@proma-dev/sdk 0.1.5 → 0.2.0

package/dist/react/index.d.ts

@@ -46,10 +46,36 @@ interface ChatMessage {
     role: 'user' | 'assistant' | 'system';
     content: string;
 }
+type ChatProvider = 'gemini' | 'anthropic' | 'openrouter';
 interface ChatOptions {
     messages: ChatMessage[];
-    /** Gemini model to use. Defaults to gemini-2.0-flash. */
+    /**
+     * Which upstream provider to route through. Defaults to `gemini`.
+     * `openrouter` exposes 100+ models including xAI, Mistral, Llama, etc.
+     */
+    provider?: ChatProvider;
+    /**
+     * Model identifier within the chosen provider. Examples:
+     * - gemini: `gemini-2.0-flash`, `gemini-1.5-pro`
+     * - anthropic: `claude-3-5-sonnet-latest`, `claude-opus-4-0`
+     * - openrouter: `meta-llama/llama-3.3-70b-instruct`, `x-ai/grok-2-1212`
+     *
+     * Defaults to `gemini-2.0-flash` when provider is unset/`gemini`.
+     */
     model?: string;
+    /** Maximum tokens to generate. Caps the per-call cost estimate. */
+    maxOutputTokens?: number;
+}
+/**
+ * A JSON Schema object describing the expected shape of a structured response.
+ * Use any valid JSON Schema — e.g. `{ type: 'object', properties: { ... }, required: [...] }`.
+ */
+type JsonSchema = Record<string, unknown>;
+interface ChatStructuredOptions extends ChatOptions {
+    /** JSON Schema describing the shape the model must return. */
+    schema: JsonSchema;
+    /** Optional name for the schema — surfaced to some providers for grounding. */
+    schemaName?: string;
 }
 
 interface LoginWithPromaProps {
@@ -190,6 +216,41 @@ declare class AiApi {
      * console.log(text)
      */
     chatText(options: ChatOptions | ChatMessage[]): Promise<string>;
+    /**
+     * Sends a chat request and parses the response as JSON. The model is nudged
+     * with a system hint to emit JSON, and common wrappers (```json fences,
+     * leading/trailing prose) are stripped before parsing.
+     *
+     * Best-effort: if the model returns malformed JSON, `fallback` is returned
+     * when provided; otherwise an error is thrown. For guaranteed schema
+     * compliance use `chatStructured()` instead.
+     *
+     * @example
+     * const { title, tags } = await proma.ai.chatJSON<{ title: string; tags: string[] }>({
+     *   messages: [{ role: 'user', content: 'Suggest a title and 3 tags for this post' }],
+     * })
+     */
+    chatJSON<T = unknown>(options: ChatOptions | ChatMessage[], fallback?: T): Promise<T>;
+    /**
+     * Sends a chat request with a JSON Schema and returns a typed object that is
+     * guaranteed to match the schema (enforced provider-side via structured
+     * output / function calling).
+     *
+     * @example
+     * interface Summary { score: number; tags: string[] }
+     * const result = await proma.ai.chatStructured<Summary>({
+     *   messages: [{ role: 'user', content: 'Rate and tag this article' }],
+     *   schema: {
+     *     type: 'object',
+     *     properties: {
+     *       score: { type: 'number' },
+     *       tags: { type: 'array', items: { type: 'string' } },
+     *     },
+     *     required: ['score', 'tags'],
+     *   },
+     * })
+     */
+    chatStructured<T = unknown>(options: ChatStructuredOptions): Promise<T>;
 }
 
 interface PromaAuthState {

package/dist/react/index.js

@@ -1,6 +1,22 @@
+var __defProp = Object.defineProperty;
+var __defProps = Object.defineProperties;
+var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
 var __getOwnPropSymbols = Object.getOwnPropertySymbols;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __propIsEnum = Object.prototype.propertyIsEnumerable;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __spreadValues = (a, b) => {
+  for (var prop in b || (b = {}))
+    if (__hasOwnProp.call(b, prop))
+      __defNormalProp(a, prop, b[prop]);
+  if (__getOwnPropSymbols)
+    for (var prop of __getOwnPropSymbols(b)) {
+      if (__propIsEnum.call(b, prop))
+        __defNormalProp(a, prop, b[prop]);
+    }
+  return a;
+};
+var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
 var __objRest = (source, exclude) => {
   var target = {};
   for (var prop in source)
@@ -17,6 +33,69 @@ var __objRest = (source, exclude) => {
 // src/react/login-button.tsx
 import { useState } from "react";
 
+// src/errors.ts
+var PromaError = class extends Error {
+  constructor(message, code, status) {
+    super(message);
+    this.name = "PromaError";
+    this.code = code;
+    this.status = status;
+  }
+};
+var InsufficientCreditsError = class extends PromaError {
+  constructor() {
+    super(
+      "The user has insufficient credits \u2014 prompt them to top up.",
+      "insufficient_credits",
+      402
+    );
+    this.name = "InsufficientCreditsError";
+  }
+};
+var AppSpendingLimitExceededError = class extends PromaError {
+  constructor(monthlyLimitMicroCredits, monthToDateSpendMicroCredits) {
+    super(
+      "This app has reached its monthly spending limit set by the user.",
+      "app_limit_exceeded",
+      403
+    );
+    this.name = "AppSpendingLimitExceededError";
+    this.monthlyLimitMicroCredits = monthlyLimitMicroCredits;
+    this.monthToDateSpendMicroCredits = monthToDateSpendMicroCredits;
+  }
+};
+var AppLimitNotSetError = class extends PromaError {
+  constructor() {
+    super(
+      "The user has not set a spending limit for this app yet \u2014 direct them to /home/my-apps.",
+      "app_limit_not_set",
+      403
+    );
+    this.name = "AppLimitNotSetError";
+  }
+};
+function errorFromGatewayResponse(status, body) {
+  var _a, _b, _c, _d, _e;
+  const code = (_b = (_a = body.error) != null ? _a : body.reason) != null ? _b : "unknown_error";
+  switch (code) {
+    case "insufficient_credits":
+      return new InsufficientCreditsError();
+    case "app_limit_exceeded":
+      return new AppSpendingLimitExceededError(
+        (_c = body.limit) != null ? _c : null,
+        (_d = body.spent) != null ? _d : null
+      );
+    case "app_limit_not_set":
+      return new AppLimitNotSetError();
+    default:
+      return new PromaError(
+        (_e = body.error) != null ? _e : `Gateway error (${status})`,
+        code,
+        status
+      );
+  }
+}
+
 // src/pkce.ts
 var PKCE_STORAGE_KEY = "proma_code_verifier";
 function generateCodeVerifier() {
@@ -201,10 +280,7 @@ var PromaClient = class {
       if (remaining.length === 0) {
         localStorage.removeItem("proma_oauth_states");
       } else {
-        localStorage.setItem(
-          "proma_oauth_states",
-          JSON.stringify(remaining)
-        );
+        localStorage.setItem("proma_oauth_states", JSON.stringify(remaining));
       }
       localStorage.removeItem("proma_oauth_state");
     }
@@ -371,20 +447,34 @@ var AiApi = class {
    * const reader = stream.body.getReader()
    */
   async chat(options) {
-    var _a;
+    var _a, _b;
     const token = await this.client.requireAccessToken();
     const params = Array.isArray(options) ? { messages: options } : options;
-    return fetch(`${this.client.baseUrl}/api/gateway/chat`, {
+    const provider = (_a = params.provider) != null ? _a : "gemini";
+    const model = (_b = params.model) != null ? _b : provider === "gemini" ? "gemini-2.0-flash" : "";
+    if (!model) {
+      throw new Error(
+        `model is required when provider is "${provider}" \u2014 pass e.g. { provider: "${provider}", model: "..." }`
+      );
+    }
+    const response = await fetch(`${this.client.baseUrl}/api/gateway/chat`, {
       method: "POST",
       headers: {
         Authorization: `Bearer ${token}`,
         "Content-Type": "application/json"
       },
       body: JSON.stringify({
+        provider,
+        model,
         messages: params.messages,
-        model: (_a = params.model) != null ? _a : "gemini-2.0-flash"
+        maxOutputTokens: params.maxOutputTokens
       })
     });
+    if (!response.ok) {
+      const body = await response.json().catch(() => ({ error: "unknown_error" }));
+      throw errorFromGatewayResponse(response.status, body);
+    }
+    return response;
   }
   /**
    * Convenience wrapper around `chat` that collects the full streamed text.
@@ -397,12 +487,8 @@ var AiApi = class {
    * console.log(text)
    */
   async chatText(options) {
-    var _a, _b, _c, _d, _e, _f, _g;
+    var _a;
     const res = await this.chat(options);
-    if (!res.ok) {
-      const err = await res.json().catch(() => ({ error: "upstream_error" }));
-      throw new Error(err.error);
-    }
     const reader = (_a = res.body) == null ? void 0 : _a.getReader();
     if (!reader) return "";
     const decoder = new TextDecoder();
@@ -410,22 +496,112 @@ var AiApi = class {
     while (true) {
       const { done, value } = await reader.read();
       if (done) break;
-      const chunk = decoder.decode(value, { stream: true });
-      for (const line of chunk.split("\n")) {
-        if (!line.startsWith("data: ")) continue;
-        const json = line.slice(6).trim();
-        if (json === "[DONE]") continue;
-        try {
-          const parsed = JSON.parse(json);
-          const text = (_g = (_f = (_e = (_d = (_c = (_b = parsed.candidates) == null ? void 0 : _b[0]) == null ? void 0 : _c.content) == null ? void 0 : _d.parts) == null ? void 0 : _e[0]) == null ? void 0 : _f.text) != null ? _g : "";
-          fullText += text;
-        } catch (e) {
-        }
-      }
+      fullText += decoder.decode(value, { stream: true });
     }
+    fullText += decoder.decode();
     return fullText;
   }
+  /**
+   * Sends a chat request and parses the response as JSON. The model is nudged
+   * with a system hint to emit JSON, and common wrappers (```json fences,
+   * leading/trailing prose) are stripped before parsing.
+   *
+   * Best-effort: if the model returns malformed JSON, `fallback` is returned
+   * when provided; otherwise an error is thrown. For guaranteed schema
+   * compliance use `chatStructured()` instead.
+   *
+   * @example
+   * const { title, tags } = await proma.ai.chatJSON<{ title: string; tags: string[] }>({
+   *   messages: [{ role: 'user', content: 'Suggest a title and 3 tags for this post' }],
+   * })
+   */
+  async chatJSON(options, fallback) {
+    const params = Array.isArray(options) ? { messages: options } : options;
+    const hasSystem = params.messages.some((m) => m.role === "system");
+    const messages = hasSystem ? params.messages : [
+      {
+        role: "system",
+        content: "You must reply with a single valid JSON value and nothing else. No prose, no markdown fences."
+      },
+      ...params.messages
+    ];
+    const text = await this.chatText(__spreadProps(__spreadValues({}, params), { messages }));
+    const cleaned = stripJsonFences(text);
+    try {
+      return JSON.parse(cleaned);
+    } catch (err) {
+      if (fallback !== void 0) return fallback;
+      throw new Error(
+        `chatJSON: model returned invalid JSON (${err.message}). Pass a fallback to tolerate parse failures, or use chatStructured() for guaranteed schema compliance.`
+      );
+    }
+  }
+  /**
+   * Sends a chat request with a JSON Schema and returns a typed object that is
+   * guaranteed to match the schema (enforced provider-side via structured
+   * output / function calling).
+   *
+   * @example
+   * interface Summary { score: number; tags: string[] }
+   * const result = await proma.ai.chatStructured<Summary>({
+   *   messages: [{ role: 'user', content: 'Rate and tag this article' }],
+   *   schema: {
+   *     type: 'object',
+   *     properties: {
+   *       score: { type: 'number' },
+   *       tags: { type: 'array', items: { type: 'string' } },
+   *     },
+   *     required: ['score', 'tags'],
+   *   },
+   * })
+   */
+  async chatStructured(options) {
+    var _a, _b;
+    const token = await this.client.requireAccessToken();
+    const provider = (_a = options.provider) != null ? _a : "gemini";
+    const model = (_b = options.model) != null ? _b : provider === "gemini" ? "gemini-2.0-flash" : "";
+    if (!model) {
+      throw new Error(
+        `model is required when provider is "${provider}" \u2014 pass e.g. { provider: "${provider}", model: "..." }`
+      );
+    }
+    const response = await fetch(`${this.client.baseUrl}/api/gateway/chat`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        provider,
+        model,
+        messages: options.messages,
+        maxOutputTokens: options.maxOutputTokens,
+        responseFormat: __spreadProps(__spreadValues({
+          type: "json_schema"
+        }, options.schemaName && { name: options.schemaName }), {
+          schema: options.schema
+        })
+      })
+    });
+    if (!response.ok) {
+      const body = await response.json().catch(() => ({ error: "unknown_error" }));
+      throw errorFromGatewayResponse(response.status, body);
+    }
+    const payload = await response.json();
+    return payload.object;
+  }
 };
+function stripJsonFences(text) {
+  const trimmed = text.trim();
+  const fenced = trimmed.match(/^```(?:json)?\s*([\s\S]*?)\s*```$/i);
+  if (fenced) return fenced[1].trim();
+  const firstBrace = trimmed.search(/[{[]/);
+  const lastBrace = Math.max(trimmed.lastIndexOf("}"), trimmed.lastIndexOf("]"));
+  if (firstBrace !== -1 && lastBrace > firstBrace) {
+    return trimmed.slice(firstBrace, lastBrace + 1);
+  }
+  return trimmed;
+}
 
 // src/react/login-button.tsx
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
@@ -519,6 +695,17 @@ function PromaProvider(_a) {
       cancelled = true;
     };
   }, [client]);
+  useEffect(() => {
+    if (typeof window === "undefined") return;
+    const params = new URL(window.location.href).searchParams;
+    if (params.get("autoLogin") !== "1") return;
+    params.delete("autoLogin");
+    const cleanUrl = window.location.pathname + (params.toString() ? "?" + params.toString() : "") + window.location.hash;
+    window.history.replaceState(null, "", cleanUrl);
+    void client.getSession().then((session) => {
+      if (!session) void client.login();
+    });
+  }, [client]);
   const login = useCallback(
     (scopes) => client.login(scopes),
     [client]

package/dist/react/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/react/login-button.tsx","../../src/pkce.ts","../../src/storage.ts","../../src/client.ts","../../src/react/proma-provider.tsx","../../src/react/use-oauth-callback.ts"],"sourcesContent":["import { type ReactNode, useState } from 'react';\n\nimport { PromaClient } from '../client';\nimport type { OAuthScope } from '../types';\n\ninterface LoginWithPromaProps {\n  clientId: string;\n  redirectUri: string;\n  scopes?: OAuthScope[];\n  baseUrl?: string;\n  onError?: (error: Error) => void;\n  children?: ReactNode;\n  className?: string;\n}\n\n/**\n * A ready-to-use \"Login with Proma\" button.\n *\n * @example\n * <LoginWithProma\n *   clientId=\"proma_app_abc123\"\n *   redirectUri=\"https://myapp.com/callback\"\n *   scopes={['profile', 'credits']}\n * />\n */\nexport function LoginWithProma({\n  clientId,\n  redirectUri,\n  scopes = ['profile'],\n  baseUrl,\n  onError,\n  children,\n  className,\n}: LoginWithPromaProps) {\n  const [isLoading, setIsLoading] = useState(false);\n\n  async function handleClick() {\n    setIsLoading(true);\n\n    try {\n      const client = new PromaClient({ clientId, redirectUri, baseUrl });\n      await client.login(scopes);\n    } catch (err) {\n      setIsLoading(false);\n      onError?.(err instanceof Error ? err : new Error('Authorization failed'));\n    }\n  }\n\n  return (\n    <button\n      type={'button'}\n      onClick={handleClick}\n      disabled={isLoading}\n      className={className ?? 'proma-login-button'}\n      aria-label={'Login with Proma'}\n    >\n      {isLoading\n        ? 'Redirecting…'\n        : (children ?? (\n            <>\n              <PromaLogo />\n              Login with Proma\n            </>\n          ))}\n    </button>\n  );\n}\n\nfunction PromaLogo() {\n  return (\n    <svg\n      width={16}\n      height={16}\n      viewBox={'0 0 24 24'}\n      fill={'currentColor'}\n      aria-hidden={'true'}\n    >\n      <path\n        d={\n          'M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 18c-4.41 0-8-3.59-8-8s3.59-8 8-8 8 3.59 8 8-3.59 8-8 8zm-1-13h2v6h-2zm0 8h2v2h-2z'\n        }\n      />\n    </svg>\n  );\n}\n","/**\n * PKCE helpers — browser + Node 18+ compatible via SubtleCrypto.\n */\n\nconst PKCE_STORAGE_KEY = 'proma_code_verifier';\n\n/**\n * Generates a cryptographically random code_verifier (43–128 chars from unreserved character set).\n */\nexport function generateCodeVerifier(): string {\n  const bytes = new Uint8Array(32);\n  crypto.getRandomValues(bytes);\n  return base64url(bytes);\n}\n\n/**\n * Derives the code_challenge from a code_verifier using SHA-256 (S256 method).\n */\nexport async function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const hash = await crypto.subtle.digest('SHA-256', data);\n  return base64url(new Uint8Array(hash));\n}\n\n/**\n * Saves the code_verifier to localStorage for retrieval after the redirect.\n */\nexport function saveCodeVerifier(verifier: string): void {\n  if (typeof localStorage !== 'undefined') {\n    localStorage.setItem(PKCE_STORAGE_KEY, verifier);\n  }\n}\n\n/**\n * Reads and removes the code_verifier from localStorage.\n */\nexport function consumeCodeVerifier(): string | null {\n  if (typeof localStorage === 'undefined') return null;\n  const verifier = localStorage.getItem(PKCE_STORAGE_KEY);\n  localStorage.removeItem(PKCE_STORAGE_KEY);\n  return verifier;\n}\n\nfunction base64url(bytes: Uint8Array): string {\n  const base64 = btoa(String.fromCharCode(...bytes));\n  return base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n}\n","import type { Session, TokenStorage } from './types';\n\nconst SESSION_KEY = 'proma_session';\n\nexport class TokenStore {\n  constructor(private readonly storage: TokenStorage) {}\n\n  get(): Session | null {\n    try {\n      const raw = this.storage.getItem(SESSION_KEY);\n      if (!raw) return null;\n      return JSON.parse(raw) as Session;\n    } catch {\n      return null;\n    }\n  }\n\n  set(session: Session): void {\n    this.storage.setItem(SESSION_KEY, JSON.stringify(session));\n  }\n\n  clear(): void {\n    this.storage.removeItem(SESSION_KEY);\n    // Also clear the PKCE verifier if present\n    this.storage.removeItem('proma_code_verifier');\n  }\n\n  isExpired(session: Session): boolean {\n    // Consider expired 30 seconds before actual expiry\n    return Date.now() >= session.expiresAt - 30_000;\n  }\n}\n\n/** Default in-memory storage for environments without localStorage (SSR, Node). */\nexport class MemoryStorage implements TokenStorage {\n  private map = new Map<string, string>();\n  getItem(key: string) {\n    return this.map.get(key) ?? null;\n  }\n  setItem(key: string, value: string) {\n    this.map.set(key, value);\n  }\n  removeItem(key: string) {\n    this.map.delete(key);\n  }\n}\n\nexport function getDefaultStorage(): TokenStorage {\n  if (typeof localStorage !== 'undefined') return localStorage;\n  return new MemoryStorage();\n}\n","import {\n  consumeCodeVerifier,\n  generateCodeChallenge,\n  generateCodeVerifier,\n  saveCodeVerifier,\n} from './pkce';\nimport { TokenStore, getDefaultStorage } from './storage';\nimport type {\n  BalanceResponse,\n  ChatMessage,\n  ChatOptions,\n  OAuthScope,\n  PromaClientConfig,\n  Session,\n  SpendCreditsResponse,\n  TokenResponse,\n  UserInfo,\n} from './types';\n\nconst DEFAULT_BASE_URL = 'https://www.proma.dev';\n\n/**\n * Deduplicates concurrent handleCallback() calls with the same code.\n * This handles React Strict Mode's double-effect invocation, which would\n * otherwise consume the PKCE verifier and state on the first call, leaving\n * nothing for the second call.\n */\nconst pendingCallbacks = new Map<string, Promise<Session>>();\n\nexport class PromaClient {\n  readonly baseUrl: string;\n  private readonly store: TokenStore;\n  private readonly defaultScopes: OAuthScope[];\n\n  /** Credits API — requires the `credits` scope. */\n  readonly credits: CreditsApi;\n\n  /** AI gateway API — requires the `ai:chat` scope. */\n  readonly ai: AiApi;\n\n  constructor(private readonly config: PromaClientConfig) {\n    this.baseUrl = config.baseUrl ?? DEFAULT_BASE_URL;\n    this.store = new TokenStore(config.storage ?? getDefaultStorage());\n    this.defaultScopes = config.scopes ?? ['profile'];\n    this.credits = new CreditsApi(this);\n    this.ai = new AiApi(this);\n  }\n\n  // ---------------------------------------------------------------------------\n  // Auth\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Redirects the user to Proma's login page.\n   * Call this on a button click — it will navigate away from the current page.\n   *\n   * @example\n   * button.onclick = () => proma.login()\n   */\n  async login(scopes?: OAuthScope[]): Promise<void> {\n    const url = await this.buildAuthorizeUrl(scopes ?? this.defaultScopes);\n    window.location.href = url;\n  }\n\n  /**\n   * Builds the authorization URL without navigating.\n   * Useful if you want to control the redirect yourself.\n   */\n  async buildAuthorizeUrl(\n    scopes: OAuthScope[] = this.defaultScopes,\n  ): Promise<string> {\n    const verifier = generateCodeVerifier();\n    const challenge = await generateCodeChallenge(verifier);\n    saveCodeVerifier(verifier);\n\n    // Generate and persist state for CSRF protection.\n    // Use a set so multiple concurrent login() calls don't clobber each other\n    // (e.g. auth guards that call login() again on the callback page).\n    const state = crypto.randomUUID();\n    if (typeof localStorage !== 'undefined') {\n      const stored = JSON.parse(\n        localStorage.getItem('proma_oauth_states') ?? '[]',\n      ) as string[];\n      stored.push(state);\n      localStorage.setItem(\n        'proma_oauth_states',\n        JSON.stringify(stored.slice(-10)),\n      );\n    }\n\n    const url = new URL('/api/oauth/authorize', this.baseUrl);\n    url.searchParams.set('client_id', this.config.clientId);\n    url.searchParams.set('redirect_uri', this.config.redirectUri);\n    url.searchParams.set('response_type', 'code');\n    url.searchParams.set('scope', scopes.join(' '));\n    url.searchParams.set('state', state);\n    url.searchParams.set('code_challenge', challenge);\n    url.searchParams.set('code_challenge_method', 'S256');\n\n    return url.toString();\n  }\n\n  /**\n   * Handles the OAuth callback. Call this on your redirect page.\n   * Reads the `code` from the URL, exchanges it for tokens, and stores the session.\n   *\n   * @param url - Defaults to `window.location.href`\n   * @returns The new session\n   *\n   * @example\n   * // pages/callback.tsx\n   * useEffect(() => {\n   *   proma.handleCallback().then(session => {\n   *     router.push('/dashboard')\n   *   })\n   * }, [])\n   */\n  async handleCallback(url?: string): Promise<Session> {\n    const href =\n      url ?? (typeof window !== 'undefined' ? window.location.href : '');\n    const params = new URL(href).searchParams;\n    const code = params.get('code');\n    const error = params.get('error');\n\n    if (error) {\n      throw new Error(params.get('error_description') ?? error);\n    }\n\n    if (!code) {\n      throw new Error('No authorization code found in URL');\n    }\n\n    // Deduplicate: React Strict Mode fires effects twice with the same code.\n    // Return the in-flight promise so the state/verifier are only consumed once.\n    const pending = pendingCallbacks.get(code);\n    if (pending) return pending;\n\n    const promise = this.exchangeCode(code, params);\n    pendingCallbacks.set(code, promise);\n    promise.finally(() => pendingCallbacks.delete(code));\n    return promise;\n  }\n\n  private async exchangeCode(\n    code: string,\n    params: URLSearchParams,\n  ): Promise<Session> {\n    // Validate state parameter to prevent CSRF attacks.\n    // Accepts any state from the stored set (handles concurrent/repeated login calls).\n    const returnedState = params.get('state');\n    if (typeof localStorage !== 'undefined') {\n      const stored = JSON.parse(\n        localStorage.getItem('proma_oauth_states') ?? '[]',\n      ) as string[];\n\n      // Fall back to legacy single-value key for backward compatibility\n      if (stored.length === 0) {\n        const legacy = localStorage.getItem('proma_oauth_state');\n        if (legacy) stored.push(legacy);\n      }\n\n      if (!returnedState || !stored.includes(returnedState)) {\n        throw new Error('Invalid state parameter — possible CSRF attack');\n      }\n\n      // Remove the consumed state and persist the remainder\n      const remaining = stored.filter((s) => s !== returnedState);\n      if (remaining.length === 0) {\n        localStorage.removeItem('proma_oauth_states');\n      } else {\n        localStorage.setItem(\n          'proma_oauth_states',\n          JSON.stringify(remaining),\n        );\n      }\n      localStorage.removeItem('proma_oauth_state'); // clean up legacy key\n    }\n\n    const verifier = consumeCodeVerifier();\n\n    const body = new URLSearchParams({\n      grant_type: 'authorization_code',\n      code,\n      redirect_uri: this.config.redirectUri,\n      client_id: this.config.clientId,\n    });\n\n    if (verifier) body.set('code_verifier', verifier);\n\n    const tokens = await this.fetchTokens(body);\n    const session = this.tokensToSession(tokens);\n    this.store.set(session);\n    return session;\n  }\n\n  /**\n   * Returns the current session (access token, refresh token, expiry).\n   * Automatically refreshes the access token if it is expired.\n   * Returns `null` if the user is not logged in.\n   */\n  async getSession(): Promise<Session | null> {\n    const session = this.store.get();\n    if (!session) return null;\n\n    if (this.store.isExpired(session)) {\n      try {\n        return await this.refresh(session.refreshToken);\n      } catch {\n        this.store.clear();\n        return null;\n      }\n    }\n\n    return session;\n  }\n\n  /**\n   * Returns `true` if the user has a valid (or refreshable) session.\n   */\n  async isAuthenticated(): Promise<boolean> {\n    return (await this.getSession()) !== null;\n  }\n\n  /**\n   * Fetches the logged-in user's profile.\n   * Requires the `profile` scope.\n   */\n  async getUser(): Promise<UserInfo> {\n    const token = await this.requireAccessToken();\n    const res = await fetch(`${this.baseUrl}/api/oauth/userinfo`, {\n      headers: { Authorization: `Bearer ${token}` },\n    });\n    if (!res.ok) throw new Error('Failed to fetch user info');\n    return res.json() as Promise<UserInfo>;\n  }\n\n  /**\n   * Clears the stored session and logs the user out.\n   * Does not revoke the token server-side.\n   */\n  logout(): void {\n    this.store.clear();\n  }\n\n  // ---------------------------------------------------------------------------\n  // Internal helpers (used by sub-APIs)\n  // ---------------------------------------------------------------------------\n\n  async requireAccessToken(): Promise<string> {\n    const session = await this.getSession();\n    if (!session)\n      throw new Error('Not authenticated — call proma.login() first');\n    return session.accessToken;\n  }\n\n  private async refresh(refreshToken: string): Promise<Session> {\n    const body = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: refreshToken,\n      client_id: this.config.clientId,\n    });\n    const tokens = await this.fetchTokens(body);\n    const session = this.tokensToSession(tokens);\n    this.store.set(session);\n    return session;\n  }\n\n  private async fetchTokens(body: URLSearchParams): Promise<TokenResponse> {\n    const res = await fetch(`${this.baseUrl}/api/oauth/token`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n      body: body.toString(),\n    });\n    if (!res.ok) {\n      const err = (await res\n        .json()\n        .catch(() => ({ error: 'unknown_error' }))) as {\n        error: string;\n        error_description?: string;\n      };\n      throw new Error(err.error_description ?? err.error);\n    }\n    return res.json() as Promise<TokenResponse>;\n  }\n\n  private tokensToSession(tokens: TokenResponse): Session {\n    return {\n      accessToken: tokens.access_token,\n      refreshToken: tokens.refresh_token,\n      expiresAt: Date.now() + tokens.expires_in * 1000,\n      scope: tokens.scope,\n    };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Credits API\n// ---------------------------------------------------------------------------\n\nclass CreditsApi {\n  constructor(private readonly client: PromaClient) {}\n\n  /**\n   * Returns the user's current credit balance.\n   * Requires scope: `credits`\n   *\n   * @example\n   * const { balance, formatted } = await proma.credits.getBalance()\n   * console.log(`You have ${formatted}`) // \"You have $1.23\"\n   */\n  async getBalance(): Promise<BalanceResponse> {\n    const token = await this.client.requireAccessToken();\n    const res = await fetch(`${this.client.baseUrl}/api/sdk/credits/balance`, {\n      headers: { Authorization: `Bearer ${token}` },\n    });\n    if (!res.ok) throw new Error('Failed to fetch credit balance');\n    return res.json() as Promise<BalanceResponse>;\n  }\n\n  /**\n   * Deducts credits from the user's account.\n   * Requires scope: `credits`\n   *\n   * @param amount - Micro-credits to spend. 1,000,000 = $1.00\n   * @param description - Optional description for the transaction ledger.\n   *\n   * @example\n   * await proma.credits.spend(500_000, 'Generated a report')\n   */\n  async spend(\n    amount: number,\n    description?: string,\n  ): Promise<SpendCreditsResponse> {\n    const token = await this.client.requireAccessToken();\n    const res = await fetch(`${this.client.baseUrl}/api/sdk/credits/spend`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({ amount, description }),\n    });\n    if (!res.ok) {\n      const err = (await res.json().catch(() => ({ error: 'unknown' }))) as {\n        error: string;\n      };\n      throw new Error(err.error);\n    }\n    return res.json() as Promise<SpendCreditsResponse>;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// AI API\n// ---------------------------------------------------------------------------\n\nclass AiApi {\n  constructor(private readonly client: PromaClient) {}\n\n  /**\n   * Sends a chat request through the Proma AI gateway (Gemini).\n   * Credits are deducted automatically per token used.\n   * Requires scope: `ai:chat`\n   *\n   * Returns a streaming `Response` — iterate SSE chunks or use a helper library.\n   *\n   * @example\n   * const stream = await proma.ai.chat({\n   *   messages: [{ role: 'user', content: 'Explain quantum entanglement simply.' }]\n   * })\n   * const reader = stream.body.getReader()\n   */\n  async chat(options: ChatOptions | ChatMessage[]): Promise<Response> {\n    const token = await this.client.requireAccessToken();\n    const params: ChatOptions = Array.isArray(options)\n      ? { messages: options }\n      : options;\n\n    return fetch(`${this.client.baseUrl}/api/gateway/chat`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        messages: params.messages,\n        model: params.model ?? 'gemini-2.0-flash',\n      }),\n    });\n  }\n\n  /**\n   * Convenience wrapper around `chat` that collects the full streamed text.\n   * Use this when you don't need streaming and just want the final string.\n   *\n   * @example\n   * const text = await proma.ai.chatText({\n   *   messages: [{ role: 'user', content: 'Hello!' }]\n   * })\n   * console.log(text)\n   */\n  async chatText(options: ChatOptions | ChatMessage[]): Promise<string> {\n    const res = await this.chat(options);\n    if (!res.ok) {\n      const err = (await res\n        .json()\n        .catch(() => ({ error: 'upstream_error' }))) as { error: string };\n      throw new Error(err.error);\n    }\n\n    const reader = res.body?.getReader();\n    if (!reader) return '';\n\n    const decoder = new TextDecoder();\n    let fullText = '';\n\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) break;\n\n      const chunk = decoder.decode(value, { stream: true });\n      // Parse SSE lines: \"data: {...}\"\n      for (const line of chunk.split('\\n')) {\n        if (!line.startsWith('data: ')) continue;\n        const json = line.slice(6).trim();\n        if (json === '[DONE]') continue;\n        try {\n          const parsed = JSON.parse(json) as {\n            candidates?: Array<{\n              content?: { parts?: Array<{ text?: string }> };\n            }>;\n          };\n          const text = parsed.candidates?.[0]?.content?.parts?.[0]?.text ?? '';\n          fullText += text;\n        } catch {\n          // skip malformed chunks\n        }\n      }\n    }\n\n    return fullText;\n  }\n}\n","import {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useState,\n} from 'react';\n\nimport { PromaClient } from '../client';\nimport type { OAuthScope, PromaClientConfig, UserInfo } from '../types';\n\ninterface PromaAuthState {\n  user: UserInfo | null;\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  /** Redirects the user to Proma's login page. */\n  login: (scopes?: OAuthScope[]) => Promise<void>;\n  /** Clears the session. */\n  logout: () => void;\n  /** The underlying PromaClient instance. */\n  client: PromaClient;\n}\n\nconst PromaContext = createContext<PromaAuthState | null>(null);\n\ntype PromaProviderProps = PromaClientConfig & {\n  children: React.ReactNode;\n};\n\n/**\n * Wraps your app with Proma auth context.\n * Call `usePromaAuth()` in any child component to access auth state.\n *\n * @example\n * <PromaProvider clientId=\"proma_app_xxx\" redirectUri=\"https://myapp.com/callback\">\n *   <App />\n * </PromaProvider>\n */\nexport function PromaProvider({ children, ...config }: PromaProviderProps) {\n  const [client] = useState(() => new PromaClient(config));\n  const [user, setUser] = useState<UserInfo | null>(null);\n  const [isLoading, setIsLoading] = useState(true);\n\n  // Restore session on mount\n  useEffect(() => {\n    let cancelled = false;\n\n    async function restore() {\n      try {\n        const session = await client.getSession();\n        if (!session || cancelled) {\n          setIsLoading(false);\n          return;\n        }\n        const userInfo = await client.getUser();\n        if (!cancelled) setUser(userInfo);\n      } catch {\n        // no valid session\n      } finally {\n        if (!cancelled) setIsLoading(false);\n      }\n    }\n\n    void restore();\n    return () => {\n      cancelled = true;\n    };\n  }, [client]);\n\n  const login = useCallback(\n    (scopes?: OAuthScope[]) => client.login(scopes),\n    [client],\n  );\n\n  const logout = useCallback(() => {\n    client.logout();\n    setUser(null);\n  }, [client]);\n\n  return (\n    <PromaContext.Provider\n      value={{\n        user,\n        isLoading,\n        isAuthenticated: !!user,\n        login,\n        logout,\n        client,\n      }}\n    >\n      {children}\n    </PromaContext.Provider>\n  );\n}\n\n/**\n * Returns the current Proma auth state.\n * Must be used inside a `<PromaProvider>`.\n *\n * @example\n * const { user, isLoading, login, logout } = usePromaAuth()\n */\nexport function usePromaAuth(): PromaAuthState {\n  const ctx = useContext(PromaContext);\n  if (!ctx) {\n    throw new Error('usePromaAuth must be used inside <PromaProvider>');\n  }\n  return ctx;\n}\n","import { useEffect, useRef, useState } from 'react';\n\nimport type { Session } from '../types';\nimport { usePromaAuth } from './proma-provider';\n\ninterface UseOAuthCallbackOptions {\n  /**\n   * Path to navigate to after a successful login.\n   * Uses `window.location.replace` so the callback URL is not in the browser history.\n   */\n  redirectTo?: string;\n  /** Called with the new session after a successful login. */\n  onSuccess?: (session: Session) => void;\n  /** Called if the callback fails. */\n  onError?: (error: Error) => void;\n}\n\ninterface UseOAuthCallbackResult {\n  /** True while the token exchange is in flight. */\n  isLoading: boolean;\n  /** Set if the callback failed. */\n  error: Error | null;\n}\n\n/**\n * Handles the OAuth callback in a React SPA.\n * Place this on your `/callback` page — it reads the `code` from the URL,\n * exchanges it for tokens, then navigates to `redirectTo`.\n *\n * Handles React Strict Mode's double-invocation and dev HMR reloads.\n *\n * Works with Next.js, Vite, Remix, and any other React framework.\n *\n * @example\n * // React Router / Lovable\n * function CallbackPage() {\n *   const navigate = useNavigate();\n *   const { error } = useOAuthCallback({\n *     onSuccess: () => navigate('/dashboard', { replace: true }),\n *   });\n *   if (error) return <p>Login failed: {error.message}</p>;\n *   return <p>Completing login…</p>;\n * }\n *\n * @example\n * // Simple redirect (works everywhere)\n * function CallbackPage() {\n *   const { error } = useOAuthCallback({ redirectTo: '/dashboard' });\n *   if (error) return <p>Login failed: {error.message}</p>;\n *   return <p>Completing login…</p>;\n * }\n */\nexport function useOAuthCallback({\n  redirectTo,\n  onSuccess,\n  onError,\n}: UseOAuthCallbackOptions = {}): UseOAuthCallbackResult {\n  const { client } = usePromaAuth();\n  const [error, setError] = useState<Error | null>(null);\n  const [isLoading, setIsLoading] = useState(true);\n\n  // Refs so the effect only runs once (on mount) without stale-closure warnings.\n  const onSuccessRef = useRef(onSuccess);\n  const onErrorRef = useRef(onError);\n  const redirectToRef = useRef(redirectTo);\n  onSuccessRef.current = onSuccess;\n  onErrorRef.current = onError;\n  redirectToRef.current = redirectTo;\n\n  useEffect(() => {\n    const code = new URL(window.location.href).searchParams.get('code');\n\n    if (!code) {\n      setIsLoading(false);\n      return;\n    }\n\n    // Guard against React Strict Mode's double-invocation and HMR reloads.\n    // sessionStorage survives remounts (unlike useRef) but not a full page refresh,\n    // so a manual reload always retries the exchange cleanly.\n    const guardKey = `proma_cb_${code}`;\n    if (sessionStorage.getItem(guardKey)) return;\n    sessionStorage.setItem(guardKey, '1');\n\n    client\n      .handleCallback()\n      .then((session) => {\n        sessionStorage.removeItem(guardKey);\n        onSuccessRef.current?.(session);\n        if (redirectToRef.current) {\n          window.location.replace(redirectToRef.current);\n        }\n      })\n      .catch((err: unknown) => {\n        sessionStorage.removeItem(guardKey);\n        console.error('[proma-sdk] handleCallback failed', err);\n        const callbackError =\n          err instanceof Error ? err : new Error(String(err) || 'Login failed');\n        setError(callbackError);\n        setIsLoading(false);\n        onErrorRef.current?.(callbackError);\n      });\n  // client is stable (created once in PromaProvider), safe as a dep.\n  }, [client]);\n\n  return { isLoading, error };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA,SAAyB,gBAAgB;;;ACIzC,IAAM,mBAAmB;AAKlB,SAAS,uBAA+B;AAC7C,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,SAAO,gBAAgB,KAAK;AAC5B,SAAO,UAAU,KAAK;AACxB;AAKA,eAAsB,sBAAsB,UAAmC;AAC7E,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,QAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;AACvD,SAAO,UAAU,IAAI,WAAW,IAAI,CAAC;AACvC;AAKO,SAAS,iBAAiB,UAAwB;AACvD,MAAI,OAAO,iBAAiB,aAAa;AACvC,iBAAa,QAAQ,kBAAkB,QAAQ;AAAA,EACjD;AACF;AAKO,SAAS,sBAAqC;AACnD,MAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,QAAM,WAAW,aAAa,QAAQ,gBAAgB;AACtD,eAAa,WAAW,gBAAgB;AACxC,SAAO;AACT;AAEA,SAAS,UAAU,OAA2B;AAC5C,QAAM,SAAS,KAAK,OAAO,aAAa,GAAG,KAAK,CAAC;AACjD,SAAO,OAAO,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACzE;;;AC7CA,IAAM,cAAc;AAEb,IAAM,aAAN,MAAiB;AAAA,EACtB,YAA6B,SAAuB;AAAvB;AAAA,EAAwB;AAAA,EAErD,MAAsB;AACpB,QAAI;AACF,YAAM,MAAM,KAAK,QAAQ,QAAQ,WAAW;AAC5C,UAAI,CAAC,IAAK,QAAO;AACjB,aAAO,KAAK,MAAM,GAAG;AAAA,IACvB,SAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,IAAI,SAAwB;AAC1B,SAAK,QAAQ,QAAQ,aAAa,KAAK,UAAU,OAAO,CAAC;AAAA,EAC3D;AAAA,EAEA,QAAc;AACZ,SAAK,QAAQ,WAAW,WAAW;AAEnC,SAAK,QAAQ,WAAW,qBAAqB;AAAA,EAC/C;AAAA,EAEA,UAAU,SAA2B;AAEnC,WAAO,KAAK,IAAI,KAAK,QAAQ,YAAY;AAAA,EAC3C;AACF;AAGO,IAAM,gBAAN,MAA4C;AAAA,EAA5C;AACL,SAAQ,MAAM,oBAAI,IAAoB;AAAA;AAAA,EACtC,QAAQ,KAAa;AApCvB;AAqCI,YAAO,UAAK,IAAI,IAAI,GAAG,MAAhB,YAAqB;AAAA,EAC9B;AAAA,EACA,QAAQ,KAAa,OAAe;AAClC,SAAK,IAAI,IAAI,KAAK,KAAK;AAAA,EACzB;AAAA,EACA,WAAW,KAAa;AACtB,SAAK,IAAI,OAAO,GAAG;AAAA,EACrB;AACF;AAEO,SAAS,oBAAkC;AAChD,MAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,SAAO,IAAI,cAAc;AAC3B;;;AC/BA,IAAM,mBAAmB;AAQzB,IAAM,mBAAmB,oBAAI,IAA8B;AAEpD,IAAM,cAAN,MAAkB;AAAA,EAWvB,YAA6B,QAA2B;AAA3B;AAxC/B;AAyCI,SAAK,WAAU,YAAO,YAAP,YAAkB;AACjC,SAAK,QAAQ,IAAI,YAAW,YAAO,YAAP,YAAkB,kBAAkB,CAAC;AACjE,SAAK,iBAAgB,YAAO,WAAP,YAAiB,CAAC,SAAS;AAChD,SAAK,UAAU,IAAI,WAAW,IAAI;AAClC,SAAK,KAAK,IAAI,MAAM,IAAI;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,MAAM,QAAsC;AAChD,UAAM,MAAM,MAAM,KAAK,kBAAkB,0BAAU,KAAK,aAAa;AACrE,WAAO,SAAS,OAAO;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBACJ,SAAuB,KAAK,eACX;AAtErB;AAuEI,UAAM,WAAW,qBAAqB;AACtC,UAAM,YAAY,MAAM,sBAAsB,QAAQ;AACtD,qBAAiB,QAAQ;AAKzB,UAAM,QAAQ,OAAO,WAAW;AAChC,QAAI,OAAO,iBAAiB,aAAa;AACvC,YAAM,SAAS,KAAK;AAAA,SAClB,kBAAa,QAAQ,oBAAoB,MAAzC,YAA8C;AAAA,MAChD;AACA,aAAO,KAAK,KAAK;AACjB,mBAAa;AAAA,QACX;AAAA,QACA,KAAK,UAAU,OAAO,MAAM,GAAG,CAAC;AAAA,MAClC;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,IAAI,wBAAwB,KAAK,OAAO;AACxD,QAAI,aAAa,IAAI,aAAa,KAAK,OAAO,QAAQ;AACtD,QAAI,aAAa,IAAI,gBAAgB,KAAK,OAAO,WAAW;AAC5D,QAAI,aAAa,IAAI,iBAAiB,MAAM;AAC5C,QAAI,aAAa,IAAI,SAAS,OAAO,KAAK,GAAG,CAAC;AAC9C,QAAI,aAAa,IAAI,SAAS,KAAK;AACnC,QAAI,aAAa,IAAI,kBAAkB,SAAS;AAChD,QAAI,aAAa,IAAI,yBAAyB,MAAM;AAEpD,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,eAAe,KAAgC;AArHvD;AAsHI,UAAM,OACJ,oBAAQ,OAAO,WAAW,cAAc,OAAO,SAAS,OAAO;AACjE,UAAM,SAAS,IAAI,IAAI,IAAI,EAAE;AAC7B,UAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,UAAM,QAAQ,OAAO,IAAI,OAAO;AAEhC,QAAI,OAAO;AACT,YAAM,IAAI,OAAM,YAAO,IAAI,mBAAmB,MAA9B,YAAmC,KAAK;AAAA,IAC1D;AAEA,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,oCAAoC;AAAA,IACtD;AAIA,UAAM,UAAU,iBAAiB,IAAI,IAAI;AACzC,QAAI,QAAS,QAAO;AAEpB,UAAM,UAAU,KAAK,aAAa,MAAM,MAAM;AAC9C,qBAAiB,IAAI,MAAM,OAAO;AAClC,YAAQ,QAAQ,MAAM,iBAAiB,OAAO,IAAI,CAAC;AACnD,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,aACZ,MACA,QACkB;AAlJtB;AAqJI,UAAM,gBAAgB,OAAO,IAAI,OAAO;AACxC,QAAI,OAAO,iBAAiB,aAAa;AACvC,YAAM,SAAS,KAAK;AAAA,SAClB,kBAAa,QAAQ,oBAAoB,MAAzC,YAA8C;AAAA,MAChD;AAGA,UAAI,OAAO,WAAW,GAAG;AACvB,cAAM,SAAS,aAAa,QAAQ,mBAAmB;AACvD,YAAI,OAAQ,QAAO,KAAK,MAAM;AAAA,MAChC;AAEA,UAAI,CAAC,iBAAiB,CAAC,OAAO,SAAS,aAAa,GAAG;AACrD,cAAM,IAAI,MAAM,qDAAgD;AAAA,MAClE;AAGA,YAAM,YAAY,OAAO,OAAO,CAAC,MAAM,MAAM,aAAa;AAC1D,UAAI,UAAU,WAAW,GAAG;AAC1B,qBAAa,WAAW,oBAAoB;AAAA,MAC9C,OAAO;AACL,qBAAa;AAAA,UACX;AAAA,UACA,KAAK,UAAU,SAAS;AAAA,QAC1B;AAAA,MACF;AACA,mBAAa,WAAW,mBAAmB;AAAA,IAC7C;AAEA,UAAM,WAAW,oBAAoB;AAErC,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ;AAAA,MACA,cAAc,KAAK,OAAO;AAAA,MAC1B,WAAW,KAAK,OAAO;AAAA,IACzB,CAAC;AAED,QAAI,SAAU,MAAK,IAAI,iBAAiB,QAAQ;AAEhD,UAAM,SAAS,MAAM,KAAK,YAAY,IAAI;AAC1C,UAAM,UAAU,KAAK,gBAAgB,MAAM;AAC3C,SAAK,MAAM,IAAI,OAAO;AACtB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAsC;AAC1C,UAAM,UAAU,KAAK,MAAM,IAAI;AAC/B,QAAI,CAAC,QAAS,QAAO;AAErB,QAAI,KAAK,MAAM,UAAU,OAAO,GAAG;AACjC,UAAI;AACF,eAAO,MAAM,KAAK,QAAQ,QAAQ,YAAY;AAAA,MAChD,SAAQ;AACN,aAAK,MAAM,MAAM;AACjB,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBAAoC;AACxC,WAAQ,MAAM,KAAK,WAAW,MAAO;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,UAA6B;AACjC,UAAM,QAAQ,MAAM,KAAK,mBAAmB;AAC5C,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,uBAAuB;AAAA,MAC5D,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,IAC9C,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,2BAA2B;AACxD,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAe;AACb,SAAK,MAAM,MAAM;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,qBAAsC;AAC1C,UAAM,UAAU,MAAM,KAAK,WAAW;AACtC,QAAI,CAAC;AACH,YAAM,IAAI,MAAM,mDAA8C;AAChE,WAAO,QAAQ;AAAA,EACjB;AAAA,EAEA,MAAc,QAAQ,cAAwC;AAC5D,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,WAAW,KAAK,OAAO;AAAA,IACzB,CAAC;AACD,UAAM,SAAS,MAAM,KAAK,YAAY,IAAI;AAC1C,UAAM,UAAU,KAAK,gBAAgB,MAAM;AAC3C,SAAK,MAAM,IAAI,OAAO;AACtB,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,YAAY,MAA+C;AA3Q3E;AA4QI,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,oBAAoB;AAAA,MACzD,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,oCAAoC;AAAA,MAC/D,MAAM,KAAK,SAAS;AAAA,IACtB,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAO,MAAM,IAChB,KAAK,EACL,MAAM,OAAO,EAAE,OAAO,gBAAgB,EAAE;AAI3C,YAAM,IAAI,OAAM,SAAI,sBAAJ,YAAyB,IAAI,KAAK;AAAA,IACpD;AACA,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA,EAEQ,gBAAgB,QAAgC;AACtD,WAAO;AAAA,MACL,aAAa,OAAO;AAAA,MACpB,cAAc,OAAO;AAAA,MACrB,WAAW,KAAK,IAAI,IAAI,OAAO,aAAa;AAAA,MAC5C,OAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;AAMA,IAAM,aAAN,MAAiB;AAAA,EACf,YAA6B,QAAqB;AAArB;AAAA,EAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUnD,MAAM,aAAuC;AAC3C,UAAM,QAAQ,MAAM,KAAK,OAAO,mBAAmB;AACnD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,OAAO,4BAA4B;AAAA,MACxE,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,IAC9C,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,gCAAgC;AAC7D,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,MACJ,QACA,aAC+B;AAC/B,UAAM,QAAQ,MAAM,KAAK,OAAO,mBAAmB;AACnD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,OAAO,0BAA0B;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,QAAQ,YAAY,CAAC;AAAA,IAC9C,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,EAAE,OAAO,UAAU,EAAE;AAGhE,YAAM,IAAI,MAAM,IAAI,KAAK;AAAA,IAC3B;AACA,WAAO,IAAI,KAAK;AAAA,EAClB;AACF;AAMA,IAAM,QAAN,MAAY;AAAA,EACV,YAA6B,QAAqB;AAArB;AAAA,EAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAenD,MAAM,KAAK,SAAyD;AApXtE;AAqXI,UAAM,QAAQ,MAAM,KAAK,OAAO,mBAAmB;AACnD,UAAM,SAAsB,MAAM,QAAQ,OAAO,IAC7C,EAAE,UAAU,QAAQ,IACpB;AAEJ,WAAO,MAAM,GAAG,KAAK,OAAO,OAAO,qBAAqB;AAAA,MACtD,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB,UAAU,OAAO;AAAA,QACjB,QAAO,YAAO,UAAP,YAAgB;AAAA,MACzB,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,SAAS,SAAuD;AAjZxE;AAkZI,UAAM,MAAM,MAAM,KAAK,KAAK,OAAO;AACnC,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAO,MAAM,IAChB,KAAK,EACL,MAAM,OAAO,EAAE,OAAO,iBAAiB,EAAE;AAC5C,YAAM,IAAI,MAAM,IAAI,KAAK;AAAA,IAC3B;AAEA,UAAM,UAAS,SAAI,SAAJ,mBAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AAEpB,UAAM,UAAU,IAAI,YAAY;AAChC,QAAI,WAAW;AAEf,WAAO,MAAM;AACX,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AAEV,YAAM,QAAQ,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAEpD,iBAAW,QAAQ,MAAM,MAAM,IAAI,GAAG;AACpC,YAAI,CAAC,KAAK,WAAW,QAAQ,EAAG;AAChC,cAAM,OAAO,KAAK,MAAM,CAAC,EAAE,KAAK;AAChC,YAAI,SAAS,SAAU;AACvB,YAAI;AACF,gBAAM,SAAS,KAAK,MAAM,IAAI;AAK9B,gBAAM,QAAO,0CAAO,eAAP,mBAAoB,OAApB,mBAAwB,YAAxB,mBAAiC,UAAjC,mBAAyC,OAAzC,mBAA6C,SAA7C,YAAqD;AAClE,sBAAY;AAAA,QACd,SAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;;;AH/XY,mBACE,KADF;AAlCL,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA,SAAS,CAAC,SAAS;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAwB;AACtB,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,KAAK;AAEhD,iBAAe,cAAc;AAC3B,iBAAa,IAAI;AAEjB,QAAI;AACF,YAAM,SAAS,IAAI,YAAY,EAAE,UAAU,aAAa,QAAQ,CAAC;AACjE,YAAM,OAAO,MAAM,MAAM;AAAA,IAC3B,SAAS,KAAK;AACZ,mBAAa,KAAK;AAClB,yCAAU,eAAe,QAAQ,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACzE;AAAA,EACF;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,MACV,WAAW,gCAAa;AAAA,MACxB,cAAY;AAAA,MAEX,sBACG,sBACC,8BACC,iCACE;AAAA,4BAAC,aAAU;AAAA,QAAE;AAAA,SAEf;AAAA;AAAA,EAER;AAEJ;AAEA,SAAS,YAAY;AACnB,SACE;AAAA,IAAC;AAAA;AAAA,MACC,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,MAAM;AAAA,MACN,eAAa;AAAA,MAEb;AAAA,QAAC;AAAA;AAAA,UACC,GACE;AAAA;AAAA,MAEJ;AAAA;AAAA,EACF;AAEJ;;;AIpFA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAAA;AAAA,OACK;AA0EH,gBAAAC,YAAA;AAzDJ,IAAM,eAAe,cAAqC,IAAI;AAevD,SAAS,cAAc,IAA6C;AAA7C,eAAE,WAtChC,IAsC8B,IAAe,mBAAf,IAAe,CAAb;AAC9B,QAAM,CAAC,MAAM,IAAIC,UAAS,MAAM,IAAI,YAAY,MAAM,CAAC;AACvD,QAAM,CAAC,MAAM,OAAO,IAAIA,UAA0B,IAAI;AACtD,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAG/C,YAAU,MAAM;AACd,QAAI,YAAY;AAEhB,mBAAe,UAAU;AACvB,UAAI;AACF,cAAM,UAAU,MAAM,OAAO,WAAW;AACxC,YAAI,CAAC,WAAW,WAAW;AACzB,uBAAa,KAAK;AAClB;AAAA,QACF;AACA,cAAM,WAAW,MAAM,OAAO,QAAQ;AACtC,YAAI,CAAC,UAAW,SAAQ,QAAQ;AAAA,MAClC,SAAQ;AAAA,MAER,UAAE;AACA,YAAI,CAAC,UAAW,cAAa,KAAK;AAAA,MACpC;AAAA,IACF;AAEA,SAAK,QAAQ;AACb,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,QAAQ;AAAA,IACZ,CAAC,WAA0B,OAAO,MAAM,MAAM;AAAA,IAC9C,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,SAAS,YAAY,MAAM;AAC/B,WAAO,OAAO;AACd,YAAQ,IAAI;AAAA,EACd,GAAG,CAAC,MAAM,CAAC;AAEX,SACE,gBAAAD;AAAA,IAAC,aAAa;AAAA,IAAb;AAAA,MACC,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,iBAAiB,CAAC,CAAC;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MAEC;AAAA;AAAA,EACH;AAEJ;AASO,SAAS,eAA+B;AAC7C,QAAM,MAAM,WAAW,YAAY;AACnC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,SAAO;AACT;;;AC5GA,SAAS,aAAAE,YAAW,QAAQ,YAAAC,iBAAgB;AAoDrC,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF,IAA6B,CAAC,GAA2B;AACvD,QAAM,EAAE,OAAO,IAAI,aAAa;AAChC,QAAM,CAAC,OAAO,QAAQ,IAAIC,UAAuB,IAAI;AACrD,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAG/C,QAAM,eAAe,OAAO,SAAS;AACrC,QAAM,aAAa,OAAO,OAAO;AACjC,QAAM,gBAAgB,OAAO,UAAU;AACvC,eAAa,UAAU;AACvB,aAAW,UAAU;AACrB,gBAAc,UAAU;AAExB,EAAAC,WAAU,MAAM;AACd,UAAM,OAAO,IAAI,IAAI,OAAO,SAAS,IAAI,EAAE,aAAa,IAAI,MAAM;AAElE,QAAI,CAAC,MAAM;AACT,mBAAa,KAAK;AAClB;AAAA,IACF;AAKA,UAAM,WAAW,YAAY,IAAI;AACjC,QAAI,eAAe,QAAQ,QAAQ,EAAG;AACtC,mBAAe,QAAQ,UAAU,GAAG;AAEpC,WACG,eAAe,EACf,KAAK,CAAC,YAAY;AAtFzB;AAuFQ,qBAAe,WAAW,QAAQ;AAClC,yBAAa,YAAb,sCAAuB;AACvB,UAAI,cAAc,SAAS;AACzB,eAAO,SAAS,QAAQ,cAAc,OAAO;AAAA,MAC/C;AAAA,IACF,CAAC,EACA,MAAM,CAAC,QAAiB;AA7F/B;AA8FQ,qBAAe,WAAW,QAAQ;AAClC,cAAQ,MAAM,qCAAqC,GAAG;AACtD,YAAM,gBACJ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,KAAK,cAAc;AACtE,eAAS,aAAa;AACtB,mBAAa,KAAK;AAClB,uBAAW,YAAX,oCAAqB;AAAA,IACvB,CAAC;AAAA,EAEL,GAAG,CAAC,MAAM,CAAC;AAEX,SAAO,EAAE,WAAW,MAAM;AAC5B;","names":["useState","jsx","useState","useEffect","useState","useState","useEffect"]}
+{"version":3,"sources":["../../src/react/login-button.tsx","../../src/errors.ts","../../src/pkce.ts","../../src/storage.ts","../../src/client.ts","../../src/react/proma-provider.tsx","../../src/react/use-oauth-callback.ts"],"sourcesContent":["import { type ReactNode, useState } from 'react';\n\nimport { PromaClient } from '../client';\nimport type { OAuthScope } from '../types';\n\ninterface LoginWithPromaProps {\n  clientId: string;\n  redirectUri: string;\n  scopes?: OAuthScope[];\n  baseUrl?: string;\n  onError?: (error: Error) => void;\n  children?: ReactNode;\n  className?: string;\n}\n\n/**\n * A ready-to-use \"Login with Proma\" button.\n *\n * @example\n * <LoginWithProma\n *   clientId=\"proma_app_abc123\"\n *   redirectUri=\"https://myapp.com/callback\"\n *   scopes={['profile', 'credits']}\n * />\n */\nexport function LoginWithProma({\n  clientId,\n  redirectUri,\n  scopes = ['profile'],\n  baseUrl,\n  onError,\n  children,\n  className,\n}: LoginWithPromaProps) {\n  const [isLoading, setIsLoading] = useState(false);\n\n  async function handleClick() {\n    setIsLoading(true);\n\n    try {\n      const client = new PromaClient({ clientId, redirectUri, baseUrl });\n      await client.login(scopes);\n    } catch (err) {\n      setIsLoading(false);\n      onError?.(err instanceof Error ? err : new Error('Authorization failed'));\n    }\n  }\n\n  return (\n    <button\n      type={'button'}\n      onClick={handleClick}\n      disabled={isLoading}\n      className={className ?? 'proma-login-button'}\n      aria-label={'Login with Proma'}\n    >\n      {isLoading\n        ? 'Redirecting…'\n        : (children ?? (\n            <>\n              <PromaLogo />\n              Login with Proma\n            </>\n          ))}\n    </button>\n  );\n}\n\nfunction PromaLogo() {\n  return (\n    <svg\n      width={16}\n      height={16}\n      viewBox={'0 0 24 24'}\n      fill={'currentColor'}\n      aria-hidden={'true'}\n    >\n      <path\n        d={\n          'M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 18c-4.41 0-8-3.59-8-8s3.59-8 8-8 8 3.59 8 8-3.59 8-8 8zm-1-13h2v6h-2zm0 8h2v2h-2z'\n        }\n      />\n    </svg>\n  );\n}\n","// Structured errors thrown by SDK methods. Apps can `instanceof`-check these\n// to react gracefully (e.g. prompt the user to top up or raise a per-app cap).\n\nexport class PromaError extends Error {\n  readonly status: number;\n  readonly code: string;\n\n  constructor(message: string, code: string, status: number) {\n    super(message);\n    this.name = 'PromaError';\n    this.code = code;\n    this.status = status;\n  }\n}\n\nexport class InsufficientCreditsError extends PromaError {\n  constructor() {\n    super(\n      'The user has insufficient credits — prompt them to top up.',\n      'insufficient_credits',\n      402,\n    );\n    this.name = 'InsufficientCreditsError';\n  }\n}\n\nexport class AppSpendingLimitExceededError extends PromaError {\n  readonly monthlyLimitMicroCredits: number | null;\n  readonly monthToDateSpendMicroCredits: number | null;\n\n  constructor(\n    monthlyLimitMicroCredits: number | null,\n    monthToDateSpendMicroCredits: number | null,\n  ) {\n    super(\n      'This app has reached its monthly spending limit set by the user.',\n      'app_limit_exceeded',\n      403,\n    );\n    this.name = 'AppSpendingLimitExceededError';\n    this.monthlyLimitMicroCredits = monthlyLimitMicroCredits;\n    this.monthToDateSpendMicroCredits = monthToDateSpendMicroCredits;\n  }\n}\n\nexport class AppLimitNotSetError extends PromaError {\n  constructor() {\n    super(\n      'The user has not set a spending limit for this app yet — direct them to /home/my-apps.',\n      'app_limit_not_set',\n      403,\n    );\n    this.name = 'AppLimitNotSetError';\n  }\n}\n\ninterface GatewayErrorBody {\n  error?: string;\n  reason?: string;\n  limit?: number;\n  spent?: number;\n}\n\nexport function errorFromGatewayResponse(\n  status: number,\n  body: GatewayErrorBody,\n): PromaError {\n  const code = body.error ?? body.reason ?? 'unknown_error';\n  switch (code) {\n    case 'insufficient_credits':\n      return new InsufficientCreditsError();\n    case 'app_limit_exceeded':\n      return new AppSpendingLimitExceededError(\n        body.limit ?? null,\n        body.spent ?? null,\n      );\n    case 'app_limit_not_set':\n      return new AppLimitNotSetError();\n    default:\n      return new PromaError(\n        body.error ?? `Gateway error (${status})`,\n        code,\n        status,\n      );\n  }\n}\n","/**\n * PKCE helpers — browser + Node 18+ compatible via SubtleCrypto.\n */\n\nconst PKCE_STORAGE_KEY = 'proma_code_verifier';\n\n/**\n * Generates a cryptographically random code_verifier (43–128 chars from unreserved character set).\n */\nexport function generateCodeVerifier(): string {\n  const bytes = new Uint8Array(32);\n  crypto.getRandomValues(bytes);\n  return base64url(bytes);\n}\n\n/**\n * Derives the code_challenge from a code_verifier using SHA-256 (S256 method).\n */\nexport async function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const hash = await crypto.subtle.digest('SHA-256', data);\n  return base64url(new Uint8Array(hash));\n}\n\n/**\n * Saves the code_verifier to localStorage for retrieval after the redirect.\n */\nexport function saveCodeVerifier(verifier: string): void {\n  if (typeof localStorage !== 'undefined') {\n    localStorage.setItem(PKCE_STORAGE_KEY, verifier);\n  }\n}\n\n/**\n * Reads and removes the code_verifier from localStorage.\n */\nexport function consumeCodeVerifier(): string | null {\n  if (typeof localStorage === 'undefined') return null;\n  const verifier = localStorage.getItem(PKCE_STORAGE_KEY);\n  localStorage.removeItem(PKCE_STORAGE_KEY);\n  return verifier;\n}\n\nfunction base64url(bytes: Uint8Array): string {\n  const base64 = btoa(String.fromCharCode(...bytes));\n  return base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n}\n","import type { Session, TokenStorage } from './types';\n\nconst SESSION_KEY = 'proma_session';\n\nexport class TokenStore {\n  constructor(private readonly storage: TokenStorage) {}\n\n  get(): Session | null {\n    try {\n      const raw = this.storage.getItem(SESSION_KEY);\n      if (!raw) return null;\n      return JSON.parse(raw) as Session;\n    } catch {\n      return null;\n    }\n  }\n\n  set(session: Session): void {\n    this.storage.setItem(SESSION_KEY, JSON.stringify(session));\n  }\n\n  clear(): void {\n    this.storage.removeItem(SESSION_KEY);\n    // Also clear the PKCE verifier if present\n    this.storage.removeItem('proma_code_verifier');\n  }\n\n  isExpired(session: Session): boolean {\n    // Consider expired 30 seconds before actual expiry\n    return Date.now() >= session.expiresAt - 30_000;\n  }\n}\n\n/** Default in-memory storage for environments without localStorage (SSR, Node). */\nexport class MemoryStorage implements TokenStorage {\n  private map = new Map<string, string>();\n  getItem(key: string) {\n    return this.map.get(key) ?? null;\n  }\n  setItem(key: string, value: string) {\n    this.map.set(key, value);\n  }\n  removeItem(key: string) {\n    this.map.delete(key);\n  }\n}\n\nexport function getDefaultStorage(): TokenStorage {\n  if (typeof localStorage !== 'undefined') return localStorage;\n  return new MemoryStorage();\n}\n","import { errorFromGatewayResponse } from './errors';\nimport {\n  consumeCodeVerifier,\n  generateCodeChallenge,\n  generateCodeVerifier,\n  saveCodeVerifier,\n} from './pkce';\nimport { TokenStore, getDefaultStorage } from './storage';\nimport type {\n  BalanceResponse,\n  ChatMessage,\n  ChatOptions,\n  ChatStructuredOptions,\n  OAuthScope,\n  PromaClientConfig,\n  Session,\n  SpendCreditsResponse,\n  TokenResponse,\n  UserInfo,\n} from './types';\n\nconst DEFAULT_BASE_URL = 'https://www.proma.dev';\n\n/**\n * Deduplicates concurrent handleCallback() calls with the same code.\n * This handles React Strict Mode's double-effect invocation, which would\n * otherwise consume the PKCE verifier and state on the first call, leaving\n * nothing for the second call.\n */\nconst pendingCallbacks = new Map<string, Promise<Session>>();\n\nexport class PromaClient {\n  readonly baseUrl: string;\n  private readonly store: TokenStore;\n  private readonly defaultScopes: OAuthScope[];\n\n  /** Credits API — requires the `credits` scope. */\n  readonly credits: CreditsApi;\n\n  /** AI gateway API — requires the `ai:chat` scope. */\n  readonly ai: AiApi;\n\n  constructor(private readonly config: PromaClientConfig) {\n    this.baseUrl = config.baseUrl ?? DEFAULT_BASE_URL;\n    this.store = new TokenStore(config.storage ?? getDefaultStorage());\n    this.defaultScopes = config.scopes ?? ['profile'];\n    this.credits = new CreditsApi(this);\n    this.ai = new AiApi(this);\n  }\n\n  // ---------------------------------------------------------------------------\n  // Auth\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Redirects the user to Proma's login page.\n   * Call this on a button click — it will navigate away from the current page.\n   *\n   * @example\n   * button.onclick = () => proma.login()\n   */\n  async login(scopes?: OAuthScope[]): Promise<void> {\n    const url = await this.buildAuthorizeUrl(scopes ?? this.defaultScopes);\n    window.location.href = url;\n  }\n\n  /**\n   * Builds the authorization URL without navigating.\n   * Useful if you want to control the redirect yourself.\n   */\n  async buildAuthorizeUrl(\n    scopes: OAuthScope[] = this.defaultScopes,\n  ): Promise<string> {\n    const verifier = generateCodeVerifier();\n    const challenge = await generateCodeChallenge(verifier);\n    saveCodeVerifier(verifier);\n\n    // Generate and persist state for CSRF protection.\n    // Use a set so multiple concurrent login() calls don't clobber each other\n    // (e.g. auth guards that call login() again on the callback page).\n    const state = crypto.randomUUID();\n    if (typeof localStorage !== 'undefined') {\n      const stored = JSON.parse(\n        localStorage.getItem('proma_oauth_states') ?? '[]',\n      ) as string[];\n      stored.push(state);\n      localStorage.setItem(\n        'proma_oauth_states',\n        JSON.stringify(stored.slice(-10)),\n      );\n    }\n\n    const url = new URL('/api/oauth/authorize', this.baseUrl);\n    url.searchParams.set('client_id', this.config.clientId);\n    url.searchParams.set('redirect_uri', this.config.redirectUri);\n    url.searchParams.set('response_type', 'code');\n    url.searchParams.set('scope', scopes.join(' '));\n    url.searchParams.set('state', state);\n    url.searchParams.set('code_challenge', challenge);\n    url.searchParams.set('code_challenge_method', 'S256');\n\n    return url.toString();\n  }\n\n  /**\n   * Handles the OAuth callback. Call this on your redirect page.\n   * Reads the `code` from the URL, exchanges it for tokens, and stores the session.\n   *\n   * @param url - Defaults to `window.location.href`\n   * @returns The new session\n   *\n   * @example\n   * // pages/callback.tsx\n   * useEffect(() => {\n   *   proma.handleCallback().then(session => {\n   *     router.push('/dashboard')\n   *   })\n   * }, [])\n   */\n  async handleCallback(url?: string): Promise<Session> {\n    const href =\n      url ?? (typeof window !== 'undefined' ? window.location.href : '');\n    const params = new URL(href).searchParams;\n    const code = params.get('code');\n    const error = params.get('error');\n\n    if (error) {\n      throw new Error(params.get('error_description') ?? error);\n    }\n\n    if (!code) {\n      throw new Error('No authorization code found in URL');\n    }\n\n    // Deduplicate: React Strict Mode fires effects twice with the same code.\n    // Return the in-flight promise so the state/verifier are only consumed once.\n    const pending = pendingCallbacks.get(code);\n    if (pending) return pending;\n\n    const promise = this.exchangeCode(code, params);\n    pendingCallbacks.set(code, promise);\n    promise.finally(() => pendingCallbacks.delete(code));\n    return promise;\n  }\n\n  private async exchangeCode(\n    code: string,\n    params: URLSearchParams,\n  ): Promise<Session> {\n    // Validate state parameter to prevent CSRF attacks.\n    // Accepts any state from the stored set (handles concurrent/repeated login calls).\n    const returnedState = params.get('state');\n    if (typeof localStorage !== 'undefined') {\n      const stored = JSON.parse(\n        localStorage.getItem('proma_oauth_states') ?? '[]',\n      ) as string[];\n\n      // Fall back to legacy single-value key for backward compatibility\n      if (stored.length === 0) {\n        const legacy = localStorage.getItem('proma_oauth_state');\n        if (legacy) stored.push(legacy);\n      }\n\n      if (!returnedState || !stored.includes(returnedState)) {\n        throw new Error('Invalid state parameter — possible CSRF attack');\n      }\n\n      // Remove the consumed state and persist the remainder\n      const remaining = stored.filter((s) => s !== returnedState);\n      if (remaining.length === 0) {\n        localStorage.removeItem('proma_oauth_states');\n      } else {\n        localStorage.setItem('proma_oauth_states', JSON.stringify(remaining));\n      }\n      localStorage.removeItem('proma_oauth_state'); // clean up legacy key\n    }\n\n    const verifier = consumeCodeVerifier();\n\n    const body = new URLSearchParams({\n      grant_type: 'authorization_code',\n      code,\n      redirect_uri: this.config.redirectUri,\n      client_id: this.config.clientId,\n    });\n\n    if (verifier) body.set('code_verifier', verifier);\n\n    const tokens = await this.fetchTokens(body);\n    const session = this.tokensToSession(tokens);\n    this.store.set(session);\n    return session;\n  }\n\n  /**\n   * Returns the current session (access token, refresh token, expiry).\n   * Automatically refreshes the access token if it is expired.\n   * Returns `null` if the user is not logged in.\n   */\n  async getSession(): Promise<Session | null> {\n    const session = this.store.get();\n    if (!session) return null;\n\n    if (this.store.isExpired(session)) {\n      try {\n        return await this.refresh(session.refreshToken);\n      } catch {\n        this.store.clear();\n        return null;\n      }\n    }\n\n    return session;\n  }\n\n  /**\n   * Returns `true` if the user has a valid (or refreshable) session.\n   */\n  async isAuthenticated(): Promise<boolean> {\n    return (await this.getSession()) !== null;\n  }\n\n  /**\n   * Fetches the logged-in user's profile.\n   * Requires the `profile` scope.\n   */\n  async getUser(): Promise<UserInfo> {\n    const token = await this.requireAccessToken();\n    const res = await fetch(`${this.baseUrl}/api/oauth/userinfo`, {\n      headers: { Authorization: `Bearer ${token}` },\n    });\n    if (!res.ok) throw new Error('Failed to fetch user info');\n    return res.json() as Promise<UserInfo>;\n  }\n\n  /**\n   * Clears the stored session and logs the user out.\n   * Does not revoke the token server-side.\n   */\n  logout(): void {\n    this.store.clear();\n  }\n\n  // ---------------------------------------------------------------------------\n  // Internal helpers (used by sub-APIs)\n  // ---------------------------------------------------------------------------\n\n  async requireAccessToken(): Promise<string> {\n    const session = await this.getSession();\n    if (!session)\n      throw new Error('Not authenticated — call proma.login() first');\n    return session.accessToken;\n  }\n\n  private async refresh(refreshToken: string): Promise<Session> {\n    const body = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: refreshToken,\n      client_id: this.config.clientId,\n    });\n    const tokens = await this.fetchTokens(body);\n    const session = this.tokensToSession(tokens);\n    this.store.set(session);\n    return session;\n  }\n\n  private async fetchTokens(body: URLSearchParams): Promise<TokenResponse> {\n    const res = await fetch(`${this.baseUrl}/api/oauth/token`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n      body: body.toString(),\n    });\n    if (!res.ok) {\n      const err = (await res\n        .json()\n        .catch(() => ({ error: 'unknown_error' }))) as {\n        error: string;\n        error_description?: string;\n      };\n      throw new Error(err.error_description ?? err.error);\n    }\n    return res.json() as Promise<TokenResponse>;\n  }\n\n  private tokensToSession(tokens: TokenResponse): Session {\n    return {\n      accessToken: tokens.access_token,\n      refreshToken: tokens.refresh_token,\n      expiresAt: Date.now() + tokens.expires_in * 1000,\n      scope: tokens.scope,\n    };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Credits API\n// ---------------------------------------------------------------------------\n\nclass CreditsApi {\n  constructor(private readonly client: PromaClient) {}\n\n  /**\n   * Returns the user's current credit balance.\n   * Requires scope: `credits`\n   *\n   * @example\n   * const { balance, formatted } = await proma.credits.getBalance()\n   * console.log(`You have ${formatted}`) // \"You have $1.23\"\n   */\n  async getBalance(): Promise<BalanceResponse> {\n    const token = await this.client.requireAccessToken();\n    const res = await fetch(`${this.client.baseUrl}/api/sdk/credits/balance`, {\n      headers: { Authorization: `Bearer ${token}` },\n    });\n    if (!res.ok) throw new Error('Failed to fetch credit balance');\n    return res.json() as Promise<BalanceResponse>;\n  }\n\n  /**\n   * Deducts credits from the user's account.\n   * Requires scope: `credits`\n   *\n   * @param amount - Micro-credits to spend. 1,000,000 = $1.00\n   * @param description - Optional description for the transaction ledger.\n   *\n   * @example\n   * await proma.credits.spend(500_000, 'Generated a report')\n   */\n  async spend(\n    amount: number,\n    description?: string,\n  ): Promise<SpendCreditsResponse> {\n    const token = await this.client.requireAccessToken();\n    const res = await fetch(`${this.client.baseUrl}/api/sdk/credits/spend`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({ amount, description }),\n    });\n    if (!res.ok) {\n      const err = (await res.json().catch(() => ({ error: 'unknown' }))) as {\n        error: string;\n      };\n      throw new Error(err.error);\n    }\n    return res.json() as Promise<SpendCreditsResponse>;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// AI API\n// ---------------------------------------------------------------------------\n\nclass AiApi {\n  constructor(private readonly client: PromaClient) {}\n\n  /**\n   * Sends a chat request through the Proma AI gateway (Gemini).\n   * Credits are deducted automatically per token used.\n   * Requires scope: `ai:chat`\n   *\n   * Returns a streaming `Response` — iterate SSE chunks or use a helper library.\n   *\n   * @example\n   * const stream = await proma.ai.chat({\n   *   messages: [{ role: 'user', content: 'Explain quantum entanglement simply.' }]\n   * })\n   * const reader = stream.body.getReader()\n   */\n  async chat(options: ChatOptions | ChatMessage[]): Promise<Response> {\n    const token = await this.client.requireAccessToken();\n    const params: ChatOptions = Array.isArray(options)\n      ? { messages: options }\n      : options;\n\n    const provider = params.provider ?? 'gemini';\n    const model =\n      params.model ?? (provider === 'gemini' ? 'gemini-2.0-flash' : '');\n\n    if (!model) {\n      throw new Error(\n        `model is required when provider is \"${provider}\" — pass e.g. { provider: \"${provider}\", model: \"...\" }`,\n      );\n    }\n\n    const response = await fetch(`${this.client.baseUrl}/api/gateway/chat`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        provider,\n        model,\n        messages: params.messages,\n        maxOutputTokens: params.maxOutputTokens,\n      }),\n    });\n\n    if (!response.ok) {\n      const body = (await response\n        .json()\n        .catch(() => ({ error: 'unknown_error' }))) as Record<string, unknown>;\n      throw errorFromGatewayResponse(response.status, body);\n    }\n\n    return response;\n  }\n\n  /**\n   * Convenience wrapper around `chat` that collects the full streamed text.\n   * Use this when you don't need streaming and just want the final string.\n   *\n   * @example\n   * const text = await proma.ai.chatText({\n   *   messages: [{ role: 'user', content: 'Hello!' }]\n   * })\n   * console.log(text)\n   */\n  async chatText(options: ChatOptions | ChatMessage[]): Promise<string> {\n    // chat() throws a structured PromaError on non-OK responses, so by the\n    // time we get here the response is a successful plain-text stream\n    // (Vercel AI SDK's toTextStreamResponse — no JSON envelope).\n    const res = await this.chat(options);\n\n    const reader = res.body?.getReader();\n    if (!reader) return '';\n\n    const decoder = new TextDecoder();\n    let fullText = '';\n\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      fullText += decoder.decode(value, { stream: true });\n    }\n    fullText += decoder.decode();\n\n    return fullText;\n  }\n\n  /**\n   * Sends a chat request and parses the response as JSON. The model is nudged\n   * with a system hint to emit JSON, and common wrappers (```json fences,\n   * leading/trailing prose) are stripped before parsing.\n   *\n   * Best-effort: if the model returns malformed JSON, `fallback` is returned\n   * when provided; otherwise an error is thrown. For guaranteed schema\n   * compliance use `chatStructured()` instead.\n   *\n   * @example\n   * const { title, tags } = await proma.ai.chatJSON<{ title: string; tags: string[] }>({\n   *   messages: [{ role: 'user', content: 'Suggest a title and 3 tags for this post' }],\n   * })\n   */\n  async chatJSON<T = unknown>(\n    options: ChatOptions | ChatMessage[],\n    fallback?: T,\n  ): Promise<T> {\n    const params: ChatOptions = Array.isArray(options)\n      ? { messages: options }\n      : options;\n\n    const hasSystem = params.messages.some((m) => m.role === 'system');\n    const messages: ChatMessage[] = hasSystem\n      ? params.messages\n      : [\n          {\n            role: 'system',\n            content:\n              'You must reply with a single valid JSON value and nothing else. No prose, no markdown fences.',\n          },\n          ...params.messages,\n        ];\n\n    const text = await this.chatText({ ...params, messages });\n    const cleaned = stripJsonFences(text);\n\n    try {\n      return JSON.parse(cleaned) as T;\n    } catch (err) {\n      if (fallback !== undefined) return fallback;\n      throw new Error(\n        `chatJSON: model returned invalid JSON (${(err as Error).message}). Pass a fallback to tolerate parse failures, or use chatStructured() for guaranteed schema compliance.`,\n      );\n    }\n  }\n\n  /**\n   * Sends a chat request with a JSON Schema and returns a typed object that is\n   * guaranteed to match the schema (enforced provider-side via structured\n   * output / function calling).\n   *\n   * @example\n   * interface Summary { score: number; tags: string[] }\n   * const result = await proma.ai.chatStructured<Summary>({\n   *   messages: [{ role: 'user', content: 'Rate and tag this article' }],\n   *   schema: {\n   *     type: 'object',\n   *     properties: {\n   *       score: { type: 'number' },\n   *       tags: { type: 'array', items: { type: 'string' } },\n   *     },\n   *     required: ['score', 'tags'],\n   *   },\n   * })\n   */\n  async chatStructured<T = unknown>(\n    options: ChatStructuredOptions,\n  ): Promise<T> {\n    const token = await this.client.requireAccessToken();\n    const provider = options.provider ?? 'gemini';\n    const model =\n      options.model ?? (provider === 'gemini' ? 'gemini-2.0-flash' : '');\n\n    if (!model) {\n      throw new Error(\n        `model is required when provider is \"${provider}\" — pass e.g. { provider: \"${provider}\", model: \"...\" }`,\n      );\n    }\n\n    const response = await fetch(`${this.client.baseUrl}/api/gateway/chat`, {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({\n        provider,\n        model,\n        messages: options.messages,\n        maxOutputTokens: options.maxOutputTokens,\n        responseFormat: {\n          type: 'json_schema',\n          ...(options.schemaName && { name: options.schemaName }),\n          schema: options.schema,\n        },\n      }),\n    });\n\n    if (!response.ok) {\n      const body = (await response\n        .json()\n        .catch(() => ({ error: 'unknown_error' }))) as Record<string, unknown>;\n      throw errorFromGatewayResponse(response.status, body);\n    }\n\n    const payload = (await response.json()) as { object: T };\n    return payload.object;\n  }\n}\n\nfunction stripJsonFences(text: string): string {\n  const trimmed = text.trim();\n  const fenced = trimmed.match(/^```(?:json)?\\s*([\\s\\S]*?)\\s*```$/i);\n  if (fenced) return fenced[1]!.trim();\n\n  // Fall back to grabbing the outermost {...} or [...] block if the model wrapped\n  // the JSON in prose.\n  const firstBrace = trimmed.search(/[{[]/);\n  const lastBrace = Math.max(trimmed.lastIndexOf('}'), trimmed.lastIndexOf(']'));\n  if (firstBrace !== -1 && lastBrace > firstBrace) {\n    return trimmed.slice(firstBrace, lastBrace + 1);\n  }\n\n  return trimmed;\n}\n","import {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useState,\n} from 'react';\n\nimport { PromaClient } from '../client';\nimport type { OAuthScope, PromaClientConfig, UserInfo } from '../types';\n\ninterface PromaAuthState {\n  user: UserInfo | null;\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  /** Redirects the user to Proma's login page. */\n  login: (scopes?: OAuthScope[]) => Promise<void>;\n  /** Clears the session. */\n  logout: () => void;\n  /** The underlying PromaClient instance. */\n  client: PromaClient;\n}\n\nconst PromaContext = createContext<PromaAuthState | null>(null);\n\ntype PromaProviderProps = PromaClientConfig & {\n  children: React.ReactNode;\n};\n\n/**\n * Wraps your app with Proma auth context.\n * Call `usePromaAuth()` in any child component to access auth state.\n *\n * @example\n * <PromaProvider clientId=\"proma_app_xxx\" redirectUri=\"https://myapp.com/callback\">\n *   <App />\n * </PromaProvider>\n */\nexport function PromaProvider({ children, ...config }: PromaProviderProps) {\n  const [client] = useState(() => new PromaClient(config));\n  const [user, setUser] = useState<UserInfo | null>(null);\n  const [isLoading, setIsLoading] = useState(true);\n\n  // Restore session on mount\n  useEffect(() => {\n    let cancelled = false;\n\n    async function restore() {\n      try {\n        const session = await client.getSession();\n        if (!session || cancelled) {\n          setIsLoading(false);\n          return;\n        }\n        const userInfo = await client.getUser();\n        if (!cancelled) setUser(userInfo);\n      } catch {\n        // no valid session\n      } finally {\n        if (!cancelled) setIsLoading(false);\n      }\n    }\n\n    void restore();\n    return () => {\n      cancelled = true;\n    };\n  }, [client]);\n\n  // Handle ?autoLogin=1 redirected from the Proma marketplace.\n  // When a user clicks \"Login with Proma\" on proma.dev/apps/<id>, the\n  // marketplace sends them to the app's homepage with ?autoLogin=1 so\n  // that the PKCE verifier is stored on the correct origin.\n  useEffect(() => {\n    if (typeof window === 'undefined') return;\n    const params = new URL(window.location.href).searchParams;\n    if (params.get('autoLogin') !== '1') return;\n\n    // Clean the param from the URL immediately\n    params.delete('autoLogin');\n    const cleanUrl =\n      window.location.pathname +\n      (params.toString() ? '?' + params.toString() : '') +\n      window.location.hash;\n    window.history.replaceState(null, '', cleanUrl);\n\n    // Only redirect to login if the user has no active session\n    void client.getSession().then((session) => {\n      if (!session) void client.login();\n    });\n  }, [client]);\n\n  const login = useCallback(\n    (scopes?: OAuthScope[]) => client.login(scopes),\n    [client],\n  );\n\n  const logout = useCallback(() => {\n    client.logout();\n    setUser(null);\n  }, [client]);\n\n  return (\n    <PromaContext.Provider\n      value={{\n        user,\n        isLoading,\n        isAuthenticated: !!user,\n        login,\n        logout,\n        client,\n      }}\n    >\n      {children}\n    </PromaContext.Provider>\n  );\n}\n\n/**\n * Returns the current Proma auth state.\n * Must be used inside a `<PromaProvider>`.\n *\n * @example\n * const { user, isLoading, login, logout } = usePromaAuth()\n */\nexport function usePromaAuth(): PromaAuthState {\n  const ctx = useContext(PromaContext);\n  if (!ctx) {\n    throw new Error('usePromaAuth must be used inside <PromaProvider>');\n  }\n  return ctx;\n}\n","import { useEffect, useRef, useState } from 'react';\n\nimport type { Session } from '../types';\nimport { usePromaAuth } from './proma-provider';\n\ninterface UseOAuthCallbackOptions {\n  /**\n   * Path to navigate to after a successful login.\n   * Uses `window.location.replace` so the callback URL is not in the browser history.\n   */\n  redirectTo?: string;\n  /** Called with the new session after a successful login. */\n  onSuccess?: (session: Session) => void;\n  /** Called if the callback fails. */\n  onError?: (error: Error) => void;\n}\n\ninterface UseOAuthCallbackResult {\n  /** True while the token exchange is in flight. */\n  isLoading: boolean;\n  /** Set if the callback failed. */\n  error: Error | null;\n}\n\n/**\n * Handles the OAuth callback in a React SPA.\n * Place this on your `/callback` page — it reads the `code` from the URL,\n * exchanges it for tokens, then navigates to `redirectTo`.\n *\n * Handles React Strict Mode's double-invocation and dev HMR reloads.\n *\n * Works with Next.js, Vite, Remix, and any other React framework.\n *\n * @example\n * // React Router / Lovable\n * function CallbackPage() {\n *   const navigate = useNavigate();\n *   const { error } = useOAuthCallback({\n *     onSuccess: () => navigate('/dashboard', { replace: true }),\n *   });\n *   if (error) return <p>Login failed: {error.message}</p>;\n *   return <p>Completing login…</p>;\n * }\n *\n * @example\n * // Simple redirect (works everywhere)\n * function CallbackPage() {\n *   const { error } = useOAuthCallback({ redirectTo: '/dashboard' });\n *   if (error) return <p>Login failed: {error.message}</p>;\n *   return <p>Completing login…</p>;\n * }\n */\nexport function useOAuthCallback({\n  redirectTo,\n  onSuccess,\n  onError,\n}: UseOAuthCallbackOptions = {}): UseOAuthCallbackResult {\n  const { client } = usePromaAuth();\n  const [error, setError] = useState<Error | null>(null);\n  const [isLoading, setIsLoading] = useState(true);\n\n  // Refs so the effect only runs once (on mount) without stale-closure warnings.\n  const onSuccessRef = useRef(onSuccess);\n  const onErrorRef = useRef(onError);\n  const redirectToRef = useRef(redirectTo);\n  onSuccessRef.current = onSuccess;\n  onErrorRef.current = onError;\n  redirectToRef.current = redirectTo;\n\n  useEffect(() => {\n    const code = new URL(window.location.href).searchParams.get('code');\n\n    if (!code) {\n      setIsLoading(false);\n      return;\n    }\n\n    // Guard against React Strict Mode's double-invocation and HMR reloads.\n    // sessionStorage survives remounts (unlike useRef) but not a full page refresh,\n    // so a manual reload always retries the exchange cleanly.\n    const guardKey = `proma_cb_${code}`;\n    if (sessionStorage.getItem(guardKey)) return;\n    sessionStorage.setItem(guardKey, '1');\n\n    client\n      .handleCallback()\n      .then((session) => {\n        sessionStorage.removeItem(guardKey);\n        onSuccessRef.current?.(session);\n        if (redirectToRef.current) {\n          window.location.replace(redirectToRef.current);\n        }\n      })\n      .catch((err: unknown) => {\n        sessionStorage.removeItem(guardKey);\n        console.error('[proma-sdk] handleCallback failed', err);\n        const callbackError =\n          err instanceof Error ? err : new Error(String(err) || 'Login failed');\n        setError(callbackError);\n        setIsLoading(false);\n        onErrorRef.current?.(callbackError);\n      });\n    // client is stable (created once in PromaProvider), safe as a dep.\n  }, [client]);\n\n  return { isLoading, error };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAyB,gBAAgB;;;ACGlC,IAAM,aAAN,cAAyB,MAAM;AAAA,EAIpC,YAAY,SAAiB,MAAc,QAAgB;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAEO,IAAM,2BAAN,cAAuC,WAAW;AAAA,EACvD,cAAc;AACZ;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gCAAN,cAA4C,WAAW;AAAA,EAI5D,YACE,0BACA,8BACA;AACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,SAAK,OAAO;AACZ,SAAK,2BAA2B;AAChC,SAAK,+BAA+B;AAAA,EACtC;AACF;AAEO,IAAM,sBAAN,cAAkC,WAAW;AAAA,EAClD,cAAc;AACZ;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,SAAK,OAAO;AAAA,EACd;AACF;AASO,SAAS,yBACd,QACA,MACY;AAlEd;AAmEE,QAAM,QAAO,gBAAK,UAAL,YAAc,KAAK,WAAnB,YAA6B;AAC1C,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO,IAAI,yBAAyB;AAAA,IACtC,KAAK;AACH,aAAO,IAAI;AAAA,SACT,UAAK,UAAL,YAAc;AAAA,SACd,UAAK,UAAL,YAAc;AAAA,MAChB;AAAA,IACF,KAAK;AACH,aAAO,IAAI,oBAAoB;AAAA,IACjC;AACE,aAAO,IAAI;AAAA,SACT,UAAK,UAAL,YAAc,kBAAkB,MAAM;AAAA,QACtC;AAAA,QACA;AAAA,MACF;AAAA,EACJ;AACF;;;ACjFA,IAAM,mBAAmB;AAKlB,SAAS,uBAA+B;AAC7C,QAAM,QAAQ,IAAI,WAAW,EAAE;AAC/B,SAAO,gBAAgB,KAAK;AAC5B,SAAO,UAAU,KAAK;AACxB;AAKA,eAAsB,sBAAsB,UAAmC;AAC7E,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,QAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;AACvD,SAAO,UAAU,IAAI,WAAW,IAAI,CAAC;AACvC;AAKO,SAAS,iBAAiB,UAAwB;AACvD,MAAI,OAAO,iBAAiB,aAAa;AACvC,iBAAa,QAAQ,kBAAkB,QAAQ;AAAA,EACjD;AACF;AAKO,SAAS,sBAAqC;AACnD,MAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,QAAM,WAAW,aAAa,QAAQ,gBAAgB;AACtD,eAAa,WAAW,gBAAgB;AACxC,SAAO;AACT;AAEA,SAAS,UAAU,OAA2B;AAC5C,QAAM,SAAS,KAAK,OAAO,aAAa,GAAG,KAAK,CAAC;AACjD,SAAO,OAAO,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACzE;;;AC7CA,IAAM,cAAc;AAEb,IAAM,aAAN,MAAiB;AAAA,EACtB,YAA6B,SAAuB;AAAvB;AAAA,EAAwB;AAAA,EAErD,MAAsB;AACpB,QAAI;AACF,YAAM,MAAM,KAAK,QAAQ,QAAQ,WAAW;AAC5C,UAAI,CAAC,IAAK,QAAO;AACjB,aAAO,KAAK,MAAM,GAAG;AAAA,IACvB,SAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,IAAI,SAAwB;AAC1B,SAAK,QAAQ,QAAQ,aAAa,KAAK,UAAU,OAAO,CAAC;AAAA,EAC3D;AAAA,EAEA,QAAc;AACZ,SAAK,QAAQ,WAAW,WAAW;AAEnC,SAAK,QAAQ,WAAW,qBAAqB;AAAA,EAC/C;AAAA,EAEA,UAAU,SAA2B;AAEnC,WAAO,KAAK,IAAI,KAAK,QAAQ,YAAY;AAAA,EAC3C;AACF;AAGO,IAAM,gBAAN,MAA4C;AAAA,EAA5C;AACL,SAAQ,MAAM,oBAAI,IAAoB;AAAA;AAAA,EACtC,QAAQ,KAAa;AApCvB;AAqCI,YAAO,UAAK,IAAI,IAAI,GAAG,MAAhB,YAAqB;AAAA,EAC9B;AAAA,EACA,QAAQ,KAAa,OAAe;AAClC,SAAK,IAAI,IAAI,KAAK,KAAK;AAAA,EACzB;AAAA,EACA,WAAW,KAAa;AACtB,SAAK,IAAI,OAAO,GAAG;AAAA,EACrB;AACF;AAEO,SAAS,oBAAkC;AAChD,MAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,SAAO,IAAI,cAAc;AAC3B;;;AC7BA,IAAM,mBAAmB;AAQzB,IAAM,mBAAmB,oBAAI,IAA8B;AAEpD,IAAM,cAAN,MAAkB;AAAA,EAWvB,YAA6B,QAA2B;AAA3B;AA1C/B;AA2CI,SAAK,WAAU,YAAO,YAAP,YAAkB;AACjC,SAAK,QAAQ,IAAI,YAAW,YAAO,YAAP,YAAkB,kBAAkB,CAAC;AACjE,SAAK,iBAAgB,YAAO,WAAP,YAAiB,CAAC,SAAS;AAChD,SAAK,UAAU,IAAI,WAAW,IAAI;AAClC,SAAK,KAAK,IAAI,MAAM,IAAI;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,MAAM,QAAsC;AAChD,UAAM,MAAM,MAAM,KAAK,kBAAkB,0BAAU,KAAK,aAAa;AACrE,WAAO,SAAS,OAAO;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBACJ,SAAuB,KAAK,eACX;AAxErB;AAyEI,UAAM,WAAW,qBAAqB;AACtC,UAAM,YAAY,MAAM,sBAAsB,QAAQ;AACtD,qBAAiB,QAAQ;AAKzB,UAAM,QAAQ,OAAO,WAAW;AAChC,QAAI,OAAO,iBAAiB,aAAa;AACvC,YAAM,SAAS,KAAK;AAAA,SAClB,kBAAa,QAAQ,oBAAoB,MAAzC,YAA8C;AAAA,MAChD;AACA,aAAO,KAAK,KAAK;AACjB,mBAAa;AAAA,QACX;AAAA,QACA,KAAK,UAAU,OAAO,MAAM,GAAG,CAAC;AAAA,MAClC;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,IAAI,wBAAwB,KAAK,OAAO;AACxD,QAAI,aAAa,IAAI,aAAa,KAAK,OAAO,QAAQ;AACtD,QAAI,aAAa,IAAI,gBAAgB,KAAK,OAAO,WAAW;AAC5D,QAAI,aAAa,IAAI,iBAAiB,MAAM;AAC5C,QAAI,aAAa,IAAI,SAAS,OAAO,KAAK,GAAG,CAAC;AAC9C,QAAI,aAAa,IAAI,SAAS,KAAK;AACnC,QAAI,aAAa,IAAI,kBAAkB,SAAS;AAChD,QAAI,aAAa,IAAI,yBAAyB,MAAM;AAEpD,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,eAAe,KAAgC;AAvHvD;AAwHI,UAAM,OACJ,oBAAQ,OAAO,WAAW,cAAc,OAAO,SAAS,OAAO;AACjE,UAAM,SAAS,IAAI,IAAI,IAAI,EAAE;AAC7B,UAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,UAAM,QAAQ,OAAO,IAAI,OAAO;AAEhC,QAAI,OAAO;AACT,YAAM,IAAI,OAAM,YAAO,IAAI,mBAAmB,MAA9B,YAAmC,KAAK;AAAA,IAC1D;AAEA,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,MAAM,oCAAoC;AAAA,IACtD;AAIA,UAAM,UAAU,iBAAiB,IAAI,IAAI;AACzC,QAAI,QAAS,QAAO;AAEpB,UAAM,UAAU,KAAK,aAAa,MAAM,MAAM;AAC9C,qBAAiB,IAAI,MAAM,OAAO;AAClC,YAAQ,QAAQ,MAAM,iBAAiB,OAAO,IAAI,CAAC;AACnD,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,aACZ,MACA,QACkB;AApJtB;AAuJI,UAAM,gBAAgB,OAAO,IAAI,OAAO;AACxC,QAAI,OAAO,iBAAiB,aAAa;AACvC,YAAM,SAAS,KAAK;AAAA,SAClB,kBAAa,QAAQ,oBAAoB,MAAzC,YAA8C;AAAA,MAChD;AAGA,UAAI,OAAO,WAAW,GAAG;AACvB,cAAM,SAAS,aAAa,QAAQ,mBAAmB;AACvD,YAAI,OAAQ,QAAO,KAAK,MAAM;AAAA,MAChC;AAEA,UAAI,CAAC,iBAAiB,CAAC,OAAO,SAAS,aAAa,GAAG;AACrD,cAAM,IAAI,MAAM,qDAAgD;AAAA,MAClE;AAGA,YAAM,YAAY,OAAO,OAAO,CAAC,MAAM,MAAM,aAAa;AAC1D,UAAI,UAAU,WAAW,GAAG;AAC1B,qBAAa,WAAW,oBAAoB;AAAA,MAC9C,OAAO;AACL,qBAAa,QAAQ,sBAAsB,KAAK,UAAU,SAAS,CAAC;AAAA,MACtE;AACA,mBAAa,WAAW,mBAAmB;AAAA,IAC7C;AAEA,UAAM,WAAW,oBAAoB;AAErC,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ;AAAA,MACA,cAAc,KAAK,OAAO;AAAA,MAC1B,WAAW,KAAK,OAAO;AAAA,IACzB,CAAC;AAED,QAAI,SAAU,MAAK,IAAI,iBAAiB,QAAQ;AAEhD,UAAM,SAAS,MAAM,KAAK,YAAY,IAAI;AAC1C,UAAM,UAAU,KAAK,gBAAgB,MAAM;AAC3C,SAAK,MAAM,IAAI,OAAO;AACtB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAsC;AAC1C,UAAM,UAAU,KAAK,MAAM,IAAI;AAC/B,QAAI,CAAC,QAAS,QAAO;AAErB,QAAI,KAAK,MAAM,UAAU,OAAO,GAAG;AACjC,UAAI;AACF,eAAO,MAAM,KAAK,QAAQ,QAAQ,YAAY;AAAA,MAChD,SAAQ;AACN,aAAK,MAAM,MAAM;AACjB,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBAAoC;AACxC,WAAQ,MAAM,KAAK,WAAW,MAAO;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,UAA6B;AACjC,UAAM,QAAQ,MAAM,KAAK,mBAAmB;AAC5C,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,uBAAuB;AAAA,MAC5D,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,IAC9C,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,2BAA2B;AACxD,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAe;AACb,SAAK,MAAM,MAAM;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,qBAAsC;AAC1C,UAAM,UAAU,MAAM,KAAK,WAAW;AACtC,QAAI,CAAC;AACH,YAAM,IAAI,MAAM,mDAA8C;AAChE,WAAO,QAAQ;AAAA,EACjB;AAAA,EAEA,MAAc,QAAQ,cAAwC;AAC5D,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,WAAW,KAAK,OAAO;AAAA,IACzB,CAAC;AACD,UAAM,SAAS,MAAM,KAAK,YAAY,IAAI;AAC1C,UAAM,UAAU,KAAK,gBAAgB,MAAM;AAC3C,SAAK,MAAM,IAAI,OAAO;AACtB,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,YAAY,MAA+C;AA1Q3E;AA2QI,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,oBAAoB;AAAA,MACzD,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,oCAAoC;AAAA,MAC/D,MAAM,KAAK,SAAS;AAAA,IACtB,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAO,MAAM,IAChB,KAAK,EACL,MAAM,OAAO,EAAE,OAAO,gBAAgB,EAAE;AAI3C,YAAM,IAAI,OAAM,SAAI,sBAAJ,YAAyB,IAAI,KAAK;AAAA,IACpD;AACA,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA,EAEQ,gBAAgB,QAAgC;AACtD,WAAO;AAAA,MACL,aAAa,OAAO;AAAA,MACpB,cAAc,OAAO;AAAA,MACrB,WAAW,KAAK,IAAI,IAAI,OAAO,aAAa;AAAA,MAC5C,OAAO,OAAO;AAAA,IAChB;AAAA,EACF;AACF;AAMA,IAAM,aAAN,MAAiB;AAAA,EACf,YAA6B,QAAqB;AAArB;AAAA,EAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUnD,MAAM,aAAuC;AAC3C,UAAM,QAAQ,MAAM,KAAK,OAAO,mBAAmB;AACnD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,OAAO,4BAA4B;AAAA,MACxE,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,IAC9C,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,gCAAgC;AAC7D,WAAO,IAAI,KAAK;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,MACJ,QACA,aAC+B;AAC/B,UAAM,QAAQ,MAAM,KAAK,OAAO,mBAAmB;AACnD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,OAAO,0BAA0B;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,QAAQ,YAAY,CAAC;AAAA,IAC9C,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,EAAE,OAAO,UAAU,EAAE;AAGhE,YAAM,IAAI,MAAM,IAAI,KAAK;AAAA,IAC3B;AACA,WAAO,IAAI,KAAK;AAAA,EAClB;AACF;AAMA,IAAM,QAAN,MAAY;AAAA,EACV,YAA6B,QAAqB;AAArB;AAAA,EAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAenD,MAAM,KAAK,SAAyD;AAnXtE;AAoXI,UAAM,QAAQ,MAAM,KAAK,OAAO,mBAAmB;AACnD,UAAM,SAAsB,MAAM,QAAQ,OAAO,IAC7C,EAAE,UAAU,QAAQ,IACpB;AAEJ,UAAM,YAAW,YAAO,aAAP,YAAmB;AACpC,UAAM,SACJ,YAAO,UAAP,YAAiB,aAAa,WAAW,qBAAqB;AAEhE,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR,uCAAuC,QAAQ,mCAA8B,QAAQ;AAAA,MACvF;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,OAAO,qBAAqB;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA,QACA;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,iBAAiB,OAAO;AAAA,MAC1B,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAQ,MAAM,SACjB,KAAK,EACL,MAAM,OAAO,EAAE,OAAO,gBAAgB,EAAE;AAC3C,YAAM,yBAAyB,SAAS,QAAQ,IAAI;AAAA,IACtD;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,SAAS,SAAuD;AAraxE;AAyaI,UAAM,MAAM,MAAM,KAAK,KAAK,OAAO;AAEnC,UAAM,UAAS,SAAI,SAAJ,mBAAU;AACzB,QAAI,CAAC,OAAQ,QAAO;AAEpB,UAAM,UAAU,IAAI,YAAY;AAChC,QAAI,WAAW;AAEf,WAAO,MAAM;AACX,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,kBAAY,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAAA,IACpD;AACA,gBAAY,QAAQ,OAAO;AAE3B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,SACJ,SACA,UACY;AACZ,UAAM,SAAsB,MAAM,QAAQ,OAAO,IAC7C,EAAE,UAAU,QAAQ,IACpB;AAEJ,UAAM,YAAY,OAAO,SAAS,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AACjE,UAAM,WAA0B,YAC5B,OAAO,WACP;AAAA,MACE;AAAA,QACE,MAAM;AAAA,QACN,SACE;AAAA,MACJ;AAAA,MACA,GAAG,OAAO;AAAA,IACZ;AAEJ,UAAM,OAAO,MAAM,KAAK,SAAS,iCAAK,SAAL,EAAa,SAAS,EAAC;AACxD,UAAM,UAAU,gBAAgB,IAAI;AAEpC,QAAI;AACF,aAAO,KAAK,MAAM,OAAO;AAAA,IAC3B,SAAS,KAAK;AACZ,UAAI,aAAa,OAAW,QAAO;AACnC,YAAM,IAAI;AAAA,QACR,0CAA2C,IAAc,OAAO;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBA,MAAM,eACJ,SACY;AA/fhB;AAggBI,UAAM,QAAQ,MAAM,KAAK,OAAO,mBAAmB;AACnD,UAAM,YAAW,aAAQ,aAAR,YAAoB;AACrC,UAAM,SACJ,aAAQ,UAAR,YAAkB,aAAa,WAAW,qBAAqB;AAEjE,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR,uCAAuC,QAAQ,mCAA8B,QAAQ;AAAA,MACvF;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,OAAO,qBAAqB;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU;AAAA,QACnB;AAAA,QACA;AAAA,QACA,UAAU,QAAQ;AAAA,QAClB,iBAAiB,QAAQ;AAAA,QACzB,gBAAgB;AAAA,UACd,MAAM;AAAA,WACF,QAAQ,cAAc,EAAE,MAAM,QAAQ,WAAW,IAFvC;AAAA,UAGd,QAAQ,QAAQ;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAQ,MAAM,SACjB,KAAK,EACL,MAAM,OAAO,EAAE,OAAO,gBAAgB,EAAE;AAC3C,YAAM,yBAAyB,SAAS,QAAQ,IAAI;AAAA,IACtD;AAEA,UAAM,UAAW,MAAM,SAAS,KAAK;AACrC,WAAO,QAAQ;AAAA,EACjB;AACF;AAEA,SAAS,gBAAgB,MAAsB;AAC7C,QAAM,UAAU,KAAK,KAAK;AAC1B,QAAM,SAAS,QAAQ,MAAM,oCAAoC;AACjE,MAAI,OAAQ,QAAO,OAAO,CAAC,EAAG,KAAK;AAInC,QAAM,aAAa,QAAQ,OAAO,MAAM;AACxC,QAAM,YAAY,KAAK,IAAI,QAAQ,YAAY,GAAG,GAAG,QAAQ,YAAY,GAAG,CAAC;AAC7E,MAAI,eAAe,MAAM,YAAY,YAAY;AAC/C,WAAO,QAAQ,MAAM,YAAY,YAAY,CAAC;AAAA,EAChD;AAEA,SAAO;AACT;;;AJ7fY,mBACE,KADF;AAlCL,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA,SAAS,CAAC,SAAS;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAwB;AACtB,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,KAAK;AAEhD,iBAAe,cAAc;AAC3B,iBAAa,IAAI;AAEjB,QAAI;AACF,YAAM,SAAS,IAAI,YAAY,EAAE,UAAU,aAAa,QAAQ,CAAC;AACjE,YAAM,OAAO,MAAM,MAAM;AAAA,IAC3B,SAAS,KAAK;AACZ,mBAAa,KAAK;AAClB,yCAAU,eAAe,QAAQ,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACzE;AAAA,EACF;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,MACV,WAAW,gCAAa;AAAA,MACxB,cAAY;AAAA,MAEX,sBACG,sBACC,8BACC,iCACE;AAAA,4BAAC,aAAU;AAAA,QAAE;AAAA,SAEf;AAAA;AAAA,EAER;AAEJ;AAEA,SAAS,YAAY;AACnB,SACE;AAAA,IAAC;AAAA;AAAA,MACC,OAAO;AAAA,MACP,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,MAAM;AAAA,MACN,eAAa;AAAA,MAEb;AAAA,QAAC;AAAA;AAAA,UACC,GACE;AAAA;AAAA,MAEJ;AAAA;AAAA,EACF;AAEJ;;;AKpFA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAAA;AAAA,OACK;AAiGH,gBAAAC,YAAA;AAhFJ,IAAM,eAAe,cAAqC,IAAI;AAevD,SAAS,cAAc,IAA6C;AAA7C,eAAE,WAtChC,IAsC8B,IAAe,mBAAf,IAAe,CAAb;AAC9B,QAAM,CAAC,MAAM,IAAIC,UAAS,MAAM,IAAI,YAAY,MAAM,CAAC;AACvD,QAAM,CAAC,MAAM,OAAO,IAAIA,UAA0B,IAAI;AACtD,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAG/C,YAAU,MAAM;AACd,QAAI,YAAY;AAEhB,mBAAe,UAAU;AACvB,UAAI;AACF,cAAM,UAAU,MAAM,OAAO,WAAW;AACxC,YAAI,CAAC,WAAW,WAAW;AACzB,uBAAa,KAAK;AAClB;AAAA,QACF;AACA,cAAM,WAAW,MAAM,OAAO,QAAQ;AACtC,YAAI,CAAC,UAAW,SAAQ,QAAQ;AAAA,MAClC,SAAQ;AAAA,MAER,UAAE;AACA,YAAI,CAAC,UAAW,cAAa,KAAK;AAAA,MACpC;AAAA,IACF;AAEA,SAAK,QAAQ;AACb,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAMX,YAAU,MAAM;AACd,QAAI,OAAO,WAAW,YAAa;AACnC,UAAM,SAAS,IAAI,IAAI,OAAO,SAAS,IAAI,EAAE;AAC7C,QAAI,OAAO,IAAI,WAAW,MAAM,IAAK;AAGrC,WAAO,OAAO,WAAW;AACzB,UAAM,WACJ,OAAO,SAAS,YACf,OAAO,SAAS,IAAI,MAAM,OAAO,SAAS,IAAI,MAC/C,OAAO,SAAS;AAClB,WAAO,QAAQ,aAAa,MAAM,IAAI,QAAQ;AAG9C,SAAK,OAAO,WAAW,EAAE,KAAK,CAAC,YAAY;AACzC,UAAI,CAAC,QAAS,MAAK,OAAO,MAAM;AAAA,IAClC,CAAC;AAAA,EACH,GAAG,CAAC,MAAM,CAAC;AAEX,QAAM,QAAQ;AAAA,IACZ,CAAC,WAA0B,OAAO,MAAM,MAAM;AAAA,IAC9C,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,SAAS,YAAY,MAAM;AAC/B,WAAO,OAAO;AACd,YAAQ,IAAI;AAAA,EACd,GAAG,CAAC,MAAM,CAAC;AAEX,SACE,gBAAAD;AAAA,IAAC,aAAa;AAAA,IAAb;AAAA,MACC,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,iBAAiB,CAAC,CAAC;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MAEC;AAAA;AAAA,EACH;AAEJ;AASO,SAAS,eAA+B;AAC7C,QAAM,MAAM,WAAW,YAAY;AACnC,MAAI,CAAC,KAAK;AACR,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,SAAO;AACT;;;ACnIA,SAAS,aAAAE,YAAW,QAAQ,YAAAC,iBAAgB;AAoDrC,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF,IAA6B,CAAC,GAA2B;AACvD,QAAM,EAAE,OAAO,IAAI,aAAa;AAChC,QAAM,CAAC,OAAO,QAAQ,IAAIC,UAAuB,IAAI;AACrD,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,IAAI;AAG/C,QAAM,eAAe,OAAO,SAAS;AACrC,QAAM,aAAa,OAAO,OAAO;AACjC,QAAM,gBAAgB,OAAO,UAAU;AACvC,eAAa,UAAU;AACvB,aAAW,UAAU;AACrB,gBAAc,UAAU;AAExB,EAAAC,WAAU,MAAM;AACd,UAAM,OAAO,IAAI,IAAI,OAAO,SAAS,IAAI,EAAE,aAAa,IAAI,MAAM;AAElE,QAAI,CAAC,MAAM;AACT,mBAAa,KAAK;AAClB;AAAA,IACF;AAKA,UAAM,WAAW,YAAY,IAAI;AACjC,QAAI,eAAe,QAAQ,QAAQ,EAAG;AACtC,mBAAe,QAAQ,UAAU,GAAG;AAEpC,WACG,eAAe,EACf,KAAK,CAAC,YAAY;AAtFzB;AAuFQ,qBAAe,WAAW,QAAQ;AAClC,yBAAa,YAAb,sCAAuB;AACvB,UAAI,cAAc,SAAS;AACzB,eAAO,SAAS,QAAQ,cAAc,OAAO;AAAA,MAC/C;AAAA,IACF,CAAC,EACA,MAAM,CAAC,QAAiB;AA7F/B;AA8FQ,qBAAe,WAAW,QAAQ;AAClC,cAAQ,MAAM,qCAAqC,GAAG;AACtD,YAAM,gBACJ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,KAAK,cAAc;AACtE,eAAS,aAAa;AACtB,mBAAa,KAAK;AAClB,uBAAW,YAAX,oCAAqB;AAAA,IACvB,CAAC;AAAA,EAEL,GAAG,CAAC,MAAM,CAAC;AAEX,SAAO,EAAE,WAAW,MAAM;AAC5B;","names":["useState","jsx","useState","useEffect","useState","useState","useEffect"]}