@lattice-php/lattice 0.38.0 → 0.40.0

package/package.json

@@ -1,17 +1,15 @@
 {
   "name": "@lattice-php/lattice",
-  "version": "0.38.0",
+  "version": "0.40.0",
   "description": "Server-driven React components for Laravel and Inertia.",
   "license": "MIT",
   "author": "Manuel Christlieb <manuel@christlieb.eu>",
   "type": "module",
-  "workspaces": [
-    "docs"
-  ],
   "homepage": "https://latticephp.com",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/lattice-php/lattice.git"
+    "url": "git+https://github.com/lattice-php/lattice.git",
+    "directory": "packages/framework"
   },
   "bugs": {
     "url": "https://github.com/lattice-php/lattice/issues"
@@ -50,82 +48,10 @@
       "types": "./dist/chat/index.d.ts",
       "import": "./dist/chat/index.js"
     },
-    "./core": {
-      "types": "./dist/core/index.d.ts",
-      "import": "./dist/core/index.js"
-    },
-    "./core/api": {
-      "types": "./dist/core/api.d.ts",
-      "import": "./dist/core/api.js"
-    },
-    "./core/headers": {
-      "types": "./dist/core/headers.d.ts",
-      "import": "./dist/core/headers.js"
-    },
-    "./core/types": {
-      "types": "./dist/core/types.d.ts",
-      "import": "./dist/core/types.js"
-    },
-    "./core/upload": {
-      "types": "./dist/core/upload.d.ts",
-      "import": "./dist/core/upload.js"
-    },
     "./dnd": {
       "types": "./dist/dnd/index.d.ts",
       "import": "./dist/dnd/index.js"
     },
-    "./effects/use-effect-dispatcher": {
-      "types": "./dist/effects/use-effect-dispatcher.d.ts",
-      "import": "./dist/effects/use-effect-dispatcher.js"
-    },
-    "./form": {
-      "types": "./dist/form/index.d.ts",
-      "import": "./dist/form/index.js"
-    },
-    "./form/embed": {
-      "types": "./dist/form/embed.d.ts",
-      "import": "./dist/form/embed.js"
-    },
-    "./form/toolkit": {
-      "types": "./dist/form/toolkit.d.ts",
-      "import": "./dist/form/toolkit.js"
-    },
-    "./form/rich-editor": {
-      "types": "./dist/form/rich-editor/index.d.ts",
-      "import": "./dist/form/rich-editor/index.js"
-    },
-    "./form/components/fields/simple-field": {
-      "types": "./dist/form/components/fields/simple-field.d.ts",
-      "import": "./dist/form/components/fields/simple-field.js"
-    },
-    "./form/hooks/context": {
-      "types": "./dist/form/hooks/context.d.ts",
-      "import": "./dist/form/hooks/context.js"
-    },
-    "./form/hooks/field-scope": {
-      "types": "./dist/form/hooks/field-scope.d.ts",
-      "import": "./dist/form/hooks/field-scope.js"
-    },
-    "./form/hooks/values": {
-      "types": "./dist/form/hooks/values.d.ts",
-      "import": "./dist/form/hooks/values.js"
-    },
-    "./format/date-time": {
-      "types": "./dist/format/date-time.d.ts",
-      "import": "./dist/format/date-time.js"
-    },
-    "./format/format-context": {
-      "types": "./dist/format/format-context.d.ts",
-      "import": "./dist/format/format-context.js"
-    },
-    "./i18n": {
-      "types": "./dist/i18n/index.d.ts",
-      "import": "./dist/i18n/index.js"
-    },
-    "./icons": {
-      "types": "./dist/icons/index.d.ts",
-      "import": "./dist/icons/index.js"
-    },
     "./inertia": {
       "types": "./dist/inertia.d.ts",
       "import": "./dist/inertia.js"
@@ -134,18 +60,6 @@
       "types": "./dist/layout/index.d.ts",
       "import": "./dist/layout/index.js"
     },
-    "./lib/use-debounced-callback": {
-      "types": "./dist/lib/use-debounced-callback.d.ts",
-      "import": "./dist/lib/use-debounced-callback.js"
-    },
-    "./lib/use-layout-effect": {
-      "types": "./dist/lib/use-layout-effect.d.ts",
-      "import": "./dist/lib/use-layout-effect.js"
-    },
-    "./lib/utils": {
-      "types": "./dist/lib/utils.d.ts",
-      "import": "./dist/lib/utils.js"
-    },
     "./notifications": {
       "types": "./dist/notifications/index.d.ts",
       "import": "./dist/notifications/index.js"
@@ -162,6 +76,10 @@
       "types": "./dist/registry.d.ts",
       "import": "./dist/registry.js"
     },
+    "./runtime": {
+      "types": "./dist/runtime.d.ts",
+      "import": "./dist/runtime.js"
+    },
     "./remote": {
       "types": "./dist/remote/index.d.ts",
       "import": "./dist/remote/index.js"
@@ -170,26 +88,6 @@
       "types": "./dist/ssr.d.ts",
       "import": "./dist/ssr.js"
     },
-    "./table": {
-      "types": "./dist/table/index.d.ts",
-      "import": "./dist/table/index.js"
-    },
-    "./table/hooks/use-table": {
-      "types": "./dist/table/hooks/use-table.d.ts",
-      "import": "./dist/table/hooks/use-table.js"
-    },
-    "./table/hooks/use-table-selection": {
-      "types": "./dist/table/hooks/use-table-selection.d.ts",
-      "import": "./dist/table/hooks/use-table-selection.js"
-    },
-    "./table/lib/bulk": {
-      "types": "./dist/table/lib/bulk.d.ts",
-      "import": "./dist/table/lib/bulk.js"
-    },
-    "./table/types": {
-      "types": "./dist/table/types.d.ts",
-      "import": "./dist/table/types.js"
-    },
     "./toast": {
       "types": "./dist/toast/index.d.ts",
       "import": "./dist/toast/index.js"
@@ -200,46 +98,6 @@
     "./types/generated": {
       "types": "./dist/types/generated.d.ts"
     },
-    "./ui": {
-      "types": "./dist/ui/index.d.ts",
-      "import": "./dist/ui/index.js"
-    },
-    "./ui/button": {
-      "types": "./dist/ui/button.d.ts",
-      "import": "./dist/ui/button.js"
-    },
-    "./ui/checkbox": {
-      "types": "./dist/ui/checkbox.d.ts",
-      "import": "./dist/ui/checkbox.js"
-    },
-    "./ui/confirm-dialog": {
-      "types": "./dist/ui/confirm-dialog.d.ts",
-      "import": "./dist/ui/confirm-dialog.js"
-    },
-    "./ui/dialog": {
-      "types": "./dist/ui/dialog.d.ts",
-      "import": "./dist/ui/dialog.js"
-    },
-    "./ui/icon-button": {
-      "types": "./dist/ui/icon-button.d.ts",
-      "import": "./dist/ui/icon-button.js"
-    },
-    "./ui/image-preview": {
-      "types": "./dist/ui/image-preview.d.ts",
-      "import": "./dist/ui/image-preview.js"
-    },
-    "./ui/input": {
-      "types": "./dist/ui/input.d.ts",
-      "import": "./dist/ui/input.js"
-    },
-    "./ui/label": {
-      "types": "./dist/ui/label.d.ts",
-      "import": "./dist/ui/label.js"
-    },
-    "./ui/native-select": {
-      "types": "./dist/ui/native-select.d.ts",
-      "import": "./dist/ui/native-select.js"
-    },
     "./svg-sprite-client": {
       "types": "./dist/svg-sprite-client.d.ts"
     },
@@ -254,43 +112,23 @@
   },
   "files": [
     "dist",
-    "dist-standalone",
-    "resources/icons"
+    "dist-standalone"
   ],
   "publishConfig": {
     "access": "public"
   },
   "scripts": {
-    "postinstall": "[ -n \"$CI\" ] || test ! -f vendor/bin/testbench || npm run boost:refresh",
-    "dev": "vite",
     "build": "vite build",
-    "build:lib": "vite build --mode lib",
-    "build:lib:watch": "vite build --mode lib --watch",
     "build:standalone": "vite build --mode standalone",
-    "verify:standalone": "node -e \"const fs = require('fs'); if (!fs.existsSync('./dist-standalone/manifest.json')) { console.error('dist-standalone/manifest.json is missing; run npm run build:standalone.'); process.exit(1); } const m = require('./dist-standalone/manifest.json'); const pkg = require('./package.json'); if (m.version !== pkg.version) { console.error('dist-standalone manifest ' + m.version + ' != package ' + pkg.version + '; run npm run build:standalone.'); process.exit(1); }\"",
-    "prepack": "npm run build:lib",
-    "test": "vitest run",
-    "test:browser": "vitest run --project browser",
-    "test:coverage": "vitest run --coverage",
-    "boost:refresh": "php vendor/bin/testbench boost:update --no-interaction",
+    "prepack": "npm run build",
     "typecheck": "tsc --noEmit",
-    "type-coverage": "type-coverage --project tsconfig.json --at-least 99.5",
-    "check": "npm run lint && npm run format:check && npm run typecheck && npm run type-coverage && npm run test && npm run build:lib && npm run check:package",
-    "check:package": "publint --strict && attw --pack . --profile esm-only --exclude-entrypoints ./css",
-    "fix": "npm run lint:fix && npm run format",
-    "docs:typecheck": "npm run build:lib && tsc --noEmit -p docs/tsconfig.json",
-    "docs:test": "vitest run --project jsdom docs",
-    "lint": "oxlint resources/js workbench/resources/js packages/*/resources/js",
-    "lint:fix": "oxlint resources/js workbench/resources/js packages/*/resources/js --fix",
-    "lint:github": "oxlint resources/js workbench/resources/js packages/*/resources/js --format=github",
-    "format": "oxfmt --write \"resources/js/**/*.{ts,tsx}\" \"workbench/resources/js/**/*.{ts,tsx}\" \"packages/*/resources/js/**/*.{ts,tsx}\" \"docs/**/*.{ts,tsx,md,mdx}\"",
-    "format:check": "oxfmt --check \"resources/js/**/*.{ts,tsx}\" \"workbench/resources/js/**/*.{ts,tsx}\" \"packages/*/resources/js/**/*.{ts,tsx}\" \"docs/**/*.{ts,tsx,md,mdx}\"",
-    "analyze": "SONDA=1 vite build && mkdir -p docs/public && cp docs/generated/bundle-report.html docs/public/bundle-report.html",
-    "docs:dev": "npm run build:lib && npm run dev -w docs",
-    "docs:build": "npm run build:lib && npm run analyze && npm run build -w docs",
-    "docs:preview": "npm run preview -w docs"
+    "test": "vitest run"
   },
   "dependencies": {
+    "@lattice-php/core": "0.40.0",
+    "@lattice-php/form": "0.40.0",
+    "@lattice-php/table": "0.40.0",
+    "@lattice-php/ui": "0.40.0",
     "@atlaskit/pragmatic-drag-and-drop": "^2.0.1",
     "@atlaskit/pragmatic-drag-and-drop-auto-scroll": "^3.0.0",
     "@atlaskit/pragmatic-drag-and-drop-hitbox": "^2.0.0",
@@ -302,34 +140,9 @@
     "@codemirror/legacy-modes": "^6.5.3",
     "@codemirror/state": "^6.7.1",
     "@codemirror/view": "^6.43.7",
-    "@internationalized/date": "^3.12.2",
     "@lattice-php/vite-svg-sprite": "^0.3.0",
     "@lezer/highlight": "^1.2.3",
-    "@radix-ui/react-checkbox": "^1.1.4",
-    "@radix-ui/react-dialog": "^1.1.16",
-    "@radix-ui/react-label": "^2.1.2",
-    "@radix-ui/react-popover": "^1.1.16",
-    "@radix-ui/react-slot": "^1.2.3",
-    "@radix-ui/react-toast": "^1.2.16",
-    "@tiptap/core": "^3.26.0",
-    "@tiptap/extension-details": "^3.26.0",
-    "@tiptap/extension-highlight": "^3.26.0",
-    "@tiptap/extension-table": "^3.26.0",
-    "@tiptap/extension-text-align": "^3.26.0",
-    "@tiptap/extensions": "^3.27.3",
-    "@tiptap/pm": "^3.26.0",
-    "@tiptap/react": "^3.26.0",
-    "@tiptap/starter-kit": "^3.26.0",
-    "@zag-js/date-picker": "^1.41.2",
-    "@zag-js/react": "^1.41.2",
-    "class-variance-authority": "^0.7.1",
-    "clsx": "^2.1.1",
-    "i18next": "^26.3.1",
-    "i18next-http-backend": "^4.0.0",
-    "input-otp": "^1.4.2",
-    "react-colorful": "^5.8.0",
-    "recharts": "^3.8.1",
-    "tailwind-merge": "^3.0.1"
+    "@radix-ui/react-toast": "^1.2.16"
   },
   "peerDependencies": {
     "@inertiajs/react": "^3.0.0",
@@ -345,42 +158,5 @@
     "pusher-js": {
       "optional": true
     }
-  },
-  "devDependencies": {
-    "@arethetypeswrong/cli": "^0.18.5",
-    "@codecov/vite-plugin": "^2.0.1",
-    "@inertiajs/react": "^3.6.1",
-    "@inertiajs/vite": "^3.6.1",
-    "@laravel/echo-react": "^2.3.7",
-    "@tailwindcss/vite": "^4.1.11",
-    "@testing-library/dom": "^10.4.1",
-    "@testing-library/jest-dom": "^7.0.0",
-    "@testing-library/react": "^16.3.0",
-    "@types/node": "^24.13.3",
-    "@types/react": "^19.2.0",
-    "@types/react-dom": "^19.2.0",
-    "@vitejs/plugin-react": "^6.0.2",
-    "@vitest/browser-playwright": "^4.1.8",
-    "@vitest/coverage-v8": "^4.1.8",
-    "jsdom": "^30.0.1",
-    "laravel-echo": "^2.3.7",
-    "laravel-vite-plugin": "^3.0.0",
-    "lucide-static": "^1.24.0",
-    "oxfmt": "^0.61.0",
-    "oxlint": "^1.68.0",
-    "playwright": "^1.60.0",
-    "publint": "^0.3.21",
-    "pusher-js": "^8.5.0",
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0",
-    "sonda": "^0.14.0",
-    "tailwindcss": "^4.0.0",
-    "tw-animate-css": "^1.4.0",
-    "type-coverage": "^2.29.7",
-    "typescript": "^6.0.3",
-    "vite": "^8.0.0",
-    "vite-plugin-dts": "^5.0.3",
-    "vitest": "^4.1.8",
-    "vitest-browser-react": "^2.2.0"
   }
 }

package/LICENSE.md

@@ -1,21 +0,0 @@
-The MIT License (MIT)
-
-Copyright (c) Manuel Christlieb <manuel@christlieb.eu>
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.

package/dist/core/api.d.ts

@@ -1,42 +0,0 @@
-import { BrowserToken as GeneratedBrowserToken, RemoteAccess as GeneratedRemoteAccess } from '../types/generated.js';
-export declare class ApiError extends Error {
-    readonly response: Response;
-    constructor(response: Response);
-}
-/**
- * Exported so the few transports that cannot go through apiFetch — an XHR that
- * reports upload progress, for instance — still send the same CSRF header.
- */
-export declare function xsrfToken(): string;
-export type ApiInit = Omit<RequestInit, "headers"> & {
-    ref?: string;
-    headers?: Record<string, string>;
-    throwOnError?: boolean;
-};
-export type BrowserToken = GeneratedBrowserToken;
-export type RemoteAccess = GeneratedRemoteAccess;
-export type RemoteInit = Omit<RequestInit, "credentials" | "headers"> & {
-    headers?: Record<string, string>;
-    remote: RemoteAccess;
-    throwOnError?: boolean;
-};
-/**
- * Boot paths call this with the server-minted URL so subdirectory installs
- * refresh against the right path; the default covers root installs.
- */
-export declare function setRefRefreshEndpoint(url: string): void;
-/**
- * Trade an expired-but-authentic ref for a fresh one. Deduped per original ref
- * so a burst of 403s from one component costs a single round-trip. The renewed
- * token lands in the component-ref map, so every later request that resolves
- * its ref through withHeaders picks it up — this is the transport-agnostic
- * primitive both the fetch funnel below and the Inertia form retry build on.
- */
-export declare function refreshRef(componentRef: string): Promise<string | null>;
-export declare function apiFetch(url: string, init?: ApiInit): Promise<Response>;
-export declare function apiJson<T>(url: string, init?: ApiInit): Promise<T>;
-export declare function clearRemoteTokenCache(): void;
-export declare function invalidateRemoteToken(remote: RemoteAccess): void;
-export declare function remoteToken(remote: RemoteAccess): Promise<BrowserToken>;
-export declare function remoteFetch(url: string, init: RemoteInit): Promise<Response>;
-export declare function remoteJson<T>(url: string, init: RemoteInit): Promise<T>;

package/dist/core/api.js

@@ -1,165 +0,0 @@
-import { latestRef, storeRefreshedRef } from "./component-ref.js";
-import { localeHeader } from "../i18n/locale.js";
-import { withHeaders } from "./headers.js";
-//#region resources/js/core/api.ts
-/**
-* The single funnel for raw-fetch HTTP, so the cross-cutting header, credential,
-* and error policy has one home and call sites only declare intent. Returns a
-* Response (not parsed data) so one primitive serves JSON, the chat's streaming
-* getReader(), and multipart alike. Not for the Inertia world (router/useHttp),
-* which carries its own headers.
-*/
-var ApiError = class extends Error {
-	response;
-	constructor(response) {
-		super(`HTTP ${response.status}`);
-		this.response = response;
-	}
-};
-/**
-* Exported so the few transports that cannot go through apiFetch — an XHR that
-* reports upload progress, for instance — still send the same CSRF header.
-*/
-function xsrfToken() {
-	const match = document.cookie.match(/XSRF-TOKEN=([^;]+)/);
-	return match ? decodeURIComponent(match[1]) : "";
-}
-var tokenRefreshSkewMs = 1e4;
-var remoteTokenCache = /* @__PURE__ */ new Map();
-var pendingRemoteTokens = /* @__PURE__ */ new Map();
-function defaultHeaders(method) {
-	if (!(method !== void 0 && method !== "GET" && method !== "HEAD")) return { Accept: "application/json" };
-	return {
-		Accept: "application/json",
-		"Content-Type": "application/json",
-		"X-Requested-With": "XMLHttpRequest",
-		"X-XSRF-TOKEN": xsrfToken()
-	};
-}
-var refRefreshEndpoint = "/lattice/refs/refresh";
-/**
-* Boot paths call this with the server-minted URL so subdirectory installs
-* refresh against the right path; the default covers root installs.
-*/
-function setRefRefreshEndpoint(url) {
-	refRefreshEndpoint = url;
-}
-var pendingRefRefreshes = /* @__PURE__ */ new Map();
-/**
-* Trade an expired-but-authentic ref for a fresh one. Deduped per original ref
-* so a burst of 403s from one component costs a single round-trip. The renewed
-* token lands in the component-ref map, so every later request that resolves
-* its ref through withHeaders picks it up — this is the transport-agnostic
-* primitive both the fetch funnel below and the Inertia form retry build on.
-*/
-async function refreshRef(componentRef) {
-	const pending = pendingRefRefreshes.get(componentRef);
-	if (pending) return pending;
-	const request = apiJson(refRefreshEndpoint, {
-		method: "POST",
-		body: JSON.stringify({ ref: latestRef(componentRef) })
-	}).then((data) => {
-		storeRefreshedRef(componentRef, data.ref);
-		return data.ref;
-	}).catch(() => null).finally(() => {
-		pendingRefRefreshes.delete(componentRef);
-	});
-	pendingRefRefreshes.set(componentRef, request);
-	return request;
-}
-async function apiFetch(url, init = {}) {
-	const { ref = "", headers, throwOnError = true, method, ...rest } = init;
-	const normalizedMethod = method?.toUpperCase();
-	const request = () => fetch(url, {
-		credentials: "same-origin",
-		...rest,
-		method: normalizedMethod,
-		headers: withHeaders(ref, {
-			...defaultHeaders(normalizedMethod),
-			...headers
-		})
-	});
-	let response = await request();
-	if (ref !== "" && response.status === 403 && await refreshRef(ref) !== null) response = await request();
-	if (throwOnError && !response.ok) throw new ApiError(response);
-	return response;
-}
-async function apiJson(url, init) {
-	return (await apiFetch(url, init)).json();
-}
-function remoteTokenKey(remote) {
-	return [
-		remote.source,
-		remote.audience,
-		[...remote.scopes].sort().join(" ")
-	].join("");
-}
-function clearRemoteTokenCache() {
-	remoteTokenCache.clear();
-	pendingRemoteTokens.clear();
-}
-function invalidateRemoteToken(remote) {
-	remoteTokenCache.delete(remoteTokenKey(remote));
-}
-async function remoteToken(remote) {
-	const key = remoteTokenKey(remote);
-	const cached = remoteTokenCache.get(key);
-	if (cached && cached.expiresAt > Date.now() + tokenRefreshSkewMs) return cached.token;
-	const pending = pendingRemoteTokens.get(key);
-	if (pending) return pending;
-	const request = apiJson(remote.tokenEndpoint, {
-		method: "POST",
-		ref: remote.ref,
-		body: JSON.stringify({
-			nodeId: remote.nodeId,
-			nodeType: remote.nodeType,
-			audience: remote.audience,
-			scopes: remote.scopes
-		})
-	}).then((token) => {
-		remoteTokenCache.set(key, {
-			token,
-			expiresAt: Date.now() + Math.max(0, token.expiresIn) * 1e3
-		});
-		return token;
-	}).finally(() => {
-		pendingRemoteTokens.delete(key);
-	});
-	pendingRemoteTokens.set(key, request);
-	return request;
-}
-function isUnauthorized(response) {
-	return response.status === 401 || response.status === 403;
-}
-async function fetchRemoteWithToken(url, init, token) {
-	const { headers, ...rest } = init;
-	return fetch(url, {
-		...rest,
-		credentials: "omit",
-		headers: {
-			Accept: "application/json",
-			...localeHeader(),
-			...headers,
-			Authorization: `${token.tokenType} ${token.accessToken}`
-		}
-	});
-}
-async function remoteFetch(url, init) {
-	const { remote, throwOnError = true, ...request } = init;
-	let token = await remoteToken(remote);
-	let response = await fetchRemoteWithToken(url, request, token);
-	if (isUnauthorized(response)) {
-		invalidateRemoteToken(remote);
-		token = await remoteToken(remote);
-		response = await fetchRemoteWithToken(url, request, token);
-	}
-	if (throwOnError && !response.ok) throw new ApiError(response);
-	return response;
-}
-async function remoteJson(url, init) {
-	return (await remoteFetch(url, init)).json();
-}
-//#endregion
-export { ApiError, apiFetch, apiJson, clearRemoteTokenCache, invalidateRemoteToken, refreshRef, remoteFetch, remoteJson, remoteToken, setRefRefreshEndpoint, xsrfToken };
-
-//# sourceMappingURL=api.js.map

package/dist/core/api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api.js","names":[],"sources":["../../resources/js/core/api.ts"],"sourcesContent":["/**\n * The single funnel for raw-fetch HTTP, so the cross-cutting header, credential,\n * and error policy has one home and call sites only declare intent. Returns a\n * Response (not parsed data) so one primitive serves JSON, the chat's streaming\n * getReader(), and multipart alike. Not for the Inertia world (router/useHttp),\n * which carries its own headers.\n */\n\nimport { latestRef, storeRefreshedRef } from \"./component-ref\";\nimport { withHeaders } from \"./headers\";\nimport { localeHeader } from \"@lattice-php/lattice/i18n/locale\";\nimport type {\n  BrowserToken as GeneratedBrowserToken,\n  RemoteAccess as GeneratedRemoteAccess,\n} from \"@lattice-php/lattice/types/generated\";\n\nexport class ApiError extends Error {\n  constructor(readonly response: Response) {\n    super(`HTTP ${response.status}`);\n  }\n}\n\n/**\n * Exported so the few transports that cannot go through apiFetch — an XHR that\n * reports upload progress, for instance — still send the same CSRF header.\n */\nexport function xsrfToken(): string {\n  const match = document.cookie.match(/XSRF-TOKEN=([^;]+)/);\n\n  return match ? decodeURIComponent(match[1]) : \"\";\n}\n\nexport type ApiInit = Omit<RequestInit, \"headers\"> & {\n  ref?: string;\n  headers?: Record<string, string>;\n  throwOnError?: boolean;\n};\n\nexport type BrowserToken = GeneratedBrowserToken;\nexport type RemoteAccess = GeneratedRemoteAccess;\n\nexport type RemoteInit = Omit<RequestInit, \"credentials\" | \"headers\"> & {\n  headers?: Record<string, string>;\n  remote: RemoteAccess;\n  throwOnError?: boolean;\n};\n\ntype CachedBrowserToken = {\n  expiresAt: number;\n  token: BrowserToken;\n};\n\nconst tokenRefreshSkewMs = 10_000;\nconst remoteTokenCache = new Map<string, CachedBrowserToken>();\nconst pendingRemoteTokens = new Map<string, Promise<BrowserToken>>();\n\nfunction defaultHeaders(method: string | undefined): Record<string, string> {\n  const isWrite = method !== undefined && method !== \"GET\" && method !== \"HEAD\";\n\n  if (!isWrite) {\n    return { Accept: \"application/json\" };\n  }\n\n  return {\n    Accept: \"application/json\",\n    \"Content-Type\": \"application/json\",\n    \"X-Requested-With\": \"XMLHttpRequest\",\n    \"X-XSRF-TOKEN\": xsrfToken(),\n  };\n}\n\nlet refRefreshEndpoint = \"/lattice/refs/refresh\";\n\n/**\n * Boot paths call this with the server-minted URL so subdirectory installs\n * refresh against the right path; the default covers root installs.\n */\nexport function setRefRefreshEndpoint(url: string): void {\n  refRefreshEndpoint = url;\n}\n\nconst pendingRefRefreshes = new Map<string, Promise<string | null>>();\n\n/**\n * Trade an expired-but-authentic ref for a fresh one. Deduped per original ref\n * so a burst of 403s from one component costs a single round-trip. The renewed\n * token lands in the component-ref map, so every later request that resolves\n * its ref through withHeaders picks it up — this is the transport-agnostic\n * primitive both the fetch funnel below and the Inertia form retry build on.\n */\nexport async function refreshRef(componentRef: string): Promise<string | null> {\n  const pending = pendingRefRefreshes.get(componentRef);\n\n  if (pending) {\n    return pending;\n  }\n\n  const request = apiJson<{ ref: string }>(refRefreshEndpoint, {\n    method: \"POST\",\n    body: JSON.stringify({ ref: latestRef(componentRef) }),\n  })\n    .then((data) => {\n      storeRefreshedRef(componentRef, data.ref);\n\n      return data.ref;\n    })\n    .catch(() => null)\n    .finally(() => {\n      pendingRefRefreshes.delete(componentRef);\n    });\n\n  pendingRefRefreshes.set(componentRef, request);\n\n  return request;\n}\n\nexport async function apiFetch(url: string, init: ApiInit = {}): Promise<Response> {\n  const { ref = \"\", headers, throwOnError = true, method, ...rest } = init;\n  // Some servers reject a lower-case method line, and fetch only normalizes the\n  // standard verbs, so upper-case it here.\n  const normalizedMethod = method?.toUpperCase();\n  const request = () =>\n    fetch(url, {\n      credentials: \"same-origin\",\n      ...rest,\n      method: normalizedMethod,\n      // withHeaders resolves the latest refreshed token for the ref, so the\n      // retry below picks up the renewal without threading it through.\n      headers: withHeaders(ref, { ...defaultHeaders(normalizedMethod), ...headers }),\n    });\n\n  let response = await request();\n\n  if (ref !== \"\" && response.status === 403 && (await refreshRef(ref)) !== null) {\n    response = await request();\n  }\n\n  if (throwOnError && !response.ok) {\n    throw new ApiError(response);\n  }\n\n  return response;\n}\n\nexport async function apiJson<T>(url: string, init?: ApiInit): Promise<T> {\n  return (await apiFetch(url, init)).json() as Promise<T>;\n}\n\nfunction remoteTokenKey(remote: RemoteAccess): string {\n  return [remote.source, remote.audience, [...remote.scopes].sort().join(\" \")].join(\"\\u001f\");\n}\n\nexport function clearRemoteTokenCache(): void {\n  remoteTokenCache.clear();\n  pendingRemoteTokens.clear();\n}\n\nexport function invalidateRemoteToken(remote: RemoteAccess): void {\n  remoteTokenCache.delete(remoteTokenKey(remote));\n}\n\nexport async function remoteToken(remote: RemoteAccess): Promise<BrowserToken> {\n  const key = remoteTokenKey(remote);\n  const cached = remoteTokenCache.get(key);\n\n  if (cached && cached.expiresAt > Date.now() + tokenRefreshSkewMs) {\n    return cached.token;\n  }\n\n  const pending = pendingRemoteTokens.get(key);\n\n  if (pending) {\n    return pending;\n  }\n\n  const request = apiJson<BrowserToken>(remote.tokenEndpoint, {\n    method: \"POST\",\n    ref: remote.ref,\n    body: JSON.stringify({\n      nodeId: remote.nodeId,\n      nodeType: remote.nodeType,\n      audience: remote.audience,\n      scopes: remote.scopes,\n    }),\n  })\n    .then((token) => {\n      remoteTokenCache.set(key, {\n        token,\n        expiresAt: Date.now() + Math.max(0, token.expiresIn) * 1000,\n      });\n\n      return token;\n    })\n    .finally(() => {\n      pendingRemoteTokens.delete(key);\n    });\n\n  pendingRemoteTokens.set(key, request);\n\n  return request;\n}\n\nfunction isUnauthorized(response: Response): boolean {\n  return response.status === 401 || response.status === 403;\n}\n\nasync function fetchRemoteWithToken(\n  url: string,\n  init: Omit<RemoteInit, \"remote\" | \"throwOnError\">,\n  token: BrowserToken,\n): Promise<Response> {\n  const { headers, ...rest } = init;\n\n  return fetch(url, {\n    ...rest,\n    credentials: \"omit\",\n    headers: {\n      Accept: \"application/json\",\n      ...localeHeader(),\n      ...headers,\n      Authorization: `${token.tokenType} ${token.accessToken}`,\n    },\n  });\n}\n\nexport async function remoteFetch(url: string, init: RemoteInit): Promise<Response> {\n  const { remote, throwOnError = true, ...request } = init;\n  let token = await remoteToken(remote);\n  let response = await fetchRemoteWithToken(url, request, token);\n\n  if (isUnauthorized(response)) {\n    invalidateRemoteToken(remote);\n    token = await remoteToken(remote);\n    response = await fetchRemoteWithToken(url, request, token);\n  }\n\n  if (throwOnError && !response.ok) {\n    throw new ApiError(response);\n  }\n\n  return response;\n}\n\nexport async function remoteJson<T>(url: string, init: RemoteInit): Promise<T> {\n  return (await remoteFetch(url, init)).json() as Promise<T>;\n}\n"],"mappings":";;;;;;;;;;;AAgBA,IAAa,WAAb,cAA8B,MAAM;CACb;CAArB,YAAY,UAA6B;EACvC,MAAM,QAAQ,SAAS,QAAQ;EADZ,KAAA,WAAA;CAErB;AACF;;;;;AAMA,SAAgB,YAAoB;CAClC,MAAM,QAAQ,SAAS,OAAO,MAAM,oBAAoB;CAExD,OAAO,QAAQ,mBAAmB,MAAM,EAAE,IAAI;AAChD;AAsBA,IAAM,qBAAqB;AAC3B,IAAM,mCAAmB,IAAI,IAAgC;AAC7D,IAAM,sCAAsB,IAAI,IAAmC;AAEnE,SAAS,eAAe,QAAoD;CAG1E,IAAI,EAFY,WAAW,KAAA,KAAa,WAAW,SAAS,WAAW,SAGrE,OAAO,EAAE,QAAQ,mBAAmB;CAGtC,OAAO;EACL,QAAQ;EACR,gBAAgB;EAChB,oBAAoB;EACpB,gBAAgB,UAAU;CAC5B;AACF;AAEA,IAAI,qBAAqB;;;;;AAMzB,SAAgB,sBAAsB,KAAmB;CACvD,qBAAqB;AACvB;AAEA,IAAM,sCAAsB,IAAI,IAAoC;;;;;;;;AASpE,eAAsB,WAAW,cAA8C;CAC7E,MAAM,UAAU,oBAAoB,IAAI,YAAY;CAEpD,IAAI,SACF,OAAO;CAGT,MAAM,UAAU,QAAyB,oBAAoB;EAC3D,QAAQ;EACR,MAAM,KAAK,UAAU,EAAE,KAAK,UAAU,YAAY,EAAE,CAAC;CACvD,CAAC,CAAC,CACC,MAAM,SAAS;EACd,kBAAkB,cAAc,KAAK,GAAG;EAExC,OAAO,KAAK;CACd,CAAC,CAAC,CACD,YAAY,IAAI,CAAC,CACjB,cAAc;EACb,oBAAoB,OAAO,YAAY;CACzC,CAAC;CAEH,oBAAoB,IAAI,cAAc,OAAO;CAE7C,OAAO;AACT;AAEA,eAAsB,SAAS,KAAa,OAAgB,CAAC,GAAsB;CACjF,MAAM,EAAE,MAAM,IAAI,SAAS,eAAe,MAAM,QAAQ,GAAG,SAAS;CAGpE,MAAM,mBAAmB,QAAQ,YAAY;CAC7C,MAAM,gBACJ,MAAM,KAAK;EACT,aAAa;EACb,GAAG;EACH,QAAQ;EAGR,SAAS,YAAY,KAAK;GAAE,GAAG,eAAe,gBAAgB;GAAG,GAAG;EAAQ,CAAC;CAC/E,CAAC;CAEH,IAAI,WAAW,MAAM,QAAQ;CAE7B,IAAI,QAAQ,MAAM,SAAS,WAAW,OAAQ,MAAM,WAAW,GAAG,MAAO,MACvE,WAAW,MAAM,QAAQ;CAG3B,IAAI,gBAAgB,CAAC,SAAS,IAC5B,MAAM,IAAI,SAAS,QAAQ;CAG7B,OAAO;AACT;AAEA,eAAsB,QAAW,KAAa,MAA4B;CACxE,QAAQ,MAAM,SAAS,KAAK,IAAI,EAAA,CAAG,KAAK;AAC1C;AAEA,SAAS,eAAe,QAA8B;CACpD,OAAO;EAAC,OAAO;EAAQ,OAAO;EAAU,CAAC,GAAG,OAAO,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG;CAAC,CAAC,CAAC,KAAK,GAAQ;AAC5F;AAEA,SAAgB,wBAA8B;CAC5C,iBAAiB,MAAM;CACvB,oBAAoB,MAAM;AAC5B;AAEA,SAAgB,sBAAsB,QAA4B;CAChE,iBAAiB,OAAO,eAAe,MAAM,CAAC;AAChD;AAEA,eAAsB,YAAY,QAA6C;CAC7E,MAAM,MAAM,eAAe,MAAM;CACjC,MAAM,SAAS,iBAAiB,IAAI,GAAG;CAEvC,IAAI,UAAU,OAAO,YAAY,KAAK,IAAI,IAAI,oBAC5C,OAAO,OAAO;CAGhB,MAAM,UAAU,oBAAoB,IAAI,GAAG;CAE3C,IAAI,SACF,OAAO;CAGT,MAAM,UAAU,QAAsB,OAAO,eAAe;EAC1D,QAAQ;EACR,KAAK,OAAO;EACZ,MAAM,KAAK,UAAU;GACnB,QAAQ,OAAO;GACf,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,QAAQ,OAAO;EACjB,CAAC;CACH,CAAC,CAAC,CACC,MAAM,UAAU;EACf,iBAAiB,IAAI,KAAK;GACxB;GACA,WAAW,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,MAAM,SAAS,IAAI;EACzD,CAAC;EAED,OAAO;CACT,CAAC,CAAC,CACD,cAAc;EACb,oBAAoB,OAAO,GAAG;CAChC,CAAC;CAEH,oBAAoB,IAAI,KAAK,OAAO;CAEpC,OAAO;AACT;AAEA,SAAS,eAAe,UAA6B;CACnD,OAAO,SAAS,WAAW,OAAO,SAAS,WAAW;AACxD;AAEA,eAAe,qBACb,KACA,MACA,OACmB;CACnB,MAAM,EAAE,SAAS,GAAG,SAAS;CAE7B,OAAO,MAAM,KAAK;EAChB,GAAG;EACH,aAAa;EACb,SAAS;GACP,QAAQ;GACR,GAAG,aAAa;GAChB,GAAG;GACH,eAAe,GAAG,MAAM,UAAU,GAAG,MAAM;EAC7C;CACF,CAAC;AACH;AAEA,eAAsB,YAAY,KAAa,MAAqC;CAClF,MAAM,EAAE,QAAQ,eAAe,MAAM,GAAG,YAAY;CACpD,IAAI,QAAQ,MAAM,YAAY,MAAM;CACpC,IAAI,WAAW,MAAM,qBAAqB,KAAK,SAAS,KAAK;CAE7D,IAAI,eAAe,QAAQ,GAAG;EAC5B,sBAAsB,MAAM;EAC5B,QAAQ,MAAM,YAAY,MAAM;EAChC,WAAW,MAAM,qBAAqB,KAAK,SAAS,KAAK;CAC3D;CAEA,IAAI,gBAAgB,CAAC,SAAS,IAC5B,MAAM,IAAI,SAAS,QAAQ;CAG7B,OAAO;AACT;AAEA,eAAsB,WAAc,KAAa,MAA8B;CAC7E,QAAQ,MAAM,YAAY,KAAK,IAAI,EAAA,CAAG,KAAK;AAC7C"}

package/dist/core/collapsed-context.d.ts

@@ -1,2 +0,0 @@
-export declare const CollapsedContext: import('react').Context<boolean>;
-export declare function useCollapsed(): boolean;

package/dist/core/collapsed-context.js

@@ -1,10 +0,0 @@
-import { createContext, useContext } from "react";
-//#region resources/js/core/collapsed-context.ts
-var CollapsedContext = createContext(false);
-function useCollapsed() {
-	return useContext(CollapsedContext);
-}
-//#endregion
-export { CollapsedContext, useCollapsed };
-
-//# sourceMappingURL=collapsed-context.js.map

package/dist/core/collapsed-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"collapsed-context.js","names":[],"sources":["../../resources/js/core/collapsed-context.ts"],"sourcesContent":["import { createContext, useContext } from \"react\";\n\nexport const CollapsedContext = createContext(false);\n\nexport function useCollapsed(): boolean {\n  return useContext(CollapsedContext);\n}\n"],"mappings":";;AAEA,IAAa,mBAAmB,cAAc,KAAK;AAEnD,SAAgB,eAAwB;CACtC,OAAO,WAAW,gBAAgB;AACpC"}

package/dist/core/component-ref.d.ts

@@ -1,11 +0,0 @@
-/**
- * The signed component reference travels to the server as the `X-Lattice-Ref`
- * request header on every interactive request (GET and writes alike). This must
- * match ComponentReferenceSigner::token() on the PHP side, which reads the same
- * header.
- */
-export declare const LATTICE_REF_HEADER = "X-Lattice-Ref";
-export declare function latestRef(componentRef: string): string;
-export declare function storeRefreshedRef(componentRef: string, refreshed: string): void;
-export declare function clearRefreshedRefs(): void;
-export declare function withRefHeader(componentRef: string): Record<string, string>;

package/dist/core/component-ref.js

@@ -1,33 +0,0 @@
-//#region resources/js/core/component-ref.ts
-/**
-* The signed component reference travels to the server as the `X-Lattice-Ref`
-* request header on every interactive request (GET and writes alike). This must
-* match ComponentReferenceSigner::token() on the PHP side, which reads the same
-* header.
-*/
-var LATTICE_REF_HEADER = "X-Lattice-Ref";
-/**
-* Refs are sealed with a lifetime and baked into node props at render time, so
-* a long-lived tab cannot pick up a renewed token through React state. Renewed
-* tokens are instead kept here, keyed by the original prop value, and resolved
-* whenever a ref travels — every consumer keeps passing the ref it was rendered
-* with.
-*/
-var refreshedRefs = /* @__PURE__ */ new Map();
-function latestRef(componentRef) {
-	return refreshedRefs.get(componentRef) ?? componentRef;
-}
-function storeRefreshedRef(componentRef, refreshed) {
-	refreshedRefs.set(componentRef, refreshed);
-}
-function clearRefreshedRefs() {
-	refreshedRefs.clear();
-}
-function withRefHeader(componentRef) {
-	const ref = latestRef(componentRef);
-	return ref ? { [LATTICE_REF_HEADER]: ref } : {};
-}
-//#endregion
-export { LATTICE_REF_HEADER, clearRefreshedRefs, latestRef, storeRefreshedRef, withRefHeader };
-
-//# sourceMappingURL=component-ref.js.map

package/dist/core/component-ref.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"component-ref.js","names":[],"sources":["../../resources/js/core/component-ref.ts"],"sourcesContent":["/**\n * The signed component reference travels to the server as the `X-Lattice-Ref`\n * request header on every interactive request (GET and writes alike). This must\n * match ComponentReferenceSigner::token() on the PHP side, which reads the same\n * header.\n */\nexport const LATTICE_REF_HEADER = \"X-Lattice-Ref\";\n\n/**\n * Refs are sealed with a lifetime and baked into node props at render time, so\n * a long-lived tab cannot pick up a renewed token through React state. Renewed\n * tokens are instead kept here, keyed by the original prop value, and resolved\n * whenever a ref travels — every consumer keeps passing the ref it was rendered\n * with.\n */\nconst refreshedRefs = new Map<string, string>();\n\nexport function latestRef(componentRef: string): string {\n  return refreshedRefs.get(componentRef) ?? componentRef;\n}\n\nexport function storeRefreshedRef(componentRef: string, refreshed: string): void {\n  refreshedRefs.set(componentRef, refreshed);\n}\n\nexport function clearRefreshedRefs(): void {\n  refreshedRefs.clear();\n}\n\nexport function withRefHeader(componentRef: string): Record<string, string> {\n  const ref = latestRef(componentRef);\n\n  return ref ? { [LATTICE_REF_HEADER]: ref } : {};\n}\n"],"mappings":";;;;;;;AAMA,IAAa,qBAAqB;;;;;;;;AASlC,IAAM,gCAAgB,IAAI,IAAoB;AAE9C,SAAgB,UAAU,cAA8B;CACtD,OAAO,cAAc,IAAI,YAAY,KAAK;AAC5C;AAEA,SAAgB,kBAAkB,cAAsB,WAAyB;CAC/E,cAAc,IAAI,cAAc,SAAS;AAC3C;AAEA,SAAgB,qBAA2B;CACzC,cAAc,MAAM;AACtB;AAEA,SAAgB,cAAc,cAA8C;CAC1E,MAAM,MAAM,UAAU,YAAY;CAElC,OAAO,MAAM,GAAG,qBAAqB,IAAI,IAAI,CAAC;AAChD"}