@swoff/cli 0.3.13 → 0.3.15

package/dist/runtime/auth-store.js

@@ -1,259 +1,177 @@
-import { T, R, PT, AS } from "./utils.js";
-function generateWithAuthHeaders(authType, ts) {
-    const hd = T(ts, "Headers");
-    const a = T(ts, "AuthData | null");
-    switch (authType) {
-        case "cookie":
-            return `/** Inject auth headers. For cookie auth, credentials are handled via AUTH_WITH_CREDENTIALS. */
-export function withAuthHeaders(headers${hd}, _auth${a})${hd}{
-  return headers;
-}`;
-        case "bearer":
-            return `/** Inject Bearer token into request headers. */
-export function withAuthHeaders(headers${hd}, auth${a})${hd}{
-  if (auth?.token) {
-    headers.set("Authorization", \`Bearer \${auth.token}\`);
-  }
-  return headers;
-}`;
-        case "custom":
-            return `/** Inject custom auth headers. Edit this function to match your backend. */
-export function withAuthHeaders(headers${hd}, auth${a})${hd}{
-  // --- EDIT THIS BLOCK FOR YOUR BACKEND ---
-  // if (auth?.token) {
-  //   headers.set("X-Auth-Token", auth.token);
-  // }
-  // --- END OF EDITABLE BLOCK ---
-  return headers;
-}`;
-        default:
-            return `export function withAuthHeaders(headers${hd}, auth${a})${hd}{
-  if (auth?.token) {
-    headers.set("Authorization", \`Bearer \${auth.token}\`);
-  }
-  return headers;
-}`;
-    }
-}
-function generateIsAuthUrl(refreshPath, userEndpoint, ts) {
-    return `/** Check if a URL is an auth endpoint that should bypass the SW cache. */
-export function isAuthUrl(url${T(ts, "string")})${R(ts, "boolean")}{
-  const authPaths = [
+import { T, R, PT } from "./utils.js";
+const DEFAULT_AUTH_ROUTES = [
     "/login",
     "/logout",
     "/register",
     "/api/login",
     "/api/logout",
     "/api/register",
-    "${refreshPath}",
-    "${userEndpoint}",
-  ];
-  return authPaths.some((path) => url.includes(path));
-}`;
-}
-function generateEnsureValidAuth(cookieAuth, ts, refreshPath, ext) {
-    const tokenArg = cookieAuth ? "" : "auth?.token";
-    return `/** Try to restore the session after page refresh — delegates to refreshSession() in ./user.${ext}. */
-let restorePromise${T(ts, "Promise<AuthData | null> | null")} = null;
-
-async function tryRestoreSession()${R(ts, "Promise<AuthData | null>")}{
-  if (restorePromise) {
-    try { return await restorePromise; } finally { restorePromise = null; }
-  }
-  restorePromise = (async () => {
-    try {
-      const response = await refreshSession();
-      if (!response.ok) return null;
-      const data = await response.json();
-      const userData = await loadUserData();
-      const auth = { ...userData, token: data.token, expiresAt: data.expiresAt };
-      await setAuth(auth);
-      return auth;
-    } catch { return null; }
-  })();
-  try { return await restorePromise; } finally { restorePromise = null; }
-}
-
-let refreshPromise${T(ts, "Promise<AuthData | null> | null")} = null;
-
-export async function ensureValidAuth()${R(ts, "Promise<AuthData | null>")}{
-  const auth = await getAuth();
-  if (!auth) return null;
-
-  // Token missing after page refresh — try silent session restoration
-  if (!auth.token) {
-    return tryRestoreSession();
-  }
-
-  if (!auth.expiresAt || Date.now() < auth.expiresAt) return auth;
-
-  if (!refreshPromise) {
-    refreshPromise = (async () => {
-      try {
-          const response = await refreshSession(${tokenArg});
-        if (!response.ok) {
-          await clearAuth();
-          window.dispatchEvent(new CustomEvent("sw-auth-unauthorized"));
-          return null;
-        }
-
-        const data = await response.json();
-        const updated = { ...auth, token: data.token, expiresAt: data.expiresAt };
-        await setAuth(updated);
-        return updated;
-      } catch {
-        await clearAuth();
-        window.dispatchEvent(new CustomEvent("sw-auth-unauthorized"));
-        return null;
-      }
-    })();
-  }
-
-  try {
-    return await refreshPromise;
-  } finally {
-    refreshPromise = null;
-  }
-}`;
-}
-export function generateAuthStoreCode(ctx, authType, refreshPath, userEndpoint) {
+    "/api/refresh",
+    "/api/me",
+];
+export function generateAuthStoreCode(ctx, authType, authRoutePaths = DEFAULT_AUTH_ROUTES, mutationQueueEnabled = false) {
     const { ext, ts } = ctx;
-    const authDataInterface = ts
-        ? `export interface AuthData {
-  token?: string;
-  user?: Record<string, unknown>;
-  expiresAt?: number;
-}
-
-export interface AuthResponse extends Record<string, unknown> {
-  // Uncomment and type the fields your backend's login response returns:
-  // token: string;
-  // user: Record<string, unknown>;
-  // expiresAt?: number;
-}
-
-`
-        : "";
-    const createAuthFromResponseBlock = ts
-        ? `/** Extract AuthData from your backend's login response. Edit this function to match your backend's response shape. */
-export function createAuthFromResponse(response: AuthResponse): AuthData {
-  // --- EDIT THIS TO MATCH YOUR BACKEND ---
-  const data = response as Record<string, unknown>;
-  return {
-    token: data.token as string,
-    user: data.user as Record<string, unknown> | undefined,
-    expiresAt: data.expiresAt as number | undefined,
-  };
-  // --- END OF EDITABLE BLOCK ---
-}
-`
-        : `/** Extract AuthData from your backend's login response. Edit this function to match your backend's response shape. */
-export function createAuthFromResponse(response) {
-  // --- EDIT THIS TO MATCH YOUR BACKEND ---
-  return {
-    token: response.token,
-    user: response.user,
-    expiresAt: response.expiresAt,
-  };
-  // --- END OF EDITABLE BLOCK ---
-}
-`;
+    const isCookie = authType === "cookie";
+    const cookieAuthComment = isCookie
+        ? ` *
+ * Cookie auth: the server manages the session. setAuth() stores user info
+ * for offline display. The browser sends the session cookie automatically.`
+        : ` *
+ * Bearer auth: token lives in memory only — cleared on page refresh.
+ * ensureValidAuth() calls adapter.refresh() when the token expires.
+ * Only { user, expiresAt } persists to IndexedDB for offline display.`;
     return `/**
- * Auth Store — Token in memory only; user info in IndexedDB for offline access.
+ * Auth Store — Token in memory only; user info in IndexedDB for offline access.${cookieAuthComment}
  *
- * Security:
- *   The Bearer token lives in JavaScript memory and is cleared on page refresh.
- *   Only { user, expiresAt } is persisted to IndexedDB so the app can display
- *   user info offline. After a page refresh, re-login is required.
+ * Public API (functions listed here):
+ *   setAuth, getAuth, clearAuth, clearMemoryAuth, isAuthValid,
+ *   ensureValidAuth, withAuthHeaders,
+ *   AUTH_WITH_CREDENTIALS, isAuthUrl
+ *
+ * Internal helpers (not exported — used by Swoff internally):
+ *   persistUserData, loadUserData, clearPersistedData
  *
  * Usage:
- *   import { setAuth, getAuth, clearAuth, isAuthValid } from "./auth/store.${ext}";
+ *   import { setAuth, getAuth, clearAuth, clearMemoryAuth, isAuthValid, ensureValidAuth, withAuthHeaders } from "./auth/store.${ext}";
  *
- *   await setAuth({ token, user, expiresAt });
+ *   await setAuth({ user });
  *   const auth = await getAuth();
  *   await clearAuth();
+ *   await clearMemoryAuth();
+ *   await ensureValidAuth();
  */
 
-import { refreshSession } from "./user.${ext}";
+import { adapter } from "./adapter.${ext}";
+${ts ? `import type { AuthData } from "./adapter.${ext}";` : ""}
+import { openDB } from "../db.${ext}";
+${mutationQueueEnabled ? `import { clearQueue } from "../mutation/queue.${ext}";\n` : ""}
 
-${authDataInterface}const DB_NAME = "swoff-auth";
+const DB_NAME = "swoff-auth";
 const STORE_NAME = "auth";
-// Bump this when adding new indexes/stores for schema migration
-const DB_VERSION = 1;
-
 let memoryAuth${T(ts, "AuthData | null")} = null;
+let _fetchingUser = false;
 
-${createAuthFromResponseBlock}
-function openAuthDB()${R(ts, "Promise<IDBDatabase>")}{
-  return new Promise${PT(ts, "IDBDatabase")}((resolve, reject) => {
-    const request = indexedDB.open(DB_NAME, DB_VERSION);
-    request.onupgradeneeded = (e) => {
-      const db = (e.target${AS(ts, "IDBOpenDBRequest")}).result;
-      if (!db.objectStoreNames.contains(STORE_NAME)) {
-        db.createObjectStore(STORE_NAME, { keyPath: "key" });
-      }
-    };
-    request.onsuccess = (e) => resolve((e.target${AS(ts, "IDBOpenDBRequest")}).result);
-    request.onerror = (e) => reject((e.target${AS(ts, "IDBRequest")}).error);
-  });
-}
+// ── Internal: persistence helpers ────────────────────────────────────
 
 async function persistUserData(authData${T(ts, "AuthData | null")})${R(ts, "Promise<void>")}{
-  // Only persist { user, expiresAt } — never the token
   const userData = { user: authData?.user, expiresAt: authData?.expiresAt };
-  const db = await openAuthDB();
-  return new Promise${PT(ts, "void")}((resolve, reject) => {
-    const tx = db.transaction(STORE_NAME, "readwrite");
-    const store = tx.objectStore(STORE_NAME);
-    const request = store.put({ key: "session", value: userData });
-    request.onsuccess = () => resolve();
-    request.onerror = () => reject((request${AS(ts, "IDBRequest")}).error);
-  });
+  const db = await openDB(DB_NAME, STORE_NAME, "key");
+  try {
+    await new Promise${PT(ts, "void")}((resolve, reject) => {
+      const tx = db.transaction(STORE_NAME, "readwrite");
+      const store = tx.objectStore(STORE_NAME);
+      const request = store.put({ key: "session", value: userData });
+      request.onsuccess = () => resolve();
+      request.onerror = () => reject(request.error);
+    });
+  } finally {
+    db.close();
+  }
 }
 
-async function loadUserData()${R(ts, "Promise<{ user?: Record<string, unknown>; expiresAt?: number } | null>")}{
-  const db = await openAuthDB();
-  return new Promise((resolve, reject) => {
-    const tx = db.transaction(STORE_NAME, "readonly");
-    const store = tx.objectStore(STORE_NAME);
-    const request = store.get("session");
-    request.onsuccess = () => resolve((request${AS(ts, "IDBRequest")}).result?.value ?? null);
-    request.onerror = () => reject((request${AS(ts, "IDBRequest")}).error);
-  });
+async function loadUserData()${R(ts, "Promise<AuthData | null>")}{
+  const db = await openDB(DB_NAME, STORE_NAME, "key");
+  try {
+    return await new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE_NAME, "readonly");
+      const store = tx.objectStore(STORE_NAME);
+      const request = store.get("session");
+      request.onsuccess = () => resolve(request.result?.value ?? null);
+      request.onerror = () => reject(request.error);
+    });
+  } finally {
+    db.close();
+  }
 }
 
 async function clearPersistedData()${R(ts, "Promise<void>")}{
-  const db = await openAuthDB();
-  return new Promise${PT(ts, "void")}((resolve, reject) => {
-    const tx = db.transaction(STORE_NAME, "readwrite");
-    const store = tx.objectStore(STORE_NAME);
-    const request = store.delete("session");
-    request.onsuccess = () => resolve();
-    request.onerror = () => reject((request${AS(ts, "IDBRequest")}).error);
-  });
+  const db = await openDB(DB_NAME, STORE_NAME, "key");
+  try {
+    await new Promise${PT(ts, "void")}((resolve, reject) => {
+      const tx = db.transaction(STORE_NAME, "readwrite");
+      const store = tx.objectStore(STORE_NAME);
+      const request = store.delete("session");
+      request.onsuccess = () => resolve();
+      request.onerror = () => reject(request.error);
+    });
+  } finally {
+    db.close();
+  }
 }
 
+// ── Public API: auth data operations ─────────────────────────────────
+
 /** Store auth data in memory and persist user info to IndexedDB for offline access. */
 export async function setAuth(authData${T(ts, "AuthData")})${R(ts, "Promise<void>")}{
   memoryAuth = authData;
   await persistUserData(authData);
 }
 
-/** Get auth data from memory (or IndexedDB if memory is empty after page refresh). */
+/** Get auth data from memory, then adapter, then IndexedDB fallback (user info only). */
 export async function getAuth()${R(ts, "Promise<AuthData | null>")}{
   if (memoryAuth) return memoryAuth;
 
+  // Try adapter first (for provider-managed auth like Better Auth)
+  try {
+    const adapterAuth = await adapter.getAuth();
+    if (adapterAuth) {
+      memoryAuth = adapterAuth;
+      await persistUserData(adapterAuth);
+      return memoryAuth;
+    }
+    // Adapter confirmed no session — don't fall through to stale IDB
+    return null;
+  } catch {
+    // Adapter error (network failure) — fall through to IndexedDB
+  }
+
+  // Fall back to IndexedDB user cache (only reached on adapter error)
   const userData = await loadUserData();
   if (userData) {
     memoryAuth = userData;
+    return memoryAuth;
   }
-  return memoryAuth;
+
+  // Last resort — try server fetch
+  if (_fetchingUser) return null;
+  _fetchingUser = true;
+  try {
+    const fetched = await adapter.fetchUser();
+    if (fetched) {
+      memoryAuth = fetched;
+      await persistUserData(fetched);
+      return memoryAuth;
+    }
+  } catch {
+    // Server unreachable — no auth data available
+  } finally {
+    _fetchingUser = false;
+  }
+
+  return null;
+}
+
+/** Null memory auth only. Use for cross-tab sync — SW broadcasts AUTH_CLEARED, other tabs call this. */
+export function clearMemoryAuth()${R(ts, "void")}{
+  memoryAuth = null;
 }
 
-/** Clear auth from memory and IndexedDB. Call on logout or 401. */
-export async function clearAuth()${R(ts, "Promise<void>")}{
+/** Clear auth from memory, IndexedDB, runtime caches, and dispatch event. Sends AUTH_CLEARED to SW so other tabs clear memory too. Call once on logout. */
+export async function clearAuth(options${T(ts, "{ broadcast?: boolean }")} = {})${R(ts, "Promise<void>")}{
+  if (options.broadcast !== false) {
+    navigator.serviceWorker.controller?.postMessage({ type: "AUTH_CLEARED" });
+  }
   memoryAuth = null;
   await clearPersistedData();
+  try {
+    const cacheNames = await caches.keys();
+    await Promise.all(
+      cacheNames
+        .filter(name => name.startsWith("swoff-runtime"))
+        .map(name => caches.delete(name))
+    );
+  } catch { /* caches API unavailable */ }
+  ${mutationQueueEnabled ? `await clearQueue();\n` : ""}  window.dispatchEvent(new CustomEvent("sw-auth-state-change", { detail: { type: "clear" } }));
 }
 
 /** Check if auth exists and has not expired. Returns true if no expiresAt is set. */
@@ -263,11 +181,99 @@ export function isAuthValid(auth${T(ts, "AuthData | null")})${R(ts, "boolean")}{
   return Date.now() < auth.expiresAt;
 }
 
-${authType === "cookie" ? `export const AUTH_WITH_CREDENTIALS = true;` : `export const AUTH_WITH_CREDENTIALS = false;`}
+// ── Public API: adapter-delegated ────────────────────────────────────
+
+/** Whether to use credentials: "include" for fetch requests. True for cookie-based auth. */
+export const AUTH_WITH_CREDENTIALS = adapter.type === "cookie";
+
+/** Inject auth headers into a Headers object. Delegates to the auth adapter. */
+export function withAuthHeaders(headers${T(ts, "Headers")}, auth${T(ts, "AuthData | null")})${R(ts, "Headers")}{
+  const adapterHeaders = adapter.getHeaders(auth);
+  for (const [key, value] of Object.entries(adapterHeaders)) {
+    headers.set(key, value);
+  }
+  return headers;
+}
+
+/** Check if a URL is an auth endpoint that should bypass the SW cache. */
+export function isAuthUrl(url${T(ts, "string")})${R(ts, "boolean")}{
+  var urlPath = url.indexOf("://") !== -1 ? new URL(url).pathname.replace(/\/$/, "") : url.replace(/\/$/, "");
+  return ${JSON.stringify(authRoutePaths)}.some(function(path) { return urlPath === path; });
+}
+
+// ── Public API: session refresh ──────────────────────────────────────
+
+${isCookie
+        ? `
+/**
+ * Cookie auth: the server manages the session. No token to restore or refresh.
+ * The browser sends the session cookie automatically.
+ * getAuth() + IndexedDB user cache provides offline access.
+ */
+export async function ensureValidAuth()${R(ts, "Promise<AuthData | null>")}{
+  return getAuth();
+}
+`
+        : `
+/** Try to restore session after page refresh. Delegates to adapter.refresh(). */
+async function tryRestoreSession()${R(ts, "Promise<AuthData | null>")}{
+  try {
+    const auth = await getAuth();
+    if (!auth) return null;
+    const refreshed = await adapter.refresh(auth);
+    if (refreshed) {
+      await setAuth(refreshed);
+      return refreshed;
+    }
+    return null;
+  } catch { return null; }
+}
+
+let restorePromise${T(ts, "Promise<AuthData | null> | null")} = null;
+let refreshPromise${T(ts, "Promise<AuthData | null> | null")} = null;
+
+/**
+ * Bearer auth: token expires — try silent refresh via adapter.refresh().
+ * If refresh fails, auth is cleared and sw-auth-unauthorized is dispatched.
+ */
+export async function ensureValidAuth()${R(ts, "Promise<AuthData | null>")}{
+  const auth = await getAuth();
+  if (!auth) return null;
+
+  // No token after page refresh — try silent session restoration
+  if (!auth.token) {
+    if (restorePromise) {
+      try { return await restorePromise; } finally { restorePromise = null; }
+    }
+    restorePromise = tryRestoreSession();
+    try { return await restorePromise; } finally { restorePromise = null; }
+  }
+
+  // Not expired yet
+  if (!auth.expiresAt || Date.now() < auth.expiresAt) return auth;
+
+  // Token expired — try refresh via adapter
+  if (!refreshPromise) {
+    refreshPromise = (async () => {
+      try {
+        const refreshed = await adapter.refresh(auth);
+        if (refreshed) {
+          await setAuth(refreshed);
+          return refreshed;
+        }
+        await clearAuth();
+        return null;
+      } catch {
+        await clearAuth();
+        return null;
+      }
+    })();
+  }
+
+  try { return await refreshPromise; } finally { refreshPromise = null; }
+}
+`}
 
-${generateWithAuthHeaders(authType, ts)}
-${generateIsAuthUrl(refreshPath, userEndpoint, ts)}
-${generateEnsureValidAuth(authType === "cookie", ts, refreshPath, ext)}
 `;
 }
 //# sourceMappingURL=auth-store.js.map

package/dist/runtime/auth-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-store.js","sourceRoot":"","sources":["../../src/runtime/auth-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAE1C,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,EAAW;IAEX,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACnC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO;yCAC4B,EAAE,UAAU,CAAC,IAAI,EAAE;;EAE1D,CAAC;QACC,KAAK,QAAQ;YACX,OAAO;yCAC4B,EAAE,SAAS,CAAC,IAAI,EAAE;;;;;EAKzD,CAAC;QACC,KAAK,QAAQ;YACX,OAAO;yCAC4B,EAAE,SAAS,CAAC,IAAI,EAAE;;;;;;;EAOzD,CAAC;QACC;YACE,OAAO,0CAA0C,EAAE,SAAS,CAAC,IAAI,EAAE;;;;;EAKvE,CAAC;IACD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,WAAmB,EACnB,YAAoB,EACpB,EAAW;IAEX,OAAO;+BACsB,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC;;;;;;;;OAQ3D,WAAW;OACX,YAAY;;;EAGjB,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,UAAmB,EACnB,EAAW,EACX,WAAmB,EACnB,GAAW;IAEX,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;IACjD,OAAO,+FAA+F,GAAG;oBACvF,CAAC,CAAC,EAAE,EAAE,iCAAiC,CAAC;;oCAExB,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;;;;;;;;;;;;;;oBAkBjD,CAAC,CAAC,EAAE,EAAE,iCAAiC,CAAC;;yCAEnB,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;;;;;;;;;;kDAcxB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;EAwBxD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAAmB,EACnB,QAAgB,EAChB,WAAmB,EACnB,YAAoB;IAEpB,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IAExB,MAAM,iBAAiB,GAAG,EAAE;QAC1B,CAAC,CAAC;;;;;;;;;;;;;CAaL;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,2BAA2B,GAAG,EAAE;QACpC,CAAC,CAAC;;;;;;;;;;;CAWL;QACG,CAAC,CAAC;;;;;;;;;;CAUL,CAAC;IAEA,OAAO;;;;;;;;;8EASqE,GAAG;;;;;;;yCAOxC,GAAG;;EAE1C,iBAAiB;;;;;gBAKH,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC;;EAEtC,2BAA2B;uBACN,CAAC,CAAC,EAAE,EAAE,sBAAsB,CAAC;sBAC9B,EAAE,CAAC,EAAE,EAAE,aAAa,CAAC;;;4BAGf,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC;;;;;kDAKJ,EAAE,CAAC,EAAE,EAAE,kBAAkB,CAAC;+CAC7B,EAAE,CAAC,EAAE,EAAE,YAAY,CAAC;;;;yCAI1B,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;sBAIrE,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC;;;;;6CAKS,EAAE,CAAC,EAAE,EAAE,YAAY,CAAC;;;;+BAIlC,CAAC,CAAC,EAAE,EAAE,wEAAwE,CAAC;;;;;;gDAM9D,EAAE,CAAC,EAAE,EAAE,YAAY,CAAC;6CACvB,EAAE,CAAC,EAAE,EAAE,YAAY,CAAC;;;;qCAI5B,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;sBAErC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC;;;;;6CAKS,EAAE,CAAC,EAAE,EAAE,YAAY,CAAC;;;;;wCAKzB,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;iCAMlD,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;;;;;;;mCAW/B,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;kCAMvB,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC;;;;;;EAM5E,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,6CAA6C;;EAEpH,uBAAuB,CAAC,QAAQ,EAAE,EAAE,CAAC;EACrC,iBAAiB,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,CAAC;EAChD,uBAAuB,CAAC,QAAQ,KAAK,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC;CACrE,CAAC;AACF,CAAC"}
+{"version":3,"file":"auth-store.js","sourceRoot":"","sources":["../../src/runtime/auth-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,mBAAmB,GAAG;IAC1B,QAAQ;IACR,SAAS;IACT,WAAW;IACX,YAAY;IACZ,aAAa;IACb,eAAe;IACf,cAAc;IACd,SAAS;CACV,CAAC;AAEF,MAAM,UAAU,qBAAqB,CACnC,GAAmB,EACnB,QAAgB,EAChB,iBAA2B,mBAAmB,EAC9C,uBAAgC,KAAK;IAErC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACxB,MAAM,QAAQ,GAAG,QAAQ,KAAK,QAAQ,CAAC;IAEvC,MAAM,iBAAiB,GAAG,QAAQ;QAChC,CAAC,CAAC;;4EAEsE;QACxE,CAAC,CAAC;;;uEAGiE,CAAC;IAEtE,OAAO;kFACyE,iBAAiB;;;;;;;;;;;iIAW8B,GAAG;;;;;;;;;qCAS/F,GAAG;EACtC,EAAE,CAAC,CAAC,CAAC,4CAA4C,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE;gCAC/B,GAAG;EACjC,oBAAoB,CAAC,CAAC,CAAC,iDAAiD,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE;;;;gBAIxE,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC;;;;;yCAKC,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;uBAIpE,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC;;;;;;;;;;;;+BAYN,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;;;;;;;;;;;qCAe3B,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;uBAGpC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC;;;;;;;;;;;;;;;wCAeG,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;iCAMlD,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCA4C/B,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC;;;;;yCAKP,CAAC,CAAC,EAAE,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;;;;;;;;IAcpG,oBAAoB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE;;;;kCAIrB,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC;;;;;;;;;;;;yCAYrC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC;;;;;;;;;+BAS/E,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC;;WAEvD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;;;;;EAMvC,QAAQ;QACN,CAAC,CAAC;;;;;;yCAMmC,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;CAGzE;QACG,CAAC,CAAC;;oCAE8B,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;;;;;;;;;oBAajD,CAAC,CAAC,EAAE,EAAE,iCAAiC,CAAC;oBACxC,CAAC,CAAC,EAAE,EAAE,iCAAiC,CAAC;;;;;;yCAMnB,CAAC,CAAC,EAAE,EAAE,0BAA0B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqC1E;;CAEC,CAAC;AACF,CAAC"}

package/dist/runtime/background-sync.js

@@ -14,7 +14,6 @@ export function generateBackgroundSyncCode(ctx) {
  *     url: "/api/todos",
  *     body: { title: "Grocery" },
  *     tags: ["todos"],
- *     tags: ["todos"],
  *   });
  */
 
@@ -44,6 +43,10 @@ export async function syncWhenPossible(mutation${T(ts, "object")})${R(ts, "Promi
 
 /** Re-register a background sync if mutations are still pending. Called automatically after each sync cycle. */
 export async function retrySync()${R(ts, "Promise<void>")}{
+  // Re-register self-cleaning listener for next cycle
+  if (typeof window !== "undefined") {
+    window.addEventListener("mutation-sync-complete", retrySync, { once: true });
+  }
   if (!("serviceWorker" in navigator) || !("SyncManager" in window)) return;
   const count = await getPendingCount();
   if (count > 0) {
@@ -52,7 +55,7 @@ export async function retrySync()${R(ts, "Promise<void>")}{
 }
 
 if (typeof window !== "undefined") {
-  window.addEventListener("mutation-sync-complete", retrySync);
+  window.addEventListener("mutation-sync-complete", retrySync, { once: true });
 }
 `;
 }

package/dist/runtime/background-sync.js.map

@@ -1 +1 @@
-{"version":3,"file":"background-sync.js","sourceRoot":"","sources":["../../src/runtime/background-sync.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAElC,MAAM,UAAU,0BAA0B,CAAC,GAAmB;IAC5D,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACxB,OAAO;;;;;;iEAMwD,GAAG;;;;;;;;;;;gFAWY,GAAG;;;;+BAIpD,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;;;;;;;;;iDAeJ,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;mCAMvD,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;;;;;CAWxD,CAAC;AACF,CAAC"}
+{"version":3,"file":"background-sync.js","sourceRoot":"","sources":["../../src/runtime/background-sync.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAElC,MAAM,UAAU,0BAA0B,CAAC,GAAmB;IAC5D,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACxB,OAAO;;;;;;iEAMwD,GAAG;;;;;;;;;;gFAUY,GAAG;;;;+BAIpD,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;;;;;;;;;iDAeJ,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;mCAMvD,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;;;;;;;;;CAexD,CAAC;AACF,CAAC"}

package/dist/runtime/cache.js

@@ -1,17 +1,30 @@
 import { T, R } from "./utils.js";
-export function generateCacheCode(ctx) {
+function generateCascadingCode(cascading) {
+    if (!cascading || Object.keys(cascading).length === 0)
+        return "null";
+    return JSON.stringify(cascading);
+}
+export function generateCacheCode(ctx, cascading) {
     const { ext, ts } = ctx;
+    const cascadingCode = generateCascadingCode(cascading);
     return `/**
  * Swoff Cache Invalidation
- * Framework-agnostic cache tag invalidation.
+ * Framework-agnostic cache tag invalidation, URL-based invalidation,
+ * cascading dependency expansion, introspection, and glob matching.
  *
  * Usage:
- *   import { invalidateByTag, invalidateByTags } from './swoff/cache.${ext}';
+ *   import { invalidateByTag, invalidateByTags, invalidateUrl } from './swoff/cache/invalidate.${ext}';
  *
  *   // After a mutation, invalidate related cache
  *   await invalidateByTag("todos");
+ *   await invalidateUrl("/api/todos/42");
  */
 
+import { generateTags, generateTagsFromMethod } from "./tags.${ext}";
+
+// Cascading invalidation map (tag → dependent tags)
+const CASCADING${T(ts, "Record<string, string[]> | null")} = ${cascadingCode};
+
 /** Invalidate all cached responses tagged with the given tag. Sends INVALIDATE_TAG to the SW; the client-injector dispatches cache-invalidated on SW confirmation. */
 export async function invalidateByTag(tag${T(ts, "string")})${R(ts, "Promise<void>")}{
   if (!navigator.serviceWorker?.controller) return;
@@ -25,6 +38,81 @@ export async function invalidateByTag(tag${T(ts, "string")})${R(ts, "Promise<voi
 export async function invalidateByTags(tags${T(ts, "string[]")})${R(ts, "Promise<void>")}{
   await Promise.all(tags.map((tag) => invalidateByTag(tag)));
 }
+
+/** Expand tags with their cascading dependencies, deduplicated. */
+export function expandCascading(tags${T(ts, "string[]")})${R(ts, "string[]")}{
+  if (!CASCADING) return [...tags];
+  const result = new Set(tags);
+  for (const tag of tags) {
+    const deps = CASCADING[tag];
+    if (deps) {
+      for (const dep of deps) {
+        result.add(dep);
+      }
+    }
+  }
+  return [...result];
+}
+
+/** Invalidate cached responses related to a URL, including cascading dependencies. */
+export async function invalidateUrl(url${T(ts, "string | URL")})${R(ts, "Promise<void>")}{
+  const tags = generateTags(url);
+  const allTags = CASCADING ? expandCascading(tags) : tags;
+  await invalidateByTags(allTags);
+}
+
+/** Invalidate cached responses tagged with method-prefixed tags, including cascading dependencies. */
+export async function invalidateByMethod(method${T(ts, "string")}, url${T(ts, "string | URL")})${R(ts, "Promise<void>")}{
+  const tags = generateTagsFromMethod(method, url);
+  const allTags = CASCADING ? expandCascading(tags) : tags;
+  await invalidateByTags(allTags);
+}
+
+/** Invalidate all cached responses whose URL matches the given glob pattern. */
+export async function invalidateMatching(glob${T(ts, "string")})${R(ts, "Promise<void>")}{
+  const controller = navigator.serviceWorker?.controller;
+  if (!controller) return;
+  controller.postMessage({
+    type: "INVALIDATE_MATCHING",
+    glob,
+  });
+}
+
+/** Introspect: get all URLs cached under a given tag. */
+export async function getUrlsForTag(tag${T(ts, "string")})${R(ts, "Promise<{ url: string; actualUrl: string }[]>")}{
+  const controller = navigator.serviceWorker?.controller;
+  if (!controller) return [];
+  return new Promise((resolve) => {
+    const channel = new MessageChannel();
+    const timeout = setTimeout(() => { channel.port1.close(); resolve([]); }, 5000);
+    channel.port1.onmessage = (event) => {
+      clearTimeout(timeout);
+      resolve(event.data.urls || []);
+    };
+    controller.postMessage(
+      { type: "GET_URLS_FOR_TAG", tag },
+      [channel.port2],
+    );
+  });
+}
+
+/** Introspect: get all tags associated with a given URL. */
+export async function getTagsForUrl(url${T(ts, "string")})${R(ts, "Promise<string[]>")}{
+  const controller = navigator.serviceWorker?.controller;
+  if (!controller) return [];
+  return new Promise((resolve) => {
+    const channel = new MessageChannel();
+    const timeout = setTimeout(() => { channel.port1.close(); resolve([]); }, 5000);
+    channel.port1.onmessage = (event) => {
+      clearTimeout(timeout);
+      resolve(event.data.tags || []);
+    };
+    controller.postMessage(
+      { type: "GET_TAGS_FOR_URL", url },
+      [channel.port2],
+    );
+  });
+}
 `;
 }
 //# sourceMappingURL=cache.js.map

package/dist/runtime/cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/runtime/cache.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAElC,MAAM,UAAU,iBAAiB,CAAC,GAAmB;IACnD,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACxB,OAAO;;;;;wEAK+D,GAAG;;;;;;;2CAOhC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;;;6CASvC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;CAGvF,CAAC;AACF,CAAC"}
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/runtime/cache.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAElC,SAAS,qBAAqB,CAAC,SAAmC;IAChE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACrE,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,GAAmB,EACnB,SAAmC;IAEnC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACxB,MAAM,aAAa,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAEvD,OAAO;;;;;;kGAMyF,GAAG;;;;;;;+DAOtC,GAAG;;;iBAGjD,CAAC,CAAC,EAAE,EAAE,iCAAiC,CAAC,MAAM,aAAa;;;2CAGjC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;;;6CASvC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;sCAKlD,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC;;;;;;;;;;;;;;;yCAenC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;iDAOvC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;+CAOxE,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC;;;;;;;;;;yCAU/C,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,+CAA+C,CAAC;;;;;;;;;;;;;;;;;;yCAkBzE,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,mBAAmB,CAAC;;;;;;;;;;;;;;;;CAgBrF,CAAC;AACF,CAAC"}