@timardex/cluemart-shared 1.7.0 → 1.7.2

package/dist/auth/index.mjs

@@ -0,0 +1,380 @@
+"use client";
+import {
+  ADMIN_APP_ROLES,
+  ADMIN_DASHBOARD_CONTEXTS,
+  PERMISSIONS,
+  ROLE_PERMISSIONS,
+  WILDCARD_PERMISSION,
+  canAccessAdminApp,
+  canAccessAdminPath,
+  getDefaultAdminHome,
+  getPermissionsForRoles,
+  getUsableAdminContexts,
+  hasAllPermissions,
+  hasAnyPermission,
+  hasAnyRole,
+  hasPermission,
+  hasRole,
+  permissionListIncludes,
+  resolveAdminContextFromPath
+} from "../chunk-VPANTTZI.mjs";
+import {
+  USER_STORAGE_KEY
+} from "../chunk-DWO35OY4.mjs";
+import {
+  TIERS_BY_PRIORITY
+} from "../chunk-DQ7ZHIXW.mjs";
+import {
+  useGetUser,
+  useLogout
+} from "../chunk-32MKHJTX.mjs";
+import "../chunk-X3OLM35T.mjs";
+
+// src/auth/createAuthManager.ts
+function createAuthManager() {
+  let logoutFn = null;
+  let userRefetchFn = null;
+  let logoutPromise = null;
+  return {
+    handleRefetchUser: async () => {
+      if (userRefetchFn) {
+        await userRefetchFn();
+      } else {
+        console.warn("\u274C User refetch function not set!");
+      }
+    },
+    logout() {
+      if (logoutPromise !== null) return logoutPromise;
+      if (logoutFn === null) {
+        console.warn("\u274C Logout function not set!");
+        return Promise.resolve();
+      }
+      logoutPromise = logoutFn().finally(() => {
+        logoutPromise = null;
+      });
+      return logoutPromise;
+    },
+    setLogout(fn) {
+      logoutFn = fn;
+    },
+    setUserRefetch(fn) {
+      userRefetchFn = fn;
+    }
+  };
+}
+
+// src/auth/licenceUtils.ts
+function isLicencedResourceType(resourceType) {
+  return resourceType !== "affiliate" /* AFFILIATE */ && resourceType !== "school" /* SCHOOL */;
+}
+function isProfileBadgeLicence(licenceType) {
+  return licenceType !== "standard_affiliate" /* STANDARD_AFFILIATE */ && licenceType !== "standard_school" /* STANDARD_SCHOOL */;
+}
+var hasUserLicenceType = (authUser, licenceType) => authUser?.licences?.some((licence) => licence.licenceType === licenceType) ?? false;
+var hasLicence = (authUser, licenceType) => {
+  const directLicence = authUser?.licences?.some(
+    (licence) => licence.licenceType?.includes(licenceType)
+  ) ?? false;
+  return {
+    directLicence
+  };
+};
+var DEFAULT_LIMITS = {
+  // 1 means calendar/productMenu is enabled, 0 means disabled
+  availability: { pro: 1, pro_plus: 1, standard: 0 },
+  calendar: { pro: 1, pro_plus: 1, standard: 0 },
+  images: { pro: 12, pro_plus: 12, standard: 6 },
+  posters: { pro: 5, pro_plus: 5, standard: 5 },
+  productsList: { pro: 1, pro_plus: 1, standard: 0 },
+  relationShare: { pro: 1, pro_plus: 1, standard: 0 },
+  statistics: { pro: 1, pro_plus: 1, standard: 0 }
+};
+var NO_LICENCE_FLAGS = {
+  event: {
+    pro_plus: false,
+    // eslint-disable-next-line sort-keys
+    pro: false,
+    standard: false
+  },
+  partner: {
+    pro_plus: false,
+    // eslint-disable-next-line sort-keys
+    pro: false,
+    standard: false
+  },
+  vendor: {
+    pro_plus: false,
+    // eslint-disable-next-line sort-keys
+    pro: false,
+    standard: false
+  }
+};
+function getLicenceFlagsByRole(licences) {
+  const normalized = licences?.map((l) => l.toLowerCase()) ?? [];
+  const hasAnyLicence = normalized.length > 0;
+  function resolve(role) {
+    const result = {
+      pro_plus: false,
+      // eslint-disable-next-line sort-keys
+      pro: false,
+      standard: false
+    };
+    for (const tier of TIERS_BY_PRIORITY) {
+      if (normalized.some((l) => l.startsWith(`${tier}_${role}`))) {
+        result[tier] = true;
+        break;
+      }
+    }
+    if (!hasAnyLicence) {
+      result.pro = true;
+    }
+    return result;
+  }
+  return {
+    event: resolve("event" /* EVENT */),
+    partner: resolve("partner" /* PARTNER */),
+    vendor: resolve("vendor" /* VENDOR */)
+  };
+}
+
+// src/auth/useAuthCore.ts
+import { useCallback, useEffect, useMemo, useState } from "react";
+function useAuthCore(adapters) {
+  const {
+    storage,
+    authManager,
+    afterLogout,
+    shouldCallLogoutMutation = () => true,
+    notifyLogoutSuccess,
+    notifySessionExpired,
+    onError
+  } = adapters;
+  const [authUser, setAuthUser] = useState(null);
+  const [isLoading, setIsLoading] = useState(true);
+  const userId = useMemo(() => authUser?._id ?? "", [authUser?._id]);
+  const { refetch } = useGetUser(userId);
+  const { logout, loading } = useLogout();
+  const handleSetAuthUser = useCallback(
+    async (user) => {
+      setAuthUser(user);
+      if (user) {
+        await storage.setItem(USER_STORAGE_KEY, JSON.stringify(user));
+      } else {
+        await storage.removeItem(USER_STORAGE_KEY);
+      }
+    },
+    [storage]
+  );
+  const handleRefetchUser = useCallback(async () => {
+    if (!authUser) return;
+    try {
+      const result = await refetch();
+      if (!result) return;
+      const { data } = result;
+      if (data?.user) await handleSetAuthUser(data.user);
+    } catch (error) {
+      onError?.(error, { action: "refetchUser" });
+      console.warn(
+        "Failed to refetch user:",
+        error instanceof Error ? error.message : error
+      );
+    }
+  }, [authUser, handleSetAuthUser, onError, refetch]);
+  const licences = useCallback(
+    (resourceId) => {
+      const myLicences = authUser?.licences?.map((licence) => licence.licenceType) ?? [];
+      const myResourceIds = [
+        authUser?.vendor ?? null,
+        authUser?.partner ?? null,
+        ...authUser?.events ?? []
+      ].filter((id) => id !== null);
+      return myResourceIds.includes(resourceId) ? getLicenceFlagsByRole(myLicences) : NO_LICENCE_FLAGS;
+    },
+    [authUser]
+  );
+  const getLicenseAccessLevel = useCallback(
+    (limitType, resourceId, resourceType) => {
+      if (!isLicencedResourceType(resourceType)) {
+        return 0;
+      }
+      if (resourceId === "") {
+        return DEFAULT_LIMITS[limitType].pro;
+      }
+      const roleLicences = licences(resourceId)[resourceType];
+      if (roleLicences.pro_plus) return DEFAULT_LIMITS[limitType].pro_plus;
+      if (roleLicences.pro) return DEFAULT_LIMITS[limitType].pro;
+      if (roleLicences.standard) return DEFAULT_LIMITS[limitType].standard;
+      return 0;
+    },
+    [licences]
+  );
+  const hasVendorLicence = useMemo(
+    () => hasLicence(authUser, "vendor"),
+    [authUser]
+  );
+  const hasPartnerLicence = useMemo(
+    () => hasLicence(authUser, "partner"),
+    [authUser]
+  );
+  const hasEventLicence = useMemo(
+    () => hasLicence(authUser, "event"),
+    [authUser]
+  );
+  const hasUserLicence = useCallback(
+    (licenceType) => hasUserLicenceType(authUser, licenceType),
+    [authUser]
+  );
+  const permissions = useMemo(() => {
+    if (authUser?.permissions != null) {
+      return authUser.permissions;
+    }
+    return getPermissionsForRoles(authUser?.roles);
+  }, [authUser?.permissions, authUser?.roles]);
+  const hasPermissionFn = useCallback(
+    (permission) => permissionListIncludes(permissions, permission),
+    [permissions]
+  );
+  const hasRoleFn = useCallback(
+    (role) => hasRole(authUser?.roles, role),
+    [authUser?.roles]
+  );
+  const isAdmin = useMemo(
+    () => hasRole(authUser?.roles, "admin" /* ADMIN */) || permissionListIncludes(permissions, "dashboard.admin") || permissionListIncludes(permissions, "*"),
+    [authUser?.roles, permissions]
+  );
+  const isSuperAdmin = useMemo(
+    () => hasRole(authUser?.roles, "super_admin" /* SUPER_ADMIN */),
+    [authUser?.roles]
+  );
+  const isAffiliate = useMemo(
+    () => hasRole(authUser?.roles, "affiliate" /* AFFILIATE */) && authUser?.affiliate !== null && authUser?.affiliate !== void 0,
+    [authUser?.roles, authUser?.affiliate]
+  );
+  const isSchool = useMemo(
+    () => hasRole(authUser?.roles, "school" /* SCHOOL */) && authUser?.school !== null && authUser?.school !== void 0,
+    [authUser?.roles, authUser?.school]
+  );
+  useEffect(() => {
+    const loadUser = async () => {
+      try {
+        const userJson = await storage.getItem(USER_STORAGE_KEY);
+        await handleSetAuthUser(userJson ? JSON.parse(userJson) : null);
+      } catch (error) {
+        onError?.(error, { action: "loadUserFromStorage" });
+        console.error("Failed to load user from storage:", error);
+      } finally {
+        setIsLoading(false);
+      }
+    };
+    void loadUser();
+  }, []);
+  const logoutWithReason = useCallback(
+    async (reason) => {
+      try {
+        if (shouldCallLogoutMutation(reason)) {
+          try {
+            const result = await logout();
+            const message = result?.data?.logout?.message;
+            if (message) {
+              notifyLogoutSuccess?.(message);
+            }
+          } catch (err) {
+            onError?.(err, { action: "logout" });
+            console.warn("Logout request failed (ignored):", err);
+          }
+        }
+      } finally {
+        await afterLogout(reason);
+        setAuthUser(null);
+        await storage.removeItem(USER_STORAGE_KEY);
+      }
+    },
+    [
+      afterLogout,
+      logout,
+      notifyLogoutSuccess,
+      onError,
+      shouldCallLogoutMutation,
+      storage
+    ]
+  );
+  const handleLogoutExplicit = useCallback(
+    () => logoutWithReason("manual"),
+    [logoutWithReason]
+  );
+  const handleLogoutExpired = useCallback(async () => {
+    const hadSession = authUser != null;
+    if (!hadSession) return;
+    await logoutWithReason("expired");
+    notifySessionExpired?.();
+  }, [authUser, logoutWithReason, notifySessionExpired]);
+  useEffect(() => {
+    authManager.setLogout(() => handleLogoutExpired());
+    authManager.setUserRefetch(() => handleRefetchUser());
+  }, [authManager, handleLogoutExpired, handleRefetchUser]);
+  return {
+    authUser,
+    getLicenseAccessLevel,
+    handleLogoutExplicit,
+    hasEventLicence,
+    hasPartnerLicence,
+    hasPermission: hasPermissionFn,
+    hasRole: hasRoleFn,
+    hasUserLicence,
+    hasVendorLicence,
+    isAdmin,
+    isAffiliate,
+    isLoading: loading || isLoading,
+    isSchool,
+    isSuperAdmin,
+    permissions,
+    refetchUser: handleRefetchUser,
+    setUser: handleSetAuthUser
+  };
+}
+
+// src/auth/UserProvider.tsx
+import { createContext, useContext } from "react";
+import { jsx } from "react/jsx-runtime";
+var UserContext = createContext(void 0);
+var UserProvider = ({ children, value }) => {
+  return /* @__PURE__ */ jsx(UserContext.Provider, { value, children });
+};
+var useAuthUser = () => {
+  const context = useContext(UserContext);
+  if (!context) {
+    throw new Error("useAuthUser must be used within a UserProvider");
+  }
+  return context;
+};
+export {
+  ADMIN_APP_ROLES,
+  ADMIN_DASHBOARD_CONTEXTS,
+  DEFAULT_LIMITS,
+  NO_LICENCE_FLAGS,
+  PERMISSIONS,
+  ROLE_PERMISSIONS,
+  UserProvider,
+  WILDCARD_PERMISSION,
+  canAccessAdminApp,
+  canAccessAdminPath,
+  createAuthManager,
+  getDefaultAdminHome,
+  getLicenceFlagsByRole,
+  getPermissionsForRoles,
+  getUsableAdminContexts,
+  hasAllPermissions,
+  hasAnyPermission,
+  hasAnyRole,
+  hasLicence,
+  hasPermission,
+  hasRole,
+  hasUserLicenceType,
+  isLicencedResourceType,
+  isProfileBadgeLicence,
+  permissionListIncludes,
+  resolveAdminContextFromPath,
+  useAuthCore,
+  useAuthUser
+};
+//# sourceMappingURL=index.mjs.map

package/dist/auth/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/createAuthManager.ts","../../src/auth/licenceUtils.ts","../../src/auth/useAuthCore.ts","../../src/auth/UserProvider.tsx"],"sourcesContent":["export type AuthManager = {\n  logout: () => Promise<void>;\n  setLogout: (fn: () => Promise<void>) => void;\n  handleRefetchUser: () => Promise<void>;\n  setUserRefetch: (fn: () => Promise<void>) => void;\n};\n\n/**\n * Creates an auth manager used by Apollo error links to trigger logout/refetch\n * without importing React. Matches the former mobile authManager shape.\n *\n * `logout()` dedupes concurrent calls via an in-flight promise so token-refresh\n * failures do not kick off multiple logout sequences.\n */\nexport function createAuthManager(): AuthManager {\n  let logoutFn: (() => Promise<void>) | null = null;\n  let userRefetchFn: (() => Promise<void>) | null = null;\n  let logoutPromise: Promise<void> | null = null;\n\n  return {\n    handleRefetchUser: async () => {\n      if (userRefetchFn) {\n        await userRefetchFn();\n      } else {\n        console.warn(\"❌ User refetch function not set!\");\n      }\n    },\n    logout(): Promise<void> {\n      if (logoutPromise !== null) return logoutPromise;\n      if (logoutFn === null) {\n        console.warn(\"❌ Logout function not set!\");\n        return Promise.resolve();\n      }\n      logoutPromise = logoutFn().finally(() => {\n        logoutPromise = null;\n      });\n      return logoutPromise;\n    },\n    setLogout(fn: () => Promise<void>) {\n      logoutFn = fn;\n    },\n    setUserRefetch(fn: () => Promise<void>) {\n      userRefetchFn = fn;\n    },\n  };\n}\n","/* eslint-disable camelcase */\nimport { EnumResourceType, EnumUserLicence } from \"../enums\";\nimport type { SafeUserType } from \"../types\";\nimport { TIERS_BY_PRIORITY, type Tier } from \"../types/subscription\";\n\nimport type {\n  HasLicenceResult,\n  LicencedResourceType,\n  LicencesByRole,\n  LimitType,\n  ProfileBadgeLicence,\n  RoleLicences,\n} from \"./types\";\n\nexport function isLicencedResourceType(\n  resourceType: EnumResourceType,\n): resourceType is LicencedResourceType {\n  return (\n    resourceType !== EnumResourceType.AFFILIATE &&\n    resourceType !== EnumResourceType.SCHOOL\n  );\n}\n\nexport function isProfileBadgeLicence(\n  licenceType: EnumUserLicence,\n): licenceType is ProfileBadgeLicence {\n  return (\n    licenceType !== EnumUserLicence.STANDARD_AFFILIATE &&\n    licenceType !== EnumUserLicence.STANDARD_SCHOOL\n  );\n}\n\nexport const hasUserLicenceType = (\n  authUser: SafeUserType | null,\n  licenceType: EnumUserLicence,\n): boolean =>\n  authUser?.licences?.some((licence) => licence.licenceType === licenceType) ??\n  false;\n\nexport const hasLicence = (\n  authUser: SafeUserType | null,\n  licenceType: \"vendor\" | \"partner\" | \"event\",\n): HasLicenceResult => {\n  const directLicence =\n    authUser?.licences?.some((licence) =>\n      licence.licenceType?.includes(licenceType),\n    ) ?? false;\n\n  return {\n    directLicence,\n  };\n};\n\n/** Default limits per subscription tier. */\nexport const DEFAULT_LIMITS: Record<LimitType, Record<Tier, number>> = {\n  // 1 means calendar/productMenu is enabled, 0 means disabled\n  availability: { pro: 1, pro_plus: 1, standard: 0 },\n  calendar: { pro: 1, pro_plus: 1, standard: 0 },\n  images: { pro: 12, pro_plus: 12, standard: 6 },\n  posters: { pro: 5, pro_plus: 5, standard: 5 },\n  productsList: { pro: 1, pro_plus: 1, standard: 0 },\n  relationShare: { pro: 1, pro_plus: 1, standard: 0 },\n  statistics: { pro: 1, pro_plus: 1, standard: 0 },\n};\n\n/** All tiers off — used when the viewer does not own the resource. */\nexport const NO_LICENCE_FLAGS: LicencesByRole = {\n  event: {\n    pro_plus: false,\n    // eslint-disable-next-line sort-keys\n    pro: false,\n    standard: false,\n  },\n  partner: {\n    pro_plus: false,\n    // eslint-disable-next-line sort-keys\n    pro: false,\n    standard: false,\n  },\n  vendor: {\n    pro_plus: false,\n    // eslint-disable-next-line sort-keys\n    pro: false,\n    standard: false,\n  },\n};\n\n/**\n * Parses an array of licence strings into structured, role-based licences.\n * Users with no licences yet default to pro (create / trial access).\n */\nexport function getLicenceFlagsByRole(licences?: string[]): LicencesByRole {\n  const normalized = licences?.map((l) => l.toLowerCase()) ?? [];\n  const hasAnyLicence = normalized.length > 0;\n\n  function resolve(role: EnumResourceType): RoleLicences {\n    const result: RoleLicences = {\n      pro_plus: false,\n      // eslint-disable-next-line sort-keys\n      pro: false,\n      standard: false,\n    };\n\n    for (const tier of TIERS_BY_PRIORITY) {\n      if (normalized.some((l) => l.startsWith(`${tier}_${role}`))) {\n        result[tier] = true;\n        break; // stop at first match → ensures mutual exclusivity\n      }\n    }\n\n    // No licences at all → grant pro so new users can use pro features\n    if (!hasAnyLicence) {\n      result.pro = true;\n    }\n\n    return result;\n  }\n\n  return {\n    event: resolve(EnumResourceType.EVENT),\n    partner: resolve(EnumResourceType.PARTNER),\n    vendor: resolve(EnumResourceType.VENDOR),\n  };\n}\n","import { useCallback, useEffect, useMemo, useState } from \"react\";\n\nimport { EnumResourceType, EnumUserLicence, EnumUserRole } from \"../enums\";\nimport { useLogout } from \"../graphql/hooks/auth\";\nimport { useGetUser } from \"../graphql/hooks/user/hooksQuery\";\nimport { USER_STORAGE_KEY } from \"../storage\";\nimport type { SafeUserType } from \"../types\";\n\nimport {\n  DEFAULT_LIMITS,\n  getLicenceFlagsByRole,\n  hasLicence,\n  hasUserLicenceType,\n  isLicencedResourceType,\n  NO_LICENCE_FLAGS,\n} from \"./licenceUtils\";\nimport {\n  getPermissionsForRoles,\n  hasRole as roleHasRole,\n  permissionListIncludes,\n} from \"./permissions\";\nimport type { Permission } from \"./permissions\";\nimport type {\n  LimitType,\n  LogoutReason,\n  UseAuthCoreAdapters,\n  UseAuthReturnType,\n} from \"./types\";\n\n/**\n * Platform-agnostic auth session core (source of truth for shared useAuth).\n *\n * Owns: persisted user load/set, refetch, role/licence flags, logout orchestration.\n * Does not own: AsyncStorage vs localStorage, Expo/Next navigation, toasts,\n * Apollo/WS reset, Firebase — those stay in each app's adapter wrapper.\n */\nexport function useAuthCore(adapters: UseAuthCoreAdapters): UseAuthReturnType {\n  const {\n    storage,\n    authManager,\n    afterLogout,\n    shouldCallLogoutMutation = () => true,\n    notifyLogoutSuccess,\n    notifySessionExpired,\n    onError,\n  } = adapters;\n\n  const [authUser, setAuthUser] = useState<SafeUserType | null>(null);\n  const [isLoading, setIsLoading] = useState(true);\n\n  const userId = useMemo(() => authUser?._id ?? \"\", [authUser?._id]);\n  const { refetch } = useGetUser(userId);\n  const { logout, loading } = useLogout();\n\n  const handleSetAuthUser = useCallback(\n    async (user: SafeUserType | null) => {\n      setAuthUser(user);\n      if (user) {\n        await storage.setItem(USER_STORAGE_KEY, JSON.stringify(user));\n      } else {\n        await storage.removeItem(USER_STORAGE_KEY);\n      }\n    },\n    [storage],\n  );\n\n  const handleRefetchUser = useCallback(async () => {\n    if (!authUser) return;\n    try {\n      const result = await refetch();\n      if (!result) return;\n      const { data } = result;\n      if (data?.user) await handleSetAuthUser(data.user);\n    } catch (error: unknown) {\n      onError?.(error, { action: \"refetchUser\" });\n      console.warn(\n        \"Failed to refetch user:\",\n        error instanceof Error ? error.message : error,\n      );\n    }\n  }, [authUser, handleSetAuthUser, onError, refetch]);\n\n  const licences = useCallback(\n    (resourceId: string) => {\n      const myLicences =\n        authUser?.licences?.map((licence) => licence.licenceType) ?? [];\n\n      const myResourceIds = [\n        authUser?.vendor ?? null,\n        authUser?.partner ?? null,\n        ...(authUser?.events ?? []),\n      ].filter((id): id is string => id !== null);\n\n      return myResourceIds.includes(resourceId)\n        ? getLicenceFlagsByRole(myLicences)\n        : NO_LICENCE_FLAGS;\n    },\n    [authUser],\n  );\n\n  const getLicenseAccessLevel = useCallback(\n    (\n      limitType: LimitType,\n      resourceId: string,\n      resourceType: EnumResourceType,\n    ): number => {\n      if (!isLicencedResourceType(resourceType)) {\n        return 0;\n      }\n\n      // No resource yet (e.g. create flow): grant pro limits.\n      if (resourceId === \"\") {\n        return DEFAULT_LIMITS[limitType].pro;\n      }\n\n      const roleLicences = licences(resourceId)[resourceType];\n\n      if (roleLicences.pro_plus) return DEFAULT_LIMITS[limitType].pro_plus;\n      if (roleLicences.pro) return DEFAULT_LIMITS[limitType].pro;\n      if (roleLicences.standard) return DEFAULT_LIMITS[limitType].standard;\n\n      return 0;\n    },\n    [licences],\n  );\n\n  const hasVendorLicence = useMemo(\n    () => hasLicence(authUser, \"vendor\"),\n    [authUser],\n  );\n\n  const hasPartnerLicence = useMemo(\n    () => hasLicence(authUser, \"partner\"),\n    [authUser],\n  );\n\n  const hasEventLicence = useMemo(\n    () => hasLicence(authUser, \"event\"),\n    [authUser],\n  );\n\n  const hasUserLicence = useCallback(\n    (licenceType: EnumUserLicence) => hasUserLicenceType(authUser, licenceType),\n    [authUser],\n  );\n\n  const permissions = useMemo(() => {\n    if (authUser?.permissions != null) {\n      return authUser.permissions;\n    }\n    return getPermissionsForRoles(authUser?.roles);\n  }, [authUser?.permissions, authUser?.roles]);\n\n  const hasPermissionFn = useCallback(\n    (permission: Permission) => permissionListIncludes(permissions, permission),\n    [permissions],\n  );\n\n  const hasRoleFn = useCallback(\n    (role: EnumUserRole) => roleHasRole(authUser?.roles, role),\n    [authUser?.roles],\n  );\n\n  const isAdmin = useMemo(\n    () =>\n      roleHasRole(authUser?.roles, EnumUserRole.ADMIN) ||\n      permissionListIncludes(permissions, \"dashboard.admin\") ||\n      permissionListIncludes(permissions, \"*\"),\n    [authUser?.roles, permissions],\n  );\n\n  const isSuperAdmin = useMemo(\n    () => roleHasRole(authUser?.roles, EnumUserRole.SUPER_ADMIN),\n    [authUser?.roles],\n  );\n\n  const isAffiliate = useMemo(\n    () =>\n      roleHasRole(authUser?.roles, EnumUserRole.AFFILIATE) &&\n      authUser?.affiliate !== null &&\n      authUser?.affiliate !== undefined,\n    [authUser?.roles, authUser?.affiliate],\n  );\n\n  const isSchool = useMemo(\n    () =>\n      roleHasRole(authUser?.roles, EnumUserRole.SCHOOL) &&\n      authUser?.school !== null &&\n      authUser?.school !== undefined,\n    [authUser?.roles, authUser?.school],\n  );\n\n  // Mount-only hydrate from storage. Do not re-run when adapter identities\n  // change — that can overwrite a newer in-memory user (e.g. post-login setUser).\n  useEffect(() => {\n    const loadUser = async () => {\n      try {\n        const userJson = await storage.getItem(USER_STORAGE_KEY);\n        await handleSetAuthUser(userJson ? JSON.parse(userJson) : null);\n      } catch (error: unknown) {\n        onError?.(error, { action: \"loadUserFromStorage\" });\n        console.error(\"Failed to load user from storage:\", error);\n      } finally {\n        setIsLoading(false);\n      }\n    };\n\n    void loadUser();\n  }, []);\n\n  const logoutWithReason = useCallback(\n    async (reason: LogoutReason) => {\n      try {\n        if (shouldCallLogoutMutation(reason)) {\n          try {\n            const result = await logout();\n            const message = result?.data?.logout?.message as string | undefined;\n            if (message) {\n              notifyLogoutSuccess?.(message);\n            }\n          } catch (err: unknown) {\n            onError?.(err, { action: \"logout\" });\n            console.warn(\"Logout request failed (ignored):\", err);\n          }\n        }\n      } finally {\n        await afterLogout(reason);\n        setAuthUser(null);\n        await storage.removeItem(USER_STORAGE_KEY);\n      }\n    },\n    [\n      afterLogout,\n      logout,\n      notifyLogoutSuccess,\n      onError,\n      shouldCallLogoutMutation,\n      storage,\n    ],\n  );\n\n  const handleLogoutExplicit = useCallback(\n    () => logoutWithReason(\"manual\"),\n    [logoutWithReason],\n  );\n\n  const handleLogoutExpired = useCallback(async () => {\n    const hadSession = authUser != null;\n    if (!hadSession) return;\n    await logoutWithReason(\"expired\");\n    notifySessionExpired?.();\n  }, [authUser, logoutWithReason, notifySessionExpired]);\n\n  useEffect(() => {\n    authManager.setLogout(() => handleLogoutExpired());\n    authManager.setUserRefetch(() => handleRefetchUser());\n  }, [authManager, handleLogoutExpired, handleRefetchUser]);\n\n  return {\n    authUser,\n    getLicenseAccessLevel,\n    handleLogoutExplicit,\n    hasEventLicence,\n    hasPartnerLicence,\n    hasPermission: hasPermissionFn,\n    hasRole: hasRoleFn,\n    hasUserLicence,\n    hasVendorLicence,\n    isAdmin,\n    isAffiliate,\n    isLoading: loading || isLoading,\n    isSchool,\n    isSuperAdmin,\n    permissions,\n    refetchUser: handleRefetchUser,\n    setUser: handleSetAuthUser,\n  };\n}\n","/**\n * Shared React context for auth session state.\n *\n * Apps keep a thin local UserProvider that calls their platform `useAuth`\n * (adapters) and pass the result here as `value`. Import `useAuthUser` from\n * this module (or re-export it) so consumers share one context instance.\n *\n * `\"use client\"`: required for Next.js; ignored by React Native.\n */\n\"use client\";\n\nimport React, { createContext, useContext, type ReactNode } from \"react\";\n\nimport type { UseAuthReturnType } from \"./types\";\n\nconst UserContext = createContext<UseAuthReturnType | undefined>(undefined);\n\n/**\n * Provides auth session value from the app's thin useAuth wrapper.\n */\nexport const UserProvider: React.FC<{\n  children: ReactNode;\n  value: UseAuthReturnType;\n}> = ({ children, value }) => {\n  return <UserContext.Provider value={value}>{children}</UserContext.Provider>;\n};\n\nexport const useAuthUser = (): UseAuthReturnType => {\n  const context = useContext(UserContext);\n  if (!context) {\n    throw new Error(\"useAuthUser must be used within a UserProvider\");\n  }\n  return context;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcO,SAAS,oBAAiC;AAC/C,MAAI,WAAyC;AAC7C,MAAI,gBAA8C;AAClD,MAAI,gBAAsC;AAE1C,SAAO;AAAA,IACL,mBAAmB,YAAY;AAC7B,UAAI,eAAe;AACjB,cAAM,cAAc;AAAA,MACtB,OAAO;AACL,gBAAQ,KAAK,uCAAkC;AAAA,MACjD;AAAA,IACF;AAAA,IACA,SAAwB;AACtB,UAAI,kBAAkB,KAAM,QAAO;AACnC,UAAI,aAAa,MAAM;AACrB,gBAAQ,KAAK,iCAA4B;AACzC,eAAO,QAAQ,QAAQ;AAAA,MACzB;AACA,sBAAgB,SAAS,EAAE,QAAQ,MAAM;AACvC,wBAAgB;AAAA,MAClB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,UAAU,IAAyB;AACjC,iBAAW;AAAA,IACb;AAAA,IACA,eAAe,IAAyB;AACtC,sBAAgB;AAAA,IAClB;AAAA,EACF;AACF;;;AC/BO,SAAS,uBACd,cACsC;AACtC,SACE,gDACA;AAEJ;AAEO,SAAS,sBACd,aACoC;AACpC,SACE,iEACA;AAEJ;AAEO,IAAM,qBAAqB,CAChC,UACA,gBAEA,UAAU,UAAU,KAAK,CAAC,YAAY,QAAQ,gBAAgB,WAAW,KACzE;AAEK,IAAM,aAAa,CACxB,UACA,gBACqB;AACrB,QAAM,gBACJ,UAAU,UAAU;AAAA,IAAK,CAAC,YACxB,QAAQ,aAAa,SAAS,WAAW;AAAA,EAC3C,KAAK;AAEP,SAAO;AAAA,IACL;AAAA,EACF;AACF;AAGO,IAAM,iBAA0D;AAAA;AAAA,EAErE,cAAc,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EACjD,UAAU,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EAC7C,QAAQ,EAAE,KAAK,IAAI,UAAU,IAAI,UAAU,EAAE;AAAA,EAC7C,SAAS,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EAC5C,cAAc,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EACjD,eAAe,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AAAA,EAClD,YAAY,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,EAAE;AACjD;AAGO,IAAM,mBAAmC;AAAA,EAC9C,OAAO;AAAA,IACL,UAAU;AAAA;AAAA,IAEV,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,SAAS;AAAA,IACP,UAAU;AAAA;AAAA,IAEV,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AAAA,EACA,QAAQ;AAAA,IACN,UAAU;AAAA;AAAA,IAEV,KAAK;AAAA,IACL,UAAU;AAAA,EACZ;AACF;AAMO,SAAS,sBAAsB,UAAqC;AACzE,QAAM,aAAa,UAAU,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;AAC7D,QAAM,gBAAgB,WAAW,SAAS;AAE1C,WAAS,QAAQ,MAAsC;AACrD,UAAM,SAAuB;AAAA,MAC3B,UAAU;AAAA;AAAA,MAEV,KAAK;AAAA,MACL,UAAU;AAAA,IACZ;AAEA,eAAW,QAAQ,mBAAmB;AACpC,UAAI,WAAW,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,GAAG;AAC3D,eAAO,IAAI,IAAI;AACf;AAAA,MACF;AAAA,IACF;AAGA,QAAI,CAAC,eAAe;AAClB,aAAO,MAAM;AAAA,IACf;AAEA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,OAAO,2BAA8B;AAAA,IACrC,SAAS,+BAAgC;AAAA,IACzC,QAAQ,6BAA+B;AAAA,EACzC;AACF;;;AC3HA,SAAS,aAAa,WAAW,SAAS,gBAAgB;AAoCnD,SAAS,YAAY,UAAkD;AAC5E,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,2BAA2B,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,CAAC,UAAU,WAAW,IAAI,SAA8B,IAAI;AAClE,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,IAAI;AAE/C,QAAM,SAAS,QAAQ,MAAM,UAAU,OAAO,IAAI,CAAC,UAAU,GAAG,CAAC;AACjE,QAAM,EAAE,QAAQ,IAAI,WAAW,MAAM;AACrC,QAAM,EAAE,QAAQ,QAAQ,IAAI,UAAU;AAEtC,QAAM,oBAAoB;AAAA,IACxB,OAAO,SAA8B;AACnC,kBAAY,IAAI;AAChB,UAAI,MAAM;AACR,cAAM,QAAQ,QAAQ,kBAAkB,KAAK,UAAU,IAAI,CAAC;AAAA,MAC9D,OAAO;AACL,cAAM,QAAQ,WAAW,gBAAgB;AAAA,MAC3C;AAAA,IACF;AAAA,IACA,CAAC,OAAO;AAAA,EACV;AAEA,QAAM,oBAAoB,YAAY,YAAY;AAChD,QAAI,CAAC,SAAU;AACf,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ;AAC7B,UAAI,CAAC,OAAQ;AACb,YAAM,EAAE,KAAK,IAAI;AACjB,UAAI,MAAM,KAAM,OAAM,kBAAkB,KAAK,IAAI;AAAA,IACnD,SAAS,OAAgB;AACvB,gBAAU,OAAO,EAAE,QAAQ,cAAc,CAAC;AAC1C,cAAQ;AAAA,QACN;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC3C;AAAA,IACF;AAAA,EACF,GAAG,CAAC,UAAU,mBAAmB,SAAS,OAAO,CAAC;AAElD,QAAM,WAAW;AAAA,IACf,CAAC,eAAuB;AACtB,YAAM,aACJ,UAAU,UAAU,IAAI,CAAC,YAAY,QAAQ,WAAW,KAAK,CAAC;AAEhE,YAAM,gBAAgB;AAAA,QACpB,UAAU,UAAU;AAAA,QACpB,UAAU,WAAW;AAAA,QACrB,GAAI,UAAU,UAAU,CAAC;AAAA,MAC3B,EAAE,OAAO,CAAC,OAAqB,OAAO,IAAI;AAE1C,aAAO,cAAc,SAAS,UAAU,IACpC,sBAAsB,UAAU,IAChC;AAAA,IACN;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,wBAAwB;AAAA,IAC5B,CACE,WACA,YACA,iBACW;AACX,UAAI,CAAC,uBAAuB,YAAY,GAAG;AACzC,eAAO;AAAA,MACT;AAGA,UAAI,eAAe,IAAI;AACrB,eAAO,eAAe,SAAS,EAAE;AAAA,MACnC;AAEA,YAAM,eAAe,SAAS,UAAU,EAAE,YAAY;AAEtD,UAAI,aAAa,SAAU,QAAO,eAAe,SAAS,EAAE;AAC5D,UAAI,aAAa,IAAK,QAAO,eAAe,SAAS,EAAE;AACvD,UAAI,aAAa,SAAU,QAAO,eAAe,SAAS,EAAE;AAE5D,aAAO;AAAA,IACT;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,mBAAmB;AAAA,IACvB,MAAM,WAAW,UAAU,QAAQ;AAAA,IACnC,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,oBAAoB;AAAA,IACxB,MAAM,WAAW,UAAU,SAAS;AAAA,IACpC,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,kBAAkB;AAAA,IACtB,MAAM,WAAW,UAAU,OAAO;AAAA,IAClC,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,iBAAiB;AAAA,IACrB,CAAC,gBAAiC,mBAAmB,UAAU,WAAW;AAAA,IAC1E,CAAC,QAAQ;AAAA,EACX;AAEA,QAAM,cAAc,QAAQ,MAAM;AAChC,QAAI,UAAU,eAAe,MAAM;AACjC,aAAO,SAAS;AAAA,IAClB;AACA,WAAO,uBAAuB,UAAU,KAAK;AAAA,EAC/C,GAAG,CAAC,UAAU,aAAa,UAAU,KAAK,CAAC;AAE3C,QAAM,kBAAkB;AAAA,IACtB,CAAC,eAA2B,uBAAuB,aAAa,UAAU;AAAA,IAC1E,CAAC,WAAW;AAAA,EACd;AAEA,QAAM,YAAY;AAAA,IAChB,CAAC,SAAuB,QAAY,UAAU,OAAO,IAAI;AAAA,IACzD,CAAC,UAAU,KAAK;AAAA,EAClB;AAEA,QAAM,UAAU;AAAA,IACd,MACE,QAAY,UAAU,0BAAyB,KAC/C,uBAAuB,aAAa,iBAAiB,KACrD,uBAAuB,aAAa,GAAG;AAAA,IACzC,CAAC,UAAU,OAAO,WAAW;AAAA,EAC/B;AAEA,QAAM,eAAe;AAAA,IACnB,MAAM,QAAY,UAAU,sCAA+B;AAAA,IAC3D,CAAC,UAAU,KAAK;AAAA,EAClB;AAEA,QAAM,cAAc;AAAA,IAClB,MACE,QAAY,UAAU,kCAA6B,KACnD,UAAU,cAAc,QACxB,UAAU,cAAc;AAAA,IAC1B,CAAC,UAAU,OAAO,UAAU,SAAS;AAAA,EACvC;AAEA,QAAM,WAAW;AAAA,IACf,MACE,QAAY,UAAU,4BAA0B,KAChD,UAAU,WAAW,QACrB,UAAU,WAAW;AAAA,IACvB,CAAC,UAAU,OAAO,UAAU,MAAM;AAAA,EACpC;AAIA,YAAU,MAAM;AACd,UAAM,WAAW,YAAY;AAC3B,UAAI;AACF,cAAM,WAAW,MAAM,QAAQ,QAAQ,gBAAgB;AACvD,cAAM,kBAAkB,WAAW,KAAK,MAAM,QAAQ,IAAI,IAAI;AAAA,MAChE,SAAS,OAAgB;AACvB,kBAAU,OAAO,EAAE,QAAQ,sBAAsB,CAAC;AAClD,gBAAQ,MAAM,qCAAqC,KAAK;AAAA,MAC1D,UAAE;AACA,qBAAa,KAAK;AAAA,MACpB;AAAA,IACF;AAEA,SAAK,SAAS;AAAA,EAChB,GAAG,CAAC,CAAC;AAEL,QAAM,mBAAmB;AAAA,IACvB,OAAO,WAAyB;AAC9B,UAAI;AACF,YAAI,yBAAyB,MAAM,GAAG;AACpC,cAAI;AACF,kBAAM,SAAS,MAAM,OAAO;AAC5B,kBAAM,UAAU,QAAQ,MAAM,QAAQ;AACtC,gBAAI,SAAS;AACX,oCAAsB,OAAO;AAAA,YAC/B;AAAA,UACF,SAAS,KAAc;AACrB,sBAAU,KAAK,EAAE,QAAQ,SAAS,CAAC;AACnC,oBAAQ,KAAK,oCAAoC,GAAG;AAAA,UACtD;AAAA,QACF;AAAA,MACF,UAAE;AACA,cAAM,YAAY,MAAM;AACxB,oBAAY,IAAI;AAChB,cAAM,QAAQ,WAAW,gBAAgB;AAAA,MAC3C;AAAA,IACF;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,uBAAuB;AAAA,IAC3B,MAAM,iBAAiB,QAAQ;AAAA,IAC/B,CAAC,gBAAgB;AAAA,EACnB;AAEA,QAAM,sBAAsB,YAAY,YAAY;AAClD,UAAM,aAAa,YAAY;AAC/B,QAAI,CAAC,WAAY;AACjB,UAAM,iBAAiB,SAAS;AAChC,2BAAuB;AAAA,EACzB,GAAG,CAAC,UAAU,kBAAkB,oBAAoB,CAAC;AAErD,YAAU,MAAM;AACd,gBAAY,UAAU,MAAM,oBAAoB,CAAC;AACjD,gBAAY,eAAe,MAAM,kBAAkB,CAAC;AAAA,EACtD,GAAG,CAAC,aAAa,qBAAqB,iBAAiB,CAAC;AAExD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe;AAAA,IACf,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,WAAW;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AACF;;;AC1QA,SAAgB,eAAe,kBAAkC;AAaxD;AATT,IAAM,cAAc,cAA6C,MAAS;AAKnE,IAAM,eAGR,CAAC,EAAE,UAAU,MAAM,MAAM;AAC5B,SAAO,oBAAC,YAAY,UAAZ,EAAqB,OAAe,UAAS;AACvD;AAEO,IAAM,cAAc,MAAyB;AAClD,QAAM,UAAU,WAAW,WAAW;AACtC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,SAAO;AACT;","names":[]}