@ttt-productions/auth-core 0.3.4 → 0.4.1

package/dist/react/AuthProvider.d.ts

@@ -1,10 +1,10 @@
 import { type ReactNode } from "react";
-import type { AuthProviderConfig, AuthContextValue, BaseProfile } from "./types.js";
-export declare const AuthContext: import("react").Context<AuthContextValue<any, any> | null>;
-interface AuthProviderProps<TProfile extends BaseProfile, TClaims> {
-    config: AuthProviderConfig<TProfile, TClaims>;
+import type { AuthProviderConfig, AuthContextValue } from "./types.js";
+export declare const AuthContext: import("react").Context<AuthContextValue<any> | null>;
+interface AuthProviderProps<TClaims> {
+    config: AuthProviderConfig<TClaims>;
     children: ReactNode;
 }
-export declare function AuthProvider<TProfile extends BaseProfile = BaseProfile, TClaims = Record<string, unknown>>({ config, children }: AuthProviderProps<TProfile, TClaims>): import("react/jsx-runtime").JSX.Element;
+export declare function AuthProvider<TClaims = Record<string, unknown>>({ config, children }: AuthProviderProps<TClaims>): import("react/jsx-runtime").JSX.Element;
 export {};
 //# sourceMappingURL=AuthProvider.d.ts.map

package/dist/react/AuthProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthProvider.d.ts","sourceRoot":"","sources":["../../src/react/AuthProvider.tsx"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AAIf,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EAEZ,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,WAAW,4DAAyD,CAAC;AAElF,UAAU,iBAAiB,CACzB,QAAQ,SAAS,WAAW,EAC5B,OAAO;IAEP,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,wBAAgB,YAAY,CAC1B,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,2CA8M3D"}
+{"version":3,"file":"AuthProvider.d.ts","sourceRoot":"","sources":["../../src/react/AuthProvider.tsx"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AAGf,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGvE,eAAO,MAAM,WAAW,uDAAoD,CAAC;AAE7E,UAAU,iBAAiB,CAAC,OAAO;IACjC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACpC,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5D,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC,2CA6EjD"}

package/dist/react/AuthProvider.js

@@ -1,7 +1,6 @@
 "use client";
 import { jsx as _jsx } from "react/jsx-runtime";
 import { createContext, useEffect, useRef, useState, useCallback, useMemo, } from "react";
-import { doc, onSnapshot } from "firebase/firestore";
 import { useAuthState } from "./useAuthState.js";
 import { getIdTokenClaims } from "../claims.js";
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
@@ -10,13 +9,6 @@ export function AuthProvider({ config, children }) {
     const { user, loading: authLoading } = useAuthState(config.auth);
     const [claims, setClaims] = useState(config.defaultClaims);
     const [claimsLoading, setClaimsLoading] = useState(true);
-    const [userProfile, setUserProfile] = useState(null);
-    const [profileLoading, setProfileLoading] = useState(true);
-    const [profileError, setProfileError] = useState(null);
-    // Refs for cleanup
-    const profileUnsubRef = useRef(null);
-    const timeoutRef = useRef(null);
-    const prevUidRef = useRef(null);
     // Stable config ref so effects don't re-fire on config object identity changes
     const configRef = useRef(config);
     configRef.current = config;
@@ -27,10 +19,12 @@ export function AuthProvider({ config, children }) {
         if (!user) {
             setClaims(configRef.current.defaultClaims);
             setClaimsLoading(false);
+            configRef.current.onAuthStateChange?.(null);
             return;
         }
         let cancelled = false;
         setClaimsLoading(true);
+        configRef.current.onAuthStateChange?.(user);
         getIdTokenClaims(user)
             .then((raw) => {
             if (cancelled)
@@ -49,102 +43,6 @@ export function AuthProvider({ config, children }) {
         });
         return () => { cancelled = true; };
     }, [user, authLoading]);
-    // --- Profile listener ---
-    useEffect(() => {
-        if (authLoading)
-            return;
-        const uid = user?.uid ?? null;
-        const prevUid = prevUidRef.current;
-        prevUidRef.current = uid;
-        // Clean up previous listener + timeout if user changed
-        if (uid !== prevUid) {
-            if (profileUnsubRef.current) {
-                profileUnsubRef.current();
-                profileUnsubRef.current = null;
-            }
-            if (timeoutRef.current) {
-                clearTimeout(timeoutRef.current);
-                timeoutRef.current = null;
-            }
-        }
-        // User signed out
-        if (!uid) {
-            setUserProfile(null);
-            setProfileError(null);
-            setProfileLoading(false);
-            configRef.current.onAuthStateChange?.(null);
-            configRef.current.onProfileChange?.(null, null);
-            return;
-        }
-        // User signed in (or changed)
-        setProfileLoading(true);
-        setProfileError(null);
-        configRef.current.onAuthStateChange?.(user);
-        const timeout = (configRef.current.profileTimeout ?? 15) * 1000;
-        const [colPath, docId] = configRef.current.profilePath(uid);
-        const docRef = doc(configRef.current.db, colPath, docId);
-        // Start timeout timer
-        timeoutRef.current = setTimeout(() => {
-            // Only fire if we're still waiting (profileLoading is still true)
-            setProfileError({
-                code: "PROFILE_TIMEOUT",
-                message: `Profile document not found after ${configRef.current.profileTimeout ?? 15}s.`,
-                uid,
-            });
-            setProfileLoading(false);
-        }, timeout);
-        const unsub = onSnapshot(docRef, (snap) => {
-            // Clear timeout on any successful snapshot
-            if (timeoutRef.current) {
-                clearTimeout(timeoutRef.current);
-                timeoutRef.current = null;
-            }
-            if (snap.exists()) {
-                const data = snap.data();
-                const parsed = configRef.current.parseProfile
-                    ? configRef.current.parseProfile(data, uid)
-                    : { uid, ...data };
-                setUserProfile(parsed);
-                setProfileError(null);
-                setProfileLoading(false);
-                configRef.current.onProfileChange?.(parsed, user);
-            }
-            else {
-                // Doc doesn't exist yet — restart timeout if not already timed out
-                if (!timeoutRef.current) {
-                    timeoutRef.current = setTimeout(() => {
-                        setProfileError({
-                            code: "PROFILE_NOT_FOUND",
-                            message: "Profile document does not exist.",
-                            uid,
-                        });
-                        setProfileLoading(false);
-                    }, timeout);
-                }
-            }
-        }, (err) => {
-            if (timeoutRef.current) {
-                clearTimeout(timeoutRef.current);
-                timeoutRef.current = null;
-            }
-            configRef.current.onError?.(err, "profile onSnapshot");
-            setProfileError({
-                code: "PROFILE_LISTENER_ERROR",
-                message: err instanceof Error ? err.message : "Profile listener failed.",
-                uid,
-            });
-            setProfileLoading(false);
-        });
-        profileUnsubRef.current = unsub;
-        return () => {
-            unsub();
-            profileUnsubRef.current = null;
-            if (timeoutRef.current) {
-                clearTimeout(timeoutRef.current);
-                timeoutRef.current = null;
-            }
-        };
-    }, [user, authLoading]);
     // --- refreshClaims ---
     const refreshClaims = useCallback(async () => {
         if (!user)
@@ -158,29 +56,16 @@ export function AuthProvider({ config, children }) {
         }
     }, [user]);
     // --- Context value ---
-    const loading = authLoading || claimsLoading || profileLoading;
+    const loading = authLoading || claimsLoading;
     const value = useMemo(() => ({
         user,
-        userProfile,
         claims,
         loading,
         authLoading,
         claimsLoading,
-        profileLoading,
-        profileError,
         isAuthenticated: !!user,
         refreshClaims,
-    }), [
-        user,
-        userProfile,
-        claims,
-        loading,
-        authLoading,
-        claimsLoading,
-        profileLoading,
-        profileError,
-        refreshClaims,
-    ]);
+    }), [user, claims, loading, authLoading, claimsLoading, refreshClaims]);
     return (_jsx(AuthContext.Provider, { value: value, children: children }));
 }
 //# sourceMappingURL=AuthProvider.js.map

package/dist/react/AuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../../src/react/AuthProvider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EACL,aAAa,EACb,SAAS,EACT,MAAM,EACN,QAAQ,EACR,WAAW,EACX,OAAO,GAER,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAQhD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAoC,IAAI,CAAC,CAAC;AAUlF,MAAM,UAAU,YAAY,CAG1B,EAAE,MAAM,EAAE,QAAQ,EAAwC;IAC1D,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEjE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAU,MAAM,CAAC,aAAa,CAAC,CAAC;IACpE,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEzD,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAkB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAC;IAE5E,mBAAmB;IACnB,MAAM,eAAe,GAAG,MAAM,CAAsB,IAAI,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAuC,IAAI,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,MAAM,CAAgB,IAAI,CAAC,CAAC;IAE/C,+EAA+E;IAC/E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,OAAO,GAAG,MAAM,CAAC;IAE3B,0BAA0B;IAC1B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW;YAAE,OAAO;QAExB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC3C,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEvB,gBAAgB,CAAC,IAAI,CAAC;aACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACZ,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACrD,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,SAAS;gBAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEL,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAExB,2BAA2B;IAC3B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW;YAAE,OAAO;QAExB,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC;QAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC;QAEzB,uDAAuD;QACvD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC;gBAC5B,eAAe,CAAC,OAAO,EAAE,CAAC;gBAC1B,eAAe,CAAC,OAAO,GAAG,IAAI,CAAC;YACjC,CAAC;YACD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACjC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,cAAc,CAAC,IAAI,CAAC,CAAC;YACrB,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5C,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAChE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAEzD,sBAAsB;QACtB,UAAU,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,kEAAkE;YAClE,eAAe,CAAC;gBACd,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,oCAAoC,SAAS,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,IAAI;gBACvF,GAAG;aACJ,CAAC,CAAC;YACH,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,MAAM,KAAK,GAAG,UAAU,CACtB,MAAM,EACN,CAAC,IAAI,EAAE,EAAE;YACP,2CAA2C;YAC3C,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACjC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC5B,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAA6B,CAAC;gBACpD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY;oBAC3C,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC;oBAC3C,CAAC,CAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAA0B,CAAC;gBAE9C,cAAc,CAAC,MAAM,CAAC,CAAC;gBACvB,eAAe,CAAC,IAAI,CAAC,CAAC;gBACtB,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACzB,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACxB,UAAU,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;wBACnC,eAAe,CAAC;4BACd,IAAI,EAAE,mBAAmB;4BACzB,OAAO,EAAE,kCAAkC;4BAC3C,GAAG;yBACJ,CAAC,CAAC;wBACH,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBAC3B,CAAC,EAAE,OAAO,CAAC,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACjC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC5B,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACvD,eAAe,CAAC;gBACd,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B;gBACxE,GAAG;aACJ,CAAC,CAAC;YACH,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CACF,CAAC;QAEF,eAAe,CAAC,OAAO,GAAG,KAAK,CAAC;QAEhC,OAAO,GAAG,EAAE;YACV,KAAK,EAAE,CAAC;YACR,eAAe,CAAC,OAAO,GAAG,IAAI,CAAC;YAC/B,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACjC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAExB,wBAAwB;IACxB,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACjD,SAAS,CACP,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC,CAChF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,wBAAwB;IACxB,MAAM,OAAO,GAAG,WAAW,IAAI,aAAa,IAAI,cAAc,CAAC;IAE/D,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC;QACL,IAAI;QACJ,WAAW;QACX,MAAM;QACN,OAAO;QACP,WAAW;QACX,aAAa;QACb,cAAc;QACd,YAAY;QACZ,eAAe,EAAE,CAAC,CAAC,IAAI;QACvB,aAAa;KACd,CAAC,EACF;QACE,IAAI;QACJ,WAAW;QACX,MAAM;QACN,OAAO;QACP,WAAW;QACX,aAAa;QACb,cAAc;QACd,YAAY;QACZ,aAAa;KACd,CACF,CAAC;IAEF,OAAO,CACL,KAAC,WAAW,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAC/B,QAAQ,GACY,CACxB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../../src/react/AuthProvider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EACL,aAAa,EACb,SAAS,EACT,MAAM,EACN,QAAQ,EACR,WAAW,EACX,OAAO,GAER,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGhD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAA+B,IAAI,CAAC,CAAC;AAO7E,MAAM,UAAU,YAAY,CAC1B,EAAE,MAAM,EAAE,QAAQ,EAA8B;IAEhD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEjE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAU,MAAM,CAAC,aAAa,CAAC,CAAC;IACpE,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEzD,+EAA+E;IAC/E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,OAAO,GAAG,MAAM,CAAC;IAE3B,0BAA0B;IAC1B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW;YAAE,OAAO;QAExB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC3C,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC;QAE5C,gBAAgB,CAAC,IAAI,CAAC;aACnB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACZ,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACrD,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,SAAS;gBAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEL,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAExB,wBAAwB;IACxB,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACjD,SAAS,CACP,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC,CAChF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,wBAAwB;IACxB,MAAM,OAAO,GAAG,WAAW,IAAI,aAAa,CAAC;IAE7C,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC;QACL,IAAI;QACJ,MAAM;QACN,OAAO;QACP,WAAW;QACX,aAAa;QACb,eAAe,EAAE,CAAC,CAAC,IAAI;QACvB,aAAa;KACd,CAAC,EACF,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,CAAC,CACnE,CAAC;IAEF,OAAO,CACL,KAAC,WAAW,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAC/B,QAAQ,GACY,CACxB,CAAC;AACJ,CAAC"}

package/dist/react/index.d.ts

@@ -1,6 +1,6 @@
 export type { AuthState } from "./useAuthState.js";
 export { useAuthState } from "./useAuthState.js";
-export type { BaseProfile, AuthProviderConfig, AuthContextValue, ProfileError } from "./types.js";
+export type { AuthProviderConfig, AuthContextValue } from "./types.js";
 export { AuthProvider } from "./AuthProvider.js";
 export { AuthContext } from "./AuthProvider.js";
 export { useAuth } from "./useAuth.js";

package/dist/react/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAEA,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAClG,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAEA,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/react/types.d.ts

@@ -1,62 +1,28 @@
 import type { Auth, User } from "firebase/auth";
-import type { Firestore } from "firebase/firestore";
-/**
- * Base profile contract. Apps extend with their own fields.
- * auth-core uses these for monitoring integration and generic display.
- */
-export interface BaseProfile {
-    uid: string;
-    displayName: string;
-    photoURL?: string | null;
-    status?: string;
-}
-export interface AuthProviderConfig<TProfile extends BaseProfile = BaseProfile, TClaims = Record<string, unknown>> {
+export interface AuthProviderConfig<TClaims = Record<string, unknown>> {
     auth: Auth;
-    db: Firestore;
-    /** Firestore path segments for profile doc: (uid) => ['users', uid] */
-    profilePath: (uid: string) => [string, string];
-    /** Transform raw Firestore data into app profile type */
-    parseProfile?: (data: Record<string, unknown>, uid: string) => TProfile;
     /** Transform raw ID token claims into app claims shape */
     parseClaims: (raw: Record<string, unknown>) => TClaims;
     /** Default claims when no user or claims unavailable */
     defaultClaims: TClaims;
     /** Called on Firebase auth state change (for monitoring, analytics) */
     onAuthStateChange?: (user: User | null) => void;
-    /** Called when profile snapshot updates (for monitoring, RQ cache bridge) */
-    onProfileChange?: (profile: TProfile | null, user: User | null) => void;
     /** Called on errors (for Sentry) */
     onError?: (error: unknown, context: string) => void;
-    /**
-     * Max seconds to wait for profile doc after auth.
-     * If exceeded, profileError is set and loading becomes false.
-     * Default: 15
-     */
-    profileTimeout?: number;
 }
-export interface AuthContextValue<TProfile extends BaseProfile = BaseProfile, TClaims = Record<string, unknown>> {
+export interface AuthContextValue<TClaims = Record<string, unknown>> {
     /** Firebase User */
     user: User | null;
-    /** Firestore profile doc, parsed */
-    userProfile: TProfile | null;
     /** Parsed custom claims */
     claims: TClaims;
-    /** True until auth + claims + profile all resolved */
+    /** True until auth + claims resolved */
     loading: boolean;
     /** Individual loading states */
     authLoading: boolean;
     claimsLoading: boolean;
-    profileLoading: boolean;
-    /** Set when user is authenticated but profile doc not found within timeout */
-    profileError: ProfileError | null;
     /** Convenience: !!user */
     isAuthenticated: boolean;
     /** Force refresh claims from Firebase */
     refreshClaims: () => Promise<void>;
 }
-export type ProfileError = {
-    code: "PROFILE_NOT_FOUND" | "PROFILE_TIMEOUT" | "PROFILE_LISTENER_ERROR";
-    message: string;
-    uid: string;
-};
 //# sourceMappingURL=types.d.ts.map

package/dist/react/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/react/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB,CACjC,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAEjC,IAAI,EAAE,IAAI,CAAC;IACX,EAAE,EAAE,SAAS,CAAC;IAEd,uEAAuE;IACvE,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE/C,yDAAyD;IACzD,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC;IAExE,0DAA0D;IAC1D,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IAEvD,wDAAwD;IACxD,aAAa,EAAE,OAAO,CAAC;IAEvB,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC;IAEhD,6EAA6E;IAC7E,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC;IAExE,oCAAoC;IACpC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAEpD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB,CAC/B,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAEjC,oBAAoB;IACpB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAElB,oCAAoC;IACpC,WAAW,EAAE,QAAQ,GAAG,IAAI,CAAC;IAE7B,2BAA2B;IAC3B,MAAM,EAAE,OAAO,CAAC;IAEhB,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IAEjB,gCAAgC;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IAExB,8EAA8E;IAC9E,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAElC,0BAA0B;IAC1B,eAAe,EAAE,OAAO,CAAC;IAEzB,yCAAyC;IACzC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,mBAAmB,GAAG,iBAAiB,GAAG,wBAAwB,CAAC;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/react/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,WAAW,kBAAkB,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,IAAI,EAAE,IAAI,CAAC;IAEX,0DAA0D;IAC1D,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IAEvD,wDAAwD;IACxD,aAAa,EAAE,OAAO,CAAC;IAEvB,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC;IAEhD,oCAAoC;IACpC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACrD;AAED,MAAM,WAAW,gBAAgB,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjE,oBAAoB;IACpB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAElB,2BAA2B;IAC3B,MAAM,EAAE,OAAO,CAAC;IAEhB,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAC;IAEjB,gCAAgC;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IAEvB,0BAA0B;IAC1B,eAAe,EAAE,OAAO,CAAC;IAEzB,yCAAyC;IACzC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC"}

package/dist/react/useAuth.d.ts

@@ -1,7 +1,7 @@
-import type { BaseProfile, AuthContextValue } from "./types.js";
+import type { AuthContextValue } from "./types.js";
 /**
  * Access the auth context. Must be used within an AuthProvider.
- * Generic params let each app specify its own profile + claims types.
+ * Generic param lets each app specify its own claims type.
  */
-export declare function useAuth<TProfile extends BaseProfile = BaseProfile, TClaims = Record<string, unknown>>(): AuthContextValue<TProfile, TClaims>;
+export declare function useAuth<TClaims = Record<string, unknown>>(): AuthContextValue<TClaims>;
 //# sourceMappingURL=useAuth.d.ts.map

package/dist/react/useAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../src/react/useAuth.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,OAAO,CACrB,QAAQ,SAAS,WAAW,GAAG,WAAW,EAC1C,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9B,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAMvC"}
+{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../src/react/useAuth.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;GAGG;AACH,wBAAgB,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,gBAAgB,CAAC,OAAO,CAAC,CAMtF"}

package/dist/react/useAuth.js

@@ -3,7 +3,7 @@ import { useContext } from "react";
 import { AuthContext } from "./AuthProvider.js";
 /**
  * Access the auth context. Must be used within an AuthProvider.
- * Generic params let each app specify its own profile + claims types.
+ * Generic param lets each app specify its own claims type.
  */
 export function useAuth() {
     const ctx = useContext(AuthContext);

package/dist/react/useAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"useAuth.js","sourceRoot":"","sources":["../../src/react/useAuth.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD;;;GAGG;AACH,MAAM,UAAU,OAAO;IAIrB,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAA0C,CAAC;AACpD,CAAC"}
+{"version":3,"file":"useAuth.js","sourceRoot":"","sources":["../../src/react/useAuth.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD;;;GAGG;AACH,MAAM,UAAU,OAAO;IACrB,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAgC,CAAC;AAC1C,CAAC"}

package/dist/react/useAuthGuard.d.ts

@@ -22,8 +22,6 @@ export interface AuthGuardConfig {
     loading: boolean;
     /** From useAuth() */
     isAuthenticated: boolean;
-    /** From useAuth() — user has a profile doc */
-    hasProfile: boolean;
 }
 /**
  * Handles route protection. Call in app shell component.

package/dist/react/useAuthGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAuthGuard.d.ts","sourceRoot":"","sources":["../../src/react/useAuthGuard.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sEAAsE;IACtE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,YAAY,CAAC,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,mBAAmB;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,qBAAqB;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,8CAA8C;IAC9C,UAAU,EAAE,OAAO,CAAC;CACrB;AAID;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAoE1D"}
+{"version":3,"file":"useAuthGuard.d.ts","sourceRoot":"","sources":["../../src/react/useAuthGuard.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sEAAsE;IACtE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,YAAY,CAAC,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,mBAAmB;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,qBAAqB;IACrB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAID;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CA4D1D"}

package/dist/react/useAuthGuard.js

@@ -10,7 +10,7 @@ const DEFAULT_REDIRECT_KEY = "auth_redirect_path";
  * - Saves attempted path for post-login redirect.
  */
 export function useAuthGuard(config) {
-    const { publicRoutes, authRedirectRoutes, loginRoute, defaultRoute, rootRedirect, redirectKey = DEFAULT_REDIRECT_KEY, replace, pathname, loading, isAuthenticated, hasProfile, } = config;
+    const { publicRoutes, authRedirectRoutes, loginRoute, defaultRoute, rootRedirect, redirectKey = DEFAULT_REDIRECT_KEY, replace, pathname, loading, isAuthenticated, } = config;
     useEffect(() => {
         if (loading)
             return;
@@ -31,11 +31,6 @@ export function useAuthGuard(config) {
         }
         // Authenticated user on auth-only route (login, register, etc.)
         if (isAuthenticated && isAuthRedirect) {
-            // Still registering -- profile not created yet, stay on page
-            if (!hasProfile && typeof window !== "undefined" && localStorage.getItem("isRegistering") === "true") {
-                return;
-            }
-            // Redirect to saved path or default
             let target = defaultRoute;
             if (typeof window !== "undefined") {
                 const saved = localStorage.getItem(redirectKey);
@@ -49,7 +44,6 @@ export function useAuthGuard(config) {
     }, [
         loading,
         isAuthenticated,
-        hasProfile,
         pathname,
         publicRoutes,
         authRedirectRoutes,

package/dist/react/useAuthGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"useAuthGuard.js","sourceRoot":"","sources":["../../src/react/useAuthGuard.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AA2BlC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,MAAM,EACJ,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,GAAG,oBAAoB,EAClC,OAAO,EACP,QAAQ,EACR,OAAO,EACP,eAAe,EACf,UAAU,GACX,GAAG,MAAM,CAAC;IAEX,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO;YAAE,OAAO;QAEpB,6BAA6B;QAC7B,IAAI,YAAY,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GACZ,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,gEAAgE;QAChE,IAAI,eAAe,IAAI,cAAc,EAAE,CAAC;YACtC,6DAA6D;YAC7D,IAAI,CAAC,UAAU,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,MAAM,EAAE,CAAC;gBACrG,OAAO;YACT,CAAC;YAED,oCAAoC;YACpC,IAAI,MAAM,GAAG,YAAY,CAAC;YAC1B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAChD,IAAI,KAAK,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjD,MAAM,GAAG,KAAK,CAAC;gBACjB,CAAC;gBACD,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,EAAE;QACD,OAAO;QACP,eAAe;QACf,UAAU;QACV,QAAQ;QACR,YAAY;QACZ,kBAAkB;QAClB,UAAU;QACV,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"useAuthGuard.js","sourceRoot":"","sources":["../../src/react/useAuthGuard.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAyBlC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,MAAM,EACJ,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,GAAG,oBAAoB,EAClC,OAAO,EACP,QAAQ,EACR,OAAO,EACP,eAAe,GAChB,GAAG,MAAM,CAAC;IAEX,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO;YAAE,OAAO;QAEpB,6BAA6B;QAC7B,IAAI,YAAY,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GACZ,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,gEAAgE;QAChE,IAAI,eAAe,IAAI,cAAc,EAAE,CAAC;YACtC,IAAI,MAAM,GAAG,YAAY,CAAC;YAC1B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAChD,IAAI,KAAK,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjD,MAAM,GAAG,KAAK,CAAC;gBACjB,CAAC;gBACD,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,EAAE;QACD,OAAO;QACP,eAAe;QACf,QAAQ;QACR,YAAY;QACZ,kBAAkB;QAClB,UAAU;QACV,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/dist/server/assertAuth.d.ts

@@ -0,0 +1,3 @@
+import type { AssertAuthConfig, AssertAuthFn } from "./types.js";
+export declare function createAssertAuth<TUser, TProject>(config: AssertAuthConfig<TUser, TProject>): AssertAuthFn<TUser, TProject>;
+//# sourceMappingURL=assertAuth.d.ts.map

package/dist/server/assertAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertAuth.d.ts","sourceRoot":"","sources":["../../src/server/assertAuth.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EAGb,MAAM,YAAY,CAAC;AAEpB,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAC9C,MAAM,EAAE,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,GACxC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAwH/B"}

package/dist/server/assertAuth.js

@@ -0,0 +1,108 @@
+// packages/auth-core/src/server/assertAuth.ts
+//
+// Factory that produces an assertAuth function bound to a consuming app's
+// Firestore paths, user/project shapes, and admin check.
+//
+// Every Cloud Functions callable in the consuming app should invoke the
+// returned assertAuth as its first executable line. The check order is:
+//   1. Authentication
+//   2. Email verification
+//   3. Parallel Firestore reads (user doc + project doc, as needed)
+//   4. Status check (banned / disabled)
+//   5. Creator check
+//   6. Project membership check
+//   7. Admin check (delegated to config.requireAdmin)
+import { HttpsError } from "firebase-functions/v2/https";
+export function createAssertAuth(config) {
+    return async function assertAuth(request, requirements = {}) {
+        // 1. Authentication check (always first)
+        if (!request.auth) {
+            throw new HttpsError("unauthenticated", "You must be authenticated");
+        }
+        const uid = request.auth.uid;
+        const token = request.auth.token;
+        // 2. Email verification check
+        if (requirements.emailVerified === true &&
+            requirements.allowUnverified !== true) {
+            if (token.email_verified !== true) {
+                throw new HttpsError("failed-precondition", "Email must be verified");
+            }
+        }
+        // 3. Determine which Firestore reads are needed
+        const needsUserDoc = requirements.creator === true || requirements.allowAnyStatus !== true;
+        const needsProject = requirements.projectMembership !== undefined;
+        const db = config.firestore();
+        const [userSnap, projectSnap] = await Promise.all([
+            needsUserDoc
+                ? db.doc(config.userProfilePath(uid)).get()
+                : Promise.resolve(null),
+            needsProject
+                ? db.doc(config.projectPath(requirements.projectMembership.projectId)).get()
+                : Promise.resolve(null),
+        ]);
+        let userDoc;
+        // 4. Status check (default: block banned + disabled; skipped if allowAnyStatus)
+        if (requirements.allowAnyStatus !== true) {
+            if (!userSnap || !userSnap.exists) {
+                throw new HttpsError("not-found", "User profile not found");
+            }
+            const userData = userSnap.data();
+            const status = config.getUserStatus(userData);
+            if (status === "disabled") {
+                throw new HttpsError("permission-denied", "Account is not in good standing");
+            }
+            if (status === "banned" && requirements.allowBanned !== true) {
+                throw new HttpsError("permission-denied", "Account is not in good standing");
+            }
+            userDoc = userData;
+        }
+        // 5. Creator check
+        if (requirements.creator === true) {
+            if (!userDoc) {
+                // allowAnyStatus is true — user doc was still fetched, validate now
+                if (!userSnap || !userSnap.exists) {
+                    throw new HttpsError("not-found", "User profile not found");
+                }
+                userDoc = userSnap.data();
+            }
+            if (!config.isUserCreator(userDoc)) {
+                throw new HttpsError("failed-precondition", "Creator status required");
+            }
+        }
+        // 6. Project membership check
+        let projectContext;
+        if (requirements.projectMembership !== undefined) {
+            if (!projectSnap || !projectSnap.exists) {
+                throw new HttpsError("not-found", "Project not found");
+            }
+            const projectData = projectSnap.data();
+            const isOwner = config.isProjectOwner(projectData, uid);
+            const isMember = isOwner || config.isProjectMember(projectData, uid);
+            if (requirements.projectMembership.role === "owner") {
+                if (!isOwner) {
+                    throw new HttpsError("permission-denied", "Project owner access required");
+                }
+            }
+            else {
+                if (!isMember) {
+                    throw new HttpsError("permission-denied", "Not a member of this project");
+                }
+            }
+            projectContext = { data: projectData, isOwner, isMember };
+        }
+        // 7. Admin check (delegates to config.requireAdmin)
+        if (requirements.admin !== undefined) {
+            await config.requireAdmin(uid, token, requirements.admin);
+        }
+        // 8. Return context with whatever docs were fetched
+        const ctx = { uid, token };
+        if (userDoc !== undefined) {
+            ctx.userDoc = userDoc;
+        }
+        if (projectContext !== undefined) {
+            ctx.project = projectContext;
+        }
+        return ctx;
+    };
+}
+//# sourceMappingURL=assertAuth.js.map

package/dist/server/assertAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertAuth.js","sourceRoot":"","sources":["../../src/server/assertAuth.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,yDAAyD;AACzD,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,sBAAsB;AACtB,0BAA0B;AAC1B,oEAAoE;AACpE,wCAAwC;AACxC,qBAAqB;AACrB,gCAAgC;AAChC,sDAAsD;AAEtD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AASzD,MAAM,UAAU,gBAAgB,CAC9B,MAAyC;IAEzC,OAAO,KAAK,UAAU,UAAU,CAC9B,OAAwB,EACxB,eAAiC,EAAE;QAEnC,yCAAyC;QACzC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAEjC,8BAA8B;QAC9B,IACE,YAAY,CAAC,aAAa,KAAK,IAAI;YACnC,YAAY,CAAC,eAAe,KAAK,IAAI,EACrC,CAAC;YACD,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;gBAClC,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,MAAM,YAAY,GAChB,YAAY,CAAC,OAAO,KAAK,IAAI,IAAI,YAAY,CAAC,cAAc,KAAK,IAAI,CAAC;QACxE,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,KAAK,SAAS,CAAC;QAElE,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,YAAY;gBACV,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;gBAC3C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YACzB,YAAY;gBACV,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,iBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE;gBAC7E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;SAC1B,CAAC,CAAC;QAEH,IAAI,OAA0B,CAAC;QAE/B,gFAAgF;QAChF,IAAI,YAAY,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAW,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1B,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,iCAAiC,CAClC,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC7D,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,iCAAiC,CAClC,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,QAAQ,CAAC;QACrB,CAAC;QAED,mBAAmB;QACnB,IAAI,YAAY,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,oEAAoE;gBACpE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAClC,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAW,CAAC;YACrC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,cAAuD,CAAC;QAC5D,IAAI,YAAY,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACjD,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBACxC,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,EAAc,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,OAAO,IAAI,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAErE,IAAI,YAAY,CAAC,iBAAiB,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACpD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,+BAA+B,CAChC,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,8BAA8B,CAC/B,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,cAAc,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC5D,CAAC;QAED,oDAAoD;QACpD,IAAI,YAAY,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,oDAAoD;QACpD,MAAM,GAAG,GAAiC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACxB,CAAC;QACD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,GAAG,CAAC,OAAO,GAAG,cAAc,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/assertAuth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=assertAuth.test.d.ts.map

package/dist/server/assertAuth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertAuth.test.d.ts","sourceRoot":"","sources":["../../src/server/assertAuth.test.ts"],"names":[],"mappings":""}

package/dist/server/assertAuth.test.js

@@ -0,0 +1,407 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+vi.mock("firebase-functions/v2/https", () => {
+    class HttpsError extends Error {
+        code;
+        constructor(code, message) {
+            super(message);
+            this.code = code;
+            this.name = "HttpsError";
+        }
+    }
+    return { HttpsError };
+});
+import { createAssertAuth } from "./assertAuth.js";
+function makeRequest(opts) {
+    const uid = opts?.uid ?? "uid-123";
+    return {
+        data: {},
+        rawRequest: {},
+        auth: {
+            uid,
+            token: { uid, email_verified: opts?.emailVerified ?? true },
+        },
+    };
+}
+function makeUnauthRequest() {
+    return { data: {}, rawRequest: {}, auth: undefined };
+}
+const activeUserDoc = {
+    uid: "uid-123",
+    displayName: "Test User",
+    status: "active",
+};
+const creatorUserDoc = {
+    ...activeUserDoc,
+    creator: "creator-12345",
+};
+function memberProjectDoc(callerUid) {
+    return {
+        projectId: "p1",
+        ownedBy: { uid: "owner-uid" },
+        activeUserIds: { [callerUid]: true },
+        activeUsers: [],
+    };
+}
+// --- harness ---------------------------------------------------------------
+let mockUserGet;
+let mockProjectGet;
+let mockRequireAdmin;
+let mockDbDoc;
+let assertAuth;
+beforeEach(() => {
+    mockUserGet = vi.fn().mockResolvedValue({ exists: true, data: () => activeUserDoc });
+    mockProjectGet = vi.fn().mockResolvedValue({
+        exists: true,
+        data: () => memberProjectDoc("uid-123"),
+    });
+    mockRequireAdmin = vi.fn().mockResolvedValue(undefined);
+    const userDocRef = { get: mockUserGet };
+    const projectDocRef = { get: mockProjectGet };
+    mockDbDoc = vi.fn((path) => {
+        if (path.startsWith("allProjects/"))
+            return projectDocRef;
+        return userDocRef;
+    });
+    const fakeDb = { doc: mockDbDoc };
+    const config = {
+        firestore: () => fakeDb,
+        userProfilePath: (uid) => `userProfiles/${uid}`,
+        projectPath: (projectId) => `allProjects/${projectId}`,
+        getUserStatus: (user) => {
+            if (user.status === "disabled")
+                return "disabled";
+            if (user.status === "banned")
+                return "banned";
+            return "ok";
+        },
+        isUserCreator: (user) => Boolean(user.creator),
+        isProjectOwner: (project, uid) => project.ownedBy?.uid === uid,
+        isProjectMember: (project, uid) => project.ownedBy?.uid === uid ||
+            project.activeUserIds?.[uid] === true ||
+            (project.activeUsers || []).some((u) => u.uid === uid),
+        requireAdmin: mockRequireAdmin,
+    };
+    assertAuth = createAssertAuth(config);
+});
+// --- tests -----------------------------------------------------------------
+describe("Authentication", () => {
+    it("throws unauthenticated when request.auth is absent", async () => {
+        await expect(assertAuth(makeUnauthRequest())).rejects.toMatchObject({
+            code: "unauthenticated",
+        });
+    });
+    it("succeeds with no Firestore reads when only allowAnyStatus is set", async () => {
+        const ctx = await assertAuth(makeRequest(), { allowAnyStatus: true });
+        expect(ctx.uid).toBe("uid-123");
+        expect(ctx.userDoc).toBeUndefined();
+        expect(ctx.project).toBeUndefined();
+        expect(mockDbDoc).not.toHaveBeenCalled();
+    });
+});
+describe("Email verification", () => {
+    it("throws failed-precondition when emailVerified required and token email_verified is false", async () => {
+        await expect(assertAuth(makeRequest({ emailVerified: false }), {
+            emailVerified: true,
+            allowAnyStatus: true,
+        })).rejects.toMatchObject({ code: "failed-precondition" });
+    });
+    it("succeeds when emailVerified required and token email_verified is true", async () => {
+        await expect(assertAuth(makeRequest({ emailVerified: true }), {
+            emailVerified: true,
+            allowAnyStatus: true,
+        })).resolves.toMatchObject({ uid: "uid-123" });
+    });
+    it("succeeds when allowUnverified is true even if email_verified is false", async () => {
+        await expect(assertAuth(makeRequest({ emailVerified: false }), {
+            emailVerified: true,
+            allowUnverified: true,
+            allowAnyStatus: true,
+        })).resolves.toMatchObject({ uid: "uid-123" });
+    });
+});
+describe("Not-banned check (default behavior)", () => {
+    it("throws permission-denied when user status is banned", async () => {
+        mockUserGet.mockResolvedValue({
+            exists: true,
+            data: () => ({ ...activeUserDoc, status: "banned" }),
+        });
+        await expect(assertAuth(makeRequest())).rejects.toMatchObject({
+            code: "permission-denied",
+        });
+    });
+    it("throws permission-denied when user status is disabled", async () => {
+        mockUserGet.mockResolvedValue({
+            exists: true,
+            data: () => ({ ...activeUserDoc, status: "disabled" }),
+        });
+        await expect(assertAuth(makeRequest())).rejects.toMatchObject({
+            code: "permission-denied",
+        });
+    });
+    it("throws not-found when user doc does not exist", async () => {
+        mockUserGet.mockResolvedValue({ exists: false, data: () => null });
+        await expect(assertAuth(makeRequest())).rejects.toMatchObject({
+            code: "not-found",
+        });
+    });
+    it("succeeds when user doc has no status field", async () => {
+        mockUserGet.mockResolvedValue({
+            exists: true,
+            data: () => ({ uid: "uid-123", displayName: "Test" }),
+        });
+        const ctx = await assertAuth(makeRequest());
+        expect(ctx.uid).toBe("uid-123");
+        expect(ctx.userDoc).toBeDefined();
+    });
+    it("succeeds when user status is active", async () => {
+        const ctx = await assertAuth(makeRequest());
+        expect(ctx.uid).toBe("uid-123");
+        expect(ctx.userDoc).toMatchObject({ status: "active" });
+    });
+    it("skips user doc read entirely when allowAnyStatus is true", async () => {
+        await assertAuth(makeRequest(), { allowAnyStatus: true });
+        expect(mockUserGet).not.toHaveBeenCalled();
+    });
+});
+describe("allowBanned opt-in", () => {
+    it("allows a banned user when allowBanned is true", async () => {
+        mockUserGet.mockResolvedValue({
+            exists: true,
+            data: () => ({ ...activeUserDoc, status: "banned" }),
+        });
+        const ctx = await assertAuth(makeRequest(), { allowBanned: true });
+        expect(ctx.uid).toBe("uid-123");
+        expect(ctx.userDoc).toMatchObject({ status: "banned" });
+    });
+    it("still blocks a disabled user even when allowBanned is true", async () => {
+        mockUserGet.mockResolvedValue({
+            exists: true,
+            data: () => ({ ...activeUserDoc, status: "disabled" }),
+        });
+        await expect(assertAuth(makeRequest(), { allowBanned: true })).rejects.toMatchObject({ code: "permission-denied" });
+    });
+    it("still requires the user doc to exist when allowBanned is true", async () => {
+        mockUserGet.mockResolvedValue({ exists: false, data: () => null });
+        await expect(assertAuth(makeRequest(), { allowBanned: true })).rejects.toMatchObject({ code: "not-found" });
+    });
+});
+describe("Creator check", () => {
+    it("throws failed-precondition when user has no creator field", async () => {
+        mockUserGet.mockResolvedValue({
+            exists: true,
+            data: () => ({ ...activeUserDoc }),
+        });
+        await expect(assertAuth(makeRequest(), { creator: true, allowAnyStatus: true })).rejects.toMatchObject({ code: "failed-precondition" });
+    });
+    it("succeeds when user has a truthy creator string", async () => {
+        mockUserGet.mockResolvedValue({
+            exists: true,
+            data: () => creatorUserDoc,
+        });
+        const ctx = await assertAuth(makeRequest(), {
+            creator: true,
+            allowAnyStatus: true,
+        });
+        expect(ctx.userDoc).toMatchObject({ creator: "creator-12345" });
+    });
+    it("throws not-found when user doc is missing and creator check runs", async () => {
+        mockUserGet.mockResolvedValue({ exists: false, data: () => null });
+        await expect(assertAuth(makeRequest(), { creator: true, allowAnyStatus: true })).rejects.toMatchObject({ code: "not-found" });
+    });
+    it("throws permission-denied (not failed-precondition) when user is banned and creator=true", async () => {
+        mockUserGet.mockResolvedValue({
+            exists: true,
+            data: () => ({ ...creatorUserDoc, status: "banned" }),
+        });
+        // banned check in step 4 fires before creator check in step 5
+        await expect(assertAuth(makeRequest(), { creator: true })).rejects.toMatchObject({ code: "permission-denied" });
+    });
+});
+describe("Project membership", () => {
+    it("throws not-found when project doc does not exist", async () => {
+        mockProjectGet.mockResolvedValue({ exists: false, data: () => null });
+        await expect(assertAuth(makeRequest(), {
+            projectMembership: { projectId: "p1" },
+            allowAnyStatus: true,
+        })).rejects.toMatchObject({ code: "not-found" });
+    });
+    it("throws permission-denied when caller is not in any membership field", async () => {
+        mockProjectGet.mockResolvedValue({
+            exists: true,
+            data: () => ({
+                projectId: "p1",
+                ownedBy: { uid: "other-uid" },
+                activeUserIds: { "another-uid": true },
+                activeUsers: [{ uid: "yet-another-uid" }],
+            }),
+        });
+        await expect(assertAuth(makeRequest(), {
+            projectMembership: { projectId: "p1" },
+            allowAnyStatus: true,
+        })).rejects.toMatchObject({ code: "permission-denied" });
+    });
+    it("succeeds and sets isMember=true, isOwner=false when caller is in activeUserIds", async () => {
+        mockProjectGet.mockResolvedValue({
+            exists: true,
+            data: () => ({
+                projectId: "p1",
+                ownedBy: { uid: "owner-uid" },
+                activeUserIds: { "uid-123": true },
+                activeUsers: [],
+            }),
+        });
+        const ctx = await assertAuth(makeRequest(), {
+            projectMembership: { projectId: "p1" },
+            allowAnyStatus: true,
+        });
+        expect(ctx.project?.isMember).toBe(true);
+        expect(ctx.project?.isOwner).toBe(false);
+    });
+    it("succeeds when caller is in activeUsers array but not in activeUserIds", async () => {
+        mockProjectGet.mockResolvedValue({
+            exists: true,
+            data: () => ({
+                projectId: "p1",
+                ownedBy: { uid: "owner-uid" },
+                activeUserIds: {},
+                activeUsers: [{ uid: "uid-123" }],
+            }),
+        });
+        const ctx = await assertAuth(makeRequest(), {
+            projectMembership: { projectId: "p1" },
+            allowAnyStatus: true,
+        });
+        expect(ctx.project?.isMember).toBe(true);
+        expect(ctx.project?.isOwner).toBe(false);
+    });
+    it("succeeds and sets isOwner=true, isMember=true when caller is ownedBy.uid", async () => {
+        mockProjectGet.mockResolvedValue({
+            exists: true,
+            data: () => ({
+                projectId: "p1",
+                ownedBy: { uid: "uid-123" },
+                activeUserIds: {},
+                activeUsers: [],
+            }),
+        });
+        const ctx = await assertAuth(makeRequest(), {
+            projectMembership: { projectId: "p1" },
+            allowAnyStatus: true,
+        });
+        expect(ctx.project?.isOwner).toBe(true);
+        expect(ctx.project?.isMember).toBe(true);
+    });
+    it("throws permission-denied when role is owner but caller is only a member", async () => {
+        mockProjectGet.mockResolvedValue({
+            exists: true,
+            data: () => ({
+                projectId: "p1",
+                ownedBy: { uid: "owner-uid" },
+                activeUserIds: { "uid-123": true },
+                activeUsers: [],
+            }),
+        });
+        await expect(assertAuth(makeRequest(), {
+            projectMembership: { projectId: "p1", role: "owner" },
+            allowAnyStatus: true,
+        })).rejects.toMatchObject({ code: "permission-denied" });
+    });
+    it("succeeds when role is owner and caller is the owner", async () => {
+        mockProjectGet.mockResolvedValue({
+            exists: true,
+            data: () => ({
+                projectId: "p1",
+                ownedBy: { uid: "uid-123" },
+                activeUserIds: {},
+                activeUsers: [],
+            }),
+        });
+        const ctx = await assertAuth(makeRequest(), {
+            projectMembership: { projectId: "p1", role: "owner" },
+            allowAnyStatus: true,
+        });
+        expect(ctx.project?.isOwner).toBe(true);
+    });
+});
+describe("Admin check", () => {
+    it("propagates the error when requireAdmin throws", async () => {
+        mockRequireAdmin.mockRejectedValue(Object.assign(new Error("Administrator access required"), {
+            code: "permission-denied",
+        }));
+        await expect(assertAuth(makeRequest(), {
+            admin: { allowJrAdmin: false },
+            allowAnyStatus: true,
+        })).rejects.toMatchObject({ code: "permission-denied" });
+    });
+    it("succeeds and returns ctx when requireAdmin resolves", async () => {
+        mockRequireAdmin.mockResolvedValue(undefined);
+        const ctx = await assertAuth(makeRequest(), {
+            admin: { allowJrAdmin: true },
+            allowAnyStatus: true,
+        });
+        expect(ctx.uid).toBe("uid-123");
+        expect(mockRequireAdmin).toHaveBeenCalledWith("uid-123", expect.any(Object), { allowJrAdmin: true });
+    });
+});
+describe("Combined checks", () => {
+    it("fails on email check first when emailVerified and creator are both required but email is unverified", async () => {
+        await expect(assertAuth(makeRequest({ emailVerified: false }), {
+            emailVerified: true,
+            creator: true,
+        })).rejects.toMatchObject({
+            code: "failed-precondition",
+            message: expect.stringContaining("Email"),
+        });
+    });
+    it("fails with creator error when email is verified but user lacks creator status", async () => {
+        mockUserGet.mockResolvedValue({ exists: true, data: () => activeUserDoc });
+        await expect(assertAuth(makeRequest({ emailVerified: true }), {
+            emailVerified: true,
+            creator: true,
+        })).rejects.toMatchObject({
+            code: "failed-precondition",
+            message: expect.stringContaining("Creator"),
+        });
+    });
+    it("returns fully populated ctx when all checks pass", async () => {
+        mockUserGet.mockResolvedValue({ exists: true, data: () => creatorUserDoc });
+        mockProjectGet.mockResolvedValue({
+            exists: true,
+            data: () => ({
+                projectId: "p1",
+                ownedBy: { uid: "uid-123" },
+                activeUserIds: {},
+                activeUsers: [],
+            }),
+        });
+        mockRequireAdmin.mockResolvedValue(undefined);
+        const ctx = await assertAuth(makeRequest({ emailVerified: true }), {
+            emailVerified: true,
+            creator: true,
+            projectMembership: { projectId: "p1" },
+            admin: { allowJrAdmin: true },
+        });
+        expect(ctx.uid).toBe("uid-123");
+        expect(ctx.userDoc).toMatchObject({ creator: "creator-12345" });
+        expect(ctx.project?.isOwner).toBe(true);
+        expect(ctx.project?.isMember).toBe(true);
+        expect(mockRequireAdmin).toHaveBeenCalled();
+    });
+});
+describe("Parallelization", () => {
+    it("calls both user-doc and project-doc get() when both are needed", async () => {
+        mockUserGet.mockResolvedValue({ exists: true, data: () => creatorUserDoc });
+        mockProjectGet.mockResolvedValue({
+            exists: true,
+            data: () => memberProjectDoc("uid-123"),
+        });
+        await assertAuth(makeRequest(), {
+            creator: true,
+            projectMembership: { projectId: "p1" },
+            allowAnyStatus: true,
+        });
+        expect(mockUserGet).toHaveBeenCalledOnce();
+        expect(mockProjectGet).toHaveBeenCalledOnce();
+    });
+});
+//# sourceMappingURL=assertAuth.test.js.map

package/dist/server/assertAuth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertAuth.test.js","sourceRoot":"","sources":["../../src/server/assertAuth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC1C,MAAM,UAAW,SAAQ,KAAK;QAC5B,IAAI,CAAS;QACb,YAAY,IAAY,EAAE,OAAe;YACvC,KAAK,CAAC,OAAO,CAAC,CAAC;YACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QAC3B,CAAC;KACF;IACD,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAiBnD,SAAS,WAAW,CAAC,IAAgD;IACnE,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,SAAS,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,EAAE;QACd,IAAI,EAAE;YACJ,GAAG;YACH,KAAK,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,IAAI,IAAI,EAAE;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,aAAa,GAAa;IAC9B,GAAG,EAAE,SAAS;IACd,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,MAAM,cAAc,GAAa;IAC/B,GAAG,aAAa;IAChB,OAAO,EAAE,eAAe;CACzB,CAAC;AAEF,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO;QACL,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;QAC7B,aAAa,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE;QACpC,WAAW,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,IAAI,WAAqC,CAAC;AAC1C,IAAI,cAAwC,CAAC;AAC7C,IAAI,gBAA0C,CAAC;AAC/C,IAAI,SAAmC,CAAC;AACxC,IAAI,UAAsE,CAAC;AAE3E,UAAU,CAAC,GAAG,EAAE;IACd,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;IACrF,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;QACzC,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC;KACxC,CAAC,CAAC;IACH,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;IAE9C,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;QACjC,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,OAAO,aAAa,CAAC;QAC1D,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,SAAS,EAAS,CAAC;IAEzC,MAAM,MAAM,GAA4C;QACtD,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM;QACvB,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,GAAG,EAAE;QAC/C,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,SAAS,EAAE;QACtD,aAAa,EAAE,CAAC,IAAI,EAAc,EAAE;YAClC,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,UAAU,CAAC;YAClD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,cAAc,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,KAAK,GAAG;QAC9D,eAAe,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAChC,OAAO,CAAC,OAAO,EAAE,GAAG,KAAK,GAAG;YAC5B,OAAO,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI;YACrC,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;QACxD,YAAY,EAAE,gBAAuB;KACtC,CAAC;IAEF,UAAU,GAAG,gBAAgB,CAAwB,MAAM,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAClE,IAAI,EAAE,iBAAiB;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;YAChD,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;YAC/C,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;YAChD,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,WAAW,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC5D,IAAI,EAAE,mBAAmB;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,WAAW,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;SACvD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC5D,IAAI,EAAE,mBAAmB;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,WAAW,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC5D,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,WAAW,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,WAAW,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,WAAW,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;SACvD,CAAC,CAAC;QACH,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACjD,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,WAAW,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACjD,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,WAAW,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,CAAC;SACnC,CAAC,CAAC;QACH,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CACnE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,WAAW,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,cAAc;SAC3B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE;YAC1C,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,WAAW,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CACnE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,WAAW,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,8DAA8D;QAC9D,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAC7C,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,cAAc,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,EAAE,EAAE;YACxB,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YACtC,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,cAAc,CAAC,iBAAiB,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACX,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;gBAC7B,aAAa,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;gBACtC,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;aAC1C,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,EAAE,EAAE;YACxB,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YACtC,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,cAAc,CAAC,iBAAiB,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACX,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;gBAC7B,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;gBAClC,WAAW,EAAE,EAAE;aAChB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE;YAC1C,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YACtC,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,cAAc,CAAC,iBAAiB,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACX,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;gBAC7B,aAAa,EAAE,EAAE;gBACjB,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;aAClC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE;YAC1C,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YACtC,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,cAAc,CAAC,iBAAiB,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACX,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE;gBAC3B,aAAa,EAAE,EAAE;gBACjB,WAAW,EAAE,EAAE;aAChB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE;YAC1C,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YACtC,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,cAAc,CAAC,iBAAiB,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACX,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;gBAC7B,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;gBAClC,WAAW,EAAE,EAAE;aAChB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,EAAE,EAAE;YACxB,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;YACrD,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,cAAc,CAAC,iBAAiB,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACX,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE;gBAC3B,aAAa,EAAE,EAAE;gBACjB,WAAW,EAAE,EAAE;aAChB,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE;YAC1C,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;YACrD,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,gBAAgB,CAAC,iBAAiB,CAChC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,EAAE;YACxD,IAAI,EAAE,mBAAmB;SAC1B,CAAC,CACH,CAAC;QACF,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,EAAE,EAAE;YACxB,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;YAC9B,cAAc,EAAE,IAAI;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE;YAC1C,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;YAC7B,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAC3C,SAAS,EACT,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAClB,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,qGAAqG,EAAE,KAAK,IAAI,EAAE;QACnH,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;YAChD,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;SACd,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,WAAW,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QAC3E,MAAM,MAAM,CACV,UAAU,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;YAC/C,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;SACd,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,WAAW,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;QAC5E,cAAc,CAAC,iBAAiB,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACX,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE;gBAC3B,aAAa,EAAE,EAAE;gBACjB,WAAW,EAAE,EAAE;aAChB,CAAC;SACH,CAAC,CAAC;QACH,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE9C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;YACjE,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YACtC,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;SAC9B,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,WAAW,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;QAC5E,cAAc,CAAC,iBAAiB,CAAC;YAC/B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC;SACxC,CAAC,CAAC;QAEH,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE;YAC9B,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;YACtC,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC3C,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,3 @@
+export { createAssertAuth } from "./assertAuth.js";
+export type { AssertAuthConfig, AssertAuthFn, AuthContext, AuthRequirements, AdminCheckOptions, UserStatus, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,GACX,MAAM,YAAY,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,5 @@
+// packages/auth-core/src/server/index.ts
+//
+// Public surface of @ttt-productions/auth-core/server.
+export { createAssertAuth } from "./assertAuth.js";
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,uDAAuD;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/server/types.d.ts

@@ -0,0 +1,141 @@
+import type { CallableRequest } from "firebase-functions/v2/https";
+import type { DecodedIdToken } from "firebase-admin/auth";
+import type { Firestore } from "firebase-admin/firestore";
+/**
+ * Per-callable requirements passed at every assertAuth call site.
+ * These are application-agnostic.
+ */
+export interface AuthRequirements {
+    /**
+     * Allow unverified email. Default: false.
+     * If true, the emailVerified check is skipped entirely.
+     * Special-case for system flows (e.g. user registration).
+     */
+    allowUnverified?: boolean;
+    /**
+     * Require email_verified=true on the auth token.
+     * Default: false. Skipped when allowUnverified=true.
+     */
+    emailVerified?: boolean;
+    /**
+     * Require the user has creator status (config.isUserCreator(user) returns true).
+     * Default: false. Implies a Firestore read of the user doc.
+     */
+    creator?: boolean;
+    /**
+     * Require user status is not 'banned' or 'disabled'.
+     * Default: true (always enforced unless allowAnyStatus=true).
+     */
+    notBanned?: boolean;
+    /**
+     * Skip the not-banned check entirely. Special-case for flows where the
+     * user doc may not exist yet (e.g. user registration).
+     * Default: false.
+     */
+    allowAnyStatus?: boolean;
+    /**
+     * Allow banned users to pass the status check. Disabled users still fail.
+     * Use ONLY for callables that are a banned user's last recourse
+     * (e.g. admin-support chat).
+     * Default: false. Does NOT skip the existence check.
+     */
+    allowBanned?: boolean;
+    /**
+     * Require the caller is a member (or owner) of a given project.
+     * Reads the project doc via config.projectPath(projectId).
+     */
+    projectMembership?: {
+        projectId: string;
+        role?: "member" | "owner";
+    };
+    /**
+     * Require admin status. Delegates to config.requireAdmin().
+     * The shape of this object is forwarded verbatim to the consumer's
+     * requireAdmin callback — the package does not interpret it.
+     */
+    admin?: AdminCheckOptions;
+}
+/**
+ * Options forwarded to the consumer's requireAdmin callback. Generic shape.
+ * Consuming apps may add their own fields; the package does not validate.
+ */
+export interface AdminCheckOptions {
+    allowJrAdmin?: boolean;
+    useFastCheck?: boolean;
+    errorMessage?: string;
+    [key: string]: unknown;
+}
+/**
+ * Return value from assertAuth. Generic over the consuming app's user and
+ * project document types.
+ */
+export interface AuthContext<TUser = unknown, TProject = unknown> {
+    uid: string;
+    token: DecodedIdToken;
+    /** Populated when the user doc was read (creator OR default not-banned check). */
+    userDoc?: TUser;
+    /** Populated when projectMembership was checked. */
+    project?: {
+        data: TProject;
+        isOwner: boolean;
+        isMember: boolean;
+    };
+}
+/**
+ * Status the consuming app reports for a user doc. The package only
+ * interprets these three values.
+ */
+export type UserStatus = "ok" | "banned" | "disabled";
+/**
+ * Configuration for createAssertAuth. The consuming app supplies every
+ * TTT-specific (or Q-Sports-specific) operation as a callback.
+ */
+export interface AssertAuthConfig<TUser, TProject> {
+    /**
+     * Returns the admin Firestore instance. Called every assertAuth invocation
+     * that needs a Firestore read. Implementations typically return
+     * `admin.firestore()` from a memoized handle.
+     */
+    firestore: () => Firestore;
+    /**
+     * Returns the Firestore document path for a user profile, given a uid.
+     * Example (TTT): `userProfiles/${uid}`
+     */
+    userProfilePath: (uid: string) => string;
+    /**
+     * Returns the Firestore document path for a project, given a projectId.
+     * Example (TTT): `allProjects/${projectId}`
+     */
+    projectPath: (projectId: string) => string;
+    /**
+     * Returns the user's status given the user doc data. The package only
+     * acts on 'ok' | 'banned' | 'disabled'. Apps may store status in any
+     * field; this callback interprets it.
+     */
+    getUserStatus: (user: TUser) => UserStatus;
+    /**
+     * Returns true if the user is a creator. Called only when
+     * AuthRequirements.creator === true.
+     */
+    isUserCreator: (user: TUser) => boolean;
+    /**
+     * Returns true if the given uid is the owner of the project.
+     */
+    isProjectOwner: (project: TProject, uid: string) => boolean;
+    /**
+     * Returns true if the given uid is a member of the project. Owners are
+     * typically also members — the callback should reflect that.
+     */
+    isProjectMember: (project: TProject, uid: string) => boolean;
+    /**
+     * Admin check. Called only when AuthRequirements.admin is set. The
+     * package forwards uid, token, and the admin options verbatim. The
+     * callback throws (typically HttpsError) on failure.
+     */
+    requireAdmin: (uid: string, token: DecodedIdToken, options: AdminCheckOptions) => Promise<void>;
+}
+/**
+ * The function returned by createAssertAuth.
+ */
+export type AssertAuthFn<TUser, TProject> = (request: CallableRequest, requirements?: AuthRequirements) => Promise<AuthContext<TUser, TProject>>;
+//# sourceMappingURL=types.d.ts.map

package/dist/server/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;;OAGG;IACH,iBAAiB,CAAC,EAAE;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;KAC3B,CAAC;IAEF;;;;OAIG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW,CAAC,KAAK,GAAG,OAAO,EAAE,QAAQ,GAAG,OAAO;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,cAAc,CAAC;IACtB,kFAAkF;IAClF,OAAO,CAAC,EAAE,KAAK,CAAC;IAChB,oDAAoD;IACpD,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,QAAQ,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEtD;;;GAGG;AACH,MAAM,WAAW,gBAAgB,CAAC,KAAK,EAAE,QAAQ;IAC/C;;;;OAIG;IACH,SAAS,EAAE,MAAM,SAAS,CAAC;IAE3B;;;OAGG;IACH,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IAEzC;;;OAGG;IACH,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IAE3C;;;;OAIG;IACH,aAAa,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,UAAU,CAAC;IAE3C;;;OAGG;IACH,aAAa,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC;IAExC;;OAEG;IACH,cAAc,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAE5D;;;OAGG;IACH,eAAe,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAE7D;;;;OAIG;IACH,YAAY,EAAE,CACZ,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,KAAK,EAAE,QAAQ,IAAI,CAC1C,OAAO,EAAE,eAAe,EACxB,YAAY,CAAC,EAAE,gBAAgB,KAC5B,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC"}

package/dist/server/types.js

@@ -0,0 +1,7 @@
+// packages/auth-core/src/server/types.ts
+//
+// Types for the createAssertAuth factory. Fully generic over the consuming
+// app's user and project document shapes. The package contains no TTT- or
+// Q-Sports-specific knowledge.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/server/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,+BAA+B"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@ttt-productions/auth-core",
-    "version": "0.3.4",
+    "version": "0.4.1",
     "description": "Shared Firebase authentication utilities and React hooks for TTT Productions apps",
     "repository": {
         "type": "git",
@@ -23,6 +23,10 @@
         "./react": {
             "types": "./dist/react/index.d.ts",
             "default": "./dist/react/index.js"
+        },
+        "./server": {
+            "types": "./dist/server/index.d.ts",
+            "default": "./dist/server/index.js"
         }
     },
     "scripts": {
@@ -33,10 +37,21 @@
     },
     "peerDependencies": {
         "firebase": ">=10.0.0",
+        "firebase-admin": ">=10.0.0",
+        "firebase-functions": ">=4.0.0",
         "react": ">=19.0.0",
         "react-dom": ">=19.0.0"
     },
     "peerDependenciesMeta": {
+        "firebase": {
+            "optional": true
+        },
+        "firebase-admin": {
+            "optional": true
+        },
+        "firebase-functions": {
+            "optional": true
+        },
         "react": {
             "optional": true
         },
@@ -48,6 +63,8 @@
         "@types/react": "^19.0.0",
         "@types/react-dom": "^19.0.0",
         "firebase": "^10.0.0",
+        "firebase-admin": "^12.0.0",
+        "firebase-functions": "^7.0.0",
         "react": "^19.2.0",
         "react-dom": "^19.2.0",
         "typescript": "^5.8.3"