@payload-auth-link/react 0.1.0 → 0.2.0

package/README.md

@@ -0,0 +1,45 @@
+# @payload-auth-link/react
+
+Provider-agnostic React UI for payload-auth-link: a session context plus unstyled sign-in, sign-out, and user-menu components. It has no Next.js or Payload imports, so it works under any framework adapter.
+
+Part of [payload-auth-link](https://github.com/jellologic/payload-auth-link): an auth plugin for Payload CMS with swappable identity providers (Better Auth, Auth.js) and first-class Next.js and TanStack Start adapters.
+
+## Install
+
+```bash
+npm install @payload-auth-link/react
+```
+
+Peer dependencies: `react` ^19.0.0.
+
+ESM-only, Node 20.9 or later.
+
+## What it provides
+
+- `AuthLinkProvider`, `useAuthLink`, `useHasRoles`: session context (`user`, anonymous `guest`, `mfaRequired` step-up signal), hydrated from the server through `initialUser`
+- `SignInButton`, `SignOutButton`, `UserMenu`: unstyled primitives
+- `RequireRoles`: hides UI by role (never use it to gate content; enforce on the server)
+
+## Usage
+
+```tsx
+import { AuthLinkProvider, UserMenu } from '@payload-auth-link/react'
+
+export function Layout({ user, children }) {
+  return (
+    <AuthLinkProvider initialUser={user}>
+      <UserMenu signOutRedirectTo="/" />
+      {children}
+    </AuthLinkProvider>
+  )
+}
+```
+
+## Docs
+
+- [Getting started](https://github.com/jellologic/payload-auth-link/blob/main/docs/getting-started.md)
+- [Compatibility](https://github.com/jellologic/payload-auth-link/blob/main/docs/compatibility.md) · [Troubleshooting](https://github.com/jellologic/payload-auth-link/blob/main/docs/troubleshooting.md) · [Changelog](./CHANGELOG.md)
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -8,5 +8,6 @@ export { RequireRoles, SignInButton, SignOutButton, UserMenu } from './component
 export type { RequireRolesProps, SignInButtonProps, SignOutButtonProps, UserMenuProps, } from './components.js';
 export { AuthLinkProvider, useAuthLink, useHasRoles } from './provider.js';
 export type { AuthLinkContextValue, AuthLinkProviderProps, AuthLinkStatus } from './provider.js';
-export { fetchSessionUser, revokeSession } from './session.js';
+export { fetchSession, fetchSessionUser, revokeSession } from './session.js';
+export type { SessionSnapshot } from './session.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,WAAW,6BAA6B,CAAA;AAErD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACrF,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,GACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC1E,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAChG,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,WAAW,6BAA6B,CAAA;AAErD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACrF,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,GACd,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC1E,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAChG,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5E,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -6,5 +6,5 @@
 export const packageName = '@payload-auth-link/react';
 export { RequireRoles, SignInButton, SignOutButton, UserMenu } from './components.js';
 export { AuthLinkProvider, useAuthLink, useHasRoles } from './provider.js';
-export { fetchSessionUser, revokeSession } from './session.js';
+export { fetchSession, fetchSessionUser, revokeSession } from './session.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAA;AAErD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAOrF,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAE1E,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAA;AAErD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAOrF,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAE1E,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA"}

package/dist/provider.d.ts

@@ -1,10 +1,16 @@
 import { type ReactNode } from 'react';
-import { type HttpFetch, type SessionUser } from '@payload-auth-link/core';
+import { type HttpFetch, type SessionGuest, type SessionUser } from '@payload-auth-link/core';
 /** Session state: unknown until the first load settles. */
 export type AuthLinkStatus = 'loading' | 'authenticated' | 'anonymous';
 /** What `useAuthLink` returns: user, status, refresh, honest sign-out. */
 export type AuthLinkContextValue = {
     readonly user: SessionUser | null;
+    /**
+     * The anonymous guest principal (CAP-10), present instead of a
+     * user while the provider session is anonymous. Never carries
+     * roles or access — a stable key for anonymous app state only.
+     */
+    readonly guest: SessionGuest | null;
     readonly status: AuthLinkStatus;
     /** Re-read the session endpoint (call after sign-in or role changes). */
     readonly refresh: () => Promise<void>;

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,OAAO,CAAA;AACd,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,WAAW,EACjB,MAAM,yBAAyB,CAAA;AAGhC,2DAA2D;AAC3D,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,eAAe,GAAG,WAAW,CAAA;AAEtE,0EAA0E;AAC1E,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;CACzC,CAAA;AAID,uEAAuE;AACvE,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C,wDAAwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAAA;CACtD,CAAA;AAiBD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,QAAQ,EACR,eAA4C,EAC5C,SAAiB,EACjB,WAAuB,GACxB,EAAE,qBAAqB,GAAG,SAAS,CA6DnC;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,IAAI,oBAAoB,CAMlD;AAED,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAMhE"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,OAAO,CAAA;AACd,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,WAAW,EACjB,MAAM,yBAAyB,CAAA;AAGhC,2DAA2D;AAC3D,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,eAAe,GAAG,WAAW,CAAA;AAEtE,0EAA0E;AAC1E,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACjC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;CACzC,CAAA;AAID,uEAAuE;AACvE,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C,wDAAwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAAA;CACtD,CAAA;AA2BD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,QAAQ,EACR,eAA4C,EAC5C,SAAiB,EACjB,WAAuB,GACxB,EAAE,qBAAqB,GAAG,SAAS,CAiEnC;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,IAAI,oBAAoB,CAMlD;AAED,0EAA0E;AAC1E,wBAAgB,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAMhE"}

package/dist/provider.js

@@ -2,7 +2,7 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { createContext, useCallback, useContext, useEffect, useMemo, useState, } from 'react';
 import { defaultSessionEndpointPath, } from '@payload-auth-link/core';
-import { fetchSessionUser, revokeSession } from './session.js';
+import { fetchSession, revokeSession } from './session.js';
 const AuthLinkContext = createContext(null);
 /** Value identity for hydration snapshots (fresh objects, same user). */
 function snapshotKey(user) {
@@ -12,7 +12,17 @@ function snapshotKey(user) {
     if (user === null) {
         return 'null';
     }
-    return JSON.stringify([user.id, user.collection, user.email, [...user.roles].sort()]);
+    // PORT-4 facts are part of the value: a re-run loader reporting a
+    // new actor/assurance/tenant for the same user must still sync.
+    return JSON.stringify([
+        user.id,
+        user.collection,
+        user.email,
+        [...user.roles].sort(),
+        user.assurance ?? null,
+        user.actor ?? null,
+        user.organizationId ?? null,
+    ]);
 }
 function statusFor(user) {
     return user === null ? 'anonymous' : 'authenticated';
@@ -28,6 +38,7 @@ function statusFor(user) {
  */
 export function AuthLinkProvider({ children, sessionEndpoint = defaultSessionEndpointPath, fetchImpl = fetch, initialUser = undefined, }) {
     const [user, setUser] = useState(initialUser ?? null);
+    const [guest, setGuest] = useState(null);
     const [status, setStatus] = useState(initialUser === undefined ? 'loading' : statusFor(initialUser));
     // React's "adjust state when a prop changes" pattern (during render,
     // not in an effect): no stale frame, no set-state-in-effect.
@@ -40,16 +51,18 @@ export function AuthLinkProvider({ children, sessionEndpoint = defaultSessionEnd
             setStatus(statusFor(initialUser));
         }
     }
-    const loadSession = useCallback(() => fetchSessionUser(sessionEndpoint, fetchImpl), [sessionEndpoint, fetchImpl]);
+    const loadSession = useCallback(() => fetchSession(sessionEndpoint, fetchImpl), [sessionEndpoint, fetchImpl]);
     const refresh = useCallback(async () => {
         const current = await loadSession();
-        setUser(current);
-        setStatus(current === null ? 'anonymous' : 'authenticated');
+        setUser(current.user);
+        setGuest(current.guest);
+        setStatus(current.user === null ? 'anonymous' : 'authenticated');
     }, [loadSession]);
     const signOut = useCallback(async () => {
         const revoked = await revokeSession(sessionEndpoint, fetchImpl);
         if (revoked) {
             setUser(null);
+            setGuest(null);
             setStatus('anonymous');
         }
         return revoked;
@@ -64,15 +77,16 @@ export function AuthLinkProvider({ children, sessionEndpoint = defaultSessionEnd
         void (async () => {
             const current = await loadSession();
             if (!cancelled) {
-                setUser(current);
-                setStatus(current === null ? 'anonymous' : 'authenticated');
+                setUser(current.user);
+                setGuest(current.guest);
+                setStatus(current.user === null ? 'anonymous' : 'authenticated');
             }
         })();
         return () => {
             cancelled = true;
         };
     }, [initialUser, loadSession]);
-    const value = useMemo(() => ({ user, status, refresh, signOut }), [user, status, refresh, signOut]);
+    const value = useMemo(() => ({ user, guest, status, refresh, signOut }), [user, guest, status, refresh, signOut]);
     return _jsx(AuthLinkContext.Provider, { value: value, children: children });
 }
 /** Read the auth context. Throws outside `AuthLinkProvider` — fail loud. */

package/dist/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,OAAO,EACL,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,OAAO,EACP,QAAQ,GAET,MAAM,OAAO,CAAA;AACd,OAAO,EACL,0BAA0B,GAG3B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAkB9D,MAAM,eAAe,GAAG,aAAa,CAA8B,IAAI,CAAC,CAAA;AAkBxE,yEAAyE;AACzE,SAAS,WAAW,CAAC,IAAoC;IACvD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB;IACzC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAA;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,QAAQ,EACR,eAAe,GAAG,0BAA0B,EAC5C,SAAS,GAAG,KAAK,EACjB,WAAW,GAAG,SAAS,GACD;IACtB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAqB,WAAW,IAAI,IAAI,CAAC,CAAA;IACzE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAClC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAC/D,CAAA;IACD,qEAAqE;IACrE,6DAA6D;IAC7D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAA;IAC1E,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IAC5C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,YAAY,CAAC,WAAW,CAAC,CAAA;QACzB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,WAAW,CAAC,CAAA;YACpB,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAC7B,GAAG,EAAE,CAAC,gBAAgB,CAAC,eAAe,EAAE,SAAS,CAAC,EAClD,CAAC,eAAe,EAAE,SAAS,CAAC,CAC7B,CAAA;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAA;QACnC,OAAO,CAAC,OAAO,CAAC,CAAA;QAChB,SAAS,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;IAC7D,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;IAEjB,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAA;YACb,SAAS,CAAC,WAAW,CAAC,CAAA;QACxB,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAA;IAEhC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAM;QACR,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,oEAAoE;QACpE,qEAAqE;QACrE,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAA;YACnC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,OAAO,CAAC,CAAA;gBAChB,SAAS,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAA;QAClB,CAAC,CAAA;IACH,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;IAE9B,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAC1C,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CACjC,CAAA;IACD,OAAO,KAAC,eAAe,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAA4B,CAAA;AACtF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAG,UAAU,CAAC,eAAe,CAAC,CAAA;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,GAAG,KAAwB;IACrD,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAA;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;AACzD,CAAC"}
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,OAAO,EACL,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,OAAO,EACP,QAAQ,GAET,MAAM,OAAO,CAAA;AACd,OAAO,EACL,0BAA0B,GAI3B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAwB1D,MAAM,eAAe,GAAG,aAAa,CAA8B,IAAI,CAAC,CAAA;AAkBxE,yEAAyE;AACzE,SAAS,WAAW,CAAC,IAAoC;IACvD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,kEAAkE;IAClE,gEAAgE;IAChE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,CAAC,EAAE;QACP,IAAI,CAAC,UAAU;QACf,IAAI,CAAC,KAAK;QACV,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;QACtB,IAAI,CAAC,SAAS,IAAI,IAAI;QACtB,IAAI,CAAC,KAAK,IAAI,IAAI;QAClB,IAAI,CAAC,cAAc,IAAI,IAAI;KAC5B,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB;IACzC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAA;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,QAAQ,EACR,eAAe,GAAG,0BAA0B,EAC5C,SAAS,GAAG,KAAK,EACjB,WAAW,GAAG,SAAS,GACD;IACtB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAqB,WAAW,IAAI,IAAI,CAAC,CAAA;IACzE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAA;IAC7D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAClC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAC/D,CAAA;IACD,qEAAqE;IACrE,6DAA6D;IAC7D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAA;IAC1E,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IAC5C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,YAAY,CAAC,WAAW,CAAC,CAAA;QACzB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,WAAW,CAAC,CAAA;YACpB,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAC7B,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,SAAS,CAAC,EAC9C,CAAC,eAAe,EAAE,SAAS,CAAC,CAC7B,CAAA;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAA;QACnC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACrB,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvB,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;IAClE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;IAEjB,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAA;YACb,QAAQ,CAAC,IAAI,CAAC,CAAA;YACd,SAAS,CAAC,WAAW,CAAC,CAAA;QACxB,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAA;IAEhC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAM;QACR,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,oEAAoE;QACpE,qEAAqE;QACrE,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAA;YACnC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBACrB,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBACvB,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;YAClE,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAA;QAClB,CAAC,CAAA;IACH,CAAC,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;IAE9B,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EACjD,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CACxC,CAAA;IACD,OAAO,KAAC,eAAe,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAA4B,CAAA;AACtF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAG,UAAU,CAAC,eAAe,CAAC,CAAA;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CAAC,GAAG,KAAwB;IACrD,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAA;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;AACzD,CAAC"}

package/dist/session.d.ts

@@ -1,4 +1,4 @@
-import { type HttpFetch, type SessionUser } from '@payload-auth-link/core';
+import { type HttpFetch, type SessionGuest, type SessionUser } from '@payload-auth-link/core';
 /**
  * Read the current session user from the plugin's session endpoint
  * (`{ user }` envelope). Fails closed: transport errors, non-2xx
@@ -6,6 +6,18 @@ import { type HttpFetch, type SessionUser } from '@payload-auth-link/core';
  * never an exception and never a partial user.
  */
 export declare function fetchSessionUser(sessionEndpoint?: string, fetchImpl?: HttpFetch): Promise<SessionUser | null>;
+/** Both halves of one session-endpoint read (CAP-10). */
+export type SessionSnapshot = {
+    readonly user: SessionUser | null;
+    readonly guest: SessionGuest | null;
+};
+/**
+ * Read user AND guest from one session-endpoint response. The body
+ * is parsed exactly once; a guest body yields `user: null` plus the
+ * guest, a user body the reverse. Fails closed like
+ * {@link fetchSessionUser}.
+ */
+export declare function fetchSession(sessionEndpoint?: string, fetchImpl?: HttpFetch): Promise<SessionSnapshot>;
 /**
  * Revoke the current session through the plugin's session endpoint.
  * Sends the CSRF header the endpoint requires. Returns `true` when the

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,SAAS,EACd,KAAK,WAAW,EACjB,MAAM,yBAAyB,CAAA;AAEhC;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,eAAe,GAAE,MAAmC,EACpD,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAe7B;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,eAAe,GAAE,MAAmC,EACpD,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,OAAO,CAAC,CAYlB"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,WAAW,EACjB,MAAM,yBAAyB,CAAA;AAEhC;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,eAAe,GAAE,MAAmC,EACpD,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAe7B;AAED,yDAAyD;AACzD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAA;CACpC,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,eAAe,GAAE,MAAmC,EACpD,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,eAAe,CAAC,CA6B1B;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,eAAe,GAAE,MAAmC,EACpD,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,OAAO,CAAC,CAYlB"}

package/dist/session.js

@@ -1,4 +1,4 @@
-import { csrfHeaderName, defaultSessionEndpointPath, parseSessionResponse, } from '@payload-auth-link/core';
+import { csrfHeaderName, defaultSessionEndpointPath, isRecord, parseSessionGuest, parseSessionResponse, parseSessionUser, } from '@payload-auth-link/core';
 /**
  * Read the current session user from the plugin's session endpoint
  * (`{ user }` envelope). Fails closed: transport errors, non-2xx
@@ -22,6 +22,44 @@ export async function fetchSessionUser(sessionEndpoint = defaultSessionEndpointP
     }
     return parseSessionResponse(response);
 }
+/**
+ * Read user AND guest from one session-endpoint response. The body
+ * is parsed exactly once; a guest body yields `user: null` plus the
+ * guest, a user body the reverse. Fails closed like
+ * {@link fetchSessionUser}.
+ */
+export async function fetchSession(sessionEndpoint = defaultSessionEndpointPath, fetchImpl = fetch) {
+    const empty = { user: null, guest: null };
+    let response;
+    try {
+        response = await fetchImpl(sessionEndpoint, {
+            method: 'GET',
+            credentials: 'same-origin',
+            cache: 'no-store',
+            headers: { accept: 'application/json' },
+        });
+    }
+    catch {
+        return empty;
+    }
+    if (!response.ok) {
+        return empty;
+    }
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch {
+        return empty;
+    }
+    if (!isRecord(body)) {
+        return empty;
+    }
+    return {
+        user: parseSessionUser(body.user),
+        guest: body.user === null ? parseSessionGuest(body.guest) : null,
+    };
+}
 /**
  * Revoke the current session through the plugin's session endpoint.
  * Sends the CSRF header the endpoint requires. Returns `true` when the

package/dist/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,oBAAoB,GAGrB,MAAM,yBAAyB,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,kBAA0B,0BAA0B,EACpD,YAAuB,KAAK;IAE5B,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,aAAa;YAC1B,0DAA0D;YAC1D,mDAAmD;YACnD,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,kBAA0B,0BAA0B,EACpD,YAAuB,KAAK;IAE5B,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE;YAC1C,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE;SACnC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAA;AAC/C,CAAC"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,QAAQ,EACR,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,GAIjB,MAAM,yBAAyB,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,kBAA0B,0BAA0B,EACpD,YAAuB,KAAK;IAE5B,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,aAAa;YAC1B,0DAA0D;YAC1D,mDAAmD;YACnD,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAA;AACvC,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,kBAA0B,0BAA0B,EACpD,YAAuB,KAAK;IAE5B,MAAM,KAAK,GAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC1D,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,aAAa;YAC1B,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO;QACL,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;KACjE,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,kBAA0B,0BAA0B,EACpD,YAAuB,KAAK;IAE5B,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE;YAC1C,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE;SACnC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAA;AAC/C,CAAC"}

package/package.json

@@ -1,8 +1,17 @@
 {
   "name": "@payload-auth-link/react",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "payload-auth-link React UI: provider-agnostic sign-in components and user menu.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jellologic/payload-auth-link.git",
+    "directory": "packages/react"
+  },
+  "homepage": "https://github.com/jellologic/payload-auth-link/tree/main/packages/react#readme",
+  "bugs": {
+    "url": "https://github.com/jellologic/payload-auth-link/issues"
+  },
   "type": "module",
   "sideEffects": false,
   "exports": {
@@ -17,7 +26,10 @@
     "dist",
     "!dist/*.tsbuildinfo",
     "src",
-    "!src/**/__tests__"
+    "!src/**/__tests__",
+    "!dist/**/__tests__",
+    "!dist/**/__fixtures__",
+    "!src/**/__fixtures__"
   ],
   "scripts": {
     "build": "tsc -b",
@@ -25,7 +37,7 @@
     "clean": "rm -rf dist *.tsbuildinfo"
   },
   "dependencies": {
-    "@payload-auth-link/core": "0.1.0"
+    "@payload-auth-link/core": "0.2.0"
   },
   "peerDependencies": {
     "react": "^19.0.0"

package/src/index.ts

@@ -14,4 +14,5 @@ export type {
 } from './components.js'
 export { AuthLinkProvider, useAuthLink, useHasRoles } from './provider.js'
 export type { AuthLinkContextValue, AuthLinkProviderProps, AuthLinkStatus } from './provider.js'
-export { fetchSessionUser, revokeSession } from './session.js'
+export { fetchSession, fetchSessionUser, revokeSession } from './session.js'
+export type { SessionSnapshot } from './session.js'

package/src/provider.tsx

@@ -12,9 +12,10 @@ import {
 import {
   defaultSessionEndpointPath,
   type HttpFetch,
+  type SessionGuest,
   type SessionUser,
 } from '@payload-auth-link/core'
-import { fetchSessionUser, revokeSession } from './session.js'
+import { fetchSession, revokeSession } from './session.js'
 
 /** Session state: unknown until the first load settles. */
 export type AuthLinkStatus = 'loading' | 'authenticated' | 'anonymous'
@@ -22,6 +23,12 @@ export type AuthLinkStatus = 'loading' | 'authenticated' | 'anonymous'
 /** What `useAuthLink` returns: user, status, refresh, honest sign-out. */
 export type AuthLinkContextValue = {
   readonly user: SessionUser | null
+  /**
+   * The anonymous guest principal (CAP-10), present instead of a
+   * user while the provider session is anonymous. Never carries
+   * roles or access — a stable key for anonymous app state only.
+   */
+  readonly guest: SessionGuest | null
   readonly status: AuthLinkStatus
   /** Re-read the session endpoint (call after sign-in or role changes). */
   readonly refresh: () => Promise<void>
@@ -58,7 +65,17 @@ function snapshotKey(user: SessionUser | null | undefined): string {
   if (user === null) {
     return 'null'
   }
-  return JSON.stringify([user.id, user.collection, user.email, [...user.roles].sort()])
+  // PORT-4 facts are part of the value: a re-run loader reporting a
+  // new actor/assurance/tenant for the same user must still sync.
+  return JSON.stringify([
+    user.id,
+    user.collection,
+    user.email,
+    [...user.roles].sort(),
+    user.assurance ?? null,
+    user.actor ?? null,
+    user.organizationId ?? null,
+  ])
 }
 
 function statusFor(user: SessionUser | null): AuthLinkStatus {
@@ -81,6 +98,7 @@ export function AuthLinkProvider({
   initialUser = undefined,
 }: AuthLinkProviderProps): ReactNode {
   const [user, setUser] = useState<SessionUser | null>(initialUser ?? null)
+  const [guest, setGuest] = useState<SessionGuest | null>(null)
   const [status, setStatus] = useState<AuthLinkStatus>(
     initialUser === undefined ? 'loading' : statusFor(initialUser)
   )
@@ -97,20 +115,22 @@ export function AuthLinkProvider({
   }
 
   const loadSession = useCallback(
-    () => fetchSessionUser(sessionEndpoint, fetchImpl),
+    () => fetchSession(sessionEndpoint, fetchImpl),
     [sessionEndpoint, fetchImpl]
   )
 
   const refresh = useCallback(async () => {
     const current = await loadSession()
-    setUser(current)
-    setStatus(current === null ? 'anonymous' : 'authenticated')
+    setUser(current.user)
+    setGuest(current.guest)
+    setStatus(current.user === null ? 'anonymous' : 'authenticated')
   }, [loadSession])
 
   const signOut = useCallback(async () => {
     const revoked = await revokeSession(sessionEndpoint, fetchImpl)
     if (revoked) {
       setUser(null)
+      setGuest(null)
       setStatus('anonymous')
     }
     return revoked
@@ -126,8 +146,9 @@ export function AuthLinkProvider({
     void (async () => {
       const current = await loadSession()
       if (!cancelled) {
-        setUser(current)
-        setStatus(current === null ? 'anonymous' : 'authenticated')
+        setUser(current.user)
+        setGuest(current.guest)
+        setStatus(current.user === null ? 'anonymous' : 'authenticated')
       }
     })()
     return () => {
@@ -136,8 +157,8 @@ export function AuthLinkProvider({
   }, [initialUser, loadSession])
 
   const value = useMemo<AuthLinkContextValue>(
-    () => ({ user, status, refresh, signOut }),
-    [user, status, refresh, signOut]
+    () => ({ user, guest, status, refresh, signOut }),
+    [user, guest, status, refresh, signOut]
   )
   return <AuthLinkContext.Provider value={value}>{children}</AuthLinkContext.Provider>
 }

package/src/session.ts

@@ -1,8 +1,12 @@
 import {
   csrfHeaderName,
   defaultSessionEndpointPath,
+  isRecord,
+  parseSessionGuest,
   parseSessionResponse,
+  parseSessionUser,
   type HttpFetch,
+  type SessionGuest,
   type SessionUser,
 } from '@payload-auth-link/core'
 
@@ -32,6 +36,52 @@ export async function fetchSessionUser(
   return parseSessionResponse(response)
 }
 
+/** Both halves of one session-endpoint read (CAP-10). */
+export type SessionSnapshot = {
+  readonly user: SessionUser | null
+  readonly guest: SessionGuest | null
+}
+
+/**
+ * Read user AND guest from one session-endpoint response. The body
+ * is parsed exactly once; a guest body yields `user: null` plus the
+ * guest, a user body the reverse. Fails closed like
+ * {@link fetchSessionUser}.
+ */
+export async function fetchSession(
+  sessionEndpoint: string = defaultSessionEndpointPath,
+  fetchImpl: HttpFetch = fetch
+): Promise<SessionSnapshot> {
+  const empty: SessionSnapshot = { user: null, guest: null }
+  let response: Response
+  try {
+    response = await fetchImpl(sessionEndpoint, {
+      method: 'GET',
+      credentials: 'same-origin',
+      cache: 'no-store',
+      headers: { accept: 'application/json' },
+    })
+  } catch {
+    return empty
+  }
+  if (!response.ok) {
+    return empty
+  }
+  let body: unknown
+  try {
+    body = await response.json()
+  } catch {
+    return empty
+  }
+  if (!isRecord(body)) {
+    return empty
+  }
+  return {
+    user: parseSessionUser(body.user),
+    guest: body.user === null ? parseSessionGuest(body.guest) : null,
+  }
+}
+
 /**
  * Revoke the current session through the plugin's session endpoint.
  * Sends the CSRF header the endpoint requires. Returns `true` when the

package/dist/__tests__/components.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=components.test.d.ts.map

package/dist/__tests__/components.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"components.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/components.test.tsx"],"names":[],"mappings":""}

package/dist/__tests__/components.test.js

@@ -1,163 +0,0 @@
-import { jsx as _jsx } from "react/jsx-runtime";
-// @vitest-environment happy-dom
-import { act, cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react';
-import { afterEach, describe, expect, it, vi } from 'vitest';
-// RTL's auto-cleanup keys off a global afterEach, which Vitest does not
-// provide with `globals` off — clean up explicitly between renders.
-afterEach(() => {
-    cleanup();
-});
-import { AuthLinkProvider } from '../provider.js';
-import { RequireRoles, SignInButton, SignOutButton, UserMenu } from '../components.js';
-const user = {
-    id: 'user-1',
-    collection: 'users',
-    email: 'user@example.com',
-    roles: ['member', 'admin'],
-};
-function jsonResponse(body, status = 200) {
-    return new Response(JSON.stringify(body), {
-        status,
-        headers: { 'content-type': 'application/json' },
-    });
-}
-function stubFetch(handler) {
-    return vi.fn((input, init) => {
-        const result = handler(input, init);
-        return result instanceof Error ? Promise.reject(result) : Promise.resolve(result);
-    });
-}
-function withinProvider(children, options) {
-    const fetchImpl = options?.fetchImpl ?? stubFetch(() => jsonResponse({ user }));
-    if (options && 'initialUser' in options) {
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: options.initialUser, children: children }));
-        return;
-    }
-    render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, children: children }));
-}
-/**
- * Deterministic settling for negative assertions: await every response
- * the stub handed out, then drain the microtask queue (bounded) inside
- * `act` so React flushes whatever those resolutions scheduled. No
- * wall-clock sleep, so the test cannot pass or fail on machine load.
- */
-async function settle(fetchImpl) {
-    await act(async () => {
-        await Promise.allSettled(fetchImpl.mock.results.map((result) => result.value));
-        for (let tick = 0; tick < 50; tick += 1) {
-            await Promise.resolve();
-        }
-    });
-}
-describe('SignInButton', () => {
-    it('links to the sign-in page by default', () => {
-        render(_jsx(SignInButton, {}));
-        const link = screen.getByText('Sign in');
-        expect(link.tagName).toBe('A');
-        expect(link.getAttribute('href')).toBe('/sign-in');
-    });
-    it('honors href, className, and children', () => {
-        render(_jsx(SignInButton, { href: "/login", className: "btn", children: "Log in" }));
-        const link = screen.getByText('Log in');
-        expect(link.getAttribute('href')).toBe('/login');
-        expect(link.getAttribute('class')).toBe('btn');
-    });
-});
-describe('SignOutButton', () => {
-    it('signs out, notifies, and navigates on success', async () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ ok: true }));
-        const navigate = vi.fn();
-        const onSignedOut = vi.fn();
-        withinProvider(_jsx(SignOutButton, { redirectTo: "/", navigate: navigate, onSignedOut: onSignedOut }), {
-            fetchImpl,
-            initialUser: user,
-        });
-        fireEvent.click(screen.getByText('Sign out'));
-        await waitFor(() => {
-            expect(onSignedOut).toHaveBeenCalledTimes(1);
-        });
-        expect(navigate).toHaveBeenCalledWith('/');
-        expect(fetchImpl.mock.calls.some(([, init]) => init?.method === 'DELETE')).toBe(true);
-    });
-    it('stays put when revocation fails', async () => {
-        const fetchImpl = stubFetch(() => jsonResponse({}, 500));
-        const navigate = vi.fn();
-        const onSignedOut = vi.fn();
-        withinProvider(_jsx(SignOutButton, { redirectTo: "/", navigate: navigate, onSignedOut: onSignedOut }), {
-            fetchImpl,
-            initialUser: user,
-        });
-        fireEvent.click(screen.getByText('Sign out'));
-        await waitFor(() => {
-            expect(fetchImpl.mock.calls.some(([, init]) => init?.method === 'DELETE')).toBe(true);
-        });
-        // Let the failed DELETE settle; nothing must happen afterwards.
-        await settle(fetchImpl);
-        expect(onSignedOut).not.toHaveBeenCalled();
-        expect(navigate).not.toHaveBeenCalled();
-    });
-});
-describe('SignOutButton redirect safety (SEC-12)', () => {
-    it.each([
-        ['https://evil.example/phish', '/'],
-        ['//evil.example', '/'],
-        ['/api/users', '/'],
-        ['/sign-in', '/sign-in'],
-        ['/goodbye?x=1', '/goodbye?x=1'],
-    ])('navigates %s as %s', async (redirectTo, expected) => {
-        const fetchImpl = stubFetch(() => jsonResponse({ ok: true }));
-        const navigate = vi.fn();
-        withinProvider(_jsx(SignOutButton, { redirectTo: redirectTo, navigate: navigate }), {
-            fetchImpl,
-            initialUser: user,
-        });
-        fireEvent.click(screen.getByText('Sign out'));
-        await waitFor(() => {
-            expect(navigate).toHaveBeenCalledTimes(1);
-        });
-        expect(navigate).toHaveBeenCalledWith(expected);
-    });
-});
-describe('UserMenu', () => {
-    it('renders nothing while loading', async () => {
-        const pending = [];
-        const fetchImpl = vi.fn(async () => new Promise((resolve) => {
-            pending.push(resolve);
-        }));
-        const { container } = render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, children: _jsx(UserMenu, {}) }));
-        expect(container.textContent).toBe('');
-        pending[0]?.(jsonResponse({ user }));
-        // Settle inside the test so no state update lands after unmount.
-        await screen.findByText('user@example.com');
-    });
-    it('offers sign-in when anonymous', async () => {
-        const fetchImpl = stubFetch(() => jsonResponse({}, 401));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, children: _jsx(UserMenu, { signInHref: "/login" }) }));
-        const link = await screen.findByText('Sign in');
-        expect(link.getAttribute('href')).toBe('/login');
-    });
-    it('shows the email and signs out when authenticated', async () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, children: _jsx(UserMenu, {}) }));
-        expect(await screen.findByText('user@example.com')).toBeDefined();
-        expect(screen.getByText('Sign out')).toBeDefined();
-    });
-});
-describe('RequireRoles', () => {
-    it('gates on every listed role', async () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, children: _jsx(RequireRoles, { roles: ['admin'], fallback: _jsx("span", { children: "denied" }), children: _jsx("span", { children: "granted" }) }) }));
-        expect(await screen.findByText('granted')).toBeDefined();
-    });
-    it('fails closed while loading and when denied', () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        const { container } = render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: null, children: _jsx(RequireRoles, { roles: ['owner'], fallback: _jsx("span", { children: "denied" }), children: _jsx("span", { children: "granted" }) }) }));
-        expect(container.textContent).toBe('denied');
-    });
-    it('renders nothing by default when denied', () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        const { container } = render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: null, children: _jsx(RequireRoles, { roles: ['owner'], children: _jsx("span", { children: "granted" }) }) }));
-        expect(container.textContent).toBe('');
-    });
-});
-//# sourceMappingURL=components.test.js.map

package/dist/__tests__/components.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"components.test.js","sourceRoot":"","sources":["../../src/__tests__/components.test.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAEzF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE5D,wEAAwE;AACxE,oEAAoE;AACpE,SAAS,CAAC,GAAG,EAAE;IACb,OAAO,EAAE,CAAA;AACX,CAAC,CAAC,CAAA;AAEF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAEtF,MAAM,IAAI,GAAgB;IACxB,EAAE,EAAE,QAAQ;IACZ,UAAU,EAAE,OAAO;IACnB,KAAK,EAAE,kBAAkB;IACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC3B,CAAA;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAgE;IACjF,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,KAAa,EAAE,IAAkB,EAAqB,EAAE;QACpE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACnC,OAAO,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,QAAmB,EACnB,OAAwF;IAExF,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC/E,IAAI,OAAO,IAAI,aAAa,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,YACrE,QAAQ,GACQ,CACpB,CAAA;QACD,OAAM;IACR,CAAC;IACD,MAAM,CAAC,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,YAAG,QAAQ,GAAoB,CAAC,CAAA;AAC/E,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,MAAM,CAAC,SAAuC;IAC3D,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAgB,CAAC,CAAC,CAAA;QACzF,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;QACzB,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,KAAC,YAAY,KAAG,CAAC,CAAA;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CACJ,KAAC,YAAY,IAAC,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,KAAK,uBAE5B,CAChB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;QACxB,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;QAC3B,cAAc,CAAC,KAAC,aAAa,IAAC,UAAU,EAAC,GAAG,EAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,GAAI,EAAE;YAC7F,SAAS;YACT,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;QACF,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;QAC7C,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,WAAW,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAA;QAC1C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QACxD,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;QACxB,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;QAC3B,cAAc,CAAC,KAAC,aAAa,IAAC,UAAU,EAAC,GAAG,EAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,GAAI,EAAE;YAC7F,SAAS;YACT,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;QACF,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;QAC7C,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvF,CAAC,CAAC,CAAA;QACF,gEAAgE;QAChE,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;QACvB,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,4BAA4B,EAAE,GAAG,CAAC;QACnC,CAAC,gBAAgB,EAAE,GAAG,CAAC;QACvB,CAAC,YAAY,EAAE,GAAG,CAAC;QACnB,CAAC,UAAU,EAAE,UAAU,CAAC;QACxB,CAAC,cAAc,EAAE,cAAc,CAAC;KACjC,CAAC,CAAC,oBAAoB,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE;QACtD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC7D,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;QACxB,cAAc,CAAC,KAAC,aAAa,IAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,GAAI,EAAE;YAC5E,SAAS;YACT,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;QACF,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;QAC7C,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,OAAO,GAAqC,EAAE,CAAA;QACpD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CACrB,KAAK,IAAuB,EAAE,CAC5B,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE;YAChC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvB,CAAC,CAAC,CACL,CAAA;QACD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAC1B,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,YACpC,KAAC,QAAQ,KAAG,GACK,CACpB,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACtC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACpC,iEAAiE;QACjE,MAAM,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QACxD,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,YACpC,KAAC,QAAQ,IAAC,UAAU,EAAC,QAAQ,GAAG,GACf,CACpB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,YACpC,KAAC,QAAQ,KAAG,GACK,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACjE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACpD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,YACpC,KAAC,YAAY,IAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,oCAAmB,YAC3D,qCAAoB,GACP,GACE,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAC1B,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,YAAY,IAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,oCAAmB,YAC3D,qCAAoB,GACP,GACE,CACpB,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAC1B,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,YAAY,IAAC,KAAK,EAAE,CAAC,OAAO,CAAC,YAC5B,qCAAoB,GACP,GACE,CACpB,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/index.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=index.test.d.ts.map

package/dist/__tests__/index.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/index.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/index.test.js

@@ -1,10 +0,0 @@
-import { describe, expect, it, vi } from 'vitest';
-import { fetchSessionUser } from '../index.js';
-describe('react entrypoint', () => {
-    it('serves the session reader contract through the barrel', async () => {
-        const fetchImpl = vi.fn(() => Promise.resolve(new Response('nope', { status: 401 })));
-        await expect(fetchSessionUser('/api/auth-link/session', fetchImpl)).resolves.toBeNull();
-        expect(fetchImpl).toHaveBeenCalledTimes(1);
-    });
-});
-//# sourceMappingURL=index.test.js.map

package/dist/__tests__/index.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../src/__tests__/index.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;QACrF,MAAM,MAAM,CAAC,gBAAgB,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAA;QACvF,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/provider.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=provider.test.d.ts.map

package/dist/__tests__/provider.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/provider.test.tsx"],"names":[],"mappings":""}

package/dist/__tests__/provider.test.js

@@ -1,177 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-// @vitest-environment happy-dom
-import { cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react';
-import { afterEach, describe, expect, it, vi } from 'vitest';
-import { AuthLinkProvider, useAuthLink, useHasRoles } from '../provider.js';
-// RTL's auto-cleanup keys off a global afterEach, which Vitest does not
-// provide with `globals` off — clean up explicitly between renders.
-afterEach(() => {
-    cleanup();
-});
-const user = {
-    id: 'user-1',
-    collection: 'users',
-    email: 'user@example.com',
-    roles: ['member', 'admin'],
-};
-function jsonResponse(body, status = 200) {
-    return new Response(JSON.stringify(body), {
-        status,
-        headers: { 'content-type': 'application/json' },
-    });
-}
-function stubFetch(handler) {
-    return vi.fn((input, init) => {
-        const result = handler(input, init);
-        return result instanceof Error ? Promise.reject(result) : Promise.resolve(result);
-    });
-}
-function StatusProbe() {
-    const { user: current, status } = useAuthLink();
-    return (_jsxs("div", { children: [_jsx("span", { "data-testid": "status", children: status }), _jsx("span", { "data-testid": "email", children: current?.email ?? 'none' })] }));
-}
-function RolesProbe({ roles }) {
-    return _jsx("span", { "data-testid": "has-roles", children: useHasRoles(...roles) ? 'yes' : 'no' });
-}
-describe('AuthLinkProvider', () => {
-    it('loads the session on mount', async () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, children: _jsx(StatusProbe, {}) }));
-        expect(screen.getByTestId('status').textContent).toBe('loading');
-        await waitFor(() => {
-            expect(screen.getByTestId('status').textContent).toBe('authenticated');
-        });
-        expect(screen.getByTestId('email').textContent).toBe('user@example.com');
-        expect(fetchImpl).toHaveBeenCalledTimes(1);
-    });
-    it('goes anonymous when no session exists', async () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ error: 'nope' }, 401));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, children: _jsx(StatusProbe, {}) }));
-        await waitFor(() => {
-            expect(screen.getByTestId('status').textContent).toBe('anonymous');
-        });
-    });
-    it('hydrates from initialUser without fetching', () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: user, children: _jsx(StatusProbe, {}) }));
-        expect(screen.getByTestId('status').textContent).toBe('authenticated');
-        expect(screen.getByTestId('email').textContent).toBe('user@example.com');
-        expect(fetchImpl).not.toHaveBeenCalled();
-    });
-    it('hydrates anonymous from a null initialUser without fetching', () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: null, children: _jsx(StatusProbe, {}) }));
-        expect(screen.getByTestId('status').textContent).toBe('anonymous');
-        expect(fetchImpl).not.toHaveBeenCalled();
-    });
-    it('syncs a later initialUser into context (PAR-10)', () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        const other = { ...user, id: 'user-2', email: 'other@example.com' };
-        const { rerender } = render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: null, children: _jsx(StatusProbe, {}) }));
-        expect(screen.getByTestId('status').textContent).toBe('anonymous');
-        rerender(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: user, children: _jsx(StatusProbe, {}) }));
-        expect(screen.getByTestId('email').textContent).toBe('user@example.com');
-        expect(screen.getByTestId('status').textContent).toBe('authenticated');
-        rerender(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: other, children: _jsx(StatusProbe, {}) }));
-        expect(screen.getByTestId('email').textContent).toBe('other@example.com');
-        rerender(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: null, children: _jsx(StatusProbe, {}) }));
-        expect(screen.getByTestId('status').textContent).toBe('anonymous');
-        // Refresh stays explicit: syncing a snapshot never fetches.
-        expect(fetchImpl).not.toHaveBeenCalled();
-    });
-    it('keeps a client sign-out when re-rendered with an equal fresh snapshot', async () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ ok: true }));
-        function SignOutProbe() {
-            const { signOut } = useAuthLink();
-            return (_jsx("button", { type: "button", onClick: () => void signOut(), children: "out" }));
-        }
-        const tree = (snapshot) => (_jsxs(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: snapshot, children: [_jsx(StatusProbe, {}), _jsx(SignOutProbe, {})] }));
-        const { rerender } = render(tree(user));
-        fireEvent.click(screen.getByText('out'));
-        await waitFor(() => {
-            expect(screen.getByTestId('status').textContent).toBe('anonymous');
-        });
-        rerender(tree({ ...user, roles: [...user.roles] }));
-        expect(screen.getByTestId('status').textContent).toBe('anonymous');
-    });
-    it('refreshes on demand', async () => {
-        let current = null;
-        const fetchImpl = stubFetch(() => current ? jsonResponse({ user: current }) : jsonResponse({}, 401));
-        function RefreshProbe() {
-            const { refresh } = useAuthLink();
-            return (_jsx("button", { type: "button", onClick: () => {
-                    void refresh();
-                }, children: "refresh" }));
-        }
-        render(_jsxs(AuthLinkProvider, { fetchImpl: fetchImpl, children: [_jsx(StatusProbe, {}), _jsx(RefreshProbe, {})] }));
-        await waitFor(() => {
-            expect(screen.getByTestId('status').textContent).toBe('anonymous');
-        });
-        current = user;
-        fireEvent.click(screen.getByText('refresh'));
-        await waitFor(() => {
-            expect(screen.getByTestId('status').textContent).toBe('authenticated');
-        });
-    });
-    it('signOut clears state on success and keeps it on failure', async () => {
-        let failRevoke = false;
-        const outcomes = [];
-        const fetchImpl = stubFetch((_input, init) => {
-            if (init?.method === 'DELETE') {
-                return failRevoke ? jsonResponse({}, 500) : jsonResponse({ ok: true });
-            }
-            return jsonResponse({ user });
-        });
-        function SignOutProbe() {
-            const { signOut } = useAuthLink();
-            return (_jsx("button", { type: "button", onClick: () => {
-                    void signOut().then((ok) => outcomes.push(ok));
-                }, children: "sign out" }));
-        }
-        render(_jsxs(AuthLinkProvider, { fetchImpl: fetchImpl, children: [_jsx(StatusProbe, {}), _jsx(SignOutProbe, {})] }));
-        await waitFor(() => {
-            expect(screen.getByTestId('status').textContent).toBe('authenticated');
-        });
-        failRevoke = true;
-        fireEvent.click(screen.getByText('sign out'));
-        await waitFor(() => {
-            expect(outcomes).toEqual([false]);
-        });
-        expect(screen.getByTestId('status').textContent).toBe('authenticated');
-        failRevoke = false;
-        fireEvent.click(screen.getByText('sign out'));
-        await waitFor(() => {
-            expect(screen.getByTestId('status').textContent).toBe('anonymous');
-        });
-        expect(outcomes).toEqual([false, true]);
-    });
-});
-describe('useAuthLink', () => {
-    it('throws outside the provider', () => {
-        const silenced = vi.spyOn(console, 'error').mockImplementation(() => { });
-        try {
-            expect(() => render(_jsx(StatusProbe, {}))).toThrow('useAuthLink must be used within AuthLinkProvider');
-        }
-        finally {
-            silenced.mockRestore();
-        }
-    });
-});
-describe('useHasRoles', () => {
-    it('passes when every listed role is held', () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: user, children: _jsx(RolesProbe, { roles: ['admin', 'member'] }) }));
-        expect(screen.getByTestId('has-roles').textContent).toBe('yes');
-    });
-    it('fails when any listed role is missing', () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: user, children: _jsx(RolesProbe, { roles: ['admin', 'owner'] }) }));
-        expect(screen.getByTestId('has-roles').textContent).toBe('no');
-    });
-    it('fails closed when anonymous', () => {
-        const fetchImpl = stubFetch(() => jsonResponse({ user }));
-        render(_jsx(AuthLinkProvider, { fetchImpl: fetchImpl, initialUser: null, children: _jsx(RolesProbe, { roles: ['admin'] }) }));
-        expect(screen.getByTestId('has-roles').textContent).toBe('no');
-    });
-});
-//# sourceMappingURL=provider.test.js.map

package/dist/__tests__/provider.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.test.js","sourceRoot":"","sources":["../../src/__tests__/provider.test.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAEpF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE5D,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAE3E,wEAAwE;AACxE,oEAAoE;AACpE,SAAS,CAAC,GAAG,EAAE;IACb,OAAO,EAAE,CAAA;AACX,CAAC,CAAC,CAAA;AAEF,MAAM,IAAI,GAAgB;IACxB,EAAE,EAAE,QAAQ;IACZ,UAAU,EAAE,OAAO;IACnB,KAAK,EAAE,kBAAkB;IACzB,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC3B,CAAA;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAgE;IACjF,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,KAAa,EAAE,IAAkB,EAAqB,EAAE;QACpE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACnC,OAAO,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAA;IAC/C,OAAO,CACL,0BACE,8BAAkB,QAAQ,YAAE,MAAM,GAAQ,EAC1C,8BAAkB,OAAO,YAAE,OAAO,EAAE,KAAK,IAAI,MAAM,GAAQ,IACvD,CACP,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,EAAE,KAAK,EAAgC;IACzD,OAAO,8BAAkB,WAAW,YAAE,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAQ,CAAA;AACpF,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,YACpC,KAAC,WAAW,KAAG,GACE,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAChE,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACxE,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QACvE,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,YACpC,KAAC,WAAW,KAAG,GACE,CACpB,CAAA;QACD,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,WAAW,KAAG,GACE,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACtE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACxE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,WAAW,KAAG,GACE,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAClE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,KAAK,GAAgB,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAA;QAChF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CACzB,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,WAAW,KAAG,GACE,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAClE,QAAQ,CACN,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,WAAW,KAAG,GACE,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACtE,QAAQ,CACN,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,YACxD,KAAC,WAAW,KAAG,GACE,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QACzE,QAAQ,CACN,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,WAAW,KAAG,GACE,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAClE,4DAA4D;QAC5D,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC7D,SAAS,YAAY;YACnB,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAA;YACjC,OAAO,CACL,iBAAQ,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,oBAE1C,CACV,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,QAAqB,EAAE,EAAE,CAAC,CACtC,MAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,aAC3D,KAAC,WAAW,KAAG,EACf,KAAC,YAAY,KAAG,IACC,CACpB,CAAA;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACvC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QACxC,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpE,CAAC,CAAC,CAAA;QACF,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;QACnD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACnC,IAAI,OAAO,GAAuB,IAAI,CAAA;QACtC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAC/B,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAClE,CAAA;QACD,SAAS,YAAY;YACnB,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAA;YACjC,OAAO,CACL,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;oBACZ,KAAK,OAAO,EAAE,CAAA;gBAChB,CAAC,wBAGM,CACV,CAAA;QACH,CAAC;QACD,MAAM,CACJ,MAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,aACpC,KAAC,WAAW,KAAG,EACf,KAAC,YAAY,KAAG,IACC,CACpB,CAAA;QACD,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpE,CAAC,CAAC,CAAA;QACF,OAAO,GAAG,IAAI,CAAA;QACd,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;QAC5C,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,IAAI,UAAU,GAAG,KAAK,CAAA;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAA;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YAC3C,IAAI,IAAI,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YACxE,CAAC;YACD,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;QACF,SAAS,YAAY;YACnB,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAA;YACjC,OAAO,CACL,iBACE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;oBACZ,KAAK,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;gBAChD,CAAC,yBAGM,CACV,CAAA;QACH,CAAC;QACD,MAAM,CACJ,MAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,aACpC,KAAC,WAAW,KAAG,EACf,KAAC,YAAY,KAAG,IACC,CACpB,CAAA;QACD,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;QACF,UAAU,GAAG,IAAI,CAAA;QACjB,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;QAC7C,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACtE,UAAU,GAAG,KAAK,CAAA;QAClB,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;QAC7C,MAAM,OAAO,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpE,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACxE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAC,WAAW,KAAG,CAAC,CAAC,CAAC,OAAO,CAC3C,kDAAkD,CACnD,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,WAAW,EAAE,CAAA;QACxB,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,UAAU,IAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAI,GACzB,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,UAAU,IAAC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAI,GACxB,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,CACJ,KAAC,gBAAgB,IAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,YACvD,KAAC,UAAU,IAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAI,GACf,CACpB,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/session.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=session.test.d.ts.map

package/dist/__tests__/session.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/session.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/session.test.js

@@ -1,70 +0,0 @@
-import { describe, expect, it, vi } from 'vitest';
-import { fetchSessionUser, revokeSession } from '../session.js';
-const user = { id: 'user-1', collection: 'users', email: 'user@example.com', roles: ['member'] };
-function jsonResponse(body, status = 200) {
-    return new Response(JSON.stringify(body), {
-        status,
-        headers: { 'content-type': 'application/json' },
-    });
-}
-function stubFetch(response) {
-    const fetchImpl = vi.fn();
-    if (response instanceof Error) {
-        fetchImpl.mockRejectedValue(response);
-    }
-    else {
-        fetchImpl.mockResolvedValue(response);
-    }
-    return fetchImpl;
-}
-describe('fetchSessionUser', () => {
-    it('reads the user from the default endpoint', async () => {
-        const fetchImpl = stubFetch(jsonResponse({ user }));
-        const result = await fetchSessionUser(undefined, fetchImpl);
-        expect(result).toEqual(user);
-        expect(fetchImpl).toHaveBeenCalledWith('/api/auth-link/session', {
-            method: 'GET',
-            credentials: 'same-origin',
-            cache: 'no-store',
-            headers: { accept: 'application/json' },
-        });
-    });
-    it('honors a custom endpoint', async () => {
-        const fetchImpl = stubFetch(jsonResponse({ user }));
-        await fetchSessionUser('/custom/session', fetchImpl);
-        expect(fetchImpl).toHaveBeenCalledWith('/custom/session', expect.objectContaining({ method: 'GET' }));
-    });
-    it('fails closed on transport and protocol failures', async () => {
-        for (const response of [
-            stubFetch(new Error('down')),
-            stubFetch(jsonResponse({ error: 'nope' }, 401)),
-            stubFetch(jsonResponse({ error: 'nope' }, 500)),
-            stubFetch(new Response('not-json{', { status: 200 })),
-            stubFetch(jsonResponse([user])),
-            stubFetch(jsonResponse({})),
-            stubFetch(jsonResponse({ user: { ...user, email: 'bad' } })),
-        ]) {
-            await expect(fetchSessionUser(undefined, response)).resolves.toBeNull();
-        }
-    });
-});
-describe('revokeSession', () => {
-    it('sends a CSRF-proofed DELETE to the default endpoint', async () => {
-        const fetchImpl = stubFetch(jsonResponse({ ok: true }));
-        await expect(revokeSession(undefined, fetchImpl)).resolves.toBe(true);
-        expect(fetchImpl).toHaveBeenCalledWith('/api/auth-link/session', {
-            method: 'DELETE',
-            credentials: 'same-origin',
-            headers: { 'x-auth-link-csrf': '1' },
-        });
-    });
-    it('treats already-signed-out as success (idempotent logout)', async () => {
-        await expect(revokeSession(undefined, stubFetch(jsonResponse({}, 401)))).resolves.toBe(true);
-    });
-    it('reports failure instead of lying', async () => {
-        await expect(revokeSession(undefined, stubFetch(new Error('down')))).resolves.toBe(false);
-        await expect(revokeSession(undefined, stubFetch(jsonResponse({}, 500)))).resolves.toBe(false);
-        await expect(revokeSession(undefined, stubFetch(jsonResponse({}, 403)))).resolves.toBe(false);
-    });
-});
-//# sourceMappingURL=session.test.js.map

package/dist/__tests__/session.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.test.js","sourceRoot":"","sources":["../../src/__tests__/session.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAE/D,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAA;AAEhG,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,QAA0B;IAC3C,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;IACzB,IAAI,QAAQ,YAAY,KAAK,EAAE,CAAC;QAC9B,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACvC,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACvC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,EAAE;YAC/D,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,aAAa;YAC1B,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACnD,MAAM,gBAAgB,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,iBAAiB,EACjB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAC3C,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,KAAK,MAAM,QAAQ,IAAI;YACrB,SAAS,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,SAAS,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,SAAS,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,SAAS,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACrD,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/B,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC3B,SAAS,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;SAC7D,EAAE,CAAC;YACF,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAA;QACzE,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACvD,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrE,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,EAAE;YAC/D,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE;SACrC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzF,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7F,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}