@mapomodule/core 2.0.0-beta.1 → 2.0.0-beta.10

package/dist/runtime/composables/useMapo.js

@@ -0,0 +1,15 @@
+import { useSnackStore } from "@mapomodule/store/runtime/stores/snack";
+import { useConfirmStore } from "@mapomodule/store/runtime/stores/confirm";
+import { useMapoAuth } from "../auth/useMapoAuth.js";
+import { useCrud } from "../api/crud.js";
+export function useMapo(options = {}) {
+  return {
+    $api: {
+      crud: (endpoint) => useCrud(endpoint)
+    },
+    $auth: useMapoAuth(options),
+    $snack: useSnackStore(),
+    $confirm: useConfirmStore(),
+    $options: options
+  };
+}

package/dist/runtime/middleware/auth.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Route middleware that protects authenticated pages.
+ *
+ * If the user is not authenticated, it redirects to the configured login page
+ * and appends the current route (`to.fullPath`) as a `redirect` query param,
+ * so the app can return the user to the original destination after login.
+ */
+declare const _default: import("nuxt/app").RouteMiddleware;
+export default _default;
+//# sourceMappingURL=auth.d.ts.map

package/dist/runtime/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/runtime/middleware/auth.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;;AACH,wBASG"}

package/dist/runtime/middleware/auth.js

@@ -0,0 +1,15 @@
+import {
+  defineNuxtRouteMiddleware,
+  navigateTo,
+  useRuntimeConfig
+} from "nuxt/app";
+import { useAuthStore } from "@mapomodule/store/runtime/stores/auth";
+export default defineNuxtRouteMiddleware((to) => {
+  const loginUrl = useRuntimeConfig().public.mapoCore.loginUrl;
+  const auth = useAuthStore();
+  if (!auth.isAuthenticated) {
+    return navigateTo(
+      `${loginUrl}?redirect=${encodeURIComponent(to.fullPath)}`
+    );
+  }
+});

package/dist/runtime/middleware/permissions.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Route middleware that enforces page-level permissions from `to.meta.permissions`.
+ *
+ * Supported formats:
+ * - `string[]`: all listed raw permission codenames are required.
+ * - `{ model: string }`: permissions are derived from codenames ending with
+ *   `_<model>` (for example, `view_article`, `change_article`).
+ *
+ * Behavior:
+ * - If no permissions are declared, access is allowed.
+ * - Superusers always pass; for model-based permissions, full CRUD actions are
+ *   exposed in `auth.pagePermissions[routeName]`.
+ * - For regular users, access is denied with HTTP 403 when required permissions
+ *   are missing (or `view` is missing for model-based permissions).
+ * - For allowed model-based routes, resolved actions are stored in
+ *   `auth.pagePermissions[routeName]`.
+ */
+declare const _default: import("nuxt/app").RouteMiddleware;
+export default _default;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/runtime/middleware/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/runtime/middleware/permissions.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;GAgBG;;AACH,wBA6BG"}

package/dist/runtime/middleware/permissions.js

@@ -0,0 +1,27 @@
+import { defineNuxtRouteMiddleware, createError } from "nuxt/app";
+import { useAuthStore } from "@mapomodule/store/runtime/stores/auth";
+export default defineNuxtRouteMiddleware((to) => {
+  const auth = useAuthStore();
+  const perms = to.meta.permissions;
+  if (!perms) return;
+  if (auth.info?.is_superuser) {
+    if (!Array.isArray(perms)) {
+      auth.pagePermissions[String(to.name)] = [
+        "view",
+        "add",
+        "change",
+        "delete"
+      ];
+    }
+    return;
+  }
+  if (Array.isArray(perms)) {
+    if (!perms.every((p) => auth.rawPermissions.includes(p)))
+      throw createError({ statusCode: 403, message: "Forbidden" });
+  } else {
+    const actions = auth.rawPermissions.filter((p) => p.endsWith(`_${perms.model}`)).map((p) => p.replace(`_${perms.model}`, ""));
+    if (!actions.includes("view"))
+      throw createError({ statusCode: 403, message: "Forbidden" });
+    auth.pagePermissions[String(to.name)] = actions;
+  }
+});

package/dist/runtime/middleware/roles.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Route middleware that enforces role-based access from `to.meta.roles`.
+ *
+ * Access rules:
+ * - If no roles are configured on the route, access is allowed.
+ * - Superusers always bypass role checks.
+ * - For other users, at least one required role must match a user group.
+ * - If no match is found, navigation is blocked with HTTP 403.
+ */
+declare const _default: import("nuxt/app").RouteMiddleware;
+export default _default;
+//# sourceMappingURL=roles.d.ts.map

package/dist/runtime/middleware/roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../../src/runtime/middleware/roles.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;;AACH,wBAUG"}

package/dist/runtime/middleware/roles.js

@@ -0,0 +1,13 @@
+import { defineNuxtRouteMiddleware, createError } from "nuxt/app";
+import { useAuthStore } from "@mapomodule/store/runtime/stores/auth";
+export default defineNuxtRouteMiddleware((to) => {
+  const auth = useAuthStore();
+  const required = to.meta.roles;
+  if (!required?.length) return;
+  if (auth.info?.is_superuser) return;
+  const userGroups = auth.info?.groups ?? [];
+  const hasRole = required.some((r) => userGroups.includes(r));
+  if (!hasRole) {
+    throw createError({ statusCode: 403, message: "Forbidden" });
+  }
+});

package/dist/runtime/page-meta.nuxt.d.ts

@@ -0,0 +1,23 @@
+declare module "#app" {
+  interface PageMeta {
+    /**
+     * Permissions required to access this route. Checked by the 'permissions' middleware and sidebar visibility.
+     * - `{ model: string }` — derives `view_<model>` from a Django model name and populates `authStore.pagePermissions`
+     * - `string[]` — raw Django permission codenames (e.g. `['view_article', 'change_article']`)
+     */
+    permissions?: { model: string } | string[];
+    /** Required role/group names. Checked by the 'roles' middleware. */
+    roles?: string[];
+  }
+}
+
+declare module "vue-router" {
+  interface RouteMeta {
+    permissions?: { model: string } | string[];
+    roles?: string[];
+    /** Route middleware names applied to this route. Read by useCanAccessRoute for sidebar visibility. */
+    middleware?: string | string[];
+  }
+}
+
+export {};

package/dist/runtime/plugins/00.fetch.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Registers the global Mapo fetch client and loading state.
+ *
+ * The plugin provides:
+ * - `$mapoFetch`: a shared `$fetch` instance with centralized request/response hooks.
+ * - `$mapoFetchLoading`: a computed boolean based on a global pending-request counter.
+ *
+ * Error handling behavior:
+ * - `401` (except logout calls): reset auth state and, on client, redirect to login
+ *   with the current route encoded in a `redirect` query parameter.
+ * - `403`: show a global "Permission denied" error snackbar.
+ */
+declare const _default: import("nuxt/app").Plugin<{
+    mapoFetch: import("nitropack/types").$Fetch<unknown, import("nitropack/types").NitroFetchRequest>;
+    mapoFetchLoading: import("vue").ComputedRef<boolean>;
+}> & import("nuxt/app").ObjectPlugin<{
+    mapoFetch: import("nitropack/types").$Fetch<unknown, import("nitropack/types").NitroFetchRequest>;
+    mapoFetchLoading: import("vue").ComputedRef<boolean>;
+}>;
+export default _default;
+//# sourceMappingURL=00.fetch.d.ts.map

package/dist/runtime/plugins/00.fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"00.fetch.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugins/00.fetch.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;GAWG;;;;;;;;AACH,wBAmEG"}

package/dist/runtime/plugins/00.fetch.js

@@ -0,0 +1,61 @@
+import { ref, computed } from "vue";
+import {
+  defineNuxtPlugin,
+  navigateTo,
+  useRequestHeaders,
+  useRoute,
+  useRuntimeConfig
+} from "nuxt/app";
+import { useAuthStore } from "@mapomodule/store/runtime/stores/auth";
+import { useSnackStore } from "@mapomodule/store/runtime/stores/snack";
+export default defineNuxtPlugin({
+  name: "mapo-core:fetch",
+  enforce: "pre",
+  setup() {
+    const rc = useRuntimeConfig().public.mapoCore;
+    const logoutUrl = rc.logoutUrl;
+    const loginUrl = rc.loginUrl;
+    let redirectInFlight = false;
+    const handle = (status, requestUrl) => {
+      if (status === 401 && !requestUrl.includes(logoutUrl) && !redirectInFlight) {
+        redirectInFlight = true;
+        const auth = useAuthStore();
+        auth.reset();
+        if (import.meta.client) {
+          const route = useRoute();
+          navigateTo(
+            `${loginUrl}?redirect=${encodeURIComponent(route.fullPath)}`
+          );
+        }
+      }
+      if (status === 403) {
+        useSnackStore().show("Permission denied", "error");
+      }
+    };
+    const pending = ref(0);
+    const mapoFetchLoading = computed(() => pending.value > 0);
+    const forwardedCookie = import.meta.server ? useRequestHeaders(["cookie"]).cookie : void 0;
+    const mapoFetch = $fetch.create({
+      onRequest({ options }) {
+        pending.value++;
+        if (forwardedCookie) {
+          const headers = new Headers(
+            options.headers
+          );
+          if (!headers.has("cookie")) headers.set("cookie", forwardedCookie);
+          options.headers = headers;
+        }
+      },
+      onResponse({ response, request }) {
+        pending.value--;
+        handle(response.status, String(request));
+      },
+      onRequestError() {
+        pending.value--;
+      }
+    });
+    return {
+      provide: { mapoFetch, mapoFetchLoading }
+    };
+  }
+});

package/dist/runtime/plugins/01.init.server.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Performs server-side bootstrap of Mapo runtime stores.
+ *
+ * On each SSR request, this plugin:
+ * - Activates the request Pinia instance and initializes auth/sidebar stores.
+ * - Restores sidebar UI state from cookies.
+ * - If the HttpOnly session cookie is present, calls the configured `userInfoApi`
+ *   (forwarding request cookies) to restore the authenticated user in the auth store.
+ *
+ * On session restore failure it resets auth state, and clears the session cookie only
+ * when the backend rejected the session (401/403) — never on a transport error.
+ */
+declare const _default: import("nuxt/app").Plugin<Record<string, unknown>> & import("nuxt/app").ObjectPlugin<Record<string, unknown>>;
+export default _default;
+//# sourceMappingURL=01.init.server.d.ts.map

package/dist/runtime/plugins/01.init.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"01.init.server.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugins/01.init.server.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;GAWG;;AACH,wBAuCG"}

package/dist/runtime/plugins/01.init.server.js

@@ -0,0 +1,35 @@
+import {
+  defineNuxtPlugin,
+  useRuntimeConfig,
+  useCookie,
+  useRequestHeaders
+} from "nuxt/app";
+import { setActivePinia } from "pinia";
+import { useAuthStore } from "@mapomodule/store/runtime/stores/auth";
+import { useSidebarStore } from "@mapomodule/store/runtime/stores/sidebar";
+import { CoreCookieEnum } from "../types.js";
+export default defineNuxtPlugin({
+  name: "mapo-core:init",
+  async setup(nuxtApp) {
+    const runtimeConfig = useRuntimeConfig().public.mapoCore;
+    const userInfoApi = runtimeConfig?.userInfoApi ?? "/api/profiles/me/";
+    const pinia = nuxtApp.$pinia;
+    setActivePinia(pinia);
+    const authStore = useAuthStore(pinia);
+    const sidebarStore = useSidebarStore(pinia);
+    sidebarStore.hydrateFromCookies();
+    const sessionCookie = useCookie(CoreCookieEnum.Session);
+    if (!sessionCookie.value) return;
+    try {
+      const headers = useRequestHeaders(["cookie"]);
+      const user = await nuxtApp.$mapoFetch(userInfoApi, { method: "GET", headers });
+      authStore.setUser(user);
+    } catch (e) {
+      console.error(`[mapo] Cannot restore session from cookie:
+${e}`);
+      authStore.reset();
+      const status = e?.status ?? e?.response?.status;
+      if (status === 401 || status === 403) sessionCookie.value = null;
+    }
+  }
+});

package/dist/runtime/types.d.ts

@@ -0,0 +1,75 @@
+export declare enum MultipartPolicyEnum {
+    Auto = "auto",
+    Force = "force",
+    Disable = "disable"
+}
+export type MultipartPolicy = `${MultipartPolicyEnum}`;
+export declare enum CoreCookieEnum {
+    Session = "__mapo_session"
+}
+export interface ListParams {
+    page?: number;
+    limit?: number;
+    search?: string;
+    ordering?: string;
+    [key: string]: unknown;
+}
+export interface PaginatedResponse<T> {
+    results: T[];
+    count: number;
+    next?: string | null;
+    previous?: string | null;
+}
+export type ApiResponse<T> = T;
+export interface CrudConfig {
+    baseURL?: string;
+    headers?: Record<string, string>;
+    [key: string]: unknown;
+}
+export interface CrudOptions {
+    multipart?: MultipartPolicy;
+}
+/**
+ * What an endpoint returns from OPTIONS. Deliberately loose: backends extend it
+ * (Camomilla adds `lang_info`), and clients read only the keys they know.
+ */
+export interface ResourceMetadata {
+    name?: string;
+    description?: string;
+    renders?: string[];
+    parses?: string[];
+    actions?: Record<string, unknown>;
+    [key: string]: unknown;
+}
+export interface CrudRepository<T> {
+    list(params?: ListParams, config?: CrudConfig): Promise<PaginatedResponse<T>>;
+    detail(id: string | number, config?: CrudConfig): Promise<T>;
+    create(data: Partial<T>, config?: CrudConfig, opts?: CrudOptions): Promise<T>;
+    update(id: string | number, data: Partial<T>, config?: CrudConfig, opts?: CrudOptions): Promise<T>;
+    partialUpdate(id: string | number, diff: Partial<T>, config?: CrudConfig, opts?: CrudOptions): Promise<T>;
+    delete(id: string | number, config?: CrudConfig): Promise<void>;
+    options(config?: CrudConfig): Promise<ResourceMetadata>;
+    updateOrCreate(data: Partial<T> & {
+        id?: string | number;
+    }, config?: CrudConfig, opts?: CrudOptions): Promise<T>;
+    updateOrder(startId: string | number, endId: string | number, config?: CrudConfig): Promise<void>;
+}
+export interface Credentials {
+    username: string;
+    password: string;
+}
+export interface AuthToken {
+    token: string;
+    [key: string]: unknown;
+}
+/**
+ * Shape of `runtimeConfig.public.mapoCore` as written by the module setup.
+ * All entries are guaranteed by the module `defaults`.
+ */
+export interface MapoCoreRuntimeConfig {
+    authLoginUrl: string;
+    userInfoApi: string;
+    logoutUrl: string;
+    loginUrl: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/runtime/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,KAAK,UAAU;IACf,OAAO,YAAY;CACpB;AAED,MAAM,MAAM,eAAe,GAAG,GAAG,mBAAmB,EAAE,CAAC;AAEvD,oBAAY,cAAc;IACxB,OAAO,mBAAmB;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,OAAO,EAAE,CAAC,EAAE,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;AAE/B,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,CACJ,EAAE,EAAE,MAAM,GAAG,MAAM,EACnB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAChB,MAAM,CAAC,EAAE,UAAU,EACnB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,aAAa,CACX,EAAE,EAAE,MAAM,GAAG,MAAM,EACnB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAChB,MAAM,CAAC,EAAE,UAAU,EACnB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxD,cAAc,CACZ,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,EAC3C,MAAM,CAAC,EAAE,UAAU,EACnB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,WAAW,CACT,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,MAAM,CAAC,EAAE,UAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/runtime/types.js

@@ -0,0 +1,10 @@
+export var MultipartPolicyEnum = /* @__PURE__ */ ((MultipartPolicyEnum2) => {
+  MultipartPolicyEnum2["Auto"] = "auto";
+  MultipartPolicyEnum2["Force"] = "force";
+  MultipartPolicyEnum2["Disable"] = "disable";
+  return MultipartPolicyEnum2;
+})(MultipartPolicyEnum || {});
+export var CoreCookieEnum = /* @__PURE__ */ ((CoreCookieEnum2) => {
+  CoreCookieEnum2["Session"] = "__mapo_session";
+  return CoreCookieEnum2;
+})(CoreCookieEnum || {});

package/dist/runtime/types.nuxt.d.ts

@@ -0,0 +1,18 @@
+import type { $Fetch } from "ofetch";
+
+declare module "nuxt/app" {
+  interface NuxtApp {
+    $mapoFetch: $Fetch;
+  }
+}
+
+declare module "vue-router" {
+  interface RouteMeta {
+    permissions?: { model: string } | string[];
+    roles?: string[];
+    /** Route middleware names applied to this route. Read by useCanAccessRoute for sidebar visibility. */
+    middleware?: string | string[];
+  }
+}
+
+export {};

package/dist/runtime/utils/fetchError.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Helpers to read the backend payload out of a failed `$mapoFetch` call.
+ *
+ * `ofetch` throws a `FetchError` that exposes the parsed response body as
+ * `error.data` (and `error.response._data`) — NOT as `error.response.data`.
+ * Reading the wrong path silently yields `undefined`, which turns every
+ * backend validation message into a generic "something went wrong".
+ * Use these helpers instead of destructuring the error by hand.
+ */
+/**
+ * Parsed response body of a failed request, or `undefined` when the request
+ * failed before a response was received (network error, abort…).
+ *
+ * @example
+ * try { await crud.create(model) }
+ * catch (err) {
+ *   const data = getErrorData<{ title?: string[] }>(err)
+ *   errors.value = data ?? {}
+ * }
+ */
+export declare function getErrorData<T = Record<string, unknown>>(error: unknown): T | undefined;
+/** HTTP status of a failed request, or `0` when no response was received. */
+export declare function getErrorStatus(error: unknown): number;
+/**
+ * `detail` message returned by the backend (DRF convention), when present.
+ * Falls back to `undefined` so callers can substitute a translated default.
+ */
+export declare function getErrorDetail(error: unknown): string | undefined;
+//# sourceMappingURL=fetchError.d.ts.map

package/dist/runtime/utils/fetchError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchError.d.ts","sourceRoot":"","sources":["../../../src/runtime/utils/fetchError.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtD,KAAK,EAAE,OAAO,GACb,CAAC,GAAG,SAAS,CAGf;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGrD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGjE"}

package/dist/runtime/utils/fetchError.js

@@ -0,0 +1,12 @@
+export function getErrorData(error) {
+  const e = error;
+  return e?.data ?? e?.response?._data;
+}
+export function getErrorStatus(error) {
+  const e = error;
+  return e?.status ?? e?.statusCode ?? e?.response?.status ?? 0;
+}
+export function getErrorDetail(error) {
+  const data = getErrorData(error);
+  return typeof data?.detail === "string" ? data.detail : void 0;
+}

package/dist/runtime/utils/useMapoFetch.d.ts

@@ -0,0 +1,30 @@
+import type { $Fetch } from "ofetch";
+import type { ComputedRef } from "vue";
+export interface UseMapoFetchReturn {
+    /** The auth-aware `$mapoFetch` instance (same one provided by the plugin). */
+    fetch: $Fetch;
+    /**
+     * `true` while at least one `$mapoFetch` request is in flight — globally,
+     * across the entire app. Incremented by the plugin-level `onRequest` hook
+     * and decremented by `onResponse` / `onResponseError`, so it stays accurate
+     * even for raw `useNuxtApp().$mapoFetch` calls outside this composable.
+     */
+    loading: ComputedRef<boolean>;
+}
+/**
+ * Returns the global `$mapoFetch` instance together with a centralized
+ * `loading` indicator that tracks **all** in-flight `$mapoFetch` requests,
+ * not just the ones made through this composable.
+ *
+ * @example
+ * ```ts
+ * const { fetch, loading } = useMapoFetch()
+ * await fetch('/api/articles/', { method: 'POST', body: payload })
+ * ```
+ *
+ * ```vue
+ * <UButton :loading="loading" @click="submit">Save</UButton>
+ * ```
+ */
+export declare function useMapoFetch(): UseMapoFetchReturn;
+//# sourceMappingURL=useMapoFetch.d.ts.map

package/dist/runtime/utils/useMapoFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useMapoFetch.d.ts","sourceRoot":"","sources":["../../../src/runtime/utils/useMapoFetch.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,KAAK,CAAC;AAEvC,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,IAAI,kBAAkB,CASjD"}

package/dist/runtime/utils/useMapoFetch.js

@@ -0,0 +1,8 @@
+import { useNuxtApp } from "nuxt/app";
+export function useMapoFetch() {
+  const nuxt = useNuxtApp();
+  return {
+    fetch: nuxt.$mapoFetch,
+    loading: nuxt.$mapoFetchLoading
+  };
+}

package/dist/types.d.mts

@@ -1,13 +1,13 @@
-import type { ModuleHooks, ModuleRuntimeHooks, ModuleRuntimeConfig, ModulePublicRuntimeConfig } from './module.mjs'
+import type { NuxtModule } from '@nuxt/schema'
 
-declare module '#app' {
-  interface RuntimeNuxtHooks extends ModuleRuntimeHooks {}
-}
+import type { default as Module } from './module.mjs'
 
-declare module '@nuxt/schema' {
-  interface NuxtHooks extends ModuleHooks {}
-  interface RuntimeConfig extends ModuleRuntimeConfig {}
-  interface PublicRuntimeConfig extends ModulePublicRuntimeConfig {}
-}
+export type ModuleOptions = typeof Module extends NuxtModule<infer O> ? Partial<O> : Record<string, any>
 
-export * from "./module.mjs"
+export { type ApiResponse, type AuthToken, type CoreCookieEnum, type Credentials, type CrudConfig, type CrudOptions, type CrudRepository, type ListParams, type MultipartPolicy, type MultipartPolicyEnum, type PaginatedResponse } from '../dist/runtime/types.js'
+
+export { type MapoApiLayer, type MapoFacade } from '../dist/runtime/composables/useMapo.js'
+
+export { type RoutePermissions } from '../dist/runtime/auth/useCanAccessRoute.js'
+
+export { type MapoOptions, default } from './module.mjs'

package/dist/types.d.ts

@@ -0,0 +1,13 @@
+export interface MapoOptions {
+    authLoginUrl?: string;
+    userInfoApi?: string;
+    logoutUrl?: string;
+    loginUrl?: string;
+}
+export declare const MAPO_DEFAULTS: {
+    authLoginUrl: string;
+    userInfoApi: string;
+    logoutUrl: string;
+    loginUrl: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,aAAa;;;;;CAKO,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mapomodule/core",
-  "version": "2.0.0-beta.1",
+  "version": "2.0.0-beta.10",
   "description": "Mapo core: API layer, auth, composables, middleware",
   "type": "module",
   "license": "MIT",
@@ -40,26 +40,26 @@
   "scripts": {
     "dev": "nuxt-module-build build --stub --watch",
     "build": "nuxt-module-build build && tsc -p tsconfig.build-types.json",
-    "prepare": "nuxt-module-build build --stub",
     "dev:prepare": "nuxt-module-build build --stub",
     "typecheck": "tsc --noEmit",
     "lint": "eslint src"
   },
   "dependencies": {
-    "@mapomodule/store": "2.0.0-beta.1",
-    "@mapomodule/utils": "2.0.0-beta.1"
+    "@mapomodule/store": "2.0.0-beta.6",
+    "@mapomodule/utils": "2.0.0-beta.6"
   },
   "peerDependencies": {
-    "nuxt": ">=4.0.0"
+    "nuxt": ">=4.0.0",
+    "pinia": "^3.0.0"
   },
   "devDependencies": {
     "@nuxt/kit": "4.4.2",
     "@nuxt/module-builder": "^1.0.2",
     "@nuxt/schema": "4.4.2",
-    "nuxt": "^4.4.2",
+    "nuxt": "^4.5.1",
     "ofetch": "^1.5.1",
     "pinia": "^3.0.4",
-    "vue": "^3.5.32",
-    "vue-router": "^5.0.4"
+    "vue": "^3.5.40",
+    "vue-router": "^5.2.0"
   }
 }

package/src/index.ts

@@ -2,3 +2,8 @@ export type * from "./module";
 export { MultipartPolicyEnum, CoreCookieEnum } from "./runtime/types";
 export { useCanAccessRoute } from "./runtime/auth/useCanAccessRoute";
 export { useMapoFetch } from "./runtime/utils/useMapoFetch";
+export {
+  getErrorData,
+  getErrorStatus,
+  getErrorDetail,
+} from "./runtime/utils/fetchError";

package/src/module.ts

@@ -40,6 +40,16 @@ export default defineNuxtModule<MapoOptions>({
   async setup(options, nuxt) {
     const resolver = createResolver(import.meta.url);
 
+    // In consuming apps this runtime lives inside node_modules, where Nuxt
+    // skips auto-import injection by default (workspace apps are unaffected:
+    // pnpm symlinks resolve outside node_modules). Opt back in and transpile
+    // the runtime for the SSR build.
+    nuxt.options.build.transpile.push(resolver.resolve("./runtime"));
+    nuxt.options.imports.transform ??= {};
+    (nuxt.options.imports.transform.include ??= []).push(
+      /@mapomodule[\\/]core[\\/]/,
+    );
+
     addTypeTemplate({
       filename: "types/mapo-core-page-meta.d.ts",
       getContents: () =>
@@ -50,7 +60,9 @@ export default defineNuxtModule<MapoOptions>({
     });
 
     if (!hasNuxtModule("@mapomodule/store")) {
-      await installModule("@mapomodule/store");
+      // Resolve from core's own node_modules: with pnpm's isolated layout the
+      // consuming app cannot resolve the bare "@mapomodule/store" specifier.
+      await installModule(await resolver.resolvePath("@mapomodule/store"));
     }
 
     // `defaults` guarantees these are set at runtime, but MapoOptions keeps