@korajs/auth 0.5.0 → 1.0.0-beta.0

package/dist/svelte.cjs

@@ -0,0 +1,512 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/svelte.ts
+var svelte_exports = {};
+__export(svelte_exports, {
+  checkOrgPermission: () => checkOrgPermission,
+  createAuthStatusStore: () => createAuthStatusStore,
+  createAuthStore: () => createAuthStore,
+  createCurrentUserStore: () => createCurrentUserStore,
+  createPermissionStore: () => createPermissionStore,
+  destroyAuthProvider: () => destroyAuthProvider,
+  destroyOrgProvider: () => destroyOrgProvider,
+  getAuthContext: () => getAuthContext,
+  getOrgContext: () => getOrgContext,
+  initAuthProvider: () => initAuthProvider,
+  initOrgProvider: () => initOrgProvider,
+  useAuth: () => useAuth,
+  useAuthStatus: () => useAuthStatus,
+  useCurrentUser: () => useCurrentUser,
+  useOrg: () => useOrg,
+  useOrgMembers: () => useOrgMembers,
+  usePermission: () => usePermission
+});
+module.exports = __toCommonJS(svelte_exports);
+
+// src/svelte/auth-context.ts
+var import_svelte = require("svelte");
+
+// src/bindings/create-auth-session.ts
+function createAuthSession(client) {
+  let state = client.state;
+  let isLoading = true;
+  let initError = null;
+  let lastError = null;
+  const listeners = /* @__PURE__ */ new Set();
+  let snapshot = buildSnapshot2();
+  const refreshSnapshot = () => {
+    snapshot = buildSnapshot2();
+  };
+  const notify = () => {
+    refreshSnapshot();
+    for (const listener of listeners) {
+      listener();
+    }
+  };
+  function buildSnapshot2() {
+    return {
+      state,
+      user: client.currentUser,
+      isAuthenticated: state === "authenticated",
+      isLoading,
+      initError,
+      error: lastError
+    };
+  }
+  const captureError = (error) => {
+    lastError = error instanceof Error ? error.message : String(error);
+    notify();
+  };
+  const run = async (action) => {
+    lastError = null;
+    try {
+      await action();
+    } catch (error) {
+      captureError(error);
+    }
+  };
+  const runWithResult = async (action) => {
+    lastError = null;
+    try {
+      return await action();
+    } catch (error) {
+      captureError(error);
+      return null;
+    }
+  };
+  const unsubscribeAuth = client.onAuthChange((nextState) => {
+    state = nextState;
+    notify();
+  });
+  void client.initialize().then(() => {
+    state = client.state;
+    isLoading = false;
+    notify();
+  }).catch((error) => {
+    initError = error instanceof Error ? error : new Error(String(error));
+    isLoading = false;
+    notify();
+  });
+  return {
+    client,
+    getSnapshot: () => snapshot,
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    signUp: (params) => run(async () => {
+      await client.signUp(params);
+    }),
+    signIn: (params) => run(async () => {
+      await client.signIn(params);
+    }),
+    signInWithOAuth: async (provider, options) => {
+      lastError = null;
+      try {
+        return await client.signInWithOAuth(provider, options);
+      } catch (error) {
+        captureError(error);
+        throw error instanceof Error ? error : new Error(String(error));
+      }
+    },
+    completeOAuthSignIn: (provider, params) => run(async () => {
+      await client.completeOAuthSignIn(provider, params);
+    }),
+    getOAuthAuthorizationUrl: async (provider, options) => {
+      lastError = null;
+      try {
+        return await client.getOAuthAuthorizationUrl(provider, options);
+      } catch (error) {
+        captureError(error);
+        throw error instanceof Error ? error : new Error(String(error));
+      }
+    },
+    linkOAuth: (provider, params) => runWithResult(async () => client.linkOAuth(provider, params)),
+    listLinkedAccounts: () => runWithResult(async () => client.listLinkedAccounts()).then((value) => value ?? []),
+    unlinkOAuth: (provider) => run(async () => {
+      await client.unlinkOAuth(provider);
+    }),
+    signOut: () => run(async () => {
+      await client.signOut();
+    }),
+    destroy() {
+      unsubscribeAuth();
+      listeners.clear();
+    }
+  };
+}
+
+// src/svelte/auth-context.ts
+var authContextKey = /* @__PURE__ */ Symbol("korajs-auth-context");
+function initAuthProvider(client) {
+  const session = createAuthSession(client);
+  const value = {
+    client,
+    session,
+    get state() {
+      return session.getSnapshot().state;
+    },
+    get isLoading() {
+      return session.getSnapshot().isLoading;
+    }
+  };
+  (0, import_svelte.setContext)(authContextKey, value);
+  return value;
+}
+function getAuthContext() {
+  const context = (0, import_svelte.getContext)(authContextKey);
+  if (!context) {
+    throw new Error(
+      "Auth context missing. Call initAuthProvider(client) in your root layout component."
+    );
+  }
+  return context;
+}
+function destroyAuthProvider(context) {
+  context.session.destroy();
+}
+
+// src/svelte/use-auth.ts
+var import_store = require("svelte/store");
+function createAuthStore() {
+  const { session } = getAuthContext();
+  return (0, import_store.readable)(buildResult(session), (set) => {
+    const sync = () => {
+      set(buildResult(session));
+    };
+    sync();
+    return session.subscribe(sync);
+  });
+}
+var useAuth = createAuthStore;
+function buildResult(session) {
+  const snapshot = session.getSnapshot();
+  return {
+    ...snapshot,
+    signUp: (params) => session.signUp(params),
+    signIn: (params) => session.signIn(params),
+    signInWithOAuth: (provider, options) => session.signInWithOAuth(provider, options),
+    completeOAuthSignIn: (provider, params) => session.completeOAuthSignIn(provider, params),
+    getOAuthAuthorizationUrl: (provider, options) => session.getOAuthAuthorizationUrl(provider, options),
+    linkOAuth: (provider, params) => session.linkOAuth(provider, params),
+    listLinkedAccounts: () => session.listLinkedAccounts(),
+    unlinkOAuth: (provider) => session.unlinkOAuth(provider),
+    signOut: () => session.signOut()
+  };
+}
+function createCurrentUserStore() {
+  const { session } = getAuthContext();
+  return (0, import_store.readable)(session.getSnapshot().user, (set) => {
+    const sync = () => {
+      set(session.getSnapshot().user);
+    };
+    sync();
+    return session.subscribe(sync);
+  });
+}
+var useCurrentUser = createCurrentUserStore;
+function createAuthStatusStore() {
+  const { session } = getAuthContext();
+  return (0, import_store.readable)(
+    {
+      state: session.getSnapshot().state,
+      isAuthenticated: session.getSnapshot().isAuthenticated,
+      isLoading: session.getSnapshot().isLoading
+    },
+    (set) => {
+      const sync = () => {
+        const snapshot = session.getSnapshot();
+        set({
+          state: snapshot.state,
+          isAuthenticated: snapshot.isAuthenticated,
+          isLoading: snapshot.isLoading
+        });
+      };
+      sync();
+      return session.subscribe(sync);
+    }
+  );
+}
+var useAuthStatus = createAuthStatusStore;
+
+// src/svelte/org-context.ts
+var import_svelte2 = require("svelte");
+
+// src/bindings/create-org-session.ts
+var ROLE_LEVELS = {
+  viewer: 10,
+  billing: 15,
+  member: 20,
+  admin: 30,
+  owner: 40
+};
+function checkOrgPermission(currentRole, requiredRole) {
+  if (!currentRole) return false;
+  const currentLevel = ROLE_LEVELS[currentRole] ?? 0;
+  const requiredLevel = ROLE_LEVELS[requiredRole] ?? 0;
+  return currentLevel >= requiredLevel;
+}
+function createOrgSession(client) {
+  let snapshot = buildSnapshot(client);
+  const listeners = /* @__PURE__ */ new Set();
+  const notify = () => {
+    snapshot = buildSnapshot(client);
+    for (const listener of listeners) {
+      listener();
+    }
+  };
+  const unsubscribeOrgChange = client.onOrgChange(notify);
+  return {
+    client,
+    getSnapshot: () => snapshot,
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    checkPermission(requiredRole) {
+      return checkOrgPermission(snapshot.role, requiredRole);
+    },
+    destroy() {
+      unsubscribeOrgChange();
+      listeners.clear();
+    }
+  };
+}
+function buildSnapshot(client) {
+  return {
+    orgId: client.activeOrgId,
+    org: client.activeOrg,
+    role: client.activeRole
+  };
+}
+function createOrgMembersActions(client, orgId, onError) {
+  return {
+    async refresh() {
+      await client.listMembers(orgId);
+    },
+    async invite(email, role) {
+      try {
+        return await client.inviteMember(orgId, { email, role });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        onError(message);
+        throw error;
+      }
+    },
+    async removeMember(userId) {
+      try {
+        await client.removeMember(orgId, userId);
+      } catch (error) {
+        onError(error instanceof Error ? error.message : String(error));
+      }
+    },
+    async updateRole(userId, role) {
+      try {
+        await client.updateMemberRole(orgId, userId, role);
+      } catch (error) {
+        onError(error instanceof Error ? error.message : String(error));
+      }
+    }
+  };
+}
+async function loadOrgMembers(client, orgId) {
+  return client.listMembers(orgId);
+}
+
+// src/svelte/org-context.ts
+var orgContextKey = /* @__PURE__ */ Symbol("korajs-org-context");
+function initOrgProvider(client) {
+  const session = createOrgSession(client);
+  const value = { client, session };
+  (0, import_svelte2.setContext)(orgContextKey, value);
+  return value;
+}
+function getOrgContext() {
+  const context = (0, import_svelte2.getContext)(orgContextKey);
+  if (!context) {
+    throw new Error(
+      "Org context missing. Wrap your app with <OrgProvider client={orgClient}> from @korajs/auth/svelte."
+    );
+  }
+  return context;
+}
+function destroyOrgProvider(context) {
+  context.session.destroy();
+}
+
+// src/svelte/org-hooks.ts
+var import_store2 = require("svelte/store");
+function createOrgSnapshotStore() {
+  const { session } = getOrgContext();
+  return (0, import_store2.readable)(session.getSnapshot(), (set) => {
+    set(session.getSnapshot());
+    return session.subscribe(() => {
+      set(session.getSnapshot());
+    });
+  });
+}
+function useOrg() {
+  const { client, session } = getOrgContext();
+  const snapshotStore = createOrgSnapshotStore();
+  const error = (0, import_store2.writable)(null);
+  const store = (0, import_store2.derived)([snapshotStore, error], ([snapshot, errorValue]) => ({
+    ...snapshot,
+    error: errorValue
+  }));
+  const switchOrg = async (orgId) => {
+    error.set(null);
+    try {
+      await client.switchOrg(orgId);
+    } catch (err) {
+      error.set(err instanceof Error ? err.message : String(err));
+    }
+  };
+  const createOrg = async (params) => {
+    error.set(null);
+    try {
+      return await client.createOrg(params);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      error.set(message);
+      throw err;
+    }
+  };
+  const leaveOrg = async () => {
+    const orgId = (0, import_store2.get)(snapshotStore).orgId;
+    if (!orgId) return;
+    error.set(null);
+    try {
+      await client.leaveOrg(orgId);
+    } catch (err) {
+      error.set(err instanceof Error ? err.message : String(err));
+    }
+  };
+  const clearOrg = () => {
+    client.clearActiveOrg();
+  };
+  const listOrgs = async () => {
+    try {
+      return await client.listOrgs();
+    } catch (err) {
+      error.set(err instanceof Error ? err.message : String(err));
+      return [];
+    }
+  };
+  return {
+    subscribe: store.subscribe,
+    get org() {
+      return (0, import_store2.get)(snapshotStore).org;
+    },
+    get role() {
+      return (0, import_store2.get)(snapshotStore).role;
+    },
+    get orgId() {
+      return (0, import_store2.get)(snapshotStore).orgId;
+    },
+    switchOrg,
+    createOrg,
+    leaveOrg,
+    clearOrg,
+    listOrgs
+  };
+}
+function useOrgMembers(orgId) {
+  const { client } = getOrgContext();
+  const members = (0, import_store2.writable)([]);
+  const isLoading = (0, import_store2.writable)(true);
+  const error = (0, import_store2.writable)(null);
+  const refresh = async (targetOrgId) => {
+    isLoading.set(true);
+    error.set(null);
+    try {
+      members.set(await loadOrgMembers(client, targetOrgId));
+    } catch (err) {
+      error.set(err instanceof Error ? err.message : String(err));
+    } finally {
+      isLoading.set(false);
+    }
+  };
+  $effect(() => {
+    void refresh(orgId);
+  });
+  const actions = createOrgMembersActions(client, orgId, (message) => {
+    error.set(message);
+  });
+  const invite = async (email, role) => {
+    const result = await actions.invite(email, role);
+    await refresh(orgId);
+    return result;
+  };
+  const removeMember = async (userId) => {
+    await actions.removeMember(userId);
+    await refresh(orgId);
+  };
+  const updateRole = async (userId, role) => {
+    await actions.updateRole(userId, role);
+    await refresh(orgId);
+  };
+  const store = (0, import_store2.derived)([members, isLoading, error], ([memberList, loading, errorValue]) => ({
+    members: memberList,
+    isLoading: loading,
+    error: errorValue
+  }));
+  return {
+    subscribe: store.subscribe,
+    refresh: () => refresh(orgId),
+    invite,
+    removeMember,
+    updateRole
+  };
+}
+function createPermissionStore(requiredRole) {
+  const { session } = getOrgContext();
+  return (0, import_store2.readable)(session.checkPermission(requiredRole), (set) => {
+    set(session.checkPermission(requiredRole));
+    return session.subscribe(() => {
+      set(session.checkPermission(requiredRole));
+    });
+  });
+}
+var usePermission = createPermissionStore;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  checkOrgPermission,
+  createAuthStatusStore,
+  createAuthStore,
+  createCurrentUserStore,
+  createPermissionStore,
+  destroyAuthProvider,
+  destroyOrgProvider,
+  getAuthContext,
+  getOrgContext,
+  initAuthProvider,
+  initOrgProvider,
+  useAuth,
+  useAuthStatus,
+  useCurrentUser,
+  useOrg,
+  useOrgMembers,
+  usePermission
+});
+//# sourceMappingURL=svelte.cjs.map

package/dist/svelte.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/svelte.ts","../src/svelte/auth-context.ts","../src/bindings/create-auth-session.ts","../src/svelte/use-auth.ts","../src/svelte/org-context.ts","../src/bindings/create-org-session.ts","../src/svelte/org-hooks.ts"],"sourcesContent":["export {\n\tdestroyAuthProvider,\n\tgetAuthContext,\n\tinitAuthProvider,\n} from './svelte/auth-context'\nexport type { AuthContextValue } from './svelte/auth-context'\nexport {\n\tcreateAuthStore,\n\tcreateAuthStatusStore,\n\tcreateCurrentUserStore,\n\tuseAuth,\n\tuseAuthStatus,\n\tuseCurrentUser,\n} from './svelte/use-auth'\nexport type { UseAuthResult } from './svelte/use-auth'\nexport { destroyOrgProvider, getOrgContext, initOrgProvider } from './svelte/org-context'\nexport type { OrgContextValue } from './svelte/org-context'\nexport {\n\tcreatePermissionStore,\n\tuseOrg,\n\tuseOrgMembers,\n\tusePermission,\n\tcheckOrgPermission,\n} from './svelte/org-hooks'\nexport type { UseOrgResult, UseOrgMembersResult } from './svelte/org-hooks'\n","import { getContext, setContext } from 'svelte'\nimport { type AuthSession, createAuthSession } from '../bindings/create-auth-session'\nimport type { AuthClient, AuthState } from '../client/auth-client'\n\nconst authContextKey = Symbol('korajs-auth-context')\n\nexport interface AuthContextValue {\n\tclient: AuthClient\n\tsession: AuthSession\n\tget state(): AuthState\n\tget isLoading(): boolean\n}\n\n/**\n * Initialize auth context inside a Svelte component (root layout).\n * Must be called during component initialization before children render.\n */\nexport function initAuthProvider(client: AuthClient): AuthContextValue {\n\tconst session = createAuthSession(client)\n\n\tconst value: AuthContextValue = {\n\t\tclient,\n\t\tsession,\n\t\tget state() {\n\t\t\treturn session.getSnapshot().state\n\t\t},\n\t\tget isLoading() {\n\t\t\treturn session.getSnapshot().isLoading\n\t\t},\n\t}\n\n\tsetContext(authContextKey, value)\n\treturn value\n}\n\nexport function getAuthContext(): AuthContextValue {\n\tconst context = getContext<AuthContextValue | undefined>(authContextKey)\n\tif (!context) {\n\t\tthrow new Error(\n\t\t\t'Auth context missing. Call initAuthProvider(client) in your root layout component.',\n\t\t)\n\t}\n\treturn context\n}\n\nexport function destroyAuthProvider(context: AuthContextValue): void {\n\tcontext.session.destroy()\n}\n","import type {\n\tAuthClient,\n\tAuthState,\n\tAuthUser,\n\tLinkedOAuthAccount,\n\tOAuthAuthorizationOptions,\n\tOAuthAuthorizationResult,\n\tOAuthCallbackParams,\n} from '../client/auth-client'\n\nexport interface AuthSessionSnapshot {\n\tstate: AuthState\n\tuser: AuthUser | null\n\tisAuthenticated: boolean\n\tisLoading: boolean\n\tinitError: Error | null\n\terror: string | null\n}\n\nexport interface AuthSession {\n\treadonly client: AuthClient\n\tgetSnapshot(): AuthSessionSnapshot\n\tsubscribe(listener: () => void): () => void\n\tsignUp(params: {\n\t\temail: string\n\t\tpassword: string\n\t\tname?: string\n\t\tdeviceId?: string\n\t\tdevicePublicKey?: string\n\t}): Promise<void>\n\tsignIn(params: {\n\t\temail: string\n\t\tpassword: string\n\t\tdeviceId?: string\n\t\tdevicePublicKey?: string\n\t}): Promise<void>\n\tsignInWithOAuth(\n\t\tprovider: string,\n\t\toptions?: OAuthAuthorizationOptions,\n\t): Promise<OAuthAuthorizationResult>\n\tcompleteOAuthSignIn(provider: string, params: OAuthCallbackParams): Promise<void>\n\tgetOAuthAuthorizationUrl(\n\t\tprovider: string,\n\t\toptions?: OAuthAuthorizationOptions,\n\t): Promise<OAuthAuthorizationResult>\n\tlinkOAuth(provider: string, params: OAuthCallbackParams): Promise<LinkedOAuthAccount | null>\n\tlistLinkedAccounts(): Promise<LinkedOAuthAccount[]>\n\tunlinkOAuth(provider: string): Promise<void>\n\tsignOut(): Promise<void>\n\tdestroy(): void\n}\n\n/**\n * Framework-agnostic auth session: initialization, reactive snapshot, and client methods.\n */\nexport function createAuthSession(client: AuthClient): AuthSession {\n\tlet state: AuthState = client.state\n\tlet isLoading = true\n\tlet initError: Error | null = null\n\tlet lastError: string | null = null\n\n\tconst listeners = new Set<() => void>()\n\tlet snapshot = buildSnapshot()\n\n\tconst refreshSnapshot = (): void => {\n\t\tsnapshot = buildSnapshot()\n\t}\n\n\tconst notify = (): void => {\n\t\trefreshSnapshot()\n\t\tfor (const listener of listeners) {\n\t\t\tlistener()\n\t\t}\n\t}\n\n\tfunction buildSnapshot(): AuthSessionSnapshot {\n\t\treturn {\n\t\t\tstate,\n\t\t\tuser: client.currentUser,\n\t\t\tisAuthenticated: state === 'authenticated',\n\t\t\tisLoading,\n\t\t\tinitError,\n\t\t\terror: lastError,\n\t\t}\n\t}\n\n\tconst captureError = (error: unknown): void => {\n\t\tlastError = error instanceof Error ? error.message : String(error)\n\t\tnotify()\n\t}\n\n\tconst run = async (action: () => Promise<void>): Promise<void> => {\n\t\tlastError = null\n\t\ttry {\n\t\t\tawait action()\n\t\t} catch (error) {\n\t\t\tcaptureError(error)\n\t\t}\n\t}\n\n\tconst runWithResult = async <T>(action: () => Promise<T>): Promise<T | null> => {\n\t\tlastError = null\n\t\ttry {\n\t\t\treturn await action()\n\t\t} catch (error) {\n\t\t\tcaptureError(error)\n\t\t\treturn null\n\t\t}\n\t}\n\n\tconst unsubscribeAuth = client.onAuthChange((nextState) => {\n\t\tstate = nextState\n\t\tnotify()\n\t})\n\n\tvoid client\n\t\t.initialize()\n\t\t.then(() => {\n\t\t\tstate = client.state\n\t\t\tisLoading = false\n\t\t\tnotify()\n\t\t})\n\t\t.catch((error: unknown) => {\n\t\t\tinitError = error instanceof Error ? error : new Error(String(error))\n\t\t\tisLoading = false\n\t\t\tnotify()\n\t\t})\n\n\treturn {\n\t\tclient,\n\t\tgetSnapshot: () => snapshot,\n\t\tsubscribe(listener) {\n\t\t\tlisteners.add(listener)\n\t\t\treturn () => {\n\t\t\t\tlisteners.delete(listener)\n\t\t\t}\n\t\t},\n\t\tsignUp: (params) =>\n\t\t\trun(async () => {\n\t\t\t\tawait client.signUp(params)\n\t\t\t}),\n\t\tsignIn: (params) =>\n\t\t\trun(async () => {\n\t\t\t\tawait client.signIn(params)\n\t\t\t}),\n\t\tsignInWithOAuth: async (provider, options) => {\n\t\t\tlastError = null\n\t\t\ttry {\n\t\t\t\treturn await client.signInWithOAuth(provider, options)\n\t\t\t} catch (error) {\n\t\t\t\tcaptureError(error)\n\t\t\t\tthrow error instanceof Error ? error : new Error(String(error))\n\t\t\t}\n\t\t},\n\t\tcompleteOAuthSignIn: (provider, params) =>\n\t\t\trun(async () => {\n\t\t\t\tawait client.completeOAuthSignIn(provider, params)\n\t\t\t}),\n\t\tgetOAuthAuthorizationUrl: async (provider, options) => {\n\t\t\tlastError = null\n\t\t\ttry {\n\t\t\t\treturn await client.getOAuthAuthorizationUrl(provider, options)\n\t\t\t} catch (error) {\n\t\t\t\tcaptureError(error)\n\t\t\t\tthrow error instanceof Error ? error : new Error(String(error))\n\t\t\t}\n\t\t},\n\t\tlinkOAuth: (provider, params) => runWithResult(async () => client.linkOAuth(provider, params)),\n\t\tlistLinkedAccounts: () =>\n\t\t\trunWithResult(async () => client.listLinkedAccounts()).then((value) => value ?? []),\n\t\tunlinkOAuth: (provider) =>\n\t\t\trun(async () => {\n\t\t\t\tawait client.unlinkOAuth(provider)\n\t\t\t}),\n\t\tsignOut: () =>\n\t\t\trun(async () => {\n\t\t\t\tawait client.signOut()\n\t\t\t}),\n\t\tdestroy() {\n\t\t\tunsubscribeAuth()\n\t\t\tlisteners.clear()\n\t\t},\n\t}\n}\n","import { type Readable, readable } from 'svelte/store'\nimport type { AuthSessionSnapshot } from '../bindings/create-auth-session'\nimport type {\n\tAuthUser,\n\tLinkedOAuthAccount,\n\tOAuthAuthorizationOptions,\n\tOAuthAuthorizationResult,\n\tOAuthCallbackParams,\n} from '../client/auth-client'\nimport { getAuthContext } from './auth-context'\n\nexport interface UseAuthResult extends AuthSessionSnapshot {\n\tsignUp: (params: {\n\t\temail: string\n\t\tpassword: string\n\t\tname?: string\n\t\tdeviceId?: string\n\t\tdevicePublicKey?: string\n\t}) => Promise<void>\n\tsignIn: (params: {\n\t\temail: string\n\t\tpassword: string\n\t\tdeviceId?: string\n\t\tdevicePublicKey?: string\n\t}) => Promise<void>\n\tsignInWithOAuth: (\n\t\tprovider: string,\n\t\toptions?: OAuthAuthorizationOptions,\n\t) => Promise<OAuthAuthorizationResult>\n\tcompleteOAuthSignIn: (provider: string, params: OAuthCallbackParams) => Promise<void>\n\tgetOAuthAuthorizationUrl: (\n\t\tprovider: string,\n\t\toptions?: OAuthAuthorizationOptions,\n\t) => Promise<OAuthAuthorizationResult>\n\tlinkOAuth: (provider: string, params: OAuthCallbackParams) => Promise<LinkedOAuthAccount | null>\n\tlistLinkedAccounts: () => Promise<LinkedOAuthAccount[]>\n\tunlinkOAuth: (provider: string) => Promise<void>\n\tsignOut: () => Promise<void>\n}\n\nexport function createAuthStore(): Readable<UseAuthResult> {\n\tconst { session } = getAuthContext()\n\n\treturn readable<UseAuthResult>(buildResult(session), (set) => {\n\t\tconst sync = (): void => {\n\t\t\tset(buildResult(session))\n\t\t}\n\t\tsync()\n\t\treturn session.subscribe(sync)\n\t})\n}\n\n/** @alias createAuthStore */\nexport const useAuth = createAuthStore\n\nfunction buildResult(session: ReturnType<typeof getAuthContext>['session']): UseAuthResult {\n\tconst snapshot = session.getSnapshot()\n\treturn {\n\t\t...snapshot,\n\t\tsignUp: (params) => session.signUp(params),\n\t\tsignIn: (params) => session.signIn(params),\n\t\tsignInWithOAuth: (provider, options) => session.signInWithOAuth(provider, options),\n\t\tcompleteOAuthSignIn: (provider, params) => session.completeOAuthSignIn(provider, params),\n\t\tgetOAuthAuthorizationUrl: (provider, options) =>\n\t\t\tsession.getOAuthAuthorizationUrl(provider, options),\n\t\tlinkOAuth: (provider, params) => session.linkOAuth(provider, params),\n\t\tlistLinkedAccounts: () => session.listLinkedAccounts(),\n\t\tunlinkOAuth: (provider) => session.unlinkOAuth(provider),\n\t\tsignOut: () => session.signOut(),\n\t}\n}\n\nexport function createCurrentUserStore(): Readable<AuthUser | null> {\n\tconst { session } = getAuthContext()\n\treturn readable<AuthUser | null>(session.getSnapshot().user, (set) => {\n\t\tconst sync = (): void => {\n\t\t\tset(session.getSnapshot().user)\n\t\t}\n\t\tsync()\n\t\treturn session.subscribe(sync)\n\t})\n}\n\n/** @alias createCurrentUserStore */\nexport const useCurrentUser = createCurrentUserStore\n\nexport function createAuthStatusStore(): Readable<{\n\tstate: AuthSessionSnapshot['state']\n\tisAuthenticated: boolean\n\tisLoading: boolean\n}> {\n\tconst { session } = getAuthContext()\n\treturn readable(\n\t\t{\n\t\t\tstate: session.getSnapshot().state,\n\t\t\tisAuthenticated: session.getSnapshot().isAuthenticated,\n\t\t\tisLoading: session.getSnapshot().isLoading,\n\t\t},\n\t\t(set) => {\n\t\t\tconst sync = (): void => {\n\t\t\t\tconst snapshot = session.getSnapshot()\n\t\t\t\tset({\n\t\t\t\t\tstate: snapshot.state,\n\t\t\t\t\tisAuthenticated: snapshot.isAuthenticated,\n\t\t\t\t\tisLoading: snapshot.isLoading,\n\t\t\t\t})\n\t\t\t}\n\t\t\tsync()\n\t\t\treturn session.subscribe(sync)\n\t\t},\n\t)\n}\n\n/** @alias createAuthStatusStore */\nexport const useAuthStatus = createAuthStatusStore\n","import { getContext, setContext } from 'svelte'\nimport { type OrgSession, createOrgSession } from '../bindings/create-org-session'\nimport type { OrgClient } from '../client/org-client'\n\nconst orgContextKey = Symbol('korajs-org-context')\n\nexport interface OrgContextValue {\n\tclient: OrgClient\n\tsession: OrgSession\n}\n\nexport function initOrgProvider(client: OrgClient): OrgContextValue {\n\tconst session = createOrgSession(client)\n\tconst value: OrgContextValue = { client, session }\n\tsetContext(orgContextKey, value)\n\treturn value\n}\n\nexport function getOrgContext(): OrgContextValue {\n\tconst context = getContext<OrgContextValue | undefined>(orgContextKey)\n\tif (!context) {\n\t\tthrow new Error(\n\t\t\t'Org context missing. Wrap your app with <OrgProvider client={orgClient}> from @korajs/auth/svelte.',\n\t\t)\n\t}\n\treturn context\n}\n\nexport function destroyOrgProvider(context: OrgContextValue): void {\n\tcontext.session.destroy()\n}\n","import type {\n\tClientInvitation,\n\tClientMembership,\n\tClientOrganization,\n\tOrgClient,\n} from '../client/org-client'\n\nexport interface OrgSnapshot {\n\torgId: string | null\n\torg: ClientOrganization | null\n\trole: string | null\n}\n\nexport interface OrgSession {\n\treadonly client: OrgClient\n\tgetSnapshot(): OrgSnapshot\n\tsubscribe(listener: () => void): () => void\n\tcheckPermission(requiredRole: string): boolean\n\tdestroy(): void\n}\n\nconst ROLE_LEVELS: Record<string, number> = {\n\tviewer: 10,\n\tbilling: 15,\n\tmember: 20,\n\tadmin: 30,\n\towner: 40,\n}\n\nexport function checkOrgPermission(currentRole: string | null, requiredRole: string): boolean {\n\tif (!currentRole) return false\n\tconst currentLevel = ROLE_LEVELS[currentRole] ?? 0\n\tconst requiredLevel = ROLE_LEVELS[requiredRole] ?? 0\n\treturn currentLevel >= requiredLevel\n}\n\n/**\n * Framework-agnostic org session with reactive snapshot subscription.\n */\nexport function createOrgSession(client: OrgClient): OrgSession {\n\tlet snapshot = buildSnapshot(client)\n\tconst listeners = new Set<() => void>()\n\n\tconst notify = (): void => {\n\t\tsnapshot = buildSnapshot(client)\n\t\tfor (const listener of listeners) {\n\t\t\tlistener()\n\t\t}\n\t}\n\n\tconst unsubscribeOrgChange = client.onOrgChange(notify)\n\n\treturn {\n\t\tclient,\n\t\tgetSnapshot: () => snapshot,\n\t\tsubscribe(listener: () => void): () => void {\n\t\t\tlisteners.add(listener)\n\t\t\treturn () => {\n\t\t\t\tlisteners.delete(listener)\n\t\t\t}\n\t\t},\n\t\tcheckPermission(requiredRole: string): boolean {\n\t\t\treturn checkOrgPermission(snapshot.role, requiredRole)\n\t\t},\n\t\tdestroy(): void {\n\t\t\tunsubscribeOrgChange()\n\t\t\tlisteners.clear()\n\t\t},\n\t}\n}\n\nfunction buildSnapshot(client: OrgClient): OrgSnapshot {\n\treturn {\n\t\torgId: client.activeOrgId,\n\t\torg: client.activeOrg,\n\t\trole: client.activeRole,\n\t}\n}\n\nexport interface UseOrgMembersActions {\n\trefresh: () => Promise<void>\n\tinvite: (email: string, role: string) => Promise<ClientInvitation>\n\tremoveMember: (userId: string) => Promise<void>\n\tupdateRole: (userId: string, role: string) => Promise<void>\n}\n\n/**\n * Shared org member management actions (loading state remains framework-specific).\n */\nexport function createOrgMembersActions(\n\tclient: OrgClient,\n\torgId: string,\n\tonError: (message: string) => void,\n): UseOrgMembersActions {\n\treturn {\n\t\tasync refresh(): Promise<void> {\n\t\t\tawait client.listMembers(orgId)\n\t\t},\n\t\tasync invite(email: string, role: string): Promise<ClientInvitation> {\n\t\t\ttry {\n\t\t\t\treturn await client.inviteMember(orgId, { email, role })\n\t\t\t} catch (error) {\n\t\t\t\tconst message = error instanceof Error ? error.message : String(error)\n\t\t\t\tonError(message)\n\t\t\t\tthrow error\n\t\t\t}\n\t\t},\n\t\tasync removeMember(userId: string): Promise<void> {\n\t\t\ttry {\n\t\t\t\tawait client.removeMember(orgId, userId)\n\t\t\t} catch (error) {\n\t\t\t\tonError(error instanceof Error ? error.message : String(error))\n\t\t\t}\n\t\t},\n\t\tasync updateRole(userId: string, role: string): Promise<void> {\n\t\t\ttry {\n\t\t\t\tawait client.updateMemberRole(orgId, userId, role)\n\t\t\t} catch (error) {\n\t\t\t\tonError(error instanceof Error ? error.message : String(error))\n\t\t\t}\n\t\t},\n\t}\n}\n\nexport async function loadOrgMembers(\n\tclient: OrgClient,\n\torgId: string,\n): Promise<ClientMembership[]> {\n\treturn client.listMembers(orgId)\n}\n","import { type Readable, derived, get, readable, writable } from 'svelte/store'\nimport {\n\tcheckOrgPermission,\n\tcreateOrgMembersActions,\n\tloadOrgMembers,\n} from '../bindings/create-org-session'\nimport type { ClientInvitation, ClientMembership, ClientOrganization } from '../client/org-client'\nimport { getOrgContext } from './org-context'\n\nexport interface UseOrgResult {\n\tsubscribe: Readable<{\n\t\torg: ClientOrganization | null\n\t\trole: string | null\n\t\torgId: string | null\n\t\terror: string | null\n\t}>['subscribe']\n\tget org(): ClientOrganization | null\n\tget role(): string | null\n\tget orgId(): string | null\n\tswitchOrg: (orgId: string) => Promise<void>\n\tcreateOrg: (params: { name: string; slug?: string }) => Promise<ClientOrganization>\n\tleaveOrg: () => Promise<void>\n\tclearOrg: () => void\n\tlistOrgs: () => Promise<ClientOrganization[]>\n}\n\nexport interface UseOrgMembersResult {\n\tsubscribe: Readable<{\n\t\tmembers: ClientMembership[]\n\t\tisLoading: boolean\n\t\terror: string | null\n\t}>['subscribe']\n\trefresh: () => Promise<void>\n\tinvite: (email: string, role: string) => Promise<ClientInvitation>\n\tremoveMember: (userId: string) => Promise<void>\n\tupdateRole: (userId: string, role: string) => Promise<void>\n}\n\nfunction createOrgSnapshotStore(): Readable<{\n\torg: ClientOrganization | null\n\trole: string | null\n\torgId: string | null\n}> {\n\tconst { session } = getOrgContext()\n\n\treturn readable(session.getSnapshot(), (set) => {\n\t\tset(session.getSnapshot())\n\t\treturn session.subscribe(() => {\n\t\t\tset(session.getSnapshot())\n\t\t})\n\t})\n}\n\nexport function useOrg(): UseOrgResult {\n\tconst { client, session } = getOrgContext()\n\tconst snapshotStore = createOrgSnapshotStore()\n\tconst error = writable<string | null>(null)\n\n\tconst store = derived([snapshotStore, error], ([snapshot, errorValue]) => ({\n\t\t...snapshot,\n\t\terror: errorValue,\n\t}))\n\n\tconst switchOrg = async (orgId: string): Promise<void> => {\n\t\terror.set(null)\n\t\ttry {\n\t\t\tawait client.switchOrg(orgId)\n\t\t} catch (err) {\n\t\t\terror.set(err instanceof Error ? err.message : String(err))\n\t\t}\n\t}\n\n\tconst createOrg = async (params: {\n\t\tname: string\n\t\tslug?: string\n\t}): Promise<ClientOrganization> => {\n\t\terror.set(null)\n\t\ttry {\n\t\t\treturn await client.createOrg(params)\n\t\t} catch (err) {\n\t\t\tconst message = err instanceof Error ? err.message : String(err)\n\t\t\terror.set(message)\n\t\t\tthrow err\n\t\t}\n\t}\n\n\tconst leaveOrg = async (): Promise<void> => {\n\t\tconst orgId = get(snapshotStore).orgId\n\t\tif (!orgId) return\n\t\terror.set(null)\n\t\ttry {\n\t\t\tawait client.leaveOrg(orgId)\n\t\t} catch (err) {\n\t\t\terror.set(err instanceof Error ? err.message : String(err))\n\t\t}\n\t}\n\n\tconst clearOrg = (): void => {\n\t\tclient.clearActiveOrg()\n\t}\n\n\tconst listOrgs = async (): Promise<ClientOrganization[]> => {\n\t\ttry {\n\t\t\treturn await client.listOrgs()\n\t\t} catch (err) {\n\t\t\terror.set(err instanceof Error ? err.message : String(err))\n\t\t\treturn []\n\t\t}\n\t}\n\n\treturn {\n\t\tsubscribe: store.subscribe,\n\t\tget org() {\n\t\t\treturn get(snapshotStore).org\n\t\t},\n\t\tget role() {\n\t\t\treturn get(snapshotStore).role\n\t\t},\n\t\tget orgId() {\n\t\t\treturn get(snapshotStore).orgId\n\t\t},\n\t\tswitchOrg,\n\t\tcreateOrg,\n\t\tleaveOrg,\n\t\tclearOrg,\n\t\tlistOrgs,\n\t}\n}\n\nexport function useOrgMembers(orgId: string): UseOrgMembersResult {\n\tconst { client } = getOrgContext()\n\tconst members = writable<ClientMembership[]>([])\n\tconst isLoading = writable(true)\n\tconst error = writable<string | null>(null)\n\n\tconst refresh = async (targetOrgId: string): Promise<void> => {\n\t\tisLoading.set(true)\n\t\terror.set(null)\n\t\ttry {\n\t\t\tmembers.set(await loadOrgMembers(client, targetOrgId))\n\t\t} catch (err) {\n\t\t\terror.set(err instanceof Error ? err.message : String(err))\n\t\t} finally {\n\t\t\tisLoading.set(false)\n\t\t}\n\t}\n\n\t$effect(() => {\n\t\tvoid refresh(orgId)\n\t})\n\n\tconst actions = createOrgMembersActions(client, orgId, (message) => {\n\t\terror.set(message)\n\t})\n\n\tconst invite = async (email: string, role: string): Promise<ClientInvitation> => {\n\t\tconst result = await actions.invite(email, role)\n\t\tawait refresh(orgId)\n\t\treturn result\n\t}\n\n\tconst removeMember = async (userId: string): Promise<void> => {\n\t\tawait actions.removeMember(userId)\n\t\tawait refresh(orgId)\n\t}\n\n\tconst updateRole = async (userId: string, role: string): Promise<void> => {\n\t\tawait actions.updateRole(userId, role)\n\t\tawait refresh(orgId)\n\t}\n\n\tconst store = derived([members, isLoading, error], ([memberList, loading, errorValue]) => ({\n\t\tmembers: memberList,\n\t\tisLoading: loading,\n\t\terror: errorValue,\n\t}))\n\n\treturn {\n\t\tsubscribe: store.subscribe,\n\t\trefresh: () => refresh(orgId),\n\t\tinvite,\n\t\tremoveMember,\n\t\tupdateRole,\n\t}\n}\n\nexport function createPermissionStore(requiredRole: string): Readable<boolean> {\n\tconst { session } = getOrgContext()\n\n\treturn readable(session.checkPermission(requiredRole), (set) => {\n\t\tset(session.checkPermission(requiredRole))\n\t\treturn session.subscribe(() => {\n\t\t\tset(session.checkPermission(requiredRole))\n\t\t})\n\t})\n}\n\n/** Alias for {@link createPermissionStore}. */\nexport const usePermission = createPermissionStore\n\nexport { checkOrgPermission }\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,oBAAuC;;;ACuDhC,SAAS,kBAAkB,QAAiC;AAClE,MAAI,QAAmB,OAAO;AAC9B,MAAI,YAAY;AAChB,MAAI,YAA0B;AAC9B,MAAI,YAA2B;AAE/B,QAAM,YAAY,oBAAI,IAAgB;AACtC,MAAI,WAAWA,eAAc;AAE7B,QAAM,kBAAkB,MAAY;AACnC,eAAWA,eAAc;AAAA,EAC1B;AAEA,QAAM,SAAS,MAAY;AAC1B,oBAAgB;AAChB,eAAW,YAAY,WAAW;AACjC,eAAS;AAAA,IACV;AAAA,EACD;AAEA,WAASA,iBAAqC;AAC7C,WAAO;AAAA,MACN;AAAA,MACA,MAAM,OAAO;AAAA,MACb,iBAAiB,UAAU;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACR;AAAA,EACD;AAEA,QAAM,eAAe,CAAC,UAAyB;AAC9C,gBAAY,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,WAAO;AAAA,EACR;AAEA,QAAM,MAAM,OAAO,WAA+C;AACjE,gBAAY;AACZ,QAAI;AACH,YAAM,OAAO;AAAA,IACd,SAAS,OAAO;AACf,mBAAa,KAAK;AAAA,IACnB;AAAA,EACD;AAEA,QAAM,gBAAgB,OAAU,WAAgD;AAC/E,gBAAY;AACZ,QAAI;AACH,aAAO,MAAM,OAAO;AAAA,IACrB,SAAS,OAAO;AACf,mBAAa,KAAK;AAClB,aAAO;AAAA,IACR;AAAA,EACD;AAEA,QAAM,kBAAkB,OAAO,aAAa,CAAC,cAAc;AAC1D,YAAQ;AACR,WAAO;AAAA,EACR,CAAC;AAED,OAAK,OACH,WAAW,EACX,KAAK,MAAM;AACX,YAAQ,OAAO;AACf,gBAAY;AACZ,WAAO;AAAA,EACR,CAAC,EACA,MAAM,CAAC,UAAmB;AAC1B,gBAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACpE,gBAAY;AACZ,WAAO;AAAA,EACR,CAAC;AAEF,SAAO;AAAA,IACN;AAAA,IACA,aAAa,MAAM;AAAA,IACnB,UAAU,UAAU;AACnB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACZ,kBAAU,OAAO,QAAQ;AAAA,MAC1B;AAAA,IACD;AAAA,IACA,QAAQ,CAAC,WACR,IAAI,YAAY;AACf,YAAM,OAAO,OAAO,MAAM;AAAA,IAC3B,CAAC;AAAA,IACF,QAAQ,CAAC,WACR,IAAI,YAAY;AACf,YAAM,OAAO,OAAO,MAAM;AAAA,IAC3B,CAAC;AAAA,IACF,iBAAiB,OAAO,UAAU,YAAY;AAC7C,kBAAY;AACZ,UAAI;AACH,eAAO,MAAM,OAAO,gBAAgB,UAAU,OAAO;AAAA,MACtD,SAAS,OAAO;AACf,qBAAa,KAAK;AAClB,cAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,MAC/D;AAAA,IACD;AAAA,IACA,qBAAqB,CAAC,UAAU,WAC/B,IAAI,YAAY;AACf,YAAM,OAAO,oBAAoB,UAAU,MAAM;AAAA,IAClD,CAAC;AAAA,IACF,0BAA0B,OAAO,UAAU,YAAY;AACtD,kBAAY;AACZ,UAAI;AACH,eAAO,MAAM,OAAO,yBAAyB,UAAU,OAAO;AAAA,MAC/D,SAAS,OAAO;AACf,qBAAa,KAAK;AAClB,cAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,MAC/D;AAAA,IACD;AAAA,IACA,WAAW,CAAC,UAAU,WAAW,cAAc,YAAY,OAAO,UAAU,UAAU,MAAM,CAAC;AAAA,IAC7F,oBAAoB,MACnB,cAAc,YAAY,OAAO,mBAAmB,CAAC,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC,CAAC;AAAA,IACnF,aAAa,CAAC,aACb,IAAI,YAAY;AACf,YAAM,OAAO,YAAY,QAAQ;AAAA,IAClC,CAAC;AAAA,IACF,SAAS,MACR,IAAI,YAAY;AACf,YAAM,OAAO,QAAQ;AAAA,IACtB,CAAC;AAAA,IACF,UAAU;AACT,sBAAgB;AAChB,gBAAU,MAAM;AAAA,IACjB;AAAA,EACD;AACD;;;ADnLA,IAAM,iBAAiB,uBAAO,qBAAqB;AAa5C,SAAS,iBAAiB,QAAsC;AACtE,QAAM,UAAU,kBAAkB,MAAM;AAExC,QAAM,QAA0B;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,IAAI,QAAQ;AACX,aAAO,QAAQ,YAAY,EAAE;AAAA,IAC9B;AAAA,IACA,IAAI,YAAY;AACf,aAAO,QAAQ,YAAY,EAAE;AAAA,IAC9B;AAAA,EACD;AAEA,gCAAW,gBAAgB,KAAK;AAChC,SAAO;AACR;AAEO,SAAS,iBAAmC;AAClD,QAAM,cAAU,0BAAyC,cAAc;AACvE,MAAI,CAAC,SAAS;AACb,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,SAAO;AACR;AAEO,SAAS,oBAAoB,SAAiC;AACpE,UAAQ,QAAQ,QAAQ;AACzB;;;AE/CA,mBAAwC;AAwCjC,SAAS,kBAA2C;AAC1D,QAAM,EAAE,QAAQ,IAAI,eAAe;AAEnC,aAAO,uBAAwB,YAAY,OAAO,GAAG,CAAC,QAAQ;AAC7D,UAAM,OAAO,MAAY;AACxB,UAAI,YAAY,OAAO,CAAC;AAAA,IACzB;AACA,SAAK;AACL,WAAO,QAAQ,UAAU,IAAI;AAAA,EAC9B,CAAC;AACF;AAGO,IAAM,UAAU;AAEvB,SAAS,YAAY,SAAsE;AAC1F,QAAM,WAAW,QAAQ,YAAY;AACrC,SAAO;AAAA,IACN,GAAG;AAAA,IACH,QAAQ,CAAC,WAAW,QAAQ,OAAO,MAAM;AAAA,IACzC,QAAQ,CAAC,WAAW,QAAQ,OAAO,MAAM;AAAA,IACzC,iBAAiB,CAAC,UAAU,YAAY,QAAQ,gBAAgB,UAAU,OAAO;AAAA,IACjF,qBAAqB,CAAC,UAAU,WAAW,QAAQ,oBAAoB,UAAU,MAAM;AAAA,IACvF,0BAA0B,CAAC,UAAU,YACpC,QAAQ,yBAAyB,UAAU,OAAO;AAAA,IACnD,WAAW,CAAC,UAAU,WAAW,QAAQ,UAAU,UAAU,MAAM;AAAA,IACnE,oBAAoB,MAAM,QAAQ,mBAAmB;AAAA,IACrD,aAAa,CAAC,aAAa,QAAQ,YAAY,QAAQ;AAAA,IACvD,SAAS,MAAM,QAAQ,QAAQ;AAAA,EAChC;AACD;AAEO,SAAS,yBAAoD;AACnE,QAAM,EAAE,QAAQ,IAAI,eAAe;AACnC,aAAO,uBAA0B,QAAQ,YAAY,EAAE,MAAM,CAAC,QAAQ;AACrE,UAAM,OAAO,MAAY;AACxB,UAAI,QAAQ,YAAY,EAAE,IAAI;AAAA,IAC/B;AACA,SAAK;AACL,WAAO,QAAQ,UAAU,IAAI;AAAA,EAC9B,CAAC;AACF;AAGO,IAAM,iBAAiB;AAEvB,SAAS,wBAIb;AACF,QAAM,EAAE,QAAQ,IAAI,eAAe;AACnC,aAAO;AAAA,IACN;AAAA,MACC,OAAO,QAAQ,YAAY,EAAE;AAAA,MAC7B,iBAAiB,QAAQ,YAAY,EAAE;AAAA,MACvC,WAAW,QAAQ,YAAY,EAAE;AAAA,IAClC;AAAA,IACA,CAAC,QAAQ;AACR,YAAM,OAAO,MAAY;AACxB,cAAM,WAAW,QAAQ,YAAY;AACrC,YAAI;AAAA,UACH,OAAO,SAAS;AAAA,UAChB,iBAAiB,SAAS;AAAA,UAC1B,WAAW,SAAS;AAAA,QACrB,CAAC;AAAA,MACF;AACA,WAAK;AACL,aAAO,QAAQ,UAAU,IAAI;AAAA,IAC9B;AAAA,EACD;AACD;AAGO,IAAM,gBAAgB;;;AClH7B,IAAAC,iBAAuC;;;ACqBvC,IAAM,cAAsC;AAAA,EAC3C,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,OAAO;AACR;AAEO,SAAS,mBAAmB,aAA4B,cAA+B;AAC7F,MAAI,CAAC,YAAa,QAAO;AACzB,QAAM,eAAe,YAAY,WAAW,KAAK;AACjD,QAAM,gBAAgB,YAAY,YAAY,KAAK;AACnD,SAAO,gBAAgB;AACxB;AAKO,SAAS,iBAAiB,QAA+B;AAC/D,MAAI,WAAW,cAAc,MAAM;AACnC,QAAM,YAAY,oBAAI,IAAgB;AAEtC,QAAM,SAAS,MAAY;AAC1B,eAAW,cAAc,MAAM;AAC/B,eAAW,YAAY,WAAW;AACjC,eAAS;AAAA,IACV;AAAA,EACD;AAEA,QAAM,uBAAuB,OAAO,YAAY,MAAM;AAEtD,SAAO;AAAA,IACN;AAAA,IACA,aAAa,MAAM;AAAA,IACnB,UAAU,UAAkC;AAC3C,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACZ,kBAAU,OAAO,QAAQ;AAAA,MAC1B;AAAA,IACD;AAAA,IACA,gBAAgB,cAA+B;AAC9C,aAAO,mBAAmB,SAAS,MAAM,YAAY;AAAA,IACtD;AAAA,IACA,UAAgB;AACf,2BAAqB;AACrB,gBAAU,MAAM;AAAA,IACjB;AAAA,EACD;AACD;AAEA,SAAS,cAAc,QAAgC;AACtD,SAAO;AAAA,IACN,OAAO,OAAO;AAAA,IACd,KAAK,OAAO;AAAA,IACZ,MAAM,OAAO;AAAA,EACd;AACD;AAYO,SAAS,wBACf,QACA,OACA,SACuB;AACvB,SAAO;AAAA,IACN,MAAM,UAAyB;AAC9B,YAAM,OAAO,YAAY,KAAK;AAAA,IAC/B;AAAA,IACA,MAAM,OAAO,OAAe,MAAyC;AACpE,UAAI;AACH,eAAO,MAAM,OAAO,aAAa,OAAO,EAAE,OAAO,KAAK,CAAC;AAAA,MACxD,SAAS,OAAO;AACf,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,gBAAQ,OAAO;AACf,cAAM;AAAA,MACP;AAAA,IACD;AAAA,IACA,MAAM,aAAa,QAA+B;AACjD,UAAI;AACH,cAAM,OAAO,aAAa,OAAO,MAAM;AAAA,MACxC,SAAS,OAAO;AACf,gBAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC/D;AAAA,IACD;AAAA,IACA,MAAM,WAAW,QAAgB,MAA6B;AAC7D,UAAI;AACH,cAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI;AAAA,MAClD,SAAS,OAAO;AACf,gBAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC/D;AAAA,IACD;AAAA,EACD;AACD;AAEA,eAAsB,eACrB,QACA,OAC8B;AAC9B,SAAO,OAAO,YAAY,KAAK;AAChC;;;AD7HA,IAAM,gBAAgB,uBAAO,oBAAoB;AAO1C,SAAS,gBAAgB,QAAoC;AACnE,QAAM,UAAU,iBAAiB,MAAM;AACvC,QAAM,QAAyB,EAAE,QAAQ,QAAQ;AACjD,iCAAW,eAAe,KAAK;AAC/B,SAAO;AACR;AAEO,SAAS,gBAAiC;AAChD,QAAM,cAAU,2BAAwC,aAAa;AACrE,MAAI,CAAC,SAAS;AACb,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,SAAO;AACR;AAEO,SAAS,mBAAmB,SAAgC;AAClE,UAAQ,QAAQ,QAAQ;AACzB;;;AE9BA,IAAAC,gBAAgE;AAsChE,SAAS,yBAIN;AACF,QAAM,EAAE,QAAQ,IAAI,cAAc;AAElC,aAAO,wBAAS,QAAQ,YAAY,GAAG,CAAC,QAAQ;AAC/C,QAAI,QAAQ,YAAY,CAAC;AACzB,WAAO,QAAQ,UAAU,MAAM;AAC9B,UAAI,QAAQ,YAAY,CAAC;AAAA,IAC1B,CAAC;AAAA,EACF,CAAC;AACF;AAEO,SAAS,SAAuB;AACtC,QAAM,EAAE,QAAQ,QAAQ,IAAI,cAAc;AAC1C,QAAM,gBAAgB,uBAAuB;AAC7C,QAAM,YAAQ,wBAAwB,IAAI;AAE1C,QAAM,YAAQ,uBAAQ,CAAC,eAAe,KAAK,GAAG,CAAC,CAAC,UAAU,UAAU,OAAO;AAAA,IAC1E,GAAG;AAAA,IACH,OAAO;AAAA,EACR,EAAE;AAEF,QAAM,YAAY,OAAO,UAAiC;AACzD,UAAM,IAAI,IAAI;AACd,QAAI;AACH,YAAM,OAAO,UAAU,KAAK;AAAA,IAC7B,SAAS,KAAK;AACb,YAAM,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC3D;AAAA,EACD;AAEA,QAAM,YAAY,OAAO,WAGU;AAClC,UAAM,IAAI,IAAI;AACd,QAAI;AACH,aAAO,MAAM,OAAO,UAAU,MAAM;AAAA,IACrC,SAAS,KAAK;AACb,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAM,IAAI,OAAO;AACjB,YAAM;AAAA,IACP;AAAA,EACD;AAEA,QAAM,WAAW,YAA2B;AAC3C,UAAM,YAAQ,mBAAI,aAAa,EAAE;AACjC,QAAI,CAAC,MAAO;AACZ,UAAM,IAAI,IAAI;AACd,QAAI;AACH,YAAM,OAAO,SAAS,KAAK;AAAA,IAC5B,SAAS,KAAK;AACb,YAAM,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC3D;AAAA,EACD;AAEA,QAAM,WAAW,MAAY;AAC5B,WAAO,eAAe;AAAA,EACvB;AAEA,QAAM,WAAW,YAA2C;AAC3D,QAAI;AACH,aAAO,MAAM,OAAO,SAAS;AAAA,IAC9B,SAAS,KAAK;AACb,YAAM,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAC1D,aAAO,CAAC;AAAA,IACT;AAAA,EACD;AAEA,SAAO;AAAA,IACN,WAAW,MAAM;AAAA,IACjB,IAAI,MAAM;AACT,iBAAO,mBAAI,aAAa,EAAE;AAAA,IAC3B;AAAA,IACA,IAAI,OAAO;AACV,iBAAO,mBAAI,aAAa,EAAE;AAAA,IAC3B;AAAA,IACA,IAAI,QAAQ;AACX,iBAAO,mBAAI,aAAa,EAAE;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAEO,SAAS,cAAc,OAAoC;AACjE,QAAM,EAAE,OAAO,IAAI,cAAc;AACjC,QAAM,cAAU,wBAA6B,CAAC,CAAC;AAC/C,QAAM,gBAAY,wBAAS,IAAI;AAC/B,QAAM,YAAQ,wBAAwB,IAAI;AAE1C,QAAM,UAAU,OAAO,gBAAuC;AAC7D,cAAU,IAAI,IAAI;AAClB,UAAM,IAAI,IAAI;AACd,QAAI;AACH,cAAQ,IAAI,MAAM,eAAe,QAAQ,WAAW,CAAC;AAAA,IACtD,SAAS,KAAK;AACb,YAAM,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC3D,UAAE;AACD,gBAAU,IAAI,KAAK;AAAA,IACpB;AAAA,EACD;AAEA,UAAQ,MAAM;AACb,SAAK,QAAQ,KAAK;AAAA,EACnB,CAAC;AAED,QAAM,UAAU,wBAAwB,QAAQ,OAAO,CAAC,YAAY;AACnE,UAAM,IAAI,OAAO;AAAA,EAClB,CAAC;AAED,QAAM,SAAS,OAAO,OAAe,SAA4C;AAChF,UAAM,SAAS,MAAM,QAAQ,OAAO,OAAO,IAAI;AAC/C,UAAM,QAAQ,KAAK;AACnB,WAAO;AAAA,EACR;AAEA,QAAM,eAAe,OAAO,WAAkC;AAC7D,UAAM,QAAQ,aAAa,MAAM;AACjC,UAAM,QAAQ,KAAK;AAAA,EACpB;AAEA,QAAM,aAAa,OAAO,QAAgB,SAAgC;AACzE,UAAM,QAAQ,WAAW,QAAQ,IAAI;AACrC,UAAM,QAAQ,KAAK;AAAA,EACpB;AAEA,QAAM,YAAQ,uBAAQ,CAAC,SAAS,WAAW,KAAK,GAAG,CAAC,CAAC,YAAY,SAAS,UAAU,OAAO;AAAA,IAC1F,SAAS;AAAA,IACT,WAAW;AAAA,IACX,OAAO;AAAA,EACR,EAAE;AAEF,SAAO;AAAA,IACN,WAAW,MAAM;AAAA,IACjB,SAAS,MAAM,QAAQ,KAAK;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAEO,SAAS,sBAAsB,cAAyC;AAC9E,QAAM,EAAE,QAAQ,IAAI,cAAc;AAElC,aAAO,wBAAS,QAAQ,gBAAgB,YAAY,GAAG,CAAC,QAAQ;AAC/D,QAAI,QAAQ,gBAAgB,YAAY,CAAC;AACzC,WAAO,QAAQ,UAAU,MAAM;AAC9B,UAAI,QAAQ,gBAAgB,YAAY,CAAC;AAAA,IAC1C,CAAC;AAAA,EACF,CAAC;AACF;AAGO,IAAM,gBAAgB;","names":["buildSnapshot","import_svelte","import_store"]}

package/dist/svelte.d.cts

@@ -0,0 +1,100 @@
+import { d as AuthClient, i as AuthSession, e as AuthState, j as AuthSessionSnapshot, O as OAuthAuthorizationOptions, q as OAuthAuthorizationResult, r as OAuthCallbackParams, L as LinkedOAuthAccount, l as AuthUser, s as OrgClient, v as OrgSession, m as ClientMembership, C as ClientInvitation, n as ClientOrganization } from './create-org-session-RsDj9cl4.cjs';
+export { x as checkOrgPermission } from './create-org-session-RsDj9cl4.cjs';
+import { Readable } from 'svelte/store';
+import '@korajs/core';
+
+interface AuthContextValue {
+    client: AuthClient;
+    session: AuthSession;
+    get state(): AuthState;
+    get isLoading(): boolean;
+}
+/**
+ * Initialize auth context inside a Svelte component (root layout).
+ * Must be called during component initialization before children render.
+ */
+declare function initAuthProvider(client: AuthClient): AuthContextValue;
+declare function getAuthContext(): AuthContextValue;
+declare function destroyAuthProvider(context: AuthContextValue): void;
+
+interface UseAuthResult extends AuthSessionSnapshot {
+    signUp: (params: {
+        email: string;
+        password: string;
+        name?: string;
+        deviceId?: string;
+        devicePublicKey?: string;
+    }) => Promise<void>;
+    signIn: (params: {
+        email: string;
+        password: string;
+        deviceId?: string;
+        devicePublicKey?: string;
+    }) => Promise<void>;
+    signInWithOAuth: (provider: string, options?: OAuthAuthorizationOptions) => Promise<OAuthAuthorizationResult>;
+    completeOAuthSignIn: (provider: string, params: OAuthCallbackParams) => Promise<void>;
+    getOAuthAuthorizationUrl: (provider: string, options?: OAuthAuthorizationOptions) => Promise<OAuthAuthorizationResult>;
+    linkOAuth: (provider: string, params: OAuthCallbackParams) => Promise<LinkedOAuthAccount | null>;
+    listLinkedAccounts: () => Promise<LinkedOAuthAccount[]>;
+    unlinkOAuth: (provider: string) => Promise<void>;
+    signOut: () => Promise<void>;
+}
+declare function createAuthStore(): Readable<UseAuthResult>;
+/** @alias createAuthStore */
+declare const useAuth: typeof createAuthStore;
+declare function createCurrentUserStore(): Readable<AuthUser | null>;
+/** @alias createCurrentUserStore */
+declare const useCurrentUser: typeof createCurrentUserStore;
+declare function createAuthStatusStore(): Readable<{
+    state: AuthSessionSnapshot['state'];
+    isAuthenticated: boolean;
+    isLoading: boolean;
+}>;
+/** @alias createAuthStatusStore */
+declare const useAuthStatus: typeof createAuthStatusStore;
+
+interface OrgContextValue {
+    client: OrgClient;
+    session: OrgSession;
+}
+declare function initOrgProvider(client: OrgClient): OrgContextValue;
+declare function getOrgContext(): OrgContextValue;
+declare function destroyOrgProvider(context: OrgContextValue): void;
+
+interface UseOrgResult {
+    subscribe: Readable<{
+        org: ClientOrganization | null;
+        role: string | null;
+        orgId: string | null;
+        error: string | null;
+    }>['subscribe'];
+    get org(): ClientOrganization | null;
+    get role(): string | null;
+    get orgId(): string | null;
+    switchOrg: (orgId: string) => Promise<void>;
+    createOrg: (params: {
+        name: string;
+        slug?: string;
+    }) => Promise<ClientOrganization>;
+    leaveOrg: () => Promise<void>;
+    clearOrg: () => void;
+    listOrgs: () => Promise<ClientOrganization[]>;
+}
+interface UseOrgMembersResult {
+    subscribe: Readable<{
+        members: ClientMembership[];
+        isLoading: boolean;
+        error: string | null;
+    }>['subscribe'];
+    refresh: () => Promise<void>;
+    invite: (email: string, role: string) => Promise<ClientInvitation>;
+    removeMember: (userId: string) => Promise<void>;
+    updateRole: (userId: string, role: string) => Promise<void>;
+}
+declare function useOrg(): UseOrgResult;
+declare function useOrgMembers(orgId: string): UseOrgMembersResult;
+declare function createPermissionStore(requiredRole: string): Readable<boolean>;
+/** Alias for {@link createPermissionStore}. */
+declare const usePermission: typeof createPermissionStore;
+
+export { type AuthContextValue, type OrgContextValue, type UseAuthResult, type UseOrgMembersResult, type UseOrgResult, createAuthStatusStore, createAuthStore, createCurrentUserStore, createPermissionStore, destroyAuthProvider, destroyOrgProvider, getAuthContext, getOrgContext, initAuthProvider, initOrgProvider, useAuth, useAuthStatus, useCurrentUser, useOrg, useOrgMembers, usePermission };