astrogators-shared-ui 0.16.3 → 0.17.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 psytor
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,8 +1,9 @@
 # astrogators-shared-ui
 
 Shared React components, auth, and API client for the Astrogator's Table
-frontends (`astrogators-hub`, `mod-ledger-ui`, `nightwatcher-ui`). Published
-to the public npm registry as `astrogators-shared-ui` (unscoped).
+frontends (`astrogators-hub`, `mod-ledger-ui`, `nightwatcher-ui`,
+`navicharts-ui`). Published to the public npm registry as
+`astrogators-shared-ui` (unscoped).
 
 > The git repo lives under `psytor/astrogators-shared-ui` on GitHub, but the
 > package itself is published to **npmjs.org**, not GitHub Packages. No
@@ -177,9 +178,14 @@ const result = await apiClient.post('/api/v1/mod-ledger/evaluate/123456789', {
 
 The client:
 - injects the access token into `Authorization`
-- on `401`, transparently refreshes via `/api/v1/auth/refresh-token` and
-  retries the original request once
+- proactively refreshes before a request goes out if the access token is
+  expired or expiring within 30s (decoded client-side), and reactively on a
+  `401` from the resource server — both via `/api/v1/auth/refresh`, retrying
+  the original request once
 - calls `onUnauthorized` if refresh fails
+- retries a `502`/`503`/`504` response (idempotent methods only) or a thrown
+  `fetch` (any method, since nothing reached the server) a couple of times
+  with a short backoff, to ride out a backend container swap mid-deploy
 
 Endpoints are written **without** the service prefix — the prefix lives in
 the configured `baseURL`.
@@ -254,6 +260,7 @@ Sci-fi cut-corner effect, available as utility classes or via `Card`:
 npm install
 npm run build        # tsc && vite build → dist/
 npm run type-check   # tsc --noEmit
+npm test             # vitest run — logic tests in tests/ (not visual)
 ```
 
 There is no `dev` server worth running (this is a library, not an app).

package/dist/index.js

@@ -140,9 +140,9 @@ var _ = [
 	x(e), w(t);
 }, D = () => {
 	S(), T();
-}, O = () => !!b(), ee = "", k, A = null, te = (e) => {
-	ee = e.baseURL, k = e.onUnauthorized;
-}, j = () => A || (A = (async () => {
+}, O = () => !!b(), ee = "", te, k = null, A = (e) => {
+	ee = e.baseURL, te = e.onUnauthorized;
+}, j = () => k || (k = (async () => {
 	let e = C();
 	if (!e) throw Error("No refresh token available");
 	let t = await fetch(`${ee}/api/v1/auth/refresh`, {
@@ -150,22 +150,22 @@ var _ = [
 		headers: { "Content-Type": "application/json" },
 		body: JSON.stringify({ refresh_token: e })
 	});
-	if (!t.ok) throw D(), k?.(), Error("Token refresh failed");
+	if (!t.ok) throw D(), te?.(), Error("Token refresh failed");
 	let n = await t.json();
 	return E(n.access_token, n.refresh_token), n.access_token;
 })().finally(() => {
-	A = null;
-}), A), ne = 30, M = [700, 1500], N = new Set([
+	k = null;
+}), k), ne = 30, M = [700, 1500], N = /* @__PURE__ */ new Set([
 	502,
 	503,
 	504
-]), re = (e) => {
+]), P = (e) => {
 	let t = (e ?? "GET").toUpperCase();
 	return t === "GET" || t === "HEAD" || t === "OPTIONS";
-}, P = (e) => e == null || typeof e == "string", ie = (e) => new Promise((t) => setTimeout(t, e)), ae = async (e, t) => {
-	let n = re(t.method) && P(t.body), r = P(t.body), i;
+}, F = (e) => e == null || typeof e == "string", re = (e) => new Promise((t) => setTimeout(t, e)), I = async (e, t) => {
+	let n = P(t.method) && F(t.body), r = F(t.body), i;
 	for (let a = 0; a <= M.length; a++) {
-		a > 0 && await ie(M[a - 1]);
+		a > 0 && await re(M[a - 1]);
 		let o = a < M.length;
 		try {
 			let r = await fetch(e, t);
@@ -177,39 +177,39 @@ var _ = [
 		}
 	}
 	throw i ?? /* @__PURE__ */ Error("fetchWithRetry: retries exhausted");
-}, oe = (e) => {
+}, ie = (e) => {
 	try {
 		let t = e.split(".")[1].replace(/-/g, "+").replace(/_/g, "/"), { exp: n } = JSON.parse(atob(t));
 		return typeof n == "number" && Date.now() / 1e3 >= n - ne;
 	} catch {
 		return !1;
 	}
-}, se = async (e, t = {}) => {
+}, ae = async (e, t = {}) => {
 	let n = b();
-	if (n && oe(n)) try {
+	if (n && ie(n)) try {
 		n = await j();
 	} catch {
 		n = b();
 	}
 	let r = { ...t.headers };
 	n && (r.Authorization = `Bearer ${n}`);
-	let i = await ae(e, {
+	let i = await I(e, {
 		...t,
 		headers: r
 	});
 	if (i.status !== 401 || !n) return i;
 	try {
-		return r.Authorization = `Bearer ${await j()}`, await ae(e, {
+		return r.Authorization = `Bearer ${await j()}`, await I(e, {
 			...t,
 			headers: r
 		});
 	} catch {
 		return i;
 	}
-}, ce = class {
+}, oe = class {
 	baseURL;
 	constructor(e) {
-		this.baseURL = e.baseURL, te({
+		this.baseURL = e.baseURL, A({
 			baseURL: e.baseURL,
 			onUnauthorized: e.onUnauthorized
 		});
@@ -218,7 +218,7 @@ var _ = [
 		let n = {
 			"Content-Type": "application/json",
 			...t.headers
-		}, r = await se(`${this.baseURL}${e}`, {
+		}, r = await ae(`${this.baseURL}${e}`, {
 			...t,
 			headers: n
 		});
@@ -268,53 +268,57 @@ var _ = [
 			method: "DELETE"
 		});
 	}
-}, F, le = (e) => {
-	F = new ce(e);
-}, I = "astrogators_ally_codes", ue = "astrogators_selected_ally_code", L = () => {
+}, L, se = (e) => {
+	L = new oe(e);
+}, ce = async (e) => {
+	let t = await L.patch("/api/v1/users/me", e);
+	return t.tokens && E(t.tokens.access_token, t.tokens.refresh_token), t;
+}, le = async () => (await L.post("/api/v1/auth/logout-all")).message, R = "astrogators_ally_codes", ue = "astrogators_selected_ally_code", z = () => {
 	try {
-		let e = localStorage.getItem(I);
+		let e = localStorage.getItem(R);
 		return e ? JSON.parse(e) : [];
 	} catch (e) {
 		return console.error("Failed to read ally codes from localStorage:", e), [];
 	}
 }, de = (e) => {
 	try {
-		let t = L();
+		let t = z();
 		if (t.some((t) => t.ally_code === e.ally_code)) return;
-		t.push(e), localStorage.setItem(I, JSON.stringify(t));
+		t.push(e), localStorage.setItem(R, JSON.stringify(t));
 	} catch (e) {
 		console.error("Failed to save ally code to localStorage:", e);
 	}
 }, fe = (e) => {
 	try {
-		let t = L().filter((t) => t.ally_code !== e);
-		localStorage.setItem(I, JSON.stringify(t));
+		let t = z().filter((t) => t.ally_code !== e);
+		localStorage.setItem(R, JSON.stringify(t));
 	} catch (e) {
 		console.error("Failed to remove ally code from localStorage:", e);
 	}
 }, pe = (e) => {
 	try {
-		let t = L().map((t) => t.ally_code === e ? {
+		let t = z().map((t) => t.ally_code === e ? {
 			...t,
 			last_used_at: (/* @__PURE__ */ new Date()).toISOString()
 		} : t);
-		localStorage.setItem(I, JSON.stringify(t));
+		localStorage.setItem(R, JSON.stringify(t));
 	} catch (e) {
 		console.error("Failed to update ally code last used:", e);
 	}
-}, me = () => localStorage.getItem(ue), R = (e) => {
+}, me = () => localStorage.getItem(ue), B = (e) => {
 	e ? localStorage.setItem(ue, e) : localStorage.removeItem(ue);
 }, he = () => {
-	localStorage.removeItem(I), localStorage.removeItem(ue);
+	localStorage.removeItem(R), localStorage.removeItem(ue);
 }, ge = t(void 0), _e = ({ children: e, apiBaseUrl: t }) => {
 	let [n, i] = s(null), [o, c] = s(!0), [u, d] = s(!0), [f, p] = s(!0), [m, h] = s([]), [g, _] = s(null), [v, y] = s(!1), [b, x] = s({
 		show: !1,
 		localStorageCodes: []
 	});
-	le({ baseURL: t }), a(() => {
+	se({ baseURL: t }), a(() => {
 		(async () => {
 			try {
-				d((await F.get("/api/v1/config/features")).auth_enabled);
+				let e = await L.get("/api/v1/config/features");
+				d(e.auth_enabled);
 			} catch (e) {
 				console.error("Failed to fetch features:", e), d(!0);
 			} finally {
@@ -328,7 +332,8 @@ var _ = [
 			return;
 		}
 		try {
-			i(await F.get("/api/v1/users/me"));
+			let e = await L.get("/api/v1/users/me");
+			i(e);
 		} catch (e) {
 			console.error("Failed to fetch user:", e), i(null), D();
 		} finally {
@@ -340,122 +345,133 @@ var _ = [
 	}, [S]);
 	let C = async (e) => {
 		try {
-			let t = await F.post("/api/v1/auth/login", e);
-			E(t.access_token, t.refresh_token), i(await F.get("/api/v1/users/me"));
+			let t = await L.post("/api/v1/auth/login", e);
+			E(t.access_token, t.refresh_token);
+			let n = await L.get("/api/v1/users/me");
+			i(n);
 		} catch (e) {
 			throw console.error("Login failed:", e), e;
 		}
 	}, w = async (e) => {
 		try {
-			await F.post("/api/v1/auth/register", e);
+			await L.post("/api/v1/auth/register", e);
 		} catch (e) {
 			throw console.error("Registration failed:", e), e;
 		}
 	}, T = () => {
-		D(), i(null), h([]), _(null), R(null), x({
+		D(), i(null), h([]), _(null), B(null), x({
 			show: !1,
 			localStorageCodes: []
 		});
 	}, ee = async () => {
 		await S();
+	}, te = async () => {
+		try {
+			await le();
+		} finally {
+			T();
+		}
 	}, k = async (e) => {
+		let t = await ce(e);
+		return i(t), t;
+	}, A = async (e) => {
 		try {
-			return (await F.post("/api/v1/auth/forgot-password", e)).message;
+			return (await L.post("/api/v1/auth/forgot-password", e)).message;
 		} catch (e) {
 			throw console.error("Forgot password failed:", e), e;
 		}
-	}, A = async (e) => {
+	}, j = async (e) => {
 		try {
-			return (await F.post("/api/v1/auth/reset-password", e)).message;
+			return (await L.post("/api/v1/auth/reset-password", e)).message;
 		} catch (e) {
 			throw console.error("Reset password failed:", e), e;
 		}
-	}, te = async (e) => {
+	}, ne = async (e) => {
 		try {
-			return (await F.post("/api/v1/auth/resend-verification", e)).message;
+			return (await L.post("/api/v1/auth/resend-verification", e)).message;
 		} catch (e) {
 			throw console.error("Resend verification failed:", e), e;
 		}
-	}, j = r(async () => {
+	}, M = r(async () => {
 		y(!0);
 		try {
 			let e = [];
 			if (n) {
-				let t = await F.get("/api/v1/users/me/ally-codes");
+				let t = await L.get("/api/v1/users/me/ally-codes");
 				h(t.ally_codes), e = t.ally_codes.map((e) => e.ally_code);
-				let n = L();
+				let n = z();
 				n.length > 0 && x({
 					show: !0,
 					localStorageCodes: n.map((e) => e.ally_code)
 				});
 			} else {
-				let t = L();
+				let t = z();
 				h(t), e = t.map((e) => e.ally_code);
 			}
 			let t = me(), r = t && e.includes(t) ? t : null;
-			_(r), r !== t && R(r);
+			_(r), r !== t && B(r);
 		} catch (e) {
 			console.error("Failed to fetch ally codes:", e), h([]);
 		} finally {
 			y(!1);
 		}
-	}, [n]), ne = r(async (e) => {
-		n && typeof e == "number" ? (await F.put(`/api/v1/users/me/ally-codes/${e}/use`, {}), await j()) : !n && typeof e == "string" && (pe(e), h(L()));
-	}, [n, j]), M = r((e) => {
-		if (_(e), R(e), e && n) {
+	}, [n]), N = r(async (e) => {
+		n && typeof e == "number" ? (await L.put(`/api/v1/users/me/ally-codes/${e}/use`, {}), await M()) : !n && typeof e == "string" && (pe(e), h(z()));
+	}, [n, M]), P = r((e) => {
+		if (_(e), B(e), e && n) {
 			let t = m.find((t) => "ally_code" in t && t.ally_code === e);
-			t && "id" in t && ne(t.id);
+			t && "id" in t && N(t.id);
 		} else e && !n && pe(e);
 	}, [
 		n,
 		m,
-		ne
-	]), N = r(async (e) => {
+		N
+	]), F = r(async (e) => {
 		if (!/^\d{9}$/.test(e)) throw Error("Ally code must be exactly 9 digits");
 		if (n) {
-			let t = await F.post("/api/v1/users/me/ally-codes", { ally_code: e });
-			h((e) => [t, ...e]), m.length === 0 && M(e);
+			let t = await L.post("/api/v1/users/me/ally-codes", { ally_code: e });
+			h((e) => [t, ...e]), m.length === 0 && P(e);
 		} else {
-			let t = await F.get(`/api/v1/player-data/player/${e}`);
+			let t = await L.get(`/api/v1/player-data/player/${e}`);
 			if (!t) throw Error("Invalid ally code - player not found");
 			de({
 				ally_code: e,
 				player_name: t.data?.name ?? null,
 				last_used_at: (/* @__PURE__ */ new Date()).toISOString()
-			}), h(L()), m.length === 0 && M(e);
+			}), h(z()), m.length === 0 && P(e);
 		}
 	}, [
 		n,
 		m.length,
-		M
+		P
 	]), re = r(async (e) => {
-		n && typeof e == "number" ? (await F.delete(`/api/v1/users/me/ally-codes/${e}`), h((t) => t.filter((t) => "id" in t && t.id !== e))) : !n && typeof e == "string" && (fe(e), h(L()), g === e && M(null));
+		n && typeof e == "number" ? (await L.delete(`/api/v1/users/me/ally-codes/${e}`), h((t) => t.filter((t) => "id" in t && t.id !== e))) : !n && typeof e == "string" && (fe(e), h(z()), g === e && P(null));
 	}, [
 		n,
 		g,
-		M
-	]), P = r(() => {
+		P
+	]), I = r(() => {
 		x({
 			show: !1,
 			localStorageCodes: []
 		});
 	}, []), ie = r(async () => {
 		if (!n) return;
-		let e = L();
+		let e = z();
 		for (let t of e) try {
-			await N(t.ally_code);
+			await F(t.ally_code);
 		} catch (e) {
 			console.error(`Failed to migrate ally code ${t.ally_code}:`, e);
 		}
-		he(), P();
+		he(), I();
 	}, [
 		n,
-		N,
-		P
+		F,
+		I
 	]);
 	a(() => {
-		j();
-	}, [j]);
+		M();
+	}, [M]);
 	let ae = {
 		user: n,
 		isAuthenticated: !!n,
@@ -463,29 +479,31 @@ var _ = [
 		login: C,
 		register: w,
 		logout: T,
+		logoutAll: te,
 		refreshUser: ee,
-		forgotPassword: k,
-		resetPassword: A,
-		resendVerification: te,
+		forgotPassword: A,
+		resetPassword: j,
+		resendVerification: ne,
+		updateAccount: k,
 		authEnabled: u,
 		isLoadingFeatures: f,
 		allyCodes: m,
 		selectedAllyCode: g,
 		isLoadingAllyCodes: v,
-		fetchAllyCodes: j,
-		addAllyCode: N,
+		fetchAllyCodes: M,
+		addAllyCode: F,
 		removeAllyCode: re,
-		selectAllyCode: M,
-		updateAllyCodeLastUsed: ne,
+		selectAllyCode: P,
+		updateAllyCodeLastUsed: N,
 		migrationPrompt: b,
-		dismissMigrationPrompt: P,
+		dismissMigrationPrompt: I,
 		migrateLocalStorageCodes: ie
 	};
 	return /* @__PURE__ */ l(ge.Provider, {
 		value: ae,
 		children: e
 	});
-}, z = () => {
+}, V = () => {
 	let e = i(ge);
 	if (e === void 0) throw Error("useAuth must be used within an AuthProvider");
 	return e;
@@ -511,7 +529,7 @@ function ve({ isOpen: e, onClose: t, triggerRef: n, panelRef: r }) {
 		r
 	]);
 }
-var B = {
+var H = {
 	navMenu: "_navMenu_vspnm_1",
 	trigger: "_trigger_vspnm_8",
 	tabActive: "_tabActive_vspnm_29",
@@ -525,7 +543,7 @@ var B = {
 	groupItems: "_groupItems_vspnm_97",
 	groupItem: "_groupItem_vspnm_97"
 }, ye = ({ app: e, isCurrentApp: t, activeSectionId: n, isOpen: r, onOpenChange: i, onSectionClick: a }) => {
-	let { isAuthenticated: s, user: c } = z(), d = o(null), f = o(null), p = `navmenu-panel-${e.id}`;
+	let { isAuthenticated: s, user: c } = V(), d = o(null), f = o(null), p = `navmenu-panel-${e.id}`;
 	ve({
 		isOpen: r,
 		onClose: () => i(!1),
@@ -542,24 +560,24 @@ var B = {
 		let i = t && n === e.id;
 		return /* @__PURE__ */ l("a", {
 			href: e.href,
-			className: `${B.sectionLink} ${r ?? ""} ${i ? B.sectionActive : ""}`,
+			className: `${H.sectionLink} ${r ?? ""} ${i ? H.sectionActive : ""}`,
 			"aria-current": i ? "page" : void 0,
 			onClick: h(e),
 			children: e.label
 		}, e.id);
 	};
 	return /* @__PURE__ */ u("div", {
-		className: B.navMenu,
+		className: H.navMenu,
 		children: [/* @__PURE__ */ u("button", {
 			type: "button",
 			ref: d,
-			className: `${B.trigger} ${t ? B.tabActive : ""}`,
+			className: `${H.trigger} ${t ? H.tabActive : ""}`,
 			"aria-expanded": r,
 			"aria-controls": p,
 			"aria-haspopup": "true",
 			onClick: () => i(!r),
 			children: [e.label, /* @__PURE__ */ l("svg", {
-				className: B.chevron,
+				className: H.chevron,
 				width: "10",
 				height: "6",
 				viewBox: "0 0 10 6",
@@ -576,9 +594,9 @@ var B = {
 		}), r && /* @__PURE__ */ l("div", {
 			id: p,
 			ref: f,
-			className: B.panel,
+			className: H.panel,
 			children: e.status === "coming-soon" ? /* @__PURE__ */ l("div", {
-				className: B.comingSoon,
+				className: H.comingSoon,
 				children: "Coming soon"
 			}) : /* @__PURE__ */ l("nav", {
 				"aria-label": `${e.label} sections`,
@@ -587,10 +605,10 @@ var B = {
 					if (!g(e)) return m(e) ? v(e) : null;
 					let t = e.items.filter(m);
 					return /* @__PURE__ */ u("div", {
-						className: B.group,
-						children: [v(e, B.groupLabel), /* @__PURE__ */ l("div", {
-							className: B.groupItems,
-							children: t.map((e) => v(e, B.groupItem))
+						className: H.group,
+						children: [v(e, H.groupLabel), /* @__PURE__ */ l("div", {
+							className: H.groupItems,
+							children: t.map((e) => v(e, H.groupItem))
 						})]
 					}, e.id);
 				})
@@ -630,7 +648,7 @@ var B = {
 	})
 }));
 xe.displayName = "NavBurger";
-var V = {
+var U = {
 	selectWrapper: "_selectWrapper_ir4bq_1",
 	fullWidth: "_fullWidth_ir4bq_7",
 	label: "_label_ir4bq_11",
@@ -644,22 +662,22 @@ var V = {
 }, Se = e.forwardRef(({ label: e, error: t, helperText: n, options: r, placeholder: i, fullWidth: a = !1, className: o = "", id: s, ...c }, d) => {
 	let f = s || `select-${Math.random().toString(36).substr(2, 9)}`, p = !!t;
 	return /* @__PURE__ */ u("div", {
-		className: `${V.selectWrapper} ${a ? V.fullWidth : ""} ${o}`,
+		className: `${U.selectWrapper} ${a ? U.fullWidth : ""} ${o}`,
 		children: [
 			e && /* @__PURE__ */ u("label", {
 				htmlFor: f,
-				className: V.label,
+				className: U.label,
 				children: [e, c.required && /* @__PURE__ */ l("span", {
-					className: V.required,
+					className: U.required,
 					children: "*"
 				})]
 			}),
 			/* @__PURE__ */ u("div", {
-				className: V.selectContainer,
+				className: U.selectContainer,
 				children: [/* @__PURE__ */ u("select", {
 					ref: d,
 					id: f,
-					className: `${V.select} ${p ? V.error : ""}`,
+					className: `${U.select} ${p ? U.error : ""}`,
 					...c,
 					children: [
 						i && /* @__PURE__ */ l("option", {
@@ -675,23 +693,23 @@ var V = {
 						!r && c.children
 					]
 				}), /* @__PURE__ */ l("span", {
-					className: V.arrow,
+					className: U.arrow,
 					children: "▼"
 				})]
 			}),
 			t && /* @__PURE__ */ l("span", {
-				className: V.errorText,
+				className: U.errorText,
 				children: t
 			}),
 			n && !t && /* @__PURE__ */ l("span", {
-				className: V.helperText,
+				className: U.helperText,
 				children: n
 			})
 		]
 	});
 });
 Se.displayName = "Select";
-var H = {
+var W = {
 	button: "_button_159ms_1",
 	sm: "_sm_159ms_22",
 	md: "_md_159ms_28",
@@ -707,18 +725,18 @@ var H = {
 	spinner: "_spinner_159ms_116",
 	spin: "_spin_159ms_116",
 	loadingText: "_loadingText_159ms_131"
-}, U = ({ children: e, variant: t = "primary", size: n = "md", fullWidth: r = !1, loading: i = !1, disabled: a = !1, className: o = "", ...s }) => /* @__PURE__ */ l("button", {
-	className: `${H.button} ${H[t]} ${H[n]} ${r ? H.fullWidth : ""} ${i ? H.loading : ""} ${o}`,
+}, G = ({ children: e, variant: t = "primary", size: n = "md", fullWidth: r = !1, loading: i = !1, disabled: a = !1, className: o = "", ...s }) => /* @__PURE__ */ l("button", {
+	className: `${W.button} ${W[t]} ${W[n]} ${r ? W.fullWidth : ""} ${i ? W.loading : ""} ${o}`,
 	disabled: a || i,
 	...s,
 	children: i ? /* @__PURE__ */ u("span", {
-		className: H.loadingSpinner,
-		children: [/* @__PURE__ */ l("span", { className: H.spinner }), /* @__PURE__ */ l("span", {
-			className: H.loadingText,
+		className: W.loadingSpinner,
+		children: [/* @__PURE__ */ l("span", { className: W.spinner }), /* @__PURE__ */ l("span", {
+			className: W.loadingText,
 			children: e
 		})]
 	}) : e
-}), W = {
+}), K = {
 	inputWrapper: "_inputWrapper_15t4g_1",
 	fullWidth: "_fullWidth_15t4g_7",
 	label: "_label_15t4g_11",
@@ -730,28 +748,28 @@ var H = {
 }, Ce = e.forwardRef(({ label: e, error: t, helperText: n, fullWidth: r = !1, className: i = "", id: a, ...o }, s) => {
 	let c = a || `input-${Math.random().toString(36).substr(2, 9)}`, d = !!t;
 	return /* @__PURE__ */ u("div", {
-		className: `${W.inputWrapper} ${r ? W.fullWidth : ""} ${i}`,
+		className: `${K.inputWrapper} ${r ? K.fullWidth : ""} ${i}`,
 		children: [
 			e && /* @__PURE__ */ u("label", {
 				htmlFor: c,
-				className: W.label,
+				className: K.label,
 				children: [e, o.required && /* @__PURE__ */ l("span", {
-					className: W.required,
+					className: K.required,
 					children: "*"
 				})]
 			}),
 			/* @__PURE__ */ l("input", {
 				ref: s,
 				id: c,
-				className: `${W.input} ${d ? W.error : ""}`,
+				className: `${K.input} ${d ? K.error : ""}`,
 				...o
 			}),
 			t && /* @__PURE__ */ l("span", {
-				className: W.errorText,
+				className: K.errorText,
 				children: t
 			}),
 			n && !t && /* @__PURE__ */ l("span", {
-				className: W.helperText,
+				className: K.helperText,
 				children: n
 			})
 		]
@@ -760,7 +778,7 @@ var H = {
 Ce.displayName = "Input";
 //#endregion
 //#region src/utils/formatAllyCode.ts
-var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e.slice(6, 9)}`, we = (e) => e.replace(/-/g, ""), K = {
+var q = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e.slice(6, 9)}`, we = (e) => e.replace(/-/g, ""), J = {
 	allyCodeDropdown: "_allyCodeDropdown_1pawi_1",
 	select: "_select_1pawi_8",
 	manageButton: "_manageButton_1pawi_12",
@@ -774,7 +792,7 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 	doneButton: "_doneButton_1pawi_88",
 	inline: "_inline_1pawi_107"
 }, Te = ({ onAllyCodeSelected: e, className: t = "", isOpen: n, onOpenChange: r, variant: i = "floating" }) => {
-	let { allyCodes: a, selectedAllyCode: c, selectAllyCode: d, removeAllyCode: f, addAllyCode: p, isLoadingAllyCodes: m } = z(), [h, g] = s(!1), _ = n ?? h, v = (e) => {
+	let { allyCodes: a, selectedAllyCode: c, selectAllyCode: d, removeAllyCode: f, addAllyCode: p, isLoadingAllyCodes: m } = V(), [h, g] = s(!1), _ = n ?? h, v = (e) => {
 		g(e), r?.(e);
 	}, [y, b] = s(""), [x, S] = s(""), [C, w] = s(""), [T, E] = s(!1), D = o(null), O = o(null);
 	ve({
@@ -785,14 +803,17 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 	});
 	let ee = a.map((e) => ({
 		value: e.ally_code,
-		label: e.player_name ? `${e.player_name} (${G(e.ally_code)})` : G(e.ally_code)
-	})), k = (t) => {
+		label: e.player_name ? `${e.player_name} (${q(e.ally_code)})` : q(e.ally_code)
+	})), te = (t) => {
 		let n = t.target.value || null;
 		d(n), e?.(n);
-	}, A = async (e) => {
+	}, k = async (e) => {
 		let t = a.find((t) => t.ally_code === e);
-		t && await f("id" in t ? t.id : t.ally_code);
-	}, te = async () => {
+		if (t) {
+			let e = "id" in t ? t.id : t.ally_code;
+			await f(e);
+		}
+	}, A = async () => {
 		if (S(""), w(""), !/^\d{9}$/.test(y)) {
 			S("Ally code must be exactly 9 digits");
 			return;
@@ -807,80 +828,80 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 		}
 	}, j = a.length > 0;
 	return /* @__PURE__ */ u("div", {
-		className: `${K.allyCodeDropdown} ${i === "inline" ? K.inline : ""} ${t}`,
+		className: `${J.allyCodeDropdown} ${i === "inline" ? J.inline : ""} ${t}`,
 		children: [
 			j && /* @__PURE__ */ l(Se, {
 				options: ee,
 				value: c || "",
-				onChange: k,
+				onChange: te,
 				placeholder: "Select ally code",
 				disabled: m,
-				className: K.select
+				className: J.select
 			}),
 			_ && /* @__PURE__ */ u("div", {
-				className: K.managePanel,
+				className: J.managePanel,
 				ref: O,
 				id: "ally-code-manage-panel",
 				children: [
 					/* @__PURE__ */ l("h4", { children: "Manage Ally Codes" }),
 					/* @__PURE__ */ u("div", {
-						className: K.addSection,
+						className: J.addSection,
 						children: [
 							/* @__PURE__ */ u("div", {
-								className: K.addInputGroup,
+								className: J.addInputGroup,
 								children: [/* @__PURE__ */ l(Ce, {
 									type: "text",
 									placeholder: "9-digit ally code",
 									value: y,
 									onChange: (e) => b(e.target.value.replace(/\D/g, "").slice(0, 9)),
 									disabled: T
-								}), /* @__PURE__ */ l(U, {
+								}), /* @__PURE__ */ l(G, {
 									variant: "primary",
 									size: "sm",
-									onClick: te,
+									onClick: A,
 									loading: T,
 									disabled: y.length !== 9,
 									children: "Add"
 								})]
 							}),
 							x && /* @__PURE__ */ l("div", {
-								className: K.error,
+								className: J.error,
 								children: x
 							}),
 							C && /* @__PURE__ */ l("div", {
-								className: K.success,
+								className: J.success,
 								children: C
 							})
 						]
 					}),
 					/* @__PURE__ */ l("div", {
-						className: K.codesList,
+						className: J.codesList,
 						children: a.map((e) => /* @__PURE__ */ u("div", {
-							className: K.codeItem,
-							children: [/* @__PURE__ */ l("span", { children: e.player_name ? `${e.player_name} (${G(e.ally_code)})` : G(e.ally_code) }), /* @__PURE__ */ l(U, {
+							className: J.codeItem,
+							children: [/* @__PURE__ */ l("span", { children: e.player_name ? `${e.player_name} (${q(e.ally_code)})` : q(e.ally_code) }), /* @__PURE__ */ l(G, {
 								variant: "ghost",
 								size: "sm",
-								onClick: () => A(e.ally_code),
+								onClick: () => k(e.ally_code),
 								children: "Remove"
 							})]
 						}, e.ally_code))
 					}),
-					/* @__PURE__ */ l(U, {
+					/* @__PURE__ */ l(G, {
 						variant: "secondary",
 						size: "sm",
 						onClick: () => v(!1),
-						className: K.doneButton,
+						className: J.doneButton,
 						children: "Done"
 					})
 				]
 			}),
 			/* @__PURE__ */ l("span", {
 				ref: D,
-				children: /* @__PURE__ */ l(U, {
+				children: /* @__PURE__ */ l(G, {
 					variant: "ghost",
 					size: "sm",
 					onClick: () => v(!_),
-					className: K.manageButton,
+					className: J.manageButton,
 					"aria-expanded": _,
 					"aria-controls": "ally-code-manage-panel",
 					"aria-haspopup": "true",
@@ -889,26 +910,26 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 			})
 		]
 	});
-}, q = {
+}, Ee = {
 	authCluster: "_authCluster_17o10_1",
 	userLink: "_userLink_17o10_7",
 	adminLink: "_adminLink_17o10_16"
-}, Ee = ({ showAuth: e = !0 }) => {
-	let { user: t, isAuthenticated: n, logout: r, authEnabled: i } = z();
+}, De = ({ showAuth: e = !0 }) => {
+	let { user: t, isAuthenticated: n, logout: r, authEnabled: i } = V();
 	return e ? n ? /* @__PURE__ */ u("div", {
-		className: q.authCluster,
+		className: Ee.authCluster,
 		children: [
 			t?.role === "admin" && /* @__PURE__ */ l("a", {
 				href: "/admin/users",
-				className: q.adminLink,
+				className: Ee.adminLink,
 				children: "Admin"
 			}),
 			/* @__PURE__ */ l("a", {
 				href: "/profile",
-				className: q.userLink,
+				className: Ee.userLink,
 				children: t?.username
 			}),
-			/* @__PURE__ */ l(U, {
+			/* @__PURE__ */ l(G, {
 				variant: "ghost",
 				size: "sm",
 				onClick: () => {
@@ -918,24 +939,24 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 			})
 		]
 	}) : i ? /* @__PURE__ */ u("div", {
-		className: q.authCluster,
+		className: Ee.authCluster,
 		children: [/* @__PURE__ */ l("a", {
 			href: "/login",
-			children: /* @__PURE__ */ l(U, {
+			children: /* @__PURE__ */ l(G, {
 				variant: "ghost",
 				size: "sm",
 				children: "Login"
 			})
 		}), /* @__PURE__ */ l("a", {
 			href: "/register",
-			children: /* @__PURE__ */ l(U, {
+			children: /* @__PURE__ */ l(G, {
 				variant: "primary",
 				size: "sm",
 				children: "Sign Up"
 			})
 		})]
 	}) : null : null;
-}, J = {
+}, Y = {
 	backdrop: "_backdrop_3ax21_1",
 	panel: "_panel_3ax21_11",
 	accordion: "_accordion_3ax21_24",
@@ -955,14 +976,23 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 	allySection: "_allySection_3ax21_112",
 	extrasSection: "_extrasSection_3ax21_113",
 	accountSection: "_accountSection_3ax21_114"
-}, De = ({ isOpen: e, onClose: t, currentApp: n, activeSectionId: r, onSectionClick: i, rightExtras: c, showAuth: f, panelId: p, returnFocusRef: m }) => {
-	let { isAuthenticated: h, user: v } = z(), [y, b] = s(n === "hub" ? null : n), x = o(null);
+}, Oe = "a[href], button:not([disabled]), input:not([disabled]), select:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex=\"-1\"])", ke = ({ isOpen: e, onClose: t, currentApp: n, activeSectionId: r, onSectionClick: i, rightExtras: c, showAuth: f, panelId: p, returnFocusRef: m }) => {
+	let { isAuthenticated: h, user: v } = V(), [y, b] = s(n === "hub" ? null : n), x = o(null);
 	if (a(() => (e ? document.body.style.overflow = "hidden" : document.body.style.overflow = "unset", () => {
 		document.body.style.overflow = "unset";
 	}), [e]), a(() => {
 		if (!e) return;
 		let r = (e) => {
-			e.key === "Escape" && (t(), m.current?.focus());
+			if (e.key === "Escape") {
+				t(), m.current?.focus();
+				return;
+			}
+			if (e.key === "Tab") {
+				let t = x.current?.querySelectorAll(Oe);
+				if (!t || t.length === 0) return;
+				let n = t[0], r = t[t.length - 1], i = document.activeElement, a = i === x.current || !x.current?.contains(i);
+				e.shiftKey && (i === n || a) ? (e.preventDefault(), r.focus()) : !e.shiftKey && (i === r || a) && (e.preventDefault(), n.focus());
+			}
 		};
 		return document.addEventListener("keydown", r), b(n === "hub" ? null : n), x.current?.focus(), () => document.removeEventListener("keydown", r);
 	}, [e]), !e) return null;
@@ -970,7 +1000,7 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 		e === n && i?.(r, a), t();
 	};
 	return d(/* @__PURE__ */ l("div", {
-		className: J.backdrop,
+		className: Y.backdrop,
 		onClick: t,
 		children: /* @__PURE__ */ u("div", {
 			ref: x,
@@ -979,32 +1009,32 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 			"aria-modal": "true",
 			"aria-label": "Navigation menu",
 			tabIndex: -1,
-			className: J.panel,
+			className: Y.panel,
 			onClick: (e) => e.stopPropagation(),
 			children: [
 				/* @__PURE__ */ l("div", {
-					className: J.accordion,
+					className: Y.accordion,
 					children: _.map((e) => {
 						let t = y === e.id, i = n === e.id, a = (e) => !(e.requiresAuth && !h || e.roles && (!v || !e.roles.includes(v.role))), o = `mobile-accordion-${e.id}`, s = (t, n) => {
 							let a = i && r === t.id;
 							return /* @__PURE__ */ l("a", {
 								href: t.href,
-								className: `${J.sectionLink} ${n ?? ""} ${a ? J.sectionActive : ""}`,
+								className: `${Y.sectionLink} ${n ?? ""} ${a ? Y.sectionActive : ""}`,
 								"aria-current": a ? "page" : void 0,
 								onClick: S(e.id, t),
 								children: t.label
 							}, t.id);
 						};
 						return /* @__PURE__ */ u("div", {
-							className: J.accordionItem,
+							className: Y.accordionItem,
 							children: [/* @__PURE__ */ u("button", {
 								type: "button",
-								className: `${J.accordionHeader} ${i ? J.currentApp : ""}`,
+								className: `${Y.accordionHeader} ${i ? Y.currentApp : ""}`,
 								"aria-expanded": t,
 								"aria-controls": o,
 								onClick: () => b(t ? null : e.id),
 								children: [e.label, /* @__PURE__ */ l("svg", {
-									className: `${J.chevron} ${t ? J.chevronOpen : ""}`,
+									className: `${Y.chevron} ${t ? Y.chevronOpen : ""}`,
 									width: "10",
 									height: "6",
 									viewBox: "0 0 10 6",
@@ -1020,18 +1050,18 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 								})]
 							}), t && /* @__PURE__ */ l("div", {
 								id: o,
-								className: J.accordionPanel,
+								className: Y.accordionPanel,
 								children: e.status === "coming-soon" ? /* @__PURE__ */ l("div", {
-									className: J.comingSoon,
+									className: Y.comingSoon,
 									children: "Coming soon"
 								}) : e.sections.map((e) => {
 									if (!g(e)) return a(e) ? s(e) : null;
 									let t = e.items.filter(a);
 									return /* @__PURE__ */ u("div", {
-										className: J.group,
-										children: [s(e, J.groupLabel), /* @__PURE__ */ l("div", {
-											className: J.groupItems,
-											children: t.map((e) => s(e, J.groupItem))
+										className: Y.group,
+										children: [s(e, Y.groupLabel), /* @__PURE__ */ l("div", {
+											className: Y.groupItems,
+											children: t.map((e) => s(e, Y.groupItem))
 										})]
 									}, e.id);
 								})
@@ -1040,26 +1070,26 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 					})
 				}),
 				/* @__PURE__ */ l("div", {
-					className: J.allySection,
+					className: Y.allySection,
 					children: /* @__PURE__ */ l(Te, { variant: "inline" })
 				}),
 				c && /* @__PURE__ */ l("div", {
-					className: J.extrasSection,
+					className: Y.extrasSection,
 					children: c
 				}),
 				/* @__PURE__ */ l("div", {
-					className: J.accountSection,
-					children: /* @__PURE__ */ l(Ee, { showAuth: f })
+					className: Y.accountSection,
+					children: /* @__PURE__ */ l(De, { showAuth: f })
 				})
 			]
 		})
 	}), document.body);
-}, Y = {
+}, Ae = {
 	logoLink: "_logoLink_12f5f_3",
 	appMenus: "_appMenus_12f5f_10",
 	desktopRight: "_desktopRight_12f5f_19",
 	extrasGroup: "_extrasGroup_12f5f_25"
-}, Oe = ({ currentApp: e, activeSectionId: t, onNavigate: n, rightExtras: r, showAuth: i = !0, className: d }) => {
+}, je = ({ currentApp: e, activeSectionId: t, onNavigate: n, rightExtras: r, showAuth: i = !0, className: d }) => {
 	let [f, p] = s(null), [m, g] = s(!1), v = o(null), y = "suite-mobile-nav-panel";
 	return a(() => {
 		let e = window.matchMedia("(max-width: 768px)"), t = () => {
@@ -1070,11 +1100,11 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 		className: d,
 		logo: /* @__PURE__ */ l("a", {
 			href: "/",
-			className: Y.logoLink,
+			className: Ae.logoLink,
 			children: "The Astrogator's Table"
 		}),
 		leftContent: /* @__PURE__ */ l("nav", {
-			className: Y.appMenus,
+			className: Ae.appMenus,
 			children: _.map((r) => /* @__PURE__ */ l(ye, {
 				app: r,
 				isCurrentApp: e === r.id,
@@ -1085,17 +1115,17 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 			}, r.id))
 		}),
 		rightContent: /* @__PURE__ */ u(c, { children: [/* @__PURE__ */ u("div", {
-			className: Y.desktopRight,
+			className: Ae.desktopRight,
 			children: [
 				r && /* @__PURE__ */ l("div", {
-					className: Y.extrasGroup,
+					className: Ae.extrasGroup,
 					children: r
 				}),
 				/* @__PURE__ */ l(Te, {
 					isOpen: f === "ally",
 					onOpenChange: (e) => p(e ? "ally" : null)
 				}),
-				/* @__PURE__ */ l(Ee, { showAuth: i })
+				/* @__PURE__ */ l(De, { showAuth: i })
 			]
 		}), /* @__PURE__ */ l(xe, {
 			ref: v,
@@ -1105,7 +1135,7 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 			},
 			controlsId: y
 		})] })
-	}), /* @__PURE__ */ l(De, {
+	}), /* @__PURE__ */ l(ke, {
 		isOpen: m,
 		onClose: () => g(!1),
 		currentApp: e,
@@ -1122,7 +1152,7 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 	defaultContent: "_defaultContent_zjuj8_13",
 	copyright: "_copyright_zjuj8_21",
 	disclaimer: "_disclaimer_zjuj8_26"
-}, ke = ({ children: e, className: t = "" }) => /* @__PURE__ */ l("footer", {
+}, Me = ({ children: e, className: t = "" }) => /* @__PURE__ */ l("footer", {
 	className: `${X.footer} ${t}`,
 	children: /* @__PURE__ */ l("div", {
 		className: X.content,
@@ -1144,11 +1174,11 @@ var G = (e) => !e || e.length !== 9 ? e : `${e.slice(0, 3)}-${e.slice(3, 6)}-${e
 });
 //#endregion
 //#region src/utils/formatTime.ts
-function Ae(e) {
+function Ne(e) {
 	let t = /([zZ]|[+-]\d{2}:?\d{2})$/.test(e);
 	return new Date(t ? e : `${e}Z`);
 }
-function je(e, t) {
+function Pe(e, t) {
 	let n = Math.max(0, Math.floor((t - e.getTime()) / 1e3));
 	if (n < 60) return `${n}s ago`;
 	let r = Math.floor(n / 60);
@@ -1156,38 +1186,38 @@ function je(e, t) {
 	let i = Math.floor(r / 60);
 	return i < 24 ? `${i}h ago` : `${Math.floor(i / 24)}d ago`;
 }
-function Me(e) {
+function Fe(e) {
 	return `${Math.floor(e / 60)}:${(e % 60).toString().padStart(2, "0")}`;
 }
-var Ne = {
+var Ie = {
 	rosterRefresh: "_rosterRefresh_1rbul_3",
 	updatedLabel: "_updatedLabel_1rbul_11",
 	refreshButton: "_refreshButton_1rbul_19",
 	spin: "_spin_1rbul_31"
-}, Pe = ({ onRefresh: e, isRefreshing: t, cachedAt: n = null, refreshAvailableAt: r = null, labelPrefix: i = "Updated", className: o = "" }) => {
+}, Le = ({ onRefresh: e, isRefreshing: t, cachedAt: n = null, refreshAvailableAt: r = null, labelPrefix: i = "Updated", className: o = "" }) => {
 	let [c, d] = s(() => Date.now()), f = !!n || r != null && r > c;
 	a(() => {
 		if (!f) return;
 		let e = setInterval(() => d(Date.now()), 1e3);
 		return () => clearInterval(e);
 	}, [f]);
-	let p = r ? Math.max(0, Math.ceil((r - c) / 1e3)) : 0, m = n ? je(Ae(n), c) : null, h = t || p > 0, g = p > 0 ? `Fresh data available in ${Me(p)}` : "Refresh roster";
+	let p = r ? Math.max(0, Math.ceil((r - c) / 1e3)) : 0, m = n ? Pe(Ne(n), c) : null, h = t || p > 0, g = p > 0 ? `Fresh data available in ${Fe(p)}` : "Refresh roster";
 	return /* @__PURE__ */ u("div", {
-		className: `${Ne.rosterRefresh} ${o}`,
+		className: `${Ie.rosterRefresh} ${o}`,
 		children: [m && /* @__PURE__ */ l("span", {
-			className: Ne.updatedLabel,
+			className: Ie.updatedLabel,
 			title: g,
-			children: p > 0 ? `${i} ${m} · fresh in ${Me(p)}` : `${i} ${m}`
-		}), /* @__PURE__ */ l(U, {
+			children: p > 0 ? `${i} ${m} · fresh in ${Fe(p)}` : `${i} ${m}`
+		}), /* @__PURE__ */ l(G, {
 			variant: "outline",
 			size: "sm",
 			onClick: e,
 			disabled: h,
 			title: g,
 			"aria-label": "Refresh roster",
-			className: Ne.refreshButton,
+			className: Ie.refreshButton,
 			children: /* @__PURE__ */ l("span", {
-				className: t ? Ne.spin : void 0,
+				className: t ? Ie.spin : void 0,
 				children: "⟳"
 			})
 		})]
@@ -1203,7 +1233,7 @@ var Ne = {
 	"padding-md": "_padding-md_1vw8g_43",
 	"padding-lg": "_padding-lg_1vw8g_47",
 	hoverable: "_hoverable_1vw8g_52"
-}, Fe = ({ children: e, variant: t = "default", chamfered: n = !1, chamferSize: r = "md", padding: i = "md", hoverable: a = !1, showDiagonalBorders: o = !0, edgeColor: s, className: d = "", onClick: f, style: p }) => {
+}, Re = ({ children: e, variant: t = "default", chamfered: n = !1, chamferSize: r = "md", padding: i = "md", hoverable: a = !1, showDiagonalBorders: o = !0, edgeColor: s, className: d = "", onClick: f, style: p }) => {
 	let m = n ? r === "asymmetric" ? "chamfered-box-asymmetric" : r === "sm" ? "chamfered-box-sm" : r === "lg" ? "chamfered-box-lg" : "chamfered-box" : "", h = s ?? (n ? "var(--color-border)" : void 0), g = h ? { color: h } : void 0, _ = h ? {
 		...p,
 		"--card-edge-color": h
@@ -1233,7 +1263,7 @@ var Ne = {
 			})
 		] }), e]
 	});
-}, Ie = {
+}, ze = {
 	badge: "_badge_rk7t5_1",
 	sm: "_sm_rk7t5_11",
 	md: "_md_rk7t5_16",
@@ -1245,8 +1275,8 @@ var Ne = {
 	warning: "_warning_rk7t5_47",
 	error: "_error_rk7t5_52",
 	info: "_info_rk7t5_57"
-}, Le = ({ children: e, variant: t = "default", size: n = "md", className: r = "" }) => /* @__PURE__ */ l("span", {
-	className: `${Ie.badge} ${Ie[t]} ${Ie[n]} ${r}`,
+}, Be = ({ children: e, variant: t = "default", size: n = "md", className: r = "" }) => /* @__PURE__ */ l("span", {
+	className: `${ze.badge} ${ze[t]} ${ze[n]} ${r}`,
 	children: e
 }), Q = {
 	overlay: "_overlay_1b3yt_1",
@@ -1261,7 +1291,7 @@ var Ne = {
 	title: "_title_1b3yt_53",
 	closeButton: "_closeButton_1b3yt_60",
 	content: "_content_1b3yt_78"
-}, Re = ({ isOpen: e, onClose: t, title: n, children: r, size: i = "md", closeOnOverlayClick: o = !0, className: s = "" }) => (a(() => (e ? document.body.style.overflow = "hidden" : document.body.style.overflow = "unset", () => {
+}, Ve = ({ isOpen: e, onClose: t, title: n, children: r, size: i = "md", closeOnOverlayClick: o = !0, className: s = "" }) => (a(() => (e ? document.body.style.overflow = "hidden" : document.body.style.overflow = "unset", () => {
 	document.body.style.overflow = "unset";
 }), [e]), a(() => {
 	let n = (n) => {
@@ -1303,7 +1333,7 @@ var Ne = {
 	dot: "_dot_1uhnh_34",
 	bounce: "_bounce_1uhnh_1",
 	visuallyHidden: "_visuallyHidden_1uhnh_91"
-}, ze = ({ size: e = "md", variant: t = "spinner", className: n = "" }) => t === "dots" ? /* @__PURE__ */ u("div", {
+}, He = ({ size: e = "md", variant: t = "spinner", className: n = "" }) => t === "dots" ? /* @__PURE__ */ u("div", {
 	className: `${$.dots} ${$[e]} ${n}`,
 	children: [
 		/* @__PURE__ */ l("span", { className: $.dot }),
@@ -1317,10 +1347,10 @@ var Ne = {
 		className: $.visuallyHidden,
 		children: "Loading..."
 	})
-}), Be = async (e) => {
+}), Ue = async (e) => {
 	if (e.length === 0) return {};
-	let t = [...new Set(e)], n = await F.get(`/api/v1/users/lookup?ids=${t.join(",")}`);
+	let t = [...new Set(e)], n = await L.get(`/api/v1/users/lookup?ids=${t.join(",")}`);
 	return Object.fromEntries(n.users.map((e) => [e.id, e.username]));
 };
 //#endregion
-export { Te as AllyCodeDropdown, ce as ApiClient, _e as AuthProvider, Le as Badge, U as Button, Fe as Card, p as Container, ke as Footer, Ce as Input, ze as Loader, Re as Modal, Oe as NavBar, Pe as RosterRefresh, _ as SUITE_NAV, Se as Select, h as TopBar, F as apiClient, se as authedFetch, he as clearAllyCodes, D as clearTokens, te as configureAuthRefresh, Be as fetchUsernames, G as formatAllyCode, Me as formatCountdown, je as formatRelativeTime, b as getAccessToken, L as getAllyCodesFromStorage, C as getRefreshToken, me as getSelectedAllyCode, le as initializeApiClient, O as isAuthenticated, g as isSuiteNavGroup, Ae as parseBackendTimestamp, j as refreshAccessToken, S as removeAccessToken, fe as removeAllyCodeFromStorage, T as removeRefreshToken, de as saveAllyCodeToStorage, x as setAccessToken, w as setRefreshToken, R as setSelectedAllyCode, E as setTokens, we as unformatAllyCode, pe as updateAllyCodeLastUsed, z as useAuth };
+export { Te as AllyCodeDropdown, oe as ApiClient, _e as AuthProvider, Be as Badge, G as Button, Re as Card, p as Container, Me as Footer, Ce as Input, He as Loader, Ve as Modal, je as NavBar, Le as RosterRefresh, _ as SUITE_NAV, Se as Select, h as TopBar, L as apiClient, ae as authedFetch, he as clearAllyCodes, D as clearTokens, A as configureAuthRefresh, Ue as fetchUsernames, q as formatAllyCode, Fe as formatCountdown, Pe as formatRelativeTime, b as getAccessToken, z as getAllyCodesFromStorage, C as getRefreshToken, me as getSelectedAllyCode, se as initializeApiClient, O as isAuthenticated, g as isSuiteNavGroup, Ne as parseBackendTimestamp, j as refreshAccessToken, S as removeAccessToken, fe as removeAllyCodeFromStorage, T as removeRefreshToken, de as saveAllyCodeToStorage, x as setAccessToken, w as setRefreshToken, B as setSelectedAllyCode, E as setTokens, we as unformatAllyCode, pe as updateAllyCodeLastUsed, V as useAuth };

package/dist/src/contexts/AuthContext.d.ts

@@ -1,5 +1,5 @@
 import { default as React } from 'react';
-import { User, LoginRequest, RegisterRequest, ForgotPasswordRequest, ResetPasswordRequest, ResendVerificationRequest, AllyCode, AllyCodeMigrationPrompt } from '../types';
+import { User, LoginRequest, RegisterRequest, ForgotPasswordRequest, ResetPasswordRequest, ResendVerificationRequest, AllyCode, AllyCodeMigrationPrompt, UpdateAccountRequest, UpdateAccountResponse } from '../types';
 import { StoredAllyCode } from '../services/allyCodeStorage';
 export interface AuthContextValue {
     user: User | null;
@@ -8,10 +8,25 @@ export interface AuthContextValue {
     login: (credentials: LoginRequest) => Promise<void>;
     register: (data: RegisterRequest) => Promise<void>;
     logout: () => void;
+    /**
+     * Revoke every token for the account (server-side), then perform the same
+     * local sign-out as `logout()`. The local half always runs, even if the
+     * server call fails after the request lands, so the UI never stays "signed
+     * in" against a session the server will 401 on its next real call anyway.
+     */
+    logoutAll: () => Promise<void>;
     refreshUser: () => Promise<void>;
     forgotPassword: (data: ForgotPasswordRequest) => Promise<string>;
     resetPassword: (data: ResetPasswordRequest) => Promise<string>;
     resendVerification: (data: ResendVerificationRequest) => Promise<string>;
+    /**
+     * Change email and/or password (current_password required by the backend
+     * for either). Adopts the fresh tokens the change returns and updates
+     * `user` in place — including `is_verified` flipping back to false when the
+     * email changed. Throws on a wrong/missing current_password (400) or a
+     * locked account (403), same as every other auth action here.
+     */
+    updateAccount: (data: UpdateAccountRequest) => Promise<UpdateAccountResponse>;
     authEnabled: boolean;
     isLoadingFeatures: boolean;
     allyCodes: AllyCode[] | StoredAllyCode[];

package/dist/src/index.d.ts

@@ -20,4 +20,4 @@ export { fetchUsernames } from './services/users';
 export type { StoredAllyCode } from './services/allyCodeStorage';
 export { formatAllyCode, unformatAllyCode } from './utils/formatAllyCode';
 export { parseBackendTimestamp, formatRelativeTime, formatCountdown } from './utils/formatTime';
-export type { User, LoginRequest, LoginResponse, RegisterRequest, RegisterResponse, RefreshTokenRequest, RefreshTokenResponse, ForgotPasswordRequest, ForgotPasswordResponse, ResetPasswordRequest, ResetPasswordResponse, VerifyEmailRequest, VerifyEmailResponse, ResendVerificationRequest, ResendVerificationResponse, AllyCode, AllyCodeCreate, AllyCodeListResponse, AllyCodeMigrationPrompt, ApiResponse, ApiError, PaginatedResponse, ModStat, ParsedMod, ModListResponse, EvaluationScores, ModEvaluation, EvaluationRequest, EvaluationResponse, } from './types';
+export type { User, LoginRequest, LoginResponse, RegisterRequest, RegisterResponse, RefreshTokenRequest, RefreshTokenResponse, ForgotPasswordRequest, ForgotPasswordResponse, ResetPasswordRequest, ResetPasswordResponse, VerifyEmailRequest, VerifyEmailResponse, ResendVerificationRequest, ResendVerificationResponse, AllyCode, AllyCodeCreate, AllyCodeListResponse, AllyCodeMigrationPrompt, TokenResponse, UpdateAccountRequest, UpdateAccountResponse, LogoutAllResponse, ApiResponse, ApiError, PaginatedResponse, ModStat, ParsedMod, ModListResponse, EvaluationScores, ModEvaluation, EvaluationRequest, EvaluationResponse, } from './types';

package/dist/src/services/account.d.ts

@@ -0,0 +1,21 @@
+import { UpdateAccountRequest, UpdateAccountResponse } from '../types';
+/**
+ * PATCH /users/me: change email and/or password. The backend requires
+ * `current_password` whenever either is set (a stolen access token alone must
+ * not be enough), and applies both together or not at all.
+ *
+ * A successful change revokes every outstanding token for the account,
+ * including the caller's own — so a fresh pair comes back in `tokens` and is
+ * adopted here immediately, before this function returns, so the caller's own
+ * session survives the change. `tokens` is `null` for a no-op body (nothing
+ * to change): nothing to adopt, nothing revoked.
+ */
+export declare const updateAccount: (data: UpdateAccountRequest) => Promise<UpdateAccountResponse>;
+/**
+ * POST /auth/logout-all: revoke every token for the account, including the
+ * caller's own. This only reaches the server — it does NOT clear this
+ * browser's stored tokens; the caller (AuthContext's `logoutAll`) does the
+ * local half so "revoked server-side" and "signed out here" always happen
+ * together.
+ */
+export declare const logoutAllSessions: () => Promise<string>;

package/dist/src/types/index.d.ts

@@ -1,3 +1,3 @@
-export type { User, LoginRequest, LoginResponse, RegisterRequest, RegisterResponse, RefreshTokenRequest, RefreshTokenResponse, ForgotPasswordRequest, ForgotPasswordResponse, ResetPasswordRequest, ResetPasswordResponse, VerifyEmailRequest, VerifyEmailResponse, ResendVerificationRequest, ResendVerificationResponse, AllyCode, AllyCodeCreate, AllyCodeListResponse, AllyCodeMigrationPrompt, } from './user';
+export type { User, LoginRequest, LoginResponse, RegisterRequest, RegisterResponse, RefreshTokenRequest, RefreshTokenResponse, ForgotPasswordRequest, ForgotPasswordResponse, ResetPasswordRequest, ResetPasswordResponse, VerifyEmailRequest, VerifyEmailResponse, ResendVerificationRequest, ResendVerificationResponse, AllyCode, AllyCodeCreate, AllyCodeListResponse, AllyCodeMigrationPrompt, TokenResponse, UpdateAccountRequest, UpdateAccountResponse, LogoutAllResponse, } from './user';
 export type { ApiResponse, ApiError, PaginatedResponse } from './api';
 export type { ModStat, ParsedMod, ModListResponse, EvaluationScores, ModEvaluation, EvaluationRequest, EvaluationResponse, } from './mod';

package/dist/src/types/user.d.ts

@@ -86,3 +86,27 @@ export interface AllyCodeMigrationPrompt {
     show: boolean;
     localStorageCodes: string[];
 }
+export interface TokenResponse {
+    access_token: string;
+    refresh_token: string;
+    token_type: string;
+    expires_in: number;
+}
+export interface UpdateAccountRequest {
+    email?: string;
+    /** Required by the backend whenever `email` or `new_password` is set. */
+    current_password?: string;
+    new_password?: string;
+}
+/**
+ * PATCH /users/me response. `tokens` is set only when the email or password
+ * actually changed — that revokes every outstanding token for the account
+ * (including the caller's own), so fresh ones come back here. `null` means
+ * nothing changed (a no-op body, or the same email re-submitted).
+ */
+export interface UpdateAccountResponse extends User {
+    tokens: TokenResponse | null;
+}
+export interface LogoutAllResponse {
+    message: string;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "astrogators-shared-ui",
-  "version": "0.16.3",
+  "version": "0.17.0",
   "description": "Shared UI components and utilities for Astrogator's Table applications",
   "type": "module",
   "main": "./dist/index.js",
@@ -23,7 +23,9 @@
     "dev": "vite",
     "build": "tsc && vite build",
     "preview": "vite preview",
-    "type-check": "tsc --noEmit"
+    "type-check": "tsc --noEmit",
+    "test": "vitest run",
+    "prepublishOnly": "npm run type-check && npm test"
   },
   "repository": {
     "type": "git",
@@ -48,8 +50,8 @@
     "react": "^19.2.5",
     "react-dom": "^19.2.5",
     "typescript": "^6.0.3",
-    "vite": "^8.0.9",
-    "vite-plugin-dts": "^4.5.4"
-  },
-  "dependencies": {}
+    "vite": "^8.3.0",
+    "vite-plugin-dts": "^4.5.4",
+    "vitest": "^5.0.1"
+  }
 }