@withpotter/lib 0.13.0-next.101

package/dist/arrival.js

@@ -0,0 +1,34 @@
+function makeArrival(key) {
+  let decided = null;
+  return {
+    flag() {
+      if (typeof window === "undefined") return;
+      try {
+        window.sessionStorage.setItem(key, "1");
+      } catch {
+      }
+    },
+    take() {
+      if (decided !== null) return decided;
+      if (typeof window === "undefined") return false;
+      try {
+        const flagged = window.sessionStorage.getItem(key) === "1";
+        if (flagged) window.sessionStorage.removeItem(key);
+        decided = flagged;
+        return flagged;
+      } catch {
+        return false;
+      }
+    },
+    end() {
+      decided = false;
+    },
+    taken() {
+      return decided === true;
+    }
+  };
+}
+export {
+  makeArrival
+};
+//# sourceMappingURL=arrival.js.map

package/dist/arrival.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/arrival.ts"],"sourcesContent":["/**\n * Saying something once, to somebody who has just arrived.\n *\n * Extracted from `staff-arrival`, which had solved this properly for one case\n * and was about to be copy-pasted for a second. The traps it documents are not\n * about staff — they are about one-shot messages on this app's dashboard, and\n * a second copy would carry the same three paragraphs of reasoning and drift\n * from them.\n *\n * ── THE THREE THINGS THAT ARE NOT OBVIOUS ──\n *\n * STORED, NOT DERIVED. `joinedAt` or `createdAt` looks like the obvious source\n * and would greet somebody on every sign-in on their first day — and on a\n * shared counter phone, greet whoever opened it next. A flag written by the\n * screen that caused the arrival fires exactly once, for the person who was\n * actually there.\n *\n * CLEARED ON READ, NOT ON DISMISS. A welcome that survives a refresh greets\n * somebody twice, and the second time reads as a bug.\n *\n * LATCHED FOR THE PAGE LOAD. The dashboard layout renders a phone tree OR a\n * desktop tree, and which one is only known after hydration — the server has no\n * viewport, so a phone paints the desktop tree first and swaps. That swap\n * unmounts one welcome and mounts another, and with the flag cleared on read\n * the second one asked an empty cupboard: anyone arriving on a phone, which is\n * most of them, got nothing at all. `decided` lives in module scope, so it\n * lasts exactly as long as the page.\n *\n * sessionStorage, not local: a welcome should not survive into a new tab\n * opened tomorrow.\n */\nexport interface Arrival {\n  /** Write the flag. Called by whatever caused the arrival, before it routes. */\n  flag: () => void;\n  /** Read and clear in one breath, latched for the rest of this page load. */\n  take: () => boolean;\n  /** Said. Anything mounting after this gets nothing. */\n  end: () => void;\n  /**\n   * Was this page load an arrival?\n   *\n   * For anything that must NOT interrupt while the arrival's own message is on\n   * screen. Read-only — it never consumes the flag, so asking cannot change\n   * who gets greeted.\n   */\n  taken: () => boolean;\n}\n\nexport function makeArrival(key: string): Arrival {\n  let decided: boolean | null = null;\n\n  return {\n    flag() {\n      if (typeof window === 'undefined') return;\n      try {\n        window.sessionStorage.setItem(key, '1');\n      } catch {\n        // Private mode, or storage full. A missing welcome is not worth failing\n        // the thing that caused it — they still land where they were going.\n      }\n    },\n\n    take() {\n      if (decided !== null) return decided;\n      if (typeof window === 'undefined') return false;\n      try {\n        const flagged = window.sessionStorage.getItem(key) === '1';\n        if (flagged) window.sessionStorage.removeItem(key);\n        decided = flagged;\n        return flagged;\n      } catch {\n        return false;\n      }\n    },\n\n    end() {\n      decided = false;\n    },\n\n    taken() {\n      return decided === true;\n    },\n  };\n}\n"],"mappings":"AAgDO,SAAS,YAAY,KAAsB;AAChD,MAAI,UAA0B;AAE9B,SAAO;AAAA,IACL,OAAO;AACL,UAAI,OAAO,WAAW,YAAa;AACnC,UAAI;AACF,eAAO,eAAe,QAAQ,KAAK,GAAG;AAAA,MACxC,QAAQ;AAAA,MAGR;AAAA,IACF;AAAA,IAEA,OAAO;AACL,UAAI,YAAY,KAAM,QAAO;AAC7B,UAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,UAAI;AACF,cAAM,UAAU,OAAO,eAAe,QAAQ,GAAG,MAAM;AACvD,YAAI,QAAS,QAAO,eAAe,WAAW,GAAG;AACjD,kBAAU;AACV,eAAO;AAAA,MACT,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IAEA,MAAM;AACJ,gBAAU;AAAA,IACZ;AAAA,IAEA,QAAQ;AACN,aAAO,YAAY;AAAA,IACrB;AAAA,EACF;AACF;","names":[]}

package/dist/auth-context.d.ts

@@ -0,0 +1,90 @@
+import { ReactNode } from 'react';
+import { type AuthSessionPayload, type Tenant } from './api';
+export type { Tenant };
+export interface Workspace {
+    tenant: Tenant;
+    role: 'owner' | 'manager' | 'staff' | 'viewer';
+    permissions?: Record<string, boolean>;
+}
+export interface User {
+    id: string;
+    email: string;
+    name: string;
+    avatarUrl?: string;
+    /** The account's own phone number, when they gave one. */
+    phone?: string | null;
+    emailVerified: boolean;
+    /** Two-factor authentication is active on this account. */
+    mfaEnabled?: boolean;
+    organizationId: string;
+    workspaces: Workspace[];
+    currentWorkspace: Workspace | null;
+}
+interface AuthContextType {
+    user: User | null;
+    tenant: Tenant | null;
+    workspaces: Workspace[];
+    loading: boolean;
+    connectionError: boolean;
+    login: (email: string, password: string) => Promise<void>;
+    loginWithGoogle: (payload: AuthSessionPayload) => Promise<void>;
+    loginWithCode: (payload: AuthSessionPayload, method?: SignInMethod, connection?: string) => Promise<void>;
+    logout: () => Promise<void>;
+    refreshTenant: () => Promise<void>;
+    refreshUser: () => Promise<void>;
+    switchWorkspace: (tenantSlug: string) => Promise<void>;
+    createWorkspace: (input: CreateWorkspaceInput) => Promise<Tenant>;
+    duplicateWorkspace: (tenantId: string, businessName?: string) => Promise<Tenant>;
+    deleteWorkspace: (tenantSlug: string) => void;
+    retryConnection: () => Promise<void>;
+}
+/**
+ * The single input for creating a business. One shape for both entry paths
+ * (first-run /onboarding and in-dashboard /workspaces/new) so every business is
+ * provisioned identically. Fields not in the provision contract (salesChannel,
+ * address) are persisted onto tenant.settings right after.
+ */
+export interface CreateWorkspaceInput {
+    businessName: string;
+    /**
+     * Only for a deliberate choice of storefront look, which today means the
+     * Website hub. Business creation leaves it unset: the API derives the
+     * starting template from `intents`, so no client keeps a list of template ids
+     * it cannot validate. Three copies of that list had already drifted.
+     */
+    templateId?: string;
+    slug?: string;
+    currency?: string;
+    intents?: string[];
+    isSolo?: boolean;
+    category?: string;
+    salesChannel?: string;
+    address?: string;
+    phone?: string;
+    /** ISO-3166 alpha-2. Not in the provision contract, so it rides the same
+     *  settings patch as salesChannel. Onboarding used to collect this, derive a
+     *  currency from it and then throw it away — which is why Settings › General
+     *  showed an empty Country on every workspace ever created. */
+    country?: string;
+    /** Optional business logo, uploaded after provision (the media endpoint needs
+     * the tenant to exist). Non-fatal — a failed upload never fails creation. */
+    logoFile?: File | null;
+}
+/**
+ * The door an account came through. `connection` is a sign-in the host app provides, such as a payment or bank
+ * provider's login; which one is kept beside it (see `LastAccount.connection`).
+ */
+export type SignInMethod = 'google' | 'email' | 'passkey' | 'connection';
+export declare function AuthProvider({ children }: {
+    children: ReactNode;
+}): import("react").JSX.Element;
+export declare function useAuth(): AuthContextType;
+/**
+ * The current business, or null when there is no provider above.
+ *
+ * For shared primitives, which cannot assume they are inside an AuthProvider:
+ * the root layout mounts none, each section mounts its own, and `useAuth`
+ * throws. A page frame that threw would take the whole screen white rather
+ * than degrade, which is the failure /auth already shipped once.
+ */
+export declare function useOptionalTenant(): Tenant | null;