@spidy092/auth-client 3.1.5 → 3.2.0

package/dist/index.js

@@ -963,6 +963,29 @@ api.interceptors.request.use((config2) => {
   return config2;
 });
 var refreshPromise2 = null;
+var SINGLE_ORG_DENIED_EVENT = "auth:single-org-denied";
+function responseErrorCode(response) {
+  var _a;
+  const data = response == null ? void 0 : response.data;
+  return ((_a = data == null ? void 0 : data.errors) == null ? void 0 : _a.code) || (data == null ? void 0 : data.code) || null;
+}
+function isTenantAccessDenied(response) {
+  return (response == null ? void 0 : response.status) === 403 && responseErrorCode(response) === "TENANT_ACCESS_DENIED";
+}
+function isSingleOrganizationMode(response) {
+  return (response == null ? void 0 : response.status) === 409 && responseErrorCode(response) === "SINGLE_ORGANIZATION_MODE";
+}
+function dispatchSingleOrgDenied(response) {
+  var _a, _b;
+  if (typeof window === "undefined" || typeof window.dispatchEvent !== "function") return;
+  window.dispatchEvent(new CustomEvent(SINGLE_ORG_DENIED_EVENT, {
+    detail: {
+      code: responseErrorCode(response),
+      status: (response == null ? void 0 : response.status) || null,
+      currentOrgId: ((_b = (_a = response == null ? void 0 : response.data) == null ? void 0 : _a.errors) == null ? void 0 : _b.current_org_id) || null
+    }
+  }));
+}
 api.interceptors.response.use(
   (response) => response,
   async (error) => {
@@ -970,6 +993,10 @@ api.interceptors.response.use(
     if (!response || !config2) {
       return Promise.reject(error);
     }
+    if (isTenantAccessDenied(response) || isSingleOrganizationMode(response)) {
+      dispatchSingleOrgDenied(response);
+      return Promise.reject(error);
+    }
     if (response.status !== 401 || config2._retry) {
       return Promise.reject(error);
     }
@@ -1251,6 +1278,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
   const onSessionExpiredRef = useRef(onSessionExpired);
   const recoveryInFlightRef = useRef(null);
   const profileRecoveryTokensRef = useRef(/* @__PURE__ */ new Set());
+  const profileLoadedRef = useRef(false);
   useEffect(() => {
     onSessionExpiredRef.current = onSessionExpired;
   }, [onSessionExpired]);
@@ -1260,8 +1288,9 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
       setTokenState(nextToken);
       if (nextToken) {
         setSessionValid(true);
-        setLoading(true);
+        if (!profileLoadedRef.current) setLoading(true);
       } else {
+        profileLoadedRef.current = false;
         setSessionValid(false);
         setUser(null);
         setLoading(false);
@@ -1273,6 +1302,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
     clearToken();
     setTokenState(null);
     setUser(null);
+    profileLoadedRef.current = false;
     setSessionValid(false);
     setLoading(false);
   };
@@ -1288,7 +1318,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
           if (recoveredToken) {
             setTokenState(recoveredToken);
             setSessionValid(true);
-            setLoading(true);
+            if (!profileLoadedRef.current) setLoading(true);
             return true;
           }
         } catch (error) {
@@ -1365,6 +1395,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
         const userData = (responseBody == null ? void 0 : responseBody.data) ?? responseBody;
         console.log("\u2705 Profile fetched successfully:", userData.email);
         setUser(userData);
+        profileLoadedRef.current = true;
         setSessionValid(true);
         setLoading(false);
       } catch (error) {
@@ -1399,6 +1430,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
               if (cancelled) return;
               const userData = (responseBody == null ? void 0 : responseBody.data) ?? responseBody;
               setUser(userData);
+              profileLoadedRef.current = true;
               setSessionValid(true);
               setLoading(false);
               return;
@@ -1445,7 +1477,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
       setToken(newToken);
       setTokenState(newToken);
       setSessionValid(true);
-      if (newToken) setLoading(true);
+      if (newToken && !profileLoadedRef.current) setLoading(true);
     },
     clearToken: () => {
       stopSessionSecurity();
@@ -1453,6 +1485,7 @@ function AuthProvider({ children, onSessionExpired, manageSessionSecurity = true
       clearToken();
       setTokenState(null);
       setUser(null);
+      profileLoadedRef.current = false;
     }
   };
   return /* @__PURE__ */ React.createElement(AuthContext.Provider, { value }, children);
@@ -1645,6 +1678,10 @@ var auth = {
   // 🌐 Authenticated API client
   api: api_default,
   preferences,
+  // 🏢 Single-organization mode helpers
+  SINGLE_ORG_DENIED_EVENT,
+  isTenantAccessDenied,
+  isSingleOrganizationMode,
   // 🔎 Safe authentication diagnostics
   getDiagnosticContext,
   emitAuthDiagnostic,
@@ -1696,12 +1733,15 @@ export {
   AuthProvider,
   PREFERENCE_DEFAULTS,
   PreferencesProvider,
+  SINGLE_ORG_DENIED_EVENT,
   applyPreferences,
   auth,
   formatUserDate,
   formatUserNumber,
   formatUserRelativeTime,
   getPreferences,
+  isSingleOrganizationMode,
+  isTenantAccessDenied,
   normalizePreferences,
   resolveTheme,
   startPreferenceSync,