@openora/core 0.4.0 → 0.4.1-canary.100

package/dist/react/hooks/__tests__/use-event-stream.test.js

@@ -0,0 +1,153 @@
+// @vitest-environment jsdom
+import { act, renderHook } from '@testing-library/react';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { useEventStream } from '../use-event-stream.js';
+function createControllableIterable() {
+    const queue = [];
+    let resolveNext = null;
+    let done = false;
+    const wake = () => {
+        resolveNext?.();
+        resolveNext = null;
+    };
+    const iterable = {
+        [Symbol.asyncIterator]() {
+            return {
+                async next() {
+                    while (queue.length === 0 && !done) {
+                        await new Promise((resolve) => {
+                            resolveNext = resolve;
+                        });
+                    }
+                    if (queue.length > 0) {
+                        return { value: queue.shift(), done: false };
+                    }
+                    return { value: undefined, done: true };
+                },
+            };
+        },
+    };
+    return {
+        iterable,
+        push: (event) => {
+            queue.push(event);
+            wake();
+        },
+        end: () => {
+            done = true;
+            wake();
+        },
+    };
+}
+function endedIterable() {
+    const stream = createControllableIterable();
+    stream.end();
+    return stream.iterable;
+}
+async function flush(ms = 0) {
+    await act(async () => {
+        await vi.advanceTimersByTimeAsync(ms);
+    });
+}
+describe('useEventStream', () => {
+    beforeEach(() => {
+        vi.useFakeTimers();
+    });
+    afterEach(() => {
+        vi.useRealTimers();
+    });
+    it('goes idle -> connecting -> open and delivers events', async () => {
+        const stream = createControllableIterable();
+        const subscribe = vi.fn().mockResolvedValue(stream.iterable);
+        const { result } = renderHook(() => useEventStream(subscribe));
+        expect(result.current.status).toBe('connecting');
+        await flush();
+        expect(result.current.status).toBe('open');
+        await act(async () => {
+            stream.push({ id: 1 });
+            await vi.advanceTimersByTimeAsync(0);
+        });
+        expect(result.current.last).toEqual({ id: 1 });
+    });
+    it('grows the retry delay on repeated accept-then-immediate-drop cycles instead of pinning it at 1s', async () => {
+        const callTimes = [];
+        const subscribe = vi.fn().mockImplementation(async () => {
+            callTimes.push(Date.now());
+            return endedIterable();
+        });
+        renderHook(() => useEventStream(subscribe));
+        await flush();
+        await flush(1_000);
+        await flush(2_000);
+        await flush(4_000);
+        expect(callTimes).toHaveLength(4);
+        expect(callTimes[1] - callTimes[0]).toBe(1_000);
+        expect(callTimes[2] - callTimes[1]).toBe(2_000);
+        expect(callTimes[3] - callTimes[2]).toBe(4_000);
+    });
+    it('surfaces status "closed" on an unexpected drop, before the next reconnect attempt', async () => {
+        const subscribe = vi.fn().mockImplementation(async () => endedIterable());
+        const { result } = renderHook(() => useEventStream(subscribe));
+        await flush();
+        expect(result.current.status).toBe('closed');
+    });
+    it('resets the backoff once a connection has stayed open past the stability window', async () => {
+        const callTimes = [];
+        let call = 0;
+        const streams = [];
+        const subscribe = vi.fn().mockImplementation(async () => {
+            callTimes.push(Date.now());
+            call += 1;
+            if (call === 1) {
+                // First cycle: accepted then dropped immediately - retryCount -> 1, next delay 1000ms.
+                return endedIterable();
+            }
+            // Second cycle: stays open - the test advances past the stability window before ending it.
+            const stream = createControllableIterable();
+            streams.push(stream);
+            return stream.iterable;
+        });
+        renderHook(() => useEventStream(subscribe));
+        await flush(); // cycle 1 opens then immediately closes
+        await flush(1_000); // cycle 2 starts (base 1s delay confirms cycle 1 pinned retryCount at 1)
+        // Let cycle 2 earn stability (5s), then end it - a genuinely reset backoff
+        // reconnects at the base 1s delay again, not 2000ms (2^1).
+        await flush(5_000);
+        await act(async () => {
+            streams[0]?.end();
+            await vi.advanceTimersByTimeAsync(0);
+        });
+        await flush(1_000);
+        expect(callTimes).toHaveLength(3);
+        expect(callTimes[1] - callTimes[0]).toBe(1_000);
+        expect(callTimes[2] - callTimes[1]).toBe(6_000); // 5s stabilizing + 1s reset-base retry
+    });
+    it('does not schedule a reconnect on intentional teardown', async () => {
+        const stream = createControllableIterable();
+        const subscribe = vi.fn().mockResolvedValue(stream.iterable);
+        const { unmount } = renderHook(() => useEventStream(subscribe));
+        await flush();
+        expect(subscribe).toHaveBeenCalledOnce();
+        unmount();
+        await flush(60_000);
+        expect(subscribe).toHaveBeenCalledOnce();
+    });
+    it('tears down without reconnecting when disabled, and resumes cleanly once re-enabled', async () => {
+        const subscribe = vi.fn().mockImplementation(async () => createControllableIterable().iterable);
+        const { result, rerender } = renderHook(({ enabled }) => useEventStream(subscribe, { enabled }), {
+            initialProps: { enabled: true },
+        });
+        await flush();
+        expect(result.current.status).toBe('open');
+        expect(subscribe).toHaveBeenCalledOnce();
+        rerender({ enabled: false });
+        expect(result.current.status).toBe('idle');
+        await flush(60_000);
+        expect(subscribe).toHaveBeenCalledOnce();
+        rerender({ enabled: true });
+        await flush();
+        expect(result.current.status).toBe('open');
+        expect(subscribe).toHaveBeenCalledTimes(2);
+    });
+});
+//# sourceMappingURL=use-event-stream.test.js.map

package/dist/react/hooks/__tests__/use-event-stream.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-event-stream.test.js","sourceRoot":"","sources":["../../../../src/react/hooks/__tests__/use-event-stream.test.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAC5B,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAQxD,SAAS,0BAA0B;IACjC,MAAM,KAAK,GAAQ,EAAE,CAAC;IACtB,IAAI,WAAW,GAAwB,IAAI,CAAC;IAC5C,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,WAAW,EAAE,EAAE,CAAC;QAChB,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAqB;QACjC,CAAC,MAAM,CAAC,aAAa,CAAC;YACpB,OAAO;gBACL,KAAK,CAAC,IAAI;oBACR,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;wBACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;4BAClC,WAAW,GAAG,OAAO,CAAC;wBACxB,CAAC,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;oBACpD,CAAC;oBACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC1C,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YACd,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,IAAI,EAAE,CAAC;QACT,CAAC;QACD,GAAG,EAAE,GAAG,EAAE;YACR,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,EAAE,CAAC;QACT,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,MAAM,GAAG,0BAA0B,EAAK,CAAC;IAC/C,MAAM,CAAC,GAAG,EAAE,CAAC;IACb,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,EAAE,GAAG,CAAC;IACzB,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,0BAA0B,EAAkB,CAAC;QAC5D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE7D,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEjD,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACtD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3B,OAAO,aAAa,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QAE5C,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnB,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QAE1E,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QAE/D,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACtD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,CAAC;YACV,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,uFAAuF;gBACvF,OAAO,aAAa,EAAE,CAAC;YACzB,CAAC;YACD,2FAA2F;YAC3F,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QAE5C,MAAM,KAAK,EAAE,CAAC,CAAC,wCAAwC;QACvD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,yEAAyE;QAE7F,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;YAClB,MAAM,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnB,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,uCAAuC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE7D,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QAChE,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAEzC,OAAO,EAAE,CAAC;QACV,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,0BAA0B,EAAE,CAAC,QAAQ,CAAC,CAAC;QAEhG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CACrC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EACvD;YACE,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAChC,CACF,CAAC;QACF,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAEzC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE3C,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAEzC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5B,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/react/hooks/use-event-stream.d.ts

@@ -14,9 +14,9 @@ export type UseEventStreamResult<T> = {
  * (eg an oRPC event iterator served as SSE: `client.x.stream(undefined, { signal })`).
  *
  * Owns an AbortController per active subscription, loops `for await` over the
- * iterable, calls `onEvent` and tracks the latest value + connection status,
- * and aborts on unmount or when `enabled` flips false. Re-subscribes when
- * `subscribe` identity changes, so memoize it at the call site.
+ * iterable, calls `onEvent` and tracks the latest value + connection status.
+ * Re-subscribes when `subscribe` identity changes, so memoize it at the call site.
+ * Reconnects automatically with exponential backoff when the stream drops unexpectedly.
  */
 export declare function useEventStream<T>(subscribe: (signal: AbortSignal) => Promise<AsyncIterable<T>>, options?: UseEventStreamOptions<T>): UseEventStreamResult<T>;
 //# sourceMappingURL=use-event-stream.d.ts.map

package/dist/react/hooks/use-event-stream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use-event-stream.d.ts","sourceRoot":"","sources":["../../../src/react/hooks/use-event-stream.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE1E,MAAM,MAAM,qBAAqB,CAAC,CAAC,IAAI;IACrC,2EAA2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iEAAiE;IACjE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,CAAC,IAAI;IACpC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAC9B,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAC7D,OAAO,GAAE,qBAAqB,CAAC,CAAC,CAAM,GACrC,oBAAoB,CAAC,CAAC,CAAC,CA8CzB"}
+{"version":3,"file":"use-event-stream.d.ts","sourceRoot":"","sources":["../../../src/react/hooks/use-event-stream.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE1E,MAAM,MAAM,qBAAqB,CAAC,CAAC,IAAI;IACrC,2EAA2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iEAAiE;IACjE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,CAAC,IAAI;IACpC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,EAAE,iBAAiB,CAAC;CAC3B,CAAC;AAKF;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAC9B,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAC7D,OAAO,GAAE,qBAAqB,CAAC,CAAC,CAAM,GACrC,oBAAoB,CAAC,CAAC,CAAC,CAqFzB"}

package/dist/react/hooks/use-event-stream.js

@@ -1,13 +1,15 @@
 'use client';
 import { useEffect, useRef, useState } from 'react';
+const MAX_RETRY_DELAY_MS = 30_000;
+const STABLE_CONNECTION_MS = 5_000;
 /**
  * Generic client-side real-time transport. Consumes any async-iterable source
  * (eg an oRPC event iterator served as SSE: `client.x.stream(undefined, { signal })`).
  *
  * Owns an AbortController per active subscription, loops `for await` over the
- * iterable, calls `onEvent` and tracks the latest value + connection status,
- * and aborts on unmount or when `enabled` flips false. Re-subscribes when
- * `subscribe` identity changes, so memoize it at the call site.
+ * iterable, calls `onEvent` and tracks the latest value + connection status.
+ * Re-subscribes when `subscribe` identity changes, so memoize it at the call site.
+ * Reconnects automatically with exponential backoff when the stream drops unexpectedly.
  */
 export function useEventStream(subscribe, options = {}) {
     const { enabled = true, onEvent } = options;
@@ -21,36 +23,69 @@ export function useEventStream(subscribe, options = {}) {
             setStatus('idle');
             return;
         }
-        const controller = new AbortController();
         let cancelled = false;
-        setStatus('connecting');
-        (async () => {
-            try {
-                const iterable = await subscribe(controller.signal);
-                if (cancelled)
-                    return;
-                setStatus('open');
-                for await (const event of iterable) {
-                    if (cancelled)
-                        break;
-                    onEventRef.current?.(event);
-                    setLast(event);
+        let currentController = null;
+        let retryCount = 0;
+        let retryTimer;
+        const connect = () => {
+            const controller = new AbortController();
+            currentController = controller;
+            setStatus('connecting');
+            (async () => {
+                let stableTimer;
+                let stabilized = false;
+                const markStable = () => {
+                    if (stabilized) {
+                        return;
+                    }
+                    stabilized = true;
+                    retryCount = 0;
+                    clearTimeout(stableTimer);
+                };
+                try {
+                    const iterable = await subscribe(controller.signal);
+                    if (cancelled) {
+                        return;
+                    }
+                    setStatus('open');
+                    // Only trust this connection - and reset the backoff - once it has
+                    // stayed open a while or delivered something. Resetting the instant
+                    // subscribe() resolves means a connection accepted then dropped
+                    // immediately (idle-timeout proxy, server ending the generator
+                    // early) reconnects at a fixed ~1s delay forever instead of backing off.
+                    stableTimer = setTimeout(markStable, STABLE_CONNECTION_MS);
+                    for await (const event of iterable) {
+                        if (cancelled) {
+                            break;
+                        }
+                        markStable();
+                        onEventRef.current?.(event);
+                        setLast(event);
+                    }
                 }
-            }
-            catch (err) {
-                // An AbortError on unmount/disable is expected teardown - swallow it.
-                if (!cancelled && err?.name !== 'AbortError') {
-                    // Stream closed; status is updated in finally.
+                catch (err) {
+                    // Intentional teardown — do not reconnect.
+                    if (cancelled || err?.name === 'AbortError') {
+                        return;
+                    }
                 }
-            }
-            finally {
-                if (!cancelled)
-                    setStatus('closed');
-            }
-        })();
+                finally {
+                    clearTimeout(stableTimer);
+                    if (!cancelled) {
+                        // Unexpected close: reconnect with exponential backoff.
+                        setStatus('closed');
+                        const delay = Math.min(1000 * 2 ** retryCount, MAX_RETRY_DELAY_MS);
+                        retryCount += 1;
+                        retryTimer = setTimeout(connect, delay);
+                    }
+                }
+            })();
+        };
+        connect();
         return () => {
             cancelled = true;
-            controller.abort();
+            clearTimeout(retryTimer);
+            currentController?.abort();
         };
     }, [subscribe, enabled]);
     return { last, status };

package/dist/react/hooks/use-event-stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-event-stream.js","sourceRoot":"","sources":["../../../src/react/hooks/use-event-stream.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAgBpD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA6D,EAC7D,UAAoC,EAAE;IAEtC,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAW,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAoB,MAAM,CAAC,CAAC;IAEhE,sEAAsE;IACtE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAE7B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,MAAM,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,SAAS,CAAC,YAAY,CAAC,CAAC;QAExB,CAAC,KAAK,IAAI,EAAE;YACV,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACpD,IAAI,SAAS;oBAAE,OAAO;gBACtB,SAAS,CAAC,MAAM,CAAC,CAAC;gBAClB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;oBACnC,IAAI,SAAS;wBAAE,MAAM;oBACrB,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;oBAC5B,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sEAAsE;gBACtE,IAAI,CAAC,SAAS,IAAK,GAAa,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;oBACxD,+CAA+C;gBACjD,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,SAAS;oBAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"use-event-stream.js","sourceRoot":"","sources":["../../../src/react/hooks/use-event-stream.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAgBpD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA6D,EAC7D,UAAoC,EAAE;IAEtC,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAW,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAoB,MAAM,CAAC,CAAC;IAEhE,sEAAsE;IACtE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAE7B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,MAAM,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,iBAAiB,GAA2B,IAAI,CAAC;QACrD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,UAAqD,CAAC;QAE1D,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,iBAAiB,GAAG,UAAU,CAAC;YAC/B,SAAS,CAAC,YAAY,CAAC,CAAC;YAExB,CAAC,KAAK,IAAI,EAAE;gBACV,IAAI,WAAsD,CAAC;gBAC3D,IAAI,UAAU,GAAG,KAAK,CAAC;gBACvB,MAAM,UAAU,GAAG,GAAG,EAAE;oBACtB,IAAI,UAAU,EAAE,CAAC;wBACf,OAAO;oBACT,CAAC;oBACD,UAAU,GAAG,IAAI,CAAC;oBAClB,UAAU,GAAG,CAAC,CAAC;oBACf,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC5B,CAAC,CAAC;gBAEF,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;oBACpD,IAAI,SAAS,EAAE,CAAC;wBACd,OAAO;oBACT,CAAC;oBACD,SAAS,CAAC,MAAM,CAAC,CAAC;oBAClB,mEAAmE;oBACnE,oEAAoE;oBACpE,gEAAgE;oBAChE,+DAA+D;oBAC/D,yEAAyE;oBACzE,WAAW,GAAG,UAAU,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;oBAC3D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;wBACnC,IAAI,SAAS,EAAE,CAAC;4BACd,MAAM;wBACR,CAAC;wBACD,UAAU,EAAE,CAAC;wBACb,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;wBAC5B,OAAO,CAAC,KAAK,CAAC,CAAC;oBACjB,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,2CAA2C;oBAC3C,IAAI,SAAS,IAAK,GAAa,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;wBACvD,OAAO;oBACT,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,YAAY,CAAC,WAAW,CAAC,CAAC;oBAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,wDAAwD;wBACxD,SAAS,CAAC,QAAQ,CAAC,CAAC;wBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,UAAU,EAAE,kBAAkB,CAAC,CAAC;wBACnE,UAAU,IAAI,CAAC,CAAC;wBAChB,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC;QAEF,OAAO,EAAE,CAAC;QAEV,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,YAAY,CAAC,UAAU,CAAC,CAAC;YACzB,iBAAiB,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAEzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC"}

package/dist/react/hooks/use-paginated-list.js

@@ -1,5 +1,5 @@
 'use client';
-import { useState } from 'react';
+import { useState, useCallback } from 'react';
 import { useQuery, keepPreviousData } from '@tanstack/react-query';
 const DEFAULT_PAGE_SIZE = 20;
 export function usePaginatedList(opts) {
@@ -12,10 +12,10 @@ export function usePaginatedList(opts) {
         placeholderData: keepPreviousData,
     });
     const total = data?.total ?? 0;
-    function handleSetSearch(s) {
+    const handleSetSearch = useCallback((s) => {
         setSearch(s);
         setPage(1);
-    }
+    }, []);
     return {
         items: data?.items ?? [],
         total,

package/dist/react/hooks/use-paginated-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-paginated-list.js","sourceRoot":"","sources":["../../../src/react/hooks/use-paginated-list.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEnE,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAa7B,MAAM,UAAU,gBAAgB,CAAI,IAInC;IACC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC;IACjE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAEzC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QACnC,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACzC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;QACpC,eAAe,EAAE,gBAAgB;KAClC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;IAE/B,SAAS,eAAe,CAAC,CAAS;QAChC,SAAS,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,CAAC,CAAC,CAAC,CAAC;IACb,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QACxB,KAAK;QACL,IAAI;QACJ,OAAO;QACP,MAAM;QACN,SAAS,EAAE,eAAe;QAC1B,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"use-paginated-list.js","sourceRoot":"","sources":["../../../src/react/hooks/use-paginated-list.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEnE,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAa7B,MAAM,UAAU,gBAAgB,CAAI,IAInC;IACC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAAC;IACjE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAEzC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QACnC,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACzC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;QACpC,eAAe,EAAE,gBAAgB;KAClC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;IAE/B,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,CAAS,EAAE,EAAE;QAChD,SAAS,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,CAAC,CAAC,CAAC,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO;QACL,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QACxB,KAAK;QACL,IAAI;QACJ,OAAO;QACP,MAAM;QACN,SAAS,EAAE,eAAe;QAC1B,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC"}

package/dist/server/auth/__tests__/admin-guard.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin-guard.int.test.d.ts.map

package/dist/server/auth/__tests__/admin-guard.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-guard.int.test.d.ts","sourceRoot":"","sources":["../../../../src/server/auth/__tests__/admin-guard.int.test.ts"],"names":[],"mappings":""}

package/dist/server/auth/__tests__/admin-guard.int.test.js

@@ -0,0 +1,123 @@
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { randomUUID } from 'node:crypto';
+import { sql } from 'drizzle-orm';
+import { createTestDb } from '@openora/core/testing';
+import { mock, makeEventBus } from '../../../testing/mock.js';
+import { AdminGuard } from '../admin-guard.js';
+let db;
+const requestContext = (headers) => ({ request: { headers } });
+const ADMIN_HEADERS = { 'x-real-ip': '127.0.0.1', 'user-agent': 'Mozilla/5.0' };
+function makeGuard({ userId, grants, } = {}) {
+    const events = makeEventBus();
+    const sessions = mock({ resolveUserId: vi.fn(async () => userId) });
+    const permissionResolver = grants
+        ? mock({ getGrants: vi.fn(async () => grants) })
+        : undefined;
+    const guard = new AdminGuard(db.drizzle, sessions, permissionResolver, events);
+    return { guard, events };
+}
+async function seedUser(role) {
+    const id = randomUUID();
+    await db.drizzle.db.execute(sql `INSERT INTO "user" (id, role) VALUES (${id}, ${role})`);
+    return id;
+}
+beforeAll(async () => {
+    db = await createTestDb([
+        async (databaseUrl) => {
+            process.env['DATABASE_URL'] = databaseUrl;
+        },
+    ]);
+    await db.drizzle.db.execute(sql `CREATE TABLE "user" (id uuid PRIMARY KEY, role text NOT NULL)`);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE "user"`);
+});
+describe('AdminGuard.assert - authentication (real PG)', () => {
+    it('throws UNAUTHORIZED when the context carries no request', async () => {
+        const { guard } = makeGuard();
+        await expect(guard.assert({})).rejects.toThrow(expect.objectContaining({ code: 'UNAUTHORIZED' }));
+    });
+    it('throws UNAUTHORIZED when no session resolves', async () => {
+        const { guard, events } = makeGuard();
+        await expect(guard.assert(requestContext(ADMIN_HEADERS))).rejects.toThrow(expect.objectContaining({ code: 'UNAUTHORIZED' }));
+        expect(events.emit).not.toHaveBeenCalled();
+    });
+    it('throws FORBIDDEN and emits when the session points at a missing user row', async () => {
+        const userId = randomUUID();
+        const { guard, events } = makeGuard({ userId });
+        await expect(guard.assert(requestContext(ADMIN_HEADERS))).rejects.toThrow(expect.objectContaining({ code: 'FORBIDDEN' }));
+        expect(events.emit).toHaveBeenCalledWith('identity.user.unauthorized_access', expect.objectContaining({ userId, resource: 'admin', action: 'access', role: undefined }));
+    });
+});
+describe('AdminGuard.assert - static role fallback (real PG)', () => {
+    it('returns the caller for an admin with a granted permission', async () => {
+        const userId = await seedUser('admin');
+        const { guard, events } = makeGuard({ userId });
+        const caller = await guard.assert(requestContext(ADMIN_HEADERS), 'admin', 'delete');
+        expect(caller).toMatchObject({
+            userId,
+            role: 'admin',
+            ip: '127.0.0.1',
+            userAgent: 'Mozilla/5.0',
+        });
+        expect(events.emit).not.toHaveBeenCalled();
+    });
+    it('passes the coarse check for an admin with no resource requested', async () => {
+        const userId = await seedUser('admin');
+        const { guard } = makeGuard({ userId });
+        await expect(guard.assert(requestContext(ADMIN_HEADERS))).resolves.toMatchObject({
+            role: 'admin',
+        });
+    });
+    it('denies a support role a permission its static role lacks', async () => {
+        const userId = await seedUser('support');
+        const { guard, events } = makeGuard({ userId });
+        await expect(guard.assert(requestContext({ 'x-real-ip': '192.168.1.1', 'user-agent': 'Mozilla/5.0' }), 'admin', 'delete')).rejects.toThrow(expect.objectContaining({ code: 'FORBIDDEN' }));
+        expect(events.emit).toHaveBeenCalledWith('identity.user.unauthorized_access', expect.objectContaining({
+            userId,
+            resource: 'admin',
+            action: 'delete',
+            ip: '192.168.1.1',
+            role: 'support',
+        }));
+    });
+    it('allows a support role the permissions it does hold', async () => {
+        const userId = await seedUser('support');
+        const { guard } = makeGuard({ userId });
+        await expect(guard.assert(requestContext(ADMIN_HEADERS), 'player', 'view')).resolves.toMatchObject({ role: 'support' });
+    });
+    it('denies a role with no entry in the static table', async () => {
+        const userId = await seedUser('player');
+        const { guard, events } = makeGuard({ userId });
+        await expect(guard.assert(requestContext(ADMIN_HEADERS), 'admin', 'delete')).rejects.toThrow(expect.objectContaining({ code: 'FORBIDDEN' }));
+        expect(events.emit).toHaveBeenCalledWith('identity.user.unauthorized_access', expect.objectContaining({ userId, role: 'player', action: 'delete' }));
+    });
+    it('denies the coarse check for a non-admin role with the default admin:access pair', async () => {
+        const userId = await seedUser('player');
+        const { guard, events } = makeGuard({ userId });
+        await expect(guard.assert(requestContext(ADMIN_HEADERS))).rejects.toThrow(expect.objectContaining({ code: 'FORBIDDEN' }));
+        expect(events.emit).toHaveBeenCalledWith('identity.user.unauthorized_access', expect.objectContaining({ resource: 'admin', action: 'access', role: 'player' }));
+    });
+});
+describe('AdminGuard.assert - DB grants (real PG)', () => {
+    it('allows a permission the resolver grants', async () => {
+        const userId = await seedUser('admin');
+        const { guard } = makeGuard({ userId, grants: [{ resource: 'admin', action: 'delete' }] });
+        await expect(guard.assert(requestContext(ADMIN_HEADERS), 'admin', 'delete')).resolves.toMatchObject({ userId });
+    });
+    it('denies and emits when the resolver returns no matching grant', async () => {
+        const userId = await seedUser('admin');
+        const { guard, events } = makeGuard({ userId, grants: [] });
+        await expect(guard.assert(requestContext(ADMIN_HEADERS), 'admin', 'delete')).rejects.toThrow(expect.objectContaining({ code: 'FORBIDDEN' }));
+        expect(events.emit).toHaveBeenCalledWith('identity.user.unauthorized_access', expect.objectContaining({ userId, resource: 'admin', action: 'delete', role: 'admin' }));
+    });
+    it('lets DB grants override what the static role would have allowed', async () => {
+        const userId = await seedUser('admin');
+        const { guard } = makeGuard({ userId, grants: [{ resource: 'player', action: 'view' }] });
+        await expect(guard.assert(requestContext(ADMIN_HEADERS), 'admin', 'delete')).rejects.toThrow(expect.objectContaining({ code: 'FORBIDDEN' }));
+    });
+});
+//# sourceMappingURL=admin-guard.int.test.js.map

package/dist/server/auth/__tests__/admin-guard.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-guard.int.test.js","sourceRoot":"","sources":["../../../../src/server/auth/__tests__/admin-guard.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C,IAAI,EAAU,CAAC;AAEf,MAAM,cAAc,GAAG,CAAC,OAA+B,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAEvF,MAAM,aAAa,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AAEhF,SAAS,SAAS,CAAC,EACjB,MAAM,EACN,MAAM,MAIJ,EAAE;IACJ,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAkB,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,kBAAkB,GAAG,MAAM;QAC/B,CAAC,CAAC,IAAI,CAA0B,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACzE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,yCAAyC,EAAE,KAAK,IAAI,GAAG,CAAC,CAAC;IACxF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC;QACtB,KAAK,EAAE,WAAW,EAAE,EAAE;YACpB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC;QAC5C,CAAC;KACF,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,+DAA+D,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,iBAAiB,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;QAE9B,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC5C,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAClD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;QAEtC,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAClD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAC/C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,mCAAmC,EACnC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAC1F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAClE,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEpF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,MAAM;YACN,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,WAAW;YACf,SAAS,EAAE,aAAa;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAExC,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC/E,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,MAAM,CACV,KAAK,CAAC,MAAM,CACV,cAAc,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,EAC3E,OAAO,EACP,QAAQ,CACT,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,mCAAmC,EACnC,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM;YACN,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,QAAQ;YAChB,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,SAAS;SAChB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAExC,MAAM,MAAM,CACV,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAC9D,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC1F,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAC/C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,mCAAmC,EACnC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CACtE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEhD,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAC/C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,mCAAmC,EACnC,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAE3F,MAAM,MAAM,CACV,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAC/D,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAE5D,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC1F,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAC/C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,mCAAmC,EACnC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CACxF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAE1F,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC1F,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/auth/__tests__/auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth.test.d.ts.map

package/dist/server/auth/__tests__/auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.d.ts","sourceRoot":"","sources":["../../../../src/server/auth/__tests__/auth.test.ts"],"names":[],"mappings":""}

package/dist/server/auth/__tests__/auth.test.js

@@ -0,0 +1,96 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { createAuth } from '../auth.js';
+const betterAuthMock = vi.hoisted(() => vi.fn());
+const emailOTPMock = vi.hoisted(() => vi.fn((opts) => ({ id: 'email-otp', ...opts })));
+vi.mock('better-auth', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        betterAuth: betterAuthMock,
+    };
+});
+vi.mock('better-auth/plugins', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        emailOTP: emailOTPMock,
+    };
+});
+describe('createAuth', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    describe('emailOTP plugin - sendVerificationOTP', () => {
+        it('sends an email when type is forget-password', async () => {
+            const sendEmail = vi.fn().mockResolvedValue(undefined);
+            const templateRenderer = {
+                render: vi.fn().mockResolvedValue({ subject: 'Reset', body: 'Code: 123456' }),
+            };
+            const getUserLanguage = vi.fn().mockResolvedValue('pl');
+            createAuth({
+                db: {},
+                sendEmail,
+                templateRenderer,
+                getUserLanguage,
+            });
+            const emailOtpOpts = emailOTPMock.mock.calls[0][0];
+            await emailOtpOpts.sendVerificationOTP({
+                email: 'test@example.com',
+                otp: '123456',
+                type: 'forget-password',
+            });
+            expect(getUserLanguage).toHaveBeenCalledWith('test@example.com');
+            expect(templateRenderer.render).toHaveBeenCalledWith('resetPasswordOtp', { otp: '123456', email: 'test@example.com' }, 'pl');
+            expect(sendEmail).toHaveBeenCalledWith({
+                to: 'test@example.com',
+                subject: 'Reset',
+                body: 'Code: 123456',
+            });
+        });
+        it('returns early without sending an email for other types', async () => {
+            const sendEmail = vi.fn().mockResolvedValue(undefined);
+            const templateRenderer = {
+                render: vi.fn(),
+            };
+            const getUserLanguage = vi.fn();
+            createAuth({
+                db: {},
+                sendEmail,
+                templateRenderer,
+                getUserLanguage,
+            });
+            const emailOtpOpts = emailOTPMock.mock.calls[0][0];
+            await emailOtpOpts.sendVerificationOTP({
+                email: 'test@example.com',
+                otp: '123456',
+                type: 'verify-email',
+            });
+            expect(getUserLanguage).not.toHaveBeenCalled();
+            expect(templateRenderer.render).not.toHaveBeenCalled();
+            expect(sendEmail).not.toHaveBeenCalled();
+        });
+    });
+    describe('cookie domain', () => {
+        it('leaves the session cookie host-only by default', () => {
+            createAuth({ db: {} });
+            expect(betterAuthMock.mock.calls[0][0].advanced.crossSubDomainCookies).toBeUndefined();
+        });
+        it('widens the session cookie to the domain passed in options', () => {
+            createAuth({ db: {}, cookieDomain: '.example.com' });
+            expect(betterAuthMock.mock.calls[0][0].advanced.crossSubDomainCookies).toEqual({
+                enabled: true,
+                domain: '.example.com',
+            });
+        });
+        it('falls back to AUTH_COOKIE_DOMAIN when no option is passed', () => {
+            vi.stubEnv('AUTH_COOKIE_DOMAIN', '.env-example.com');
+            createAuth({ db: {} });
+            expect(betterAuthMock.mock.calls[0][0].advanced.crossSubDomainCookies).toEqual({
+                enabled: true,
+                domain: '.env-example.com',
+            });
+            vi.unstubAllEnvs();
+        });
+    });
+});
+//# sourceMappingURL=auth.test.js.map

package/dist/server/auth/__tests__/auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../../../src/server/auth/__tests__/auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACjD,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAEvF,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC9C,MAAM,MAAM,GAAG,MAAM,cAAc,EAAU,CAAC;IAC9C,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,cAAc;KAC3B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACtD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAU,CAAC;IAC9C,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,YAAY;KACvB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACrD,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,gBAAgB,GAAG;gBACvB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;aAC9E,CAAC;YACF,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAExD,UAAU,CAAC;gBACT,EAAE,EAAE,EAAW;gBACf,SAAS;gBACT,gBAAgB;gBAChB,eAAe;aAChB,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,YAAY,CAAC,mBAAmB,CAAC;gBACrC,KAAK,EAAE,kBAAkB;gBACzB,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE,iBAAiB;aACxB,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;YACjE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAClD,kBAAkB,EAClB,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAC5C,IAAI,CACL,CAAC;YACF,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC;gBACrC,EAAE,EAAE,kBAAkB;gBACtB,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,cAAc;aACrB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,gBAAgB,GAAG;gBACvB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;aAChB,CAAC;YACF,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAEhC,UAAU,CAAC;gBACT,EAAE,EAAE,EAAW;gBACf,SAAS;gBACT,gBAAgB;gBAChB,eAAe;aAChB,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,YAAY,CAAC,mBAAmB,CAAC;gBACrC,KAAK,EAAE,kBAAkB;gBACzB,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE,cAAc;aACrB,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC/C,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACvD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,UAAU,CAAC,EAAE,EAAE,EAAE,EAAW,EAAE,CAAC,CAAC;YAEhC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,aAAa,EAAE,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,UAAU,CAAC,EAAE,EAAE,EAAE,EAAW,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC;YAE9D,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC;gBAC7E,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,cAAc;aACvB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,EAAE,CAAC,OAAO,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;YAErD,UAAU,CAAC,EAAE,EAAE,EAAE,EAAW,EAAE,CAAC,CAAC;YAEhC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC;gBAC7E,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;YACH,EAAE,CAAC,aAAa,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/auth/__tests__/permission-levels.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permission-levels.test.d.ts.map

package/dist/server/auth/__tests__/permission-levels.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-levels.test.d.ts","sourceRoot":"","sources":["../../../../src/server/auth/__tests__/permission-levels.test.ts"],"names":[],"mappings":""}