tempest-react-sdk 0.77.0 → 0.79.0

package/dist/tempest-react-sdk.d.ts

@@ -1,6 +1,11 @@
+import { ActionFunction } from 'react-router';
+import { ActionFunctionArgs } from 'react-router';
 import { AnchorHTMLAttributes } from 'react';
 import { AnimationEventHandler } from 'react';
 import { AriaRole } from 'react';
+import { Await } from 'react-router';
+import { Blocker } from 'react-router';
+import { BlockerFunction } from 'react-router';
 import { BrowserRouter } from 'react-router';
 import { ButtonHTMLAttributes } from 'react';
 import { ChangeEventHandler } from 'react';
@@ -11,12 +16,22 @@ import { CompositionEventHandler } from 'react';
 import { Control } from 'react-hook-form';
 import { Controller } from 'react-hook-form';
 import { ControllerRenderProps } from 'react-hook-form';
+import { createBrowserRouter } from 'react-router';
+import { createHashRouter } from 'react-router';
+import { createMemoryRouter } from 'react-router';
+import { createPath } from 'react-router';
+import { createRoutesFromChildren } from 'react-router';
+import { createRoutesFromElements } from 'react-router';
+import { createSearchParams } from 'react-router';
 import { CSSProperties } from 'react';
+import { data } from 'react-router';
 import { default as default_2 } from 'dexie';
 import { DefaultOptions } from '@tanstack/react-query';
 import { DOMElement } from 'react';
 import { DragEventHandler } from 'react';
 import { ErrorInfo } from 'react';
+import { Fetcher } from 'react-router';
+import { FetcherWithComponents } from 'react-router';
 import { FieldArrayWithId } from 'react-hook-form';
 import { FieldError } from 'react-hook-form';
 import { FieldErrors } from 'react-hook-form';
@@ -26,27 +41,50 @@ import { FocusEventHandler } from 'react';
 import { FormHTMLAttributes } from 'react';
 import { FormProvider } from 'react-hook-form';
 import { ForwardRefExoticComponent } from 'react';
+import { generatePath } from 'react-router';
 import { HashRouter } from 'react-router';
 import { HTMLAttributes } from 'react';
+import { IDLE_BLOCKER } from 'react-router';
+import { IDLE_FETCHER } from 'react-router';
+import { IDLE_NAVIGATION } from 'react-router';
 import { ImgHTMLAttributes } from 'react';
+import { IndexRouteObject } from 'react-router';
 import { InfiniteData } from '@tanstack/react-query';
 import { InputEventHandler } from 'react';
 import { InputHTMLAttributes } from 'react';
+import { isRouteErrorResponse } from 'react-router';
 import { JSX } from 'react';
 import { KeyboardEvent as KeyboardEvent_2 } from 'react';
 import { KeyboardEventHandler } from 'react';
 import { LabelHTMLAttributes } from 'react';
 import { lazy } from 'react';
 import { Link } from 'react-router';
+import { LinkProps } from 'react-router';
+import { LoaderFunction } from 'react-router';
+import { LoaderFunctionArgs } from 'react-router';
+import { Location as Location_2 } from 'react-router';
+import { matchPath } from 'react-router';
+import { matchRoutes } from 'react-router';
 import { MemoryRouter } from 'react-router';
 import { MouseEvent as MouseEvent_2 } from 'react';
 import { MouseEventHandler } from 'react';
 import { Navigate } from 'react-router';
+import { NavigateFunction } from 'react-router';
 import { NavigateOptions } from 'react-router';
+import { NavigateProps } from 'react-router';
+import { Navigation as Navigation_2 } from 'react-router';
+import { NavigationType as NavigationType_2 } from 'react-router';
 import { NavLink } from 'react-router';
+import { NavLinkProps } from 'react-router';
+import { NavLinkRenderProps } from 'react-router';
+import { NonIndexRouteObject } from 'react-router';
 import { Outlet } from 'react-router';
+import { OutletProps } from 'react-router';
 import { Params } from 'react-router';
+import { parsePath } from 'react-router';
 import { Path } from 'react-hook-form';
+import { PathMatch } from 'react-router';
+import { PathPattern } from 'react-router';
 import { PersistOptions } from 'zustand/middleware';
 import { PointerEvent as PointerEvent_2 } from 'react';
 import { PointerEventHandler } from 'react';
@@ -57,13 +95,27 @@ import { ReactEventHandler } from 'react';
 import { ReactNode } from 'react';
 import { ReactPortal } from 'react';
 import { redirect } from 'react-router';
+import { redirectDocument } from 'react-router';
 import { Ref } from 'react';
 import { RefAttributes } from 'react';
 import { RefObject } from 'react';
+import { renderMatches } from 'react-router';
+import { replace } from 'react-router';
+import { resolvePath } from 'react-router';
 import { Resolver } from 'react-hook-form';
 import { Route } from 'react-router';
+import { RouteObject } from 'react-router';
+import { RouteProps } from 'react-router';
+import { Router } from 'react-router';
+import { Form as RouterForm } from 'react-router';
+import { FormProps as RouterFormProps } from 'react-router';
+import { RouterProvider } from 'react-router';
+import { RouterProviderProps } from 'react-router';
 import { Routes } from 'react-router';
+import { ScrollRestoration as ScrollRestoration_2 } from 'react-router';
 import { SelectHTMLAttributes } from 'react';
+import { SetURLSearchParams } from 'react-router';
+import { ShouldRevalidateFunction } from 'react-router';
 import { StateCreator } from 'zustand';
 import { StoreApi } from 'zustand';
 import { SubmitEventHandler } from 'react';
@@ -76,26 +128,51 @@ import { TouchEvent as TouchEvent_2 } from 'react';
 import { TouchEventHandler } from 'react';
 import { TransitionEventHandler } from 'react';
 import { UIEventHandler } from 'react';
+import { UIMatch } from 'react-router';
+import { URLSearchParamsInit } from 'react-router';
+import { useActionData } from 'react-router';
+import { useAsyncError } from 'react-router';
+import { useAsyncValue } from 'react-router';
+import { useBeforeUnload } from 'react-router';
+import { useBlocker } from 'react-router';
 import { UseBoundStore } from 'zustand';
+import { useFetcher } from 'react-router';
+import { useFetchers } from 'react-router';
 import { useFieldArray } from 'react-hook-form';
 import { UseFieldArrayReturn } from 'react-hook-form';
 import { useForm } from 'react-hook-form';
+import { useFormAction } from 'react-router';
 import { useFormContext } from 'react-hook-form';
 import { UseFormProps } from 'react-hook-form';
 import { UseFormRegister } from 'react-hook-form';
 import { UseFormReturn } from 'react-hook-form';
 import { useFormState } from 'react-hook-form';
+import { useHref } from 'react-router';
 import { UseInfiniteQueryOptions } from '@tanstack/react-query';
+import { useInRouterContext } from 'react-router';
+import { useLinkClickHandler } from 'react-router';
+import { useLoaderData } from 'react-router';
 import { useLocation } from 'react-router';
 import { useMatch } from 'react-router';
+import { useMatches } from 'react-router';
 import { UseMutationOptions } from '@tanstack/react-query';
 import { UseMutationResult } from '@tanstack/react-query';
 import { useNavigate } from 'react-router';
+import { useNavigation } from 'react-router';
+import { useNavigationType } from 'react-router';
+import { useOutlet } from 'react-router';
+import { useOutletContext } from 'react-router';
 import { useParams } from 'react-router';
 import { UseQueryOptions } from '@tanstack/react-query';
 import { UseQueryResult } from '@tanstack/react-query';
+import { useResolvedPath } from 'react-router';
+import { useRevalidator } from 'react-router';
 import { useRouteError } from 'react-router';
+import { useRouteLoaderData } from 'react-router';
+import { useRoutes } from 'react-router';
 import { useSearchParams } from 'react-router';
+import { useSubmit } from 'react-router';
+import { useViewTransitionState } from 'react-router';
 import { useWatch } from 'react-hook-form';
 import { WheelEventHandler } from 'react';
 import { z } from 'zod';
@@ -172,6 +249,10 @@ export declare interface AccordionProps {
     className?: string;
 }
 
+export { ActionFunction }
+
+export { ActionFunctionArgs }
+
 /**
  * Resolve which navigation key is active for the current route.
  *
@@ -1794,6 +1875,8 @@ export declare type AvatarSize = "xs" | "sm" | "md" | "lg" | "xl";
 
 export declare type AvatarStatus = "online" | "offline" | "busy";
 
+export { Await }
+
 /**
  * `type` of the message the worker posts to window clients to ask about a queued
  * request. Answered by {@link provideBackgroundSyncCredentials}.
@@ -1819,13 +1902,27 @@ export declare interface BackgroundSyncCredentialsRequest {
     phase: "enqueue" | "replay";
 }
 
+/**
+ * How the default `beforeReplay` treats an `"unknown"` owner on an entry that
+ * carried no credential header:
+ * - `"strict"` (default): it asks the open pages like any other entry — replayed
+ *   only when every answer lacks a principal, dropped as soon as one answer has
+ *   one, pending while nobody answers.
+ * - `"lenient"`: it is replayed as-is, without asking (the behavior up to 0.77.0).
+ *
+ * An entry with stripped credentials always asks, under either policy.
+ */
+export declare type BackgroundSyncOwnerPolicy = "strict" | "lenient";
+
 /**
  * How an entry is tied to whoever queued it:
  * - `"bound"`: the issuing page reported a principal (or `null` for nobody);
  *   the entry only goes out while the same one is signed in.
  * - `"unbound"`: the issuing page answered without `getPrincipal`.
  * - `"unknown"`: nobody could say — no issuing tab, no answer, an error, or an
- *   entry written before owners existed. Fails closed.
+ *   entry written before owners existed. Fails closed, with or without stripped
+ *   credentials: a cookie session rides along on the replay, so an entry with no
+ *   credential header is checked like any other.
  *
  * While the worker is still asking, the stored state is `"pending"`, which a
  * replay never sees: it waits, then reads a stamp that never came as `"unknown"`.
@@ -2168,6 +2265,10 @@ export declare interface BeforeInstallPromptEvent extends Event {
  */
 export declare function blobToWav(blob: Blob, options?: WavOptions): Promise<Blob>;
 
+export { Blocker }
+
+export { BlockerFunction }
+
 /**
  * Fixed-bottom mobile tab bar. 3–5 items recommended. Pair with
  * `<Show below="md">` to render only on mobile.
@@ -4069,6 +4170,8 @@ export declare interface CreateAuthStoreOptions<TUser> {
  */
 export declare function createBarcodeDetector(formats?: readonly BarcodeFormat[]): BarcodeDetectorLike | null;
 
+export { createBrowserRouter }
+
 /**
  * Build a ten-step tint scale from a single color.
  *
@@ -4209,6 +4312,8 @@ export declare interface CreateGrowthBookFeatureFlagsAdapterOptions {
     growthbook: GrowthBookLike;
 }
 
+export { createHashRouter }
+
 /**
  * Create an i18n object with translation, pluralization and Intl helpers.
  *
@@ -4449,10 +4554,14 @@ export declare function createLinkStatsSampler(options?: LinkStatsSamplerOptions
  * file. Apps that already have `createOfflineStore` open can pass their own
  * {@link ResumableUploadStorage} instead.
  *
+ * `clear()` forgets every record under the prefix. Call it from
+ * `onSessionEnd`: a record outlives the session that wrote it, and only
+ * completing the upload or `abort({ discard: true })` removes it otherwise.
+ *
  * @param prefix - Key prefix. Default `"tempest-upload:"`.
  * @returns A storage that no-ops when `localStorage` is unavailable.
  */
-export declare function createLocalUploadStorage(prefix?: string): ResumableUploadStorage;
+export declare function createLocalUploadStorage(prefix?: string): LocalUploadStorage;
 
 /**
  * Create a structured leveled logger. Plug arbitrary sinks (Sentry, Datadog,
@@ -4503,6 +4612,8 @@ export declare interface CreateLoggerOptions {
  */
 export declare function createMediaRecorder(stream: MediaStream, options: MediaRecordingOptions): MediaRecorderHandle;
 
+export { createMemoryRouter }
+
 /**
  * Build several {@link OfflineStore}s that share one IndexedDB database.
  *
@@ -4697,6 +4808,8 @@ export declare interface CreatePasskeyClientOptions {
     credentials?: CredentialsContainerLike;
 }
 
+export { createPath }
+
 /**
  * One `RTCPeerConnection` per peer, with the slots negotiated up front.
  *
@@ -4954,6 +5067,12 @@ export declare function createResumableUpload(options: ResumableUploadOptions):
  */
 export declare function createRoleAccessControl(config: RoleAccessControlConfig): AccessControl;
 
+export { createRoutesFromChildren }
+
+export { createRoutesFromElements }
+
+export { createSearchParams }
+
 /**
  * Attach auto-generated selector hooks to a Zustand store. Instead of writing
  * `useStore((s) => s.user)` at every call site, you get `useStore.use.user()`
@@ -5087,6 +5206,16 @@ export declare interface CreateStorePersistOptions<T> {
  * showed B (#435). A `401` from a request sent under an ended session is
  * refused the same way, instead of being replayed as the account signed in now.
  *
+ * A `401` from a request that carried no token, while no session is installed,
+ * surfaces without a refresh: in cookie mode that refresh would be answered by
+ * the HttpOnly cookie `logout()` cannot clear, signing the previous account
+ * back in (#474). With a `login()` in flight, that `401` waits for it and
+ * replays with the token it installed, or surfaces when it failed — still
+ * without a refresh (#496). Restore a session at boot with an explicit
+ * `refresh()`, and pass `logoutPath` so the backend revokes the cookie:
+ * without a working revocation, that boot `refresh()` restores the previous
+ * account for whoever uses the browser next.
+ *
  * Refreshes are collapsed per rotation, not just per overlap: a `401` whose
  * request left with a token that has since been replaced in the same session
  * replays with the new token and refreshes nothing. Three expired requests take
@@ -5127,6 +5256,51 @@ export declare interface CreateTempestAuthOptions<TUser> {
     loginPath?: string;
     /** Refresh route (`POST`). Default: `"/api/auth/refresh"`. */
     refreshPath?: string;
+    /**
+     * Server-side logout route (`POST`), called by an explicit `logout()` to
+     * revoke the ending session. Off by default.
+     *
+     * `logout()` alone only clears client state, and an HttpOnly refresh
+     * cookie is out of its reach: with `withCredentials`, the cookie stays
+     * redeemable until the backend revokes it. The tempest-fastapi-sdk mounts
+     * `POST /auth/logout` (`204`, idempotent) when it stores refresh tokens in
+     * the database — at `/auth/cookie/logout` when it delivers tokens both in
+     * the body and in cookies — and stateless refresh tokens cannot be
+     * revoked, so the route is absent there.
+     *
+     * The request goes out through the ended session's client (the same one
+     * `onSessionEnd` receives, carrying its access token), with the body that
+     * `refreshBody` builds from the refresh token stored before the clear:
+     * `{ refresh_token }` in body mode, no body in cookie mode, which is what
+     * that route reads. The local clear does not wait on it — `isAuthenticated`
+     * is still `false` when `logout()` returns — but the promise `logout()`
+     * returns does, so a navigation after `await auth.logout()` does not abort
+     * it. A failure (network, `4xx`, `5xx`) is swallowed: revocation is
+     * best-effort and never keeps the user signed in. A `login()` started
+     * while it is in flight waits for it, because the logout response clears
+     * the auth cookies and would otherwise clear the new account's.
+     *
+     * Only an explicit `logout()` revokes. On `"switch"` the cookie jar already
+     * holds the new account's cookie, and on `"expired"` the server has already
+     * refused the session.
+     *
+     * Overlapping sign-outs each send their own revocation, and `login()` waits
+     * for all of them — at most 10 seconds, so one that
+     * never answers delays the sign-in instead of blocking it. In cookie mode,
+     * a revocation also waits (within the same bound) for the login and
+     * refresh responses that were in flight when `logout()` ran: the server
+     * sets the ended session's cookie when that response arrives, and a
+     * revocation sent earlier would leave it behind. In body mode, the refresh
+     * token such a superseded response brings back is revoked on its own.
+     */
+    logoutPath?: string;
+    /**
+     * Called with the error when a `logoutPath` revocation fails — network
+     * failure, `4xx` or `5xx`. `logout()` still resolves, since the local
+     * sign-out already happened; this is where the app logs or retries. A dev
+     * build also warns in the console. Errors it throws are swallowed.
+     */
+    onLogoutError?: (error: unknown) => void;
     /** Optional current-user route (`GET`) called after login/refresh. */
     mePath?: string;
     /** Persist key for the store. Default: `"tempest-auth"`. */
@@ -5708,11 +5882,18 @@ export declare interface CsvOptions {
      * because the BOM and the `;` delimiter already aim the file at a spreadsheet,
      * and because the app that exports rarely controls every value in it.
      *
+     * Text holding a `,`, `;` or TAB is also quoted whatever the delimiter
+     * (#481): a spreadsheet whose list separator is not the file's would otherwise
+     * split the bare field there and could start a cell with `=`. A quoted field is
+     * not split, so the quotes close that path without touching the text —
+     * `x;=1+2` is written `"x;=1+2"`.
+     *
      * Numbers are never prefixed: a `number` cell, or a text field that is only a
      * number (`"-5"`, `"-1.234,56"`, `"+42"`, `"1e-7"`), cannot be a formula, and
      * neither can a lone `"-"`, which is left alone too. Pass
      * `false` when the file feeds another system's importer rather than a person's
-     * spreadsheet, so the bytes round-trip unchanged.
+     * spreadsheet, so the bytes round-trip unchanged and only the delimiter, quotes
+     * and line breaks decide the quoting.
      */
     neutralizeFormulas?: boolean;
 }
@@ -5737,6 +5918,8 @@ export declare interface CursorParams {
     ascending?: boolean;
 }
 
+export { data }
+
 /** Filters passed to {@link DataProvider.getList}, spread verbatim into the query string. */
 export declare type DataFilters = Record<string, ParamValue>;
 
@@ -6336,7 +6519,10 @@ export declare const DEFAULT_CIRCUITY_FACTOR = 1.3;
  * bypasses `installRuntimeCache` unless the route opts in. `Cookie` and
  * `Proxy-Authorization` are listed for completeness although the browser
  * forbids scripts from setting them — a cookie session is invisible to the
- * worker, which is why it depends on `Cache-Control` and `clearSessionData()`.
+ * worker. The runtime cache therefore depends on `Cache-Control` and
+ * `clearSessionData()`; the background-sync queue checks the entry's owner
+ * through `getPrincipal` whether or not a credential header was stripped, and
+ * `clearSessionData()` still backs that check up.
  */
 export declare const DEFAULT_CREDENTIAL_HEADERS: readonly string[];
 
@@ -7216,6 +7402,10 @@ export declare interface FeatureFlagsProviderProps {
     children: ReactNode;
 }
 
+export { Fetcher }
+
+export { FetcherWithComponents }
+
 export { FieldArrayWithId }
 
 export { FieldError }
@@ -8065,6 +8255,8 @@ export declare interface GeneratedTheme {
  */
 export declare function generateIdempotencyKey(): string;
 
+export { generatePath }
+
 /**
  * Axis-aligned geographic bounding box. `min`/`max` follow the same degree
  * ranges as {@link Coordinate}.
@@ -8421,6 +8613,12 @@ export declare interface I18nProviderProps {
     storageKey?: string | null;
 }
 
+export { IDLE_BLOCKER }
+
+export { IDLE_FETCHER }
+
+export { IDLE_NAVIGATION }
+
 /**
  * Renders an `<img>` with native lazy loading and a one-shot fallback.
  *
@@ -8513,6 +8711,8 @@ export declare interface ImageProps extends Omit<ImgHTMLAttributes<HTMLImageElem
     lazy?: boolean;
 }
 
+export { IndexRouteObject }
+
 /**
  * Records how long each stage of a pipeline took.
  *
@@ -8675,19 +8875,40 @@ export declare interface InstallBackgroundSyncOptions {
      * The context carries the entry's owner, so a custom hook can apply the
      * same rule as the default.
      *
-     * Default: an entry with no stripped credentials and no bound owner is
-     * replayed as-is. The others ask every open window client in parallel (see
-     * {@link provideBackgroundSyncCredentials}) and pick the answer that fits:
+     * Default: only an `"unbound"` entry with no stripped credentials (and, under
+     * `ownerPolicy: "lenient"`, an `"unknown"` one) is replayed as-is, without
+     * asking. Every other entry — credentialed or not —
+     * asks every open window client in parallel (see
+     * {@link provideBackgroundSyncCredentials}) and picks the answer that fits:
      * - `"bound"`: the answer whose owner matches; none among valid answers →
      *   dropped, never sent anonymously or as somebody else;
-     * - `"unknown"`: only an answer without a principal (an app that does not use
-     *   `getPrincipal`); every answer has one → dropped;
+     * - `"unknown"`: only when every answer lacks a principal (an app that does
+     *   not use `getPrincipal`); a single answer with one → dropped, since a
+     *   stale tab without `getPrincipal` says nothing about who is signed in
+     *   next to it. This holds for an entry
+     *   with no credential header too, since the browser attaches the cookies of
+     *   whoever is signed in at replay time;
      * - `"unbound"`: any answer, preferring one without a principal.
      * Then `null` headers drop a credentialed entry, an answer that lacks one of
      * the stripped headers keeps it pending, and only the stripped names are
      * re-applied. No valid answer at all keeps it pending until
-     * `maxRetentionMinutes` (and warns once per replay in development builds).
+     * `maxRetentionMinutes` (and warns once per replay in development builds) —
+     * so a page that never calls {@link provideBackgroundSyncCredentials} leaves
+     * every entry it queued `"unknown"`, and none of them is replayed.
+     */
+    /**
+     * How an `"unknown"` owner is handled on an entry with no stripped
+     * credentials (see {@link BackgroundSyncOwnerPolicy}). Default `"strict"`.
+     *
+     * `"lenient"` restores the replay-as-is of 0.77.0 and earlier for an app without sign-in,
+     * where no page ever reports a principal. Do not use it with a cookie
+     * session: the browser attaches on replay the cookie of whoever is signed in
+     * at that moment, so a mutation queued by A whose owner was never stamped
+     * (issuing tab closed, empty `clientId`, stamp lost, legacy entry) goes out
+     * with B's session. Entries with stripped credentials ask the pages either
+     * way. Ignored when a custom `beforeReplay` is given.
      */
+    ownerPolicy?: BackgroundSyncOwnerPolicy;
     beforeReplay?: (request: Request, context: BackgroundSyncReplayContext) => Request | null | Promise<Request | null>;
 }
 
@@ -9257,6 +9478,8 @@ export declare function isRejectionCloseCode(code: number): boolean;
  */
 export declare function isRetriableStatus(status: number): boolean;
 
+export { isRouteErrorResponse }
+
 /** Whether `getDisplayMedia` is reachable at all. */
 export declare function isScreenCaptureSupported(): boolean;
 
@@ -9773,6 +9996,8 @@ export declare interface LimiterSettings {
 
 export { Link }
 
+export { LinkProps }
+
 /**
  * One link's outbound picture, in the shape a call UI actually renders.
  *
@@ -9952,11 +10177,36 @@ export declare interface ListTileProps {
     className?: string;
 }
 
+export { LoaderFunction }
+
+export { LoaderFunctionArgs }
+
 export declare type LocalStorageOptions<T> = {
     serialize?: (value: T) => string;
     deserialize?: (raw: string) => T;
 };
 
+/**
+ * The default `localStorage` storage, which can also forget every record it
+ * holds.
+ */
+export declare interface LocalUploadStorage extends ResumableUploadStorage {
+    /**
+     * Forget every record under this storage's prefix — the call for
+     * `onSessionEnd`, so the next account on the browser does not find the
+     * previous one's upload URLs. Synchronous; a no-op without `localStorage`.
+     *
+     * Only values shaped like a record are removed, so a prefix without a
+     * delimiter does not take the app's own keys with it. A run still going on
+     * this prefix stops before its next chunk with
+     * {@link ResumableUploadSupersededError} (`"cleared"`) instead of writing
+     * its record back.
+     */
+    clear(): void;
+}
+
+export { Location_2 as Location }
+
 export declare interface LogEntry {
     level: LogLevel;
     message: string;
@@ -10139,6 +10389,10 @@ export declare interface MasonryProps<T> extends Omit<HTMLAttributes<HTMLDivElem
     gap?: string;
 }
 
+export { matchPath }
+
+export { matchRoutes }
+
 /**
  * The matrix as an SVG path, one `M…h…v…h…z` rectangle per dark module.
  *
@@ -10811,8 +11065,14 @@ export declare type NavbarTone = "surface" | "primary" | "inverse" | "transparen
 
 export { Navigate }
 
+export { NavigateFunction }
+
 export { NavigateOptions }
 
+export { NavigateProps }
+
+export { Navigation_2 as Navigation }
+
 /**
  * Horizontal navigation menu with hover/click/focus dropdown submenus.
  *
@@ -10915,8 +11175,14 @@ export declare interface NavigationRailProps extends Omit<HTMLAttributes<HTMLEle
     className?: string;
 }
 
+export { NavigationType_2 as NavigationType }
+
 export { NavLink }
 
+export { NavLinkProps }
+
+export { NavLinkRenderProps }
+
 /** Options for {@link measureNoiseFloor}. */
 export declare interface NoiseFloorOptions {
     /** Called with `0..1` so a dialog can show the wait. */
@@ -10927,6 +11193,8 @@ export declare interface NoiseFloorOptions {
     context?: AudioContext;
 }
 
+export { NonIndexRouteObject }
+
 /**
  * Turn one raw detection into a {@link BarcodeScanResult}.
  *
@@ -11722,6 +11990,8 @@ export declare type OutboxOp = "create" | "update" | "delete";
 
 export { Outlet }
 
+export { OutletProps }
+
 /**
  * DOM attributes this component redefines.
  *
@@ -11876,6 +12146,8 @@ export { Params }
 /** Query-param values accepted by the API client for a list request. */
 declare type ParamValue = string | number | boolean | undefined | null;
 
+export { parsePath }
+
 /**
  * Validate an unknown response payload against a zod schema.
  *
@@ -12170,6 +12442,10 @@ export { Path }
  */
 export declare function pathLengthKm(points: readonly Coordinate[]): number;
 
+export { PathMatch }
+
+export { PathPattern }
+
 /** Raw PCM ready to be wrapped in a RIFF container. */
 export declare interface PcmAudio {
     /** One `Float32Array` per channel, samples in −1…1. */
@@ -13282,6 +13558,8 @@ export declare function receiptLabel(receipt: ChatReceipt, strings: {
 
 export { redirect }
 
+export { redirectDocument }
+
 /** Recommended refetch intervals (milliseconds). */
 export declare const REFETCH_TIME: {
     readonly REALTIME: number;
@@ -13475,11 +13753,15 @@ export declare function removeById<T, V extends Partial<Record<keyof T, unknown>
 /** Renders the instruction shown when the browser has no install prompt. */
 export declare type RenderInstallHint = (input: InstallHintInput) => ReactNode;
 
+export { renderMatches }
+
 export declare interface ReorderPayload {
     from: number;
     to: number;
 }
 
+export { replace }
+
 /**
  * What {@link ApiClientConfig.refresh} and {@link ApiClientConfig.onUnauthorized}
  * learn about the attempt that came back `401`: the credential and the session it
@@ -13618,6 +13900,8 @@ export declare function resolveDegradation(quality: MeshQuality, effective: Mesh
 
 export declare type ResolvedTheme = "light" | "dark";
 
+export { resolvePath }
+
 /**
  * Resolve the tick state of an outgoing message.
  *
@@ -13699,6 +13983,29 @@ export declare interface ResumableUploadOptions {
     headers?: Record<string, string>;
     /** Returns the current bearer token, read before each request. */
     getToken?: () => string | null | undefined;
+    /**
+     * Who is signed in — a user id, or `null`/`undefined` for nobody — read when
+     * `start()`/`resume()` attaches to the upload. The same getter the error
+     * reporter and `provideBackgroundSyncCredentials` take.
+     *
+     * The resume record is stamped with a one-way fingerprint of it, and a
+     * record stamped by anyone else — another user, nobody, or no stamp at all
+     * — is deleted instead of resumed: its upload URL is not probed, and its
+     * `Idempotency-Key` is never replayed. Without it, the record is bound to
+     * the file alone (endpoint, name, size, type, mtime), so after user A
+     * signed out leaving an upload half-done, user B picking an identical file
+     * sent `HEAD`/`PATCH` to A's upload URL with B's token, and on refusal
+     * replayed A's `Idempotency-Key` with B's token (#479). Pass it on every
+     * app with more than one account per browser, and also clear the storage
+     * at session end (`createLocalUploadStorage().clear()` in `onSessionEnd`).
+     *
+     * It is read again before every chunk and every record write: when it
+     * names someone else mid-run, the run stops with
+     * {@link ResumableUploadSupersededError} (`"principal"`) before the new
+     * account's token reaches the previous one's upload URL. Without it, call
+     * `abort()` on the uploads in progress from `onSessionEnd`.
+     */
+    getPrincipal?: () => string | number | null | undefined;
     /**
      * Origins besides `endpoint`'s that may receive the `getToken` credential.
      *
@@ -13766,6 +14073,13 @@ export declare interface ResumableUploadRecord {
     idempotencyKey: string;
     /** Epoch ms of the last write, so an app can sweep stale records. */
     updatedAt: number;
+    /**
+     * One-way fingerprint of the principal that created the upload (`"p:<hex>"`),
+     * `null` for an anonymous one. Absent when the upload ran without
+     * {@link ResumableUploadOptions.getPrincipal}, and on records written before
+     * 0.78.0.
+     */
+    owner?: string | null;
 }
 
 /** What a finished upload resolves with. */
@@ -13800,18 +14114,65 @@ export declare interface ResumableUploadStorage {
     delete(key: string): Promise<void> | void;
 }
 
+/**
+ * Thrown by `start()`/`resume()` when the run can no longer go on as the
+ * account that started it.
+ *
+ * - `"principal"` — `getPrincipal` names someone else than when the run
+ *   attached: the next chunk would carry the new account's token to the
+ *   previous account's upload URL, and the record would be stamped for the
+ *   wrong owner.
+ * - `"cleared"` — `createLocalUploadStorage().clear()` ran for this storage's
+ *   prefix (typically in `onSessionEnd`): writing the record back would undo
+ *   the clear.
+ *
+ * Not a pause: the run cannot be resumed as the new account. The state moves
+ * to `"error"`, and the previous owner's record is left as it was.
+ */
+export declare class ResumableUploadSupersededError extends Error {
+    /** Why the run stopped. */
+    readonly reason: "principal" | "cleared";
+    /**
+     * @param reason - Why the run stopped.
+     */
+    constructor(reason: "principal" | "cleared");
+}
+
 /**
  * Run `factory()` with exponential backoff. Each attempt awaits an
  * increasing delay capped at `maxDelay`. Throws the last error if every
  * attempt fails.
  *
+ * `retries` is the **total** number of attempts, never fewer than one — see
+ * {@link RetryOptions.retries}. `retries: 5` means one call plus four replays.
+ *
+ * @param factory - Starts one attempt; called again for every replay.
+ * @param options - Attempt count, backoff and the retry predicate.
+ * @returns What the first successful attempt resolved with.
+ * @throws The error of the last attempt, or an `AbortError` once `signal` aborts.
+ *
  * @example
  * const data = await retry(() => api.get("/flaky"), { retries: 5 });
  */
 export declare function retry<T>(factory: () => Promise<T>, options?: RetryOptions): Promise<T>;
 
 export declare interface RetryOptions {
-    /** Max attempts (including the first). Default: 3. */
+    /**
+     * Total attempts, the first one included. Default: 3 — one call plus two
+     * replays.
+     *
+     * The first attempt always runs: `0`, a negative number or a fraction below
+     * one all mean "a single attempt, no replay", and that attempt's error is the
+     * one the promise rejects with. A fraction is rounded down; `NaN` falls back
+     * to the default.
+     *
+     * The name reads like "replays after the first", but every surface that
+     * forwards it has always counted totals — {@link createApiClient}'s `retry`,
+     * `createResumableUpload` ("5 attempts"), and `lazyWithRetry`'s own
+     * `retries`. Switching to "replays" would add one request to every caller
+     * that passes a number, which no change of default can hide, so the count
+     * stays a total and only the values that ran nothing were fixed (#486).
+     */
     retries?: number;
     /** Initial backoff in ms. Doubles each attempt, capped at `maxDelay`. Default: 300. */
     initialDelay?: number;
@@ -13982,9 +14343,23 @@ export declare interface RouteGuardProps {
  */
 export declare type RouteGuardResult = boolean | "pending";
 
+export { RouteObject }
+
+export { RouteProps }
+
+export { Router }
+
+export { RouterForm }
+
+export { RouterFormProps }
+
 /** Router history strategy used by {@link AppRouter}. */
 export declare type RouterKind = "browser" | "hash" | "memory";
 
+export { RouterProvider }
+
+export { RouterProviderProps }
+
 export { Routes }
 
 /**
@@ -14309,9 +14684,9 @@ export declare interface SchedulerProps extends Omit<HTMLAttributes<HTMLDivEleme
  * - [Standard Schema](https://standardschema.dev) (`~standard`), which zod
  *   (>=3.24), valibot and arktype all implement, so the SDK validates against
  *   any of them without depending on one;
- * - `.safeParse`, because the SDK's own zod range starts at `^3.23.0`, which
- *   predates `~standard`, and because it is the method every zod user already
- *   knows.
+ * - `.safeParse`, because it is the method every zod user already knows, and
+ *   because an app may still build its schemas with its own copy of zod 3.23,
+ *   which predates `~standard`, even though the SDK itself requires `^4.6.6`.
  */
 /** One field-level complaint from a schema validation. */
 export declare interface SchemaIssue {
@@ -14359,6 +14734,8 @@ export declare interface ScrollAreaProps extends HTMLAttributes<HTMLDivElement>
 /** Which axis to watch for overflow. */
 export declare type ScrollOverflowAxis = "horizontal" | "vertical" | "both";
 
+export { ScrollRestoration_2 as ScrollRestoration }
+
 /**
  * Search input with magnifier icon and a clear button. Controlled component:
  * pass `value` and `onChange`.
@@ -14831,6 +15208,8 @@ export declare function setSenderBitrate(sender: RTCRtpSender, maxBitrate: numbe
  */
 export declare function setTunedLocalDescription(connection: RTCPeerConnection, description: RTCSessionDescriptionInit, profiles: OpusProfile | OpusProfileMap): Promise<TunedDescriptionResult>;
 
+export { SetURLSearchParams }
+
 /** Imperative handle over a pool of short sound effects. */
 export declare interface SfxPool {
     /** Play a clip, allocating and caching its element on first use. */
@@ -14947,6 +15326,8 @@ export declare interface ShareResult {
  */
 export declare function shouldRetryQuery(failureCount: number, error: unknown): boolean;
 
+export { ShouldRevalidateFunction }
+
 /**
  * Conditionally render children based on the viewport breakpoint.
  *
@@ -15950,7 +16331,9 @@ export declare interface TempestAuth<TUser, TCredentials> {
      *
      * The store is cleared synchronously, before the first `await`, so callers
      * that ignore the promise see the signed-out state at once. The promise
-     * resolves when `onSessionEnd` settled and rejects with its error.
+     * resolves when `onSessionEnd` settled — and, with `logoutPath`, when the
+     * server-side revocation settled too — and rejects with the hook's error;
+     * a failed revocation never rejects it.
      */
     logout: () => Promise<void>;
     /**
@@ -16890,6 +17273,8 @@ export declare function tuneOpus(sdp: string, profiles: OpusProfile | OpusProfil
  */
 export declare function turnTime(timestamp: number, locale?: "pt-BR" | "en"): string;
 
+export { UIMatch }
+
 /**
  * Remove duplicate items, keeping the first occurrence of each distinct key.
  *
@@ -17087,6 +17472,8 @@ export declare function upsertById<T>(idField?: keyof T): (current: T[] | undefi
  */
 export declare function urlBase64ToUint8Array(base64String: string): Uint8Array<ArrayBuffer>;
 
+export { URLSearchParamsInit }
+
 /**
  * Read the current {@link AccessControl} from context.
  *
@@ -17097,6 +17484,8 @@ export declare function urlBase64ToUint8Array(base64String: string): Uint8Array<
  */
 export declare function useAccessControl(): AccessControl | null;
 
+export { useActionData }
+
 /**
  * Announce transient messages to screen readers through one shared live region
  * pair.
@@ -17144,6 +17533,8 @@ export declare function useAsync<T>(asyncFn: () => Promise<T>, deps?: ReadonlyAr
     immediate?: boolean;
 }): UseAsyncResult<T>;
 
+export { useAsyncError }
+
 export declare interface UseAsyncResult<T> {
     status: AsyncStatus;
     data: T | undefined;
@@ -17157,6 +17548,8 @@ export declare interface UseAsyncResult<T> {
     reset: () => void;
 }
 
+export { useAsyncValue }
+
 /**
  * The player lives in a state initializer, not in a lazily-written ref: the
  * initializer runs exactly once and is not a side effect during render, which is
@@ -17388,6 +17781,10 @@ export declare interface UseBeforeInstallPromptResult {
     prompt: () => Promise<"accepted" | "dismissed" | "unsupported">;
 }
 
+export { useBeforeUnload }
+
+export { useBlocker }
+
 /**
  * Reactive viewport-breakpoint hook.
  *
@@ -17802,6 +18199,10 @@ export declare function useFavicon(href: string): void;
  */
 export declare function useFeatureFlag(key: string, defaultValue?: boolean): boolean;
 
+export { useFetcher }
+
+export { useFetchers }
+
 export { useFieldArray }
 
 export { UseFieldArrayReturn }
@@ -17850,6 +18251,8 @@ export declare function useFocusTrap(containerRef: RefObject<HTMLElement | null>
 
 export { useForm }
 
+export { useFormAction }
+
 export { useFormContext }
 
 export { UseFormProps }
@@ -17956,6 +18359,8 @@ export declare interface UseGeolocationOptions extends PositionOptions {
  */
 export declare function useHover<T extends HTMLElement>(ref: RefObject<T | null>): boolean;
 
+export { useHref }
+
 /**
  * Access translation helpers. Must be used inside an {@link I18nProvider}.
  */
@@ -17967,6 +18372,8 @@ export declare function useI18n(): I18nContextValue;
  */
 export declare function useIdle(timeout?: number): boolean;
 
+export { useInRouterContext }
+
 /**
  * React hook that resolves how (and whether) to offer PWA installation.
  *
@@ -18145,6 +18552,8 @@ export declare interface UseKeyboardShortcutOptions {
  */
 export declare function useLatestRef<T>(value: T): RefObject<T>;
 
+export { useLinkClickHandler }
+
 /**
  * Poll one connection's throughput, resolution and round trip.
  *
@@ -18212,6 +18621,8 @@ export declare type UseListOptions<T> = Omit<UseQueryOptions<OffsetPage<T>, Erro
  */
 export declare function useListState<T>(initial?: T[]): [T[], ListStateHandlers<T>];
 
+export { useLoaderData }
+
 /**
  * State synced with `localStorage`. SSR-safe — initial render returns the
  * provided default; the stored value is hydrated after mount. Updates to the
@@ -18320,6 +18731,8 @@ export declare interface UseMapResult<K, V> {
 
 export { useMatch }
 
+export { useMatches }
+
 /**
  * List capture and playback devices, and keep the list fresh.
  *
@@ -18487,6 +18900,10 @@ export declare function useModals(): ModalsApi;
 
 export { useNavigate }
 
+export { useNavigation }
+
+export { useNavigationType }
+
 /**
  * Client-side inbox state for received notifications.
  *
@@ -18808,6 +19225,10 @@ export declare interface UseOnlineOptions {
  */
 export declare function useOptionalI18n(): I18nContextValue | null;
 
+export { useOutlet }
+
+export { useOutletContext }
+
 /**
  * Offset-pagination hook over TanStack Query for the fastapi-pagination /
  * Tempest envelope (`{ items, total, page, size, pages }`).
@@ -19241,8 +19662,16 @@ export declare interface UseQueueResult<T> {
  */
 export declare function useResizeObserver(ref: RefObject<Element | null>): ElementSize | null;
 
+export { useResolvedPath }
+
+export { useRevalidator }
+
 export { useRouteError }
 
+export { useRouteLoaderData }
+
+export { useRoutes }
+
 /**
  * Capture a screen, a window or a tab with `getDisplayMedia`.
  *
@@ -19723,6 +20152,8 @@ export declare interface UseStorageEstimateResult extends StorageEstimate_2 {
     requestPersist: () => Promise<boolean>;
 }
 
+export { useSubmit }
+
 /**
  * Subscribe to an {@link OfflineSync} engine and return a display-only
  * {@link SyncStatus}. A thin read-only companion to {@link useOfflineSync},
@@ -19957,6 +20388,8 @@ export declare interface UseVideoRecorderResult {
     cancel: () => void;
 }
 
+export { useViewTransitionState }
+
 export { useWatch }
 
 /**