@hexclave/next 1.0.76 → 1.0.77

package/dist/esm/lib/hexclave-app/apps/implementations/client-app-impl.sign-out.test.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/esm/lib/hexclave-app/apps/implementations/client-app-impl.sign-out.test.js

@@ -0,0 +1,83 @@
+import { describe, expect, it } from "vitest";
+import { StackClientApp } from "../interfaces/client-app.js";
+import { AsyncStore } from "@hexclave/shared/dist/utils/stores";
+//#region src/lib/hexclave-app/apps/implementations/client-app-impl.sign-out.test.ts
+function createAccessTokenString(refreshTokenId) {
+	const encode = (value) => Buffer.from(JSON.stringify(value)).toString("base64url");
+	const nowSeconds = Math.floor(Date.now() / 1e3);
+	return [
+		encode({
+			alg: "none",
+			typ: "JWT"
+		}),
+		encode({
+			sub: "user-id",
+			exp: nowSeconds + 60,
+			iat: nowSeconds,
+			refresh_token_id: refreshTokenId
+		}),
+		""
+	].join(".");
+}
+var Deferred = class {
+	constructor() {
+		this._resolve = () => {
+			throw new Error("Deferred promise was resolved before initialization");
+		};
+		this.promise = new Promise((resolve) => {
+			this._resolve = resolve;
+		});
+	}
+	resolve() {
+		this._resolve();
+	}
+};
+describe("StackClientApp sign-out", () => {
+	it("delays current-user reads until redirect dispatch without blocking unrelated stores", async () => {
+		const clientApp = new StackClientApp({
+			baseUrl: "http://localhost:12345",
+			projectId: "00000000-0000-4000-8000-000000000000",
+			publishableClientKey: "stack-pk-test",
+			tokenStore: "memory",
+			redirectMethod: "none",
+			noAutomaticPrefetch: true,
+			devTool: false
+		});
+		const clientInterface = Reflect.get(clientApp, "_interface");
+		Reflect.set(clientInterface, "getClientUserByToken", async () => ({
+			id: "user-id",
+			is_anonymous: false,
+			is_restricted: false
+		}));
+		await Reflect.get(clientApp, "_signInToAccountWithTokens").call(clientApp, {
+			accessToken: createAccessTokenString("refresh-token-id"),
+			refreshToken: "refresh-token"
+		});
+		const createCookieHelper = Reflect.get(clientApp, "_createCookieHelper");
+		const getOrCreateTokenStore = Reflect.get(clientApp, "_getOrCreateTokenStore");
+		const getSessionFromTokenStore = Reflect.get(clientApp, "_getSessionFromTokenStore");
+		const tokenStore = getOrCreateTokenStore.call(clientApp, await createCookieHelper.call(clientApp));
+		const session = getSessionFromTokenStore.call(clientApp, tokenStore);
+		Reflect.set(clientInterface, "signOut", async () => {
+			session.markInvalid();
+		});
+		const redirectStarted = new Deferred();
+		const redirectFinished = new Deferred();
+		Reflect.set(clientApp, "_redirectToDefaultAfterSignOut", async () => {
+			redirectStarted.resolve();
+			await redirectFinished.promise;
+		});
+		expect(new AsyncStore().setAsync(new Promise(() => {}))).toBeInstanceOf(Promise);
+		const signOutPromise = Reflect.get(clientApp, "_signOut").call(clientApp, session);
+		await redirectStarted.promise;
+		const getUserDuringSignOut = clientApp.getUser();
+		expect(await Promise.race([getUserDuringSignOut.then(() => "resolved"), Promise.resolve("pending")])).toBe("pending");
+		redirectFinished.resolve();
+		await signOutPromise;
+		await expect(getUserDuringSignOut).resolves.toBeNull();
+	});
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=client-app-impl.sign-out.test.js.map

package/dist/esm/lib/hexclave-app/apps/implementations/client-app-impl.sign-out.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-app-impl.sign-out.test.js","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/client-app-impl.sign-out.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { AsyncStore } from \"@hexclave/shared/dist/utils/stores\";\nimport { describe, expect, it } from \"vitest\";\nimport { StackClientApp } from \"../interfaces/client-app\";\n\nfunction createAccessTokenString(refreshTokenId: string): string {\n  const encode = (value: unknown) => Buffer.from(JSON.stringify(value)).toString(\"base64url\");\n  const nowSeconds = Math.floor(Date.now() / 1000);\n  return [\n    encode({ alg: \"none\", typ: \"JWT\" }),\n    encode({ sub: \"user-id\", exp: nowSeconds + 60, iat: nowSeconds, refresh_token_id: refreshTokenId }),\n    \"\",\n  ].join(\".\");\n}\n\nclass Deferred {\n  readonly promise: Promise<void>;\n  private _resolve: () => void = () => {\n    throw new Error(\"Deferred promise was resolved before initialization\");\n  };\n\n  constructor() {\n    this.promise = new Promise<void>((resolve) => {\n      this._resolve = resolve;\n    });\n  }\n\n  resolve(): void {\n    this._resolve();\n  }\n}\n\ndescribe(\"StackClientApp sign-out\", () => {\n  it(\"delays current-user reads until redirect dispatch without blocking unrelated stores\", async () => {\n    const clientApp = new StackClientApp({\n      baseUrl: \"http://localhost:12345\",\n      projectId: \"00000000-0000-4000-8000-000000000000\",\n      publishableClientKey: \"stack-pk-test\",\n      tokenStore: \"memory\",\n      redirectMethod: \"none\",\n      noAutomaticPrefetch: true,\n      devTool: false,\n    });\n    const clientInterface = Reflect.get(clientApp, \"_interface\");\n    Reflect.set(clientInterface, \"getClientUserByToken\", async () => ({\n      id: \"user-id\",\n      is_anonymous: false,\n      is_restricted: false,\n    }));\n\n    const signInToAccountWithTokens = Reflect.get(clientApp, \"_signInToAccountWithTokens\");\n    await signInToAccountWithTokens.call(clientApp, {\n      accessToken: createAccessTokenString(\"refresh-token-id\"),\n      refreshToken: \"refresh-token\",\n    });\n\n    const createCookieHelper = Reflect.get(clientApp, \"_createCookieHelper\");\n    const getOrCreateTokenStore = Reflect.get(clientApp, \"_getOrCreateTokenStore\");\n    const getSessionFromTokenStore = Reflect.get(clientApp, \"_getSessionFromTokenStore\");\n    const tokenStore = getOrCreateTokenStore.call(clientApp, await createCookieHelper.call(clientApp));\n    const session = getSessionFromTokenStore.call(clientApp, tokenStore);\n\n    Reflect.set(clientInterface, \"signOut\", async () => {\n      session.markInvalid();\n    });\n\n    const redirectStarted = new Deferred();\n    const redirectFinished = new Deferred();\n    Reflect.set(clientApp, \"_redirectToDefaultAfterSignOut\", async () => {\n      redirectStarted.resolve();\n      await redirectFinished.promise;\n    });\n\n    const unrelatedStore = new AsyncStore<void>();\n    expect(unrelatedStore.setAsync(new Promise<void>(() => {}))).toBeInstanceOf(Promise);\n\n    const signOut = Reflect.get(clientApp, \"_signOut\");\n    const signOutPromise = signOut.call(clientApp, session);\n    await redirectStarted.promise;\n\n    const getUserDuringSignOut = clientApp.getUser();\n    const stateBeforeRedirectFinished = await Promise.race([\n      getUserDuringSignOut.then(() => \"resolved\"),\n      Promise.resolve(\"pending\"),\n    ]);\n    expect(stateBeforeRedirectFinished).toBe(\"pending\");\n\n    redirectFinished.resolve();\n    await signOutPromise;\n\n    await expect(getUserDuringSignOut).resolves.toBeNull();\n  });\n});\n"],"mappings":";;;;AAQA,SAAS,wBAAwB,gBAAgC;CAC/D,MAAM,UAAU,UAAmB,OAAO,KAAK,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,SAAS,WAAW;CAC1F,MAAM,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CAC/C,OAAO;EACL,OAAO;GAAE,KAAK;GAAQ,KAAK;EAAM,CAAC;EAClC,OAAO;GAAE,KAAK;GAAW,KAAK,aAAa;GAAI,KAAK;GAAY,kBAAkB;EAAe,CAAC;EAClG;CACF,CAAC,CAAC,KAAK,GAAG;AACZ;AAEA,IAAM,WAAN,MAAe;CAMb,cAAc;wBAJuB;GACnC,MAAM,IAAI,MAAM,qDAAqD;EACvE;EAGE,KAAK,UAAU,IAAI,SAAe,YAAY;GAC5C,KAAK,WAAW;EAClB,CAAC;CACH;CAEA,UAAgB;EACd,KAAK,SAAS;CAChB;AACF;AAEA,SAAS,iCAAiC;CACxC,GAAG,uFAAuF,YAAY;EACpG,MAAM,YAAY,IAAI,eAAe;GACnC,SAAS;GACT,WAAW;GACX,sBAAsB;GACtB,YAAY;GACZ,gBAAgB;GAChB,qBAAqB;GACrB,SAAS;EACX,CAAC;EACD,MAAM,kBAAkB,QAAQ,IAAI,WAAW,YAAY;EAC3D,QAAQ,IAAI,iBAAiB,wBAAwB,aAAa;GAChE,IAAI;GACJ,cAAc;GACd,eAAe;EACjB,EAAE;EAGF,MADkC,QAAQ,IAAI,WAAW,4BAC3B,CAAC,CAAC,KAAK,WAAW;GAC9C,aAAa,wBAAwB,kBAAkB;GACvD,cAAc;EAChB,CAAC;EAED,MAAM,qBAAqB,QAAQ,IAAI,WAAW,qBAAqB;EACvE,MAAM,wBAAwB,QAAQ,IAAI,WAAW,wBAAwB;EAC7E,MAAM,2BAA2B,QAAQ,IAAI,WAAW,2BAA2B;EACnF,MAAM,aAAa,sBAAsB,KAAK,WAAW,MAAM,mBAAmB,KAAK,SAAS,CAAC;EACjG,MAAM,UAAU,yBAAyB,KAAK,WAAW,UAAU;EAEnE,QAAQ,IAAI,iBAAiB,WAAW,YAAY;GAClD,QAAQ,YAAY;EACtB,CAAC;EAED,MAAM,kBAAkB,IAAI,SAAS;EACrC,MAAM,mBAAmB,IAAI,SAAS;EACtC,QAAQ,IAAI,WAAW,kCAAkC,YAAY;GACnE,gBAAgB,QAAQ;GACxB,MAAM,iBAAiB;EACzB,CAAC;EAGD,OAAO,IADoB,WACP,CAAC,CAAC,SAAS,IAAI,cAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,OAAO;EAGnF,MAAM,iBADU,QAAQ,IAAI,WAAW,UACV,CAAC,CAAC,KAAK,WAAW,OAAO;EACtD,MAAM,gBAAgB;EAEtB,MAAM,uBAAuB,UAAU,QAAQ;EAK/C,OAAO,MAJmC,QAAQ,KAAK,CACrD,qBAAqB,WAAW,UAAU,GAC1C,QAAQ,QAAQ,SAAS,CAC3B,CAAC,CACiC,CAAC,CAAC,KAAK,SAAS;EAElD,iBAAiB,QAAQ;EACzB,MAAM;EAEN,MAAM,OAAO,oBAAoB,CAAC,CAAC,SAAS,SAAS;CACvD,CAAC;AACH,CAAC"}

package/dist/esm/lib/hexclave-app/apps/implementations/client-app-impl.untrusted-redirect-card.test.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/esm/lib/hexclave-app/apps/implementations/client-app-impl.untrusted-redirect-card.test.js

@@ -0,0 +1,120 @@
+import { HexclaveSetupError } from "@hexclave/shared/dist/utils/errors";
+import { KnownErrors } from "@hexclave/shared";
+import { afterEach, describe, expect, it } from "vitest";
+import { StackClientApp } from "../interfaces/client-app.js";
+import { AccessToken } from "@hexclave/shared/dist/sessions";
+import { SETUP_ERROR_OVERLAY_GLOBAL_INSTANCE_KEY } from "../../../../setup-error-overlay/index.js";
+import { getGlobalUiInstance, setGlobalUiInstance } from "../../../../in-page-ui/dom.js";
+//#region src/lib/hexclave-app/apps/implementations/client-app-impl.untrusted-redirect-card.test.ts
+// @vitest-environment jsdom
+function createAccessTokenString(refreshTokenId) {
+	const encode = (value) => Buffer.from(JSON.stringify(value)).toString("base64url");
+	const nowSeconds = Math.floor(Date.now() / 1e3);
+	return [
+		encode({
+			alg: "none",
+			typ: "JWT"
+		}),
+		encode({
+			sub: "user-id",
+			exp: nowSeconds + 60,
+			iat: nowSeconds,
+			iss: "https://api.example.test",
+			aud: "project-id",
+			project_id: "project-id",
+			branch_id: "main",
+			refresh_token_id: refreshTokenId,
+			role: "authenticated",
+			name: null,
+			email: null,
+			email_verified: false,
+			selected_team_id: null,
+			signed_up_at: nowSeconds,
+			is_anonymous: false,
+			is_restricted: false,
+			restricted_reason: null,
+			requires_totp_mfa: false
+		}),
+		""
+	].join(".");
+}
+function overlayRoots() {
+	return document.querySelectorAll(".hexclave-setup-error-overlay");
+}
+function createAppWithFailingHandoff(options) {
+	const app = new StackClientApp({
+		baseUrl: "http://localhost:12345",
+		projectId: options.projectId,
+		publishableClientKey: "stack-pk-test",
+		tokenStore: "memory",
+		redirectMethod: "none",
+		noAutomaticPrefetch: true,
+		devTool: false
+	});
+	const accessToken = createAccessTokenString("source-refresh-token-id");
+	const clientInterface = Reflect.get(app, "_interface");
+	Reflect.set(clientInterface, "fetchNewAccessToken", async () => {
+		return AccessToken.createIfValid(accessToken) ?? (() => {
+			throw new Error("Expected the test access token to be valid.");
+		})();
+	});
+	Reflect.set(clientInterface, "sendClientRequest", options.sendClientRequest);
+	return app;
+}
+function createCrossDomainAuthRedirectUrl(app, redirectUri) {
+	const method = Reflect.get(app, "_createCrossDomainAuthRedirectUrl");
+	if (typeof method !== "function") throw new Error("Expected StackClientApp to expose _createCrossDomainAuthRedirectUrl in tests.");
+	return method.call(app, {
+		redirectUri,
+		state: "handoff-state",
+		codeChallenge: "abcdefghijklmnopqrstuvwxyzABCDEFG_0123456789-._~",
+		afterCallbackRedirectUrl: redirectUri,
+		overrideTokenStoreInit: {
+			accessToken: createAccessTokenString("source-refresh-token-id"),
+			refreshToken: "source-refresh-token"
+		}
+	});
+}
+describe("cross-domain handoff rejected by the server", () => {
+	afterEach(() => {
+		getGlobalUiInstance(SETUP_ERROR_OVERLAY_GLOBAL_INSTANCE_KEY)?.cleanup();
+		setGlobalUiInstance(SETUP_ERROR_OVERLAY_GLOBAL_INSTANCE_KEY, null);
+		for (const root of overlayRoots()) root.remove();
+	});
+	it("shows a setup error card even when the caller swallows the redirect failure", async () => {
+		const untrustedUrl = "https://demo.example.test/?hexclave_cross_domain_auth=1";
+		const app = createAppWithFailingHandoff({
+			projectId: "00000000-0000-4000-8000-000000000101",
+			sendClientRequest: async () => {
+				throw new KnownErrors.RedirectUrlNotWhitelisted(untrustedUrl);
+			}
+		});
+		let caught = null;
+		try {
+			await createCrossDomainAuthRedirectUrl(app, untrustedUrl);
+		} catch (error) {
+			caught = error;
+		}
+		if (!HexclaveSetupError.isSetupError(caught)) throw new Error(`Expected the rejected handoff to throw a setup error, got: ${caught}`);
+		expect(caught.message).toBe("Cross-domain auth redirect URL https://demo.example.test/ is not trusted.");
+		expect(Reflect.get(caught, "customCaptureExtraArgs")).toMatchObject([{ url: untrustedUrl }]);
+		expect(caught.cause).toBeInstanceOf(KnownErrors.RedirectUrlNotWhitelisted);
+		expect(overlayRoots()).toHaveLength(1);
+		const cardText = document.body.textContent;
+		expect(cardText).toContain("A domain in your authentication flow is not one of your project's trusted domains");
+		expect(cardText).toContain("add it to your project's trusted domains in the Hexclave dashboard, under Domains.");
+	});
+	it("leaves other handoff failures to captureError", async () => {
+		await expect(createCrossDomainAuthRedirectUrl(createAppWithFailingHandoff({
+			projectId: "00000000-0000-4000-8000-000000000102",
+			sendClientRequest: async () => {
+				throw new KnownErrors.UserAuthenticationRequired();
+			}
+		}), "https://demo.example.test/")).rejects.toSatisfy((error) => KnownErrors.UserAuthenticationRequired.isInstance(error));
+		expect(overlayRoots()).toHaveLength(0);
+	});
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=client-app-impl.untrusted-redirect-card.test.js.map

package/dist/esm/lib/hexclave-app/apps/implementations/client-app-impl.untrusted-redirect-card.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-app-impl.untrusted-redirect-card.test.js","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/client-app-impl.untrusted-redirect-card.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\n// @vitest-environment jsdom\n\nimport { KnownErrors } from \"@hexclave/shared\";\nimport { AccessToken } from \"@hexclave/shared/dist/sessions\";\nimport { HexclaveSetupError } from \"@hexclave/shared/dist/utils/errors\";\nimport { afterEach, describe, expect, it } from \"vitest\";\nimport { getGlobalUiInstance, setGlobalUiInstance } from \"../../../../in-page-ui/dom\";\nimport { SETUP_ERROR_OVERLAY_GLOBAL_INSTANCE_KEY } from \"../../../../setup-error-overlay\";\nimport { StackClientApp } from \"../interfaces/client-app\";\n\nfunction createAccessTokenString(refreshTokenId: string): string {\n  const encode = (value: unknown) => Buffer.from(JSON.stringify(value)).toString(\"base64url\");\n  const nowSeconds = Math.floor(Date.now() / 1000);\n  return [\n    encode({ alg: \"none\", typ: \"JWT\" }),\n    encode({\n      sub: \"user-id\",\n      exp: nowSeconds + 60,\n      iat: nowSeconds,\n      iss: \"https://api.example.test\",\n      aud: \"project-id\",\n      project_id: \"project-id\",\n      branch_id: \"main\",\n      refresh_token_id: refreshTokenId,\n      role: \"authenticated\",\n      name: null,\n      email: null,\n      email_verified: false,\n      selected_team_id: null,\n      signed_up_at: nowSeconds,\n      is_anonymous: false,\n      is_restricted: false,\n      restricted_reason: null,\n      requires_totp_mfa: false,\n    }),\n    \"\",\n  ].join(\".\");\n}\n\nfunction overlayRoots(): NodeListOf<Element> {\n  return document.querySelectorAll(\".hexclave-setup-error-overlay\");\n}\n\nfunction createAppWithFailingHandoff(options: {\n  projectId: string,\n  sendClientRequest: () => Promise<never>,\n}): StackClientApp<true> {\n  const app = new StackClientApp({\n    baseUrl: \"http://localhost:12345\",\n    projectId: options.projectId,\n    publishableClientKey: \"stack-pk-test\",\n    tokenStore: \"memory\",\n    redirectMethod: \"none\",\n    noAutomaticPrefetch: true,\n    devTool: false,\n  });\n  const accessToken = createAccessTokenString(\"source-refresh-token-id\");\n  const clientInterface = Reflect.get(app, \"_interface\");\n  Reflect.set(clientInterface, \"fetchNewAccessToken\", async () => {\n    return AccessToken.createIfValid(accessToken) ?? (() => {\n      throw new Error(\"Expected the test access token to be valid.\");\n    })();\n  });\n  Reflect.set(clientInterface, \"sendClientRequest\", options.sendClientRequest);\n  return app;\n}\n\nfunction createCrossDomainAuthRedirectUrl(app: StackClientApp<true>, redirectUri: string): Promise<unknown> {\n  const method = Reflect.get(app, \"_createCrossDomainAuthRedirectUrl\");\n  if (typeof method !== \"function\") {\n    throw new Error(\"Expected StackClientApp to expose _createCrossDomainAuthRedirectUrl in tests.\");\n  }\n  return method.call(app, {\n    redirectUri,\n    state: \"handoff-state\",\n    codeChallenge: \"abcdefghijklmnopqrstuvwxyzABCDEFG_0123456789-._~\",\n    afterCallbackRedirectUrl: redirectUri,\n    overrideTokenStoreInit: {\n      accessToken: createAccessTokenString(\"source-refresh-token-id\"),\n      refreshToken: \"source-refresh-token\",\n    },\n  });\n}\n\ndescribe(\"cross-domain handoff rejected by the server\", () => {\n  afterEach(() => {\n    // The card's own cleanup, so that the focus trap it installed is released too and does not follow the next test.\n    getGlobalUiInstance(SETUP_ERROR_OVERLAY_GLOBAL_INSTANCE_KEY)?.cleanup();\n    setGlobalUiInstance(SETUP_ERROR_OVERLAY_GLOBAL_INSTANCE_KEY, null);\n    for (const root of overlayRoots()) {\n      root.remove();\n    }\n  });\n\n  it(\"shows a setup error card even when the caller swallows the redirect failure\", async () => {\n    const untrustedUrl = \"https://demo.example.test/?hexclave_cross_domain_auth=1\";\n    const app = createAppWithFailingHandoff({\n      projectId: \"00000000-0000-4000-8000-000000000101\",\n      sendClientRequest: async () => {\n        throw new KnownErrors.RedirectUrlNotWhitelisted(untrustedUrl);\n      },\n    });\n\n    // The hosted auth pages catch a failing post-auth redirect and render their own \"we could not continue\n    // automatically, please try again\" screen, which is exactly how this error used to disappear: nothing on the page\n    // said that the flow is dead until a domain is added to the project's trusted domains.\n    let caught: unknown = null;\n    try {\n      await createCrossDomainAuthRedirectUrl(app, untrustedUrl);\n    } catch (error) {\n      caught = error;\n    }\n\n    if (!HexclaveSetupError.isSetupError(caught)) {\n      throw new Error(`Expected the rejected handoff to throw a setup error, got: ${caught}`);\n    }\n    // The handoff query parameters have nothing to do with the rejection, so the message keeps only the checked part.\n    expect(caught.message).toBe(\"Cross-domain auth redirect URL https://demo.example.test/ is not trusted.\");\n    // The full URL is still handed to the error sinks, which is where `customCaptureExtraArgs` ends up.\n    expect(Reflect.get(caught, \"customCaptureExtraArgs\")).toMatchObject([{ url: untrustedUrl }]);\n    expect(caught.cause).toBeInstanceOf(KnownErrors.RedirectUrlNotWhitelisted);\n\n    expect(overlayRoots()).toHaveLength(1);\n    const cardText = document.body.textContent;\n    expect(cardText).toContain(\"A domain in your authentication flow is not one of your project's trusted domains\");\n    expect(cardText).toContain(\"add it to your project's trusted domains in the Hexclave dashboard, under Domains.\");\n  });\n\n  it(\"leaves other handoff failures to captureError\", async () => {\n    const app = createAppWithFailingHandoff({\n      projectId: \"00000000-0000-4000-8000-000000000102\",\n      sendClientRequest: async () => {\n        throw new KnownErrors.UserAuthenticationRequired();\n      },\n    });\n\n    await expect(createCrossDomainAuthRedirectUrl(app, \"https://demo.example.test/\")).rejects.toSatisfy(\n      (error: unknown) => KnownErrors.UserAuthenticationRequired.isInstance(error),\n    );\n    expect(overlayRoots()).toHaveLength(0);\n  });\n});\n"],"mappings":";;;;;;;;;AAcA,SAAS,wBAAwB,gBAAgC;CAC/D,MAAM,UAAU,UAAmB,OAAO,KAAK,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,SAAS,WAAW;CAC1F,MAAM,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;CAC/C,OAAO;EACL,OAAO;GAAE,KAAK;GAAQ,KAAK;EAAM,CAAC;EAClC,OAAO;GACL,KAAK;GACL,KAAK,aAAa;GAClB,KAAK;GACL,KAAK;GACL,KAAK;GACL,YAAY;GACZ,WAAW;GACX,kBAAkB;GAClB,MAAM;GACN,MAAM;GACN,OAAO;GACP,gBAAgB;GAChB,kBAAkB;GAClB,cAAc;GACd,cAAc;GACd,eAAe;GACf,mBAAmB;GACnB,mBAAmB;EACrB,CAAC;EACD;CACF,CAAC,CAAC,KAAK,GAAG;AACZ;AAEA,SAAS,eAAoC;CAC3C,OAAO,SAAS,iBAAiB,+BAA+B;AAClE;AAEA,SAAS,4BAA4B,SAGZ;CACvB,MAAM,MAAM,IAAI,eAAe;EAC7B,SAAS;EACT,WAAW,QAAQ;EACnB,sBAAsB;EACtB,YAAY;EACZ,gBAAgB;EAChB,qBAAqB;EACrB,SAAS;CACX,CAAC;CACD,MAAM,cAAc,wBAAwB,yBAAyB;CACrE,MAAM,kBAAkB,QAAQ,IAAI,KAAK,YAAY;CACrD,QAAQ,IAAI,iBAAiB,uBAAuB,YAAY;EAC9D,OAAO,YAAY,cAAc,WAAW,YAAY;GACtD,MAAM,IAAI,MAAM,6CAA6C;EAC/D,EAAA,CAAG;CACL,CAAC;CACD,QAAQ,IAAI,iBAAiB,qBAAqB,QAAQ,iBAAiB;CAC3E,OAAO;AACT;AAEA,SAAS,iCAAiC,KAA2B,aAAuC;CAC1G,MAAM,SAAS,QAAQ,IAAI,KAAK,mCAAmC;CACnE,IAAI,OAAO,WAAW,YACpB,MAAM,IAAI,MAAM,+EAA+E;CAEjG,OAAO,OAAO,KAAK,KAAK;EACtB;EACA,OAAO;EACP,eAAe;EACf,0BAA0B;EAC1B,wBAAwB;GACtB,aAAa,wBAAwB,yBAAyB;GAC9D,cAAc;EAChB;CACF,CAAC;AACH;AAEA,SAAS,qDAAqD;CAC5D,gBAAgB;EAEd,oBAAoB,uCAAuC,CAAC,EAAE,QAAQ;EACtE,oBAAoB,yCAAyC,IAAI;EACjE,KAAK,MAAM,QAAQ,aAAa,GAC9B,KAAK,OAAO;CAEhB,CAAC;CAED,GAAG,+EAA+E,YAAY;EAC5F,MAAM,eAAe;EACrB,MAAM,MAAM,4BAA4B;GACtC,WAAW;GACX,mBAAmB,YAAY;IAC7B,MAAM,IAAI,YAAY,0BAA0B,YAAY;GAC9D;EACF,CAAC;EAKD,IAAI,SAAkB;EACtB,IAAI;GACF,MAAM,iCAAiC,KAAK,YAAY;EAC1D,SAAS,OAAO;GACd,SAAS;EACX;EAEA,IAAI,CAAC,mBAAmB,aAAa,MAAM,GACzC,MAAM,IAAI,MAAM,8DAA8D,QAAQ;EAGxF,OAAO,OAAO,OAAO,CAAC,CAAC,KAAK,2EAA2E;EAEvG,OAAO,QAAQ,IAAI,QAAQ,wBAAwB,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC;EAC3F,OAAO,OAAO,KAAK,CAAC,CAAC,eAAe,YAAY,yBAAyB;EAEzE,OAAO,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;EACrC,MAAM,WAAW,SAAS,KAAK;EAC/B,OAAO,QAAQ,CAAC,CAAC,UAAU,mFAAmF;EAC9G,OAAO,QAAQ,CAAC,CAAC,UAAU,oFAAoF;CACjH,CAAC;CAED,GAAG,iDAAiD,YAAY;EAQ9D,MAAM,OAAO,iCAPD,4BAA4B;GACtC,WAAW;GACX,mBAAmB,YAAY;IAC7B,MAAM,IAAI,YAAY,2BAA2B;GACnD;EACF,CAEgD,GAAG,4BAA4B,CAAC,CAAC,CAAC,QAAQ,WACvF,UAAmB,YAAY,2BAA2B,WAAW,KAAK,CAC7E;EACA,OAAO,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;CACvC,CAAC;AACH,CAAC"}

package/dist/esm/lib/hexclave-app/apps/implementations/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/common.ts"],"mappings":";;;;;;;cAqBa,aAAA;AAAA,cAgDA,WAAA,uBAAmC,OAAA,GAAU,YAAA,EAAc,CAAA,KAAM,OAAA,CAAQ,CAAA,MAAE,UAAA,CAAA,CAAA,EAAA,MAAA,CAAA,CAAA;AAAA,cAO3E,oBAAA,uBAA4C,OAAA,GAAU,OAAA,EAAS,eAAA,EAAiB,iBAAA,EAAmB,CAAA,KAAM,OAAA,CAAQ,CAAA,MAAE,UAAA,EAAA,eAAA,KAAA,CAAA,GAAA,MAAA,CAAA,CAAA;AAAA,KAa3H,OAAA;EAAA,CAAa,0BAA0B;IAAK,qBAAqB;EAAA;AAAA;AAAA,iBACtD,yBAAA;EAAsC,YAAA,GAAe,OAAA;AAAA,GAAW,OAAA,EAAS,CAAA,GAAI,CAAA;EAAM,YAAA;AAAA;AAAA,iBAOnF,OAAA,CAAQ,OAAA,EAAS,iBAAA,EAAmB,OAAA;EAAW,SAAA;AAAA,IAAsB,mBAAmB;AAAA,iBAOxF,mBAAA;AAAA,iBAIA,8BAAA;AAAA,iBAIA,yBAAA;AAAA,iBAIA,6BAAA;AAAA,iBAIA,6BAAA;;;;;;;;;;;AAnDwE;AAOxF;;;;;;;iBAkEgB,UAAA,CAAW,oBAAA;EAAiC,OAAA;EAAiB,MAAA;AAAA;AAAA,cAwBhE,cAAA;AAAA,cACA,uBAAA;AAAA,iBAOG,mBAAA,CAAoB,cAAsB;AAAA,iBA0B1C,cAAA,CAAe,mBAAA;EAAgC,OAAA;EAAiB,MAAA;AAAA;AAAA,KAcpE,WAAA;EACV,WAAA;EACA,YAAY;AAAA;AAAA,iBAGE,qBAAA,IAAqB,KAAA,CAAA,WAAA;AAAA,iBASrB,aAAA,qBAAkC,KAAA,EAAO,UAAA,CAAW,CAAA,EAAG,MAAA,CAAO,CAAA,IAAK,YAAA,EAAc,CAAA,EAAG,MAAA,WAAiB,CAAA"}
+{"version":3,"file":"common.d.ts","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/common.ts"],"mappings":";;;;;;;cAsBa,aAAA;AAAA,cAgDA,WAAA,uBAAmC,OAAA,GAAU,YAAA,EAAc,CAAA,KAAM,OAAA,CAAQ,CAAA,MAAE,UAAA,CAAA,CAAA,EAAA,MAAA,CAAA,CAAA;AAAA,cAO3E,oBAAA,uBAA4C,OAAA,GAAU,OAAA,EAAS,eAAA,EAAiB,iBAAA,EAAmB,CAAA,KAAM,OAAA,CAAQ,CAAA,MAAE,UAAA,EAAA,eAAA,KAAA,CAAA,GAAA,MAAA,CAAA,CAAA;AAAA,KAa3H,OAAA;EAAA,CAAa,0BAA0B;IAAK,qBAAqB;EAAA;AAAA;AAAA,iBACtD,yBAAA;EAAsC,YAAA,GAAe,OAAA;AAAA,GAAW,OAAA,EAAS,CAAA,GAAI,CAAA;EAAM,YAAA;AAAA;AAAA,iBAOnF,OAAA,CAAQ,OAAA,EAAS,iBAAA,EAAmB,OAAA;EAAW,SAAA;AAAA,IAAsB,mBAAmB;AAAA,iBAOxF,mBAAA;AAAA,iBAIA,8BAAA;AAAA,iBAIA,yBAAA;AAAA,iBAIA,6BAAA;AAAA,iBAIA,6BAAA;;;;;;;;;;;AAnDwE;AAOxF;;;;;;;iBAkEgB,UAAA,CAAW,oBAAA;EAAiC,OAAA;EAAiB,MAAA;AAAA;AAAA,cAwBhE,cAAA;AAAA,cACA,uBAAA;AAAA,iBAOG,mBAAA,CAAoB,cAAsB;AAAA,iBA0B1C,cAAA,CAAe,mBAAA;EAAgC,OAAA;EAAiB,MAAA;AAAA;AAAA,KAcpE,WAAA;EACV,WAAA;EACA,YAAY;AAAA;AAAA,iBAGE,qBAAA,IAAqB,KAAA,CAAA,WAAA;AAAA,iBASrB,aAAA,qBAAkC,KAAA,EAAO,UAAA,CAAW,CAAA,EAAG,MAAA,CAAO,CAAA,IAAK,YAAA,EAAc,CAAA,EAAG,MAAA,WAAiB,CAAA"}

package/dist/esm/lib/hexclave-app/apps/implementations/common.js

@@ -2,7 +2,7 @@ import { runAsynchronously } from "@hexclave/shared/dist/utils/promises";
 import { deindent } from "@hexclave/shared/dist/utils/strings";
 import { captureError, concatStacktraces, throwErr } from "@hexclave/shared/dist/utils/errors";
 import React, { useCallback } from "react";
-import { suspendIfSsr, use } from "@hexclave/shared/dist/utils/react";
+import { use } from "@hexclave/shared/dist/utils/react";
 import { filterUndefined, omit } from "@hexclave/shared/dist/utils/objects";
 import { getDefaultApiUrls } from "@hexclave/shared/dist/utils/urls";
 import { AsyncCache } from "@hexclave/shared/dist/utils/caches";
@@ -12,10 +12,11 @@ import { createGlobal, getGlobal } from "@hexclave/shared/dist/utils/globals";
 import { hexclaveAppInternalsSymbol } from "../../common.js";
 import { Store } from "@hexclave/shared/dist/utils/stores";
 import { envVars } from "../../../../generated/env.js";
+import { suspendIfSsr } from "../../../../utils/react.js";
 import { resolveHandlerUrls } from "../../url-targets.js";
 //#region src/lib/hexclave-app/apps/implementations/common.ts
-const clientVersion = "js @hexclave/next@1.0.76";
-if ("js @hexclave/next@1.0.76".startsWith("STACK_COMPILE_TIME"));
+const clientVersion = "js @hexclave/next@1.0.77";
+if ("js @hexclave/next@1.0.77".startsWith("STACK_COMPILE_TIME"));
 const replaceHexclavePortPrefix = (input) => {
 	if (!input) return input;
 	const prefix = envVars.HEXCLAVE_PORT_PREFIX;

package/dist/esm/lib/hexclave-app/apps/implementations/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/common.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport { AsyncCache } from \"@hexclave/shared/dist/utils/caches\";\nimport { isBrowserLike } from \"@hexclave/shared/dist/utils/env\";\nimport { HexclaveAssertionError, captureError, concatStacktraces, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { createGlobal, getGlobal } from \"@hexclave/shared/dist/utils/globals\";\nimport { filterUndefined, omit } from \"@hexclave/shared/dist/utils/objects\";\nimport { ReactPromise, runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { suspendIfSsr, use } from \"@hexclave/shared/dist/utils/react\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { Store } from \"@hexclave/shared/dist/utils/stores\";\nimport { deindent } from \"@hexclave/shared/dist/utils/strings\";\nimport { getDefaultApiUrls } from \"@hexclave/shared/dist/utils/urls\";\nimport React, { useCallback } from \"react\"; // THIS_LINE_PLATFORM react-like\nimport { envVars } from \"../../../../generated/env\";\nimport { HandlerUrlOptions, ResolvedHandlerUrls, hexclaveAppInternalsSymbol } from \"../../common\";\nimport { resolveHandlerUrls } from \"../../url-targets\";\n\nexport const clientVersion = \"STACK_COMPILE_TIME_CLIENT_PACKAGE_VERSION_SENTINEL\";\nif (clientVersion.startsWith(\"STACK_COMPILE_TIME\")) {\n  throw new HexclaveAssertionError(\"Client version was not replaced. Something went wrong during build!\");\n}\n\nconst replaceHexclavePortPrefix = <T extends string | undefined>(input: T): T => {\n  if (!input) return input;\n  const prefix = envVars.HEXCLAVE_PORT_PREFIX;\n  return prefix ? input.replace(/\\$\\{NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX:-81\\}/g, prefix) as T : input;\n};\n\nconst showMissingConfigAlertInBrowser = (message: string) => {\n  if (!isBrowserLike()) return;\n\n  const global = globalThis as any;\n  const alertAlreadyShownKey = \"__hexclave_missing_config_alert_already_shown\";\n  if (global[alertAlreadyShownKey]) return;\n  global[alertAlreadyShownKey] = true;\n\n  const alertFn = global.alert;\n  if (typeof alertFn === \"function\") {\n    alertFn(message);\n  }\n};\n\nconst throwMissingProjectIdError = (): never => {\n  const message = deindent`\n    Welcome to Hexclave!\n    \n    It seems that you haven't provided a project ID.\n\n    ${envVars.NODE_ENV?.includes(\"dev\") ? deindent`\n      You are running this app in development mode. Make sure that your start command is wrapped in a call to the Hexclave CLI: \\`npx @hexclave/cli dev --config-file <file> -- <command>\\`\n\n      Alternatively, you can also connect to a Cloud project's environment variables instead by creating a project on the Hexclave dashboard at https://app.hexclave.com and put its information in the HEXCLAVE_PROJECT_ID environment variable.\n    ` : envVars.NODE_ENV?.includes(\"prod\") ? deindent`\n      It seems you are running a project in production. Please create a project on the Hexclave dashboard at https://app.hexclave.com and put it in the HEXCLAVE_PROJECT_ID environment variable.\n    ` : deindent`\n      - If you are running a development project and would like to connect the local Hexclave dashboard, wrap your start command in: \\`npx @hexclave/cli dev --config-file <file> -- <command>\\`\n\n      - If you are running a project in production and would like to connect to Hexclave Cloud, create a project on the Hexclave dashboard at https://app.hexclave.com and put its information in the HEXCLAVE_PROJECT_ID environment variable.\n    `}\n  `;\n  showMissingConfigAlertInBrowser(message);\n  return throwErr(new Error(message));\n};\n\n\nexport const createCache = <D extends any[], T>(fetcher: (dependencies: D) => Promise<T>) => {\n  return new AsyncCache<D, Result<T>>(\n    async (dependencies) => await Result.fromThrowingAsync(async () => await fetcher(dependencies)),\n    {},\n  );\n};\n\nexport const createCacheBySession = <D extends any[], T>(fetcher: (session: InternalSession, extraDependencies: D) => Promise<T> ) => {\n  return new AsyncCache<[InternalSession, ...D], Result<T>>(\n    async ([session, ...extraDependencies]) => await Result.fromThrowingAsync(async () => await fetcher(session, extraDependencies)),\n    {\n      onSubscribe: ([session], refresh) => {\n        const handler = session.onInvalidate(() => refresh());\n        return () => handler.unsubscribe();\n      },\n    },\n  );\n};\n\n\ntype AppLike = { [hexclaveAppInternalsSymbol]: { getConstructorOptions: () => any } };\nexport function resolveConstructorOptions<T extends { inheritsFrom?: AppLike }>(options: T): T & { inheritsFrom?: undefined } {\n  return {\n    ...options.inheritsFrom?.[hexclaveAppInternalsSymbol].getConstructorOptions() ?? {},\n    ...filterUndefined(omit(options, [\"inheritsFrom\"])),\n  };\n}\n\nexport function getUrls(partial: HandlerUrlOptions, options: { projectId: string }): ResolvedHandlerUrls {\n  return resolveHandlerUrls({\n    urls: partial,\n    projectId: options.projectId,\n  });\n}\n\nexport function getDefaultProjectId() {\n  return envVars.HEXCLAVE_PROJECT_ID || throwMissingProjectIdError();\n}\n\nexport function getDefaultPublishableClientKey() {\n  return envVars.HEXCLAVE_PUBLISHABLE_CLIENT_KEY;\n}\n\nexport function getDefaultSecretServerKey() {\n  return envVars.HEXCLAVE_SECRET_SERVER_KEY || throwErr(new Error(\"No secret server key provided. Please copy your key from the Hexclave dashboard and put it in the HEXCLAVE_SECRET_SERVER_KEY environment variable.\"));\n}\n\nexport function getDefaultSuperSecretAdminKey() {\n  return envVars.HEXCLAVE_SUPER_SECRET_ADMIN_KEY || throwErr(new Error(\"No super secret admin key provided. Please copy your key from the Hexclave dashboard and put it in the HEXCLAVE_SUPER_SECRET_ADMIN_KEY environment variable.\"));\n}\n\nexport function getDefaultExtraRequestHeaders() {\n  return JSON.parse(envVars.HEXCLAVE_EXTRA_REQUEST_HEADERS || '{}');\n}\n\n/**\n * Returns the base URL for the Stack API.\n *\n * The URL can be specified in several ways, in order of precedence:\n * 1. Directly through userSpecifiedBaseUrl parameter as string or browser/server object\n * 2. Through environment variables:\n *    - Browser: NEXT_PUBLIC_HEXCLAVE_API_URL_BROWSER/VITE_HEXCLAVE_API_URL_BROWSER\n *    - Server: HEXCLAVE_API_URL_SERVER\n *    - Default: HEXCLAVE_API_URL\n * 3. Default base URL if none of the above are specified\n *\n * The function also ensures the URL doesn't end with a trailing slash\n * by removing it if present.\n *\n * @param userSpecifiedBaseUrl - Optional URL override as string or {browser, server} object\n * @returns The configured base URL without trailing slash\n\n */\nexport function getBaseUrl(userSpecifiedBaseUrl: string | { browser: string, server: string } | undefined) {\n  let url;\n  if (userSpecifiedBaseUrl) {\n    if (typeof userSpecifiedBaseUrl === \"string\") {\n      url = userSpecifiedBaseUrl;\n    } else {\n      if (isBrowserLike()) {\n        url = userSpecifiedBaseUrl.browser;\n      } else {\n        url = userSpecifiedBaseUrl.server;\n      }\n    }\n  } else {\n    if (isBrowserLike()) {\n      url = envVars.HEXCLAVE_API_URL_BROWSER;\n    } else {\n      url = envVars.HEXCLAVE_API_URL_SERVER;\n    }\n    url = url || envVars.HEXCLAVE_API_URL || defaultBaseUrl;\n  }\n\n  return replaceHexclavePortPrefix(url.endsWith('/') ? url.slice(0, -1) : url);\n}\n\nexport const defaultBaseUrl = \"https://api.hexclave.com\";\nexport const defaultAnalyticsBaseUrl = \"https://r.hexclave.com\";\n\nconst analyticsBaseUrlsByApiBaseUrl = new Map<string, string>([\n  [defaultBaseUrl, defaultAnalyticsBaseUrl],\n  [\"https://api.stack-auth.com\", \"https://r.stack-auth.com\"],\n]);\n\nexport function getAnalyticsBaseUrl(regularBaseUrl: string): string {\n  return analyticsBaseUrlsByApiBaseUrl.get(regularBaseUrl) ?? regularBaseUrl;\n}\n\n\nfunction fetchBackendUrlsInBackground(primaryBaseUrl: string): void {\n  createGlobal('__stack-fetch-backend-urls-started', () => {\n    runAsynchronously(async () => {\n      try {\n        const res = await fetch(`${primaryBaseUrl}/api/v1/internal/backend-urls`);\n        if (!res.ok) {\n          return;\n        }\n        const data = await res.json();\n        if (!Array.isArray(data.urls) || !data.urls.every((u: unknown) => typeof u === 'string')) {\n          return;\n        }\n        createGlobal('__stack-fetched-backend-urls', () => data.urls as string[]);\n      } catch (e) {\n        captureError('fetch-backend-urls-in-background', e);\n      }\n    });\n    return true;\n  });\n}\n\nexport function resolveApiUrls(userExplicitBaseUrl: string | { browser: string, server: string } | undefined): () => string[] {\n  return () => {\n    if (userExplicitBaseUrl != null) {\n      return [getBaseUrl(userExplicitBaseUrl)];\n    }\n    const primary = getBaseUrl(undefined);\n    // Always try to fetch server-configured URLs (supports custom domains via\n    // STACK_BACKEND_URLS_CONFIG). Hardcoded fallbacks are used as a default\n    // until the background fetch completes.\n    fetchBackendUrlsInBackground(primary);\n    return getGlobal('__stack-fetched-backend-urls') ?? getDefaultApiUrls(primary);\n  };\n}\n\nexport type TokenObject = {\n  accessToken: string | null,\n  refreshToken: string | null,\n};\n\nexport function createEmptyTokenStore() {\n  return new Store<TokenObject>({\n    refreshToken: null,\n    accessToken: null,\n  });\n}\n\n\nconst cachePromiseByHookId = new Map<string, ReactPromise<Result<unknown>>>();\nexport function useAsyncCache<D extends any[], T>(cache: AsyncCache<D, Result<T>>, dependencies: D, caller: string): T {\n  // we explicitly don't want to run this hook in SSR\n  suspendIfSsr(caller);\n\n  // on the dashboard, we do some perf monitoring for pre-fetching which should hook right in here\n  const asyncCacheHooks: any[] = getGlobal(\"use-async-cache-execution-hooks\") ?? [];\n  for (const hook of asyncCacheHooks) {\n    hook({ cache, caller, dependencies });\n  }\n\n  const id = React.useId();\n\n  // whenever the dependencies change, we need to refresh the promise cache\n  React.useEffect(() => {\n    cachePromiseByHookId.delete(id);\n  }, [...dependencies, id]);\n\n  const subscribe = useCallback((cb: () => void) => {\n    const { unsubscribe } = cache.onStateChange(dependencies, () => {\n      cachePromiseByHookId.delete(id);\n      cb();\n    });\n    return unsubscribe;\n  }, [cache, ...dependencies]);\n\n  const getSnapshot = useCallback(() => {\n    // React checks whether a promise passed to `use` is still the same as the previous one by comparing the reference.\n    // If we didn't cache here, this wouldn't work because the promise would be recreated every time the value changes.\n    if (!cachePromiseByHookId.has(id)) {\n      cachePromiseByHookId.set(id, cache.getOrWait(dependencies, \"read-write\"));\n    }\n    return cachePromiseByHookId.get(id) as ReactPromise<Result<T>>;\n  }, [cache, ...dependencies]);\n\n  // note: we must use React.useSyncExternalStore instead of importing the function directly, as it will otherwise\n  // throw an error on Next.js (\"can't import useSyncExternalStore from the server\")\n  const promise = React.useSyncExternalStore(\n    subscribe,\n    getSnapshot,\n    getSnapshot,\n  );\n\n  const result = use(promise);\n  if (result.status === \"error\") {\n    const error = result.error;\n    if (error instanceof Error && !(error as any).__stackHasConcatenatedStacktraces) {\n      concatStacktraces(error, new Error());\n      (error as any).__stackHasConcatenatedStacktraces = true;\n    }\n    throw error;\n  }\n  return result.data;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAqBA,MAAa,gBAAgB;AAC7B,IAAA,2BAAkB,WAAW,oBAAoB;AAIjD,MAAM,6BAA2D,UAAgB;CAC/E,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,SAAS,QAAQ;CACvB,OAAO,SAAS,MAAM,QAAQ,+CAA+C,MAAM,IAAS;AAC9F;AAEA,MAAM,mCAAmC,YAAoB;CAC3D,IAAI,CAAC,cAAc,GAAG;CAEtB,MAAM,SAAS;CACf,MAAM,uBAAuB;CAC7B,IAAI,OAAO,uBAAuB;CAClC,OAAO,wBAAwB;CAE/B,MAAM,UAAU,OAAO;CACvB,IAAI,OAAO,YAAY,YACrB,QAAQ,OAAO;AAEnB;AAEA,MAAM,mCAA0C;CAC9C,MAAM,UAAU,QAAQ;;;;;MAKpB,QAAQ,UAAU,SAAS,KAAK,IAAI,QAAQ;;;;QAI1C,QAAQ,UAAU,SAAS,MAAM,IAAI,QAAQ;;QAE7C,QAAQ;;;;MAIV;;CAEJ,gCAAgC,OAAO;CACvC,OAAO,SAAS,IAAI,MAAM,OAAO,CAAC;AACpC;AAGA,MAAa,eAAmC,YAA6C;CAC3F,OAAO,IAAI,WACT,OAAO,iBAAiB,MAAM,OAAO,kBAAkB,YAAY,MAAM,QAAQ,YAAY,CAAC,GAC9F,CAAC,CACH;AACF;AAEA,MAAa,wBAA4C,YAA6E;CACpI,OAAO,IAAI,WACT,OAAO,CAAC,SAAS,GAAG,uBAAuB,MAAM,OAAO,kBAAkB,YAAY,MAAM,QAAQ,SAAS,iBAAiB,CAAC,GAC/H,EACE,cAAc,CAAC,UAAU,YAAY;EACnC,MAAM,UAAU,QAAQ,mBAAmB,QAAQ,CAAC;EACpD,aAAa,QAAQ,YAAY;CACnC,EACF,CACF;AACF;AAIA,SAAgB,0BAAgE,SAA8C;CAC5H,OAAO;EACL,GAAG,QAAQ,eAAe,2BAA2B,CAAC,sBAAsB,KAAK,CAAC;EAClF,GAAG,gBAAgB,KAAK,SAAS,CAAC,cAAc,CAAC,CAAC;CACpD;AACF;AAEA,SAAgB,QAAQ,SAA4B,SAAqD;CACvG,OAAO,mBAAmB;EACxB,MAAM;EACN,WAAW,QAAQ;CACrB,CAAC;AACH;AAEA,SAAgB,sBAAsB;CACpC,OAAO,QAAQ,uBAAuB,2BAA2B;AACnE;AAEA,SAAgB,iCAAiC;CAC/C,OAAO,QAAQ;AACjB;AAEA,SAAgB,4BAA4B;CAC1C,OAAO,QAAQ,8BAA8B,yBAAS,IAAI,MAAM,oJAAoJ,CAAC;AACvN;AAEA,SAAgB,gCAAgC;CAC9C,OAAO,QAAQ,mCAAmC,yBAAS,IAAI,MAAM,8JAA8J,CAAC;AACtO;AAEA,SAAgB,gCAAgC;CAC9C,OAAO,KAAK,MAAM,QAAQ,kCAAkC,IAAI;AAClE;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,WAAW,sBAAgF;CACzG,IAAI;CACJ,IAAI,sBACF,IAAI,OAAO,yBAAyB,UAClC,MAAM;MAEN,IAAI,cAAc,GAChB,MAAM,qBAAqB;MAE3B,MAAM,qBAAqB;MAG1B;EACL,IAAI,cAAc,GAChB,MAAM,QAAQ;OAEd,MAAM,QAAQ;EAEhB,MAAM,OAAO,QAAQ,oBAAA;CACvB;CAEA,OAAO,0BAA0B,IAAI,SAAS,GAAG,IAAI,IAAI,MAAM,GAAG,EAAE,IAAI,GAAG;AAC7E;AAEA,MAAa,iBAAiB;AAC9B,MAAa,0BAA0B;AAEvC,MAAM,gDAAgC,IAAI,IAAoB,CAC5D,CAAC,gBAAgB,uBAAuB,GACxC,CAAC,8BAA8B,0BAA0B,CAC3D,CAAC;AAED,SAAgB,oBAAoB,gBAAgC;CAClE,OAAO,8BAA8B,IAAI,cAAc,KAAK;AAC9D;AAGA,SAAS,6BAA6B,gBAA8B;CAClE,aAAa,4CAA4C;EACvD,kBAAkB,YAAY;GAC5B,IAAI;IACF,MAAM,MAAM,MAAM,MAAM,GAAG,eAAe,8BAA8B;IACxE,IAAI,CAAC,IAAI,IACP;IAEF,MAAM,OAAO,MAAM,IAAI,KAAK;IAC5B,IAAI,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,MAAe,OAAO,MAAM,QAAQ,GACrF;IAEF,aAAa,sCAAsC,KAAK,IAAgB;GAC1E,SAAS,GAAG;IACV,aAAa,oCAAoC,CAAC;GACpD;EACF,CAAC;EACD,OAAO;CACT,CAAC;AACH;AAEA,SAAgB,eAAe,qBAA+F;CAC5H,aAAa;EACX,IAAI,uBAAuB,MACzB,OAAO,CAAC,WAAW,mBAAmB,CAAC;EAEzC,MAAM,UAAU,WAAW,KAAA,CAAS;EAIpC,6BAA6B,OAAO;EACpC,OAAO,UAAU,8BAA8B,KAAK,kBAAkB,OAAO;CAC/E;AACF;AAOA,SAAgB,wBAAwB;CACtC,OAAO,IAAI,MAAmB;EAC5B,cAAc;EACd,aAAa;CACf,CAAC;AACH;AAGA,MAAM,uCAAuB,IAAI,IAA2C;AAC5E,SAAgB,cAAkC,OAAiC,cAAiB,QAAmB;CAErH,aAAa,MAAM;CAGnB,MAAM,kBAAyB,UAAU,iCAAiC,KAAK,CAAC;CAChF,KAAK,MAAM,QAAQ,iBACjB,KAAK;EAAE;EAAO;EAAQ;CAAa,CAAC;CAGtC,MAAM,KAAK,MAAM,MAAM;CAGvB,MAAM,gBAAgB;EACpB,qBAAqB,OAAO,EAAE;CAChC,GAAG,CAAC,GAAG,cAAc,EAAE,CAAC;CAExB,MAAM,YAAY,aAAa,OAAmB;EAChD,MAAM,EAAE,gBAAgB,MAAM,cAAc,oBAAoB;GAC9D,qBAAqB,OAAO,EAAE;GAC9B,GAAG;EACL,CAAC;EACD,OAAO;CACT,GAAG,CAAC,OAAO,GAAG,YAAY,CAAC;CAE3B,MAAM,cAAc,kBAAkB;EAGpC,IAAI,CAAC,qBAAqB,IAAI,EAAE,GAC9B,qBAAqB,IAAI,IAAI,MAAM,UAAU,cAAc,YAAY,CAAC;EAE1E,OAAO,qBAAqB,IAAI,EAAE;CACpC,GAAG,CAAC,OAAO,GAAG,YAAY,CAAC;CAU3B,MAAM,SAAS,IANC,MAAM,qBACpB,WACA,aACA,WAGuB,CAAC;CAC1B,IAAI,OAAO,WAAW,SAAS;EAC7B,MAAM,QAAQ,OAAO;EACrB,IAAI,iBAAiB,SAAS,CAAE,MAAc,mCAAmC;GAC/E,kBAAkB,uBAAO,IAAI,MAAM,CAAC;GACpC,MAAe,oCAAoC;EACrD;EACA,MAAM;CACR;CACA,OAAO,OAAO;AAChB"}
+{"version":3,"file":"common.js","names":[],"sources":["../../../../../../src/lib/hexclave-app/apps/implementations/common.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport { AsyncCache } from \"@hexclave/shared/dist/utils/caches\";\nimport { isBrowserLike } from \"@hexclave/shared/dist/utils/env\";\nimport { HexclaveAssertionError, captureError, concatStacktraces, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { createGlobal, getGlobal } from \"@hexclave/shared/dist/utils/globals\";\nimport { filterUndefined, omit } from \"@hexclave/shared/dist/utils/objects\";\nimport { ReactPromise, runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { use } from \"@hexclave/shared/dist/utils/react\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { Store } from \"@hexclave/shared/dist/utils/stores\";\nimport { deindent } from \"@hexclave/shared/dist/utils/strings\";\nimport { getDefaultApiUrls } from \"@hexclave/shared/dist/utils/urls\";\nimport React, { useCallback } from \"react\"; // THIS_LINE_PLATFORM react-like\nimport { envVars } from \"../../../../generated/env\";\nimport { suspendIfSsr } from \"../../../../utils/react\"; // THIS_LINE_PLATFORM next react\nimport { HandlerUrlOptions, ResolvedHandlerUrls, hexclaveAppInternalsSymbol } from \"../../common\";\nimport { resolveHandlerUrls } from \"../../url-targets\";\n\nexport const clientVersion = \"STACK_COMPILE_TIME_CLIENT_PACKAGE_VERSION_SENTINEL\";\nif (clientVersion.startsWith(\"STACK_COMPILE_TIME\")) {\n  throw new HexclaveAssertionError(\"Client version was not replaced. Something went wrong during build!\");\n}\n\nconst replaceHexclavePortPrefix = <T extends string | undefined>(input: T): T => {\n  if (!input) return input;\n  const prefix = envVars.HEXCLAVE_PORT_PREFIX;\n  return prefix ? input.replace(/\\$\\{NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX:-81\\}/g, prefix) as T : input;\n};\n\nconst showMissingConfigAlertInBrowser = (message: string) => {\n  if (!isBrowserLike()) return;\n\n  const global = globalThis as any;\n  const alertAlreadyShownKey = \"__hexclave_missing_config_alert_already_shown\";\n  if (global[alertAlreadyShownKey]) return;\n  global[alertAlreadyShownKey] = true;\n\n  const alertFn = global.alert;\n  if (typeof alertFn === \"function\") {\n    alertFn(message);\n  }\n};\n\nconst throwMissingProjectIdError = (): never => {\n  const message = deindent`\n    Welcome to Hexclave!\n    \n    It seems that you haven't provided a project ID.\n\n    ${envVars.NODE_ENV?.includes(\"dev\") ? deindent`\n      You are running this app in development mode. Make sure that your start command is wrapped in a call to the Hexclave CLI: \\`npx @hexclave/cli dev --config-file <file> -- <command>\\`\n\n      Alternatively, you can also connect to a Cloud project's environment variables instead by creating a project on the Hexclave dashboard at https://app.hexclave.com and put its information in the HEXCLAVE_PROJECT_ID environment variable.\n    ` : envVars.NODE_ENV?.includes(\"prod\") ? deindent`\n      It seems you are running a project in production. Please create a project on the Hexclave dashboard at https://app.hexclave.com and put it in the HEXCLAVE_PROJECT_ID environment variable.\n    ` : deindent`\n      - If you are running a development project and would like to connect the local Hexclave dashboard, wrap your start command in: \\`npx @hexclave/cli dev --config-file <file> -- <command>\\`\n\n      - If you are running a project in production and would like to connect to Hexclave Cloud, create a project on the Hexclave dashboard at https://app.hexclave.com and put its information in the HEXCLAVE_PROJECT_ID environment variable.\n    `}\n  `;\n  showMissingConfigAlertInBrowser(message);\n  return throwErr(new Error(message));\n};\n\n\nexport const createCache = <D extends any[], T>(fetcher: (dependencies: D) => Promise<T>) => {\n  return new AsyncCache<D, Result<T>>(\n    async (dependencies) => await Result.fromThrowingAsync(async () => await fetcher(dependencies)),\n    {},\n  );\n};\n\nexport const createCacheBySession = <D extends any[], T>(fetcher: (session: InternalSession, extraDependencies: D) => Promise<T> ) => {\n  return new AsyncCache<[InternalSession, ...D], Result<T>>(\n    async ([session, ...extraDependencies]) => await Result.fromThrowingAsync(async () => await fetcher(session, extraDependencies)),\n    {\n      onSubscribe: ([session], refresh) => {\n        const handler = session.onInvalidate(() => refresh());\n        return () => handler.unsubscribe();\n      },\n    },\n  );\n};\n\n\ntype AppLike = { [hexclaveAppInternalsSymbol]: { getConstructorOptions: () => any } };\nexport function resolveConstructorOptions<T extends { inheritsFrom?: AppLike }>(options: T): T & { inheritsFrom?: undefined } {\n  return {\n    ...options.inheritsFrom?.[hexclaveAppInternalsSymbol].getConstructorOptions() ?? {},\n    ...filterUndefined(omit(options, [\"inheritsFrom\"])),\n  };\n}\n\nexport function getUrls(partial: HandlerUrlOptions, options: { projectId: string }): ResolvedHandlerUrls {\n  return resolveHandlerUrls({\n    urls: partial,\n    projectId: options.projectId,\n  });\n}\n\nexport function getDefaultProjectId() {\n  return envVars.HEXCLAVE_PROJECT_ID || throwMissingProjectIdError();\n}\n\nexport function getDefaultPublishableClientKey() {\n  return envVars.HEXCLAVE_PUBLISHABLE_CLIENT_KEY;\n}\n\nexport function getDefaultSecretServerKey() {\n  return envVars.HEXCLAVE_SECRET_SERVER_KEY || throwErr(new Error(\"No secret server key provided. Please copy your key from the Hexclave dashboard and put it in the HEXCLAVE_SECRET_SERVER_KEY environment variable.\"));\n}\n\nexport function getDefaultSuperSecretAdminKey() {\n  return envVars.HEXCLAVE_SUPER_SECRET_ADMIN_KEY || throwErr(new Error(\"No super secret admin key provided. Please copy your key from the Hexclave dashboard and put it in the HEXCLAVE_SUPER_SECRET_ADMIN_KEY environment variable.\"));\n}\n\nexport function getDefaultExtraRequestHeaders() {\n  return JSON.parse(envVars.HEXCLAVE_EXTRA_REQUEST_HEADERS || '{}');\n}\n\n/**\n * Returns the base URL for the Stack API.\n *\n * The URL can be specified in several ways, in order of precedence:\n * 1. Directly through userSpecifiedBaseUrl parameter as string or browser/server object\n * 2. Through environment variables:\n *    - Browser: NEXT_PUBLIC_HEXCLAVE_API_URL_BROWSER/VITE_HEXCLAVE_API_URL_BROWSER\n *    - Server: HEXCLAVE_API_URL_SERVER\n *    - Default: HEXCLAVE_API_URL\n * 3. Default base URL if none of the above are specified\n *\n * The function also ensures the URL doesn't end with a trailing slash\n * by removing it if present.\n *\n * @param userSpecifiedBaseUrl - Optional URL override as string or {browser, server} object\n * @returns The configured base URL without trailing slash\n\n */\nexport function getBaseUrl(userSpecifiedBaseUrl: string | { browser: string, server: string } | undefined) {\n  let url;\n  if (userSpecifiedBaseUrl) {\n    if (typeof userSpecifiedBaseUrl === \"string\") {\n      url = userSpecifiedBaseUrl;\n    } else {\n      if (isBrowserLike()) {\n        url = userSpecifiedBaseUrl.browser;\n      } else {\n        url = userSpecifiedBaseUrl.server;\n      }\n    }\n  } else {\n    if (isBrowserLike()) {\n      url = envVars.HEXCLAVE_API_URL_BROWSER;\n    } else {\n      url = envVars.HEXCLAVE_API_URL_SERVER;\n    }\n    url = url || envVars.HEXCLAVE_API_URL || defaultBaseUrl;\n  }\n\n  return replaceHexclavePortPrefix(url.endsWith('/') ? url.slice(0, -1) : url);\n}\n\nexport const defaultBaseUrl = \"https://api.hexclave.com\";\nexport const defaultAnalyticsBaseUrl = \"https://r.hexclave.com\";\n\nconst analyticsBaseUrlsByApiBaseUrl = new Map<string, string>([\n  [defaultBaseUrl, defaultAnalyticsBaseUrl],\n  [\"https://api.stack-auth.com\", \"https://r.stack-auth.com\"],\n]);\n\nexport function getAnalyticsBaseUrl(regularBaseUrl: string): string {\n  return analyticsBaseUrlsByApiBaseUrl.get(regularBaseUrl) ?? regularBaseUrl;\n}\n\n\nfunction fetchBackendUrlsInBackground(primaryBaseUrl: string): void {\n  createGlobal('__stack-fetch-backend-urls-started', () => {\n    runAsynchronously(async () => {\n      try {\n        const res = await fetch(`${primaryBaseUrl}/api/v1/internal/backend-urls`);\n        if (!res.ok) {\n          return;\n        }\n        const data = await res.json();\n        if (!Array.isArray(data.urls) || !data.urls.every((u: unknown) => typeof u === 'string')) {\n          return;\n        }\n        createGlobal('__stack-fetched-backend-urls', () => data.urls as string[]);\n      } catch (e) {\n        captureError('fetch-backend-urls-in-background', e);\n      }\n    });\n    return true;\n  });\n}\n\nexport function resolveApiUrls(userExplicitBaseUrl: string | { browser: string, server: string } | undefined): () => string[] {\n  return () => {\n    if (userExplicitBaseUrl != null) {\n      return [getBaseUrl(userExplicitBaseUrl)];\n    }\n    const primary = getBaseUrl(undefined);\n    // Always try to fetch server-configured URLs (supports custom domains via\n    // STACK_BACKEND_URLS_CONFIG). Hardcoded fallbacks are used as a default\n    // until the background fetch completes.\n    fetchBackendUrlsInBackground(primary);\n    return getGlobal('__stack-fetched-backend-urls') ?? getDefaultApiUrls(primary);\n  };\n}\n\nexport type TokenObject = {\n  accessToken: string | null,\n  refreshToken: string | null,\n};\n\nexport function createEmptyTokenStore() {\n  return new Store<TokenObject>({\n    refreshToken: null,\n    accessToken: null,\n  });\n}\n\n\nconst cachePromiseByHookId = new Map<string, ReactPromise<Result<unknown>>>();\nexport function useAsyncCache<D extends any[], T>(cache: AsyncCache<D, Result<T>>, dependencies: D, caller: string): T {\n  // we explicitly don't want to run this hook in SSR\n  suspendIfSsr(caller);\n\n  // on the dashboard, we do some perf monitoring for pre-fetching which should hook right in here\n  const asyncCacheHooks: any[] = getGlobal(\"use-async-cache-execution-hooks\") ?? [];\n  for (const hook of asyncCacheHooks) {\n    hook({ cache, caller, dependencies });\n  }\n\n  const id = React.useId();\n\n  // whenever the dependencies change, we need to refresh the promise cache\n  React.useEffect(() => {\n    cachePromiseByHookId.delete(id);\n  }, [...dependencies, id]);\n\n  const subscribe = useCallback((cb: () => void) => {\n    const { unsubscribe } = cache.onStateChange(dependencies, () => {\n      cachePromiseByHookId.delete(id);\n      cb();\n    });\n    return unsubscribe;\n  }, [cache, ...dependencies]);\n\n  const getSnapshot = useCallback(() => {\n    // React checks whether a promise passed to `use` is still the same as the previous one by comparing the reference.\n    // If we didn't cache here, this wouldn't work because the promise would be recreated every time the value changes.\n    if (!cachePromiseByHookId.has(id)) {\n      cachePromiseByHookId.set(id, cache.getOrWait(dependencies, \"read-write\"));\n    }\n    return cachePromiseByHookId.get(id) as ReactPromise<Result<T>>;\n  }, [cache, ...dependencies]);\n\n  // note: we must use React.useSyncExternalStore instead of importing the function directly, as it will otherwise\n  // throw an error on Next.js (\"can't import useSyncExternalStore from the server\")\n  const promise = React.useSyncExternalStore(\n    subscribe,\n    getSnapshot,\n    getSnapshot,\n  );\n\n  const result = use(promise);\n  if (result.status === \"error\") {\n    const error = result.error;\n    if (error instanceof Error && !(error as any).__stackHasConcatenatedStacktraces) {\n      concatStacktraces(error, new Error());\n      (error as any).__stackHasConcatenatedStacktraces = true;\n    }\n    throw error;\n  }\n  return result.data;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAsBA,MAAa,gBAAgB;AAC7B,IAAA,2BAAkB,WAAW,oBAAoB;AAIjD,MAAM,6BAA2D,UAAgB;CAC/E,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,SAAS,QAAQ;CACvB,OAAO,SAAS,MAAM,QAAQ,+CAA+C,MAAM,IAAS;AAC9F;AAEA,MAAM,mCAAmC,YAAoB;CAC3D,IAAI,CAAC,cAAc,GAAG;CAEtB,MAAM,SAAS;CACf,MAAM,uBAAuB;CAC7B,IAAI,OAAO,uBAAuB;CAClC,OAAO,wBAAwB;CAE/B,MAAM,UAAU,OAAO;CACvB,IAAI,OAAO,YAAY,YACrB,QAAQ,OAAO;AAEnB;AAEA,MAAM,mCAA0C;CAC9C,MAAM,UAAU,QAAQ;;;;;MAKpB,QAAQ,UAAU,SAAS,KAAK,IAAI,QAAQ;;;;QAI1C,QAAQ,UAAU,SAAS,MAAM,IAAI,QAAQ;;QAE7C,QAAQ;;;;MAIV;;CAEJ,gCAAgC,OAAO;CACvC,OAAO,SAAS,IAAI,MAAM,OAAO,CAAC;AACpC;AAGA,MAAa,eAAmC,YAA6C;CAC3F,OAAO,IAAI,WACT,OAAO,iBAAiB,MAAM,OAAO,kBAAkB,YAAY,MAAM,QAAQ,YAAY,CAAC,GAC9F,CAAC,CACH;AACF;AAEA,MAAa,wBAA4C,YAA6E;CACpI,OAAO,IAAI,WACT,OAAO,CAAC,SAAS,GAAG,uBAAuB,MAAM,OAAO,kBAAkB,YAAY,MAAM,QAAQ,SAAS,iBAAiB,CAAC,GAC/H,EACE,cAAc,CAAC,UAAU,YAAY;EACnC,MAAM,UAAU,QAAQ,mBAAmB,QAAQ,CAAC;EACpD,aAAa,QAAQ,YAAY;CACnC,EACF,CACF;AACF;AAIA,SAAgB,0BAAgE,SAA8C;CAC5H,OAAO;EACL,GAAG,QAAQ,eAAe,2BAA2B,CAAC,sBAAsB,KAAK,CAAC;EAClF,GAAG,gBAAgB,KAAK,SAAS,CAAC,cAAc,CAAC,CAAC;CACpD;AACF;AAEA,SAAgB,QAAQ,SAA4B,SAAqD;CACvG,OAAO,mBAAmB;EACxB,MAAM;EACN,WAAW,QAAQ;CACrB,CAAC;AACH;AAEA,SAAgB,sBAAsB;CACpC,OAAO,QAAQ,uBAAuB,2BAA2B;AACnE;AAEA,SAAgB,iCAAiC;CAC/C,OAAO,QAAQ;AACjB;AAEA,SAAgB,4BAA4B;CAC1C,OAAO,QAAQ,8BAA8B,yBAAS,IAAI,MAAM,oJAAoJ,CAAC;AACvN;AAEA,SAAgB,gCAAgC;CAC9C,OAAO,QAAQ,mCAAmC,yBAAS,IAAI,MAAM,8JAA8J,CAAC;AACtO;AAEA,SAAgB,gCAAgC;CAC9C,OAAO,KAAK,MAAM,QAAQ,kCAAkC,IAAI;AAClE;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,WAAW,sBAAgF;CACzG,IAAI;CACJ,IAAI,sBACF,IAAI,OAAO,yBAAyB,UAClC,MAAM;MAEN,IAAI,cAAc,GAChB,MAAM,qBAAqB;MAE3B,MAAM,qBAAqB;MAG1B;EACL,IAAI,cAAc,GAChB,MAAM,QAAQ;OAEd,MAAM,QAAQ;EAEhB,MAAM,OAAO,QAAQ,oBAAA;CACvB;CAEA,OAAO,0BAA0B,IAAI,SAAS,GAAG,IAAI,IAAI,MAAM,GAAG,EAAE,IAAI,GAAG;AAC7E;AAEA,MAAa,iBAAiB;AAC9B,MAAa,0BAA0B;AAEvC,MAAM,gDAAgC,IAAI,IAAoB,CAC5D,CAAC,gBAAgB,uBAAuB,GACxC,CAAC,8BAA8B,0BAA0B,CAC3D,CAAC;AAED,SAAgB,oBAAoB,gBAAgC;CAClE,OAAO,8BAA8B,IAAI,cAAc,KAAK;AAC9D;AAGA,SAAS,6BAA6B,gBAA8B;CAClE,aAAa,4CAA4C;EACvD,kBAAkB,YAAY;GAC5B,IAAI;IACF,MAAM,MAAM,MAAM,MAAM,GAAG,eAAe,8BAA8B;IACxE,IAAI,CAAC,IAAI,IACP;IAEF,MAAM,OAAO,MAAM,IAAI,KAAK;IAC5B,IAAI,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,MAAe,OAAO,MAAM,QAAQ,GACrF;IAEF,aAAa,sCAAsC,KAAK,IAAgB;GAC1E,SAAS,GAAG;IACV,aAAa,oCAAoC,CAAC;GACpD;EACF,CAAC;EACD,OAAO;CACT,CAAC;AACH;AAEA,SAAgB,eAAe,qBAA+F;CAC5H,aAAa;EACX,IAAI,uBAAuB,MACzB,OAAO,CAAC,WAAW,mBAAmB,CAAC;EAEzC,MAAM,UAAU,WAAW,KAAA,CAAS;EAIpC,6BAA6B,OAAO;EACpC,OAAO,UAAU,8BAA8B,KAAK,kBAAkB,OAAO;CAC/E;AACF;AAOA,SAAgB,wBAAwB;CACtC,OAAO,IAAI,MAAmB;EAC5B,cAAc;EACd,aAAa;CACf,CAAC;AACH;AAGA,MAAM,uCAAuB,IAAI,IAA2C;AAC5E,SAAgB,cAAkC,OAAiC,cAAiB,QAAmB;CAErH,aAAa,MAAM;CAGnB,MAAM,kBAAyB,UAAU,iCAAiC,KAAK,CAAC;CAChF,KAAK,MAAM,QAAQ,iBACjB,KAAK;EAAE;EAAO;EAAQ;CAAa,CAAC;CAGtC,MAAM,KAAK,MAAM,MAAM;CAGvB,MAAM,gBAAgB;EACpB,qBAAqB,OAAO,EAAE;CAChC,GAAG,CAAC,GAAG,cAAc,EAAE,CAAC;CAExB,MAAM,YAAY,aAAa,OAAmB;EAChD,MAAM,EAAE,gBAAgB,MAAM,cAAc,oBAAoB;GAC9D,qBAAqB,OAAO,EAAE;GAC9B,GAAG;EACL,CAAC;EACD,OAAO;CACT,GAAG,CAAC,OAAO,GAAG,YAAY,CAAC;CAE3B,MAAM,cAAc,kBAAkB;EAGpC,IAAI,CAAC,qBAAqB,IAAI,EAAE,GAC9B,qBAAqB,IAAI,IAAI,MAAM,UAAU,cAAc,YAAY,CAAC;EAE1E,OAAO,qBAAqB,IAAI,EAAE;CACpC,GAAG,CAAC,OAAO,GAAG,YAAY,CAAC;CAU3B,MAAM,SAAS,IANC,MAAM,qBACpB,WACA,aACA,WAGuB,CAAC;CAC1B,IAAI,OAAO,WAAW,SAAS;EAC7B,MAAM,QAAQ,OAAO;EACrB,IAAI,iBAAiB,SAAS,CAAE,MAAc,mCAAmC;GAC/E,kBAAkB,uBAAO,IAAI,MAAM,CAAC;GACpC,MAAe,oCAAoC;EACrD;EACA,MAAM;CACR;CACA,OAAO,OAAO;AAChB"}

package/dist/esm/lib/hexclave-app/apps/implementations/index.d.ts

@@ -1,6 +1,6 @@
 import { _HexclaveServerAppImplIncomplete } from "./server-app-impl.js";
-import { _HexclaveAdminAppImplIncomplete } from "./admin-app-impl.js";
 import { _HexclaveClientAppImplIncomplete } from "./client-app-impl.js";
+import { _HexclaveAdminAppImplIncomplete } from "./admin-app-impl.js";
 
 //#region src/lib/hexclave-app/apps/implementations/index.d.ts
 declare const _HexclaveAdminAppImpl: typeof _HexclaveAdminAppImplIncomplete, _HexclaveClientAppImpl: typeof _HexclaveClientAppImplIncomplete, _HexclaveServerAppImpl: typeof _HexclaveServerAppImplIncomplete;

package/dist/esm/lib/hexclave-app/apps/implementations/index.js

@@ -1,7 +1,7 @@
 import { _HexclaveServerAppImplIncomplete } from "./server-app-impl.js";
+import { _HexclaveClientAppImplIncomplete } from "./client-app-impl.js";
 import { scrambleDuringCompileTime } from "@hexclave/shared/dist/utils/compile-time";
 import { _HexclaveAdminAppImplIncomplete } from "./admin-app-impl.js";
-import { _HexclaveClientAppImplIncomplete } from "./client-app-impl.js";
 //#region src/lib/hexclave-app/apps/implementations/index.ts
 /**
 * Prevents a circular dependency between the client and admin apps. For more information, see the documentation comment

package/dist/esm/lib/hexclave-app/apps/implementations/server-app-impl.d.ts

@@ -3,12 +3,12 @@ import { HexclaveServerInterface, KnownErrors } from "@hexclave/shared";
 import { Result } from "@hexclave/shared/dist/utils/results";
 import { ConvexCtx, GetCurrentUserOptions } from "../../common.js";
 import { AdminProjectPermissionDefinition, AdminTeamPermission, AdminTeamPermissionDefinition } from "../../permissions/index.js";
+import { _HexclaveClientAppImplIncomplete } from "./client-app-impl.js";
 import { InternalSession } from "@hexclave/shared/dist/sessions";
 import { ApiKey } from "../../api-keys/index.js";
 import { ServerContactChannel } from "../../contact-channels/index.js";
 import { EditableTeamMemberProfile, ReceivedTeamInvitation, SentTeamInvitation, ServerListTeamsOptions, ServerListUsersOptions, ServerTeam, ServerTeamCreateOptions, ServerTeamUser } from "../../teams/index.js";
 import { ProjectCurrentServerUser, ServerOAuthProvider, ServerUser, ServerUserCreateOptions } from "../../users/index.js";
-import { _HexclaveClientAppImplIncomplete } from "./client-app-impl.js";
 import { TeamApiKeysCrud, UserApiKeysCrud, teamApiKeysCreateOutputSchema, userApiKeysCreateOutputSchema } from "@hexclave/shared/dist/interface/crud/project-api-keys";
 import { ContactChannelsCrud } from "@hexclave/shared/dist/interface/crud/contact-channels";
 import { ItemCrud } from "@hexclave/shared/dist/interface/crud/items";
@@ -72,7 +72,7 @@ declare class _HexclaveServerAppImplIncomplete<HasTokenStore extends boolean, Pr
   protected _serverNotificationCategoryFromCrud(userId: string, crud: NotificationPreferenceCrud['Server']['Read']): NotificationCategory;
   protected _serverOAuthProviderFromCrud(crud: OAuthProviderCrud['Server']['Read']): {
     id: string;
-    type: "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "twitch";
+    type: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | "twitch";
     userId: string;
     accountId: string;
     email: string | undefined;

package/dist/esm/lib/hexclave-app/apps/implementations/server-app-impl.js

@@ -5,6 +5,7 @@ import { HexclaveServerInterface, KnownErrors } from "@hexclave/shared";
 import { suspend } from "@hexclave/shared/dist/utils/react";
 import { Result } from "@hexclave/shared/dist/utils/results";
 import { clientVersion, createCache, createCacheBySession, getDefaultExtraRequestHeaders, getDefaultProjectId, getDefaultPublishableClientKey, getDefaultSecretServerKey, resolveApiUrls, resolveConstructorOptions, useAsyncCache } from "./common.js";
+import { _HexclaveClientAppImplIncomplete } from "./client-app-impl.js";
 import { InternalSession } from "@hexclave/shared/dist/sessions";
 import { isUuid } from "@hexclave/shared/dist/utils/uuids";
 import { WebAuthnError, startRegistration } from "@simplewebauthn/browser";
@@ -14,7 +15,6 @@ import { serverContactChannelCreateOptionsToCrud, serverContactChannelUpdateOpti
 import { serverTeamCreateOptionsToCrud, serverTeamUpdateOptionsToCrud } from "../../teams/index.js";
 import { scopePasskeyRegistrationToHostname } from "../../passkey-rp-id.js";
 import { serverUserCreateOptionsToCrud, serverUserUpdateOptionsToCrud, withUserDestructureGuard } from "../../users/index.js";
-import { _HexclaveClientAppImplIncomplete } from "./client-app-impl.js";
 //#region src/lib/hexclave-app/apps/implementations/server-app-impl.ts
 var _HexclaveServerAppImplIncomplete = class extends _HexclaveClientAppImplIncomplete {
 	async _refreshTeamMembership(teamId, userId) {

package/dist/esm/lib/hexclave-app/teams/index.d.ts

@@ -107,6 +107,9 @@ type ServerTeam = {
 } & Team;
 type ServerListUsersOptionsBase = {
   cursor?: string;
+  /**
+   * Maximum number of users to return per page. Must be at most 1000.
+   */
   limit?: number;
   orderBy?: 'signedUpAt' | 'lastActiveAt';
   desc?: boolean;

package/dist/esm/lib/hexclave-app/teams/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../../../src/lib/hexclave-app/teams/index.ts"],"mappings":";;;;;;;;KAaY,iBAAA;EACV,WAAA;EACA,eAAe;AAAA;AAAA,KAGL,8BAAA;EACV,WAAA;EACA,eAAe;AAAA;AAAA,KAGL,yBAAA,GAA4B,iBAAA;EACtC,MAAA,CAAO,MAAA,EAAQ,8BAAA,GAAiC,OAAA;AAAA;AAAA,KAGtC,QAAA;EACV,EAAA;EACA,WAAA,EAAa,iBAAiB;AAAA;;;;;;;KASpB,kBAAA;EACV,EAAA;EACA,cAAA;EACA,SAAA,EAAW,IAAA;EACX,MAAA,IAAU,OAAO;AAAA;AAfnB;;;AAAA,KAqBY,cAAA,GAAiB,kBAAkB;;;;;AAnBf;AAShC;;KAmBY,sBAAA;EACV,EAAA;EACA,MAAA;EACA,eAAA;EACA,cAAA;EACA,SAAA,EAAW,IAAA;EApBX;;;AAAiB;AAMnB;EAqBE,MAAA,IAAU,OAAO;AAAA;AAAA,KAGP,IAAA;EACV,EAAA;EACA,WAAA;EACA,eAAA;EACA,cAAA;EACA,sBAAA;EACA,UAAA,CAAW,OAAA;IAAW,KAAA;IAAe,WAAA;EAAA,IAAyB,OAAA;EAC9D,SAAA,IAAa,OAAA,CAAQ,QAAA;EACrB,UAAA,CAAW,MAAA,WAAiB,OAAA;EAC5B,QAAA,IAAY,QAAA;EACZ,eAAA,IAAmB,OAAA,CAAQ,kBAAA;EAC3B,cAAA,IAAkB,kBAAA;EAClB,MAAA,CAAO,MAAA,EAAQ,iBAAA,GAAoB,OAAA;EACnC,MAAA,IAAU,OAAA;EACV,YAAA,CAAa,OAAA,EAAS,qBAAA,WAAgC,OAAA,CAAQ,mBAAA;AAAA,IAC5D,kBAAA,gBAAkC,UAAA,YAAsB,QAAA;AAAA,KAEhD,iBAAA;EACV,WAAA;EACA,eAAA;EACA,cAAA,GAAiB,YAAY;AAAA;AAAA,iBAEf,uBAAA,CAAwB,OAAA,EAAS,iBAAA,GAAoB,SAAS;AAAA,KAQlE,iBAAA;EACV,WAAA;EACA,eAAe;AAAA;AAAA,iBAED,uBAAA,CAAwB,OAAA,EAAS,iBAAA,EAAmB,aAAA,WAAwB,SAAS;AAAA,KASzF,uBAAA,GAA0B,iBAAiB;AAAA,KAE3C,cAAA,GAAiB,UAAA;EAC3B,WAAA,EAAa,uBAAuB;AAAA;AAAA,KAG1B,UAAA;EACV,SAAA,EAAW,IAAA;EACX,cAAA;EACA,SAAA,IAAa,OAAA,CAAQ,cAAA;EACrB,QAAA,IAAY,UAAA;EACZ,MAAA,CAAO,MAAA,EAAQ,uBAAA,GAA0B,OAAA;EACzC,MAAA,IAAU,OAAA;EACV,OAAA,CAAQ,MAAA,WAAiB,OAAA;EACzB,UAAA,CAAW,OAAA;IAAW,KAAA;IAAe,WAAA;EAAA,IAAyB,OAAA;EAC9D,UAAA,CAAW,MAAA,WAAiB,OAAA;AAAA,IAC1B,IAAA;AAAA,KAEC,0BAAA;EACH,MAAA;EACA,KAAA;EACA,OAAA;EACA,IAAA;EAzD4B;;;EA6D5B,KAAA;EA3DmB;;;EA+DnB,oBAAA;EA7DA;;;EAiEA,MAAA;EAhEA;;;;EAqEA,iBAAA;EApEsD;;;;EAyEtD,gBAAA;AAAA;AAAA,KAGU,sBAAA,GAAyB,0BAA0B;EAE3D,aAAA;AAAA;;;;;;EAOA,aAAA;EACA,gBAAA;AAAA;AAAA,KAIQ,sBAAA;EACV,OAAA;EACA,IAAA;EACA,MAAA;EACA,KAAA;EAtFsC;;;EA0FtC,KAAA;AAAA;AAAA,KAGU,uBAAA,GAA0B,iBAAiB;EACrD,aAAa;AAAA;AAAA,iBAEC,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,SAAS;AAAA,KAQ9E,uBAAA,GAA0B,iBAAA;EACpC,sBAAA,GAAyB,YAAA;EACzB,cAAA,GAAiB,YAAA;AAAA;AAAA,iBAEH,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,SAAS"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../../../src/lib/hexclave-app/teams/index.ts"],"mappings":";;;;;;;;KAaY,iBAAA;EACV,WAAA;EACA,eAAe;AAAA;AAAA,KAGL,8BAAA;EACV,WAAA;EACA,eAAe;AAAA;AAAA,KAGL,yBAAA,GAA4B,iBAAA;EACtC,MAAA,CAAO,MAAA,EAAQ,8BAAA,GAAiC,OAAA;AAAA;AAAA,KAGtC,QAAA;EACV,EAAA;EACA,WAAA,EAAa,iBAAiB;AAAA;;;;;;;KASpB,kBAAA;EACV,EAAA;EACA,cAAA;EACA,SAAA,EAAW,IAAA;EACX,MAAA,IAAU,OAAO;AAAA;AAfnB;;;AAAA,KAqBY,cAAA,GAAiB,kBAAkB;;;;;AAnBf;AAShC;;KAmBY,sBAAA;EACV,EAAA;EACA,MAAA;EACA,eAAA;EACA,cAAA;EACA,SAAA,EAAW,IAAA;EApBX;;;AAAiB;AAMnB;EAqBE,MAAA,IAAU,OAAO;AAAA;AAAA,KAGP,IAAA;EACV,EAAA;EACA,WAAA;EACA,eAAA;EACA,cAAA;EACA,sBAAA;EACA,UAAA,CAAW,OAAA;IAAW,KAAA;IAAe,WAAA;EAAA,IAAyB,OAAA;EAC9D,SAAA,IAAa,OAAA,CAAQ,QAAA;EACrB,UAAA,CAAW,MAAA,WAAiB,OAAA;EAC5B,QAAA,IAAY,QAAA;EACZ,eAAA,IAAmB,OAAA,CAAQ,kBAAA;EAC3B,cAAA,IAAkB,kBAAA;EAClB,MAAA,CAAO,MAAA,EAAQ,iBAAA,GAAoB,OAAA;EACnC,MAAA,IAAU,OAAA;EACV,YAAA,CAAa,OAAA,EAAS,qBAAA,WAAgC,OAAA,CAAQ,mBAAA;AAAA,IAC5D,kBAAA,gBAAkC,UAAA,YAAsB,QAAA;AAAA,KAEhD,iBAAA;EACV,WAAA;EACA,eAAA;EACA,cAAA,GAAiB,YAAY;AAAA;AAAA,iBAEf,uBAAA,CAAwB,OAAA,EAAS,iBAAA,GAAoB,SAAS;AAAA,KAQlE,iBAAA;EACV,WAAA;EACA,eAAe;AAAA;AAAA,iBAED,uBAAA,CAAwB,OAAA,EAAS,iBAAA,EAAmB,aAAA,WAAwB,SAAS;AAAA,KASzF,uBAAA,GAA0B,iBAAiB;AAAA,KAE3C,cAAA,GAAiB,UAAA;EAC3B,WAAA,EAAa,uBAAuB;AAAA;AAAA,KAG1B,UAAA;EACV,SAAA,EAAW,IAAA;EACX,cAAA;EACA,SAAA,IAAa,OAAA,CAAQ,cAAA;EACrB,QAAA,IAAY,UAAA;EACZ,MAAA,CAAO,MAAA,EAAQ,uBAAA,GAA0B,OAAA;EACzC,MAAA,IAAU,OAAA;EACV,OAAA,CAAQ,MAAA,WAAiB,OAAA;EACzB,UAAA,CAAW,OAAA;IAAW,KAAA;IAAe,WAAA;EAAA,IAAyB,OAAA;EAC9D,UAAA,CAAW,MAAA,WAAiB,OAAA;AAAA,IAC1B,IAAA;AAAA,KAEC,0BAAA;EACH,MAAA;EAvDqB;;;EA2DrB,KAAA;EACA,OAAA;EACA,IAAA;EA1DA;;;EA8DA,KAAA;EA7DkB;;;EAiElB,oBAAA;EAhEmC;;;EAoEnC,MAAA;EAlEsB;;;;EAuEtB,iBAAA;EAtEoC;;;AAA8B;EA2ElE,gBAAA;AAAA;AAAA,KAGU,sBAAA,GAAyB,0BAA0B;EAE3D,aAAA;AAAA;EA5EF;;;;AAC6B;EAkF3B,aAAA;EACA,gBAAA;AAAA;AAAA,KAIQ,sBAAA;EACV,OAAA;EACA,IAAA;EACA,MAAA;EACA,KAAA;EAzF4E;AAQ9E;;EAqFE,KAAA;AAAA;AAAA,KAGU,uBAAA,GAA0B,iBAAiB;EACrD,aAAa;AAAA;AAAA,iBAEC,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,SAAS;AAAA,KAQ9E,uBAAA,GAA0B,iBAAA;EACpC,sBAAA,GAAyB,YAAA;EACzB,cAAA,GAAiB,YAAA;AAAA;AAAA,iBAEH,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,SAAS"}

package/dist/esm/lib/hexclave-app/teams/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../../src/lib/hexclave-app/teams/index.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { TeamsCrud } from \"@hexclave/shared/dist/interface/crud/teams\";\nimport { ReadonlyJson } from \"@hexclave/shared/dist/utils/json\";\n\nimport { ApiKeyCreationOptions, TeamApiKey, TeamApiKeyFirstView } from \"../api-keys\";\nimport { AsyncStoreProperty } from \"../common\";\nimport { Customer } from \"../customers\";\nimport { ServerUser } from \"../users\";\n\n\nexport type TeamMemberProfile = {\n  displayName: string | null,\n  profileImageUrl: string | null,\n}\n\nexport type TeamMemberProfileUpdateOptions = {\n  displayName?: string,\n  profileImageUrl?: string | null,\n};\n\nexport type EditableTeamMemberProfile = TeamMemberProfile & {\n  update(update: TeamMemberProfileUpdateOptions): Promise<void>,\n}\n\nexport type TeamUser = {\n  id: string,\n  teamProfile: TeamMemberProfile,\n}\n\n/**\n * A team invitation as seen from the team's perspective (ie. the sender).\n *\n * Returned by `team.listInvitations()`. Contains the recipient email and allows\n * revoking the invitation.\n */\nexport type SentTeamInvitation = {\n  id: string,\n  recipientEmail: string | null,\n  expiresAt: Date,\n  revoke(): Promise<void>,\n}\n\n/**\n * @deprecated Use `SentTeamInvitation` instead.\n */\nexport type TeamInvitation = SentTeamInvitation;\n\n/**\n * A team invitation as seen from the invited user's perspective (ie. the receiver).\n *\n * Returned by `user.listTeamInvitations()`. Contains information about teams that have\n * sent invitations to any of the user's verified email addresses, and allows accepting\n * the invitation to join the team.\n */\nexport type ReceivedTeamInvitation = {\n  id: string,\n  teamId: string,\n  teamDisplayName: string,\n  recipientEmail: string,\n  expiresAt: Date,\n\n  /**\n   * Accepts the invitation, adding the current user to the team.\n   *\n   * The user must have a verified email address matching the invitation's recipient email.\n   */\n  accept(): Promise<void>,\n}\n\nexport type Team = {\n  id: string,\n  displayName: string,\n  profileImageUrl: string | null,\n  clientMetadata: any,\n  clientReadOnlyMetadata: any,\n  inviteUser(options: { email: string, callbackUrl?: string }): Promise<void>,\n  listUsers(): Promise<TeamUser[]>,\n  removeUser(userId: string): Promise<void>,\n  useUsers(): TeamUser[], // THIS_LINE_PLATFORM react-like\n  listInvitations(): Promise<SentTeamInvitation[]>,\n  useInvitations(): SentTeamInvitation[], // THIS_LINE_PLATFORM react-like\n  update(update: TeamUpdateOptions): Promise<void>,\n  delete(): Promise<void>,\n  createApiKey(options: ApiKeyCreationOptions<\"team\">): Promise<TeamApiKeyFirstView>,\n} & AsyncStoreProperty<\"apiKeys\", [], TeamApiKey[], true> & Customer;\n\nexport type TeamUpdateOptions = {\n  displayName?: string,\n  profileImageUrl?: string | null,\n  clientMetadata?: ReadonlyJson,\n};\nexport function teamUpdateOptionsToCrud(options: TeamUpdateOptions): TeamsCrud[\"Client\"][\"Update\"] {\n  return {\n    display_name: options.displayName,\n    profile_image_url: options.profileImageUrl,\n    client_metadata: options.clientMetadata,\n  };\n}\n\nexport type TeamCreateOptions = {\n  displayName: string,\n  profileImageUrl?: string,\n}\nexport function teamCreateOptionsToCrud(options: TeamCreateOptions, creatorUserId: string): TeamsCrud[\"Client\"][\"Create\"] {\n  return {\n    display_name: options.displayName,\n    profile_image_url: options.profileImageUrl,\n    creator_user_id: creatorUserId,\n  };\n}\n\n\nexport type ServerTeamMemberProfile = TeamMemberProfile;\n\nexport type ServerTeamUser = ServerUser & {\n  teamProfile: ServerTeamMemberProfile,\n}\n\nexport type ServerTeam = {\n  createdAt: Date,\n  serverMetadata: any,\n  listUsers(): Promise<ServerTeamUser[]>,\n  useUsers(): ServerUser[], // THIS_LINE_PLATFORM react-like\n  update(update: ServerTeamUpdateOptions): Promise<void>,\n  delete(): Promise<void>,\n  addUser(userId: string): Promise<void>,\n  inviteUser(options: { email: string, callbackUrl?: string }): Promise<void>,\n  removeUser(userId: string): Promise<void>,\n} & Team;\n\ntype ServerListUsersOptionsBase = {\n  cursor?: string,\n  limit?: number,\n  orderBy?: 'signedUpAt' | 'lastActiveAt',\n  desc?: boolean,\n  /**\n   * Free-text search. Matches user ID (exact UUID), display name, and contact channels (e.g. primary email).\n   */\n  query?: string,\n  /**\n   * Exclude users whose primary email domain matches one of these exact domains.\n   */\n  excludedEmailDomains?: string[],\n  /**\n   * Only return users who are members of the given team.\n   */\n  teamId?: string,\n  /**\n   * Whether to include restricted users (users who haven't completed onboarding requirements).\n   * Defaults to false.\n   */\n  includeRestricted?: boolean,\n  /**\n   * Whether to include anonymous users (and restricted users).\n   * Defaults to false.\n   */\n  includeAnonymous?: boolean,\n};\n\nexport type ServerListUsersOptions = ServerListUsersOptionsBase & (\n  {\n    onlyAnonymous?: false,\n  } | {\n  /**\n   * Whether to return only anonymous users.\n   * Requires includeAnonymous=true.\n   * Defaults to false.\n   */\n    onlyAnonymous: true,\n    includeAnonymous: true,\n  }\n);\n\nexport type ServerListTeamsOptions = {\n  orderBy?: 'createdAt',\n  desc?: boolean,\n  cursor?: string,\n  limit?: number,\n  /**\n   * Free-text search. Matches team ID (exact UUID) and display name.\n   */\n  query?: string,\n};\n\nexport type ServerTeamCreateOptions = TeamCreateOptions & {\n  creatorUserId?: string,\n};\nexport function serverTeamCreateOptionsToCrud(options: ServerTeamCreateOptions): TeamsCrud[\"Server\"][\"Create\"] {\n  return {\n    display_name: options.displayName,\n    profile_image_url: options.profileImageUrl,\n    creator_user_id: options.creatorUserId,\n  };\n}\n\nexport type ServerTeamUpdateOptions = TeamUpdateOptions & {\n  clientReadOnlyMetadata?: ReadonlyJson,\n  serverMetadata?: ReadonlyJson,\n};\nexport function serverTeamUpdateOptionsToCrud(options: ServerTeamUpdateOptions): TeamsCrud[\"Server\"][\"Update\"] {\n  return {\n    display_name: options.displayName,\n    profile_image_url: options.profileImageUrl,\n    client_metadata: options.clientMetadata,\n    client_read_only_metadata: options.clientReadOnlyMetadata,\n    server_metadata: options.serverMetadata,\n  };\n}\n"],"mappings":";AA8FA,SAAgB,wBAAwB,SAA2D;CACjG,OAAO;EACL,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,iBAAiB,QAAQ;CAC3B;AACF;AAMA,SAAgB,wBAAwB,SAA4B,eAAsD;CACxH,OAAO;EACL,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,iBAAiB;CACnB;AACF;AA8EA,SAAgB,8BAA8B,SAAiE;CAC7G,OAAO;EACL,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,iBAAiB,QAAQ;CAC3B;AACF;AAMA,SAAgB,8BAA8B,SAAiE;CAC7G,OAAO;EACL,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,iBAAiB,QAAQ;EACzB,2BAA2B,QAAQ;EACnC,iBAAiB,QAAQ;CAC3B;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../../src/lib/hexclave-app/teams/index.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { TeamsCrud } from \"@hexclave/shared/dist/interface/crud/teams\";\nimport { ReadonlyJson } from \"@hexclave/shared/dist/utils/json\";\n\nimport { ApiKeyCreationOptions, TeamApiKey, TeamApiKeyFirstView } from \"../api-keys\";\nimport { AsyncStoreProperty } from \"../common\";\nimport { Customer } from \"../customers\";\nimport { ServerUser } from \"../users\";\n\n\nexport type TeamMemberProfile = {\n  displayName: string | null,\n  profileImageUrl: string | null,\n}\n\nexport type TeamMemberProfileUpdateOptions = {\n  displayName?: string,\n  profileImageUrl?: string | null,\n};\n\nexport type EditableTeamMemberProfile = TeamMemberProfile & {\n  update(update: TeamMemberProfileUpdateOptions): Promise<void>,\n}\n\nexport type TeamUser = {\n  id: string,\n  teamProfile: TeamMemberProfile,\n}\n\n/**\n * A team invitation as seen from the team's perspective (ie. the sender).\n *\n * Returned by `team.listInvitations()`. Contains the recipient email and allows\n * revoking the invitation.\n */\nexport type SentTeamInvitation = {\n  id: string,\n  recipientEmail: string | null,\n  expiresAt: Date,\n  revoke(): Promise<void>,\n}\n\n/**\n * @deprecated Use `SentTeamInvitation` instead.\n */\nexport type TeamInvitation = SentTeamInvitation;\n\n/**\n * A team invitation as seen from the invited user's perspective (ie. the receiver).\n *\n * Returned by `user.listTeamInvitations()`. Contains information about teams that have\n * sent invitations to any of the user's verified email addresses, and allows accepting\n * the invitation to join the team.\n */\nexport type ReceivedTeamInvitation = {\n  id: string,\n  teamId: string,\n  teamDisplayName: string,\n  recipientEmail: string,\n  expiresAt: Date,\n\n  /**\n   * Accepts the invitation, adding the current user to the team.\n   *\n   * The user must have a verified email address matching the invitation's recipient email.\n   */\n  accept(): Promise<void>,\n}\n\nexport type Team = {\n  id: string,\n  displayName: string,\n  profileImageUrl: string | null,\n  clientMetadata: any,\n  clientReadOnlyMetadata: any,\n  inviteUser(options: { email: string, callbackUrl?: string }): Promise<void>,\n  listUsers(): Promise<TeamUser[]>,\n  removeUser(userId: string): Promise<void>,\n  useUsers(): TeamUser[], // THIS_LINE_PLATFORM react-like\n  listInvitations(): Promise<SentTeamInvitation[]>,\n  useInvitations(): SentTeamInvitation[], // THIS_LINE_PLATFORM react-like\n  update(update: TeamUpdateOptions): Promise<void>,\n  delete(): Promise<void>,\n  createApiKey(options: ApiKeyCreationOptions<\"team\">): Promise<TeamApiKeyFirstView>,\n} & AsyncStoreProperty<\"apiKeys\", [], TeamApiKey[], true> & Customer;\n\nexport type TeamUpdateOptions = {\n  displayName?: string,\n  profileImageUrl?: string | null,\n  clientMetadata?: ReadonlyJson,\n};\nexport function teamUpdateOptionsToCrud(options: TeamUpdateOptions): TeamsCrud[\"Client\"][\"Update\"] {\n  return {\n    display_name: options.displayName,\n    profile_image_url: options.profileImageUrl,\n    client_metadata: options.clientMetadata,\n  };\n}\n\nexport type TeamCreateOptions = {\n  displayName: string,\n  profileImageUrl?: string,\n}\nexport function teamCreateOptionsToCrud(options: TeamCreateOptions, creatorUserId: string): TeamsCrud[\"Client\"][\"Create\"] {\n  return {\n    display_name: options.displayName,\n    profile_image_url: options.profileImageUrl,\n    creator_user_id: creatorUserId,\n  };\n}\n\n\nexport type ServerTeamMemberProfile = TeamMemberProfile;\n\nexport type ServerTeamUser = ServerUser & {\n  teamProfile: ServerTeamMemberProfile,\n}\n\nexport type ServerTeam = {\n  createdAt: Date,\n  serverMetadata: any,\n  listUsers(): Promise<ServerTeamUser[]>,\n  useUsers(): ServerUser[], // THIS_LINE_PLATFORM react-like\n  update(update: ServerTeamUpdateOptions): Promise<void>,\n  delete(): Promise<void>,\n  addUser(userId: string): Promise<void>,\n  inviteUser(options: { email: string, callbackUrl?: string }): Promise<void>,\n  removeUser(userId: string): Promise<void>,\n} & Team;\n\ntype ServerListUsersOptionsBase = {\n  cursor?: string,\n  /**\n   * Maximum number of users to return per page. Must be at most 1000.\n   */\n  limit?: number,\n  orderBy?: 'signedUpAt' | 'lastActiveAt',\n  desc?: boolean,\n  /**\n   * Free-text search. Matches user ID (exact UUID), display name, and contact channels (e.g. primary email).\n   */\n  query?: string,\n  /**\n   * Exclude users whose primary email domain matches one of these exact domains.\n   */\n  excludedEmailDomains?: string[],\n  /**\n   * Only return users who are members of the given team.\n   */\n  teamId?: string,\n  /**\n   * Whether to include restricted users (users who haven't completed onboarding requirements).\n   * Defaults to false.\n   */\n  includeRestricted?: boolean,\n  /**\n   * Whether to include anonymous users (and restricted users).\n   * Defaults to false.\n   */\n  includeAnonymous?: boolean,\n};\n\nexport type ServerListUsersOptions = ServerListUsersOptionsBase & (\n  {\n    onlyAnonymous?: false,\n  } | {\n  /**\n   * Whether to return only anonymous users.\n   * Requires includeAnonymous=true.\n   * Defaults to false.\n   */\n    onlyAnonymous: true,\n    includeAnonymous: true,\n  }\n);\n\nexport type ServerListTeamsOptions = {\n  orderBy?: 'createdAt',\n  desc?: boolean,\n  cursor?: string,\n  limit?: number,\n  /**\n   * Free-text search. Matches team ID (exact UUID) and display name.\n   */\n  query?: string,\n};\n\nexport type ServerTeamCreateOptions = TeamCreateOptions & {\n  creatorUserId?: string,\n};\nexport function serverTeamCreateOptionsToCrud(options: ServerTeamCreateOptions): TeamsCrud[\"Server\"][\"Create\"] {\n  return {\n    display_name: options.displayName,\n    profile_image_url: options.profileImageUrl,\n    creator_user_id: options.creatorUserId,\n  };\n}\n\nexport type ServerTeamUpdateOptions = TeamUpdateOptions & {\n  clientReadOnlyMetadata?: ReadonlyJson,\n  serverMetadata?: ReadonlyJson,\n};\nexport function serverTeamUpdateOptionsToCrud(options: ServerTeamUpdateOptions): TeamsCrud[\"Server\"][\"Update\"] {\n  return {\n    display_name: options.displayName,\n    profile_image_url: options.profileImageUrl,\n    client_metadata: options.clientMetadata,\n    client_read_only_metadata: options.clientReadOnlyMetadata,\n    server_metadata: options.serverMetadata,\n  };\n}\n"],"mappings":";AA8FA,SAAgB,wBAAwB,SAA2D;CACjG,OAAO;EACL,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,iBAAiB,QAAQ;CAC3B;AACF;AAMA,SAAgB,wBAAwB,SAA4B,eAAsD;CACxH,OAAO;EACL,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,iBAAiB;CACnB;AACF;AAiFA,SAAgB,8BAA8B,SAAiE;CAC7G,OAAO;EACL,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,iBAAiB,QAAQ;CAC3B;AACF;AAMA,SAAgB,8BAA8B,SAAiE;CAC7G,OAAO;EACL,cAAc,QAAQ;EACtB,mBAAmB,QAAQ;EAC3B,iBAAiB,QAAQ;EACzB,2BAA2B,QAAQ;EACnC,iBAAiB,QAAQ;CAC3B;AACF"}

package/dist/esm/utils/monkey-patch.d.ts

@@ -0,0 +1,7 @@
+//#region src/utils/monkey-patch.d.ts
+declare const NO_SUSPENSE_BOUNDARY_ERROR_SENTINEL = "__stack-no-suspense-boundary-error__";
+declare function isNoSuspenseBoundaryError(value: unknown): boolean;
+declare function ensureMonkeyPatch(): void;
+//#endregion
+export { NO_SUSPENSE_BOUNDARY_ERROR_SENTINEL, ensureMonkeyPatch, isNoSuspenseBoundaryError };
+//# sourceMappingURL=monkey-patch.d.ts.map

package/dist/esm/utils/monkey-patch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"monkey-patch.d.ts","names":[],"sources":["../../../src/utils/monkey-patch.tsx"],"mappings":";cAMa,mCAAA;AAAA,iBAEG,yBAAA,CAA0B,KAAc;AAAA,iBASxC,iBAAA"}

package/dist/esm/utils/monkey-patch.js

@@ -0,0 +1,20 @@
+import { createGlobal } from "@hexclave/shared/dist/utils/globals";
+//#region src/utils/monkey-patch.tsx
+const NO_SUSPENSE_BOUNDARY_ERROR_SENTINEL = "__stack-no-suspense-boundary-error__";
+function isNoSuspenseBoundaryError(value) {
+	return typeof value === "object" && value !== null && "__noSuspenseBoundarySentinel" in value && value.__noSuspenseBoundarySentinel === "__stack-no-suspense-boundary-error__";
+}
+function ensureMonkeyPatch() {
+	createGlobal("__console-error-monkey-patch__", () => {
+		const originalConsoleError = console.error;
+		console.error = function(...args) {
+			if (args.length === 1 && isNoSuspenseBoundaryError(args[0])) return;
+			return originalConsoleError.apply(this, args);
+		};
+		return true;
+	});
+}
+//#endregion
+export { NO_SUSPENSE_BOUNDARY_ERROR_SENTINEL, ensureMonkeyPatch, isNoSuspenseBoundaryError };
+
+//# sourceMappingURL=monkey-patch.js.map

package/dist/esm/utils/monkey-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monkey-patch.js","names":[],"sources":["../../../src/utils/monkey-patch.tsx"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { createGlobal } from \"@hexclave/shared/dist/utils/globals\";\n\nexport const NO_SUSPENSE_BOUNDARY_ERROR_SENTINEL = \"__stack-no-suspense-boundary-error__\";\n\nexport function isNoSuspenseBoundaryError(value: unknown): boolean {\n  return (\n    typeof value === \"object\"\n    && value !== null\n    && \"__noSuspenseBoundarySentinel\" in value\n    && value.__noSuspenseBoundarySentinel === NO_SUSPENSE_BOUNDARY_ERROR_SENTINEL\n  );\n}\n\nexport function ensureMonkeyPatch() {\n  createGlobal(\"__console-error-monkey-patch__\", () => {\n    const originalConsoleError = console.error;\n    console.error = function (...args: unknown[]) {\n      // React's default error handlers log every server error, including the one we intentionally throw to skip SSR.\n      // Frameworks that use those defaults (including vanilla React) therefore need this narrow sentinel-based filter.\n      if (args.length === 1 && isNoSuspenseBoundaryError(args[0])) {\n        return;\n      }\n      return originalConsoleError.apply(this, args);\n    };\n    return true;\n  });\n}\n"],"mappings":";;AAMA,MAAa,sCAAsC;AAEnD,SAAgB,0BAA0B,OAAyB;CACjE,OACE,OAAO,UAAU,YACd,UAAU,QACV,kCAAkC,SAClC,MAAM,iCAAA;AAEb;AAEA,SAAgB,oBAAoB;CAClC,aAAa,wCAAwC;EACnD,MAAM,uBAAuB,QAAQ;EACrC,QAAQ,QAAQ,SAAU,GAAG,MAAiB;GAG5C,IAAI,KAAK,WAAW,KAAK,0BAA0B,KAAK,EAAE,GACxD;GAEF,OAAO,qBAAqB,MAAM,MAAM,IAAI;EAC9C;EACA,OAAO;CACT,CAAC;AACH"}

package/dist/esm/utils/react.d.ts

@@ -0,0 +1,17 @@
+//#region src/utils/react.d.ts
+declare function shouldRethrowRenderingError(error: unknown): boolean;
+declare class NoSuspenseBoundaryError extends Error {
+  digest: string;
+  reason: string;
+  __noSuspenseBoundarySentinel: string;
+  constructor(options: {
+    caller?: string;
+  });
+}
+/**
+ * Use this in a component or hook to disable SSR. It must be wrapped in a Suspense boundary.
+ */
+declare function suspendIfSsr(caller?: string): void;
+//#endregion
+export { NoSuspenseBoundaryError, shouldRethrowRenderingError, suspendIfSsr };
+//# sourceMappingURL=react.d.ts.map

package/dist/esm/utils/react.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.d.ts","names":[],"sources":["../../../src/utils/react.tsx"],"mappings":";iBAYgB,2BAAA,CAA4B,KAAc;AAAA,cAI7C,uBAAA,SAAgC,KAAK;EAChD,MAAA;EACA,MAAA;EACA,4BAAA;cAEY,OAAA;IAAW,MAAA;EAAA;AAAA;;;;iBA8DT,YAAA,CAAa,MAAe"}

package/dist/esm/utils/react.js

@@ -0,0 +1,60 @@
+"use client";
+import { deindent } from "@hexclave/shared/dist/utils/strings";
+import { useSearchParams } from "next/navigation";
+import { isBrowserLike } from "@hexclave/shared/dist/utils/env";
+import { NO_SUSPENSE_BOUNDARY_ERROR_SENTINEL, ensureMonkeyPatch } from "./monkey-patch.js";
+//#region src/utils/react.tsx
+function shouldRethrowRenderingError(error) {
+	return !!error && typeof error === "object" && "digest" in error && error.digest === "BAILOUT_TO_CLIENT_SIDE_RENDERING";
+}
+var NoSuspenseBoundaryError = class extends Error {
+	constructor(options) {
+		ensureMonkeyPatch();
+		super(deindent`
+      Suspense boundary not found! Read the error message below carefully (or paste it into your AI agent).
+
+      ${options.caller ?? "This code path"} attempted to display a loading indicator, but didn't find a Suspense boundary above it. Please read the error message below carefully.
+      
+      There are several potential causes:
+      
+      1. [Next.js] You are missing a loading.tsx file in your app directory. Fix it by adding a loading.tsx file in your app directory.
+
+      2. [React] You are missing a <Suspense> boundary in your component. Fix it by wrapping your component (or the entire app) in a <Suspense> component.
+
+      3. [Next.js] The component is rendered in the root (outermost) layout.tsx or template.tsx file. Next.js does not wrap those files in a Suspense boundary, even if there is a loading.tsx file in the same folder. To fix it, wrap your layout inside a route group like this:
+
+        - app
+        - - layout.tsx  // contains <html> and <body>, alongside providers and other components that don't need ${options.caller ?? "this code path"}
+        - - loading.tsx  // required for suspense
+        - - (main)
+        - - - layout.tsx  // contains the main layout of your app, like a sidebar or a header, and can use ${options.caller ?? "this code path"}
+        - - - route.tsx  // your actual main page
+        - - - the rest of your app
+
+        For more information on this approach, see Next's documentation on route groups: https://nextjs.org/docs/app/building-your-application/routing/route-groups
+      
+      4. You caught this error with try-catch or a custom error boundary. Fix this by rethrowing the error or not catching it in the first place.
+
+      5. Your version of Hexclave is too old. Upgrade to the latest version to see if that fixes the issue.
+
+      See: https://nextjs.org/docs/messages/missing-suspense-with-csr-bailout
+
+      More information on SSR and Suspense boundaries: https://react.dev/reference/react/Suspense#providing-a-fallback-for-server-errors-and-client-only-content
+    `);
+		this.__noSuspenseBoundarySentinel = NO_SUSPENSE_BOUNDARY_ERROR_SENTINEL;
+		this.name = "NoSuspenseBoundaryError";
+		this.reason = options.caller ?? "suspendIfSsr()";
+		this.digest = "BAILOUT_TO_CLIENT_SIDE_RENDERING";
+	}
+};
+/**
+* Use this in a component or hook to disable SSR. It must be wrapped in a Suspense boundary.
+*/
+function suspendIfSsr(caller) {
+	useSearchParams();
+	if (!isBrowserLike()) throw new NoSuspenseBoundaryError({ caller });
+}
+//#endregion
+export { NoSuspenseBoundaryError, shouldRethrowRenderingError, suspendIfSsr };
+
+//# sourceMappingURL=react.js.map