@securitydept/client 0.2.0-beta.1

package/dist/web/index.mjs

@@ -0,0 +1,292 @@
+import { S as ClientErrorKind, T as UserRecovery, a as normalizeAbortError, h as createRuntime, i as createCancellationTokenFromAbortSignal, l as fromEventPattern, n as createFetchTransport, o as fromAbortSignal, r as createAbortSignalBridge, s as fromStorageEvent, t as FetchTransportRedirectKind, x as ClientError } from "../fetch-transport-DtnSRWAH.mjs";
+//#region src/web/cross-tab-sync.ts
+/**
+* Create a cross-tab sync listener for a specific localStorage key.
+*
+* The browser `storage` event fires on ALL tabs EXCEPT the one that made the
+* change. This makes it a natural primitive for cross-tab state notification.
+*
+* @example
+* ```ts
+* const sync = createCrossTabSync({
+*   key: "auth:v1",
+*   onSync: ({ newValue }) => {
+*     if (newValue) {
+*       // Another tab updated auth state — reconcile
+*       controller.restoreFromPersistence();
+*     } else {
+*       // Another tab cleared auth state — log out
+*       controller.clearState({ clearPersisted: false });
+*     }
+*   },
+* });
+* // Later:
+* sync.dispose();
+* ```
+*/
+function createCrossTabSync(options) {
+	const target = options.target ?? globalThis;
+	let syncCount = 0;
+	const subscription = fromStorageEvent({
+		target,
+		callback: (storageEvent) => {
+			if (storageEvent.key !== options.key) return;
+			syncCount++;
+			options.onSync({
+				newValue: storageEvent.newValue,
+				oldValue: storageEvent.oldValue
+			});
+		}
+	});
+	return {
+		dispose() {
+			subscription.unsubscribe();
+		},
+		get syncCount() {
+			return syncCount;
+		}
+	};
+}
+//#endregion
+//#region src/web/popup.ts
+/** Stable error codes for popup-related failures. */
+const PopupErrorCode = {
+	Blocked: "popup.blocked",
+	Closed: "popup.closed_by_user",
+	Timeout: "popup.relay_timeout",
+	RelayError: "popup.relay_error",
+	Internal: "popup.internal"
+};
+/**
+* Compute the `features` string for `window.open()`, centered on screen.
+*/
+function computePopupFeatures(options = {}) {
+	const width = options.width ?? 500;
+	const height = options.height ?? 600;
+	return `width=${width},height=${height},left=${Math.max(0, Math.round(window.screenX + (window.innerWidth - width) / 2))},top=${Math.max(0, Math.round(window.screenY + (window.innerHeight - height) / 2))},popup=yes,toolbar=no,menubar=no`;
+}
+/**
+* Open a popup window to the given URL.
+*
+* Throws a `ClientError` with code `popup.blocked` if the browser
+* blocks the popup.
+*/
+function openPopupWindow(url, options) {
+	const features = computePopupFeatures(options);
+	const target = options?.target ?? "_blank";
+	const win = window.open(url, target, features);
+	if (!win || win.closed) throw new ClientError({
+		kind: ClientErrorKind.Authorization,
+		code: PopupErrorCode.Blocked,
+		message: "Popup window was blocked by the browser. Please allow popups for this site.",
+		recovery: UserRecovery.Retry,
+		source: "popup"
+	});
+	return { window: win };
+}
+/**
+* Wait for a relay message from a popup callback page.
+*
+* The popup callback page should call `relayPopupCallback()` to post
+* the callback URL back to the opener.
+*
+* Resolves with the callback payload (URL or fragment string).
+* Rejects with a `ClientError` if:
+*   - the popup is closed without relaying (popup.closed_by_user)
+*   - the timeout expires (popup.relay_timeout)
+*   - the relay message contains an error (popup.relay_error)
+*/
+function waitForPopupRelay(options) {
+	const timeoutMs = options.timeoutMs ?? 12e4;
+	const expectedOrigin = options.expectedOrigin ?? window.location.origin;
+	const pollIntervalMs = options.pollIntervalMs ?? 500;
+	return new Promise((resolve, reject) => {
+		let settled = false;
+		let timeoutId;
+		let pollId;
+		function cleanup() {
+			settled = true;
+			clearTimeout(timeoutId);
+			clearInterval(pollId);
+			window.removeEventListener("message", onMessage);
+		}
+		function onMessage(event) {
+			if (settled) return;
+			if (event.origin !== expectedOrigin) return;
+			const data = event.data;
+			if (!data || data.type !== "securitydept:popup_callback") return;
+			cleanup();
+			if (data.error) {
+				reject(new ClientError({
+					kind: ClientErrorKind.Protocol,
+					code: PopupErrorCode.RelayError,
+					message: `Popup callback relay error: ${data.error}`,
+					source: "popup"
+				}));
+				return;
+			}
+			resolve(data.payload);
+		}
+		window.addEventListener("message", onMessage);
+		pollId = setInterval(() => {
+			if (settled) return;
+			if (options.popup.window.closed) {
+				cleanup();
+				reject(new ClientError({
+					kind: ClientErrorKind.Authorization,
+					code: PopupErrorCode.Closed,
+					message: "Popup window was closed before completing the login flow.",
+					recovery: UserRecovery.RestartFlow,
+					source: "popup"
+				}));
+			}
+		}, pollIntervalMs);
+		timeoutId = setTimeout(() => {
+			if (settled) return;
+			cleanup();
+			try {
+				options.popup.window.close();
+			} catch {}
+			reject(new ClientError({
+				kind: ClientErrorKind.Timeout,
+				code: PopupErrorCode.Timeout,
+				message: `Popup login timed out after ${timeoutMs}ms.`,
+				recovery: UserRecovery.Retry,
+				source: "popup"
+			}));
+		}, timeoutMs);
+	});
+}
+/**
+* Relay the popup callback result back to the opener window.
+*
+* Call this function from the popup callback page to send the callback
+* URL/fragment back to the parent window that initiated the popup login.
+*
+* @example
+* ```html
+* <script type="module">
+*   import { relayPopupCallback } from "@securitydept/client/web";
+*   relayPopupCallback({ payload: window.location.href });
+* <\/script>
+* ```
+*/
+function relayPopupCallback(options = {}) {
+	const opener = window.opener;
+	if (!opener) return;
+	const targetOrigin = options.targetOrigin ?? window.location.origin;
+	const message = {
+		type: "securitydept:popup_callback",
+		payload: options.payload ?? window.location.href,
+		error: options.error
+	};
+	opener.postMessage(message, targetOrigin);
+	if (options.closeAfterRelay !== false) window.close();
+}
+//#endregion
+//#region src/web/runtime.ts
+/**
+* Create a `ClientRuntime` for browser/Web-capable environments.
+*/
+function createWebRuntime(overrides = {}) {
+	const { fetchTransport, transport, ...runtime } = overrides;
+	return createRuntime({
+		...runtime,
+		transport: transport ?? createFetchTransport(fetchTransport)
+	});
+}
+//#endregion
+//#region src/web/visibility.ts
+/** Visibility state snapshot passed to the callback. */
+const VisibilityState = {
+	Visible: "visible",
+	Hidden: "hidden"
+};
+/**
+* Subscribe to browser document visibility changes.
+*
+* Built on {@link fromEventPattern} so it follows the same Subscription
+* contract. Returns a {@link Subscription} handle for cleanup.
+*
+* @example
+* ```ts
+* const sub = fromVisibilityChange({
+*   callback: (state) => {
+*     if (state === VisibilityState.Visible) {
+*       scheduleRefresh();
+*     }
+*   },
+* });
+* // Cleanup:
+* sub.unsubscribe();
+* ```
+*/
+function fromVisibilityChange(options) {
+	const doc = options.document ?? globalThis.document;
+	return fromEventPattern({
+		addHandler: (handler) => {
+			doc.addEventListener("visibilitychange", handler);
+		},
+		removeHandler: (handler) => {
+			doc.removeEventListener("visibilitychange", handler);
+		},
+		callback: () => {
+			const state = doc.visibilityState === "visible" ? VisibilityState.Visible : VisibilityState.Hidden;
+			options.callback(state);
+		}
+	});
+}
+//#endregion
+//#region src/web/visibility-reconciler.ts
+/**
+* Create a visibility reconciler that triggers a callback when the page
+* transitions from hidden → visible.
+*
+* @example
+* ```ts
+* const reconciler = createVisibilityReconciler({
+*   onReconcile: () => {
+*     // Re-check token freshness or sync cross-tab state
+*     if (controller.snapshot?.tokens.accessTokenExpiresAt) {
+*       scheduleRefreshIfExpired();
+*     }
+*   },
+* });
+* // Later:
+* reconciler.dispose();
+* ```
+*/
+function createVisibilityReconciler(options) {
+	const throttleMs = options.throttleMs ?? 5e3;
+	const getNow = options.now ?? (() => Date.now());
+	let lastReconcileAt = 0;
+	let reconcileCount = 0;
+	const doc = options.document ?? globalThis.document;
+	let previousState = doc.visibilityState === "visible" ? VisibilityState.Visible : VisibilityState.Hidden;
+	const subscription = fromVisibilityChange({
+		callback: (state) => {
+			if (state === VisibilityState.Visible && previousState === VisibilityState.Hidden) {
+				const now = getNow();
+				if (now - lastReconcileAt >= throttleMs) {
+					lastReconcileAt = now;
+					reconcileCount++;
+					options.onReconcile();
+				}
+			}
+			previousState = state;
+		},
+		document: doc
+	});
+	return {
+		dispose() {
+			subscription.unsubscribe();
+		},
+		get reconcileCount() {
+			return reconcileCount;
+		}
+	};
+}
+//#endregion
+export { FetchTransportRedirectKind, PopupErrorCode, VisibilityState, computePopupFeatures, createAbortSignalBridge, createCancellationTokenFromAbortSignal, createCrossTabSync, createFetchTransport, createVisibilityReconciler, createWebRuntime, fromAbortSignal, fromStorageEvent, fromVisibilityChange, normalizeAbortError, openPopupWindow, relayPopupCallback, waitForPopupRelay };
+
+//# sourceMappingURL=index.mjs.map

package/dist/web/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/web/cross-tab-sync.ts","../../src/web/popup.ts","../../src/web/runtime.ts","../../src/web/visibility.ts","../../src/web/visibility-reconciler.ts"],"sourcesContent":["import { fromStorageEvent } from \"./input-sources\";\n\n// Cross-tab auth state sync — minimal baseline using storage events\n//\n// Provides a minimal, composable cross-tab sync mechanism for auth state.\n// When another tab writes to the auth persistence key (via localStorage),\n// this listener detects the change and notifies the current tab so it can\n// reconcile its in-memory state.\n//\n// This is intentionally thin — it uses the browser `storage` event which\n// fires on OTHER tabs when localStorage is modified. The reconciliation\n// callback is the adopter's responsibility (e.g. re-read from persistence,\n// compare with in-memory state, and update).\n//\n// Architecture boundary:\n//   - This module does NOT own the persistence store.\n//   - It only listens for cross-tab mutations and notifies via callback.\n//   - The adopter wires this to their AuthMaterialController.\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Callback invoked when a cross-tab storage change is detected for the watched key. */\nexport type CrossTabSyncCallback = (event: {\n\t/** The new value written by the other tab, or null if the key was removed. */\n\tnewValue: string | null;\n\t/** The old value before the other tab's write. */\n\toldValue: string | null;\n}) => void;\n\n/** Options for {@link createCrossTabSync}. */\nexport interface CreateCrossTabSyncOptions {\n\t/** The localStorage key to watch for cross-tab changes. */\n\tkey: string;\n\n\t/** Called when another tab modifies the watched key. */\n\tonSync: CrossTabSyncCallback;\n\n\t/**\n\t * Override the window target (primarily for testing).\n\t * Defaults to `globalThis`.\n\t */\n\ttarget?: {\n\t\taddEventListener(type: string, listener: EventListener): void;\n\t\tremoveEventListener(type: string, listener: EventListener): void;\n\t};\n}\n\n/** Handle returned by {@link createCrossTabSync}. */\nexport interface CrossTabSync {\n\t/** Stop listening for cross-tab storage events. */\n\tdispose(): void;\n\t/** Number of times a sync event has been received. */\n\treadonly syncCount: number;\n}\n\n// ---------------------------------------------------------------------------\n// Implementation\n// ---------------------------------------------------------------------------\n\n/**\n * Create a cross-tab sync listener for a specific localStorage key.\n *\n * The browser `storage` event fires on ALL tabs EXCEPT the one that made the\n * change. This makes it a natural primitive for cross-tab state notification.\n *\n * @example\n * ```ts\n * const sync = createCrossTabSync({\n *   key: \"auth:v1\",\n *   onSync: ({ newValue }) => {\n *     if (newValue) {\n *       // Another tab updated auth state — reconcile\n *       controller.restoreFromPersistence();\n *     } else {\n *       // Another tab cleared auth state — log out\n *       controller.clearState({ clearPersisted: false });\n *     }\n *   },\n * });\n * // Later:\n * sync.dispose();\n * ```\n */\nexport function createCrossTabSync(\n\toptions: CreateCrossTabSyncOptions,\n): CrossTabSync {\n\tconst target = options.target ?? globalThis;\n\tlet syncCount = 0;\n\tconst subscription = fromStorageEvent({\n\t\ttarget,\n\t\tcallback: (storageEvent) => {\n\t\t\t// Only react to changes on our watched key.\n\t\t\tif (storageEvent.key !== options.key) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tsyncCount++;\n\t\t\toptions.onSync({\n\t\t\t\tnewValue: storageEvent.newValue,\n\t\t\t\toldValue: storageEvent.oldValue,\n\t\t\t});\n\t\t},\n\t});\n\n\treturn {\n\t\tdispose() {\n\t\t\tsubscription.unsubscribe();\n\t\t},\n\t\tget syncCount() {\n\t\t\treturn syncCount;\n\t\t},\n\t};\n}\n","// Popup shared infrastructure — browser-only helpers\n//\n// Provides cross-mode popup window management for login flows.\n// Owned by @securitydept/client/web, consumed by backend-oidc-mode\n// and frontend-oidc-mode popup login entries.\n\nimport { ClientError, ClientErrorKind, UserRecovery } from \"../errors/index\";\n\n// ---------------------------------------------------------------------------\n// Error codes (stable contract)\n// ---------------------------------------------------------------------------\n\n/** Stable error codes for popup-related failures. */\nexport const PopupErrorCode = {\n\t/** The browser blocked the popup window from opening. */\n\tBlocked: \"popup.blocked\",\n\t/** The popup was closed by the user before completing the flow. */\n\tClosed: \"popup.closed_by_user\",\n\t/** The relay message was not received within the timeout. */\n\tTimeout: \"popup.relay_timeout\",\n\t/** The relay message contained an error from the callback page. */\n\tRelayError: \"popup.relay_error\",\n\t/** An unexpected error occurred during popup lifecycle. */\n\tInternal: \"popup.internal\",\n} as const;\n\nexport type PopupErrorCode =\n\t(typeof PopupErrorCode)[keyof typeof PopupErrorCode];\n\n// ---------------------------------------------------------------------------\n// Popup features\n// ---------------------------------------------------------------------------\n\n/**\n * Options for computing the popup window features string.\n */\nexport interface PopupFeaturesOptions {\n\t/** Width in pixels (default: 500). */\n\twidth?: number;\n\t/** Height in pixels (default: 600). */\n\theight?: number;\n}\n\n/**\n * Compute the `features` string for `window.open()`, centered on screen.\n */\nexport function computePopupFeatures(\n\toptions: PopupFeaturesOptions = {},\n): string {\n\tconst width = options.width ?? 500;\n\tconst height = options.height ?? 600;\n\tconst left = Math.max(\n\t\t0,\n\t\tMath.round(window.screenX + (window.innerWidth - width) / 2),\n\t);\n\tconst top = Math.max(\n\t\t0,\n\t\tMath.round(window.screenY + (window.innerHeight - height) / 2),\n\t);\n\n\treturn `width=${width},height=${height},left=${left},top=${top},popup=yes,toolbar=no,menubar=no`;\n}\n\n// ---------------------------------------------------------------------------\n// Popup open + blocked detection\n// ---------------------------------------------------------------------------\n\n/**\n * Result of opening a popup window.\n */\nexport interface PopupWindowHandle {\n\t/** The opened window reference. */\n\twindow: Window;\n}\n\n/**\n * Open a popup window to the given URL.\n *\n * Throws a `ClientError` with code `popup.blocked` if the browser\n * blocks the popup.\n */\nexport function openPopupWindow(\n\turl: string,\n\toptions?: PopupFeaturesOptions & { target?: string },\n): PopupWindowHandle {\n\tconst features = computePopupFeatures(options);\n\tconst target = options?.target ?? \"_blank\";\n\n\tconst win = window.open(url, target, features);\n\n\tif (!win || win.closed) {\n\t\tthrow new ClientError({\n\t\t\tkind: ClientErrorKind.Authorization,\n\t\t\tcode: PopupErrorCode.Blocked,\n\t\t\tmessage:\n\t\t\t\t\"Popup window was blocked by the browser. Please allow popups for this site.\",\n\t\t\trecovery: UserRecovery.Retry,\n\t\t\tsource: \"popup\",\n\t\t});\n\t}\n\n\treturn { window: win };\n}\n\n// ---------------------------------------------------------------------------\n// PostMessage relay\n// ---------------------------------------------------------------------------\n\n/**\n * Expected shape of a relay message from the popup callback page.\n */\nexport interface PopupRelayMessage {\n\t/** Discriminator for the message type. */\n\ttype: \"securitydept:popup_callback\";\n\t/** The callback URL or fragment received by the popup. */\n\tpayload: string;\n\t/** Optional error from the callback page. */\n\terror?: string;\n}\n\n/**\n * Options for waiting for a popup relay message.\n */\nexport interface WaitForPopupRelayOptions {\n\t/** The popup window handle to monitor. */\n\tpopup: PopupWindowHandle;\n\t/** Maximum time to wait in milliseconds (default: 120000 = 2 minutes). */\n\ttimeoutMs?: number;\n\t/** Expected origin for the relay message (default: current origin). */\n\texpectedOrigin?: string;\n\t/** Poll interval for checking if the popup is closed (default: 500ms). */\n\tpollIntervalMs?: number;\n}\n\n/**\n * Wait for a relay message from a popup callback page.\n *\n * The popup callback page should call `relayPopupCallback()` to post\n * the callback URL back to the opener.\n *\n * Resolves with the callback payload (URL or fragment string).\n * Rejects with a `ClientError` if:\n *   - the popup is closed without relaying (popup.closed_by_user)\n *   - the timeout expires (popup.relay_timeout)\n *   - the relay message contains an error (popup.relay_error)\n */\nexport function waitForPopupRelay(\n\toptions: WaitForPopupRelayOptions,\n): Promise<string> {\n\tconst timeoutMs = options.timeoutMs ?? 120_000;\n\tconst expectedOrigin = options.expectedOrigin ?? window.location.origin;\n\tconst pollIntervalMs = options.pollIntervalMs ?? 500;\n\n\treturn new Promise<string>((resolve, reject) => {\n\t\tlet settled = false;\n\t\tlet timeoutId: ReturnType<typeof setTimeout>;\n\t\tlet pollId: ReturnType<typeof setInterval>;\n\n\t\tfunction cleanup() {\n\t\t\tsettled = true;\n\t\t\tclearTimeout(timeoutId);\n\t\t\tclearInterval(pollId);\n\t\t\twindow.removeEventListener(\"message\", onMessage);\n\t\t}\n\n\t\tfunction onMessage(event: MessageEvent) {\n\t\t\tif (settled) return;\n\t\t\tif (event.origin !== expectedOrigin) return;\n\n\t\t\tconst data = event.data as PopupRelayMessage | undefined;\n\t\t\tif (!data || data.type !== \"securitydept:popup_callback\") return;\n\n\t\t\tcleanup();\n\n\t\t\tif (data.error) {\n\t\t\t\treject(\n\t\t\t\t\tnew ClientError({\n\t\t\t\t\t\tkind: ClientErrorKind.Protocol,\n\t\t\t\t\t\tcode: PopupErrorCode.RelayError,\n\t\t\t\t\t\tmessage: `Popup callback relay error: ${data.error}`,\n\t\t\t\t\t\tsource: \"popup\",\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tresolve(data.payload);\n\t\t}\n\n\t\t// Listen for relay messages.\n\t\twindow.addEventListener(\"message\", onMessage);\n\n\t\t// Poll for popup closure.\n\t\tpollId = setInterval(() => {\n\t\t\tif (settled) return;\n\t\t\tif (options.popup.window.closed) {\n\t\t\t\tcleanup();\n\t\t\t\treject(\n\t\t\t\t\tnew ClientError({\n\t\t\t\t\t\tkind: ClientErrorKind.Authorization,\n\t\t\t\t\t\tcode: PopupErrorCode.Closed,\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\t\"Popup window was closed before completing the login flow.\",\n\t\t\t\t\t\trecovery: UserRecovery.RestartFlow,\n\t\t\t\t\t\tsource: \"popup\",\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t}\n\t\t}, pollIntervalMs);\n\n\t\t// Timeout.\n\t\ttimeoutId = setTimeout(() => {\n\t\t\tif (settled) return;\n\t\t\tcleanup();\n\t\t\ttry {\n\t\t\t\toptions.popup.window.close();\n\t\t\t} catch {\n\t\t\t\t// Best-effort close.\n\t\t\t}\n\t\t\treject(\n\t\t\t\tnew ClientError({\n\t\t\t\t\tkind: ClientErrorKind.Timeout,\n\t\t\t\t\tcode: PopupErrorCode.Timeout,\n\t\t\t\t\tmessage: `Popup login timed out after ${timeoutMs}ms.`,\n\t\t\t\t\trecovery: UserRecovery.Retry,\n\t\t\t\t\tsource: \"popup\",\n\t\t\t\t}),\n\t\t\t);\n\t\t}, timeoutMs);\n\t});\n}\n\n// ---------------------------------------------------------------------------\n// Popup callback relay (for use in popup callback pages)\n// ---------------------------------------------------------------------------\n\n/**\n * Options for relaying the callback from the popup window back to the opener.\n */\nexport interface RelayPopupCallbackOptions {\n\t/** The callback payload (URL or fragment) to relay. */\n\tpayload?: string;\n\t/** An error message to relay instead of a successful payload. */\n\terror?: string;\n\t/** Whether to close the popup after relaying (default: true). */\n\tcloseAfterRelay?: boolean;\n\t/** Target origin for the postMessage (default: current origin). */\n\ttargetOrigin?: string;\n}\n\n/**\n * Relay the popup callback result back to the opener window.\n *\n * Call this function from the popup callback page to send the callback\n * URL/fragment back to the parent window that initiated the popup login.\n *\n * @example\n * ```html\n * <script type=\"module\">\n *   import { relayPopupCallback } from \"@securitydept/client/web\";\n *   relayPopupCallback({ payload: window.location.href });\n * </script>\n * ```\n */\nexport function relayPopupCallback(\n\toptions: RelayPopupCallbackOptions = {},\n): void {\n\tconst opener = window.opener;\n\tif (!opener) {\n\t\treturn;\n\t}\n\n\tconst targetOrigin = options.targetOrigin ?? window.location.origin;\n\tconst message: PopupRelayMessage = {\n\t\ttype: \"securitydept:popup_callback\",\n\t\tpayload: options.payload ?? window.location.href,\n\t\terror: options.error,\n\t};\n\n\topener.postMessage(message, targetOrigin);\n\n\tif (options.closeAfterRelay !== false) {\n\t\twindow.close();\n\t}\n}\n","import { createRuntime } from \"../runtime/create-runtime\";\nimport type { ClientRuntime } from \"../runtime/types\";\nimport {\n\tcreateFetchTransport,\n\ttype FetchTransportOptions,\n} from \"../transport/fetch-transport\";\n\nexport interface CreateWebRuntimeOptions\n\textends Partial<Omit<ClientRuntime, \"transport\">> {\n\ttransport?: ClientRuntime[\"transport\"];\n\tfetchTransport?: FetchTransportOptions;\n}\n\n/**\n * Create a `ClientRuntime` for browser/Web-capable environments.\n */\nexport function createWebRuntime(\n\toverrides: CreateWebRuntimeOptions = {},\n): ClientRuntime {\n\tconst { fetchTransport, transport, ...runtime } = overrides;\n\treturn createRuntime({\n\t\t...runtime,\n\t\ttransport: transport ?? createFetchTransport(fetchTransport),\n\t});\n}\n","// Browser visibility change adapter — built on fromEventPattern.\n//\n// Adapts the browser `visibilitychange` event into the SDK's Subscription\n// model, built on the foundation fromEventPattern helper.\n\nimport { fromEventPattern, type Subscription } from \"../scheduling/helpers\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Visibility state snapshot passed to the callback. */\nexport const VisibilityState = {\n\tVisible: \"visible\",\n\tHidden: \"hidden\",\n} as const;\n\nexport type VisibilityState =\n\t(typeof VisibilityState)[keyof typeof VisibilityState];\n\n/** Options for {@link fromVisibilityChange}. */\nexport interface FromVisibilityChangeOptions {\n\t/**\n\t * Callback invoked when the document visibility state changes.\n\t *\n\t * The callback receives the new visibility state (\"visible\" or \"hidden\").\n\t */\n\tcallback: (state: VisibilityState) => void;\n\t/**\n\t * Override the document target (primarily for testing).\n\t * Defaults to `globalThis.document`.\n\t */\n\tdocument?: Pick<\n\t\tDocument,\n\t\t\"addEventListener\" | \"removeEventListener\" | \"visibilityState\"\n\t>;\n}\n\n// ---------------------------------------------------------------------------\n// Implementation\n// ---------------------------------------------------------------------------\n\n/**\n * Subscribe to browser document visibility changes.\n *\n * Built on {@link fromEventPattern} so it follows the same Subscription\n * contract. Returns a {@link Subscription} handle for cleanup.\n *\n * @example\n * ```ts\n * const sub = fromVisibilityChange({\n *   callback: (state) => {\n *     if (state === VisibilityState.Visible) {\n *       scheduleRefresh();\n *     }\n *   },\n * });\n * // Cleanup:\n * sub.unsubscribe();\n * ```\n */\nexport function fromVisibilityChange(\n\toptions: FromVisibilityChangeOptions,\n): Subscription {\n\tconst doc = options.document ?? globalThis.document;\n\n\treturn fromEventPattern<Event>({\n\t\taddHandler: (handler) => {\n\t\t\tdoc.addEventListener(\"visibilitychange\", handler);\n\t\t},\n\t\tremoveHandler: (handler) => {\n\t\t\tdoc.removeEventListener(\"visibilitychange\", handler);\n\t\t},\n\t\tcallback: () => {\n\t\t\tconst state: VisibilityState =\n\t\t\t\tdoc.visibilityState === \"visible\"\n\t\t\t\t\t? VisibilityState.Visible\n\t\t\t\t\t: VisibilityState.Hidden;\n\t\t\toptions.callback(state);\n\t\t},\n\t});\n}\n","// Visibility reconciler — cross-tab / visibility lifecycle hardening baseline\n//\n// Provides a minimal, composable integration between the browser visibility\n// change adapter and the auth material lifecycle. When a tab transitions from\n// hidden → visible, the reconciler triggers a user-supplied reconciliation\n// callback (e.g. check token freshness, re-validate with server, or sync\n// cross-tab state).\n//\n// This is the SDK-side baseline that real projects (e.g. outposts) can wire\n// directly to their mode client's refresh or state-check logic.\n\nimport type { Subscription } from \"../scheduling/helpers\";\nimport type { FromVisibilityChangeOptions } from \"./visibility\";\nimport { fromVisibilityChange, VisibilityState } from \"./visibility\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Callback invoked when the page becomes visible and reconciliation is needed. */\nexport type ReconcileCallback = () => void | Promise<void>;\n\n/** Options for {@link createVisibilityReconciler}. */\nexport interface CreateVisibilityReconcilerOptions {\n\t/**\n\t * Called when the document transitions from hidden → visible.\n\t * The reconciler only fires on the hidden→visible edge; repeated\n\t * visible→visible events are suppressed.\n\t */\n\tonReconcile: ReconcileCallback;\n\n\t/**\n\t * Minimum interval (ms) between reconciliation triggers.\n\t * Prevents rapid-fire reconciliation when the user toggles tabs quickly.\n\t * Defaults to 5000ms (5 seconds).\n\t */\n\tthrottleMs?: number;\n\n\t/**\n\t * Override the document target (primarily for testing).\n\t * Defaults to `globalThis.document`.\n\t */\n\tdocument?: FromVisibilityChangeOptions[\"document\"];\n\n\t/**\n\t * Clock override for testing.\n\t */\n\tnow?: () => number;\n}\n\n/** Handle returned by {@link createVisibilityReconciler}. */\nexport interface VisibilityReconciler {\n\t/** Stop listening for visibility changes. */\n\tdispose(): void;\n\t/** Number of times reconciliation has been triggered. */\n\treadonly reconcileCount: number;\n}\n\n// ---------------------------------------------------------------------------\n// Implementation\n// ---------------------------------------------------------------------------\n\n/**\n * Create a visibility reconciler that triggers a callback when the page\n * transitions from hidden → visible.\n *\n * @example\n * ```ts\n * const reconciler = createVisibilityReconciler({\n *   onReconcile: () => {\n *     // Re-check token freshness or sync cross-tab state\n *     if (controller.snapshot?.tokens.accessTokenExpiresAt) {\n *       scheduleRefreshIfExpired();\n *     }\n *   },\n * });\n * // Later:\n * reconciler.dispose();\n * ```\n */\nexport function createVisibilityReconciler(\n\toptions: CreateVisibilityReconcilerOptions,\n): VisibilityReconciler {\n\tconst throttleMs = options.throttleMs ?? 5000;\n\tconst getNow = options.now ?? (() => Date.now());\n\n\tlet lastReconcileAt = 0;\n\tlet reconcileCount = 0;\n\t// Initialize from the real document state so that tabs opened in background\n\t// (initial hidden) will correctly trigger on their first visible transition.\n\tconst doc = options.document ?? globalThis.document;\n\tlet previousState: VisibilityState =\n\t\tdoc.visibilityState === \"visible\"\n\t\t\t? VisibilityState.Visible\n\t\t\t: VisibilityState.Hidden;\n\n\tconst subscription: Subscription = fromVisibilityChange({\n\t\tcallback: (state) => {\n\t\t\t// Only fire on the hidden → visible edge.\n\t\t\tif (\n\t\t\t\tstate === VisibilityState.Visible &&\n\t\t\t\tpreviousState === VisibilityState.Hidden\n\t\t\t) {\n\t\t\t\tconst now = getNow();\n\t\t\t\tif (now - lastReconcileAt >= throttleMs) {\n\t\t\t\t\tlastReconcileAt = now;\n\t\t\t\t\treconcileCount++;\n\t\t\t\t\toptions.onReconcile();\n\t\t\t\t}\n\t\t\t}\n\t\t\tpreviousState = state;\n\t\t},\n\t\tdocument: doc,\n\t});\n\n\treturn {\n\t\tdispose() {\n\t\t\tsubscription.unsubscribe();\n\t\t},\n\t\tget reconcileCount() {\n\t\t\treturn reconcileCount;\n\t\t},\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAqFA,SAAgB,mBACf,SACe;CACf,MAAM,SAAS,QAAQ,UAAU;CACjC,IAAI,YAAY;CAChB,MAAM,eAAe,iBAAiB;EACrC;EACA,WAAW,iBAAiB;AAE3B,OAAI,aAAa,QAAQ,QAAQ,IAChC;AAED;AACA,WAAQ,OAAO;IACd,UAAU,aAAa;IACvB,UAAU,aAAa;IACvB,CAAC;;EAEH,CAAC;AAEF,QAAO;EACN,UAAU;AACT,gBAAa,aAAa;;EAE3B,IAAI,YAAY;AACf,UAAO;;EAER;;;;;ACnGF,MAAa,iBAAiB;CAE7B,SAAS;CAET,QAAQ;CAER,SAAS;CAET,YAAY;CAEZ,UAAU;CACV;;;;AAsBD,SAAgB,qBACf,UAAgC,EAAE,EACzB;CACT,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAM,SAAS,QAAQ,UAAU;AAUjC,QAAO,SAAS,MAAM,UAAU,OAAO,QAT1B,KAAK,IACjB,GACA,KAAK,MAAM,OAAO,WAAW,OAAO,aAAa,SAAS,EAAE,CAC5D,CAMmD,OALxC,KAAK,IAChB,GACA,KAAK,MAAM,OAAO,WAAW,OAAO,cAAc,UAAU,EAAE,CAC9D,CAE8D;;;;;;;;AAqBhE,SAAgB,gBACf,KACA,SACoB;CACpB,MAAM,WAAW,qBAAqB,QAAQ;CAC9C,MAAM,SAAS,SAAS,UAAU;CAElC,MAAM,MAAM,OAAO,KAAK,KAAK,QAAQ,SAAS;AAE9C,KAAI,CAAC,OAAO,IAAI,OACf,OAAM,IAAI,YAAY;EACrB,MAAM,gBAAgB;EACtB,MAAM,eAAe;EACrB,SACC;EACD,UAAU,aAAa;EACvB,QAAQ;EACR,CAAC;AAGH,QAAO,EAAE,QAAQ,KAAK;;;;;;;;;;;;;;AA6CvB,SAAgB,kBACf,SACkB;CAClB,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,iBAAiB,QAAQ,kBAAkB,OAAO,SAAS;CACjE,MAAM,iBAAiB,QAAQ,kBAAkB;AAEjD,QAAO,IAAI,SAAiB,SAAS,WAAW;EAC/C,IAAI,UAAU;EACd,IAAI;EACJ,IAAI;EAEJ,SAAS,UAAU;AAClB,aAAU;AACV,gBAAa,UAAU;AACvB,iBAAc,OAAO;AACrB,UAAO,oBAAoB,WAAW,UAAU;;EAGjD,SAAS,UAAU,OAAqB;AACvC,OAAI,QAAS;AACb,OAAI,MAAM,WAAW,eAAgB;GAErC,MAAM,OAAO,MAAM;AACnB,OAAI,CAAC,QAAQ,KAAK,SAAS,8BAA+B;AAE1D,YAAS;AAET,OAAI,KAAK,OAAO;AACf,WACC,IAAI,YAAY;KACf,MAAM,gBAAgB;KACtB,MAAM,eAAe;KACrB,SAAS,+BAA+B,KAAK;KAC7C,QAAQ;KACR,CAAC,CACF;AACD;;AAGD,WAAQ,KAAK,QAAQ;;AAItB,SAAO,iBAAiB,WAAW,UAAU;AAG7C,WAAS,kBAAkB;AAC1B,OAAI,QAAS;AACb,OAAI,QAAQ,MAAM,OAAO,QAAQ;AAChC,aAAS;AACT,WACC,IAAI,YAAY;KACf,MAAM,gBAAgB;KACtB,MAAM,eAAe;KACrB,SACC;KACD,UAAU,aAAa;KACvB,QAAQ;KACR,CAAC,CACF;;KAEA,eAAe;AAGlB,cAAY,iBAAiB;AAC5B,OAAI,QAAS;AACb,YAAS;AACT,OAAI;AACH,YAAQ,MAAM,OAAO,OAAO;WACrB;AAGR,UACC,IAAI,YAAY;IACf,MAAM,gBAAgB;IACtB,MAAM,eAAe;IACrB,SAAS,+BAA+B,UAAU;IAClD,UAAU,aAAa;IACvB,QAAQ;IACR,CAAC,CACF;KACC,UAAU;GACZ;;;;;;;;;;;;;;;;AAmCH,SAAgB,mBACf,UAAqC,EAAE,EAChC;CACP,MAAM,SAAS,OAAO;AACtB,KAAI,CAAC,OACJ;CAGD,MAAM,eAAe,QAAQ,gBAAgB,OAAO,SAAS;CAC7D,MAAM,UAA6B;EAClC,MAAM;EACN,SAAS,QAAQ,WAAW,OAAO,SAAS;EAC5C,OAAO,QAAQ;EACf;AAED,QAAO,YAAY,SAAS,aAAa;AAEzC,KAAI,QAAQ,oBAAoB,MAC/B,QAAO,OAAO;;;;;;;AC1QhB,SAAgB,iBACf,YAAqC,EAAE,EACvB;CAChB,MAAM,EAAE,gBAAgB,WAAW,GAAG,YAAY;AAClD,QAAO,cAAc;EACpB,GAAG;EACH,WAAW,aAAa,qBAAqB,eAAe;EAC5D,CAAC;;;;;ACXH,MAAa,kBAAkB;CAC9B,SAAS;CACT,QAAQ;CACR;;;;;;;;;;;;;;;;;;;;AA8CD,SAAgB,qBACf,SACe;CACf,MAAM,MAAM,QAAQ,YAAY,WAAW;AAE3C,QAAO,iBAAwB;EAC9B,aAAa,YAAY;AACxB,OAAI,iBAAiB,oBAAoB,QAAQ;;EAElD,gBAAgB,YAAY;AAC3B,OAAI,oBAAoB,oBAAoB,QAAQ;;EAErD,gBAAgB;GACf,MAAM,QACL,IAAI,oBAAoB,YACrB,gBAAgB,UAChB,gBAAgB;AACpB,WAAQ,SAAS,MAAM;;EAExB,CAAC;;;;;;;;;;;;;;;;;;;;;;ACAH,SAAgB,2BACf,SACuB;CACvB,MAAM,aAAa,QAAQ,cAAc;CACzC,MAAM,SAAS,QAAQ,cAAc,KAAK,KAAK;CAE/C,IAAI,kBAAkB;CACtB,IAAI,iBAAiB;CAGrB,MAAM,MAAM,QAAQ,YAAY,WAAW;CAC3C,IAAI,gBACH,IAAI,oBAAoB,YACrB,gBAAgB,UAChB,gBAAgB;CAEpB,MAAM,eAA6B,qBAAqB;EACvD,WAAW,UAAU;AAEpB,OACC,UAAU,gBAAgB,WAC1B,kBAAkB,gBAAgB,QACjC;IACD,MAAM,MAAM,QAAQ;AACpB,QAAI,MAAM,mBAAmB,YAAY;AACxC,uBAAkB;AAClB;AACA,aAAQ,aAAa;;;AAGvB,mBAAgB;;EAEjB,UAAU;EACV,CAAC;AAEF,QAAO;EACN,UAAU;AACT,gBAAa,aAAa;;EAE3B,IAAI,iBAAiB;AACpB,UAAO;;EAER"}

package/dist/web-router/index.d.mts

@@ -0,0 +1,259 @@
+import { i as PlannerHost, s as RequirementsClientSetComposition, t as AuthGuardClientOption } from "../planner-host-DUZCkLj3.mjs";
+
+//#region src/web-router/navigation-adapter.d.ts
+declare const NavigationAdapterKind: {
+  readonly NavigationApi: "navigation-api";
+  readonly History: "history";
+};
+type NavigationAdapterKind = (typeof NavigationAdapterKind)[keyof typeof NavigationAdapterKind];
+declare const NavigationCause: {
+  readonly Initial: "initial";
+  readonly Push: "push";
+  readonly Replace: "replace";
+  readonly Traverse: "traverse";
+};
+type NavigationCause = (typeof NavigationCause)[keyof typeof NavigationCause];
+interface NavigationIntent {
+  readonly url: URL;
+  readonly cause: NavigationCause;
+  readonly replace: boolean;
+  readonly state: unknown;
+  /** Abort this navigation before it commits. */
+  preventDefault(): void;
+  /** Cancel the current intent and navigate to the given URL instead. */
+  redirect(url: string | URL, options?: {
+    replace?: boolean;
+  }): void;
+}
+interface NavigationCommit {
+  readonly url: URL;
+}
+interface NavigateOptions {
+  /** When true, replace the current history entry instead of pushing. */
+  replace?: boolean;
+  /** Serializable state to attach to the history entry. */
+  state?: unknown;
+  /**
+   * Arbitrary per-navigation metadata. Passed through to `NavigateEvent.info`
+   * when the Navigation API adapter is active; ignored by the History
+   * adapter (no wire support).
+   */
+  info?: unknown;
+}
+interface NavigationAdapter {
+  readonly kind: NavigationAdapterKind;
+  currentUrl(): URL;
+  navigate(url: string | URL, options?: NavigateOptions): Promise<void>;
+  back(): void;
+  forward(): void;
+  /**
+   * Called *before* a navigation commits, so listeners can cancel or
+   * redirect. Both adapters forward synchronous and asynchronous handlers
+   * (adapters await the intent being fully processed before committing).
+   */
+  onBeforeNavigate(listener: (intent: NavigationIntent) => void | Promise<void>): () => void;
+  /** Called *after* a navigation commits. */
+  onNavigate(listener: (commit: NavigationCommit) => void): () => void;
+  destroy(): void;
+}
+declare function createNavigationApiAdapter(): NavigationAdapter;
+interface CreateHistoryAdapterOptions {
+  /**
+   * When true (default), the adapter captures clicks on in-document
+   * `<a href>` elements and routes them through `navigate()` so guards
+   * can intercept. Disable to handle anchor navigation manually.
+   */
+  captureAnchorClicks?: boolean;
+}
+declare function createHistoryAdapter(options?: CreateHistoryAdapterOptions): NavigationAdapter;
+interface CreateNavigationAdapterOptions {
+  /**
+   * Force a specific adapter kind. Useful for tests that need to exercise
+   * the fallback path in a Chromium environment that ships the Navigation
+   * API.
+   * @default "auto"
+   */
+  prefer?: "auto" | NavigationAdapterKind;
+  /**
+   * Options forwarded to {@link createHistoryAdapter} when the history
+   * adapter is selected.
+   */
+  history?: CreateHistoryAdapterOptions;
+}
+/**
+ * Pick the best available navigation backend. Prefers the Web Navigation
+ * API when `window.navigation` is defined; falls back to the History API
+ * otherwise.
+ */
+declare function createNavigationAdapter(options?: CreateNavigationAdapterOptions): NavigationAdapter;
+/**
+ * Quick capability probe — true when the Web Navigation API is present.
+ */
+declare function isNavigationApiAvailable(): boolean;
+//#endregion
+//#region src/web-router/web-router.d.ts
+interface WebRouteContext {
+  /** The URL being navigated to. */
+  url: URL;
+  /** Intent metadata. Null for programmatic `activate()` calls. */
+  intent: NavigationIntent | null;
+}
+type WebRouteMatcher = string | RegExp | ((url: URL) => Record<string, string> | null | undefined);
+interface WebRouteDefinition<TData = unknown> {
+  /** Opaque identifier. */
+  id: string;
+  /**
+   * Matcher for this route segment. Required on leaves — parents that
+   * only carry metadata for children may omit `match`.
+   *
+   * A string is treated as a path-with-params pattern
+   * (`"/users/:id/profile"` → `{ id: "123" }` for `/users/123/profile`).
+   * A RegExp uses `exec(pathname)` and passes named/indexed groups
+   * through as params. A function returns the parsed params or null.
+   */
+  match?: WebRouteMatcher;
+  /**
+   * Auth requirements declared at this route segment. The router walks
+   * the matched route chain from root to leaf and aggregates every
+   * segment's requirements via {@link extractFullRouteRequirements}
+   * before asking the planner-host to evaluate.
+   */
+  requirements?: readonly AuthGuardClientOption[];
+  /**
+   * Composition strategy with the parent segment in the matched chain.
+   *
+   * - `merge`   (default): parent requirements are kept, child requirements
+   *   append/override by `requirementId`.
+   * - `inherit`: child declares no additional requirements; parent set is
+   *   used as-is.
+   * - `replace`: parent requirements are discarded entirely; this child
+   *   contributes the full effective set (use for "public" subtrees of an
+   *   otherwise protected parent).
+   */
+  composition?: RequirementsClientSetComposition;
+  /**
+   * Nested child routes. When present, `match` on the parent is optional
+   * and is not consulted for matching leaves — only the leaves' matchers
+   * participate in URL resolution. The chain from root to leaf is what
+   * drives requirement aggregation.
+   */
+  children?: readonly WebRouteDefinition<TData>[];
+  /** Arbitrary data attached to matched routes. */
+  data?: TData;
+}
+interface WebRouteMatch<TData = unknown> {
+  /** The leaf route that matched. */
+  readonly route: WebRouteDefinition<TData>;
+  readonly url: URL;
+  readonly params: Record<string, string>;
+  /**
+   * The complete chain from root ancestor → leaf. A flat route without
+   * children produces a single-element chain.
+   */
+  readonly chain: readonly WebRouteDefinition<TData>[];
+}
+/**
+ * Sugar for declaring a route segment. Enforces a consistent shape so
+ * adopter code reads like the Angular / TanStack helpers without forcing
+ * any particular DI or decorator style.
+ */
+declare function defineWebRoute<TData = unknown>(definition: WebRouteDefinition<TData>): WebRouteDefinition<TData>;
+interface FullRouteRequirementsOptions {
+  /**
+   * Default composition for segments that do not set their own
+   * `composition` field. Defaults to `merge` to match the Angular helper
+   * and the TanStack adapter.
+   */
+  defaultComposition?: RequirementsClientSetComposition;
+}
+/**
+ * Aggregate every segment's `requirements` across the matched chain into
+ * a single {@link AuthGuardClientOption} list, honouring each segment's
+ * composition strategy (`inherit` / `merge` / `replace`).
+ *
+ * This is the extraction counter-part to the nested `WebRouteDefinition`
+ * tree — the router calls it once per matched navigation and forwards the
+ * resulting flat list to the planner-host.
+ */
+declare function extractFullRouteRequirements<TData = unknown>(chain: readonly WebRouteDefinition<TData>[], options?: FullRouteRequirementsOptions): AuthGuardClientOption[];
+interface CreateWebRouterOptions<TData = unknown> {
+  /**
+   * Initial routes. Nested `children` are supported: the router
+   * flattens the declared tree into matchable leaves and reconstructs
+   * the root→leaf chain on every match for full-route aggregation.
+   *
+   * More routes can be added via `router.addRoute(...)` at runtime.
+   */
+  routes?: readonly WebRouteDefinition<TData>[];
+  /** Planner-host for evaluating aggregated route requirements. */
+  plannerHost?: PlannerHost;
+  /**
+   * Options for the underlying navigation adapter. When omitted the
+   * router auto-selects the Navigation API if available.
+   */
+  navigationAdapter?: CreateNavigationAdapterOptions | NavigationAdapter;
+  /**
+   * Called after every committed navigation. Prefer `onNavigate` for
+   * reactivity; this option exists for convenience.
+   */
+  onNavigate?: (commit: NavigationCommit) => void;
+  /**
+   * Default requirement composition strategy applied when a route
+   * segment does not declare its own `composition`. Defaults to `merge`
+   * (the Angular / TanStack default).
+   */
+  defaultComposition?: RequirementsClientSetComposition;
+}
+interface WebRouter<TData = unknown> {
+  readonly adapter: NavigationAdapter;
+  /** Current URL (from the underlying adapter). */
+  currentUrl(): URL;
+  /** Current matched route (or null if no route matches). */
+  currentMatch(): WebRouteMatch<TData> | null;
+  /** Register an additional root-level route at runtime. */
+  addRoute(route: WebRouteDefinition<TData>): () => void;
+  /** All currently registered root-level routes. */
+  routes(): readonly WebRouteDefinition<TData>[];
+  /**
+   * Match a URL against the registered routes. Returns the first match in
+   * registration order, or `null` if none match. When a match is found,
+   * {@link WebRouteMatch.chain} contains the root→leaf route chain so
+   * adopters can feed it to {@link extractFullRouteRequirements}.
+   */
+  match(url: URL): WebRouteMatch<TData> | null;
+  /**
+   * Compute the effective aggregated requirements for a given match,
+   * honouring every segment's composition strategy.
+   */
+  extractRequirements(match: WebRouteMatch<TData>): AuthGuardClientOption[];
+  /** Programmatically navigate. */
+  navigate(url: string | URL, options?: {
+    replace?: boolean;
+    state?: unknown;
+  }): Promise<void>;
+  back(): void;
+  forward(): void;
+  /** Subscribe to committed navigations. */
+  onNavigate(listener: (commit: NavigationCommit) => void): () => void;
+  /** Tear down event listeners on the underlying adapter. */
+  destroy(): void;
+}
+/**
+ * Create a {@link WebRouter} wired to the selected navigation backend and
+ * optionally to a planner-host for aggregated route requirements evaluation.
+ *
+ * The router listens for pre-commit navigation intents, matches the
+ * destination URL against the registered route tree, aggregates the full
+ * root→leaf chain's requirements (respecting each segment's composition
+ * strategy), and asks `plannerHost.evaluate()` to rule on the complete
+ * candidate set. Depending on the host's decision it either:
+ *
+ * - lets the navigation commit (all requirements authenticated);
+ * - redirects to the URL returned by `onUnauthenticated` (when a candidate
+ *   picks a redirect); or
+ * - cancels the navigation (when `onUnauthenticated` returns `false`).
+ */
+declare function createWebRouter<TData = unknown>(options?: CreateWebRouterOptions<TData>): WebRouter<TData>;
+//#endregion
+export { type CreateHistoryAdapterOptions, type CreateNavigationAdapterOptions, type CreateWebRouterOptions, type FullRouteRequirementsOptions, type NavigateOptions, type NavigationAdapter, NavigationAdapterKind, type NavigationCause, type NavigationCommit, type NavigationIntent, RequirementsClientSetComposition, type WebRouteContext, type WebRouteDefinition, type WebRouteMatch, type WebRouteMatcher, type WebRouter, createHistoryAdapter, createNavigationAdapter, createNavigationApiAdapter, createWebRouter, defineWebRoute, extractFullRouteRequirements, isNavigationApiAvailable };
+//# sourceMappingURL=index.d.mts.map