@myrjfa/state 3.0.9 → 3.0.10

package/dist/lib/actions/auth.d.ts

@@ -1,3 +1,4 @@
+import { User } from "../models/user";
 import type { AuthenticationAccountType, RegisterPayload, RecoveryDevice } from "../models/authentication";
 import type { SessionIdentity } from "../authSessionPolicy";
 export declare function signIn(formData: {
@@ -298,6 +299,7 @@ export declare function resetPassword(password: string, token: string, role: str
 export declare function validateSession(): Promise<{
     success: boolean;
     identity?: SessionIdentity;
+    user?: User;
     message?: string;
     error?: string;
     statusCode?: number;

package/dist/lib/actions/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/lib/actions/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACR,yBAAyB,EAEzB,eAAe,EACf,cAAc,EACjB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AA8B5D,wBAAsB,MAAM,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsBA;AAED,wBAAsB,WAAW,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CACpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiBA;AAED,wBAAsB,UAAU,CAC5B,IAAI,EAAE,MAAM,EACZ,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAC5C,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBjE;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiBrF;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBzI;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBzJ;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBlJ;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC,CAuBD;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,eAAe;;;;;;;;;;GAY9D;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;;;;;;;;;;GAejF;AAED,mFAAmF;AACnF,wBAAsB,kBAAkB,CACpC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,yBAAyB,GACvC,OAAO,CAAC,cAAc,EAAE,CAAC,CAO3B;AAED,qFAAqF;AACrF,wBAAsB,oBAAoB,CACtC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,yBAAyB,EACtC,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,0EAA0E;AAC1E,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BzD"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/lib/actions/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,EACR,yBAAyB,EAEzB,eAAe,EACf,cAAc,EACjB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AA8B5D,wBAAsB,MAAM,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsBA;AAED,wBAAsB,WAAW,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CACpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiBA;AAED,wBAAsB,UAAU,CAC5B,IAAI,EAAE,MAAM,EACZ,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAC5C,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuBjE;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiBrF;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBzI;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBzJ;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBlJ;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC,CA6BD;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,eAAe;;;;;;;;;;GAY9D;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;;;;;;;;;;GAejF;AAED,mFAAmF;AACnF,wBAAsB,kBAAkB,CACpC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,yBAAyB,GACvC,OAAO,CAAC,cAAc,EAAE,CAAC,CAO3B;AAED,qFAAqF;AACrF,wBAAsB,oBAAoB,CACtC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,yBAAyB,EACtC,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,0EAA0E;AAC1E,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BzD"}

package/dist/lib/actions/auth.js

@@ -180,8 +180,17 @@ export async function resetPassword(password, token, role) {
 export async function validateSession() {
     try {
         const data = await get("/auth/session");
+        if (!getNativeTransport() && typeof window !== "undefined" && typeof localStorage !== "undefined" && data.data.deviceId) {
+            // Browser cache is optional; a denied/quota-limited write must not
+            // turn successful cookie authentication into a failed session.
+            try {
+                localStorage.setItem("_trippeaze_device_id", data.data.deviceId);
+            }
+            catch { /* The scoped device cookie remains canonical. */ }
+        }
         return {
             success: true,
+            user: data.data.user,
             identity: data.data,
             message: data.message
         };

package/dist/lib/actions/fetcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetcher.d.ts","sourceRoot":"","sources":["../../../src/lib/actions/fetcher.ts"],"names":[],"mappings":"AA0BA,UAAU,YAAY;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChD;AAuCD;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAYnD;AAoLD,wBAAsB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,GAAE,OAAc,EAAE,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAM,cAEhH;AAED,wBAAsB,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,GAAE,OAAc,EAAE,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,kBAAkB,CAAM,cAErL;AAED,wBAAsB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAM,cAExG;AAED,wBAAsB,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAM,cAE1G;AAED,wBAAsB,GAAG,CAAC,CAAC,EACvB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,GAAG,EACV,WAAW,GAAE,OAAc,EAC3B,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAM,cAGnE"}
+{"version":3,"file":"fetcher.d.ts","sourceRoot":"","sources":["../../../src/lib/actions/fetcher.ts"],"names":[],"mappings":"AA0BA,UAAU,YAAY;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChD;AAuCD;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAYnD;AAwJD,wBAAsB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,GAAE,OAAc,EAAE,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAM,cAEhH;AAED,wBAAsB,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,GAAE,OAAc,EAAE,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,kBAAkB,CAAM,cAErL;AAED,wBAAsB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAM,cAExG;AAED,wBAAsB,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAM,cAE1G;AAED,wBAAsB,GAAG,CAAC,CAAC,EACvB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,GAAG,EACV,WAAW,GAAE,OAAc,EAC3B,OAAO,GAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAM,cAGnE"}

package/dist/lib/actions/fetcher.js

@@ -1,4 +1,4 @@
-import { getAccountType, getCookieHeader, getRole } from "./serverActions";
+import { getCookieHeader } from "./serverActions";
 import { normalizeRefreshFailureStatus } from "../authSessionPolicy";
 import { acceptNativeSession, getNativeTransport, nativeSessionGeneration } from "./nativeTransport";
 // Custom API error class — do NOT import from next/dist internals
@@ -175,61 +175,36 @@ async function refreshToken(input, method, body, options = {}) {
             throw new ApiError(401, 'Session changed');
         return customFetch(input, method, body, { ...options, includeAuth: true, retry: false });
     }
-    let refreshEndpoint = "/auth/session/refresh";
-    if (typeof window === "undefined") {
-        const accountType = await getAccountType();
-        const legacyRole = accountType ? null : await getRole();
-        refreshEndpoint = accountType === "staff"
-            ? "/auth/staff/refresh-token"
-            : accountType === "host" || legacyRole === "host"
-                ? "/hosts/refresh-token"
-                : "/users/refresh-token";
-    }
-    // Deduplicate: if a refresh is already in flight, wait for it rather than firing a second one
-    if (!refreshPromise) {
-        refreshPromise = (async () => {
-            const refreshHeaders = {};
-            // Always include device ID so backend can match the device record
-            const deviceId = getOrCreateDeviceId();
-            if (deviceId)
-                refreshHeaders['X-Device-Id'] = deviceId;
-            try {
-                const cookieHeader = await getCookieHeader();
-                if (cookieHeader)
-                    refreshHeaders['Cookie'] = cookieHeader;
-            }
-            catch {
-                // CSR or static context — credentials:'include' handles cookie forwarding to backend
-            }
-            const response = await fetch(`${baseURL}${refreshEndpoint}`, {
-                method: 'POST',
-                credentials: 'include',
-                headers: refreshHeaders,
-            });
-            if (!response.ok) {
-                const data = await response.json();
-                // A rejected refresh means this browser no longer has a usable
-                // session, regardless of whether validation/auth middleware
-                // returned 400, 401, 403, or 422. Normalize client-side refresh
-                // failures to 401 so expected signed-out initialization stays
-                // quiet instead of surfacing as a Next.js error overlay.
-                const statusCode = normalizeRefreshFailureStatus(response.status);
-                throw { statusCode, error: data.error || data.message || 'Session expired' };
-            }
-        })().finally(() => { refreshPromise = null; });
-    }
-    try {
-        await refreshPromise;
-        return customFetch(input, method, body, { ...options, includeAuth: true, retry: false });
-    }
-    catch (error) {
-        if (error?.name === 'AbortError')
-            throw error;
-        if (error && typeof error === 'object' && ('$$typeof' in error || error.digest === 'DYNAMIC_SERVER_USAGE')) {
-            throw error; // Re-throw Next.js PPR bail-out
+    // Rendering cannot reliably deliver Set-Cookie. Browser bootstrap owns
+    // rotation; server requests must never consume its refresh credential.
+    if (typeof window === "undefined")
+        throw new ApiError(401, 'Browser session requires client refresh');
+    const refresh = async () => {
+        const deviceId = getOrCreateDeviceId();
+        const response = await fetch(`${baseURL}/auth/session/refresh`, {
+            // Rotation consumes the old credential. Let the browser receive
+            // replacement cookies even if this document navigates away.
+            method: 'POST', credentials: 'include', keepalive: true,
+            headers: deviceId ? { 'X-Device-Id': deviceId } : {},
+        });
+        if (!response.ok) {
+            const data = await response.json();
+            throw new ApiError(normalizeRefreshFailureStatus(response.status), data.error || data.message || 'Session expired');
         }
-        throw new ApiError(error.statusCode ?? 500, error.error || error.message || 'Session expired. Please log in again.');
+    };
+    if (!refreshPromise) {
+        const locks = typeof navigator !== 'undefined' ? navigator.locks : undefined;
+        refreshPromise = (locks ? locks.request(`trippeaze-refresh:${baseURL}`, async () => {
+            const probe = await fetch(`${baseURL}/auth/session`, { credentials: 'include' });
+            if (probe.ok)
+                return;
+            if (probe.status !== 401)
+                throw new ApiError(probe.status, 'Session validation temporarily unavailable');
+            await refresh();
+        }) : refresh()).finally(() => { refreshPromise = null; });
     }
+    await refreshPromise;
+    return customFetch(input, method, body, { ...options, includeAuth: true, retry: false });
 }
 // ✅ Server-safe exported functions
 export async function get(url, includeAuth = true, options = {}) {

package/dist/lib/actions/serverActions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serverActions.d.ts","sourceRoot":"","sources":["../../../src/lib/actions/serverActions.ts"],"names":[],"mappings":"AAKA,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAKvD;AAED,wBAAsB,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAWtD;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAahF"}
+{"version":3,"file":"serverActions.d.ts","sourceRoot":"","sources":["../../../src/lib/actions/serverActions.ts"],"names":[],"mappings":"AAMA,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAKvD;AAED,wBAAsB,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAWtD;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAahF"}

package/dist/lib/actions/serverActions.js

@@ -1,4 +1,5 @@
 'use server';
+import { authCookieName } from '../utils/authCookies';
 import { cookies } from 'next/headers';
 import { validRoles } from '../utils/text';
 export async function getCookieHeader() {
@@ -9,7 +10,7 @@ export async function getCookieHeader() {
 }
 export async function getRole() {
     try {
-        const role = (await cookies()).get("role")?.value ?? null;
+        const role = (await cookies()).get(authCookieName("role"))?.value ?? null;
         return (role && validRoles.includes(role)) ? role : null;
     }
     catch (err) {
@@ -22,7 +23,7 @@ export async function getRole() {
 }
 export async function getAccountType() {
     try {
-        const accountType = (await cookies()).get("accountType")?.value;
+        const accountType = (await cookies()).get(authCookieName("accountType"))?.value;
         return accountType === "user" || accountType === "host" || accountType === "staff"
             ? accountType
             : null;

package/dist/lib/authSessionManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authSessionManager.d.ts","sourceRoot":"","sources":["../../src/lib/authSessionManager.tsx"],"names":[],"mappings":"AAuBA,MAAM,CAAC,OAAO,UAAU,kBAAkB,SA2GzC"}
+{"version":3,"file":"authSessionManager.d.ts","sourceRoot":"","sources":["../../src/lib/authSessionManager.tsx"],"names":[],"mappings":"AAuBA,MAAM,CAAC,OAAO,UAAU,kBAAkB,SAiGzC"}

package/dist/lib/authSessionManager.js

@@ -1,14 +1,16 @@
 'use client';
 import { useAtomValue, useSetAtom } from "jotai";
 import { useEffect } from 'react';
-import { useQuery } from '@tanstack/react-query';
-import { authRevisionAtom, authSessionStatusAtom, beginAuthCleanupAtom, finishAuthCleanupAtom, initializeAuthSessionAtom, isLoggedInAtom, storageInitializedAtom, userAtom, } from "./userAtom";
-import { clearSessionCookies, validateSession } from './actions/auth';
+import { useQuery, useQueryClient } from '@tanstack/react-query';
+import { authRevisionAtom, commitLoginAtom, resetAuthStateAtom, authSessionStatusAtom, initializeAuthSessionAtom, isLoggedInAtom, storageInitializedAtom, userAtom, } from "./userAtom";
+import { validateSession } from './actions/auth';
 import { bindSessionFailureToRevision, sessionIdentityMatchesPersistedUser, shouldResetAuthStateForQuery, } from './authSessionPolicy';
 export default function AuthSessionManager() {
+    const queryClient = useQueryClient();
+    const commitLogin = useSetAtom(commitLoginAtom);
+    const updateUser = useSetAtom(userAtom);
+    const resetLocal = useSetAtom(resetAuthStateAtom);
     const initializeAuthSession = useSetAtom(initializeAuthSessionAtom);
-    const beginAuthCleanup = useSetAtom(beginAuthCleanupAtom);
-    const finishAuthCleanup = useSetAtom(finishAuthCleanupAtom);
     const setAuthSessionStatus = useSetAtom(authSessionStatusAtom);
     const authRevision = useAtomValue(authRevisionAtom);
     const user = useAtomValue(userAtom);
@@ -24,6 +26,16 @@ export default function AuthSessionManager() {
         });
         return () => window.cancelAnimationFrame(frame);
     }, [initializeAuthSession]);
+    useEffect(() => {
+        const reconcile = (event) => {
+            if (event.key === process.env.NEXT_PUBLIC_USER_KEY || event.key === process.env.NEXT_PUBLIC_LOGIN_KEY) {
+                setAuthSessionStatus("validating");
+                void queryClient.invalidateQueries({ queryKey: ["session"] });
+            }
+        };
+        window.addEventListener("storage", reconcile);
+        return () => window.removeEventListener("storage", reconcile);
+    }, [queryClient, setAuthSessionStatus]);
     // --- Continuous Background Re-validation ---
     const { data: sessionResult, error, } = useQuery({
         queryKey: ["session", authRevision],
@@ -38,62 +50,53 @@ export default function AuthSessionManager() {
                 throw bindSessionFailureToRevision(queryError, authRevision);
             }
         },
-        refetchOnWindowFocus: true,
-        refetchOnReconnect: true,
+        refetchOnWindowFocus: "always",
+        refetchOnReconnect: "always",
         retry: (failureCount, err) => {
             if (err?.statusCode === 401)
                 return false;
             return failureCount < 2;
         },
         staleTime: 15 * 60 * 1000,
-        enabled: storageInitialized && Boolean(isLoggedIn && user),
+        enabled: storageInitialized,
     });
     // Clear auth state only when the backend explicitly says the session is invalid (401).
     // Network errors or 5xx (backend down) are ignored to avoid false logouts.
     useEffect(() => {
-        // A signed-out browser does not need to be reset repeatedly.
-        if (!isLoggedIn && !user)
+        if (!storageInitialized)
             return;
-        const shouldClearRejectedOrInvalidSession = shouldResetAuthStateForQuery({
-            session: sessionResult?.session,
-            sessionRevision: sessionResult?.revision,
-            error: error,
-            currentRevision: authRevision,
-        });
-        const currentSuccessfulResult = sessionResult?.revision === authRevision
-            ? sessionResult
-            : null;
-        if (shouldClearRejectedOrInvalidSession || (currentSuccessfulResult
-            && !sessionIdentityMatchesPersistedUser(currentSuccessfulResult.session.identity, user))) {
-            // Keep auth controls non-interactive until the Set-Cookie cleanup
-            // response settles; otherwise a delayed response can erase a new
-            // login performed while cleanup is still in flight.
-            beginAuthCleanup();
-            const cleanupRevision = authRevision + 1;
-            void (async () => {
-                try {
-                    await clearSessionCookies();
-                }
-                finally {
-                    finishAuthCleanup(cleanupRevision);
-                }
-            })();
+        const current = sessionResult?.revision === authRevision ? sessionResult.session : null;
+        const rejected = shouldResetAuthStateForQuery({ session: current, sessionRevision: sessionResult?.revision, error: error, currentRevision: authRevision });
+        if (rejected) {
+            if (isLoggedIn || user)
+                resetLocal();
+            else
+                setAuthSessionStatus("signed-out");
             return;
         }
-        // A retryable network/server failure has no authoritative session
-        // result. Keep the provisional identity validating until a later retry.
-        if (!currentSuccessfulResult)
+        if (!current?.success) {
+            if (error && !user)
+                setAuthSessionStatus("signed-out");
             return;
+        }
+        if (!sessionIdentityMatchesPersistedUser(current.identity, user)) {
+            if (current.user)
+                commitLogin(current.user);
+            else
+                resetLocal();
+            return;
+        }
+        if (current.user && JSON.stringify(current.user) !== JSON.stringify(user))
+            updateUser(current.user);
         setAuthSessionStatus("authenticated");
     }, [
+        commitLogin, resetLocal, updateUser,
         sessionResult,
         error,
         authRevision,
         isLoggedIn,
         storageInitialized,
         user,
-        beginAuthCleanup,
-        finishAuthCleanup,
         setAuthSessionStatus,
     ]);
     return null;

package/dist/lib/authSessionPolicy.d.ts

@@ -24,6 +24,8 @@ export interface PersistedIdentityLike {
 export type AuthSessionStatus = "initializing" | "clearing" | "signed-out" | "validating" | "authenticated";
 export declare function isAuthSessionPending(status: AuthSessionStatus): boolean;
 export declare function canFinishAuthCleanup(expectedRevision: number, currentRevision: number): boolean;
+/** Legacy explicit-cleanup compatibility export. Never call this merely because
+ * an origin-local profile cache is absent; reconcile the cookie session instead. */
 export declare function clearCacheMissSessionBoundary({ cleanupRevision, getCurrentRevision, clearSession, }: {
     cleanupRevision: number;
     getCurrentRevision: () => number;

package/dist/lib/authSessionPolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authSessionPolicy.d.ts","sourceRoot":"","sources":["../../src/lib/authSessionPolicy.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAChE,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,MAAM,iBAAiB,GACvB,cAAc,GACd,UAAU,GACV,YAAY,GACZ,YAAY,GACZ,eAAe,CAAC;AAEtB,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAIvE;AAED,wBAAgB,oBAAoB,CAChC,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,GACxB,OAAO,CAET;AAED,wBAAsB,6BAA6B,CAAC,EAChD,eAAe,EACf,kBAAkB,EAClB,YAAY,GACf,EAAE;IACC,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC,GAAG,OAAO,CAAC,OAAO,CAAC,CAInB;AAED,wBAAgB,4BAA4B,CACxC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,GACrB,wBAAwB,CAO1B;AAED,wBAAgB,4BAA4B,CAAC,EACzC,OAAO,EACP,eAAe,EACf,KAAK,EACL,eAAe,GAClB,EAAE;IACC,OAAO,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAIV;AAED,wBAAgB,uBAAuB,CACnC,IAAI,EAAE,qBAAqB,GAC5B,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAMlC;AAED,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE9F;AAED,wBAAgB,oBAAoB,CAChC,OAAO,EAAE,qBAAqB,GAAG,IAAI,GAAG,SAAS,EACjD,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,GAC7C,OAAO,CAET;AAED,wBAAgB,mCAAmC,CAC/C,QAAQ,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,EAC5C,IAAI,EAAE,qBAAqB,GAAG,IAAI,GAAG,SAAS,GAC/C,OAAO,CAcT"}
+{"version":3,"file":"authSessionPolicy.d.ts","sourceRoot":"","sources":["../../src/lib/authSessionPolicy.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAChE,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,MAAM,iBAAiB,GACvB,cAAc,GACd,UAAU,GACV,YAAY,GACZ,YAAY,GACZ,eAAe,CAAC;AAEtB,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAIvE;AAED,wBAAgB,oBAAoB,CAChC,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,GACxB,OAAO,CAET;AAED;oFACoF;AACpF,wBAAsB,6BAA6B,CAAC,EAChD,eAAe,EACf,kBAAkB,EAClB,YAAY,GACf,EAAE;IACC,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC,GAAG,OAAO,CAAC,OAAO,CAAC,CAInB;AAED,wBAAgB,4BAA4B,CACxC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,GACrB,wBAAwB,CAO1B;AAED,wBAAgB,4BAA4B,CAAC,EACzC,OAAO,EACP,eAAe,EACf,KAAK,EACL,eAAe,GAClB,EAAE;IACC,OAAO,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAIV;AAED,wBAAgB,uBAAuB,CACnC,IAAI,EAAE,qBAAqB,GAC5B,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAMlC;AAED,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAExE;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE9F;AAED,wBAAgB,oBAAoB,CAChC,OAAO,EAAE,qBAAqB,GAAG,IAAI,GAAG,SAAS,EACjD,KAAK,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,GAC7C,OAAO,CAET;AAED,wBAAgB,mCAAmC,CAC/C,QAAQ,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,EAC5C,IAAI,EAAE,qBAAqB,GAAG,IAAI,GAAG,SAAS,GAC/C,OAAO,CAcT"}

package/dist/lib/authSessionPolicy.js

@@ -6,6 +6,8 @@ export function isAuthSessionPending(status) {
 export function canFinishAuthCleanup(expectedRevision, currentRevision) {
     return expectedRevision === currentRevision;
 }
+/** Legacy explicit-cleanup compatibility export. Never call this merely because
+ * an origin-local profile cache is absent; reconcile the cookie session instead. */
 export async function clearCacheMissSessionBoundary({ cleanupRevision, getCurrentRevision, clearSession, }) {
     if (getCurrentRevision() !== cleanupRevision)
         return false;
@@ -38,7 +40,7 @@ export function getPersistedAccountType(user) {
     return null;
 }
 export function normalizeRefreshFailureStatus(statusCode) {
-    return statusCode >= 400 && statusCode < 500 ? 401 : statusCode;
+    return [400, 401, 403, 422].includes(statusCode) ? 401 : statusCode;
 }
 export function isExpectedSignedOutError(error) {
     return error?.statusCode === 401;

package/dist/lib/userAtom.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"userAtom.d.ts","sourceRoot":"","sources":["../../src/lib/userAtom.ts"],"names":[],"mappings":"AAMA,OAAO,EAIH,KAAK,iBAAiB,EACzB,MAAM,qBAAqB,CAAC;AA0D7B,eAAO,MAAM,sBAAsB;;CAAuB,CAAC;AAG3D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6DAQpB,CAAC;AAEF,eAAO,MAAM,cAAc,iKAA6C,CAAC;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;CAAU,CAAC;AAExC,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,yEAAyE;AACzE,eAAO,MAAM,qBAAqB;;CAA0C,CAAC;AAE7E;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAS3B,CAAC;AAGF,eAAO,MAAM,eAAe,+BAS1B,CAAC;AAGH,eAAO,MAAM,kBAAkB;;CAY7B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;CAU/B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;CAMjC,CAAC;AAGF,eAAO,MAAM,yBAAyB;;CAiCrC,CAAC;AAEF,wBAAgB,cAAc,SAY7B"}
+{"version":3,"file":"userAtom.d.ts","sourceRoot":"","sources":["../../src/lib/userAtom.ts"],"names":[],"mappings":"AAKA,OAAO,EAGH,KAAK,iBAAiB,EACzB,MAAM,qBAAqB,CAAC;AA6D7B,eAAO,MAAM,sBAAsB;;CAAuB,CAAC;AAG3D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6DAQpB,CAAC;AAEF,eAAO,MAAM,cAAc,iKAA6C,CAAC;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;CAAU,CAAC;AAExC,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,yEAAyE;AACzE,eAAO,MAAM,qBAAqB;;CAA0C,CAAC;AAE7E;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAS3B,CAAC;AAGF,eAAO,MAAM,eAAe,+BAS1B,CAAC;AAGH,eAAO,MAAM,kBAAkB;;CAY7B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;CAU/B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;CAMjC,CAAC;AAGF,eAAO,MAAM,yBAAyB;;CAgBrC,CAAC;AAEF,wBAAgB,cAAc,SAY7B"}

package/dist/lib/userAtom.js

@@ -2,8 +2,7 @@
 import CryptoJS from 'crypto-js';
 import { atom, getDefaultStore } from 'jotai';
 import { atomWithStorage } from 'jotai/utils';
-import { clearSessionCookies } from './actions/auth';
-import { canFinishAuthCleanup, clearCacheMissSessionBoundary, isAuthSessionPending, } from './authSessionPolicy';
+import { canFinishAuthCleanup, isAuthSessionPending, } from './authSessionPolicy';
 const STORAGE_KEY = process.env.NEXT_PUBLIC_USER_KEY;
 const LOGIN_KEY = process.env.NEXT_PUBLIC_LOGIN_KEY;
 const SECRET_KEY = process.env.NEXT_PUBLIC_RACE;
@@ -35,11 +34,16 @@ const getWithExpiry = (key) => {
         if (!data)
             return null;
         const { value, expiry } = data;
+        if (!value || !value._id || typeof value.firstName !== 'string' || !Number.isFinite(expiry))
+            return null;
         if (Date.now() > expiry) {
             localStorage.removeItem(key);
             return null;
         }
-        return value;
+        const safe = { ...value };
+        for (const field of ['devices', 'password', 'accessToken', 'refreshToken', 'emailOtp', 'resetPasswordToken'])
+            delete safe[field];
+        return safe;
     }
     catch (e) {
         console.warn('Invalid user data:', e);
@@ -131,32 +135,19 @@ export const initializeAuthSessionAtom = atom(null, async (get, set) => {
     // Only run in browser
     if (typeof window === 'undefined')
         return;
-    // Try the local identity cache first. It remains provisional until the
-    // backend confirms that the cookies belong to the same actor.
     const userData = getWithExpiry(STORAGE_KEY);
     if (userData) {
-        set(commitLoginAtom, userData);
-        set(authSessionStatusAtom, "validating");
-        return;
-    }
-    // Missing persisted identity is always a cleanup boundary. The endpoint
-    // is idempotent for a fresh guest and revokes stale cookie-only sessions.
-    set(beginAuthCleanupAtom);
-    const cleanupRevision = get(authRevisionAtom);
-    try {
-        await clearCacheMissSessionBoundary({
-            cleanupRevision,
-            getCurrentRevision: () => get(authRevisionAtom),
-            clearSession: clearSessionCookies,
-        });
-    }
-    catch {
-        // clearSessionCookies is bounded. Local signed-out state is still
-        // published only after the cleanup attempt has settled.
+        const safe = { ...userData };
+        delete safe.devices;
+        set(userAtom, safe);
+        set(isLoggedInAtom, true);
     }
-    finally {
-        set(finishAuthCleanupAtom, cleanupRevision);
+    else {
+        set(userAtom, null);
+        set(isLoggedInAtom, false);
     }
+    set(storageInitializedAtom, true);
+    set(authSessionStatusAtom, "validating");
 });
 export function resetAuthState() {
     if (typeof window === 'undefined') {

package/dist/lib/utils/authCookies.d.ts

@@ -0,0 +1,3 @@
+/** Must match backend AUTH_COOKIE_PREFIX; cookie domain alone cannot isolate UAT. */
+export declare function authCookieName(name: string): string;
+//# sourceMappingURL=authCookies.d.ts.map

package/dist/lib/utils/authCookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authCookies.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/authCookies.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/lib/utils/authCookies.js

@@ -0,0 +1,4 @@
+/** Must match backend AUTH_COOKIE_PREFIX; cookie domain alone cannot isolate UAT. */
+export function authCookieName(name) {
+    return `${process.env.NEXT_PUBLIC_AUTH_COOKIE_PREFIX || ''}${name}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myrjfa/state",
-  "version": "3.0.9",
+  "version": "3.0.10",
   "type": "module",
   "exports": {
     "./dist/*": "./dist/*.js"
@@ -14,7 +14,6 @@
   ],
   "dependencies": {
     "@tanstack/react-query": "^5.89.0",
-    "@types/socket.io-client": "^3.0.0",
     "cheerio": "^1.0.0",
     "clsx": "^2.1.1",
     "crypto-js": "^4.2.0",