tempest-react-sdk 0.23.0 → 0.24.0

package/dist/auth/create-tempest-auth.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const _=require("./create-auth-store.cjs"),Q=require("./refresh-queue.cjs"),h=require("../http/api-client.cjs");function j(s){const r=s??{};return{token:r.access_token,refreshToken:r.refresh_token}}function z(s){const{baseURL:r,loginPath:S="/api/auth/login",refreshPath:b="/api/auth/refresh",mePath:d,storeName:k="tempest-auth",storage:p="local",withCredentials:a=!1,fetcher:i,parseTokens:g=j,parseUser:U,refreshBody:C=e=>e?{refresh_token:e}:void 0}=s,T=_.createAuthStore({name:k,storage:p}),u=`${k}-refresh`;function m(){return typeof window>"u"?null:p==="session"?window.sessionStorage:window.localStorage}function P(){return m()?.getItem(u)??null}function c(e){const t=m();t&&(e?t.setItem(u,e):t.removeItem(u))}const n=()=>T.getState(),f=()=>n().token,w=h.createApiClient({baseURL:r,withCredentials:a,fetcher:i});async function I(){if(!d)return n().user;const e=f(),t=await h.createApiClient({baseURL:r,withCredentials:a,fetcher:i,getToken:()=>e}).get(d);return n().setUser(t),t}async function R(e){const t=await w.post(S,{body:e}),{token:o,refreshToken:v}=g(t);n().setToken(o),c(v??null);const l=U?.(t);return l!=null?(n().setUser(l),l):I()}function y(){n().logout(),c(null)}const A=Q.createRefreshQueue(async()=>{const e=await w.post(b,{body:C(P())}),{token:t,refreshToken:o}=g(e);n().setToken(t),o&&c(o)}),q=h.createApiClient({baseURL:r,withCredentials:a,fetcher:i,getToken:f,refresh:A,onUnauthorized:()=>y()});return{useAuthStore:T,api:q,login:R,logout:y,refresh:A,getToken:f}}exports.createTempestAuth=z;
-//# sourceMappingURL=create-tempest-auth.cjs.map
+const e=require("../http/api-client.cjs"),t=require("./create-auth-store.cjs"),n=require("./refresh-queue.cjs");function r(e){let t=e??{};return{token:t.access_token,refreshToken:t.refresh_token}}function i(i){let{baseURL:a,loginPath:o=`/api/auth/login`,refreshPath:s=`/api/auth/refresh`,mePath:c,storeName:l=`tempest-auth`,storage:u=`local`,withCredentials:d=!1,fetcher:f,parseTokens:p=r,parseUser:m,refreshBody:h=e=>e?{refresh_token:e}:void 0}=i,g=t.createAuthStore({name:l,storage:u}),_=`${l}-refresh`;function v(){return typeof window>`u`?null:u===`session`?window.sessionStorage:window.localStorage}function y(){return v()?.getItem(_)??null}function b(e){let t=v();t&&(e?t.setItem(_,e):t.removeItem(_))}let x=()=>g.getState(),S=()=>x().token,C=e.createApiClient({baseURL:a,withCredentials:d,fetcher:f});async function w(){if(!c)return x().user;let t=S(),n=await e.createApiClient({baseURL:a,withCredentials:d,fetcher:f,getToken:()=>t}).get(c);return x().setUser(n),n}async function T(e){let t=await C.post(o,{body:e}),{token:n,refreshToken:r}=p(t);x().setToken(n),b(r??null);let i=m?.(t);return i==null?w():(x().setUser(i),i)}function E(){x().logout(),b(null)}let D=n.createRefreshQueue(async()=>{let e=await C.post(s,{body:h(y())}),{token:t,refreshToken:n}=p(e);x().setToken(t),n&&b(n)});return{useAuthStore:g,api:e.createApiClient({baseURL:a,withCredentials:d,fetcher:f,getToken:S,refresh:D,onUnauthorized:()=>E()}),login:T,logout:E,refresh:D,getToken:S}}exports.createTempestAuth=i;
+//# sourceMappingURL=create-tempest-auth.cjs.map

package/dist/auth/create-tempest-auth.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"create-tempest-auth.cjs","sources":["../../src/auth/create-tempest-auth.ts"],"sourcesContent":["import { createApiClient } from \"../http\";\nimport type { ApiClient } from \"../http\";\nimport { createAuthStore } from \"./create-auth-store\";\nimport type { AuthState } from \"./create-auth-store\";\nimport { createRefreshQueue } from \"./refresh-queue\";\n\n/** The token envelope returned by a Tempest FastAPI SDK login/refresh route. */\nexport interface TempestTokenResponse {\n    /** The bearer access token. */\n    access_token: string;\n    /** Token type — always `\"bearer\"` for the SDK. */\n    token_type?: string;\n    /** Optional refresh token (when the API returns it in the body, not a cookie). */\n    refresh_token?: string;\n}\n\nexport interface CreateTempestAuthOptions<TUser> {\n    /** Base URL of the API. Required. */\n    baseURL: string;\n    /** Login route (`POST`). Default: `\"/api/auth/login\"`. */\n    loginPath?: string;\n    /** Refresh route (`POST`). Default: `\"/api/auth/refresh\"`. */\n    refreshPath?: string;\n    /** Optional current-user route (`GET`) called after login/refresh. */\n    mePath?: string;\n    /** Persist key for the store. Default: `\"tempest-auth\"`. */\n    storeName?: string;\n    /** Storage backend. Default: `\"local\"`. */\n    storage?: \"local\" | \"session\";\n    /** Send cookies (needed when the refresh token lives in an httpOnly cookie). */\n    withCredentials?: boolean;\n    /** Custom fetch implementation (testing / SSR). Defaults to `globalThis.fetch`. */\n    fetcher?: typeof fetch;\n    /**\n     * Extract tokens from a login/refresh response. Default reads\n     * `access_token` + `refresh_token`.\n     */\n    parseTokens?: (data: unknown) => { token: string; refreshToken?: string };\n    /** Pull the user out of the login response, when the API embeds it. */\n    parseUser?: (data: unknown) => TUser | null;\n    /**\n     * Build the refresh request body. Default sends `{ refresh_token }` when a\n     * refresh token is stored, else `undefined` (cookie-based refresh).\n     */\n    refreshBody?: (refreshToken: string | null) => unknown;\n}\n\nexport interface TempestAuth<TUser, TCredentials> {\n    /** The persisted Zustand auth store hook (compatible with `<AuthGuard>`). */\n    useAuthStore: ReturnType<typeof createAuthStore<TUser>>;\n    /** A `createApiClient` wired with bearer auth + 401 → refresh → retry. */\n    api: ApiClient;\n    /** Authenticate, store the session, and resolve the user (or null). */\n    login: (credentials: TCredentials) => Promise<TUser | null>;\n    /** Clear the session (and the stored refresh token). */\n    logout: () => void;\n    /** Refresh the access token (deduplicated across concurrent callers). */\n    refresh: () => Promise<void>;\n    /** The current access token, or null. */\n    getToken: () => string | null;\n}\n\nfunction defaultParseTokens(data: unknown): { token: string; refreshToken?: string } {\n    const d = (data ?? {}) as TempestTokenResponse;\n    return { token: d.access_token, refreshToken: d.refresh_token };\n}\n\n/**\n * Turn-key auth preset wiring `createAuthStore` + `createRefreshQueue` +\n * `createApiClient` to the Tempest FastAPI SDK auth contract: login returns\n * `{ access_token, token_type }`, requests carry `Authorization: Bearer`, and a\n * `401` triggers a single deduplicated refresh + retry. Logout (or a failed\n * refresh) clears the session.\n *\n * @example\n * const auth = createTempestAuth<User, { email: string; password: string }>({\n *     baseURL: import.meta.env.VITE_API_URL,\n *     mePath: \"/api/auth/me\",\n * });\n *\n * await auth.login({ email, password });   // stores session, returns the user\n * const orders = await auth.api.get(\"/api/orders\");  // sends the bearer token\n * auth.logout();\n *\n * @param options - The auth configuration.\n * @returns The store hook, a wired API client, and login/logout/refresh helpers.\n */\nexport function createTempestAuth<TUser, TCredentials = { email: string; password: string }>(\n    options: CreateTempestAuthOptions<TUser>,\n): TempestAuth<TUser, TCredentials> {\n    const {\n        baseURL,\n        loginPath = \"/api/auth/login\",\n        refreshPath = \"/api/auth/refresh\",\n        mePath,\n        storeName = \"tempest-auth\",\n        storage = \"local\",\n        withCredentials = false,\n        fetcher,\n        parseTokens = defaultParseTokens,\n        parseUser,\n        refreshBody = (rt) => (rt ? { refresh_token: rt } : undefined),\n    } = options;\n\n    const useAuthStore = createAuthStore<TUser>({ name: storeName, storage });\n    const refreshKey = `${storeName}-refresh`;\n\n    function storageImpl(): Storage | null {\n        if (typeof window === \"undefined\") return null;\n        return storage === \"session\" ? window.sessionStorage : window.localStorage;\n    }\n    function readRefreshToken(): string | null {\n        return storageImpl()?.getItem(refreshKey) ?? null;\n    }\n    function writeRefreshToken(token: string | null): void {\n        const s = storageImpl();\n        if (!s) return;\n        if (token) s.setItem(refreshKey, token);\n        else s.removeItem(refreshKey);\n    }\n\n    const state = (): AuthState<TUser> => useAuthStore.getState();\n    const getToken = (): string | null => state().token;\n\n    // Bare client (no auth/refresh) used for the login + refresh calls themselves.\n    const bareApi = createApiClient({ baseURL, withCredentials, fetcher });\n\n    async function fetchUser(): Promise<TUser | null> {\n        if (!mePath) return state().user;\n        const token = getToken();\n        const user = await createApiClient({\n            baseURL,\n            withCredentials,\n            fetcher,\n            getToken: () => token,\n        }).get<TUser>(mePath);\n        state().setUser(user);\n        return user;\n    }\n\n    async function login(credentials: TCredentials): Promise<TUser | null> {\n        const data = await bareApi.post<unknown>(loginPath, { body: credentials });\n        const { token, refreshToken } = parseTokens(data);\n        state().setToken(token);\n        writeRefreshToken(refreshToken ?? null);\n        const embedded = parseUser?.(data);\n        if (embedded != null) {\n            state().setUser(embedded);\n            return embedded;\n        }\n        return fetchUser();\n    }\n\n    function logout(): void {\n        state().logout();\n        writeRefreshToken(null);\n    }\n\n    const refresh = createRefreshQueue(async () => {\n        const data = await bareApi.post<unknown>(refreshPath, {\n            body: refreshBody(readRefreshToken()),\n        });\n        const { token, refreshToken } = parseTokens(data);\n        state().setToken(token);\n        if (refreshToken) writeRefreshToken(refreshToken);\n    });\n\n    const api = createApiClient({\n        baseURL,\n        withCredentials,\n        fetcher,\n        getToken,\n        refresh,\n        onUnauthorized: () => logout(),\n    });\n\n    return { useAuthStore, api, login, logout, refresh, getToken };\n}\n"],"names":["defaultParseTokens","data","d","createTempestAuth","options","baseURL","loginPath","refreshPath","mePath","storeName","storage","withCredentials","fetcher","parseTokens","parseUser","refreshBody","rt","useAuthStore","createAuthStore","refreshKey","storageImpl","readRefreshToken","writeRefreshToken","token","s","state","getToken","bareApi","createApiClient","fetchUser","user","login","credentials","refreshToken","embedded","logout","refresh","createRefreshQueue","api"],"mappings":"gMA8DA,SAASA,EAAmBC,EAAyD,CACjF,MAAMC,EAAKD,GAAQ,CAAA,EACnB,MAAO,CAAE,MAAOC,EAAE,aAAc,aAAcA,EAAE,aAAA,CACpD,CAsBO,SAASC,EACZC,EACgC,CAChC,KAAM,CACF,QAAAC,EACA,UAAAC,EAAY,kBACZ,YAAAC,EAAc,oBACd,OAAAC,EACA,UAAAC,EAAY,eACZ,QAAAC,EAAU,QACV,gBAAAC,EAAkB,GAClB,QAAAC,EACA,YAAAC,EAAcb,EACd,UAAAc,EACA,YAAAC,EAAeC,GAAQA,EAAK,CAAE,cAAeA,GAAO,MAAA,EACpDZ,EAEEa,EAAeC,EAAAA,gBAAuB,CAAE,KAAMT,EAAW,QAAAC,EAAS,EAClES,EAAa,GAAGV,CAAS,WAE/B,SAASW,GAA8B,CACnC,OAAI,OAAO,OAAW,IAAoB,KACnCV,IAAY,UAAY,OAAO,eAAiB,OAAO,YAClE,CACA,SAASW,GAAkC,CACvC,OAAOD,EAAA,GAAe,QAAQD,CAAU,GAAK,IACjD,CACA,SAASG,EAAkBC,EAA4B,CACnD,MAAMC,EAAIJ,EAAA,EACLI,IACDD,EAAOC,EAAE,QAAQL,EAAYI,CAAK,EACjCC,EAAE,WAAWL,CAAU,EAChC,CAEA,MAAMM,EAAQ,IAAwBR,EAAa,SAAA,EAC7CS,EAAW,IAAqBD,EAAA,EAAQ,MAGxCE,EAAUC,EAAAA,gBAAgB,CAAE,QAAAvB,EAAS,gBAAAM,EAAiB,QAAAC,EAAS,EAErE,eAAeiB,GAAmC,CAC9C,GAAI,CAACrB,EAAQ,OAAOiB,EAAA,EAAQ,KAC5B,MAAMF,EAAQG,EAAA,EACRI,EAAO,MAAMF,kBAAgB,CAC/B,QAAAvB,EACA,gBAAAM,EACA,QAAAC,EACA,SAAU,IAAMW,CAAA,CACnB,EAAE,IAAWf,CAAM,EACpB,OAAAiB,EAAA,EAAQ,QAAQK,CAAI,EACbA,CACX,CAEA,eAAeC,EAAMC,EAAkD,CACnE,MAAM/B,EAAO,MAAM0B,EAAQ,KAAcrB,EAAW,CAAE,KAAM0B,EAAa,EACnE,CAAE,MAAAT,EAAO,aAAAU,GAAiBpB,EAAYZ,CAAI,EAChDwB,EAAA,EAAQ,SAASF,CAAK,EACtBD,EAAkBW,GAAgB,IAAI,EACtC,MAAMC,EAAWpB,IAAYb,CAAI,EACjC,OAAIiC,GAAY,MACZT,EAAA,EAAQ,QAAQS,CAAQ,EACjBA,GAEJL,EAAA,CACX,CAEA,SAASM,GAAe,CACpBV,EAAA,EAAQ,OAAA,EACRH,EAAkB,IAAI,CAC1B,CAEA,MAAMc,EAAUC,EAAAA,mBAAmB,SAAY,CAC3C,MAAMpC,EAAO,MAAM0B,EAAQ,KAAcpB,EAAa,CAClD,KAAMQ,EAAYM,EAAA,CAAkB,CAAA,CACvC,EACK,CAAE,MAAAE,EAAO,aAAAU,GAAiBpB,EAAYZ,CAAI,EAChDwB,EAAA,EAAQ,SAASF,CAAK,EAClBU,KAAgCA,CAAY,CACpD,CAAC,EAEKK,EAAMV,EAAAA,gBAAgB,CACxB,QAAAvB,EACA,gBAAAM,EACA,QAAAC,EACA,SAAAc,EACA,QAAAU,EACA,eAAgB,IAAMD,EAAA,CAAO,CAChC,EAED,MAAO,CAAE,aAAAlB,EAAc,IAAAqB,EAAK,MAAAP,EAAO,OAAAI,EAAQ,QAAAC,EAAS,SAAAV,CAAA,CACxD"}
+{"version":3,"file":"create-tempest-auth.cjs","names":[],"sources":["../../src/auth/create-tempest-auth.ts"],"sourcesContent":["import { createApiClient } from \"../http\";\nimport type { ApiClient } from \"../http\";\nimport { createAuthStore } from \"./create-auth-store\";\nimport type { AuthState } from \"./create-auth-store\";\nimport { createRefreshQueue } from \"./refresh-queue\";\n\n/** The token envelope returned by a Tempest FastAPI SDK login/refresh route. */\nexport interface TempestTokenResponse {\n    /** The bearer access token. */\n    access_token: string;\n    /** Token type — always `\"bearer\"` for the SDK. */\n    token_type?: string;\n    /** Optional refresh token (when the API returns it in the body, not a cookie). */\n    refresh_token?: string;\n}\n\nexport interface CreateTempestAuthOptions<TUser> {\n    /** Base URL of the API. Required. */\n    baseURL: string;\n    /** Login route (`POST`). Default: `\"/api/auth/login\"`. */\n    loginPath?: string;\n    /** Refresh route (`POST`). Default: `\"/api/auth/refresh\"`. */\n    refreshPath?: string;\n    /** Optional current-user route (`GET`) called after login/refresh. */\n    mePath?: string;\n    /** Persist key for the store. Default: `\"tempest-auth\"`. */\n    storeName?: string;\n    /** Storage backend. Default: `\"local\"`. */\n    storage?: \"local\" | \"session\";\n    /** Send cookies (needed when the refresh token lives in an httpOnly cookie). */\n    withCredentials?: boolean;\n    /** Custom fetch implementation (testing / SSR). Defaults to `globalThis.fetch`. */\n    fetcher?: typeof fetch;\n    /**\n     * Extract tokens from a login/refresh response. Default reads\n     * `access_token` + `refresh_token`.\n     */\n    parseTokens?: (data: unknown) => { token: string; refreshToken?: string };\n    /** Pull the user out of the login response, when the API embeds it. */\n    parseUser?: (data: unknown) => TUser | null;\n    /**\n     * Build the refresh request body. Default sends `{ refresh_token }` when a\n     * refresh token is stored, else `undefined` (cookie-based refresh).\n     */\n    refreshBody?: (refreshToken: string | null) => unknown;\n}\n\nexport interface TempestAuth<TUser, TCredentials> {\n    /** The persisted Zustand auth store hook (compatible with `<AuthGuard>`). */\n    useAuthStore: ReturnType<typeof createAuthStore<TUser>>;\n    /** A `createApiClient` wired with bearer auth + 401 → refresh → retry. */\n    api: ApiClient;\n    /** Authenticate, store the session, and resolve the user (or null). */\n    login: (credentials: TCredentials) => Promise<TUser | null>;\n    /** Clear the session (and the stored refresh token). */\n    logout: () => void;\n    /** Refresh the access token (deduplicated across concurrent callers). */\n    refresh: () => Promise<void>;\n    /** The current access token, or null. */\n    getToken: () => string | null;\n}\n\nfunction defaultParseTokens(data: unknown): { token: string; refreshToken?: string } {\n    const d = (data ?? {}) as TempestTokenResponse;\n    return { token: d.access_token, refreshToken: d.refresh_token };\n}\n\n/**\n * Turn-key auth preset wiring `createAuthStore` + `createRefreshQueue` +\n * `createApiClient` to the Tempest FastAPI SDK auth contract: login returns\n * `{ access_token, token_type }`, requests carry `Authorization: Bearer`, and a\n * `401` triggers a single deduplicated refresh + retry. Logout (or a failed\n * refresh) clears the session.\n *\n * @example\n * const auth = createTempestAuth<User, { email: string; password: string }>({\n *     baseURL: import.meta.env.VITE_API_URL,\n *     mePath: \"/api/auth/me\",\n * });\n *\n * await auth.login({ email, password });   // stores session, returns the user\n * const orders = await auth.api.get(\"/api/orders\");  // sends the bearer token\n * auth.logout();\n *\n * @param options - The auth configuration.\n * @returns The store hook, a wired API client, and login/logout/refresh helpers.\n */\nexport function createTempestAuth<TUser, TCredentials = { email: string; password: string }>(\n    options: CreateTempestAuthOptions<TUser>,\n): TempestAuth<TUser, TCredentials> {\n    const {\n        baseURL,\n        loginPath = \"/api/auth/login\",\n        refreshPath = \"/api/auth/refresh\",\n        mePath,\n        storeName = \"tempest-auth\",\n        storage = \"local\",\n        withCredentials = false,\n        fetcher,\n        parseTokens = defaultParseTokens,\n        parseUser,\n        refreshBody = (rt) => (rt ? { refresh_token: rt } : undefined),\n    } = options;\n\n    const useAuthStore = createAuthStore<TUser>({ name: storeName, storage });\n    const refreshKey = `${storeName}-refresh`;\n\n    function storageImpl(): Storage | null {\n        if (typeof window === \"undefined\") return null;\n        return storage === \"session\" ? window.sessionStorage : window.localStorage;\n    }\n    function readRefreshToken(): string | null {\n        return storageImpl()?.getItem(refreshKey) ?? null;\n    }\n    function writeRefreshToken(token: string | null): void {\n        const s = storageImpl();\n        if (!s) return;\n        if (token) s.setItem(refreshKey, token);\n        else s.removeItem(refreshKey);\n    }\n\n    const state = (): AuthState<TUser> => useAuthStore.getState();\n    const getToken = (): string | null => state().token;\n\n    // Bare client (no auth/refresh) used for the login + refresh calls themselves.\n    const bareApi = createApiClient({ baseURL, withCredentials, fetcher });\n\n    async function fetchUser(): Promise<TUser | null> {\n        if (!mePath) return state().user;\n        const token = getToken();\n        const user = await createApiClient({\n            baseURL,\n            withCredentials,\n            fetcher,\n            getToken: () => token,\n        }).get<TUser>(mePath);\n        state().setUser(user);\n        return user;\n    }\n\n    async function login(credentials: TCredentials): Promise<TUser | null> {\n        const data = await bareApi.post<unknown>(loginPath, { body: credentials });\n        const { token, refreshToken } = parseTokens(data);\n        state().setToken(token);\n        writeRefreshToken(refreshToken ?? null);\n        const embedded = parseUser?.(data);\n        if (embedded != null) {\n            state().setUser(embedded);\n            return embedded;\n        }\n        return fetchUser();\n    }\n\n    function logout(): void {\n        state().logout();\n        writeRefreshToken(null);\n    }\n\n    const refresh = createRefreshQueue(async () => {\n        const data = await bareApi.post<unknown>(refreshPath, {\n            body: refreshBody(readRefreshToken()),\n        });\n        const { token, refreshToken } = parseTokens(data);\n        state().setToken(token);\n        if (refreshToken) writeRefreshToken(refreshToken);\n    });\n\n    const api = createApiClient({\n        baseURL,\n        withCredentials,\n        fetcher,\n        getToken,\n        refresh,\n        onUnauthorized: () => logout(),\n    });\n\n    return { useAuthStore, api, login, logout, refresh, getToken };\n}\n"],"mappings":"gHA8DA,SAAS,EAAmB,EAAyD,CACjF,IAAM,EAAK,GAAQ,CAAC,EACpB,MAAO,CAAE,MAAO,EAAE,aAAc,aAAc,EAAE,aAAc,CAClE,CAsBA,SAAgB,EACZ,EACgC,CAChC,GAAM,CACF,UACA,YAAY,kBACZ,cAAc,oBACd,SACA,YAAY,eACZ,UAAU,QACV,kBAAkB,GAClB,UACA,cAAc,EACd,YACA,cAAe,GAAQ,EAAK,CAAE,cAAe,CAAG,EAAI,IAAA,IACpD,EAEE,EAAe,EAAA,gBAAuB,CAAE,KAAM,EAAW,SAAQ,CAAC,EAClE,EAAa,GAAG,EAAU,UAEhC,SAAS,GAA8B,CAEnC,OADI,OAAO,OAAW,IAAoB,KACnC,IAAY,UAAY,OAAO,eAAiB,OAAO,YAClE,CACA,SAAS,GAAkC,CACvC,OAAO,EAAY,CAAC,EAAE,QAAQ,CAAU,GAAK,IACjD,CACA,SAAS,EAAkB,EAA4B,CACnD,IAAM,EAAI,EAAY,EACjB,IACD,EAAO,EAAE,QAAQ,EAAY,CAAK,EACjC,EAAE,WAAW,CAAU,EAChC,CAEA,IAAM,MAAgC,EAAa,SAAS,EACtD,MAAgC,EAAM,CAAC,CAAC,MAGxC,EAAU,EAAA,gBAAgB,CAAE,UAAS,kBAAiB,SAAQ,CAAC,EAErE,eAAe,GAAmC,CAC9C,GAAI,CAAC,EAAQ,OAAO,EAAM,CAAC,CAAC,KAC5B,IAAM,EAAQ,EAAS,EACjB,EAAO,MAAM,EAAA,gBAAgB,CAC/B,UACA,kBACA,UACA,aAAgB,CACpB,CAAC,CAAC,CAAC,IAAW,CAAM,EAEpB,OADA,EAAM,CAAC,CAAC,QAAQ,CAAI,EACb,CACX,CAEA,eAAe,EAAM,EAAkD,CACnE,IAAM,EAAO,MAAM,EAAQ,KAAc,EAAW,CAAE,KAAM,CAAY,CAAC,EACnE,CAAE,QAAO,gBAAiB,EAAY,CAAI,EAChD,EAAM,CAAC,CAAC,SAAS,CAAK,EACtB,EAAkB,GAAgB,IAAI,EACtC,IAAM,EAAW,IAAY,CAAI,EAKjC,OAJI,GAAY,KAIT,EAAU,GAHb,EAAM,CAAC,CAAC,QAAQ,CAAQ,EACjB,EAGf,CAEA,SAAS,GAAe,CACpB,EAAM,CAAC,CAAC,OAAO,EACf,EAAkB,IAAI,CAC1B,CAEA,IAAM,EAAU,EAAA,mBAAmB,SAAY,CAC3C,IAAM,EAAO,MAAM,EAAQ,KAAc,EAAa,CAClD,KAAM,EAAY,EAAiB,CAAC,CACxC,CAAC,EACK,CAAE,QAAO,gBAAiB,EAAY,CAAI,EAChD,EAAM,CAAC,CAAC,SAAS,CAAK,EAClB,GAAc,EAAkB,CAAY,CACpD,CAAC,EAWD,MAAO,CAAE,eAAc,IATX,EAAA,gBAAgB,CACxB,UACA,kBACA,UACA,WACA,UACA,mBAAsB,EAAO,CACjC,CAEuB,EAAK,QAAO,SAAQ,UAAS,UAAS,CACjE"}

package/dist/auth/create-tempest-auth.js

@@ -1,70 +1,74 @@
-import { createAuthStore as x } from "./create-auth-store.js";
-import { createRefreshQueue as z } from "./refresh-queue.js";
-import { createApiClient as l } from "../http/api-client.js";
-function B(s) {
-  const o = s ?? {};
-  return { token: o.access_token, refreshToken: o.refresh_token };
+import { createApiClient as e } from "../http/api-client.js";
+import { createAuthStore as t } from "./create-auth-store.js";
+import { createRefreshQueue as n } from "./refresh-queue.js";
+//#region src/auth/create-tempest-auth.ts
+function r(e) {
+	let t = e ?? {};
+	return {
+		token: t.access_token,
+		refreshToken: t.refresh_token
+	};
 }
-function Q(s) {
-  const {
-    baseURL: o,
-    loginPath: b = "/api/auth/login",
-    refreshPath: A = "/api/auth/refresh",
-    mePath: d,
-    storeName: k = "tempest-auth",
-    storage: m = "local",
-    withCredentials: a = !1,
-    fetcher: i,
-    parseTokens: p = B,
-    parseUser: S,
-    refreshBody: I = (e) => e ? { refresh_token: e } : void 0
-  } = s, g = x({ name: k, storage: m }), u = `${k}-refresh`;
-  function T() {
-    return typeof window > "u" ? null : m === "session" ? window.sessionStorage : window.localStorage;
-  }
-  function P() {
-    return T()?.getItem(u) ?? null;
-  }
-  function c(e) {
-    const t = T();
-    t && (e ? t.setItem(u, e) : t.removeItem(u));
-  }
-  const n = () => g.getState(), f = () => n().token, w = l({ baseURL: o, withCredentials: a, fetcher: i });
-  async function R() {
-    if (!d) return n().user;
-    const e = f(), t = await l({
-      baseURL: o,
-      withCredentials: a,
-      fetcher: i,
-      getToken: () => e
-    }).get(d);
-    return n().setUser(t), t;
-  }
-  async function _(e) {
-    const t = await w.post(b, { body: e }), { token: r, refreshToken: C } = p(t);
-    n().setToken(r), c(C ?? null);
-    const h = S?.(t);
-    return h != null ? (n().setUser(h), h) : R();
-  }
-  function y() {
-    n().logout(), c(null);
-  }
-  const U = z(async () => {
-    const e = await w.post(A, {
-      body: I(P())
-    }), { token: t, refreshToken: r } = p(e);
-    n().setToken(t), r && c(r);
-  }), v = l({
-    baseURL: o,
-    withCredentials: a,
-    fetcher: i,
-    getToken: f,
-    refresh: U,
-    onUnauthorized: () => y()
-  });
-  return { useAuthStore: g, api: v, login: _, logout: y, refresh: U, getToken: f };
+function i(i) {
+	let { baseURL: a, loginPath: o = "/api/auth/login", refreshPath: s = "/api/auth/refresh", mePath: c, storeName: l = "tempest-auth", storage: u = "local", withCredentials: d = !1, fetcher: f, parseTokens: p = r, parseUser: m, refreshBody: h = (e) => e ? { refresh_token: e } : void 0 } = i, g = t({
+		name: l,
+		storage: u
+	}), _ = `${l}-refresh`;
+	function v() {
+		return typeof window > "u" ? null : u === "session" ? window.sessionStorage : window.localStorage;
+	}
+	function y() {
+		return v()?.getItem(_) ?? null;
+	}
+	function b(e) {
+		let t = v();
+		t && (e ? t.setItem(_, e) : t.removeItem(_));
+	}
+	let x = () => g.getState(), S = () => x().token, C = e({
+		baseURL: a,
+		withCredentials: d,
+		fetcher: f
+	});
+	async function w() {
+		if (!c) return x().user;
+		let t = S(), n = await e({
+			baseURL: a,
+			withCredentials: d,
+			fetcher: f,
+			getToken: () => t
+		}).get(c);
+		return x().setUser(n), n;
+	}
+	async function T(e) {
+		let t = await C.post(o, { body: e }), { token: n, refreshToken: r } = p(t);
+		x().setToken(n), b(r ?? null);
+		let i = m?.(t);
+		return i == null ? w() : (x().setUser(i), i);
+	}
+	function E() {
+		x().logout(), b(null);
+	}
+	let D = n(async () => {
+		let e = await C.post(s, { body: h(y()) }), { token: t, refreshToken: n } = p(e);
+		x().setToken(t), n && b(n);
+	});
+	return {
+		useAuthStore: g,
+		api: e({
+			baseURL: a,
+			withCredentials: d,
+			fetcher: f,
+			getToken: S,
+			refresh: D,
+			onUnauthorized: () => E()
+		}),
+		login: T,
+		logout: E,
+		refresh: D,
+		getToken: S
+	};
 }
-export {
-  Q as createTempestAuth
-};
-//# sourceMappingURL=create-tempest-auth.js.map
+//#endregion
+export { i as createTempestAuth };
+
+//# sourceMappingURL=create-tempest-auth.js.map

package/dist/auth/create-tempest-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-tempest-auth.js","sources":["../../src/auth/create-tempest-auth.ts"],"sourcesContent":["import { createApiClient } from \"../http\";\nimport type { ApiClient } from \"../http\";\nimport { createAuthStore } from \"./create-auth-store\";\nimport type { AuthState } from \"./create-auth-store\";\nimport { createRefreshQueue } from \"./refresh-queue\";\n\n/** The token envelope returned by a Tempest FastAPI SDK login/refresh route. */\nexport interface TempestTokenResponse {\n    /** The bearer access token. */\n    access_token: string;\n    /** Token type — always `\"bearer\"` for the SDK. */\n    token_type?: string;\n    /** Optional refresh token (when the API returns it in the body, not a cookie). */\n    refresh_token?: string;\n}\n\nexport interface CreateTempestAuthOptions<TUser> {\n    /** Base URL of the API. Required. */\n    baseURL: string;\n    /** Login route (`POST`). Default: `\"/api/auth/login\"`. */\n    loginPath?: string;\n    /** Refresh route (`POST`). Default: `\"/api/auth/refresh\"`. */\n    refreshPath?: string;\n    /** Optional current-user route (`GET`) called after login/refresh. */\n    mePath?: string;\n    /** Persist key for the store. Default: `\"tempest-auth\"`. */\n    storeName?: string;\n    /** Storage backend. Default: `\"local\"`. */\n    storage?: \"local\" | \"session\";\n    /** Send cookies (needed when the refresh token lives in an httpOnly cookie). */\n    withCredentials?: boolean;\n    /** Custom fetch implementation (testing / SSR). Defaults to `globalThis.fetch`. */\n    fetcher?: typeof fetch;\n    /**\n     * Extract tokens from a login/refresh response. Default reads\n     * `access_token` + `refresh_token`.\n     */\n    parseTokens?: (data: unknown) => { token: string; refreshToken?: string };\n    /** Pull the user out of the login response, when the API embeds it. */\n    parseUser?: (data: unknown) => TUser | null;\n    /**\n     * Build the refresh request body. Default sends `{ refresh_token }` when a\n     * refresh token is stored, else `undefined` (cookie-based refresh).\n     */\n    refreshBody?: (refreshToken: string | null) => unknown;\n}\n\nexport interface TempestAuth<TUser, TCredentials> {\n    /** The persisted Zustand auth store hook (compatible with `<AuthGuard>`). */\n    useAuthStore: ReturnType<typeof createAuthStore<TUser>>;\n    /** A `createApiClient` wired with bearer auth + 401 → refresh → retry. */\n    api: ApiClient;\n    /** Authenticate, store the session, and resolve the user (or null). */\n    login: (credentials: TCredentials) => Promise<TUser | null>;\n    /** Clear the session (and the stored refresh token). */\n    logout: () => void;\n    /** Refresh the access token (deduplicated across concurrent callers). */\n    refresh: () => Promise<void>;\n    /** The current access token, or null. */\n    getToken: () => string | null;\n}\n\nfunction defaultParseTokens(data: unknown): { token: string; refreshToken?: string } {\n    const d = (data ?? {}) as TempestTokenResponse;\n    return { token: d.access_token, refreshToken: d.refresh_token };\n}\n\n/**\n * Turn-key auth preset wiring `createAuthStore` + `createRefreshQueue` +\n * `createApiClient` to the Tempest FastAPI SDK auth contract: login returns\n * `{ access_token, token_type }`, requests carry `Authorization: Bearer`, and a\n * `401` triggers a single deduplicated refresh + retry. Logout (or a failed\n * refresh) clears the session.\n *\n * @example\n * const auth = createTempestAuth<User, { email: string; password: string }>({\n *     baseURL: import.meta.env.VITE_API_URL,\n *     mePath: \"/api/auth/me\",\n * });\n *\n * await auth.login({ email, password });   // stores session, returns the user\n * const orders = await auth.api.get(\"/api/orders\");  // sends the bearer token\n * auth.logout();\n *\n * @param options - The auth configuration.\n * @returns The store hook, a wired API client, and login/logout/refresh helpers.\n */\nexport function createTempestAuth<TUser, TCredentials = { email: string; password: string }>(\n    options: CreateTempestAuthOptions<TUser>,\n): TempestAuth<TUser, TCredentials> {\n    const {\n        baseURL,\n        loginPath = \"/api/auth/login\",\n        refreshPath = \"/api/auth/refresh\",\n        mePath,\n        storeName = \"tempest-auth\",\n        storage = \"local\",\n        withCredentials = false,\n        fetcher,\n        parseTokens = defaultParseTokens,\n        parseUser,\n        refreshBody = (rt) => (rt ? { refresh_token: rt } : undefined),\n    } = options;\n\n    const useAuthStore = createAuthStore<TUser>({ name: storeName, storage });\n    const refreshKey = `${storeName}-refresh`;\n\n    function storageImpl(): Storage | null {\n        if (typeof window === \"undefined\") return null;\n        return storage === \"session\" ? window.sessionStorage : window.localStorage;\n    }\n    function readRefreshToken(): string | null {\n        return storageImpl()?.getItem(refreshKey) ?? null;\n    }\n    function writeRefreshToken(token: string | null): void {\n        const s = storageImpl();\n        if (!s) return;\n        if (token) s.setItem(refreshKey, token);\n        else s.removeItem(refreshKey);\n    }\n\n    const state = (): AuthState<TUser> => useAuthStore.getState();\n    const getToken = (): string | null => state().token;\n\n    // Bare client (no auth/refresh) used for the login + refresh calls themselves.\n    const bareApi = createApiClient({ baseURL, withCredentials, fetcher });\n\n    async function fetchUser(): Promise<TUser | null> {\n        if (!mePath) return state().user;\n        const token = getToken();\n        const user = await createApiClient({\n            baseURL,\n            withCredentials,\n            fetcher,\n            getToken: () => token,\n        }).get<TUser>(mePath);\n        state().setUser(user);\n        return user;\n    }\n\n    async function login(credentials: TCredentials): Promise<TUser | null> {\n        const data = await bareApi.post<unknown>(loginPath, { body: credentials });\n        const { token, refreshToken } = parseTokens(data);\n        state().setToken(token);\n        writeRefreshToken(refreshToken ?? null);\n        const embedded = parseUser?.(data);\n        if (embedded != null) {\n            state().setUser(embedded);\n            return embedded;\n        }\n        return fetchUser();\n    }\n\n    function logout(): void {\n        state().logout();\n        writeRefreshToken(null);\n    }\n\n    const refresh = createRefreshQueue(async () => {\n        const data = await bareApi.post<unknown>(refreshPath, {\n            body: refreshBody(readRefreshToken()),\n        });\n        const { token, refreshToken } = parseTokens(data);\n        state().setToken(token);\n        if (refreshToken) writeRefreshToken(refreshToken);\n    });\n\n    const api = createApiClient({\n        baseURL,\n        withCredentials,\n        fetcher,\n        getToken,\n        refresh,\n        onUnauthorized: () => logout(),\n    });\n\n    return { useAuthStore, api, login, logout, refresh, getToken };\n}\n"],"names":["defaultParseTokens","data","d","createTempestAuth","options","baseURL","loginPath","refreshPath","mePath","storeName","storage","withCredentials","fetcher","parseTokens","parseUser","refreshBody","rt","useAuthStore","createAuthStore","refreshKey","storageImpl","readRefreshToken","writeRefreshToken","token","s","state","getToken","bareApi","createApiClient","fetchUser","user","login","credentials","refreshToken","embedded","logout","refresh","createRefreshQueue","api"],"mappings":";;;AA8DA,SAASA,EAAmBC,GAAyD;AACjF,QAAMC,IAAKD,KAAQ,CAAA;AACnB,SAAO,EAAE,OAAOC,EAAE,cAAc,cAAcA,EAAE,cAAA;AACpD;AAsBO,SAASC,EACZC,GACgC;AAChC,QAAM;AAAA,IACF,SAAAC;AAAA,IACA,WAAAC,IAAY;AAAA,IACZ,aAAAC,IAAc;AAAA,IACd,QAAAC;AAAA,IACA,WAAAC,IAAY;AAAA,IACZ,SAAAC,IAAU;AAAA,IACV,iBAAAC,IAAkB;AAAA,IAClB,SAAAC;AAAA,IACA,aAAAC,IAAcb;AAAA,IACd,WAAAc;AAAA,IACA,aAAAC,IAAc,CAACC,MAAQA,IAAK,EAAE,eAAeA,MAAO;AAAA,EAAA,IACpDZ,GAEEa,IAAeC,EAAuB,EAAE,MAAMT,GAAW,SAAAC,GAAS,GAClES,IAAa,GAAGV,CAAS;AAE/B,WAASW,IAA8B;AACnC,WAAI,OAAO,SAAW,MAAoB,OACnCV,MAAY,YAAY,OAAO,iBAAiB,OAAO;AAAA,EAClE;AACA,WAASW,IAAkC;AACvC,WAAOD,EAAA,GAAe,QAAQD,CAAU,KAAK;AAAA,EACjD;AACA,WAASG,EAAkBC,GAA4B;AACnD,UAAMC,IAAIJ,EAAA;AACV,IAAKI,MACDD,IAAOC,EAAE,QAAQL,GAAYI,CAAK,IACjCC,EAAE,WAAWL,CAAU;AAAA,EAChC;AAEA,QAAMM,IAAQ,MAAwBR,EAAa,SAAA,GAC7CS,IAAW,MAAqBD,EAAA,EAAQ,OAGxCE,IAAUC,EAAgB,EAAE,SAAAvB,GAAS,iBAAAM,GAAiB,SAAAC,GAAS;AAErE,iBAAeiB,IAAmC;AAC9C,QAAI,CAACrB,EAAQ,QAAOiB,EAAA,EAAQ;AAC5B,UAAMF,IAAQG,EAAA,GACRI,IAAO,MAAMF,EAAgB;AAAA,MAC/B,SAAAvB;AAAA,MACA,iBAAAM;AAAA,MACA,SAAAC;AAAA,MACA,UAAU,MAAMW;AAAA,IAAA,CACnB,EAAE,IAAWf,CAAM;AACpB,WAAAiB,EAAA,EAAQ,QAAQK,CAAI,GACbA;AAAA,EACX;AAEA,iBAAeC,EAAMC,GAAkD;AACnE,UAAM/B,IAAO,MAAM0B,EAAQ,KAAcrB,GAAW,EAAE,MAAM0B,GAAa,GACnE,EAAE,OAAAT,GAAO,cAAAU,MAAiBpB,EAAYZ,CAAI;AAChD,IAAAwB,EAAA,EAAQ,SAASF,CAAK,GACtBD,EAAkBW,KAAgB,IAAI;AACtC,UAAMC,IAAWpB,IAAYb,CAAI;AACjC,WAAIiC,KAAY,QACZT,EAAA,EAAQ,QAAQS,CAAQ,GACjBA,KAEJL,EAAA;AAAA,EACX;AAEA,WAASM,IAAe;AACpB,IAAAV,EAAA,EAAQ,OAAA,GACRH,EAAkB,IAAI;AAAA,EAC1B;AAEA,QAAMc,IAAUC,EAAmB,YAAY;AAC3C,UAAMpC,IAAO,MAAM0B,EAAQ,KAAcpB,GAAa;AAAA,MAClD,MAAMQ,EAAYM,EAAA,CAAkB;AAAA,IAAA,CACvC,GACK,EAAE,OAAAE,GAAO,cAAAU,MAAiBpB,EAAYZ,CAAI;AAChD,IAAAwB,EAAA,EAAQ,SAASF,CAAK,GAClBU,OAAgCA,CAAY;AAAA,EACpD,CAAC,GAEKK,IAAMV,EAAgB;AAAA,IACxB,SAAAvB;AAAA,IACA,iBAAAM;AAAA,IACA,SAAAC;AAAA,IACA,UAAAc;AAAA,IACA,SAAAU;AAAA,IACA,gBAAgB,MAAMD,EAAA;AAAA,EAAO,CAChC;AAED,SAAO,EAAE,cAAAlB,GAAc,KAAAqB,GAAK,OAAAP,GAAO,QAAAI,GAAQ,SAAAC,GAAS,UAAAV,EAAA;AACxD;"}
+{"version":3,"file":"create-tempest-auth.js","names":[],"sources":["../../src/auth/create-tempest-auth.ts"],"sourcesContent":["import { createApiClient } from \"../http\";\nimport type { ApiClient } from \"../http\";\nimport { createAuthStore } from \"./create-auth-store\";\nimport type { AuthState } from \"./create-auth-store\";\nimport { createRefreshQueue } from \"./refresh-queue\";\n\n/** The token envelope returned by a Tempest FastAPI SDK login/refresh route. */\nexport interface TempestTokenResponse {\n    /** The bearer access token. */\n    access_token: string;\n    /** Token type — always `\"bearer\"` for the SDK. */\n    token_type?: string;\n    /** Optional refresh token (when the API returns it in the body, not a cookie). */\n    refresh_token?: string;\n}\n\nexport interface CreateTempestAuthOptions<TUser> {\n    /** Base URL of the API. Required. */\n    baseURL: string;\n    /** Login route (`POST`). Default: `\"/api/auth/login\"`. */\n    loginPath?: string;\n    /** Refresh route (`POST`). Default: `\"/api/auth/refresh\"`. */\n    refreshPath?: string;\n    /** Optional current-user route (`GET`) called after login/refresh. */\n    mePath?: string;\n    /** Persist key for the store. Default: `\"tempest-auth\"`. */\n    storeName?: string;\n    /** Storage backend. Default: `\"local\"`. */\n    storage?: \"local\" | \"session\";\n    /** Send cookies (needed when the refresh token lives in an httpOnly cookie). */\n    withCredentials?: boolean;\n    /** Custom fetch implementation (testing / SSR). Defaults to `globalThis.fetch`. */\n    fetcher?: typeof fetch;\n    /**\n     * Extract tokens from a login/refresh response. Default reads\n     * `access_token` + `refresh_token`.\n     */\n    parseTokens?: (data: unknown) => { token: string; refreshToken?: string };\n    /** Pull the user out of the login response, when the API embeds it. */\n    parseUser?: (data: unknown) => TUser | null;\n    /**\n     * Build the refresh request body. Default sends `{ refresh_token }` when a\n     * refresh token is stored, else `undefined` (cookie-based refresh).\n     */\n    refreshBody?: (refreshToken: string | null) => unknown;\n}\n\nexport interface TempestAuth<TUser, TCredentials> {\n    /** The persisted Zustand auth store hook (compatible with `<AuthGuard>`). */\n    useAuthStore: ReturnType<typeof createAuthStore<TUser>>;\n    /** A `createApiClient` wired with bearer auth + 401 → refresh → retry. */\n    api: ApiClient;\n    /** Authenticate, store the session, and resolve the user (or null). */\n    login: (credentials: TCredentials) => Promise<TUser | null>;\n    /** Clear the session (and the stored refresh token). */\n    logout: () => void;\n    /** Refresh the access token (deduplicated across concurrent callers). */\n    refresh: () => Promise<void>;\n    /** The current access token, or null. */\n    getToken: () => string | null;\n}\n\nfunction defaultParseTokens(data: unknown): { token: string; refreshToken?: string } {\n    const d = (data ?? {}) as TempestTokenResponse;\n    return { token: d.access_token, refreshToken: d.refresh_token };\n}\n\n/**\n * Turn-key auth preset wiring `createAuthStore` + `createRefreshQueue` +\n * `createApiClient` to the Tempest FastAPI SDK auth contract: login returns\n * `{ access_token, token_type }`, requests carry `Authorization: Bearer`, and a\n * `401` triggers a single deduplicated refresh + retry. Logout (or a failed\n * refresh) clears the session.\n *\n * @example\n * const auth = createTempestAuth<User, { email: string; password: string }>({\n *     baseURL: import.meta.env.VITE_API_URL,\n *     mePath: \"/api/auth/me\",\n * });\n *\n * await auth.login({ email, password });   // stores session, returns the user\n * const orders = await auth.api.get(\"/api/orders\");  // sends the bearer token\n * auth.logout();\n *\n * @param options - The auth configuration.\n * @returns The store hook, a wired API client, and login/logout/refresh helpers.\n */\nexport function createTempestAuth<TUser, TCredentials = { email: string; password: string }>(\n    options: CreateTempestAuthOptions<TUser>,\n): TempestAuth<TUser, TCredentials> {\n    const {\n        baseURL,\n        loginPath = \"/api/auth/login\",\n        refreshPath = \"/api/auth/refresh\",\n        mePath,\n        storeName = \"tempest-auth\",\n        storage = \"local\",\n        withCredentials = false,\n        fetcher,\n        parseTokens = defaultParseTokens,\n        parseUser,\n        refreshBody = (rt) => (rt ? { refresh_token: rt } : undefined),\n    } = options;\n\n    const useAuthStore = createAuthStore<TUser>({ name: storeName, storage });\n    const refreshKey = `${storeName}-refresh`;\n\n    function storageImpl(): Storage | null {\n        if (typeof window === \"undefined\") return null;\n        return storage === \"session\" ? window.sessionStorage : window.localStorage;\n    }\n    function readRefreshToken(): string | null {\n        return storageImpl()?.getItem(refreshKey) ?? null;\n    }\n    function writeRefreshToken(token: string | null): void {\n        const s = storageImpl();\n        if (!s) return;\n        if (token) s.setItem(refreshKey, token);\n        else s.removeItem(refreshKey);\n    }\n\n    const state = (): AuthState<TUser> => useAuthStore.getState();\n    const getToken = (): string | null => state().token;\n\n    // Bare client (no auth/refresh) used for the login + refresh calls themselves.\n    const bareApi = createApiClient({ baseURL, withCredentials, fetcher });\n\n    async function fetchUser(): Promise<TUser | null> {\n        if (!mePath) return state().user;\n        const token = getToken();\n        const user = await createApiClient({\n            baseURL,\n            withCredentials,\n            fetcher,\n            getToken: () => token,\n        }).get<TUser>(mePath);\n        state().setUser(user);\n        return user;\n    }\n\n    async function login(credentials: TCredentials): Promise<TUser | null> {\n        const data = await bareApi.post<unknown>(loginPath, { body: credentials });\n        const { token, refreshToken } = parseTokens(data);\n        state().setToken(token);\n        writeRefreshToken(refreshToken ?? null);\n        const embedded = parseUser?.(data);\n        if (embedded != null) {\n            state().setUser(embedded);\n            return embedded;\n        }\n        return fetchUser();\n    }\n\n    function logout(): void {\n        state().logout();\n        writeRefreshToken(null);\n    }\n\n    const refresh = createRefreshQueue(async () => {\n        const data = await bareApi.post<unknown>(refreshPath, {\n            body: refreshBody(readRefreshToken()),\n        });\n        const { token, refreshToken } = parseTokens(data);\n        state().setToken(token);\n        if (refreshToken) writeRefreshToken(refreshToken);\n    });\n\n    const api = createApiClient({\n        baseURL,\n        withCredentials,\n        fetcher,\n        getToken,\n        refresh,\n        onUnauthorized: () => logout(),\n    });\n\n    return { useAuthStore, api, login, logout, refresh, getToken };\n}\n"],"mappings":";;;;AA8DA,SAAS,EAAmB,GAAyD;CACjF,IAAM,IAAK,KAAQ,CAAC;CACpB,OAAO;EAAE,OAAO,EAAE;EAAc,cAAc,EAAE;CAAc;AAClE;AAsBA,SAAgB,EACZ,GACgC;CAChC,IAAM,EACF,YACA,eAAY,mBACZ,iBAAc,qBACd,WACA,eAAY,gBACZ,aAAU,SACV,qBAAkB,IAClB,YACA,iBAAc,GACd,cACA,kBAAe,MAAQ,IAAK,EAAE,eAAe,EAAG,IAAI,KAAA,MACpD,GAEE,IAAe,EAAuB;EAAE,MAAM;EAAW;CAAQ,CAAC,GAClE,IAAa,GAAG,EAAU;CAEhC,SAAS,IAA8B;EAEnC,OADI,OAAO,SAAW,MAAoB,OACnC,MAAY,YAAY,OAAO,iBAAiB,OAAO;CAClE;CACA,SAAS,IAAkC;EACvC,OAAO,EAAY,CAAC,EAAE,QAAQ,CAAU,KAAK;CACjD;CACA,SAAS,EAAkB,GAA4B;EACnD,IAAM,IAAI,EAAY;EACjB,MACD,IAAO,EAAE,QAAQ,GAAY,CAAK,IACjC,EAAE,WAAW,CAAU;CAChC;CAEA,IAAM,UAAgC,EAAa,SAAS,GACtD,UAAgC,EAAM,CAAC,CAAC,OAGxC,IAAU,EAAgB;EAAE;EAAS;EAAiB;CAAQ,CAAC;CAErE,eAAe,IAAmC;EAC9C,IAAI,CAAC,GAAQ,OAAO,EAAM,CAAC,CAAC;EAC5B,IAAM,IAAQ,EAAS,GACjB,IAAO,MAAM,EAAgB;GAC/B;GACA;GACA;GACA,gBAAgB;EACpB,CAAC,CAAC,CAAC,IAAW,CAAM;EAEpB,OADA,EAAM,CAAC,CAAC,QAAQ,CAAI,GACb;CACX;CAEA,eAAe,EAAM,GAAkD;EACnE,IAAM,IAAO,MAAM,EAAQ,KAAc,GAAW,EAAE,MAAM,EAAY,CAAC,GACnE,EAAE,UAAO,oBAAiB,EAAY,CAAI;EAEhD,AADA,EAAM,CAAC,CAAC,SAAS,CAAK,GACtB,EAAkB,KAAgB,IAAI;EACtC,IAAM,IAAW,IAAY,CAAI;EAKjC,OAJI,KAAY,OAIT,EAAU,KAHb,EAAM,CAAC,CAAC,QAAQ,CAAQ,GACjB;CAGf;CAEA,SAAS,IAAe;EAEpB,AADA,EAAM,CAAC,CAAC,OAAO,GACf,EAAkB,IAAI;CAC1B;CAEA,IAAM,IAAU,EAAmB,YAAY;EAC3C,IAAM,IAAO,MAAM,EAAQ,KAAc,GAAa,EAClD,MAAM,EAAY,EAAiB,CAAC,EACxC,CAAC,GACK,EAAE,UAAO,oBAAiB,EAAY,CAAI;EAEhD,AADA,EAAM,CAAC,CAAC,SAAS,CAAK,GAClB,KAAc,EAAkB,CAAY;CACpD,CAAC;CAWD,OAAO;EAAE;EAAc,KATX,EAAgB;GACxB;GACA;GACA;GACA;GACA;GACA,sBAAsB,EAAO;EACjC,CAEuB;EAAK;EAAO;EAAQ;EAAS;CAAS;AACjE"}

package/dist/auth/jwt.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});function o(t){const e=t.replace(/-/g,"+").replace(/_/g,"/"),r=e.length%4===0?"":"=".repeat(4-e.length%4);return typeof atob<"u"?atob(e+r):Buffer.from(e+r,"base64").toString("binary")}function a(t){const e=t.split(".");if(e.length!==3)throw new Error("Invalid JWT: must contain three segments.");const[r,n,d]=e;try{return{header:JSON.parse(o(r)),payload:JSON.parse(o(n)),signature:d}}catch{throw new Error("Invalid JWT: header or payload is not valid JSON.")}}function i(t,e=0){try{const{payload:r}=a(t);if(typeof r.exp!="number")return!0;const n=Math.floor(Date.now()/1e3);return r.exp<=n+e}catch{return!0}}exports.decodeJWT=a;exports.isJWTExpired=i;
-//# sourceMappingURL=jwt.cjs.map
+function e(e){let t=e.replace(/-/g,`+`).replace(/_/g,`/`),n=t.length%4==0?``:`=`.repeat(4-t.length%4);return typeof atob<`u`?atob(t+n):Buffer.from(t+n,`base64`).toString(`binary`)}function t(t){let n=t.split(`.`);if(n.length!==3)throw Error(`Invalid JWT: must contain three segments.`);let[r,i,a]=n;try{return{header:JSON.parse(e(r)),payload:JSON.parse(e(i)),signature:a}}catch{throw Error(`Invalid JWT: header or payload is not valid JSON.`)}}function n(e,n=0){try{let{payload:r}=t(e);if(typeof r.exp!=`number`)return!0;let i=Math.floor(Date.now()/1e3);return r.exp<=i+n}catch{return!0}}exports.decodeJWT=t,exports.isJWTExpired=n;
+//# sourceMappingURL=jwt.cjs.map

package/dist/auth/jwt.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.cjs","sources":["../../src/auth/jwt.ts"],"sourcesContent":["export interface DecodedJWT {\n    header: Record<string, unknown>;\n    payload: Record<string, unknown> & { exp?: number; iat?: number; sub?: string };\n    signature: string;\n}\n\nfunction base64UrlDecode(input: string): string {\n    const padded = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const padding = padded.length % 4 === 0 ? \"\" : \"=\".repeat(4 - (padded.length % 4));\n    if (typeof atob !== \"undefined\") {\n        return atob(padded + padding);\n    }\n    return Buffer.from(padded + padding, \"base64\").toString(\"binary\");\n}\n\n/**\n * Decode a JWT into header/payload/signature. Does **not** verify the\n * signature — for that, do it server-side or use a JOSE library on the\n * client.\n *\n * @throws If the token shape is invalid (missing parts, bad JSON).\n */\nexport function decodeJWT(token: string): DecodedJWT {\n    const parts = token.split(\".\");\n    if (parts.length !== 3) throw new Error(\"Invalid JWT: must contain three segments.\");\n    const [headerSeg, payloadSeg, signature] = parts as [string, string, string];\n    try {\n        return {\n            header: JSON.parse(base64UrlDecode(headerSeg)),\n            payload: JSON.parse(base64UrlDecode(payloadSeg)),\n            signature,\n        };\n    } catch {\n        throw new Error(\"Invalid JWT: header or payload is not valid JSON.\");\n    }\n}\n\n/**\n * Return true when the JWT's `exp` claim is in the past (or missing).\n *\n * @param token - JWT to inspect.\n * @param leewaySeconds - Treat tokens expiring within this window as expired.\n */\nexport function isJWTExpired(token: string, leewaySeconds = 0): boolean {\n    try {\n        const { payload } = decodeJWT(token);\n        if (typeof payload.exp !== \"number\") return true;\n        const nowSeconds = Math.floor(Date.now() / 1000);\n        return payload.exp <= nowSeconds + leewaySeconds;\n    } catch {\n        return true;\n    }\n}\n"],"names":["base64UrlDecode","input","padded","padding","decodeJWT","token","parts","headerSeg","payloadSeg","signature","isJWTExpired","leewaySeconds","payload","nowSeconds"],"mappings":"gFAMA,SAASA,EAAgBC,EAAuB,CAC5C,MAAMC,EAASD,EAAM,QAAQ,KAAM,GAAG,EAAE,QAAQ,KAAM,GAAG,EACnDE,EAAUD,EAAO,OAAS,IAAM,EAAI,GAAK,IAAI,OAAO,EAAKA,EAAO,OAAS,CAAE,EACjF,OAAI,OAAO,KAAS,IACT,KAAKA,EAASC,CAAO,EAEzB,OAAO,KAAKD,EAASC,EAAS,QAAQ,EAAE,SAAS,QAAQ,CACpE,CASO,SAASC,EAAUC,EAA2B,CACjD,MAAMC,EAAQD,EAAM,MAAM,GAAG,EAC7B,GAAIC,EAAM,SAAW,EAAG,MAAM,IAAI,MAAM,2CAA2C,EACnF,KAAM,CAACC,EAAWC,EAAYC,CAAS,EAAIH,EAC3C,GAAI,CACA,MAAO,CACH,OAAQ,KAAK,MAAMN,EAAgBO,CAAS,CAAC,EAC7C,QAAS,KAAK,MAAMP,EAAgBQ,CAAU,CAAC,EAC/C,UAAAC,CAAA,CAER,MAAQ,CACJ,MAAM,IAAI,MAAM,mDAAmD,CACvE,CACJ,CAQO,SAASC,EAAaL,EAAeM,EAAgB,EAAY,CACpE,GAAI,CACA,KAAM,CAAE,QAAAC,CAAA,EAAYR,EAAUC,CAAK,EACnC,GAAI,OAAOO,EAAQ,KAAQ,SAAU,MAAO,GAC5C,MAAMC,EAAa,KAAK,MAAM,KAAK,IAAA,EAAQ,GAAI,EAC/C,OAAOD,EAAQ,KAAOC,EAAaF,CACvC,MAAQ,CACJ,MAAO,EACX,CACJ"}
+{"version":3,"file":"jwt.cjs","names":[],"sources":["../../src/auth/jwt.ts"],"sourcesContent":["export interface DecodedJWT {\n    header: Record<string, unknown>;\n    payload: Record<string, unknown> & { exp?: number; iat?: number; sub?: string };\n    signature: string;\n}\n\nfunction base64UrlDecode(input: string): string {\n    const padded = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const padding = padded.length % 4 === 0 ? \"\" : \"=\".repeat(4 - (padded.length % 4));\n    if (typeof atob !== \"undefined\") {\n        return atob(padded + padding);\n    }\n    return Buffer.from(padded + padding, \"base64\").toString(\"binary\");\n}\n\n/**\n * Decode a JWT into header/payload/signature. Does **not** verify the\n * signature — for that, do it server-side or use a JOSE library on the\n * client.\n *\n * @throws If the token shape is invalid (missing parts, bad JSON).\n */\nexport function decodeJWT(token: string): DecodedJWT {\n    const parts = token.split(\".\");\n    if (parts.length !== 3) throw new Error(\"Invalid JWT: must contain three segments.\");\n    const [headerSeg, payloadSeg, signature] = parts as [string, string, string];\n    try {\n        return {\n            header: JSON.parse(base64UrlDecode(headerSeg)),\n            payload: JSON.parse(base64UrlDecode(payloadSeg)),\n            signature,\n        };\n    } catch {\n        throw new Error(\"Invalid JWT: header or payload is not valid JSON.\");\n    }\n}\n\n/**\n * Return true when the JWT's `exp` claim is in the past (or missing).\n *\n * @param token - JWT to inspect.\n * @param leewaySeconds - Treat tokens expiring within this window as expired.\n */\nexport function isJWTExpired(token: string, leewaySeconds = 0): boolean {\n    try {\n        const { payload } = decodeJWT(token);\n        if (typeof payload.exp !== \"number\") return true;\n        const nowSeconds = Math.floor(Date.now() / 1000);\n        return payload.exp <= nowSeconds + leewaySeconds;\n    } catch {\n        return true;\n    }\n}\n"],"mappings":"AAMA,SAAS,EAAgB,EAAuB,CAC5C,IAAM,EAAS,EAAM,QAAQ,KAAM,GAAG,CAAC,CAAC,QAAQ,KAAM,GAAG,EACnD,EAAU,EAAO,OAAS,GAAM,EAAI,GAAK,IAAI,OAAO,EAAK,EAAO,OAAS,CAAE,EAIjF,OAHI,OAAO,KAAS,IACT,KAAK,EAAS,CAAO,EAEzB,OAAO,KAAK,EAAS,EAAS,QAAQ,CAAC,CAAC,SAAS,QAAQ,CACpE,CASA,SAAgB,EAAU,EAA2B,CACjD,IAAM,EAAQ,EAAM,MAAM,GAAG,EAC7B,GAAI,EAAM,SAAW,EAAG,MAAU,MAAM,2CAA2C,EACnF,GAAM,CAAC,EAAW,EAAY,GAAa,EAC3C,GAAI,CACA,MAAO,CACH,OAAQ,KAAK,MAAM,EAAgB,CAAS,CAAC,EAC7C,QAAS,KAAK,MAAM,EAAgB,CAAU,CAAC,EAC/C,WACJ,CACJ,MAAQ,CACJ,MAAU,MAAM,mDAAmD,CACvE,CACJ,CAQA,SAAgB,EAAa,EAAe,EAAgB,EAAY,CACpE,GAAI,CACA,GAAM,CAAE,WAAY,EAAU,CAAK,EACnC,GAAI,OAAO,EAAQ,KAAQ,SAAU,MAAO,GAC5C,IAAM,EAAa,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,EAC/C,OAAO,EAAQ,KAAO,EAAa,CACvC,MAAQ,CACJ,MAAO,EACX,CACJ"}

package/dist/auth/jwt.js

@@ -1,33 +1,33 @@
-function o(t) {
-  const e = t.replace(/-/g, "+").replace(/_/g, "/"), r = e.length % 4 === 0 ? "" : "=".repeat(4 - e.length % 4);
-  return typeof atob < "u" ? atob(e + r) : Buffer.from(e + r, "base64").toString("binary");
+//#region src/auth/jwt.ts
+function e(e) {
+	let t = e.replace(/-/g, "+").replace(/_/g, "/"), n = t.length % 4 == 0 ? "" : "=".repeat(4 - t.length % 4);
+	return typeof atob < "u" ? atob(t + n) : Buffer.from(t + n, "base64").toString("binary");
 }
-function d(t) {
-  const e = t.split(".");
-  if (e.length !== 3) throw new Error("Invalid JWT: must contain three segments.");
-  const [r, n, a] = e;
-  try {
-    return {
-      header: JSON.parse(o(r)),
-      payload: JSON.parse(o(n)),
-      signature: a
-    };
-  } catch {
-    throw new Error("Invalid JWT: header or payload is not valid JSON.");
-  }
+function t(t) {
+	let n = t.split(".");
+	if (n.length !== 3) throw Error("Invalid JWT: must contain three segments.");
+	let [r, i, a] = n;
+	try {
+		return {
+			header: JSON.parse(e(r)),
+			payload: JSON.parse(e(i)),
+			signature: a
+		};
+	} catch {
+		throw Error("Invalid JWT: header or payload is not valid JSON.");
+	}
 }
-function c(t, e = 0) {
-  try {
-    const { payload: r } = d(t);
-    if (typeof r.exp != "number") return !0;
-    const n = Math.floor(Date.now() / 1e3);
-    return r.exp <= n + e;
-  } catch {
-    return !0;
-  }
+function n(e, n = 0) {
+	try {
+		let { payload: r } = t(e);
+		if (typeof r.exp != "number") return !0;
+		let i = Math.floor(Date.now() / 1e3);
+		return r.exp <= i + n;
+	} catch {
+		return !0;
+	}
 }
-export {
-  d as decodeJWT,
-  c as isJWTExpired
-};
-//# sourceMappingURL=jwt.js.map
+//#endregion
+export { t as decodeJWT, n as isJWTExpired };
+
+//# sourceMappingURL=jwt.js.map

package/dist/auth/jwt.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.js","sources":["../../src/auth/jwt.ts"],"sourcesContent":["export interface DecodedJWT {\n    header: Record<string, unknown>;\n    payload: Record<string, unknown> & { exp?: number; iat?: number; sub?: string };\n    signature: string;\n}\n\nfunction base64UrlDecode(input: string): string {\n    const padded = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const padding = padded.length % 4 === 0 ? \"\" : \"=\".repeat(4 - (padded.length % 4));\n    if (typeof atob !== \"undefined\") {\n        return atob(padded + padding);\n    }\n    return Buffer.from(padded + padding, \"base64\").toString(\"binary\");\n}\n\n/**\n * Decode a JWT into header/payload/signature. Does **not** verify the\n * signature — for that, do it server-side or use a JOSE library on the\n * client.\n *\n * @throws If the token shape is invalid (missing parts, bad JSON).\n */\nexport function decodeJWT(token: string): DecodedJWT {\n    const parts = token.split(\".\");\n    if (parts.length !== 3) throw new Error(\"Invalid JWT: must contain three segments.\");\n    const [headerSeg, payloadSeg, signature] = parts as [string, string, string];\n    try {\n        return {\n            header: JSON.parse(base64UrlDecode(headerSeg)),\n            payload: JSON.parse(base64UrlDecode(payloadSeg)),\n            signature,\n        };\n    } catch {\n        throw new Error(\"Invalid JWT: header or payload is not valid JSON.\");\n    }\n}\n\n/**\n * Return true when the JWT's `exp` claim is in the past (or missing).\n *\n * @param token - JWT to inspect.\n * @param leewaySeconds - Treat tokens expiring within this window as expired.\n */\nexport function isJWTExpired(token: string, leewaySeconds = 0): boolean {\n    try {\n        const { payload } = decodeJWT(token);\n        if (typeof payload.exp !== \"number\") return true;\n        const nowSeconds = Math.floor(Date.now() / 1000);\n        return payload.exp <= nowSeconds + leewaySeconds;\n    } catch {\n        return true;\n    }\n}\n"],"names":["base64UrlDecode","input","padded","padding","decodeJWT","token","parts","headerSeg","payloadSeg","signature","isJWTExpired","leewaySeconds","payload","nowSeconds"],"mappings":"AAMA,SAASA,EAAgBC,GAAuB;AAC5C,QAAMC,IAASD,EAAM,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,GACnDE,IAAUD,EAAO,SAAS,MAAM,IAAI,KAAK,IAAI,OAAO,IAAKA,EAAO,SAAS,CAAE;AACjF,SAAI,OAAO,OAAS,MACT,KAAKA,IAASC,CAAO,IAEzB,OAAO,KAAKD,IAASC,GAAS,QAAQ,EAAE,SAAS,QAAQ;AACpE;AASO,SAASC,EAAUC,GAA2B;AACjD,QAAMC,IAAQD,EAAM,MAAM,GAAG;AAC7B,MAAIC,EAAM,WAAW,EAAG,OAAM,IAAI,MAAM,2CAA2C;AACnF,QAAM,CAACC,GAAWC,GAAYC,CAAS,IAAIH;AAC3C,MAAI;AACA,WAAO;AAAA,MACH,QAAQ,KAAK,MAAMN,EAAgBO,CAAS,CAAC;AAAA,MAC7C,SAAS,KAAK,MAAMP,EAAgBQ,CAAU,CAAC;AAAA,MAC/C,WAAAC;AAAA,IAAA;AAAA,EAER,QAAQ;AACJ,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACvE;AACJ;AAQO,SAASC,EAAaL,GAAeM,IAAgB,GAAY;AACpE,MAAI;AACA,UAAM,EAAE,SAAAC,EAAA,IAAYR,EAAUC,CAAK;AACnC,QAAI,OAAOO,EAAQ,OAAQ,SAAU,QAAO;AAC5C,UAAMC,IAAa,KAAK,MAAM,KAAK,IAAA,IAAQ,GAAI;AAC/C,WAAOD,EAAQ,OAAOC,IAAaF;AAAA,EACvC,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;"}
+{"version":3,"file":"jwt.js","names":[],"sources":["../../src/auth/jwt.ts"],"sourcesContent":["export interface DecodedJWT {\n    header: Record<string, unknown>;\n    payload: Record<string, unknown> & { exp?: number; iat?: number; sub?: string };\n    signature: string;\n}\n\nfunction base64UrlDecode(input: string): string {\n    const padded = input.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    const padding = padded.length % 4 === 0 ? \"\" : \"=\".repeat(4 - (padded.length % 4));\n    if (typeof atob !== \"undefined\") {\n        return atob(padded + padding);\n    }\n    return Buffer.from(padded + padding, \"base64\").toString(\"binary\");\n}\n\n/**\n * Decode a JWT into header/payload/signature. Does **not** verify the\n * signature — for that, do it server-side or use a JOSE library on the\n * client.\n *\n * @throws If the token shape is invalid (missing parts, bad JSON).\n */\nexport function decodeJWT(token: string): DecodedJWT {\n    const parts = token.split(\".\");\n    if (parts.length !== 3) throw new Error(\"Invalid JWT: must contain three segments.\");\n    const [headerSeg, payloadSeg, signature] = parts as [string, string, string];\n    try {\n        return {\n            header: JSON.parse(base64UrlDecode(headerSeg)),\n            payload: JSON.parse(base64UrlDecode(payloadSeg)),\n            signature,\n        };\n    } catch {\n        throw new Error(\"Invalid JWT: header or payload is not valid JSON.\");\n    }\n}\n\n/**\n * Return true when the JWT's `exp` claim is in the past (or missing).\n *\n * @param token - JWT to inspect.\n * @param leewaySeconds - Treat tokens expiring within this window as expired.\n */\nexport function isJWTExpired(token: string, leewaySeconds = 0): boolean {\n    try {\n        const { payload } = decodeJWT(token);\n        if (typeof payload.exp !== \"number\") return true;\n        const nowSeconds = Math.floor(Date.now() / 1000);\n        return payload.exp <= nowSeconds + leewaySeconds;\n    } catch {\n        return true;\n    }\n}\n"],"mappings":";AAMA,SAAS,EAAgB,GAAuB;CAC5C,IAAM,IAAS,EAAM,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG,GACnD,IAAU,EAAO,SAAS,KAAM,IAAI,KAAK,IAAI,OAAO,IAAK,EAAO,SAAS,CAAE;CAIjF,OAHI,OAAO,OAAS,MACT,KAAK,IAAS,CAAO,IAEzB,OAAO,KAAK,IAAS,GAAS,QAAQ,CAAC,CAAC,SAAS,QAAQ;AACpE;AASA,SAAgB,EAAU,GAA2B;CACjD,IAAM,IAAQ,EAAM,MAAM,GAAG;CAC7B,IAAI,EAAM,WAAW,GAAG,MAAU,MAAM,2CAA2C;CACnF,IAAM,CAAC,GAAW,GAAY,KAAa;CAC3C,IAAI;EACA,OAAO;GACH,QAAQ,KAAK,MAAM,EAAgB,CAAS,CAAC;GAC7C,SAAS,KAAK,MAAM,EAAgB,CAAU,CAAC;GAC/C;EACJ;CACJ,QAAQ;EACJ,MAAU,MAAM,mDAAmD;CACvE;AACJ;AAQA,SAAgB,EAAa,GAAe,IAAgB,GAAY;CACpE,IAAI;EACA,IAAM,EAAE,eAAY,EAAU,CAAK;EACnC,IAAI,OAAO,EAAQ,OAAQ,UAAU,OAAO;EAC5C,IAAM,IAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;EAC/C,OAAO,EAAQ,OAAO,IAAa;CACvC,QAAQ;EACJ,OAAO;CACX;AACJ"}

package/dist/auth/lazy-with-retry.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const c=require("react");function y(i,t={}){const{retries:n=3,initialDelay:o=400,reloadOnFinalFailure:a=!0}=t;async function r(e=1){try{return await i()}catch(l){if(e>=n)throw a&&typeof window<"u"&&window.location.reload(),l;return await new Promise(u=>setTimeout(u,o*2**(e-1))),r(e+1)}}return c.lazy(r)}exports.lazyWithRetry=y;
-//# sourceMappingURL=lazy-with-retry.cjs.map
+let e=require("react");function t(t,n={}){let{retries:r=3,initialDelay:i=400,reloadOnFinalFailure:a=!0}=n;async function o(e=1){try{return await t()}catch(t){if(e>=r)throw a&&typeof window<`u`&&window.location.reload(),t;return await new Promise(t=>setTimeout(t,i*2**(e-1))),o(e+1)}}return(0,e.lazy)(o)}exports.lazyWithRetry=t;
+//# sourceMappingURL=lazy-with-retry.cjs.map

package/dist/auth/lazy-with-retry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"lazy-with-retry.cjs","sources":["../../src/auth/lazy-with-retry.ts"],"sourcesContent":["import { lazy } from \"react\";\nimport type { ComponentType } from \"react\";\n\nexport interface LazyWithRetryOptions {\n    /** Max attempts. Default: 3. */\n    retries?: number;\n    /** Initial delay (ms) before retrying. Default: 400. */\n    initialDelay?: number;\n    /**\n     * Reload the page after every retry fails. Helps when the stale chunk\n     * error is caused by an old `index.html` referencing deleted bundles.\n     * Default: true.\n     */\n    reloadOnFinalFailure?: boolean;\n}\n\n/**\n * Wrap `React.lazy` with automatic retry. Common cause of failure:\n * deployed-then-cached `index.html` references chunk filenames that no\n * longer exist. Retrying after a short delay typically picks up the new\n * bundle; a final `location.reload()` recovers from stale `index.html`.\n *\n * @example\n * const Settings = lazyWithRetry(() => import(\"./Settings\"));\n */\nexport function lazyWithRetry<T extends ComponentType<unknown>>(\n    factory: () => Promise<{ default: T }>,\n    options: LazyWithRetryOptions = {},\n): ReturnType<typeof lazy<T>> {\n    const { retries = 3, initialDelay = 400, reloadOnFinalFailure = true } = options;\n\n    async function load(attempt = 1): Promise<{ default: T }> {\n        try {\n            return await factory();\n        } catch (error) {\n            if (attempt >= retries) {\n                if (reloadOnFinalFailure && typeof window !== \"undefined\") {\n                    window.location.reload();\n                }\n                throw error;\n            }\n            await new Promise((resolve) => setTimeout(resolve, initialDelay * 2 ** (attempt - 1)));\n            return load(attempt + 1);\n        }\n    }\n\n    return lazy(load) as ReturnType<typeof lazy<T>>;\n}\n"],"names":["lazyWithRetry","factory","options","retries","initialDelay","reloadOnFinalFailure","load","attempt","error","resolve","lazy"],"mappings":"yGAyBO,SAASA,EACZC,EACAC,EAAgC,GACN,CAC1B,KAAM,CAAE,QAAAC,EAAU,EAAG,aAAAC,EAAe,IAAK,qBAAAC,EAAuB,IAASH,EAEzE,eAAeI,EAAKC,EAAU,EAA4B,CACtD,GAAI,CACA,OAAO,MAAMN,EAAA,CACjB,OAASO,EAAO,CACZ,GAAID,GAAWJ,EACX,MAAIE,GAAwB,OAAO,OAAW,KAC1C,OAAO,SAAS,OAAA,EAEdG,EAEV,aAAM,IAAI,QAASC,GAAY,WAAWA,EAASL,EAAe,IAAMG,EAAU,EAAE,CAAC,EAC9ED,EAAKC,EAAU,CAAC,CAC3B,CACJ,CAEA,OAAOG,EAAAA,KAAKJ,CAAI,CACpB"}
+{"version":3,"file":"lazy-with-retry.cjs","names":[],"sources":["../../src/auth/lazy-with-retry.ts"],"sourcesContent":["import { lazy } from \"react\";\nimport type { ComponentType } from \"react\";\n\nexport interface LazyWithRetryOptions {\n    /** Max attempts. Default: 3. */\n    retries?: number;\n    /** Initial delay (ms) before retrying. Default: 400. */\n    initialDelay?: number;\n    /**\n     * Reload the page after every retry fails. Helps when the stale chunk\n     * error is caused by an old `index.html` referencing deleted bundles.\n     * Default: true.\n     */\n    reloadOnFinalFailure?: boolean;\n}\n\n/**\n * Wrap `React.lazy` with automatic retry. Common cause of failure:\n * deployed-then-cached `index.html` references chunk filenames that no\n * longer exist. Retrying after a short delay typically picks up the new\n * bundle; a final `location.reload()` recovers from stale `index.html`.\n *\n * @example\n * const Settings = lazyWithRetry(() => import(\"./Settings\"));\n */\nexport function lazyWithRetry<T extends ComponentType<unknown>>(\n    factory: () => Promise<{ default: T }>,\n    options: LazyWithRetryOptions = {},\n): ReturnType<typeof lazy<T>> {\n    const { retries = 3, initialDelay = 400, reloadOnFinalFailure = true } = options;\n\n    async function load(attempt = 1): Promise<{ default: T }> {\n        try {\n            return await factory();\n        } catch (error) {\n            if (attempt >= retries) {\n                if (reloadOnFinalFailure && typeof window !== \"undefined\") {\n                    window.location.reload();\n                }\n                throw error;\n            }\n            await new Promise((resolve) => setTimeout(resolve, initialDelay * 2 ** (attempt - 1)));\n            return load(attempt + 1);\n        }\n    }\n\n    return lazy(load) as ReturnType<typeof lazy<T>>;\n}\n"],"mappings":"uBAyBA,SAAgB,EACZ,EACA,EAAgC,CAAC,EACP,CAC1B,GAAM,CAAE,UAAU,EAAG,eAAe,IAAK,uBAAuB,IAAS,EAEzE,eAAe,EAAK,EAAU,EAA4B,CACtD,GAAI,CACA,OAAO,MAAM,EAAQ,CACzB,OAAS,EAAO,CACZ,GAAI,GAAW,EAIX,MAHI,GAAwB,OAAO,OAAW,KAC1C,OAAO,SAAS,OAAO,EAErB,EAGV,OADA,MAAM,IAAI,QAAS,GAAY,WAAW,EAAS,EAAe,IAAM,EAAU,EAAE,CAAC,EAC9E,EAAK,EAAU,CAAC,CAC3B,CACJ,CAEA,OAAA,EAAA,EAAA,KAAA,CAAY,CAAI,CACpB"}

package/dist/auth/lazy-with-retry.js

@@ -1,18 +1,18 @@
-import { lazy as w } from "react";
-function d(e, n = {}) {
-  const { retries: o = 3, initialDelay: t = 400, reloadOnFinalFailure: a = !0 } = n;
-  async function i(r = 1) {
-    try {
-      return await e();
-    } catch (l) {
-      if (r >= o)
-        throw a && typeof window < "u" && window.location.reload(), l;
-      return await new Promise((u) => setTimeout(u, t * 2 ** (r - 1))), i(r + 1);
-    }
-  }
-  return w(i);
+import { lazy as e } from "react";
+//#region src/auth/lazy-with-retry.ts
+function t(t, n = {}) {
+	let { retries: r = 3, initialDelay: i = 400, reloadOnFinalFailure: a = !0 } = n;
+	async function o(e = 1) {
+		try {
+			return await t();
+		} catch (t) {
+			if (e >= r) throw a && typeof window < "u" && window.location.reload(), t;
+			return await new Promise((t) => setTimeout(t, i * 2 ** (e - 1))), o(e + 1);
+		}
+	}
+	return e(o);
 }
-export {
-  d as lazyWithRetry
-};
-//# sourceMappingURL=lazy-with-retry.js.map
+//#endregion
+export { t as lazyWithRetry };
+
+//# sourceMappingURL=lazy-with-retry.js.map

package/dist/auth/lazy-with-retry.js.map

@@ -1 +1 @@
-{"version":3,"file":"lazy-with-retry.js","sources":["../../src/auth/lazy-with-retry.ts"],"sourcesContent":["import { lazy } from \"react\";\nimport type { ComponentType } from \"react\";\n\nexport interface LazyWithRetryOptions {\n    /** Max attempts. Default: 3. */\n    retries?: number;\n    /** Initial delay (ms) before retrying. Default: 400. */\n    initialDelay?: number;\n    /**\n     * Reload the page after every retry fails. Helps when the stale chunk\n     * error is caused by an old `index.html` referencing deleted bundles.\n     * Default: true.\n     */\n    reloadOnFinalFailure?: boolean;\n}\n\n/**\n * Wrap `React.lazy` with automatic retry. Common cause of failure:\n * deployed-then-cached `index.html` references chunk filenames that no\n * longer exist. Retrying after a short delay typically picks up the new\n * bundle; a final `location.reload()` recovers from stale `index.html`.\n *\n * @example\n * const Settings = lazyWithRetry(() => import(\"./Settings\"));\n */\nexport function lazyWithRetry<T extends ComponentType<unknown>>(\n    factory: () => Promise<{ default: T }>,\n    options: LazyWithRetryOptions = {},\n): ReturnType<typeof lazy<T>> {\n    const { retries = 3, initialDelay = 400, reloadOnFinalFailure = true } = options;\n\n    async function load(attempt = 1): Promise<{ default: T }> {\n        try {\n            return await factory();\n        } catch (error) {\n            if (attempt >= retries) {\n                if (reloadOnFinalFailure && typeof window !== \"undefined\") {\n                    window.location.reload();\n                }\n                throw error;\n            }\n            await new Promise((resolve) => setTimeout(resolve, initialDelay * 2 ** (attempt - 1)));\n            return load(attempt + 1);\n        }\n    }\n\n    return lazy(load) as ReturnType<typeof lazy<T>>;\n}\n"],"names":["lazyWithRetry","factory","options","retries","initialDelay","reloadOnFinalFailure","load","attempt","error","resolve","lazy"],"mappings":";AAyBO,SAASA,EACZC,GACAC,IAAgC,IACN;AAC1B,QAAM,EAAE,SAAAC,IAAU,GAAG,cAAAC,IAAe,KAAK,sBAAAC,IAAuB,OAASH;AAEzE,iBAAeI,EAAKC,IAAU,GAA4B;AACtD,QAAI;AACA,aAAO,MAAMN,EAAA;AAAA,IACjB,SAASO,GAAO;AACZ,UAAID,KAAWJ;AACX,cAAIE,KAAwB,OAAO,SAAW,OAC1C,OAAO,SAAS,OAAA,GAEdG;AAEV,mBAAM,IAAI,QAAQ,CAACC,MAAY,WAAWA,GAASL,IAAe,MAAMG,IAAU,EAAE,CAAC,GAC9ED,EAAKC,IAAU,CAAC;AAAA,IAC3B;AAAA,EACJ;AAEA,SAAOG,EAAKJ,CAAI;AACpB;"}
+{"version":3,"file":"lazy-with-retry.js","names":[],"sources":["../../src/auth/lazy-with-retry.ts"],"sourcesContent":["import { lazy } from \"react\";\nimport type { ComponentType } from \"react\";\n\nexport interface LazyWithRetryOptions {\n    /** Max attempts. Default: 3. */\n    retries?: number;\n    /** Initial delay (ms) before retrying. Default: 400. */\n    initialDelay?: number;\n    /**\n     * Reload the page after every retry fails. Helps when the stale chunk\n     * error is caused by an old `index.html` referencing deleted bundles.\n     * Default: true.\n     */\n    reloadOnFinalFailure?: boolean;\n}\n\n/**\n * Wrap `React.lazy` with automatic retry. Common cause of failure:\n * deployed-then-cached `index.html` references chunk filenames that no\n * longer exist. Retrying after a short delay typically picks up the new\n * bundle; a final `location.reload()` recovers from stale `index.html`.\n *\n * @example\n * const Settings = lazyWithRetry(() => import(\"./Settings\"));\n */\nexport function lazyWithRetry<T extends ComponentType<unknown>>(\n    factory: () => Promise<{ default: T }>,\n    options: LazyWithRetryOptions = {},\n): ReturnType<typeof lazy<T>> {\n    const { retries = 3, initialDelay = 400, reloadOnFinalFailure = true } = options;\n\n    async function load(attempt = 1): Promise<{ default: T }> {\n        try {\n            return await factory();\n        } catch (error) {\n            if (attempt >= retries) {\n                if (reloadOnFinalFailure && typeof window !== \"undefined\") {\n                    window.location.reload();\n                }\n                throw error;\n            }\n            await new Promise((resolve) => setTimeout(resolve, initialDelay * 2 ** (attempt - 1)));\n            return load(attempt + 1);\n        }\n    }\n\n    return lazy(load) as ReturnType<typeof lazy<T>>;\n}\n"],"mappings":";;AAyBA,SAAgB,EACZ,GACA,IAAgC,CAAC,GACP;CAC1B,IAAM,EAAE,aAAU,GAAG,kBAAe,KAAK,0BAAuB,OAAS;CAEzE,eAAe,EAAK,IAAU,GAA4B;EACtD,IAAI;GACA,OAAO,MAAM,EAAQ;EACzB,SAAS,GAAO;GACZ,IAAI,KAAW,GAIX,MAHI,KAAwB,OAAO,SAAW,OAC1C,OAAO,SAAS,OAAO,GAErB;GAGV,OADA,MAAM,IAAI,SAAS,MAAY,WAAW,GAAS,IAAe,MAAM,IAAU,EAAE,CAAC,GAC9E,EAAK,IAAU,CAAC;EAC3B;CACJ;CAEA,OAAO,EAAK,CAAI;AACpB"}

package/dist/auth/refresh-queue.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});function t(r){let e=null;return()=>e||(e=(async()=>{try{await r()}finally{e=null}})(),e)}exports.createRefreshQueue=t;
-//# sourceMappingURL=refresh-queue.cjs.map
+function e(e){let t=null;return()=>t||(t=(async()=>{try{await e()}finally{t=null}})(),t)}exports.createRefreshQueue=e;
+//# sourceMappingURL=refresh-queue.cjs.map

package/dist/auth/refresh-queue.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-queue.cjs","sources":["../../src/auth/refresh-queue.ts"],"sourcesContent":["/**\n * Deduplicate concurrent refresh calls. When multiple 401 responses arrive\n * at once, all of them share the same in-flight `refresh()` promise instead\n * of triggering N parallel refreshes.\n *\n * @example\n * const refresh = createRefreshQueue(() => AuthService.refresh());\n *\n * // In every request that hits 401:\n * await refresh();\n * // ...retry the original request\n */\nexport function createRefreshQueue(refresh: () => Promise<void>): () => Promise<void> {\n    let current: Promise<void> | null = null;\n\n    return () => {\n        if (current) return current;\n        current = (async () => {\n            try {\n                await refresh();\n            } finally {\n                current = null;\n            }\n        })();\n        return current;\n    };\n}\n"],"names":["createRefreshQueue","refresh","current"],"mappings":"gFAYO,SAASA,EAAmBC,EAAmD,CAClF,IAAIC,EAAgC,KAEpC,MAAO,IACCA,IACJA,GAAW,SAAY,CACnB,GAAI,CACA,MAAMD,EAAA,CACV,QAAA,CACIC,EAAU,IACd,CACJ,GAAA,EACOA,EAEf"}
+{"version":3,"file":"refresh-queue.cjs","names":[],"sources":["../../src/auth/refresh-queue.ts"],"sourcesContent":["/**\n * Deduplicate concurrent refresh calls. When multiple 401 responses arrive\n * at once, all of them share the same in-flight `refresh()` promise instead\n * of triggering N parallel refreshes.\n *\n * @example\n * const refresh = createRefreshQueue(() => AuthService.refresh());\n *\n * // In every request that hits 401:\n * await refresh();\n * // ...retry the original request\n */\nexport function createRefreshQueue(refresh: () => Promise<void>): () => Promise<void> {\n    let current: Promise<void> | null = null;\n\n    return () => {\n        if (current) return current;\n        current = (async () => {\n            try {\n                await refresh();\n            } finally {\n                current = null;\n            }\n        })();\n        return current;\n    };\n}\n"],"mappings":"AAYA,SAAgB,EAAmB,EAAmD,CAClF,IAAI,EAAgC,KAEpC,UACQ,IACJ,GAAW,SAAY,CACnB,GAAI,CACA,MAAM,EAAQ,CAClB,QAAU,CACN,EAAU,IACd,CACJ,EAAA,CAAG,EACI,EAEf"}

package/dist/auth/refresh-queue.js

@@ -1,14 +1,15 @@
-function n(r) {
-  let e = null;
-  return () => e || (e = (async () => {
-    try {
-      await r();
-    } finally {
-      e = null;
-    }
-  })(), e);
+//#region src/auth/refresh-queue.ts
+function e(e) {
+	let t = null;
+	return () => t || (t = (async () => {
+		try {
+			await e();
+		} finally {
+			t = null;
+		}
+	})(), t);
 }
-export {
-  n as createRefreshQueue
-};
-//# sourceMappingURL=refresh-queue.js.map
+//#endregion
+export { e as createRefreshQueue };
+
+//# sourceMappingURL=refresh-queue.js.map

package/dist/auth/refresh-queue.js.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-queue.js","sources":["../../src/auth/refresh-queue.ts"],"sourcesContent":["/**\n * Deduplicate concurrent refresh calls. When multiple 401 responses arrive\n * at once, all of them share the same in-flight `refresh()` promise instead\n * of triggering N parallel refreshes.\n *\n * @example\n * const refresh = createRefreshQueue(() => AuthService.refresh());\n *\n * // In every request that hits 401:\n * await refresh();\n * // ...retry the original request\n */\nexport function createRefreshQueue(refresh: () => Promise<void>): () => Promise<void> {\n    let current: Promise<void> | null = null;\n\n    return () => {\n        if (current) return current;\n        current = (async () => {\n            try {\n                await refresh();\n            } finally {\n                current = null;\n            }\n        })();\n        return current;\n    };\n}\n"],"names":["createRefreshQueue","refresh","current"],"mappings":"AAYO,SAASA,EAAmBC,GAAmD;AAClF,MAAIC,IAAgC;AAEpC,SAAO,MACCA,MACJA,KAAW,YAAY;AACnB,QAAI;AACA,YAAMD,EAAA;AAAA,IACV,UAAA;AACI,MAAAC,IAAU;AAAA,IACd;AAAA,EACJ,GAAA,GACOA;AAEf;"}
+{"version":3,"file":"refresh-queue.js","names":[],"sources":["../../src/auth/refresh-queue.ts"],"sourcesContent":["/**\n * Deduplicate concurrent refresh calls. When multiple 401 responses arrive\n * at once, all of them share the same in-flight `refresh()` promise instead\n * of triggering N parallel refreshes.\n *\n * @example\n * const refresh = createRefreshQueue(() => AuthService.refresh());\n *\n * // In every request that hits 401:\n * await refresh();\n * // ...retry the original request\n */\nexport function createRefreshQueue(refresh: () => Promise<void>): () => Promise<void> {\n    let current: Promise<void> | null = null;\n\n    return () => {\n        if (current) return current;\n        current = (async () => {\n            try {\n                await refresh();\n            } finally {\n                current = null;\n            }\n        })();\n        return current;\n    };\n}\n"],"mappings":";AAYA,SAAgB,EAAmB,GAAmD;CAClF,IAAI,IAAgC;CAEpC,aACQ,MACJ,KAAW,YAAY;EACnB,IAAI;GACA,MAAM,EAAQ;EAClB,UAAU;GACN,IAAU;EACd;CACJ,EAAA,CAAG,GACI;AAEf"}

package/dist/br/BrazilMap.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const n=require("react/jsx-runtime"),l=require("react"),E=require("../utils/cn.cjs"),I=require("../geo/projection.cjs"),S=require("./locations.cjs"),T=require("./MapMarkers.cjs"),J=require("./MapTooltip.cjs"),K=require("./regions.cjs"),W=require("./use-map-zoom.cjs"),x=require("./svg-utils.cjs"),Y=require("./use-map-hover.cjs"),c=require("./BrazilMap.module.css.cjs");function Q({selected:u,onSelect:i,values:s,minColor:d="#dbeafe",maxColor:q="#2563eb",colorScale:j,colorByRegion:R=!1,height:m=440,padding:N=12,showLabels:w=!0,label:h="Mapa do Brasil por estado",loadingContent:k,showTooltip:v=!0,renderTooltip:O,markers:y,onMarkerClick:A,zoomable:P=!1,className:_,style:D,...F}){const b=l.useRef(null),[g,L]=l.useState(600),[p,U]=l.useState(null),{hover:a,onMove:B,onLeave:$}=Y.useMapHover(b),M=W.useMapZoom(P);l.useEffect(()=>{let e=!0;return Promise.resolve().then(()=>require("./br-geo.cjs")).then(t=>{e&&U(t.BR_UF_GEOJSON)}),()=>{e=!1}},[]),l.useEffect(()=>{const e=b.current;if(!e||typeof ResizeObserver>"u")return;const t=new ResizeObserver(r=>{const o=r[0]?.contentRect.width;o&&o>0&&L(o)});return t.observe(e),()=>t.disconnect()},[]);const z=l.useMemo(()=>u?new Set(Array.isArray(u)?u:[u]):new Set,[u]),C=l.useMemo(()=>{if(!s)return null;const e=Object.values(s).filter(t=>typeof t=="number");return e.length===0?null:[Math.min(...e),Math.max(...e)]},[s]),f=l.useMemo(()=>{if(!p)return null;const e=I.fitProjection(x.geometriesBounds(p.features.map(r=>r.geometry)),g,m,{padding:N}),t=p.features.map(r=>({uf:r.properties.uf,name:r.properties.name,region:r.properties.region,d:x.geometryPath(r.geometry,e),centroid:x.geometryCentroid(r.geometry,e)}));return{projection:e,items:t}},[p,g,m,N]);function Z(e){const t=s?.[e];if(typeof t!="number")return;if(j)return j(t);if(!C)return;const[r,o]=C,H=o===r?1:(t-r)/(o-r);return x.lerpColor(d,q,H)}const G=l.useMemo(()=>f?f.items.map(e=>{const t=z.has(e.uf),r=t?void 0:R?K.REGION_COLORS[e.region]:Z(e.uf);return n.jsx("path",{className:E.cn(c.default.state,t&&c.default.selected),d:e.d,fillRule:"evenodd",style:r?{fill:r}:void 0,"data-uf":e.uf,tabIndex:i?0:void 0,role:i?"button":void 0,"aria-label":e.name,"aria-pressed":i?t:void 0,onClick:i?()=>i(e.uf):void 0,onMouseMove:v?o=>B({uf:e.uf,name:e.name},o):void 0,onMouseLeave:v?$:void 0,onKeyDown:i?o=>{(o.key==="Enter"||o.key===" ")&&(o.preventDefault(),i(e.uf))}:void 0},e.uf)}):null,[f,z,s,j,R,d,q,i,v,B,$]);return n.jsxs("div",{ref:b,className:E.cn(c.default.map,_),style:{height:m,...D},role:"group","aria-label":h,...F,children:[f?n.jsx("svg",{className:c.default.svg,width:"100%",height:m,viewBox:`0 0 ${g} ${m}`,preserveAspectRatio:"xMidYMid meet",...M.handlers,children:n.jsxs("g",{transform:M.transform||void 0,children:[G,w&&f.items.map(e=>n.jsx("text",{className:c.default.label,x:e.centroid.x,y:e.centroid.y,textAnchor:"middle",dominantBaseline:"central",children:e.uf},`label-${e.uf}`)),y&&y.length>0&&n.jsx(T.MapMarkers,{projection:f.projection,markers:y,onMarkerClick:A})]})}):n.jsx("div",{className:c.default.loading,children:k??"Carregando mapa…"}),M.isTransformed&&n.jsx("button",{type:"button",className:c.default.zoomReset,onClick:M.reset,children:"Reset"}),v&&a&&n.jsx(J.MapTooltip,{x:a.x,y:a.y,children:O?O({uf:a.item.uf,name:a.item.name,value:s?.[a.item.uf]}):n.jsx(V,{uf:a.item.uf,name:a.item.name,value:s?.[a.item.uf]})})]})}function V({uf:u,name:i,value:s}){const d=S.getState(u);return n.jsxs(n.Fragment,{children:[n.jsxs("div",{className:c.default.tooltipTitle,children:[i," (",u,")"]}),n.jsxs("div",{className:c.default.tooltipMeta,children:[d?`${d.region} · ${d.cities.length} cidades`:u,typeof s=="number"?` · ${s}`:""]})]})}exports.BrazilMap=Q;
-//# sourceMappingURL=BrazilMap.cjs.map
+const e=require("../utils/cn.cjs"),t=require("../geo/projection.cjs"),n=require("./locations.cjs"),r=require("./BrazilMap.module.cjs"),i=require("./MapMarkers.cjs"),a=require("./MapTooltip.cjs"),o=require("./regions.cjs"),s=require("./use-map-zoom.cjs"),c=require("./svg-utils.cjs"),l=require("./use-map-hover.cjs");let u=require("react"),d=require("react/jsx-runtime");function f({selected:n,onSelect:f,values:m,minColor:h=`#dbeafe`,maxColor:g=`#2563eb`,colorScale:_,colorByRegion:v=!1,height:y=440,padding:b=12,showLabels:x=!0,label:S=`Mapa do Brasil por estado`,loadingContent:C,showTooltip:w=!0,renderTooltip:T,markers:E,onMarkerClick:D,zoomable:O=!1,className:k,style:A,...j}){let M=(0,u.useRef)(null),[N,P]=(0,u.useState)(600),[F,I]=(0,u.useState)(null),{hover:L,onMove:R,onLeave:z}=l.useMapHover(M),B=s.useMapZoom(O);(0,u.useEffect)(()=>{let e=!0;return Promise.resolve().then(()=>require("./br-geo.cjs")).then(t=>{e&&I(t.BR_UF_GEOJSON)}),()=>{e=!1}},[]),(0,u.useEffect)(()=>{let e=M.current;if(!e||typeof ResizeObserver>`u`)return;let t=new ResizeObserver(e=>{let t=e[0]?.contentRect.width;t&&t>0&&P(t)});return t.observe(e),()=>t.disconnect()},[]);let V=(0,u.useMemo)(()=>n?new Set(Array.isArray(n)?n:[n]):new Set,[n]),H=(0,u.useMemo)(()=>{if(!m)return null;let e=Object.values(m).filter(e=>typeof e==`number`);return e.length===0?null:[Math.min(...e),Math.max(...e)]},[m]),U=(0,u.useMemo)(()=>{if(!F)return null;let e=t.fitProjection(c.geometriesBounds(F.features.map(e=>e.geometry)),N,y,{padding:b});return{projection:e,items:F.features.map(t=>({uf:t.properties.uf,name:t.properties.name,region:t.properties.region,d:c.geometryPath(t.geometry,e),centroid:c.geometryCentroid(t.geometry,e)}))}},[F,N,y,b]);function W(e){let t=m?.[e];if(typeof t!=`number`)return;if(_)return _(t);if(!H)return;let[n,r]=H;return c.lerpColor(h,g,r===n?1:(t-n)/(r-n))}let G=(0,u.useMemo)(()=>U?U.items.map(t=>{let n=V.has(t.uf),i=n?void 0:v?o.REGION_COLORS[t.region]:W(t.uf);return(0,d.jsx)(`path`,{className:e.cn(r.default.state,n&&r.default.selected),d:t.d,fillRule:`evenodd`,style:i?{fill:i}:void 0,"data-uf":t.uf,tabIndex:f?0:void 0,role:f?`button`:void 0,"aria-label":t.name,"aria-pressed":f?n:void 0,onClick:f?()=>f(t.uf):void 0,onMouseMove:w?e=>R({uf:t.uf,name:t.name},e):void 0,onMouseLeave:w?z:void 0,onKeyDown:f?e=>{(e.key===`Enter`||e.key===` `)&&(e.preventDefault(),f(t.uf))}:void 0},t.uf)}):null,[U,V,m,_,v,h,g,f,w,R,z]);return(0,d.jsxs)(`div`,{ref:M,className:e.cn(r.default.map,k),style:{height:y,...A},role:`group`,"aria-label":S,...j,children:[U?(0,d.jsx)(`svg`,{className:r.default.svg,width:`100%`,height:y,viewBox:`0 0 ${N} ${y}`,preserveAspectRatio:`xMidYMid meet`,...B.handlers,children:(0,d.jsxs)(`g`,{transform:B.transform||void 0,children:[G,x&&U.items.map(e=>(0,d.jsx)(`text`,{className:r.default.label,x:e.centroid.x,y:e.centroid.y,textAnchor:`middle`,dominantBaseline:`central`,children:e.uf},`label-${e.uf}`)),E&&E.length>0&&(0,d.jsx)(i.MapMarkers,{projection:U.projection,markers:E,onMarkerClick:D})]})}):(0,d.jsx)(`div`,{className:r.default.loading,children:C??`Carregando mapa…`}),B.isTransformed&&(0,d.jsx)(`button`,{type:`button`,className:r.default.zoomReset,onClick:B.reset,children:`Reset`}),w&&L&&(0,d.jsx)(a.MapTooltip,{x:L.x,y:L.y,children:T?T({uf:L.item.uf,name:L.item.name,value:m?.[L.item.uf]}):(0,d.jsx)(p,{uf:L.item.uf,name:L.item.name,value:m?.[L.item.uf]})})]})}function p({uf:e,name:t,value:i}){let a=n.getState(e);return(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)(`div`,{className:r.default.tooltipTitle,children:[t,` (`,e,`)`]}),(0,d.jsxs)(`div`,{className:r.default.tooltipMeta,children:[a?`${a.region} · ${a.cities.length} cidades`:e,typeof i==`number`?` · ${i}`:``]})]})}exports.BrazilMap=f;
+//# sourceMappingURL=BrazilMap.cjs.map