@yca-software/yca-react-core 0.0.22 → 0.0.23

package/README.md

@@ -73,6 +73,15 @@ export function useTranslationNamespace(ns: string | string[]) {
 
 **Keep in the app, not the library:** routes, TanStack Query hooks per resource, zustand stores, `locales/**`, billing/Paddle, permission constants, PostHog.
 
+Native shells may supply `refreshExecutor` to `createApiProvider` options. The
+executor must call the host's secure session command and return only
+`{ accessToken, expiresAt }`; the host keeps its rotating refresh credential in
+the OS vault. The API client shares concurrent refresh attempts, validates the
+returned expiry, and retries a protected 401 once. Browser consumers omit this
+option and retain their existing HttpOnly-cookie refresh behavior. The app must
+hydrate its initial native access session and clear its own state after host
+revocation; this library does not own a platform vault or navigation.
+
 ## Theming
 
 Import styles once, then override CSS variables in your global stylesheet:

package/dist/api/index.d.ts

@@ -1,7 +1,7 @@
 import * as React from 'react';
 import { ReactNode } from 'react';
-import { a as ApiClientProviderConfig, F as FetchFn, A as ApiClientConfig, d as RefreshRequestConfig, e as RequestConfig } from '../types-CN73TWSY.js';
-export { b as ApiErrorBody, R as RefreshBodyContext, c as RefreshConfig, f as RequestError } from '../types-CN73TWSY.js';
+import { a as ApiClientProviderConfig, F as FetchFn, A as ApiClientConfig, d as RefreshRequestConfig, e as RequestConfig } from '../types-BYLBukHJ.js';
+export { b as ApiErrorBody, R as RefreshBodyContext, c as RefreshConfig, f as RequestError } from '../types-BYLBukHJ.js';
 
 declare function ApiClientProvider({ baseURL, config, children, }: {
     baseURL: string;
@@ -22,6 +22,11 @@ interface CreateApiProviderOptions {
     getAcceptLanguage?: () => string;
     onRefreshStart?: () => void;
     onRefreshEnd?: () => void;
+    /** Optional native refresh boundary; browser apps retain the default HTTP cookie flow. */
+    refreshExecutor?: () => Promise<{
+        accessToken: string;
+        expiresAt: string;
+    }>;
     /** Refresh endpoint path relative to baseURL. Defaults to `auth/refresh`. */
     refreshEndpoint?: string;
     /** Paths that must not trigger automatic refresh retry on 401. Defaults to `['auth/']`. */

package/dist/api/index.js

@@ -1,3 +1,3 @@
-export { ApiClientProvider, DEFAULT_REFRESH_ENDPOINT, DEFAULT_REFRESH_EXCLUDED_PREFIXES, accessTokenNeedsRefresh, buildRequestUrl, createApiProvider, createDefaultRefreshRequest, createResponseHandler, executeConfiguredRefresh, getRequestHeaders, getRequestOptions, isFatalRefreshFailureStatus, msUntilAccessRefresh, performAccessTokenRefresh, shouldClearSessionOnRefreshFailure, useAPI, useAccessTokenKeepAlive, useApiClientConfig } from '../chunk-2HTQDFQJ.js';
+export { ApiClientProvider, DEFAULT_REFRESH_ENDPOINT, DEFAULT_REFRESH_EXCLUDED_PREFIXES, accessTokenNeedsRefresh, buildRequestUrl, createApiProvider, createDefaultRefreshRequest, createResponseHandler, executeConfiguredRefresh, getRequestHeaders, getRequestOptions, isFatalRefreshFailureStatus, msUntilAccessRefresh, performAccessTokenRefresh, shouldClearSessionOnRefreshFailure, useAPI, useAccessTokenKeepAlive, useApiClientConfig } from '../chunk-V6EYEN2F.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/{chunk-2HTQDFQJ.js → chunk-V6EYEN2F.js}

@@ -154,7 +154,18 @@ async function executeConfiguredRefresh(config) {
     throw { error: new Error("refresh cooling down"), status: 429 };
   }
   refresh.onStart?.();
-  refreshInFlight = performAccessTokenRefresh({
+  const refreshAttempt = refresh.executor ? Promise.resolve().then(() => refresh.executor()).then(({ accessToken, expiresAt }) => {
+    if (!accessToken || !expiresAt || !Number.isFinite(Date.parse(expiresAt)) || Date.parse(expiresAt) <= Date.now()) {
+      throw { error: new Error("invalid native refresh response"), status: 0 };
+    }
+    refresh.setAccessToken(accessToken);
+    return accessToken;
+  }).catch((err) => {
+    if (typeof err?.status === "number" && isFatalRefreshFailureStatus(err.status) && shouldClearSessionOnRefreshFailure()) {
+      refresh.onFailure();
+    }
+    throw err;
+  }) : performAccessTokenRefresh({
     baseURL: config.baseURL,
     getRefreshToken: config.getRefreshToken,
     request: refresh.request,
@@ -162,7 +173,8 @@ async function executeConfiguredRefresh(config) {
     setAccessToken: refresh.setAccessToken,
     onFailure: refresh.onFailure,
     acceptLanguage: config.getAcceptLanguage?.()
-  }).then((token) => {
+  });
+  refreshInFlight = refreshAttempt.then((token) => {
     refreshCooldownUntilMs = 0;
     return token;
   }).catch((err) => {
@@ -183,7 +195,7 @@ function shouldRetryWithRefresh(status, endpoint, isRetry, refreshToken, refresh
   if (status !== 401 || !refresh || !endpoint || isRetry) {
     return false;
   }
-  const canRefresh = !!refreshToken || refresh.cookieCredentialsEnabled();
+  const canRefresh = !!refresh.executor || !!refreshToken || refresh.cookieCredentialsEnabled();
   if (!canRefresh) {
     return false;
   }
@@ -273,6 +285,7 @@ function createApiProvider(useOptions) {
             endpoint: options.refreshEndpoint,
             excludedRetryPrefixes: options.refreshExcludedPrefixes
           }),
+          executor: options.refreshExecutor,
           cookieCredentialsEnabled: options.cookieCredentialsEnabled,
           setAccessToken: options.setAccessToken,
           onFailure: options.onRefreshFailure,
@@ -345,5 +358,5 @@ function useAccessTokenKeepAlive(options) {
 }
 
 export { ApiClientProvider, DEFAULT_REFRESH_ENDPOINT, DEFAULT_REFRESH_EXCLUDED_PREFIXES, accessTokenNeedsRefresh, buildRequestUrl, createApiProvider, createDefaultRefreshRequest, createResponseHandler, executeConfiguredRefresh, getRequestHeaders, getRequestOptions, isFatalRefreshFailureStatus, msUntilAccessRefresh, performAccessTokenRefresh, shouldClearSessionOnRefreshFailure, useAPI, useAccessTokenKeepAlive, useApiClientConfig };
-//# sourceMappingURL=chunk-2HTQDFQJ.js.map
-//# sourceMappingURL=chunk-2HTQDFQJ.js.map
+//# sourceMappingURL=chunk-V6EYEN2F.js.map
+//# sourceMappingURL=chunk-V6EYEN2F.js.map

package/dist/chunk-V6EYEN2F.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/api/request.ts","../src/api/responseHandler.ts","../src/api/ApiClientContext.tsx","../src/api/createApiProvider.tsx","../src/api/useAccessTokenKeepAlive.ts"],"names":["useMemo","jsx"],"mappings":";;;;;;;AAOO,IAAM,wBAAA,GAA2B;AACjC,IAAM,iCAAA,GAAoC,CAAC,OAAO;AAOlD,SAAS,2BAAA,CAA4B;AAAA,EAC1C,QAAA,GAAW,wBAAA;AAAA,EACX,qBAAA,GAAwB;AAC1B,CAAA,GAAkC,EAAC,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,QAAA;AAAA,IACA,MAAA,EAAQ,MAAA;AAAA,IACR,SAAA,EAAW,CAAC,EAAE,YAAA,OAAwC,YAAA,GAAe,EAAE,YAAA,EAAa,GAAI,EAAC;AAAA,IACzF,gBAAA,EAAkB,CAAC,IAAA,KAAkB;AACnC,MAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,iBAAiB,IAAA,EAAM;AAC7D,QAAA,MAAM,QAAS,IAAA,CAAkC,WAAA;AACjD,QAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,IAAA;AAAA,MAC7C;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA;AAAA,GACF;AACF;AAEO,SAAS,eAAA,CAAgB,SAAiB,QAAA,EAA0B;AACzE,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACtC,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACvC,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AACxB;AAEO,SAAS,iBAAA,CACd,aACA,OAAA,EACa;AACb,EAAA,MAAM,UAAuB,EAAC;AAC9B,EAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AACA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAA,CAAQ,aAAA,GAAgB,UAAU,WAAW,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,IAAI,SAAS,cAAA,EAAgB;AAC3B,IAAA,OAAA,CAAQ,iBAAiB,IAAI,OAAA,CAAQ,cAAA;AAAA,EACvC;AACA,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,iBAAA,CACd,MAAA,EACA,KAAA,EACA,cAAA,EACa;AACb,EAAA,MAAM,IAAA,GAAoB;AAAA,IACxB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,OAAA,EAAS,kBAAkB,KAAA,EAAO;AAAA,MAChC,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB;AAAA,KACD,CAAA;AAAA,IACD,IAAA,EAAM,MAAA,CAAO,SAAA,GACR,MAAA,CAAO,IAAA,GACR,MAAA,CAAO,IAAA,IAAQ,IAAA,GACb,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,IAAI,CAAA,GAC1B;AAAA,GACR;AACA,EAAA,IAAI,OAAO,WAAA,EAAa;AACtB,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAAA,EAC5B;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,4BAA4B,MAAA,EAAyB;AACnE,EAAA,OAAO,WAAW,GAAA,IAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,OAAO,MAAA,KAAW,GAAA;AAC1E;AAGO,SAAS,kCAAA,GAA8C;AAC5D,EAAA,OAAO,OAAO,QAAA,KAAa,WAAA,IAAe,QAAA,CAAS,eAAA,KAAoB,QAAA;AACzE;AAEA,SAAS,yBAAyB,MAAA,EAAyB;AACzD,EAAA,OAAO,MAAA,KAAW,KAAK,MAAA,KAAW,GAAA,IAAO,WAAW,GAAA,IAAO,MAAA,KAAW,OAAO,MAAA,KAAW,GAAA;AAC1F;AAEA,IAAM,0BAAA,GAA6B,CAAA;AACnC,IAAM,0BAAA,GAA6B,EAAA;AAEnC,SAAS,KAAK,EAAA,EAA2B;AACvC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,UAAA,CAAW,SAAS,EAAE,CAAA;AAAA,EACxB,CAAC,CAAA;AACH;AAEA,eAAsB,0BAA0B,MAAA,EAQ5B;AAClB,EAAA,MAAM,YAAA,GAAe,MAAA,CAAO,oBAAA,GAAuB,IAAA,GAAO,OAAO,eAAA,EAAgB;AACjF,EAAA,IAAI,CAAC,MAAA,CAAO,oBAAA,IAAwB,CAAC,YAAA,EAAc;AAGjD,IAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,uBAAuB,CAAA,EAAG,QAAQ,GAAA,EAAI;AAAA,EACjE;AAEA,EAAA,MAAM,WAAA,GAAkC;AAAA,IACtC,YAAA;AAAA,IACA,sBAAsB,MAAA,CAAO;AAAA,GAC/B;AAEA,EAAA,MAAM,aAAA,GAA+B;AAAA,IACnC,QAAA,EAAU,OAAO,OAAA,CAAQ,QAAA;AAAA,IACzB,MAAA,EAAQ,OAAO,OAAA,CAAQ,MAAA;AAAA,IACvB,IAAA,EAAM,MAAA,CAAO,OAAA,CAAQ,SAAA,CAAU,WAAW,CAAA;AAAA,IAC1C,WAAA,EAAa,MAAA,CAAO,oBAAA,GAAuB,SAAA,GAAY,OAAO,OAAA,CAAQ;AAAA,GACxE;AAEA,EAAA,IAAI,UAAA,GAAa,CAAA;AACjB,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,0BAAA,EAA4B,WAAW,CAAA,EAAG;AACzE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,KAAA;AAAA,QACf,eAAA,CAAgB,MAAA,CAAO,OAAA,EAAS,aAAA,CAAc,QAAQ,CAAA;AAAA,QACtD,iBAAA,CAAkB,aAAA,EAAe,IAAA,EAAM,MAAA,CAAO,cAAc;AAAA,OAC9D;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,UAAA,GAAa,CAAA;AACb,MAAA,IAAI,UAAU,0BAAA,EAA4B;AACxC,QAAA,MAAM,IAAA,CAAK,6BAA6B,OAAO,CAAA;AAC/C,QAAA;AAAA,MACF;AACA,MAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,uBAAuB,CAAA,EAAG,QAAQ,CAAA,EAAE;AAAA,IAC/D;AAEA,IAAA,MAAM,YAAA,GAAe,MAAM,QAAA,CAAS,IAAA,EAAK;AAEzC,IAAA,IAAI,IAAA,GAAgB,IAAA;AACpB,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,IAAA,CAAK,MAAM,YAAY,CAAA;AAAA,MAChC,CAAA,CAAA,MAAQ;AACN,QAAA,UAAA,GAAa,CAAA;AACb,QAAA,IAAI,UAAU,0BAAA,EAA4B;AACxC,UAAA,MAAM,IAAA,CAAK,6BAA6B,OAAO,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,0BAA0B,CAAA,EAAG,QAAQ,CAAA,EAAE;AAAA,MAClE;AAAA,IACF;AAEA,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,OAAA,CAAQ,gBAAA,CAAiB,IAAI,CAAA;AACxD,IAAA,IAAI,QAAA,CAAS,MAAM,WAAA,EAAa;AAC9B,MAAA,MAAA,CAAO,eAAe,WAAW,CAAA;AACjC,MAAA,OAAO,WAAA;AAAA,IACT;AAEA,IAAA,UAAA,GAAa,SAAS,MAAA,IAAU,CAAA;AAChC,IAAA,IAAI,wBAAA,CAAyB,UAAU,CAAA,IAAK,OAAA,GAAU,0BAAA,EAA4B;AAChF,MAAA,MAAM,IAAA,CAAK,6BAA6B,OAAO,CAAA;AAC/C,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,2BAAA,CAA4B,UAAU,CAAA,IAAK,kCAAA,EAAmC,EAAG;AACnF,MAAA,MAAA,CAAO,SAAA,EAAU;AAAA,IACnB;AACA,IAAA,MAAM;AAAA,MACJ,KAAA,EAAO,IAAI,KAAA,CAAM,gCAAgC,CAAA;AAAA,MACjD,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,gCAAgC,CAAA,EAAG,QAAQ,UAAA,EAAW;AACjF;AAGA,IAAI,eAAA,GAA0C,IAAA;AAE9C,IAAI,sBAAA,GAAyB,CAAA;AAC7B,IAAM,mBAAA,GAAsB,GAAA;AAE5B,eAAsB,yBAAyB,MAAA,EAA0C;AACvF,EAAA,MAAM,UAAU,MAAA,CAAO,OAAA;AACvB,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,EAC7C;AAEA,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,IAAI,yBAAyB,GAAA,EAAK;AAChC,IAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,sBAAsB,CAAA,EAAG,QAAQ,GAAA,EAAI;AAAA,EAChE;AAEA,EAAA,OAAA,CAAQ,OAAA,IAAU;AAClB,EAAA,MAAM,iBAAiB,OAAA,CAAQ,QAAA,GAC3B,OAAA,CAAQ,OAAA,GACL,IAAA,CAAK,MAAM,OAAA,CAAQ,QAAA,EAAW,CAAA,CAC9B,IAAA,CAAK,CAAC,EAAE,WAAA,EAAa,WAAU,KAAM;AACpC,IAAA,IACE,CAAC,WAAA,IACD,CAAC,aACD,CAAC,MAAA,CAAO,SAAS,IAAA,CAAK,KAAA,CAAM,SAAS,CAAC,KACtC,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,IAAK,IAAA,CAAK,KAAI,EAClC;AACA,MAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,iCAAiC,CAAA,EAAG,QAAQ,CAAA,EAAE;AAAA,IACzE;AACA,IAAA,OAAA,CAAQ,eAAe,WAAW,CAAA;AAClC,IAAA,OAAO,WAAA;AAAA,EACT,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,GAAA,KAA6B;AACnC,IAAA,IACE,OAAO,KAAK,MAAA,KAAW,QAAA,IACvB,4BAA4B,GAAA,CAAI,MAAM,CAAA,IACtC,kCAAA,EAAmC,EACnC;AACA,MAAA,OAAA,CAAQ,SAAA,EAAU;AAAA,IACpB;AACA,IAAA,MAAM,GAAA;AAAA,EACR,CAAC,IACH,yBAAA,CAA0B;AAAA,IACxB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,SAAS,OAAA,CAAQ,OAAA;AAAA,IACjB,oBAAA,EAAsB,QAAQ,wBAAA,EAAyB;AAAA,IACvD,gBAAgB,OAAA,CAAQ,cAAA;AAAA,IACxB,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,cAAA,EAAgB,OAAO,iBAAA;AAAoB,GAC5C,CAAA;AACL,EAAA,eAAA,GAAkB,cAAA,CACf,IAAA,CAAK,CAAC,KAAA,KAAU;AACf,IAAA,sBAAA,GAAyB,CAAA;AACzB,IAAA,OAAO,KAAA;AAAA,EACT,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,GAAA,KAA6B;AACnC,IAAA,MAAM,SAAS,OAAO,GAAA,EAAK,MAAA,KAAW,QAAA,GAAW,IAAI,MAAA,GAAS,CAAA;AAC9D,IAAA,IAAI,wBAAA,CAAyB,MAAM,CAAA,EAAG;AACpC,MAAA,sBAAA,GAAyB,IAAA,CAAK,KAAI,GAAI,mBAAA;AAAA,IACxC;AACA,IAAA,MAAM,GAAA;AAAA,EACR,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,IAAA,eAAA,GAAkB,IAAA;AAClB,IAAA,OAAA,CAAQ,KAAA,IAAQ;AAAA,EAClB,CAAC,CAAA;AAEH,EAAA,OAAO,eAAA;AACT;;;ACnQA,SAAS,sBAAA,CACP,MAAA,EACA,QAAA,EACA,OAAA,EACA,cACA,OAAA,EACS;AACT,EAAA,IAAI,WAAW,GAAA,IAAO,CAAC,OAAA,IAAW,CAAC,YAAY,OAAA,EAAS;AACtD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,UAAA,GAAa,CAAC,CAAC,OAAA,CAAQ,YAAY,CAAC,CAAC,YAAA,IAAgB,OAAA,CAAQ,wBAAA,EAAyB;AAC5F,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,UAAA,GAAa,QAAA,CAAS,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC7C,EAAA,OAAO,CAAC,OAAA,CAAQ,OAAA,CAAQ,qBAAA,CAAsB,IAAA;AAAA,IAAK,CAAC,WAClD,UAAA,CAAW,UAAA,CAAW,OAAO,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC;AAAA,GACjD;AACF;AAEO,SAAS,sBAAsB,MAAA,EAAyB;AAC7D,EAAA,MAAM,EAAE,OAAA,EAAS,eAAA,EAAiB,OAAA,EAAQ,GAAI,MAAA;AAE9C,EAAA,eAAe,cAAA,CACb,UACA,OAAA,EACkB;AAClB,IAAA,MAAM,YAAA,GAAe,MAAM,QAAA,CAAS,IAAA,EAAK;AACzC,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,IAAA,CAAK,MAAM,YAAY,CAAA;AAAA,MAChC,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,GAAO,YAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,eAAe,eAAA,EAAgB;AACrC,MAAA,IACE,sBAAA;AAAA,QACE,QAAA,CAAS,MAAA;AAAA,QACT,SAAS,MAAA,EAAQ,QAAA;AAAA,QACjB,OAAA,EAAS,OAAA;AAAA,QACT,YAAA;AAAA,QACA;AAAA,OACF,IACA,SAAS,MAAA,EACT;AACA,QAAA,MAAM,QAAA,GAAW,MAAM,wBAAA,CAAyB,MAAM,CAAA;AACtD,QAAA,MAAM,gBAAgB,MAAM,KAAA;AAAA,UAC1B,eAAA,CAAgB,OAAA,EAAS,OAAA,CAAQ,MAAA,CAAO,QAAQ,CAAA;AAAA,UAChD,kBAAkB,OAAA,CAAQ,MAAA,EAAQ,QAAA,EAAU,MAAA,CAAO,qBAAqB;AAAA,SAC1E;AACA,QAAA,OAAO,eAAe,aAAA,EAAe,EAAE,GAAG,OAAA,EAAS,OAAA,EAAS,MAAM,CAAA;AAAA,MACpE;AAEA,MAAA,MAAM;AAAA,QACJ,KAAA,EAAO,IAAA;AAAA,QACP,QAAQ,QAAA,CAAS,MAAA;AAAA,QACjB,KAAA,EAAO,SAAS,MAAA,IAAU;AAAA,OAC5B;AAAA,IACF;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,cAAA;AACT;AClEA,IAAM,gBAAA,GAAmB,cAAsC,IAAI,CAAA;AAE5D,SAAS,iBAAA,CAAkB;AAAA,EAChC,OAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAA,EAIG;AACD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAyB,OAAO,EAAE,GAAG,MAAA,EAAQ,OAAA,EAAQ,CAAA,EAAI,CAAC,OAAA,EAAS,MAAM,CAAC,CAAA;AAExF,EAAA,uBAAO,GAAA,CAAC,gBAAA,CAAiB,QAAA,EAAjB,EAA0B,OAAe,QAAA,EAAS,CAAA;AAC5D;AAEO,SAAS,kBAAA,GAAsC;AACpD,EAAA,MAAM,GAAA,GAAM,WAAW,gBAAgB,CAAA;AACvC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC5E;AACA,EAAA,OAAO,GAAA;AACT;AAEO,SAAS,MAAA,GAAkB;AAChC,EAAA,MAAM,SAAS,kBAAA,EAAmB;AAClC,EAAA,MAAM,eAAA,GAAkB,QAAQ,MAAM,qBAAA,CAAsB,MAAM,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAE7E,EAAA,OAAO,WAAA;AAAA,IACL,CAAC,aAAA,KAAiC;AAChC,MAAA,MAAM,WAAA,GAAc,OAAO,cAAA,EAAe;AAC1C,MAAA,OAAO,KAAA;AAAA,QACL,eAAA,CAAgB,MAAA,CAAO,OAAA,EAAS,aAAA,CAAc,QAAQ,CAAA;AAAA,QACtD,iBAAA,CAAkB,aAAA,EAAe,WAAA,EAAa,MAAA,CAAO,qBAAqB;AAAA,OAC5E,CAAE,IAAA,CAAK,CAAC,QAAA,KAAa,eAAA,CAAgB,UAAU,EAAE,MAAA,EAAQ,aAAA,EAAe,CAAC,CAAA;AAAA,IAC3E,CAAA;AAAA,IACA,CAAC,QAAQ,eAAe;AAAA,GAC1B;AACF;ACbO,SAAS,kBAAkB,UAAA,EAA4C;AAC5E,EAAA,OAAO,SAAS,WAAA,CAAY,EAAE,QAAA,EAAS,EAA4B;AACjE,IAAA,MAAM,UAAU,UAAA,EAAW;AAE3B,IAAA,MAAM,SAAA,GAAYA,OAAAA;AAAA,MAChB,OAAO;AAAA,QACL,gBAAgB,OAAA,CAAQ,cAAA;AAAA,QACxB,iBAAiB,OAAA,CAAQ,eAAA;AAAA,QACzB,mBAAmB,OAAA,CAAQ,iBAAA;AAAA,QAC3B,OAAA,EAAS;AAAA,UACP,SAAS,2BAAA,CAA4B;AAAA,YACnC,UAAU,OAAA,CAAQ,eAAA;AAAA,YAClB,uBAAuB,OAAA,CAAQ;AAAA,WAChC,CAAA;AAAA,UACD,UAAU,OAAA,CAAQ,eAAA;AAAA,UAClB,0BAA0B,OAAA,CAAQ,wBAAA;AAAA,UAClC,gBAAgB,OAAA,CAAQ,cAAA;AAAA,UACxB,WAAW,OAAA,CAAQ,gBAAA;AAAA,UACnB,SAAS,OAAA,CAAQ,cAAA;AAAA,UACjB,OAAO,OAAA,CAAQ;AAAA;AACjB,OACF,CAAA;AAAA,MACA,CAAC,OAAO;AAAA,KACV;AAEA,IAAA,uBACEC,IAAC,iBAAA,EAAA,EAAkB,OAAA,EAAS,QAAQ,OAAA,EAAS,MAAA,EAAQ,WAClD,QAAA,EACH,CAAA;AAAA,EAEJ,CAAA;AACF;ACvDA,IAAM,eAAA,GAAkB,IAAI,EAAA,GAAK,GAAA;AAEjC,IAAM,uBAAA,GAA0B,IAAI,EAAA,GAAK,GAAA;AAElC,SAAS,wBACd,KAAA,EACA,KAAA,GAAgB,KAAK,GAAA,EAAI,EACzB,SAAiB,eAAA,EACR;AACT,EAAA,OAAO,oBAAA,CAAqB,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA,KAAM,CAAA;AACxD;AAGO,SAAS,qBACd,KAAA,EACA,KAAA,GAAgB,KAAK,GAAA,EAAI,EACzB,SAAiB,eAAA,EACT;AACR,EAAA,IAAI,CAAC,OAAO,OAAO,CAAA;AACnB,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,GAAA,EAAI,GAAI,SAAA,CAA4B,KAAK,CAAA;AACjD,IAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,CAAA;AACpC,IAAA,OAAO,KAAK,GAAA,CAAI,CAAA,EAAG,GAAA,GAAM,GAAA,GAAO,SAAS,KAAK,CAAA;AAAA,EAChD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAA;AAAA,EACT;AACF;AAcO,SAAS,wBAAwB,OAAA,EAA+C;AACrF,EAAA,MAAM,YAAY,kBAAA,EAAmB;AACrC,EAAA,MAAM,EAAE,OAAA,EAAS,cAAA,EAAe,GAAI,OAAA;AAEpC,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,OAAA,IAAW,CAAC,SAAA,CAAU,OAAA,EAAS;AAClC,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,kBAAkB,MAAM;AAC5B,MAAA,IAAI,CAAC,uBAAA,CAAwB,cAAA,EAAgB,CAAA,EAAG;AAC9C,QAAA;AAAA,MACF;AACA,MAAA,KAAK,wBAAA,CAAyB,SAAS,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAErD,CAAC,CAAA;AAAA,IACH,CAAA;AAEA,IAAA,IAAI,SAAA,GAAY,CAAA;AAChB,IAAA,MAAM,WAAW,MAAM;AACrB,MAAA,MAAA,CAAO,aAAa,SAAS,CAAA;AAC7B,MAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,cAAA,EAAgB,CAAA;AACnD,MAAA,MAAM,QACJ,KAAA,KAAU,CAAA,GAAI,0BAA0B,IAAA,CAAK,GAAA,CAAI,OAAO,uBAAuB,CAAA;AACjF,MAAA,SAAA,GAAY,MAAA,CAAO,WAAW,MAAM;AAClC,QAAA,eAAA,EAAgB;AAChB,QAAA,QAAA,EAAS;AAAA,MACX,GAAG,KAAK,CAAA;AAAA,IACV,CAAA;AAEA,IAAA,MAAM,eAAe,MAAM;AACzB,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAC1C,QAAA,eAAA,EAAgB;AAChB,QAAA,QAAA,EAAS;AAAA,MACX;AAAA,IACF,CAAA;AAEA,IAAA,eAAA,EAAgB;AAChB,IAAA,QAAA,EAAS;AACT,IAAA,QAAA,CAAS,gBAAA,CAAiB,oBAAoB,YAAY,CAAA;AAC1D,IAAA,MAAA,CAAO,gBAAA,CAAiB,SAAS,eAAe,CAAA;AAChD,IAAA,MAAA,CAAO,gBAAA,CAAiB,YAAY,eAAe,CAAA;AAEnD,IAAA,OAAO,MAAM;AACX,MAAA,QAAA,CAAS,mBAAA,CAAoB,oBAAoB,YAAY,CAAA;AAC7D,MAAA,MAAA,CAAO,mBAAA,CAAoB,SAAS,eAAe,CAAA;AACnD,MAAA,MAAA,CAAO,mBAAA,CAAoB,YAAY,eAAe,CAAA;AACtD,MAAA,MAAA,CAAO,aAAa,SAAS,CAAA;AAAA,IAC/B,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,SAAA,EAAW,OAAA,EAAS,cAAc,CAAC,CAAA;AACzC","file":"chunk-V6EYEN2F.js","sourcesContent":["import type {\n  ApiClientConfig,\n  RefreshBodyContext,\n  RefreshRequestConfig,\n  RequestConfig,\n} from './types';\n\nexport const DEFAULT_REFRESH_ENDPOINT = 'auth/refresh';\nexport const DEFAULT_REFRESH_EXCLUDED_PREFIXES = ['auth/'];\n\nexport interface DefaultRefreshRequestOptions {\n  endpoint?: string;\n  excludedRetryPrefixes?: string[];\n}\n\nexport function createDefaultRefreshRequest({\n  endpoint = DEFAULT_REFRESH_ENDPOINT,\n  excludedRetryPrefixes = DEFAULT_REFRESH_EXCLUDED_PREFIXES,\n}: DefaultRefreshRequestOptions = {}): RefreshRequestConfig {\n  return {\n    endpoint,\n    method: 'POST',\n    buildBody: ({ refreshToken }: RefreshBodyContext) => (refreshToken ? { refreshToken } : {}),\n    parseAccessToken: (data: unknown) => {\n      if (data && typeof data === 'object' && 'accessToken' in data) {\n        const token = (data as { accessToken: unknown }).accessToken;\n        return typeof token === 'string' ? token : null;\n      }\n      return null;\n    },\n    excludedRetryPrefixes,\n  };\n}\n\nexport function buildRequestUrl(baseURL: string, endpoint: string): string {\n  const base = baseURL.replace(/\\/$/, '');\n  const path = endpoint.replace(/^\\//, '');\n  return `${base}/${path}`;\n}\n\nexport function getRequestHeaders(\n  accessToken: string | null,\n  options?: { multipart?: boolean; acceptLanguage?: string },\n): HeadersInit {\n  const headers: HeadersInit = {};\n  if (!options?.multipart) {\n    headers['Content-Type'] = 'application/json';\n  }\n  if (accessToken) {\n    headers.Authorization = `Bearer ${accessToken}`;\n  }\n  if (options?.acceptLanguage) {\n    headers['Accept-Language'] = options.acceptLanguage;\n  }\n  return headers;\n}\n\nexport function getRequestOptions(\n  config: RequestConfig,\n  token: string | null,\n  acceptLanguage?: string,\n): RequestInit {\n  const init: RequestInit = {\n    method: config.method,\n    headers: getRequestHeaders(token, {\n      multipart: config.multipart,\n      acceptLanguage,\n    }),\n    body: config.multipart\n      ? (config.body as BodyInit)\n      : config.body != null\n        ? JSON.stringify(config.body)\n        : undefined,\n  };\n  if (config.credentials) {\n    init.credentials = config.credentials;\n  }\n  return init;\n}\n\n/** Auth errors where the refresh cookie/token is actually unusable. */\nexport function isFatalRefreshFailureStatus(status: number): boolean {\n  return status === 400 || status === 401 || status === 403 || status === 404;\n}\n\n/** Background/frozen tabs must not clear the session — cookies may be omitted from the fetch. */\nexport function shouldClearSessionOnRefreshFailure(): boolean {\n  return typeof document === 'undefined' || document.visibilityState !== 'hidden';\n}\n\nfunction isTransientRefreshStatus(status: number): boolean {\n  return status === 0 || status === 429 || status === 502 || status === 503 || status === 504;\n}\n\nconst REFRESH_TRANSIENT_ATTEMPTS = 3;\nconst REFRESH_TRANSIENT_DELAY_MS = 50;\n\nfunction wait(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\nexport async function performAccessTokenRefresh(params: {\n  baseURL: string;\n  getRefreshToken: () => string | null;\n  request: RefreshRequestConfig;\n  useCookieCredentials: boolean;\n  setAccessToken: (token: string) => void;\n  onFailure: () => void;\n  acceptLanguage?: string;\n}): Promise<string> {\n  const refreshToken = params.useCookieCredentials ? null : params.getRefreshToken();\n  if (!params.useCookieCredentials && !refreshToken) {\n    // Missing JS token is not proof the session is dead (hydration may still\n    // install an HttpOnly marker). Do not log the user out.\n    throw { error: new Error('missing refresh token'), status: 401 };\n  }\n\n  const bodyContext: RefreshBodyContext = {\n    refreshToken,\n    useCookieCredentials: params.useCookieCredentials,\n  };\n\n  const requestConfig: RequestConfig = {\n    endpoint: params.request.endpoint,\n    method: params.request.method,\n    body: params.request.buildBody(bodyContext),\n    credentials: params.useCookieCredentials ? 'include' : params.request.credentials,\n  };\n\n  let lastStatus = 0;\n  for (let attempt = 1; attempt <= REFRESH_TRANSIENT_ATTEMPTS; attempt += 1) {\n    let response: Response;\n    try {\n      response = await fetch(\n        buildRequestUrl(params.baseURL, requestConfig.endpoint),\n        getRequestOptions(requestConfig, null, params.acceptLanguage),\n      );\n    } catch {\n      lastStatus = 0;\n      if (attempt < REFRESH_TRANSIENT_ATTEMPTS) {\n        await wait(REFRESH_TRANSIENT_DELAY_MS * attempt);\n        continue;\n      }\n      throw { error: new Error('refresh network error'), status: 0 };\n    }\n\n    const responseText = await response.text();\n\n    let data: unknown = null;\n    if (responseText) {\n      try {\n        data = JSON.parse(responseText);\n      } catch {\n        lastStatus = 0;\n        if (attempt < REFRESH_TRANSIENT_ATTEMPTS) {\n          await wait(REFRESH_TRANSIENT_DELAY_MS * attempt);\n          continue;\n        }\n        throw { error: new Error('invalid refresh response'), status: 0 };\n      }\n    }\n\n    const accessToken = params.request.parseAccessToken(data);\n    if (response.ok && accessToken) {\n      params.setAccessToken(accessToken);\n      return accessToken;\n    }\n\n    lastStatus = response.status || 0;\n    if (isTransientRefreshStatus(lastStatus) && attempt < REFRESH_TRANSIENT_ATTEMPTS) {\n      await wait(REFRESH_TRANSIENT_DELAY_MS * attempt);\n      continue;\n    }\n\n    if (isFatalRefreshFailureStatus(lastStatus) && shouldClearSessionOnRefreshFailure()) {\n      params.onFailure();\n    }\n    throw {\n      error: new Error('failed to refresh access token'),\n      status: lastStatus,\n    };\n  }\n\n  throw { error: new Error('failed to refresh access token'), status: lastStatus };\n}\n\n/** One in-flight refresh per page — parallel 401 retries share the same promise. */\nlet refreshInFlight: Promise<string> | null = null;\n/** After 429/5xx, pause new refresh attempts so the SPA cannot hammer the API. */\nlet refreshCooldownUntilMs = 0;\nconst REFRESH_COOLDOWN_MS = 30_000;\n\nexport async function executeConfiguredRefresh(config: ApiClientConfig): Promise<string> {\n  const refresh = config.refresh;\n  if (!refresh) {\n    throw new Error('refresh is not configured');\n  }\n\n  if (refreshInFlight) {\n    return refreshInFlight;\n  }\n\n  const now = Date.now();\n  if (refreshCooldownUntilMs > now) {\n    throw { error: new Error('refresh cooling down'), status: 429 };\n  }\n\n  refresh.onStart?.();\n  const refreshAttempt = refresh.executor\n    ? Promise.resolve()\n        .then(() => refresh.executor!())\n        .then(({ accessToken, expiresAt }) => {\n          if (\n            !accessToken ||\n            !expiresAt ||\n            !Number.isFinite(Date.parse(expiresAt)) ||\n            Date.parse(expiresAt) <= Date.now()\n          ) {\n            throw { error: new Error('invalid native refresh response'), status: 0 };\n          }\n          refresh.setAccessToken(accessToken);\n          return accessToken;\n        })\n        .catch((err: { status?: number }) => {\n          if (\n            typeof err?.status === 'number' &&\n            isFatalRefreshFailureStatus(err.status) &&\n            shouldClearSessionOnRefreshFailure()\n          ) {\n            refresh.onFailure();\n          }\n          throw err;\n        })\n    : performAccessTokenRefresh({\n        baseURL: config.baseURL,\n        getRefreshToken: config.getRefreshToken,\n        request: refresh.request,\n        useCookieCredentials: refresh.cookieCredentialsEnabled(),\n        setAccessToken: refresh.setAccessToken,\n        onFailure: refresh.onFailure,\n        acceptLanguage: config.getAcceptLanguage?.(),\n      });\n  refreshInFlight = refreshAttempt\n    .then((token) => {\n      refreshCooldownUntilMs = 0;\n      return token;\n    })\n    .catch((err: { status?: number }) => {\n      const status = typeof err?.status === 'number' ? err.status : 0;\n      if (isTransientRefreshStatus(status)) {\n        refreshCooldownUntilMs = Date.now() + REFRESH_COOLDOWN_MS;\n      }\n      throw err;\n    })\n    .finally(() => {\n      refreshInFlight = null;\n      refresh.onEnd?.();\n    });\n\n  return refreshInFlight;\n}\n","import { buildRequestUrl, executeConfiguredRefresh, getRequestOptions } from './request';\nimport type { ApiClientConfig, ApiErrorBody, RequestConfig, RequestError } from './types';\n\nfunction shouldRetryWithRefresh(\n  status: number,\n  endpoint: string | undefined,\n  isRetry: boolean | undefined,\n  refreshToken: string | null | undefined,\n  refresh: ApiClientConfig['refresh'],\n): boolean {\n  if (status !== 401 || !refresh || !endpoint || isRetry) {\n    return false;\n  }\n  const canRefresh = !!refresh.executor || !!refreshToken || refresh.cookieCredentialsEnabled();\n  if (!canRefresh) {\n    return false;\n  }\n  const normalized = endpoint.replace(/^\\//, '');\n  return !refresh.request.excludedRetryPrefixes.some((prefix) =>\n    normalized.startsWith(prefix.replace(/^\\//, '')),\n  );\n}\n\nexport function createResponseHandler(config: ApiClientConfig) {\n  const { baseURL, getRefreshToken, refresh } = config;\n\n  async function handleResponse(\n    response: Response,\n    options?: { config?: RequestConfig; isRetry?: boolean },\n  ): Promise<unknown> {\n    const responseText = await response.text();\n    let data: unknown;\n    if (responseText) {\n      try {\n        data = JSON.parse(responseText);\n      } catch {\n        data = responseText;\n      }\n    }\n\n    if (!response.ok) {\n      const refreshToken = getRefreshToken();\n      if (\n        shouldRetryWithRefresh(\n          response.status,\n          options?.config?.endpoint,\n          options?.isRetry,\n          refreshToken,\n          refresh,\n        ) &&\n        options?.config\n      ) {\n        const newToken = await executeConfiguredRefresh(config);\n        const retryResponse = await fetch(\n          buildRequestUrl(baseURL, options.config.endpoint),\n          getRequestOptions(options.config, newToken, config.getAcceptLanguage?.()),\n        );\n        return handleResponse(retryResponse, { ...options, isRetry: true });\n      }\n\n      throw {\n        error: data as ApiErrorBody,\n        status: response.status,\n        retry: response.status >= 500,\n      } satisfies RequestError;\n    }\n\n    return data;\n  }\n\n  return handleResponse;\n}\n","import { createContext, type ReactNode, useCallback, useContext, useMemo } from 'react';\nimport { buildRequestUrl, getRequestOptions } from './request';\nimport { createResponseHandler } from './responseHandler';\nimport type { ApiClientConfig, ApiClientProviderConfig, FetchFn, RequestConfig } from './types';\n\nconst ApiClientContext = createContext<ApiClientConfig | null>(null);\n\nexport function ApiClientProvider({\n  baseURL,\n  config,\n  children,\n}: {\n  baseURL: string;\n  config: ApiClientProviderConfig;\n  children: ReactNode;\n}) {\n  const value = useMemo<ApiClientConfig>(() => ({ ...config, baseURL }), [baseURL, config]);\n\n  return <ApiClientContext.Provider value={value}>{children}</ApiClientContext.Provider>;\n}\n\nexport function useApiClientConfig(): ApiClientConfig {\n  const ctx = useContext(ApiClientContext);\n  if (!ctx) {\n    throw new Error('useApiClientConfig must be used within ApiClientProvider');\n  }\n  return ctx;\n}\n\nexport function useAPI(): FetchFn {\n  const config = useApiClientConfig();\n  const responseHandler = useMemo(() => createResponseHandler(config), [config]);\n\n  return useCallback(\n    (requestConfig: RequestConfig) => {\n      const accessToken = config.getAccessToken();\n      return fetch(\n        buildRequestUrl(config.baseURL, requestConfig.endpoint),\n        getRequestOptions(requestConfig, accessToken, config.getAcceptLanguage?.()),\n      ).then((response) => responseHandler(response, { config: requestConfig }));\n    },\n    [config, responseHandler],\n  );\n}\n","import { type ReactNode, useMemo } from 'react';\n\nimport { ApiClientProvider } from './ApiClientContext';\nimport { createDefaultRefreshRequest } from './request';\nimport type { ApiClientProviderConfig } from './types';\n\nexport interface CreateApiProviderOptions {\n  baseURL: string;\n  getAccessToken: () => string | null;\n  getRefreshToken: () => string | null;\n  /** When true, refresh uses HttpOnly cookie credentials instead of body token. */\n  cookieCredentialsEnabled: () => boolean;\n  setAccessToken: (token: string) => void;\n  onRefreshFailure: () => void;\n  getAcceptLanguage?: () => string;\n  onRefreshStart?: () => void;\n  onRefreshEnd?: () => void;\n  /** Optional native refresh boundary; browser apps retain the default HTTP cookie flow. */\n  refreshExecutor?: () => Promise<{ accessToken: string; expiresAt: string }>;\n  /** Refresh endpoint path relative to baseURL. Defaults to `auth/refresh`. */\n  refreshEndpoint?: string;\n  /** Paths that must not trigger automatic refresh retry on 401. Defaults to `['auth/']`. */\n  refreshExcludedPrefixes?: string[];\n}\n\n/**\n * Factory for app `ApiProvider` components. Pass a hook that returns wiring options\n * (cookies, i18n, zustand). Memoize that return value with `useMemo` so the API\n * client context is not rebuilt on every parent render.\n */\nexport function createApiProvider(useOptions: () => CreateApiProviderOptions) {\n  return function ApiProvider({ children }: { children: ReactNode }) {\n    const options = useOptions();\n\n    const apiConfig = useMemo<ApiClientProviderConfig>(\n      () => ({\n        getAccessToken: options.getAccessToken,\n        getRefreshToken: options.getRefreshToken,\n        getAcceptLanguage: options.getAcceptLanguage,\n        refresh: {\n          request: createDefaultRefreshRequest({\n            endpoint: options.refreshEndpoint,\n            excludedRetryPrefixes: options.refreshExcludedPrefixes,\n          }),\n          executor: options.refreshExecutor,\n          cookieCredentialsEnabled: options.cookieCredentialsEnabled,\n          setAccessToken: options.setAccessToken,\n          onFailure: options.onRefreshFailure,\n          onStart: options.onRefreshStart,\n          onEnd: options.onRefreshEnd,\n        },\n      }),\n      [options],\n    );\n\n    return (\n      <ApiClientProvider baseURL={options.baseURL} config={apiConfig}>\n        {children}\n      </ApiClientProvider>\n    );\n  };\n}\n","import { jwtDecode } from 'jwt-decode';\nimport { useEffect } from 'react';\nimport { useApiClientConfig } from './ApiClientContext';\nimport { executeConfiguredRefresh } from './request';\n\n/** Typical access JWT TTL is 15m — refresh ahead of expiry. */\nconst REFRESH_SKEW_MS = 2 * 60 * 1000;\n/** Cap so we re-check often enough if the JWT has no exp. */\nconst KEEP_ALIVE_MAX_DELAY_MS = 4 * 60 * 1000;\n\nexport function accessTokenNeedsRefresh(\n  token: string | null,\n  nowMs: number = Date.now(),\n  skewMs: number = REFRESH_SKEW_MS,\n): boolean {\n  return msUntilAccessRefresh(token, nowMs, skewMs) === 0;\n}\n\n/** Milliseconds until the access JWT should be refreshed (0 = now). */\nexport function msUntilAccessRefresh(\n  token: string | null,\n  nowMs: number = Date.now(),\n  skewMs: number = REFRESH_SKEW_MS,\n): number {\n  if (!token) return 0;\n  try {\n    const { exp } = jwtDecode<{ exp?: number }>(token);\n    if (typeof exp !== 'number') return 0;\n    return Math.max(0, exp * 1000 - skewMs - nowMs);\n  } catch {\n    return 0;\n  }\n}\n\nexport type UseAccessTokenKeepAliveOptions = {\n  /** When false, no timers or listeners are registered. */\n  enabled: boolean;\n  /** Same accessor the API client uses (cookie and/or in-memory). */\n  getAccessToken: () => string | null;\n};\n\n/**\n * Keeps the access token fresh while a session exists.\n * - Timeout scheduled from JWT exp (capped at 4 minutes)\n * - Also refreshes on visibility / focus / pageshow after expiry\n */\nexport function useAccessTokenKeepAlive(options: UseAccessTokenKeepAliveOptions): void {\n  const apiConfig = useApiClientConfig();\n  const { enabled, getAccessToken } = options;\n\n  useEffect(() => {\n    if (!enabled || !apiConfig.refresh) {\n      return;\n    }\n\n    const refreshIfNeeded = () => {\n      if (!accessTokenNeedsRefresh(getAccessToken())) {\n        return;\n      }\n      void executeConfiguredRefresh(apiConfig).catch(() => {\n        // Hard auth failures clear via onRefreshFailure only while the tab is visible.\n      });\n    };\n\n    let timeoutId = 0;\n    const schedule = () => {\n      window.clearTimeout(timeoutId);\n      const until = msUntilAccessRefresh(getAccessToken());\n      const delay =\n        until === 0 ? KEEP_ALIVE_MAX_DELAY_MS : Math.min(until, KEEP_ALIVE_MAX_DELAY_MS);\n      timeoutId = window.setTimeout(() => {\n        refreshIfNeeded();\n        schedule();\n      }, delay);\n    };\n\n    const onVisibility = () => {\n      if (document.visibilityState === 'visible') {\n        refreshIfNeeded();\n        schedule();\n      }\n    };\n\n    refreshIfNeeded();\n    schedule();\n    document.addEventListener('visibilitychange', onVisibility);\n    window.addEventListener('focus', refreshIfNeeded);\n    window.addEventListener('pageshow', refreshIfNeeded);\n\n    return () => {\n      document.removeEventListener('visibilitychange', onVisibility);\n      window.removeEventListener('focus', refreshIfNeeded);\n      window.removeEventListener('pageshow', refreshIfNeeded);\n      window.clearTimeout(timeoutId);\n    };\n  }, [apiConfig, enabled, getAccessToken]);\n}\n"]}

package/dist/errors/index.d.ts

@@ -1,4 +1,4 @@
-import { b as ApiErrorBody } from '../types-CN73TWSY.js';
+import { b as ApiErrorBody } from '../types-BYLBukHJ.js';
 
 /** Maps a Postgres constraint name (snake_case) to a PascalCase i18n key under `errors`. */
 declare function constraintNameToErrorKey(constraintName: string): string;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export { A as AdminDetailErrorKind } from './admin-BVYdWtEy.js';
 export { getAdminDetailErrorKind } from './admin/index.js';
 export { ApiClientProvider, CreateApiProviderOptions, DEFAULT_REFRESH_ENDPOINT, DEFAULT_REFRESH_EXCLUDED_PREFIXES, DefaultRefreshRequestOptions, UseAccessTokenKeepAliveOptions, accessTokenNeedsRefresh, buildRequestUrl, createApiProvider, createDefaultRefreshRequest, createResponseHandler, executeConfiguredRefresh, getRequestHeaders, getRequestOptions, isFatalRefreshFailureStatus, msUntilAccessRefresh, performAccessTokenRefresh, shouldClearSessionOnRefreshFailure, useAPI, useAccessTokenKeepAlive, useApiClientConfig } from './api/index.js';
-export { A as ApiClientConfig, a as ApiClientProviderConfig, b as ApiErrorBody, F as FetchFn, R as RefreshBodyContext, c as RefreshConfig, d as RefreshRequestConfig, e as RequestConfig, f as RequestError } from './types-CN73TWSY.js';
+export { A as ApiClientConfig, a as ApiClientProviderConfig, b as ApiErrorBody, F as FetchFn, R as RefreshBodyContext, c as RefreshConfig, d as RefreshRequestConfig, e as RequestConfig, f as RequestError } from './types-BYLBukHJ.js';
 export { AccessInfo, CookieConsent, DecodedAccessToken, HTTP_ONLY_REFRESH_MARKER, JWTAccessTokenPermissionData, TokenCookieOptions, getAccessInfoFromToken, getAccessTokenFromCookies, getCookieConsentFromCookies, getInitials, getRefreshTokenFromCookies, isInvalidSessionStatus, removeAccessTokenCookie, removeCookieConsentCookie, removeRefreshTokenCookie, resolveApiRefreshToken, setAccessTokenCookie, setCookieConsentCookie, setRefreshTokenCookie, setTokens } from './auth/index.js';
 export { BentoCell, BentoFeatures, BentoFeaturesProps, BlogPostTeaser, BlogTeaser, BlogTeaserProps, ContactSection, ContactSectionProps, CtaBanner, CtaBannerProps, ErrorSpotlight, ErrorSpotlightProps, FaqItem, FaqSection, FaqSectionProps, FeatureMedia, FeatureMediaProps, Footer, FooterContact, FooterLink, FooterProps, Hero, HeroAction, HeroProps, HeroSplit, HeroSplitProps, LaunchProject, LogoCloud, LogoCloudItem, LogoCloudProps, Navigation, NavigationCTA, NavigationLanguageOption, NavigationLanguageSwitcher, NavigationLink, NavigationProps, Newsletter, NewsletterProps, PricingComparisonRow, PricingSection, PricingSectionProps, PricingTier, ProjectLaunches, ProjectLaunchesProps, PromoBanner, PromoBannerProps, Section, SectionProps, SectionVariant, ServiceCard, ServiceCardProps, StatItem, StatsStrip, StatsStripProps, TeamGrid, TeamGridProps, TeamMember, Testimonial, TestimonialProps, TrustBadgeItem, TrustBadges, TrustBadgesProps, VideoShowcase, VideoShowcaseProps } from './components/marketing/index.js';
 export { AdminDetailPage, AdminDetailPageProps, AdminListPage, AdminListPageColumn, AdminListPageProps, AdminListSelectionMode, AuditLogFilterOption, AuditLogListFilters, AuditLogListFiltersProps, BoundQueryStateProps, DateRangeFilter, DateRangeFilterProps, DetailField, DetailFieldList, DetailFieldListProps, DetailFieldVariant, EntityRow, EntityRowAction, EntityRowProps, LabeledSelect, LabeledSelectProps, PageLoader, PageLoaderProps, QueryState, QueryStateBindings, QueryStateProps, RouteSuspense, RouteSuspenseProps, ThemeProvider, ThemeProviderProps, ThemeStore, ThemeToggle, ThemeToggleProps, createBoundQueryState, useDefaultThemeStore, useThemeStoreContext } from './components/spa/index.js';

package/dist/index.js

@@ -5,7 +5,7 @@ export { AdminDetailPage, AdminListPage, AuditLogListFilters, DateRangeFilter, D
 export { Alert, AlertDescription, AlertDialog, AlertDialogAction, AlertDialogCancel, AlertDialogContent, AlertDialogDescription, AlertDialogFooter, AlertDialogHeader, AlertDialogOverlay, AlertDialogPortal, AlertDialogTitle, AlertDialogTrigger, Avatar, AvatarFallback, AvatarImage, Badge, Calendar, Checkbox, ConfirmDialog, DatePicker, DateRangePicker, Dialog, DialogClose, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogOverlay, DialogPortal, DialogTitle, DialogTrigger, DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuTrigger, DropdownScrollableList, DropdownSelectSearchInput, EventCalendar, Form, FormControl, FormDescription, FormDrawer, FormField, FormItem, FormLabel, FormMessage, H3, Heading, Label, Link, MultiSelect, Paragraph, Popover, PopoverAnchor, PopoverContent, PopoverTrigger, SEARCHABLE_SELECT_MIN_OPTIONS, ScrollArea, ScrollBar, SearchField, Select, Separator, Sheet, SheetClose, SheetContent, SheetDescription, SheetFooter, SheetHeader, SheetOverlay, SheetPortal, SheetTitle, SheetTrigger, Switch, Table, TableBody, TableCaption, TableCell, TableFooter, TableHead, TableHeader, TableRow, Tabs, TabsContent, TabsList, TabsTrigger, Textarea, Tooltip, TooltipProvider, UploadDropzone, badgeVariants, dropdownMenuSelectOptionsMaxHeightClassName, filterSelectOptions, foldSearchText, headingVariants, isSelectSearchable, linkStyles, paragraphVariants, useFormField } from './chunk-QHNZTXPJ.js';
 export { Button, Card, CardAction, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Input, buttonVariants } from './chunk-3AYG73DK.js';
 export { getAdminDetailErrorKind } from './chunk-3ZLODBRJ.js';
-export { ApiClientProvider, DEFAULT_REFRESH_ENDPOINT, DEFAULT_REFRESH_EXCLUDED_PREFIXES, accessTokenNeedsRefresh, buildRequestUrl, createApiProvider, createDefaultRefreshRequest, createResponseHandler, executeConfiguredRefresh, getRequestHeaders, getRequestOptions, isFatalRefreshFailureStatus, msUntilAccessRefresh, performAccessTokenRefresh, shouldClearSessionOnRefreshFailure, useAPI, useAccessTokenKeepAlive, useApiClientConfig } from './chunk-2HTQDFQJ.js';
+export { ApiClientProvider, DEFAULT_REFRESH_ENDPOINT, DEFAULT_REFRESH_EXCLUDED_PREFIXES, accessTokenNeedsRefresh, buildRequestUrl, createApiProvider, createDefaultRefreshRequest, createResponseHandler, executeConfiguredRefresh, getRequestHeaders, getRequestOptions, isFatalRefreshFailureStatus, msUntilAccessRefresh, performAccessTokenRefresh, shouldClearSessionOnRefreshFailure, useAPI, useAccessTokenKeepAlive, useApiClientConfig } from './chunk-V6EYEN2F.js';
 export { HTTP_ONLY_REFRESH_MARKER, getAccessInfoFromToken, getAccessTokenFromCookies, getCookieConsentFromCookies, getInitials, getRefreshTokenFromCookies, isInvalidSessionStatus, removeAccessTokenCookie, removeCookieConsentCookie, removeRefreshTokenCookie, resolveApiRefreshToken, setAccessTokenCookie, setCookieConsentCookie, setRefreshTokenCookie, setTokens } from './chunk-LJXHUEXF.js';
 export { createCookieNames } from './chunk-KG4JVAKS.js';
 export { constraintNameToErrorKey, errorCodeFromHttpStatus, formatApiError, getApiErrorFromRequestError, getConflictFieldFromError, getConflictFieldFromExtra, getConstraintNameFromError, getConstraintNameFromExtra, handleApiMutationError, isApiErrorBody, resolveApiError, useQueryApiErrorToast } from './chunk-KZH56VPP.js';

package/dist/{types-CN73TWSY.d.ts → types-BYLBukHJ.d.ts}

@@ -33,6 +33,11 @@ interface RefreshRequestConfig {
 }
 interface RefreshConfig {
     request: RefreshRequestConfig;
+    /** Native hosts rotate their own vaulted refresh credential and return access only. */
+    executor?: () => Promise<{
+        accessToken: string;
+        expiresAt: string;
+    }>;
     cookieCredentialsEnabled: () => boolean;
     setAccessToken: (token: string) => void;
     onFailure: () => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yca-software/yca-react-core",
-  "version": "0.0.22",
+  "version": "0.0.23",
   "description": "Shared React components and helpers for YCA apps.",
   "license": "MIT",
   "packageManager": "pnpm@11.12.0",

package/dist/chunk-2HTQDFQJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/api/request.ts","../src/api/responseHandler.ts","../src/api/ApiClientContext.tsx","../src/api/createApiProvider.tsx","../src/api/useAccessTokenKeepAlive.ts"],"names":["useMemo","jsx"],"mappings":";;;;;;;AAOO,IAAM,wBAAA,GAA2B;AACjC,IAAM,iCAAA,GAAoC,CAAC,OAAO;AAOlD,SAAS,2BAAA,CAA4B;AAAA,EAC1C,QAAA,GAAW,wBAAA;AAAA,EACX,qBAAA,GAAwB;AAC1B,CAAA,GAAkC,EAAC,EAAyB;AAC1D,EAAA,OAAO;AAAA,IACL,QAAA;AAAA,IACA,MAAA,EAAQ,MAAA;AAAA,IACR,SAAA,EAAW,CAAC,EAAE,YAAA,OAAwC,YAAA,GAAe,EAAE,YAAA,EAAa,GAAI,EAAC;AAAA,IACzF,gBAAA,EAAkB,CAAC,IAAA,KAAkB;AACnC,MAAA,IAAI,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,IAAY,iBAAiB,IAAA,EAAM;AAC7D,QAAA,MAAM,QAAS,IAAA,CAAkC,WAAA;AACjD,QAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,GAAQ,IAAA;AAAA,MAC7C;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA;AAAA,GACF;AACF;AAEO,SAAS,eAAA,CAAgB,SAAiB,QAAA,EAA0B;AACzE,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACtC,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACvC,EAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AACxB;AAEO,SAAS,iBAAA,CACd,aACA,OAAA,EACa;AACb,EAAA,MAAM,UAAuB,EAAC;AAC9B,EAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,IAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,EAC5B;AACA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAA,CAAQ,aAAA,GAAgB,UAAU,WAAW,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,IAAI,SAAS,cAAA,EAAgB;AAC3B,IAAA,OAAA,CAAQ,iBAAiB,IAAI,OAAA,CAAQ,cAAA;AAAA,EACvC;AACA,EAAA,OAAO,OAAA;AACT;AAEO,SAAS,iBAAA,CACd,MAAA,EACA,KAAA,EACA,cAAA,EACa;AACb,EAAA,MAAM,IAAA,GAAoB;AAAA,IACxB,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,OAAA,EAAS,kBAAkB,KAAA,EAAO;AAAA,MAChC,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB;AAAA,KACD,CAAA;AAAA,IACD,IAAA,EAAM,MAAA,CAAO,SAAA,GACR,MAAA,CAAO,IAAA,GACR,MAAA,CAAO,IAAA,IAAQ,IAAA,GACb,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,IAAI,CAAA,GAC1B;AAAA,GACR;AACA,EAAA,IAAI,OAAO,WAAA,EAAa;AACtB,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,WAAA;AAAA,EAC5B;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,4BAA4B,MAAA,EAAyB;AACnE,EAAA,OAAO,WAAW,GAAA,IAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,OAAO,MAAA,KAAW,GAAA;AAC1E;AAGO,SAAS,kCAAA,GAA8C;AAC5D,EAAA,OAAO,OAAO,QAAA,KAAa,WAAA,IAAe,QAAA,CAAS,eAAA,KAAoB,QAAA;AACzE;AAEA,SAAS,yBAAyB,MAAA,EAAyB;AACzD,EAAA,OAAO,MAAA,KAAW,KAAK,MAAA,KAAW,GAAA,IAAO,WAAW,GAAA,IAAO,MAAA,KAAW,OAAO,MAAA,KAAW,GAAA;AAC1F;AAEA,IAAM,0BAAA,GAA6B,CAAA;AACnC,IAAM,0BAAA,GAA6B,EAAA;AAEnC,SAAS,KAAK,EAAA,EAA2B;AACvC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,UAAA,CAAW,SAAS,EAAE,CAAA;AAAA,EACxB,CAAC,CAAA;AACH;AAEA,eAAsB,0BAA0B,MAAA,EAQ5B;AAClB,EAAA,MAAM,YAAA,GAAe,MAAA,CAAO,oBAAA,GAAuB,IAAA,GAAO,OAAO,eAAA,EAAgB;AACjF,EAAA,IAAI,CAAC,MAAA,CAAO,oBAAA,IAAwB,CAAC,YAAA,EAAc;AAGjD,IAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,uBAAuB,CAAA,EAAG,QAAQ,GAAA,EAAI;AAAA,EACjE;AAEA,EAAA,MAAM,WAAA,GAAkC;AAAA,IACtC,YAAA;AAAA,IACA,sBAAsB,MAAA,CAAO;AAAA,GAC/B;AAEA,EAAA,MAAM,aAAA,GAA+B;AAAA,IACnC,QAAA,EAAU,OAAO,OAAA,CAAQ,QAAA;AAAA,IACzB,MAAA,EAAQ,OAAO,OAAA,CAAQ,MAAA;AAAA,IACvB,IAAA,EAAM,MAAA,CAAO,OAAA,CAAQ,SAAA,CAAU,WAAW,CAAA;AAAA,IAC1C,WAAA,EAAa,MAAA,CAAO,oBAAA,GAAuB,SAAA,GAAY,OAAO,OAAA,CAAQ;AAAA,GACxE;AAEA,EAAA,IAAI,UAAA,GAAa,CAAA;AACjB,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,0BAAA,EAA4B,WAAW,CAAA,EAAG;AACzE,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,KAAA;AAAA,QACf,eAAA,CAAgB,MAAA,CAAO,OAAA,EAAS,aAAA,CAAc,QAAQ,CAAA;AAAA,QACtD,iBAAA,CAAkB,aAAA,EAAe,IAAA,EAAM,MAAA,CAAO,cAAc;AAAA,OAC9D;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,UAAA,GAAa,CAAA;AACb,MAAA,IAAI,UAAU,0BAAA,EAA4B;AACxC,QAAA,MAAM,IAAA,CAAK,6BAA6B,OAAO,CAAA;AAC/C,QAAA;AAAA,MACF;AACA,MAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,uBAAuB,CAAA,EAAG,QAAQ,CAAA,EAAE;AAAA,IAC/D;AAEA,IAAA,MAAM,YAAA,GAAe,MAAM,QAAA,CAAS,IAAA,EAAK;AAEzC,IAAA,IAAI,IAAA,GAAgB,IAAA;AACpB,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,IAAA,CAAK,MAAM,YAAY,CAAA;AAAA,MAChC,CAAA,CAAA,MAAQ;AACN,QAAA,UAAA,GAAa,CAAA;AACb,QAAA,IAAI,UAAU,0BAAA,EAA4B;AACxC,UAAA,MAAM,IAAA,CAAK,6BAA6B,OAAO,CAAA;AAC/C,UAAA;AAAA,QACF;AACA,QAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,0BAA0B,CAAA,EAAG,QAAQ,CAAA,EAAE;AAAA,MAClE;AAAA,IACF;AAEA,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,OAAA,CAAQ,gBAAA,CAAiB,IAAI,CAAA;AACxD,IAAA,IAAI,QAAA,CAAS,MAAM,WAAA,EAAa;AAC9B,MAAA,MAAA,CAAO,eAAe,WAAW,CAAA;AACjC,MAAA,OAAO,WAAA;AAAA,IACT;AAEA,IAAA,UAAA,GAAa,SAAS,MAAA,IAAU,CAAA;AAChC,IAAA,IAAI,wBAAA,CAAyB,UAAU,CAAA,IAAK,OAAA,GAAU,0BAAA,EAA4B;AAChF,MAAA,MAAM,IAAA,CAAK,6BAA6B,OAAO,CAAA;AAC/C,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,2BAAA,CAA4B,UAAU,CAAA,IAAK,kCAAA,EAAmC,EAAG;AACnF,MAAA,MAAA,CAAO,SAAA,EAAU;AAAA,IACnB;AACA,IAAA,MAAM;AAAA,MACJ,KAAA,EAAO,IAAI,KAAA,CAAM,gCAAgC,CAAA;AAAA,MACjD,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,gCAAgC,CAAA,EAAG,QAAQ,UAAA,EAAW;AACjF;AAGA,IAAI,eAAA,GAA0C,IAAA;AAE9C,IAAI,sBAAA,GAAyB,CAAA;AAC7B,IAAM,mBAAA,GAAsB,GAAA;AAE5B,eAAsB,yBAAyB,MAAA,EAA0C;AACvF,EAAA,MAAM,UAAU,MAAA,CAAO,OAAA;AACvB,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,EAC7C;AAEA,EAAA,IAAI,eAAA,EAAiB;AACnB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,IAAI,yBAAyB,GAAA,EAAK;AAChC,IAAA,MAAM,EAAE,KAAA,EAAO,IAAI,MAAM,sBAAsB,CAAA,EAAG,QAAQ,GAAA,EAAI;AAAA,EAChE;AAEA,EAAA,OAAA,CAAQ,OAAA,IAAU;AAClB,EAAA,eAAA,GAAkB,yBAAA,CAA0B;AAAA,IAC1C,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,SAAS,OAAA,CAAQ,OAAA;AAAA,IACjB,oBAAA,EAAsB,QAAQ,wBAAA,EAAyB;AAAA,IACvD,gBAAgB,OAAA,CAAQ,cAAA;AAAA,IACxB,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,cAAA,EAAgB,OAAO,iBAAA;AAAoB,GAC5C,CAAA,CACE,IAAA,CAAK,CAAC,KAAA,KAAU;AACf,IAAA,sBAAA,GAAyB,CAAA;AACzB,IAAA,OAAO,KAAA;AAAA,EACT,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,GAAA,KAA6B;AACnC,IAAA,MAAM,SAAS,OAAO,GAAA,EAAK,MAAA,KAAW,QAAA,GAAW,IAAI,MAAA,GAAS,CAAA;AAC9D,IAAA,IAAI,wBAAA,CAAyB,MAAM,CAAA,EAAG;AACpC,MAAA,sBAAA,GAAyB,IAAA,CAAK,KAAI,GAAI,mBAAA;AAAA,IACxC;AACA,IAAA,MAAM,GAAA;AAAA,EACR,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,IAAA,eAAA,GAAkB,IAAA;AAClB,IAAA,OAAA,CAAQ,KAAA,IAAQ;AAAA,EAClB,CAAC,CAAA;AAEH,EAAA,OAAO,eAAA;AACT;;;ACzOA,SAAS,sBAAA,CACP,MAAA,EACA,QAAA,EACA,OAAA,EACA,cACA,OAAA,EACS;AACT,EAAA,IAAI,WAAW,GAAA,IAAO,CAAC,OAAA,IAAW,CAAC,YAAY,OAAA,EAAS;AACtD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,UAAA,GAAa,CAAC,CAAC,YAAA,IAAgB,QAAQ,wBAAA,EAAyB;AACtE,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,UAAA,GAAa,QAAA,CAAS,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC7C,EAAA,OAAO,CAAC,OAAA,CAAQ,OAAA,CAAQ,qBAAA,CAAsB,IAAA;AAAA,IAAK,CAAC,WAClD,UAAA,CAAW,UAAA,CAAW,OAAO,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC;AAAA,GACjD;AACF;AAEO,SAAS,sBAAsB,MAAA,EAAyB;AAC7D,EAAA,MAAM,EAAE,OAAA,EAAS,eAAA,EAAiB,OAAA,EAAQ,GAAI,MAAA;AAE9C,EAAA,eAAe,cAAA,CACb,UACA,OAAA,EACkB;AAClB,IAAA,MAAM,YAAA,GAAe,MAAM,QAAA,CAAS,IAAA,EAAK;AACzC,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,IAAA,CAAK,MAAM,YAAY,CAAA;AAAA,MAChC,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,GAAO,YAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,eAAe,eAAA,EAAgB;AACrC,MAAA,IACE,sBAAA;AAAA,QACE,QAAA,CAAS,MAAA;AAAA,QACT,SAAS,MAAA,EAAQ,QAAA;AAAA,QACjB,OAAA,EAAS,OAAA;AAAA,QACT,YAAA;AAAA,QACA;AAAA,OACF,IACA,SAAS,MAAA,EACT;AACA,QAAA,MAAM,QAAA,GAAW,MAAM,wBAAA,CAAyB,MAAM,CAAA;AACtD,QAAA,MAAM,gBAAgB,MAAM,KAAA;AAAA,UAC1B,eAAA,CAAgB,OAAA,EAAS,OAAA,CAAQ,MAAA,CAAO,QAAQ,CAAA;AAAA,UAChD,kBAAkB,OAAA,CAAQ,MAAA,EAAQ,QAAA,EAAU,MAAA,CAAO,qBAAqB;AAAA,SAC1E;AACA,QAAA,OAAO,eAAe,aAAA,EAAe,EAAE,GAAG,OAAA,EAAS,OAAA,EAAS,MAAM,CAAA;AAAA,MACpE;AAEA,MAAA,MAAM;AAAA,QACJ,KAAA,EAAO,IAAA;AAAA,QACP,QAAQ,QAAA,CAAS,MAAA;AAAA,QACjB,KAAA,EAAO,SAAS,MAAA,IAAU;AAAA,OAC5B;AAAA,IACF;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,cAAA;AACT;AClEA,IAAM,gBAAA,GAAmB,cAAsC,IAAI,CAAA;AAE5D,SAAS,iBAAA,CAAkB;AAAA,EAChC,OAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAA,EAIG;AACD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAyB,OAAO,EAAE,GAAG,MAAA,EAAQ,OAAA,EAAQ,CAAA,EAAI,CAAC,OAAA,EAAS,MAAM,CAAC,CAAA;AAExF,EAAA,uBAAO,GAAA,CAAC,gBAAA,CAAiB,QAAA,EAAjB,EAA0B,OAAe,QAAA,EAAS,CAAA;AAC5D;AAEO,SAAS,kBAAA,GAAsC;AACpD,EAAA,MAAM,GAAA,GAAM,WAAW,gBAAgB,CAAA;AACvC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC5E;AACA,EAAA,OAAO,GAAA;AACT;AAEO,SAAS,MAAA,GAAkB;AAChC,EAAA,MAAM,SAAS,kBAAA,EAAmB;AAClC,EAAA,MAAM,eAAA,GAAkB,QAAQ,MAAM,qBAAA,CAAsB,MAAM,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA;AAE7E,EAAA,OAAO,WAAA;AAAA,IACL,CAAC,aAAA,KAAiC;AAChC,MAAA,MAAM,WAAA,GAAc,OAAO,cAAA,EAAe;AAC1C,MAAA,OAAO,KAAA;AAAA,QACL,eAAA,CAAgB,MAAA,CAAO,OAAA,EAAS,aAAA,CAAc,QAAQ,CAAA;AAAA,QACtD,iBAAA,CAAkB,aAAA,EAAe,WAAA,EAAa,MAAA,CAAO,qBAAqB;AAAA,OAC5E,CAAE,IAAA,CAAK,CAAC,QAAA,KAAa,eAAA,CAAgB,UAAU,EAAE,MAAA,EAAQ,aAAA,EAAe,CAAC,CAAA;AAAA,IAC3E,CAAA;AAAA,IACA,CAAC,QAAQ,eAAe;AAAA,GAC1B;AACF;ACfO,SAAS,kBAAkB,UAAA,EAA4C;AAC5E,EAAA,OAAO,SAAS,WAAA,CAAY,EAAE,QAAA,EAAS,EAA4B;AACjE,IAAA,MAAM,UAAU,UAAA,EAAW;AAE3B,IAAA,MAAM,SAAA,GAAYA,OAAAA;AAAA,MAChB,OAAO;AAAA,QACL,gBAAgB,OAAA,CAAQ,cAAA;AAAA,QACxB,iBAAiB,OAAA,CAAQ,eAAA;AAAA,QACzB,mBAAmB,OAAA,CAAQ,iBAAA;AAAA,QAC3B,OAAA,EAAS;AAAA,UACP,SAAS,2BAAA,CAA4B;AAAA,YACnC,UAAU,OAAA,CAAQ,eAAA;AAAA,YAClB,uBAAuB,OAAA,CAAQ;AAAA,WAChC,CAAA;AAAA,UACD,0BAA0B,OAAA,CAAQ,wBAAA;AAAA,UAClC,gBAAgB,OAAA,CAAQ,cAAA;AAAA,UACxB,WAAW,OAAA,CAAQ,gBAAA;AAAA,UACnB,SAAS,OAAA,CAAQ,cAAA;AAAA,UACjB,OAAO,OAAA,CAAQ;AAAA;AACjB,OACF,CAAA;AAAA,MACA,CAAC,OAAO;AAAA,KACV;AAEA,IAAA,uBACEC,IAAC,iBAAA,EAAA,EAAkB,OAAA,EAAS,QAAQ,OAAA,EAAS,MAAA,EAAQ,WAClD,QAAA,EACH,CAAA;AAAA,EAEJ,CAAA;AACF;ACpDA,IAAM,eAAA,GAAkB,IAAI,EAAA,GAAK,GAAA;AAEjC,IAAM,uBAAA,GAA0B,IAAI,EAAA,GAAK,GAAA;AAElC,SAAS,wBACd,KAAA,EACA,KAAA,GAAgB,KAAK,GAAA,EAAI,EACzB,SAAiB,eAAA,EACR;AACT,EAAA,OAAO,oBAAA,CAAqB,KAAA,EAAO,KAAA,EAAO,MAAM,CAAA,KAAM,CAAA;AACxD;AAGO,SAAS,qBACd,KAAA,EACA,KAAA,GAAgB,KAAK,GAAA,EAAI,EACzB,SAAiB,eAAA,EACT;AACR,EAAA,IAAI,CAAC,OAAO,OAAO,CAAA;AACnB,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,GAAA,EAAI,GAAI,SAAA,CAA4B,KAAK,CAAA;AACjD,IAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,CAAA;AACpC,IAAA,OAAO,KAAK,GAAA,CAAI,CAAA,EAAG,GAAA,GAAM,GAAA,GAAO,SAAS,KAAK,CAAA;AAAA,EAChD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAA;AAAA,EACT;AACF;AAcO,SAAS,wBAAwB,OAAA,EAA+C;AACrF,EAAA,MAAM,YAAY,kBAAA,EAAmB;AACrC,EAAA,MAAM,EAAE,OAAA,EAAS,cAAA,EAAe,GAAI,OAAA;AAEpC,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,OAAA,IAAW,CAAC,SAAA,CAAU,OAAA,EAAS;AAClC,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,kBAAkB,MAAM;AAC5B,MAAA,IAAI,CAAC,uBAAA,CAAwB,cAAA,EAAgB,CAAA,EAAG;AAC9C,QAAA;AAAA,MACF;AACA,MAAA,KAAK,wBAAA,CAAyB,SAAS,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,MAErD,CAAC,CAAA;AAAA,IACH,CAAA;AAEA,IAAA,IAAI,SAAA,GAAY,CAAA;AAChB,IAAA,MAAM,WAAW,MAAM;AACrB,MAAA,MAAA,CAAO,aAAa,SAAS,CAAA;AAC7B,MAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,cAAA,EAAgB,CAAA;AACnD,MAAA,MAAM,QACJ,KAAA,KAAU,CAAA,GAAI,0BAA0B,IAAA,CAAK,GAAA,CAAI,OAAO,uBAAuB,CAAA;AACjF,MAAA,SAAA,GAAY,MAAA,CAAO,WAAW,MAAM;AAClC,QAAA,eAAA,EAAgB;AAChB,QAAA,QAAA,EAAS;AAAA,MACX,GAAG,KAAK,CAAA;AAAA,IACV,CAAA;AAEA,IAAA,MAAM,eAAe,MAAM;AACzB,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAC1C,QAAA,eAAA,EAAgB;AAChB,QAAA,QAAA,EAAS;AAAA,MACX;AAAA,IACF,CAAA;AAEA,IAAA,eAAA,EAAgB;AAChB,IAAA,QAAA,EAAS;AACT,IAAA,QAAA,CAAS,gBAAA,CAAiB,oBAAoB,YAAY,CAAA;AAC1D,IAAA,MAAA,CAAO,gBAAA,CAAiB,SAAS,eAAe,CAAA;AAChD,IAAA,MAAA,CAAO,gBAAA,CAAiB,YAAY,eAAe,CAAA;AAEnD,IAAA,OAAO,MAAM;AACX,MAAA,QAAA,CAAS,mBAAA,CAAoB,oBAAoB,YAAY,CAAA;AAC7D,MAAA,MAAA,CAAO,mBAAA,CAAoB,SAAS,eAAe,CAAA;AACnD,MAAA,MAAA,CAAO,mBAAA,CAAoB,YAAY,eAAe,CAAA;AACtD,MAAA,MAAA,CAAO,aAAa,SAAS,CAAA;AAAA,IAC/B,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,SAAA,EAAW,OAAA,EAAS,cAAc,CAAC,CAAA;AACzC","file":"chunk-2HTQDFQJ.js","sourcesContent":["import type {\n  ApiClientConfig,\n  RefreshBodyContext,\n  RefreshRequestConfig,\n  RequestConfig,\n} from './types';\n\nexport const DEFAULT_REFRESH_ENDPOINT = 'auth/refresh';\nexport const DEFAULT_REFRESH_EXCLUDED_PREFIXES = ['auth/'];\n\nexport interface DefaultRefreshRequestOptions {\n  endpoint?: string;\n  excludedRetryPrefixes?: string[];\n}\n\nexport function createDefaultRefreshRequest({\n  endpoint = DEFAULT_REFRESH_ENDPOINT,\n  excludedRetryPrefixes = DEFAULT_REFRESH_EXCLUDED_PREFIXES,\n}: DefaultRefreshRequestOptions = {}): RefreshRequestConfig {\n  return {\n    endpoint,\n    method: 'POST',\n    buildBody: ({ refreshToken }: RefreshBodyContext) => (refreshToken ? { refreshToken } : {}),\n    parseAccessToken: (data: unknown) => {\n      if (data && typeof data === 'object' && 'accessToken' in data) {\n        const token = (data as { accessToken: unknown }).accessToken;\n        return typeof token === 'string' ? token : null;\n      }\n      return null;\n    },\n    excludedRetryPrefixes,\n  };\n}\n\nexport function buildRequestUrl(baseURL: string, endpoint: string): string {\n  const base = baseURL.replace(/\\/$/, '');\n  const path = endpoint.replace(/^\\//, '');\n  return `${base}/${path}`;\n}\n\nexport function getRequestHeaders(\n  accessToken: string | null,\n  options?: { multipart?: boolean; acceptLanguage?: string },\n): HeadersInit {\n  const headers: HeadersInit = {};\n  if (!options?.multipart) {\n    headers['Content-Type'] = 'application/json';\n  }\n  if (accessToken) {\n    headers.Authorization = `Bearer ${accessToken}`;\n  }\n  if (options?.acceptLanguage) {\n    headers['Accept-Language'] = options.acceptLanguage;\n  }\n  return headers;\n}\n\nexport function getRequestOptions(\n  config: RequestConfig,\n  token: string | null,\n  acceptLanguage?: string,\n): RequestInit {\n  const init: RequestInit = {\n    method: config.method,\n    headers: getRequestHeaders(token, {\n      multipart: config.multipart,\n      acceptLanguage,\n    }),\n    body: config.multipart\n      ? (config.body as BodyInit)\n      : config.body != null\n        ? JSON.stringify(config.body)\n        : undefined,\n  };\n  if (config.credentials) {\n    init.credentials = config.credentials;\n  }\n  return init;\n}\n\n/** Auth errors where the refresh cookie/token is actually unusable. */\nexport function isFatalRefreshFailureStatus(status: number): boolean {\n  return status === 400 || status === 401 || status === 403 || status === 404;\n}\n\n/** Background/frozen tabs must not clear the session — cookies may be omitted from the fetch. */\nexport function shouldClearSessionOnRefreshFailure(): boolean {\n  return typeof document === 'undefined' || document.visibilityState !== 'hidden';\n}\n\nfunction isTransientRefreshStatus(status: number): boolean {\n  return status === 0 || status === 429 || status === 502 || status === 503 || status === 504;\n}\n\nconst REFRESH_TRANSIENT_ATTEMPTS = 3;\nconst REFRESH_TRANSIENT_DELAY_MS = 50;\n\nfunction wait(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\nexport async function performAccessTokenRefresh(params: {\n  baseURL: string;\n  getRefreshToken: () => string | null;\n  request: RefreshRequestConfig;\n  useCookieCredentials: boolean;\n  setAccessToken: (token: string) => void;\n  onFailure: () => void;\n  acceptLanguage?: string;\n}): Promise<string> {\n  const refreshToken = params.useCookieCredentials ? null : params.getRefreshToken();\n  if (!params.useCookieCredentials && !refreshToken) {\n    // Missing JS token is not proof the session is dead (hydration may still\n    // install an HttpOnly marker). Do not log the user out.\n    throw { error: new Error('missing refresh token'), status: 401 };\n  }\n\n  const bodyContext: RefreshBodyContext = {\n    refreshToken,\n    useCookieCredentials: params.useCookieCredentials,\n  };\n\n  const requestConfig: RequestConfig = {\n    endpoint: params.request.endpoint,\n    method: params.request.method,\n    body: params.request.buildBody(bodyContext),\n    credentials: params.useCookieCredentials ? 'include' : params.request.credentials,\n  };\n\n  let lastStatus = 0;\n  for (let attempt = 1; attempt <= REFRESH_TRANSIENT_ATTEMPTS; attempt += 1) {\n    let response: Response;\n    try {\n      response = await fetch(\n        buildRequestUrl(params.baseURL, requestConfig.endpoint),\n        getRequestOptions(requestConfig, null, params.acceptLanguage),\n      );\n    } catch {\n      lastStatus = 0;\n      if (attempt < REFRESH_TRANSIENT_ATTEMPTS) {\n        await wait(REFRESH_TRANSIENT_DELAY_MS * attempt);\n        continue;\n      }\n      throw { error: new Error('refresh network error'), status: 0 };\n    }\n\n    const responseText = await response.text();\n\n    let data: unknown = null;\n    if (responseText) {\n      try {\n        data = JSON.parse(responseText);\n      } catch {\n        lastStatus = 0;\n        if (attempt < REFRESH_TRANSIENT_ATTEMPTS) {\n          await wait(REFRESH_TRANSIENT_DELAY_MS * attempt);\n          continue;\n        }\n        throw { error: new Error('invalid refresh response'), status: 0 };\n      }\n    }\n\n    const accessToken = params.request.parseAccessToken(data);\n    if (response.ok && accessToken) {\n      params.setAccessToken(accessToken);\n      return accessToken;\n    }\n\n    lastStatus = response.status || 0;\n    if (isTransientRefreshStatus(lastStatus) && attempt < REFRESH_TRANSIENT_ATTEMPTS) {\n      await wait(REFRESH_TRANSIENT_DELAY_MS * attempt);\n      continue;\n    }\n\n    if (isFatalRefreshFailureStatus(lastStatus) && shouldClearSessionOnRefreshFailure()) {\n      params.onFailure();\n    }\n    throw {\n      error: new Error('failed to refresh access token'),\n      status: lastStatus,\n    };\n  }\n\n  throw { error: new Error('failed to refresh access token'), status: lastStatus };\n}\n\n/** One in-flight refresh per page — parallel 401 retries share the same promise. */\nlet refreshInFlight: Promise<string> | null = null;\n/** After 429/5xx, pause new refresh attempts so the SPA cannot hammer the API. */\nlet refreshCooldownUntilMs = 0;\nconst REFRESH_COOLDOWN_MS = 30_000;\n\nexport async function executeConfiguredRefresh(config: ApiClientConfig): Promise<string> {\n  const refresh = config.refresh;\n  if (!refresh) {\n    throw new Error('refresh is not configured');\n  }\n\n  if (refreshInFlight) {\n    return refreshInFlight;\n  }\n\n  const now = Date.now();\n  if (refreshCooldownUntilMs > now) {\n    throw { error: new Error('refresh cooling down'), status: 429 };\n  }\n\n  refresh.onStart?.();\n  refreshInFlight = performAccessTokenRefresh({\n    baseURL: config.baseURL,\n    getRefreshToken: config.getRefreshToken,\n    request: refresh.request,\n    useCookieCredentials: refresh.cookieCredentialsEnabled(),\n    setAccessToken: refresh.setAccessToken,\n    onFailure: refresh.onFailure,\n    acceptLanguage: config.getAcceptLanguage?.(),\n  })\n    .then((token) => {\n      refreshCooldownUntilMs = 0;\n      return token;\n    })\n    .catch((err: { status?: number }) => {\n      const status = typeof err?.status === 'number' ? err.status : 0;\n      if (isTransientRefreshStatus(status)) {\n        refreshCooldownUntilMs = Date.now() + REFRESH_COOLDOWN_MS;\n      }\n      throw err;\n    })\n    .finally(() => {\n      refreshInFlight = null;\n      refresh.onEnd?.();\n    });\n\n  return refreshInFlight;\n}\n","import { buildRequestUrl, executeConfiguredRefresh, getRequestOptions } from './request';\nimport type { ApiClientConfig, ApiErrorBody, RequestConfig, RequestError } from './types';\n\nfunction shouldRetryWithRefresh(\n  status: number,\n  endpoint: string | undefined,\n  isRetry: boolean | undefined,\n  refreshToken: string | null | undefined,\n  refresh: ApiClientConfig['refresh'],\n): boolean {\n  if (status !== 401 || !refresh || !endpoint || isRetry) {\n    return false;\n  }\n  const canRefresh = !!refreshToken || refresh.cookieCredentialsEnabled();\n  if (!canRefresh) {\n    return false;\n  }\n  const normalized = endpoint.replace(/^\\//, '');\n  return !refresh.request.excludedRetryPrefixes.some((prefix) =>\n    normalized.startsWith(prefix.replace(/^\\//, '')),\n  );\n}\n\nexport function createResponseHandler(config: ApiClientConfig) {\n  const { baseURL, getRefreshToken, refresh } = config;\n\n  async function handleResponse(\n    response: Response,\n    options?: { config?: RequestConfig; isRetry?: boolean },\n  ): Promise<unknown> {\n    const responseText = await response.text();\n    let data: unknown;\n    if (responseText) {\n      try {\n        data = JSON.parse(responseText);\n      } catch {\n        data = responseText;\n      }\n    }\n\n    if (!response.ok) {\n      const refreshToken = getRefreshToken();\n      if (\n        shouldRetryWithRefresh(\n          response.status,\n          options?.config?.endpoint,\n          options?.isRetry,\n          refreshToken,\n          refresh,\n        ) &&\n        options?.config\n      ) {\n        const newToken = await executeConfiguredRefresh(config);\n        const retryResponse = await fetch(\n          buildRequestUrl(baseURL, options.config.endpoint),\n          getRequestOptions(options.config, newToken, config.getAcceptLanguage?.()),\n        );\n        return handleResponse(retryResponse, { ...options, isRetry: true });\n      }\n\n      throw {\n        error: data as ApiErrorBody,\n        status: response.status,\n        retry: response.status >= 500,\n      } satisfies RequestError;\n    }\n\n    return data;\n  }\n\n  return handleResponse;\n}\n","import { createContext, type ReactNode, useCallback, useContext, useMemo } from 'react';\nimport { buildRequestUrl, getRequestOptions } from './request';\nimport { createResponseHandler } from './responseHandler';\nimport type { ApiClientConfig, ApiClientProviderConfig, FetchFn, RequestConfig } from './types';\n\nconst ApiClientContext = createContext<ApiClientConfig | null>(null);\n\nexport function ApiClientProvider({\n  baseURL,\n  config,\n  children,\n}: {\n  baseURL: string;\n  config: ApiClientProviderConfig;\n  children: ReactNode;\n}) {\n  const value = useMemo<ApiClientConfig>(() => ({ ...config, baseURL }), [baseURL, config]);\n\n  return <ApiClientContext.Provider value={value}>{children}</ApiClientContext.Provider>;\n}\n\nexport function useApiClientConfig(): ApiClientConfig {\n  const ctx = useContext(ApiClientContext);\n  if (!ctx) {\n    throw new Error('useApiClientConfig must be used within ApiClientProvider');\n  }\n  return ctx;\n}\n\nexport function useAPI(): FetchFn {\n  const config = useApiClientConfig();\n  const responseHandler = useMemo(() => createResponseHandler(config), [config]);\n\n  return useCallback(\n    (requestConfig: RequestConfig) => {\n      const accessToken = config.getAccessToken();\n      return fetch(\n        buildRequestUrl(config.baseURL, requestConfig.endpoint),\n        getRequestOptions(requestConfig, accessToken, config.getAcceptLanguage?.()),\n      ).then((response) => responseHandler(response, { config: requestConfig }));\n    },\n    [config, responseHandler],\n  );\n}\n","import { type ReactNode, useMemo } from 'react';\n\nimport { ApiClientProvider } from './ApiClientContext';\nimport { createDefaultRefreshRequest } from './request';\nimport type { ApiClientProviderConfig } from './types';\n\nexport interface CreateApiProviderOptions {\n  baseURL: string;\n  getAccessToken: () => string | null;\n  getRefreshToken: () => string | null;\n  /** When true, refresh uses HttpOnly cookie credentials instead of body token. */\n  cookieCredentialsEnabled: () => boolean;\n  setAccessToken: (token: string) => void;\n  onRefreshFailure: () => void;\n  getAcceptLanguage?: () => string;\n  onRefreshStart?: () => void;\n  onRefreshEnd?: () => void;\n  /** Refresh endpoint path relative to baseURL. Defaults to `auth/refresh`. */\n  refreshEndpoint?: string;\n  /** Paths that must not trigger automatic refresh retry on 401. Defaults to `['auth/']`. */\n  refreshExcludedPrefixes?: string[];\n}\n\n/**\n * Factory for app `ApiProvider` components. Pass a hook that returns wiring options\n * (cookies, i18n, zustand). Memoize that return value with `useMemo` so the API\n * client context is not rebuilt on every parent render.\n */\nexport function createApiProvider(useOptions: () => CreateApiProviderOptions) {\n  return function ApiProvider({ children }: { children: ReactNode }) {\n    const options = useOptions();\n\n    const apiConfig = useMemo<ApiClientProviderConfig>(\n      () => ({\n        getAccessToken: options.getAccessToken,\n        getRefreshToken: options.getRefreshToken,\n        getAcceptLanguage: options.getAcceptLanguage,\n        refresh: {\n          request: createDefaultRefreshRequest({\n            endpoint: options.refreshEndpoint,\n            excludedRetryPrefixes: options.refreshExcludedPrefixes,\n          }),\n          cookieCredentialsEnabled: options.cookieCredentialsEnabled,\n          setAccessToken: options.setAccessToken,\n          onFailure: options.onRefreshFailure,\n          onStart: options.onRefreshStart,\n          onEnd: options.onRefreshEnd,\n        },\n      }),\n      [options],\n    );\n\n    return (\n      <ApiClientProvider baseURL={options.baseURL} config={apiConfig}>\n        {children}\n      </ApiClientProvider>\n    );\n  };\n}\n","import { jwtDecode } from 'jwt-decode';\nimport { useEffect } from 'react';\nimport { useApiClientConfig } from './ApiClientContext';\nimport { executeConfiguredRefresh } from './request';\n\n/** Typical access JWT TTL is 15m — refresh ahead of expiry. */\nconst REFRESH_SKEW_MS = 2 * 60 * 1000;\n/** Cap so we re-check often enough if the JWT has no exp. */\nconst KEEP_ALIVE_MAX_DELAY_MS = 4 * 60 * 1000;\n\nexport function accessTokenNeedsRefresh(\n  token: string | null,\n  nowMs: number = Date.now(),\n  skewMs: number = REFRESH_SKEW_MS,\n): boolean {\n  return msUntilAccessRefresh(token, nowMs, skewMs) === 0;\n}\n\n/** Milliseconds until the access JWT should be refreshed (0 = now). */\nexport function msUntilAccessRefresh(\n  token: string | null,\n  nowMs: number = Date.now(),\n  skewMs: number = REFRESH_SKEW_MS,\n): number {\n  if (!token) return 0;\n  try {\n    const { exp } = jwtDecode<{ exp?: number }>(token);\n    if (typeof exp !== 'number') return 0;\n    return Math.max(0, exp * 1000 - skewMs - nowMs);\n  } catch {\n    return 0;\n  }\n}\n\nexport type UseAccessTokenKeepAliveOptions = {\n  /** When false, no timers or listeners are registered. */\n  enabled: boolean;\n  /** Same accessor the API client uses (cookie and/or in-memory). */\n  getAccessToken: () => string | null;\n};\n\n/**\n * Keeps the access token fresh while a session exists.\n * - Timeout scheduled from JWT exp (capped at 4 minutes)\n * - Also refreshes on visibility / focus / pageshow after expiry\n */\nexport function useAccessTokenKeepAlive(options: UseAccessTokenKeepAliveOptions): void {\n  const apiConfig = useApiClientConfig();\n  const { enabled, getAccessToken } = options;\n\n  useEffect(() => {\n    if (!enabled || !apiConfig.refresh) {\n      return;\n    }\n\n    const refreshIfNeeded = () => {\n      if (!accessTokenNeedsRefresh(getAccessToken())) {\n        return;\n      }\n      void executeConfiguredRefresh(apiConfig).catch(() => {\n        // Hard auth failures clear via onRefreshFailure only while the tab is visible.\n      });\n    };\n\n    let timeoutId = 0;\n    const schedule = () => {\n      window.clearTimeout(timeoutId);\n      const until = msUntilAccessRefresh(getAccessToken());\n      const delay =\n        until === 0 ? KEEP_ALIVE_MAX_DELAY_MS : Math.min(until, KEEP_ALIVE_MAX_DELAY_MS);\n      timeoutId = window.setTimeout(() => {\n        refreshIfNeeded();\n        schedule();\n      }, delay);\n    };\n\n    const onVisibility = () => {\n      if (document.visibilityState === 'visible') {\n        refreshIfNeeded();\n        schedule();\n      }\n    };\n\n    refreshIfNeeded();\n    schedule();\n    document.addEventListener('visibilitychange', onVisibility);\n    window.addEventListener('focus', refreshIfNeeded);\n    window.addEventListener('pageshow', refreshIfNeeded);\n\n    return () => {\n      document.removeEventListener('visibilitychange', onVisibility);\n      window.removeEventListener('focus', refreshIfNeeded);\n      window.removeEventListener('pageshow', refreshIfNeeded);\n      window.clearTimeout(timeoutId);\n    };\n  }, [apiConfig, enabled, getAccessToken]);\n}\n"]}