@nextsparkjs/core 0.1.0-beta.185 → 0.1.0-beta.187

package/dist/components/ui/country-select.js

@@ -116,7 +116,8 @@ function CountrySelect({
   placeholder = "Seleccionar pa\xEDs...",
   disabled = false,
   className,
-  clearable = true
+  clearable = true,
+  id
 }) {
   return /* @__PURE__ */ jsxs("div", { className: "relative", children: [
     /* @__PURE__ */ jsx(Globe2, { className: "absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground z-10" }),
@@ -131,6 +132,7 @@ function CountrySelect({
         emptyMessage: "No se encontraron pa\xEDses.",
         disabled,
         clearable,
+        id,
         className: cn("pl-10", className)
       }
     )

package/dist/components/ui/currency-select.d.ts

@@ -5,7 +5,9 @@ interface CurrencySelectProps {
     disabled?: boolean;
     className?: string;
     clearable?: boolean;
+    /** Forwarded to the combobox trigger so `<label for>` resolves (see #90) */
+    id?: string;
 }
-export declare function CurrencySelect({ value, onChange, placeholder, disabled, className, clearable, }: CurrencySelectProps): import("react/jsx-runtime").JSX.Element;
+export declare function CurrencySelect({ value, onChange, placeholder, disabled, className, clearable, id, }: CurrencySelectProps): import("react/jsx-runtime").JSX.Element;
 export {};
 //# sourceMappingURL=currency-select.d.ts.map

package/dist/components/ui/currency-select.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"currency-select.d.ts","sourceRoot":"","sources":["../../../src/components/ui/currency-select.tsx"],"names":[],"mappings":"AA6CA,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAA;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,wBAAgB,cAAc,CAAC,EAC7B,KAAK,EACL,QAAQ,EACR,WAAqC,EACrC,QAAgB,EAChB,SAAS,EACT,SAAgB,GACjB,EAAE,mBAAmB,2CAiBrB"}
+{"version":3,"file":"currency-select.d.ts","sourceRoot":"","sources":["../../../src/components/ui/currency-select.tsx"],"names":[],"mappings":"AA6CA,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAA;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,4EAA4E;IAC5E,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,wBAAgB,cAAc,CAAC,EAC7B,KAAK,EACL,QAAQ,EACR,WAAqC,EACrC,QAAgB,EAChB,SAAS,EACT,SAAgB,EAChB,EAAE,GACH,EAAE,mBAAmB,2CAkBrB"}

package/dist/components/ui/currency-select.js

@@ -45,7 +45,8 @@ function CurrencySelect({
   placeholder = "Seleccionar moneda...",
   disabled = false,
   className,
-  clearable = true
+  clearable = true,
+  id
 }) {
   return /* @__PURE__ */ jsxs("div", { className: "relative", children: [
     /* @__PURE__ */ jsx(DollarSign, { className: "absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground z-10" }),
@@ -60,6 +61,7 @@ function CurrencySelect({
         emptyMessage: "No se encontraron monedas.",
         disabled,
         clearable,
+        id,
         className: cn("pl-10", className)
       }
     )

package/dist/components/ui/sheet.d.ts

@@ -10,6 +10,11 @@ declare const sheetVariants: (props?: {
     side?: "left" | "right" | "top" | "bottom";
 } & import("class-variance-authority/types").ClassProp) => string;
 interface SheetContentProps extends React.ComponentPropsWithoutRef<typeof SheetPrimitive.Content>, VariantProps<typeof sheetVariants> {
+    /**
+     * Extra classes merged onto the built-in close button (position, size,
+     * colors...). The default already meets the 44x44px touch target.
+     */
+    closeButtonClassName?: string;
 }
 declare const SheetContent: React.ForwardRefExoticComponent<SheetContentProps & React.RefAttributes<HTMLDivElement>>;
 declare const SheetHeader: {

package/dist/components/ui/sheet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sheet.d.ts","sourceRoot":"","sources":["../../../src/components/ui/sheet.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,cAAc,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAO,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAIjE,QAAA,MAAM,KAAK,sCAAsB,CAAA;AAEjC,QAAA,MAAM,YAAY,6GAAyB,CAAA;AAE3C,QAAA,MAAM,UAAU,2GAAuB,CAAA;AAEvC,QAAA,MAAM,WAAW,4CAAwB,CAAA;AAEzC,QAAA,MAAM,YAAY,6JAYhB,CAAA;AAGF,QAAA,MAAM,aAAa;;iEAiBlB,CAAA;AAED,UAAU,iBACR,SAAQ,KAAK,CAAC,wBAAwB,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,EACnE,YAAY,CAAC,OAAO,aAAa,CAAC;CAAG;AAEzC,QAAA,MAAM,YAAY,0FAkBhB,CAAA;AAGF,QAAA,MAAM,WAAW;8BAGd,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC;;CAQtC,CAAA;AAGD,QAAA,MAAM,WAAW;8BAGd,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC;;CAQtC,CAAA;AAGD,QAAA,MAAM,UAAU,mKASd,CAAA;AAGF,QAAA,MAAM,gBAAgB,6KASpB,CAAA;AAGF,OAAO,EACL,KAAK,EACL,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,EACV,gBAAgB,GACjB,CAAA"}
+{"version":3,"file":"sheet.d.ts","sourceRoot":"","sources":["../../../src/components/ui/sheet.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAC9B,OAAO,KAAK,cAAc,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAO,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAIjE,QAAA,MAAM,KAAK,sCAAsB,CAAA;AAEjC,QAAA,MAAM,YAAY,6GAAyB,CAAA;AAE3C,QAAA,MAAM,UAAU,2GAAuB,CAAA;AAEvC,QAAA,MAAM,WAAW,4CAAwB,CAAA;AAEzC,QAAA,MAAM,YAAY,6JAYhB,CAAA;AAGF,QAAA,MAAM,aAAa;;iEAiBlB,CAAA;AA2BD,UAAU,iBACR,SAAQ,KAAK,CAAC,wBAAwB,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,EACnE,YAAY,CAAC,OAAO,aAAa,CAAC;IACpC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,QAAA,MAAM,YAAY,0FAwChB,CAAA;AAGF,QAAA,MAAM,WAAW;8BAGd,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC;;CAQtC,CAAA;AAGD,QAAA,MAAM,WAAW;8BAGd,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC;;CAQtC,CAAA;AAGD,QAAA,MAAM,UAAU,mKASd,CAAA;AAGF,QAAA,MAAM,gBAAgB,6KAiBpB,CAAA;AAGF,OAAO,EACL,KAAK,EACL,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,EACV,gBAAgB,GACjB,CAAA"}

package/dist/components/ui/sheet.js

@@ -37,24 +37,40 @@ const sheetVariants = cva(
     }
   }
 );
-const SheetContent = React.forwardRef(({ side = "right", className, children, ...props }, ref) => /* @__PURE__ */ jsxs(SheetPortal, { children: [
-  /* @__PURE__ */ jsx(SheetOverlay, {}),
-  /* @__PURE__ */ jsxs(
-    SheetPrimitive.Content,
-    {
-      ref,
-      className: cn(sheetVariants({ side }), className),
-      ...props,
-      children: [
-        /* @__PURE__ */ jsxs(SheetPrimitive.Close, { className: "absolute right-4 top-4 rounded-sm opacity-70 ring-offset-background transition-opacity hover:opacity-100 focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 disabled:pointer-events-none data-[state=open]:bg-accent", children: [
-          /* @__PURE__ */ jsx(Cross2Icon, { className: "h-4 w-4" }),
-          /* @__PURE__ */ jsx("span", { className: "sr-only", children: "Close" })
-        ] }),
-        children
-      ]
-    }
-  )
-] }));
+const SheetDescriptionContext = React.createContext(null);
+const useIsomorphicLayoutEffect = typeof window !== "undefined" ? React.useLayoutEffect : React.useEffect;
+const sheetCloseButtonClassName = "absolute right-0.5 top-0.5 inline-flex h-11 w-11 items-center justify-center rounded-sm opacity-70 ring-offset-background transition-opacity hover:opacity-100 focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 disabled:pointer-events-none data-[state=open]:bg-accent";
+const SheetContent = React.forwardRef(({ side = "right", className, closeButtonClassName, children, ...props }, ref) => {
+  const [hasDescription, setHasDescription] = React.useState(false);
+  const descriptionCount = React.useRef(0);
+  const registerDescription = React.useCallback(() => {
+    descriptionCount.current += 1;
+    setHasDescription(true);
+    return () => {
+      descriptionCount.current -= 1;
+      if (descriptionCount.current === 0) setHasDescription(false);
+    };
+  }, []);
+  return /* @__PURE__ */ jsxs(SheetPortal, { children: [
+    /* @__PURE__ */ jsx(SheetOverlay, {}),
+    /* @__PURE__ */ jsx(
+      SheetPrimitive.Content,
+      {
+        ref,
+        className: cn(sheetVariants({ side }), className),
+        ...props,
+        children: /* @__PURE__ */ jsxs(SheetDescriptionContext.Provider, { value: registerDescription, children: [
+          /* @__PURE__ */ jsxs(SheetPrimitive.Close, { className: cn(sheetCloseButtonClassName, closeButtonClassName), children: [
+            /* @__PURE__ */ jsx(Cross2Icon, { className: "h-4 w-4", "aria-hidden": "true" }),
+            /* @__PURE__ */ jsx("span", { className: "sr-only", children: "Close" })
+          ] }),
+          children,
+          !hasDescription && /* @__PURE__ */ jsx(SheetPrimitive.Description, { className: "sr-only" })
+        ] })
+      }
+    )
+  ] });
+});
 SheetContent.displayName = SheetPrimitive.Content.displayName;
 const SheetHeader = ({
   className,
@@ -93,14 +109,18 @@ const SheetTitle = React.forwardRef(({ className, ...props }, ref) => /* @__PURE
   }
 ));
 SheetTitle.displayName = SheetPrimitive.Title.displayName;
-const SheetDescription = React.forwardRef(({ className, ...props }, ref) => /* @__PURE__ */ jsx(
-  SheetPrimitive.Description,
-  {
-    ref,
-    className: cn("text-sm text-muted-foreground", className),
-    ...props
-  }
-));
+const SheetDescription = React.forwardRef(({ className, ...props }, ref) => {
+  const registerDescription = React.useContext(SheetDescriptionContext);
+  useIsomorphicLayoutEffect(() => registerDescription == null ? void 0 : registerDescription(), [registerDescription]);
+  return /* @__PURE__ */ jsx(
+    SheetPrimitive.Description,
+    {
+      ref,
+      className: cn("text-sm text-muted-foreground", className),
+      ...props
+    }
+  );
+});
 SheetDescription.displayName = SheetPrimitive.Description.displayName;
 export {
   Sheet,

package/dist/components/ui/timezone-select.d.ts

@@ -5,7 +5,9 @@ interface TimezoneSelectProps {
     disabled?: boolean;
     className?: string;
     clearable?: boolean;
+    /** Forwarded to the combobox trigger so `<label for>` resolves (see #90) */
+    id?: string;
 }
-export declare function TimezoneSelect({ value, onChange, placeholder, disabled, className, clearable, }: TimezoneSelectProps): import("react/jsx-runtime").JSX.Element;
+export declare function TimezoneSelect({ value, onChange, placeholder, disabled, className, clearable, id, }: TimezoneSelectProps): import("react/jsx-runtime").JSX.Element;
 export {};
 //# sourceMappingURL=timezone-select.d.ts.map

package/dist/components/ui/timezone-select.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"timezone-select.d.ts","sourceRoot":"","sources":["../../../src/components/ui/timezone-select.tsx"],"names":[],"mappings":"AAwCA,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAA;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,wBAAgB,cAAc,CAAC,EAC7B,KAAK,EACL,QAAQ,EACR,WAA2C,EAC3C,QAAgB,EAChB,SAAS,EACT,SAAgB,GACjB,EAAE,mBAAmB,2CAiBrB"}
+{"version":3,"file":"timezone-select.d.ts","sourceRoot":"","sources":["../../../src/components/ui/timezone-select.tsx"],"names":[],"mappings":"AAwCA,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAA;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,4EAA4E;IAC5E,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,wBAAgB,cAAc,CAAC,EAC7B,KAAK,EACL,QAAQ,EACR,WAA2C,EAC3C,QAAgB,EAChB,SAAS,EACT,SAAgB,EAChB,EAAE,GACH,EAAE,mBAAmB,2CAkBrB"}

package/dist/components/ui/timezone-select.js

@@ -40,7 +40,8 @@ function TimezoneSelect({
   placeholder = "Seleccionar zona horaria...",
   disabled = false,
   className,
-  clearable = true
+  clearable = true,
+  id
 }) {
   return /* @__PURE__ */ jsxs("div", { className: "relative", children: [
     /* @__PURE__ */ jsx(Globe, { className: "absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground z-10" }),
@@ -55,6 +56,7 @@ function TimezoneSelect({
         emptyMessage: "No se encontraron zonas horarias.",
         disabled,
         clearable,
+        id,
         className: cn("pl-10", className)
       }
     )

package/dist/contexts/TeamContext.d.ts

@@ -15,5 +15,11 @@ export declare function TeamProvider({ children }: {
     children: ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
 export declare function useTeamContext(): TeamContextValue;
+/**
+ * Like useTeamContext(), but returns undefined instead of throwing when no
+ * TeamProvider is mounted above. Lets wrappers such as DashboardProviders skip
+ * mounting a second TeamProvider when the root layout already provides one.
+ */
+export declare function useOptionalTeamContext(): TeamContextValue | undefined;
 export {};
 //# sourceMappingURL=TeamContext.d.ts.map

package/dist/contexts/TeamContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TeamContext.d.ts","sourceRoot":"","sources":["../../src/contexts/TeamContext.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAwE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGvG,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAM7D,UAAU,gBAAgB;IACxB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,kBAAkB,EAAE,CAAA;IAC/B,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB,wBAAwB,EAAE,OAAO,CAAA;IACjC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAClC;AAKD,eAAO,MAAM,eAAe,yBAA0B,CAAA;AAGtD,wBAAsB,cAAc,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAwBpE;AAED,wBAAgB,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,2CAuNjE;AAED,wBAAgB,cAAc,qBAM7B"}
+{"version":3,"file":"TeamContext.d.ts","sourceRoot":"","sources":["../../src/contexts/TeamContext.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAwE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGvG,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAM7D,UAAU,gBAAgB;IACxB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,kBAAkB,EAAE,CAAA;IAC/B,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB,wBAAwB,EAAE,OAAO,CAAA;IACjC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAClC;AAKD,eAAO,MAAM,eAAe,yBAA0B,CAAA;AAGtD,wBAAsB,cAAc,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAwBpE;AAED,wBAAgB,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,2CAqOjE;AAED,wBAAgB,cAAc,qBAM7B;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,gBAAgB,GAAG,SAAS,CAErE"}

package/dist/contexts/TeamContext.js

@@ -82,7 +82,10 @@ function TeamProvider({ children }) {
     if (currentTeam && userTeams.some((t) => t.team.id === currentTeam.id)) return;
     const storedTeamId = typeof window !== "undefined" ? localStorage.getItem("activeTeamId") : null;
     const storedTeam = storedTeamId ? userTeams.find((t) => t.team.id === storedTeamId) : null;
-    const activeTeam = storedTeam || userTeams[0];
+    const defaultTeam = storedTeam ? void 0 : [...userTeams].sort(
+      (a, b) => new Date(a.joinedAt).getTime() - new Date(b.joinedAt).getTime()
+    )[0];
+    const activeTeam = storedTeam || defaultTeam;
     if (activeTeam) {
       setCurrentTeam(activeTeam.team);
       if (typeof window !== "undefined") {
@@ -181,9 +184,13 @@ function useTeamContext() {
   }
   return context;
 }
+function useOptionalTeamContext() {
+  return useContext(TeamContext);
+}
 export {
   TEAMS_QUERY_KEY,
   TeamProvider,
   fetchUserTeams,
+  useOptionalTeamContext,
   useTeamContext
 };

package/dist/emails/otp-verification.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otp-verification.d.ts","sourceRoot":"","sources":["../../src/emails/otp-verification.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAKjF,wBAA8B,eAAe,CAC3C,IAAI,EAAE,wBAAwB,EAC9B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CAkEvB"}
+{"version":3,"file":"otp-verification.d.ts","sourceRoot":"","sources":["../../src/emails/otp-verification.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAKjF,wBAA8B,eAAe,CAC3C,IAAI,EAAE,wBAAwB,EAC9B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CAmEvB"}

package/dist/emails/reset-password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reset-password.d.ts","sourceRoot":"","sources":["../../src/emails/reset-password.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAI/E,wBAA8B,aAAa,CACzC,IAAI,EAAE,sBAAsB,EAC5B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CA0FvB"}
+{"version":3,"file":"reset-password.d.ts","sourceRoot":"","sources":["../../src/emails/reset-password.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAI/E,wBAA8B,aAAa,CACzC,IAAI,EAAE,sBAAsB,EAC5B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CA2FvB"}

package/dist/emails/team-invitation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"team-invitation.d.ts","sourceRoot":"","sources":["../../src/emails/team-invitation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAIhF,wBAA8B,cAAc,CAC1C,IAAI,EAAE,uBAAuB,EAC7B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CAwFvB"}
+{"version":3,"file":"team-invitation.d.ts","sourceRoot":"","sources":["../../src/emails/team-invitation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAKhF,wBAA8B,cAAc,CAC1C,IAAI,EAAE,uBAAuB,EAC7B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CAyFvB"}

package/dist/emails/team-invitation.js

@@ -1,4 +1,5 @@
 import { getTranslations } from "next-intl/server";
+import { escapeHtml } from "../lib/auth/security-notifications/templates/shared.js";
 const APP_NAME_FALLBACK = process.env.NEXT_PUBLIC_APP_NAME || "Your App";
 async function teamInvitation(data, locale) {
   const t = await getTranslations({ locale, namespace: "email.teamInvitation" });
@@ -32,7 +33,7 @@ async function teamInvitation(data, locale) {
                       <h2 style="color: #333333; font-size: 24px; margin: 0 0 20px 0; font-weight: 600;">${t("title")}</h2>
 
                       <p style="color: #666666; font-size: 16px; line-height: 1.6; margin: 0 0 20px 0;">
-                        ${t("bodyIntro", { inviterName: data.inviterName, teamName: data.teamName, role: data.role })}
+                        ${t("bodyIntro", { inviterName: escapeHtml(data.inviterName), teamName: escapeHtml(data.teamName), role: data.role })}
                       </p>
 
                       <p style="color: #666666; font-size: 16px; line-height: 1.6; margin: 0 0 30px 0;">
@@ -74,7 +75,7 @@ async function teamInvitation(data, locale) {
                         ${t("copyright", { year, appName })}
                       </p>
                       <p style="color: #999999; font-size: 12px; margin: 0;">
-                        ${t("footerSentTo", { inviteeEmail: data.inviteeEmail })}<br>
+                        ${t("footerSentTo", { inviteeEmail: escapeHtml(data.inviteeEmail) })}<br>
                         ${t("footerUnexpected")}
                       </p>
                     </td>

package/dist/emails/verify-email.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-email.d.ts","sourceRoot":"","sources":["../../src/emails/verify-email.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAI9E,wBAA8B,WAAW,CACvC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CA+EvB"}
+{"version":3,"file":"verify-email.d.ts","sourceRoot":"","sources":["../../src/emails/verify-email.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAI9E,wBAA8B,WAAW,CACvC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC,CAgFvB"}

package/dist/hooks/index.d.ts

@@ -17,6 +17,7 @@ export * from './useFeature';
 export * from './useInvoice';
 export * from './useInvoices';
 export * from './useLastAuthMethod';
+export * from './useSessionCookieRefresh';
 export * from './useLocale';
 export * from './useMedia';
 export * from './useMediaUpload';

package/dist/hooks/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAGA,cAAc,4BAA4B,CAAA;AAC1C,cAAc,WAAW,CAAA;AACzB,cAAc,yBAAyB,CAAA;AACvC,cAAc,yBAAyB,CAAA;AACvC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,yBAAyB,CAAA;AACvC,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAC7B,cAAc,qBAAqB,CAAA;AACnC,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,0BAA0B,CAAA;AACxC,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,WAAW,CAAA;AACzB,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,YAAY,CAAA;AAC1B,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,wBAAwB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAGA,cAAc,4BAA4B,CAAA;AAC1C,cAAc,WAAW,CAAA;AACzB,cAAc,yBAAyB,CAAA;AACvC,cAAc,yBAAyB,CAAA;AACvC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,yBAAyB,CAAA;AACvC,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA;AAC5B,cAAc,eAAe,CAAA;AAC7B,cAAc,qBAAqB,CAAA;AACnC,cAAc,2BAA2B,CAAA;AACzC,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,0BAA0B,CAAA;AACxC,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,WAAW,CAAA;AACzB,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,YAAY,CAAA;AAC1B,cAAc,yBAAyB,CAAA;AACvC,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,wBAAwB,CAAA"}

package/dist/hooks/index.js

@@ -17,6 +17,7 @@ export * from "./useFeature.js";
 export * from "./useInvoice.js";
 export * from "./useInvoices.js";
 export * from "./useLastAuthMethod.js";
+export * from "./useSessionCookieRefresh.js";
 export * from "./useLocale.js";
 export * from "./useMedia.js";
 export * from "./useMediaUpload.js";

package/dist/hooks/useAuth.d.ts

@@ -102,6 +102,35 @@ export declare function useAuth(): {
     })>;
     signOut: () => Promise<void>;
     googleSignIn: (redirectTo?: string) => Promise<void>;
+    sendOtp: (email: string) => Promise<{
+        success: boolean;
+    }>;
+    signInWithOtp: ({ email, otp, redirectTo }: {
+        email: string;
+        otp: string;
+        redirectTo?: string;
+    }) => Promise<Omit<{
+        token: string;
+        user: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+        };
+    }, "user"> & {
+        user: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            emailVerified: boolean;
+            name: string;
+            email?: string;
+            image?: string;
+        } & {} & {}>;
+    }>;
     resetPassword: (email: string) => Promise<{
         success: boolean;
         data: any;

package/dist/hooks/useAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../src/hooks/useAuth.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAS9C,wBAAgB,OAAO;UAuMS,WAAW,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;8CAjMa;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;+DAmBvC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAkC1H,MAAM;2BAYX,MAAM;;;;;;;;;;;;kCA6BC,MAAM,UAAU,MAAM;;;;;;;;;;;sCAwClB,MAAM,eAAe,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCA8B5B,MAAM;;;;;;;;;;;;;;;EA6C3D"}
+{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../src/hooks/useAuth.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAS9C,wBAAgB,OAAO;UA4OS,WAAW,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;8CAtOa;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;+DAmBvC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAuE1H,MAAM;qBAhCjB,MAAM;;;gDAgBiB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;iBA8Kyf,CAAC;;;;;;;;;;;;;2BAlJ9jB,MAAM;;;;;;;;;;;;kCA6BC,MAAM,UAAU,MAAM;;;;;;;;;;;sCAwClB,MAAM,eAAe,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCA8B5B,MAAM;;;;;;;;;;;;;;;EA+C3D"}

package/dist/hooks/useAuth.js

@@ -29,6 +29,7 @@ function useAuth() {
         email,
         password,
         name: `${firstName || ""} ${lastName || ""}`.trim() || email.split("@")[0],
+        // @ts-expect-error — pre-existing type error, tracked in https://github.com/NextSpark-js/nextspark/issues/131
         firstName,
         lastName
       },
@@ -48,6 +49,27 @@ function useAuth() {
     await authClient.signOut();
     router.push("/login");
   };
+  const handleSendOtp = async (email) => {
+    const { data, error } = await authClient.emailOtp.sendVerificationOtp({
+      email,
+      type: "sign-in"
+    });
+    if (error) {
+      throw new Error(error.message || "Failed to send the sign-in code");
+    }
+    return data;
+  };
+  const handleOtpSignIn = async ({ email, otp, redirectTo }) => {
+    const { data, error } = await authClient.signIn.emailOtp({ email, otp });
+    if (error) {
+      throw new Error(error.message || "Invalid or expired code");
+    }
+    if (data) {
+      saveAuthMethod("email");
+      router.push(redirectTo || "/dashboard");
+    }
+    return data;
+  };
   const handleGoogleSignIn = async (redirectTo) => {
     const callbackURL = redirectTo ? `${redirectTo}${redirectTo.includes("?") ? "&" : "?"}auth_method=google` : "/dashboard?auth_method=google";
     await authClient.signIn.social({
@@ -174,6 +196,8 @@ function useAuth() {
     signUp: handleSignUp,
     signOut: handleSignOut,
     googleSignIn: handleGoogleSignIn,
+    sendOtp: handleSendOtp,
+    signInWithOtp: handleOtpSignIn,
     resetPassword: handleResetPassword,
     updatePassword: handleUpdatePassword,
     changePassword: handleChangePassword,

package/dist/hooks/useEnsureUserMetadata.d.ts

@@ -1,6 +1,28 @@
+interface UserMetadata {
+    uiPreferences?: {
+        theme?: string;
+        sidebarCollapsed?: boolean;
+    };
+    securityPreferences?: {
+        loginAlertsEnabled?: boolean;
+    };
+    notificationsPreferences?: Record<string, boolean>;
+}
+/**
+ * Returns the default blocks (uiPreferences, securityPreferences,
+ * notificationsPreferences) that are still missing from the user's meta.
+ *
+ * Each block is checked independently: other flows (onboarding progress, tours,
+ * active team pointer, ...) write their own keys into `meta` early, so an
+ * "is meta empty?" guard would almost never fire for real users (see #119).
+ * Only the missing blocks are returned so existing preferences are never
+ * overwritten.
+ */
+export declare function getMissingMetadataDefaults(meta: UserMetadata | null | undefined): Partial<UserMetadata>;
 /**
  * Hook to ensure user has default metadata
  * Uses TanStack Query for proper caching and deduplication
  */
 export declare function useEnsureUserMetadata(): void;
+export {};
 //# sourceMappingURL=useEnsureUserMetadata.d.ts.map

package/dist/hooks/useEnsureUserMetadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useEnsureUserMetadata.d.ts","sourceRoot":"","sources":["../../src/hooks/useEnsureUserMetadata.ts"],"names":[],"mappings":"AAsDA;;;GAGG;AACH,wBAAgB,qBAAqB,SA+DpC"}
+{"version":3,"file":"useEnsureUserMetadata.d.ts","sourceRoot":"","sources":["../../src/hooks/useEnsureUserMetadata.ts"],"names":[],"mappings":"AAOA,UAAU,YAAY;IACpB,aAAa,CAAC,EAAE;QACd,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAC3B,CAAA;IACD,mBAAmB,CAAC,EAAE;QACpB,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAC7B,CAAA;IACD,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnD;AA0CD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GACpC,OAAO,CAAC,YAAY,CAAC,CASvB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,SAgEpC"}

package/dist/hooks/useEnsureUserMetadata.js

@@ -33,6 +33,17 @@ const DEFAULT_METADATA = {
     featureAnnouncementsPush: false
   }
 };
+const METADATA_BLOCKS = Object.keys(DEFAULT_METADATA);
+function getMissingMetadataDefaults(meta) {
+  const missing = {};
+  for (const block of METADATA_BLOCKS) {
+    const current = meta == null ? void 0 : meta[block];
+    if (current === null || current === void 0) {
+      missing[block] = DEFAULT_METADATA[block];
+    }
+  }
+  return missing;
+}
 function useEnsureUserMetadata() {
   var _a, _b;
   const session = authClient.useSession();
@@ -57,7 +68,7 @@ function useEnsureUserMetadata() {
     // 30 minutes cache
   });
   const createMetadataMutation = useMutation({
-    mutationFn: async () => {
+    mutationFn: async (metadata) => {
       const response = await fetch("/api/internal/user-metadata", {
         method: "POST",
         headers: {
@@ -65,7 +76,7 @@ function useEnsureUserMetadata() {
         },
         body: JSON.stringify({
           userId,
-          metadata: DEFAULT_METADATA
+          metadata
         })
       });
       if (!response.ok) {
@@ -82,14 +93,16 @@ function useEnsureUserMetadata() {
   });
   useEffect(() => {
     if (!isFetched || !userData || hasCreatedMetadata.current) return;
-    const needsMetadata = !userData.meta || Object.keys(userData.meta).length === 0;
+    const missingDefaults = getMissingMetadataDefaults(userData.meta);
+    const needsMetadata = Object.keys(missingDefaults).length > 0;
     if (needsMetadata && !createMetadataMutation.isPending) {
       hasCreatedMetadata.current = true;
-      console.log("Creating default metadata for user:", userId);
-      createMetadataMutation.mutate();
+      console.log("Creating default metadata for user:", userId, Object.keys(missingDefaults));
+      createMetadataMutation.mutate(missingDefaults);
     }
   }, [isFetched, userData, userId, createMetadataMutation]);
 }
 export {
+  getMissingMetadataDefaults,
   useEnsureUserMetadata
 };

package/dist/hooks/useSessionCookieRefresh.d.ts

@@ -0,0 +1,35 @@
+export interface UseSessionCookieRefreshOptions {
+    /**
+     * Minimum time between two refresh calls, in milliseconds. Every trigger
+     * inside this window is ignored. Default: 5 minutes (matches the default
+     * session cookie cache, so at most one extra DB read per 5 minutes).
+     */
+    minIntervalMs?: number;
+    /**
+     * Also refresh once right after mount — i.e. every time the app is opened
+     * (PWA cold start, full reload). Default: true.
+     */
+    refreshOnMount?: boolean;
+    /** Set to false to turn the hook off (e.g. on public/auth pages). Default: true. */
+    enabled?: boolean;
+}
+export declare const DEFAULT_SESSION_REFRESH_INTERVAL_MS: number;
+/**
+ * Keep the session cookie alive for installed PWAs / long-lived tabs.
+ *
+ * Server Component renders read the session with `disableRefresh`, so they
+ * never renew the cookie (Next.js cannot write cookies during render). This
+ * hook triggers the real renewal through Better Auth's `get-session` Route
+ * Handler — where `Set-Cookie` works — whenever the app is (re)opened:
+ *
+ * - on mount (app open / reload), unless `refreshOnMount: false`
+ * - when the document becomes visible again (`visibilitychange`, `focus`,
+ *   `pageshow` for bfcache restores)
+ * - when connectivity comes back (`online`)
+ *
+ * Calls are throttled by `minIntervalMs`; a failed call (offline, server
+ * down) does not count towards the throttle, so the next trigger retries.
+ * Anonymous visitors just get a cheap `null` session response.
+ */
+export declare function useSessionCookieRefresh(options?: UseSessionCookieRefreshOptions): void;
+//# sourceMappingURL=useSessionCookieRefresh.d.ts.map

package/dist/hooks/useSessionCookieRefresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useSessionCookieRefresh.d.ts","sourceRoot":"","sources":["../../src/hooks/useSessionCookieRefresh.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,8BAA8B;IAC7C;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,eAAO,MAAM,mCAAmC,QAAgB,CAAA;AAEhE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,8BAAmC,QAmDnF"}

package/dist/hooks/useSessionCookieRefresh.js

@@ -0,0 +1,49 @@
+"use client";
+import { useEffect, useRef } from "react";
+import { refreshSessionCookie } from "../lib/auth-client.js";
+const DEFAULT_SESSION_REFRESH_INTERVAL_MS = 5 * 60 * 1e3;
+function useSessionCookieRefresh(options = {}) {
+  const {
+    minIntervalMs = DEFAULT_SESSION_REFRESH_INTERVAL_MS,
+    refreshOnMount = true,
+    enabled = true
+  } = options;
+  const lastRefreshAtRef = useRef(0);
+  const inFlightRef = useRef(false);
+  useEffect(() => {
+    if (!enabled || typeof window === "undefined") return;
+    const refresh = async () => {
+      if (inFlightRef.current) return;
+      const now = Date.now();
+      if (now - lastRefreshAtRef.current < minIntervalMs) return;
+      inFlightRef.current = true;
+      lastRefreshAtRef.current = now;
+      try {
+        await refreshSessionCookie();
+      } catch {
+        lastRefreshAtRef.current = 0;
+      } finally {
+        inFlightRef.current = false;
+      }
+    };
+    const onVisibilityChange = () => {
+      if (document.visibilityState === "visible") void refresh();
+    };
+    const onWake = () => void refresh();
+    document.addEventListener("visibilitychange", onVisibilityChange);
+    window.addEventListener("focus", onWake);
+    window.addEventListener("pageshow", onWake);
+    window.addEventListener("online", onWake);
+    if (refreshOnMount) void refresh();
+    return () => {
+      document.removeEventListener("visibilitychange", onVisibilityChange);
+      window.removeEventListener("focus", onWake);
+      window.removeEventListener("pageshow", onWake);
+      window.removeEventListener("online", onWake);
+    };
+  }, [enabled, minIntervalMs, refreshOnMount]);
+}
+export {
+  DEFAULT_SESSION_REFRESH_INTERVAL_MS,
+  useSessionCookieRefresh
+};

package/dist/lib/api/api-error.d.ts

@@ -7,8 +7,10 @@
 export declare const API_ERROR_CODES: {
     /** Role-based permission check failed (checkPermission) */
     readonly PERMISSION_DENIED: "PERMISSION_DENIED";
-    /** API key scope check failed (hasRequiredScope) */
+    /** API key lacks the scope the route declared (authenticateRequest / hasRequiredScope) */
     readonly INSUFFICIENT_SCOPE: "INSUFFICIENT_SCOPE";
+    /** Route declared no required API key scope, so API keys are rejected (fail closed, #93) */
+    readonly SCOPE_NOT_DECLARED: "SCOPE_NOT_DECLARED";
 };
 export type ApiErrorCode = typeof API_ERROR_CODES[keyof typeof API_ERROR_CODES];
 /**

package/dist/lib/api/api-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-error.d.ts","sourceRoot":"","sources":["../../../src/lib/api/api-error.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,eAAe;IAC1B,2DAA2D;;IAE3D,oDAAoD;;CAE5C,CAAA;AAEV,MAAM,MAAM,YAAY,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAA;AAE/E;;;;;GAKG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,CAAA;gBAEL,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE;IAa5F;;OAEG;IACH,kBAAkB,IAAI,OAAO;IAI7B;;;;;OAKG;WACU,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAqC1F"}
+{"version":3,"file":"api-error.d.ts","sourceRoot":"","sources":["../../../src/lib/api/api-error.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,eAAe;IAC1B,2DAA2D;;IAE3D,0FAA0F;;IAE1F,4FAA4F;;CAEpF,CAAA;AAEV,MAAM,MAAM,YAAY,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAA;AAE/E;;;;;GAKG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,OAAO,CAAA;gBAEL,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE;IAa5F;;OAEG;IACH,kBAAkB,IAAI,OAAO;IAI7B;;;;;OAKG;WACU,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAqC1F"}

package/dist/lib/api/api-error.js

@@ -1,8 +1,10 @@
 const API_ERROR_CODES = {
   /** Role-based permission check failed (checkPermission) */
   PERMISSION_DENIED: "PERMISSION_DENIED",
-  /** API key scope check failed (hasRequiredScope) */
-  INSUFFICIENT_SCOPE: "INSUFFICIENT_SCOPE"
+  /** API key lacks the scope the route declared (authenticateRequest / hasRequiredScope) */
+  INSUFFICIENT_SCOPE: "INSUFFICIENT_SCOPE",
+  /** Route declared no required API key scope, so API keys are rejected (fail closed, #93) */
+  SCOPE_NOT_DECLARED: "SCOPE_NOT_DECLARED"
 };
 class ApiError extends Error {
   code;