@jazzmind/busibox-app 3.0.18

package/dist/contexts/ApiContext.js

@@ -0,0 +1,73 @@
+'use client';
+import { jsx as _jsx } from "react/jsx-runtime";
+import * as React from 'react';
+const API_DOMAIN_OWNERS = {
+    libraries: 'documents',
+    data: 'documents',
+    documents: 'documents',
+    graph: 'documents',
+    agents: 'agents',
+    agent: 'agents',
+    chat: 'chat',
+    media: 'media',
+    videos: 'media',
+    'portal-customization': 'portal',
+    account: 'portal',
+};
+const defaultFallback = {
+    mode: 'service-first-fallback-next',
+    fallbackStatuses: [404, 405, 501, 502, 503, 504],
+    fallbackOnNetworkError: true,
+};
+const ApiContext = React.createContext({
+    nextApiBasePath: '',
+    crossAppPaths: {},
+    services: {},
+    serviceRequestHeaders: {},
+    fallback: defaultFallback,
+});
+export function BusiboxApiProvider({ value, children }) {
+    const merged = React.useMemo(() => {
+        return {
+            nextApiBasePath: value.nextApiBasePath ?? '',
+            crossAppPaths: value.crossAppPaths ?? {},
+            services: value.services ?? {},
+            serviceRequestHeaders: value.serviceRequestHeaders ?? {},
+            fallback: { ...defaultFallback, ...(value.fallback ?? {}) },
+        };
+    }, [value]);
+    return _jsx(ApiContext.Provider, { value: merged, children: children });
+}
+export function useBusiboxApi() {
+    return React.useContext(ApiContext);
+}
+/**
+ * Returns the base path for a given cross-app target. Falls back to the
+ * current app's nextApiBasePath when the target is the current app.
+ */
+export function useCrossAppBasePath(app) {
+    const config = React.useContext(ApiContext);
+    return config.crossAppPaths?.[app] ?? config.nextApiBasePath ?? '';
+}
+/**
+ * Resolves an API path like `/api/libraries` to the owning app's base path.
+ * E.g. in the chat app, `/api/libraries` becomes `/documents/api/libraries`.
+ */
+export function resolveApiPath(domain, path, config) {
+    const ownerApp = API_DOMAIN_OWNERS[domain];
+    const basePath = (config.crossAppPaths?.[ownerApp] ?? config.nextApiBasePath ?? '').replace(/\/+$/, '');
+    if (!basePath)
+        return path;
+    const normalizedPath = path.startsWith('/') ? path : `/${path}`;
+    return `${basePath}${normalizedPath}`;
+}
+/**
+ * Hook that returns a resolver function bound to current config.
+ * Usage: const resolve = useCrossAppApiPath();
+ *        fetch(resolve('libraries', '/api/libraries'));
+ */
+export function useCrossAppApiPath() {
+    const config = React.useContext(ApiContext);
+    return React.useCallback((domain, path) => resolveApiPath(domain, path, config), [config]);
+}
+//# sourceMappingURL=ApiContext.js.map

package/dist/contexts/ApiContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiContext.js","sourceRoot":"","sources":["../../src/contexts/ApiContext.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAmD/B,MAAM,iBAAiB,GAA2C;IAChE,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,OAAO;IACf,sBAAsB,EAAE,QAAQ;IAChC,OAAO,EAAE,QAAQ;CAClB,CAAC;AAkBF,MAAM,eAAe,GAAqB;IACxC,IAAI,EAAE,6BAA6B;IACnC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAChD,sBAAsB,EAAE,IAAI;CAC7B,CAAC;AAEF,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,CAAmB;IACvD,eAAe,EAAE,EAAE;IACnB,aAAa,EAAE,EAAE;IACjB,QAAQ,EAAE,EAAE;IACZ,qBAAqB,EAAE,EAAE;IACzB,QAAQ,EAAE,eAAe;CAC1B,CAAC,CAAC;AAOH,MAAM,UAAU,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAA2B;IAC7E,MAAM,MAAM,GAAqB,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;QAClD,OAAO;YACL,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,EAAE;YAC5C,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;YAC9B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,IAAI,EAAE;YACxD,QAAQ,EAAE,EAAE,GAAG,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;SAC5D,CAAC;IACJ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAEZ,OAAO,KAAC,UAAU,CAAC,QAAQ,IAAC,KAAK,EAAE,MAAM,YAAG,QAAQ,GAAuB,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAwB;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAiB,EAAE,IAAY,EAAE,MAAwB;IACtF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAChE,OAAO,GAAG,QAAQ,GAAG,cAAc,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,WAAW,CACtB,CAAC,MAAiB,EAAE,IAAY,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EACzE,CAAC,MAAM,CAAC,CACT,CAAC;AACJ,CAAC"}

package/dist/contexts/AuthContext.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Authentication Context
+ *
+ * Provides authentication state management including:
+ * - Token exchange status tracking from URL parameters
+ * - Ready signal for data fetching
+ * - Proactive token refresh via auth state manager
+ * - Automatic redirect to portal when re-authentication is required
+ *
+ * All auth operations (session check, token exchange, token refresh) are
+ * handled by a single /api/auth/session endpoint:
+ *   GET  — Return current session from app-scoped cookie
+ *   POST {token} — SSO token exchange (set app-scoped cookies)
+ *   POST {} — Token refresh (exchange SSO token for fresh API token)
+ *
+ * This is the standard authentication context for Busibox apps that use
+ * SSO tokens from Busibox Portal.
+ *
+ * @example
+ * ```tsx
+ * import { AuthProvider, useAuth } from '@jazzmind/busibox-app';
+ *
+ * // In your app layout
+ * <AuthProvider
+ *   appId="my-app"
+ *   portalUrl={process.env.NEXT_PUBLIC_BUSIBOX_PORTAL_URL}
+ *   basePath={process.env.NEXT_PUBLIC_BASE_PATH}
+ * >
+ *   {children}
+ * </AuthProvider>
+ *
+ * // In your components
+ * function MyComponent() {
+ *   const { isReady, isAuthenticated, authState } = useAuth();
+ *
+ *   if (!isReady) return <Loading />;
+ *   if (!isAuthenticated) return <NotAuthenticated />;
+ *
+ *   return <AuthenticatedContent />;
+ * }
+ * ```
+ */
+import React from 'react';
+import { type AuthState } from '../lib/authz/auth-state-manager';
+export interface AuthContextValue {
+    /** Whether auth is ready (no pending token exchange) */
+    isReady: boolean;
+    /** Whether a token exchange is in progress */
+    isExchanging: boolean;
+    /** Trigger a data refresh (call this after token exchange) - increments on each auth change */
+    refreshKey: number;
+    /** Current auth state from the auth manager */
+    authState: AuthState | null;
+    /** Whether the user is authenticated */
+    isAuthenticated: boolean;
+    /** Force a token refresh */
+    refreshToken: () => Promise<boolean>;
+    /** Redirect to portal for re-authentication */
+    redirectToPortal: (reason?: string) => void;
+    /** Perform a system-wide logout */
+    logout: () => Promise<void>;
+}
+export interface AuthProviderProps {
+    children: React.ReactNode;
+    /** App identifier - used for cookie naming and auth manager config */
+    appId?: string;
+    /** Busibox Portal URL for redirects (e.g., "https://portal.example.com") */
+    portalUrl?: string;
+    /** Base path for the app (e.g., "/myapp") - used for URL cleanup */
+    basePath?: string;
+    /** Session endpoint - GET returns session, POST handles exchange/refresh (default: "/api/auth/session") */
+    sessionEndpoint?: string;
+    /** Token refresh endpoint - POST with empty body (default: "/api/auth/session") */
+    refreshEndpoint?: string;
+    /** Token exchange endpoint - POST with {token} (default: "/api/auth/session") */
+    exchangeEndpoint?: string;
+    /** Logout endpoint (default: "/api/logout") */
+    logoutEndpoint?: string;
+    /** Check interval in ms (default: 30000) */
+    checkIntervalMs?: number;
+    /** Buffer before expiry to trigger refresh in ms (default: 300000 = 5 min) */
+    refreshBufferMs?: number;
+    /** Whether to auto-redirect to portal on auth failure (default: true if portalUrl provided) */
+    autoRedirect?: boolean;
+    /**
+     * Override the portal's silent SSO refresh URL.
+     * Default: auto-derived from portalUrl (e.g., "https://localhost/portal/api/auth/token")
+     */
+    silentRefreshUrl?: string;
+    /**
+     * Testing only: Override token lifetime in ms. The auth manager will pretend
+     * the token expires this many ms after it was first seen, regardless of the
+     * actual JWT exp claim. Do NOT use in production.
+     */
+    tokenExpiresOverrideMs?: number;
+}
+/**
+ * Hook to access authentication state and methods
+ */
+export declare function useAuth(): AuthContextValue;
+/**
+ * Authentication Provider
+ *
+ * Handles:
+ * 1. Token exchange from URL ?token= parameter (from Busibox Portal SSO)
+ * 2. Auth state monitoring and proactive refresh
+ * 3. Automatic redirect to portal when session expires
+ */
+export declare function AuthProvider({ children, appId, portalUrl: portalUrlProp, basePath: basePathProp, sessionEndpoint, refreshEndpoint, exchangeEndpoint, logoutEndpoint, checkIntervalMs, refreshBufferMs, autoRedirect, silentRefreshUrl, tokenExpiresOverrideMs, }: AuthProviderProps): import("react/jsx-runtime").JSX.Element;
+export declare class TokenExpiredError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=AuthContext.d.ts.map

package/dist/contexts/AuthContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthContext.d.ts","sourceRoot":"","sources":["../../src/contexts/AuthContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAIH,OAAO,KAA8E,MAAM,OAAO,CAAC;AACnG,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,iCAAiC,CAAC;AAMzC,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,YAAY,EAAE,OAAO,CAAC;IACtB,+FAA+F;IAC/F,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5B,wCAAwC;IACxC,eAAe,EAAE,OAAO,CAAC;IACzB,4BAA4B;IAC5B,YAAY,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,+CAA+C;IAC/C,gBAAgB,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,mCAAmC;IACnC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2GAA2G;IAC3G,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+FAA+F;IAC/F,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAiBD;;GAEG;AACH,wBAAgB,OAAO,IAAI,gBAAgB,CAE1C;AAMD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,KAAK,EACL,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,YAAY,EACtB,eAAqC,EACrC,eAAqC,EACrC,gBAAsC,EACtC,cAA8B,EAC9B,eAAwB,EACxB,eAA+B,EAC/B,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,GACvB,EAAE,iBAAiB,2CA8OnB;AA2BD,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B"}

package/dist/contexts/AuthContext.js

@@ -0,0 +1,351 @@
+/**
+ * Authentication Context
+ *
+ * Provides authentication state management including:
+ * - Token exchange status tracking from URL parameters
+ * - Ready signal for data fetching
+ * - Proactive token refresh via auth state manager
+ * - Automatic redirect to portal when re-authentication is required
+ *
+ * All auth operations (session check, token exchange, token refresh) are
+ * handled by a single /api/auth/session endpoint:
+ *   GET  — Return current session from app-scoped cookie
+ *   POST {token} — SSO token exchange (set app-scoped cookies)
+ *   POST {} — Token refresh (exchange SSO token for fresh API token)
+ *
+ * This is the standard authentication context for Busibox apps that use
+ * SSO tokens from Busibox Portal.
+ *
+ * @example
+ * ```tsx
+ * import { AuthProvider, useAuth } from '@jazzmind/busibox-app';
+ *
+ * // In your app layout
+ * <AuthProvider
+ *   appId="my-app"
+ *   portalUrl={process.env.NEXT_PUBLIC_BUSIBOX_PORTAL_URL}
+ *   basePath={process.env.NEXT_PUBLIC_BASE_PATH}
+ * >
+ *   {children}
+ * </AuthProvider>
+ *
+ * // In your components
+ * function MyComponent() {
+ *   const { isReady, isAuthenticated, authState } = useAuth();
+ *
+ *   if (!isReady) return <Loading />;
+ *   if (!isAuthenticated) return <NotAuthenticated />;
+ *
+ *   return <AuthenticatedContent />;
+ * }
+ * ```
+ */
+'use client';
+import { jsx as _jsx } from "react/jsx-runtime";
+import { createContext, useCallback, useContext, useEffect, useState, useRef } from 'react';
+import { createAuthStateManager, setGlobalAuthManager, clearGlobalAuthManager, } from '../lib/authz/auth-state-manager';
+// ============================================================================
+// Context
+// ============================================================================
+const AuthContext = createContext({
+    isReady: true,
+    isExchanging: false,
+    refreshKey: 0,
+    authState: null,
+    isAuthenticated: false,
+    refreshToken: async () => false,
+    redirectToPortal: () => { },
+    logout: async () => { },
+});
+/**
+ * Hook to access authentication state and methods
+ */
+export function useAuth() {
+    return useContext(AuthContext);
+}
+// ============================================================================
+// Provider
+// ============================================================================
+/**
+ * Authentication Provider
+ *
+ * Handles:
+ * 1. Token exchange from URL ?token= parameter (from Busibox Portal SSO)
+ * 2. Auth state monitoring and proactive refresh
+ * 3. Automatic redirect to portal when session expires
+ */
+export function AuthProvider({ children, appId, portalUrl: portalUrlProp, basePath: basePathProp, sessionEndpoint = '/api/auth/session', refreshEndpoint = '/api/auth/session', exchangeEndpoint = '/api/auth/session', logoutEndpoint = '/api/logout', checkIntervalMs = 30000, refreshBufferMs = 5 * 60 * 1000, autoRedirect, silentRefreshUrl, tokenExpiresOverrideMs, }) {
+    const [isExchanging, setIsExchanging] = useState(false);
+    const [isReady, setIsReady] = useState(false);
+    const [refreshKey, setRefreshKey] = useState(0);
+    const [authState, setAuthState] = useState(null);
+    const [tokenExchangeComplete, setTokenExchangeComplete] = useState(false);
+    const authManagerRef = useRef(null);
+    // Get configuration from props or environment
+    const portalUrl = portalUrlProp || (typeof process !== 'undefined' ? (process.env?.NEXT_PUBLIC_BUSIBOX_PORTAL_URL || process.env?.NEXT_PUBLIC_AI_PORTAL_URL) : '') || '';
+    const basePath = basePathProp || (typeof process !== 'undefined' ? process.env?.NEXT_PUBLIC_BASE_PATH : '') || '';
+    const resolvedAppId = appId || (typeof process !== 'undefined' ? process.env?.APP_NAME : '') || 'busibox-app';
+    const shouldAutoRedirect = autoRedirect ?? Boolean(portalUrl);
+    // Handle token exchange from URL FIRST, before starting auth manager
+    useEffect(() => {
+        // Only run in browser
+        if (typeof window === 'undefined') {
+            setTokenExchangeComplete(true);
+            setIsReady(true);
+            return;
+        }
+        const searchParams = new URLSearchParams(window.location.search);
+        const token = searchParams.get('token');
+        if (!token) {
+            setTokenExchangeComplete(true);
+            setIsReady(true);
+            return;
+        }
+        // If token is already expired, redirect to portal so it can auto-relaunch with a fresh token
+        if (isTokenExpired(token) && portalUrl && resolvedAppId) {
+            const homeUrl = `${portalUrl.replace(/\/$/, '')}/home`;
+            const redirectUrl = `${homeUrl}?reason=token_expired&appId=${encodeURIComponent(resolvedAppId)}`;
+            console.log('[AuthProvider] Token in URL is expired, redirecting to portal for auto-relaunch');
+            window.location.href = redirectUrl;
+            return;
+        }
+        console.log('[AuthProvider] Token found in URL, starting exchange...');
+        setIsReady(false);
+        setIsExchanging(true);
+        // Remove token from URL IMMEDIATELY (synchronously) to prevent infinite
+        // reload loops when HMR/Fast Refresh re-mounts the component before the
+        // async exchange completes.
+        const cleanUrl = new URL(window.location.href);
+        cleanUrl.searchParams.delete('token');
+        window.history.replaceState(null, '', cleanUrl.pathname + cleanUrl.search);
+        exchangeToken(token, exchangeEndpoint)
+            .then(() => {
+            console.log('[AuthProvider] Token exchange successful');
+            setRefreshKey(prev => prev + 1);
+        })
+            .catch((error) => {
+            console.error('[AuthProvider] Token exchange failed:', error);
+            if (error instanceof TokenExpiredError && portalUrl && resolvedAppId) {
+                const homeUrl = `${portalUrl.replace(/\/$/, '')}/home`;
+                const redirectUrl = `${homeUrl}?reason=token_expired&appId=${encodeURIComponent(resolvedAppId)}`;
+                window.location.href = redirectUrl;
+                return;
+            }
+        })
+            .finally(() => {
+            setIsExchanging(false);
+            setIsReady(true);
+            setTokenExchangeComplete(true);
+        });
+    }, [basePath, exchangeEndpoint, portalUrl, resolvedAppId]);
+    // Initialize auth state manager ONLY after token exchange is complete
+    useEffect(() => {
+        // Don't start until token exchange is complete
+        if (!tokenExchangeComplete) {
+            console.log('[AuthProvider] Waiting for token exchange to complete before starting auth manager');
+            return;
+        }
+        // Only run in browser
+        if (typeof window === 'undefined') {
+            return;
+        }
+        console.log('[AuthProvider] Token exchange complete, starting auth manager');
+        // Create the auth state manager
+        const manager = createAuthStateManager({
+            refreshEndpoint,
+            sessionEndpoint,
+            exchangeEndpoint,
+            portalUrl: portalUrl ? `${portalUrl}/home` : '',
+            appId: resolvedAppId,
+            checkIntervalMs,
+            refreshBufferMs,
+            autoRedirect: shouldAutoRedirect,
+            basePath,
+            silentRefreshUrl,
+            tokenExpiresOverrideMs,
+            getToken: () => {
+                try {
+                    return localStorage.getItem('auth_token');
+                }
+                catch {
+                    return null;
+                }
+            },
+            setToken: (token) => {
+                try {
+                    if (token) {
+                        localStorage.setItem('auth_token', token);
+                    }
+                    else {
+                        localStorage.removeItem('auth_token');
+                    }
+                }
+                catch {
+                    // Ignore localStorage errors
+                }
+            },
+        });
+        // Set as global manager for FetchWrapper to use
+        setGlobalAuthManager(manager);
+        authManagerRef.current = manager;
+        // Subscribe to auth state changes
+        const unsubscribeState = manager.on('authStateChanged', (state) => {
+            console.log('[AuthProvider] Auth state changed:', state);
+            setAuthState(state);
+            setRefreshKey(prev => prev + 1);
+        });
+        // Subscribe to token refresh events
+        const unsubscribeRefresh = manager.on('tokenRefreshed', () => {
+            console.log('[AuthProvider] Token refreshed successfully');
+            setRefreshKey(prev => prev + 1);
+        });
+        // Subscribe to re-auth requirements
+        const unsubscribeReauth = manager.on('requiresReauth', (data) => {
+            const reason = data?.reason;
+            console.log('[AuthProvider] Re-authentication required:', reason);
+        });
+        // Start monitoring - but give a brief delay to let cookies settle
+        const startDelay = setTimeout(() => {
+            manager.start();
+        }, 100);
+        return () => {
+            clearTimeout(startDelay);
+            unsubscribeState();
+            unsubscribeRefresh();
+            unsubscribeReauth();
+            manager.stop();
+            clearGlobalAuthManager();
+        };
+    }, [
+        portalUrl,
+        basePath,
+        tokenExchangeComplete,
+        resolvedAppId,
+        sessionEndpoint,
+        refreshEndpoint,
+        checkIntervalMs,
+        refreshBufferMs,
+        shouldAutoRedirect,
+    ]);
+    const refreshToken = useCallback(async () => {
+        if (authManagerRef.current) {
+            return authManagerRef.current.refreshNow();
+        }
+        return false;
+    }, []);
+    const redirectToPortal = useCallback((reason) => {
+        if (typeof window === 'undefined' || !portalUrl) {
+            if (!portalUrl)
+                console.warn('[AuthProvider] No portal URL configured, cannot redirect');
+            return;
+        }
+        const portalHome = `${portalUrl.replace(/\/$/, '')}/home`;
+        const currentUrl = new URL(window.location.href);
+        currentUrl.searchParams.delete('token');
+        currentUrl.searchParams.delete('returnUrl');
+        currentUrl.searchParams.delete('reason');
+        currentUrl.searchParams.delete('appId');
+        const encodedReturn = encodeURIComponent(currentUrl.toString());
+        let redirectUrl = `${portalHome}?returnUrl=${encodedReturn}`;
+        if (reason)
+            redirectUrl += `&reason=${encodeURIComponent(reason)}`;
+        if (resolvedAppId)
+            redirectUrl += `&appId=${encodeURIComponent(resolvedAppId)}`;
+        console.log('[AuthProvider] Redirecting to portal:', redirectUrl);
+        window.location.href = redirectUrl;
+    }, [portalUrl, resolvedAppId]);
+    const logout = useCallback(async () => {
+        // Clear local storage
+        try {
+            localStorage.removeItem('auth_token');
+        }
+        catch {
+            // ignore
+        }
+        // Call logout endpoint
+        try {
+            await fetch(logoutEndpoint, { method: 'POST', credentials: 'include' });
+        }
+        catch {
+            // ignore
+        }
+        // Stop auth manager
+        if (authManagerRef.current) {
+            authManagerRef.current.stop();
+        }
+        // Redirect to portal home
+        if (portalUrl) {
+            window.location.href = `${portalUrl}/home`;
+        }
+    }, [portalUrl, logoutEndpoint]);
+    const isAuthenticated = authState?.isAuthenticated ?? false;
+    return (_jsx(AuthContext.Provider, { value: {
+            isReady,
+            isExchanging,
+            refreshKey,
+            authState,
+            isAuthenticated,
+            refreshToken,
+            redirectToPortal,
+            logout,
+        }, children: children }));
+}
+// ============================================================================
+// Helpers
+// ============================================================================
+/** Client-safe JWT payload parse (no Buffer). */
+function getJwtPayload(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3)
+            return null;
+        const decoded = atob(parts[1].replace(/-/g, '+').replace(/_/g, '/'));
+        return JSON.parse(decoded);
+    }
+    catch {
+        return null;
+    }
+}
+/** Check if token is expired (client-side only, no verification). */
+function isTokenExpired(token) {
+    const payload = getJwtPayload(token);
+    if (!payload || typeof payload.exp !== 'number')
+        return false;
+    const expMs = payload.exp * 1000;
+    const nowMs = Date.now();
+    return nowMs >= expMs;
+}
+export class TokenExpiredError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'TokenExpiredError';
+    }
+}
+/**
+ * Exchange a URL token for a session cookie.
+ * Throws TokenExpiredError when the server returns 401 with error: 'token_expired'.
+ */
+async function exchangeToken(token, endpoint) {
+    const response = await fetch(endpoint, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ token }),
+        credentials: 'include',
+    });
+    if (!response.ok) {
+        const body = await response.json().catch(() => ({}));
+        if (response.status === 401 && body.error === 'token_expired') {
+            throw new TokenExpiredError('Token expired');
+        }
+        throw new Error('Token exchange failed');
+    }
+    try {
+        localStorage.setItem('auth_token', token);
+    }
+    catch {
+        // Ignore localStorage errors
+    }
+}
+//# sourceMappingURL=AuthContext.js.map

package/dist/contexts/AuthContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthContext.js","sourceRoot":"","sources":["../../src/contexts/AuthContext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,YAAY,CAAC;;AAEb,OAAc,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AACnG,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,GAGvB,MAAM,iCAAiC,CAAC;AA4DzC,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,WAAW,GAAG,aAAa,CAAmB;IAClD,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,CAAC;IACb,SAAS,EAAE,IAAI;IACf,eAAe,EAAE,KAAK;IACtB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;IAC/B,gBAAgB,EAAE,GAAG,EAAE,GAAE,CAAC;IAC1B,MAAM,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;CACvB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,OAAO;IACrB,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,QAAQ,EACR,KAAK,EACL,SAAS,EAAE,aAAa,EACxB,QAAQ,EAAE,YAAY,EACtB,eAAe,GAAG,mBAAmB,EACrC,eAAe,GAAG,mBAAmB,EACrC,gBAAgB,GAAG,mBAAmB,EACtC,cAAc,GAAG,aAAa,EAC9B,eAAe,GAAG,KAAM,EACxB,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAC/B,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,GACJ;IAClB,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAmB,IAAI,CAAC,CAAC;IACnE,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE1E,MAAM,cAAc,GAAG,MAAM,CAA0B,IAAI,CAAC,CAAC;IAE7D,8CAA8C;IAC9C,MAAM,SAAS,GAAG,aAAa,IAAI,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,8BAA8B,IAAI,OAAO,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IACzK,MAAM,QAAQ,GAAG,YAAY,IAAI,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAClH,MAAM,aAAa,GAAG,KAAK,IAAI,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC;IAC9G,MAAM,kBAAkB,GAAG,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;IAE9D,qEAAqE;IACrE,SAAS,CAAC,GAAG,EAAE;QACb,sBAAsB;QACtB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAExC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,6FAA6F;QAC7F,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC;YACvD,MAAM,WAAW,GAAG,GAAG,OAAO,+BAA+B,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;YAC/F,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC;YACnC,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,eAAe,CAAC,IAAI,CAAC,CAAC;QAEtB,wEAAwE;QACxE,wEAAwE;QACxE,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/C,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE3E,aAAa,CAAC,KAAK,EAAE,gBAAgB,CAAC;aACnC,IAAI,CAAC,GAAG,EAAE;YACT,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,KAAK,YAAY,iBAAiB,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;gBACrE,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC;gBACvD,MAAM,WAAW,GAAG,GAAG,OAAO,+BAA+B,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;gBACjG,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC;gBACnC,OAAO;YACT,CAAC;QACH,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,CAAC;YACjB,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IAE3D,sEAAsE;IACtE,SAAS,CAAC,GAAG,EAAE;QACb,+CAA+C;QAC/C,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QAED,sBAAsB;QACtB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAE7E,gCAAgC;QAChC,MAAM,OAAO,GAAG,sBAAsB,CAAC;YACrC,eAAe;YACf,eAAe;YACf,gBAAgB;YAChB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC,EAAE;YAC/C,KAAK,EAAE,aAAa;YACpB,eAAe;YACf,eAAe;YACf,YAAY,EAAE,kBAAkB;YAChC,QAAQ;YACR,gBAAgB;YAChB,sBAAsB;YACtB,QAAQ,EAAE,GAAG,EAAE;gBACb,IAAI,CAAC;oBACH,OAAO,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC;oBACH,IAAI,KAAK,EAAE,CAAC;wBACV,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;oBAC5C,CAAC;yBAAM,CAAC;wBACN,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;oBACxC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,6BAA6B;gBAC/B,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,gDAAgD;QAChD,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9B,cAAc,CAAC,OAAO,GAAG,OAAO,CAAC;QAEjC,kCAAkC;QAClC,MAAM,gBAAgB,GAAG,OAAO,CAAC,EAAE,CAAY,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3E,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YACzD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,oCAAoC;QACpC,MAAM,kBAAkB,GAAG,OAAO,CAAC,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAC3D,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;YAC3D,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,oCAAoC;QACpC,MAAM,iBAAiB,GAAG,OAAO,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,IAAa,EAAE,EAAE;YACvE,MAAM,MAAM,GAAI,IAA4B,EAAE,MAAM,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,kEAAkE;QAClE,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YACjC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,EAAE,GAAG,CAAC,CAAC;QAER,OAAO,GAAG,EAAE;YACV,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,gBAAgB,EAAE,CAAC;YACnB,kBAAkB,EAAE,CAAC;YACrB,iBAAiB,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,sBAAsB,EAAE,CAAC;QAC3B,CAAC,CAAC;IACJ,CAAC,EAAE;QACD,SAAS;QACT,QAAQ;QACR,qBAAqB;QACrB,aAAa;QACb,eAAe;QACf,eAAe;QACf,eAAe;QACf,eAAe;QACf,kBAAkB;KACnB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,IAAsB,EAAE;QAC5D,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC7C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,MAAe,EAAE,EAAE;QACvD,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,IAAI,CAAC,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5C,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChE,IAAI,WAAW,GAAG,GAAG,UAAU,cAAc,aAAa,EAAE,CAAC;QAC7D,IAAI,MAAM;YAAE,WAAW,IAAI,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,IAAI,aAAa;YAAE,WAAW,IAAI,UAAU,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,uCAAuC,EAAE,WAAW,CAAC,CAAC;QAClE,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC;IACrC,CAAC,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IAE/B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,sBAAsB;QACtB,IAAI,CAAC;YACH,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,oBAAoB;QACpB,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;YAC3B,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAED,0BAA0B;QAC1B,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,SAAS,OAAO,CAAC;QAC7C,CAAC;IACH,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IAEhC,MAAM,eAAe,GAAG,SAAS,EAAE,eAAe,IAAI,KAAK,CAAC;IAE5D,OAAO,CACL,KAAC,WAAW,CAAC,QAAQ,IAAC,KAAK,EAAE;YAC3B,OAAO;YACP,YAAY;YACZ,UAAU;YACV,SAAS;YACT,eAAe;YACf,YAAY;YACZ,gBAAgB;YAChB,MAAM;SACP,YACE,QAAQ,GACY,CACxB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,iDAAiD;AACjD,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,KAAK,IAAI,KAAK,CAAC;AACxB,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;GAGG;AACH,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,QAAgB;IAC1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;QAC/B,WAAW,EAAE,SAAS;KACvB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAK,IAA2B,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACtF,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;AACH,CAAC"}

package/dist/contexts/CustomizationContext.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Portal Customization Context
+ *
+ * Provides portal branding and customization across the app.
+ * Can be configured with a custom API endpoint or default values.
+ */
+import React from 'react';
+export type PortalCustomization = {
+    id?: string;
+    companyName: string;
+    siteName: string;
+    slogan: string;
+    logoUrl: string | null;
+    faviconUrl: string | null;
+    primaryColor: string;
+    secondaryColor: string;
+    textColor: string;
+    addressLine1: string;
+    addressLine2: string | null;
+    addressCity: string | null;
+    addressState: string;
+    addressZip: string | null;
+    addressCountry: string;
+    supportEmail: string | null;
+    supportPhone: string | null;
+    customCss: string | null;
+};
+type CustomizationContextType = {
+    customization: PortalCustomization;
+    isLoading: boolean;
+    error: string | null;
+    refresh: () => Promise<void>;
+};
+export declare function useCustomization(): CustomizationContextType;
+export type CustomizationProviderProps = {
+    children: React.ReactNode;
+    /** API endpoint to fetch customization from. If not provided, uses default values. */
+    apiEndpoint?: string;
+    /** Initial customization values. If provided, skips API fetch. */
+    initialCustomization?: PortalCustomization;
+};
+export declare function CustomizationProvider({ children, apiEndpoint, initialCustomization }: CustomizationProviderProps): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=CustomizationContext.d.ts.map

package/dist/contexts/CustomizationContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomizationContext.d.ts","sourceRoot":"","sources":["../../src/contexts/CustomizationContext.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAyD,MAAM,OAAO,CAAC;AAE9E,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AA6BF,wBAAgB,gBAAgB,6BAE/B;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,mBAAmB,CAAC;CAC5C,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,EACpC,QAAQ,EACR,WAAyC,EACzC,oBAAoB,EACrB,EAAE,0BAA0B,2CA4F5B"}