naystack 1.8.4 → 1.8.5

package/dist/auth/client.cjs.js

@@ -34,9 +34,9 @@ __export(client_exports, {
   AuthApply: () => AuthApply,
   AuthWrapper: () => AuthWrapper,
   TokenContext: () => TokenContext,
-  getAccessToken: () => getAccessToken,
-  refreshAccessToken: () => refreshAccessToken,
-  setAccessToken: () => setAccessToken,
+  getAccessToken: () => import_token_store2.getAccessToken,
+  refreshAccessToken: () => import_token_store2.refreshAccessToken,
+  setAccessToken: () => import_token_store2.setAccessToken,
   useAuthFetch: () => useAuthFetch,
   useLogin: () => useLogin,
   useLogout: () => useLogout,
@@ -47,6 +47,7 @@ __export(client_exports, {
 module.exports = __toCommonJS(client_exports);
 
 // src/auth/email/client.tsx
+var import_token_store = require("naystack/auth/token-store");
 var import_react = __toESM(require("react"));
 
 // src/env.ts
@@ -99,42 +100,8 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function subscribeToAccessToken(listener) {
-  listeners.add(listener);
-  return () => {
-    listeners.delete(listener);
-  };
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/auth/email/client.tsx
+var import_token_store2 = require("naystack/auth/token-store");
 var TokenContext = (0, import_react.createContext)({
   token: void 0,
   setToken: () => null
@@ -144,12 +111,12 @@ var AuthWrapper = ({
   skipInitialFetch
 }) => {
   const [token, setTokenState] = (0, import_react.useState)(
-    getAccessToken
+    import_token_store.getAccessToken
   );
-  (0, import_react.useEffect)(() => subscribeToAccessToken(setTokenState), []);
+  (0, import_react.useEffect)(() => (0, import_token_store.subscribeToAccessToken)(setTokenState), []);
   const setToken = (0, import_react.useCallback)((action) => {
-    setAccessToken(
-      typeof action === "function" ? action(getAccessToken()) : action
+    (0, import_token_store.setAccessToken)(
+      typeof action === "function" ? action((0, import_token_store.getAccessToken)()) : action
     );
   }, []);
   return /* @__PURE__ */ import_react.default.createElement(TokenContext.Provider, { value: { token, setToken } }, !skipInitialFetch && /* @__PURE__ */ import_react.default.createElement(AuthChildComponent, null), children);
@@ -161,7 +128,7 @@ function AuthChildComponent() {
 function useAuthFetch({ skip } = {}) {
   (0, import_react.useEffect)(() => {
     if (skip) return;
-    void refreshAccessToken().catch(() => null);
+    void (0, import_token_store.refreshAccessToken)().catch(() => null);
   }, []);
 }
 function AuthApply({ data }) {

package/dist/auth/client.d.mts

@@ -1,3 +1,3 @@
 export { AuthApply, AuthWrapper, AuthWrapperProps, TokenContext, useAuthFetch, useLogin, useLogout, useSetToken, useSignUp, useToken } from './email/client.mjs';
-export { getAccessToken, refreshAccessToken, setAccessToken } from './token-store.mjs';
+export { getAccessToken, refreshAccessToken, setAccessToken } from 'naystack/auth/token-store';
 import 'react';

package/dist/auth/client.d.ts

@@ -1,3 +1,3 @@
 export { AuthApply, AuthWrapper, AuthWrapperProps, TokenContext, useAuthFetch, useLogin, useLogout, useSetToken, useSignUp, useToken } from './email/client.js';
-export { getAccessToken, refreshAccessToken, setAccessToken } from './token-store.js';
+export { getAccessToken, refreshAccessToken, setAccessToken } from 'naystack/auth/token-store';
 import 'react';

package/dist/auth/client.esm.js

@@ -1,6 +1,12 @@
 "use client";
 
 // src/auth/email/client.tsx
+import {
+  getAccessToken,
+  refreshAccessToken,
+  setAccessToken,
+  subscribeToAccessToken
+} from "naystack/auth/token-store";
 import React, {
   createContext,
   useCallback,
@@ -59,42 +65,12 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function subscribeToAccessToken(listener) {
-  listeners.add(listener);
-  return () => {
-    listeners.delete(listener);
-  };
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/auth/email/client.tsx
+import {
+  getAccessToken as getAccessToken2,
+  refreshAccessToken as refreshAccessToken2,
+  setAccessToken as setAccessToken2
+} from "naystack/auth/token-store";
 var TokenContext = createContext({
   token: void 0,
   setToken: () => null
@@ -203,9 +179,9 @@ export {
   AuthApply,
   AuthWrapper,
   TokenContext,
-  getAccessToken,
-  refreshAccessToken,
-  setAccessToken,
+  getAccessToken2 as getAccessToken,
+  refreshAccessToken2 as refreshAccessToken,
+  setAccessToken2 as setAccessToken,
   useAuthFetch,
   useLogin,
   useLogout,

package/dist/auth/email/client.cjs.js

@@ -34,9 +34,9 @@ __export(client_exports, {
   AuthApply: () => AuthApply,
   AuthWrapper: () => AuthWrapper,
   TokenContext: () => TokenContext,
-  getAccessToken: () => getAccessToken,
-  refreshAccessToken: () => refreshAccessToken,
-  setAccessToken: () => setAccessToken,
+  getAccessToken: () => import_token_store2.getAccessToken,
+  refreshAccessToken: () => import_token_store2.refreshAccessToken,
+  setAccessToken: () => import_token_store2.setAccessToken,
   useAuthFetch: () => useAuthFetch,
   useLogin: () => useLogin,
   useLogout: () => useLogout,
@@ -45,6 +45,7 @@ __export(client_exports, {
   useToken: () => useToken
 });
 module.exports = __toCommonJS(client_exports);
+var import_token_store = require("naystack/auth/token-store");
 var import_react = __toESM(require("react"));
 
 // src/env.ts
@@ -97,42 +98,8 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function subscribeToAccessToken(listener) {
-  listeners.add(listener);
-  return () => {
-    listeners.delete(listener);
-  };
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/auth/email/client.tsx
+var import_token_store2 = require("naystack/auth/token-store");
 var TokenContext = (0, import_react.createContext)({
   token: void 0,
   setToken: () => null
@@ -142,12 +109,12 @@ var AuthWrapper = ({
   skipInitialFetch
 }) => {
   const [token, setTokenState] = (0, import_react.useState)(
-    getAccessToken
+    import_token_store.getAccessToken
   );
-  (0, import_react.useEffect)(() => subscribeToAccessToken(setTokenState), []);
+  (0, import_react.useEffect)(() => (0, import_token_store.subscribeToAccessToken)(setTokenState), []);
   const setToken = (0, import_react.useCallback)((action) => {
-    setAccessToken(
-      typeof action === "function" ? action(getAccessToken()) : action
+    (0, import_token_store.setAccessToken)(
+      typeof action === "function" ? action((0, import_token_store.getAccessToken)()) : action
     );
   }, []);
   return /* @__PURE__ */ import_react.default.createElement(TokenContext.Provider, { value: { token, setToken } }, !skipInitialFetch && /* @__PURE__ */ import_react.default.createElement(AuthChildComponent, null), children);
@@ -159,7 +126,7 @@ function AuthChildComponent() {
 function useAuthFetch({ skip } = {}) {
   (0, import_react.useEffect)(() => {
     if (skip) return;
-    void refreshAccessToken().catch(() => null);
+    void (0, import_token_store.refreshAccessToken)().catch(() => null);
   }, []);
 }
 function AuthApply({ data }) {

package/dist/auth/email/client.d.mts

@@ -1,5 +1,5 @@
 import React__default, { Dispatch, SetStateAction, PropsWithChildren } from 'react';
-export { getAccessToken, refreshAccessToken, setAccessToken } from '../token-store.mjs';
+export { getAccessToken, refreshAccessToken, setAccessToken } from 'naystack/auth/token-store';
 
 /**
  * React context holding the current access token and setter; used by useToken/useSetToken and auth hooks.
@@ -45,7 +45,7 @@ type AuthWrapperProps = PropsWithChildren<{
  *
  * @category Auth
  */
-declare const AuthWrapper: ({ children, skipInitialFetch }: AuthWrapperProps) => React__default.JSX.Element;
+declare const AuthWrapper: ({ children, skipInitialFetch, }: AuthWrapperProps) => React__default.JSX.Element;
 /**
  * Fetches the access token on mount by calling the auth endpoint. Stores the result in TokenContext.
  * Used internally by auth setup; prefer `AuthWrapper` for typical usage.

package/dist/auth/email/client.d.ts

@@ -1,5 +1,5 @@
 import React__default, { Dispatch, SetStateAction, PropsWithChildren } from 'react';
-export { getAccessToken, refreshAccessToken, setAccessToken } from '../token-store.js';
+export { getAccessToken, refreshAccessToken, setAccessToken } from 'naystack/auth/token-store';
 
 /**
  * React context holding the current access token and setter; used by useToken/useSetToken and auth hooks.
@@ -45,7 +45,7 @@ type AuthWrapperProps = PropsWithChildren<{
  *
  * @category Auth
  */
-declare const AuthWrapper: ({ children, skipInitialFetch }: AuthWrapperProps) => React__default.JSX.Element;
+declare const AuthWrapper: ({ children, skipInitialFetch, }: AuthWrapperProps) => React__default.JSX.Element;
 /**
  * Fetches the access token on mount by calling the auth endpoint. Stores the result in TokenContext.
  * Used internally by auth setup; prefer `AuthWrapper` for typical usage.

package/dist/auth/email/client.esm.js

@@ -1,6 +1,12 @@
 "use client";
 
 // src/auth/email/client.tsx
+import {
+  getAccessToken,
+  refreshAccessToken,
+  setAccessToken,
+  subscribeToAccessToken
+} from "naystack/auth/token-store";
 import React, {
   createContext,
   useCallback,
@@ -59,42 +65,12 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function subscribeToAccessToken(listener) {
-  listeners.add(listener);
-  return () => {
-    listeners.delete(listener);
-  };
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/auth/email/client.tsx
+import {
+  getAccessToken as getAccessToken2,
+  refreshAccessToken as refreshAccessToken2,
+  setAccessToken as setAccessToken2
+} from "naystack/auth/token-store";
 var TokenContext = createContext({
   token: void 0,
   setToken: () => null
@@ -203,9 +179,9 @@ export {
   AuthApply,
   AuthWrapper,
   TokenContext,
-  getAccessToken,
-  refreshAccessToken,
-  setAccessToken,
+  getAccessToken2 as getAccessToken,
+  refreshAccessToken2 as refreshAccessToken,
+  setAccessToken2 as setAccessToken,
   useAuthFetch,
   useLogin,
   useLogout,

package/dist/auth/email/index.d.mts

@@ -6,7 +6,7 @@ export { getContext } from './utils.mjs';
 import '../types.mjs';
 import 'react';
 import './client.mjs';
-import '../token-store.mjs';
+import 'naystack/auth/token-store';
 import '../../graphql/types.mjs';
 
 /**

package/dist/auth/email/index.d.ts

@@ -6,7 +6,7 @@ export { getContext } from './utils.js';
 import '../types.js';
 import 'react';
 import './client.js';
-import '../token-store.js';
+import 'naystack/auth/token-store';
 import '../../graphql/types.js';
 
 /**

package/dist/auth/email/next.d.mts

@@ -1,6 +1,6 @@
 import React__default from 'react';
 import { AuthWrapperProps } from './client.mjs';
-import '../token-store.mjs';
+import 'naystack/auth/token-store';
 
 declare function AuthFetch(): React__default.JSX.Element;
 declare function AuthWrapper({ children, skipInitialFetch }: AuthWrapperProps): React__default.JSX.Element;

package/dist/auth/email/next.d.ts

@@ -1,6 +1,6 @@
 import React__default from 'react';
 import { AuthWrapperProps } from './client.js';
-import '../token-store.js';
+import 'naystack/auth/token-store';
 
 declare function AuthFetch(): React__default.JSX.Element;
 declare function AuthWrapper({ children, skipInitialFetch }: AuthWrapperProps): React__default.JSX.Element;

package/dist/auth/index.d.mts

@@ -13,5 +13,5 @@ import 'googleapis';
 import '../socials/instagram/types.mjs';
 import 'react';
 import './email/client.mjs';
-import './token-store.mjs';
+import 'naystack/auth/token-store';
 import '../graphql/types.mjs';

package/dist/auth/index.d.ts

@@ -13,5 +13,5 @@ import 'googleapis';
 import '../socials/instagram/types.js';
 import 'react';
 import './email/client.js';
-import './token-store.js';
+import 'naystack/auth/token-store';
 import '../graphql/types.js';

package/dist/graphql/client.cjs.js

@@ -64,6 +64,7 @@ function ClearStoreOnLogout() {
 var import_client3 = require("@apollo/client");
 var import_context = require("@apollo/client/link/context");
 var import_error = require("@apollo/client/link/error");
+var import_token_store = require("naystack/auth/token-store");
 
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
@@ -115,42 +116,13 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/graphql/links.ts
 var RETRY_CONTEXT_KEY = "__naystackRetried";
 function isExpiredTokenError(error) {
   return error.extensions?.code === "UNAUTHENTICATED";
 }
 var authLink = (0, import_context.setContext)((_, previousContext) => {
-  const token = getAccessToken();
+  const token = (0, import_token_store.getAccessToken)();
   if (!token || previousContext.credentials === "include")
     return previousContext;
   return {
@@ -168,7 +140,7 @@ var refreshLink = (0, import_error.onError)(({ graphQLErrors, operation, forward
   return (0, import_client3.fromPromise)(
     // A failed refresh still replays once: the retry reproduces the original
     // error for the caller instead of surfacing the refresh's error in its place.
-    refreshAccessToken().catch(() => null)
+    (0, import_token_store.refreshAccessToken)().catch(() => null)
   ).flatMap(() => {
     operation.setContext((previousContext) => ({
       ...previousContext,
@@ -212,7 +184,7 @@ var tokenContext = (token) => {
   };
 };
 function useAuthQuery(query, variables, options) {
-  const [fetch2, result] = (0, import_client4.useLazyQuery)(query, {
+  const [fetch, result] = (0, import_client4.useLazyQuery)(query, {
     fetchPolicy: "no-cache",
     ...options
   });
@@ -221,7 +193,7 @@ function useAuthQuery(query, variables, options) {
     const serialized = JSON.stringify(variables);
     if (variables && prevVarsRef.current !== serialized) {
       prevVarsRef.current = serialized;
-      void fetch2({
+      void fetch({
         // @ts-expect-error -- to allow dynamic props
         variables: { input: variables },
         context: {
@@ -229,16 +201,16 @@ function useAuthQuery(query, variables, options) {
         }
       });
     }
-  }, [fetch2, variables]);
+  }, [fetch, variables]);
   const reFetch = (0, import_react2.useCallback)(
-    (input) => fetch2({
+    (input) => fetch({
       // @ts-expect-error -- to allow dynamic props
       variables: { input },
       context: {
         credentials: `include`
       }
     }),
-    [fetch2]
+    [fetch]
   );
   return [reFetch, result];
 }

package/dist/graphql/client.esm.js

@@ -38,6 +38,7 @@ function ClearStoreOnLogout() {
 import { ApolloLink, fromPromise, HttpLink } from "@apollo/client";
 import { setContext } from "@apollo/client/link/context";
 import { onError } from "@apollo/client/link/error";
+import { getAccessToken, refreshAccessToken } from "naystack/auth/token-store";
 
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
@@ -89,35 +90,6 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/graphql/links.ts
 var RETRY_CONTEXT_KEY = "__naystackRetried";
 function isExpiredTokenError(error) {
@@ -186,7 +158,7 @@ var tokenContext = (token) => {
   };
 };
 function useAuthQuery(query, variables, options) {
-  const [fetch2, result] = useLazyQuery(query, {
+  const [fetch, result] = useLazyQuery(query, {
     fetchPolicy: "no-cache",
     ...options
   });
@@ -195,7 +167,7 @@ function useAuthQuery(query, variables, options) {
     const serialized = JSON.stringify(variables);
     if (variables && prevVarsRef.current !== serialized) {
       prevVarsRef.current = serialized;
-      void fetch2({
+      void fetch({
         // @ts-expect-error -- to allow dynamic props
         variables: { input: variables },
         context: {
@@ -203,16 +175,16 @@ function useAuthQuery(query, variables, options) {
         }
       });
     }
-  }, [fetch2, variables]);
+  }, [fetch, variables]);
   const reFetch = useCallback(
-    (input) => fetch2({
+    (input) => fetch({
       // @ts-expect-error -- to allow dynamic props
       variables: { input },
       context: {
         credentials: `include`
       }
     }),
-    [fetch2]
+    [fetch]
   );
   return [reFetch, result];
 }

package/dist/graphql/links.cjs.js

@@ -26,6 +26,7 @@ module.exports = __toCommonJS(links_exports);
 var import_client = require("@apollo/client");
 var import_context = require("@apollo/client/link/context");
 var import_error = require("@apollo/client/link/error");
+var import_token_store = require("naystack/auth/token-store");
 
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
@@ -77,42 +78,13 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/graphql/links.ts
 var RETRY_CONTEXT_KEY = "__naystackRetried";
 function isExpiredTokenError(error) {
   return error.extensions?.code === "UNAUTHENTICATED";
 }
 var authLink = (0, import_context.setContext)((_, previousContext) => {
-  const token = getAccessToken();
+  const token = (0, import_token_store.getAccessToken)();
   if (!token || previousContext.credentials === "include")
     return previousContext;
   return {
@@ -130,7 +102,7 @@ var refreshLink = (0, import_error.onError)(({ graphQLErrors, operation, forward
   return (0, import_client.fromPromise)(
     // A failed refresh still replays once: the retry reproduces the original
     // error for the caller instead of surfacing the refresh's error in its place.
-    refreshAccessToken().catch(() => null)
+    (0, import_token_store.refreshAccessToken)().catch(() => null)
   ).flatMap(() => {
     operation.setContext((previousContext) => ({
       ...previousContext,

package/dist/graphql/links.esm.js

@@ -2,6 +2,7 @@
 import { ApolloLink, fromPromise, HttpLink } from "@apollo/client";
 import { setContext } from "@apollo/client/link/context";
 import { onError } from "@apollo/client/link/error";
+import { getAccessToken, refreshAccessToken } from "naystack/auth/token-store";
 
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
@@ -53,35 +54,6 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/graphql/links.ts
 var RETRY_CONTEXT_KEY = "__naystackRetried";
 function isExpiredTokenError(error) {

package/dist/graphql/next.cjs.js

@@ -60,6 +60,7 @@ function ClearStoreOnLogout() {
 var import_client3 = require("@apollo/client");
 var import_context = require("@apollo/client/link/context");
 var import_error = require("@apollo/client/link/error");
+var import_token_store = require("naystack/auth/token-store");
 
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
@@ -111,42 +112,13 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/graphql/links.ts
 var RETRY_CONTEXT_KEY = "__naystackRetried";
 function isExpiredTokenError(error) {
   return error.extensions?.code === "UNAUTHENTICATED";
 }
 var authLink = (0, import_context.setContext)((_, previousContext) => {
-  const token = getAccessToken();
+  const token = (0, import_token_store.getAccessToken)();
   if (!token || previousContext.credentials === "include")
     return previousContext;
   return {
@@ -164,7 +136,7 @@ var refreshLink = (0, import_error.onError)(({ graphQLErrors, operation, forward
   return (0, import_client3.fromPromise)(
     // A failed refresh still replays once: the retry reproduces the original
     // error for the caller instead of surfacing the refresh's error in its place.
-    refreshAccessToken().catch(() => null)
+    (0, import_token_store.refreshAccessToken)().catch(() => null)
   ).flatMap(() => {
     operation.setContext((previousContext) => ({
       ...previousContext,

package/dist/graphql/next.esm.js

@@ -31,6 +31,7 @@ function ClearStoreOnLogout() {
 import { ApolloLink, fromPromise, HttpLink } from "@apollo/client";
 import { setContext } from "@apollo/client/link/context";
 import { onError } from "@apollo/client/link/error";
+import { getAccessToken, refreshAccessToken } from "naystack/auth/token-store";
 
 // src/env.ts
 var EXTRA_ENV = globalThis.__NAYSTACK_ENV__ || (globalThis.__NAYSTACK_ENV__ = {});
@@ -82,35 +83,6 @@ function getEnv(key, skipCheck) {
   return value;
 }
 
-// src/auth/token-store.ts
-var currentToken;
-var listeners = /* @__PURE__ */ new Set();
-var inFlightRefresh = null;
-function getAccessToken() {
-  return currentToken;
-}
-function setAccessToken(token) {
-  if (token === currentToken) return;
-  currentToken = token;
-  listeners.forEach((listener) => listener(token));
-}
-function refreshAccessToken() {
-  if (inFlightRefresh) return inFlightRefresh;
-  inFlightRefresh = (async () => {
-    const res = await fetch(
-      getEnv("NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT" /* NEXT_PUBLIC_EMAIL_AUTH_ENDPOINT */),
-      { credentials: "include" }
-    );
-    if (!res.ok) throw new Error(`Token refresh failed: ${res.status}`);
-    const token = await res.text() || null;
-    setAccessToken(token);
-    return token;
-  })().finally(() => {
-    inFlightRefresh = null;
-  });
-  return inFlightRefresh;
-}
-
 // src/graphql/links.ts
 var RETRY_CONTEXT_KEY = "__naystackRetried";
 function isExpiredTokenError(error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "naystack",
-  "version": "1.8.4",
+  "version": "1.8.5",
   "description": "A stack built with Next + GraphQL + S3 + Auth",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",
@@ -23,6 +23,11 @@
       "import": "./dist/auth/client.esm.js",
       "require": "./dist/auth/client.cjs.js"
     },
+    "./auth/token-store": {
+      "types": "./dist/auth/token-store.d.ts",
+      "import": "./dist/auth/token-store.esm.js",
+      "require": "./dist/auth/token-store.cjs.js"
+    },
     "./graphql": {
       "types": "./dist/graphql/index.d.ts",
       "import": "./dist/graphql/index.esm.js",