@shipfox/client-shell 3.0.1 → 5.0.0

package/dist/components/auth-shell.d.ts

@@ -0,0 +1,13 @@
+import { type HeaderProps } from '@shipfox/react-ui/typography';
+import type { PropsWithChildren, ReactNode, Ref } from 'react';
+export interface AuthShellProps {
+    title: string;
+    description: string;
+    children: ReactNode;
+    className?: string;
+    headingProps?: Omit<HeaderProps, 'children' | 'id'> | undefined;
+    headingRef?: Ref<HTMLHeadingElement> | undefined;
+}
+export declare function AuthShell({ title, description, children, className, headingProps, headingRef, }: AuthShellProps): import("react").JSX.Element;
+export declare function AuthActions({ children }: PropsWithChildren): import("react").JSX.Element;
+//# sourceMappingURL=auth-shell.d.ts.map

package/dist/components/auth-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-shell.d.ts","sourceRoot":"","sources":["../../src/components/auth-shell.tsx"],"names":[],"mappings":"AACA,OAAO,EAAS,KAAK,WAAW,EAAO,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAC,iBAAiB,EAAE,SAAS,EAAE,GAAG,EAAC,MAAM,OAAO,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;IAChE,UAAU,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC;CAClD;AAED,wBAAgB,SAAS,CAAC,EACxB,KAAK,EACL,WAAW,EACX,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,UAAU,GACX,EAAE,cAAc,+BA0ChB;AAED,wBAAgB,WAAW,CAAC,EAAC,QAAQ,EAAC,EAAE,iBAAiB,+BAExD"}

package/dist/components/auth-shell.js

@@ -0,0 +1,68 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Icon } from '@shipfox/react-ui/icon';
+import { Header, Text } from '@shipfox/react-ui/typography';
+export function AuthShell({ title, description, children, className, headingProps, headingRef }) {
+    return /*#__PURE__*/ _jsxs("main", {
+        className: "relative flex min-h-screen items-center justify-center overflow-hidden bg-background-subtle-base px-24 py-32 max-[520px]:items-start max-[520px]:px-20 max-[520px]:pb-32 max-[520px]:pt-56",
+        children: [
+            /*#__PURE__*/ _jsx("div", {
+                className: "pointer-events-none absolute left-1/2 top-0 h-[380px] w-full max-w-[880px] -translate-x-1/2 -translate-y-[120px] opacity-55 max-[520px]:-translate-y-[170px] max-[520px]:opacity-35",
+                "aria-hidden": "true",
+                style: {
+                    maskImage: 'radial-gradient(ellipse 85% 100% at 50% 0%, #000 0%, #000 24%, transparent 78%)',
+                    WebkitMaskImage: 'radial-gradient(ellipse 85% 100% at 50% 0%, #000 0%, #000 24%, transparent 78%)'
+                },
+                children: /*#__PURE__*/ _jsx("div", {
+                    className: "h-full w-full bg-[radial-gradient(circle,rgba(230,62,0,0.48)_1.6px,transparent_1.8px)] bg-[length:44px_44px]"
+                })
+            }),
+            /*#__PURE__*/ _jsxs("section", {
+                className: className ?? 'relative flex w-full max-w-[384px] flex-col items-stretch gap-28',
+                "aria-labelledby": "auth-title",
+                children: [
+                    /*#__PURE__*/ _jsxs("div", {
+                        className: "flex flex-col items-center gap-16",
+                        children: [
+                            /*#__PURE__*/ _jsx("div", {
+                                className: "flex size-64 items-center justify-center rounded-12 border border-border-neutral-base bg-background-neutral-base p-10 shadow-button-neutral",
+                                children: /*#__PURE__*/ _jsx(Icon, {
+                                    name: "shipfox",
+                                    className: "size-42 text-background-highlight-interactive"
+                                })
+                            }),
+                            /*#__PURE__*/ _jsxs("div", {
+                                className: "flex min-w-[128px] flex-col items-center gap-4 text-center",
+                                children: [
+                                    /*#__PURE__*/ _jsx(Header, {
+                                        id: "auth-title",
+                                        variant: "h1",
+                                        tabIndex: -1,
+                                        ...headingProps,
+                                        ...headingRef ? {
+                                            ref: headingRef
+                                        } : {},
+                                        children: title
+                                    }),
+                                    /*#__PURE__*/ _jsx(Text, {
+                                        size: "sm",
+                                        className: "text-foreground-neutral-subtle",
+                                        children: description
+                                    })
+                                ]
+                            })
+                        ]
+                    }),
+                    children
+                ]
+            })
+        ]
+    });
+}
+export function AuthActions({ children }) {
+    return /*#__PURE__*/ _jsx("div", {
+        className: "flex flex-col gap-20",
+        children: children
+    });
+}
+
+//# sourceMappingURL=auth-shell.js.map

package/dist/components/auth-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/components/auth-shell.tsx"],"sourcesContent":["import {Icon} from '@shipfox/react-ui/icon';\nimport {Header, type HeaderProps, Text} from '@shipfox/react-ui/typography';\nimport type {PropsWithChildren, ReactNode, Ref} from 'react';\n\nexport interface AuthShellProps {\n  title: string;\n  description: string;\n  children: ReactNode;\n  className?: string;\n  headingProps?: Omit<HeaderProps, 'children' | 'id'> | undefined;\n  headingRef?: Ref<HTMLHeadingElement> | undefined;\n}\n\nexport function AuthShell({\n  title,\n  description,\n  children,\n  className,\n  headingProps,\n  headingRef,\n}: AuthShellProps) {\n  return (\n    <main className=\"relative flex min-h-screen items-center justify-center overflow-hidden bg-background-subtle-base px-24 py-32 max-[520px]:items-start max-[520px]:px-20 max-[520px]:pb-32 max-[520px]:pt-56\">\n      <div\n        className=\"pointer-events-none absolute left-1/2 top-0 h-[380px] w-full max-w-[880px] -translate-x-1/2 -translate-y-[120px] opacity-55 max-[520px]:-translate-y-[170px] max-[520px]:opacity-35\"\n        aria-hidden=\"true\"\n        style={{\n          maskImage:\n            'radial-gradient(ellipse 85% 100% at 50% 0%, #000 0%, #000 24%, transparent 78%)',\n          WebkitMaskImage:\n            'radial-gradient(ellipse 85% 100% at 50% 0%, #000 0%, #000 24%, transparent 78%)',\n        }}\n      >\n        <div className=\"h-full w-full bg-[radial-gradient(circle,rgba(230,62,0,0.48)_1.6px,transparent_1.8px)] bg-[length:44px_44px]\" />\n      </div>\n      <section\n        className={className ?? 'relative flex w-full max-w-[384px] flex-col items-stretch gap-28'}\n        aria-labelledby=\"auth-title\"\n      >\n        <div className=\"flex flex-col items-center gap-16\">\n          <div className=\"flex size-64 items-center justify-center rounded-12 border border-border-neutral-base bg-background-neutral-base p-10 shadow-button-neutral\">\n            <Icon name=\"shipfox\" className=\"size-42 text-background-highlight-interactive\" />\n          </div>\n          <div className=\"flex min-w-[128px] flex-col items-center gap-4 text-center\">\n            <Header\n              id=\"auth-title\"\n              variant=\"h1\"\n              tabIndex={-1}\n              {...headingProps}\n              {...(headingRef ? ({ref: headingRef} as HeaderProps) : {})}\n            >\n              {title}\n            </Header>\n            <Text size=\"sm\" className=\"text-foreground-neutral-subtle\">\n              {description}\n            </Text>\n          </div>\n        </div>\n        {children}\n      </section>\n    </main>\n  );\n}\n\nexport function AuthActions({children}: PropsWithChildren) {\n  return <div className=\"flex flex-col gap-20\">{children}</div>;\n}\n"],"names":["Icon","Header","Text","AuthShell","title","description","children","className","headingProps","headingRef","main","div","aria-hidden","style","maskImage","WebkitMaskImage","section","aria-labelledby","name","id","variant","tabIndex","ref","size","AuthActions"],"mappings":";AAAA,SAAQA,IAAI,QAAO,yBAAyB;AAC5C,SAAQC,MAAM,EAAoBC,IAAI,QAAO,+BAA+B;AAY5E,OAAO,SAASC,UAAU,EACxBC,KAAK,EACLC,WAAW,EACXC,QAAQ,EACRC,SAAS,EACTC,YAAY,EACZC,UAAU,EACK;IACf,qBACE,MAACC;QAAKH,WAAU;;0BACd,KAACI;gBACCJ,WAAU;gBACVK,eAAY;gBACZC,OAAO;oBACLC,WACE;oBACFC,iBACE;gBACJ;0BAEA,cAAA,KAACJ;oBAAIJ,WAAU;;;0BAEjB,MAACS;gBACCT,WAAWA,aAAa;gBACxBU,mBAAgB;;kCAEhB,MAACN;wBAAIJ,WAAU;;0CACb,KAACI;gCAAIJ,WAAU;0CACb,cAAA,KAACP;oCAAKkB,MAAK;oCAAUX,WAAU;;;0CAEjC,MAACI;gCAAIJ,WAAU;;kDACb,KAACN;wCACCkB,IAAG;wCACHC,SAAQ;wCACRC,UAAU,CAAC;wCACV,GAAGb,YAAY;wCACf,GAAIC,aAAc;4CAACa,KAAKb;wCAAU,IAAoB,CAAC,CAAC;kDAExDL;;kDAEH,KAACF;wCAAKqB,MAAK;wCAAKhB,WAAU;kDACvBF;;;;;;oBAINC;;;;;AAIT;AAEA,OAAO,SAASkB,YAAY,EAAClB,QAAQ,EAAoB;IACvD,qBAAO,KAACK;QAAIJ,WAAU;kBAAwBD;;AAChD"}

package/dist/core/session.d.ts

@@ -0,0 +1,20 @@
+export interface UserIdentity {
+    id: string;
+    email: string;
+    name?: string;
+    emailVerifiedAt?: string;
+}
+export interface AuthenticatedSession {
+    accessToken: string;
+    user: UserIdentity;
+}
+export interface WorkspaceMembership {
+    id: string;
+    workspaceId: string;
+}
+export interface WorkspaceSummary {
+    id: string;
+    name: string;
+    membershipId: string;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/core/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/core/session.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/core/session.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=session.js.map

package/dist/core/session.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/session.ts"],"sourcesContent":["export interface UserIdentity {\n  id: string;\n  email: string;\n  name?: string;\n  emailVerifiedAt?: string;\n}\n\nexport interface AuthenticatedSession {\n  accessToken: string;\n  user: UserIdentity;\n}\n\nexport interface WorkspaceMembership {\n  id: string;\n  workspaceId: string;\n}\n\nexport interface WorkspaceSummary {\n  id: string;\n  name: string;\n  membershipId: string;\n}\n"],"names":[],"mappings":"AAiBA,WAIC"}

package/dist/hooks/api/session-mapper.d.ts

@@ -0,0 +1,5 @@
+import type { LoginResponseDto, UserDto } from '@shipfox/api-auth-dto';
+import type { AuthenticatedSession, UserIdentity } from '#core/session.js';
+export declare function toUserIdentity(dto: UserDto): UserIdentity;
+export declare function toAuthenticatedSession(dto: LoginResponseDto): AuthenticatedSession;
+//# sourceMappingURL=session-mapper.d.ts.map

package/dist/hooks/api/session-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-mapper.d.ts","sourceRoot":"","sources":["../../../src/hooks/api/session-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,gBAAgB,EAAE,OAAO,EAAC,MAAM,uBAAuB,CAAC;AACrE,OAAO,KAAK,EAAC,oBAAoB,EAAE,YAAY,EAAC,MAAM,kBAAkB,CAAC;AAEzE,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAOzD;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,gBAAgB,GAAG,oBAAoB,CAElF"}

package/dist/hooks/api/session-mapper.js

@@ -0,0 +1,20 @@
+export function toUserIdentity(dto) {
+    return {
+        id: dto.id,
+        email: dto.email,
+        ...dto.name ? {
+            name: dto.name
+        } : {},
+        ...dto.email_verified_at ? {
+            emailVerifiedAt: dto.email_verified_at
+        } : {}
+    };
+}
+export function toAuthenticatedSession(dto) {
+    return {
+        accessToken: dto.token,
+        user: toUserIdentity(dto.user)
+    };
+}
+
+//# sourceMappingURL=session-mapper.js.map

package/dist/hooks/api/session-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/hooks/api/session-mapper.ts"],"sourcesContent":["import type {LoginResponseDto, UserDto} from '@shipfox/api-auth-dto';\nimport type {AuthenticatedSession, UserIdentity} from '#core/session.js';\n\nexport function toUserIdentity(dto: UserDto): UserIdentity {\n  return {\n    id: dto.id,\n    email: dto.email,\n    ...(dto.name ? {name: dto.name} : {}),\n    ...(dto.email_verified_at ? {emailVerifiedAt: dto.email_verified_at} : {}),\n  };\n}\n\nexport function toAuthenticatedSession(dto: LoginResponseDto): AuthenticatedSession {\n  return {accessToken: dto.token, user: toUserIdentity(dto.user)};\n}\n"],"names":["toUserIdentity","dto","id","email","name","email_verified_at","emailVerifiedAt","toAuthenticatedSession","accessToken","token","user"],"mappings":"AAGA,OAAO,SAASA,eAAeC,GAAY;IACzC,OAAO;QACLC,IAAID,IAAIC,EAAE;QACVC,OAAOF,IAAIE,KAAK;QAChB,GAAIF,IAAIG,IAAI,GAAG;YAACA,MAAMH,IAAIG,IAAI;QAAA,IAAI,CAAC,CAAC;QACpC,GAAIH,IAAII,iBAAiB,GAAG;YAACC,iBAAiBL,IAAII,iBAAiB;QAAA,IAAI,CAAC,CAAC;IAC3E;AACF;AAEA,OAAO,SAASE,uBAAuBN,GAAqB;IAC1D,OAAO;QAACO,aAAaP,IAAIQ,KAAK;QAAEC,MAAMV,eAAeC,IAAIS,IAAI;IAAC;AAChE"}

package/dist/runtime/auth.d.ts

@@ -1,16 +1,11 @@
-import type { LoginResponseDto, UserDto } from '@shipfox/api-auth-dto';
-import type { MembershipWithWorkspaceDto } from '@shipfox/api-workspaces-dto';
 import type { PropsWithChildren } from 'react';
+import type { AuthenticatedSession, UserIdentity, WorkspaceSummary } from '#core/session.js';
 export type AuthStatus = 'loading' | 'authenticated' | 'guest';
-export interface Workspace {
-    id: string;
-    name: string;
-    membershipId: string;
-}
+export type Workspace = WorkspaceSummary;
 export interface AuthState {
     status: AuthStatus;
     token?: string;
-    user?: UserDto;
+    user?: UserIdentity;
     workspaces?: Workspace[];
 }
 export interface AuthStateValue extends AuthState {
@@ -25,24 +20,21 @@ export declare const authStateAtom: import("jotai").PrimitiveAtom<AuthState> & {
 };
 export declare const authRefreshQueryKey: readonly ["auth", "refresh"];
 export declare const userWorkspacesQueryKey: readonly ["workspaces", "mine"];
-export declare function toAuthenticatedState(result: LoginResponseDto, memberships?: MembershipWithWorkspaceDto[]): AuthState;
+export declare function toAuthenticatedState(session: AuthenticatedSession, workspaces?: WorkspaceSummary[]): AuthState;
 export declare function useAuthState(): AuthStateValue;
 export declare function listUserWorkspaces(token?: string): Promise<{
-    memberships: MembershipWithWorkspaceDto[];
-}>;
-export declare function getAuthRefreshDelayMs(token: string, nowMs?: number): number | undefined;
-export declare function useRefreshAuth(): () => Promise<{
-    token: string;
-    user: {
+    memberships: {
         id: string;
-        email: string;
-        name: string | null;
-        email_verified_at: string | null;
-        status: "active" | "suspended" | "deleted";
-        created_at: string;
-        updated_at: string;
-    };
+        name: string;
+        membershipId: string;
+    }[];
 }>;
+export declare function getAuthRefreshDelayMs(token: string, nowMs?: number): number | undefined;
+export declare function useAuthTransition(): {
+    enterAuthenticated: (session: AuthenticatedSession) => Promise<void>;
+    enterGuest: () => Promise<void>;
+};
+export declare function useRefreshAuth(): () => Promise<AuthenticatedSession>;
 export interface AuthRuntimeProps extends PropsWithChildren {
     effects?: boolean;
 }

package/dist/runtime/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,gBAAgB,EAAE,OAAO,EAAC,MAAM,uBAAuB,CAAC;AACrE,OAAO,KAAK,EAAC,0BAA0B,EAAC,MAAM,6BAA6B,CAAC;AAI5E,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,OAAO,CAAC;AAO7C,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,OAAO,CAAC;AAE/D,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,eAAO,MAAM,gBAAgB,EAAE,SAA+B,CAAC;AAC/D,eAAO,MAAM,aAAa;;CAAoC,CAAC;AAC/D,eAAO,MAAM,mBAAmB,8BAA+B,CAAC;AAChE,eAAO,MAAM,sBAAsB,iCAAkC,CAAC;AAEtE,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,gBAAgB,EACxB,WAAW,GAAE,0BAA0B,EAAO,GAC7C,SAAS,CAWX;AAED,wBAAgB,YAAY,IAAI,cAAc,CAY7C;AAED,wBAAsB,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM;iBACf,0BAA0B,EAAE;GAInE;AAwBD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,MAAM,GAAG,SAAS,CAG3F;AAED,wBAAgB,cAAc;;;;;;;;;;;GA8B7B;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,WAAW,CAAC,EAAC,QAAQ,EAAE,OAAc,EAAC,EAAE,gBAAgB,6BAyEvE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,OAAO,CAAC;AAE7C,OAAO,KAAK,EAAC,oBAAoB,EAAE,YAAY,EAAE,gBAAgB,EAAC,MAAM,kBAAkB,CAAC;AAO3F,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,OAAO,CAAC;AAE/D,MAAM,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEzC,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,eAAO,MAAM,gBAAgB,EAAE,SAA+B,CAAC;AAC/D,eAAO,MAAM,aAAa;;CAAoC,CAAC;AAE/D,eAAO,MAAM,mBAAmB,8BAA+B,CAAC;AAChE,eAAO,MAAM,sBAAsB,iCAAkC,CAAC;AAEtE,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,oBAAoB,EAC7B,UAAU,GAAE,gBAAgB,EAAO,GAClC,SAAS,CAOX;AAED,wBAAgB,YAAY,IAAI,cAAc,CAY7C;AAED,wBAAsB,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM;;;;;;GAatD;AAyBD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAa,GAAG,MAAM,GAAG,SAAS,CAG3F;AAED,wBAAgB,iBAAiB;kCAmBb,oBAAoB;;EAgCvC;AAED,wBAAgB,cAAc,wCAkB7B;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,WAAW,CAAC,EAAC,QAAQ,EAAE,OAAc,EAAC,EAAE,gBAAgB,6BAyEvE"}

package/dist/runtime/auth.js

@@ -1,7 +1,10 @@
-import { ApiError, apiRequest, configureApiClient } from '@shipfox/client-api';
+import { loginResponseSchema } from '@shipfox/api-auth-dto';
+import { listUserWorkspacesResponseSchema } from '@shipfox/api-workspaces-dto';
+import { ApiError, checkedApiRequest, configureApiClient } from '@shipfox/client-api';
 import { useQueryClient } from '@tanstack/react-query';
 import { atom, useAtomValue, useSetAtom, useStore } from 'jotai';
 import { useCallback, useEffect, useMemo } from 'react';
+import { toAuthenticatedSession } from '#hooks/api/session-mapper.js';
 const REFRESH_EARLY_MS = 5 * 60 * 1000;
 const REFRESH_RETRY_DELAY_MS = 60_000;
 const BASE64_URL_REPLACEMENTS = {
@@ -12,6 +15,7 @@ export const initialAuthState = {
     status: 'loading'
 };
 export const authStateAtom = atom(initialAuthState);
+const authTransitionEpochAtom = atom(0);
 export const authRefreshQueryKey = [
     'auth',
     'refresh'
@@ -20,16 +24,12 @@ export const userWorkspacesQueryKey = [
     'workspaces',
     'mine'
 ];
-export function toAuthenticatedState(result, memberships = []) {
+export function toAuthenticatedState(session, workspaces = []) {
     return {
         status: 'authenticated',
-        token: result.token,
-        user: result.user,
-        workspaces: memberships.map((membership)=>({
-                id: membership.workspace_id,
-                name: membership.workspace_name,
-                membershipId: membership.id
-            }))
+        token: session.accessToken,
+        user: session.user,
+        workspaces
     };
 }
 export function useAuthState() {
@@ -45,16 +45,24 @@ export function useAuthState() {
     ]);
 }
 export async function listUserWorkspaces(token) {
-    return await apiRequest('/workspaces', token ? {
+    const response = await checkedApiRequest(listUserWorkspacesResponseSchema, '/workspaces', token ? {
         headers: {
             authorization: `Bearer ${token}`
         }
     } : {});
+    return {
+        memberships: response.memberships.map((membership)=>({
+                id: membership.workspace_id,
+                name: membership.workspace_name,
+                membershipId: membership.id
+            }))
+    };
 }
 async function refreshAuthRequest() {
-    return await apiRequest('/auth/refresh', {
+    const response = await checkedApiRequest(loginResponseSchema, '/auth/refresh', {
         method: 'POST'
     });
+    return toAuthenticatedSession(response);
 }
 function decodeBase64Url(value) {
     const base64 = value.replace(BASE64_URL_REPLACEMENTS.dash, '+').replace(BASE64_URL_REPLACEMENTS.underscore, '/');
@@ -74,9 +82,66 @@ export function getAuthRefreshDelayMs(token, nowMs = Date.now()) {
     const exp = readJwtExp(token);
     return exp === undefined ? undefined : exp * 1000 - nowMs - REFRESH_EARLY_MS;
 }
-export function useRefreshAuth() {
+export function useAuthTransition() {
     const queryClient = useQueryClient();
+    const store = useStore();
     const setState = useSetAtom(authStateAtom);
+    const clearPrivateState = useCallback(async ()=>{
+        await queryClient.cancelQueries();
+        queryClient.clear();
+    }, [
+        queryClient
+    ]);
+    const enterGuest = useCallback(async ()=>{
+        const transitionEpoch = store.get(authTransitionEpochAtom) + 1;
+        store.set(authTransitionEpochAtom, transitionEpoch);
+        await clearPrivateState();
+        if (store.get(authTransitionEpochAtom) !== transitionEpoch) return;
+        setState({
+            status: 'guest'
+        });
+    }, [
+        clearPrivateState,
+        setState,
+        store
+    ]);
+    const enterAuthenticated = useCallback(async (session)=>{
+        const transitionEpoch = store.get(authTransitionEpochAtom) + 1;
+        store.set(authTransitionEpochAtom, transitionEpoch);
+        const previousState = store.get(authStateAtom);
+        const principalChanged = previousState.status === 'authenticated' && previousState.user?.id !== session.user.id;
+        if (principalChanged) await clearPrivateState();
+        if (store.get(authTransitionEpochAtom) !== transitionEpoch) return;
+        queryClient.setQueryData(authRefreshQueryKey, session);
+        let workspaces = [];
+        try {
+            const hydratedWorkspaces = await queryClient.fetchQuery({
+                queryKey: userWorkspacesQueryKey,
+                queryFn: ()=>listUserWorkspaces(session.accessToken),
+                retry: false,
+                staleTime: 0
+            });
+            workspaces = hydratedWorkspaces.memberships;
+            queryClient.setQueryData(userWorkspacesQueryKey, hydratedWorkspaces);
+        } catch  {
+        // The authenticated session remains usable while workspace hydration retries on the next route load.
+        }
+        if (store.get(authTransitionEpochAtom) !== transitionEpoch) return;
+        setState(toAuthenticatedState(session, workspaces));
+    }, [
+        clearPrivateState,
+        queryClient,
+        setState,
+        store
+    ]);
+    return {
+        enterAuthenticated,
+        enterGuest
+    };
+}
+export function useRefreshAuth() {
+    const queryClient = useQueryClient();
+    const { enterAuthenticated, enterGuest } = useAuthTransition();
     return useCallback(async ()=>{
         try {
             const result = await queryClient.fetchQuery({
@@ -85,29 +150,16 @@ export function useRefreshAuth() {
                 retry: false,
                 staleTime: 0
             });
-            let memberships = [];
-            try {
-                const workspaces = await queryClient.fetchQuery({
-                    queryKey: userWorkspacesQueryKey,
-                    queryFn: ()=>listUserWorkspaces(result.token),
-                    retry: false,
-                    staleTime: 0
-                });
-                memberships = workspaces.memberships;
-            } catch  {
-            // A valid session remains usable while workspace hydration retries on the next route load.
-            }
-            setState(toAuthenticatedState(result, memberships));
+            await enterAuthenticated(result);
             return result;
         } catch (error) {
-            if (error instanceof ApiError && error.status === 401) setState({
-                status: 'guest'
-            });
+            if (error instanceof ApiError && error.status === 401) await enterGuest();
             throw error;
         }
     }, [
-        queryClient,
-        setState
+        enterAuthenticated,
+        enterGuest,
+        queryClient
     ]);
 }
 export function AuthRuntime({ children, effects = true }) {
@@ -118,7 +170,7 @@ export function AuthRuntime({ children, effects = true }) {
         if (!effects) return;
         configureApiClient({
             getAccessToken: ()=>store.get(authStateAtom).token,
-            refreshAccessToken: async ()=>(await refreshAuth()).token
+            refreshAccessToken: async ()=>(await refreshAuth()).accessToken
         });
     }, [
         effects,

package/dist/runtime/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/runtime/auth.tsx"],"sourcesContent":["import type {LoginResponseDto, UserDto} from '@shipfox/api-auth-dto';\nimport type {MembershipWithWorkspaceDto} from '@shipfox/api-workspaces-dto';\nimport {ApiError, apiRequest, configureApiClient} from '@shipfox/client-api';\nimport {useQueryClient} from '@tanstack/react-query';\nimport {atom, useAtomValue, useSetAtom, useStore} from 'jotai';\nimport type {PropsWithChildren} from 'react';\nimport {useCallback, useEffect, useMemo} from 'react';\n\nconst REFRESH_EARLY_MS = 5 * 60 * 1000;\nconst REFRESH_RETRY_DELAY_MS = 60_000;\nconst BASE64_URL_REPLACEMENTS = {dash: /-/g, underscore: /_/g} as const;\n\nexport type AuthStatus = 'loading' | 'authenticated' | 'guest';\n\nexport interface Workspace {\n  id: string;\n  name: string;\n  membershipId: string;\n}\n\nexport interface AuthState {\n  status: AuthStatus;\n  token?: string;\n  user?: UserDto;\n  workspaces?: Workspace[];\n}\n\nexport interface AuthStateValue extends AuthState {\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  workspaces: Workspace[];\n  hasWorkspace: boolean;\n}\n\nexport const initialAuthState: AuthState = {status: 'loading'};\nexport const authStateAtom = atom<AuthState>(initialAuthState);\nexport const authRefreshQueryKey = ['auth', 'refresh'] as const;\nexport const userWorkspacesQueryKey = ['workspaces', 'mine'] as const;\n\nexport function toAuthenticatedState(\n  result: LoginResponseDto,\n  memberships: MembershipWithWorkspaceDto[] = [],\n): AuthState {\n  return {\n    status: 'authenticated',\n    token: result.token,\n    user: result.user,\n    workspaces: memberships.map((membership) => ({\n      id: membership.workspace_id,\n      name: membership.workspace_name,\n      membershipId: membership.id,\n    })),\n  };\n}\n\nexport function useAuthState(): AuthStateValue {\n  const state = useAtomValue(authStateAtom);\n  return useMemo(\n    () => ({\n      ...state,\n      workspaces: state.workspaces ?? [],\n      isLoading: state.status === 'loading',\n      isAuthenticated: state.status === 'authenticated',\n      hasWorkspace: (state.workspaces ?? []).length > 0,\n    }),\n    [state],\n  );\n}\n\nexport async function listUserWorkspaces(token?: string) {\n  return await apiRequest<{memberships: MembershipWithWorkspaceDto[]}>(\n    '/workspaces',\n    token ? {headers: {authorization: `Bearer ${token}`}} : {},\n  );\n}\n\nasync function refreshAuthRequest() {\n  return await apiRequest<LoginResponseDto>('/auth/refresh', {method: 'POST'});\n}\n\nfunction decodeBase64Url(value: string): string {\n  const base64 = value\n    .replace(BASE64_URL_REPLACEMENTS.dash, '+')\n    .replace(BASE64_URL_REPLACEMENTS.underscore, '/');\n  return atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, '='));\n}\n\nfunction readJwtExp(token: string): number | undefined {\n  const [, payload] = token.split('.');\n  if (!payload) return undefined;\n  try {\n    const parsed = JSON.parse(decodeBase64Url(payload)) as {exp?: unknown};\n    return typeof parsed.exp === 'number' && Number.isFinite(parsed.exp) ? parsed.exp : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function getAuthRefreshDelayMs(token: string, nowMs = Date.now()): number | undefined {\n  const exp = readJwtExp(token);\n  return exp === undefined ? undefined : exp * 1000 - nowMs - REFRESH_EARLY_MS;\n}\n\nexport function useRefreshAuth() {\n  const queryClient = useQueryClient();\n  const setState = useSetAtom(authStateAtom);\n  return useCallback(async () => {\n    try {\n      const result = await queryClient.fetchQuery({\n        queryKey: authRefreshQueryKey,\n        queryFn: refreshAuthRequest,\n        retry: false,\n        staleTime: 0,\n      });\n      let memberships: MembershipWithWorkspaceDto[] = [];\n      try {\n        const workspaces = await queryClient.fetchQuery({\n          queryKey: userWorkspacesQueryKey,\n          queryFn: () => listUserWorkspaces(result.token),\n          retry: false,\n          staleTime: 0,\n        });\n        memberships = workspaces.memberships;\n      } catch {\n        // A valid session remains usable while workspace hydration retries on the next route load.\n      }\n      setState(toAuthenticatedState(result, memberships));\n      return result;\n    } catch (error) {\n      if (error instanceof ApiError && error.status === 401) setState({status: 'guest'});\n      throw error;\n    }\n  }, [queryClient, setState]);\n}\n\nexport interface AuthRuntimeProps extends PropsWithChildren {\n  effects?: boolean;\n}\n\nexport function AuthRuntime({children, effects = true}: AuthRuntimeProps) {\n  const store = useStore();\n  const authState = useAtomValue(authStateAtom);\n  const refreshAuth = useRefreshAuth();\n\n  useEffect(() => {\n    if (!effects) return;\n    configureApiClient({\n      getAccessToken: () => store.get(authStateAtom).token,\n      refreshAccessToken: async () => (await refreshAuth()).token,\n    });\n  }, [effects, refreshAuth, store]);\n\n  useEffect(() => {\n    if (!effects) return;\n    refreshAuth().catch(() => undefined);\n  }, [effects, refreshAuth]);\n\n  useEffect(() => {\n    if (!effects || authState.status !== 'authenticated' || !authState.token) return;\n\n    let timeout: ReturnType<typeof setTimeout> | undefined;\n    let disposed = false;\n    let refreshing = false;\n    const clearRefreshTimer = () => {\n      if (timeout !== undefined) clearTimeout(timeout);\n      timeout = undefined;\n    };\n    const scheduleRefresh = (delayMs: number) => {\n      clearRefreshTimer();\n      timeout = setTimeout(runRefresh, Math.max(0, delayMs));\n    };\n    const retryIfStillDue = () => {\n      const current = store.get(authStateAtom);\n      if (current.status !== 'authenticated' || !current.token) return;\n      const delay = getAuthRefreshDelayMs(current.token);\n      if (delay !== undefined && delay <= 0) scheduleRefresh(REFRESH_RETRY_DELAY_MS);\n    };\n    function runRefresh() {\n      if (disposed || refreshing) return;\n      refreshing = true;\n      clearRefreshTimer();\n      refreshAuth()\n        .catch(() => undefined)\n        .finally(() => {\n          refreshing = false;\n          if (!disposed) retryIfStillDue();\n        });\n    }\n    const refreshIfDue = () => {\n      const current = store.get(authStateAtom);\n      if (current.status !== 'authenticated' || !current.token) return;\n      const delay = getAuthRefreshDelayMs(current.token);\n      if (delay !== undefined && delay <= 0) runRefresh();\n    };\n    const refreshIfVisible = () => {\n      if (document.visibilityState === 'visible') refreshIfDue();\n    };\n    const delay = getAuthRefreshDelayMs(authState.token);\n    if (delay !== undefined) scheduleRefresh(delay);\n    window.addEventListener('focus', refreshIfDue);\n    window.addEventListener('online', refreshIfDue);\n    document.addEventListener('visibilitychange', refreshIfVisible);\n    return () => {\n      disposed = true;\n      clearRefreshTimer();\n      window.removeEventListener('focus', refreshIfDue);\n      window.removeEventListener('online', refreshIfDue);\n      document.removeEventListener('visibilitychange', refreshIfVisible);\n    };\n  }, [authState.status, authState.token, effects, refreshAuth, store]);\n\n  return children;\n}\n"],"names":["ApiError","apiRequest","configureApiClient","useQueryClient","atom","useAtomValue","useSetAtom","useStore","useCallback","useEffect","useMemo","REFRESH_EARLY_MS","REFRESH_RETRY_DELAY_MS","BASE64_URL_REPLACEMENTS","dash","underscore","initialAuthState","status","authStateAtom","authRefreshQueryKey","userWorkspacesQueryKey","toAuthenticatedState","result","memberships","token","user","workspaces","map","membership","id","workspace_id","name","workspace_name","membershipId","useAuthState","state","isLoading","isAuthenticated","hasWorkspace","length","listUserWorkspaces","headers","authorization","refreshAuthRequest","method","decodeBase64Url","value","base64","replace","atob","padEnd","Math","ceil","readJwtExp","payload","split","undefined","parsed","JSON","parse","exp","Number","isFinite","getAuthRefreshDelayMs","nowMs","Date","now","useRefreshAuth","queryClient","setState","fetchQuery","queryKey","queryFn","retry","staleTime","error","AuthRuntime","children","effects","store","authState","refreshAuth","getAccessToken","get","refreshAccessToken","catch","timeout","disposed","refreshing","clearRefreshTimer","clearTimeout","scheduleRefresh","delayMs","setTimeout","runRefresh","max","retryIfStillDue","current","delay","finally","refreshIfDue","refreshIfVisible","document","visibilityState","window","addEventListener","removeEventListener"],"mappings":"AAEA,SAAQA,QAAQ,EAAEC,UAAU,EAAEC,kBAAkB,QAAO,sBAAsB;AAC7E,SAAQC,cAAc,QAAO,wBAAwB;AACrD,SAAQC,IAAI,EAAEC,YAAY,EAAEC,UAAU,EAAEC,QAAQ,QAAO,QAAQ;AAE/D,SAAQC,WAAW,EAAEC,SAAS,EAAEC,OAAO,QAAO,QAAQ;AAEtD,MAAMC,mBAAmB,IAAI,KAAK;AAClC,MAAMC,yBAAyB;AAC/B,MAAMC,0BAA0B;IAACC,MAAM;IAAMC,YAAY;AAAI;AAwB7D,OAAO,MAAMC,mBAA8B;IAACC,QAAQ;AAAS,EAAE;AAC/D,OAAO,MAAMC,gBAAgBd,KAAgBY,kBAAkB;AAC/D,OAAO,MAAMG,sBAAsB;IAAC;IAAQ;CAAU,CAAU;AAChE,OAAO,MAAMC,yBAAyB;IAAC;IAAc;CAAO,CAAU;AAEtE,OAAO,SAASC,qBACdC,MAAwB,EACxBC,cAA4C,EAAE;IAE9C,OAAO;QACLN,QAAQ;QACRO,OAAOF,OAAOE,KAAK;QACnBC,MAAMH,OAAOG,IAAI;QACjBC,YAAYH,YAAYI,GAAG,CAAC,CAACC,aAAgB,CAAA;gBAC3CC,IAAID,WAAWE,YAAY;gBAC3BC,MAAMH,WAAWI,cAAc;gBAC/BC,cAAcL,WAAWC,EAAE;YAC7B,CAAA;IACF;AACF;AAEA,OAAO,SAASK;IACd,MAAMC,QAAQ9B,aAAaa;IAC3B,OAAOR,QACL,IAAO,CAAA;YACL,GAAGyB,KAAK;YACRT,YAAYS,MAAMT,UAAU,IAAI,EAAE;YAClCU,WAAWD,MAAMlB,MAAM,KAAK;YAC5BoB,iBAAiBF,MAAMlB,MAAM,KAAK;YAClCqB,cAAc,AAACH,CAAAA,MAAMT,UAAU,IAAI,EAAE,AAAD,EAAGa,MAAM,GAAG;QAClD,CAAA,GACA;QAACJ;KAAM;AAEX;AAEA,OAAO,eAAeK,mBAAmBhB,KAAc;IACrD,OAAO,MAAMvB,WACX,eACAuB,QAAQ;QAACiB,SAAS;YAACC,eAAe,CAAC,OAAO,EAAElB,OAAO;QAAA;IAAC,IAAI,CAAC;AAE7D;AAEA,eAAemB;IACb,OAAO,MAAM1C,WAA6B,iBAAiB;QAAC2C,QAAQ;IAAM;AAC5E;AAEA,SAASC,gBAAgBC,KAAa;IACpC,MAAMC,SAASD,MACZE,OAAO,CAACnC,wBAAwBC,IAAI,EAAE,KACtCkC,OAAO,CAACnC,wBAAwBE,UAAU,EAAE;IAC/C,OAAOkC,KAAKF,OAAOG,MAAM,CAACC,KAAKC,IAAI,CAACL,OAAOR,MAAM,GAAG,KAAK,GAAG;AAC9D;AAEA,SAASc,WAAW7B,KAAa;IAC/B,MAAM,GAAG8B,QAAQ,GAAG9B,MAAM+B,KAAK,CAAC;IAChC,IAAI,CAACD,SAAS,OAAOE;IACrB,IAAI;QACF,MAAMC,SAASC,KAAKC,KAAK,CAACd,gBAAgBS;QAC1C,OAAO,OAAOG,OAAOG,GAAG,KAAK,YAAYC,OAAOC,QAAQ,CAACL,OAAOG,GAAG,IAAIH,OAAOG,GAAG,GAAGJ;IACtF,EAAE,OAAM;QACN,OAAOA;IACT;AACF;AAEA,OAAO,SAASO,sBAAsBvC,KAAa,EAAEwC,QAAQC,KAAKC,GAAG,EAAE;IACrE,MAAMN,MAAMP,WAAW7B;IACvB,OAAOoC,QAAQJ,YAAYA,YAAYI,MAAM,OAAOI,QAAQrD;AAC9D;AAEA,OAAO,SAASwD;IACd,MAAMC,cAAcjE;IACpB,MAAMkE,WAAW/D,WAAWY;IAC5B,OAAOV,YAAY;QACjB,IAAI;YACF,MAAMc,SAAS,MAAM8C,YAAYE,UAAU,CAAC;gBAC1CC,UAAUpD;gBACVqD,SAAS7B;gBACT8B,OAAO;gBACPC,WAAW;YACb;YACA,IAAInD,cAA4C,EAAE;YAClD,IAAI;gBACF,MAAMG,aAAa,MAAM0C,YAAYE,UAAU,CAAC;oBAC9CC,UAAUnD;oBACVoD,SAAS,IAAMhC,mBAAmBlB,OAAOE,KAAK;oBAC9CiD,OAAO;oBACPC,WAAW;gBACb;gBACAnD,cAAcG,WAAWH,WAAW;YACtC,EAAE,OAAM;YACN,2FAA2F;YAC7F;YACA8C,SAAShD,qBAAqBC,QAAQC;YACtC,OAAOD;QACT,EAAE,OAAOqD,OAAO;YACd,IAAIA,iBAAiB3E,YAAY2E,MAAM1D,MAAM,KAAK,KAAKoD,SAAS;gBAACpD,QAAQ;YAAO;YAChF,MAAM0D;QACR;IACF,GAAG;QAACP;QAAaC;KAAS;AAC5B;AAMA,OAAO,SAASO,YAAY,EAACC,QAAQ,EAAEC,UAAU,IAAI,EAAmB;IACtE,MAAMC,QAAQxE;IACd,MAAMyE,YAAY3E,aAAaa;IAC/B,MAAM+D,cAAcd;IAEpB1D,UAAU;QACR,IAAI,CAACqE,SAAS;QACd5E,mBAAmB;YACjBgF,gBAAgB,IAAMH,MAAMI,GAAG,CAACjE,eAAeM,KAAK;YACpD4D,oBAAoB,UAAY,AAAC,CAAA,MAAMH,aAAY,EAAGzD,KAAK;QAC7D;IACF,GAAG;QAACsD;QAASG;QAAaF;KAAM;IAEhCtE,UAAU;QACR,IAAI,CAACqE,SAAS;QACdG,cAAcI,KAAK,CAAC,IAAM7B;IAC5B,GAAG;QAACsB;QAASG;KAAY;IAEzBxE,UAAU;QACR,IAAI,CAACqE,WAAWE,UAAU/D,MAAM,KAAK,mBAAmB,CAAC+D,UAAUxD,KAAK,EAAE;QAE1E,IAAI8D;QACJ,IAAIC,WAAW;QACf,IAAIC,aAAa;QACjB,MAAMC,oBAAoB;YACxB,IAAIH,YAAY9B,WAAWkC,aAAaJ;YACxCA,UAAU9B;QACZ;QACA,MAAMmC,kBAAkB,CAACC;YACvBH;YACAH,UAAUO,WAAWC,YAAY3C,KAAK4C,GAAG,CAAC,GAAGH;QAC/C;QACA,MAAMI,kBAAkB;YACtB,MAAMC,UAAUlB,MAAMI,GAAG,CAACjE;YAC1B,IAAI+E,QAAQhF,MAAM,KAAK,mBAAmB,CAACgF,QAAQzE,KAAK,EAAE;YAC1D,MAAM0E,QAAQnC,sBAAsBkC,QAAQzE,KAAK;YACjD,IAAI0E,UAAU1C,aAAa0C,SAAS,GAAGP,gBAAgB/E;QACzD;QACA,SAASkF;YACP,IAAIP,YAAYC,YAAY;YAC5BA,aAAa;YACbC;YACAR,cACGI,KAAK,CAAC,IAAM7B,WACZ2C,OAAO,CAAC;gBACPX,aAAa;gBACb,IAAI,CAACD,UAAUS;YACjB;QACJ;QACA,MAAMI,eAAe;YACnB,MAAMH,UAAUlB,MAAMI,GAAG,CAACjE;YAC1B,IAAI+E,QAAQhF,MAAM,KAAK,mBAAmB,CAACgF,QAAQzE,KAAK,EAAE;YAC1D,MAAM0E,QAAQnC,sBAAsBkC,QAAQzE,KAAK;YACjD,IAAI0E,UAAU1C,aAAa0C,SAAS,GAAGJ;QACzC;QACA,MAAMO,mBAAmB;YACvB,IAAIC,SAASC,eAAe,KAAK,WAAWH;QAC9C;QACA,MAAMF,QAAQnC,sBAAsBiB,UAAUxD,KAAK;QACnD,IAAI0E,UAAU1C,WAAWmC,gBAAgBO;QACzCM,OAAOC,gBAAgB,CAAC,SAASL;QACjCI,OAAOC,gBAAgB,CAAC,UAAUL;QAClCE,SAASG,gBAAgB,CAAC,oBAAoBJ;QAC9C,OAAO;YACLd,WAAW;YACXE;YACAe,OAAOE,mBAAmB,CAAC,SAASN;YACpCI,OAAOE,mBAAmB,CAAC,UAAUN;YACrCE,SAASI,mBAAmB,CAAC,oBAAoBL;QACnD;IACF,GAAG;QAACrB,UAAU/D,MAAM;QAAE+D,UAAUxD,KAAK;QAAEsD;QAASG;QAAaF;KAAM;IAEnE,OAAOF;AACT"}
+{"version":3,"sources":["../../src/runtime/auth.tsx"],"sourcesContent":["import {loginResponseSchema} from '@shipfox/api-auth-dto';\nimport {listUserWorkspacesResponseSchema} from '@shipfox/api-workspaces-dto';\nimport {ApiError, checkedApiRequest, configureApiClient} from '@shipfox/client-api';\nimport {useQueryClient} from '@tanstack/react-query';\nimport {atom, useAtomValue, useSetAtom, useStore} from 'jotai';\nimport type {PropsWithChildren} from 'react';\nimport {useCallback, useEffect, useMemo} from 'react';\nimport type {AuthenticatedSession, UserIdentity, WorkspaceSummary} from '#core/session.js';\nimport {toAuthenticatedSession} from '#hooks/api/session-mapper.js';\n\nconst REFRESH_EARLY_MS = 5 * 60 * 1000;\nconst REFRESH_RETRY_DELAY_MS = 60_000;\nconst BASE64_URL_REPLACEMENTS = {dash: /-/g, underscore: /_/g} as const;\n\nexport type AuthStatus = 'loading' | 'authenticated' | 'guest';\n\nexport type Workspace = WorkspaceSummary;\n\nexport interface AuthState {\n  status: AuthStatus;\n  token?: string;\n  user?: UserIdentity;\n  workspaces?: Workspace[];\n}\n\nexport interface AuthStateValue extends AuthState {\n  isLoading: boolean;\n  isAuthenticated: boolean;\n  workspaces: Workspace[];\n  hasWorkspace: boolean;\n}\n\nexport const initialAuthState: AuthState = {status: 'loading'};\nexport const authStateAtom = atom<AuthState>(initialAuthState);\nconst authTransitionEpochAtom = atom(0);\nexport const authRefreshQueryKey = ['auth', 'refresh'] as const;\nexport const userWorkspacesQueryKey = ['workspaces', 'mine'] as const;\n\nexport function toAuthenticatedState(\n  session: AuthenticatedSession,\n  workspaces: WorkspaceSummary[] = [],\n): AuthState {\n  return {\n    status: 'authenticated',\n    token: session.accessToken,\n    user: session.user,\n    workspaces,\n  };\n}\n\nexport function useAuthState(): AuthStateValue {\n  const state = useAtomValue(authStateAtom);\n  return useMemo(\n    () => ({\n      ...state,\n      workspaces: state.workspaces ?? [],\n      isLoading: state.status === 'loading',\n      isAuthenticated: state.status === 'authenticated',\n      hasWorkspace: (state.workspaces ?? []).length > 0,\n    }),\n    [state],\n  );\n}\n\nexport async function listUserWorkspaces(token?: string) {\n  const response = await checkedApiRequest(\n    listUserWorkspacesResponseSchema,\n    '/workspaces',\n    token ? {headers: {authorization: `Bearer ${token}`}} : {},\n  );\n  return {\n    memberships: response.memberships.map((membership) => ({\n      id: membership.workspace_id,\n      name: membership.workspace_name,\n      membershipId: membership.id,\n    })),\n  };\n}\n\nasync function refreshAuthRequest(): Promise<AuthenticatedSession> {\n  const response = await checkedApiRequest(loginResponseSchema, '/auth/refresh', {method: 'POST'});\n  return toAuthenticatedSession(response);\n}\n\nfunction decodeBase64Url(value: string): string {\n  const base64 = value\n    .replace(BASE64_URL_REPLACEMENTS.dash, '+')\n    .replace(BASE64_URL_REPLACEMENTS.underscore, '/');\n  return atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, '='));\n}\n\nfunction readJwtExp(token: string): number | undefined {\n  const [, payload] = token.split('.');\n  if (!payload) return undefined;\n  try {\n    const parsed = JSON.parse(decodeBase64Url(payload)) as {exp?: unknown};\n    return typeof parsed.exp === 'number' && Number.isFinite(parsed.exp) ? parsed.exp : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function getAuthRefreshDelayMs(token: string, nowMs = Date.now()): number | undefined {\n  const exp = readJwtExp(token);\n  return exp === undefined ? undefined : exp * 1000 - nowMs - REFRESH_EARLY_MS;\n}\n\nexport function useAuthTransition() {\n  const queryClient = useQueryClient();\n  const store = useStore();\n  const setState = useSetAtom(authStateAtom);\n\n  const clearPrivateState = useCallback(async () => {\n    await queryClient.cancelQueries();\n    queryClient.clear();\n  }, [queryClient]);\n\n  const enterGuest = useCallback(async () => {\n    const transitionEpoch = store.get(authTransitionEpochAtom) + 1;\n    store.set(authTransitionEpochAtom, transitionEpoch);\n    await clearPrivateState();\n    if (store.get(authTransitionEpochAtom) !== transitionEpoch) return;\n    setState({status: 'guest'});\n  }, [clearPrivateState, setState, store]);\n\n  const enterAuthenticated = useCallback(\n    async (session: AuthenticatedSession) => {\n      const transitionEpoch = store.get(authTransitionEpochAtom) + 1;\n      store.set(authTransitionEpochAtom, transitionEpoch);\n      const previousState = store.get(authStateAtom);\n      const principalChanged =\n        previousState.status === 'authenticated' && previousState.user?.id !== session.user.id;\n\n      if (principalChanged) await clearPrivateState();\n      if (store.get(authTransitionEpochAtom) !== transitionEpoch) return;\n\n      queryClient.setQueryData(authRefreshQueryKey, session);\n      let workspaces: WorkspaceSummary[] = [];\n      try {\n        const hydratedWorkspaces = await queryClient.fetchQuery({\n          queryKey: userWorkspacesQueryKey,\n          queryFn: () => listUserWorkspaces(session.accessToken),\n          retry: false,\n          staleTime: 0,\n        });\n        workspaces = hydratedWorkspaces.memberships;\n        queryClient.setQueryData(userWorkspacesQueryKey, hydratedWorkspaces);\n      } catch {\n        // The authenticated session remains usable while workspace hydration retries on the next route load.\n      }\n      if (store.get(authTransitionEpochAtom) !== transitionEpoch) return;\n\n      setState(toAuthenticatedState(session, workspaces));\n    },\n    [clearPrivateState, queryClient, setState, store],\n  );\n\n  return {enterAuthenticated, enterGuest};\n}\n\nexport function useRefreshAuth() {\n  const queryClient = useQueryClient();\n  const {enterAuthenticated, enterGuest} = useAuthTransition();\n  return useCallback(async () => {\n    try {\n      const result = await queryClient.fetchQuery({\n        queryKey: authRefreshQueryKey,\n        queryFn: refreshAuthRequest,\n        retry: false,\n        staleTime: 0,\n      });\n      await enterAuthenticated(result);\n      return result;\n    } catch (error) {\n      if (error instanceof ApiError && error.status === 401) await enterGuest();\n      throw error;\n    }\n  }, [enterAuthenticated, enterGuest, queryClient]);\n}\n\nexport interface AuthRuntimeProps extends PropsWithChildren {\n  effects?: boolean;\n}\n\nexport function AuthRuntime({children, effects = true}: AuthRuntimeProps) {\n  const store = useStore();\n  const authState = useAtomValue(authStateAtom);\n  const refreshAuth = useRefreshAuth();\n\n  useEffect(() => {\n    if (!effects) return;\n    configureApiClient({\n      getAccessToken: () => store.get(authStateAtom).token,\n      refreshAccessToken: async () => (await refreshAuth()).accessToken,\n    });\n  }, [effects, refreshAuth, store]);\n\n  useEffect(() => {\n    if (!effects) return;\n    refreshAuth().catch(() => undefined);\n  }, [effects, refreshAuth]);\n\n  useEffect(() => {\n    if (!effects || authState.status !== 'authenticated' || !authState.token) return;\n\n    let timeout: ReturnType<typeof setTimeout> | undefined;\n    let disposed = false;\n    let refreshing = false;\n    const clearRefreshTimer = () => {\n      if (timeout !== undefined) clearTimeout(timeout);\n      timeout = undefined;\n    };\n    const scheduleRefresh = (delayMs: number) => {\n      clearRefreshTimer();\n      timeout = setTimeout(runRefresh, Math.max(0, delayMs));\n    };\n    const retryIfStillDue = () => {\n      const current = store.get(authStateAtom);\n      if (current.status !== 'authenticated' || !current.token) return;\n      const delay = getAuthRefreshDelayMs(current.token);\n      if (delay !== undefined && delay <= 0) scheduleRefresh(REFRESH_RETRY_DELAY_MS);\n    };\n    function runRefresh() {\n      if (disposed || refreshing) return;\n      refreshing = true;\n      clearRefreshTimer();\n      refreshAuth()\n        .catch(() => undefined)\n        .finally(() => {\n          refreshing = false;\n          if (!disposed) retryIfStillDue();\n        });\n    }\n    const refreshIfDue = () => {\n      const current = store.get(authStateAtom);\n      if (current.status !== 'authenticated' || !current.token) return;\n      const delay = getAuthRefreshDelayMs(current.token);\n      if (delay !== undefined && delay <= 0) runRefresh();\n    };\n    const refreshIfVisible = () => {\n      if (document.visibilityState === 'visible') refreshIfDue();\n    };\n    const delay = getAuthRefreshDelayMs(authState.token);\n    if (delay !== undefined) scheduleRefresh(delay);\n    window.addEventListener('focus', refreshIfDue);\n    window.addEventListener('online', refreshIfDue);\n    document.addEventListener('visibilitychange', refreshIfVisible);\n    return () => {\n      disposed = true;\n      clearRefreshTimer();\n      window.removeEventListener('focus', refreshIfDue);\n      window.removeEventListener('online', refreshIfDue);\n      document.removeEventListener('visibilitychange', refreshIfVisible);\n    };\n  }, [authState.status, authState.token, effects, refreshAuth, store]);\n\n  return children;\n}\n"],"names":["loginResponseSchema","listUserWorkspacesResponseSchema","ApiError","checkedApiRequest","configureApiClient","useQueryClient","atom","useAtomValue","useSetAtom","useStore","useCallback","useEffect","useMemo","toAuthenticatedSession","REFRESH_EARLY_MS","REFRESH_RETRY_DELAY_MS","BASE64_URL_REPLACEMENTS","dash","underscore","initialAuthState","status","authStateAtom","authTransitionEpochAtom","authRefreshQueryKey","userWorkspacesQueryKey","toAuthenticatedState","session","workspaces","token","accessToken","user","useAuthState","state","isLoading","isAuthenticated","hasWorkspace","length","listUserWorkspaces","response","headers","authorization","memberships","map","membership","id","workspace_id","name","workspace_name","membershipId","refreshAuthRequest","method","decodeBase64Url","value","base64","replace","atob","padEnd","Math","ceil","readJwtExp","payload","split","undefined","parsed","JSON","parse","exp","Number","isFinite","getAuthRefreshDelayMs","nowMs","Date","now","useAuthTransition","queryClient","store","setState","clearPrivateState","cancelQueries","clear","enterGuest","transitionEpoch","get","set","enterAuthenticated","previousState","principalChanged","setQueryData","hydratedWorkspaces","fetchQuery","queryKey","queryFn","retry","staleTime","useRefreshAuth","result","error","AuthRuntime","children","effects","authState","refreshAuth","getAccessToken","refreshAccessToken","catch","timeout","disposed","refreshing","clearRefreshTimer","clearTimeout","scheduleRefresh","delayMs","setTimeout","runRefresh","max","retryIfStillDue","current","delay","finally","refreshIfDue","refreshIfVisible","document","visibilityState","window","addEventListener","removeEventListener"],"mappings":"AAAA,SAAQA,mBAAmB,QAAO,wBAAwB;AAC1D,SAAQC,gCAAgC,QAAO,8BAA8B;AAC7E,SAAQC,QAAQ,EAAEC,iBAAiB,EAAEC,kBAAkB,QAAO,sBAAsB;AACpF,SAAQC,cAAc,QAAO,wBAAwB;AACrD,SAAQC,IAAI,EAAEC,YAAY,EAAEC,UAAU,EAAEC,QAAQ,QAAO,QAAQ;AAE/D,SAAQC,WAAW,EAAEC,SAAS,EAAEC,OAAO,QAAO,QAAQ;AAEtD,SAAQC,sBAAsB,QAAO,+BAA+B;AAEpE,MAAMC,mBAAmB,IAAI,KAAK;AAClC,MAAMC,yBAAyB;AAC/B,MAAMC,0BAA0B;IAACC,MAAM;IAAMC,YAAY;AAAI;AAoB7D,OAAO,MAAMC,mBAA8B;IAACC,QAAQ;AAAS,EAAE;AAC/D,OAAO,MAAMC,gBAAgBf,KAAgBa,kBAAkB;AAC/D,MAAMG,0BAA0BhB,KAAK;AACrC,OAAO,MAAMiB,sBAAsB;IAAC;IAAQ;CAAU,CAAU;AAChE,OAAO,MAAMC,yBAAyB;IAAC;IAAc;CAAO,CAAU;AAEtE,OAAO,SAASC,qBACdC,OAA6B,EAC7BC,aAAiC,EAAE;IAEnC,OAAO;QACLP,QAAQ;QACRQ,OAAOF,QAAQG,WAAW;QAC1BC,MAAMJ,QAAQI,IAAI;QAClBH;IACF;AACF;AAEA,OAAO,SAASI;IACd,MAAMC,QAAQzB,aAAac;IAC3B,OAAOT,QACL,IAAO,CAAA;YACL,GAAGoB,KAAK;YACRL,YAAYK,MAAML,UAAU,IAAI,EAAE;YAClCM,WAAWD,MAAMZ,MAAM,KAAK;YAC5Bc,iBAAiBF,MAAMZ,MAAM,KAAK;YAClCe,cAAc,AAACH,CAAAA,MAAML,UAAU,IAAI,EAAE,AAAD,EAAGS,MAAM,GAAG;QAClD,CAAA,GACA;QAACJ;KAAM;AAEX;AAEA,OAAO,eAAeK,mBAAmBT,KAAc;IACrD,MAAMU,WAAW,MAAMnC,kBACrBF,kCACA,eACA2B,QAAQ;QAACW,SAAS;YAACC,eAAe,CAAC,OAAO,EAAEZ,OAAO;QAAA;IAAC,IAAI,CAAC;IAE3D,OAAO;QACLa,aAAaH,SAASG,WAAW,CAACC,GAAG,CAAC,CAACC,aAAgB,CAAA;gBACrDC,IAAID,WAAWE,YAAY;gBAC3BC,MAAMH,WAAWI,cAAc;gBAC/BC,cAAcL,WAAWC,EAAE;YAC7B,CAAA;IACF;AACF;AAEA,eAAeK;IACb,MAAMX,WAAW,MAAMnC,kBAAkBH,qBAAqB,iBAAiB;QAACkD,QAAQ;IAAM;IAC9F,OAAOrC,uBAAuByB;AAChC;AAEA,SAASa,gBAAgBC,KAAa;IACpC,MAAMC,SAASD,MACZE,OAAO,CAACtC,wBAAwBC,IAAI,EAAE,KACtCqC,OAAO,CAACtC,wBAAwBE,UAAU,EAAE;IAC/C,OAAOqC,KAAKF,OAAOG,MAAM,CAACC,KAAKC,IAAI,CAACL,OAAOjB,MAAM,GAAG,KAAK,GAAG;AAC9D;AAEA,SAASuB,WAAW/B,KAAa;IAC/B,MAAM,GAAGgC,QAAQ,GAAGhC,MAAMiC,KAAK,CAAC;IAChC,IAAI,CAACD,SAAS,OAAOE;IACrB,IAAI;QACF,MAAMC,SAASC,KAAKC,KAAK,CAACd,gBAAgBS;QAC1C,OAAO,OAAOG,OAAOG,GAAG,KAAK,YAAYC,OAAOC,QAAQ,CAACL,OAAOG,GAAG,IAAIH,OAAOG,GAAG,GAAGJ;IACtF,EAAE,OAAM;QACN,OAAOA;IACT;AACF;AAEA,OAAO,SAASO,sBAAsBzC,KAAa,EAAE0C,QAAQC,KAAKC,GAAG,EAAE;IACrE,MAAMN,MAAMP,WAAW/B;IACvB,OAAOsC,QAAQJ,YAAYA,YAAYI,MAAM,OAAOI,QAAQxD;AAC9D;AAEA,OAAO,SAAS2D;IACd,MAAMC,cAAcrE;IACpB,MAAMsE,QAAQlE;IACd,MAAMmE,WAAWpE,WAAWa;IAE5B,MAAMwD,oBAAoBnE,YAAY;QACpC,MAAMgE,YAAYI,aAAa;QAC/BJ,YAAYK,KAAK;IACnB,GAAG;QAACL;KAAY;IAEhB,MAAMM,aAAatE,YAAY;QAC7B,MAAMuE,kBAAkBN,MAAMO,GAAG,CAAC5D,2BAA2B;QAC7DqD,MAAMQ,GAAG,CAAC7D,yBAAyB2D;QACnC,MAAMJ;QACN,IAAIF,MAAMO,GAAG,CAAC5D,6BAA6B2D,iBAAiB;QAC5DL,SAAS;YAACxD,QAAQ;QAAO;IAC3B,GAAG;QAACyD;QAAmBD;QAAUD;KAAM;IAEvC,MAAMS,qBAAqB1E,YACzB,OAAOgB;QACL,MAAMuD,kBAAkBN,MAAMO,GAAG,CAAC5D,2BAA2B;QAC7DqD,MAAMQ,GAAG,CAAC7D,yBAAyB2D;QACnC,MAAMI,gBAAgBV,MAAMO,GAAG,CAAC7D;QAChC,MAAMiE,mBACJD,cAAcjE,MAAM,KAAK,mBAAmBiE,cAAcvD,IAAI,EAAEc,OAAOlB,QAAQI,IAAI,CAACc,EAAE;QAExF,IAAI0C,kBAAkB,MAAMT;QAC5B,IAAIF,MAAMO,GAAG,CAAC5D,6BAA6B2D,iBAAiB;QAE5DP,YAAYa,YAAY,CAAChE,qBAAqBG;QAC9C,IAAIC,aAAiC,EAAE;QACvC,IAAI;YACF,MAAM6D,qBAAqB,MAAMd,YAAYe,UAAU,CAAC;gBACtDC,UAAUlE;gBACVmE,SAAS,IAAMtD,mBAAmBX,QAAQG,WAAW;gBACrD+D,OAAO;gBACPC,WAAW;YACb;YACAlE,aAAa6D,mBAAmB/C,WAAW;YAC3CiC,YAAYa,YAAY,CAAC/D,wBAAwBgE;QACnD,EAAE,OAAM;QACN,qGAAqG;QACvG;QACA,IAAIb,MAAMO,GAAG,CAAC5D,6BAA6B2D,iBAAiB;QAE5DL,SAASnD,qBAAqBC,SAASC;IACzC,GACA;QAACkD;QAAmBH;QAAaE;QAAUD;KAAM;IAGnD,OAAO;QAACS;QAAoBJ;IAAU;AACxC;AAEA,OAAO,SAASc;IACd,MAAMpB,cAAcrE;IACpB,MAAM,EAAC+E,kBAAkB,EAAEJ,UAAU,EAAC,GAAGP;IACzC,OAAO/D,YAAY;QACjB,IAAI;YACF,MAAMqF,SAAS,MAAMrB,YAAYe,UAAU,CAAC;gBAC1CC,UAAUnE;gBACVoE,SAAS1C;gBACT2C,OAAO;gBACPC,WAAW;YACb;YACA,MAAMT,mBAAmBW;YACzB,OAAOA;QACT,EAAE,OAAOC,OAAO;YACd,IAAIA,iBAAiB9F,YAAY8F,MAAM5E,MAAM,KAAK,KAAK,MAAM4D;YAC7D,MAAMgB;QACR;IACF,GAAG;QAACZ;QAAoBJ;QAAYN;KAAY;AAClD;AAMA,OAAO,SAASuB,YAAY,EAACC,QAAQ,EAAEC,UAAU,IAAI,EAAmB;IACtE,MAAMxB,QAAQlE;IACd,MAAM2F,YAAY7F,aAAac;IAC/B,MAAMgF,cAAcP;IAEpBnF,UAAU;QACR,IAAI,CAACwF,SAAS;QACd/F,mBAAmB;YACjBkG,gBAAgB,IAAM3B,MAAMO,GAAG,CAAC7D,eAAeO,KAAK;YACpD2E,oBAAoB,UAAY,AAAC,CAAA,MAAMF,aAAY,EAAGxE,WAAW;QACnE;IACF,GAAG;QAACsE;QAASE;QAAa1B;KAAM;IAEhChE,UAAU;QACR,IAAI,CAACwF,SAAS;QACdE,cAAcG,KAAK,CAAC,IAAM1C;IAC5B,GAAG;QAACqC;QAASE;KAAY;IAEzB1F,UAAU;QACR,IAAI,CAACwF,WAAWC,UAAUhF,MAAM,KAAK,mBAAmB,CAACgF,UAAUxE,KAAK,EAAE;QAE1E,IAAI6E;QACJ,IAAIC,WAAW;QACf,IAAIC,aAAa;QACjB,MAAMC,oBAAoB;YACxB,IAAIH,YAAY3C,WAAW+C,aAAaJ;YACxCA,UAAU3C;QACZ;QACA,MAAMgD,kBAAkB,CAACC;YACvBH;YACAH,UAAUO,WAAWC,YAAYxD,KAAKyD,GAAG,CAAC,GAAGH;QAC/C;QACA,MAAMI,kBAAkB;YACtB,MAAMC,UAAUzC,MAAMO,GAAG,CAAC7D;YAC1B,IAAI+F,QAAQhG,MAAM,KAAK,mBAAmB,CAACgG,QAAQxF,KAAK,EAAE;YAC1D,MAAMyF,QAAQhD,sBAAsB+C,QAAQxF,KAAK;YACjD,IAAIyF,UAAUvD,aAAauD,SAAS,GAAGP,gBAAgB/F;QACzD;QACA,SAASkG;YACP,IAAIP,YAAYC,YAAY;YAC5BA,aAAa;YACbC;YACAP,cACGG,KAAK,CAAC,IAAM1C,WACZwD,OAAO,CAAC;gBACPX,aAAa;gBACb,IAAI,CAACD,UAAUS;YACjB;QACJ;QACA,MAAMI,eAAe;YACnB,MAAMH,UAAUzC,MAAMO,GAAG,CAAC7D;YAC1B,IAAI+F,QAAQhG,MAAM,KAAK,mBAAmB,CAACgG,QAAQxF,KAAK,EAAE;YAC1D,MAAMyF,QAAQhD,sBAAsB+C,QAAQxF,KAAK;YACjD,IAAIyF,UAAUvD,aAAauD,SAAS,GAAGJ;QACzC;QACA,MAAMO,mBAAmB;YACvB,IAAIC,SAASC,eAAe,KAAK,WAAWH;QAC9C;QACA,MAAMF,QAAQhD,sBAAsB+B,UAAUxE,KAAK;QACnD,IAAIyF,UAAUvD,WAAWgD,gBAAgBO;QACzCM,OAAOC,gBAAgB,CAAC,SAASL;QACjCI,OAAOC,gBAAgB,CAAC,UAAUL;QAClCE,SAASG,gBAAgB,CAAC,oBAAoBJ;QAC9C,OAAO;YACLd,WAAW;YACXE;YACAe,OAAOE,mBAAmB,CAAC,SAASN;YACpCI,OAAOE,mBAAmB,CAAC,UAAUN;YACrCE,SAASI,mBAAmB,CAAC,oBAAoBL;QACnD;IACF,GAAG;QAACpB,UAAUhF,MAAM;QAAEgF,UAAUxE,KAAK;QAAEuE;QAASE;QAAa1B;KAAM;IAEnE,OAAOuB;AACT"}

package/dist/runtime/index.d.ts

@@ -1,5 +1,8 @@
+export { AuthActions, AuthShell, type AuthShellProps } from '#components/auth-shell.js';
 export { WorkspaceCrumb, type WorkspaceCrumbProps } from '#components/workspace-crumb.js';
 export { WorkspaceSwitcher } from '#components/workspace-switcher.js';
+export type { AuthenticatedSession, UserIdentity, WorkspaceMembership, WorkspaceSummary, } from '#core/session.js';
+export { toAuthenticatedSession, toUserIdentity } from '#hooks/api/session-mapper.js';
 export * from '../compose/compose-routes.js';
 export * from '../compose/errors.js';
 export * from '../compose/merge-config.js';

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,cAAc,EAAE,KAAK,mBAAmB,EAAC,MAAM,gCAAgC,CAAC;AACxF,OAAO,EAAC,iBAAiB,EAAC,MAAM,mCAAmC,CAAC;AACpE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,mCAAmC,CAAC;AAClD,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAE,SAAS,EAAE,KAAK,cAAc,EAAC,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAC,cAAc,EAAE,KAAK,mBAAmB,EAAC,MAAM,gCAAgC,CAAC;AACxF,OAAO,EAAC,iBAAiB,EAAC,MAAM,mCAAmC,CAAC;AACpE,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,sBAAsB,EAAE,cAAc,EAAC,MAAM,8BAA8B,CAAC;AACpF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,mCAAmC,CAAC;AAClD,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC"}

package/dist/runtime/index.js

@@ -1,5 +1,7 @@
+export { AuthActions, AuthShell } from '#components/auth-shell.js';
 export { WorkspaceCrumb } from '#components/workspace-crumb.js';
 export { WorkspaceSwitcher } from '#components/workspace-switcher.js';
+export { toAuthenticatedSession, toUserIdentity } from '#hooks/api/session-mapper.js';
 export * from '../compose/compose-routes.js';
 export * from '../compose/errors.js';
 export * from '../compose/merge-config.js';

package/dist/runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/runtime/index.ts"],"sourcesContent":["export {WorkspaceCrumb, type WorkspaceCrumbProps} from '#components/workspace-crumb.js';\nexport {WorkspaceSwitcher} from '#components/workspace-switcher.js';\nexport * from '../compose/compose-routes.js';\nexport * from '../compose/errors.js';\nexport * from '../compose/merge-config.js';\nexport * from '../compose/normalize-route-path.js';\nexport * from '../compose/validate-providers.js';\nexport * from '../compose/validate-registries.js';\nexport * from './active-workspace.js';\nexport * from './anchor-paths.js';\nexport * from './anchors.js';\nexport * from './auth.js';\nexport * from './chrome-context.js';\nexport * from './compose-client-app.js';\nexport * from './define-route.js';\nexport * from './last-workspace.js';\nexport * from './nav-order.js';\nexport * from './router-context.js';\nexport * from './workspace-setup.js';\n"],"names":["WorkspaceCrumb","WorkspaceSwitcher"],"mappings":"AAAA,SAAQA,cAAc,QAAiC,iCAAiC;AACxF,SAAQC,iBAAiB,QAAO,oCAAoC;AACpE,cAAc,+BAA+B;AAC7C,cAAc,uBAAuB;AACrC,cAAc,6BAA6B;AAC3C,cAAc,qCAAqC;AACnD,cAAc,mCAAmC;AACjD,cAAc,oCAAoC;AAClD,cAAc,wBAAwB;AACtC,cAAc,oBAAoB;AAClC,cAAc,eAAe;AAC7B,cAAc,YAAY;AAC1B,cAAc,sBAAsB;AACpC,cAAc,0BAA0B;AACxC,cAAc,oBAAoB;AAClC,cAAc,sBAAsB;AACpC,cAAc,iBAAiB;AAC/B,cAAc,sBAAsB;AACpC,cAAc,uBAAuB"}
+{"version":3,"sources":["../../src/runtime/index.ts"],"sourcesContent":["export {AuthActions, AuthShell, type AuthShellProps} from '#components/auth-shell.js';\nexport {WorkspaceCrumb, type WorkspaceCrumbProps} from '#components/workspace-crumb.js';\nexport {WorkspaceSwitcher} from '#components/workspace-switcher.js';\nexport type {\n  AuthenticatedSession,\n  UserIdentity,\n  WorkspaceMembership,\n  WorkspaceSummary,\n} from '#core/session.js';\nexport {toAuthenticatedSession, toUserIdentity} from '#hooks/api/session-mapper.js';\nexport * from '../compose/compose-routes.js';\nexport * from '../compose/errors.js';\nexport * from '../compose/merge-config.js';\nexport * from '../compose/normalize-route-path.js';\nexport * from '../compose/validate-providers.js';\nexport * from '../compose/validate-registries.js';\nexport * from './active-workspace.js';\nexport * from './anchor-paths.js';\nexport * from './anchors.js';\nexport * from './auth.js';\nexport * from './chrome-context.js';\nexport * from './compose-client-app.js';\nexport * from './define-route.js';\nexport * from './last-workspace.js';\nexport * from './nav-order.js';\nexport * from './router-context.js';\nexport * from './workspace-setup.js';\n"],"names":["AuthActions","AuthShell","WorkspaceCrumb","WorkspaceSwitcher","toAuthenticatedSession","toUserIdentity"],"mappings":"AAAA,SAAQA,WAAW,EAAEC,SAAS,QAA4B,4BAA4B;AACtF,SAAQC,cAAc,QAAiC,iCAAiC;AACxF,SAAQC,iBAAiB,QAAO,oCAAoC;AAOpE,SAAQC,sBAAsB,EAAEC,cAAc,QAAO,+BAA+B;AACpF,cAAc,+BAA+B;AAC7C,cAAc,uBAAuB;AACrC,cAAc,6BAA6B;AAC3C,cAAc,qCAAqC;AACnD,cAAc,mCAAmC;AACjD,cAAc,oCAAoC;AAClD,cAAc,wBAAwB;AACtC,cAAc,oBAAoB;AAClC,cAAc,eAAe;AAC7B,cAAc,YAAY;AAC1B,cAAc,sBAAsB;AACpC,cAAc,0BAA0B;AACxC,cAAc,oBAAoB;AAClC,cAAc,sBAAsB;AACpC,cAAc,iBAAiB;AAC/B,cAAc,sBAAsB;AACpC,cAAc,uBAAuB"}

package/dist/runtime/last-workspace.d.ts

@@ -1,4 +1,4 @@
-export declare const lastWorkspaceIdAtom: import("jotai").WritableAtom<string | undefined, [string | typeof import("jotai/utils").RESET | ((prev: string | undefined) => string | typeof import("jotai/utils").RESET | undefined) | undefined], void>;
+export declare const lastWorkspaceIdAtom: import("jotai").WritableAtom<string | undefined, [workspaceId: string | undefined], void>;
 export declare function getLastWorkspaceId(): string | undefined;
 export declare function rememberLastWorkspaceId(workspaceId: string): void;
 //# sourceMappingURL=last-workspace.d.ts.map

package/dist/runtime/last-workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"last-workspace.d.ts","sourceRoot":"","sources":["../../src/runtime/last-workspace.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB,6MAA6D,CAAC;AAE9F,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAUvD;AAED,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAGjE"}
+{"version":3,"file":"last-workspace.d.ts","sourceRoot":"","sources":["../../src/runtime/last-workspace.ts"],"names":[],"mappings":"AAgCA,eAAO,MAAM,mBAAmB,2FAO/B,CAAC;AAEF,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAEvD;AAED,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAEjE"}

package/dist/runtime/last-workspace.js

@@ -1,20 +1,39 @@
-import { atomWithStorage } from 'jotai/utils';
-const storageKey = 'shipfox.lastWorkspaceId';
-export const lastWorkspaceIdAtom = atomWithStorage(storageKey, undefined);
-export function getLastWorkspaceId() {
-    if (typeof window === 'undefined') return undefined;
-    try {
-        const raw = window.localStorage.getItem(storageKey);
-        if (!raw) return undefined;
-        const parsed = JSON.parse(raw);
-        return typeof parsed === 'string' ? parsed : undefined;
-    } catch  {
-        return undefined;
+import { createTypedBrowserStorage, localStorageOrUndefined } from '@shipfox/client-ui';
+import { atom } from 'jotai';
+const lastWorkspaceStorageKey = 'shipfox.lastWorkspaceId';
+const lastWorkspaceStorage = createTypedBrowserStorage(localStorageOrUndefined, {
+    key: lastWorkspaceStorageKey,
+    lifetime: 'persistent',
+    principalScope: 'principal',
+    serialize: (workspaceId)=>JSON.stringify(workspaceId),
+    parse: (raw)=>{
+        try {
+            const parsed = JSON.parse(raw);
+            return typeof parsed === 'string' ? parsed : undefined;
+        } catch  {
+            return undefined;
+        }
     }
+});
+const storedLastWorkspaceIdAtom = atom(getLastWorkspaceId());
+storedLastWorkspaceIdAtom.onMount = (setLastWorkspaceId)=>{
+    if (typeof window === 'undefined') return undefined;
+    const syncFromStorage = (event)=>{
+        if (event.key === lastWorkspaceStorageKey) setLastWorkspaceId(getLastWorkspaceId());
+    };
+    window.addEventListener('storage', syncFromStorage);
+    return ()=>window.removeEventListener('storage', syncFromStorage);
+};
+export const lastWorkspaceIdAtom = atom((get)=>get(storedLastWorkspaceIdAtom), (_get, set, workspaceId)=>{
+    set(storedLastWorkspaceIdAtom, workspaceId);
+    if (workspaceId === undefined) lastWorkspaceStorage.remove();
+    else lastWorkspaceStorage.write(workspaceId);
+});
+export function getLastWorkspaceId() {
+    return lastWorkspaceStorage.read();
 }
 export function rememberLastWorkspaceId(workspaceId) {
-    if (typeof window === 'undefined') return;
-    window.localStorage.setItem(storageKey, JSON.stringify(workspaceId));
+    lastWorkspaceStorage.write(workspaceId);
 }
 
 //# sourceMappingURL=last-workspace.js.map

package/dist/runtime/last-workspace.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/runtime/last-workspace.ts"],"sourcesContent":["import {atomWithStorage} from 'jotai/utils';\n\nconst storageKey = 'shipfox.lastWorkspaceId';\n\nexport const lastWorkspaceIdAtom = atomWithStorage<string | undefined>(storageKey, undefined);\n\nexport function getLastWorkspaceId(): string | undefined {\n  if (typeof window === 'undefined') return undefined;\n  try {\n    const raw = window.localStorage.getItem(storageKey);\n    if (!raw) return undefined;\n    const parsed: unknown = JSON.parse(raw);\n    return typeof parsed === 'string' ? parsed : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function rememberLastWorkspaceId(workspaceId: string): void {\n  if (typeof window === 'undefined') return;\n  window.localStorage.setItem(storageKey, JSON.stringify(workspaceId));\n}\n"],"names":["atomWithStorage","storageKey","lastWorkspaceIdAtom","undefined","getLastWorkspaceId","window","raw","localStorage","getItem","parsed","JSON","parse","rememberLastWorkspaceId","workspaceId","setItem","stringify"],"mappings":"AAAA,SAAQA,eAAe,QAAO,cAAc;AAE5C,MAAMC,aAAa;AAEnB,OAAO,MAAMC,sBAAsBF,gBAAoCC,YAAYE,WAAW;AAE9F,OAAO,SAASC;IACd,IAAI,OAAOC,WAAW,aAAa,OAAOF;IAC1C,IAAI;QACF,MAAMG,MAAMD,OAAOE,YAAY,CAACC,OAAO,CAACP;QACxC,IAAI,CAACK,KAAK,OAAOH;QACjB,MAAMM,SAAkBC,KAAKC,KAAK,CAACL;QACnC,OAAO,OAAOG,WAAW,WAAWA,SAASN;IAC/C,EAAE,OAAM;QACN,OAAOA;IACT;AACF;AAEA,OAAO,SAASS,wBAAwBC,WAAmB;IACzD,IAAI,OAAOR,WAAW,aAAa;IACnCA,OAAOE,YAAY,CAACO,OAAO,CAACb,YAAYS,KAAKK,SAAS,CAACF;AACzD"}
+{"version":3,"sources":["../../src/runtime/last-workspace.ts"],"sourcesContent":["import {createTypedBrowserStorage, localStorageOrUndefined} from '@shipfox/client-ui';\nimport {atom} from 'jotai';\n\nconst lastWorkspaceStorageKey = 'shipfox.lastWorkspaceId';\n\nconst lastWorkspaceStorage = createTypedBrowserStorage(localStorageOrUndefined, {\n  key: lastWorkspaceStorageKey,\n  lifetime: 'persistent',\n  principalScope: 'principal',\n  serialize: (workspaceId: string) => JSON.stringify(workspaceId),\n  parse: (raw) => {\n    try {\n      const parsed: unknown = JSON.parse(raw);\n      return typeof parsed === 'string' ? parsed : undefined;\n    } catch {\n      return undefined;\n    }\n  },\n});\n\nconst storedLastWorkspaceIdAtom = atom<string | undefined>(getLastWorkspaceId());\n\nstoredLastWorkspaceIdAtom.onMount = (setLastWorkspaceId) => {\n  if (typeof window === 'undefined') return undefined;\n\n  const syncFromStorage = (event: StorageEvent) => {\n    if (event.key === lastWorkspaceStorageKey) setLastWorkspaceId(getLastWorkspaceId());\n  };\n  window.addEventListener('storage', syncFromStorage);\n  return () => window.removeEventListener('storage', syncFromStorage);\n};\n\nexport const lastWorkspaceIdAtom = atom(\n  (get) => get(storedLastWorkspaceIdAtom),\n  (_get, set, workspaceId: string | undefined) => {\n    set(storedLastWorkspaceIdAtom, workspaceId);\n    if (workspaceId === undefined) lastWorkspaceStorage.remove();\n    else lastWorkspaceStorage.write(workspaceId);\n  },\n);\n\nexport function getLastWorkspaceId(): string | undefined {\n  return lastWorkspaceStorage.read();\n}\n\nexport function rememberLastWorkspaceId(workspaceId: string): void {\n  lastWorkspaceStorage.write(workspaceId);\n}\n"],"names":["createTypedBrowserStorage","localStorageOrUndefined","atom","lastWorkspaceStorageKey","lastWorkspaceStorage","key","lifetime","principalScope","serialize","workspaceId","JSON","stringify","parse","raw","parsed","undefined","storedLastWorkspaceIdAtom","getLastWorkspaceId","onMount","setLastWorkspaceId","window","syncFromStorage","event","addEventListener","removeEventListener","lastWorkspaceIdAtom","get","_get","set","remove","write","read","rememberLastWorkspaceId"],"mappings":"AAAA,SAAQA,yBAAyB,EAAEC,uBAAuB,QAAO,qBAAqB;AACtF,SAAQC,IAAI,QAAO,QAAQ;AAE3B,MAAMC,0BAA0B;AAEhC,MAAMC,uBAAuBJ,0BAA0BC,yBAAyB;IAC9EI,KAAKF;IACLG,UAAU;IACVC,gBAAgB;IAChBC,WAAW,CAACC,cAAwBC,KAAKC,SAAS,CAACF;IACnDG,OAAO,CAACC;QACN,IAAI;YACF,MAAMC,SAAkBJ,KAAKE,KAAK,CAACC;YACnC,OAAO,OAAOC,WAAW,WAAWA,SAASC;QAC/C,EAAE,OAAM;YACN,OAAOA;QACT;IACF;AACF;AAEA,MAAMC,4BAA4Bd,KAAyBe;AAE3DD,0BAA0BE,OAAO,GAAG,CAACC;IACnC,IAAI,OAAOC,WAAW,aAAa,OAAOL;IAE1C,MAAMM,kBAAkB,CAACC;QACvB,IAAIA,MAAMjB,GAAG,KAAKF,yBAAyBgB,mBAAmBF;IAChE;IACAG,OAAOG,gBAAgB,CAAC,WAAWF;IACnC,OAAO,IAAMD,OAAOI,mBAAmB,CAAC,WAAWH;AACrD;AAEA,OAAO,MAAMI,sBAAsBvB,KACjC,CAACwB,MAAQA,IAAIV,4BACb,CAACW,MAAMC,KAAKnB;IACVmB,IAAIZ,2BAA2BP;IAC/B,IAAIA,gBAAgBM,WAAWX,qBAAqByB,MAAM;SACrDzB,qBAAqB0B,KAAK,CAACrB;AAClC,GACA;AAEF,OAAO,SAASQ;IACd,OAAOb,qBAAqB2B,IAAI;AAClC;AAEA,OAAO,SAASC,wBAAwBvB,WAAmB;IACzDL,qBAAqB0B,KAAK,CAACrB;AAC7B"}