@hexclave/next 1.0.63 → 1.0.65

package/dist/components-page/cli-auth-confirm.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-auth-confirm.js","names":["hexclaveAppInternalsSymbol","MessageCard","Typography"],"sources":["../../src/components-page/cli-auth-confirm.tsx"],"sourcesContent":["'use client';\n\n\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n\nimport { runAsynchronouslyWithAlert } from \"@hexclave/shared/dist/utils/promises\";\nimport { Typography } from \"@hexclave/ui\";\nimport { useCallback, useEffect, useRef, useState } from \"react\";\nimport { MessageCard } from \"../components/message-cards/message-card\";\nimport { useTranslation } from \"../lib/translations\";\nimport { hexclaveAppInternalsSymbol } from \"../lib/hexclave-app/common\";\nimport type { StackClientApp } from \"../lib/hexclave-app/apps/interfaces/client-app\";\nimport { useStackApp } from \"../lib/hooks\";\n\nasync function postCliAuthComplete(app: StackClientApp, body: Record<string, unknown>) {\n  return await app[hexclaveAppInternalsSymbol].sendRequest(\"/auth/cli/complete\", {\n    method: \"POST\",\n    headers: { \"Content-Type\": \"application/json\" },\n    body: JSON.stringify(body),\n  });\n}\n\nasync function ensureCliCompleteOk(result: Response) {\n  if (!result.ok) {\n    throw new Error(`Authorization failed: ${result.status} ${await result.text()}`);\n  }\n}\n\nasync function completeCliAuthWithRefreshToken(app: StackClientApp, loginCode: string, refreshToken: string) {\n  const result = await postCliAuthComplete(app, { login_code: loginCode, refresh_token: refreshToken });\n  await ensureCliCompleteOk(result);\n}\n\n// Hexclave rebrand: sessionStorage key — straight rename (per-tab, low TTL).\nconst CLI_AUTH_CONFIRMED_KEY = \"hexclave-cli-auth-confirmed\";\n\nfunction markConfirmed(loginCode: string) {\n  sessionStorage.setItem(CLI_AUTH_CONFIRMED_KEY, loginCode);\n}\n\nfunction isConfirmed(loginCode: string): boolean {\n  return sessionStorage.getItem(CLI_AUTH_CONFIRMED_KEY) === loginCode;\n}\n\nfunction clearConfirmed() {\n  sessionStorage.removeItem(CLI_AUTH_CONFIRMED_KEY);\n}\n\nfunction getError(err: unknown): Error {\n  return err instanceof Error ? err : new Error(String(err));\n}\n\nfunction getObjectField(data: unknown, fieldName: string): unknown {\n  return typeof data === \"object\" && data !== null && fieldName in data\n    ? data[fieldName as keyof typeof data]\n    : undefined;\n}\n\nfunction getStringField(data: unknown, fieldName: string): string | undefined {\n  const value = getObjectField(data, fieldName);\n  return typeof value === \"string\" ? value : undefined;\n}\n\nexport type CliAuthConfirmationStatus =\n  | \"idle\"\n  | \"invalid\"\n  | \"authorizing\"\n  | \"redirecting\"\n  | \"success\"\n  | \"error\";\n\nexport type CliAuthConfirmationState = {\n  status: CliAuthConfirmationStatus,\n  loginCode: string | null,\n  error: Error | null,\n  isLoading: boolean,\n  authorize: () => Promise<void>,\n  retry: () => void,\n};\n\nexport function useCliAuthConfirmation(): CliAuthConfirmationState {\n  const app = useStackApp();\n  const user = app.useUser({ includeRestricted: true });\n  const [status, setStatus] = useState<Exclude<CliAuthConfirmationStatus, \"invalid\">>(\"idle\");\n  const [error, setError] = useState<Error | null>(null);\n  const autoCompleteRef = useRef(false);\n  const authorizeInProgressRef = useRef(false);\n  const [loginCode] = useState(() => {\n    if (typeof window === 'undefined') return null;\n    return new URLSearchParams(window.location.search).get(\"login_code\");\n  });\n  const [confirmed] = useState(() => {\n    if (typeof window === 'undefined') return false;\n    return loginCode != null && isConfirmed(loginCode);\n  });\n\n  const completeWithCurrentUser = useCallback(async () => {\n    if (!loginCode) {\n      throw new Error(\"Missing login code in URL parameters\");\n    }\n    if (!user) {\n      throw new Error(\"Cannot complete CLI authorization without a signed-in user\");\n    }\n    const refreshToken = (await user.currentSession.getTokens()).refreshToken;\n    if (!refreshToken) {\n      throw new Error(\"Could not retrieve session token\");\n    }\n    await completeCliAuthWithRefreshToken(app, loginCode, refreshToken);\n  }, [app, loginCode, user]);\n\n  useEffect(() => {\n    if (!confirmed || !user || autoCompleteRef.current) {\n      return;\n    }\n    autoCompleteRef.current = true;\n    runAsynchronouslyWithAlert(async () => {\n      setStatus(\"authorizing\");\n      try {\n        await completeWithCurrentUser();\n        clearConfirmed();\n        setStatus(\"success\");\n      } catch (err) {\n        setError(getError(err));\n        setStatus(\"error\");\n      }\n    });\n  }, [confirmed, user, completeWithCurrentUser]);\n\n  const authorize = useCallback(async () => {\n    if (authorizeInProgressRef.current) {\n      return;\n    }\n    authorizeInProgressRef.current = true;\n\n    try {\n      if (!loginCode) {\n        setError(new Error(\"Missing login code in URL parameters\"));\n        setStatus(\"error\");\n        return;\n      }\n\n      setError(null);\n      setStatus(\"authorizing\");\n      if (user) {\n        await completeWithCurrentUser();\n        clearConfirmed();\n        setStatus(\"success\");\n        return;\n      }\n\n      const checkResult = await postCliAuthComplete(app, { login_code: loginCode, mode: \"check\" });\n      if (!checkResult.ok) {\n        throw new Error(`Failed to verify login code: ${checkResult.status} ${await checkResult.text()}`);\n      }\n      const checkData: unknown = await checkResult.json();\n      const cliSessionState = getStringField(checkData, \"cli_session_state\") ?? null;\n\n      if (cliSessionState === \"anonymous\") {\n        const claimResult = await postCliAuthComplete(app, { login_code: loginCode, mode: \"claim-anon-session\" });\n\n        if (!claimResult.ok) {\n          throw new Error(`Failed to claim anonymous session: ${claimResult.status} ${await claimResult.text()}`);\n        }\n\n        const tokens: unknown = await claimResult.json();\n        const accessToken = getStringField(tokens, \"access_token\");\n        const refreshToken = getStringField(tokens, \"refresh_token\");\n        if (!accessToken || !refreshToken) {\n          throw new Error(\"Anonymous CLI session claim did not return tokens\");\n        }\n        await app[hexclaveAppInternalsSymbol].signInWithTokens({\n          accessToken,\n          refreshToken,\n        });\n        markConfirmed(loginCode);\n        setStatus(\"redirecting\");\n        await app.redirectToSignUp({ replace: true });\n        return;\n      }\n\n      markConfirmed(loginCode);\n      setStatus(\"redirecting\");\n      await app.redirectToSignIn({ replace: true });\n    } catch (err) {\n      setError(getError(err));\n      setStatus(\"error\");\n    } finally {\n      authorizeInProgressRef.current = false;\n    }\n  }, [app, completeWithCurrentUser, loginCode, user]);\n\n  const retry = useCallback(() => {\n    setError(null);\n    autoCompleteRef.current = false;\n    setStatus(\"idle\");\n  }, []);\n\n  const visibleStatus = loginCode == null ? \"invalid\" : status;\n  return {\n    status: visibleStatus,\n    loginCode,\n    error,\n    isLoading: visibleStatus === \"authorizing\" || visibleStatus === \"redirecting\",\n    authorize,\n    retry,\n  };\n}\n\nexport function CliAuthConfirmation({ fullPage = true }: { fullPage?: boolean }) {\n  const { t } = useTranslation();\n  const cliAuth = useCliAuthConfirmation();\n\n  if (cliAuth.status === \"success\") {\n    return (\n      <MessageCard title={t(\"CLI Authorization Successful\")} fullPage={fullPage}>\n        <Typography>\n          {t(\"The CLI application has been authorized successfully. You can close this window and return to the command line.\")}\n        </Typography>\n      </MessageCard>\n    );\n  }\n\n  if (cliAuth.status === \"error\") {\n    return (\n      <MessageCard\n        title={t(\"Authorization Failed\")}\n        fullPage={fullPage}\n        primaryButtonText={t(\"Try Again\")}\n        primaryAction={cliAuth.retry}\n      >\n        <Typography className=\"text-red-600\">\n          {t(\"Failed to authorize the CLI application:\")}\n        </Typography>\n        <Typography className=\"text-red-600\">\n          {cliAuth.error?.message}\n        </Typography>\n      </MessageCard>\n    );\n  }\n\n  if (cliAuth.status === \"invalid\") {\n    return (\n      <MessageCard title={t(\"Invalid CLI Authorization Link\")} fullPage={fullPage}>\n        <Typography className=\"text-red-600\">\n          {t(\"This CLI authorization link is missing a login code. Please return to the command line and start the login process again.\")}\n        </Typography>\n      </MessageCard>\n    );\n  }\n\n  if (cliAuth.status === \"authorizing\" || cliAuth.status === \"redirecting\") {\n    return (\n      <MessageCard title={t(\"Completing Authorization...\")} fullPage={fullPage}>\n        <Typography>\n          {t(\"Finishing up the CLI authorization...\")}\n        </Typography>\n      </MessageCard>\n    );\n  }\n\n  return (\n    <MessageCard\n      title={t(\"Authorize CLI Application\")}\n      fullPage={fullPage}\n      primaryButtonText={cliAuth.isLoading ? t(\"Authorizing...\") : t(\"Authorize\")}\n      primaryAction={cliAuth.authorize}\n    >\n      <Typography>\n        {t(\"A command line application is requesting access to your account. Click the button below to authorize it.\")}\n      </Typography>\n      <Typography variant=\"destructive\">\n        {t(\"WARNING: Make sure you trust the command line application, as it will gain access to your account. If you did not initiate this request, you can close this page and ignore it. We will never send you this link via email or any other means.\")}\n      </Typography>\n    </MessageCard>\n  );\n}\n"],"mappings":";;;;;;;;;;;AAgBA,eAAe,oBAAoB,KAAqB,MAA+B;CACrF,OAAO,MAAM,IAAIA,8BAAAA,2BAA2B,CAAC,YAAY,sBAAsB;EAC7E,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,MAAM,KAAK,UAAU,IAAI;CAC3B,CAAC;AACH;AAEA,eAAe,oBAAoB,QAAkB;CACnD,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,MAAM,yBAAyB,OAAO,OAAO,GAAG,MAAM,OAAO,KAAK,GAAG;AAEnF;AAEA,eAAe,gCAAgC,KAAqB,WAAmB,cAAsB;CAE3G,MAAM,oBAAoB,MADL,oBAAoB,KAAK;EAAE,YAAY;EAAW,eAAe;CAAa,CAAC,CACpE;AAClC;AAGA,MAAM,yBAAyB;AAE/B,SAAS,cAAc,WAAmB;CACxC,eAAe,QAAQ,wBAAwB,SAAS;AAC1D;AAEA,SAAS,YAAY,WAA4B;CAC/C,OAAO,eAAe,QAAQ,sBAAsB,MAAM;AAC5D;AAEA,SAAS,iBAAiB;CACxB,eAAe,WAAW,sBAAsB;AAClD;AAEA,SAAS,SAAS,KAAqB;CACrC,OAAO,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAC3D;AAEA,SAAS,eAAe,MAAe,WAA4B;CACjE,OAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,aAAa,OAC7D,KAAK,aACL,KAAA;AACN;AAEA,SAAS,eAAe,MAAe,WAAuC;CAC5E,MAAM,QAAQ,eAAe,MAAM,SAAS;CAC5C,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAmBA,SAAgB,yBAAmD;CACjE,MAAM,OAAA,GAAA,gBAAA,YAAA,CAAkB;CACxB,MAAM,OAAO,IAAI,QAAQ,EAAE,mBAAmB,KAAK,CAAC;CACpD,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAAqE,MAAM;CAC1F,MAAM,CAAC,OAAO,aAAA,GAAA,MAAA,SAAA,CAAmC,IAAI;CACrD,MAAM,mBAAA,GAAA,MAAA,OAAA,CAAyB,KAAK;CACpC,MAAM,0BAAA,GAAA,MAAA,OAAA,CAAgC,KAAK;CAC3C,MAAM,CAAC,cAAA,GAAA,MAAA,SAAA,OAA4B;EACjC,IAAI,OAAO,WAAW,aAAa,OAAO;EAC1C,OAAO,IAAI,gBAAgB,OAAO,SAAS,MAAM,CAAC,CAAC,IAAI,YAAY;CACrE,CAAC;CACD,MAAM,CAAC,cAAA,GAAA,MAAA,SAAA,OAA4B;EACjC,IAAI,OAAO,WAAW,aAAa,OAAO;EAC1C,OAAO,aAAa,QAAQ,YAAY,SAAS;CACnD,CAAC;CAED,MAAM,2BAAA,GAAA,MAAA,YAAA,CAAsC,YAAY;EACtD,IAAI,CAAC,WACH,MAAM,IAAI,MAAM,sCAAsC;EAExD,IAAI,CAAC,MACH,MAAM,IAAI,MAAM,4DAA4D;EAE9E,MAAM,gBAAgB,MAAM,KAAK,eAAe,UAAU,EAAA,CAAG;EAC7D,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,kCAAkC;EAEpD,MAAM,gCAAgC,KAAK,WAAW,YAAY;CACpE,GAAG;EAAC;EAAK;EAAW;CAAI,CAAC;CAEzB,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,IAAI,CAAC,aAAa,CAAC,QAAQ,gBAAgB,SACzC;EAEF,gBAAgB,UAAU;EAC1B,CAAA,GAAA,qCAAA,2BAAA,CAA2B,YAAY;GACrC,UAAU,aAAa;GACvB,IAAI;IACF,MAAM,wBAAwB;IAC9B,eAAe;IACf,UAAU,SAAS;GACrB,SAAS,KAAK;IACZ,SAAS,SAAS,GAAG,CAAC;IACtB,UAAU,OAAO;GACnB;EACF,CAAC;CACH,GAAG;EAAC;EAAW;EAAM;CAAuB,CAAC;CAE7C,MAAM,aAAA,GAAA,MAAA,YAAA,CAAwB,YAAY;EACxC,IAAI,uBAAuB,SACzB;EAEF,uBAAuB,UAAU;EAEjC,IAAI;GACF,IAAI,CAAC,WAAW;IACd,yBAAS,IAAI,MAAM,sCAAsC,CAAC;IAC1D,UAAU,OAAO;IACjB;GACF;GAEA,SAAS,IAAI;GACb,UAAU,aAAa;GACvB,IAAI,MAAM;IACR,MAAM,wBAAwB;IAC9B,eAAe;IACf,UAAU,SAAS;IACnB;GACF;GAEA,MAAM,cAAc,MAAM,oBAAoB,KAAK;IAAE,YAAY;IAAW,MAAM;GAAQ,CAAC;GAC3F,IAAI,CAAC,YAAY,IACf,MAAM,IAAI,MAAM,gCAAgC,YAAY,OAAO,GAAG,MAAM,YAAY,KAAK,GAAG;GAKlG,KAFwB,eAAe,MADN,YAAY,KAAK,GACA,mBAAmB,KAAK,UAElD,aAAa;IACnC,MAAM,cAAc,MAAM,oBAAoB,KAAK;KAAE,YAAY;KAAW,MAAM;IAAqB,CAAC;IAExG,IAAI,CAAC,YAAY,IACf,MAAM,IAAI,MAAM,sCAAsC,YAAY,OAAO,GAAG,MAAM,YAAY,KAAK,GAAG;IAGxG,MAAM,SAAkB,MAAM,YAAY,KAAK;IAC/C,MAAM,cAAc,eAAe,QAAQ,cAAc;IACzD,MAAM,eAAe,eAAe,QAAQ,eAAe;IAC3D,IAAI,CAAC,eAAe,CAAC,cACnB,MAAM,IAAI,MAAM,mDAAmD;IAErE,MAAM,IAAIA,8BAAAA,2BAA2B,CAAC,iBAAiB;KACrD;KACA;IACF,CAAC;IACD,cAAc,SAAS;IACvB,UAAU,aAAa;IACvB,MAAM,IAAI,iBAAiB,EAAE,SAAS,KAAK,CAAC;IAC5C;GACF;GAEA,cAAc,SAAS;GACvB,UAAU,aAAa;GACvB,MAAM,IAAI,iBAAiB,EAAE,SAAS,KAAK,CAAC;EAC9C,SAAS,KAAK;GACZ,SAAS,SAAS,GAAG,CAAC;GACtB,UAAU,OAAO;EACnB,UAAU;GACR,uBAAuB,UAAU;EACnC;CACF,GAAG;EAAC;EAAK;EAAyB;EAAW;CAAI,CAAC;CAElD,MAAM,SAAA,GAAA,MAAA,YAAA,OAA0B;EAC9B,SAAS,IAAI;EACb,gBAAgB,UAAU;EAC1B,UAAU,MAAM;CAClB,GAAG,CAAC,CAAC;CAEL,MAAM,gBAAgB,aAAa,OAAO,YAAY;CACtD,OAAO;EACL,QAAQ;EACR;EACA;EACA,WAAW,kBAAkB,iBAAiB,kBAAkB;EAChE;EACA;CACF;AACF;AAEA,SAAgB,oBAAoB,EAAE,WAAW,QAAgC;CAC/E,MAAM,EAAE,OAAA,GAAA,uBAAA,eAAA,CAAqB;CAC7B,MAAM,UAAU,uBAAuB;CAEvC,IAAI,QAAQ,WAAW,WACrB,OACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,4CAAAA,aAAD;EAAa,OAAO,EAAE,8BAA8B;EAAa;YAC/D,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD,EAAA,UACG,EAAE,iHAAiH,EAC1G,CAAA;CACD,CAAA;CAIjB,IAAI,QAAQ,WAAW,SACrB,OACE,iBAAA,GAAA,kBAAA,KAAA,CAACD,4CAAAA,aAAD;EACE,OAAO,EAAE,sBAAsB;EACrB;EACV,mBAAmB,EAAE,WAAW;EAChC,eAAe,QAAQ;YAJzB,CAME,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD;GAAY,WAAU;aACnB,EAAE,0CAA0C;EACnC,CAAA,GACZ,iBAAA,GAAA,kBAAA,IAAA,CAACA,aAAAA,YAAD;GAAY,WAAU;aACnB,QAAQ,OAAO;EACN,CAAA,CACD;;CAIjB,IAAI,QAAQ,WAAW,WACrB,OACE,iBAAA,GAAA,kBAAA,IAAA,CAACD,4CAAAA,aAAD;EAAa,OAAO,EAAE,gCAAgC;EAAa;YACjE,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD;GAAY,WAAU;aACnB,EAAE,2HAA2H;EACpH,CAAA;CACD,CAAA;CAIjB,IAAI,QAAQ,WAAW,iBAAiB,QAAQ,WAAW,eACzD,OACE,iBAAA,GAAA,kBAAA,IAAA,CAACD,4CAAAA,aAAD;EAAa,OAAO,EAAE,6BAA6B;EAAa;YAC9D,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD,EAAA,UACG,EAAE,uCAAuC,EAChC,CAAA;CACD,CAAA;CAIjB,OACE,iBAAA,GAAA,kBAAA,KAAA,CAACD,4CAAAA,aAAD;EACE,OAAO,EAAE,2BAA2B;EAC1B;EACV,mBAAmB,QAAQ,YAAY,EAAE,gBAAgB,IAAI,EAAE,WAAW;EAC1E,eAAe,QAAQ;YAJzB,CAME,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD,EAAA,UACG,EAAE,0GAA0G,EACnG,CAAA,GACZ,iBAAA,GAAA,kBAAA,IAAA,CAACA,aAAAA,YAAD;GAAY,SAAQ;aACjB,EAAE,gPAAgP;EACzO,CAAA,CACD;;AAEjB"}
+{"version":3,"file":"cli-auth-confirm.js","names":["hexclaveAppInternalsSymbol","MessageCard","Typography"],"sources":["../../src/components-page/cli-auth-confirm.tsx"],"sourcesContent":["'use client';\n\n\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n\nimport { runAsynchronouslyWithAlert } from \"@hexclave/shared/dist/utils/promises\";\nimport { Typography } from \"@hexclave/ui\";\nimport { useCallback, useEffect, useRef, useState } from \"react\";\nimport { MessageCard } from \"../components/message-cards/message-card\";\nimport { useTranslation } from \"../lib/translations\";\nimport { hexclaveAppInternalsSymbol } from \"../lib/hexclave-app/common\";\nimport type { StackClientApp } from \"../lib/hexclave-app/apps/interfaces/client-app\";\nimport { useStackApp } from \"../lib/hooks\";\n\nasync function postCliAuthComplete(app: StackClientApp, body: Record<string, unknown>) {\n  return await app[hexclaveAppInternalsSymbol].sendRequest(\"/auth/cli/complete\", {\n    method: \"POST\",\n    headers: { \"Content-Type\": \"application/json\" },\n    body: JSON.stringify(body),\n  });\n}\n\nasync function ensureCliCompleteOk(result: Response) {\n  if (!result.ok) {\n    throw new Error(`Authorization failed: ${result.status} ${await result.text()}`);\n  }\n}\n\nasync function completeCliAuthWithRefreshToken(app: StackClientApp, loginCode: string, refreshToken: string) {\n  const result = await postCliAuthComplete(app, { login_code: loginCode, refresh_token: refreshToken });\n  await ensureCliCompleteOk(result);\n}\n\n// Hexclave rebrand: sessionStorage key — straight rename (per-tab, low TTL).\nconst CLI_AUTH_CONFIRMED_KEY = \"hexclave-cli-auth-confirmed\";\n\nfunction markConfirmed(loginCode: string) {\n  sessionStorage.setItem(CLI_AUTH_CONFIRMED_KEY, loginCode);\n}\n\nfunction isConfirmed(loginCode: string): boolean {\n  return sessionStorage.getItem(CLI_AUTH_CONFIRMED_KEY) === loginCode;\n}\n\nfunction clearConfirmed() {\n  sessionStorage.removeItem(CLI_AUTH_CONFIRMED_KEY);\n}\n\nfunction getError(err: unknown): Error {\n  return err instanceof Error ? err : new Error(String(err));\n}\n\nfunction getObjectField(data: unknown, fieldName: string): unknown {\n  return typeof data === \"object\" && data !== null && fieldName in data\n    ? data[fieldName as keyof typeof data]\n    : undefined;\n}\n\nfunction getStringField(data: unknown, fieldName: string): string | undefined {\n  const value = getObjectField(data, fieldName);\n  return typeof value === \"string\" ? value : undefined;\n}\n\nexport type CliAuthConfirmationStatus =\n  | \"idle\"\n  | \"invalid\"\n  | \"authorizing\"\n  | \"redirecting\"\n  | \"success\"\n  | \"error\";\n\nexport type CliAuthConfirmationState = {\n  status: CliAuthConfirmationStatus,\n  loginCode: string | null,\n  error: Error | null,\n  isLoading: boolean,\n  authorize: () => Promise<void>,\n  retry: () => void,\n};\n\nexport function useCliAuthConfirmation(): CliAuthConfirmationState {\n  const app = useStackApp();\n  const user = app.useUser({ includeRestricted: true });\n  const [status, setStatus] = useState<Exclude<CliAuthConfirmationStatus, \"invalid\">>(\"idle\");\n  const [error, setError] = useState<Error | null>(null);\n  const autoCompleteRef = useRef(false);\n  const authorizeInProgressRef = useRef(false);\n  const [loginCode] = useState(() => {\n    if (typeof window === 'undefined') return null;\n    return new URLSearchParams(window.location.search).get(\"login_code\");\n  });\n  const [confirmed] = useState(() => {\n    if (typeof window === 'undefined') return false;\n    return loginCode != null && isConfirmed(loginCode);\n  });\n\n  const completeWithCurrentUser = useCallback(async () => {\n    if (!loginCode) {\n      throw new Error(\"Missing login code in URL parameters\");\n    }\n    if (!user) {\n      throw new Error(\"Cannot complete CLI authorization without a signed-in user\");\n    }\n    const refreshToken = (await user.currentSession.getTokens()).refreshToken;\n    if (!refreshToken) {\n      throw new Error(\"Could not retrieve session token\");\n    }\n    await completeCliAuthWithRefreshToken(app, loginCode, refreshToken);\n  }, [app, loginCode, user]);\n\n  useEffect(() => {\n    if (!confirmed || !user || user.isRestricted || autoCompleteRef.current) {\n      return;\n    }\n    autoCompleteRef.current = true;\n    runAsynchronouslyWithAlert(async () => {\n      setStatus(\"authorizing\");\n      try {\n        await completeWithCurrentUser();\n        clearConfirmed();\n        setStatus(\"success\");\n      } catch (err) {\n        setError(getError(err));\n        setStatus(\"error\");\n      }\n    });\n  }, [confirmed, user, completeWithCurrentUser]);\n\n  const authorize = useCallback(async () => {\n    if (authorizeInProgressRef.current) {\n      return;\n    }\n    authorizeInProgressRef.current = true;\n\n    try {\n      if (!loginCode) {\n        setError(new Error(\"Missing login code in URL parameters\"));\n        setStatus(\"error\");\n        return;\n      }\n\n      setError(null);\n      setStatus(\"authorizing\");\n      if (user) {\n        if (user.isRestricted) {\n          markConfirmed(loginCode);\n          setStatus(\"redirecting\");\n          await (\n            user.isAnonymous\n              ? app.redirectToSignUp({ replace: true })\n              : app.redirectToOnboarding({ replace: true })\n          );\n          return;\n        }\n        await completeWithCurrentUser();\n        clearConfirmed();\n        setStatus(\"success\");\n        return;\n      }\n\n      const checkResult = await postCliAuthComplete(app, { login_code: loginCode, mode: \"check\" });\n      if (!checkResult.ok) {\n        throw new Error(`Failed to verify login code: ${checkResult.status} ${await checkResult.text()}`);\n      }\n      const checkData: unknown = await checkResult.json();\n      const cliSessionState = getStringField(checkData, \"cli_session_state\") ?? null;\n\n      if (cliSessionState === \"anonymous\") {\n        const claimResult = await postCliAuthComplete(app, { login_code: loginCode, mode: \"claim-anon-session\" });\n\n        if (!claimResult.ok) {\n          throw new Error(`Failed to claim anonymous session: ${claimResult.status} ${await claimResult.text()}`);\n        }\n\n        const tokens: unknown = await claimResult.json();\n        const accessToken = getStringField(tokens, \"access_token\");\n        const refreshToken = getStringField(tokens, \"refresh_token\");\n        if (!accessToken || !refreshToken) {\n          throw new Error(\"Anonymous CLI session claim did not return tokens\");\n        }\n        await app[hexclaveAppInternalsSymbol].signInWithTokens({\n          accessToken,\n          refreshToken,\n        });\n        markConfirmed(loginCode);\n        setStatus(\"redirecting\");\n        await app.redirectToSignUp({ replace: true });\n        return;\n      }\n\n      markConfirmed(loginCode);\n      setStatus(\"redirecting\");\n      await app.redirectToSignIn({ replace: true });\n    } catch (err) {\n      setError(getError(err));\n      setStatus(\"error\");\n    } finally {\n      authorizeInProgressRef.current = false;\n    }\n  }, [app, completeWithCurrentUser, loginCode, user]);\n\n  const retry = useCallback(() => {\n    setError(null);\n    autoCompleteRef.current = false;\n    setStatus(\"idle\");\n  }, []);\n\n  const visibleStatus = loginCode == null ? \"invalid\" : status;\n  return {\n    status: visibleStatus,\n    loginCode,\n    error,\n    isLoading: visibleStatus === \"authorizing\" || visibleStatus === \"redirecting\",\n    authorize,\n    retry,\n  };\n}\n\nexport function CliAuthConfirmation({ fullPage = true }: { fullPage?: boolean }) {\n  const { t } = useTranslation();\n  const cliAuth = useCliAuthConfirmation();\n\n  if (cliAuth.status === \"success\") {\n    return (\n      <MessageCard title={t(\"CLI Authorization Successful\")} fullPage={fullPage}>\n        <Typography>\n          {t(\"The CLI application has been authorized successfully. You can close this window and return to the command line.\")}\n        </Typography>\n      </MessageCard>\n    );\n  }\n\n  if (cliAuth.status === \"error\") {\n    return (\n      <MessageCard\n        title={t(\"Authorization Failed\")}\n        fullPage={fullPage}\n        primaryButtonText={t(\"Try Again\")}\n        primaryAction={cliAuth.retry}\n      >\n        <Typography className=\"text-red-600\">\n          {t(\"Failed to authorize the CLI application:\")}\n        </Typography>\n        <Typography className=\"text-red-600\">\n          {cliAuth.error?.message}\n        </Typography>\n      </MessageCard>\n    );\n  }\n\n  if (cliAuth.status === \"invalid\") {\n    return (\n      <MessageCard title={t(\"Invalid CLI Authorization Link\")} fullPage={fullPage}>\n        <Typography className=\"text-red-600\">\n          {t(\"This CLI authorization link is missing a login code. Please return to the command line and start the login process again.\")}\n        </Typography>\n      </MessageCard>\n    );\n  }\n\n  if (cliAuth.status === \"authorizing\" || cliAuth.status === \"redirecting\") {\n    return (\n      <MessageCard title={t(\"Completing Authorization...\")} fullPage={fullPage}>\n        <Typography>\n          {t(\"Finishing up the CLI authorization...\")}\n        </Typography>\n      </MessageCard>\n    );\n  }\n\n  return (\n    <MessageCard\n      title={t(\"Authorize CLI Application\")}\n      fullPage={fullPage}\n      primaryButtonText={cliAuth.isLoading ? t(\"Authorizing...\") : t(\"Authorize\")}\n      primaryAction={cliAuth.authorize}\n    >\n      <Typography>\n        {t(\"A command line application is requesting access to your account. Click the button below to authorize it.\")}\n      </Typography>\n      <Typography variant=\"destructive\">\n        {t(\"WARNING: Make sure you trust the command line application, as it will gain access to your account. If you did not initiate this request, you can close this page and ignore it. We will never send you this link via email or any other means.\")}\n      </Typography>\n    </MessageCard>\n  );\n}\n"],"mappings":";;;;;;;;;;;AAgBA,eAAe,oBAAoB,KAAqB,MAA+B;CACrF,OAAO,MAAM,IAAIA,8BAAAA,2BAA2B,CAAC,YAAY,sBAAsB;EAC7E,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,MAAM,KAAK,UAAU,IAAI;CAC3B,CAAC;AACH;AAEA,eAAe,oBAAoB,QAAkB;CACnD,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,MAAM,yBAAyB,OAAO,OAAO,GAAG,MAAM,OAAO,KAAK,GAAG;AAEnF;AAEA,eAAe,gCAAgC,KAAqB,WAAmB,cAAsB;CAE3G,MAAM,oBAAoB,MADL,oBAAoB,KAAK;EAAE,YAAY;EAAW,eAAe;CAAa,CAAC,CACpE;AAClC;AAGA,MAAM,yBAAyB;AAE/B,SAAS,cAAc,WAAmB;CACxC,eAAe,QAAQ,wBAAwB,SAAS;AAC1D;AAEA,SAAS,YAAY,WAA4B;CAC/C,OAAO,eAAe,QAAQ,sBAAsB,MAAM;AAC5D;AAEA,SAAS,iBAAiB;CACxB,eAAe,WAAW,sBAAsB;AAClD;AAEA,SAAS,SAAS,KAAqB;CACrC,OAAO,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAC3D;AAEA,SAAS,eAAe,MAAe,WAA4B;CACjE,OAAO,OAAO,SAAS,YAAY,SAAS,QAAQ,aAAa,OAC7D,KAAK,aACL,KAAA;AACN;AAEA,SAAS,eAAe,MAAe,WAAuC;CAC5E,MAAM,QAAQ,eAAe,MAAM,SAAS;CAC5C,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAmBA,SAAgB,yBAAmD;CACjE,MAAM,OAAA,GAAA,gBAAA,YAAA,CAAkB;CACxB,MAAM,OAAO,IAAI,QAAQ,EAAE,mBAAmB,KAAK,CAAC;CACpD,MAAM,CAAC,QAAQ,cAAA,GAAA,MAAA,SAAA,CAAqE,MAAM;CAC1F,MAAM,CAAC,OAAO,aAAA,GAAA,MAAA,SAAA,CAAmC,IAAI;CACrD,MAAM,mBAAA,GAAA,MAAA,OAAA,CAAyB,KAAK;CACpC,MAAM,0BAAA,GAAA,MAAA,OAAA,CAAgC,KAAK;CAC3C,MAAM,CAAC,cAAA,GAAA,MAAA,SAAA,OAA4B;EACjC,IAAI,OAAO,WAAW,aAAa,OAAO;EAC1C,OAAO,IAAI,gBAAgB,OAAO,SAAS,MAAM,CAAC,CAAC,IAAI,YAAY;CACrE,CAAC;CACD,MAAM,CAAC,cAAA,GAAA,MAAA,SAAA,OAA4B;EACjC,IAAI,OAAO,WAAW,aAAa,OAAO;EAC1C,OAAO,aAAa,QAAQ,YAAY,SAAS;CACnD,CAAC;CAED,MAAM,2BAAA,GAAA,MAAA,YAAA,CAAsC,YAAY;EACtD,IAAI,CAAC,WACH,MAAM,IAAI,MAAM,sCAAsC;EAExD,IAAI,CAAC,MACH,MAAM,IAAI,MAAM,4DAA4D;EAE9E,MAAM,gBAAgB,MAAM,KAAK,eAAe,UAAU,EAAA,CAAG;EAC7D,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,kCAAkC;EAEpD,MAAM,gCAAgC,KAAK,WAAW,YAAY;CACpE,GAAG;EAAC;EAAK;EAAW;CAAI,CAAC;CAEzB,CAAA,GAAA,MAAA,UAAA,OAAgB;EACd,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,gBAAgB,gBAAgB,SAC9D;EAEF,gBAAgB,UAAU;EAC1B,CAAA,GAAA,qCAAA,2BAAA,CAA2B,YAAY;GACrC,UAAU,aAAa;GACvB,IAAI;IACF,MAAM,wBAAwB;IAC9B,eAAe;IACf,UAAU,SAAS;GACrB,SAAS,KAAK;IACZ,SAAS,SAAS,GAAG,CAAC;IACtB,UAAU,OAAO;GACnB;EACF,CAAC;CACH,GAAG;EAAC;EAAW;EAAM;CAAuB,CAAC;CAE7C,MAAM,aAAA,GAAA,MAAA,YAAA,CAAwB,YAAY;EACxC,IAAI,uBAAuB,SACzB;EAEF,uBAAuB,UAAU;EAEjC,IAAI;GACF,IAAI,CAAC,WAAW;IACd,yBAAS,IAAI,MAAM,sCAAsC,CAAC;IAC1D,UAAU,OAAO;IACjB;GACF;GAEA,SAAS,IAAI;GACb,UAAU,aAAa;GACvB,IAAI,MAAM;IACR,IAAI,KAAK,cAAc;KACrB,cAAc,SAAS;KACvB,UAAU,aAAa;KACvB,OACE,KAAK,cACD,IAAI,iBAAiB,EAAE,SAAS,KAAK,CAAC,IACtC,IAAI,qBAAqB,EAAE,SAAS,KAAK,CAAC;KAEhD;IACF;IACA,MAAM,wBAAwB;IAC9B,eAAe;IACf,UAAU,SAAS;IACnB;GACF;GAEA,MAAM,cAAc,MAAM,oBAAoB,KAAK;IAAE,YAAY;IAAW,MAAM;GAAQ,CAAC;GAC3F,IAAI,CAAC,YAAY,IACf,MAAM,IAAI,MAAM,gCAAgC,YAAY,OAAO,GAAG,MAAM,YAAY,KAAK,GAAG;GAKlG,KAFwB,eAAe,MADN,YAAY,KAAK,GACA,mBAAmB,KAAK,UAElD,aAAa;IACnC,MAAM,cAAc,MAAM,oBAAoB,KAAK;KAAE,YAAY;KAAW,MAAM;IAAqB,CAAC;IAExG,IAAI,CAAC,YAAY,IACf,MAAM,IAAI,MAAM,sCAAsC,YAAY,OAAO,GAAG,MAAM,YAAY,KAAK,GAAG;IAGxG,MAAM,SAAkB,MAAM,YAAY,KAAK;IAC/C,MAAM,cAAc,eAAe,QAAQ,cAAc;IACzD,MAAM,eAAe,eAAe,QAAQ,eAAe;IAC3D,IAAI,CAAC,eAAe,CAAC,cACnB,MAAM,IAAI,MAAM,mDAAmD;IAErE,MAAM,IAAIA,8BAAAA,2BAA2B,CAAC,iBAAiB;KACrD;KACA;IACF,CAAC;IACD,cAAc,SAAS;IACvB,UAAU,aAAa;IACvB,MAAM,IAAI,iBAAiB,EAAE,SAAS,KAAK,CAAC;IAC5C;GACF;GAEA,cAAc,SAAS;GACvB,UAAU,aAAa;GACvB,MAAM,IAAI,iBAAiB,EAAE,SAAS,KAAK,CAAC;EAC9C,SAAS,KAAK;GACZ,SAAS,SAAS,GAAG,CAAC;GACtB,UAAU,OAAO;EACnB,UAAU;GACR,uBAAuB,UAAU;EACnC;CACF,GAAG;EAAC;EAAK;EAAyB;EAAW;CAAI,CAAC;CAElD,MAAM,SAAA,GAAA,MAAA,YAAA,OAA0B;EAC9B,SAAS,IAAI;EACb,gBAAgB,UAAU;EAC1B,UAAU,MAAM;CAClB,GAAG,CAAC,CAAC;CAEL,MAAM,gBAAgB,aAAa,OAAO,YAAY;CACtD,OAAO;EACL,QAAQ;EACR;EACA;EACA,WAAW,kBAAkB,iBAAiB,kBAAkB;EAChE;EACA;CACF;AACF;AAEA,SAAgB,oBAAoB,EAAE,WAAW,QAAgC;CAC/E,MAAM,EAAE,OAAA,GAAA,uBAAA,eAAA,CAAqB;CAC7B,MAAM,UAAU,uBAAuB;CAEvC,IAAI,QAAQ,WAAW,WACrB,OACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,4CAAAA,aAAD;EAAa,OAAO,EAAE,8BAA8B;EAAa;YAC/D,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD,EAAA,UACG,EAAE,iHAAiH,EAC1G,CAAA;CACD,CAAA;CAIjB,IAAI,QAAQ,WAAW,SACrB,OACE,iBAAA,GAAA,kBAAA,KAAA,CAACD,4CAAAA,aAAD;EACE,OAAO,EAAE,sBAAsB;EACrB;EACV,mBAAmB,EAAE,WAAW;EAChC,eAAe,QAAQ;YAJzB,CAME,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD;GAAY,WAAU;aACnB,EAAE,0CAA0C;EACnC,CAAA,GACZ,iBAAA,GAAA,kBAAA,IAAA,CAACA,aAAAA,YAAD;GAAY,WAAU;aACnB,QAAQ,OAAO;EACN,CAAA,CACD;;CAIjB,IAAI,QAAQ,WAAW,WACrB,OACE,iBAAA,GAAA,kBAAA,IAAA,CAACD,4CAAAA,aAAD;EAAa,OAAO,EAAE,gCAAgC;EAAa;YACjE,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD;GAAY,WAAU;aACnB,EAAE,2HAA2H;EACpH,CAAA;CACD,CAAA;CAIjB,IAAI,QAAQ,WAAW,iBAAiB,QAAQ,WAAW,eACzD,OACE,iBAAA,GAAA,kBAAA,IAAA,CAACD,4CAAAA,aAAD;EAAa,OAAO,EAAE,6BAA6B;EAAa;YAC9D,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD,EAAA,UACG,EAAE,uCAAuC,EAChC,CAAA;CACD,CAAA;CAIjB,OACE,iBAAA,GAAA,kBAAA,KAAA,CAACD,4CAAAA,aAAD;EACE,OAAO,EAAE,2BAA2B;EAC1B;EACV,mBAAmB,QAAQ,YAAY,EAAE,gBAAgB,IAAI,EAAE,WAAW;EAC1E,eAAe,QAAQ;YAJzB,CAME,iBAAA,GAAA,kBAAA,IAAA,CAACC,aAAAA,YAAD,EAAA,UACG,EAAE,0GAA0G,EACnG,CAAA,GACZ,iBAAA,GAAA,kBAAA,IAAA,CAACA,aAAAA,YAAD;GAAY,SAAQ;aACjB,EAAE,gPAAgP;EACzO,CAAA,CACD;;AAEjB"}

package/dist/components-page/cli-auth-confirm.test.js

@@ -1,9 +1,9 @@
 const require_rolldown_runtime = require("../rolldown-runtime-D6vf50IK.js");
 let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
+let ___lib_hexclave_app_common_js = require("../lib/hexclave-app/common.js");
 let react = require("react");
 react = require_rolldown_runtime.__toESM(react);
 let react_jsx_runtime = require("react/jsx-runtime");
-let ___lib_hexclave_app_common_js = require("../lib/hexclave-app/common.js");
 let react_dom_client = require("react-dom/client");
 let vitest = require("vitest");
 let ___providers_hexclave_context_js = require("../providers/hexclave-context.js");
@@ -22,6 +22,7 @@ function createAppTestDouble(options) {
 		useUser: () => options.user,
 		redirectToSignIn: options.redirectToSignIn ?? vitest.vi.fn(async () => {}),
 		redirectToSignUp: options.redirectToSignUp ?? vitest.vi.fn(async () => {}),
+		redirectToOnboarding: options.redirectToOnboarding ?? vitest.vi.fn(async () => {}),
 		[___lib_hexclave_app_common_js.hexclaveAppInternalsSymbol]: {
 			sendRequest: options.sendRequest,
 			signInWithTokens: options.signInWithTokens ?? vitest.vi.fn(async () => {})
@@ -85,6 +86,7 @@ function getButton(label) {
 		root = null;
 		container = null;
 		vitest.vi.restoreAllMocks();
+		sessionStorage.clear();
 		window.history.replaceState({}, "", "/");
 		Reflect.set(globalThis, "IS_REACT_ACT_ENVIRONMENT", previousActEnvironment);
 	});
@@ -110,6 +112,46 @@ function getButton(label) {
       }
     `);
 	});
+	(0, vitest.it)("redirects restricted users to onboarding without completing CLI auth", async () => {
+		window.history.replaceState({}, "", "/handler/cli-auth-confirm?login_code=login-code");
+		const redirectToOnboarding = vitest.vi.fn(async (_options) => {});
+		const sendRequest = vitest.vi.fn(async (_path, _requestOptions) => new Response(null, { status: 200 }));
+		await renderWithApp(createAppTestDouble({
+			user: {
+				isRestricted: true,
+				isAnonymous: false,
+				currentSession: { getTokens: vitest.vi.fn(async () => ({ refreshToken: "restricted-refresh-token" })) }
+			},
+			sendRequest,
+			redirectToOnboarding
+		}));
+		await (0, react.act)(async () => {
+			getButton("authorize").click();
+		});
+		(0, vitest.expect)(redirectToOnboarding).toHaveBeenCalledWith({ replace: true });
+		(0, vitest.expect)(sessionStorage.getItem("hexclave-cli-auth-confirmed")).toBe("login-code");
+		(0, vitest.expect)(sendRequest).not.toHaveBeenCalled();
+	});
+	(0, vitest.it)("redirects anonymous users to sign-up without completing CLI auth", async () => {
+		window.history.replaceState({}, "", "/handler/cli-auth-confirm?login_code=login-code");
+		const redirectToSignUp = vitest.vi.fn(async (_options) => {});
+		const sendRequest = vitest.vi.fn(async (_path, _requestOptions) => new Response(null, { status: 200 }));
+		await renderWithApp(createAppTestDouble({
+			user: {
+				isRestricted: true,
+				isAnonymous: true,
+				currentSession: { getTokens: vitest.vi.fn(async () => ({ refreshToken: "anonymous-refresh-token" })) }
+			},
+			sendRequest,
+			redirectToSignUp
+		}));
+		await (0, react.act)(async () => {
+			getButton("authorize").click();
+		});
+		(0, vitest.expect)(redirectToSignUp).toHaveBeenCalledWith({ replace: true });
+		(0, vitest.expect)(sessionStorage.getItem("hexclave-cli-auth-confirmed")).toBe("login-code");
+		(0, vitest.expect)(sendRequest).not.toHaveBeenCalled();
+	});
 	(0, vitest.it)("ignores duplicate authorize clicks before React re-renders", async () => {
 		window.history.replaceState({}, "", "/handler/cli-auth-confirm?login_code=login-code");
 		const getTokens = vitest.vi.fn(async () => ({ refreshToken: "refresh-token" }));

package/dist/components-page/cli-auth-confirm.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-auth-confirm.test.js","names":["vi","hexclaveAppInternalsSymbol","HexclaveContext"],"sources":["../../src/components-page/cli-auth-confirm.test.tsx"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport React, { act } from \"react\";\nimport { createRoot, type Root } from \"react-dom/client\";\nimport { afterEach, beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { StackClientApp } from \"../lib/hexclave-app/apps/interfaces/client-app\";\nimport { hexclaveAppInternalsSymbol } from \"../lib/hexclave-app/common\";\nimport { HexclaveContext } from \"../providers/hexclave-context\";\nimport { useCliAuthConfirmation } from \"./cli-auth-confirm\";\n\nconst previousActEnvironment = Reflect.get(globalThis, \"IS_REACT_ACT_ENVIRONMENT\");\n\nfunction responseJson(data: unknown, init?: ResponseInit) {\n  return new Response(JSON.stringify(data), {\n    status: init?.status ?? 200,\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction createAppTestDouble(options: {\n  user: unknown,\n  sendRequest: (path: string, requestOptions: RequestInit) => Promise<Response>,\n  signInWithTokens?: (tokens: { accessToken: string, refreshToken: string }) => Promise<void>,\n  redirectToSignIn?: (options: { replace: true }) => Promise<void>,\n  redirectToSignUp?: (options: { replace: true }) => Promise<void>,\n}) {\n  const app = {\n    useUser: () => options.user,\n    redirectToSignIn: options.redirectToSignIn ?? vi.fn(async () => {}),\n    redirectToSignUp: options.redirectToSignUp ?? vi.fn(async () => {}),\n    [hexclaveAppInternalsSymbol]: {\n      sendRequest: options.sendRequest,\n      signInWithTokens: options.signInWithTokens ?? vi.fn(async () => {}),\n    },\n  };\n\n  // This test double intentionally implements only the StackClientApp surface\n  // that useCliAuthConfirmation touches.\n  return app as unknown as StackClientApp<true>;\n}\n\nfunction HookProbe() {\n  const cliAuth = useCliAuthConfirmation();\n  return (\n    <>\n      <div data-testid=\"status\">{cliAuth.status}</div>\n      <div data-testid=\"error\">{cliAuth.error?.message}</div>\n      <button type=\"button\" onClick={() => runAsynchronously(cliAuth.authorize)}>authorize</button>\n      <button onClick={cliAuth.retry}>retry</button>\n    </>\n  );\n}\n\nlet root: Root | null = null;\nlet container: HTMLDivElement | null = null;\n\nasync function renderWithApp(app: StackClientApp<true>) {\n  container = document.createElement(\"div\");\n  document.body.append(container);\n  root = createRoot(container);\n  await act(async () => {\n    root?.render(\n      <HexclaveContext.Provider value={{ app }}>\n        <HookProbe />\n      </HexclaveContext.Provider>\n    );\n  });\n}\n\nfunction getByTestId(testId: string): HTMLElement {\n  const element = container?.querySelector(`[data-testid=\"${testId}\"]`);\n  if (!(element instanceof HTMLElement)) {\n    throw new Error(`Could not find test element ${testId}`);\n  }\n  return element;\n}\n\nfunction getButton(label: string): HTMLButtonElement {\n  const button = [...container?.querySelectorAll(\"button\") ?? []]\n    .find((element) => element.textContent === label);\n  if (!(button instanceof HTMLButtonElement)) {\n    throw new Error(`Could not find button ${label}`);\n  }\n  return button;\n}\n\ndescribe(\"useCliAuthConfirmation\", () => {\n  beforeEach(() => {\n    Reflect.set(globalThis, \"IS_REACT_ACT_ENVIRONMENT\", true);\n  });\n\n  afterEach(() => {\n    act(() => {\n      root?.unmount();\n    });\n    container?.remove();\n    root = null;\n    container = null;\n    vi.restoreAllMocks();\n    window.history.replaceState({}, \"\", \"/\");\n    Reflect.set(globalThis, \"IS_REACT_ACT_ENVIRONMENT\", previousActEnvironment);\n  });\n\n  it(\"completes CLI auth with the current user's refresh token\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm?login_code=login-code\");\n    const getTokens = vi.fn(async () => ({ refreshToken: \"refresh-token\" }));\n    const sendRequest = vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 }));\n    const app = createAppTestDouble({\n      user: { currentSession: { getTokens } },\n      sendRequest,\n    });\n\n    await renderWithApp(app);\n    await act(async () => {\n      getButton(\"authorize\").click();\n    });\n\n    expect(getByTestId(\"status\").textContent).toBe(\"success\");\n    expect(getTokens).toHaveBeenCalledOnce();\n    expect(sendRequest).toHaveBeenCalledOnce();\n    expect(sendRequest.mock.calls[0][0]).toBe(\"/auth/cli/complete\");\n    expect(JSON.parse(String(sendRequest.mock.calls[0][1].body))).toMatchInlineSnapshot(`\n      {\n        \"login_code\": \"login-code\",\n        \"refresh_token\": \"refresh-token\",\n      }\n    `);\n  });\n\n  it(\"ignores duplicate authorize clicks before React re-renders\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm?login_code=login-code\");\n    const getTokens = vi.fn(async () => ({ refreshToken: \"refresh-token\" }));\n    const sendRequest = vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 }));\n    const app = createAppTestDouble({\n      user: { currentSession: { getTokens } },\n      sendRequest,\n    });\n\n    await renderWithApp(app);\n    await act(async () => {\n      const authorizeButton = getButton(\"authorize\");\n      authorizeButton.click();\n      authorizeButton.click();\n    });\n\n    expect(sendRequest).toHaveBeenCalledOnce();\n  });\n\n  it(\"claims anonymous CLI sessions before redirecting to sign-up\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm?login_code=login-code\");\n    const signInWithTokens = vi.fn(async (_tokens: { accessToken: string, refreshToken: string }) => {});\n    const redirectToSignUp = vi.fn(async (_options: { replace: true }) => {});\n    const sendRequest = vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 }))\n      .mockResolvedValueOnce(responseJson({ cli_session_state: \"anonymous\" }))\n      .mockResolvedValueOnce(responseJson({ access_token: \"access-token\", refresh_token: \"refresh-token\" }));\n    const app = createAppTestDouble({\n      user: null,\n      sendRequest,\n      signInWithTokens,\n      redirectToSignUp,\n    });\n\n    await renderWithApp(app);\n    await act(async () => {\n      getButton(\"authorize\").click();\n    });\n\n    expect(redirectToSignUp).toHaveBeenCalledWith({ replace: true });\n    expect(signInWithTokens).toHaveBeenCalledWith({\n      accessToken: \"access-token\",\n      refreshToken: \"refresh-token\",\n    });\n    expect(sessionStorage.getItem(\"hexclave-cli-auth-confirmed\")).toBe(\"login-code\");\n    expect(sendRequest.mock.calls.map(call => JSON.parse(String(call[1].body)))).toMatchInlineSnapshot(`\n      [\n        {\n          \"login_code\": \"login-code\",\n          \"mode\": \"check\",\n        },\n        {\n          \"login_code\": \"login-code\",\n          \"mode\": \"claim-anon-session\",\n        },\n      ]\n    `);\n  });\n\n  it(\"reports invalid when the login code is missing\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm\");\n    const app = createAppTestDouble({\n      user: null,\n      sendRequest: vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 })),\n    });\n\n    await renderWithApp(app);\n\n    expect(getByTestId(\"status\").textContent).toBe(\"invalid\");\n  });\n});\n"],"mappings":";;;;;;;;;;;;AAeA,MAAM,yBAAyB,QAAQ,IAAI,YAAY,0BAA0B;AAEjF,SAAS,aAAa,MAAe,MAAqB;CACxD,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;EACxC,QAAQ,MAAM,UAAU;EACxB,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;AACH;AAEA,SAAS,oBAAoB,SAM1B;CAaD,OAAO;EAXL,eAAe,QAAQ;EACvB,kBAAkB,QAAQ,oBAAoBA,OAAAA,GAAG,GAAG,YAAY,CAAC,CAAC;EAClE,kBAAkB,QAAQ,oBAAoBA,OAAAA,GAAG,GAAG,YAAY,CAAC,CAAC;GACjEC,8BAAAA,6BAA6B;GAC5B,aAAa,QAAQ;GACrB,kBAAkB,QAAQ,oBAAoBD,OAAAA,GAAG,GAAG,YAAY,CAAC,CAAC;EACpE;CAKO;AACX;AAEA,SAAS,YAAY;CACnB,MAAM,WAAA,GAAA,sBAAA,uBAAA,CAAiC;CACvC,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA;EACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;GAAK,eAAY;aAAU,QAAQ;EAAY,CAAA;EAC/C,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;GAAK,eAAY;aAAS,QAAQ,OAAO;EAAa,CAAA;EACtD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;GAAQ,MAAK;GAAS,gBAAA,GAAA,qCAAA,kBAAA,CAAiC,QAAQ,SAAS;aAAG;EAAiB,CAAA;EAC5F,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;GAAQ,SAAS,QAAQ;aAAO;EAAa,CAAA;CAC7C,EAAA,CAAA;AAEN;AAEA,IAAI,OAAoB;AACxB,IAAI,YAAmC;AAEvC,eAAe,cAAc,KAA2B;CACtD,YAAY,SAAS,cAAc,KAAK;CACxC,SAAS,KAAK,OAAO,SAAS;CAC9B,QAAA,GAAA,iBAAA,WAAA,CAAkB,SAAS;CAC3B,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;EACpB,MAAM,OACJ,iBAAA,GAAA,kBAAA,IAAA,CAACE,iCAAAA,gBAAgB,UAAjB;GAA0B,OAAO,EAAE,IAAI;aACrC,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD,CAAY,CAAA;EACY,CAAA,CAC5B;CACF,CAAC;AACH;AAEA,SAAS,YAAY,QAA6B;CAChD,MAAM,UAAU,WAAW,cAAc,iBAAiB,OAAO,GAAG;CACpE,IAAI,EAAE,mBAAmB,cACvB,MAAM,IAAI,MAAM,+BAA+B,QAAQ;CAEzD,OAAO;AACT;AAEA,SAAS,UAAU,OAAkC;CACnD,MAAM,SAAS,CAAC,GAAG,WAAW,iBAAiB,QAAQ,KAAK,CAAC,CAAC,CAAC,CAC5D,MAAM,YAAY,QAAQ,gBAAgB,KAAK;CAClD,IAAI,EAAE,kBAAkB,oBACtB,MAAM,IAAI,MAAM,yBAAyB,OAAO;CAElD,OAAO;AACT;qBAES,gCAAgC;CACvC,CAAA,GAAA,OAAA,WAAA,OAAiB;EACf,QAAQ,IAAI,YAAY,4BAA4B,IAAI;CAC1D,CAAC;CAED,CAAA,GAAA,OAAA,UAAA,OAAgB;EACd,CAAA,GAAA,MAAA,IAAA,OAAU;GACR,MAAM,QAAQ;EAChB,CAAC;EACD,WAAW,OAAO;EAClB,OAAO;EACP,YAAY;EACZ,OAAA,GAAG,gBAAgB;EACnB,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,GAAG;EACvC,QAAQ,IAAI,YAAY,4BAA4B,sBAAsB;CAC5E,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,4DAA4D,YAAY;EACzE,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,iDAAiD;EACrF,MAAM,YAAYF,OAAAA,GAAG,GAAG,aAAa,EAAE,cAAc,gBAAgB,EAAE;EACvE,MAAM,cAAcA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;EAMpH,MAAM,cALM,oBAAoB;GAC9B,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE;GACtC;EACF,CAEsB,CAAC;EACvB,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;GACpB,UAAU,WAAW,CAAC,CAAC,MAAM;EAC/B,CAAC;EAED,CAAA,GAAA,OAAA,OAAA,CAAO,YAAY,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,SAAS;EACxD,CAAA,GAAA,OAAA,OAAA,CAAO,SAAS,CAAC,CAAC,qBAAqB;EACvC,CAAA,GAAA,OAAA,OAAA,CAAO,WAAW,CAAC,CAAC,qBAAqB;EACzC,CAAA,GAAA,OAAA,OAAA,CAAO,YAAY,KAAK,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,oBAAoB;EAC9D,CAAA,GAAA,OAAA,OAAA,CAAO,KAAK,MAAM,OAAO,YAAY,KAAK,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB;;;;;KAKnF;CACH,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,8DAA8D,YAAY;EAC3E,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,iDAAiD;EACrF,MAAM,YAAYA,OAAAA,GAAG,GAAG,aAAa,EAAE,cAAc,gBAAgB,EAAE;EACvE,MAAM,cAAcA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;EAMpH,MAAM,cALM,oBAAoB;GAC9B,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE;GACtC;EACF,CAEsB,CAAC;EACvB,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;GACpB,MAAM,kBAAkB,UAAU,WAAW;GAC7C,gBAAgB,MAAM;GACtB,gBAAgB,MAAM;EACxB,CAAC;EAED,CAAA,GAAA,OAAA,OAAA,CAAO,WAAW,CAAC,CAAC,qBAAqB;CAC3C,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,+DAA+D,YAAY;EAC5E,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,iDAAiD;EACrF,MAAM,mBAAmBA,OAAAA,GAAG,GAAG,OAAO,YAA2D,CAAC,CAAC;EACnG,MAAM,mBAAmBA,OAAAA,GAAG,GAAG,OAAO,aAAgC,CAAC,CAAC;EACxE,MAAM,cAAcA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,CAClH,sBAAsB,aAAa,EAAE,mBAAmB,YAAY,CAAC,CAAC,CAAC,CACvE,sBAAsB,aAAa;GAAE,cAAc;GAAgB,eAAe;EAAgB,CAAC,CAAC;EAQvG,MAAM,cAPM,oBAAoB;GAC9B,MAAM;GACN;GACA;GACA;EACF,CAEsB,CAAC;EACvB,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;GACpB,UAAU,WAAW,CAAC,CAAC,MAAM;EAC/B,CAAC;EAED,CAAA,GAAA,OAAA,OAAA,CAAO,gBAAgB,CAAC,CAAC,qBAAqB,EAAE,SAAS,KAAK,CAAC;EAC/D,CAAA,GAAA,OAAA,OAAA,CAAO,gBAAgB,CAAC,CAAC,qBAAqB;GAC5C,aAAa;GACb,cAAc;EAChB,CAAC;EACD,CAAA,GAAA,OAAA,OAAA,CAAO,eAAe,QAAQ,6BAA6B,CAAC,CAAC,CAAC,KAAK,YAAY;EAC/E,CAAA,GAAA,OAAA,OAAA,CAAO,YAAY,KAAK,MAAM,KAAI,SAAQ,KAAK,MAAM,OAAO,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;;;;;;;;;;;KAWlG;CACH,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,kDAAkD,YAAY;EAC/D,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,2BAA2B;EAM/D,MAAM,cALM,oBAAoB;GAC9B,MAAM;GACN,aAAaA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;EAC/G,CAEsB,CAAC;EAEvB,CAAA,GAAA,OAAA,OAAA,CAAO,YAAY,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,SAAS;CAC1D,CAAC;AACH,CAAC"}
+{"version":3,"file":"cli-auth-confirm.test.js","names":["vi","hexclaveAppInternalsSymbol","HexclaveContext"],"sources":["../../src/components-page/cli-auth-confirm.test.tsx"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport React, { act } from \"react\";\nimport { createRoot, type Root } from \"react-dom/client\";\nimport { afterEach, beforeEach, describe, expect, it, vi } from \"vitest\";\nimport type { StackClientApp } from \"../lib/hexclave-app/apps/interfaces/client-app\";\nimport { hexclaveAppInternalsSymbol } from \"../lib/hexclave-app/common\";\nimport { HexclaveContext } from \"../providers/hexclave-context\";\nimport { useCliAuthConfirmation } from \"./cli-auth-confirm\";\n\nconst previousActEnvironment = Reflect.get(globalThis, \"IS_REACT_ACT_ENVIRONMENT\");\n\nfunction responseJson(data: unknown, init?: ResponseInit) {\n  return new Response(JSON.stringify(data), {\n    status: init?.status ?? 200,\n    headers: { \"Content-Type\": \"application/json\" },\n  });\n}\n\nfunction createAppTestDouble(options: {\n  user: unknown,\n  sendRequest: (path: string, requestOptions: RequestInit) => Promise<Response>,\n  signInWithTokens?: (tokens: { accessToken: string, refreshToken: string }) => Promise<void>,\n  redirectToSignIn?: (options: { replace: true }) => Promise<void>,\n  redirectToSignUp?: (options: { replace: true }) => Promise<void>,\n  redirectToOnboarding?: (options: { replace: true }) => Promise<void>,\n}) {\n  const app = {\n    useUser: () => options.user,\n    redirectToSignIn: options.redirectToSignIn ?? vi.fn(async () => {}),\n    redirectToSignUp: options.redirectToSignUp ?? vi.fn(async () => {}),\n    redirectToOnboarding: options.redirectToOnboarding ?? vi.fn(async () => {}),\n    [hexclaveAppInternalsSymbol]: {\n      sendRequest: options.sendRequest,\n      signInWithTokens: options.signInWithTokens ?? vi.fn(async () => {}),\n    },\n  };\n\n  // This test double intentionally implements only the StackClientApp surface\n  // that useCliAuthConfirmation touches.\n  return app as unknown as StackClientApp<true>;\n}\n\nfunction HookProbe() {\n  const cliAuth = useCliAuthConfirmation();\n  return (\n    <>\n      <div data-testid=\"status\">{cliAuth.status}</div>\n      <div data-testid=\"error\">{cliAuth.error?.message}</div>\n      <button type=\"button\" onClick={() => runAsynchronously(cliAuth.authorize)}>authorize</button>\n      <button onClick={cliAuth.retry}>retry</button>\n    </>\n  );\n}\n\nlet root: Root | null = null;\nlet container: HTMLDivElement | null = null;\n\nasync function renderWithApp(app: StackClientApp<true>) {\n  container = document.createElement(\"div\");\n  document.body.append(container);\n  root = createRoot(container);\n  await act(async () => {\n    root?.render(\n      <HexclaveContext.Provider value={{ app }}>\n        <HookProbe />\n      </HexclaveContext.Provider>\n    );\n  });\n}\n\nfunction getByTestId(testId: string): HTMLElement {\n  const element = container?.querySelector(`[data-testid=\"${testId}\"]`);\n  if (!(element instanceof HTMLElement)) {\n    throw new Error(`Could not find test element ${testId}`);\n  }\n  return element;\n}\n\nfunction getButton(label: string): HTMLButtonElement {\n  const button = [...container?.querySelectorAll(\"button\") ?? []]\n    .find((element) => element.textContent === label);\n  if (!(button instanceof HTMLButtonElement)) {\n    throw new Error(`Could not find button ${label}`);\n  }\n  return button;\n}\n\ndescribe(\"useCliAuthConfirmation\", () => {\n  beforeEach(() => {\n    Reflect.set(globalThis, \"IS_REACT_ACT_ENVIRONMENT\", true);\n  });\n\n  afterEach(() => {\n    act(() => {\n      root?.unmount();\n    });\n    container?.remove();\n    root = null;\n    container = null;\n    vi.restoreAllMocks();\n    sessionStorage.clear();\n    window.history.replaceState({}, \"\", \"/\");\n    Reflect.set(globalThis, \"IS_REACT_ACT_ENVIRONMENT\", previousActEnvironment);\n  });\n\n  it(\"completes CLI auth with the current user's refresh token\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm?login_code=login-code\");\n    const getTokens = vi.fn(async () => ({ refreshToken: \"refresh-token\" }));\n    const sendRequest = vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 }));\n    const app = createAppTestDouble({\n      user: { currentSession: { getTokens } },\n      sendRequest,\n    });\n\n    await renderWithApp(app);\n    await act(async () => {\n      getButton(\"authorize\").click();\n    });\n\n    expect(getByTestId(\"status\").textContent).toBe(\"success\");\n    expect(getTokens).toHaveBeenCalledOnce();\n    expect(sendRequest).toHaveBeenCalledOnce();\n    expect(sendRequest.mock.calls[0][0]).toBe(\"/auth/cli/complete\");\n    expect(JSON.parse(String(sendRequest.mock.calls[0][1].body))).toMatchInlineSnapshot(`\n      {\n        \"login_code\": \"login-code\",\n        \"refresh_token\": \"refresh-token\",\n      }\n    `);\n  });\n\n  it(\"redirects restricted users to onboarding without completing CLI auth\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm?login_code=login-code\");\n    const redirectToOnboarding = vi.fn(async (_options: { replace: true }) => {});\n    const sendRequest = vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 }));\n    const app = createAppTestDouble({\n      user: {\n        isRestricted: true,\n        isAnonymous: false,\n        currentSession: {\n          getTokens: vi.fn(async () => ({ refreshToken: \"restricted-refresh-token\" })),\n        },\n      },\n      sendRequest,\n      redirectToOnboarding,\n    });\n\n    await renderWithApp(app);\n    await act(async () => {\n      getButton(\"authorize\").click();\n    });\n\n    expect(redirectToOnboarding).toHaveBeenCalledWith({ replace: true });\n    expect(sessionStorage.getItem(\"hexclave-cli-auth-confirmed\")).toBe(\"login-code\");\n    expect(sendRequest).not.toHaveBeenCalled();\n  });\n\n  it(\"redirects anonymous users to sign-up without completing CLI auth\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm?login_code=login-code\");\n    const redirectToSignUp = vi.fn(async (_options: { replace: true }) => {});\n    const sendRequest = vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 }));\n    const app = createAppTestDouble({\n      user: {\n        isRestricted: true,\n        isAnonymous: true,\n        currentSession: {\n          getTokens: vi.fn(async () => ({ refreshToken: \"anonymous-refresh-token\" })),\n        },\n      },\n      sendRequest,\n      redirectToSignUp,\n    });\n\n    await renderWithApp(app);\n    await act(async () => {\n      getButton(\"authorize\").click();\n    });\n\n    expect(redirectToSignUp).toHaveBeenCalledWith({ replace: true });\n    expect(sessionStorage.getItem(\"hexclave-cli-auth-confirmed\")).toBe(\"login-code\");\n    expect(sendRequest).not.toHaveBeenCalled();\n  });\n\n  it(\"ignores duplicate authorize clicks before React re-renders\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm?login_code=login-code\");\n    const getTokens = vi.fn(async () => ({ refreshToken: \"refresh-token\" }));\n    const sendRequest = vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 }));\n    const app = createAppTestDouble({\n      user: { currentSession: { getTokens } },\n      sendRequest,\n    });\n\n    await renderWithApp(app);\n    await act(async () => {\n      const authorizeButton = getButton(\"authorize\");\n      authorizeButton.click();\n      authorizeButton.click();\n    });\n\n    expect(sendRequest).toHaveBeenCalledOnce();\n  });\n\n  it(\"claims anonymous CLI sessions before redirecting to sign-up\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm?login_code=login-code\");\n    const signInWithTokens = vi.fn(async (_tokens: { accessToken: string, refreshToken: string }) => {});\n    const redirectToSignUp = vi.fn(async (_options: { replace: true }) => {});\n    const sendRequest = vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 }))\n      .mockResolvedValueOnce(responseJson({ cli_session_state: \"anonymous\" }))\n      .mockResolvedValueOnce(responseJson({ access_token: \"access-token\", refresh_token: \"refresh-token\" }));\n    const app = createAppTestDouble({\n      user: null,\n      sendRequest,\n      signInWithTokens,\n      redirectToSignUp,\n    });\n\n    await renderWithApp(app);\n    await act(async () => {\n      getButton(\"authorize\").click();\n    });\n\n    expect(redirectToSignUp).toHaveBeenCalledWith({ replace: true });\n    expect(signInWithTokens).toHaveBeenCalledWith({\n      accessToken: \"access-token\",\n      refreshToken: \"refresh-token\",\n    });\n    expect(sessionStorage.getItem(\"hexclave-cli-auth-confirmed\")).toBe(\"login-code\");\n    expect(sendRequest.mock.calls.map(call => JSON.parse(String(call[1].body)))).toMatchInlineSnapshot(`\n      [\n        {\n          \"login_code\": \"login-code\",\n          \"mode\": \"check\",\n        },\n        {\n          \"login_code\": \"login-code\",\n          \"mode\": \"claim-anon-session\",\n        },\n      ]\n    `);\n  });\n\n  it(\"reports invalid when the login code is missing\", async () => {\n    window.history.replaceState({}, \"\", \"/handler/cli-auth-confirm\");\n    const app = createAppTestDouble({\n      user: null,\n      sendRequest: vi.fn(async (_path: string, _requestOptions: RequestInit) => new Response(null, { status: 200 })),\n    });\n\n    await renderWithApp(app);\n\n    expect(getByTestId(\"status\").textContent).toBe(\"invalid\");\n  });\n});\n"],"mappings":";;;;;;;;;;;;AAeA,MAAM,yBAAyB,QAAQ,IAAI,YAAY,0BAA0B;AAEjF,SAAS,aAAa,MAAe,MAAqB;CACxD,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;EACxC,QAAQ,MAAM,UAAU;EACxB,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;AACH;AAEA,SAAS,oBAAoB,SAO1B;CAcD,OAAO;EAZL,eAAe,QAAQ;EACvB,kBAAkB,QAAQ,oBAAoBA,OAAAA,GAAG,GAAG,YAAY,CAAC,CAAC;EAClE,kBAAkB,QAAQ,oBAAoBA,OAAAA,GAAG,GAAG,YAAY,CAAC,CAAC;EAClE,sBAAsB,QAAQ,wBAAwBA,OAAAA,GAAG,GAAG,YAAY,CAAC,CAAC;GACzEC,8BAAAA,6BAA6B;GAC5B,aAAa,QAAQ;GACrB,kBAAkB,QAAQ,oBAAoBD,OAAAA,GAAG,GAAG,YAAY,CAAC,CAAC;EACpE;CAKO;AACX;AAEA,SAAS,YAAY;CACnB,MAAM,WAAA,GAAA,sBAAA,uBAAA,CAAiC;CACvC,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAA,kBAAA,UAAA,EAAA,UAAA;EACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;GAAK,eAAY;aAAU,QAAQ;EAAY,CAAA;EAC/C,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD;GAAK,eAAY;aAAS,QAAQ,OAAO;EAAa,CAAA;EACtD,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;GAAQ,MAAK;GAAS,gBAAA,GAAA,qCAAA,kBAAA,CAAiC,QAAQ,SAAS;aAAG;EAAiB,CAAA;EAC5F,iBAAA,GAAA,kBAAA,IAAA,CAAC,UAAD;GAAQ,SAAS,QAAQ;aAAO;EAAa,CAAA;CAC7C,EAAA,CAAA;AAEN;AAEA,IAAI,OAAoB;AACxB,IAAI,YAAmC;AAEvC,eAAe,cAAc,KAA2B;CACtD,YAAY,SAAS,cAAc,KAAK;CACxC,SAAS,KAAK,OAAO,SAAS;CAC9B,QAAA,GAAA,iBAAA,WAAA,CAAkB,SAAS;CAC3B,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;EACpB,MAAM,OACJ,iBAAA,GAAA,kBAAA,IAAA,CAACE,iCAAAA,gBAAgB,UAAjB;GAA0B,OAAO,EAAE,IAAI;aACrC,iBAAA,GAAA,kBAAA,IAAA,CAAC,WAAD,CAAY,CAAA;EACY,CAAA,CAC5B;CACF,CAAC;AACH;AAEA,SAAS,YAAY,QAA6B;CAChD,MAAM,UAAU,WAAW,cAAc,iBAAiB,OAAO,GAAG;CACpE,IAAI,EAAE,mBAAmB,cACvB,MAAM,IAAI,MAAM,+BAA+B,QAAQ;CAEzD,OAAO;AACT;AAEA,SAAS,UAAU,OAAkC;CACnD,MAAM,SAAS,CAAC,GAAG,WAAW,iBAAiB,QAAQ,KAAK,CAAC,CAAC,CAAC,CAC5D,MAAM,YAAY,QAAQ,gBAAgB,KAAK;CAClD,IAAI,EAAE,kBAAkB,oBACtB,MAAM,IAAI,MAAM,yBAAyB,OAAO;CAElD,OAAO;AACT;qBAES,gCAAgC;CACvC,CAAA,GAAA,OAAA,WAAA,OAAiB;EACf,QAAQ,IAAI,YAAY,4BAA4B,IAAI;CAC1D,CAAC;CAED,CAAA,GAAA,OAAA,UAAA,OAAgB;EACd,CAAA,GAAA,MAAA,IAAA,OAAU;GACR,MAAM,QAAQ;EAChB,CAAC;EACD,WAAW,OAAO;EAClB,OAAO;EACP,YAAY;EACZ,OAAA,GAAG,gBAAgB;EACnB,eAAe,MAAM;EACrB,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,GAAG;EACvC,QAAQ,IAAI,YAAY,4BAA4B,sBAAsB;CAC5E,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,4DAA4D,YAAY;EACzE,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,iDAAiD;EACrF,MAAM,YAAYF,OAAAA,GAAG,GAAG,aAAa,EAAE,cAAc,gBAAgB,EAAE;EACvE,MAAM,cAAcA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;EAMpH,MAAM,cALM,oBAAoB;GAC9B,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE;GACtC;EACF,CAEsB,CAAC;EACvB,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;GACpB,UAAU,WAAW,CAAC,CAAC,MAAM;EAC/B,CAAC;EAED,CAAA,GAAA,OAAA,OAAA,CAAO,YAAY,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,SAAS;EACxD,CAAA,GAAA,OAAA,OAAA,CAAO,SAAS,CAAC,CAAC,qBAAqB;EACvC,CAAA,GAAA,OAAA,OAAA,CAAO,WAAW,CAAC,CAAC,qBAAqB;EACzC,CAAA,GAAA,OAAA,OAAA,CAAO,YAAY,KAAK,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,oBAAoB;EAC9D,CAAA,GAAA,OAAA,OAAA,CAAO,KAAK,MAAM,OAAO,YAAY,KAAK,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB;;;;;KAKnF;CACH,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,wEAAwE,YAAY;EACrF,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,iDAAiD;EACrF,MAAM,uBAAuBA,OAAAA,GAAG,GAAG,OAAO,aAAgC,CAAC,CAAC;EAC5E,MAAM,cAAcA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;EAapH,MAAM,cAZM,oBAAoB;GAC9B,MAAM;IACJ,cAAc;IACd,aAAa;IACb,gBAAgB,EACd,WAAWA,OAAAA,GAAG,GAAG,aAAa,EAAE,cAAc,2BAA2B,EAAE,EAC7E;GACF;GACA;GACA;EACF,CAEsB,CAAC;EACvB,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;GACpB,UAAU,WAAW,CAAC,CAAC,MAAM;EAC/B,CAAC;EAED,CAAA,GAAA,OAAA,OAAA,CAAO,oBAAoB,CAAC,CAAC,qBAAqB,EAAE,SAAS,KAAK,CAAC;EACnE,CAAA,GAAA,OAAA,OAAA,CAAO,eAAe,QAAQ,6BAA6B,CAAC,CAAC,CAAC,KAAK,YAAY;EAC/E,CAAA,GAAA,OAAA,OAAA,CAAO,WAAW,CAAC,CAAC,IAAI,iBAAiB;CAC3C,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,oEAAoE,YAAY;EACjF,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,iDAAiD;EACrF,MAAM,mBAAmBA,OAAAA,GAAG,GAAG,OAAO,aAAgC,CAAC,CAAC;EACxE,MAAM,cAAcA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;EAapH,MAAM,cAZM,oBAAoB;GAC9B,MAAM;IACJ,cAAc;IACd,aAAa;IACb,gBAAgB,EACd,WAAWA,OAAAA,GAAG,GAAG,aAAa,EAAE,cAAc,0BAA0B,EAAE,EAC5E;GACF;GACA;GACA;EACF,CAEsB,CAAC;EACvB,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;GACpB,UAAU,WAAW,CAAC,CAAC,MAAM;EAC/B,CAAC;EAED,CAAA,GAAA,OAAA,OAAA,CAAO,gBAAgB,CAAC,CAAC,qBAAqB,EAAE,SAAS,KAAK,CAAC;EAC/D,CAAA,GAAA,OAAA,OAAA,CAAO,eAAe,QAAQ,6BAA6B,CAAC,CAAC,CAAC,KAAK,YAAY;EAC/E,CAAA,GAAA,OAAA,OAAA,CAAO,WAAW,CAAC,CAAC,IAAI,iBAAiB;CAC3C,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,8DAA8D,YAAY;EAC3E,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,iDAAiD;EACrF,MAAM,YAAYA,OAAAA,GAAG,GAAG,aAAa,EAAE,cAAc,gBAAgB,EAAE;EACvE,MAAM,cAAcA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;EAMpH,MAAM,cALM,oBAAoB;GAC9B,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE;GACtC;EACF,CAEsB,CAAC;EACvB,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;GACpB,MAAM,kBAAkB,UAAU,WAAW;GAC7C,gBAAgB,MAAM;GACtB,gBAAgB,MAAM;EACxB,CAAC;EAED,CAAA,GAAA,OAAA,OAAA,CAAO,WAAW,CAAC,CAAC,qBAAqB;CAC3C,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,+DAA+D,YAAY;EAC5E,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,iDAAiD;EACrF,MAAM,mBAAmBA,OAAAA,GAAG,GAAG,OAAO,YAA2D,CAAC,CAAC;EACnG,MAAM,mBAAmBA,OAAAA,GAAG,GAAG,OAAO,aAAgC,CAAC,CAAC;EACxE,MAAM,cAAcA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,CAClH,sBAAsB,aAAa,EAAE,mBAAmB,YAAY,CAAC,CAAC,CAAC,CACvE,sBAAsB,aAAa;GAAE,cAAc;GAAgB,eAAe;EAAgB,CAAC,CAAC;EAQvG,MAAM,cAPM,oBAAoB;GAC9B,MAAM;GACN;GACA;GACA;EACF,CAEsB,CAAC;EACvB,OAAA,GAAA,MAAA,IAAA,CAAU,YAAY;GACpB,UAAU,WAAW,CAAC,CAAC,MAAM;EAC/B,CAAC;EAED,CAAA,GAAA,OAAA,OAAA,CAAO,gBAAgB,CAAC,CAAC,qBAAqB,EAAE,SAAS,KAAK,CAAC;EAC/D,CAAA,GAAA,OAAA,OAAA,CAAO,gBAAgB,CAAC,CAAC,qBAAqB;GAC5C,aAAa;GACb,cAAc;EAChB,CAAC;EACD,CAAA,GAAA,OAAA,OAAA,CAAO,eAAe,QAAQ,6BAA6B,CAAC,CAAC,CAAC,KAAK,YAAY;EAC/E,CAAA,GAAA,OAAA,OAAA,CAAO,YAAY,KAAK,MAAM,KAAI,SAAQ,KAAK,MAAM,OAAO,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;;;;;;;;;;;KAWlG;CACH,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,kDAAkD,YAAY;EAC/D,OAAO,QAAQ,aAAa,CAAC,GAAG,IAAI,2BAA2B;EAM/D,MAAM,cALM,oBAAoB;GAC9B,MAAM;GACN,aAAaA,OAAAA,GAAG,GAAG,OAAO,OAAe,oBAAiC,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;EAC/G,CAEsB,CAAC;EAEvB,CAAA,GAAA,OAAA,OAAA,CAAO,YAAY,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,SAAS;CAC1D,CAAC;AACH,CAAC"}

package/dist/components-page/forgot-password.js

@@ -1,8 +1,8 @@
 "use client";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let _hookform_resolvers_yup = require("@hookform/resolvers/yup");
 let _hexclave_shared_dist_schema_fields = require("@hexclave/shared/dist/schema-fields");
-let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let _hexclave_ui = require("@hexclave/ui");
 let react = require("react");
 let react_hook_form = require("react-hook-form");

package/dist/components-page/oauth-callback.js

@@ -1,14 +1,14 @@
 "use client";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-let _hexclave_shared_dist_utils_errors = require("@hexclave/shared/dist/utils/errors");
 let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
+let ___lib_hexclave_app_common_js = require("../lib/hexclave-app/common.js");
+let _hexclave_shared_dist_utils_errors = require("@hexclave/shared/dist/utils/errors");
 let _hexclave_ui = require("@hexclave/ui");
 let react = require("react");
 let ___index_js = require("../index.js");
 let ___lib_translations_js = require("../lib/translations.js");
 let react_jsx_runtime = require("react/jsx-runtime");
 let _hexclave_shared = require("@hexclave/shared");
-let ___lib_hexclave_app_common_js = require("../lib/hexclave-app/common.js");
 let ___components_elements_maybe_full_page_js = require("../components/elements/maybe-full-page.js");
 let ___components_link_js = require("../components/link.js");
 let __error_page_js = require("./error-page.js");

package/dist/components-page/oauth-callback.test.js

@@ -1,9 +1,9 @@
 const require_rolldown_runtime = require("../rolldown-runtime-D6vf50IK.js");
+let ___lib_hexclave_app_common_js = require("../lib/hexclave-app/common.js");
 let react = require("react");
 react = require_rolldown_runtime.__toESM(react);
 let react_jsx_runtime = require("react/jsx-runtime");
 let _hexclave_shared = require("@hexclave/shared");
-let ___lib_hexclave_app_common_js = require("../lib/hexclave-app/common.js");
 let react_dom_client = require("react-dom/client");
 let vitest = require("vitest");
 let __oauth_callback_js = require("./oauth-callback.js");

package/dist/components-page/onboarding.js

@@ -1,8 +1,8 @@
 "use client";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let _hookform_resolvers_yup = require("@hookform/resolvers/yup");
 let _hexclave_shared_dist_schema_fields = require("@hexclave/shared/dist/schema-fields");
-let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let _hexclave_ui = require("@hexclave/ui");
 let react = require("react");
 let react_hook_form = require("react-hook-form");

package/dist/components-page/password-reset.js

@@ -4,9 +4,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_rolldown_runtime = require("../rolldown-runtime-D6vf50IK.js");
+let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let _hookform_resolvers_yup = require("@hookform/resolvers/yup");
 let _hexclave_shared_dist_schema_fields = require("@hexclave/shared/dist/schema-fields");
-let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let _hexclave_ui = require("@hexclave/ui");
 let react = require("react");
 let react_hook_form = require("react-hook-form");

package/dist/components-page/sign-out.test.js

@@ -1,8 +1,8 @@
 const require_rolldown_runtime = require("../rolldown-runtime-D6vf50IK.js");
+let ___lib_hexclave_app_common_js = require("../lib/hexclave-app/common.js");
 let react = require("react");
 react = require_rolldown_runtime.__toESM(react);
 let react_jsx_runtime = require("react/jsx-runtime");
-let ___lib_hexclave_app_common_js = require("../lib/hexclave-app/common.js");
 let react_dom_client = require("react-dom/client");
 let vitest = require("vitest");
 let __sign_out_js = require("./sign-out.js");

package/dist/components-page/team-creation.js

@@ -1,8 +1,8 @@
 "use client";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let _hookform_resolvers_yup = require("@hookform/resolvers/yup");
 let _hexclave_shared_dist_schema_fields = require("@hexclave/shared/dist/schema-fields");
-let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let _hexclave_ui = require("@hexclave/ui");
 let react = require("react");
 let react_hook_form = require("react-hook-form");

package/dist/dev-tool/dev-tool-core.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let _hexclave_shared_dist_utils_dev_tool = require("@hexclave/shared/dist/utils/dev-tool");
+let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let ___in_page_ui_dom_js = require("../in-page-ui/dom.js");
 let ___lib_hexclave_app_common_js = require("../lib/hexclave-app/common.js");
 let _hexclave_shared_dist_utils_urls = require("@hexclave/shared/dist/utils/urls");

package/dist/dev-tool/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-let _hexclave_shared_dist_utils_errors = require("@hexclave/shared/dist/utils/errors");
 let _hexclave_shared_dist_utils_promises = require("@hexclave/shared/dist/utils/promises");
 let ___in_page_ui_dom_js = require("../in-page-ui/dom.js");
+let _hexclave_shared_dist_utils_errors = require("@hexclave/shared/dist/utils/errors");
 let _hexclave_shared_dist_utils_urls = require("@hexclave/shared/dist/utils/urls");
 let ___generated_env_js = require("../generated/env.js");
 //#region src/dev-tool/index.ts

package/dist/esm/clickmap/clickmap-core.js

@@ -1,9 +1,9 @@
-import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
 import { AnalyticsClickmapResponseBodySchema } from "@hexclave/shared/dist/interface/admin-metrics";
 import { CLICKMAP_OVERLAY_RESUME_STORAGE_KEY, CLICKMAP_OVERLAY_TOKEN_STORAGE_KEY, CLICKMAP_OVERLAY_TOKEN_UPDATED_EVENT } from "@hexclave/shared/dist/utils/analytics-clickmap-overlay";
 import { CLICKMAP_ROOT_ID, DEV_TOOL_ROOT_ID } from "@hexclave/shared/dist/utils/dev-tool";
 import { cssEscapeIdent } from "@hexclave/shared/dist/utils/dom";
 import { buildElementsChain, parseElementsChain } from "@hexclave/shared/dist/utils/elements-chain";
+import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
 import { stringCompare } from "@hexclave/shared/dist/utils/strings";
 import { getGlobalUiInstance, h, hasAppendChild, setGlobalUiInstance, setHtml } from "../in-page-ui/dom.js";
 import { hexclaveAppInternalsSymbol } from "../lib/hexclave-app/common.js";

package/dist/esm/clickmap/index.js

@@ -1,7 +1,7 @@
-import { captureError } from "@hexclave/shared/dist/utils/errors";
-import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
 import { CLICKMAP_OVERLAY_RESUME_STORAGE_KEY, CLICKMAP_OVERLAY_TOKEN_UPDATED_EVENT } from "@hexclave/shared/dist/utils/analytics-clickmap-overlay";
+import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
 import { canMountIntoDom } from "../in-page-ui/dom.js";
+import { captureError } from "@hexclave/shared/dist/utils/errors";
 //#region src/clickmap/index.ts
 function consumeResumeSentinel() {
 	try {

package/dist/esm/components/api-key-dialogs.js

@@ -1,8 +1,8 @@
 "use client";
+import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
+import { captureError } from "@hexclave/shared/dist/utils/errors";
 import { yupResolver } from "@hookform/resolvers/yup";
 import { yupObject, yupString } from "@hexclave/shared/dist/schema-fields";
-import { captureError } from "@hexclave/shared/dist/utils/errors";
-import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
 import { ActionDialog, Button, CopyField, Input, Label, Typography } from "@hexclave/ui";
 import { useState } from "react";
 import { useForm } from "react-hook-form";

package/dist/esm/components/credential-sign-in.js

@@ -1,7 +1,7 @@
 "use client";
+import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { yupResolver } from "@hookform/resolvers/yup";
 import { passwordSchema, strictEmailSchema, yupObject } from "@hexclave/shared/dist/schema-fields";
-import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { Button, Input, Label, PasswordInput } from "@hexclave/ui";
 import { useState } from "react";
 import { useForm } from "react-hook-form";

package/dist/esm/components/credential-sign-up.js

@@ -1,7 +1,7 @@
 "use client";
+import { runAsynchronously, runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { yupResolver } from "@hookform/resolvers/yup";
 import { passwordSchema, strictEmailSchema, yupObject } from "@hexclave/shared/dist/schema-fields";
-import { runAsynchronously, runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { Button, Input, Label, PasswordInput } from "@hexclave/ui";
 import { useState } from "react";
 import { useForm } from "react-hook-form";

package/dist/esm/components/magic-link-sign-in.js

@@ -1,7 +1,7 @@
 "use client";
+import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { yupResolver } from "@hookform/resolvers/yup";
 import { strictEmailSchema, yupObject } from "@hexclave/shared/dist/schema-fields";
-import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { Button, Input, InputOTP, InputOTPGroup, InputOTPSlot, Label, Typography } from "@hexclave/ui";
 import { useEffect, useState } from "react";
 import { useForm } from "react-hook-form";

package/dist/esm/components/message-cards/no-auth-methods-message-card.d.ts

@@ -0,0 +1,13 @@
+//#region src/components/message-cards/no-auth-methods-message-card.d.ts
+/**
+ * Shown instead of the sign-in/sign-up form when a project has no auth methods at all (no password, no
+ * OTP, no passkey, no OAuth provider). Without this, the page would look broken: there is nothing the end
+ * user can do, and the developer gets no hint about what went wrong or how to fix it.
+ */
+declare function NoAuthMethodsMessageCard(props: {
+  fullPage?: boolean;
+  projectDisplayName?: string;
+}): import("react/jsx-runtime").JSX.Element;
+//#endregion
+export { NoAuthMethodsMessageCard };
+//# sourceMappingURL=no-auth-methods-message-card.d.ts.map

package/dist/esm/components/message-cards/no-auth-methods-message-card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-auth-methods-message-card.d.ts","names":[],"sources":["../../../../src/components/message-cards/no-auth-methods-message-card.tsx"],"mappings":";;AAsBA;;;;iBAAgB,wBAAA,CAAyB,KAAA;EACvC,QAAA;EACA,kBAAA;AAAA,gCACD,GAAA,CAAA,OAAA"}

package/dist/esm/components/message-cards/no-auth-methods-message-card.js

@@ -0,0 +1,74 @@
+"use client";
+import { Typography } from "@hexclave/ui";
+import { jsx, jsxs } from "react/jsx-runtime";
+import { KeyRound } from "lucide-react";
+import { MaybeFullPage } from "../elements/maybe-full-page.js";
+import { useTranslation } from "../../lib/translations.js";
+//#region src/components/message-cards/no-auth-methods-message-card.tsx
+const configSnippet = `auth: {
+  password: { allowSignIn: true },
+  otp: { allowSignIn: true },
+}`;
+/**
+* Shown instead of the sign-in/sign-up form when a project has no auth methods at all (no password, no
+* OTP, no passkey, no OAuth provider). Without this, the page would look broken: there is nothing the end
+* user can do, and the developer gets no hint about what went wrong or how to fix it.
+*/
+function NoAuthMethodsMessageCard(props) {
+	const { t } = useTranslation();
+	return /* @__PURE__ */ jsx(MaybeFullPage, {
+		fullPage: !!props.fullPage,
+		children: /* @__PURE__ */ jsxs("div", {
+			className: "stack-scope flex flex-col items-stretch",
+			style: {
+				maxWidth: "380px",
+				flexBasis: "380px",
+				padding: props.fullPage ? "1rem" : 0
+			},
+			children: [/* @__PURE__ */ jsxs("div", {
+				className: "flex flex-col items-center text-center",
+				children: [
+					/* @__PURE__ */ jsx("div", {
+						className: "mb-4 flex h-11 w-11 items-center justify-center rounded-2xl border border-black/[0.08] dark:border-white/[0.10]",
+						children: /* @__PURE__ */ jsx(KeyRound, { className: "h-5 w-5 text-gray-500" })
+					}),
+					/* @__PURE__ */ jsx(Typography, {
+						type: "h2",
+						children: t("Sign-in is not available")
+					}),
+					/* @__PURE__ */ jsx(Typography, {
+						type: "label",
+						variant: "secondary",
+						children: props.projectDisplayName == null ? t("This app has no authentication methods enabled, so nobody can sign in yet.") : t("{projectDisplayName} has no authentication methods enabled, so nobody can sign in yet.", { projectDisplayName: props.projectDisplayName })
+					})
+				]
+			}), /* @__PURE__ */ jsxs("div", {
+				className: "mt-6 rounded-xl border border-black/[0.08] p-4 text-left dark:border-white/[0.10]",
+				children: [
+					/* @__PURE__ */ jsx(Typography, {
+						type: "label",
+						children: t("Are you the developer?")
+					}),
+					/* @__PURE__ */ jsx(Typography, {
+						type: "label",
+						variant: "secondary",
+						children: t("Enable at least one sign-in method in your hexclave.config.ts:")
+					}),
+					/* @__PURE__ */ jsx("pre", {
+						className: "mt-2 overflow-x-auto rounded-lg border border-black/[0.06] p-3 font-mono text-xs leading-relaxed dark:border-white/[0.08]",
+						children: configSnippet
+					}),
+					/* @__PURE__ */ jsx(Typography, {
+						type: "label",
+						variant: "secondary",
+						children: t("Or turn one on in the Hexclave dashboard, under Auth Methods.")
+					})
+				]
+			})]
+		})
+	});
+}
+//#endregion
+export { NoAuthMethodsMessageCard };
+
+//# sourceMappingURL=no-auth-methods-message-card.js.map

package/dist/esm/components/message-cards/no-auth-methods-message-card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-auth-methods-message-card.js","names":[],"sources":["../../../../src/components/message-cards/no-auth-methods-message-card.tsx"],"sourcesContent":["'use client';\n\n\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n\nimport { Typography } from \"@hexclave/ui\";\nimport { KeyRound } from \"lucide-react\";\nimport { useTranslation } from \"../../lib/translations\";\nimport { MaybeFullPage } from \"../elements/maybe-full-page\";\n\nconst configSnippet = `auth: {\n  password: { allowSignIn: true },\n  otp: { allowSignIn: true },\n}`;\n\n/**\n * Shown instead of the sign-in/sign-up form when a project has no auth methods at all (no password, no\n * OTP, no passkey, no OAuth provider). Without this, the page would look broken: there is nothing the end\n * user can do, and the developer gets no hint about what went wrong or how to fix it.\n */\nexport function NoAuthMethodsMessageCard(props: {\n  fullPage?: boolean,\n  projectDisplayName?: string,\n}) {\n  const { t } = useTranslation();\n\n  return (\n    <MaybeFullPage fullPage={!!props.fullPage}>\n      <div className='stack-scope flex flex-col items-stretch' style={{ maxWidth: '380px', flexBasis: '380px', padding: props.fullPage ? '1rem' : 0 }}>\n        <div className=\"flex flex-col items-center text-center\">\n          <div className=\"mb-4 flex h-11 w-11 items-center justify-center rounded-2xl border border-black/[0.08] dark:border-white/[0.10]\">\n            <KeyRound className=\"h-5 w-5 text-gray-500\" />\n          </div>\n          <Typography type='h2'>{t(\"Sign-in is not available\")}</Typography>\n          <Typography type='label' variant='secondary'>\n            {props.projectDisplayName == null\n              ? t(\"This app has no authentication methods enabled, so nobody can sign in yet.\")\n              : t(\"{projectDisplayName} has no authentication methods enabled, so nobody can sign in yet.\", { projectDisplayName: props.projectDisplayName })}\n          </Typography>\n        </div>\n\n        <div className=\"mt-6 rounded-xl border border-black/[0.08] p-4 text-left dark:border-white/[0.10]\">\n          <Typography type='label'>{t(\"Are you the developer?\")}</Typography>\n          <Typography type='label' variant='secondary'>\n            {t(\"Enable at least one sign-in method in your hexclave.config.ts:\")}\n          </Typography>\n          <pre className=\"mt-2 overflow-x-auto rounded-lg border border-black/[0.06] p-3 font-mono text-xs leading-relaxed dark:border-white/[0.08]\">{configSnippet}</pre>\n          <Typography type='label' variant='secondary'>\n            {t(\"Or turn one on in the Hexclave dashboard, under Auth Methods.\")}\n          </Typography>\n        </div>\n      </div>\n    </MaybeFullPage>\n  );\n}\n"],"mappings":";;;;;;;AAYA,MAAM,gBAAgB;;;;;;;;;AAUtB,SAAgB,yBAAyB,OAGtC;CACD,MAAM,EAAE,MAAM,eAAe;CAE7B,OACE,oBAAC,eAAD;EAAe,UAAU,CAAC,CAAC,MAAM;YAC/B,qBAAC,OAAD;GAAK,WAAU;GAA0C,OAAO;IAAE,UAAU;IAAS,WAAW;IAAS,SAAS,MAAM,WAAW,SAAS;GAAE;aAA9I,CACE,qBAAC,OAAD;IAAK,WAAU;cAAf;KACE,oBAAC,OAAD;MAAK,WAAU;gBACb,oBAAC,UAAD,EAAU,WAAU,wBAAyB,CAAA;KAC1C,CAAA;KACL,oBAAC,YAAD;MAAY,MAAK;gBAAM,EAAE,0BAA0B;KAAc,CAAA;KACjE,oBAAC,YAAD;MAAY,MAAK;MAAQ,SAAQ;gBAC9B,MAAM,sBAAsB,OACzB,EAAE,4EAA4E,IAC9E,EAAE,0FAA0F,EAAE,oBAAoB,MAAM,mBAAmB,CAAC;KACtI,CAAA;IACT;OAEL,qBAAC,OAAD;IAAK,WAAU;cAAf;KACE,oBAAC,YAAD;MAAY,MAAK;gBAAS,EAAE,wBAAwB;KAAc,CAAA;KAClE,oBAAC,YAAD;MAAY,MAAK;MAAQ,SAAQ;gBAC9B,EAAE,gEAAgE;KACzD,CAAA;KACZ,oBAAC,OAAD;MAAK,WAAU;gBAA6H;KAAmB,CAAA;KAC/J,oBAAC,YAAD;MAAY,MAAK;MAAQ,SAAQ;gBAC9B,EAAE,+DAA+D;KACxD,CAAA;IACT;KACF;;CACQ,CAAA;AAEnB"}

package/dist/esm/components/team-switcher.js

@@ -1,6 +1,6 @@
 "use client";
-import { HexclaveAssertionError } from "@hexclave/shared/dist/utils/errors";
 import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
+import { HexclaveAssertionError } from "@hexclave/shared/dist/utils/errors";
 import { Button, Select, SelectContent, SelectGroup, SelectItem, SelectLabel, SelectSeparator, SelectTrigger, SelectValue, Skeleton, Typography, cn } from "@hexclave/ui";
 import { Suspense, useMemo } from "react";
 import { useStackApp, useUser } from "../index.js";

package/dist/esm/components-page/account-settings/active-sessions/active-sessions-page.js

@@ -1,5 +1,5 @@
-import { captureError } from "@hexclave/shared/dist/utils/errors";
 import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
+import { captureError } from "@hexclave/shared/dist/utils/errors";
 import { ActionCell, Badge, Button, Skeleton, Table, TableBody, TableCell, TableHead, TableHeader, TableRow, Typography } from "@hexclave/ui";
 import { useEffect, useState } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";

package/dist/esm/components-page/account-settings/email-and-auth/emails-section.js

@@ -1,6 +1,6 @@
+import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
 import { yupResolver } from "@hookform/resolvers/yup";
 import { strictEmailSchema, yupObject } from "@hexclave/shared/dist/schema-fields";
-import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
 import { ActionCell, Badge, Button, Input, Table, TableBody, TableCell, TableRow, Typography } from "@hexclave/ui";
 import { useEffect, useState } from "react";
 import { useForm } from "react-hook-form";

package/dist/esm/components-page/account-settings/email-and-auth/mfa-section.js

@@ -1,5 +1,5 @@
-import { throwErr } from "@hexclave/shared/dist/utils/errors";
 import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
+import { throwErr } from "@hexclave/shared/dist/utils/errors";
 import { Button, Input, Typography } from "@hexclave/ui";
 import { useEffect, useState } from "react";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";

package/dist/esm/components-page/account-settings/email-and-auth/password-section.js

@@ -1,6 +1,6 @@
+import { runAsynchronously, runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { yupResolver } from "@hookform/resolvers/yup";
 import { passwordSchema, yupObject, yupString } from "@hexclave/shared/dist/schema-fields";
-import { runAsynchronously, runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { Button, Input, Label, PasswordInput, Typography } from "@hexclave/ui";
 import { useState } from "react";
 import { useForm } from "react-hook-form";

package/dist/esm/components-page/account-settings/teams/team-creation-page.js

@@ -1,6 +1,6 @@
+import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { yupResolver } from "@hookform/resolvers/yup";
 import { yupObject, yupString } from "@hexclave/shared/dist/schema-fields";
-import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { Button, Input } from "@hexclave/ui";
 import { useState } from "react";
 import { useForm } from "react-hook-form";

package/dist/esm/components-page/account-settings/teams/team-member-invitation-section.js

@@ -1,6 +1,6 @@
+import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { yupResolver } from "@hookform/resolvers/yup";
 import { strictEmailSchema, yupObject } from "@hexclave/shared/dist/schema-fields";
-import { runAsynchronouslyWithAlert } from "@hexclave/shared/dist/utils/promises";
 import { Button, Input, Table, TableBody, TableCell, TableHead, TableHeader, TableRow, Typography } from "@hexclave/ui";
 import { useEffect, useState } from "react";
 import { useForm } from "react-hook-form";

package/dist/esm/components-page/auth-page.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-page.d.ts","names":[],"sources":["../../../src/components-page/auth-page.tsx"],"mappings":";KA2BK,KAAA;EACH,gBAAA;EACA,QAAA;EACA,QAAA;EACA,IAAA;EACA,iBAAA;EACA,SAAA,GAAY,KAAA,CAAM,SAAS;EAC3B,WAAA;IACE,MAAA;MACE,aAAA;MACA,iBAAA;MACA,cAAA;MACA,gBAAA;MACA,cAAA;QACE,EAAA;MAAA;IAAA;EAAA;AAAA;AAAA,iBAWQ,QAAA,CAAS,KAAA,EAAO,KAAK,+BAAA,GAAA,CAAA,OAAA"}
+{"version":3,"file":"auth-page.d.ts","names":[],"sources":["../../../src/components-page/auth-page.tsx"],"mappings":";KA4BK,KAAA;EACH,gBAAA;EACA,QAAA;EACA,QAAA;EACA,IAAA;EACA,iBAAA;EACA,SAAA,GAAY,KAAA,CAAM,SAAS;EAC3B,WAAA;IACE,MAAA;MACE,aAAA;MACA,iBAAA;MACA,cAAA;MACA,gBAAA;MACA,cAAA;QACE,EAAA;MAAA;IAAA;EAAA;AAAA;AAAA,iBAWQ,QAAA,CAAS,KAAA,EAAO,KAAK,+BAAA,GAAA,CAAA,OAAA"}