@mesob/auth-react 0.4.0 → 0.4.1

package/dist/components/authorization/deny.js

@@ -1,51 +1,8 @@
 "use client";
-
-// src/components/authorization/deny.tsx
-import { deny as canDeny } from "@mesob/common";
-
-// src/provider.tsx
-import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
-import { deepmerge } from "deepmerge-ts";
-import createFetchClient from "openapi-fetch";
-import createClient from "openapi-react-query";
-import { createContext, useContext, useMemo, useState } from "react";
-
-// src/utils/cookie.ts
-var isProduction = typeof process !== "undefined" && process.env.NODE_ENV === "production";
-
-// src/provider.tsx
-import { jsx } from "react/jsx-runtime";
-var SessionContext = createContext(null);
-var ApiContext = createContext(null);
-var ConfigContext = createContext(null);
-var queryClient = new QueryClient({
-  defaultOptions: {
-    queries: {
-      refetchOnWindowFocus: false
-    }
-  }
-});
-function useSession() {
-  const context = useContext(SessionContext);
-  if (!context) {
-    throw new Error("useSession must be used within MesobAuthProvider");
-  }
-  return context;
-}
-
-// src/components/authorization/deny.tsx
-import { Fragment, jsx as jsx2 } from "react/jsx-runtime";
-function Deny({ permissions, userPermissions, children }) {
-  const { isLoading, user } = useSession();
-  if (userPermissions === void 0 && isLoading) {
-    return null;
-  }
-  const resolvedPermissions = userPermissions ?? user?.permissions ?? [];
-  if (canDeny(permissions, resolvedPermissions)) {
-    return /* @__PURE__ */ jsx2(Fragment, { children });
-  }
-  return null;
-}
+import {
+  Deny
+} from "../../chunk-RLPZFLAS.js";
+import "../../chunk-72YRO3A7.js";
 export {
   Deny
 };

package/dist/components/authorization/deny.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/authorization/deny.tsx","../../../src/provider.tsx","../../../src/utils/cookie.ts"],"sourcesContent":["'use client';\n\nimport { deny as canDeny } from '@mesob/common';\nimport type { ReactNode } from 'react';\nimport { useSession } from '../../provider';\n\ntype DenyProps = {\n  permissions: readonly string[];\n  userPermissions?: readonly string[] | null;\n  children: ReactNode;\n};\n\nexport function Deny({ permissions, userPermissions, children }: DenyProps) {\n  const { isLoading, user } = useSession();\n\n  if (userPermissions === undefined && isLoading) {\n    return null;\n  }\n\n  const resolvedPermissions = userPermissions ?? user?.permissions ?? [];\n\n  if (canDeny(permissions, resolvedPermissions)) {\n    return <>{children}</>;\n  }\n\n  return null;\n}\n","'use client';\n\nimport { QueryClient, QueryClientProvider } from '@tanstack/react-query';\nimport { deepmerge } from 'deepmerge-ts';\nimport createFetchClient from 'openapi-fetch';\nimport createClient from 'openapi-react-query';\nimport type { ReactNode } from 'react';\nimport { createContext, useContext, useMemo, useState } from 'react';\nimport type { paths } from './data/openapi';\nimport { createTranslator } from './lib/translations';\nimport {\n  type AuthClientConfig,\n  type AuthResponse,\n  defaultAuthClientConfig,\n  type Session,\n  type User,\n} from './types';\nimport { getSessionCookieName } from './utils/cookie';\nimport { createCustomFetch } from './utils/custom-fetch';\n\n// biome-ignore lint/suspicious/noExplicitAny: OpenAPI hooks type\ntype OpenApiHooks = any;\n\n// --- Utility: Check if running on server ---\nfunction isServer(): boolean {\n  return typeof document === 'undefined';\n}\n\n/**\n * @deprecated Cookie is httpOnly and cannot be read client-side.\n * Use `useSession().isAuthenticated` instead.\n * This function always returns false on client.\n */\nexport function hasAuthCookie(_cookieName: string): boolean {\n  // Cookie is httpOnly, can't check client-side\n  // Always return false - use useSession() for auth status\n  return false;\n}\n\n// --- Types ---\nexport type AuthStatus = 'loading' | 'authenticated' | 'unauthenticated';\n\ntype AuthState = {\n  user: User | null;\n  session: Session | null;\n  status: AuthStatus;\n  error: Error | null;\n};\n\ntype SessionContextValue = AuthState & {\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  refresh: () => Promise<void>;\n  signOut: () => Promise<void>;\n};\n\ntype ApiContextValue = {\n  hooks: OpenApiHooks;\n  setAuth: (auth: AuthResponse) => void;\n  clearAuth: () => void;\n  refresh: () => Promise<void>;\n};\n\ntype ConfigContextValue = {\n  config: AuthClientConfig;\n  cookieName: string;\n  t: (key: string, params?: Record<string, string | number>) => string;\n};\n\nconst SessionContext = createContext<SessionContextValue | null>(null);\nconst ApiContext = createContext<ApiContextValue | null>(null);\nconst ConfigContext = createContext<ConfigContextValue | null>(null);\n\nconst queryClient = new QueryClient({\n  defaultOptions: {\n    queries: {\n      refetchOnWindowFocus: false,\n    },\n  },\n});\n\n// --- Hooks ---\n\n/**\n * Get session state including user, session, and auth status.\n * - `status`: 'loading' | 'authenticated' | 'unauthenticated'\n * - `isLoading`: true while fetching session\n * - `isAuthenticated`: true if user and session exist\n */\nexport function useSession(): SessionContextValue {\n  const context = useContext(SessionContext);\n  if (!context) {\n    throw new Error('useSession must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useApi(): ApiContextValue {\n  const context = useContext(ApiContext);\n  if (!context) {\n    throw new Error('useApi must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useConfig(): ConfigContextValue {\n  const context = useContext(ConfigContext);\n  if (!context) {\n    throw new Error('useConfig must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\n/**\n * @deprecated Cookie is httpOnly, can't be checked client-side.\n * Use `useSession().isAuthenticated` instead.\n */\nexport function useHasAuthCookie(): boolean {\n  const { status } = useSession();\n  return status === 'authenticated' || status === 'loading';\n}\n\n// --- Provider ---\n\ntype MesobAuthProviderProps = {\n  config: AuthClientConfig;\n  children: ReactNode;\n};\n\nexport function MesobAuthProvider({\n  config,\n  children,\n}: MesobAuthProviderProps) {\n  const mergedConfig = useMemo(\n    () =>\n      deepmerge(\n        { ...defaultAuthClientConfig } as Partial<AuthClientConfig>,\n        config,\n      ) as AuthClientConfig,\n    [config],\n  );\n\n  const api = useMemo(\n    () =>\n      createFetchClient<paths>({\n        baseUrl: mergedConfig.baseURL,\n        fetch: createCustomFetch(mergedConfig),\n      }),\n    [mergedConfig],\n  );\n\n  const hooks = useMemo(() => createClient(api), [api]);\n  const cookieName = useMemo(\n    () => getSessionCookieName(mergedConfig),\n    [mergedConfig],\n  );\n\n  return (\n    <QueryClientProvider client={queryClient}>\n      <AuthStateProvider\n        config={mergedConfig}\n        hooks={hooks}\n        cookieName={cookieName}\n      >\n        {children}\n      </AuthStateProvider>\n    </QueryClientProvider>\n  );\n}\n\ntype AuthStateProviderProps = {\n  config: AuthClientConfig;\n  hooks: OpenApiHooks;\n  cookieName: string;\n  children: ReactNode;\n};\n\nfunction AuthStateProvider({\n  config,\n  hooks,\n  cookieName,\n  children,\n}: AuthStateProviderProps) {\n  // Manual override for sign-out / sign-in\n  const [override, setOverride] = useState<AuthState | null>(null);\n\n  // Always fetch session - cookie is httpOnly, can't check client-side\n  // Server will read the cookie and return user/session if valid\n  const {\n    data: sessionData,\n    isLoading,\n    isFetched,\n    error: sessionError,\n    refetch,\n  } = hooks.useQuery(\n    'get',\n    '/session',\n    {},\n    {\n      enabled: !(override || isServer()),\n      refetchOnMount: false,\n      refetchOnWindowFocus: false,\n      refetchOnReconnect: false,\n      retry: false,\n      gcTime: 0,\n      staleTime: 0,\n    },\n  );\n\n  // Derive state directly - no useEffect\n  const user = override?.user ?? sessionData?.user ?? null;\n  const session = override?.session ?? sessionData?.session ?? null;\n  const error = override?.error ?? (sessionError as Error | null);\n\n  // Check error status code\n  const errorStatus = (() => {\n    if (!sessionError) {\n      return null;\n    }\n    const err = sessionError as { status?: number };\n    return err.status ?? null;\n  })();\n\n  // Check if error is a network/connection error\n  const isNetworkError = (() => {\n    if (!sessionError) {\n      return false;\n    }\n    const error = sessionError as Error & { cause?: unknown; data?: unknown };\n    const errorMessage =\n      error.message || String(error) || JSON.stringify(error);\n    // Network errors: TypeError, DOMException, or fetch failures\n    if (\n      error instanceof TypeError ||\n      error instanceof DOMException ||\n      error.name === 'TypeError' ||\n      errorMessage.includes('Failed to fetch') ||\n      errorMessage.includes('ERR_CONNECTION_REFUSED') ||\n      errorMessage.includes('NetworkError') ||\n      errorMessage.includes('Network request failed') ||\n      errorMessage.includes('fetch failed')\n    ) {\n      return true;\n    }\n    // Check error cause\n    if (error.cause) {\n      const causeStr = String(error.cause);\n      if (\n        causeStr.includes('Failed to fetch') ||\n        causeStr.includes('ERR_CONNECTION_REFUSED') ||\n        causeStr.includes('NetworkError')\n      ) {\n        return true;\n      }\n    }\n    return false;\n  })();\n\n  // Compute status\n  // biome-ignore lint: Status determination requires multiple checks\n  const status: AuthStatus = (() => {\n    if (override) {\n      return override.status;\n    }\n    if (isServer()) {\n      return 'loading';\n    }\n    if (user && session) {\n      return 'authenticated';\n    }\n    // Check for network errors or auth errors first - allow auth page to show\n    if (isNetworkError || errorStatus === 401) {\n      return 'unauthenticated';\n    }\n    // If we have an error but it's not a network error, still check loading state\n    if (sessionError && !isNetworkError && errorStatus !== 401) {\n      if (errorStatus && errorStatus >= 500) {\n        return 'authenticated';\n      }\n      // Other errors mean unauthenticated\n      if (isFetched) {\n        return 'unauthenticated';\n      }\n    }\n    if (isLoading || !isFetched) {\n      return 'loading';\n    }\n    if (isFetched && !user && !session) {\n      return 'unauthenticated';\n    }\n    return 'unauthenticated';\n  })();\n\n  const signOutMutation = hooks.useMutation('post', '/sign-out');\n  const t = createTranslator(config.messages || {});\n\n  const setAuth = (auth: AuthResponse) => {\n    setOverride({\n      user: auth.user,\n      session: auth.session,\n      status: 'authenticated',\n      error: null,\n    });\n  };\n\n  const clearAuth = () => {\n    setOverride({\n      user: null,\n      session: null,\n      status: 'unauthenticated',\n      error: null,\n    });\n  };\n\n  const refresh = async () => {\n    setOverride(null);\n    await refetch();\n  };\n\n  const signOut = async () => {\n    try {\n      await signOutMutation.mutateAsync({});\n    } finally {\n      clearAuth();\n    }\n  };\n\n  return (\n    <ConfigContext.Provider value={{ config, cookieName, t }}>\n      <ApiContext.Provider value={{ hooks, setAuth, clearAuth, refresh }}>\n        <SessionContext.Provider\n          value={{\n            user,\n            session,\n            status,\n            error,\n            isLoading: status === 'loading',\n            isAuthenticated: status === 'authenticated',\n            refresh,\n            signOut,\n          }}\n        >\n          {children}\n        </SessionContext.Provider>\n      </ApiContext.Provider>\n    </ConfigContext.Provider>\n  );\n}\n","import type { AuthClientConfig } from '../types';\n\nconst isProduction =\n  typeof process !== 'undefined' && process.env.NODE_ENV === 'production';\n\nexport const getSessionCookieName = (config: AuthClientConfig): string => {\n  const prefix = config.cookiePrefix || '';\n  const baseName = 'session_token';\n  if (prefix) {\n    return `${prefix}_${baseName}`;\n  }\n  return isProduction ? '__Host-session_token' : baseName;\n};\n"],"mappings":";;;AAEA,SAAS,QAAQ,eAAe;;;ACAhC,SAAS,aAAa,2BAA2B;AACjD,SAAS,iBAAiB;AAC1B,OAAO,uBAAuB;AAC9B,OAAO,kBAAkB;AAEzB,SAAS,eAAe,YAAY,SAAS,gBAAgB;;;ACL7D,IAAM,eACJ,OAAO,YAAY,eAAe,QAAQ,IAAI,aAAa;;;AD4JvD;AA1FN,IAAM,iBAAiB,cAA0C,IAAI;AACrE,IAAM,aAAa,cAAsC,IAAI;AAC7D,IAAM,gBAAgB,cAAyC,IAAI;AAEnE,IAAM,cAAc,IAAI,YAAY;AAAA,EAClC,gBAAgB;AAAA,IACd,SAAS;AAAA,MACP,sBAAsB;AAAA,IACxB;AAAA,EACF;AACF,CAAC;AAUM,SAAS,aAAkC;AAChD,QAAM,UAAU,WAAW,cAAc;AACzC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,SAAO;AACT;;;ADzEW,0BAAAA,YAAA;AAVJ,SAAS,KAAK,EAAE,aAAa,iBAAiB,SAAS,GAAc;AAC1E,QAAM,EAAE,WAAW,KAAK,IAAI,WAAW;AAEvC,MAAI,oBAAoB,UAAa,WAAW;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,sBAAsB,mBAAmB,MAAM,eAAe,CAAC;AAErE,MAAI,QAAQ,aAAa,mBAAmB,GAAG;AAC7C,WAAO,gBAAAA,KAAA,YAAG,UAAS;AAAA,EACrB;AAEA,SAAO;AACT;","names":["jsx"]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/components/authorization/grant.d.ts

@@ -1,12 +1,9 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ReactNode } from 'react';
-
+import type { ReactNode } from 'react';
 type GrantProps = {
     permissions: readonly string[];
     userPermissions?: readonly string[] | null;
     fallback?: ReactNode;
     children: ReactNode;
 };
-declare function Grant({ permissions, userPermissions, fallback, children, }: GrantProps): react_jsx_runtime.JSX.Element | null;
-
-export { Grant };
+export declare function Grant({ permissions, userPermissions, fallback, children, }: GrantProps): import("react/jsx-runtime").JSX.Element | null;
+export {};

package/dist/components/authorization/grant.js

@@ -1,56 +1,8 @@
 "use client";
-
-// src/components/authorization/grant.tsx
-import { grant as canGrant } from "@mesob/common";
-
-// src/provider.tsx
-import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
-import { deepmerge } from "deepmerge-ts";
-import createFetchClient from "openapi-fetch";
-import createClient from "openapi-react-query";
-import { createContext, useContext, useMemo, useState } from "react";
-
-// src/utils/cookie.ts
-var isProduction = typeof process !== "undefined" && process.env.NODE_ENV === "production";
-
-// src/provider.tsx
-import { jsx } from "react/jsx-runtime";
-var SessionContext = createContext(null);
-var ApiContext = createContext(null);
-var ConfigContext = createContext(null);
-var queryClient = new QueryClient({
-  defaultOptions: {
-    queries: {
-      refetchOnWindowFocus: false
-    }
-  }
-});
-function useSession() {
-  const context = useContext(SessionContext);
-  if (!context) {
-    throw new Error("useSession must be used within MesobAuthProvider");
-  }
-  return context;
-}
-
-// src/components/authorization/grant.tsx
-import { Fragment, jsx as jsx2 } from "react/jsx-runtime";
-function Grant({
-  permissions,
-  userPermissions,
-  fallback = null,
-  children
-}) {
-  const { isLoading, user } = useSession();
-  if (userPermissions === void 0 && isLoading) {
-    return null;
-  }
-  const resolvedPermissions = userPermissions ?? user?.permissions ?? [];
-  if (canGrant(permissions, resolvedPermissions)) {
-    return /* @__PURE__ */ jsx2(Fragment, { children });
-  }
-  return /* @__PURE__ */ jsx2(Fragment, { children: fallback });
-}
+import {
+  Grant
+} from "../../chunk-ZESFGO3K.js";
+import "../../chunk-72YRO3A7.js";
 export {
   Grant
 };

package/dist/components/authorization/grant.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/authorization/grant.tsx","../../../src/provider.tsx","../../../src/utils/cookie.ts"],"sourcesContent":["'use client';\n\nimport { grant as canGrant } from '@mesob/common';\nimport type { ReactNode } from 'react';\nimport { useSession } from '../../provider';\n\ntype GrantProps = {\n  permissions: readonly string[];\n  userPermissions?: readonly string[] | null;\n  fallback?: ReactNode;\n  children: ReactNode;\n};\n\nexport function Grant({\n  permissions,\n  userPermissions,\n  fallback = null,\n  children,\n}: GrantProps) {\n  const { isLoading, user } = useSession();\n\n  if (userPermissions === undefined && isLoading) {\n    return null;\n  }\n\n  const resolvedPermissions = userPermissions ?? user?.permissions ?? [];\n\n  if (canGrant(permissions, resolvedPermissions)) {\n    return <>{children}</>;\n  }\n\n  return <>{fallback}</>;\n}\n","'use client';\n\nimport { QueryClient, QueryClientProvider } from '@tanstack/react-query';\nimport { deepmerge } from 'deepmerge-ts';\nimport createFetchClient from 'openapi-fetch';\nimport createClient from 'openapi-react-query';\nimport type { ReactNode } from 'react';\nimport { createContext, useContext, useMemo, useState } from 'react';\nimport type { paths } from './data/openapi';\nimport { createTranslator } from './lib/translations';\nimport {\n  type AuthClientConfig,\n  type AuthResponse,\n  defaultAuthClientConfig,\n  type Session,\n  type User,\n} from './types';\nimport { getSessionCookieName } from './utils/cookie';\nimport { createCustomFetch } from './utils/custom-fetch';\n\n// biome-ignore lint/suspicious/noExplicitAny: OpenAPI hooks type\ntype OpenApiHooks = any;\n\n// --- Utility: Check if running on server ---\nfunction isServer(): boolean {\n  return typeof document === 'undefined';\n}\n\n/**\n * @deprecated Cookie is httpOnly and cannot be read client-side.\n * Use `useSession().isAuthenticated` instead.\n * This function always returns false on client.\n */\nexport function hasAuthCookie(_cookieName: string): boolean {\n  // Cookie is httpOnly, can't check client-side\n  // Always return false - use useSession() for auth status\n  return false;\n}\n\n// --- Types ---\nexport type AuthStatus = 'loading' | 'authenticated' | 'unauthenticated';\n\ntype AuthState = {\n  user: User | null;\n  session: Session | null;\n  status: AuthStatus;\n  error: Error | null;\n};\n\ntype SessionContextValue = AuthState & {\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  refresh: () => Promise<void>;\n  signOut: () => Promise<void>;\n};\n\ntype ApiContextValue = {\n  hooks: OpenApiHooks;\n  setAuth: (auth: AuthResponse) => void;\n  clearAuth: () => void;\n  refresh: () => Promise<void>;\n};\n\ntype ConfigContextValue = {\n  config: AuthClientConfig;\n  cookieName: string;\n  t: (key: string, params?: Record<string, string | number>) => string;\n};\n\nconst SessionContext = createContext<SessionContextValue | null>(null);\nconst ApiContext = createContext<ApiContextValue | null>(null);\nconst ConfigContext = createContext<ConfigContextValue | null>(null);\n\nconst queryClient = new QueryClient({\n  defaultOptions: {\n    queries: {\n      refetchOnWindowFocus: false,\n    },\n  },\n});\n\n// --- Hooks ---\n\n/**\n * Get session state including user, session, and auth status.\n * - `status`: 'loading' | 'authenticated' | 'unauthenticated'\n * - `isLoading`: true while fetching session\n * - `isAuthenticated`: true if user and session exist\n */\nexport function useSession(): SessionContextValue {\n  const context = useContext(SessionContext);\n  if (!context) {\n    throw new Error('useSession must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useApi(): ApiContextValue {\n  const context = useContext(ApiContext);\n  if (!context) {\n    throw new Error('useApi must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useConfig(): ConfigContextValue {\n  const context = useContext(ConfigContext);\n  if (!context) {\n    throw new Error('useConfig must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\n/**\n * @deprecated Cookie is httpOnly, can't be checked client-side.\n * Use `useSession().isAuthenticated` instead.\n */\nexport function useHasAuthCookie(): boolean {\n  const { status } = useSession();\n  return status === 'authenticated' || status === 'loading';\n}\n\n// --- Provider ---\n\ntype MesobAuthProviderProps = {\n  config: AuthClientConfig;\n  children: ReactNode;\n};\n\nexport function MesobAuthProvider({\n  config,\n  children,\n}: MesobAuthProviderProps) {\n  const mergedConfig = useMemo(\n    () =>\n      deepmerge(\n        { ...defaultAuthClientConfig } as Partial<AuthClientConfig>,\n        config,\n      ) as AuthClientConfig,\n    [config],\n  );\n\n  const api = useMemo(\n    () =>\n      createFetchClient<paths>({\n        baseUrl: mergedConfig.baseURL,\n        fetch: createCustomFetch(mergedConfig),\n      }),\n    [mergedConfig],\n  );\n\n  const hooks = useMemo(() => createClient(api), [api]);\n  const cookieName = useMemo(\n    () => getSessionCookieName(mergedConfig),\n    [mergedConfig],\n  );\n\n  return (\n    <QueryClientProvider client={queryClient}>\n      <AuthStateProvider\n        config={mergedConfig}\n        hooks={hooks}\n        cookieName={cookieName}\n      >\n        {children}\n      </AuthStateProvider>\n    </QueryClientProvider>\n  );\n}\n\ntype AuthStateProviderProps = {\n  config: AuthClientConfig;\n  hooks: OpenApiHooks;\n  cookieName: string;\n  children: ReactNode;\n};\n\nfunction AuthStateProvider({\n  config,\n  hooks,\n  cookieName,\n  children,\n}: AuthStateProviderProps) {\n  // Manual override for sign-out / sign-in\n  const [override, setOverride] = useState<AuthState | null>(null);\n\n  // Always fetch session - cookie is httpOnly, can't check client-side\n  // Server will read the cookie and return user/session if valid\n  const {\n    data: sessionData,\n    isLoading,\n    isFetched,\n    error: sessionError,\n    refetch,\n  } = hooks.useQuery(\n    'get',\n    '/session',\n    {},\n    {\n      enabled: !(override || isServer()),\n      refetchOnMount: false,\n      refetchOnWindowFocus: false,\n      refetchOnReconnect: false,\n      retry: false,\n      gcTime: 0,\n      staleTime: 0,\n    },\n  );\n\n  // Derive state directly - no useEffect\n  const user = override?.user ?? sessionData?.user ?? null;\n  const session = override?.session ?? sessionData?.session ?? null;\n  const error = override?.error ?? (sessionError as Error | null);\n\n  // Check error status code\n  const errorStatus = (() => {\n    if (!sessionError) {\n      return null;\n    }\n    const err = sessionError as { status?: number };\n    return err.status ?? null;\n  })();\n\n  // Check if error is a network/connection error\n  const isNetworkError = (() => {\n    if (!sessionError) {\n      return false;\n    }\n    const error = sessionError as Error & { cause?: unknown; data?: unknown };\n    const errorMessage =\n      error.message || String(error) || JSON.stringify(error);\n    // Network errors: TypeError, DOMException, or fetch failures\n    if (\n      error instanceof TypeError ||\n      error instanceof DOMException ||\n      error.name === 'TypeError' ||\n      errorMessage.includes('Failed to fetch') ||\n      errorMessage.includes('ERR_CONNECTION_REFUSED') ||\n      errorMessage.includes('NetworkError') ||\n      errorMessage.includes('Network request failed') ||\n      errorMessage.includes('fetch failed')\n    ) {\n      return true;\n    }\n    // Check error cause\n    if (error.cause) {\n      const causeStr = String(error.cause);\n      if (\n        causeStr.includes('Failed to fetch') ||\n        causeStr.includes('ERR_CONNECTION_REFUSED') ||\n        causeStr.includes('NetworkError')\n      ) {\n        return true;\n      }\n    }\n    return false;\n  })();\n\n  // Compute status\n  // biome-ignore lint: Status determination requires multiple checks\n  const status: AuthStatus = (() => {\n    if (override) {\n      return override.status;\n    }\n    if (isServer()) {\n      return 'loading';\n    }\n    if (user && session) {\n      return 'authenticated';\n    }\n    // Check for network errors or auth errors first - allow auth page to show\n    if (isNetworkError || errorStatus === 401) {\n      return 'unauthenticated';\n    }\n    // If we have an error but it's not a network error, still check loading state\n    if (sessionError && !isNetworkError && errorStatus !== 401) {\n      if (errorStatus && errorStatus >= 500) {\n        return 'authenticated';\n      }\n      // Other errors mean unauthenticated\n      if (isFetched) {\n        return 'unauthenticated';\n      }\n    }\n    if (isLoading || !isFetched) {\n      return 'loading';\n    }\n    if (isFetched && !user && !session) {\n      return 'unauthenticated';\n    }\n    return 'unauthenticated';\n  })();\n\n  const signOutMutation = hooks.useMutation('post', '/sign-out');\n  const t = createTranslator(config.messages || {});\n\n  const setAuth = (auth: AuthResponse) => {\n    setOverride({\n      user: auth.user,\n      session: auth.session,\n      status: 'authenticated',\n      error: null,\n    });\n  };\n\n  const clearAuth = () => {\n    setOverride({\n      user: null,\n      session: null,\n      status: 'unauthenticated',\n      error: null,\n    });\n  };\n\n  const refresh = async () => {\n    setOverride(null);\n    await refetch();\n  };\n\n  const signOut = async () => {\n    try {\n      await signOutMutation.mutateAsync({});\n    } finally {\n      clearAuth();\n    }\n  };\n\n  return (\n    <ConfigContext.Provider value={{ config, cookieName, t }}>\n      <ApiContext.Provider value={{ hooks, setAuth, clearAuth, refresh }}>\n        <SessionContext.Provider\n          value={{\n            user,\n            session,\n            status,\n            error,\n            isLoading: status === 'loading',\n            isAuthenticated: status === 'authenticated',\n            refresh,\n            signOut,\n          }}\n        >\n          {children}\n        </SessionContext.Provider>\n      </ApiContext.Provider>\n    </ConfigContext.Provider>\n  );\n}\n","import type { AuthClientConfig } from '../types';\n\nconst isProduction =\n  typeof process !== 'undefined' && process.env.NODE_ENV === 'production';\n\nexport const getSessionCookieName = (config: AuthClientConfig): string => {\n  const prefix = config.cookiePrefix || '';\n  const baseName = 'session_token';\n  if (prefix) {\n    return `${prefix}_${baseName}`;\n  }\n  return isProduction ? '__Host-session_token' : baseName;\n};\n"],"mappings":";;;AAEA,SAAS,SAAS,gBAAgB;;;ACAlC,SAAS,aAAa,2BAA2B;AACjD,SAAS,iBAAiB;AAC1B,OAAO,uBAAuB;AAC9B,OAAO,kBAAkB;AAEzB,SAAS,eAAe,YAAY,SAAS,gBAAgB;;;ACL7D,IAAM,eACJ,OAAO,YAAY,eAAe,QAAQ,IAAI,aAAa;;;AD4JvD;AA1FN,IAAM,iBAAiB,cAA0C,IAAI;AACrE,IAAM,aAAa,cAAsC,IAAI;AAC7D,IAAM,gBAAgB,cAAyC,IAAI;AAEnE,IAAM,cAAc,IAAI,YAAY;AAAA,EAClC,gBAAgB;AAAA,IACd,SAAS;AAAA,MACP,sBAAsB;AAAA,IACxB;AAAA,EACF;AACF,CAAC;AAUM,SAAS,aAAkC;AAChD,QAAM,UAAU,WAAW,cAAc;AACzC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,SAAO;AACT;;;ADnEW,0BAAAA,YAAA;AAfJ,SAAS,MAAM;AAAA,EACpB;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AACF,GAAe;AACb,QAAM,EAAE,WAAW,KAAK,IAAI,WAAW;AAEvC,MAAI,oBAAoB,UAAa,WAAW;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,sBAAsB,mBAAmB,MAAM,eAAe,CAAC;AAErE,MAAI,SAAS,aAAa,mBAAmB,GAAG;AAC9C,WAAO,gBAAAA,KAAA,YAAG,UAAS;AAAA,EACrB;AAEA,SAAO,gBAAAA,KAAA,YAAG,oBAAS;AACrB;","names":["jsx"]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/components/error-boundary.d.ts

@@ -1,7 +1,4 @@
-import * as react from 'react';
-import { ReactNode, Component, ErrorInfo } from 'react';
-import * as react_jsx_runtime from 'react/jsx-runtime';
-
+import { Component, type ErrorInfo, type ReactNode } from 'react';
 type ErrorBoundaryProps = {
     children: ReactNode;
     fallback?: (props: {
@@ -13,15 +10,14 @@ type ErrorBoundaryState = {
     hasError: boolean;
     error: Error | null;
 };
-declare class ErrorBoundary extends Component<ErrorBoundaryProps, ErrorBoundaryState> {
+export declare class ErrorBoundary extends Component<ErrorBoundaryProps, ErrorBoundaryState> {
     constructor(props: ErrorBoundaryProps);
     static getDerivedStateFromError(error: Error): ErrorBoundaryState;
     componentDidCatch(_error: Error, _errorInfo: ErrorInfo): void;
     reset: () => void;
-    render(): string | number | bigint | boolean | react_jsx_runtime.JSX.Element | Iterable<ReactNode> | Promise<string | number | bigint | boolean | react.ReactPortal | react.ReactElement<unknown, string | react.JSXElementConstructor<any>> | Iterable<ReactNode> | null | undefined> | null | undefined;
+    render(): string | number | bigint | boolean | import("react/jsx-runtime").JSX.Element | Iterable<ReactNode> | Promise<string | number | bigint | boolean | import("react").ReactPortal | import("react").ReactElement<unknown, string | import("react").JSXElementConstructor<any>> | Iterable<ReactNode> | null | undefined> | null | undefined;
 }
-declare function AuthErrorBoundary({ children }: {
+export declare function AuthErrorBoundary({ children }: {
     children: ReactNode;
-}): react_jsx_runtime.JSX.Element;
-
-export { AuthErrorBoundary, ErrorBoundary };
+}): import("react/jsx-runtime").JSX.Element;
+export {};

package/dist/components/error-boundary.js

@@ -1,47 +1,8 @@
 "use client";
-
-// src/components/error-boundary.tsx
-import { Button } from "@mesob/ui/components";
-import { Component } from "react";
-import { jsx, jsxs } from "react/jsx-runtime";
-var ErrorBoundary = class extends Component {
-  constructor(props) {
-    super(props);
-    this.state = { hasError: false, error: null };
-  }
-  static getDerivedStateFromError(error) {
-    return { hasError: true, error };
-  }
-  componentDidCatch(_error, _errorInfo) {
-  }
-  reset = () => {
-    this.setState({ hasError: false, error: null });
-  };
-  render() {
-    if (this.state.hasError && this.state.error) {
-      if (this.props.fallback) {
-        return this.props.fallback({
-          error: this.state.error,
-          reset: this.reset
-        });
-      }
-      return /* @__PURE__ */ jsx(ErrorFallback, { error: this.state.error, reset: this.reset });
-    }
-    return this.props.children;
-  }
-};
-function ErrorFallback({ error, reset }) {
-  return /* @__PURE__ */ jsx("div", { className: "flex flex-col items-center justify-center min-h-[400px] p-6", children: /* @__PURE__ */ jsxs("div", { className: "max-w-md w-full space-y-4 text-center", children: [
-    /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
-      /* @__PURE__ */ jsx("h2", { className: "text-2xl font-bold text-destructive", children: "Something went wrong" }),
-      /* @__PURE__ */ jsx("p", { className: "text-muted-foreground", children: error.message || "An unexpected error occurred" })
-    ] }),
-    /* @__PURE__ */ jsx(Button, { onClick: reset, variant: "outline", children: "Try again" })
-  ] }) });
-}
-function AuthErrorBoundary({ children }) {
-  return /* @__PURE__ */ jsx(ErrorBoundary, { children });
-}
+import {
+  AuthErrorBoundary,
+  ErrorBoundary
+} from "../chunk-7KXTL6NT.js";
 export {
   AuthErrorBoundary,
   ErrorBoundary

package/dist/components/error-boundary.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/error-boundary.tsx"],"sourcesContent":["'use client';\n\nimport { Button } from '@mesob/ui/components';\nimport { Component, type ErrorInfo, type ReactNode } from 'react';\n\ntype ErrorBoundaryProps = {\n  children: ReactNode;\n  fallback?: (props: { error: Error; reset: () => void }) => ReactNode;\n};\n\ntype ErrorBoundaryState = {\n  hasError: boolean;\n  error: Error | null;\n};\n\nexport class ErrorBoundary extends Component<\n  ErrorBoundaryProps,\n  ErrorBoundaryState\n> {\n  constructor(props: ErrorBoundaryProps) {\n    super(props);\n    this.state = { hasError: false, error: null };\n  }\n\n  static getDerivedStateFromError(error: Error): ErrorBoundaryState {\n    return { hasError: true, error };\n  }\n\n  componentDidCatch(_error: Error, _errorInfo: ErrorInfo) {\n    // Error logged via getDerivedStateFromError\n  }\n\n  reset = () => {\n    this.setState({ hasError: false, error: null });\n  };\n\n  render() {\n    if (this.state.hasError && this.state.error) {\n      if (this.props.fallback) {\n        return this.props.fallback({\n          error: this.state.error,\n          reset: this.reset,\n        });\n      }\n      return <ErrorFallback error={this.state.error} reset={this.reset} />;\n    }\n\n    return this.props.children;\n  }\n}\n\nfunction ErrorFallback({ error, reset }: { error: Error; reset: () => void }) {\n  return (\n    <div className=\"flex flex-col items-center justify-center min-h-[400px] p-6\">\n      <div className=\"max-w-md w-full space-y-4 text-center\">\n        <div className=\"space-y-2\">\n          <h2 className=\"text-2xl font-bold text-destructive\">\n            Something went wrong\n          </h2>\n          <p className=\"text-muted-foreground\">\n            {error.message || 'An unexpected error occurred'}\n          </p>\n        </div>\n        <Button onClick={reset} variant=\"outline\">\n          Try again\n        </Button>\n      </div>\n    </div>\n  );\n}\n\nexport function AuthErrorBoundary({ children }: { children: ReactNode }) {\n  return <ErrorBoundary>{children}</ErrorBoundary>;\n}\n"],"mappings":";;;AAEA,SAAS,cAAc;AACvB,SAAS,iBAAiD;AAyC7C,cAWL,YAXK;AA7BN,IAAM,gBAAN,cAA4B,UAGjC;AAAA,EACA,YAAY,OAA2B;AACrC,UAAM,KAAK;AACX,SAAK,QAAQ,EAAE,UAAU,OAAO,OAAO,KAAK;AAAA,EAC9C;AAAA,EAEA,OAAO,yBAAyB,OAAkC;AAChE,WAAO,EAAE,UAAU,MAAM,MAAM;AAAA,EACjC;AAAA,EAEA,kBAAkB,QAAe,YAAuB;AAAA,EAExD;AAAA,EAEA,QAAQ,MAAM;AACZ,SAAK,SAAS,EAAE,UAAU,OAAO,OAAO,KAAK,CAAC;AAAA,EAChD;AAAA,EAEA,SAAS;AACP,QAAI,KAAK,MAAM,YAAY,KAAK,MAAM,OAAO;AAC3C,UAAI,KAAK,MAAM,UAAU;AACvB,eAAO,KAAK,MAAM,SAAS;AAAA,UACzB,OAAO,KAAK,MAAM;AAAA,UAClB,OAAO,KAAK;AAAA,QACd,CAAC;AAAA,MACH;AACA,aAAO,oBAAC,iBAAc,OAAO,KAAK,MAAM,OAAO,OAAO,KAAK,OAAO;AAAA,IACpE;AAEA,WAAO,KAAK,MAAM;AAAA,EACpB;AACF;AAEA,SAAS,cAAc,EAAE,OAAO,MAAM,GAAwC;AAC5E,SACE,oBAAC,SAAI,WAAU,+DACb,+BAAC,SAAI,WAAU,yCACb;AAAA,yBAAC,SAAI,WAAU,aACb;AAAA,0BAAC,QAAG,WAAU,uCAAsC,kCAEpD;AAAA,MACA,oBAAC,OAAE,WAAU,yBACV,gBAAM,WAAW,gCACpB;AAAA,OACF;AAAA,IACA,oBAAC,UAAO,SAAS,OAAO,SAAQ,WAAU,uBAE1C;AAAA,KACF,GACF;AAEJ;AAEO,SAAS,kBAAkB,EAAE,SAAS,GAA4B;AACvE,SAAO,oBAAC,iBAAe,UAAS;AAClC;","names":[]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/components/iam/permission-selector.d.ts

@@ -1,6 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ReactNode } from 'react';
-
+import type { ReactNode } from 'react';
 type Permission = {
     id: string;
     description?: unknown;
@@ -14,6 +12,5 @@ type PermissionSelectorProps = {
     onSelect: (permissions: Permission[]) => void;
     excludeIds?: string[];
 };
-declare function PermissionSelector({ trigger, multiple, onSelect, excludeIds, }: PermissionSelectorProps): react_jsx_runtime.JSX.Element;
-
-export { PermissionSelector };
+export declare function PermissionSelector({ trigger, multiple, onSelect, excludeIds, }: PermissionSelectorProps): import("react/jsx-runtime").JSX.Element;
+export {};

package/dist/components/iam/permission-selector.js

@@ -1,121 +1,8 @@
 "use client";
-
-// src/components/iam/permission-selector.tsx
 import {
-  Badge,
-  EntitySelector,
-  useEntitySectionState
-} from "@mesob/ui/components";
-import { IconKey } from "@tabler/icons-react";
-
-// src/provider.tsx
-import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
-import { deepmerge } from "deepmerge-ts";
-import createFetchClient from "openapi-fetch";
-import createClient from "openapi-react-query";
-import { createContext, useContext, useMemo, useState } from "react";
-
-// src/utils/cookie.ts
-var isProduction = typeof process !== "undefined" && process.env.NODE_ENV === "production";
-
-// src/provider.tsx
-import { jsx } from "react/jsx-runtime";
-var SessionContext = createContext(null);
-var ApiContext = createContext(null);
-var ConfigContext = createContext(null);
-var queryClient = new QueryClient({
-  defaultOptions: {
-    queries: {
-      refetchOnWindowFocus: false
-    }
-  }
-});
-function useApi() {
-  const context = useContext(ApiContext);
-  if (!context) {
-    throw new Error("useApi must be used within MesobAuthProvider");
-  }
-  return context;
-}
-
-// src/components/iam/permission-selector.tsx
-import { jsx as jsx2, jsxs } from "react/jsx-runtime";
-var permissionColumns = [
-  {
-    key: "permission",
-    header: "Permission",
-    cell: (permission) => /* @__PURE__ */ jsxs("div", { className: "space-y-1", children: [
-      /* @__PURE__ */ jsx2("p", { className: "font-medium", children: permission.activity }),
-      /* @__PURE__ */ jsx2("p", { className: "font-mono text-xs text-muted-foreground", children: permission.id })
-    ] })
-  },
-  {
-    key: "scope",
-    header: "Scope",
-    cell: (permission) => /* @__PURE__ */ jsxs("div", { className: "flex flex-wrap gap-2", children: [
-      /* @__PURE__ */ jsx2(Badge, { variant: "secondary", children: permission.application }),
-      /* @__PURE__ */ jsx2(Badge, { variant: "outline", children: permission.feature })
-    ] })
-  }
-];
-function PermissionSelector({
-  trigger,
-  multiple = true,
-  onSelect,
-  excludeIds = []
-}) {
-  const { hooks } = useApi();
-  const state = useEntitySectionState({
-    defaultSort: "id",
-    defaultOrder: "asc",
-    defaultPageSize: 10,
-    searchParamName: "search"
-  });
-  const permissionsQuery = state.queryConfig;
-  const { data, isPending, isFetching } = hooks.useQuery(
-    "get",
-    "/permissions",
-    permissionsQuery
-  );
-  const items = (data?.permissions ?? []).filter(
-    (permission) => !excludeIds.includes(permission.id)
-  );
-  const config = {
-    title: "Select permission(s)",
-    multiple,
-    entityName: "permission",
-    entityIcon: IconKey,
-    columns: permissionColumns,
-    getItemLabel: (permission) => permission.id,
-    searchPlaceholder: "Search permissions...",
-    filterOptions: [
-      { label: "All", value: "" },
-      { label: "Application", value: "application" },
-      { label: "Feature", value: "feature" },
-      { label: "Activity", value: "activity" }
-    ],
-    sortOptions: [
-      { label: "ID", value: "id" },
-      { label: "Application", value: "application" },
-      { label: "Feature", value: "feature" },
-      { label: "Activity", value: "activity" }
-    ],
-    showViewToggle: false,
-    wrapHeaderInCard: false
-  };
-  return /* @__PURE__ */ jsx2(
-    EntitySelector,
-    {
-      trigger,
-      config,
-      onSelect,
-      items,
-      total: items.length,
-      isLoading: isPending || isFetching,
-      state
-    }
-  );
-}
+  PermissionSelector
+} from "../../chunk-GRT6EBR6.js";
+import "../../chunk-72YRO3A7.js";
 export {
   PermissionSelector
 };

package/dist/components/iam/permission-selector.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/iam/permission-selector.tsx","../../../src/provider.tsx","../../../src/utils/cookie.ts"],"sourcesContent":["'use client';\n\nimport {\n  Badge,\n  EntitySelector,\n  type EntitySelectorColumn,\n  type EntitySelectorConfig,\n  useEntitySectionState,\n} from '@mesob/ui/components';\nimport { IconKey } from '@tabler/icons-react';\nimport type { ReactNode } from 'react';\nimport type { paths } from '../../data/openapi';\nimport { useApi } from '../../provider';\n\ntype Permission = {\n  id: string;\n  description?: unknown;\n  activity: string;\n  application: string;\n  feature: string;\n};\n\nconst permissionColumns: EntitySelectorColumn<Permission>[] = [\n  {\n    key: 'permission',\n    header: 'Permission',\n    cell: (permission) => (\n      <div className=\"space-y-1\">\n        <p className=\"font-medium\">{permission.activity}</p>\n        <p className=\"font-mono text-xs text-muted-foreground\">\n          {permission.id}\n        </p>\n      </div>\n    ),\n  },\n  {\n    key: 'scope',\n    header: 'Scope',\n    cell: (permission) => (\n      <div className=\"flex flex-wrap gap-2\">\n        <Badge variant=\"secondary\">{permission.application}</Badge>\n        <Badge variant=\"outline\">{permission.feature}</Badge>\n      </div>\n    ),\n  },\n];\n\ntype PermissionSelectorProps = {\n  trigger: ReactNode;\n  multiple?: boolean;\n  onSelect: (permissions: Permission[]) => void;\n  excludeIds?: string[];\n};\n\nexport function PermissionSelector({\n  trigger,\n  multiple = true,\n  onSelect,\n  excludeIds = [],\n}: PermissionSelectorProps) {\n  const { hooks } = useApi();\n  const state = useEntitySectionState({\n    defaultSort: 'id',\n    defaultOrder: 'asc',\n    defaultPageSize: 10,\n    searchParamName: 'search',\n  });\n  const permissionsQuery = state.queryConfig as {\n    params: {\n      query: NonNullable<paths['/permissions']['get']['parameters']['query']>;\n    };\n  };\n\n  const { data, isPending, isFetching } = hooks.useQuery(\n    'get',\n    '/permissions',\n    permissionsQuery,\n  );\n\n  const items = ((data?.permissions ?? []) as Permission[]).filter(\n    (permission) => !excludeIds.includes(permission.id),\n  );\n\n  const config: EntitySelectorConfig<Permission> = {\n    title: 'Select permission(s)',\n    multiple,\n    entityName: 'permission',\n    entityIcon: IconKey,\n    columns: permissionColumns,\n    getItemLabel: (permission) => permission.id,\n    searchPlaceholder: 'Search permissions...',\n    filterOptions: [\n      { label: 'All', value: '' },\n      { label: 'Application', value: 'application' },\n      { label: 'Feature', value: 'feature' },\n      { label: 'Activity', value: 'activity' },\n    ],\n    sortOptions: [\n      { label: 'ID', value: 'id' },\n      { label: 'Application', value: 'application' },\n      { label: 'Feature', value: 'feature' },\n      { label: 'Activity', value: 'activity' },\n    ],\n    showViewToggle: false,\n    wrapHeaderInCard: false,\n  };\n\n  return (\n    <EntitySelector<Permission>\n      trigger={trigger}\n      config={config}\n      onSelect={onSelect}\n      items={items}\n      total={items.length}\n      isLoading={isPending || isFetching}\n      state={state}\n    />\n  );\n}\n","'use client';\n\nimport { QueryClient, QueryClientProvider } from '@tanstack/react-query';\nimport { deepmerge } from 'deepmerge-ts';\nimport createFetchClient from 'openapi-fetch';\nimport createClient from 'openapi-react-query';\nimport type { ReactNode } from 'react';\nimport { createContext, useContext, useMemo, useState } from 'react';\nimport type { paths } from './data/openapi';\nimport { createTranslator } from './lib/translations';\nimport {\n  type AuthClientConfig,\n  type AuthResponse,\n  defaultAuthClientConfig,\n  type Session,\n  type User,\n} from './types';\nimport { getSessionCookieName } from './utils/cookie';\nimport { createCustomFetch } from './utils/custom-fetch';\n\n// biome-ignore lint/suspicious/noExplicitAny: OpenAPI hooks type\ntype OpenApiHooks = any;\n\n// --- Utility: Check if running on server ---\nfunction isServer(): boolean {\n  return typeof document === 'undefined';\n}\n\n/**\n * @deprecated Cookie is httpOnly and cannot be read client-side.\n * Use `useSession().isAuthenticated` instead.\n * This function always returns false on client.\n */\nexport function hasAuthCookie(_cookieName: string): boolean {\n  // Cookie is httpOnly, can't check client-side\n  // Always return false - use useSession() for auth status\n  return false;\n}\n\n// --- Types ---\nexport type AuthStatus = 'loading' | 'authenticated' | 'unauthenticated';\n\ntype AuthState = {\n  user: User | null;\n  session: Session | null;\n  status: AuthStatus;\n  error: Error | null;\n};\n\ntype SessionContextValue = AuthState & {\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  refresh: () => Promise<void>;\n  signOut: () => Promise<void>;\n};\n\ntype ApiContextValue = {\n  hooks: OpenApiHooks;\n  setAuth: (auth: AuthResponse) => void;\n  clearAuth: () => void;\n  refresh: () => Promise<void>;\n};\n\ntype ConfigContextValue = {\n  config: AuthClientConfig;\n  cookieName: string;\n  t: (key: string, params?: Record<string, string | number>) => string;\n};\n\nconst SessionContext = createContext<SessionContextValue | null>(null);\nconst ApiContext = createContext<ApiContextValue | null>(null);\nconst ConfigContext = createContext<ConfigContextValue | null>(null);\n\nconst queryClient = new QueryClient({\n  defaultOptions: {\n    queries: {\n      refetchOnWindowFocus: false,\n    },\n  },\n});\n\n// --- Hooks ---\n\n/**\n * Get session state including user, session, and auth status.\n * - `status`: 'loading' | 'authenticated' | 'unauthenticated'\n * - `isLoading`: true while fetching session\n * - `isAuthenticated`: true if user and session exist\n */\nexport function useSession(): SessionContextValue {\n  const context = useContext(SessionContext);\n  if (!context) {\n    throw new Error('useSession must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useApi(): ApiContextValue {\n  const context = useContext(ApiContext);\n  if (!context) {\n    throw new Error('useApi must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\nexport function useConfig(): ConfigContextValue {\n  const context = useContext(ConfigContext);\n  if (!context) {\n    throw new Error('useConfig must be used within MesobAuthProvider');\n  }\n  return context;\n}\n\n/**\n * @deprecated Cookie is httpOnly, can't be checked client-side.\n * Use `useSession().isAuthenticated` instead.\n */\nexport function useHasAuthCookie(): boolean {\n  const { status } = useSession();\n  return status === 'authenticated' || status === 'loading';\n}\n\n// --- Provider ---\n\ntype MesobAuthProviderProps = {\n  config: AuthClientConfig;\n  children: ReactNode;\n};\n\nexport function MesobAuthProvider({\n  config,\n  children,\n}: MesobAuthProviderProps) {\n  const mergedConfig = useMemo(\n    () =>\n      deepmerge(\n        { ...defaultAuthClientConfig } as Partial<AuthClientConfig>,\n        config,\n      ) as AuthClientConfig,\n    [config],\n  );\n\n  const api = useMemo(\n    () =>\n      createFetchClient<paths>({\n        baseUrl: mergedConfig.baseURL,\n        fetch: createCustomFetch(mergedConfig),\n      }),\n    [mergedConfig],\n  );\n\n  const hooks = useMemo(() => createClient(api), [api]);\n  const cookieName = useMemo(\n    () => getSessionCookieName(mergedConfig),\n    [mergedConfig],\n  );\n\n  return (\n    <QueryClientProvider client={queryClient}>\n      <AuthStateProvider\n        config={mergedConfig}\n        hooks={hooks}\n        cookieName={cookieName}\n      >\n        {children}\n      </AuthStateProvider>\n    </QueryClientProvider>\n  );\n}\n\ntype AuthStateProviderProps = {\n  config: AuthClientConfig;\n  hooks: OpenApiHooks;\n  cookieName: string;\n  children: ReactNode;\n};\n\nfunction AuthStateProvider({\n  config,\n  hooks,\n  cookieName,\n  children,\n}: AuthStateProviderProps) {\n  // Manual override for sign-out / sign-in\n  const [override, setOverride] = useState<AuthState | null>(null);\n\n  // Always fetch session - cookie is httpOnly, can't check client-side\n  // Server will read the cookie and return user/session if valid\n  const {\n    data: sessionData,\n    isLoading,\n    isFetched,\n    error: sessionError,\n    refetch,\n  } = hooks.useQuery(\n    'get',\n    '/session',\n    {},\n    {\n      enabled: !(override || isServer()),\n      refetchOnMount: false,\n      refetchOnWindowFocus: false,\n      refetchOnReconnect: false,\n      retry: false,\n      gcTime: 0,\n      staleTime: 0,\n    },\n  );\n\n  // Derive state directly - no useEffect\n  const user = override?.user ?? sessionData?.user ?? null;\n  const session = override?.session ?? sessionData?.session ?? null;\n  const error = override?.error ?? (sessionError as Error | null);\n\n  // Check error status code\n  const errorStatus = (() => {\n    if (!sessionError) {\n      return null;\n    }\n    const err = sessionError as { status?: number };\n    return err.status ?? null;\n  })();\n\n  // Check if error is a network/connection error\n  const isNetworkError = (() => {\n    if (!sessionError) {\n      return false;\n    }\n    const error = sessionError as Error & { cause?: unknown; data?: unknown };\n    const errorMessage =\n      error.message || String(error) || JSON.stringify(error);\n    // Network errors: TypeError, DOMException, or fetch failures\n    if (\n      error instanceof TypeError ||\n      error instanceof DOMException ||\n      error.name === 'TypeError' ||\n      errorMessage.includes('Failed to fetch') ||\n      errorMessage.includes('ERR_CONNECTION_REFUSED') ||\n      errorMessage.includes('NetworkError') ||\n      errorMessage.includes('Network request failed') ||\n      errorMessage.includes('fetch failed')\n    ) {\n      return true;\n    }\n    // Check error cause\n    if (error.cause) {\n      const causeStr = String(error.cause);\n      if (\n        causeStr.includes('Failed to fetch') ||\n        causeStr.includes('ERR_CONNECTION_REFUSED') ||\n        causeStr.includes('NetworkError')\n      ) {\n        return true;\n      }\n    }\n    return false;\n  })();\n\n  // Compute status\n  // biome-ignore lint: Status determination requires multiple checks\n  const status: AuthStatus = (() => {\n    if (override) {\n      return override.status;\n    }\n    if (isServer()) {\n      return 'loading';\n    }\n    if (user && session) {\n      return 'authenticated';\n    }\n    // Check for network errors or auth errors first - allow auth page to show\n    if (isNetworkError || errorStatus === 401) {\n      return 'unauthenticated';\n    }\n    // If we have an error but it's not a network error, still check loading state\n    if (sessionError && !isNetworkError && errorStatus !== 401) {\n      if (errorStatus && errorStatus >= 500) {\n        return 'authenticated';\n      }\n      // Other errors mean unauthenticated\n      if (isFetched) {\n        return 'unauthenticated';\n      }\n    }\n    if (isLoading || !isFetched) {\n      return 'loading';\n    }\n    if (isFetched && !user && !session) {\n      return 'unauthenticated';\n    }\n    return 'unauthenticated';\n  })();\n\n  const signOutMutation = hooks.useMutation('post', '/sign-out');\n  const t = createTranslator(config.messages || {});\n\n  const setAuth = (auth: AuthResponse) => {\n    setOverride({\n      user: auth.user,\n      session: auth.session,\n      status: 'authenticated',\n      error: null,\n    });\n  };\n\n  const clearAuth = () => {\n    setOverride({\n      user: null,\n      session: null,\n      status: 'unauthenticated',\n      error: null,\n    });\n  };\n\n  const refresh = async () => {\n    setOverride(null);\n    await refetch();\n  };\n\n  const signOut = async () => {\n    try {\n      await signOutMutation.mutateAsync({});\n    } finally {\n      clearAuth();\n    }\n  };\n\n  return (\n    <ConfigContext.Provider value={{ config, cookieName, t }}>\n      <ApiContext.Provider value={{ hooks, setAuth, clearAuth, refresh }}>\n        <SessionContext.Provider\n          value={{\n            user,\n            session,\n            status,\n            error,\n            isLoading: status === 'loading',\n            isAuthenticated: status === 'authenticated',\n            refresh,\n            signOut,\n          }}\n        >\n          {children}\n        </SessionContext.Provider>\n      </ApiContext.Provider>\n    </ConfigContext.Provider>\n  );\n}\n","import type { AuthClientConfig } from '../types';\n\nconst isProduction =\n  typeof process !== 'undefined' && process.env.NODE_ENV === 'production';\n\nexport const getSessionCookieName = (config: AuthClientConfig): string => {\n  const prefix = config.cookiePrefix || '';\n  const baseName = 'session_token';\n  if (prefix) {\n    return `${prefix}_${baseName}`;\n  }\n  return isProduction ? '__Host-session_token' : baseName;\n};\n"],"mappings":";;;AAEA;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,OACK;AACP,SAAS,eAAe;;;ACPxB,SAAS,aAAa,2BAA2B;AACjD,SAAS,iBAAiB;AAC1B,OAAO,uBAAuB;AAC9B,OAAO,kBAAkB;AAEzB,SAAS,eAAe,YAAY,SAAS,gBAAgB;;;ACL7D,IAAM,eACJ,OAAO,YAAY,eAAe,QAAQ,IAAI,aAAa;;;AD4JvD;AA1FN,IAAM,iBAAiB,cAA0C,IAAI;AACrE,IAAM,aAAa,cAAsC,IAAI;AAC7D,IAAM,gBAAgB,cAAyC,IAAI;AAEnE,IAAM,cAAc,IAAI,YAAY;AAAA,EAClC,gBAAgB;AAAA,IACd,SAAS;AAAA,MACP,sBAAsB;AAAA,IACxB;AAAA,EACF;AACF,CAAC;AAkBM,SAAS,SAA0B;AACxC,QAAM,UAAU,WAAW,UAAU;AACrC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,8CAA8C;AAAA,EAChE;AACA,SAAO;AACT;;;AD5EM,SACE,OAAAA,MADF;AALN,IAAM,oBAAwD;AAAA,EAC5D;AAAA,IACE,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,MAAM,CAAC,eACL,qBAAC,SAAI,WAAU,aACb;AAAA,sBAAAA,KAAC,OAAE,WAAU,eAAe,qBAAW,UAAS;AAAA,MAChD,gBAAAA,KAAC,OAAE,WAAU,2CACV,qBAAW,IACd;AAAA,OACF;AAAA,EAEJ;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,MAAM,CAAC,eACL,qBAAC,SAAI,WAAU,wBACb;AAAA,sBAAAA,KAAC,SAAM,SAAQ,aAAa,qBAAW,aAAY;AAAA,MACnD,gBAAAA,KAAC,SAAM,SAAQ,WAAW,qBAAW,SAAQ;AAAA,OAC/C;AAAA,EAEJ;AACF;AASO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA,aAAa,CAAC;AAChB,GAA4B;AAC1B,QAAM,EAAE,MAAM,IAAI,OAAO;AACzB,QAAM,QAAQ,sBAAsB;AAAA,IAClC,aAAa;AAAA,IACb,cAAc;AAAA,IACd,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB,CAAC;AACD,QAAM,mBAAmB,MAAM;AAM/B,QAAM,EAAE,MAAM,WAAW,WAAW,IAAI,MAAM;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,SAAU,MAAM,eAAe,CAAC,GAAoB;AAAA,IACxD,CAAC,eAAe,CAAC,WAAW,SAAS,WAAW,EAAE;AAAA,EACpD;AAEA,QAAM,SAA2C;AAAA,IAC/C,OAAO;AAAA,IACP;AAAA,IACA,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,cAAc,CAAC,eAAe,WAAW;AAAA,IACzC,mBAAmB;AAAA,IACnB,eAAe;AAAA,MACb,EAAE,OAAO,OAAO,OAAO,GAAG;AAAA,MAC1B,EAAE,OAAO,eAAe,OAAO,cAAc;AAAA,MAC7C,EAAE,OAAO,WAAW,OAAO,UAAU;AAAA,MACrC,EAAE,OAAO,YAAY,OAAO,WAAW;AAAA,IACzC;AAAA,IACA,aAAa;AAAA,MACX,EAAE,OAAO,MAAM,OAAO,KAAK;AAAA,MAC3B,EAAE,OAAO,eAAe,OAAO,cAAc;AAAA,MAC7C,EAAE,OAAO,WAAW,OAAO,UAAU;AAAA,MACrC,EAAE,OAAO,YAAY,OAAO,WAAW;AAAA,IACzC;AAAA,IACA,gBAAgB;AAAA,IAChB,kBAAkB;AAAA,EACpB;AAEA,SACE,gBAAAA;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,MAAM;AAAA,MACb,WAAW,aAAa;AAAA,MACxB;AAAA;AAAA,EACF;AAEJ;","names":["jsx"]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/components/iam/permissions-page.d.ts

@@ -0,0 +1 @@
+export declare function PermissionsPage(): import("react/jsx-runtime").JSX.Element;

package/dist/components/iam/permissions-page.js

@@ -0,0 +1,10 @@
+"use client";
+import {
+  PermissionsPage
+} from "../../chunk-S3CXCCKL.js";
+import "../../chunk-NPW7D2HZ.js";
+import "../../chunk-72YRO3A7.js";
+export {
+  PermissionsPage
+};
+//# sourceMappingURL=permissions-page.js.map

package/dist/components/iam/permissions-page.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/components/iam/permissions.d.ts

@@ -1,5 +1 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-
-declare function Permissions(): react_jsx_runtime.JSX.Element;
-
-export { Permissions };
+export declare function Permissions(): import("react/jsx-runtime").JSX.Element;