@ydtb/tk-scope-app 0.14.7

package/dist/src/guards/UnifiedGuard.js

@@ -0,0 +1,258 @@
+import { jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
+import { useCallback } from "react";
+import { Navigate, useParams, useLocation } from "@tanstack/react-router";
+import { scopeHasUrlScopeId, queryScopeType } from "@ydtb/tk-scope/client";
+import { useQuery, useQueryClient } from "@ydtb/tk-scope-query-client";
+import { BrandedLoader } from "@ydtb/tk-scope-ui/components/branded-loader";
+import { toast } from "@ydtb/tk-scope-ui/components/sonner";
+import { useAuth } from "../contexts/auth/AuthContext.js";
+import { AuthStrategyGate } from "../auth/AuthStrategyGate.js";
+import { saveLastVisitedScope } from "../lib/resolve-redirect.js";
+import { useScopeContext } from "../contexts/scope/ScopeContext.js";
+import { useCurrentPermissions } from "../lib/permissions-store.js";
+import { WizardShell } from "../onboarding/WizardShell.js";
+import { useScopePermissions } from "../hooks/useScopePermissions.js";
+import { platformApi, onboardingApi } from "../lib/platform-api.js";
+/**
+ * Unified route guard that replaces the older route/auth/scope guard layers
+ * with a single declarative pipeline.
+ *
+ * Pipeline steps:
+ * 1. Auth check (session / pin / device / none)
+ * 2. Scope check (specific scope type or null)
+ * 3. Onboarding check (true / false)
+ * 4. Permissions check (auto / none)
+ */
+export function UnifiedGuard({ guard, children }) {
+    // Step 1: Auth
+    if (guard.auth === "none") {
+        return _jsx(ScopeStep, { guard: guard, children: children });
+    }
+    if (guard.auth === "session") {
+        return _jsx(SessionAuthStep, { guard: guard, children: children });
+    }
+    // pin / device / other strategies — delegate to AuthStrategyGate
+    return (_jsx(AuthStrategyGate, { strategy: guard.auth, children: _jsx(ScopeStep, { guard: guard, children: children }) }));
+}
+// ---------------------------------------------------------------------------
+// Step 1a: Session auth
+// ---------------------------------------------------------------------------
+function SessionAuthStep({ guard, children }) {
+    const { session, isPending } = useAuth();
+    if (isPending) {
+        return _jsx(BrandedLoader, {});
+    }
+    if (!session) {
+        return _jsx(Navigate, { to: "/login" });
+    }
+    return _jsx(ScopeStep, { guard: guard, children: children });
+}
+// ---------------------------------------------------------------------------
+// Step 2: Scope check
+// ---------------------------------------------------------------------------
+function ScopeStep({ guard, children }) {
+    if (guard.scope === null) {
+        return _jsx(PostScopeSteps, { guard: guard, children: children });
+    }
+    return _jsx(GenericScopeStep, { guard: guard, children: children });
+}
+// ---------------------------------------------------------------------------
+// Generic scope step — handles any configured scope type
+// ---------------------------------------------------------------------------
+function GenericScopeStep({ guard, children }) {
+    const params = useParams({ strict: false });
+    const scopeId = params.scopeId;
+    const scopeType = guard.scope;
+    const hasUrlScopeId = scopeHasUrlScopeId(scopeType);
+    if (hasUrlScopeId && !scopeId) {
+        return _jsx(Navigate, { to: "/select-context" });
+    }
+    // Singleton/root scopes have no scopeId param — use a separate access check
+    if (!scopeId) {
+        return _jsx(SingletonScopeAccessStep, { guard: guard, children: children });
+    }
+    return (_jsx(ScopeIdStep, { guard: guard, scopeId: scopeId, scopeType: scopeType, children: children }));
+}
+// ---------------------------------------------------------------------------
+// Scope ID step — validates scopeId against the loaded scope entity
+// ---------------------------------------------------------------------------
+function ScopeIdStep({ guard, scopeId, scopeType, children, }) {
+    const { entity, isPending } = useScopeContext();
+    if (isPending) {
+        return _jsx(BrandedLoader, {});
+    }
+    if (entity && entity.id === scopeId) {
+        saveLastVisitedScope(scopeId, scopeType);
+        return _jsx(PostScopeSteps, { guard: guard, children: children });
+    }
+    toast.error(`You do not have access to this ${scopeType}.`);
+    return _jsx(Navigate, { to: "/select-context" });
+}
+// ---------------------------------------------------------------------------
+// Singleton access step — binary access check for scopes without a URL scopeId
+// ---------------------------------------------------------------------------
+function SingletonScopeAccessStep({ guard, children, }) {
+    // SystemProvider isn't available at this point in the component tree
+    // (it's inside the shell layout, not above the guard).
+    const { data, isPending } = useQuery(platformApi.me.queryOptions());
+    if (isPending) {
+        return _jsx(BrandedLoader, {});
+    }
+    if (data?.hasAccess !== true) {
+        return _jsx(Navigate, { to: "/dashboard" });
+    }
+    return _jsx(PostScopeSteps, { guard: guard, children: children });
+}
+// ---------------------------------------------------------------------------
+// Post-scope steps: onboarding → permissions → children
+// ---------------------------------------------------------------------------
+function PostScopeSteps({ guard, children }) {
+    // Resolve permissions immediately after scope validates.
+    // This fires the checkAccess + permissions.resolve queries so
+    // that downstream steps (onboarding, permission gate) have
+    // permissions loaded by the time they need them.
+    // Only runs for scoped guards — null-scope guards (authenticated shell) skip this.
+    useScopePermissions({
+        enabled: guard.scope !== null,
+        scope: guard.scope,
+    });
+    if (guard.onboarding) {
+        return _jsx(OnboardingStep, { guard: guard, children: children });
+    }
+    if (guard.permissions === "auto") {
+        return _jsx(PermissionsStep, { scope: guard.scope, children: children });
+    }
+    return _jsx(_Fragment, { children: children });
+}
+// ---------------------------------------------------------------------------
+// Step 3: Onboarding check (renders wizard inline instead of redirecting)
+// ---------------------------------------------------------------------------
+function OnboardingStep({ guard, children }) {
+    if (!guard.scope) {
+        throw new Error("OnboardingStep requires a scoped guard");
+    }
+    const params = useParams({ strict: false });
+    const queryClient = useQueryClient();
+    const scope = guard.scope;
+    const hasUrlScopeId = scopeHasUrlScopeId(scope);
+    // Singleton scopes (no $scopeId in URL) use the scope type as their entity ID
+    // (set by root-setup.ts: scopeId defaults to rootScopeType)
+    const scopeId = hasUrlScopeId ? (params.scopeId ?? "") : scope;
+    const { data, isPending } = useQuery(onboardingApi.checkStatus.queryOptions({
+        input: { scope, scopeId },
+        enabled: !hasUrlScopeId || !!params.scopeId,
+        staleTime: 5 * 60 * 1000,
+    }));
+    const handleOnboardingComplete = useCallback(() => {
+        queryClient.invalidateQueries({
+            queryKey: onboardingApi.checkStatus.queryOptions({
+                input: { scope, scopeId },
+            }).queryKey,
+        });
+    }, [queryClient, scope, scopeId]);
+    if (isPending) {
+        return _jsx(BrandedLoader, {});
+    }
+    // If onboarding is complete (or we couldn't check), continue
+    if (data?.completed !== false) {
+        if (guard.permissions === "auto") {
+            return _jsx(PermissionsStep, { scope: guard.scope, children: children });
+        }
+        return _jsx(_Fragment, { children: children });
+    }
+    // Render the onboarding wizard inline
+    return _jsx(WizardShell, { scope: scope, scopeId: scopeId, onComplete: handleOnboardingComplete });
+}
+/**
+ * Tool-level onboarding gate. Checks whether a specific tool's onboarding
+ * steps are complete and renders the wizard inline if not.
+ *
+ * Not yet wired into any route — defined and exported for future use.
+ */
+export function ToolOnboardingStep({ scope, scopeId, toolId, children }) {
+    const queryClient = useQueryClient();
+    const { data, isPending } = useQuery(onboardingApi.checkToolStatus.queryOptions({
+        input: { scope, scopeId, toolId },
+        enabled: !!scopeId && !!toolId,
+        staleTime: 5 * 60 * 1000,
+    }));
+    const handleOnboardingComplete = useCallback(() => {
+        queryClient.invalidateQueries({
+            queryKey: onboardingApi.checkToolStatus.queryOptions({
+                input: { scope, scopeId, toolId },
+            }).queryKey,
+        });
+    }, [queryClient, scope, scopeId, toolId]);
+    if (isPending) {
+        return _jsx(BrandedLoader, {});
+    }
+    if (data?.completed !== false) {
+        return _jsx(_Fragment, { children: children });
+    }
+    return (_jsx(WizardShell, { scope: scope, scopeId: scopeId, toolId: toolId, onComplete: handleOnboardingComplete }));
+}
+// ---------------------------------------------------------------------------
+// Step 4: Permission check (scope-aware)
+// ---------------------------------------------------------------------------
+/**
+ * Extract toolId from pathname based on scope URL prefix pattern.
+ *
+ * Uses the scope config's urlPrefix to determine where toolId is located:
+ * - Scopes with $scopeId (e.g., '/w/$scopeId'): toolId is at index 2 (after prefix and scopeId)
+ * - Scopes without $scopeId (e.g., '/s'): toolId is at index 1 (after prefix)
+ *
+ * Returns empty string for routes that aren't tool routes (e.g., child scope
+ * list pages like /companys). Only segments matching the scope's `includes`
+ * list are treated as tool routes subject to {toolId}.view permission checks.
+ */
+function extractToolId(pathname, scope) {
+    const segments = pathname.split("/").filter(Boolean);
+    if (!scope) {
+        return segments[segments.length - 1] || "";
+    }
+    const config = queryScopeType(scope);
+    const urlPrefix = config?.urlPrefix;
+    if (!urlPrefix) {
+        return segments[segments.length - 1] || "";
+    }
+    let segment;
+    if (urlPrefix.includes("$scopeId")) {
+        segment = segments[2] || "";
+    }
+    else {
+        segment = segments[1] || "";
+    }
+    // Only return the segment if it's a registered tool for this scope.
+    // Non-tool routes (child scope pages, create pages, etc.) should not
+    // be subject to {toolId}.view permission checks.
+    if (segment && config?.includes.includes(segment)) {
+        return segment;
+    }
+    return "";
+}
+function PermissionsStep({ scope, children }) {
+    const location = useLocation();
+    return (_jsx(ScopePermissionsCheck, { scope: scope, pathname: location.pathname, children: children }));
+}
+function ScopePermissionsCheck({ scope, pathname, children, }) {
+    const permissions = useCurrentPermissions();
+    // Wait for permissions to load before making redirect decisions
+    if (!permissions.loaded) {
+        return _jsx(BrandedLoader, {});
+    }
+    const toolId = extractToolId(pathname, scope);
+    if (!toolId) {
+        return _jsx(_Fragment, { children: children });
+    }
+    // Check {toolId}.view permission
+    const viewPermission = `${toolId}.view`;
+    const hasPermission = permissions.effectivePermissions.includes(viewPermission);
+    if (hasPermission) {
+        return _jsx(_Fragment, { children: children });
+    }
+    // No permission — redirect to no-access page.
+    // NavigationProvider isn't available at this point in the component tree,
+    // so we can't look up the first permitted route here.
+    return _jsx(Navigate, { to: "/no-access" });
+}
+//# sourceMappingURL=UnifiedGuard.js.map

package/dist/src/guards/UnifiedGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnifiedGuard.js","sourceRoot":"","sources":["../../../src/guards/UnifiedGuard.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAkB,MAAM,OAAO,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC1E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAkC,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA8B,CAAA;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAoC,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA+B,CAAA;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAUnE;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAqB;IACjE,eAAe;IACf,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAC,SAAS,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAa,CAAA;IACxD,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,KAAC,eAAe,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAmB,CAAA;IACpE,CAAC;IAED,iEAAiE;IACjE,OAAO,CACL,KAAC,gBAAgB,IAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,YACpC,KAAC,SAAS,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAa,GAC9B,CACpB,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,SAAS,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAA+C;IACvF,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAA;IAExC,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,KAAC,aAAa,KAAG,CAAA;IAC1B,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAC,QAAQ,GAAG,CAAA;IACjC,CAAC;IAED,OAAO,KAAC,SAAS,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAa,CAAA;AACxD,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,SAAS,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAA+C;IACjF,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAkB,CAAA;IAClE,CAAC;IAED,OAAO,KAAC,gBAAgB,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAoB,CAAA;AACtE,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAA+C;IACxF,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA2B,CAAA;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,KAAM,CAAA;IAC9B,MAAM,aAAa,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAA;IAEnD,IAAI,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAC,iBAAiB,GAAG,CAAA;IAC1C,CAAC;IAED,4EAA4E;IAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAC,wBAAwB,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAA4B,CAAA;IACtF,CAAC;IAED,OAAO,CACL,KAAC,WAAW,IAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,YAC9D,QAAQ,GACG,CACf,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,oEAAoE;AACpE,8EAA8E;AAE9E,SAAS,WAAW,CAAC,EACnB,KAAK,EACL,OAAO,EACP,SAAS,EACT,QAAQ,GAMT;IACC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,EAAE,CAAA;IAE/C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,KAAC,aAAa,KAAG,CAAA;IAC1B,CAAC;IAED,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;QACpC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QACxC,OAAO,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAkB,CAAA;IAClE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,kCAAkC,SAAS,GAAG,CAAC,CAAA;IAC3D,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAC,iBAAiB,GAAG,CAAA;AAC1C,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAE9E,SAAS,wBAAwB,CAAC,EAChC,KAAK,EACL,QAAQ,GAIT;IACC,qEAAqE;IACrE,uDAAuD;IACvD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,CAGjE,CAAA;IAED,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,KAAC,aAAa,KAAG,CAAA;IAC1B,CAAC;IAED,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAC,YAAY,GAAG,CAAA;IACrC,CAAC;IAED,OAAO,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAkB,CAAA;AAClE,CAAC;AAED,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,SAAS,cAAc,CAAC,EAAE,KAAK,EAAE,QAAQ,EAA+C;IACtF,yDAAyD;IACzD,8DAA8D;IAC9D,2DAA2D;IAC3D,iDAAiD;IACjD,mFAAmF;IACnF,mBAAmB,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI;QAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAA;IAEF,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAkB,CAAA;IAClE,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,KAAC,eAAe,IAAC,KAAK,EAAE,KAAK,CAAC,KAAK,YAAG,QAAQ,GAAmB,CAAA;IAC1E,CAAC;IAED,OAAO,4BAAG,QAAQ,GAAI,CAAA;AACxB,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E,SAAS,cAAc,CAAC,EAAE,KAAK,EAAE,QAAQ,EAA+C;IACtF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAyB,CAAA;IACnE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;IAEzB,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAC/C,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAE9D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAClC,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC;QACrC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACzB,OAAO,EAAE,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO;QAC3C,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;KACzB,CAAC,CAIH,CAAA;IAED,MAAM,wBAAwB,GAAG,WAAW,CAAC,GAAG,EAAE;QAChD,WAAW,CAAC,iBAAiB,CAAC;YAC5B,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC;gBAC/C,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;aAC1B,CAAC,CAAC,QAAQ;SACZ,CAAC,CAAA;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IAEjC,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,KAAC,aAAa,KAAG,CAAA;IAC1B,CAAC;IAED,6DAA6D;IAC7D,IAAI,IAAI,EAAE,SAAS,KAAK,KAAK,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,KAAC,eAAe,IAAC,KAAK,EAAE,KAAK,CAAC,KAAK,YAAG,QAAQ,GAAmB,CAAA;QAC1E,CAAC;QACD,OAAO,4BAAG,QAAQ,GAAI,CAAA;IACxB,CAAC;IAED,sCAAsC;IACtC,OAAO,KAAC,WAAW,IAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,GAAI,CAAA;AAC9F,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAA2B;IAC9F,MAAM,WAAW,GAAG,cAAc,EAAE,CAAA;IAEpC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAClC,aAAa,CAAC,eAAe,CAAC,YAAY,CAAC;QACzC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;QACjC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM;QAC9B,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;KACzB,CAAC,CACiE,CAAA;IAErE,MAAM,wBAAwB,GAAG,WAAW,CAAC,GAAG,EAAE;QAChD,WAAW,CAAC,iBAAiB,CAAC;YAC5B,QAAQ,EAAE,aAAa,CAAC,eAAe,CAAC,YAAY,CAAC;gBACnD,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;aAClC,CAAC,CAAC,QAAQ;SACZ,CAAC,CAAA;IACJ,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IAEzC,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,KAAC,aAAa,KAAG,CAAA;IAC1B,CAAC;IAED,IAAI,IAAI,EAAE,SAAS,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,4BAAG,QAAQ,GAAI,CAAA;IACxB,CAAC;IAED,OAAO,CACL,KAAC,WAAW,IACV,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,wBAAwB,GACpC,CACH,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,KAAoB;IAC3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAEpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,CAAA;IACnC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAC5C,CAAC;IAED,IAAI,OAAe,CAAA;IACnB,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7B,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC7B,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,iDAAiD;IACjD,IAAI,OAAO,IAAI,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAiD;IACzF,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAE9B,OAAO,CACL,KAAC,qBAAqB,IAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,YAC7D,QAAQ,GACa,CACzB,CAAA;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,EAC7B,KAAK,EACL,QAAQ,EACR,QAAQ,GAKT;IACC,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAA;IAE3C,gEAAgE;IAChE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO,KAAC,aAAa,KAAG,CAAA;IAC1B,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAE7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,4BAAG,QAAQ,GAAI,CAAA;IACxB,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,GAAG,MAAM,OAAO,CAAA;IACvC,MAAM,aAAa,GAAG,WAAW,CAAC,oBAAoB,CAAC,QAAQ,CAAC,cAAuB,CAAC,CAAA;IAExF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,4BAAG,QAAQ,GAAI,CAAA;IACxB,CAAC;IAED,8CAA8C;IAC9C,0EAA0E;IAC1E,sDAAsD;IACtD,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAC,YAAY,GAAG,CAAA;AACrC,CAAC"}

package/dist/src/guards/index.d.ts

@@ -0,0 +1,3 @@
+export { UnifiedGuard } from "./UnifiedGuard.tsx";
+export { SetupGate } from "./SetupGate.tsx";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/guards/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/guards/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/src/guards/index.js

@@ -0,0 +1,3 @@
+export { UnifiedGuard } from "./UnifiedGuard.js";
+export { SetupGate } from "./SetupGate.js";
+//# sourceMappingURL=index.js.map

package/dist/src/guards/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/guards/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAoB,CAAA;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAiB,CAAA"}

package/dist/src/hooks/index.d.ts

@@ -0,0 +1,9 @@
+export { useCheckAccess } from "./useCheckAccess.ts";
+export { createScope, checkSlugAvailability } from "./useCreateScope.ts";
+export { getInvitation, listInvitations, acceptInvitation, rejectInvitation, invitationKeys, } from "./useInvitations.ts";
+export { validateJoinCode, redeemJoinCode } from "./useJoinCode.ts";
+export { usePreference } from "./usePreference.ts";
+export { useScopeList } from "./useScopeList.ts";
+export { useScopePermissions } from "./useScopePermissions.ts";
+export { useScopeMenuPolicy } from "./useScopeMenuPolicy.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/hooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA"}

package/dist/src/hooks/index.js

@@ -0,0 +1,9 @@
+export { useCheckAccess } from "./useCheckAccess.js";
+export { createScope, checkSlugAvailability } from "./useCreateScope.js";
+export { getInvitation, listInvitations, acceptInvitation, rejectInvitation, invitationKeys, } from "./useInvitations.js";
+export { validateJoinCode, redeemJoinCode } from "./useJoinCode.js";
+export { usePreference } from "./usePreference.js";
+export { useScopeList } from "./useScopeList.js";
+export { useScopePermissions } from "./useScopePermissions.js";
+export { useScopeMenuPolicy } from "./useScopeMenuPolicy.js";
+//# sourceMappingURL=index.js.map

package/dist/src/hooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA"}

package/dist/src/hooks/useCheckAccess.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Scope access check hook.
+ *
+ * Wraps scopeApi.get() to extract membership info. The scope extension's
+ * get endpoint returns both the scope entity and the user's membership.
+ *
+ * Used by useChildScopePermissions. (useScopePermissions uses scopeApi.get
+ * directly — same underlying call.)
+ */
+export declare function useCheckAccess(scopeId: string | null | undefined): {
+    hasAccess: boolean;
+    memberId: string;
+    role: string | undefined;
+    isPending: boolean;
+};
+//# sourceMappingURL=useCheckAccess.d.ts.map

package/dist/src/hooks/useCheckAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCheckAccess.d.ts","sourceRoot":"","sources":["../../../src/hooks/useCheckAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;;;;;EAchE"}

package/dist/src/hooks/useCheckAccess.js

@@ -0,0 +1,25 @@
+/**
+ * Scope access check hook.
+ *
+ * Wraps scopeApi.get() to extract membership info. The scope extension's
+ * get endpoint returns both the scope entity and the user's membership.
+ *
+ * Used by useChildScopePermissions. (useScopePermissions uses scopeApi.get
+ * directly — same underlying call.)
+ */
+import { useQuery } from "@ydtb/tk-scope-query-client";
+import { scopeApi } from "../lib/platform-api.js";
+export function useCheckAccess(scopeId) {
+    const { data, isPending } = useQuery({
+        ...scopeApi.get.queryOptions({ input: { scopeId: scopeId } }),
+        enabled: !!scopeId,
+    });
+    const membership = data?.membership;
+    return {
+        hasAccess: !!membership,
+        memberId: membership?.id ?? "",
+        role: membership?.role,
+        isPending,
+    };
+}
+//# sourceMappingURL=useCheckAccess.js.map

package/dist/src/hooks/useCheckAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCheckAccess.js","sourceRoot":"","sources":["../../../src/hooks/useCheckAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAEjD,MAAM,UAAU,cAAc,CAAC,OAAkC;IAC/D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QACnC,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAQ,EAAE,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,OAAO;KACnB,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,IAAI,EAAE,UAAuD,CAAA;IAEhF,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE;QAC9B,IAAI,EAAE,UAAU,EAAE,IAAI;QACtB,SAAS;KACV,CAAA;AACH,CAAC"}

package/dist/src/hooks/useCreateScope.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Scope creation hooks — checkSlug + create.
+ *
+ * Single source of truth for scope creation logic. Used by
+ * CreateScopeDialog and CreateScopeWizardStep.
+ */
+/**
+ * Check if a slug is available for a scope type.
+ * Returns null while not checked, true if available, false if taken.
+ */
+export declare function checkSlugAvailability(type: string, slug: string): Promise<boolean>;
+/**
+ * Create a new scope entity.
+ * Returns the created scope data.
+ */
+export declare function createScope(params: {
+    type: string;
+    name: string;
+    slug: string;
+    parentScopeId?: string;
+}): Promise<{
+    scope: {
+        slug: string;
+        id: string;
+        name: string;
+        scope: string;
+        parentScope: string | null;
+        parentScopeId: string | null;
+        logo: string | null;
+        metadata: unknown;
+        createdAt: Date;
+        updatedAt: Date;
+    };
+    member: {
+        id: string;
+        createdAt: Date;
+        scopeId: string;
+        userId: string;
+        role: string;
+    };
+}>;
+//# sourceMappingURL=useCreateScope.d.ts.map

package/dist/src/hooks/useCreateScope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCreateScope.d.ts","sourceRoot":"","sources":["../../../src/hooks/useCreateScope.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOxF;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;;;;;;;;;;;;;;;;;;;;GAEA"}

package/dist/src/hooks/useCreateScope.js

@@ -0,0 +1,28 @@
+/**
+ * Scope creation hooks — checkSlug + create.
+ *
+ * Single source of truth for scope creation logic. Used by
+ * CreateScopeDialog and CreateScopeWizardStep.
+ */
+import { scopeApi } from "../lib/platform-api.js";
+/**
+ * Check if a slug is available for a scope type.
+ * Returns null while not checked, true if available, false if taken.
+ */
+export async function checkSlugAvailability(type, slug) {
+    try {
+        const result = await scopeApi.$client.checkSlug({ type, slug });
+        return result?.available ?? false;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Create a new scope entity.
+ * Returns the created scope data.
+ */
+export async function createScope(params) {
+    return scopeApi.$client.create(params);
+}
+//# sourceMappingURL=useCreateScope.js.map

package/dist/src/hooks/useCreateScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCreateScope.js","sourceRoot":"","sources":["../../../src/hooks/useCreateScope.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAEjD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,IAAY;IACpE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,OAAQ,MAAkC,EAAE,SAAS,IAAI,KAAK,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAKjC;IACC,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACxC,CAAC"}

package/dist/src/hooks/useInvitations.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Invitation hooks — get, list, accept, reject.
+ *
+ * Single source of truth for invitation operations.
+ * Used by AcceptInvitePage and ProfileScopeSection.
+ */
+/**
+ * Fetch a single invitation by ID.
+ */
+export declare function getInvitation(id: string): Promise<{
+    id: string;
+    scopeId: string;
+    scopeName: string;
+    scopeSlug: string;
+    inviterEmail: string;
+    email: string;
+    role: string;
+    status: string;
+    createdAt: Date;
+}>;
+/**
+ * Fetch all pending invitations for the current user.
+ */
+export declare function listInvitations(): Promise<{
+    invitations: {
+        id: string;
+        scopeId: string;
+        role: string;
+        scopeType: string;
+        scopeName: string;
+        scopeSlug: string;
+        scopeLogo: string | null;
+        createdAt: Date;
+    }[];
+}>;
+/**
+ * Accept an invitation.
+ * Callers should invalidate scope list and invitation queries on success.
+ */
+export declare function acceptInvitation(invitationId: string): Promise<{
+    member: {
+        id: string;
+    };
+    alreadyMember: boolean;
+    scope?: undefined;
+} | {
+    scope: {
+        id: string;
+        scope: string;
+        parentScope: string | null;
+        parentScopeId: string | null;
+        name: string;
+        slug: string;
+        logo: string | null;
+        metadata: unknown;
+        createdAt: Date;
+        updatedAt: Date;
+    } | undefined;
+    member: {
+        id: string;
+        createdAt: Date;
+        scopeId: string;
+        userId: string;
+        role: string;
+    };
+    alreadyMember: boolean;
+}>;
+/**
+ * Reject an invitation.
+ * Callers should invalidate invitation queries on success.
+ */
+export declare function rejectInvitation(invitationId: string): Promise<{
+    success: boolean;
+}>;
+/** Query key helpers for cache invalidation */
+export declare const invitationKeys: {
+    list: () => import("@orpc/tanstack-query").OperationKey<import("@orpc/tanstack-query").OperationType, Record<string, never>>;
+    scopeList: () => import("@orpc/tanstack-query").OperationKey<import("@orpc/tanstack-query").OperationType, {
+        type?: string | undefined;
+    }>;
+};
+//# sourceMappingURL=useInvitations.d.ts.map

package/dist/src/hooks/useInvitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useInvitations.d.ts","sourceRoot":"","sources":["../../../src/hooks/useInvitations.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;GAEG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;GAE7C;AAED;;GAEG;AACH,wBAAsB,eAAe;;;;;;;;;;;GAEpC;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;GAE1D;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM;;GAE1D;AAED,+CAA+C;AAC/C,eAAO,MAAM,cAAc;;;;;CAG1B,CAAA"}

package/dist/src/hooks/useInvitations.js

@@ -0,0 +1,39 @@
+/**
+ * Invitation hooks — get, list, accept, reject.
+ *
+ * Single source of truth for invitation operations.
+ * Used by AcceptInvitePage and ProfileScopeSection.
+ */
+import { invitationsApi, scopeApi } from "../lib/platform-api.js";
+/**
+ * Fetch a single invitation by ID.
+ */
+export async function getInvitation(id) {
+    return invitationsApi.$client.get({ id });
+}
+/**
+ * Fetch all pending invitations for the current user.
+ */
+export async function listInvitations() {
+    return invitationsApi.$client.list({});
+}
+/**
+ * Accept an invitation.
+ * Callers should invalidate scope list and invitation queries on success.
+ */
+export async function acceptInvitation(invitationId) {
+    return invitationsApi.$client.accept({ invitationId });
+}
+/**
+ * Reject an invitation.
+ * Callers should invalidate invitation queries on success.
+ */
+export async function rejectInvitation(invitationId) {
+    return invitationsApi.$client.reject({ invitationId });
+}
+/** Query key helpers for cache invalidation */
+export const invitationKeys = {
+    list: () => invitationsApi.list.key(),
+    scopeList: () => scopeApi.list.key(),
+};
+//# sourceMappingURL=useInvitations.js.map

package/dist/src/hooks/useInvitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useInvitations.js","sourceRoot":"","sources":["../../../src/hooks/useInvitations.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAEjE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU;IAC5C,OAAO,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IACzD,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAA;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IACzD,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAA;AACxD,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE;IACrC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;CACrC,CAAA"}

package/dist/src/hooks/useJoinCode.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Join code hooks — validate + redeem.
+ *
+ * Adapts the scope extension's joinCodes.use endpoint to match the
+ * old authClient.scope.joinCode.validate/redeem API shape.
+ *
+ * Used by JoinScopeDialog.
+ */
+interface ValidateResult {
+    valid: boolean;
+    scope?: {
+        id: string;
+        name: string;
+        logo: string | null;
+    } | null;
+    error?: string;
+}
+/**
+ * Validate a join code. Returns the old-style { valid, scope, error } shape.
+ *
+ * The scope extension's `use` endpoint throws on invalid codes rather than
+ * returning `{ valid: false }`. This function adapts that to the shape
+ * JoinScopeDialog expects.
+ */
+export declare function validateJoinCode(code: string): Promise<ValidateResult>;
+/**
+ * Redeem a join code (join the scope).
+ */
+export declare function redeemJoinCode(code: string): Promise<{
+    scope: {
+        id: string;
+        scope: string;
+        parentScope: string | null;
+        parentScopeId: string | null;
+        name: string;
+        slug: string;
+        logo: string | null;
+        metadata: unknown;
+        createdAt: Date;
+        updatedAt: Date;
+    };
+    member: {
+        id: string;
+        scopeId: string;
+        userId: string;
+        role: string;
+        createdAt: Date;
+    };
+    alreadyMember: boolean;
+}>;
+export {};
+//# sourceMappingURL=useJoinCode.d.ts.map

package/dist/src/hooks/useJoinCode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useJoinCode.d.ts","sourceRoot":"","sources":["../../../src/hooks/useJoinCode.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,UAAU,cAAc;IACtB,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAA;IAChE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAY5E;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;GAEhD"}