@hexclave/next 1.0.73 → 1.0.75

package/dist/lib/hexclave-app/apps/implementations/server-app-impl.d.ts

@@ -1,2 +1,2 @@
-import { n as _HexclaveServerAppImplIncomplete } from "../../../../admin-app-impl-D867jXHk.js";
+import { n as _HexclaveServerAppImplIncomplete } from "../../../../admin-app-impl-sTQD2d-3.js";
 export { _HexclaveServerAppImplIncomplete };

package/dist/lib/hexclave-app/apps/index.d.ts

@@ -1,2 +1,2 @@
-import { B as StackServerAppConstructor, D as HexclaveAdminApp, F as StackAdminAppConstructorOptions, I as HexclaveServerApp, L as HexclaveServerAppConstructor, N as StackAdminApp, O as HexclaveAdminAppConstructor, P as StackAdminAppConstructor, R as HexclaveServerAppConstructorOptions, V as StackServerAppConstructorOptions, a as StackClientApp, c as StackClientAppJson, i as HexclaveClientAppJson, k as HexclaveAdminAppConstructorOptions, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, r as HexclaveClientAppConstructorOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp, z as StackServerApp } from "../../../client-app-B931IBrx.js";
+import { B as StackServerAppConstructor, D as HexclaveAdminApp, F as StackAdminAppConstructorOptions, I as HexclaveServerApp, L as HexclaveServerAppConstructor, N as StackAdminApp, O as HexclaveAdminAppConstructor, P as StackAdminAppConstructor, R as HexclaveServerAppConstructorOptions, V as StackServerAppConstructorOptions, a as StackClientApp, c as StackClientAppJson, i as HexclaveClientAppJson, k as HexclaveAdminAppConstructorOptions, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, r as HexclaveClientAppConstructorOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp, z as StackServerApp } from "../../../client-app-BCT5p_70.js";
 export { HexclaveAdminApp, type HexclaveAdminAppConstructor, type HexclaveAdminAppConstructorOptions, HexclaveClientApp, type HexclaveClientAppConstructor, type HexclaveClientAppConstructorOptions, type HexclaveClientAppJson, HexclaveServerApp, type HexclaveServerAppConstructor, type HexclaveServerAppConstructorOptions, StackAdminApp, type StackAdminAppConstructor, type StackAdminAppConstructorOptions, StackClientApp, type StackClientAppConstructor, type StackClientAppConstructorOptions, type StackClientAppJson, StackServerApp, type StackServerAppConstructor, type StackServerAppConstructorOptions };

package/dist/lib/hexclave-app/apps/interfaces/admin-app.d.ts

@@ -1,4 +1,4 @@
 import { a as AdminWorkflowRunState, c as AdminWorkflowStepAttempt, d as AdminWorkflowUpgradeResult, f as AdminWorkflowVersion, i as AdminWorkflowRunDetails, l as AdminWorkflowSyncResult, n as AdminWorkflowDivergenceDiagnostic, o as AdminWorkflowRunsFilter, r as AdminWorkflowRun, s as AdminWorkflowStep, t as AdminWorkflow, u as AdminWorkflowTrigger } from "../../../../workflows-DEb7pIuQ.js";
-import { A as ManagedEmailProviderListItem, D as HexclaveAdminApp, E as EmailOutboxUpdateOptions, F as StackAdminAppConstructorOptions, M as ManagedEmailProviderStatus, N as StackAdminApp, O as HexclaveAdminAppConstructor, P as StackAdminAppConstructor, T as EmailOutboxListResult, j as ManagedEmailProviderSetupResult, k as HexclaveAdminAppConstructorOptions, w as EmailOutboxListOptions } from "../../../../client-app-B931IBrx.js";
+import { A as ManagedEmailProviderListItem, D as HexclaveAdminApp, E as EmailOutboxUpdateOptions, F as StackAdminAppConstructorOptions, M as ManagedEmailProviderStatus, N as StackAdminApp, O as HexclaveAdminAppConstructor, P as StackAdminAppConstructor, T as EmailOutboxListResult, j as ManagedEmailProviderSetupResult, k as HexclaveAdminAppConstructorOptions, w as EmailOutboxListOptions } from "../../../../client-app-BCT5p_70.js";
 import { a as ListSessionReplaysOptions, i as ListSessionReplayChunksResult, n as AdminSessionReplayChunk, o as ListSessionReplaysResult, r as ListSessionReplayChunksOptions, s as SessionReplayAllEventsResult, t as AdminSessionReplay } from "../../../../index-hYjsGKNc.js";
 export { type AdminSessionReplay, type AdminSessionReplayChunk, type AdminWorkflow, type AdminWorkflowDivergenceDiagnostic, type AdminWorkflowRun, type AdminWorkflowRunDetails, type AdminWorkflowRunState, type AdminWorkflowRunsFilter, type AdminWorkflowStep, type AdminWorkflowStepAttempt, type AdminWorkflowSyncResult, type AdminWorkflowTrigger, type AdminWorkflowUpgradeResult, type AdminWorkflowVersion, EmailOutboxListOptions, EmailOutboxListResult, EmailOutboxUpdateOptions, HexclaveAdminApp, HexclaveAdminAppConstructor, HexclaveAdminAppConstructorOptions, type ListSessionReplayChunksOptions, type ListSessionReplayChunksResult, type ListSessionReplaysOptions, type ListSessionReplaysResult, ManagedEmailProviderListItem, ManagedEmailProviderSetupResult, ManagedEmailProviderStatus, type SessionReplayAllEventsResult, StackAdminApp, StackAdminAppConstructor, StackAdminAppConstructorOptions };

package/dist/lib/hexclave-app/apps/interfaces/client-app.d.ts

@@ -1,2 +1,2 @@
-import { a as StackClientApp, c as StackClientAppJson, i as HexclaveClientAppJson, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, r as HexclaveClientAppConstructorOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp } from "../../../../client-app-B931IBrx.js";
+import { a as StackClientApp, c as StackClientAppJson, i as HexclaveClientAppJson, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, r as HexclaveClientAppConstructorOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp } from "../../../../client-app-BCT5p_70.js";
 export { HexclaveClientApp, HexclaveClientAppConstructor, HexclaveClientAppConstructorOptions, HexclaveClientAppJson, StackClientApp, StackClientAppConstructor, StackClientAppConstructorOptions, StackClientAppJson };

package/dist/lib/hexclave-app/apps/interfaces/client-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-app.js","names":["_HexclaveClientAppImpl"],"sources":["../../../../../src/lib/hexclave-app/apps/interfaces/client-app.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { KnownErrors } from \"@hexclave/shared\";\nimport { CurrentUserCrud } from \"@hexclave/shared/dist/interface/crud/current-user\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { AsyncStoreProperty, AuthLike, GetCurrentPartialUserOptions, GetCurrentUserOptions, HandlerUrlOptions, HandlerUrls, OAuthScopesOnSignIn, RedirectMethod, RedirectToOptions, ResolvedHandlerUrls, hexclaveAppInternalsSymbol, TokenStoreInit } from \"../../common\";\nimport type { RequestListener } from \"@hexclave/shared/dist/interface/client-interface\";\nimport { CustomerInvoicesList, CustomerInvoicesRequestOptions, CustomerProductsList, CustomerProductsRequestOptions, Item } from \"../../customers\";\nimport { Project } from \"../../projects\";\nimport { ProjectCurrentUser, SyncedPartialUser, TokenPartialUser } from \"../../users\";\nimport { _HexclaveClientAppImpl } from \"../implementations\";\nimport { AnalyticsOptions } from \"../implementations/session-replay\";\n\n/** @deprecated Use `HexclaveClientAppConstructorOptions` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = {\n  baseUrl?: string | { browser: string, server: string },\n  extraRequestHeaders?: Record<string, string>,\n  projectId?: ProjectId,\n  publishableClientKey?: string,\n  urls?: HandlerUrlOptions,\n  oauthScopesOnSignIn?: Partial<OAuthScopesOnSignIn>,\n  tokenStore?: TokenStoreInit<HasTokenStore>,\n  redirectMethod?: RedirectMethod,\n  inheritsFrom?: StackClientApp<any, any>,\n\n  /**\n   * Whether to show the Hexclave dev tool indicator in browser-like environments.\n   *\n   * - `true`: always show\n   * - `false`: never show\n   * - `\"auto\"` (default): show based on NODE_ENV or origin heuristics\n   */\n  devTool?: boolean | \"auto\",\n\n  /**\n   * By default, the Stack app will automatically prefetch some data from Stack's server when this app is first\n   * constructed. This improves the performance of your app, but will create network requests that are unnecessary if\n   * the app is never used or disposed of immediately. To disable this behavior, set this option to true.\n   */\n  noAutomaticPrefetch?: boolean,\n\n  /**\n   * Options for analytics and session recording. Replays are enabled by default;\n   * set `{ replays: { enabled: false } }` to opt out.\n   */\n  analytics?: AnalyticsOptions,\n} & (\n  { tokenStore: TokenStoreInit<HasTokenStore> } | { tokenStore?: undefined, inheritsFrom: StackClientApp<HasTokenStore, any> }\n) & (\n  string extends ProjectId ? unknown : ({ projectId: ProjectId } | { inheritsFrom: StackClientApp<any, ProjectId> })\n);\n\n\n/** @deprecated Use `HexclaveClientAppJson` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppJson<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppConstructorOptions<HasTokenStore, ProjectId> & { inheritsFrom?: undefined } & {\n  uniqueIdentifier: string,\n  // note: if you add more fields here, make sure to ensure the checkString in the constructor has/doesn't have them\n};\n\n/** @deprecated Use `HexclaveClientApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = (\n  & {\n    readonly projectId: ProjectId,\n\n    /**\n     * The version of the Hexclave SDK.\n     */\n    readonly version: string,\n\n    /**\n     * @deprecated Do not use `app.urls` for navigation. It is static and does not include runtime redirect-back,\n     * cross-domain auth, or sign-out state. Use the matching `redirectToXyz()` method instead, for example\n     * `redirectToSignIn()`, `redirectToSignUp()`, `redirectToSignOut()`, or `redirectToAccountSettings()`.\n     */\n    readonly urls: Readonly<ResolvedHandlerUrls>,\n\n    signInWithOAuth(provider: string, options?: { returnTo?: string }): Promise<void>,\n    signInWithCredential(options: { email: string, password: string, noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"EmailPasswordMismatch\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n    signUpWithCredential(options: {\n      email: string,\n      password: string,\n      noRedirect?: boolean,\n    } & ({ noVerificationCallback: true } | { noVerificationCallback?: false, verificationCallbackUrl?: string })): Promise<Result<undefined, KnownErrors[\"UserWithEmailAlreadyExists\"] | KnownErrors[\"ContactChannelAlreadyUsedForAuthBySomeoneElse\"] | KnownErrors[\"PasswordRequirementsNotMet\"] | KnownErrors[\"BotChallengeFailed\"]>>,\n    signInWithPasskey(): Promise<Result<undefined, KnownErrors[\"PasskeyAuthenticationFailed\"] | KnownErrors[\"InvalidTotpCode\"] | KnownErrors[\"PasskeyWebAuthnError\"]>>,\n    callOAuthCallback(): Promise<boolean>,\n    promptCliLogin(options: { appUrl: string, expiresInMillis?: number, anonRefreshToken?: string, promptLink?: (url: string, loginCode: string) => void }): Promise<Result<string, KnownErrors[\"CliAuthError\"] | KnownErrors[\"CliAuthExpiredError\"] | KnownErrors[\"CliAuthUsedError\"]>>,\n    sendForgotPasswordEmail(email: string, options?: { callbackUrl?: string }): Promise<Result<undefined, KnownErrors[\"UserNotFound\"]>>,\n    sendMagicLinkEmail(email: string, options?: { callbackUrl?: string }): Promise<Result<{ nonce: string }, KnownErrors[\"RedirectUrlNotWhitelisted\"] | KnownErrors[\"BotChallengeFailed\"]>>,\n    resetPassword(options: { code: string, password: string }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    verifyPasswordResetCode(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    verifyTeamInvitationCode(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    acceptTeamInvitation(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    getTeamInvitationDetails(code: string): Promise<Result<{ teamDisplayName: string }, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    verifyEmail(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    signInWithMagicLink(code: string, options?: { noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n    signInWithMfa(otp: string, code: string, options?: { noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n\n    redirectToOAuthCallback(): Promise<void>,\n\n    getConvexClientAuth(options: HasTokenStore extends false ? { tokenStore: TokenStoreInit } : { tokenStore?: TokenStoreInit }): (args: { forceRefreshToken: boolean }) => Promise<string | null>,\n    getConvexHttpClientAuth(options: { tokenStore: TokenStoreInit }): Promise<string>,\n\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): ProjectCurrentUser<ProjectId>,\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): ProjectCurrentUser<ProjectId>,\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): ProjectCurrentUser<ProjectId>,\n    useUser(options?: GetCurrentUserOptions<HasTokenStore>): ProjectCurrentUser<ProjectId> | null,\n\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options?: GetCurrentUserOptions<HasTokenStore>): Promise<ProjectCurrentUser<ProjectId> | null>,\n\n    cancelSubscription(options: { productId: string, subscriptionId?: string } | { productId: string, subscriptionId?: string, teamId: string }): Promise<void>,\n\n    // note: we don't special-case 'anonymous' here to return non-null, see GetPartialUserOptions for more details\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'token' }): Promise<TokenPartialUser | null>,\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'convex' }): Promise<TokenPartialUser | null>,\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore>): Promise<SyncedPartialUser | TokenPartialUser | null>,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'token' }): TokenPartialUser | null,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'convex' }): TokenPartialUser | null,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore>): SyncedPartialUser | TokenPartialUser | null,\n    useNavigate(): (to: string) => void, // THIS_LINE_PLATFORM react-like\n\n    [hexclaveAppInternalsSymbol]: {\n      toClientJson(): StackClientAppJson<HasTokenStore, ProjectId>,\n      setCurrentUser(userJsonPromise: Promise<CurrentUserCrud['Client']['Read'] | null>): void,\n      getConstructorOptions(): StackClientAppConstructorOptions<HasTokenStore, ProjectId> & { inheritsFrom?: undefined },\n      sendSessionReplayBatch(body: string, options: { keepalive: boolean }): Promise<Result<Response, Error>>,\n      sendAnalyticsEventBatch(body: string, options: { keepalive: boolean }): Promise<Result<Response, Error>>,\n      addRequestListener(listener: RequestListener): () => void,\n      sendRequest(path: string, requestOptions: RequestInit, requestType?: \"client\" | \"server\" | \"admin\"): Promise<Response>,\n      getUrls(): Readonly<ResolvedHandlerUrls>,\n      getRedirectMethod(): RedirectMethod,\n      redirectToUrl(url: string | URL, options?: { replace?: boolean }): Promise<void>,\n      getRedirectToHandlerUrl(handlerName: keyof HandlerUrls, options?: RedirectToOptions): Promise<string>,\n      redirectToHandler(handlerName: keyof HandlerUrls, options?: RedirectToOptions): Promise<void>,\n      signInWithTokens(tokens: { accessToken: string, refreshToken: string }): Promise<void>,\n      awaitPendingAuthResolutions(): Promise<void>,\n      isTrustedRedirectUrl(url: string): Promise<boolean>,\n    },\n  }\n  & AsyncStoreProperty<\"project\", [], Project, false>\n  & AsyncStoreProperty<\n    \"item\",\n    [{ itemId: string, userId: string } | { itemId: string, teamId: string } | { itemId: string, customCustomerId: string }],\n    Item,\n    false\n  >\n  & AsyncStoreProperty<\n    \"products\",\n    [options: CustomerProductsRequestOptions],\n    CustomerProductsList,\n    true\n  >\n  & AsyncStoreProperty<\n    \"invoices\",\n    [options: CustomerInvoicesRequestOptions],\n    CustomerInvoicesList,\n    true\n  >\n  & { [K in `redirectTo${Capitalize<keyof Omit<HandlerUrls, 'handler' | 'oauthCallback'>>}`]: (options?: RedirectToOptions) => Promise<void> }\n  & AuthLike<HasTokenStore extends false ? { tokenStore: TokenStoreInit } : { tokenStore?: TokenStoreInit }>\n);\n/** @deprecated Use `HexclaveClientAppConstructor` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppConstructor = {\n  new <\n    TokenStoreType extends string,\n    HasTokenStore extends (TokenStoreType extends {} ? true : boolean),\n    ProjectId extends string\n  >(options: StackClientAppConstructorOptions<HasTokenStore, ProjectId>): StackClientApp<HasTokenStore, ProjectId>,\n  new(options: StackClientAppConstructorOptions<boolean, string>): StackClientApp<boolean, string>,\n\n  [hexclaveAppInternalsSymbol]: {\n    fromClientJson<HasTokenStore extends boolean, ProjectId extends string>(\n      json: StackClientAppJson<HasTokenStore, ProjectId>\n    ): StackClientApp<HasTokenStore, ProjectId>,\n  },\n};\nexport type HexclaveClientAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppConstructorOptions<HasTokenStore, ProjectId>;\nexport type HexclaveClientAppJson<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppJson<HasTokenStore, ProjectId>;\nexport type HexclaveClientApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = StackClientApp<HasTokenStore, ProjectId>;\nexport type HexclaveClientAppConstructor = StackClientAppConstructor;\nexport const HexclaveClientApp: HexclaveClientAppConstructor = _HexclaveClientAppImpl;\n/** @deprecated Use `HexclaveClientApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport const StackClientApp: StackClientAppConstructor = HexclaveClientApp;\n"],"mappings":";;AAwLA,MAAa,yDAAkDA,CAAAA,CAAAA;;AAE/D,MAAa,iBAA4C"}
+{"version":3,"file":"client-app.js","names":["_HexclaveClientAppImpl"],"sources":["../../../../../src/lib/hexclave-app/apps/interfaces/client-app.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { KnownErrors } from \"@hexclave/shared\";\nimport type { RequestListener } from \"@hexclave/shared/dist/interface/client-interface\";\nimport { CurrentUserCrud } from \"@hexclave/shared/dist/interface/crud/current-user\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { AsyncStoreProperty, AuthLike, GetCurrentPartialUserOptions, GetCurrentUserOptions, HandlerUrlOptions, HandlerUrls, hexclaveAppInternalsSymbol, OAuthScopesOnSignIn, RedirectMethod, RedirectToOptions, ResolvedHandlerUrls, TokenStoreInit } from \"../../common\";\nimport { CustomerInvoicesList, CustomerInvoicesRequestOptions, CustomerProductsList, CustomerProductsRequestOptions, Item } from \"../../customers\";\nimport { Project } from \"../../projects\";\nimport { ProjectCurrentUser, SyncedPartialUser, TokenPartialUser } from \"../../users\";\nimport { _HexclaveClientAppImpl } from \"../implementations\";\nimport { AnalyticsOptions } from \"../implementations/session-replay\";\n\n/** @deprecated Use `HexclaveClientAppConstructorOptions` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = {\n  baseUrl?: string | { browser: string, server: string },\n  extraRequestHeaders?: Record<string, string>,\n  projectId?: ProjectId,\n  publishableClientKey?: string,\n  urls?: HandlerUrlOptions,\n  oauthScopesOnSignIn?: Partial<OAuthScopesOnSignIn>,\n  tokenStore?: TokenStoreInit<HasTokenStore>,\n  redirectMethod?: RedirectMethod,\n  inheritsFrom?: StackClientApp<any, any>,\n\n  /**\n   * Whether to show the Hexclave dev tool indicator in browser-like environments.\n   *\n   * - `true`: always show\n   * - `false`: never show\n   * - `\"auto\"` (default): show based on NODE_ENV or origin heuristics\n   */\n  devTool?: boolean | \"auto\",\n\n  /**\n   * By default, the Stack app will automatically prefetch some data from Stack's server when this app is first\n   * constructed. This improves the performance of your app, but will create network requests that are unnecessary if\n   * the app is never used or disposed of immediately. To disable this behavior, set this option to true.\n   */\n  noAutomaticPrefetch?: boolean,\n\n  /**\n   * Whether the constructor starts browser integrations and other automatic side effects. Defaults to `true`.\n   *\n   * Set this to `false` when the app is instantiated inside a custom dashboard. Explicit method calls remain\n   * available and can still perform their documented side effects.\n   */\n  automaticSideEffects?: boolean,\n\n  /**\n   * Options for analytics and session recording. Replays are enabled by default;\n   * set `{ replays: { enabled: false } }` to opt out.\n   */\n  analytics?: AnalyticsOptions,\n} & (\n  { tokenStore: TokenStoreInit<HasTokenStore> } | { tokenStore?: undefined, inheritsFrom: StackClientApp<HasTokenStore, any> }\n) & (\n  string extends ProjectId ? unknown : ({ projectId: ProjectId } | { inheritsFrom: StackClientApp<any, ProjectId> })\n);\n\n\n/** @deprecated Use `HexclaveClientAppJson` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppJson<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppConstructorOptions<HasTokenStore, ProjectId> & { inheritsFrom?: undefined } & {\n  uniqueIdentifier: string,\n  // note: if you add more fields here, make sure to ensure the checkString in the constructor has/doesn't have them\n};\n\n/** @deprecated Use `HexclaveClientApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = (\n  & {\n    readonly projectId: ProjectId,\n\n    /**\n     * The version of the Hexclave SDK.\n     */\n    readonly version: string,\n\n    /**\n     * @deprecated Do not use `app.urls` for navigation. It is static and does not include runtime redirect-back,\n     * cross-domain auth, or sign-out state. Use the matching `redirectToXyz()` method instead, for example\n     * `redirectToSignIn()`, `redirectToSignUp()`, `redirectToSignOut()`, or `redirectToAccountSettings()`.\n     */\n    readonly urls: Readonly<ResolvedHandlerUrls>,\n\n    signInWithOAuth(provider: string, options?: { returnTo?: string }): Promise<void>,\n    signInWithCredential(options: { email: string, password: string, noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"EmailPasswordMismatch\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n    signUpWithCredential(options: {\n      email: string,\n      password: string,\n      noRedirect?: boolean,\n    } & ({ noVerificationCallback: true } | { noVerificationCallback?: false, verificationCallbackUrl?: string })): Promise<Result<undefined, KnownErrors[\"UserWithEmailAlreadyExists\"] | KnownErrors[\"ContactChannelAlreadyUsedForAuthBySomeoneElse\"] | KnownErrors[\"PasswordRequirementsNotMet\"] | KnownErrors[\"BotChallengeFailed\"]>>,\n    signInWithPasskey(): Promise<Result<undefined, KnownErrors[\"PasskeyAuthenticationFailed\"] | KnownErrors[\"InvalidTotpCode\"] | KnownErrors[\"PasskeyWebAuthnError\"]>>,\n    callOAuthCallback(): Promise<boolean>,\n    promptCliLogin(options: { appUrl: string, expiresInMillis?: number, anonRefreshToken?: string, promptLink?: (url: string, loginCode: string) => void }): Promise<Result<string, KnownErrors[\"CliAuthError\"] | KnownErrors[\"CliAuthExpiredError\"] | KnownErrors[\"CliAuthUsedError\"]>>,\n    sendForgotPasswordEmail(email: string, options?: { callbackUrl?: string }): Promise<Result<undefined, KnownErrors[\"UserNotFound\"]>>,\n    sendMagicLinkEmail(email: string, options?: { callbackUrl?: string }): Promise<Result<{ nonce: string }, KnownErrors[\"RedirectUrlNotWhitelisted\"] | KnownErrors[\"BotChallengeFailed\"]>>,\n    resetPassword(options: { code: string, password: string }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    verifyPasswordResetCode(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    verifyTeamInvitationCode(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    acceptTeamInvitation(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    getTeamInvitationDetails(code: string): Promise<Result<{ teamDisplayName: string }, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"TeamInvitationEmailMismatch\"]>>,\n    verifyEmail(code: string): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"]>>,\n    signInWithMagicLink(code: string, options?: { noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n    signInWithMfa(otp: string, code: string, options?: { noRedirect?: boolean }): Promise<Result<undefined, KnownErrors[\"VerificationCodeError\"] | KnownErrors[\"InvalidTotpCode\"]>>,\n\n    redirectToOAuthCallback(): Promise<void>,\n\n    getConvexClientAuth(options: HasTokenStore extends false ? { tokenStore: TokenStoreInit } : { tokenStore?: TokenStoreInit }): (args: { forceRefreshToken: boolean }) => Promise<string | null>,\n    getConvexHttpClientAuth(options: { tokenStore: TokenStoreInit }): Promise<string>,\n\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): ProjectCurrentUser<ProjectId>,\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): ProjectCurrentUser<ProjectId>,\n    useUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): ProjectCurrentUser<ProjectId>,\n    useUser(options?: GetCurrentUserOptions<HasTokenStore>): ProjectCurrentUser<ProjectId> | null,\n\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): Promise<ProjectCurrentUser<ProjectId>>,\n    getUser(options?: GetCurrentUserOptions<HasTokenStore>): Promise<ProjectCurrentUser<ProjectId> | null>,\n\n    cancelSubscription(options: { productId: string, subscriptionId?: string } | { productId: string, subscriptionId?: string, teamId: string }): Promise<void>,\n\n    // note: we don't special-case 'anonymous' here to return non-null, see GetPartialUserOptions for more details\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'token' }): Promise<TokenPartialUser | null>,\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'convex' }): Promise<TokenPartialUser | null>,\n    getPartialUser(options: GetCurrentPartialUserOptions<HasTokenStore>): Promise<SyncedPartialUser | TokenPartialUser | null>,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'token' }): TokenPartialUser | null,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore> & { from: 'convex' }): TokenPartialUser | null,\n    usePartialUser(options: GetCurrentPartialUserOptions<HasTokenStore>): SyncedPartialUser | TokenPartialUser | null,\n    useNavigate(): (to: string) => void, // THIS_LINE_PLATFORM react-like\n\n    [hexclaveAppInternalsSymbol]: {\n      toClientJson(): StackClientAppJson<HasTokenStore, ProjectId>,\n      setCurrentUser(userJsonPromise: Promise<CurrentUserCrud['Client']['Read'] | null>): void,\n      getConstructorOptions(): StackClientAppConstructorOptions<HasTokenStore, ProjectId> & { inheritsFrom?: undefined },\n      sendSessionReplayBatch(body: string, options: { keepalive: boolean }): Promise<Result<Response, Error>>,\n      sendAnalyticsEventBatch(body: string, options: { keepalive: boolean }): Promise<Result<Response, Error>>,\n      addRequestListener(listener: RequestListener): () => void,\n      sendRequest(path: string, requestOptions: RequestInit, requestType?: \"client\" | \"server\" | \"admin\"): Promise<Response>,\n      getUrls(): Readonly<ResolvedHandlerUrls>,\n      getRedirectMethod(): RedirectMethod,\n      redirectToUrl(url: string | URL, options?: { replace?: boolean }): Promise<void>,\n      getRedirectToHandlerUrl(handlerName: keyof HandlerUrls, options?: RedirectToOptions): Promise<string>,\n      redirectToHandler(handlerName: keyof HandlerUrls, options?: RedirectToOptions): Promise<void>,\n      /** Raw flow metadata only. Never navigate to this value without normal redirect validation. */\n      getRawAfterAuthReturnTo(): string | null,\n      signInWithTokens(tokens: { accessToken: string, refreshToken: string }): Promise<void>,\n      awaitPendingAuthResolutions(): Promise<void>,\n      isTrustedRedirectUrl(url: string): Promise<boolean>,\n    },\n  }\n  & AsyncStoreProperty<\"project\", [], Project, false>\n  & AsyncStoreProperty<\n    \"item\",\n    [{ itemId: string, userId: string } | { itemId: string, teamId: string } | { itemId: string, customCustomerId: string }],\n    Item,\n    false\n  >\n  & AsyncStoreProperty<\n    \"products\",\n    [options: CustomerProductsRequestOptions],\n    CustomerProductsList,\n    true\n  >\n  & AsyncStoreProperty<\n    \"invoices\",\n    [options: CustomerInvoicesRequestOptions],\n    CustomerInvoicesList,\n    true\n  >\n  & { [K in `redirectTo${Capitalize<keyof Omit<HandlerUrls, 'handler' | 'oauthCallback'>>}`]: (options?: RedirectToOptions) => Promise<void> }\n  & AuthLike<HasTokenStore extends false ? { tokenStore: TokenStoreInit } : { tokenStore?: TokenStoreInit }>\n);\n/** @deprecated Use `HexclaveClientAppConstructor` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackClientAppConstructor = {\n  new <\n    TokenStoreType extends string,\n    HasTokenStore extends (TokenStoreType extends {} ? true : boolean),\n    ProjectId extends string\n  >(options: StackClientAppConstructorOptions<HasTokenStore, ProjectId>): StackClientApp<HasTokenStore, ProjectId>,\n  new(options: StackClientAppConstructorOptions<boolean, string>): StackClientApp<boolean, string>,\n\n  [hexclaveAppInternalsSymbol]: {\n    fromClientJson<HasTokenStore extends boolean, ProjectId extends string>(\n      json: StackClientAppJson<HasTokenStore, ProjectId>\n    ): StackClientApp<HasTokenStore, ProjectId>,\n  },\n};\nexport type HexclaveClientAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppConstructorOptions<HasTokenStore, ProjectId>;\nexport type HexclaveClientAppJson<HasTokenStore extends boolean, ProjectId extends string> = StackClientAppJson<HasTokenStore, ProjectId>;\nexport type HexclaveClientApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = StackClientApp<HasTokenStore, ProjectId>;\nexport type HexclaveClientAppConstructor = StackClientAppConstructor;\nexport const HexclaveClientApp: HexclaveClientAppConstructor = _HexclaveClientAppImpl;\n/** @deprecated Use `HexclaveClientApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport const StackClientApp: StackClientAppConstructor = HexclaveClientApp;\n"],"mappings":";;AAkMA,MAAa,yDAAkDA,CAAAA,CAAAA;;AAE/D,MAAa,iBAA4C"}

package/dist/lib/hexclave-app/apps/interfaces/server-app.d.ts

@@ -1,2 +1,2 @@
-import { B as StackServerAppConstructor, I as HexclaveServerApp, L as HexclaveServerAppConstructor, R as HexclaveServerAppConstructorOptions, V as StackServerAppConstructorOptions, z as StackServerApp } from "../../../../client-app-B931IBrx.js";
+import { B as StackServerAppConstructor, I as HexclaveServerApp, L as HexclaveServerAppConstructor, R as HexclaveServerAppConstructorOptions, V as StackServerAppConstructorOptions, z as StackServerApp } from "../../../../client-app-BCT5p_70.js";
 export { HexclaveServerApp, HexclaveServerAppConstructor, HexclaveServerAppConstructorOptions, StackServerApp, StackServerAppConstructor, StackServerAppConstructorOptions };

package/dist/lib/hexclave-app/index.d.ts

@@ -6,7 +6,7 @@ import { a as PlanUsageRow, i as PlanUsagePlanId, n as PlanUsageKind, r as PlanU
 import { a as AdminWorkflowRunState, c as AdminWorkflowStepAttempt, d as AdminWorkflowUpgradeResult, f as AdminWorkflowVersion, i as AdminWorkflowRunDetails, l as AdminWorkflowSyncResult, n as AdminWorkflowDivergenceDiagnostic, o as AdminWorkflowRunsFilter, r as AdminWorkflowRun, s as AdminWorkflowStep, t as AdminWorkflow, u as AdminWorkflowTrigger } from "../../workflows-DEb7pIuQ.js";
 import { r as OAuthConnection, t as Connection } from "../../index-C_kxyHao.js";
 import { i as ServerContactChannel, t as ContactChannel } from "../../index-DN04TjLM.js";
-import { $ as TeamCreateOptions, B as StackServerAppConstructor, D as HexclaveAdminApp, E as EmailOutboxUpdateOptions, F as StackAdminAppConstructorOptions, H as EditableTeamMemberProfile, I as HexclaveServerApp, J as ServerTeamCreateOptions, K as ServerListUsersOptions, L as HexclaveServerAppConstructor, N as StackAdminApp, O as HexclaveAdminAppConstructor, Ot as User, P as StackAdminAppConstructor, Q as Team, R as HexclaveServerAppConstructorOptions, St as ServerUser, T as EmailOutboxListResult, U as ReceivedTeamInvitation, V as StackServerAppConstructorOptions, W as SentTeamInvitation, X as ServerTeamUpdateOptions, Y as ServerTeamMemberProfile, Z as ServerTeamUser, _ as AdminProjectCreateOptions, _t as OAuthProvider, a as StackClientApp, c as StackClientAppJson, d as AdminDeploymentEnvVarOptions, et as TeamInvitation, f as AdminDeploymentRunJson, ft as CurrentInternalServerUser, g as AdminProject, h as AdminOwnedProject, ht as CurrentUser, i as HexclaveClientAppJson, it as TeamUser, k as HexclaveAdminAppConstructorOptions, l as AdminDeploymentDomainJson, m as AdminDeploymentServiceJson, mt as CurrentServerUser, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, p as AdminDeploymentServiceBuildOptions, pt as CurrentInternalUser, q as ServerTeam, r as HexclaveClientAppConstructorOptions, rt as TeamUpdateOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp, tt as TeamMemberProfile, u as AdminDeploymentEnvVarJson, ut as Auth, v as AdminProjectUpdateOptions, w as EmailOutboxListOptions, x as PushedConfigSource, xt as ServerOAuthProvider, y as Project, z as StackServerApp } from "../../client-app-B931IBrx.js";
+import { $ as TeamCreateOptions, B as StackServerAppConstructor, D as HexclaveAdminApp, E as EmailOutboxUpdateOptions, F as StackAdminAppConstructorOptions, H as EditableTeamMemberProfile, I as HexclaveServerApp, J as ServerTeamCreateOptions, K as ServerListUsersOptions, L as HexclaveServerAppConstructor, N as StackAdminApp, O as HexclaveAdminAppConstructor, Ot as User, P as StackAdminAppConstructor, Q as Team, R as HexclaveServerAppConstructorOptions, St as ServerUser, T as EmailOutboxListResult, U as ReceivedTeamInvitation, V as StackServerAppConstructorOptions, W as SentTeamInvitation, X as ServerTeamUpdateOptions, Y as ServerTeamMemberProfile, Z as ServerTeamUser, _ as AdminProjectCreateOptions, _t as OAuthProvider, a as StackClientApp, c as StackClientAppJson, d as AdminDeploymentEnvVarOptions, et as TeamInvitation, f as AdminDeploymentRunJson, ft as CurrentInternalServerUser, g as AdminProject, h as AdminOwnedProject, ht as CurrentUser, i as HexclaveClientAppJson, it as TeamUser, k as HexclaveAdminAppConstructorOptions, l as AdminDeploymentDomainJson, m as AdminDeploymentServiceJson, mt as CurrentServerUser, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, p as AdminDeploymentServiceBuildOptions, pt as CurrentInternalUser, q as ServerTeam, r as HexclaveClientAppConstructorOptions, rt as TeamUpdateOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp, tt as TeamMemberProfile, u as AdminDeploymentEnvVarJson, ut as Auth, v as AdminProjectUpdateOptions, w as EmailOutboxListOptions, x as PushedConfigSource, xt as ServerOAuthProvider, y as Project, z as StackServerApp } from "../../client-app-BCT5p_70.js";
 import { a as AdminProjectConfigUpdateOptions, i as AdminProjectConfig, n as AdminEmailConfig, o as OAuthProviderConfig, r as AdminOAuthProviderConfig, s as ProjectConfig, t as AdminDomainConfig } from "../../index-B-MazpM_.js";
 import { r as getPagePrompt } from "../../url-targets-CWO0mjTr.js";
 export { type AdminDeploymentDomainJson, type AdminDeploymentEnvVarJson, type AdminDeploymentEnvVarOptions, type AdminDeploymentRunJson, type AdminDeploymentServiceBuildOptions, type AdminDeploymentServiceJson, type AdminDomainConfig, type AdminEmailConfig, type AdminEmailOutbox, type AdminEmailOutboxRecipient, type AdminEmailOutboxSimpleStatus, type AdminEmailOutboxStatus, type AdminOAuthProviderConfig, type AdminOwnedProject, type AdminProject, type AdminProjectConfig, type AdminProjectConfigUpdateOptions, type AdminProjectCreateOptions, type AdminProjectPermission, type AdminProjectPermissionDefinition, type AdminProjectPermissionDefinitionCreateOptions, type AdminProjectPermissionDefinitionUpdateOptions, type AdminProjectUpdateOptions, type AdminSendAttemptError, type AdminSentEmail, type AdminTeamPermission, type AdminTeamPermissionDefinition, type AdminTeamPermissionDefinitionCreateOptions, type AdminTeamPermissionDefinitionUpdateOptions, type AdminWorkflow, type AdminWorkflowDivergenceDiagnostic, type AdminWorkflowRun, type AdminWorkflowRunDetails, type AdminWorkflowRunState, type AdminWorkflowRunsFilter, type AdminWorkflowStep, type AdminWorkflowStepAttempt, type AdminWorkflowSyncResult, type AdminWorkflowTrigger, type AdminWorkflowUpgradeResult, type AdminWorkflowVersion, type Auth, type Connection, type ContactChannel, type CurrentInternalServerUser, type CurrentInternalUser, type CurrentServerUser, type CurrentUser, type EditableTeamMemberProfile, type EmailOutboxListOptions, type EmailOutboxListResult, type EmailOutboxUpdateOptions, type GetCurrentUserOptions, type GetCurrentUserOptions as GetUserOptions, type HandlerUrlOptions, type HandlerUrls, HexclaveAdminApp, type HexclaveAdminAppConstructor, type HexclaveAdminAppConstructorOptions, HexclaveClientApp, type HexclaveClientAppConstructor, type HexclaveClientAppConstructorOptions, type HexclaveClientAppJson, HexclaveServerApp, type HexclaveServerAppConstructor, type HexclaveServerAppConstructorOptions, type InternalApiKey, type InternalApiKeyBase, type InternalApiKeyBaseCrudRead, type InternalApiKeyCreateOptions, type InternalApiKeyFirstView, type OAuthConnection, type OAuthProvider, type OAuthProviderConfig, type OAuthScopesOnSignIn, type PlanUsage, type PlanUsageKind, type PlanUsageNextPlanId, type PlanUsagePlanId, type PlanUsageRow, type Project, type ProjectConfig, type PushedConfigSource, type ReceivedTeamInvitation, type ResolvedHandlerUrls, type SentTeamInvitation, type ServerContactChannel, type ServerListUsersOptions, type ServerOAuthProvider, type ServerTeam, type ServerTeamCreateOptions, type ServerTeamMemberProfile, type ServerTeamUpdateOptions, type ServerTeamUser, type ServerUser, StackAdminApp, type StackAdminAppConstructor, type StackAdminAppConstructorOptions, StackClientApp, type StackClientAppConstructor, type StackClientAppConstructorOptions, type StackClientAppJson, StackServerApp, type StackServerAppConstructor, type StackServerAppConstructorOptions, type Team, type TeamCreateOptions, type TeamInvitation, type TeamMemberProfile, type TeamUpdateOptions, type TeamUser, type User, getPagePrompt, hexclaveAppInternalsSymbol };

package/dist/lib/hexclave-app/projects/index.d.ts

@@ -1,2 +1,2 @@
-import { C as adminProjectUpdateOptionsToCrud, S as adminProjectCreateOptionsToCrud, _ as AdminProjectCreateOptions, b as PushConfigOptions, d as AdminDeploymentEnvVarOptions, f as AdminDeploymentRunJson, g as AdminProject, h as AdminOwnedProject, l as AdminDeploymentDomainJson, m as AdminDeploymentServiceJson, p as AdminDeploymentServiceBuildOptions, u as AdminDeploymentEnvVarJson, v as AdminProjectUpdateOptions, x as PushedConfigSource, y as Project } from "../../../client-app-B931IBrx.js";
+import { C as adminProjectUpdateOptionsToCrud, S as adminProjectCreateOptionsToCrud, _ as AdminProjectCreateOptions, b as PushConfigOptions, d as AdminDeploymentEnvVarOptions, f as AdminDeploymentRunJson, g as AdminProject, h as AdminOwnedProject, l as AdminDeploymentDomainJson, m as AdminDeploymentServiceJson, p as AdminDeploymentServiceBuildOptions, u as AdminDeploymentEnvVarJson, v as AdminProjectUpdateOptions, x as PushedConfigSource, y as Project } from "../../../client-app-BCT5p_70.js";
 export { type AdminDeploymentDomainJson, type AdminDeploymentEnvVarJson, type AdminDeploymentEnvVarOptions, type AdminDeploymentRunJson, type AdminDeploymentServiceBuildOptions, type AdminDeploymentServiceJson, AdminOwnedProject, AdminProject, AdminProjectCreateOptions, AdminProjectUpdateOptions, Project, PushConfigOptions, PushedConfigSource, adminProjectCreateOptionsToCrud, adminProjectUpdateOptionsToCrud };

package/dist/lib/hexclave-app/teams/index.d.ts

@@ -1,2 +1,2 @@
-import { $ as TeamCreateOptions, G as ServerListTeamsOptions, H as EditableTeamMemberProfile, J as ServerTeamCreateOptions, K as ServerListUsersOptions, Q as Team, U as ReceivedTeamInvitation, W as SentTeamInvitation, X as ServerTeamUpdateOptions, Y as ServerTeamMemberProfile, Z as ServerTeamUser, at as serverTeamCreateOptionsToCrud, ct as teamUpdateOptionsToCrud, et as TeamInvitation, it as TeamUser, nt as TeamMemberProfileUpdateOptions, ot as serverTeamUpdateOptionsToCrud, q as ServerTeam, rt as TeamUpdateOptions, st as teamCreateOptionsToCrud, tt as TeamMemberProfile } from "../../../client-app-B931IBrx.js";
+import { $ as TeamCreateOptions, G as ServerListTeamsOptions, H as EditableTeamMemberProfile, J as ServerTeamCreateOptions, K as ServerListUsersOptions, Q as Team, U as ReceivedTeamInvitation, W as SentTeamInvitation, X as ServerTeamUpdateOptions, Y as ServerTeamMemberProfile, Z as ServerTeamUser, at as serverTeamCreateOptionsToCrud, ct as teamUpdateOptionsToCrud, et as TeamInvitation, it as TeamUser, nt as TeamMemberProfileUpdateOptions, ot as serverTeamUpdateOptionsToCrud, q as ServerTeam, rt as TeamUpdateOptions, st as teamCreateOptionsToCrud, tt as TeamMemberProfile } from "../../../client-app-BCT5p_70.js";
 export { EditableTeamMemberProfile, ReceivedTeamInvitation, SentTeamInvitation, ServerListTeamsOptions, ServerListUsersOptions, ServerTeam, ServerTeamCreateOptions, ServerTeamMemberProfile, ServerTeamUpdateOptions, ServerTeamUser, Team, TeamCreateOptions, TeamInvitation, TeamMemberProfile, TeamMemberProfileUpdateOptions, TeamUpdateOptions, TeamUser, serverTeamCreateOptionsToCrud, serverTeamUpdateOptionsToCrud, teamCreateOptionsToCrud, teamUpdateOptionsToCrud };

package/dist/lib/hexclave-app/users/index.d.ts

@@ -1,2 +1,2 @@
-import { At as UserUpdateOptions, Ct as ServerUserCreateOptions, Dt as TokenPartialUser, Et as SyncedPartialUser, Mt as serverUserUpdateOptionsToCrud, Nt as userUpdateOptionsToCrud, Ot as User, Pt as withUserDestructureGuard, St as ServerUser, Tt as SyncedPartialServerUser, _t as OAuthProvider, bt as ServerBaseUser, dt as BaseUser, ft as CurrentInternalServerUser, gt as InternalUserExtra, ht as CurrentUser, jt as serverUserCreateOptionsToCrud, kt as UserExtra, lt as ActiveSession, mt as CurrentServerUser, pt as CurrentInternalUser, ut as Auth, vt as ProjectCurrentServerUser, wt as ServerUserUpdateOptions, xt as ServerOAuthProvider, yt as ProjectCurrentUser } from "../../../client-app-B931IBrx.js";
+import { At as UserUpdateOptions, Ct as ServerUserCreateOptions, Dt as TokenPartialUser, Et as SyncedPartialUser, Mt as serverUserUpdateOptionsToCrud, Nt as userUpdateOptionsToCrud, Ot as User, Pt as withUserDestructureGuard, St as ServerUser, Tt as SyncedPartialServerUser, _t as OAuthProvider, bt as ServerBaseUser, dt as BaseUser, ft as CurrentInternalServerUser, gt as InternalUserExtra, ht as CurrentUser, jt as serverUserCreateOptionsToCrud, kt as UserExtra, lt as ActiveSession, mt as CurrentServerUser, pt as CurrentInternalUser, ut as Auth, vt as ProjectCurrentServerUser, wt as ServerUserUpdateOptions, xt as ServerOAuthProvider, yt as ProjectCurrentUser } from "../../../client-app-BCT5p_70.js";
 export { ActiveSession, Auth, BaseUser, CurrentInternalServerUser, CurrentInternalUser, CurrentServerUser, CurrentUser, InternalUserExtra, OAuthProvider, ProjectCurrentServerUser, ProjectCurrentUser, ServerBaseUser, ServerOAuthProvider, ServerUser, ServerUserCreateOptions, ServerUserUpdateOptions, SyncedPartialServerUser, SyncedPartialUser, TokenPartialUser, User, UserExtra, UserUpdateOptions, serverUserCreateOptionsToCrud, serverUserUpdateOptionsToCrud, userUpdateOptionsToCrud, withUserDestructureGuard };

package/dist/lib/hooks.d.ts

@@ -1,2 +1,2 @@
-import { n as useStackApp, r as useUser, t as useHexclaveApp } from "../hooks-4PMrTtJr.js";
+import { n as useStackApp, r as useUser, t as useHexclaveApp } from "../hooks-CUe5bc3s.js";
 export { useHexclaveApp, useStackApp, useUser };

package/dist/oauth-callback-tCVTRbF2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-callback-tCVTRbF2.d.ts","names":[],"sources":["../src/components-page/oauth-callback.tsx"],"mappings":";iBAmBgB,aAAA;EAAgB;AAAA;EAAc,QAAA;AAAA,gCAAoB,GAAA,CAAA,OAAA"}
+{"version":3,"file":"oauth-callback-tCVTRbF2.d.ts","names":[],"sources":["../src/components-page/oauth-callback.tsx"],"mappings":";iBAiBgB,aAAA;EAAgB;AAAA;EAAc,QAAA;AAAA,gCAAoB,GAAA,CAAA,OAAA"}

package/dist/providers/hexclave-context.d.ts

@@ -1,4 +1,4 @@
-import { a as StackClientApp } from "../client-app-B931IBrx.js";
+import { a as StackClientApp } from "../client-app-BCT5p_70.js";
 import React from "react";
 
 //#region src/providers/hexclave-context.d.ts

package/dist/providers/hexclave-provider-client.d.ts

@@ -1,4 +1,4 @@
-import { a as StackClientApp, c as StackClientAppJson } from "../client-app-B931IBrx.js";
+import { a as StackClientApp, c as StackClientAppJson } from "../client-app-BCT5p_70.js";
 import { CurrentUserCrud } from "@hexclave/shared/dist/interface/crud/current-user";
 import React from "react";
 

package/dist/providers/hexclave-provider.d.ts

@@ -1,2 +1,2 @@
-import { n as HexclaveProvider, r as StackProvider, t as ActiveProvider } from "../hexclave-provider-DkFUT3Fa.js";
+import { n as HexclaveProvider, r as StackProvider, t as ActiveProvider } from "../hexclave-provider-BKxi3Vy-.js";
 export { HexclaveProvider, StackProvider, ActiveProvider as default };

package/dist/pushed-config-error-overlay/index.d.ts

@@ -1,4 +1,4 @@
-import { a as StackClientApp } from "../client-app-B931IBrx.js";
+import { a as StackClientApp } from "../client-app-BCT5p_70.js";
 //#region src/pushed-config-error-overlay/index.d.ts
 declare function mountPushedConfigErrorOverlay(app: StackClientApp<true>): () => void;
 //#endregion

package/dist/{redirect-page-urls-NUHUchgR.d.ts → redirect-page-urls-BEWG0AtP.d.ts}

@@ -28,8 +28,9 @@ declare function planRedirectToHandler(options: {
   noRedirectBack: boolean;
   currentUrl: URL | null;
   localOAuthCallbackUrl: string;
+  rawHomeUrl: string;
   getCrossDomainHandoffParams: (currentUrl: URL) => Promise<CrossDomainHandoffParams>;
 }): Promise<RedirectToHandlerPlan>;
 //#endregion
 export { planRedirectToHandler as i, crossDomainAuthQueryParams as n, getCrossDomainHandoffParamsFromCurrentUrl as r, CrossDomainHandoffParams as t };
-//# sourceMappingURL=redirect-page-urls-NUHUchgR.d.ts.map
+//# sourceMappingURL=redirect-page-urls-BEWG0AtP.d.ts.map

package/dist/redirect-page-urls-BEWG0AtP.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-page-urls-BEWG0AtP.d.ts","names":[],"sources":["../src/lib/hexclave-app/apps/implementations/redirect-page-urls.ts"],"mappings":";;;cAQa,0BAAA;EAAA;;;;;KAqBD,wBAAA;EACV,KAAA;EACA,aAAa;AAAA;AAAA,iBAGC,yCAAA,CAA0C,UAAA,EAAY,GAAA,GAAM,wBAAwB;AAAA,KA0K/F,qBAAA;EACC,IAAA;EAAkB,GAAA;AAAA;EAEpB,IAAA;EACA,WAAA;EACA,KAAA;EACA,aAAA;EACA,wBAAA;AAAA;AAAA,iBA4CkB,qBAAA,CAAsB,OAAA;EAC1C,WAAA,QAAmB,WAAA;EACnB,aAAA;EACA,cAAA;EACA,UAAA,EAAY,GAAA;EACZ,qBAAA;EACA,UAAA;EACA,2BAAA,GAA8B,UAAA,EAAY,GAAA,KAAQ,OAAA,CAAQ,wBAAA;AAAA,IACxD,OAAA,CAAQ,qBAAA"}

package/dist/utils/url.js

@@ -3,10 +3,18 @@ let _hexclave_shared_dist_utils_errors = require("@hexclave/shared/dist/utils/er
 //#region src/utils/url.ts
 function constructRedirectUrl(redirectUrl, callbackUrlName) {
 	if (typeof window === "undefined" || !window.location) throw new _hexclave_shared_dist_utils_errors.HexclaveAssertionError(`${callbackUrlName} option is required in a non-browser environment.`, { redirectUrl });
-	const retainedQueryParams = ["after_auth_return_to"];
+	const retainedQueryParams = [
+		"after_auth_return_to",
+		"hexclave_cross_domain_state",
+		"hexclave_cross_domain_code_challenge",
+		"hexclave_cross_domain_after_callback_redirect_url"
+	];
 	const currentUrl = new URL(window.location.href);
 	const url = redirectUrl ? new URL(redirectUrl, window.location.href) : new URL(window.location.href);
-	for (const param of retainedQueryParams) if (currentUrl.searchParams.has(param)) url.searchParams.set(param, currentUrl.searchParams.get(param));
+	for (const param of retainedQueryParams) {
+		const value = currentUrl.searchParams.get(param);
+		if (value != null) url.searchParams.set(param, value);
+	}
 	url.hash = "";
 	return url.toString();
 }

package/dist/utils/url.js.map

@@ -1 +1 @@
-{"version":3,"file":"url.js","names":["HexclaveAssertionError"],"sources":["../../src/utils/url.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { HexclaveAssertionError } from \"@hexclave/shared/dist/utils/errors\";\n\n\nexport function constructRedirectUrl(redirectUrl: URL | string | undefined, callbackUrlName: string) {\n  // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition\n  if (typeof window === 'undefined' || !window.location) {\n    throw new HexclaveAssertionError(`${callbackUrlName} option is required in a non-browser environment.`, { redirectUrl });\n  }\n\n  const retainedQueryParams = [\"after_auth_return_to\"];\n  const currentUrl = new URL(window.location.href);\n  const url = redirectUrl ? new URL(redirectUrl, window.location.href) : new URL(window.location.href);\n  for (const param of retainedQueryParams) {\n    if (currentUrl.searchParams.has(param)) {\n      url.searchParams.set(param, currentUrl.searchParams.get(param)!);\n    }\n  }\n  url.hash = \"\";\n  return url.toString();\n}\n"],"mappings":";;;AAOA,SAAgB,qBAAqB,aAAuC,iBAAyB;CAEnG,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,UAC3C,MAAM,IAAIA,mCAAAA,uBAAuB,GAAG,gBAAgB,oDAAoD,EAAE,YAAY,CAAC;CAGzH,MAAM,sBAAsB,CAAC,sBAAsB;CACnD,MAAM,aAAa,IAAI,IAAI,OAAO,SAAS,IAAI;CAC/C,MAAM,MAAM,cAAc,IAAI,IAAI,aAAa,OAAO,SAAS,IAAI,IAAI,IAAI,IAAI,OAAO,SAAS,IAAI;CACnG,KAAK,MAAM,SAAS,qBAClB,IAAI,WAAW,aAAa,IAAI,KAAK,GACnC,IAAI,aAAa,IAAI,OAAO,WAAW,aAAa,IAAI,KAAK,CAAE;CAGnE,IAAI,OAAO;CACX,OAAO,IAAI,SAAS;AACtB"}
+{"version":3,"file":"url.js","names":["HexclaveAssertionError"],"sources":["../../src/utils/url.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { HexclaveAssertionError } from \"@hexclave/shared/dist/utils/errors\";\n\n\nexport function constructRedirectUrl(redirectUrl: URL | string | undefined, callbackUrlName: string) {\n  // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition\n  if (typeof window === 'undefined' || !window.location) {\n    throw new HexclaveAssertionError(`${callbackUrlName} option is required in a non-browser environment.`, { redirectUrl });\n  }\n\n  // These parameters form one continuation. Keeping only after_auth_return_to can return to the\n  // callback URL but cannot complete its cross-domain PKCE handoff after an email opens in a new\n  // tab.\n  const retainedQueryParams = [\n    \"after_auth_return_to\",\n    \"hexclave_cross_domain_state\",\n    \"hexclave_cross_domain_code_challenge\",\n    \"hexclave_cross_domain_after_callback_redirect_url\",\n  ];\n  const currentUrl = new URL(window.location.href);\n  const url = redirectUrl ? new URL(redirectUrl, window.location.href) : new URL(window.location.href);\n  for (const param of retainedQueryParams) {\n    const value = currentUrl.searchParams.get(param);\n    if (value != null) {\n      url.searchParams.set(param, value);\n    }\n  }\n  url.hash = \"\";\n  return url.toString();\n}\n"],"mappings":";;;AAOA,SAAgB,qBAAqB,aAAuC,iBAAyB;CAEnG,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,UAC3C,MAAM,IAAIA,mCAAAA,uBAAuB,GAAG,gBAAgB,oDAAoD,EAAE,YAAY,CAAC;CAMzH,MAAM,sBAAsB;EAC1B;EACA;EACA;EACA;CACF;CACA,MAAM,aAAa,IAAI,IAAI,OAAO,SAAS,IAAI;CAC/C,MAAM,MAAM,cAAc,IAAI,IAAI,aAAa,OAAO,SAAS,IAAI,IAAI,IAAI,IAAI,OAAO,SAAS,IAAI;CACnG,KAAK,MAAM,SAAS,qBAAqB;EACvC,MAAM,QAAQ,WAAW,aAAa,IAAI,KAAK;EAC/C,IAAI,SAAS,MACX,IAAI,aAAa,IAAI,OAAO,KAAK;CAErC;CACA,IAAI,OAAO;CACX,OAAO,IAAI,SAAS;AACtB"}

package/dist/utils/url.test.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/utils/url.test.js

@@ -0,0 +1,27 @@
+let vitest = require("vitest");
+let __url_js = require("./url.js");
+//#region src/utils/url.test.ts
+const previousWindow = Reflect.get(globalThis, "window");
+const hadPreviousWindow = Reflect.has(globalThis, "window");
+(0, vitest.afterEach)(() => {
+	if (hadPreviousWindow) Reflect.set(globalThis, "window", previousWindow);
+	else Reflect.deleteProperty(globalThis, "window");
+});
+(0, vitest.describe)("constructRedirectUrl", () => {
+	(0, vitest.it)("transports the complete cross-domain return state to an email callback", () => {
+		const currentUrl = new URL("https://hosted.example.test/handler/forgot-password");
+		currentUrl.searchParams.set("after_auth_return_to", "https://customer.example.test/handler/oauth-callback?hexclave_cross_domain_auth=1");
+		currentUrl.searchParams.set("hexclave_cross_domain_state", "outer-state");
+		currentUrl.searchParams.set("hexclave_cross_domain_code_challenge", "outer-challenge");
+		currentUrl.searchParams.set("hexclave_cross_domain_after_callback_redirect_url", "https://customer.example.test/dashboard");
+		Reflect.set(globalThis, "window", { location: { href: currentUrl.toString() } });
+		(0, vitest.expect)(new URL((0, __url_js.constructRedirectUrl)("/handler/password-reset#discarded", "callbackUrl")).toString()).toBe("https://hosted.example.test/handler/password-reset?after_auth_return_to=https%3A%2F%2Fcustomer.example.test%2Fhandler%2Foauth-callback%3Fhexclave_cross_domain_auth%3D1&hexclave_cross_domain_state=outer-state&hexclave_cross_domain_code_challenge=outer-challenge&hexclave_cross_domain_after_callback_redirect_url=https%3A%2F%2Fcustomer.example.test%2Fdashboard");
+	});
+	(0, vitest.it)("does not synthesize the forgot-password page as a return target", () => {
+		Reflect.set(globalThis, "window", { location: { href: "https://hosted.example.test/handler/forgot-password" } });
+		(0, vitest.expect)((0, __url_js.constructRedirectUrl)("/handler/password-reset", "callbackUrl")).toBe("https://hosted.example.test/handler/password-reset");
+	});
+});
+//#endregion
+
+//# sourceMappingURL=url.test.js.map

package/dist/utils/url.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.test.js","names":[],"sources":["../../src/utils/url.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { afterEach, describe, expect, it } from \"vitest\";\nimport { constructRedirectUrl } from \"./url\";\n\nconst previousWindow = Reflect.get(globalThis, \"window\");\nconst hadPreviousWindow = Reflect.has(globalThis, \"window\");\n\nafterEach(() => {\n  if (hadPreviousWindow) {\n    Reflect.set(globalThis, \"window\", previousWindow);\n  } else {\n    Reflect.deleteProperty(globalThis, \"window\");\n  }\n});\n\ndescribe(\"constructRedirectUrl\", () => {\n  it(\"transports the complete cross-domain return state to an email callback\", () => {\n    const currentUrl = new URL(\"https://hosted.example.test/handler/forgot-password\");\n    currentUrl.searchParams.set(\"after_auth_return_to\", \"https://customer.example.test/handler/oauth-callback?hexclave_cross_domain_auth=1\");\n    currentUrl.searchParams.set(\"hexclave_cross_domain_state\", \"outer-state\");\n    currentUrl.searchParams.set(\"hexclave_cross_domain_code_challenge\", \"outer-challenge\");\n    currentUrl.searchParams.set(\"hexclave_cross_domain_after_callback_redirect_url\", \"https://customer.example.test/dashboard\");\n    Reflect.set(globalThis, \"window\", {\n      location: {\n        href: currentUrl.toString(),\n      },\n    });\n\n    const callbackUrl = new URL(constructRedirectUrl(\"/handler/password-reset#discarded\", \"callbackUrl\"));\n\n    expect(callbackUrl.toString()).toBe(\n      \"https://hosted.example.test/handler/password-reset\"\n      + \"?after_auth_return_to=https%3A%2F%2Fcustomer.example.test%2Fhandler%2Foauth-callback%3Fhexclave_cross_domain_auth%3D1\"\n      + \"&hexclave_cross_domain_state=outer-state\"\n      + \"&hexclave_cross_domain_code_challenge=outer-challenge\"\n      + \"&hexclave_cross_domain_after_callback_redirect_url=https%3A%2F%2Fcustomer.example.test%2Fdashboard\",\n    );\n  });\n\n  it(\"does not synthesize the forgot-password page as a return target\", () => {\n    Reflect.set(globalThis, \"window\", {\n      location: {\n        href: \"https://hosted.example.test/handler/forgot-password\",\n      },\n    });\n\n    expect(constructRedirectUrl(\"/handler/password-reset\", \"callbackUrl\")).toBe(\n      \"https://hosted.example.test/handler/password-reset\",\n    );\n  });\n});\n"],"mappings":";;;AAOA,MAAM,iBAAiB,QAAQ,IAAI,YAAY,QAAQ;AACvD,MAAM,oBAAoB,QAAQ,IAAI,YAAY,QAAQ;4BAE1C;CACd,IAAI,mBACF,QAAQ,IAAI,YAAY,UAAU,cAAc;MAEhD,QAAQ,eAAe,YAAY,QAAQ;AAE/C,CAAC;qBAEQ,8BAA8B;CACrC,CAAA,GAAA,OAAA,GAAA,CAAG,gFAAgF;EACjF,MAAM,aAAa,IAAI,IAAI,qDAAqD;EAChF,WAAW,aAAa,IAAI,wBAAwB,mFAAmF;EACvI,WAAW,aAAa,IAAI,+BAA+B,aAAa;EACxE,WAAW,aAAa,IAAI,wCAAwC,iBAAiB;EACrF,WAAW,aAAa,IAAI,qDAAqD,yCAAyC;EAC1H,QAAQ,IAAI,YAAY,UAAU,EAChC,UAAU,EACR,MAAM,WAAW,SAAS,EAC5B,EACF,CAAC;EAID,CAAA,GAAA,OAAA,OAAA,CAAO,IAFiB,KAAA,GAAA,SAAA,qBAAA,CAAyB,qCAAqC,aAAa,CAElF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAC7B,wWAKF;CACF,CAAC;CAED,CAAA,GAAA,OAAA,GAAA,CAAG,yEAAyE;EAC1E,QAAQ,IAAI,YAAY,UAAU,EAChC,UAAU,EACR,MAAM,sDACR,EACF,CAAC;EAED,CAAA,GAAA,OAAA,OAAA,EAAA,GAAA,SAAA,qBAAA,CAA4B,2BAA2B,aAAa,CAAC,CAAC,CAAC,KACrE,oDACF;CACF,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template (FOR package.json FILES, PLEASE EDIT package-template.json)",
   "name": "@hexclave/next",
-  "version": "1.0.73",
+  "version": "1.0.75",
   "repository": "https://github.com/hexclave/hexclave",
   "sideEffects": false,
   "main": "./dist/index.js",
@@ -74,9 +74,9 @@
     "tailwindcss-animate": "^1.0.7",
     "rrweb": "^1.1.3",
     "yup": "^1.7.1",
-    "@hexclave/sc": "1.0.73",
-    "@hexclave/shared": "1.0.73",
-    "@hexclave/ui": "1.0.73"
+    "@hexclave/sc": "1.0.75",
+    "@hexclave/ui": "1.0.75",
+    "@hexclave/shared": "1.0.75"
   },
   "peerDependencies": {
     "@types/react": ">=18.0.0",

package/src/components-page/oauth-callback.tsx

@@ -12,16 +12,12 @@ import { Spinner, cn } from "@hexclave/ui";
 import { useEffect, useRef, useState } from "react";
 import { useStackApp } from "..";
 import { MaybeFullPage } from "../components/elements/maybe-full-page";
-import { StyledLink } from "../components/link";
 import { hexclaveAppInternalsSymbol } from "../lib/hexclave-app/common";
-import { useTranslation } from "../lib/translations";
 import { ErrorPage } from "./error-page";
 
 export function OAuthCallback({ fullPage }: { fullPage?: boolean }) {
-  const { t } = useTranslation();
   const app = useStackApp();
   const called = useRef(false);
-  const [showRedirectLink, setShowRedirectLink] = useState(false);
   const [errorSearchParams, setErrorSearchParams] = useState<Record<string, string> | null>(null);
 
   useEffect(() => runAsynchronously(async () => {
@@ -51,10 +47,6 @@ export function OAuthCallback({ fullPage }: { fullPage?: boolean }) {
     }
   }), [app]);
 
-  useEffect(() => {
-    setTimeout(() => setShowRedirectLink(true), 3000);
-  }, []);
-
   if (errorSearchParams != null) {
     return <ErrorPage searchParams={errorSearchParams} fullPage={fullPage} />;
   }
@@ -73,14 +65,6 @@ export function OAuthCallback({ fullPage }: { fullPage?: boolean }) {
         <div className="flex flex-col justify-center items-center gap-4">
           <Spinner size={20} />
         </div>
-        {showRedirectLink ? <p>{t('If you are not redirected automatically, ')}<StyledLink
-          className="whitespace-nowrap"
-          href="#"
-          onClick={(e) => {
-            e.preventDefault();
-            runAsynchronously(app.redirectToHome());
-          }}
-        >{t("click here")}</StyledLink></p> : null}
       </div>
     </MaybeFullPage>
   );

package/src/lib/auth.test.ts

@@ -32,7 +32,7 @@ function createTestInterface() {
 
 describe("getNewOAuthProviderOrScopeUrl", () => {
   it("returns the OAuth URL without performing navigation", async () => {
-    window.history.replaceState({}, "", "/account?after_auth_return_to=%2Fsettings");
+    window.history.replaceState({}, "", "/account?after_auth_return_to=%2Fsettings#connected-accounts");
 
     const iface = createTestInterface();
     const session = iface.createSession({ refreshToken: null, accessToken: null });
@@ -52,7 +52,7 @@ describe("getNewOAuthProviderOrScopeUrl", () => {
     expect(`${url.origin}${url.pathname}`).toBe("https://api.example.com/api/v1/auth/oauth/authorize/github");
     expect(Object.fromEntries(url.searchParams.entries())).toMatchInlineSnapshot(`
       {
-        "after_callback_redirect_url": "http://localhost:3000/account?after_auth_return_to=%2Fsettings",
+        "after_callback_redirect_url": "http://localhost:3000/account?after_auth_return_to=%2Fsettings#connected-accounts",
         "client_id": "00000000-0000-4000-8000-000000000000",
         "client_secret": "pck_test",
         "code_challenge": "<stripped code challenge>",

package/src/lib/auth.ts

@@ -24,7 +24,9 @@ export async function getNewOAuthProviderOrScopeUrl(
     provider: options.provider,
     redirectUrl: constructRedirectUrl(options.redirectUrl, "redirectUrl"),
     errorRedirectUrl: constructRedirectUrl(options.errorRedirectUrl, "errorRedirectUrl"),
-    afterCallbackRedirectUrl: constructRedirectUrl(window.location.href, "afterCallbackRedirectUrl"),
+    // Unlike callback URLs, this is the final user-facing location and may legitimately use a
+    // fragment for an account-settings tab. Preserve it exactly.
+    afterCallbackRedirectUrl: window.location.href,
     codeChallenge,
     state,
     type: "link",

package/src/lib/hexclave-app/apps/implementations/client-app-impl.automatic-side-effects.test.ts

@@ -0,0 +1,126 @@
+
+//===========================================
+// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template
+//===========================================
+import { describe, expect, it } from "vitest";
+import { hexclaveAppInternalsSymbol } from "../../common";
+import { HexclaveClientApp, HexclaveClientAppConstructorOptions, HexclaveClientAppJson } from "../interfaces/client-app";
+
+const baseOptions = {
+  baseUrl: "http://localhost:12345",
+  projectId: "00000000-0000-4000-8000-000000000000",
+  publishableClientKey: "stack-pk-test",
+  tokenStore: "memory",
+  redirectMethod: "none",
+} satisfies HexclaveClientAppConstructorOptions<true, string>;
+
+describe("HexclaveClientApp automatic side effects", () => {
+  it("does not inspect browser state when disabled", () => {
+    const previousWindow = Reflect.get(globalThis, "window");
+    const previousDocument = Reflect.get(globalThis, "document");
+    const hadPreviousWindow = Reflect.has(globalThis, "window");
+    const hadPreviousDocument = Reflect.has(globalThis, "document");
+    const browserGlobal = {};
+    Object.defineProperty(browserGlobal, "location", {
+      get() {
+        throw new Error("Construction must not inspect the current URL when automatic side effects are disabled");
+      },
+    });
+
+    Reflect.set(globalThis, "window", browserGlobal);
+    Object.defineProperty(globalThis, "document", {
+      configurable: true,
+      get() {
+        throw new Error("Construction must not access the document when automatic side effects are disabled");
+      },
+    });
+
+    try {
+      expect(() => new HexclaveClientApp({
+        ...baseOptions,
+        automaticSideEffects: false,
+      })).not.toThrow();
+    } finally {
+      if (hadPreviousWindow) {
+        Reflect.set(globalThis, "window", previousWindow);
+      } else {
+        Reflect.deleteProperty(globalThis, "window");
+      }
+      if (hadPreviousDocument) {
+        Object.defineProperty(globalThis, "document", {
+          configurable: true,
+          value: previousDocument,
+          writable: true,
+        });
+      } else {
+        Reflect.deleteProperty(globalThis, "document");
+      }
+    }
+  });
+
+  it("does not initialize automatic side effects when disabled", () => {
+    const methodName = "_initializeAutomaticSideEffects";
+    const originalInitializer = Reflect.get(HexclaveClientApp.prototype, methodName);
+    let initializationCalls = 0;
+    Reflect.set(HexclaveClientApp.prototype, methodName, () => {
+      initializationCalls += 1;
+    });
+
+    try {
+      new HexclaveClientApp({
+        ...baseOptions,
+        automaticSideEffects: false,
+      });
+
+      expect(initializationCalls).toBe(0);
+    } finally {
+      Reflect.set(HexclaveClientApp.prototype, methodName, originalInitializer);
+    }
+  });
+
+  it.each([undefined, true])("retains automatic initialization when automaticSideEffects is %s", (automaticSideEffects) => {
+    const methodName = "_initializeAutomaticSideEffects";
+    const originalInitializer = Reflect.get(HexclaveClientApp.prototype, methodName);
+    let initializationCalls = 0;
+    Reflect.set(HexclaveClientApp.prototype, methodName, () => {
+      initializationCalls += 1;
+    });
+
+    try {
+      new HexclaveClientApp({
+        ...baseOptions,
+        automaticSideEffects,
+      });
+
+      expect(initializationCalls).toBe(1);
+    } finally {
+      Reflect.set(HexclaveClientApp.prototype, methodName, originalInitializer);
+    }
+  });
+
+  it("preserves the option through serialization", () => {
+    const app = new HexclaveClientApp({
+      ...baseOptions,
+      automaticSideEffects: false,
+    });
+
+    expect(app[hexclaveAppInternalsSymbol].toClientJson().automaticSideEffects).toBe(false);
+  });
+
+  it("preserves stable identity when deserializing with automatic side effects disabled", () => {
+    const json: HexclaveClientAppJson<false, string> = {
+      baseUrl: baseOptions.baseUrl,
+      projectId: baseOptions.projectId,
+      publishableClientKey: baseOptions.publishableClientKey,
+      tokenStore: null,
+      redirectMethod: baseOptions.redirectMethod,
+      automaticSideEffects: false,
+      uniqueIdentifier: "00000000-0000-4000-8000-000000000001",
+    };
+
+    const first = HexclaveClientApp[hexclaveAppInternalsSymbol].fromClientJson(json);
+    const second = HexclaveClientApp[hexclaveAppInternalsSymbol].fromClientJson(json);
+
+    expect(second).toBe(first);
+  });
+});

package/src/lib/hexclave-app/apps/implementations/client-app-impl.cross-domain.test.ts

@@ -7,6 +7,7 @@ import { AccessToken } from "@hexclave/shared/dist/sessions";
 import { Store } from "@hexclave/shared/dist/utils/stores";
 import { hexclaveAppInternalsSymbol } from "../../common";
 import { StackClientApp } from "../interfaces/client-app";
+import { planRedirectToHandler } from "./redirect-page-urls";
 
 function createAccessTokenString(refreshTokenId: string): string {
   const encode = (value: unknown) => Buffer.from(JSON.stringify(value)).toString("base64url");
@@ -54,6 +55,76 @@ function createMockDocument(): Document {
 }
 
 describe("StackClientApp cross-domain auth", () => {
+  it("keeps noRedirectBack same-domain redirects free of redirect-back state", async () => {
+    const redirectPlan = await planRedirectToHandler({
+      handlerName: "signIn",
+      rawHandlerUrl: "/handler/sign-in",
+      noRedirectBack: true,
+      currentUrl: new URL("https://app.example.test/settings?tab=profile"),
+      localOAuthCallbackUrl: "/handler/oauth-callback",
+      rawHomeUrl: "/home",
+      getCrossDomainHandoffParams: async () => {
+        throw new Error("Same-domain redirects must not create cross-domain handoff parameters.");
+      },
+    });
+
+    expect(redirectPlan).toEqual({
+      type: "redirect",
+      url: "/handler/sign-in",
+    });
+  });
+
+  it("returns noRedirectBack cross-domain auth to the source app home", async () => {
+    const handoffState = "no-redirect-back-state";
+    const handoffCodeChallenge = "abcdefghijklmnopqrstuvwxyzABCDEFG_0123456789-._~";
+    const currentUrl = new URL("https://app.example.test/settings?tab=profile");
+    currentUrl.searchParams.set("hexclave_cross_domain_state", handoffState);
+    currentUrl.searchParams.set("hexclave_cross_domain_code_challenge", handoffCodeChallenge);
+    currentUrl.searchParams.set(
+      "hexclave_cross_domain_after_callback_redirect_url",
+      "https://app.example.test/settings?tab=profile",
+    );
+
+    const redirectPlan = await planRedirectToHandler({
+      handlerName: "signIn",
+      rawHandlerUrl: "https://auth.example.test/handler/sign-in",
+      noRedirectBack: true,
+      currentUrl,
+      localOAuthCallbackUrl: "/handler/oauth-callback",
+      rawHomeUrl: "/home",
+      getCrossDomainHandoffParams: async () => {
+        throw new Error("Existing cross-domain handoff parameters must be reused.");
+      },
+    });
+
+    expect(redirectPlan.type).toBe("redirect");
+    if (redirectPlan.type !== "redirect") {
+      throw new Error("Expected noRedirectBack sign-in to produce a redirect URL.");
+    }
+
+    const hostedUrl = new URL(redirectPlan.url);
+    expect(hostedUrl.origin).toBe("https://auth.example.test");
+    expect(hostedUrl.pathname).toBe("/handler/sign-in");
+    expect(hostedUrl.searchParams.get("hexclave_cross_domain_after_callback_redirect_url")).toBe(
+      "https://app.example.test/home",
+    );
+
+    const rawSourceCallbackUrl = hostedUrl.searchParams.get("after_auth_return_to");
+    if (rawSourceCallbackUrl == null) {
+      throw new Error("Expected cross-domain noRedirectBack to include its internal source callback URL.");
+    }
+    const sourceCallbackUrl = new URL(rawSourceCallbackUrl);
+    expect(sourceCallbackUrl.origin).toBe("https://app.example.test");
+    expect(sourceCallbackUrl.pathname).toBe("/handler/oauth-callback");
+    expect(sourceCallbackUrl.searchParams.get("hexclave_cross_domain_auth")).toBe("1");
+    expect(sourceCallbackUrl.searchParams.get("hexclave_cross_domain_state")).toBe(handoffState);
+    expect(sourceCallbackUrl.searchParams.get("hexclave_cross_domain_code_challenge")).toBe(handoffCodeChallenge);
+    expect(sourceCallbackUrl.searchParams.get("hexclave_cross_domain_after_callback_redirect_url")).toBe(
+      "https://app.example.test/home",
+    );
+    expect(sourceCallbackUrl.toString()).not.toContain("/settings");
+  });
+
   it("exposes redirect-back-aware handler URLs for devtool previews", async () => {
     const previousWindow = Reflect.get(globalThis, "window");
     const hadPreviousWindow = Reflect.has(globalThis, "window");
@@ -486,6 +557,8 @@ describe("StackClientApp cross-domain auth", () => {
     callbackUrl.searchParams.set("details", JSON.stringify({
       message: "Your sign up was rejected by an administrator's sign-up rule.",
     }));
+    callbackUrl.searchParams.set("after_auth_return_to", "/dashboard");
+    callbackUrl.searchParams.set("after_callback_redirect_url", "https://customer.example.test/settings?tab=connected-accounts");
     let currentHref = callbackUrl.toString();
     let redirectedUrl = "";
     const redirectSpy = vi.spyOn(StackClientApp.prototype as any, "_redirectTo").mockImplementation(async (...args: unknown[]) => {
@@ -539,6 +612,8 @@ describe("StackClientApp cross-domain auth", () => {
     expect(errorUrl.pathname).toBe("/handler/error");
     expect(errorUrl.searchParams.get("errorCode")).toBe("SIGN_UP_REJECTED");
     expect(errorUrl.searchParams.get("message")).toBe("Your sign up was rejected by an administrator's sign-up rule.");
+    expect(errorUrl.searchParams.get("after_auth_return_to")).toBe("/dashboard");
+    expect(errorUrl.searchParams.get("after_callback_redirect_url")).toBe("https://customer.example.test/settings?tab=connected-accounts");
     expect(new URL(currentHref).searchParams.has("errorCode")).toBe(false);
   });