handlerPath}/`);\n  if (!isHandlerPathTarget) {\n    return false;\n  }\n\n  // On server we only have path information, so treat matching handler paths as local.\n  if (options.currentOrigin == null) {\n    return true;\n  }\n\n  return isRelativeUrlString(options.targetUrl) || urlObject.origin === options.currentOrigin;\n};\n\nconst resolveUrlTarget = (options: {\n  target: HandlerUrlTarget,\n  fallbackPath: string,\n  handlerName: keyof HandlerUrls,\n  projectId: string,\n}): string => {\n  if (typeof options.target === \"string\") {\n    return options.target;\n  }\n\n  switch (options.target.type) {\n    case \"handler-component\": {\n      return options.fallbackPath;\n    }\n    case \"hosted\": {\n      return getHostedHandlerUrl({\n        projectId: options.projectId,\n        pagePath: getHostedPagePathForHandlerName(options.handlerName),\n      });\n    }\n    case \"custom\": {\n      return resolveCustomTargetUrl({\n        target: options.target,\n        handlerName: options.handlerName,\n      });\n    }\n  }\n};\n\nconst assertOAuthCallbackTargetIsRelative = (target: HandlerUrlTarget): void => {\n  const url = typeof target === \"string\"\n    ? target\n    : target.type === \"custom\"\n      ? target.url\n      : null;\n  if (url != null && !isRelativeUrlString(url)) {\n    throw new HexclaveAssertionError(\"OAuth callback URLs must be relative.\", {\n      oauthCallbackUrl: url,\n      hint: \"Use a relative URL like '/handler/oauth-callback', or use { type: 'hosted' } to let Stack use the current page for hosted callbacks.\",\n    });\n  }\n};\n\nexport const resolveHandlerUrls = (options: { urls: HandlerUrlOptions | undefined, projectId: string }): ResolvedHandlerUrls => {\n  const configuredUrls = options.urls;\n  const defaultTarget = configuredUrls?.default ?? { type: \"handler-component\" } as const;\n  const oauthCallbackTarget: HandlerUrlTarget = configuredUrls?.oauthCallback ?? (\n    defaultTarget.type === \"hosted\"\n      ? defaultTarget\n      : { type: \"handler-component\" }\n  );\n  assertOAuthCallbackTargetIsRelative(oauthCallbackTarget);\n  let handlerComponentBasePath = \"/handler\";\n  if (typeof configuredUrls?.handler === \"string\") {\n    handlerComponentBasePath = configuredUrls.handler;\n  } else if (configuredUrls?.handler != null && configuredUrls.handler.type === \"custom\") {\n    handlerComponentBasePath = resolveCustomTargetUrl({\n      target: configuredUrls.handler,\n      handlerName: \"handler\",\n    });\n  }\n\n  const home = resolveUrlTarget({\n    target: configuredUrls?.home ?? defaultTarget,\n    fallbackPath: \"/\",\n    handlerName: \"home\",\n    projectId: options.projectId,\n  });\n  const afterSignIn = resolveUrlTarget({\n    target: configuredUrls?.afterSignIn ?? defaultTarget,\n    fallbackPath: home,\n    handlerName: \"afterSignIn\",\n    projectId: options.projectId,\n  });\n\n  return {\n    handler: resolveUrlTarget({\n      target: configuredUrls?.handler ?? defaultTarget,\n      fallbackPath: handlerComponentBasePath,\n      handlerName: \"handler\",\n      projectId: options.projectId,\n    }),\n    signIn: resolveUrlTarget({\n      target: configuredUrls?.signIn ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"sign-in\"),\n      handlerName: \"signIn\",\n      projectId: options.projectId,\n    }),\n    signUp: resolveUrlTarget({\n      target: configuredUrls?.signUp ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"sign-up\"),\n      handlerName: \"signUp\",\n      projectId: options.projectId,\n    }),\n    afterSignIn,\n    afterSignUp: resolveUrlTarget({\n      target: configuredUrls?.afterSignUp ?? defaultTarget,\n      fallbackPath: afterSignIn,\n      handlerName: \"afterSignUp\",\n      projectId: options.projectId,\n    }),\n    signOut: resolveUrlTarget({\n      target: configuredUrls?.signOut ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"sign-out\"),\n      handlerName: \"signOut\",\n      projectId: options.projectId,\n    }),\n    afterSignOut: resolveUrlTarget({\n      target: configuredUrls?.afterSignOut ?? defaultTarget,\n      fallbackPath: home,\n      handlerName: \"afterSignOut\",\n      projectId: options.projectId,\n    }),\n    emailVerification: resolveUrlTarget({\n      target: configuredUrls?.emailVerification ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"email-verification\"),\n      handlerName: \"emailVerification\",\n      projectId: options.projectId,\n    }),\n    passwordReset: resolveUrlTarget({\n      target: configuredUrls?.passwordReset ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"password-reset\"),\n      handlerName: \"passwordReset\",\n      projectId: options.projectId,\n    }),\n    forgotPassword: resolveUrlTarget({\n      target: configuredUrls?.forgotPassword ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"forgot-password\"),\n      handlerName: \"forgotPassword\",\n      projectId: options.projectId,\n    }),\n    home,\n    oauthCallback: resolveUrlTarget({\n      target: oauthCallbackTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"oauth-callback\"),\n      handlerName: \"oauthCallback\",\n      projectId: options.projectId,\n    }),\n    magicLinkCallback: resolveUrlTarget({\n      target: configuredUrls?.magicLinkCallback ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"magic-link-callback\"),\n      handlerName: \"magicLinkCallback\",\n      projectId: options.projectId,\n    }),\n    accountSettings: resolveUrlTarget({\n      target: configuredUrls?.accountSettings ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"account-settings\"),\n      handlerName: \"accountSettings\",\n      projectId: options.projectId,\n    }),\n    teamInvitation: resolveUrlTarget({\n      target: configuredUrls?.teamInvitation ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"team-invitation\"),\n      handlerName: \"teamInvitation\",\n      projectId: options.projectId,\n    }),\n    cliAuthConfirm: resolveUrlTarget({\n      target: configuredUrls?.cliAuthConfirm ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"cli-auth-confirm\"),\n      handlerName: \"cliAuthConfirm\",\n      projectId: options.projectId,\n    }),\n    mfa: resolveUrlTarget({\n      target: configuredUrls?.mfa ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"mfa\"),\n      handlerName: \"mfa\",\n      projectId: options.projectId,\n    }),\n    error: resolveUrlTarget({\n      target: configuredUrls?.error ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"error\"),\n      handlerName: \"error\",\n      projectId: options.projectId,\n    }),\n    onboarding: resolveUrlTarget({\n      target: configuredUrls?.onboarding ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"onboarding\"),\n      handlerName: \"onboarding\",\n      projectId: options.projectId,\n    }),\n  };\n};\n\nexport const buildCliAuthConfirmUrl = (options: {\n  cliAuthConfirmUrl: string,\n  /** Used as the base URL only when cliAuthConfirmUrl is relative. */\n  appUrl: string,\n  loginCode: string,\n}): string => {\n  const url = new URL(options.cliAuthConfirmUrl, options.appUrl);\n  url.searchParams.set(\"login_code\", options.loginCode);\n  return url.toString();\n};\n\nexport const resolveUnknownHandlerPathFallbackUrl = (options: {\n  defaultTarget: DefaultHandlerUrlTarget | undefined,\n  projectId: string,\n  unknownPath: string,\n}): string | null => {\n  const defaultTarget = options.defaultTarget ?? { type: \"handler-component\" } satisfies DefaultHandlerUrlTarget;\n\n  switch (defaultTarget.type) {\n    case \"handler-component\": {\n      return null;\n    }\n    case \"hosted\": {\n      return getHostedHandlerUrl({\n        projectId: options.projectId,\n        pagePath: options.unknownPath,\n      });\n    }\n  }\n};\n\nexport function getPagePrompt(pageName: string, currentVersion?: number): { title: string; fullPrompt: string; upgradePrompt: string | null; latestVersion: number } | null {\n  if (!(pageName in customPagePrompts)) return null;\n  const prompt = customPagePrompts[pageName as keyof typeof customPagePrompts];\n  const versionKeys = Object.keys(prompt.versions).map(Number);\n  const latestVersion = versionKeys.length > 0 ? Math.max(...versionKeys) : 0;\n\n  let upgradePrompt: string | null = null;\n  if (currentVersion != null) {\n    const relevantVersions = versionKeys\n      .filter(v => v > currentVersion)\n      .sort((a, b) => a - b);\n    const prompts = relevantVersions\n      .map(v => prompt.versions[v].upgradePrompt)\n      .filter(p => p.length > 0);\n    upgradePrompt = prompts.length > 0 ? prompts.join(\"\\n\\n\") : null;\n  } else {\n    const upgradeEntry = latestVersion > 0 ? prompt.versions[latestVersion] : undefined;\n    upgradePrompt = upgradeEntry?.upgradePrompt ?? null;\n  }\n\n  return { title: prompt.title, fullPrompt: prompt.fullPrompt, upgradePrompt, latestVersion };\n}\n\nexport const isHostedHandlerUrlForProject = (options: { url: string, projectId: string }): boolean => {\n  let parsedUrl: URL;\n  try {\n    parsedUrl = new URL(options.url);\n  } catch {\n    return false;\n  }\n\n  const hostedBaseUrl = new URL(getHostedHandlerUrl({ projectId: options.projectId, pagePath: \"\" }));\n  return parsedUrl.origin === hostedBaseUrl.origin\n    && (parsedUrl.pathname === hostedBaseUrl.pathname || parsedUrl.pathname.startsWith(`${hostedBaseUrl.pathname}/`));\n};\n"],"mappings":";;;;;;;;AAUA,MAAM,4BAA4B;AAClC,MAAM,oBAAoB;AAE1B,MAAM,4FAA4G;AAElH,MAAM,4BAA4B,UAAkB,aAA6B;CAC/E,MAAM,qBAAqB,SAAS,SAAS,IAAI,IAAI,SAAS,SAAS,IACnE,SAAS,MAAM,GAAG,GAAG,GACrB;AACJ,KAAI,SAAS,WAAW,EACtB,QAAO;AAET,KAAI,uBAAuB,IACzB,QAAO,IAAI;AAEb,QAAO,GAAG,mBAAmB,GAAG;;AAGlC,MAAM,mCAAmC,gBAA2C;AAClF,SAAQ,aAAR;EACE,KAAK,UACH,QAAO;EAET,KAAK,OACH,QAAO;EAET,KAAK,cACH,QAAO;EAET,KAAK,cACH,QAAO;EAET,KAAK,eACH,QAAO;EAET,KAAK,SACH,QAAO;EAET,KAAK,SACH,QAAO;EAET,KAAK,UACH,QAAO;EAET,KAAK,oBACH,QAAO;EAET,KAAK,gBACH,QAAO;EAET,KAAK,iBACH,QAAO;EAET,KAAK,gBACH,QAAO;EAET,KAAK,oBACH,QAAO;EAET,KAAK,kBACH,QAAO;EAET,KAAK,iBACH,QAAO;EAET,KAAK,iBACH,QAAO;EAET,KAAK,MACH,QAAO;EAET,KAAK,QACH,QAAO;EAET,KAAK,aACH,QAAO;;;AAKb,MAAM,0BAA0B,YAGlB;CACZ,MAAM,cAAc,QAAQ;AAC5B,KAAI,eAAe,mBAAmB;EACpC,MAAM,mBAAmB,kBAAkB;AAC3C,MAAI,QAAQ,OAAO,YAAY,KAAK,QAAQ,OAAO,WAAW,iBAAiB,SAC7E,QAAO,QAAQ,OAAO;AAGxB,QAAM,IAAI,MAAM,mCAAmC,QAAQ,OAAO,QAAQ,OAAO,QAAQ,YAAY,WAAW,QAAQ,OAAO,IAAI,iDAAiD,KAAK,IAAI,GAAG,GAAG,OAAO,KAAK,iBAAiB,SAAS,CAAC,IAAI,OAAO,CAAC,CAAC,6EAA6E;OAEpU,OAAM,IAAI,MAAM,cAAc,QAAQ,YAAY,uEAAuE;;AAI7H,MAAa,uBAAuB,YAA6D;CAC/F,MAAM,qBAAqB,QAAQ,SAAS,QAAQ,QAAQ,GAAG;CAC/D,MAAM,aAAa,mBAAmB,SAAS,IAAI,WAAW,uBAAuB;AACrF,qFAAqC;EACnC,WAAW,QAAQ;EACnB;EACA,2BAA2BA,kBAAQ;EACnC,0BAA0BA,kBAAQ;EAClC,oBAAoBA,kBAAQ;EAC7B,CAAC;;AAGJ,MAAM,uBAAuB,QAAyB;AACpD,KAAI,IAAI,WAAW,KAAK,CACtB,QAAO;AAET,QAAO,CAAC,kBAAkB,KAAK,IAAI;;AAGrC,MAAa,2BAA2B,YAIzB;CACb,MAAM,YAAY,IAAI,IAAI,QAAQ,WAAW,0BAA0B;AAGvE,KAAI,EAFwB,UAAU,aAAa,QAAQ,eACtD,UAAU,SAAS,WAAW,GAAG,QAAQ,YAAY,GAAG,EAE3D,QAAO;AAIT,KAAI,QAAQ,iBAAiB,KAC3B,QAAO;AAGT,QAAO,oBAAoB,QAAQ,UAAU,IAAI,UAAU,WAAW,QAAQ;;AAGhF,MAAM,oBAAoB,YAKZ;AACZ,KAAI,OAAO,QAAQ,WAAW,SAC5B,QAAO,QAAQ;AAGjB,SAAQ,QAAQ,OAAO,MAAvB;EACE,KAAK,oBACH,QAAO,QAAQ;EAEjB,KAAK,SACH,QAAO,oBAAoB;GACzB,WAAW,QAAQ;GACnB,UAAU,gCAAgC,QAAQ,YAAY;GAC/D,CAAC;EAEJ,KAAK,SACH,QAAO,uBAAuB;GAC5B,QAAQ,QAAQ;GAChB,aAAa,QAAQ;GACtB,CAAC;;;AAKR,MAAM,uCAAuC,WAAmC;CAC9E,MAAM,MAAM,OAAO,WAAW,WAC1B,SACA,OAAO,SAAS,WACd,OAAO,MACP;AACN,KAAI,OAAO,QAAQ,CAAC,oBAAoB,IAAI,CAC1C,OAAM,IAAIC,0DAAuB,yCAAyC;EACxE,kBAAkB;EAClB,MAAM;EACP,CAAC;;AAIN,MAAa,sBAAsB,YAA6F;CAC9H,MAAM,iBAAiB,QAAQ;CAC/B,MAAM,gBAAgB,gBAAgB,WAAW,EAAE,MAAM,qBAAqB;CAC9E,MAAM,sBAAwC,gBAAgB,kBAC5D,cAAc,SAAS,WACnB,gBACA,EAAE,MAAM,qBAAqB;AAEnC,qCAAoC,oBAAoB;CACxD,IAAI,2BAA2B;AAC/B,KAAI,OAAO,gBAAgB,YAAY,SACrC,4BAA2B,eAAe;UACjC,gBAAgB,WAAW,QAAQ,eAAe,QAAQ,SAAS,SAC5E,4BAA2B,uBAAuB;EAChD,QAAQ,eAAe;EACvB,aAAa;EACd,CAAC;CAGJ,MAAM,OAAO,iBAAiB;EAC5B,QAAQ,gBAAgB,QAAQ;EAChC,cAAc;EACd,aAAa;EACb,WAAW,QAAQ;EACpB,CAAC;CACF,MAAM,cAAc,iBAAiB;EACnC,QAAQ,gBAAgB,eAAe;EACvC,cAAc;EACd,aAAa;EACb,WAAW,QAAQ;EACpB,CAAC;AAEF,QAAO;EACL,SAAS,iBAAiB;GACxB,QAAQ,gBAAgB,WAAW;GACnC,cAAc;GACd,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,QAAQ,iBAAiB;GACvB,QAAQ,gBAAgB,UAAU;GAClC,cAAc,yBAAyB,0BAA0B,UAAU;GAC3E,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,QAAQ,iBAAiB;GACvB,QAAQ,gBAAgB,UAAU;GAClC,cAAc,yBAAyB,0BAA0B,UAAU;GAC3E,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF;EACA,aAAa,iBAAiB;GAC5B,QAAQ,gBAAgB,eAAe;GACvC,cAAc;GACd,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,SAAS,iBAAiB;GACxB,QAAQ,gBAAgB,WAAW;GACnC,cAAc,yBAAyB,0BAA0B,WAAW;GAC5E,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,cAAc,iBAAiB;GAC7B,QAAQ,gBAAgB,gBAAgB;GACxC,cAAc;GACd,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,mBAAmB,iBAAiB;GAClC,QAAQ,gBAAgB,qBAAqB;GAC7C,cAAc,yBAAyB,0BAA0B,qBAAqB;GACtF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,eAAe,iBAAiB;GAC9B,QAAQ,gBAAgB,iBAAiB;GACzC,cAAc,yBAAyB,0BAA0B,iBAAiB;GAClF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,gBAAgB,iBAAiB;GAC/B,QAAQ,gBAAgB,kBAAkB;GAC1C,cAAc,yBAAyB,0BAA0B,kBAAkB;GACnF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF;EACA,eAAe,iBAAiB;GAC9B,QAAQ;GACR,cAAc,yBAAyB,0BAA0B,iBAAiB;GAClF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,mBAAmB,iBAAiB;GAClC,QAAQ,gBAAgB,qBAAqB;GAC7C,cAAc,yBAAyB,0BAA0B,sBAAsB;GACvF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,iBAAiB,iBAAiB;GAChC,QAAQ,gBAAgB,mBAAmB;GAC3C,cAAc,yBAAyB,0BAA0B,mBAAmB;GACpF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,gBAAgB,iBAAiB;GAC/B,QAAQ,gBAAgB,kBAAkB;GAC1C,cAAc,yBAAyB,0BAA0B,kBAAkB;GACnF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,gBAAgB,iBAAiB;GAC/B,QAAQ,gBAAgB,kBAAkB;GAC1C,cAAc,yBAAyB,0BAA0B,mBAAmB;GACpF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,KAAK,iBAAiB;GACpB,QAAQ,gBAAgB,OAAO;GAC/B,cAAc,yBAAyB,0BAA0B,MAAM;GACvE,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,OAAO,iBAAiB;GACtB,QAAQ,gBAAgB,SAAS;GACjC,cAAc,yBAAyB,0BAA0B,QAAQ;GACzE,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,YAAY,iBAAiB;GAC3B,QAAQ,gBAAgB,cAAc;GACtC,cAAc,yBAAyB,0BAA0B,aAAa;GAC9E,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACH;;AAGH,MAAa,0BAA0B,YAKzB;CACZ,MAAM,MAAM,IAAI,IAAI,QAAQ,mBAAmB,QAAQ,OAAO;AAC9D,KAAI,aAAa,IAAI,cAAc,QAAQ,UAAU;AACrD,QAAO,IAAI,UAAU;;AAGvB,MAAa,wCAAwC,YAIhC;AAGnB,UAFsB,QAAQ,iBAAiB,EAAE,MAAM,qBAAqB,EAEtD,MAAtB;EACE,KAAK,oBACH,QAAO;EAET,KAAK,SACH,QAAO,oBAAoB;GACzB,WAAW,QAAQ;GACnB,UAAU,QAAQ;GACnB,CAAC;;;AAKR,SAAgB,cAAc,UAAkB,gBAA4H;AAC1K,KAAI,EAAE,YAAY,mBAAoB,QAAO;CAC7C,MAAM,SAAS,kBAAkB;CACjC,MAAM,cAAc,OAAO,KAAK,OAAO,SAAS,CAAC,IAAI,OAAO;CAC5D,MAAM,gBAAgB,YAAY,SAAS,IAAI,KAAK,IAAI,GAAG,YAAY,GAAG;CAE1E,IAAI,gBAA+B;AACnC,KAAI,kBAAkB,MAAM;EAI1B,MAAM,UAHmB,YACtB,QAAO,MAAK,IAAI,eAAe,CAC/B,MAAM,GAAG,MAAM,IAAI,EAAE,CAErB,KAAI,MAAK,OAAO,SAAS,GAAG,cAAc,CAC1C,QAAO,MAAK,EAAE,SAAS,EAAE;AAC5B,kBAAgB,QAAQ,SAAS,IAAI,QAAQ,KAAK,OAAO,GAAG;OAG5D,kBADqB,gBAAgB,IAAI,OAAO,SAAS,iBAAiB,SAC5C,iBAAiB;AAGjD,QAAO;EAAE,OAAO,OAAO;EAAO,YAAY,OAAO;EAAY;EAAe;EAAe;;AAG7F,MAAa,gCAAgC,YAAyD;CACpG,IAAI;AACJ,KAAI;AACF,cAAY,IAAI,IAAI,QAAQ,IAAI;SAC1B;AACN,SAAO;;CAGT,MAAM,gBAAgB,IAAI,IAAI,oBAAoB;EAAE,WAAW,QAAQ;EAAW,UAAU;EAAI,CAAC,CAAC;AAClG,QAAO,UAAU,WAAW,cAAc,WACpC,UAAU,aAAa,cAAc,YAAY,UAAU,SAAS,WAAW,GAAG,cAAc,SAAS,GAAG"}
+{"version":3,"file":"url-targets.js","names":["envVars","HexclaveAssertionError"],"sources":["../../../src/lib/hexclave-app/url-targets.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { getCustomPagePrompts, type CustomPagePrompt } from \"@hexclave/shared/dist/interface/handler-urls\";\nimport { HexclaveAssertionError } from \"@hexclave/shared/dist/utils/errors\";\nimport { getHostedHandlerUrlFromConfig } from \"@hexclave/shared/dist/utils/redirect-urls\";\nimport { envVars } from \"../../generated/env\";\nimport { DefaultHandlerUrlTarget, HandlerPageUrls, HandlerUrlOptions, HandlerUrlTarget, HandlerUrls, ResolvedHandlerUrls } from \"./common\";\n\nconst localUrlPlaceholderOrigin = \"http://example.com\";\nconst schemePrefixRegex = /^[a-zA-Z][a-zA-Z\\d+\\-.]*:/;\n\nconst customPagePrompts: Record<keyof Omit<HandlerPageUrls, \"handler\">, CustomPagePrompt> = getCustomPagePrompts();\n\nconst joinHandlerComponentPath = (basePath: string, pagePath: string): string => {\n  const normalizedBasePath = basePath.endsWith(\"/\") && basePath.length > 1\n    ? basePath.slice(0, -1)\n    : basePath;\n  if (pagePath.length === 0) {\n    return normalizedBasePath;\n  }\n  if (normalizedBasePath === \"/\") {\n    return `/${pagePath}`;\n  }\n  return `${normalizedBasePath}/${pagePath}`;\n};\n\nconst getHostedPagePathForHandlerName = (handlerName: keyof HandlerUrls): string => {\n  switch (handlerName) {\n    case \"handler\": {\n      return \"\";\n    }\n    case \"home\": {\n      return \"\";\n    }\n    case \"afterSignIn\": {\n      return \"\";\n    }\n    case \"afterSignUp\": {\n      return \"\";\n    }\n    case \"afterSignOut\": {\n      return \"\";\n    }\n    case \"signIn\": {\n      return \"sign-in\";\n    }\n    case \"signUp\": {\n      return \"sign-up\";\n    }\n    case \"signOut\": {\n      return \"sign-out\";\n    }\n    case \"emailVerification\": {\n      return \"email-verification\";\n    }\n    case \"passwordReset\": {\n      return \"password-reset\";\n    }\n    case \"forgotPassword\": {\n      return \"forgot-password\";\n    }\n    case \"oauthCallback\": {\n      return \"oauth-callback\";\n    }\n    case \"magicLinkCallback\": {\n      return \"magic-link-callback\";\n    }\n    case \"accountSettings\": {\n      return \"account-settings\";\n    }\n    case \"teamInvitation\": {\n      return \"team-invitation\";\n    }\n    case \"cliAuthConfirm\": {\n      return \"cli-auth-confirm\";\n    }\n    case \"mfa\": {\n      return \"mfa\";\n    }\n    case \"error\": {\n      return \"error\";\n    }\n    case \"onboarding\": {\n      return \"onboarding\";\n    }\n  }\n};\n\nconst resolveCustomTargetUrl = (options: {\n  target: { type: \"custom\", url: string, version: number },\n  handlerName: keyof HandlerUrls,\n}): string => {\n  const handlerName = options.handlerName;\n  if (handlerName in customPagePrompts) {\n    const customPagePrompt = customPagePrompts[handlerName as keyof typeof customPagePrompts];\n    if (options.target.version === 0 || options.target.version in customPagePrompt.versions) {\n      return options.target.url;\n    }\n\n    throw new Error(`Unsupported custom page version ${options.target.version} for ${options.handlerName} page at ${options.target.url}. The latest supported version of this page is ${Math.max(0, ...Object.keys(customPagePrompt.versions).map(Number))}. Please upgrade your Hexclave SDK to a version that supports this version.`);\n  } else {\n    throw new Error(`URL target ${options.handlerName} cannot be a custom page. Please specify the URL as a string instead.`);\n  }\n};\n\nexport const getHostedHandlerUrl = (options: { projectId: string, pagePath: string }): string => {\n  const normalizedPagePath = options.pagePath.replace(/^\\/+/, \"\");\n  const hostedPath = normalizedPagePath.length > 0 ? `handler/${normalizedPagePath}` : \"handler\";\n  return getHostedHandlerUrlFromConfig({\n    projectId: options.projectId,\n    hostedPath,\n    hostedHandlerDomainSuffix: envVars.HEXCLAVE_HOSTED_HANDLER_DOMAIN_SUFFIX,\n    hostedHandlerUrlTemplate: envVars.HEXCLAVE_HOSTED_HANDLER_URL_TEMPLATE,\n    hexclavePortPrefix: envVars.HEXCLAVE_PORT_PREFIX,\n  });\n};\n\nconst isRelativeUrlString = (url: string): boolean => {\n  if (url.startsWith(\"//\")) {\n    return false;\n  }\n  return !schemePrefixRegex.test(url);\n};\n\nconst nonHostedHandlerNames = new Set<keyof HandlerUrls>([\n  \"afterSignIn\",\n  \"afterSignUp\",\n  \"afterSignOut\",\n]);\n\nexport const isLocalHandlerUrlTarget = (options: {\n  targetUrl: string,\n  handlerPath: string,\n  currentOrigin?: string,\n}): boolean => {\n  const urlObject = new URL(options.targetUrl, localUrlPlaceholderOrigin);\n  const isHandlerPathTarget = urlObject.pathname === options.handlerPath\n    || urlObject.pathname.startsWith(`${options.handlerPath}/`);\n  if (!isHandlerPathTarget) {\n    return false;\n  }\n\n  // On server we only have path information, so treat matching handler paths as local.\n  if (options.currentOrigin == null) {\n    return true;\n  }\n\n  return isRelativeUrlString(options.targetUrl) || urlObject.origin === options.currentOrigin;\n};\n\nconst resolveUrlTarget = (options: {\n  target: HandlerUrlTarget,\n  fallbackPath: string,\n  handlerName: keyof HandlerUrls,\n  projectId: string,\n}): string => {\n  if (typeof options.target === \"string\") {\n    return options.target;\n  }\n\n  switch (options.target.type) {\n    case \"handler-component\": {\n      return options.fallbackPath;\n    }\n    case \"hosted\": {\n      if (nonHostedHandlerNames.has(options.handlerName)) {\n        return options.fallbackPath;\n      }\n      return getHostedHandlerUrl({\n        projectId: options.projectId,\n        pagePath: getHostedPagePathForHandlerName(options.handlerName),\n      });\n    }\n    case \"custom\": {\n      return resolveCustomTargetUrl({\n        target: options.target,\n        handlerName: options.handlerName,\n      });\n    }\n  }\n};\n\nconst assertOAuthCallbackTargetIsRelative = (target: HandlerUrlTarget): void => {\n  const url = typeof target === \"string\"\n    ? target\n    : target.type === \"custom\"\n      ? target.url\n      : null;\n  if (url != null && !isRelativeUrlString(url)) {\n    throw new HexclaveAssertionError(\"OAuth callback URLs must be relative.\", {\n      oauthCallbackUrl: url,\n      hint: \"Use a relative URL like '/handler/oauth-callback', or use { type: 'hosted' } to let Stack use the current page for hosted callbacks.\",\n    });\n  }\n};\n\nexport const resolveHandlerUrls = (options: { urls: HandlerUrlOptions | undefined, projectId: string }): ResolvedHandlerUrls => {\n  const configuredUrls = options.urls;\n  const defaultTarget = configuredUrls?.default ?? { type: \"handler-component\" } as const;\n  const oauthCallbackTarget: HandlerUrlTarget = configuredUrls?.oauthCallback ?? (\n    defaultTarget.type === \"hosted\"\n      ? defaultTarget\n      : { type: \"handler-component\" }\n  );\n  assertOAuthCallbackTargetIsRelative(oauthCallbackTarget);\n  let handlerComponentBasePath = \"/handler\";\n  if (typeof configuredUrls?.handler === \"string\") {\n    handlerComponentBasePath = configuredUrls.handler;\n  } else if (configuredUrls?.handler != null && configuredUrls.handler.type === \"custom\") {\n    handlerComponentBasePath = resolveCustomTargetUrl({\n      target: configuredUrls.handler,\n      handlerName: \"handler\",\n    });\n  }\n\n  const homeTarget = configuredUrls?.home ?? defaultTarget;\n  const localHome = resolveUrlTarget({\n    target: typeof homeTarget !== \"string\" && homeTarget.type === \"hosted\"\n      ? { type: \"handler-component\" }\n      : homeTarget,\n    fallbackPath: \"/\",\n    handlerName: \"home\",\n    projectId: options.projectId,\n  });\n  const home = resolveUrlTarget({\n    target: homeTarget,\n    fallbackPath: \"/\",\n    handlerName: \"home\",\n    projectId: options.projectId,\n  });\n  const afterSignIn = resolveUrlTarget({\n    target: configuredUrls?.afterSignIn ?? defaultTarget,\n    fallbackPath: localHome,\n    handlerName: \"afterSignIn\",\n    projectId: options.projectId,\n  });\n\n  return {\n    handler: resolveUrlTarget({\n      target: configuredUrls?.handler ?? defaultTarget,\n      fallbackPath: handlerComponentBasePath,\n      handlerName: \"handler\",\n      projectId: options.projectId,\n    }),\n    signIn: resolveUrlTarget({\n      target: configuredUrls?.signIn ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"sign-in\"),\n      handlerName: \"signIn\",\n      projectId: options.projectId,\n    }),\n    signUp: resolveUrlTarget({\n      target: configuredUrls?.signUp ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"sign-up\"),\n      handlerName: \"signUp\",\n      projectId: options.projectId,\n    }),\n    afterSignIn,\n    afterSignUp: resolveUrlTarget({\n      target: configuredUrls?.afterSignUp ?? defaultTarget,\n      fallbackPath: afterSignIn,\n      handlerName: \"afterSignUp\",\n      projectId: options.projectId,\n    }),\n    signOut: resolveUrlTarget({\n      target: configuredUrls?.signOut ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"sign-out\"),\n      handlerName: \"signOut\",\n      projectId: options.projectId,\n    }),\n    afterSignOut: resolveUrlTarget({\n      target: configuredUrls?.afterSignOut ?? defaultTarget,\n      fallbackPath: localHome,\n      handlerName: \"afterSignOut\",\n      projectId: options.projectId,\n    }),\n    emailVerification: resolveUrlTarget({\n      target: configuredUrls?.emailVerification ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"email-verification\"),\n      handlerName: \"emailVerification\",\n      projectId: options.projectId,\n    }),\n    passwordReset: resolveUrlTarget({\n      target: configuredUrls?.passwordReset ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"password-reset\"),\n      handlerName: \"passwordReset\",\n      projectId: options.projectId,\n    }),\n    forgotPassword: resolveUrlTarget({\n      target: configuredUrls?.forgotPassword ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"forgot-password\"),\n      handlerName: \"forgotPassword\",\n      projectId: options.projectId,\n    }),\n    home,\n    oauthCallback: resolveUrlTarget({\n      target: oauthCallbackTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"oauth-callback\"),\n      handlerName: \"oauthCallback\",\n      projectId: options.projectId,\n    }),\n    magicLinkCallback: resolveUrlTarget({\n      target: configuredUrls?.magicLinkCallback ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"magic-link-callback\"),\n      handlerName: \"magicLinkCallback\",\n      projectId: options.projectId,\n    }),\n    accountSettings: resolveUrlTarget({\n      target: configuredUrls?.accountSettings ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"account-settings\"),\n      handlerName: \"accountSettings\",\n      projectId: options.projectId,\n    }),\n    teamInvitation: resolveUrlTarget({\n      target: configuredUrls?.teamInvitation ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"team-invitation\"),\n      handlerName: \"teamInvitation\",\n      projectId: options.projectId,\n    }),\n    cliAuthConfirm: resolveUrlTarget({\n      target: configuredUrls?.cliAuthConfirm ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"cli-auth-confirm\"),\n      handlerName: \"cliAuthConfirm\",\n      projectId: options.projectId,\n    }),\n    mfa: resolveUrlTarget({\n      target: configuredUrls?.mfa ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"mfa\"),\n      handlerName: \"mfa\",\n      projectId: options.projectId,\n    }),\n    error: resolveUrlTarget({\n      target: configuredUrls?.error ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"error\"),\n      handlerName: \"error\",\n      projectId: options.projectId,\n    }),\n    onboarding: resolveUrlTarget({\n      target: configuredUrls?.onboarding ?? defaultTarget,\n      fallbackPath: joinHandlerComponentPath(handlerComponentBasePath, \"onboarding\"),\n      handlerName: \"onboarding\",\n      projectId: options.projectId,\n    }),\n  };\n};\n\nexport const buildCliAuthConfirmUrl = (options: {\n  cliAuthConfirmUrl: string,\n  /** Used as the base URL only when cliAuthConfirmUrl is relative. */\n  appUrl: string,\n  loginCode: string,\n}): string => {\n  const url = new URL(options.cliAuthConfirmUrl, options.appUrl);\n  url.searchParams.set(\"login_code\", options.loginCode);\n  return url.toString();\n};\n\nexport const resolveUnknownHandlerPathFallbackUrl = (options: {\n  defaultTarget: DefaultHandlerUrlTarget | undefined,\n  projectId: string,\n  unknownPath: string,\n}): string | null => {\n  const defaultTarget = options.defaultTarget ?? { type: \"handler-component\" } satisfies DefaultHandlerUrlTarget;\n\n  switch (defaultTarget.type) {\n    case \"handler-component\": {\n      return null;\n    }\n    case \"hosted\": {\n      return getHostedHandlerUrl({\n        projectId: options.projectId,\n        pagePath: options.unknownPath,\n      });\n    }\n  }\n};\n\nexport function getPagePrompt(pageName: string, currentVersion?: number): { title: string; fullPrompt: string; upgradePrompt: string | null; latestVersion: number } | null {\n  if (!(pageName in customPagePrompts)) return null;\n  const prompt = customPagePrompts[pageName as keyof typeof customPagePrompts];\n  const versionKeys = Object.keys(prompt.versions).map(Number);\n  const latestVersion = versionKeys.length > 0 ? Math.max(...versionKeys) : 0;\n\n  let upgradePrompt: string | null = null;\n  if (currentVersion != null) {\n    const relevantVersions = versionKeys\n      .filter(v => v > currentVersion)\n      .sort((a, b) => a - b);\n    const prompts = relevantVersions\n      .map(v => prompt.versions[v].upgradePrompt)\n      .filter(p => p.length > 0);\n    upgradePrompt = prompts.length > 0 ? prompts.join(\"\\n\\n\") : null;\n  } else {\n    const upgradeEntry = latestVersion > 0 ? prompt.versions[latestVersion] : undefined;\n    upgradePrompt = upgradeEntry?.upgradePrompt ?? null;\n  }\n\n  return { title: prompt.title, fullPrompt: prompt.fullPrompt, upgradePrompt, latestVersion };\n}\n\nexport const isHostedHandlerUrlForProject = (options: { url: string, projectId: string }): boolean => {\n  let parsedUrl: URL;\n  try {\n    parsedUrl = new URL(options.url);\n  } catch {\n    return false;\n  }\n\n  const hostedBaseUrl = new URL(getHostedHandlerUrl({ projectId: options.projectId, pagePath: \"\" }));\n  return parsedUrl.origin === hostedBaseUrl.origin\n    && (parsedUrl.pathname === hostedBaseUrl.pathname || parsedUrl.pathname.startsWith(`${hostedBaseUrl.pathname}/`));\n};\n"],"mappings":";;;;;;;;AAUA,MAAM,4BAA4B;AAClC,MAAM,oBAAoB;AAE1B,MAAM,4FAA4G;AAElH,MAAM,4BAA4B,UAAkB,aAA6B;CAC/E,MAAM,qBAAqB,SAAS,SAAS,IAAI,IAAI,SAAS,SAAS,IACnE,SAAS,MAAM,GAAG,GAAG,GACrB;AACJ,KAAI,SAAS,WAAW,EACtB,QAAO;AAET,KAAI,uBAAuB,IACzB,QAAO,IAAI;AAEb,QAAO,GAAG,mBAAmB,GAAG;;AAGlC,MAAM,mCAAmC,gBAA2C;AAClF,SAAQ,aAAR;EACE,KAAK,UACH,QAAO;EAET,KAAK,OACH,QAAO;EAET,KAAK,cACH,QAAO;EAET,KAAK,cACH,QAAO;EAET,KAAK,eACH,QAAO;EAET,KAAK,SACH,QAAO;EAET,KAAK,SACH,QAAO;EAET,KAAK,UACH,QAAO;EAET,KAAK,oBACH,QAAO;EAET,KAAK,gBACH,QAAO;EAET,KAAK,iBACH,QAAO;EAET,KAAK,gBACH,QAAO;EAET,KAAK,oBACH,QAAO;EAET,KAAK,kBACH,QAAO;EAET,KAAK,iBACH,QAAO;EAET,KAAK,iBACH,QAAO;EAET,KAAK,MACH,QAAO;EAET,KAAK,QACH,QAAO;EAET,KAAK,aACH,QAAO;;;AAKb,MAAM,0BAA0B,YAGlB;CACZ,MAAM,cAAc,QAAQ;AAC5B,KAAI,eAAe,mBAAmB;EACpC,MAAM,mBAAmB,kBAAkB;AAC3C,MAAI,QAAQ,OAAO,YAAY,KAAK,QAAQ,OAAO,WAAW,iBAAiB,SAC7E,QAAO,QAAQ,OAAO;AAGxB,QAAM,IAAI,MAAM,mCAAmC,QAAQ,OAAO,QAAQ,OAAO,QAAQ,YAAY,WAAW,QAAQ,OAAO,IAAI,iDAAiD,KAAK,IAAI,GAAG,GAAG,OAAO,KAAK,iBAAiB,SAAS,CAAC,IAAI,OAAO,CAAC,CAAC,6EAA6E;OAEpU,OAAM,IAAI,MAAM,cAAc,QAAQ,YAAY,uEAAuE;;AAI7H,MAAa,uBAAuB,YAA6D;CAC/F,MAAM,qBAAqB,QAAQ,SAAS,QAAQ,QAAQ,GAAG;CAC/D,MAAM,aAAa,mBAAmB,SAAS,IAAI,WAAW,uBAAuB;AACrF,qFAAqC;EACnC,WAAW,QAAQ;EACnB;EACA,2BAA2BA,+BAAQ;EACnC,0BAA0BA,+BAAQ;EAClC,oBAAoBA,+BAAQ;EAC7B,CAAC;;AAGJ,MAAM,uBAAuB,QAAyB;AACpD,KAAI,IAAI,WAAW,KAAK,CACtB,QAAO;AAET,QAAO,CAAC,kBAAkB,KAAK,IAAI;;AAGrC,MAAM,wBAAwB,IAAI,IAAuB;CACvD;CACA;CACA;CACD,CAAC;AAEF,MAAa,2BAA2B,YAIzB;CACb,MAAM,YAAY,IAAI,IAAI,QAAQ,WAAW,0BAA0B;AAGvE,KAAI,EAFwB,UAAU,aAAa,QAAQ,eACtD,UAAU,SAAS,WAAW,GAAG,QAAQ,YAAY,GAAG,EAE3D,QAAO;AAIT,KAAI,QAAQ,iBAAiB,KAC3B,QAAO;AAGT,QAAO,oBAAoB,QAAQ,UAAU,IAAI,UAAU,WAAW,QAAQ;;AAGhF,MAAM,oBAAoB,YAKZ;AACZ,KAAI,OAAO,QAAQ,WAAW,SAC5B,QAAO,QAAQ;AAGjB,SAAQ,QAAQ,OAAO,MAAvB;EACE,KAAK,oBACH,QAAO,QAAQ;EAEjB,KAAK;AACH,OAAI,sBAAsB,IAAI,QAAQ,YAAY,CAChD,QAAO,QAAQ;AAEjB,UAAO,oBAAoB;IACzB,WAAW,QAAQ;IACnB,UAAU,gCAAgC,QAAQ,YAAY;IAC/D,CAAC;EAEJ,KAAK,SACH,QAAO,uBAAuB;GAC5B,QAAQ,QAAQ;GAChB,aAAa,QAAQ;GACtB,CAAC;;;AAKR,MAAM,uCAAuC,WAAmC;CAC9E,MAAM,MAAM,OAAO,WAAW,WAC1B,SACA,OAAO,SAAS,WACd,OAAO,MACP;AACN,KAAI,OAAO,QAAQ,CAAC,oBAAoB,IAAI,CAC1C,OAAM,IAAIC,0DAAuB,yCAAyC;EACxE,kBAAkB;EAClB,MAAM;EACP,CAAC;;AAIN,MAAa,sBAAsB,YAA6F;CAC9H,MAAM,iBAAiB,QAAQ;CAC/B,MAAM,gBAAgB,gBAAgB,WAAW,EAAE,MAAM,qBAAqB;CAC9E,MAAM,sBAAwC,gBAAgB,kBAC5D,cAAc,SAAS,WACnB,gBACA,EAAE,MAAM,qBAAqB;AAEnC,qCAAoC,oBAAoB;CACxD,IAAI,2BAA2B;AAC/B,KAAI,OAAO,gBAAgB,YAAY,SACrC,4BAA2B,eAAe;UACjC,gBAAgB,WAAW,QAAQ,eAAe,QAAQ,SAAS,SAC5E,4BAA2B,uBAAuB;EAChD,QAAQ,eAAe;EACvB,aAAa;EACd,CAAC;CAGJ,MAAM,aAAa,gBAAgB,QAAQ;CAC3C,MAAM,YAAY,iBAAiB;EACjC,QAAQ,OAAO,eAAe,YAAY,WAAW,SAAS,WAC1D,EAAE,MAAM,qBAAqB,GAC7B;EACJ,cAAc;EACd,aAAa;EACb,WAAW,QAAQ;EACpB,CAAC;CACF,MAAM,OAAO,iBAAiB;EAC5B,QAAQ;EACR,cAAc;EACd,aAAa;EACb,WAAW,QAAQ;EACpB,CAAC;CACF,MAAM,cAAc,iBAAiB;EACnC,QAAQ,gBAAgB,eAAe;EACvC,cAAc;EACd,aAAa;EACb,WAAW,QAAQ;EACpB,CAAC;AAEF,QAAO;EACL,SAAS,iBAAiB;GACxB,QAAQ,gBAAgB,WAAW;GACnC,cAAc;GACd,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,QAAQ,iBAAiB;GACvB,QAAQ,gBAAgB,UAAU;GAClC,cAAc,yBAAyB,0BAA0B,UAAU;GAC3E,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,QAAQ,iBAAiB;GACvB,QAAQ,gBAAgB,UAAU;GAClC,cAAc,yBAAyB,0BAA0B,UAAU;GAC3E,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF;EACA,aAAa,iBAAiB;GAC5B,QAAQ,gBAAgB,eAAe;GACvC,cAAc;GACd,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,SAAS,iBAAiB;GACxB,QAAQ,gBAAgB,WAAW;GACnC,cAAc,yBAAyB,0BAA0B,WAAW;GAC5E,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,cAAc,iBAAiB;GAC7B,QAAQ,gBAAgB,gBAAgB;GACxC,cAAc;GACd,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,mBAAmB,iBAAiB;GAClC,QAAQ,gBAAgB,qBAAqB;GAC7C,cAAc,yBAAyB,0BAA0B,qBAAqB;GACtF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,eAAe,iBAAiB;GAC9B,QAAQ,gBAAgB,iBAAiB;GACzC,cAAc,yBAAyB,0BAA0B,iBAAiB;GAClF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,gBAAgB,iBAAiB;GAC/B,QAAQ,gBAAgB,kBAAkB;GAC1C,cAAc,yBAAyB,0BAA0B,kBAAkB;GACnF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF;EACA,eAAe,iBAAiB;GAC9B,QAAQ;GACR,cAAc,yBAAyB,0BAA0B,iBAAiB;GAClF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,mBAAmB,iBAAiB;GAClC,QAAQ,gBAAgB,qBAAqB;GAC7C,cAAc,yBAAyB,0BAA0B,sBAAsB;GACvF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,iBAAiB,iBAAiB;GAChC,QAAQ,gBAAgB,mBAAmB;GAC3C,cAAc,yBAAyB,0BAA0B,mBAAmB;GACpF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,gBAAgB,iBAAiB;GAC/B,QAAQ,gBAAgB,kBAAkB;GAC1C,cAAc,yBAAyB,0BAA0B,kBAAkB;GACnF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,gBAAgB,iBAAiB;GAC/B,QAAQ,gBAAgB,kBAAkB;GAC1C,cAAc,yBAAyB,0BAA0B,mBAAmB;GACpF,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,KAAK,iBAAiB;GACpB,QAAQ,gBAAgB,OAAO;GAC/B,cAAc,yBAAyB,0BAA0B,MAAM;GACvE,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,OAAO,iBAAiB;GACtB,QAAQ,gBAAgB,SAAS;GACjC,cAAc,yBAAyB,0BAA0B,QAAQ;GACzE,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACF,YAAY,iBAAiB;GAC3B,QAAQ,gBAAgB,cAAc;GACtC,cAAc,yBAAyB,0BAA0B,aAAa;GAC9E,aAAa;GACb,WAAW,QAAQ;GACpB,CAAC;EACH;;AAGH,MAAa,0BAA0B,YAKzB;CACZ,MAAM,MAAM,IAAI,IAAI,QAAQ,mBAAmB,QAAQ,OAAO;AAC9D,KAAI,aAAa,IAAI,cAAc,QAAQ,UAAU;AACrD,QAAO,IAAI,UAAU;;AAGvB,MAAa,wCAAwC,YAIhC;AAGnB,UAFsB,QAAQ,iBAAiB,EAAE,MAAM,qBAAqB,EAEtD,MAAtB;EACE,KAAK,oBACH,QAAO;EAET,KAAK,SACH,QAAO,oBAAoB;GACzB,WAAW,QAAQ;GACnB,UAAU,QAAQ;GACnB,CAAC;;;AAKR,SAAgB,cAAc,UAAkB,gBAA4H;AAC1K,KAAI,EAAE,YAAY,mBAAoB,QAAO;CAC7C,MAAM,SAAS,kBAAkB;CACjC,MAAM,cAAc,OAAO,KAAK,OAAO,SAAS,CAAC,IAAI,OAAO;CAC5D,MAAM,gBAAgB,YAAY,SAAS,IAAI,KAAK,IAAI,GAAG,YAAY,GAAG;CAE1E,IAAI,gBAA+B;AACnC,KAAI,kBAAkB,MAAM;EAI1B,MAAM,UAHmB,YACtB,QAAO,MAAK,IAAI,eAAe,CAC/B,MAAM,GAAG,MAAM,IAAI,EAAE,CAErB,KAAI,MAAK,OAAO,SAAS,GAAG,cAAc,CAC1C,QAAO,MAAK,EAAE,SAAS,EAAE;AAC5B,kBAAgB,QAAQ,SAAS,IAAI,QAAQ,KAAK,OAAO,GAAG;OAG5D,kBADqB,gBAAgB,IAAI,OAAO,SAAS,iBAAiB,SAC5C,iBAAiB;AAGjD,QAAO;EAAE,OAAO,OAAO;EAAO,YAAY,OAAO;EAAY;EAAe;EAAe;;AAG7F,MAAa,gCAAgC,YAAyD;CACpG,IAAI;AACJ,KAAI;AACF,cAAY,IAAI,IAAI,QAAQ,IAAI;SAC1B;AACN,SAAO;;CAGT,MAAM,gBAAgB,IAAI,IAAI,oBAAoB;EAAE,WAAW,QAAQ;EAAW,UAAU;EAAI,CAAC,CAAC;AAClG,QAAO,UAAU,WAAW,cAAc,WACpC,UAAU,aAAa,cAAc,YAAY,UAAU,SAAS,WAAW,GAAG,cAAc,SAAS,GAAG"}

package/dist/lib/hexclave-app/url-targets.test.js

@@ -89,6 +89,18 @@ let __url_targets_js = require("./url-targets.js");
 		(0, vitest.expect)(urls.signIn).toBe("https://project-id.example-stack-hosted.test/handler/sign-in");
 		(0, vitest.expect)(urls.cliAuthConfirm).toBe("https://project-id.example-stack-hosted.test/handler/cli-auth-confirm");
 	});
+	(0, vitest.it)("keeps redirect-only post-auth targets local even when the default target is hosted", () => {
+		vitest.vi.stubEnv("NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX", ".example-stack-hosted.test");
+		const urls = (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { default: { type: "hosted" } }
+		});
+		(0, vitest.expect)(urls.signIn).toBe("https://project-id.example-stack-hosted.test/handler/sign-in");
+		(0, vitest.expect)(urls.signOut).toBe("https://project-id.example-stack-hosted.test/handler/sign-out");
+		(0, vitest.expect)(urls.afterSignIn).toBe("/");
+		(0, vitest.expect)(urls.afterSignUp).toBe("/");
+		(0, vitest.expect)(urls.afterSignOut).toBe("/");
+	});
 	(0, vitest.it)("rejects absolute OAuth callback string targets", () => {
 		(0, vitest.expect)(() => (0, __url_targets_js.resolveHandlerUrls)({
 			projectId: "project-id",

package/dist/lib/hexclave-app/url-targets.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"url-targets.test.js","names":[],"sources":["../../../src/lib/hexclave-app/url-targets.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { buildCliAuthConfirmUrl, getPagePrompt, isLocalHandlerUrlTarget, resolveHandlerUrls, resolveUnknownHandlerPathFallbackUrl } from \"./url-targets\";\n\ndescribe(\"handler URL targets\", () => {\n  afterEach(() => {\n    vi.unstubAllEnvs();\n  });\n\n  it(\"treats handler-component targets the same as omitted values\", () => {\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: \"/custom-handler\",\n        signIn: { type: \"handler-component\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"/custom-handler/sign-in\");\n  });\n\n  it(\"treats custom v0 page targets like legacy string targets\", () => {\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: \"/custom-handler\",\n        signIn: { type: \"handler-component\" },\n        signUp: { type: \"custom\", url: \"/sign-up-explicit\", version: 0 },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"/custom-handler/sign-in\");\n    expect(urls.signUp).toBe(\"/sign-up-explicit\");\n  });\n\n  it(\"throws on v0 custom target for handler page\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: { type: \"custom\", url: \"/custom-handler\", version: 0 },\n      },\n    })).toThrowError(/cannot be a custom page/);\n  });\n\n  it(\"supports the latest documented custom target version\", () => {\n    const signInPrompt = getPagePrompt(\"signIn\");\n    if (signInPrompt == null) {\n      throw new Error(\"Expected signIn prompt metadata to exist\");\n    }\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        signIn: { type: \"custom\", url: \"/custom-sign-in\", version: signInPrompt.latestVersion },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"/custom-sign-in\");\n  });\n\n  it(\"throws on custom target versions newer than the latest supported version\", () => {\n    const signInPrompt = getPagePrompt(\"signIn\");\n    if (signInPrompt == null) {\n      throw new Error(\"Expected signIn prompt metadata to exist\");\n    }\n\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        signIn: { type: \"custom\", url: \"/custom-sign-in\", version: signInPrompt.latestVersion + 1 },\n      },\n    })).toThrowError(/Unsupported custom page version/);\n  });\n\n  it(\"throws on non-zero custom version for handler page\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: { type: \"custom\", url: \"/custom-handler\", version: 1 },\n      },\n    })).toThrowError(/cannot be a custom page/);\n  });\n\n  it(\"uses hosted defaults for unspecified URLs\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        signUp: \"/sign-up\",\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signUp).toBe(\"/sign-up\");\n    expect(urls.signIn).toBe(\"https://project-id.example-stack-hosted.test/handler/sign-in\");\n    expect(urls.cliAuthConfirm).toBe(\"https://project-id.example-stack-hosted.test/handler/cli-auth-confirm\");\n  });\n\n  it(\"rejects absolute OAuth callback string targets\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        oauthCallback: \"https://app.example.test/oauth-callback\",\n      },\n    })).toThrowErrorMatchingInlineSnapshot(`\n      [HexclaveAssertionError: OAuth callback URLs must be relative.\n\n      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]\n    `);\n  });\n\n  it(\"rejects absolute OAuth callback custom targets\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        oauthCallback: { type: \"custom\", url: \"https://app.example.test/oauth-callback\", version: 0 },\n      },\n    })).toThrowErrorMatchingInlineSnapshot(`\n      [HexclaveAssertionError: OAuth callback URLs must be relative.\n\n      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]\n    `);\n  });\n\n  it(\"inherits a hosted default target for the OAuth callback\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"https://project-id.example-stack-hosted.test/handler/sign-in\");\n    expect(urls.oauthCallback).toBe(\"https://project-id.example-stack-hosted.test/handler/oauth-callback\");\n  });\n\n  it(\"supports custom CLI auth confirmation targets\", () => {\n    const cliAuthConfirmPrompt = getPagePrompt(\"cliAuthConfirm\");\n    if (cliAuthConfirmPrompt == null) {\n      throw new Error(\"Expected cliAuthConfirm prompt metadata to exist\");\n    }\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        cliAuthConfirm: { type: \"custom\", url: \"/cli/authorize\", version: cliAuthConfirmPrompt.latestVersion },\n      },\n    });\n\n    expect(urls.cliAuthConfirm).toBe(\"/cli/authorize\");\n  });\n\n  it(\"builds CLI auth login URLs from the resolved confirmation target\", () => {\n    expect(buildCliAuthConfirmUrl({\n      cliAuthConfirmUrl: \"/cli/authorize\",\n      appUrl: \"https://app.example.test/base\",\n      loginCode: \"login-code\",\n    })).toBe(\"https://app.example.test/cli/authorize?login_code=login-code\");\n  });\n\n  it(\"uses default target for unknown /handler/* pages\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const url = resolveUnknownHandlerPathFallbackUrl({\n      defaultTarget: { type: \"hosted\" },\n      projectId: \"project-id\",\n      unknownPath: \"custom-page\",\n    });\n\n    expect(url).toBe(\"https://project-id.example-stack-hosted.test/handler/custom-page\");\n  });\n\n  it(\"uses the full hosted handler URL template when configured\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE\", \"http://{projectId}.localhost:${NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX:-81}09/{hostedPath}\");\n    vi.stubEnv(\"NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX\", \"93\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"http://project-id.localhost:9309/handler/sign-in\");\n    expect(urls.accountSettings).toBe(\"http://project-id.localhost:9309/handler/account-settings\");\n  });\n\n  it(\"validates the hosted handler URL template placeholders\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE\", \"http://localhost:9309/{projectId}/handler\");\n\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    })).toThrowError(/\\{projectId\\} and \\{hostedPath\\}/);\n  });\n\n  it(\"rejects hosted handler URL templates that put the project ID in the path\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE\", \"http://localhost:9309/{projectId}/{hostedPath}\");\n\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    })).toThrowErrorMatchingInlineSnapshot(`\n      [HexclaveAssertionError: The hosted handler URL template must put {projectId} in the hostname.\n\n      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]\n    `);\n  });\n});\n\ndescribe(\"isLocalHandlerUrlTarget\", () => {\n  it(\"treats relative handler URLs as local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"/handler/sign-in\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(true);\n  });\n\n  it(\"treats same-origin absolute handler URLs as local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"http://p91.localhost:9101/handler/sign-in\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(true);\n  });\n\n  it(\"treats cross-origin absolute handler URLs as non-local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"https://project-id.built-with-hexclave.com/handler/sign-in\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(false);\n  });\n\n  it(\"treats non-handler paths as non-local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"/projects\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(false);\n  });\n});\n"],"mappings":";;;;;qBAOS,6BAA6B;AACpC,6BAAgB;AACd,YAAG,eAAe;GAClB;AAEF,gBAAG,qEAAqE;AAStE,8DARgC;GAC9B,WAAW;GACX,MAAM;IACJ,SAAS;IACT,QAAQ,EAAE,MAAM,qBAAqB;IACtC;GACF,CAAC,CAEU,OAAO,CAAC,KAAK,0BAA0B;GACnD;AAEF,gBAAG,kEAAkE;EACnE,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM;IACJ,SAAS;IACT,QAAQ,EAAE,MAAM,qBAAqB;IACrC,QAAQ;KAAE,MAAM;KAAU,KAAK;KAAqB,SAAS;KAAG;IACjE;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,0BAA0B;AACnD,qBAAO,KAAK,OAAO,CAAC,KAAK,oBAAoB;GAC7C;AAEF,gBAAG,qDAAqD;AACtD,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS;IAAG,EAChE;GACF,CAAC,CAAC,CAAC,aAAa,0BAA0B;GAC3C;AAEF,gBAAG,8DAA8D;EAC/D,MAAM,mDAA6B,SAAS;AAC5C,MAAI,gBAAgB,KAClB,OAAM,IAAI,MAAM,2CAA2C;AAU7D,8DAPgC;GAC9B,WAAW;GACX,MAAM,EACJ,QAAQ;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS,aAAa;IAAe,EACxF;GACF,CAAC,CAEU,OAAO,CAAC,KAAK,kBAAkB;GAC3C;AAEF,gBAAG,kFAAkF;EACnF,MAAM,mDAA6B,SAAS;AAC5C,MAAI,gBAAgB,KAClB,OAAM,IAAI,MAAM,2CAA2C;AAG7D,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,QAAQ;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS,aAAa,gBAAgB;IAAG,EAC5F;GACF,CAAC,CAAC,CAAC,aAAa,kCAAkC;GACnD;AAEF,gBAAG,4DAA4D;AAC7D,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS;IAAG,EAChE;GACF,CAAC,CAAC,CAAC,aAAa,0BAA0B;GAC3C;AAEF,gBAAG,mDAAmD;AACpD,YAAG,QAAQ,kDAAkD,6BAA6B;EAE1F,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM;IACJ,QAAQ;IACR,SAAS,EAAE,MAAM,UAAU;IAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,WAAW;AACpC,qBAAO,KAAK,OAAO,CAAC,KAAK,+DAA+D;AACxF,qBAAO,KAAK,eAAe,CAAC,KAAK,wEAAwE;GACzG;AAEF,gBAAG,wDAAwD;AACzD,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,eAAe,2CAChB;GACF,CAAC,CAAC,CAAC,mCAAmC;;;;MAIrC;GACF;AAEF,gBAAG,wDAAwD;AACzD,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,eAAe;IAAE,MAAM;IAAU,KAAK;IAA2C,SAAS;IAAG,EAC9F;GACF,CAAC,CAAC,CAAC,mCAAmC;;;;MAIrC;GACF;AAEF,gBAAG,iEAAiE;AAClE,YAAG,QAAQ,kDAAkD,6BAA6B;EAE1F,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,+DAA+D;AACxF,qBAAO,KAAK,cAAc,CAAC,KAAK,sEAAsE;GACtG;AAEF,gBAAG,uDAAuD;EACxD,MAAM,2DAAqC,iBAAiB;AAC5D,MAAI,wBAAwB,KAC1B,OAAM,IAAI,MAAM,mDAAmD;AAUrE,8DAPgC;GAC9B,WAAW;GACX,MAAM,EACJ,gBAAgB;IAAE,MAAM;IAAU,KAAK;IAAkB,SAAS,qBAAqB;IAAe,EACvG;GACF,CAAC,CAEU,eAAe,CAAC,KAAK,iBAAiB;GAClD;AAEF,gBAAG,0EAA0E;AAC3E,kEAA8B;GAC5B,mBAAmB;GACnB,QAAQ;GACR,WAAW;GACZ,CAAC,CAAC,CAAC,KAAK,+DAA+D;GACxE;AAEF,gBAAG,0DAA0D;AAC3D,YAAG,QAAQ,kDAAkD,6BAA6B;AAQ1F,gFANiD;GAC/C,eAAe,EAAE,MAAM,UAAU;GACjC,WAAW;GACX,aAAa;GACd,CAAC,CAES,CAAC,KAAK,mEAAmE;GACpF;AAEF,gBAAG,mEAAmE;AACpE,YAAG,QAAQ,iDAAiD,sFAAsF;AAClJ,YAAG,QAAQ,oCAAoC,KAAK;EAEpD,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,mDAAmD;AAC5E,qBAAO,KAAK,gBAAgB,CAAC,KAAK,4DAA4D;GAC9F;AAEF,gBAAG,gEAAgE;AACjE,YAAG,QAAQ,iDAAiD,4CAA4C;AAExG,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC,CAAC,CAAC,aAAa,mCAAmC;GACpD;AAEF,gBAAG,kFAAkF;AACnF,YAAG,QAAQ,iDAAiD,iDAAiD;AAE7G,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC,CAAC,CAAC,mCAAmC;;;;MAIrC;GACF;EACF;qBAEO,iCAAiC;AACxC,gBAAG,uDAAuD;AACxD,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,KAAK;GACd;AAEF,gBAAG,mEAAmE;AACpE,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,KAAK;GACd;AAEF,gBAAG,wEAAwE;AACzE,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,MAAM;GACf;AAEF,gBAAG,uDAAuD;AACxD,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,MAAM;GACf;EACF"}
+{"version":3,"file":"url-targets.test.js","names":[],"sources":["../../../src/lib/hexclave-app/url-targets.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { buildCliAuthConfirmUrl, getPagePrompt, isLocalHandlerUrlTarget, resolveHandlerUrls, resolveUnknownHandlerPathFallbackUrl } from \"./url-targets\";\n\ndescribe(\"handler URL targets\", () => {\n  afterEach(() => {\n    vi.unstubAllEnvs();\n  });\n\n  it(\"treats handler-component targets the same as omitted values\", () => {\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: \"/custom-handler\",\n        signIn: { type: \"handler-component\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"/custom-handler/sign-in\");\n  });\n\n  it(\"treats custom v0 page targets like legacy string targets\", () => {\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: \"/custom-handler\",\n        signIn: { type: \"handler-component\" },\n        signUp: { type: \"custom\", url: \"/sign-up-explicit\", version: 0 },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"/custom-handler/sign-in\");\n    expect(urls.signUp).toBe(\"/sign-up-explicit\");\n  });\n\n  it(\"throws on v0 custom target for handler page\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: { type: \"custom\", url: \"/custom-handler\", version: 0 },\n      },\n    })).toThrowError(/cannot be a custom page/);\n  });\n\n  it(\"supports the latest documented custom target version\", () => {\n    const signInPrompt = getPagePrompt(\"signIn\");\n    if (signInPrompt == null) {\n      throw new Error(\"Expected signIn prompt metadata to exist\");\n    }\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        signIn: { type: \"custom\", url: \"/custom-sign-in\", version: signInPrompt.latestVersion },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"/custom-sign-in\");\n  });\n\n  it(\"throws on custom target versions newer than the latest supported version\", () => {\n    const signInPrompt = getPagePrompt(\"signIn\");\n    if (signInPrompt == null) {\n      throw new Error(\"Expected signIn prompt metadata to exist\");\n    }\n\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        signIn: { type: \"custom\", url: \"/custom-sign-in\", version: signInPrompt.latestVersion + 1 },\n      },\n    })).toThrowError(/Unsupported custom page version/);\n  });\n\n  it(\"throws on non-zero custom version for handler page\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: { type: \"custom\", url: \"/custom-handler\", version: 1 },\n      },\n    })).toThrowError(/cannot be a custom page/);\n  });\n\n  it(\"uses hosted defaults for unspecified URLs\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        signUp: \"/sign-up\",\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signUp).toBe(\"/sign-up\");\n    expect(urls.signIn).toBe(\"https://project-id.example-stack-hosted.test/handler/sign-in\");\n    expect(urls.cliAuthConfirm).toBe(\"https://project-id.example-stack-hosted.test/handler/cli-auth-confirm\");\n  });\n\n  it(\"keeps redirect-only post-auth targets local even when the default target is hosted\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"https://project-id.example-stack-hosted.test/handler/sign-in\");\n    expect(urls.signOut).toBe(\"https://project-id.example-stack-hosted.test/handler/sign-out\");\n    expect(urls.afterSignIn).toBe(\"/\");\n    expect(urls.afterSignUp).toBe(\"/\");\n    expect(urls.afterSignOut).toBe(\"/\");\n  });\n\n  it(\"rejects absolute OAuth callback string targets\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        oauthCallback: \"https://app.example.test/oauth-callback\",\n      },\n    })).toThrowErrorMatchingInlineSnapshot(`\n      [HexclaveAssertionError: OAuth callback URLs must be relative.\n\n      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]\n    `);\n  });\n\n  it(\"rejects absolute OAuth callback custom targets\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        oauthCallback: { type: \"custom\", url: \"https://app.example.test/oauth-callback\", version: 0 },\n      },\n    })).toThrowErrorMatchingInlineSnapshot(`\n      [HexclaveAssertionError: OAuth callback URLs must be relative.\n\n      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]\n    `);\n  });\n\n  it(\"inherits a hosted default target for the OAuth callback\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"https://project-id.example-stack-hosted.test/handler/sign-in\");\n    expect(urls.oauthCallback).toBe(\"https://project-id.example-stack-hosted.test/handler/oauth-callback\");\n  });\n\n  it(\"supports custom CLI auth confirmation targets\", () => {\n    const cliAuthConfirmPrompt = getPagePrompt(\"cliAuthConfirm\");\n    if (cliAuthConfirmPrompt == null) {\n      throw new Error(\"Expected cliAuthConfirm prompt metadata to exist\");\n    }\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        cliAuthConfirm: { type: \"custom\", url: \"/cli/authorize\", version: cliAuthConfirmPrompt.latestVersion },\n      },\n    });\n\n    expect(urls.cliAuthConfirm).toBe(\"/cli/authorize\");\n  });\n\n  it(\"builds CLI auth login URLs from the resolved confirmation target\", () => {\n    expect(buildCliAuthConfirmUrl({\n      cliAuthConfirmUrl: \"/cli/authorize\",\n      appUrl: \"https://app.example.test/base\",\n      loginCode: \"login-code\",\n    })).toBe(\"https://app.example.test/cli/authorize?login_code=login-code\");\n  });\n\n  it(\"uses default target for unknown /handler/* pages\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const url = resolveUnknownHandlerPathFallbackUrl({\n      defaultTarget: { type: \"hosted\" },\n      projectId: \"project-id\",\n      unknownPath: \"custom-page\",\n    });\n\n    expect(url).toBe(\"https://project-id.example-stack-hosted.test/handler/custom-page\");\n  });\n\n  it(\"uses the full hosted handler URL template when configured\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE\", \"http://{projectId}.localhost:${NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX:-81}09/{hostedPath}\");\n    vi.stubEnv(\"NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX\", \"93\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"http://project-id.localhost:9309/handler/sign-in\");\n    expect(urls.accountSettings).toBe(\"http://project-id.localhost:9309/handler/account-settings\");\n  });\n\n  it(\"validates the hosted handler URL template placeholders\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE\", \"http://localhost:9309/{projectId}/handler\");\n\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    })).toThrowError(/\\{projectId\\} and \\{hostedPath\\}/);\n  });\n\n  it(\"rejects hosted handler URL templates that put the project ID in the path\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE\", \"http://localhost:9309/{projectId}/{hostedPath}\");\n\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    })).toThrowErrorMatchingInlineSnapshot(`\n      [HexclaveAssertionError: The hosted handler URL template must put {projectId} in the hostname.\n\n      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]\n    `);\n  });\n});\n\ndescribe(\"isLocalHandlerUrlTarget\", () => {\n  it(\"treats relative handler URLs as local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"/handler/sign-in\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(true);\n  });\n\n  it(\"treats same-origin absolute handler URLs as local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"http://p91.localhost:9101/handler/sign-in\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(true);\n  });\n\n  it(\"treats cross-origin absolute handler URLs as non-local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"https://project-id.built-with-hexclave.com/handler/sign-in\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(false);\n  });\n\n  it(\"treats non-handler paths as non-local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"/projects\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(false);\n  });\n});\n"],"mappings":";;;;;qBAOS,6BAA6B;AACpC,6BAAgB;AACd,YAAG,eAAe;GAClB;AAEF,gBAAG,qEAAqE;AAStE,8DARgC;GAC9B,WAAW;GACX,MAAM;IACJ,SAAS;IACT,QAAQ,EAAE,MAAM,qBAAqB;IACtC;GACF,CAAC,CAEU,OAAO,CAAC,KAAK,0BAA0B;GACnD;AAEF,gBAAG,kEAAkE;EACnE,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM;IACJ,SAAS;IACT,QAAQ,EAAE,MAAM,qBAAqB;IACrC,QAAQ;KAAE,MAAM;KAAU,KAAK;KAAqB,SAAS;KAAG;IACjE;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,0BAA0B;AACnD,qBAAO,KAAK,OAAO,CAAC,KAAK,oBAAoB;GAC7C;AAEF,gBAAG,qDAAqD;AACtD,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS;IAAG,EAChE;GACF,CAAC,CAAC,CAAC,aAAa,0BAA0B;GAC3C;AAEF,gBAAG,8DAA8D;EAC/D,MAAM,mDAA6B,SAAS;AAC5C,MAAI,gBAAgB,KAClB,OAAM,IAAI,MAAM,2CAA2C;AAU7D,8DAPgC;GAC9B,WAAW;GACX,MAAM,EACJ,QAAQ;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS,aAAa;IAAe,EACxF;GACF,CAAC,CAEU,OAAO,CAAC,KAAK,kBAAkB;GAC3C;AAEF,gBAAG,kFAAkF;EACnF,MAAM,mDAA6B,SAAS;AAC5C,MAAI,gBAAgB,KAClB,OAAM,IAAI,MAAM,2CAA2C;AAG7D,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,QAAQ;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS,aAAa,gBAAgB;IAAG,EAC5F;GACF,CAAC,CAAC,CAAC,aAAa,kCAAkC;GACnD;AAEF,gBAAG,4DAA4D;AAC7D,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS;IAAG,EAChE;GACF,CAAC,CAAC,CAAC,aAAa,0BAA0B;GAC3C;AAEF,gBAAG,mDAAmD;AACpD,YAAG,QAAQ,kDAAkD,6BAA6B;EAE1F,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM;IACJ,QAAQ;IACR,SAAS,EAAE,MAAM,UAAU;IAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,WAAW;AACpC,qBAAO,KAAK,OAAO,CAAC,KAAK,+DAA+D;AACxF,qBAAO,KAAK,eAAe,CAAC,KAAK,wEAAwE;GACzG;AAEF,gBAAG,4FAA4F;AAC7F,YAAG,QAAQ,kDAAkD,6BAA6B;EAE1F,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,+DAA+D;AACxF,qBAAO,KAAK,QAAQ,CAAC,KAAK,gEAAgE;AAC1F,qBAAO,KAAK,YAAY,CAAC,KAAK,IAAI;AAClC,qBAAO,KAAK,YAAY,CAAC,KAAK,IAAI;AAClC,qBAAO,KAAK,aAAa,CAAC,KAAK,IAAI;GACnC;AAEF,gBAAG,wDAAwD;AACzD,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,eAAe,2CAChB;GACF,CAAC,CAAC,CAAC,mCAAmC;;;;MAIrC;GACF;AAEF,gBAAG,wDAAwD;AACzD,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,eAAe;IAAE,MAAM;IAAU,KAAK;IAA2C,SAAS;IAAG,EAC9F;GACF,CAAC,CAAC,CAAC,mCAAmC;;;;MAIrC;GACF;AAEF,gBAAG,iEAAiE;AAClE,YAAG,QAAQ,kDAAkD,6BAA6B;EAE1F,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,+DAA+D;AACxF,qBAAO,KAAK,cAAc,CAAC,KAAK,sEAAsE;GACtG;AAEF,gBAAG,uDAAuD;EACxD,MAAM,2DAAqC,iBAAiB;AAC5D,MAAI,wBAAwB,KAC1B,OAAM,IAAI,MAAM,mDAAmD;AAUrE,8DAPgC;GAC9B,WAAW;GACX,MAAM,EACJ,gBAAgB;IAAE,MAAM;IAAU,KAAK;IAAkB,SAAS,qBAAqB;IAAe,EACvG;GACF,CAAC,CAEU,eAAe,CAAC,KAAK,iBAAiB;GAClD;AAEF,gBAAG,0EAA0E;AAC3E,kEAA8B;GAC5B,mBAAmB;GACnB,QAAQ;GACR,WAAW;GACZ,CAAC,CAAC,CAAC,KAAK,+DAA+D;GACxE;AAEF,gBAAG,0DAA0D;AAC3D,YAAG,QAAQ,kDAAkD,6BAA6B;AAQ1F,gFANiD;GAC/C,eAAe,EAAE,MAAM,UAAU;GACjC,WAAW;GACX,aAAa;GACd,CAAC,CAES,CAAC,KAAK,mEAAmE;GACpF;AAEF,gBAAG,mEAAmE;AACpE,YAAG,QAAQ,iDAAiD,sFAAsF;AAClJ,YAAG,QAAQ,oCAAoC,KAAK;EAEpD,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,mDAAmD;AAC5E,qBAAO,KAAK,gBAAgB,CAAC,KAAK,4DAA4D;GAC9F;AAEF,gBAAG,gEAAgE;AACjE,YAAG,QAAQ,iDAAiD,4CAA4C;AAExG,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC,CAAC,CAAC,aAAa,mCAAmC;GACpD;AAEF,gBAAG,kFAAkF;AACnF,YAAG,QAAQ,iDAAiD,iDAAiD;AAE7G,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC,CAAC,CAAC,mCAAmC;;;;MAIrC;GACF;EACF;qBAEO,iCAAiC;AACxC,gBAAG,uDAAuD;AACxD,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,KAAK;GACd;AAEF,gBAAG,mEAAmE;AACpE,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,KAAK;GACd;AAEF,gBAAG,wEAAwE;AACzE,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,MAAM;GACf;AAEF,gBAAG,uDAAuD;AACxD,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,MAAM;GACf;EACF"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template (FOR package.json FILES, PLEASE EDIT package-template.json)",
   "name": "@hexclave/next",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "repository": "https://github.com/hexclave/hexclave",
   "sideEffects": false,
   "main": "./dist/index.js",
@@ -66,9 +66,9 @@
     "rrweb": "^1.1.3",
     "tsx": "^4.21.0",
     "yup": "^1.7.1",
-    "@hexclave/shared": "1.0.5",
-    "@hexclave/ui": "1.0.5",
-    "@hexclave/sc": "1.0.5"
+    "@hexclave/sc": "1.0.6",
+    "@hexclave/shared": "1.0.6",
+    "@hexclave/ui": "1.0.6"
   },
   "peerDependencies": {
     "@types/react": ">=18.0.0",
@@ -112,10 +112,12 @@
     "typecheck": "tsc --noEmit",
     "clean": "rimraf dist && rimraf node_modules",
     "lint": "eslint --ext .tsx,.ts .",
-    "build": "rimraf dist && pnpm run css && tsdown",
+    "build": "rimraf dist && pnpm run codegen && tsdown",
     "dev": "concurrently -n \"build,codegen\" -k \"tsdown --watch\" \"pnpm run codegen:watch\"",
-    "codegen": "pnpm run css",
-    "codegen:watch": "pnpm run css:watch",
+    "codegen": "pnpm run env && pnpm run css",
+    "codegen:watch": "concurrently -n \"env,css\" -k \"pnpm run env:watch\" \"pnpm run css:watch\"",
+    "env": "tsx ./scripts/generate-env.ts",
+    "env:watch": "chokidar --silent './scripts/generate-env.ts' -c 'pnpm run env' --throttle 2000",
     "css": "pnpm run css-tw && pnpm run css-sc",
     "css:watch": "concurrently -n \"tw,sc\" -k \"pnpm run css-tw:watch\" \"pnpm run css-sc:watch\"",
     "css-tw:watch": "tailwindcss -i ./src/global.css -o ./src/generated/tailwind.css --watch",

package/src/components-page/account-settings/payments/payments-panel.tsx

@@ -12,7 +12,7 @@ import { CardElement, Elements, useElements, useStripe } from "@stripe/react-str
 import { loadStripe } from "@stripe/stripe-js";
 import { useMemo, useState } from "react";
 import { useStackApp } from "../../..";
-import { envVars } from "../../../lib/env";
+import { envVars } from "../../../generated/env";
 import { useTranslation } from "../../../lib/translations";
 import { Section } from "../section";
 import { Result } from "@hexclave/shared/dist/utils/results";
@@ -250,7 +250,7 @@ function RealPaymentsPanel(props: { title?: string, customer: CustomerLike, cust
 
   const stripePromise = useMemo(() => {
     if (!setupIntentStripeAccountId) return null;
-    const publishableKey = envVars.NEXT_PUBLIC_STACK_STRIPE_PUBLISHABLE_KEY;
+    const publishableKey = envVars.HEXCLAVE_STRIPE_PUBLISHABLE_KEY;
     if (!publishableKey) return null;
     return loadStripe(publishableKey, { stripeAccount: setupIntentStripeAccountId });
   }, [setupIntentStripeAccountId]);