@nextsparkjs/core 0.1.0-beta.187 → 0.1.0-beta.189

package/dist/hooks/useSessionCookieRefresh.js

@@ -10,20 +10,33 @@ function useSessionCookieRefresh(options = {}) {
   } = options;
   const lastRefreshAtRef = useRef(0);
   const inFlightRef = useRef(false);
+  const generationRef = useRef(0);
+  const onRefreshRef = useRef(options.onRefresh);
+  onRefreshRef.current = options.onRefresh;
   useEffect(() => {
-    if (!enabled || typeof window === "undefined") return;
+    if (typeof window === "undefined") return;
+    if (!enabled) {
+      generationRef.current++;
+      inFlightRef.current = false;
+      lastRefreshAtRef.current = 0;
+      return;
+    }
     const refresh = async () => {
+      var _a;
       if (inFlightRef.current) return;
       const now = Date.now();
       if (now - lastRefreshAtRef.current < minIntervalMs) return;
+      const generation = generationRef.current;
+      const current = () => generation === generationRef.current;
       inFlightRef.current = true;
       lastRefreshAtRef.current = now;
       try {
-        await refreshSessionCookie();
+        const result = await refreshSessionCookie();
+        if (current()) (_a = onRefreshRef.current) == null ? void 0 : _a.call(onRefreshRef, result, { isCurrent: current });
       } catch {
-        lastRefreshAtRef.current = 0;
+        if (current()) lastRefreshAtRef.current = 0;
       } finally {
-        inFlightRef.current = false;
+        if (current()) inFlightRef.current = false;
       }
     };
     const onVisibilityChange = () => {

package/dist/hooks/useSessionHint.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Whether this browser is signed in, as the session hint says (see
+ * lib/auth/session-hint), following it as it changes: a sign-in or sign-out on
+ * the page, or the tab coming back into view. `ready` stays false through the
+ * server render and hydration, which cannot read the cookie, so both render the
+ * same thing until the effect runs.
+ */
+export declare function useSessionHint(): {
+    ready: boolean;
+    signedIn: boolean;
+};
+//# sourceMappingURL=useSessionHint.d.ts.map

package/dist/hooks/useSessionHint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useSessionHint.d.ts","sourceRoot":"","sources":["../../src/hooks/useSessionHint.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AACH,wBAAgB,cAAc,IAAI;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAStE"}

package/dist/hooks/useSessionHint.js

@@ -0,0 +1,15 @@
+"use client";
+import { useEffect, useState, useSyncExternalStore } from "react";
+import { hasSessionHint, subscribeSessionHint } from "../lib/auth/session-hint.js";
+const signedOutOnServer = () => false;
+function useSessionHint() {
+  const [ready, setReady] = useState(false);
+  const signedIn = useSyncExternalStore(subscribeSessionHint, hasSessionHint, signedOutOnServer);
+  useEffect(() => {
+    setReady(true);
+  }, []);
+  return { ready, signedIn: ready && signedIn };
+}
+export {
+  useSessionHint
+};

package/dist/hooks/useTranslationPreload.js

@@ -8,14 +8,14 @@ function useTranslationPreload(context = "auto") {
   const locale = useLocale();
   useEffect(() => {
     const preloadNamespaces = async (namespaces, contextName) => {
-      console.log(`[TranslationPreload] \u{1F680} Iniciando precarga ${contextName} para ${locale}:`, namespaces);
+      console.log(`[TranslationPreload] \u{1F680} Starting ${contextName} preload for ${locale}:`, namespaces);
       const promises = namespaces.map(async (namespace) => {
         try {
           await import(`../messages/${locale}/${namespace}.json`);
-          console.log(`[TranslationPreload] \u2713 Precargado: ${namespace}`);
+          console.log(`[TranslationPreload] \u2713 Preloaded: ${namespace}`);
           return { namespace, success: true };
         } catch (error) {
-          console.warn(`[TranslationPreload] \u26A0\uFE0F Error precargando ${namespace}:`, error);
+          console.warn(`[TranslationPreload] \u26A0\uFE0F Error preloading ${namespace}:`, error);
           return { namespace, success: false, error };
         }
       });
@@ -23,7 +23,7 @@ function useTranslationPreload(context = "auto") {
       const successful = results.filter(
         (result) => result.status === "fulfilled" && result.value.success
       ).length;
-      console.log(`[TranslationPreload] \u2705 Precarga ${contextName} completa: ${successful}/${namespaces.length} namespaces`);
+      console.log(`[TranslationPreload] \u2705 ${contextName} preload complete: ${successful}/${namespaces.length} namespaces`);
     };
     const schedulePreload = () => {
       let namespacesToLoad = [];
@@ -76,7 +76,7 @@ function useNavigationPreload() {
     } else {
       namespacesToLoad = PUBLIC_NAMESPACES;
     }
-    console.log(`[NavigationPreload] Precargando para ${pathname}:`, namespacesToLoad);
+    console.log(`[NavigationPreload] Preloading for ${pathname}:`, namespacesToLoad);
     const promises = namespacesToLoad.map(
       (namespace) => import(`../messages/${locale}/${namespace}.json`).catch((error) => {
         console.warn(`[NavigationPreload] Error: ${namespace}`, error);
@@ -84,7 +84,7 @@ function useNavigationPreload() {
       })
     );
     await Promise.all(promises);
-    console.log(`[NavigationPreload] \u2705 Listo para navegar a ${pathname}`);
+    console.log(`[NavigationPreload] \u2705 Ready to navigate to ${pathname}`);
   };
   return { preloadForRoute };
 }

package/dist/i18n.d.ts

@@ -1,10 +1,23 @@
+/**
+ * @deprecated Not used to load translations: every request gets the merged
+ * catalog. Kept for code that imports it.
+ */
 declare const NAMESPACE_GROUPS: {
     PUBLIC_INITIAL: string[];
     DASHBOARD_AUTHENTICATED: string[];
     AUTH_ONLY: string[];
     ALL: string[];
 };
+/**
+ * @deprecated Not used to load translations: every request gets the merged
+ * catalog. Kept for code that imports it.
+ */
 declare function getPageNamespaces(pathname: string): string[];
+/**
+ * The request config next-intl builds translations from. It reads nothing from
+ * the request itself: a page rendered with request data is dynamic, and the
+ * locale already comes from getUserLocale, resolved once per request.
+ */
 declare const _default: (params: import("next-intl/server").GetRequestConfigParams) => import("next-intl/server").RequestConfig | Promise<import("next-intl/server").RequestConfig>;
 export default _default;
 export { getPageNamespaces, NAMESPACE_GROUPS };

package/dist/i18n.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AAYA,QAAA,MAAM,gBAAgB;;;;;CAYrB,CAAC;AAGF,iBAAS,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAsErD;;AAYD,wBA4DG;AAGH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC"}
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,QAAA,MAAM,gBAAgB;;;;;CAYrB,CAAC;AAEF;;;GAGG;AACH,iBAAS,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAsErD;AAYD;;;;GAIG;;AACH,wBA8BG;AAGH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/i18n.js

@@ -1,6 +1,5 @@
 import { getRequestConfig } from "next-intl/server";
 import { I18N_CONFIG } from "./lib/config/index.js";
-import { headers } from "next/headers";
 import { loadMergedTranslations } from "./lib/translations/registry.js";
 import { getUserLocale } from "./lib/locale.js";
 const DEBUG_I18N = process.env.NEXTSPARK_DEBUG_I18N === "true";
@@ -67,33 +66,9 @@ async function getServerLocale() {
     return I18N_CONFIG.defaultLocale;
   }
 }
-var i18n_default = getRequestConfig(async () => {
-  let locale;
+var i18n_default = getRequestConfig(async ({ locale: requestedLocale }) => {
+  const locale = I18N_CONFIG.supportedLocales.includes(requestedLocale) ? requestedLocale : await getServerLocale();
   try {
-    locale = await getServerLocale();
-  } catch {
-    locale = I18N_CONFIG.defaultLocale;
-  }
-  try {
-    let pathname = "";
-    try {
-      const headersList = await headers();
-      pathname = headersList.get("x-pathname") || headersList.get("x-url") || "";
-      if (!pathname) {
-        const referer = headersList.get("referer") || "";
-        if (referer) {
-          try {
-            const url = new URL(referer);
-            pathname = url.pathname;
-            if (DEBUG_I18N) {
-              console.log(`[i18n] Extracted pathname from referer: "${pathname}"`);
-            }
-          } catch {
-          }
-        }
-      }
-    } catch {
-    }
     const messages = await loadMergedTranslations(locale);
     if (DEBUG_I18N) {
       console.log(`[i18n] Loaded merged translations for ${locale} with ${Object.keys(messages).length} namespaces`);

package/dist/lib/actions/entity.actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.actions.d.ts","sourceRoot":"","sources":["../../../src/lib/actions/entity.actions.ts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EACV,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EAElB,MAAM,SAAS,CAAA;AAqChB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,iBAAiB,EACvB,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAwDhC;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,iBAAiB,EACvB,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CA+DhC;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,sBAAsB,CAAC,CA4DjC;AAMD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,SAAS,CAAC,CAAC,GAAG,OAAO,EACzC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAsCvC;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAoClD;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EAAE,EACb,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,CA0DhD;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAuCtC;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAkCrC"}
+{"version":3,"file":"entity.actions.d.ts","sourceRoot":"","sources":["../../../src/lib/actions/entity.actions.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EACV,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EAElB,MAAM,SAAS,CAAA;AAqChB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,iBAAiB,EACvB,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAwDhC;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,iBAAiB,EACvB,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CA+DhC;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,sBAAsB,CAAC,CA4DjC;AAMD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,SAAS,CAAC,CAAC,GAAG,OAAO,EACzC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAsCvC;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAoClD;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EAAE,EACb,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,CA0DhD;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAuCtC;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAkCrC"}

package/dist/lib/actions/entity.actions.js

@@ -1,20 +1,21 @@
 "use server";
 import { revalidatePath, revalidateTag } from "next/cache";
 import { headers, cookies } from "next/headers";
+import { ACTIVE_TEAM_COOKIE, activeTeamIdForSession } from "../teams/active-team-cookie.js";
 import { redirect } from "next/navigation";
 import { GenericEntityService } from "../services/generic-entity.service.js";
 import { entityRegistry } from "../entities/registry.js";
 import { getTypedSession } from "../auth.js";
 import { checkPermission } from "../permissions/check.js";
 async function getAuthContext() {
-  var _a, _b;
+  var _a, _b, _c;
   const headersList = await headers();
   const session = await getTypedSession(headersList);
   if (!((_a = session == null ? void 0 : session.user) == null ? void 0 : _a.id)) {
     return { success: false, error: "Authentication required" };
   }
   const cookieStore = await cookies();
-  const teamId = (_b = cookieStore.get("activeTeamId")) == null ? void 0 : _b.value;
+  const teamId = activeTeamIdForSession((_b = cookieStore.get(ACTIVE_TEAM_COOKIE)) == null ? void 0 : _b.value, (_c = session.session) == null ? void 0 : _c.id);
   if (!teamId) {
     return { success: false, error: "No active team selected" };
   }

package/dist/lib/api/auth/dual-auth.d.ts

@@ -45,6 +45,8 @@ export interface DualAuthResult {
     scopes?: string[];
     /** `api_key.id` of the key that authenticated the request (type 'api-key' only). Used for audit logging (#105). */
     keyId?: string;
+    /** The session's id (type 'session' only): the active team cookie counts only for it. */
+    sessionId?: string;
     rateLimitResponse?: Response;
     /** Set when a dev-only x-act-as-user override replaced the real caller. */
     actingAs?: {
@@ -88,7 +90,8 @@ export declare function hasRequiredScope(authResult: DualAuthResult, requiredSco
 /**
  * Resolve and validate team context from request.
  *
- * Resolution priority: x-team-id header > activeTeamId cookie > user's defaultTeamId
+ * Resolution priority: x-team-id header > the activeTeamId cookie this session wrote >
+ * user's defaultTeamId
  *
  * Returns the validated teamId string on success, or a NextResponse error if:
  * - No team context can be resolved (400)

package/dist/lib/api/auth/dual-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dual-auth.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/auth/dual-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAMvD,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EAKrB,MAAM,gBAAgB,CAAA;AAEvB,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAK/F;;;GAGG;AACH,eAAO,MAAM,oBAAoB,uBAAuB,CAAA;AAExD;;GAEG;AACH,eAAO,MAAM,mBAAmB,mBAAmB,CAAA;AACnD,eAAO,MAAM,kBAAkB,8BAA8B,CAAA;AAE7D;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,kBAAkB,CAAA;AAOjD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB;;;;OAIG;IACH,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAA;IACpC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAA;IACzB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,mHAAmH;IACnH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iBAAiB,CAAC,EAAE,QAAQ,CAAA;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3D,0EAA0E;IAC1E,KAAK,CAAC,EAAE,eAAe,CAAA;CACxB;AAqBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,cAAc,CAAC,CAsCzB;AAuKD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAUtG;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,cAAc,GACzB,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,CAsChC;AAMD;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,cAAc,EAC1B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,OAAO,CAAC,CAkBlB;AA2BD;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,MAAkC,EAAE,MAAM,GAAE,MAAY;;;;GAShG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,cAAc,GAAG,YAAY,CAUlF"}
+{"version":3,"file":"dual-auth.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/auth/dual-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAMvD,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EAKrB,MAAM,gBAAgB,CAAA;AAEvB,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAK/F;;;GAGG;AACH,eAAO,MAAM,oBAAoB,uBAAuB,CAAA;AAExD;;GAEG;AACH,eAAO,MAAM,mBAAmB,mBAAmB,CAAA;AACnD,eAAO,MAAM,kBAAkB,8BAA8B,CAAA;AAE7D;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,kBAAkB,CAAA;AAOjD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB;;;;OAIG;IACH,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAA;IACpC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAA;IACzB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,mHAAmH;IACnH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,QAAQ,CAAA;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3D,0EAA0E;IAC1E,KAAK,CAAC,EAAE,eAAe,CAAA;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,WAAW,EACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,cAAc,CAAC,CAsCzB;AAwKD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAUtG;AAMD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,cAAc,GACzB,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,CAsChC;AAMD;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,cAAc,EAC1B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,OAAO,CAAC,CAkBlB;AA2BD;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,MAAkC,EAAE,MAAM,GAAE,MAAY;;;;GAShG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,cAAc,GAAG,YAAY,CAUlF"}

package/dist/lib/api/auth/dual-auth.js

@@ -1,3 +1,5 @@
+import { ACTIVE_TEAM_COOKIE, activeTeamIdForSession } from "../../teams/active-team-cookie.js";
+import { getUserDefaultTeamId } from "../../teams/dashboard-team.js";
 import { NextResponse } from "next/server";
 import { auth } from "../../auth.js";
 import { validateApiKey } from "../auth.js";
@@ -15,21 +17,6 @@ const ADMIN_BYPASS_HEADER = "x-admin-bypass";
 const ADMIN_BYPASS_VALUE = "confirm-cross-team-access";
 const ACT_AS_USER_HEADER = "x-act-as-user";
 const ELEVATED_ROLES = ["superadmin", "developer"];
-async function getUserDefaultTeamId(userId) {
-  try {
-    const result = await queryOne(
-      `SELECT "teamId" FROM "team_members"
-       WHERE "userId" = $1
-       ORDER BY "joinedAt" ASC
-       LIMIT 1`,
-      [userId]
-    );
-    return result == null ? void 0 : result.teamId;
-  } catch (error) {
-    console.error("[dual-auth] Failed to get default team:", error);
-    return void 0;
-  }
-}
 async function authenticateRequest(request, options = {}) {
   const apiKeyResult = await tryApiKeyAuth(request);
   if (apiKeyResult.success) {
@@ -131,6 +118,7 @@ async function tryApiKeyAuth(request) {
   }
 }
 async function trySessionAuth(request) {
+  var _a;
   try {
     console.log("[dual-auth] Attempting session authentication...");
     const session = await auth.api.getSession({ headers: request.headers });
@@ -144,6 +132,7 @@ async function trySessionAuth(request) {
     return {
       success: true,
       type: "session",
+      sessionId: (_a = session.session) == null ? void 0 : _a.id,
       user: {
         id: session.user.id,
         email: session.user.email,
@@ -171,7 +160,7 @@ function hasRequiredScope(authResult, requiredScope) {
 }
 async function resolveTeamContext(request, authResult) {
   var _a;
-  const teamId = request.headers.get("x-team-id") || ((_a = request.cookies.get("activeTeamId")) == null ? void 0 : _a.value) || authResult.user.defaultTeamId;
+  const teamId = request.headers.get("x-team-id") || activeTeamIdForSession((_a = request.cookies.get(ACTIVE_TEAM_COOKIE)) == null ? void 0 : _a.value, authResult.sessionId) || authResult.user.defaultTeamId;
   if (!teamId) {
     return NextResponse.json(
       { success: false, error: "Team context required. Include x-team-id header." },

package/dist/lib/api/entities.js

@@ -79,13 +79,13 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al cargar ${entityType}`;
+      let userMessage = `Failed to load ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para acceder a estos datos. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to access this data. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para realizar esta acci\xF3n.";
+        userMessage = "You do not have the necessary permissions to perform this action.";
       } else if (response.status === 404) {
-        userMessage = "Los datos solicitados no fueron encontrados.";
+        userMessage = "The requested data was not found.";
       } else if (response.status === 400 && errorData.code === "TEAM_CONTEXT_REQUIRED") {
         console.warn("[EntityApiClient] Team context not ready yet, returning empty list");
         return {
@@ -102,7 +102,7 @@ class EntityApiClient {
           }
         };
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -127,15 +127,15 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al cargar ${entityType}`;
+      let userMessage = `Failed to load ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para acceder a estos datos. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to access this data. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para realizar esta acci\xF3n.";
+        userMessage = "You do not have the necessary permissions to perform this action.";
       } else if (response.status === 404) {
-        userMessage = "El elemento solicitado no fue encontrado.";
+        userMessage = "The requested item was not found.";
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -158,15 +158,15 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al crear ${entityType}`;
+      let userMessage = `Failed to create ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para crear este elemento. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to create this item. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para crear este elemento.";
+        userMessage = "You do not have the necessary permissions to create this item.";
       } else if (response.status === 400) {
-        userMessage = "Los datos proporcionados no son v\xE1lidos. Por favor, revisa el formulario.";
+        userMessage = "The provided data is not valid. Please review the form.";
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -189,17 +189,17 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al actualizar ${entityType}`;
+      let userMessage = `Failed to update ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para actualizar este elemento. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to update this item. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para actualizar este elemento.";
+        userMessage = "You do not have the necessary permissions to update this item.";
       } else if (response.status === 404) {
-        userMessage = "El elemento que intentas actualizar no fue encontrado.";
+        userMessage = "The item you are trying to update was not found.";
       } else if (response.status === 400) {
-        userMessage = "Los datos proporcionados no son v\xE1lidos. Por favor, revisa el formulario.";
+        userMessage = "The provided data is not valid. Please review the form.";
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -221,15 +221,15 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al eliminar ${entityType}`;
+      let userMessage = `Failed to delete ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para eliminar este elemento. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to delete this item. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para eliminar este elemento.";
+        userMessage = "You do not have the necessary permissions to delete this item.";
       } else if (response.status === 404) {
-        userMessage = "El elemento que intentas eliminar no fue encontrado.";
+        userMessage = "The item you are trying to delete was not found.";
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -333,8 +333,8 @@ class EntityApiClient {
       if (entityConfig.features.canDelete) {
         operations.push({
           id: "bulk-delete",
-          name: "Eliminar Seleccionados",
-          description: "Eliminar m\xFAltiples elementos a la vez",
+          name: "Delete Selected",
+          description: "Delete multiple items at once",
           icon: "trash",
           requiresConfirmation: true
         });
@@ -342,15 +342,15 @@ class EntityApiClient {
       if (entityConfig.features.canEdit) {
         operations.push({
           id: "bulk-edit",
-          name: "Editar Seleccionados",
-          description: "Actualizar m\xFAltiples elementos a la vez",
+          name: "Edit Selected",
+          description: "Update multiple items at once",
           icon: "edit"
         });
       }
       operations.push({
         id: "bulk-export",
-        name: "Exportar",
-        description: "Exportar datos seleccionados",
+        name: "Export",
+        description: "Export selected data",
         icon: "download"
       });
       return operations;
@@ -376,7 +376,7 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      throw new Error(errorData.message || `Error ejecutando operaci\xF3n ${operationId}`);
+      throw new Error(errorData.message || `Error executing operation ${operationId}`);
     }
     const result = await response.json();
     return result.data;

package/dist/lib/api/keys.d.ts

@@ -39,24 +39,24 @@ export declare class ApiKeyManager {
  * Definición de scopes disponibles para API keys
  */
 export declare const API_SCOPES: {
-    readonly 'users:read': "Leer información de usuarios";
-    readonly 'users:write': "Crear y actualizar usuarios";
-    readonly 'users:delete': "Eliminar usuarios";
-    readonly 'tasks:read': "Leer tasks";
-    readonly 'tasks:write': "Crear y actualizar tasks";
-    readonly 'tasks:delete': "Eliminar tasks";
-    readonly 'media:read': "Leer información de archivos y media";
-    readonly 'media:write': "Subir y actualizar archivos";
-    readonly 'media:delete': "Eliminar archivos";
-    readonly 'teams:read': "Leer equipos, miembros e invitaciones";
-    readonly 'teams:write': "Crear y actualizar equipos, miembros e invitaciones";
-    readonly 'teams:delete': "Eliminar equipos";
-    readonly 'billing:read': "Leer suscripciones, facturas y uso";
-    readonly 'billing:write': "Gestionar suscripciones, checkout, cambios de plan y uso";
-    readonly 'admin:api-keys': "Gestionar API keys";
-    readonly 'admin:users': "Administración completa de usuarios";
-    readonly 'admin:devtools': "Acceso a las APIs de DevTools (registries, testing, scheduled actions)";
-    readonly '*': "Acceso completo (solo superadmin)";
+    readonly 'users:read': "Read user information";
+    readonly 'users:write': "Create and update users";
+    readonly 'users:delete': "Delete users";
+    readonly 'tasks:read': "Read tasks";
+    readonly 'tasks:write': "Create and update tasks";
+    readonly 'tasks:delete': "Delete tasks";
+    readonly 'media:read': "Read file and media information";
+    readonly 'media:write': "Upload and update files";
+    readonly 'media:delete': "Delete files";
+    readonly 'teams:read': "Read teams, members and invitations";
+    readonly 'teams:write': "Create and update teams, members and invitations";
+    readonly 'teams:delete': "Delete teams";
+    readonly 'billing:read': "Read subscriptions, invoices and usage";
+    readonly 'billing:write': "Manage subscriptions, checkout, plan changes and usage";
+    readonly 'admin:api-keys': "Manage API keys";
+    readonly 'admin:users': "Full user administration";
+    readonly 'admin:devtools': "Access to DevTools APIs (registries, testing, scheduled actions)";
+    readonly '*': "Full access (superadmin only)";
 };
 export type ApiScope = keyof typeof API_SCOPES;
 /**
@@ -79,33 +79,33 @@ export declare function getAppApiScopes(): Record<string, string>;
  */
 export declare const SCOPE_CATEGORIES: {
     readonly users: {
-        readonly name: "Usuarios";
-        readonly description: "Gestión de usuarios del sistema";
+        readonly name: "Users";
+        readonly description: "System user management";
         readonly scopes: ApiScope[];
     };
     readonly tasks: {
         readonly name: "Tasks";
-        readonly description: "Gestión de tareas y TODOs";
+        readonly description: "Task and TODO management";
         readonly scopes: ApiScope[];
     };
     readonly teams: {
         readonly name: "Teams";
-        readonly description: "Equipos, miembros e invitaciones";
+        readonly description: "Teams, members and invitations";
         readonly scopes: ApiScope[];
     };
     readonly billing: {
         readonly name: "Billing";
-        readonly description: "Suscripciones, facturas, uso y planes";
+        readonly description: "Subscriptions, invoices, usage and plans";
         readonly scopes: ApiScope[];
     };
     readonly admin: {
-        readonly name: "Administración";
-        readonly description: "Funciones administrativas";
+        readonly name: "Administration";
+        readonly description: "Administrative functions";
         readonly scopes: ApiScope[];
     };
     readonly system: {
-        readonly name: "Sistema";
-        readonly description: "Acceso completo al sistema";
+        readonly name: "System";
+        readonly description: "Full system access";
         readonly scopes: ApiScope[];
     };
 };