@timardex/cluemart-shared 1.6.112 → 1.6.130

package/dist/auth/index.d.mts

@@ -1,10 +1,8 @@
-import { EnumUserRole, EnumResourceType, EnumUserLicence } from '../enums/index.mjs';
-import { P as Permission, S as SafeUserType } from '../user-DE8edl3u.mjs';
-export { a as PERMISSIONS, W as WILDCARD_PERMISSION } from '../user-DE8edl3u.mjs';
-import { T as Tier } from '../subscription-bmAdrnfi.mjs';
+import { U as UserRoleEnumType, f as ResourceTypeEnum, e as LicencesEnumType, C as UserType } from '../graphql-CcvzTs9k.mjs';
+import { P as Permission, T as Tier } from '../subscription-Cj_qBA7u.mjs';
+export { a as PERMISSIONS, W as WILDCARD_PERMISSION } from '../subscription-Cj_qBA7u.mjs';
 import React, { ReactNode } from 'react';
-import '../global-DePDtOFt.mjs';
-import 'react-hook-form';
+import '../images/index.mjs';
 
 type AuthManager = {
     logout: () => Promise<void>;
@@ -22,7 +20,7 @@ type AuthManager = {
 declare function createAuthManager(): AuthManager;
 
 /** Roles allowed to sign into the admin web app (CUSTOMER-only is denied). */
-declare const ADMIN_APP_ROLES: readonly [EnumUserRole.SUPER_ADMIN, EnumUserRole.ADMIN, EnumUserRole.EVENT, EnumUserRole.VENDOR, EnumUserRole.PARTNER, EnumUserRole.SCHOOL, EnumUserRole.AFFILIATE];
+declare const ADMIN_APP_ROLES: readonly [UserRoleEnumType.SuperAdmin, UserRoleEnumType.Admin, UserRoleEnumType.Event, UserRoleEnumType.Vendor, UserRoleEnumType.Partner, UserRoleEnumType.School, UserRoleEnumType.Affiliate];
 type AdminAppRole = (typeof ADMIN_APP_ROLES)[number];
 type AdminDashboardContext = "staff" | "event" | "vendor" | "partner" | "school" | "affiliate";
 type AdminDashboardContextInfo = {
@@ -31,39 +29,39 @@ type AdminDashboardContextInfo = {
     label: string;
     /** Path prefixes that belong to this context (including home). */
     pathPrefixes: readonly string[];
-    roles: readonly EnumUserRole[];
+    roles: readonly UserRoleEnumType[];
 };
 /**
  * Priority order for default home + role switcher.
  * Staff first, then product roles.
  */
 declare const ADMIN_DASHBOARD_CONTEXTS: readonly AdminDashboardContextInfo[];
-declare function canAccessAdminApp(roles: EnumUserRole[] | null | undefined): boolean;
-declare function getUsableAdminContexts(roles: EnumUserRole[] | null | undefined): AdminDashboardContextInfo[];
-declare function getDefaultAdminHome(roles: EnumUserRole[] | null | undefined, preferredContext?: AdminDashboardContext | null): string;
+declare function canAccessAdminApp(roles: UserRoleEnumType[] | null | undefined): boolean;
+declare function getUsableAdminContexts(roles: UserRoleEnumType[] | null | undefined): AdminDashboardContextInfo[];
+declare function getDefaultAdminHome(roles: UserRoleEnumType[] | null | undefined, preferredContext?: AdminDashboardContext | null): string;
 declare function resolveAdminContextFromPath(pathname: string): AdminDashboardContext | null;
-declare function canAccessAdminPath(roles: EnumUserRole[] | null | undefined, pathname: string): boolean;
+declare function canAccessAdminPath(roles: UserRoleEnumType[] | null | undefined, pathname: string): boolean;
 
 /**
  * Union of permissions for the given roles (deduped, stable order).
  */
-declare function getPermissionsForRoles(roles: EnumUserRole[] | null | undefined): Permission[];
+declare function getPermissionsForRoles(roles: UserRoleEnumType[] | null | undefined): Permission[];
 /**
  * Check a concrete permission list (e.g. authUser.permissions) for a grant.
  * Honours the "*" wildcard.
  */
 declare function permissionListIncludes(permissions: readonly Permission[] | null | undefined, permission: Permission): boolean;
-declare function hasPermission(roles: EnumUserRole[] | null | undefined, permission: Permission): boolean;
-declare function hasAnyPermission(roles: EnumUserRole[] | null | undefined, permissions: readonly Permission[]): boolean;
-declare function hasAllPermissions(roles: EnumUserRole[] | null | undefined, permissions: readonly Permission[]): boolean;
-declare function hasRole(roles: EnumUserRole[] | null | undefined, role: EnumUserRole): boolean;
-declare function hasAnyRole(roles: EnumUserRole[] | null | undefined, checkRoles: readonly EnumUserRole[]): boolean;
+declare function hasPermission(roles: UserRoleEnumType[] | null | undefined, permission: Permission): boolean;
+declare function hasAnyPermission(roles: UserRoleEnumType[] | null | undefined, permissions: readonly Permission[]): boolean;
+declare function hasAllPermissions(roles: UserRoleEnumType[] | null | undefined, permissions: readonly Permission[]): boolean;
+declare function hasRole(roles: UserRoleEnumType[] | null | undefined, role: UserRoleEnumType): boolean;
+declare function hasAnyRole(roles: UserRoleEnumType[] | null | undefined, checkRoles: readonly UserRoleEnumType[]): boolean;
 
 /**
  * Static role → permissions map. Source of truth for access.
  * Permissions for a user = union of all their roles' lists.
  */
-declare const ROLE_PERMISSIONS: Record<EnumUserRole, readonly Permission[]>;
+declare const ROLE_PERMISSIONS: Record<UserRoleEnumType, readonly Permission[]>;
 
 type LimitType = "availability" | "images" | "calendar" | "posters" | "productsList" | "statistics" | "relationShare";
 interface RoleLicences {
@@ -77,9 +75,9 @@ interface LicencesByRole {
     partner: RoleLicences;
 }
 /** Resource types with subscription/licence limits (excludes affiliate & school). */
-type LicencedResourceType = Exclude<EnumResourceType, EnumResourceType.AFFILIATE | EnumResourceType.SCHOOL>;
+type LicencedResourceType = Exclude<ResourceTypeEnum, ResourceTypeEnum.Affiliate | ResourceTypeEnum.School>;
 /** Licence badges shown on the profile screen (excludes affiliate & school). */
-type ProfileBadgeLicence = Exclude<EnumUserLicence, EnumUserLicence.STANDARD_AFFILIATE | EnumUserLicence.STANDARD_SCHOOL>;
+type ProfileBadgeLicence = Exclude<LicencesEnumType, LicencesEnumType.StandardAffiliate | LicencesEnumType.StandardSchool>;
 type HasLicenceResult = {
     directLicence: boolean;
 };
@@ -112,29 +110,29 @@ type UseAuthCoreAdapters = {
     }) => void;
 };
 interface UseAuthReturnType {
-    authUser: SafeUserType | null;
+    authUser: UserType | null;
     isAffiliate: boolean;
     isSchool: boolean;
     handleLogoutExplicit: () => Promise<void>;
     hasEventLicence: HasLicenceResult;
     hasPartnerLicence: HasLicenceResult;
     hasPermission: (permission: Permission) => boolean;
-    hasRole: (role: EnumUserRole) => boolean;
-    hasUserLicence: (licenceType: EnumUserLicence) => boolean;
+    hasRole: (role: UserRoleEnumType) => boolean;
+    hasUserLicence: (licenceType: LicencesEnumType) => boolean;
     hasVendorLicence: HasLicenceResult;
     isAdmin: boolean;
     isSuperAdmin: boolean;
     isLoading: boolean;
     permissions: Permission[];
-    getLicenseAccessLevel: (limitType: LimitType, resourceId: string, resourceType: EnumResourceType) => number;
+    getLicenseAccessLevel: (limitType: LimitType, resourceId: string, resourceType: ResourceTypeEnum) => number;
     refetchUser: () => Promise<void>;
-    setUser: (user: SafeUserType | null) => Promise<void>;
+    setUser: (user: UserType | null) => Promise<void>;
 }
 
-declare function isLicencedResourceType(resourceType: EnumResourceType): resourceType is LicencedResourceType;
-declare function isProfileBadgeLicence(licenceType: EnumUserLicence): licenceType is ProfileBadgeLicence;
-declare const hasUserLicenceType: (authUser: SafeUserType | null, licenceType: EnumUserLicence) => boolean;
-declare const hasLicence: (authUser: SafeUserType | null, licenceType: "vendor" | "partner" | "event") => HasLicenceResult;
+declare function isLicencedResourceType(resourceType: ResourceTypeEnum): resourceType is LicencedResourceType;
+declare function isProfileBadgeLicence(licenceType: LicencesEnumType): licenceType is ProfileBadgeLicence;
+declare const hasUserLicenceType: (authUser: UserType | null, licenceType: LicencesEnumType) => boolean;
+declare const hasLicence: (authUser: UserType | null, licenceType: "vendor" | "partner" | "event") => HasLicenceResult;
 /** Default limits per subscription tier. */
 declare const DEFAULT_LIMITS: Record<LimitType, Record<Tier, number>>;
 /** All tiers off — used when the viewer does not own the resource. */

package/dist/auth/index.d.ts

@@ -1,10 +1,8 @@
-import { EnumUserRole, EnumResourceType, EnumUserLicence } from '../enums/index.js';
-import { P as Permission, S as SafeUserType } from '../user-D47MLFyH.js';
-export { a as PERMISSIONS, W as WILDCARD_PERMISSION } from '../user-D47MLFyH.js';
-import { T as Tier } from '../subscription-BU8GvH2K.js';
+import { U as UserRoleEnumType, f as ResourceTypeEnum, e as LicencesEnumType, C as UserType } from '../graphql-CDOfA79A.js';
+import { P as Permission, T as Tier } from '../subscription-OiJ50uJb.js';
+export { a as PERMISSIONS, W as WILDCARD_PERMISSION } from '../subscription-OiJ50uJb.js';
 import React, { ReactNode } from 'react';
-import '../global-CUYYxpy2.js';
-import 'react-hook-form';
+import '../images/index.js';
 
 type AuthManager = {
     logout: () => Promise<void>;
@@ -22,7 +20,7 @@ type AuthManager = {
 declare function createAuthManager(): AuthManager;
 
 /** Roles allowed to sign into the admin web app (CUSTOMER-only is denied). */
-declare const ADMIN_APP_ROLES: readonly [EnumUserRole.SUPER_ADMIN, EnumUserRole.ADMIN, EnumUserRole.EVENT, EnumUserRole.VENDOR, EnumUserRole.PARTNER, EnumUserRole.SCHOOL, EnumUserRole.AFFILIATE];
+declare const ADMIN_APP_ROLES: readonly [UserRoleEnumType.SuperAdmin, UserRoleEnumType.Admin, UserRoleEnumType.Event, UserRoleEnumType.Vendor, UserRoleEnumType.Partner, UserRoleEnumType.School, UserRoleEnumType.Affiliate];
 type AdminAppRole = (typeof ADMIN_APP_ROLES)[number];
 type AdminDashboardContext = "staff" | "event" | "vendor" | "partner" | "school" | "affiliate";
 type AdminDashboardContextInfo = {
@@ -31,39 +29,39 @@ type AdminDashboardContextInfo = {
     label: string;
     /** Path prefixes that belong to this context (including home). */
     pathPrefixes: readonly string[];
-    roles: readonly EnumUserRole[];
+    roles: readonly UserRoleEnumType[];
 };
 /**
  * Priority order for default home + role switcher.
  * Staff first, then product roles.
  */
 declare const ADMIN_DASHBOARD_CONTEXTS: readonly AdminDashboardContextInfo[];
-declare function canAccessAdminApp(roles: EnumUserRole[] | null | undefined): boolean;
-declare function getUsableAdminContexts(roles: EnumUserRole[] | null | undefined): AdminDashboardContextInfo[];
-declare function getDefaultAdminHome(roles: EnumUserRole[] | null | undefined, preferredContext?: AdminDashboardContext | null): string;
+declare function canAccessAdminApp(roles: UserRoleEnumType[] | null | undefined): boolean;
+declare function getUsableAdminContexts(roles: UserRoleEnumType[] | null | undefined): AdminDashboardContextInfo[];
+declare function getDefaultAdminHome(roles: UserRoleEnumType[] | null | undefined, preferredContext?: AdminDashboardContext | null): string;
 declare function resolveAdminContextFromPath(pathname: string): AdminDashboardContext | null;
-declare function canAccessAdminPath(roles: EnumUserRole[] | null | undefined, pathname: string): boolean;
+declare function canAccessAdminPath(roles: UserRoleEnumType[] | null | undefined, pathname: string): boolean;
 
 /**
  * Union of permissions for the given roles (deduped, stable order).
  */
-declare function getPermissionsForRoles(roles: EnumUserRole[] | null | undefined): Permission[];
+declare function getPermissionsForRoles(roles: UserRoleEnumType[] | null | undefined): Permission[];
 /**
  * Check a concrete permission list (e.g. authUser.permissions) for a grant.
  * Honours the "*" wildcard.
  */
 declare function permissionListIncludes(permissions: readonly Permission[] | null | undefined, permission: Permission): boolean;
-declare function hasPermission(roles: EnumUserRole[] | null | undefined, permission: Permission): boolean;
-declare function hasAnyPermission(roles: EnumUserRole[] | null | undefined, permissions: readonly Permission[]): boolean;
-declare function hasAllPermissions(roles: EnumUserRole[] | null | undefined, permissions: readonly Permission[]): boolean;
-declare function hasRole(roles: EnumUserRole[] | null | undefined, role: EnumUserRole): boolean;
-declare function hasAnyRole(roles: EnumUserRole[] | null | undefined, checkRoles: readonly EnumUserRole[]): boolean;
+declare function hasPermission(roles: UserRoleEnumType[] | null | undefined, permission: Permission): boolean;
+declare function hasAnyPermission(roles: UserRoleEnumType[] | null | undefined, permissions: readonly Permission[]): boolean;
+declare function hasAllPermissions(roles: UserRoleEnumType[] | null | undefined, permissions: readonly Permission[]): boolean;
+declare function hasRole(roles: UserRoleEnumType[] | null | undefined, role: UserRoleEnumType): boolean;
+declare function hasAnyRole(roles: UserRoleEnumType[] | null | undefined, checkRoles: readonly UserRoleEnumType[]): boolean;
 
 /**
  * Static role → permissions map. Source of truth for access.
  * Permissions for a user = union of all their roles' lists.
  */
-declare const ROLE_PERMISSIONS: Record<EnumUserRole, readonly Permission[]>;
+declare const ROLE_PERMISSIONS: Record<UserRoleEnumType, readonly Permission[]>;
 
 type LimitType = "availability" | "images" | "calendar" | "posters" | "productsList" | "statistics" | "relationShare";
 interface RoleLicences {
@@ -77,9 +75,9 @@ interface LicencesByRole {
     partner: RoleLicences;
 }
 /** Resource types with subscription/licence limits (excludes affiliate & school). */
-type LicencedResourceType = Exclude<EnumResourceType, EnumResourceType.AFFILIATE | EnumResourceType.SCHOOL>;
+type LicencedResourceType = Exclude<ResourceTypeEnum, ResourceTypeEnum.Affiliate | ResourceTypeEnum.School>;
 /** Licence badges shown on the profile screen (excludes affiliate & school). */
-type ProfileBadgeLicence = Exclude<EnumUserLicence, EnumUserLicence.STANDARD_AFFILIATE | EnumUserLicence.STANDARD_SCHOOL>;
+type ProfileBadgeLicence = Exclude<LicencesEnumType, LicencesEnumType.StandardAffiliate | LicencesEnumType.StandardSchool>;
 type HasLicenceResult = {
     directLicence: boolean;
 };
@@ -112,29 +110,29 @@ type UseAuthCoreAdapters = {
     }) => void;
 };
 interface UseAuthReturnType {
-    authUser: SafeUserType | null;
+    authUser: UserType | null;
     isAffiliate: boolean;
     isSchool: boolean;
     handleLogoutExplicit: () => Promise<void>;
     hasEventLicence: HasLicenceResult;
     hasPartnerLicence: HasLicenceResult;
     hasPermission: (permission: Permission) => boolean;
-    hasRole: (role: EnumUserRole) => boolean;
-    hasUserLicence: (licenceType: EnumUserLicence) => boolean;
+    hasRole: (role: UserRoleEnumType) => boolean;
+    hasUserLicence: (licenceType: LicencesEnumType) => boolean;
     hasVendorLicence: HasLicenceResult;
     isAdmin: boolean;
     isSuperAdmin: boolean;
     isLoading: boolean;
     permissions: Permission[];
-    getLicenseAccessLevel: (limitType: LimitType, resourceId: string, resourceType: EnumResourceType) => number;
+    getLicenseAccessLevel: (limitType: LimitType, resourceId: string, resourceType: ResourceTypeEnum) => number;
     refetchUser: () => Promise<void>;
-    setUser: (user: SafeUserType | null) => Promise<void>;
+    setUser: (user: UserType | null) => Promise<void>;
 }
 
-declare function isLicencedResourceType(resourceType: EnumResourceType): resourceType is LicencedResourceType;
-declare function isProfileBadgeLicence(licenceType: EnumUserLicence): licenceType is ProfileBadgeLicence;
-declare const hasUserLicenceType: (authUser: SafeUserType | null, licenceType: EnumUserLicence) => boolean;
-declare const hasLicence: (authUser: SafeUserType | null, licenceType: "vendor" | "partner" | "event") => HasLicenceResult;
+declare function isLicencedResourceType(resourceType: ResourceTypeEnum): resourceType is LicencedResourceType;
+declare function isProfileBadgeLicence(licenceType: LicencesEnumType): licenceType is ProfileBadgeLicence;
+declare const hasUserLicenceType: (authUser: UserType | null, licenceType: LicencesEnumType) => boolean;
+declare const hasLicence: (authUser: UserType | null, licenceType: "vendor" | "partner" | "event") => HasLicenceResult;
 /** Default limits per subscription tier. */
 declare const DEFAULT_LIMITS: Record<LimitType, Record<Tier, number>>;
 /** All tiers off — used when the viewer does not own the resource. */

package/dist/auth/index.mjs

@@ -1,9 +1,17 @@
 "use client";
+import {
+  USER_STORAGE_KEY
+} from "../chunk-DWO35OY4.mjs";
+import {
+  useGetUser,
+  useLogout
+} from "../chunk-UKW7NZEQ.mjs";
 import {
   ADMIN_APP_ROLES,
   ADMIN_DASHBOARD_CONTEXTS,
   PERMISSIONS,
   ROLE_PERMISSIONS,
+  TIERS_BY_PRIORITY,
   WILDCARD_PERMISSION,
   canAccessAdminApp,
   canAccessAdminPath,
@@ -16,19 +24,10 @@ import {
   hasPermission,
   hasRole,
   permissionListIncludes,
-  resolveAdminContextFromPath
-} from "../chunk-VPANTTZI.mjs";
-import {
-  USER_STORAGE_KEY
-} from "../chunk-DWO35OY4.mjs";
-import {
-  TIERS_BY_PRIORITY
-} from "../chunk-DQ7ZHIXW.mjs";
-import {
-  useGetUser,
-  useLogout
-} from "../chunk-32MKHJTX.mjs";
-import "../chunk-X3OLM35T.mjs";
+  resolveAdminContextFromPath,
+  toUserPermissions
+} from "../chunk-DATBGC2K.mjs";
+import "../chunk-INQCDU24.mjs";
 
 // src/auth/createAuthManager.ts
 function createAuthManager() {
@@ -65,10 +64,10 @@ function createAuthManager() {
 
 // src/auth/licenceUtils.ts
 function isLicencedResourceType(resourceType) {
-  return resourceType !== "affiliate" /* AFFILIATE */ && resourceType !== "school" /* SCHOOL */;
+  return resourceType !== "affiliate" /* Affiliate */ && resourceType !== "school" /* School */;
 }
 function isProfileBadgeLicence(licenceType) {
-  return licenceType !== "standard_affiliate" /* STANDARD_AFFILIATE */ && licenceType !== "standard_school" /* STANDARD_SCHOOL */;
+  return licenceType !== "standard_affiliate" /* StandardAffiliate */ && licenceType !== "standard_school" /* StandardSchool */;
 }
 var hasUserLicenceType = (authUser, licenceType) => authUser?.licences?.some((licence) => licence.licenceType === licenceType) ?? false;
 var hasLicence = (authUser, licenceType) => {
@@ -131,9 +130,9 @@ function getLicenceFlagsByRole(licences) {
     return result;
   }
   return {
-    event: resolve("event" /* EVENT */),
-    partner: resolve("partner" /* PARTNER */),
-    vendor: resolve("vendor" /* VENDOR */)
+    event: resolve("event" /* Event */),
+    partner: resolve("partner" /* Partner */),
+    vendor: resolve("vendor" /* Vendor */)
   };
 }
 
@@ -182,12 +181,12 @@ function useAuthCore(adapters) {
   }, [authUser, handleSetAuthUser, onError, refetch]);
   const licences = useCallback(
     (resourceId) => {
-      const myLicences = authUser?.licences?.map((licence) => licence.licenceType) ?? [];
+      const myLicences = authUser?.licences?.map((licence) => licence.licenceType).filter((type) => type != null) ?? [];
       const myResourceIds = [
         authUser?.vendor ?? null,
         authUser?.partner ?? null,
         ...authUser?.events ?? []
-      ].filter((id) => id !== null);
+      ].filter((id) => id != null);
       return myResourceIds.includes(resourceId) ? getLicenceFlagsByRole(myLicences) : NO_LICENCE_FLAGS;
     },
     [authUser]
@@ -226,7 +225,7 @@ function useAuthCore(adapters) {
   );
   const permissions = useMemo(() => {
     if (authUser?.permissions != null) {
-      return authUser.permissions;
+      return toUserPermissions(authUser.permissions);
     }
     return getPermissionsForRoles(authUser?.roles);
   }, [authUser?.permissions, authUser?.roles]);
@@ -239,19 +238,19 @@ function useAuthCore(adapters) {
     [authUser?.roles]
   );
   const isAdmin = useMemo(
-    () => hasRole(authUser?.roles, "admin" /* ADMIN */) || permissionListIncludes(permissions, "dashboard.admin") || permissionListIncludes(permissions, "*"),
+    () => hasRole(authUser?.roles, "admin" /* Admin */) || permissionListIncludes(permissions, "dashboard.admin") || permissionListIncludes(permissions, "*"),
     [authUser?.roles, permissions]
   );
   const isSuperAdmin = useMemo(
-    () => hasRole(authUser?.roles, "super_admin" /* SUPER_ADMIN */),
+    () => hasRole(authUser?.roles, "super_admin" /* SuperAdmin */),
     [authUser?.roles]
   );
   const isAffiliate = useMemo(
-    () => hasRole(authUser?.roles, "affiliate" /* AFFILIATE */) && authUser?.affiliate !== null && authUser?.affiliate !== void 0,
+    () => hasRole(authUser?.roles, "affiliate" /* Affiliate */) && authUser?.affiliate !== null && authUser?.affiliate !== void 0,
     [authUser?.roles, authUser?.affiliate]
   );
   const isSchool = useMemo(
-    () => hasRole(authUser?.roles, "school" /* SCHOOL */) && authUser?.school !== null && authUser?.school !== void 0,
+    () => hasRole(authUser?.roles, "school" /* School */) && authUser?.school !== null && authUser?.school !== void 0,
     [authUser?.roles, authUser?.school]
   );
   useEffect(() => {

package/dist/auth/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/auth/createAuthManager.ts","../../src/auth/licenceUtils.ts","../../src/auth/useAuthCore.ts","../../src/auth/UserProvider.tsx"],"sourcesContent":["export type AuthManager = {\n  logout: () => Promise<void>;\n  setLogout: (fn: () => Promise<void>) => void;\n  handleRefetchUser: () => Promise<void>;\n  setUserRefetch: (fn: () => Promise<void>) => void;\n};\n\n/**\n * Creates an auth manager used by Apollo error links to trigger logout/refetch\n * without importing React. Matches the former mobile authManager shape.\n *\n * `logout()` dedupes concurrent calls via an in-flight promise so token-refresh\n * failures do not kick off multiple logout sequences.\n */\nexport function createAuthManager(): AuthManager {\n  let logoutFn: (() => Promise<void>) | null = null;\n  let userRefetchFn: (() => Promise<void>) | null = null;\n  let logoutPromise: Promise<void> | null = null;\n\n  return {\n    handleRefetchUser: async () => {\n      if (userRefetchFn) {\n        await userRefetchFn();\n      } else {\n        console.warn(\"❌ User refetch function not set!\");\n      }\n    },\n    logout(): Promise<void> {\n      if (logoutPromise !== null) return logoutPromise;\n      if (logoutFn === null) {\n        console.warn(\"❌ Logout function not set!\");\n        return Promise.resolve();\n      }\n      logoutPromise = logoutFn().finally(() => {\n        logoutPromise = null;\n      });\n      return logoutPromise;\n    },\n    setLogout(fn: () => Promise<void>) {\n      logoutFn = fn;\n    },\n    setUserRefetch(fn: () => Promise<void>) {\n      userRefetchFn = fn;\n    },\n  };\n}\n","/* eslint-disable camelcase */\nimport { EnumResourceType, EnumUserLicence } from \"../enums\";\nimport type { SafeUserType } from \"../types\";\nimport { TIERS_BY_PRIORITY, type Tier } from \"../types/subscription\";\n\nimport type {\n  HasLicenceResult,\n  LicencedResourceType,\n  LicencesByRole,\n  LimitType,\n  ProfileBadgeLicence,\n  RoleLicences,\n} from \"./types\";\n\nexport function isLicencedResourceType(\n  resourceType: EnumResourceType,\n): resourceType is LicencedResourceType {\n  return (\n    resourceType !== EnumResourceType.AFFILIATE &&\n    resourceType !== EnumResourceType.SCHOOL\n  );\n}\n\nexport function isProfileBadgeLicence(\n  licenceType: EnumUserLicence,\n): licenceType is ProfileBadgeLicence {\n  return (\n    licenceType !== EnumUserLicence.STANDARD_AFFILIATE &&\n    licenceType !== EnumUserLicence.STANDARD_SCHOOL\n  );\n}\n\nexport const hasUserLicenceType = (\n  authUser: SafeUserType | null,\n  licenceType: EnumUserLicence,\n): boolean =>\n  authUser?.licences?.some((licence) => licence.licenceType === licenceType) ??\n  false;\n\nexport const hasLicence = (\n  authUser: SafeUserType | null,\n  licenceType: \"vendor\" | \"partner\" | \"event\",\n): HasLicenceResult => {\n  const directLicence =\n    authUser?.licences?.some((licence) =>\n      licence.licenceType?.includes(licenceType),\n    ) ?? false;\n\n  return {\n    directLicence,\n  };\n};\n\n/** Default limits per subscription tier. */\nexport const DEFAULT_LIMITS: Record<LimitType, Record<Tier, number>> = {\n  // 1 means calendar/productMenu is enabled, 0 means disabled\n  availability: { pro: 1, pro_plus: 1, standard: 0 },\n  calendar: { pro: 1, pro_plus: 1, standard: 0 },\n  images: { pro: 12, pro_plus: 12, standard: 6 },\n  posters: { pro: 5, pro_plus: 5, standard: 5 },\n  productsList: { pro: 1, pro_plus: 1, standard: 0 },\n  relationShare: { pro: 1, pro_plus: 1, standard: 0 },\n  statistics: { pro: 1, pro_plus: 1, standard: 0 },\n};\n\n/** All tiers off — used when the viewer does not own the resource. */\nexport const NO_LICENCE_FLAGS: LicencesByRole = {\n  event: {\n    pro_plus: false,\n    // eslint-disable-next-line sort-keys\n    pro: false,\n    standard: false,\n  },\n  partner: {\n    pro_plus: false,\n    // eslint-disable-next-line sort-keys\n    pro: false,\n    standard: false,\n  },\n  vendor: {\n    pro_plus: false,\n    // eslint-disable-next-line sort-keys\n    pro: false,\n    standard: false,\n  },\n};\n\n/**\n * Parses an array of licence strings into structured, role-based licences.\n * Users with no licences yet default to pro (create / trial access).\n */\nexport function getLicenceFlagsByRole(licences?: string[]): LicencesByRole {\n  const normalized = licences?.map((l) => l.toLowerCase()) ?? [];\n  const hasAnyLicence = normalized.length > 0;\n\n  function resolve(role: EnumResourceType): RoleLicences {\n    const result: RoleLicences = {\n      pro_plus: false,\n      // eslint-disable-next-line sort-keys\n      pro: false,\n      standard: false,\n    };\n\n    for (const tier of TIERS_BY_PRIORITY) {\n      if (normalized.some((l) => l.startsWith(`${tier}_${role}`))) {\n        result[tier] = true;\n        break; // stop at first match → ensures mutual exclusivity\n      }\n    }\n\n    // No licences at all → grant pro so new users can use pro features\n    if (!hasAnyLicence) {\n      result.pro = true;\n    }\n\n    return result;\n  }\n\n  return {\n    event: resolve(EnumResourceType.EVENT),\n    partner: resolve(EnumResourceType.PARTNER),\n    vendor: resolve(EnumResourceType.VENDOR),\n  };\n}\n","import { useCallback, useEffect, useMemo, useState } from \"react\";\n\nimport { EnumResourceType, EnumUserLicence, EnumUserRole } from \"../enums\";\nimport { useLogout } from \"../graphql/hooks/auth\";\nimport { useGetUser } from \"../graphql/hooks/user/hooksQuery\";\nimport { USER_STORAGE_KEY } from \"../storage\";\nimport type { SafeUserType } from \"../types\";\n\nimport {\n  DEFAULT_LIMITS,\n  getLicenceFlagsByRole,\n  hasLicence,\n  hasUserLicenceType,\n  isLicencedResourceType,\n  NO_LICENCE_FLAGS,\n} from \"./licenceUtils\";\nimport {\n  getPermissionsForRoles,\n  hasRole as roleHasRole,\n  permissionListIncludes,\n} from \"./permissions\";\nimport type { Permission } from \"./permissions\";\nimport type {\n  LimitType,\n  LogoutReason,\n  UseAuthCoreAdapters,\n  UseAuthReturnType,\n} from \"./types\";\n\n/**\n * Platform-agnostic auth session core (source of truth for shared useAuth).\n *\n * Owns: persisted user load/set, refetch, role/licence flags, logout orchestration.\n * Does not own: AsyncStorage vs localStorage, Expo/Next navigation, toasts,\n * Apollo/WS reset, Firebase — those stay in each app's adapter wrapper.\n */\nexport function useAuthCore(adapters: UseAuthCoreAdapters): UseAuthReturnType {\n  const {\n    storage,\n    authManager,\n    afterLogout,\n    shouldCallLogoutMutation = () => true,\n    notifyLogoutSuccess,\n    notifySessionExpired,\n    onError,\n  } = adapters;\n\n  const [authUser, setAuthUser] = useState<SafeUserType | null>(null);\n  const [isLoading, setIsLoading] = useState(true);\n\n  const userId = useMemo(() => authUser?._id ?? \"\", [authUser?._id]);\n  const { refetch } = useGetUser(userId);\n  const { logout, loading } = useLogout();\n\n  const handleSetAuthUser = useCallback(\n    async (user: SafeUserType | null) => {\n      setAuthUser(user);\n      if (user) {\n        await storage.setItem(USER_STORAGE_KEY, JSON.stringify(user));\n      } else {\n        await storage.removeItem(USER_STORAGE_KEY);\n      }\n    },\n    [storage],\n  );\n\n  const handleRefetchUser = useCallback(async () => {\n    if (!authUser) return;\n    try {\n      const result = await refetch();\n      if (!result) return;\n      const { data } = result;\n      if (data?.user) await handleSetAuthUser(data.user);\n    } catch (error: unknown) {\n      onError?.(error, { action: \"refetchUser\" });\n      console.warn(\n        \"Failed to refetch user:\",\n        error instanceof Error ? error.message : error,\n      );\n    }\n  }, [authUser, handleSetAuthUser, onError, refetch]);\n\n  const licences = useCallback(\n    (resourceId: string) => {\n      const myLicences =\n        authUser?.licences?.map((licence) => licence.licenceType) ?? [];\n\n      const myResourceIds = [\n        authUser?.vendor ?? null,\n        authUser?.partner ?? null,\n        ...(authUser?.events ?? []),\n      ].filter((id): id is string => id !== null);\n\n      return myResourceIds.includes(resourceId)\n        ? getLicenceFlagsByRole(myLicences)\n        : NO_LICENCE_FLAGS;\n    },\n    [authUser],\n  );\n\n  const getLicenseAccessLevel = useCallback(\n    (\n      limitType: LimitType,\n      resourceId: string,\n      resourceType: EnumResourceType,\n    ): number => {\n      if (!isLicencedResourceType(resourceType)) {\n        return 0;\n      }\n\n      // No resource yet (e.g. create flow): grant pro limits.\n      if (resourceId === \"\") {\n        return DEFAULT_LIMITS[limitType].pro;\n      }\n\n      const roleLicences = licences(resourceId)[resourceType];\n\n      if (roleLicences.pro_plus) return DEFAULT_LIMITS[limitType].pro_plus;\n      if (roleLicences.pro) return DEFAULT_LIMITS[limitType].pro;\n      if (roleLicences.standard) return DEFAULT_LIMITS[limitType].standard;\n\n      return 0;\n    },\n    [licences],\n  );\n\n  const hasVendorLicence = useMemo(\n    () => hasLicence(authUser, \"vendor\"),\n    [authUser],\n  );\n\n  const hasPartnerLicence = useMemo(\n    () => hasLicence(authUser, \"partner\"),\n    [authUser],\n  );\n\n  const hasEventLicence = useMemo(\n    () => hasLicence(authUser, \"event\"),\n    [authUser],\n  );\n\n  const hasUserLicence = useCallback(\n    (licenceType: EnumUserLicence) => hasUserLicenceType(authUser, licenceType),\n    [authUser],\n  );\n\n  const permissions = useMemo(() => {\n    if (authUser?.permissions != null) {\n      return authUser.permissions;\n    }\n    return getPermissionsForRoles(authUser?.roles);\n  }, [authUser?.permissions, authUser?.roles]);\n\n  const hasPermissionFn = useCallback(\n    (permission: Permission) => permissionListIncludes(permissions, permission),\n    [permissions],\n  );\n\n  const hasRoleFn = useCallback(\n    (role: EnumUserRole) => roleHasRole(authUser?.roles, role),\n    [authUser?.roles],\n  );\n\n  const isAdmin = useMemo(\n    () =>\n      roleHasRole(authUser?.roles, EnumUserRole.ADMIN) ||\n      permissionListIncludes(permissions, \"dashboard.admin\") ||\n      permissionListIncludes(permissions, \"*\"),\n    [authUser?.roles, permissions],\n  );\n\n  const isSuperAdmin = useMemo(\n    () => roleHasRole(authUser?.roles, EnumUserRole.SUPER_ADMIN),\n    [authUser?.roles],\n  );\n\n  const isAffiliate = useMemo(\n    () =>\n      roleHasRole(authUser?.roles, EnumUserRole.AFFILIATE) &&\n      authUser?.affiliate !== null &&\n      authUser?.affiliate !== undefined,\n    [authUser?.roles, authUser?.affiliate],\n  );\n\n  const isSchool = useMemo(\n    () =>\n      roleHasRole(authUser?.roles, EnumUserRole.SCHOOL) &&\n      authUser?.school !== null &&\n      authUser?.school !== undefined,\n    [authUser?.roles, authUser?.school],\n  );\n\n  // Mount-only hydrate from storage. Do not re-run when adapter identities\n  // change — that can overwrite a newer in-memory user (e.g. post-login setUser).\n  useEffect(() => {\n    const loadUser = async () => {\n      try {\n        const userJson = await storage.getItem(USER_STORAGE_KEY);\n        await handleSetAuthUser(userJson ? JSON.parse(userJson) : null);\n      } catch (error: unknown) {\n        onError?.(error, { action: \"loadUserFromStorage\" });\n        console.error(\"Failed to load user from storage:\", error);\n      } finally {\n        setIsLoading(false);\n      }\n    };\n\n    void loadUser();\n  }, []);\n\n  const logoutWithReason = useCallback(\n    async (reason: LogoutReason) => {\n      try {\n        if (shouldCallLogoutMutation(reason)) {\n          try {\n            const result = await logout();\n            const message = result?.data?.logout?.message as string | undefined;\n            if (message) {\n              notifyLogoutSuccess?.(message);\n            }\n          } catch (err: unknown) {\n            onError?.(err, { action: \"logout\" });\n            console.warn(\"Logout request failed (ignored):\", err);\n          }\n        }\n      } finally {\n        await afterLogout(reason);\n        setAuthUser(null);\n        await storage.removeItem(USER_STORAGE_KEY);\n      }\n    },\n    [\n      afterLogout,\n      logout,\n      notifyLogoutSuccess,\n      onError,\n      shouldCallLogoutMutation,\n      storage,\n    ],\n  );\n\n  const handleLogoutExplicit = useCallback(\n    () => logoutWithReason(\"manual\"),\n    [logoutWithReason],\n  );\n\n  const handleLogoutExpired = useCallback(async () => {\n    const hadSession = authUser != null;\n    if (!hadSession) return;\n    await logoutWithReason(\"expired\");\n    notifySessionExpired?.();\n  }, [authUser, logoutWithReason, notifySessionExpired]);\n\n  useEffect(() => {\n    authManager.setLogout(() => handleLogoutExpired());\n    authManager.setUserRefetch(() => handleRefetchUser());\n  }, [authManager, handleLogoutExpired, handleRefetchUser]);\n\n  return {\n    authUser,\n    getLicenseAccessLevel,\n    handleLogoutExplicit,\n    hasEventLicence,\n    hasPartnerLicence,\n    hasPermission: hasPermissionFn,\n    hasRole: hasRoleFn,\n    hasUserLicence,\n    hasVendorLicence,\n    isAdmin,\n    isAffiliate,\n    isLoading: loading || isLoading,\n    isSchool,\n    isSuperAdmin,\n    permissions,\n    refetchUser: handleRefetchUser,\n    setUser: handleSetAuthUser,\n  };\n}\n","/**\n * Shared React context for auth session state.\n *\n * Apps keep a thin local UserProvider that calls their platform `useAuth`\n * (adapters) and pass the result here as `value`. Import `useAuthUser` from\n * this module (or re-export it) so consumers share one context instance.\n *\n * `\"use client\"`: required for Next.js; ignored by React Native.\n */\n\"use client\";\n\nimport React, { createContext, useContext, type ReactNode } from \"react\";\n\nimport type { UseAuthReturnType } from \"./types\";\n\nconst UserContext = createContext<UseAuthReturnType | undefined>(undefined);\n\n/**\n * Provides auth session value from the app's thin useAuth wrapper.\n */\nexport const UserProvider: React.FC<{\n  children: ReactNode;\n  value: UseAuthReturnType;\n}> = ({ children, value }) => {\n  return <UserContext.Provider value={value}>{children}</UserContext.Provider>;\n};\n\nexport const useAuthUser = (): UseAuthReturnType => {\n  const context = useContext(UserContext);\n  if (!context) {\n    throw new Error(\"useAuthUser must be used within a UserProvider\");\n  }\n  return context;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcO,SAAS,oBAAiC;AAC/C,MAAI,WAAyC;AAC7C,MAAI,gBAA8C;AAClD,MAAI,gBAAsC;AAE1C,SAAO;AAAA,IACL,mBAAmB,YAAY;AAC7B,UAAI,eAAe;AACjB,cAAM,cAAc;AAAA,MACtB,OAAO;AACL,gBAAQ,KAAK,uCAAkC;AAAA,MACjD;AAAA,IACF;AAAA,IACA,SAAwB;AACtB,UAAI,kBAAkB,KAAM,QAAO;AACnC,UAAI,aAAa,MAAM;AACrB,gBAAQ,KAAK,iCAA4B;AACzC,eAAO,QAAQ,QAAQ;AAAA,MACzB;AACA,sBAAgB,SAAS,EAAE,QAAQ,MAAM;AACvC,wBAAgB;AAAA,MAClB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,UAAU,IAAyB;AACjC,iBAAW;AAAA,IACb;AAAA,IACA,eAAe,IAAyB;AACtC,sBAAgB;AAAA,IAClB;AAAA,EACF;AACF;;;AC/BO,SAAS,uBACd,cACsC;AACtC,SACE,gDACA;AAEJ;AAEO,SAAS,sBACd,aACoC;AACpC,SACE,iEACA;AAEJ;AAEO,IAAM,qBAAqB,CAChC,UACA,gBAEA,UAAU,UAAU,KAAK,CAAC,YAAY,QAAQ,gBAAgB,WAAW,KACzE;AAEK,IAAM,aAAa,CACxB,UACA,gBACqB;AACrB,QAAM,gBACJ,UAAU,UAAU;AAAA,IAAK,CAAC,YACxB,QAAQ,aAAa,SAAS,WAAW;AAAA,EAC3C,KAAK;AAEP,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAGO,IAAM,iBAA0D;AAAA;AAAA,EAErE,cAAc,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EACjD,UAAU,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EAC7C,QAAQ,EAAE,KAAK,IAAI,UAAU,IAAI,UAAU,EAAE;AAAA,EAC7C,SAAS,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EAC5C,cAAc,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EACjD,eAAe,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EAClD,YAAY,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AACjD;AAGO,IAAM,mBAAmC;AAAA,EAC9C,OAAO;AAAA,IACL,UAAU;AAAA;AAAA,IAEV,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,SAAS;AAAA,IACP,UAAU;AAAA;AAAA,IAEV,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,QAAQ;AAAA,IACN,UAAU;AAAA;AAAA,IAEV,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AACF;AAMO,SAAS,sBAAsB,UAAqC;AACzE,QAAM,aAAa,UAAU,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;AAC7D,QAAM,gBAAgB,WAAW,SAAS;AAE1C,WAAS,QAAQ,MAAsC;AACrD,UAAM,SAAuB;AAAA,MAC3B,UAAU;AAAA;AAAA,MAEV,KAAK;AAAA,MACL,UAAU;AAAA,IACZ;AAEA,eAAW,QAAQ,mBAAmB;AACpC,UAAI,WAAW,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,GAAG;AAC3D,eAAO,IAAI,IAAI;AACf;AAAA,MACF;AAAA,IACF;AAGA,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM;AAAA,IACf;AAEA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,OAAO,2BAA8B;AAAA,IACrC,SAAS,+BAAgC;AAAA,IACzC,QAAQ,6BAA+B;AAAA,EACzC;AACF;;;AC3HA,SAAS,aAAa,WAAW,SAAS,gBAAgB;AAoCnD,SAAS,YAAY,UAAkD;AAC5E,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,2BAA2B,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,CAAC,UAAU,WAAW,IAAI,SAA8B,IAAI;AAClE,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,IAAI;AAE/C,QAAM,SAAS,QAAQ,MAAM,UAAU,OAAO,IAAI,CAAC,UAAU,GAAG,CAAC;AACjE,QAAM,EAAE,QAAQ,IAAI,WAAW,MAAM;AACrC,QAAM,EAAE,QAAQ,QAAQ,IAAI,UAAU;AAEtC,QAAM,oBAAoB;AAAA,IACxB,OAAO,SAA8B;AACnC,kBAAY,IAAI;AAChB,UAAI,MAAM;AACR,cAAM,QAAQ,QAAQ,kBAAkB,KAAK,UAAU,IAAI,CAAC;AAAA,MAC9D,OAAO;AACL,cAAM,QAAQ,WAAW,gBAAgB;AAAA,MAC3C;AAAA,IACF;AAAA,IACA,CAAC,OAAO;AAAA,EACV;AAEA,QAAM,oBAAoB,YAAY,YAAY;AAChD,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ;AAC7B,UAAI,CAAC,OAAQ;AACb,YAAM,EAAE,KAAK,IAAI;AACjB,UAAI,MAAM,KAAM,OAAM,kBAAkB,KAAK,IAAI;AAAA,IACnD,SAAS,OAAgB;AACvB,gBAAU,OAAO,EAAE,QAAQ,cAAc,CAAC;AAC1C,cAAQ;AAAA,QACN;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC3C;AAAA,IACF;AAAA,EACF,GAAG,CAAC,UAAU,mBAAmB,SAAS,OAAO,CAAC;AAElD,QAAM,WAAW;AAAA,IACf,CAAC,eAAuB;AACtB,YAAM,aACJ,UAAU,UAAU,IAAI,CAAC,YAAY,QAAQ,WAAW,KAAK,CAAC;AAEhE,YAAM,gBAAgB;AAAA,QACpB,UAAU,UAAU;AAAA,QACpB,UAAU,WAAW;AAAA,QACrB,GAAI,UAAU,UAAU,CAAC;AAAA,MAC3B,EAAE,OAAO,CAAC,OAAqB,OAAO,IAAI;AAE1C,aAAO,cAAc,SAAS,UAAU,IACpC,sBAAsB,UAAU,IAChC;AAAA,IACN;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,wBAAwB;AAAA,IAC5B,CACE,WACA,YACA,iBACW;AACX,UAAI,CAAC,uBAAuB,YAAY,GAAG;AACzC,eAAO;AAAA,MACT;AAGA,UAAI,eAAe,IAAI;AACrB,eAAO,eAAe,SAAS,EAAE;AAAA,MACnC;AAEA,YAAM,eAAe,SAAS,UAAU,EAAE,YAAY;AAEtD,UAAI,aAAa,SAAU,QAAO,eAAe,SAAS,EAAE;AAC5D,UAAI,aAAa,IAAK,QAAO,eAAe,SAAS,EAAE;AACvD,UAAI,aAAa,SAAU,QAAO,eAAe,SAAS,EAAE;AAE5D,aAAO;AAAA,IACT;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,mBAAmB;AAAA,IACvB,MAAM,WAAW,UAAU,QAAQ;AAAA,IACnC,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,oBAAoB;AAAA,IACxB,MAAM,WAAW,UAAU,SAAS;AAAA,IACpC,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,kBAAkB;AAAA,IACtB,MAAM,WAAW,UAAU,OAAO;AAAA,IAClC,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,iBAAiB;AAAA,IACrB,CAAC,gBAAiC,mBAAmB,UAAU,WAAW;AAAA,IAC1E,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,cAAc,QAAQ,MAAM;AAChC,QAAI,UAAU,eAAe,MAAM;AACjC,aAAO,SAAS;AAAA,IAClB;AACA,WAAO,uBAAuB,UAAU,KAAK;AAAA,EAC/C,GAAG,CAAC,UAAU,aAAa,UAAU,KAAK,CAAC;AAE3C,QAAM,kBAAkB;AAAA,IACtB,CAAC,eAA2B,uBAAuB,aAAa,UAAU;AAAA,IAC1E,CAAC,WAAW;AAAA,EACd;AAEA,QAAM,YAAY;AAAA,IAChB,CAAC,SAAuB,QAAY,UAAU,OAAO,IAAI;AAAA,IACzD,CAAC,UAAU,KAAK;AAAA,EAClB;AAEA,QAAM,UAAU;AAAA,IACd,MACE,QAAY,UAAU,0BAAyB,KAC/C,uBAAuB,aAAa,iBAAiB,KACrD,uBAAuB,aAAa,GAAG;AAAA,IACzC,CAAC,UAAU,OAAO,WAAW;AAAA,EAC/B;AAEA,QAAM,eAAe;AAAA,IACnB,MAAM,QAAY,UAAU,sCAA+B;AAAA,IAC3D,CAAC,UAAU,KAAK;AAAA,EAClB;AAEA,QAAM,cAAc;AAAA,IAClB,MACE,QAAY,UAAU,kCAA6B,KACnD,UAAU,cAAc,QACxB,UAAU,cAAc;AAAA,IAC1B,CAAC,UAAU,OAAO,UAAU,SAAS;AAAA,EACvC;AAEA,QAAM,WAAW;AAAA,IACf,MACE,QAAY,UAAU,4BAA0B,KAChD,UAAU,WAAW,QACrB,UAAU,WAAW;AAAA,IACvB,CAAC,UAAU,OAAO,UAAU,MAAM;AAAA,EACpC;AAIA,YAAU,MAAM;AACd,UAAM,WAAW,YAAY;AAC3B,UAAI;AACF,cAAM,WAAW,MAAM,QAAQ,QAAQ,gBAAgB;AACvD,cAAM,kBAAkB,WAAW,KAAK,MAAM,QAAQ,IAAI,IAAI;AAAA,MAChE,SAAS,OAAgB;AACvB,kBAAU,OAAO,EAAE,QAAQ,sBAAsB,CAAC;AAClD,gBAAQ,MAAM,qCAAqC,KAAK;AAAA,MAC1D,UAAE;AACA,qBAAa,KAAK;AAAA,MACpB;AAAA,IACF;AAEA,SAAK,SAAS;AAAA,EAChB,GAAG,CAAC,CAAC;AAEL,QAAM,mBAAmB;AAAA,IACvB,OAAO,WAAyB;AAC9B,UAAI;AACF,YAAI,yBAAyB,MAAM,GAAG;AACpC,cAAI;AACF,kBAAM,SAAS,MAAM,OAAO;AAC5B,kBAAM,UAAU,QAAQ,MAAM,QAAQ;AACtC,gBAAI,SAAS;AACX,oCAAsB,OAAO;AAAA,YAC/B;AAAA,UACF,SAAS,KAAc;AACrB,sBAAU,KAAK,EAAE,QAAQ,SAAS,CAAC;AACnC,oBAAQ,KAAK,oCAAoC,GAAG;AAAA,UACtD;AAAA,QACF;AAAA,MACF,UAAE;AACA,cAAM,YAAY,MAAM;AACxB,oBAAY,IAAI;AAChB,cAAM,QAAQ,WAAW,gBAAgB;AAAA,MAC3C;AAAA,IACF;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,uBAAuB;AAAA,IAC3B,MAAM,iBAAiB,QAAQ;AAAA,IAC/B,CAAC,gBAAgB;AAAA,EACnB;AAEA,QAAM,sBAAsB,YAAY,YAAY;AAClD,UAAM,aAAa,YAAY;AAC/B,QAAI,CAAC,WAAY;AACjB,UAAM,iBAAiB,SAAS;AAChC,2BAAuB;AAAA,EACzB,GAAG,CAAC,UAAU,kBAAkB,oBAAoB,CAAC;AAErD,YAAU,MAAM;AACd,gBAAY,UAAU,MAAM,oBAAoB,CAAC;AACjD,gBAAY,eAAe,MAAM,kBAAkB,CAAC;AAAA,EACtD,GAAG,CAAC,aAAa,qBAAqB,iBAAiB,CAAC;AAExD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe;AAAA,IACf,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,WAAW;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AACF;;;AC1QA,SAAgB,eAAe,kBAAkC;AAaxD;AATT,IAAM,cAAc,cAA6C,MAAS;AAKnE,IAAM,eAGR,CAAC,EAAE,UAAU,MAAM,MAAM;AAC5B,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAEO,IAAM,cAAc,MAAyB;AAClD,QAAM,UAAU,WAAW,WAAW;AACtC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/auth/createAuthManager.ts","../../src/auth/licenceUtils.ts","../../src/auth/useAuthCore.ts","../../src/auth/UserProvider.tsx"],"sourcesContent":["export type AuthManager = {\n  logout: () => Promise<void>;\n  setLogout: (fn: () => Promise<void>) => void;\n  handleRefetchUser: () => Promise<void>;\n  setUserRefetch: (fn: () => Promise<void>) => void;\n};\n\n/**\n * Creates an auth manager used by Apollo error links to trigger logout/refetch\n * without importing React. Matches the former mobile authManager shape.\n *\n * `logout()` dedupes concurrent calls via an in-flight promise so token-refresh\n * failures do not kick off multiple logout sequences.\n */\nexport function createAuthManager(): AuthManager {\n  let logoutFn: (() => Promise<void>) | null = null;\n  let userRefetchFn: (() => Promise<void>) | null = null;\n  let logoutPromise: Promise<void> | null = null;\n\n  return {\n    handleRefetchUser: async () => {\n      if (userRefetchFn) {\n        await userRefetchFn();\n      } else {\n        console.warn(\"❌ User refetch function not set!\");\n      }\n    },\n    logout(): Promise<void> {\n      if (logoutPromise !== null) return logoutPromise;\n      if (logoutFn === null) {\n        console.warn(\"❌ Logout function not set!\");\n        return Promise.resolve();\n      }\n      logoutPromise = logoutFn().finally(() => {\n        logoutPromise = null;\n      });\n      return logoutPromise;\n    },\n    setLogout(fn: () => Promise<void>) {\n      logoutFn = fn;\n    },\n    setUserRefetch(fn: () => Promise<void>) {\n      userRefetchFn = fn;\n    },\n  };\n}\n","/* eslint-disable camelcase */\nimport { ResourceTypeEnum, LicencesEnumType } from \"../generated/graphql\";\nimport type { SafeUserType } from \"../types\";\nimport { TIERS_BY_PRIORITY, type Tier } from \"../types/subscription\";\n\nimport type {\n  HasLicenceResult,\n  LicencedResourceType,\n  LicencesByRole,\n  LimitType,\n  ProfileBadgeLicence,\n  RoleLicences,\n} from \"./types\";\n\nexport function isLicencedResourceType(\n  resourceType: ResourceTypeEnum,\n): resourceType is LicencedResourceType {\n  return (\n    resourceType !== ResourceTypeEnum.Affiliate &&\n    resourceType !== ResourceTypeEnum.School\n  );\n}\n\nexport function isProfileBadgeLicence(\n  licenceType: LicencesEnumType,\n): licenceType is ProfileBadgeLicence {\n  return (\n    licenceType !== LicencesEnumType.StandardAffiliate &&\n    licenceType !== LicencesEnumType.StandardSchool\n  );\n}\n\nexport const hasUserLicenceType = (\n  authUser: SafeUserType | null,\n  licenceType: LicencesEnumType,\n): boolean =>\n  authUser?.licences?.some((licence) => licence.licenceType === licenceType) ??\n  false;\n\nexport const hasLicence = (\n  authUser: SafeUserType | null,\n  licenceType: \"vendor\" | \"partner\" | \"event\",\n): HasLicenceResult => {\n  const directLicence =\n    authUser?.licences?.some((licence) =>\n      licence.licenceType?.includes(licenceType),\n    ) ?? false;\n\n  return {\n    directLicence,\n  };\n};\n\n/** Default limits per subscription tier. */\nexport const DEFAULT_LIMITS: Record<LimitType, Record<Tier, number>> = {\n  // 1 means calendar/productMenu is enabled, 0 means disabled\n  availability: { pro: 1, pro_plus: 1, standard: 0 },\n  calendar: { pro: 1, pro_plus: 1, standard: 0 },\n  images: { pro: 12, pro_plus: 12, standard: 6 },\n  posters: { pro: 5, pro_plus: 5, standard: 5 },\n  productsList: { pro: 1, pro_plus: 1, standard: 0 },\n  relationShare: { pro: 1, pro_plus: 1, standard: 0 },\n  statistics: { pro: 1, pro_plus: 1, standard: 0 },\n};\n\n/** All tiers off — used when the viewer does not own the resource. */\nexport const NO_LICENCE_FLAGS: LicencesByRole = {\n  event: {\n    pro_plus: false,\n    // eslint-disable-next-line sort-keys\n    pro: false,\n    standard: false,\n  },\n  partner: {\n    pro_plus: false,\n    // eslint-disable-next-line sort-keys\n    pro: false,\n    standard: false,\n  },\n  vendor: {\n    pro_plus: false,\n    // eslint-disable-next-line sort-keys\n    pro: false,\n    standard: false,\n  },\n};\n\n/**\n * Parses an array of licence strings into structured, role-based licences.\n * Users with no licences yet default to pro (create / trial access).\n */\nexport function getLicenceFlagsByRole(licences?: string[]): LicencesByRole {\n  const normalized = licences?.map((l) => l.toLowerCase()) ?? [];\n  const hasAnyLicence = normalized.length > 0;\n\n  function resolve(role: ResourceTypeEnum): RoleLicences {\n    const result: RoleLicences = {\n      pro_plus: false,\n      // eslint-disable-next-line sort-keys\n      pro: false,\n      standard: false,\n    };\n\n    for (const tier of TIERS_BY_PRIORITY) {\n      if (normalized.some((l) => l.startsWith(`${tier}_${role}`))) {\n        result[tier] = true;\n        break; // stop at first match → ensures mutual exclusivity\n      }\n    }\n\n    // No licences at all → grant pro so new users can use pro features\n    if (!hasAnyLicence) {\n      result.pro = true;\n    }\n\n    return result;\n  }\n\n  return {\n    event: resolve(ResourceTypeEnum.Event),\n    partner: resolve(ResourceTypeEnum.Partner),\n    vendor: resolve(ResourceTypeEnum.Vendor),\n  };\n}\n","import { useCallback, useEffect, useMemo, useState } from \"react\";\n\nimport {\n  ResourceTypeEnum,\n  LicencesEnumType,\n  UserRoleEnumType,\n} from \"../generated/graphql\";\nimport { useLogout } from \"../graphql/hooks/auth\";\nimport { useGetUser } from \"../graphql/hooks/user/hooksQuery\";\nimport { USER_STORAGE_KEY } from \"../storage\";\nimport type { SafeUserType } from \"../types\";\nimport { toUserPermissions } from \"../types/userAdapters\";\n\nimport {\n  DEFAULT_LIMITS,\n  getLicenceFlagsByRole,\n  hasLicence,\n  hasUserLicenceType,\n  isLicencedResourceType,\n  NO_LICENCE_FLAGS,\n} from \"./licenceUtils\";\nimport {\n  getPermissionsForRoles,\n  hasRole as roleHasRole,\n  permissionListIncludes,\n} from \"./permissions\";\nimport type { Permission } from \"./permissions\";\nimport type {\n  LimitType,\n  LogoutReason,\n  UseAuthCoreAdapters,\n  UseAuthReturnType,\n} from \"./types\";\n\n/**\n * Platform-agnostic auth session core (source of truth for shared useAuth).\n *\n * Owns: persisted user load/set, refetch, role/licence flags, logout orchestration.\n * Does not own: AsyncStorage vs localStorage, Expo/Next navigation, toasts,\n * Apollo/WS reset, Firebase — those stay in each app's adapter wrapper.\n */\nexport function useAuthCore(adapters: UseAuthCoreAdapters): UseAuthReturnType {\n  const {\n    storage,\n    authManager,\n    afterLogout,\n    shouldCallLogoutMutation = () => true,\n    notifyLogoutSuccess,\n    notifySessionExpired,\n    onError,\n  } = adapters;\n\n  const [authUser, setAuthUser] = useState<SafeUserType | null>(null);\n  const [isLoading, setIsLoading] = useState(true);\n\n  const userId = useMemo(() => authUser?._id ?? \"\", [authUser?._id]);\n  const { refetch } = useGetUser(userId);\n  const { logout, loading } = useLogout();\n\n  const handleSetAuthUser = useCallback(\n    async (user: SafeUserType | null) => {\n      setAuthUser(user);\n      if (user) {\n        await storage.setItem(USER_STORAGE_KEY, JSON.stringify(user));\n      } else {\n        await storage.removeItem(USER_STORAGE_KEY);\n      }\n    },\n    [storage],\n  );\n\n  const handleRefetchUser = useCallback(async () => {\n    if (!authUser) return;\n    try {\n      const result = await refetch();\n      if (!result) return;\n      const { data } = result;\n      if (data?.user) await handleSetAuthUser(data.user);\n    } catch (error: unknown) {\n      onError?.(error, { action: \"refetchUser\" });\n      console.warn(\n        \"Failed to refetch user:\",\n        error instanceof Error ? error.message : error,\n      );\n    }\n  }, [authUser, handleSetAuthUser, onError, refetch]);\n\n  const licences = useCallback(\n    (resourceId: string) => {\n      const myLicences =\n        authUser?.licences\n          ?.map((licence) => licence.licenceType)\n          .filter((type): type is LicencesEnumType => type != null) ?? [];\n\n      const myResourceIds = [\n        authUser?.vendor ?? null,\n        authUser?.partner ?? null,\n        ...(authUser?.events ?? []),\n      ].filter((id): id is string => id != null);\n\n      return myResourceIds.includes(resourceId)\n        ? getLicenceFlagsByRole(myLicences)\n        : NO_LICENCE_FLAGS;\n    },\n    [authUser],\n  );\n\n  const getLicenseAccessLevel = useCallback(\n    (\n      limitType: LimitType,\n      resourceId: string,\n      resourceType: ResourceTypeEnum,\n    ): number => {\n      if (!isLicencedResourceType(resourceType)) {\n        return 0;\n      }\n\n      // No resource yet (e.g. create flow): grant pro limits.\n      if (resourceId === \"\") {\n        return DEFAULT_LIMITS[limitType].pro;\n      }\n\n      const roleLicences = licences(resourceId)[resourceType];\n\n      if (roleLicences.pro_plus) return DEFAULT_LIMITS[limitType].pro_plus;\n      if (roleLicences.pro) return DEFAULT_LIMITS[limitType].pro;\n      if (roleLicences.standard) return DEFAULT_LIMITS[limitType].standard;\n\n      return 0;\n    },\n    [licences],\n  );\n\n  const hasVendorLicence = useMemo(\n    () => hasLicence(authUser, \"vendor\"),\n    [authUser],\n  );\n\n  const hasPartnerLicence = useMemo(\n    () => hasLicence(authUser, \"partner\"),\n    [authUser],\n  );\n\n  const hasEventLicence = useMemo(\n    () => hasLicence(authUser, \"event\"),\n    [authUser],\n  );\n\n  const hasUserLicence = useCallback(\n    (licenceType: LicencesEnumType) =>\n      hasUserLicenceType(authUser, licenceType),\n    [authUser],\n  );\n\n  const permissions = useMemo(() => {\n    if (authUser?.permissions != null) {\n      return toUserPermissions(authUser.permissions);\n    }\n    return getPermissionsForRoles(authUser?.roles);\n  }, [authUser?.permissions, authUser?.roles]);\n\n  const hasPermissionFn = useCallback(\n    (permission: Permission) => permissionListIncludes(permissions, permission),\n    [permissions],\n  );\n\n  const hasRoleFn = useCallback(\n    (role: UserRoleEnumType) => roleHasRole(authUser?.roles, role),\n    [authUser?.roles],\n  );\n\n  const isAdmin = useMemo(\n    () =>\n      roleHasRole(authUser?.roles, UserRoleEnumType.Admin) ||\n      permissionListIncludes(permissions, \"dashboard.admin\") ||\n      permissionListIncludes(permissions, \"*\"),\n    [authUser?.roles, permissions],\n  );\n\n  const isSuperAdmin = useMemo(\n    () => roleHasRole(authUser?.roles, UserRoleEnumType.SuperAdmin),\n    [authUser?.roles],\n  );\n\n  const isAffiliate = useMemo(\n    () =>\n      roleHasRole(authUser?.roles, UserRoleEnumType.Affiliate) &&\n      authUser?.affiliate !== null &&\n      authUser?.affiliate !== undefined,\n    [authUser?.roles, authUser?.affiliate],\n  );\n\n  const isSchool = useMemo(\n    () =>\n      roleHasRole(authUser?.roles, UserRoleEnumType.School) &&\n      authUser?.school !== null &&\n      authUser?.school !== undefined,\n    [authUser?.roles, authUser?.school],\n  );\n\n  // Mount-only hydrate from storage. Do not re-run when adapter identities\n  // change — that can overwrite a newer in-memory user (e.g. post-login setUser).\n  useEffect(() => {\n    const loadUser = async () => {\n      try {\n        const userJson = await storage.getItem(USER_STORAGE_KEY);\n        await handleSetAuthUser(userJson ? JSON.parse(userJson) : null);\n      } catch (error: unknown) {\n        onError?.(error, { action: \"loadUserFromStorage\" });\n        console.error(\"Failed to load user from storage:\", error);\n      } finally {\n        setIsLoading(false);\n      }\n    };\n\n    void loadUser();\n  }, []);\n\n  const logoutWithReason = useCallback(\n    async (reason: LogoutReason) => {\n      try {\n        if (shouldCallLogoutMutation(reason)) {\n          try {\n            const result = await logout();\n            const message = result?.data?.logout?.message as string | undefined;\n            if (message) {\n              notifyLogoutSuccess?.(message);\n            }\n          } catch (err: unknown) {\n            onError?.(err, { action: \"logout\" });\n            console.warn(\"Logout request failed (ignored):\", err);\n          }\n        }\n      } finally {\n        await afterLogout(reason);\n        setAuthUser(null);\n        await storage.removeItem(USER_STORAGE_KEY);\n      }\n    },\n    [\n      afterLogout,\n      logout,\n      notifyLogoutSuccess,\n      onError,\n      shouldCallLogoutMutation,\n      storage,\n    ],\n  );\n\n  const handleLogoutExplicit = useCallback(\n    () => logoutWithReason(\"manual\"),\n    [logoutWithReason],\n  );\n\n  const handleLogoutExpired = useCallback(async () => {\n    const hadSession = authUser != null;\n    if (!hadSession) return;\n    await logoutWithReason(\"expired\");\n    notifySessionExpired?.();\n  }, [authUser, logoutWithReason, notifySessionExpired]);\n\n  useEffect(() => {\n    authManager.setLogout(() => handleLogoutExpired());\n    authManager.setUserRefetch(() => handleRefetchUser());\n  }, [authManager, handleLogoutExpired, handleRefetchUser]);\n\n  return {\n    authUser,\n    getLicenseAccessLevel,\n    handleLogoutExplicit,\n    hasEventLicence,\n    hasPartnerLicence,\n    hasPermission: hasPermissionFn,\n    hasRole: hasRoleFn,\n    hasUserLicence,\n    hasVendorLicence,\n    isAdmin,\n    isAffiliate,\n    isLoading: loading || isLoading,\n    isSchool,\n    isSuperAdmin,\n    permissions,\n    refetchUser: handleRefetchUser,\n    setUser: handleSetAuthUser,\n  };\n}\n","/**\n * Shared React context for auth session state.\n *\n * Apps keep a thin local UserProvider that calls their platform `useAuth`\n * (adapters) and pass the result here as `value`. Import `useAuthUser` from\n * this module (or re-export it) so consumers share one context instance.\n *\n * `\"use client\"`: required for Next.js; ignored by React Native.\n */\n\"use client\";\n\nimport React, { createContext, useContext, type ReactNode } from \"react\";\n\nimport type { UseAuthReturnType } from \"./types\";\n\nconst UserContext = createContext<UseAuthReturnType | undefined>(undefined);\n\n/**\n * Provides auth session value from the app's thin useAuth wrapper.\n */\nexport const UserProvider: React.FC<{\n  children: ReactNode;\n  value: UseAuthReturnType;\n}> = ({ children, value }) => {\n  return <UserContext.Provider value={value}>{children}</UserContext.Provider>;\n};\n\nexport const useAuthUser = (): UseAuthReturnType => {\n  const context = useContext(UserContext);\n  if (!context) {\n    throw new Error(\"useAuthUser must be used within a UserProvider\");\n  }\n  return context;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcO,SAAS,oBAAiC;AAC/C,MAAI,WAAyC;AAC7C,MAAI,gBAA8C;AAClD,MAAI,gBAAsC;AAE1C,SAAO;AAAA,IACL,mBAAmB,YAAY;AAC7B,UAAI,eAAe;AACjB,cAAM,cAAc;AAAA,MACtB,OAAO;AACL,gBAAQ,KAAK,uCAAkC;AAAA,MACjD;AAAA,IACF;AAAA,IACA,SAAwB;AACtB,UAAI,kBAAkB,KAAM,QAAO;AACnC,UAAI,aAAa,MAAM;AACrB,gBAAQ,KAAK,iCAA4B;AACzC,eAAO,QAAQ,QAAQ;AAAA,MACzB;AACA,sBAAgB,SAAS,EAAE,QAAQ,MAAM;AACvC,wBAAgB;AAAA,MAClB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,UAAU,IAAyB;AACjC,iBAAW;AAAA,IACb;AAAA,IACA,eAAe,IAAyB;AACtC,sBAAgB;AAAA,IAClB;AAAA,EACF;AACF;;;AC/BO,SAAS,uBACd,cACsC;AACtC,SACE,gDACA;AAEJ;AAEO,SAAS,sBACd,aACoC;AACpC,SACE,gEACA;AAEJ;AAEO,IAAM,qBAAqB,CAChC,UACA,gBAEA,UAAU,UAAU,KAAK,CAAC,YAAY,QAAQ,gBAAgB,WAAW,KACzE;AAEK,IAAM,aAAa,CACxB,UACA,gBACqB;AACrB,QAAM,gBACJ,UAAU,UAAU;AAAA,IAAK,CAAC,YACxB,QAAQ,aAAa,SAAS,WAAW;AAAA,EAC3C,KAAK;AAEP,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAGO,IAAM,iBAA0D;AAAA;AAAA,EAErE,cAAc,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EACjD,UAAU,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EAC7C,QAAQ,EAAE,KAAK,IAAI,UAAU,IAAI,UAAU,EAAE;AAAA,EAC7C,SAAS,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EAC5C,cAAc,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EACjD,eAAe,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EAClD,YAAY,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AACjD;AAGO,IAAM,mBAAmC;AAAA,EAC9C,OAAO;AAAA,IACL,UAAU;AAAA;AAAA,IAEV,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,SAAS;AAAA,IACP,UAAU;AAAA;AAAA,IAEV,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,QAAQ;AAAA,IACN,UAAU;AAAA;AAAA,IAEV,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AACF;AAMO,SAAS,sBAAsB,UAAqC;AACzE,QAAM,aAAa,UAAU,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;AAC7D,QAAM,gBAAgB,WAAW,SAAS;AAE1C,WAAS,QAAQ,MAAsC;AACrD,UAAM,SAAuB;AAAA,MAC3B,UAAU;AAAA;AAAA,MAEV,KAAK;AAAA,MACL,UAAU;AAAA,IACZ;AAEA,eAAW,QAAQ,mBAAmB;AACpC,UAAI,WAAW,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,GAAG;AAC3D,eAAO,IAAI,IAAI;AACf;AAAA,MACF;AAAA,IACF;AAGA,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM;AAAA,IACf;AAEA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,OAAO,2BAA8B;AAAA,IACrC,SAAS,+BAAgC;AAAA,IACzC,QAAQ,6BAA+B;AAAA,EACzC;AACF;;;AC3HA,SAAS,aAAa,WAAW,SAAS,gBAAgB;AAyCnD,SAAS,YAAY,UAAkD;AAC5E,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,2BAA2B,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,CAAC,UAAU,WAAW,IAAI,SAA8B,IAAI;AAClE,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,IAAI;AAE/C,QAAM,SAAS,QAAQ,MAAM,UAAU,OAAO,IAAI,CAAC,UAAU,GAAG,CAAC;AACjE,QAAM,EAAE,QAAQ,IAAI,WAAW,MAAM;AACrC,QAAM,EAAE,QAAQ,QAAQ,IAAI,UAAU;AAEtC,QAAM,oBAAoB;AAAA,IACxB,OAAO,SAA8B;AACnC,kBAAY,IAAI;AAChB,UAAI,MAAM;AACR,cAAM,QAAQ,QAAQ,kBAAkB,KAAK,UAAU,IAAI,CAAC;AAAA,MAC9D,OAAO;AACL,cAAM,QAAQ,WAAW,gBAAgB;AAAA,MAC3C;AAAA,IACF;AAAA,IACA,CAAC,OAAO;AAAA,EACV;AAEA,QAAM,oBAAoB,YAAY,YAAY;AAChD,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ;AAC7B,UAAI,CAAC,OAAQ;AACb,YAAM,EAAE,KAAK,IAAI;AACjB,UAAI,MAAM,KAAM,OAAM,kBAAkB,KAAK,IAAI;AAAA,IACnD,SAAS,OAAgB;AACvB,gBAAU,OAAO,EAAE,QAAQ,cAAc,CAAC;AAC1C,cAAQ;AAAA,QACN;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC3C;AAAA,IACF;AAAA,EACF,GAAG,CAAC,UAAU,mBAAmB,SAAS,OAAO,CAAC;AAElD,QAAM,WAAW;AAAA,IACf,CAAC,eAAuB;AACtB,YAAM,aACJ,UAAU,UACN,IAAI,CAAC,YAAY,QAAQ,WAAW,EACrC,OAAO,CAAC,SAAmC,QAAQ,IAAI,KAAK,CAAC;AAElE,YAAM,gBAAgB;AAAA,QACpB,UAAU,UAAU;AAAA,QACpB,UAAU,WAAW;AAAA,QACrB,GAAI,UAAU,UAAU,CAAC;AAAA,MAC3B,EAAE,OAAO,CAAC,OAAqB,MAAM,IAAI;AAEzC,aAAO,cAAc,SAAS,UAAU,IACpC,sBAAsB,UAAU,IAChC;AAAA,IACN;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,wBAAwB;AAAA,IAC5B,CACE,WACA,YACA,iBACW;AACX,UAAI,CAAC,uBAAuB,YAAY,GAAG;AACzC,eAAO;AAAA,MACT;AAGA,UAAI,eAAe,IAAI;AACrB,eAAO,eAAe,SAAS,EAAE;AAAA,MACnC;AAEA,YAAM,eAAe,SAAS,UAAU,EAAE,YAAY;AAEtD,UAAI,aAAa,SAAU,QAAO,eAAe,SAAS,EAAE;AAC5D,UAAI,aAAa,IAAK,QAAO,eAAe,SAAS,EAAE;AACvD,UAAI,aAAa,SAAU,QAAO,eAAe,SAAS,EAAE;AAE5D,aAAO;AAAA,IACT;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,mBAAmB;AAAA,IACvB,MAAM,WAAW,UAAU,QAAQ;AAAA,IACnC,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,oBAAoB;AAAA,IACxB,MAAM,WAAW,UAAU,SAAS;AAAA,IACpC,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,kBAAkB;AAAA,IACtB,MAAM,WAAW,UAAU,OAAO;AAAA,IAClC,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,iBAAiB;AAAA,IACrB,CAAC,gBACC,mBAAmB,UAAU,WAAW;AAAA,IAC1C,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,cAAc,QAAQ,MAAM;AAChC,QAAI,UAAU,eAAe,MAAM;AACjC,aAAO,kBAAkB,SAAS,WAAW;AAAA,IAC/C;AACA,WAAO,uBAAuB,UAAU,KAAK;AAAA,EAC/C,GAAG,CAAC,UAAU,aAAa,UAAU,KAAK,CAAC;AAE3C,QAAM,kBAAkB;AAAA,IACtB,CAAC,eAA2B,uBAAuB,aAAa,UAAU;AAAA,IAC1E,CAAC,WAAW;AAAA,EACd;AAEA,QAAM,YAAY;AAAA,IAChB,CAAC,SAA2B,QAAY,UAAU,OAAO,IAAI;AAAA,IAC7D,CAAC,UAAU,KAAK;AAAA,EAClB;AAEA,QAAM,UAAU;AAAA,IACd,MACE,QAAY,UAAU,0BAA6B,KACnD,uBAAuB,aAAa,iBAAiB,KACrD,uBAAuB,aAAa,GAAG;AAAA,IACzC,CAAC,UAAU,OAAO,WAAW;AAAA,EAC/B;AAEA,QAAM,eAAe;AAAA,IACnB,MAAM,QAAY,UAAU,qCAAkC;AAAA,IAC9D,CAAC,UAAU,KAAK;AAAA,EAClB;AAEA,QAAM,cAAc;AAAA,IAClB,MACE,QAAY,UAAU,kCAAiC,KACvD,UAAU,cAAc,QACxB,UAAU,cAAc;AAAA,IAC1B,CAAC,UAAU,OAAO,UAAU,SAAS;AAAA,EACvC;AAEA,QAAM,WAAW;AAAA,IACf,MACE,QAAY,UAAU,4BAA8B,KACpD,UAAU,WAAW,QACrB,UAAU,WAAW;AAAA,IACvB,CAAC,UAAU,OAAO,UAAU,MAAM;AAAA,EACpC;AAIA,YAAU,MAAM;AACd,UAAM,WAAW,YAAY;AAC3B,UAAI;AACF,cAAM,WAAW,MAAM,QAAQ,QAAQ,gBAAgB;AACvD,cAAM,kBAAkB,WAAW,KAAK,MAAM,QAAQ,IAAI,IAAI;AAAA,MAChE,SAAS,OAAgB;AACvB,kBAAU,OAAO,EAAE,QAAQ,sBAAsB,CAAC;AAClD,gBAAQ,MAAM,qCAAqC,KAAK;AAAA,MAC1D,UAAE;AACA,qBAAa,KAAK;AAAA,MACpB;AAAA,IACF;AAEA,SAAK,SAAS;AAAA,EAChB,GAAG,CAAC,CAAC;AAEL,QAAM,mBAAmB;AAAA,IACvB,OAAO,WAAyB;AAC9B,UAAI;AACF,YAAI,yBAAyB,MAAM,GAAG;AACpC,cAAI;AACF,kBAAM,SAAS,MAAM,OAAO;AAC5B,kBAAM,UAAU,QAAQ,MAAM,QAAQ;AACtC,gBAAI,SAAS;AACX,oCAAsB,OAAO;AAAA,YAC/B;AAAA,UACF,SAAS,KAAc;AACrB,sBAAU,KAAK,EAAE,QAAQ,SAAS,CAAC;AACnC,oBAAQ,KAAK,oCAAoC,GAAG;AAAA,UACtD;AAAA,QACF;AAAA,MACF,UAAE;AACA,cAAM,YAAY,MAAM;AACxB,oBAAY,IAAI;AAChB,cAAM,QAAQ,WAAW,gBAAgB;AAAA,MAC3C;AAAA,IACF;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,uBAAuB;AAAA,IAC3B,MAAM,iBAAiB,QAAQ;AAAA,IAC/B,CAAC,gBAAgB;AAAA,EACnB;AAEA,QAAM,sBAAsB,YAAY,YAAY;AAClD,UAAM,aAAa,YAAY;AAC/B,QAAI,CAAC,WAAY;AACjB,UAAM,iBAAiB,SAAS;AAChC,2BAAuB;AAAA,EACzB,GAAG,CAAC,UAAU,kBAAkB,oBAAoB,CAAC;AAErD,YAAU,MAAM;AACd,gBAAY,UAAU,MAAM,oBAAoB,CAAC;AACjD,gBAAY,eAAe,MAAM,kBAAkB,CAAC;AAAA,EACtD,GAAG,CAAC,aAAa,qBAAqB,iBAAiB,CAAC;AAExD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe;AAAA,IACf,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,WAAW;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AACF;;;AClRA,SAAgB,eAAe,kBAAkC;AAaxD;AATT,IAAM,cAAc,cAA6C,MAAS;AAKnE,IAAM,eAGR,CAAC,EAAE,UAAU,MAAM,MAAM;AAC5B,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAEO,IAAM,cAAc,MAAyB;AAClD,QAAM,UAAU,WAAW,WAAW;AACtC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,SAAO;AACT;","names":[]}

package/dist/auth-BOmAO53v.d.ts

@@ -0,0 +1,169 @@
+import { h as SubscriptionStatusEnumType, e as LicencesEnumType, i as RedeemRewardResponseType, R as ResourceImageType, L as LocationType, O as OsPlatformEnumType, j as RewardEnumType, D as DateTimeType, N as NotificationResourceEnumType, U as UserRoleEnumType, k as AuthPayloadType, l as RefreshTokenPayloadType, m as VerificationEnumType } from './graphql-CDOfA79A.js';
+import { M as MutationResponse, T as TermsAgreement, a as CreateFormData, U as UserLicenceType, P as PromoCodeType } from './global-BbSFfYdd.js';
+
+type UserFormData = {
+    _id?: string;
+    active: boolean;
+    avatar?: ResourceImageType | null;
+    avatarUpload?: ResourceImageType | null;
+    confirmPassword?: string | null;
+    email: string;
+    firstName: string;
+    isTester: boolean;
+    lastName: string;
+    location?: LocationType | null;
+    password?: string | null;
+    platform?: OsPlatformEnumType;
+    preferredRegion: string;
+    termsAgreement?: TermsAgreement | null;
+};
+type CreateUserFormData = CreateFormData<UserFormData>;
+/**
+ * Write-side / mongoose activity event. GraphQL EventReferenceType uses the
+ * same fields; DateTimeType is already the generated ISO-string shape.
+ */
+type UserActivityEvent = {
+    resourceId: string;
+    dateTime: DateTimeType;
+};
+/**
+ * Write-side Stripe subscription document (mongoose Dates).
+ * GraphQL StripeSubscriptionType serializes dates as ISO strings — dual-shape.
+ */
+type StripeSubscription = {
+    currentPlan?: LicencesEnumType;
+    customerId?: string;
+    endDate?: Date;
+    startDate?: Date;
+    status?: SubscriptionStatusEnumType;
+    subscriptionId?: string;
+};
+type SubscriptionStatusData = {
+    subscriptionId: string | null;
+    status: SubscriptionStatusEnumType;
+    priceId: string | null;
+    currentPlan: LicencesEnumType | null;
+};
+/**
+ * Write-side embedded userActivity (mongoose). GraphQL UserActivityType uses
+ * Maybe lists / EventReferenceType — dual-shape, do not collapse.
+ */
+type UserActivity = {
+    favourites: {
+        events: string[];
+        vendors: string[];
+        partners: string[];
+    };
+    going: {
+        events: UserActivityEvent[];
+    };
+    interested: {
+        events: UserActivityEvent[];
+    };
+    present: {
+        events: UserActivityEvent[];
+    };
+};
+/** GraphQL envelope for `redeemReward`. */
+type RedeemRewardMutationResponse = MutationResponse<RedeemRewardResponseType>;
+/**
+ * Write-side redeemed reward (mongoose Date). GraphQL RedeemedRewardType
+ * serializes redeemedAt as an ISO string — dual-shape.
+ */
+type RedeemedReward = {
+    name: RewardEnumType;
+    pointsUsed: number;
+    redeemedAt: Date;
+};
+/**
+ * Persistence / mongoose user document. Includes secrets (password hash,
+ * refreshToken) and internal emailSentFor that GraphQL UserType never exposes.
+ * Dates stay as JS Date for mongoose. Dual-shape vs generated UserType —
+ * do not collapse.
+ *
+ * Client-facing GraphQL UserType / SafeUserType are generated — see
+ * src/generated/graphql.ts, re-exported from types/index.ts. SafeUserType is
+ * an alias of that generated UserType (schema UserType already omits
+ * password/refreshToken).
+ */
+type UserWriteType = Omit<UserFormData, "confirmPassword" | "avatarUpload" | "_id"> & {
+    _id: string;
+    affiliate?: string | null;
+    createdAt: Date;
+    deletedAt: Date | null;
+    emailSentFor?: NotificationResourceEnumType[] | null;
+    events: string[] | null;
+    game: string | null;
+    licences: UserLicenceType[] | null;
+    overallPoints: number | null;
+    partner: string | null;
+    password: string;
+    promoCodes?: PromoCodeType[] | null;
+    redeemedRewards?: RedeemedReward[] | null;
+    refreshToken: string | null;
+    roles: UserRoleEnumType[];
+    school: string | null;
+    stripe?: StripeSubscription;
+    updatedAt: Date | null;
+    userActivity: UserActivity | null;
+    vendor: string | null;
+};
+
+interface AppSettingsFormData {
+    appVersion: string;
+    isOfflineMode: boolean;
+    minimumRedeemableAffiliatePoints: number;
+}
+type CreateAppSettingsFormData = CreateFormData<AppSettingsFormData>;
+type AppSettingsType = AppSettingsFormData & {
+    _id: string;
+    activeSchoolsStudentCountTotal: number;
+    activeSchoolsStudentCountUpdatedAt: Date;
+    createdAt: Date;
+    key: string;
+    updatedAt: Date | null;
+};
+
+type LoginFormData = {
+    email: string;
+    isAdminPage?: boolean;
+    password: string;
+    platform?: OsPlatformEnumType;
+};
+type CreateLoginFormData = CreateFormData<LoginFormData>;
+type RegisterFormData = {
+    email: string;
+    firstName: string;
+    lastName: string;
+    password: string;
+    platform?: OsPlatformEnumType;
+    preferredRegion: string;
+    promoCode?: PromoCodeType | null;
+    termsAgreement?: TermsAgreement | null;
+};
+type CreateRegisterFormData = CreateFormData<RegisterFormData>;
+type RequestPasswordResetFormData = {
+    email: string;
+};
+type CreateRequestPasswordResetFormData = CreateFormData<RequestPasswordResetFormData>;
+type ResetPasswordFormData = {
+    confirmPassword: string;
+    email: string;
+    password: string;
+};
+type CreateResetPasswordFormData = CreateFormData<ResetPasswordFormData>;
+type ValidateVerificationTokenFormData = {
+    email: string;
+    verificationToken: string;
+    verificationType?: VerificationEnumType;
+};
+type CreateValidateVerificationTokenFormData = CreateFormData<ValidateVerificationTokenFormData>;
+/**
+ * GraphQL AuthPayloadType / RefreshTokenPayloadType are generated —
+ * re-exported from types/index.ts. AuthPayloadType.user is schema UserType,
+ * which is already the redacted client shape (no password / refreshToken).
+ */
+type AuthMutationResponse = MutationResponse<AuthPayloadType>;
+type RefreshTokenMutationResponse = MutationResponse<RefreshTokenPayloadType>;
+
+export type { AppSettingsFormData as A, CreateAppSettingsFormData as C, LoginFormData as L, RedeemRewardMutationResponse as R, StripeSubscription as S, UserFormData as U, ValidateVerificationTokenFormData as V, AppSettingsType as a, AuthMutationResponse as b, CreateLoginFormData as c, CreateRegisterFormData as d, CreateRequestPasswordResetFormData as e, CreateResetPasswordFormData as f, CreateUserFormData as g, CreateValidateVerificationTokenFormData as h, RedeemedReward as i, RefreshTokenMutationResponse as j, RegisterFormData as k, RequestPasswordResetFormData as l, ResetPasswordFormData as m, SubscriptionStatusData as n, UserActivity as o, UserActivityEvent as p, UserWriteType as q };