@hexclave/shared 1.0.14 → 1.0.16

package/dist/esm/interface/crud/transactions.d.ts

@@ -6,7 +6,7 @@ import * as ______utils_dates0 from "../../utils/dates";
 declare const transactionEntrySchema: yup$1.MixedSchema<{
   type: "money_transfer";
   customer_id: string;
-  customer_type: "team" | "user" | "custom";
+  customer_type: "user" | "team" | "custom";
   charged_amount: {
     USD?: string | undefined;
     EUR?: string | undefined;
@@ -26,7 +26,7 @@ declare const transactionEntrySchema: yup$1.MixedSchema<{
   item_id: string;
   customer_id: string;
   quantity: number;
-  customer_type: "team" | "user" | "custom";
+  customer_type: "user" | "team" | "custom";
   adjusted_transaction_id: string | null;
   adjusted_entry_index: number | null;
 } | {
@@ -36,14 +36,15 @@ declare const transactionEntrySchema: yup$1.MixedSchema<{
   customer_id: string;
   product_id: string | null;
   quantity: number;
-  customer_type: "team" | "user" | "custom";
+  customer_type: "user" | "team" | "custom";
   product: {
-    free_trial?: ______utils_dates0.DayInterval | undefined;
     client_metadata?: {} | null | undefined;
     client_read_only_metadata?: {} | null | undefined;
     server_metadata?: {} | null | undefined;
+    free_trial?: ______utils_dates0.DayInterval | undefined;
+    display_name: string;
     server_only: boolean;
-    customer_type: "team" | "user" | "custom";
+    customer_type: "user" | "team" | "custom";
     stackable: boolean;
     prices: Record<string, {
       USD?: string | undefined;
@@ -56,10 +57,9 @@ declare const transactionEntrySchema: yup$1.MixedSchema<{
       interval?: ______utils_dates0.DayInterval | undefined;
       free_trial?: ______utils_dates0.DayInterval | undefined;
     }>;
-    display_name: string;
     included_items: Record<string, {
-      repeat?: "never" | ______utils_dates0.DayInterval | undefined;
       quantity?: number | undefined;
+      repeat?: "never" | ______utils_dates0.DayInterval | undefined;
       expires?: "never" | "when-purchase-expires" | "when-repeated" | undefined;
     }>;
   };
@@ -85,12 +85,12 @@ declare const transactionSchema: yup$1.ObjectSchema<{
   created_at_millis: number;
   effective_at_millis: number;
   type: "purchase" | "subscription-cancellation" | "subscription-renewal" | "manual-item-quantity-change" | "refund" | "chargeback" | "product-change" | null;
-  customer_type: "team" | "user" | "custom";
+  customer_type: "user" | "team" | "custom";
   customer_id: string;
   entries: ({
     type: "money_transfer";
     customer_id: string;
-    customer_type: "team" | "user" | "custom";
+    customer_type: "user" | "team" | "custom";
     charged_amount: {
       USD?: string | undefined;
       EUR?: string | undefined;
@@ -110,7 +110,7 @@ declare const transactionSchema: yup$1.ObjectSchema<{
     item_id: string;
     customer_id: string;
     quantity: number;
-    customer_type: "team" | "user" | "custom";
+    customer_type: "user" | "team" | "custom";
     adjusted_transaction_id: string | null;
     adjusted_entry_index: number | null;
   } | {
@@ -120,14 +120,15 @@ declare const transactionSchema: yup$1.ObjectSchema<{
     customer_id: string;
     product_id: string | null;
     quantity: number;
-    customer_type: "team" | "user" | "custom";
+    customer_type: "user" | "team" | "custom";
     product: {
-      free_trial?: ______utils_dates0.DayInterval | undefined;
       client_metadata?: {} | null | undefined;
       client_read_only_metadata?: {} | null | undefined;
       server_metadata?: {} | null | undefined;
+      free_trial?: ______utils_dates0.DayInterval | undefined;
+      display_name: string;
       server_only: boolean;
-      customer_type: "team" | "user" | "custom";
+      customer_type: "user" | "team" | "custom";
       stackable: boolean;
       prices: Record<string, {
         USD?: string | undefined;
@@ -140,10 +141,9 @@ declare const transactionSchema: yup$1.ObjectSchema<{
         interval?: ______utils_dates0.DayInterval | undefined;
         free_trial?: ______utils_dates0.DayInterval | undefined;
       }>;
-      display_name: string;
       included_items: Record<string, {
-        repeat?: "never" | ______utils_dates0.DayInterval | undefined;
         quantity?: number | undefined;
+        repeat?: "never" | ______utils_dates0.DayInterval | undefined;
         expires?: "never" | "when-purchase-expires" | "when-repeated" | undefined;
       }>;
     };

package/dist/esm/interface/crud/transactions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transactions.d.ts","names":[],"sources":["../../../../src/interface/crud/transactions.ts"],"mappings":";;;;;cAwFa,sBAAA,QAAsB,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMxB,kBAAA,CAAA,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAEC,gBAAA,GAAmB,SAAA,QAAiB,sBAAA;AAAA,cAEnC,iBAAA;AAAA,KAUD,eAAA,WAA0B,iBAAA;AAAA,cAEzB,iBAAA,QAAiB,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAkBlB,kBAAA,CAAA,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAEA,WAAA,GAAc,SAAA,QAAiB,iBAAA"}
+{"version":3,"file":"transactions.d.ts","names":[],"sources":["../../../../src/interface/crud/transactions.ts"],"mappings":";;;;;cAwFa,sBAAA,QAAsB,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMxB,kBAAA,CAAA,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAEC,gBAAA,GAAmB,SAAA,QAAiB,sBAAA;AAAA,cAEnC,iBAAA;AAAA,KAUD,eAAA,WAA0B,iBAAA;AAAA,cAEzB,iBAAA,QAAiB,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAkBlB,kBAAA,CAAA,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAEA,WAAA,GAAc,SAAA,QAAiB,iBAAA"}

package/dist/esm/interface/crud/users.d.ts

@@ -81,10 +81,10 @@ declare const usersCrudServerReadSchema: yup$1.ObjectSchema<{
     client_metadata?: {} | null | undefined;
     client_read_only_metadata?: {} | null | undefined;
     server_metadata?: {} | null | undefined;
-    display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    display_name: string;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;
@@ -163,28 +163,28 @@ declare const usersCrudServerReadSchema: yup$1.ObjectSchema<{
   requires_totp_mfa: undefined;
 }, "">;
 declare const usersCrudServerCreateSchema: yup$1.ObjectSchema<{
-  primary_email: string | null | undefined;
+  country_code: string | null | undefined;
   display_name: string | null | undefined;
+  primary_email: string | null | undefined;
+  profile_image_url: string | null | undefined;
+  is_anonymous: boolean | undefined;
   client_metadata: {} | null | undefined;
   client_read_only_metadata: {} | null | undefined;
   server_metadata: {} | null | undefined;
-  is_anonymous: boolean | undefined;
-  password: string | null | undefined;
   primary_email_verified: boolean | undefined;
   primary_email_auth_enabled: boolean | undefined;
-  profile_image_url: string | null | undefined;
   otp_auth_enabled: boolean | undefined;
   passkey_auth_enabled: boolean | undefined;
   restricted_by_admin: boolean | undefined;
   restricted_by_admin_reason: string | null | undefined;
   restricted_by_admin_private_details: string | null | undefined;
-  country_code: string | null | undefined;
   risk_scores: {
     sign_up: {
       bot: number;
       free_trial_abuse: number;
     };
   } | undefined;
+  password: string | null | undefined;
   password_hash: string | undefined;
   totp_secret_base64: string | null | undefined;
 } & {
@@ -234,10 +234,10 @@ declare const usersCrud: ______crud0.CrudSchemaFromOptions<{
       client_metadata?: {} | null | undefined;
       client_read_only_metadata?: {} | null | undefined;
       server_metadata?: {} | null | undefined;
-      display_name: string;
       id: string;
-      profile_image_url: string | null;
       created_at_millis: number;
+      display_name: string;
+      profile_image_url: string | null;
     } | null;
     selected_team_id: string | null;
     profile_image_url: string | null;
@@ -369,28 +369,28 @@ declare const usersCrud: ______crud0.CrudSchemaFromOptions<{
     };
   }, "">;
   serverCreateSchema: yup$1.ObjectSchema<{
-    primary_email: string | null | undefined;
+    country_code: string | null | undefined;
     display_name: string | null | undefined;
+    primary_email: string | null | undefined;
+    profile_image_url: string | null | undefined;
+    is_anonymous: boolean | undefined;
     client_metadata: {} | null | undefined;
     client_read_only_metadata: {} | null | undefined;
     server_metadata: {} | null | undefined;
-    is_anonymous: boolean | undefined;
-    password: string | null | undefined;
     primary_email_verified: boolean | undefined;
     primary_email_auth_enabled: boolean | undefined;
-    profile_image_url: string | null | undefined;
     otp_auth_enabled: boolean | undefined;
     passkey_auth_enabled: boolean | undefined;
     restricted_by_admin: boolean | undefined;
     restricted_by_admin_reason: string | null | undefined;
     restricted_by_admin_private_details: string | null | undefined;
-    country_code: string | null | undefined;
     risk_scores: {
       sign_up: {
         bot: number;
         free_trial_abuse: number;
       };
     } | undefined;
+    password: string | null | undefined;
     password_hash: string | undefined;
     totp_secret_base64: string | null | undefined;
   } & {
@@ -468,10 +468,10 @@ declare const userCreatedWebhookEvent: WebhookEvent<yup$1.ObjectSchema<{
     client_metadata?: {} | null | undefined;
     client_read_only_metadata?: {} | null | undefined;
     server_metadata?: {} | null | undefined;
-    display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    display_name: string;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;
@@ -559,10 +559,10 @@ declare const userUpdatedWebhookEvent: WebhookEvent<yup$1.ObjectSchema<{
     client_metadata?: {} | null | undefined;
     client_read_only_metadata?: {} | null | undefined;
     server_metadata?: {} | null | undefined;
-    display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    display_name: string;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;

package/dist/esm/interface/webhooks.d.ts

@@ -20,10 +20,10 @@ declare const webhookEvents: readonly [WebhookEvent<yup$1.ObjectSchema<{
     client_metadata?: {} | null | undefined;
     client_read_only_metadata?: {} | null | undefined;
     server_metadata?: {} | null | undefined;
-    display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    display_name: string;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;
@@ -110,10 +110,10 @@ declare const webhookEvents: readonly [WebhookEvent<yup$1.ObjectSchema<{
     client_metadata?: {} | null | undefined;
     client_read_only_metadata?: {} | null | undefined;
     server_metadata?: {} | null | undefined;
-    display_name: string;
     id: string;
-    profile_image_url: string | null;
     created_at_millis: number;
+    display_name: string;
+    profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
   profile_image_url: string | null;

package/dist/esm/known-errors.d.ts

@@ -98,7 +98,7 @@ declare const KnownErrors: {
   };
   AccessTypeWithoutProjectId: KnownErrorConstructor<KnownError & KnownErrorBrand<"PROJECT_AUTHENTICATION_ERROR"> & {
     constructorArgs: [statusCode: number, humanReadableMessage: string, details?: Json | undefined];
-  } & KnownErrorBrand<"INVALID_PROJECT_AUTHENTICATION"> & KnownErrorBrand<"ACCESS_TYPE_WITHOUT_PROJECT_ID">, [accessType: "client" | "server" | "admin"]> & {
+  } & KnownErrorBrand<"INVALID_PROJECT_AUTHENTICATION"> & KnownErrorBrand<"ACCESS_TYPE_WITHOUT_PROJECT_ID">, [accessType: "server" | "admin" | "client"]> & {
     errorCode: "ACCESS_TYPE_WITHOUT_PROJECT_ID";
   };
   AccessTypeRequired: KnownErrorConstructor<KnownError & KnownErrorBrand<"PROJECT_AUTHENTICATION_ERROR"> & {
@@ -111,7 +111,7 @@ declare const KnownErrors: {
   };
   InsufficientAccessType: KnownErrorConstructor<KnownError & KnownErrorBrand<"PROJECT_AUTHENTICATION_ERROR"> & {
     constructorArgs: [statusCode: number, humanReadableMessage: string, details?: Json | undefined];
-  } & KnownErrorBrand<"INVALID_PROJECT_AUTHENTICATION"> & KnownErrorBrand<"INSUFFICIENT_ACCESS_TYPE">, [actualAccessType: "client" | "server" | "admin", allowedAccessTypes: ("client" | "server" | "admin")[]]> & {
+  } & KnownErrorBrand<"INVALID_PROJECT_AUTHENTICATION"> & KnownErrorBrand<"INSUFFICIENT_ACCESS_TYPE">, [actualAccessType: "server" | "admin" | "client", allowedAccessTypes: ("server" | "admin" | "client")[]]> & {
     errorCode: "INSUFFICIENT_ACCESS_TYPE";
   };
   InvalidPublishableClientKey: KnownErrorConstructor<KnownError & KnownErrorBrand<"PROJECT_AUTHENTICATION_ERROR"> & {
@@ -512,7 +512,7 @@ declare const KnownErrors: {
   ItemNotFound: KnownErrorConstructor<KnownError & KnownErrorBrand<"ITEM_NOT_FOUND">, [itemId: string]> & {
     errorCode: "ITEM_NOT_FOUND";
   };
-  ItemCustomerTypeDoesNotMatch: KnownErrorConstructor<KnownError & KnownErrorBrand<"ITEM_CUSTOMER_TYPE_DOES_NOT_MATCH">, [itemId: string, customerId: string, itemCustomerType: "team" | "user" | "custom" | undefined, actualCustomerType: "team" | "user" | "custom"]> & {
+  ItemCustomerTypeDoesNotMatch: KnownErrorConstructor<KnownError & KnownErrorBrand<"ITEM_CUSTOMER_TYPE_DOES_NOT_MATCH">, [itemId: string, customerId: string, itemCustomerType: "user" | "team" | "custom" | undefined, actualCustomerType: "user" | "team" | "custom"]> & {
     errorCode: "ITEM_CUSTOMER_TYPE_DOES_NOT_MATCH";
   };
   CustomerDoesNotExist: KnownErrorConstructor<KnownError & KnownErrorBrand<"CUSTOMER_DOES_NOT_EXIST">, [customerId: string]> & {
@@ -521,7 +521,7 @@ declare const KnownErrors: {
   ProductDoesNotExist: KnownErrorConstructor<KnownError & KnownErrorBrand<"PRODUCT_DOES_NOT_EXIST">, [productId: string, context: "item_exists" | "server_only" | null]> & {
     errorCode: "PRODUCT_DOES_NOT_EXIST";
   };
-  ProductCustomerTypeDoesNotMatch: KnownErrorConstructor<KnownError & KnownErrorBrand<"PRODUCT_CUSTOMER_TYPE_DOES_NOT_MATCH">, [productId: string | undefined, customerId: string, productCustomerType: "team" | "user" | "custom" | undefined, actualCustomerType: "team" | "user" | "custom"]> & {
+  ProductCustomerTypeDoesNotMatch: KnownErrorConstructor<KnownError & KnownErrorBrand<"PRODUCT_CUSTOMER_TYPE_DOES_NOT_MATCH">, [productId: string | undefined, customerId: string, productCustomerType: "user" | "team" | "custom" | undefined, actualCustomerType: "user" | "team" | "custom"]> & {
     errorCode: "PRODUCT_CUSTOMER_TYPE_DOES_NOT_MATCH";
   };
   ProductAlreadyGranted: KnownErrorConstructor<KnownError & KnownErrorBrand<"PRODUCT_ALREADY_GRANTED">, [productId: string, customerId: string]> & {
@@ -548,7 +548,7 @@ declare const KnownErrors: {
   StripeAccountInfoNotFound: KnownErrorConstructor<KnownError & KnownErrorBrand<"STRIPE_ACCOUNT_INFO_NOT_FOUND">, []> & {
     errorCode: "STRIPE_ACCOUNT_INFO_NOT_FOUND";
   };
-  DefaultPaymentMethodRequired: KnownErrorConstructor<KnownError & KnownErrorBrand<"DEFAULT_PAYMENT_METHOD_REQUIRED">, [customerType: "team" | "user", customerId: string]> & {
+  DefaultPaymentMethodRequired: KnownErrorConstructor<KnownError & KnownErrorBrand<"DEFAULT_PAYMENT_METHOD_REQUIRED">, [customerType: "user" | "team", customerId: string]> & {
     errorCode: "DEFAULT_PAYMENT_METHOD_REQUIRED";
   };
   NewPurchasesBlocked: KnownErrorConstructor<KnownError & KnownErrorBrand<"NEW_PURCHASES_BLOCKED">, []> & {

package/dist/esm/schema-fields.d.ts

@@ -113,7 +113,7 @@ declare const moneyAmountSchema: (currency: Currency) => yup$1.StringSchema<stri
  */
 declare const strictEmailSchema: (message: string | undefined) => yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const emailSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
-declare const clientOrHigherAuthTypeSchema: yup$1.StringSchema<"client" | "server" | "admin", yup$1.AnyObject, undefined, "">;
+declare const clientOrHigherAuthTypeSchema: yup$1.StringSchema<"server" | "admin" | "client", yup$1.AnyObject, undefined, "">;
 declare const serverOrHigherAuthTypeSchema: yup$1.StringSchema<"server" | "admin", yup$1.AnyObject, undefined, "">;
 declare const adminAuthTypeSchema: yup$1.StringSchema<"admin", yup$1.AnyObject, undefined, "">;
 declare const projectIdSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
@@ -140,7 +140,7 @@ declare const projectSignUpEnabledSchema: yup$1.BooleanSchema<boolean | undefine
 declare const projectCredentialEnabledSchema: yup$1.BooleanSchema<boolean | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthIdSchema: yup$1.StringSchema<"google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | "twitch" | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthEnabledSchema: yup$1.BooleanSchema<boolean | undefined, yup$1.AnyObject, undefined, "">;
-declare const oauthTypeSchema: yup$1.StringSchema<"standard" | "shared" | undefined, yup$1.AnyObject, undefined, "">;
+declare const oauthTypeSchema: yup$1.StringSchema<"shared" | "standard" | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthClientIdSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthClientSecretSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthCustomCallbackUrlSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
@@ -149,7 +149,7 @@ declare const oauthMicrosoftTenantIdSchema: yup$1.StringSchema<string | undefine
 declare const oauthAppleBundleIdsSchema: yup$1.ArraySchema<string[] | undefined, yup$1.AnyObject, undefined, "">;
 declare const oauthAppleBundleIdSchema: yup$1.StringSchema<string, yup$1.AnyObject, undefined, "">;
 declare const oauthAccountMergeStrategySchema: yup$1.StringSchema<"link_method" | "raise_error" | "allow_duplicates" | undefined, yup$1.AnyObject, undefined, "">;
-declare const emailTypeSchema: yup$1.StringSchema<"standard" | "shared" | undefined, yup$1.AnyObject, undefined, "">;
+declare const emailTypeSchema: yup$1.StringSchema<"shared" | "standard" | undefined, yup$1.AnyObject, undefined, "">;
 declare const emailSenderNameSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const emailHostSchema: yup$1.StringSchema<string | undefined, yup$1.AnyObject, undefined, "">;
 declare const emailPortSchema: yup$1.NumberSchema<number | undefined, yup$1.AnyObject, undefined, "">;
@@ -172,7 +172,7 @@ declare const customDashboardsSchema: yup$1.MixedSchema<Record<string, {
   displayName: string;
   tsxSource: string;
 }>, yup$1.AnyObject, undefined, "">;
-declare const customerTypeSchema: yup$1.StringSchema<"team" | "user" | "custom" | undefined, yup$1.AnyObject, undefined, "">;
+declare const customerTypeSchema: yup$1.StringSchema<"user" | "team" | "custom" | undefined, yup$1.AnyObject, undefined, "">;
 /**
  * Schema for a single product price. Each currency field (USD, EUR, etc.) is a decimal string
  * like `"9.99"` or `"1000"` — never cent integers. See `MoneyAmount` for the exact format.
@@ -216,7 +216,7 @@ declare const productSchema: yup$1.ObjectSchema<{
   displayName: string | undefined;
   productLineId: string | undefined;
   isAddOnTo: false | Record<string, true> | undefined;
-  customerType: "team" | "user" | "custom";
+  customerType: "user" | "team" | "custom";
   freeTrial: DayInterval | undefined;
   serverOnly: boolean | undefined;
   stackable: boolean | undefined;
@@ -255,7 +255,7 @@ declare const productSchemaWithMetadata: yup$1.ObjectSchema<{
   displayName: string | undefined;
   productLineId: string | undefined;
   isAddOnTo: false | Record<string, true> | undefined;
-  customerType: "team" | "user" | "custom";
+  customerType: "user" | "team" | "custom";
   freeTrial: DayInterval | undefined;
   serverOnly: boolean | undefined;
   stackable: boolean | undefined;
@@ -296,7 +296,7 @@ declare const productSchemaWithMetadata: yup$1.ObjectSchema<{
 }, "">;
 declare const inlineProductSchema: yup$1.ObjectSchema<{
   display_name: string;
-  customer_type: "team" | "user" | "custom";
+  customer_type: "user" | "team" | "custom";
   free_trial: DayInterval | undefined;
   server_only: boolean;
   stackable: boolean;
@@ -312,8 +312,8 @@ declare const inlineProductSchema: yup$1.ObjectSchema<{
     free_trial?: DayInterval | undefined;
   }>;
   included_items: Record<string, {
-    repeat?: "never" | DayInterval | undefined;
     quantity?: number | undefined;
+    repeat?: "never" | DayInterval | undefined;
     expires?: "never" | "when-purchase-expires" | "when-repeated" | undefined;
   }>;
   client_metadata: {} | null | undefined;

package/dist/esm/sessions.d.ts

@@ -9,24 +9,24 @@ declare class AccessToken {
   private constructor();
   get payload(): {
     exp?: number | undefined;
+    email: string | null;
     name: string | null;
     sub: string;
-    project_id: string;
-    refresh_token_id: string;
-    email: string | null;
-    restricted_reason: {
-      type: "anonymous" | "email_not_verified" | "restricted_by_administrator";
-    } | null;
-    branch_id: string;
     iat: number;
     iss: string;
     aud: string;
+    project_id: string;
+    branch_id: string;
+    refresh_token_id: string;
     role: "authenticated";
     email_verified: boolean;
     selected_team_id: string | null;
     signed_up_at: number;
     is_anonymous: boolean;
     is_restricted: boolean;
+    restricted_reason: {
+      type: "anonymous" | "email_not_verified" | "restricted_by_administrator";
+    } | null;
     requires_totp_mfa: boolean;
   };
   get expiresAt(): Date;

package/dist/esm/utils/analytics-clickmap-overlay.d.ts

@@ -0,0 +1,18 @@
+//#region src/utils/analytics-clickmap-overlay.d.ts
+/**
+ * Wire protocol for handing a clickmap overlay token from the dashboard to the
+ * in-page dev tool via `sessionStorage` + a window event.
+ *
+ * The token is a self-describing JWT: its payload already carries the
+ * `project_id` and `origin` it was minted for, so the reader derives both from
+ * the token itself and the writer only has to hand over a single value. The
+ * dashboard (writer) and the dev tool (reader) live in different packages but
+ * must agree on these exact names — this module is the single source of truth so
+ * they can never silently desync.
+ */
+declare const CLICKMAP_OVERLAY_TOKEN_STORAGE_KEY = "hexclave-clickmap-token";
+declare const CLICKMAP_OVERLAY_RESUME_STORAGE_KEY = "hexclave-clickmap-resume";
+declare const CLICKMAP_OVERLAY_TOKEN_UPDATED_EVENT = "hexclave:clickmap-token-updated";
+//#endregion
+export { CLICKMAP_OVERLAY_RESUME_STORAGE_KEY, CLICKMAP_OVERLAY_TOKEN_STORAGE_KEY, CLICKMAP_OVERLAY_TOKEN_UPDATED_EVENT };
+//# sourceMappingURL=analytics-clickmap-overlay.d.ts.map

package/dist/esm/utils/analytics-clickmap-overlay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-clickmap-overlay.d.ts","names":[],"sources":["../../../src/utils/analytics-clickmap-overlay.tsx"],"mappings":";;AAYA;;;;;AACA;;;;;cADa,kCAAA;AAAA,cACA,mCAAA;AAAA,cACA,oCAAA"}

package/dist/esm/utils/analytics-clickmap-overlay.js

@@ -0,0 +1,19 @@
+//#region src/utils/analytics-clickmap-overlay.tsx
+/**
+* Wire protocol for handing a clickmap overlay token from the dashboard to the
+* in-page dev tool via `sessionStorage` + a window event.
+*
+* The token is a self-describing JWT: its payload already carries the
+* `project_id` and `origin` it was minted for, so the reader derives both from
+* the token itself and the writer only has to hand over a single value. The
+* dashboard (writer) and the dev tool (reader) live in different packages but
+* must agree on these exact names — this module is the single source of truth so
+* they can never silently desync.
+*/
+const CLICKMAP_OVERLAY_TOKEN_STORAGE_KEY = "hexclave-clickmap-token";
+const CLICKMAP_OVERLAY_RESUME_STORAGE_KEY = "hexclave-clickmap-resume";
+const CLICKMAP_OVERLAY_TOKEN_UPDATED_EVENT = "hexclave:clickmap-token-updated";
+
+//#endregion
+export { CLICKMAP_OVERLAY_RESUME_STORAGE_KEY, CLICKMAP_OVERLAY_TOKEN_STORAGE_KEY, CLICKMAP_OVERLAY_TOKEN_UPDATED_EVENT };
+//# sourceMappingURL=analytics-clickmap-overlay.js.map

package/dist/esm/utils/analytics-clickmap-overlay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics-clickmap-overlay.js","names":[],"sources":["../../../src/utils/analytics-clickmap-overlay.tsx"],"sourcesContent":["/**\n * Wire protocol for handing a clickmap overlay token from the dashboard to the\n * in-page dev tool via `sessionStorage` + a window event.\n *\n * The token is a self-describing JWT: its payload already carries the\n * `project_id` and `origin` it was minted for, so the reader derives both from\n * the token itself and the writer only has to hand over a single value. The\n * dashboard (writer) and the dev tool (reader) live in different packages but\n * must agree on these exact names — this module is the single source of truth so\n * they can never silently desync.\n */\n\nexport const CLICKMAP_OVERLAY_TOKEN_STORAGE_KEY = \"hexclave-clickmap-token\";\nexport const CLICKMAP_OVERLAY_RESUME_STORAGE_KEY = \"hexclave-clickmap-resume\";\nexport const CLICKMAP_OVERLAY_TOKEN_UPDATED_EVENT = \"hexclave:clickmap-token-updated\";\n"],"mappings":";;;;;;;;;;;;AAYA,MAAa,qCAAqC;AAClD,MAAa,sCAAsC;AACnD,MAAa,uCAAuC"}

package/dist/esm/utils/dev-tool.d.ts

@@ -0,0 +1,31 @@
+//#region src/utils/dev-tool.d.ts
+/**
+ * Shared identity of the Hexclave in-page dev tool / clickmap overlay.
+ *
+ * These constants are the single source of truth for "is this DOM / event /
+ * stored click part of the dev tool itself?". They are consumed across package
+ * boundaries:
+ *  - the dev tool mounts its root element with {@link DEV_TOOL_ROOT_ID} and
+ *    prefixes every generated class with {@link DEV_TOOL_CLASS_PREFIX};
+ *  - the event tracker uses them to skip self-clicks at ingest;
+ *  - the backend clickmap query uses them to filter dev-tool clicks out of
+ *    aggregate clickmaps server-side.
+ *
+ * Keep them here so a rename can never silently desync the SQL filter from the
+ * actual DOM identity.
+ */
+declare const DEV_TOOL_ROOT_ID = "__hexclave-dev-tool-root";
+/**
+ * Root element id of the standalone clickmap overlay. The clickmap is an
+ * independent feature with its own mount (it must survive the dev tool being
+ * removed), so it gets its own root — but its self-clicks need the exact same
+ * ingest/query exclusions as the dev tool's.
+ */
+declare const CLICKMAP_ROOT_ID = "__hexclave-clickmap-root";
+/** Prefix applied to every class/generated id the dev tool renders. */
+declare const DEV_TOOL_CLASS_PREFIX = "sdt-";
+/** Legacy class marker still present on older dev-tool builds. */
+declare const DEV_TOOL_LEGACY_CLASS = "stack-devtool";
+//#endregion
+export { CLICKMAP_ROOT_ID, DEV_TOOL_CLASS_PREFIX, DEV_TOOL_LEGACY_CLASS, DEV_TOOL_ROOT_ID };
+//# sourceMappingURL=dev-tool.d.ts.map

package/dist/esm/utils/dev-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-tool.d.ts","names":[],"sources":["../../../src/utils/dev-tool.tsx"],"mappings":";;AAeA;;;;;AAQA;;;;;AAGA;;;;cAXa,gBAAA;AAcb;;;;;;AAAA,cANa,gBAAA;;cAGA,qBAAA;;cAGA,qBAAA"}

package/dist/esm/utils/dev-tool.js

@@ -0,0 +1,32 @@
+//#region src/utils/dev-tool.tsx
+/**
+* Shared identity of the Hexclave in-page dev tool / clickmap overlay.
+*
+* These constants are the single source of truth for "is this DOM / event /
+* stored click part of the dev tool itself?". They are consumed across package
+* boundaries:
+*  - the dev tool mounts its root element with {@link DEV_TOOL_ROOT_ID} and
+*    prefixes every generated class with {@link DEV_TOOL_CLASS_PREFIX};
+*  - the event tracker uses them to skip self-clicks at ingest;
+*  - the backend clickmap query uses them to filter dev-tool clicks out of
+*    aggregate clickmaps server-side.
+*
+* Keep them here so a rename can never silently desync the SQL filter from the
+* actual DOM identity.
+*/
+const DEV_TOOL_ROOT_ID = "__hexclave-dev-tool-root";
+/**
+* Root element id of the standalone clickmap overlay. The clickmap is an
+* independent feature with its own mount (it must survive the dev tool being
+* removed), so it gets its own root — but its self-clicks need the exact same
+* ingest/query exclusions as the dev tool's.
+*/
+const CLICKMAP_ROOT_ID = "__hexclave-clickmap-root";
+/** Prefix applied to every class/generated id the dev tool renders. */
+const DEV_TOOL_CLASS_PREFIX = "sdt-";
+/** Legacy class marker still present on older dev-tool builds. */
+const DEV_TOOL_LEGACY_CLASS = "stack-devtool";
+
+//#endregion
+export { CLICKMAP_ROOT_ID, DEV_TOOL_CLASS_PREFIX, DEV_TOOL_LEGACY_CLASS, DEV_TOOL_ROOT_ID };
+//# sourceMappingURL=dev-tool.js.map

package/dist/esm/utils/dev-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-tool.js","names":[],"sources":["../../../src/utils/dev-tool.tsx"],"sourcesContent":["/**\n * Shared identity of the Hexclave in-page dev tool / clickmap overlay.\n *\n * These constants are the single source of truth for \"is this DOM / event /\n * stored click part of the dev tool itself?\". They are consumed across package\n * boundaries:\n *  - the dev tool mounts its root element with {@link DEV_TOOL_ROOT_ID} and\n *    prefixes every generated class with {@link DEV_TOOL_CLASS_PREFIX};\n *  - the event tracker uses them to skip self-clicks at ingest;\n *  - the backend clickmap query uses them to filter dev-tool clicks out of\n *    aggregate clickmaps server-side.\n *\n * Keep them here so a rename can never silently desync the SQL filter from the\n * actual DOM identity.\n */\nexport const DEV_TOOL_ROOT_ID = \"__hexclave-dev-tool-root\";\n\n/**\n * Root element id of the standalone clickmap overlay. The clickmap is an\n * independent feature with its own mount (it must survive the dev tool being\n * removed), so it gets its own root — but its self-clicks need the exact same\n * ingest/query exclusions as the dev tool's.\n */\nexport const CLICKMAP_ROOT_ID = \"__hexclave-clickmap-root\";\n\n/** Prefix applied to every class/generated id the dev tool renders. */\nexport const DEV_TOOL_CLASS_PREFIX = \"sdt-\";\n\n/** Legacy class marker still present on older dev-tool builds. */\nexport const DEV_TOOL_LEGACY_CLASS = \"stack-devtool\";\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,MAAa,mBAAmB;;;;;;;AAQhC,MAAa,mBAAmB;;AAGhC,MAAa,wBAAwB;;AAGrC,MAAa,wBAAwB"}

package/dist/esm/utils/dom.d.ts

@@ -1,5 +1,11 @@
 //#region src/utils/dom.d.ts
 declare function hasClickableParent(element: HTMLElement): boolean;
+/**
+ * Escape a string so it is safe to use as a CSS identifier (id/class) inside a selector.
+ * Prefers the native `CSS.escape` when available, falling back to a conservative
+ * backslash-escape for non-DOM environments (SSR, tests, older runtimes).
+ */
+declare function cssEscapeIdent(value: string): string;
 //#endregion
-export { hasClickableParent };
+export { cssEscapeIdent, hasClickableParent };
 //# sourceMappingURL=dom.d.ts.map

package/dist/esm/utils/dom.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dom.d.ts","names":[],"sources":["../../../src/utils/dom.tsx"],"mappings":";iBAAgB,kBAAA,CAAmB,OAAA,EAAS,WAAA"}
+{"version":3,"file":"dom.d.ts","names":[],"sources":["../../../src/utils/dom.tsx"],"mappings":";iBAAgB,kBAAA,CAAmB,OAAA,EAAS,WAAA;AAA5C;;;;;AAAA,iBAagB,cAAA,CAAe,KAAA"}

package/dist/esm/utils/dom.js

@@ -5,7 +5,26 @@ function hasClickableParent(element) {
 	if (parent.dataset.n2Clickable) return true;
 	return hasClickableParent(element.parentElement);
 }
+/**
+* Escape a string so it is safe to use as a CSS identifier (id/class) inside a selector.
+* Prefers the native `CSS.escape` when available, falling back to a conservative
+* backslash-escape for non-DOM environments (SSR, tests, older runtimes).
+*/
+function cssEscapeIdent(value) {
+	if (typeof CSS !== "undefined" && typeof CSS.escape === "function") return CSS.escape(value);
+	let escaped = "";
+	for (let i = 0; i < value.length; i += 1) {
+		const char = value.charAt(i);
+		const codeUnit = value.charCodeAt(i);
+		if (codeUnit === 0) escaped += "�";
+		else if (codeUnit >= 1 && codeUnit <= 31 || codeUnit === 127 || i === 0 && codeUnit >= 48 && codeUnit <= 57 || i === 1 && codeUnit >= 48 && codeUnit <= 57 && value.charCodeAt(0) === 45) escaped += `\\${codeUnit.toString(16)} `;
+		else if (i === 0 && codeUnit === 45 && value.length === 1) escaped += "\\-";
+		else if (codeUnit >= 128 || codeUnit === 45 || codeUnit === 95 || codeUnit >= 48 && codeUnit <= 57 || codeUnit >= 65 && codeUnit <= 90 || codeUnit >= 97 && codeUnit <= 122) escaped += char;
+		else escaped += `\\${char}`;
+	}
+	return escaped;
+}
 
 //#endregion
-export { hasClickableParent };
+export { cssEscapeIdent, hasClickableParent };
 //# sourceMappingURL=dom.js.map

package/dist/esm/utils/dom.js.map

@@ -1 +1 @@
-{"version":3,"file":"dom.js","names":[],"sources":["../../../src/utils/dom.tsx"],"sourcesContent":["export function hasClickableParent(element: HTMLElement): boolean {\n  const parent = element.parentElement;\n  if (!parent) return false;\n  if (parent.dataset.n2Clickable) return true;\n\n  return hasClickableParent(element.parentElement);\n}\n"],"mappings":";AAAA,SAAgB,mBAAmB,SAA+B;CAChE,MAAM,SAAS,QAAQ;AACvB,KAAI,CAAC,OAAQ,QAAO;AACpB,KAAI,OAAO,QAAQ,YAAa,QAAO;AAEvC,QAAO,mBAAmB,QAAQ,cAAc"}
+{"version":3,"file":"dom.js","names":[],"sources":["../../../src/utils/dom.tsx"],"sourcesContent":["export function hasClickableParent(element: HTMLElement): boolean {\n  const parent = element.parentElement;\n  if (!parent) return false;\n  if (parent.dataset.n2Clickable) return true;\n\n  return hasClickableParent(element.parentElement);\n}\n\n/**\n * Escape a string so it is safe to use as a CSS identifier (id/class) inside a selector.\n * Prefers the native `CSS.escape` when available, falling back to a conservative\n * backslash-escape for non-DOM environments (SSR, tests, older runtimes).\n */\nexport function cssEscapeIdent(value: string): string {\n  if (typeof CSS !== \"undefined\" && typeof CSS.escape === \"function\") {\n    return CSS.escape(value);\n  }\n\n  let escaped = \"\";\n  for (let i = 0; i < value.length; i += 1) {\n    const char = value.charAt(i);\n    const codeUnit = value.charCodeAt(i);\n\n    if (codeUnit === 0x0000) {\n      escaped += \"\\uFFFD\";\n    } else if (\n      (codeUnit >= 0x0001 && codeUnit <= 0x001f) ||\n      codeUnit === 0x007f ||\n      (i === 0 && codeUnit >= 0x0030 && codeUnit <= 0x0039) ||\n      (i === 1 && codeUnit >= 0x0030 && codeUnit <= 0x0039 && value.charCodeAt(0) === 0x002d)\n    ) {\n      escaped += `\\\\${codeUnit.toString(16)} `;\n    } else if (i === 0 && codeUnit === 0x002d && value.length === 1) {\n      escaped += \"\\\\-\";\n    } else if (\n      codeUnit >= 0x0080 ||\n      codeUnit === 0x002d ||\n      codeUnit === 0x005f ||\n      (codeUnit >= 0x0030 && codeUnit <= 0x0039) ||\n      (codeUnit >= 0x0041 && codeUnit <= 0x005a) ||\n      (codeUnit >= 0x0061 && codeUnit <= 0x007a)\n    ) {\n      escaped += char;\n    } else {\n      escaped += `\\\\${char}`;\n    }\n  }\n  return escaped;\n}\n"],"mappings":";AAAA,SAAgB,mBAAmB,SAA+B;CAChE,MAAM,SAAS,QAAQ;AACvB,KAAI,CAAC,OAAQ,QAAO;AACpB,KAAI,OAAO,QAAQ,YAAa,QAAO;AAEvC,QAAO,mBAAmB,QAAQ,cAAc;;;;;;;AAQlD,SAAgB,eAAe,OAAuB;AACpD,KAAI,OAAO,QAAQ,eAAe,OAAO,IAAI,WAAW,WACtD,QAAO,IAAI,OAAO,MAAM;CAG1B,IAAI,UAAU;AACd,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxC,MAAM,OAAO,MAAM,OAAO,EAAE;EAC5B,MAAM,WAAW,MAAM,WAAW,EAAE;AAEpC,MAAI,aAAa,EACf,YAAW;WAEV,YAAY,KAAU,YAAY,MACnC,aAAa,OACZ,MAAM,KAAK,YAAY,MAAU,YAAY,MAC7C,MAAM,KAAK,YAAY,MAAU,YAAY,MAAU,MAAM,WAAW,EAAE,KAAK,GAEhF,YAAW,KAAK,SAAS,SAAS,GAAG,CAAC;WAC7B,MAAM,KAAK,aAAa,MAAU,MAAM,WAAW,EAC5D,YAAW;WAEX,YAAY,OACZ,aAAa,MACb,aAAa,MACZ,YAAY,MAAU,YAAY,MAClC,YAAY,MAAU,YAAY,MAClC,YAAY,MAAU,YAAY,IAEnC,YAAW;MAEX,YAAW,KAAK;;AAGpB,QAAO"}

package/dist/esm/utils/elements-chain.d.ts

@@ -0,0 +1,38 @@
+//#region src/utils/elements-chain.d.ts
+/**
+ * PostHog-style `elements_chain` format — the single owner of both halves of the
+ * contract. The event tracker {@link buildElementsChain serializes} a clicked
+ * element (and its ancestors) into a string; the clickmap overlay
+ * {@link parseElementsChain parses} that string back into structured segments so
+ * it can re-locate the element in a live DOM.
+ *
+ * Encode and decode MUST round-trip exactly, which is why they live together:
+ * the escaping applied here on the write side is reversed by the parser below,
+ * and a single round-trip test in `elements-chain.test.tsx` guards the pair.
+ *
+ * Segment shape (leaf-first, joined by `;`):
+ *   tag.class1.class2:nth-child="2":nth-of-type="1":text="Save":attr__id="x":href="..."
+ */
+type ElementsChainSegment = {
+  tag: string;
+  classes: string[];
+  attrs: Record<string, string>;
+  text: string | null;
+  nthChild: number | null;
+  nthOfType: number | null;
+  href: string | null;
+};
+declare const ELEMENTS_CHAIN_MAX_DEPTH = 8;
+declare const ELEMENTS_CHAIN_TEXT_MAX = 80;
+declare const ELEMENTS_CHAIN_ATTR_MAX = 200;
+declare const ELEMENTS_CHAIN_ATTRS: readonly ["id", "data-testid", "data-test-id", "data-hexclave-id", "name", "type", "role", "aria-label", "placeholder", "title"];
+/**
+ * Serialise a clicked element and up to {@link ELEMENTS_CHAIN_MAX_DEPTH}
+ * ancestors (leaf-first) into an `elements_chain` string.
+ */
+declare function buildElementsChain(element: Element): string;
+/** Parse an `elements_chain` string into structured, leaf-first segments. */
+declare function parseElementsChain(chain: string): ElementsChainSegment[];
+//#endregion
+export { ELEMENTS_CHAIN_ATTRS, ELEMENTS_CHAIN_ATTR_MAX, ELEMENTS_CHAIN_MAX_DEPTH, ELEMENTS_CHAIN_TEXT_MAX, ElementsChainSegment, buildElementsChain, parseElementsChain };
+//# sourceMappingURL=elements-chain.d.ts.map

package/dist/esm/utils/elements-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elements-chain.d.ts","names":[],"sources":["../../../src/utils/elements-chain.tsx"],"mappings":";;AAeA;;;;;;;;;;;;;KAAY,oBAAA;EACV,GAAA;EACA,OAAA;EACA,KAAA,EAAO,MAAA;EACP,IAAA;EACA,QAAA;EACA,SAAA;EACA,IAAA;AAAA;AAAA,cAGW,wBAAA;AAAA,cACA,uBAAA;AAAA,cACA,uBAAA;AAAA,cAKA,oBAAA;;;;AAAb;iBAyFgB,kBAAA,CAAmB,OAAA,EAAS,OAAA;;iBA0K5B,kBAAA,CAAmB,KAAA,WAAgB,oBAAA"}