woodsportal-client-sdk 4.0.4-dev.13 → 4.0.4-dev.15

package/dist/chunk-PKDLBVD7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/main/core/auth/session-contract.ts","../src/main/core/http/login-session.ts","../src/main/features/auth/api/authentication.ts","../src/main/features/auth/api/mfa.ts","../src/main/features/auth/api/security.ts","../src/main/features/auth/api/login-bootstrap.ts","../src/main/features/auth/api/sso.ts","../src/main/features/auth/api/users.ts","../src/main/api/nested-auth-api.ts","../src/main/core/auth/bootstrap-contract.ts","../src/main/core/auth/route-guard-contract.ts"],"names":["actions"],"mappings":";;;;;AAgBO,SAAS,eAAe,KAAA,EAAsC;AACjE,EAAA,OAAO,KAAA,CAAM,cAAA,EAAe,IAAK,CAAC,MAAM,oBAAA,EAAqB;AACjE;AAEO,SAAS,qBAAqB,KAAA,EAAsC;AACvE,EAAA,IAAI,KAAA,CAAM,gBAAe,EAAG;AACxB,IAAA,OAAO,KAAA;AAAA,EACX;AACA,EAAA,IAAI,cAAA,CAAe,KAAK,CAAA,EAAG;AACvB,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,OAAO,MAAM,iBAAA,EAAkB;AACnC;AAEO,SAAS,oBAAoB,KAAA,EAAsC;AACtE,EAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,YAAA,IAAgB,CAAA;AACzC;AAEO,SAAS,uBAAuB,KAAA,EAAsC;AACzE,EAAA,IAAI,KAAA,CAAM,gBAAe,EAAG;AACxB,IAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,cAAA,EAAgB,CAAA;AAAA,EACzC;AACA,EAAA,OAAO,eAAe,KAAK,CAAA;AAC/B;;;ACnCA,SAAS,gBAAgB,QAAA,EAAoC;AACzD,EAAA,OAAQ,QAAA,EAAU,IAAA,IAAQ,QAAA,IAAY,EAAC;AAC3C;AAMA,eAAsB,qBAAqB,QAAA,EAA6B;AACpE,EAAA,MAAM,IAAA,GAAO,gBAAgB,QAAQ,CAAA;AACrC,EAAA,MAAM,SAAA,GAAiB,IAAA,EAAM,SAAA,IAAa,EAAC;AAC3C,EAAA,MAAM,eAAA,GAAuB,IAAA,EAAM,eAAA,IAAmB,EAAC;AACvD,EAAA,MAAM,aAAA,GAAqB,eAAA,EAAiB,aAAA,IAAiB,EAAC;AAC9D,EAAA,MAAM,eAAA,GAAuB,eAAe,QAAA,IAAY,IAAA;AACxD,EAAA,MAAM,gBAAA,GAAmB,iBAAiB,gBAAA,IAAoB,OAAA;AAE9D,EAAA,MAAM,QAAQ,SAAA,EAAW,KAAA;AACzB,EAAA,MAAM,eAAe,SAAA,EAAW,YAAA;AAChC,EAAA,MAAM,YAAY,SAAA,EAAW,SAAA;AAC7B,EAAA,MAAM,mBAAmB,SAAA,EAAW,gBAAA;AACpC,EAAA,MAAM,aAAa,SAAA,EAAW,gBAAA;AAE9B,EAAA,SAAA,CAAU,aAAa,CAAA;AACvB,EAAA,mBAAA,CAAoB,gBAAgB,CAAA;AACpC,EAAA,MAAM,cAAA,CAAe,OAAO,SAAS,CAAA;AACrC,EAAA,MAAM,eAAA,CAAgB,YAAA,EAAc,gBAAA,IAAoB,UAAU,CAAA;AAClE,EAAA,MAAM,mBAAmB,IAAI,CAAA;AAC7B,EAAAA,QAAA,CAAY,UAAA,CAAW,UAAU,IAAA,IAAQ,IAAA,GAAO,WAAW,EAAE,IAAA,EAAM,MAAM,CAAA;AAEzE,EAAA,SAAA,CAAU,eAAe,eAAe,CAAA;AAExC,EAAA,OAAO,QAAA;AACX;AAOA,eAAsB,mBAAmB,QAAA,EAA6B;AAClE,EAAA,MAAM,IAAA,GAAO,gBAAgB,QAAQ,CAAA;AACrC,EAAA,IAAI,IAAA,EAAM,sBAAsB,IAAA,EAAM;AAClC,IAAA,MAAM,SAAA,GAAiB,IAAA,EAAM,SAAA,IAAa,EAAC;AAC3C,IAAA,MAAM,QAAQ,SAAA,EAAW,KAAA;AACzB,IAAA,MAAM,YAAY,SAAA,EAAW,SAAA;AAC7B,IAAA,IAAI,KAAA,EAAO;AACP,MAAA,MAAM,cAAA,CAAe,OAAO,SAAS,CAAA;AAAA,IACzC;AACA,IAAA,OAAO,QAAA;AAAA,EACX;AACA,EAAA,OAAO,qBAAqB,QAAQ,CAAA;AACxC;;;ACtCO,SAAS,SAAS,OAAA,EAAqC;AAC1D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAqC,OAAO,OAAA,KAAiB;AACvF,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,SAAS,OAAO,CAAA;AAClE,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,QAAA,EAAU,MAAA;AAAA,IACV;AAAA,GACJ;AACJ;AAQO,SAAS,MAAM,OAAA,EAAmD;AACrE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAgD,OAAO,OAAA,KAAiB;AAClG,IAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,cAAA,CAAe,MAAM,OAAO,CAAA;AAC3D,IAAA,MAAM,mBAAmB,QAAQ,CAAA;AACjC,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,KAAA,EAAO,MAAA;AAAA,IACP;AAAA,GACJ;AACJ;AAuBO,SAAS,QAAQ,OAAA,EAAmD;AACvE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAsD,OAAO,OAAA,KAAY;AACnG,IAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,cAAA,CAAe,QAAQ,OAAQ,CAAA;AAC9D,IAAA,MAAM,mBAAmB,QAAQ,CAAA;AACjC,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,OAAA,EAAS,MAAA;AAAA,IACT;AAAA,GACJ;AACJ;AAEO,SAAS,cAAc,OAAA,EAAmD;AAC7E,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAwD,OAAO,OAAA,KAAmC;AAC5H,IAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,cAAA,CAAe,cAAc,OAAQ,CAAA;AACpE,IAAA,MAAM,mBAAmB,QAAQ,CAAA;AACjC,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,aAAA,EAAe,MAAA;AAAA,IACf;AAAA,GACJ;AACJ;AAEO,SAAS,SAAS,OAAA,EAAqC;AAC1D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAyB,OAAO,OAAA,KAAiB;AAC3E,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,SAAS,OAAO,CAAA;AAClE,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,QAAA,EAAU,MAAA;AAAA,IACV;AAAA,GACJ;AACJ;AAEO,SAAS,YAAY,OAAA,EAAqC;AAC7D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAwC,OAAO,OAAA,KAAiB;AAC1F,IAAA,MAAM,kBAAA,GAAyC,WAAW,EAAC;AAC3D,IAAA,MAAM,KAAA,GAAa,SAAS,OAAO,CAAA;AACnC,IAAA,IAAI,CAAC,kBAAA,EAAoB,KAAA,EAAO,kBAAA,CAAmB,KAAA,GAAQ,KAAA;AAC3D,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,YAAY,kBAAkB,CAAA;AAChF,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,WAAA,EAAa,MAAA;AAAA,IACb;AAAA,GACJ;AACJ;AAEO,SAAS,yBAAyB,OAAA,EAAqC;AAC1E,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAqD,OAAO,OAAA,KAAiB;AACvG,IAAA,MAAM,+BAAA,GAAmE,WAAW,EAAC;AACrF,IAAA,MAAM,KAAA,GAAa,SAAS,OAAO,CAAA;AACnC,IAAA,IAAI,CAAC,+BAAA,EAAiC,KAAA,EAAO,+BAAA,CAAgC,KAAA,GAAQ,KAAA;AACrF,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,yBAAyB,+BAA+B,CAAA;AAC1G,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,wBAAA,EAA0B,MAAA;AAAA,IAC1B;AAAA,GACJ;AACJ;AAEO,SAAS,cAAc,OAAA,EAAqC;AAC/D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAA0C,OAAO,OAAA,KAAiB;AAC5F,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,cAAc,OAAO,CAAA;AACvE,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,aAAA,EAAe,MAAA;AAAA,IACf;AAAA,GACJ;AACJ;AAEO,SAAS,eAAe,OAAA,EAAqC;AAChE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAA2C,OAAO,OAAA,KAAiB;AAC7F,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,eAAe,OAAO,CAAA;AACxE,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,cAAA,EAAgB,MAAA;AAAA,IAChB;AAAA,GACJ;AACJ;AAEO,SAAS,OAAO,OAAA,EAAqC;AACxD,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,eAAe,YAAY;AACrD,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,MAAA,EAAO;AAEzD,IAAA,gBAAA,EAAiB;AACjB,IAAA,sBAAA,EAAuB;AAEvB,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,MAAA,EAAQ,MAAA;AAAA,IACR;AAAA,GACJ;AACJ;AAEO,SAAS,qBAAqB,OAAA,EAAqC;AACtE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAyB,OAAO,OAAA,KAAiB;AAC3E,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,qBAAqB,OAAO,CAAA;AAC9E,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,oBAAA,EAAsB,MAAA;AAAA,IACtB;AAAA,GACJ;AACJ;AAEO,SAAS,kBAAkB,OAAA,EAAqC;AACnE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAyB,OAAO,OAAA,KAAiB;AAC3E,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,kBAAkB,OAAO,CAAA;AAC3E,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,iBAAA,EAAmB,MAAA;AAAA,IACnB;AAAA,GACJ;AACJ;AAEO,SAAS,YAAY,OAAA,EAAqC;AAC7D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAyB,OAAO,OAAA,KAAiB;AAC3E,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,YAAY,OAAO,CAAA;AACrE,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,WAAA,EAAa,MAAA;AAAA,IACb;AAAA,GACJ;AACJ;;;AC/LO,SAAS,UAAU,OAAA,EAAmD;AACzE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAA4D,OAAO,OAAA,KAAuC;AACpI,IAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,cAAA,CAAe,UAAU,OAAQ,CAAA;AAChE,IAAA,MAAM,mBAAmB,QAAQ,CAAA;AACjC,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,MAAA,EAAQ,SAAA,EAAU;AAClD;AAQO,SAAS,WAAW,OAAA,EAAqC;AAC5D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAgC,MAAA,CAAO,GAAA,CAAI,eAAe,OAAQ,CAAA;AAAA,IACzE;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,MAAA,EAAQ,UAAA,EAAY,QAAQ,SAAA,EAAU;AACpE;AAQO,SAAS,sBAAsB,OAAA,EAAqC;AACvE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAA8C,MAAA,CAAO,GAAA,CAAI,sBAAsB,OAAQ,CAAA;AAAA,IAC9F;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,qBAAA,EAAuB,MAAA,EAAQ,SAAA,EAAU;AAC9D;AASO,SAAS,qBAAqB,OAAA,EAAmD;AACpF,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAA6C;AAChD,MAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,GAAA,CAAI,qBAAqB,OAAQ,CAAA;AAChE,MAAA,MAAM,mBAAmB,QAAQ,CAAA;AACjC,MAAA,OAAO,QAAA;AAAA,IACX,CAAA;AAAA,IACA;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,oBAAA,EAAsB,MAAA,EAAQ,SAAA,EAAU;AAC7D;AAQO,SAAS,aAAa,OAAA,EAAqD;AAC9E,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAa,MAAM,MAAA,CAAO,GAAA,CAAI,UAAU,OAAO,CAAA;AAAA,IACtD;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,MAAA,EAAQ,YAAA,EAAc,QAAQ,SAAA,EAAU;AACxE;AAQO,SAAS,kBAAkB,OAAA,EAAqC;AACnE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAoD;AACvD,MAAA,MAAM,EAAE,QAAA,EAAU,GAAG,IAAA,EAAK,GAAI,OAAA;AAC9B,MAAA,OAAO,OAAO,GAAA,CAAI,cAAA,CAAe,IAAA,EAAM,EAAE,UAAU,CAAA;AAAA,IACvD,CAAA;AAAA,IACA;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,cAAA,EAAgB,MAAA,EAAQ,iBAAA,EAAmB,QAAQ,SAAA,EAAU;AAClF;AAQO,SAAS,iBAAiB,OAAA,EAAqC;AAClE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAA8D,OAAO,OAAA,KAAY;AAC3G,IAAA,MAAM,EAAE,UAAU,GAAG,IAAA,KAAS,OAAA,IAAW,EAAE,OAAO,EAAA,EAAG;AACrD,IAAA,OAAO,MAAA,CAAO,IAAI,gBAAA,CAAiB,IAAA,EAAM,YAAY,IAAA,GAAO,EAAE,QAAA,EAAS,GAAI,MAAS,CAAA;AAAA,EACxF,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO,EAAE,MAAA,EAAQ,gBAAA,EAAkB,MAAA,EAAQ,SAAA,EAAU;AACzD;AAQO,SAAS,mBAAmB,OAAA,EAAqC;AACpE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAgE,OAAO,OAAA,KAAY;AAC7G,IAAA,MAAM,EAAE,QAAA,EAAU,GAAG,IAAA,EAAK,GAAI,WAAW,EAAE,KAAA,EAAO,EAAA,EAAI,IAAA,EAAM,EAAA,EAAG;AAC/D,IAAA,OAAO,MAAA,CAAO,IAAI,kBAAA,CAAmB,IAAA,EAAM,YAAY,IAAA,GAAO,EAAE,QAAA,EAAS,GAAI,MAAS,CAAA;AAAA,EAC1F,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO,EAAE,MAAA,EAAQ,kBAAA,EAAoB,MAAA,EAAQ,SAAA,EAAU;AAC3D;AAQO,SAAS,gBAAgB,OAAA,EAAqC;AACjE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAgD,OAAO,OAAA,KAAY,MAAA,CAAO,GAAA,CAAI,eAAA,CAAgB,OAAO,CAAA,EAAG,OAAO,CAAA;AAE7I,EAAA,OAAO,EAAE,MAAA,EAAQ,eAAA,EAAiB,MAAA,EAAQ,SAAA,EAAU;AACxD;AAQO,SAAS,iBAAiB,OAAA,EAAqC;AAClE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAsC,MAAA,CAAO,GAAA,CAAI,iBAAiB,OAAQ,CAAA;AAAA,IACjF;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,gBAAA,EAAkB,MAAA,EAAQ,SAAA,EAAU;AACzD;AAQO,SAAS,YAAY,OAAA,EAAqC;AAC7D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAyD,OAAO,OAAA,KAAkD;AAC5I,IAAA,MAAM,EAAE,QAAA,EAAU,GAAG,IAAA,EAAK,GAAI,OAAA;AAC9B,IAAA,OAAO,OAAO,GAAA,CAAI,WAAA,CAAY,IAAA,EAAM,EAAE,UAAU,CAAA;AAAA,EACpD,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,EAAQ,SAAA,EAAU;AACpD;AAOO,SAAS,cAAc,OAAA,EAAqC;AAC/D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAoD;AACvD,MAAA,MAAM,EAAE,QAAA,EAAU,GAAG,IAAA,EAAK,GAAI,OAAA;AAC9B,MAAA,OAAO,OAAO,GAAA,CAAI,aAAA,CAAc,IAAA,EAAM,EAAE,UAAU,CAAA;AAAA,IACtD,CAAA;AAAA,IACA;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,aAAA,EAAe,MAAA,EAAQ,SAAA,EAAU;AACtD;AAOO,SAAS,sBAAsB,OAAA,EAAwD;AAC1F,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAA4D;AAC/D,MAAA,MAAM,EAAE,QAAA,EAAU,GAAG,IAAA,EAAK,GAAI,OAAA;AAC9B,MAAA,OAAO,OAAO,GAAA,CAAI,qBAAA,CAAsB,IAAA,EAAM,EAAE,UAAU,CAAA;AAAA,IAC9D,CAAA;AAAA,IACA;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,qBAAA,EAAuB,MAAA,EAAQ,SAAA,EAAU;AAC9D;AAOO,SAAS,UAAU,OAAA,EAAqC;AAC3D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAuD,OAAO,OAAA,KAAgD;AACxI,IAAA,MAAM,EAAE,QAAA,EAAU,GAAG,IAAA,EAAK,GAAI,OAAA;AAC9B,IAAA,OAAO,OAAO,GAAA,CAAI,MAAA,CAAO,IAAA,EAAM,EAAE,UAAU,CAAA;AAAA,EAC/C,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,SAAA,EAAW,QAAQ,SAAA,EAAU;AAClE;AAQO,SAAS,wBAAwB,OAAA,EAAqC;AACzE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAY,MAAA,CAAO,GAAA,CAAI,wBAAwB,OAAO,CAAA;AAAA,IAC7D;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,uBAAA,EAAyB,MAAA,EAAQ,SAAA,EAAU;AAChE;AAQO,SAAS,uBAAuB,OAAA,EAAqC;AACxE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAoC,MAAA,CAAO,GAAA,CAAI,uBAAuB,OAAQ,CAAA;AAAA,IACrF;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,sBAAA,EAAwB,MAAA,EAAQ,SAAA,EAAU;AAC/D;AAQO,SAAS,oBAAoB,OAAA,EAAqC;AACrE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAgD,OAAO,OAAA,KAAY,MAAA,CAAO,GAAA,CAAI,mBAAA,CAAoB,OAAO,CAAA,EAAG,OAAO,CAAA;AAEjJ,EAAA,OAAO,EAAE,MAAA,EAAQ,mBAAA,EAAqB,MAAA,EAAQ,SAAA,EAAU;AAC5D;AAQO,SAAS,mBAAmB,OAAA,EAAqC;AACpE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAoC,MAAA,CAAO,GAAA,CAAI,mBAAmB,OAAQ,CAAA;AAAA,IACjF;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,kBAAA,EAAoB,MAAA,EAAQ,SAAA,EAAU;AAC3D;AAQO,SAAS,wBAAwB,OAAA,EAAqC;AACzE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAY,MAAA,CAAO,GAAA,CAAI,wBAAwB,OAAO,CAAA;AAAA,IAC7D;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,uBAAA,EAAyB,MAAA,EAAQ,SAAA,EAAU;AAChE;AAQO,SAAS,yBAAyB,OAAA,EAAqC;AAC1E,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAuE;AAC1E,MAAA,MAAM,EAAE,kBAAA,EAAoB,QAAA,EAAS,GAAI,OAAA;AACzC,MAAA,OAAO,OAAO,GAAA,CAAI,wBAAA,CAAyB,kBAAA,EAAoB,EAAE,UAAU,CAAA;AAAA,IAC/E,CAAA;AAAA,IACA;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,wBAAA,EAA0B,MAAA,EAAQ,SAAA,EAAU;AACjE;AAQO,SAAS,oBAAoB,OAAA,EAAqC;AACrE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAyC,MAAA,CAAO,GAAA,CAAI,oBAAoB,OAAQ,CAAA;AAAA,IACvF;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,mBAAA,EAAqB,MAAA,EAAQ,SAAA,EAAU;AAC5D;AASO,SAAS,mBAAmB,OAAA,EAAmD;AAClF,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAA6D,OAAO,OAAA,KAAwC;AACtI,IAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,GAAA,CAAI,mBAAmB,OAAQ,CAAA;AAC9D,IAAA,MAAM,mBAAmB,QAAQ,CAAA;AACjC,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO,EAAE,MAAA,EAAQ,kBAAA,EAAoB,MAAA,EAAQ,SAAA,EAAU;AAC3D;;;AC7VO,SAAS,oBAAoB,OAAA,EAAqC;AACrE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAY,MAAA,CAAO,QAAA,CAAS,YAAY,OAAO,CAAA;AAAA,IACtD;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,EAAQ,mBAAA,EAAqB,QAAQ,SAAA,EAAU;AACjF;AAQO,SAAS,yBAAyB,OAAA,EAAqC;AAC1E,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAY,MAAA,CAAO,QAAA,CAAS,iBAAiB,OAAO,CAAA;AAAA,IAC3D;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,gBAAA,EAAkB,MAAA,EAAQ,wBAAA,EAA0B,QAAQ,SAAA,EAAU;AAC3F;AAQO,SAAS,oBAAoB,OAAA,EAAqC;AACrE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAY,MAAA,CAAO,QAAA,CAAS,YAAY,OAAO,CAAA;AAAA,IACtD;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,EAAQ,mBAAA,EAAqB,QAAQ,SAAA,EAAU;AACjF;AAQO,SAAS,sBAAsB,OAAA,EAAqC;AACvE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAA2C,MAAA,CAAO,QAAA,CAAS,cAAc,OAAQ,CAAA;AAAA,IACxF;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,aAAA,EAAe,MAAA,EAAQ,qBAAA,EAAuB,QAAQ,SAAA,EAAU;AACrF;AAQO,SAAS,4BAA4B,OAAA,EAAqC;AAC7E,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA;AAAA,IAC1B,OAAO,OAAA,KAAY,MAAA,CAAO,QAAA,CAAS,mBAAA,CAAoB,SAAS,YAAY,CAAA;AAAA,IAC5E;AAAA,GACJ;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,mBAAA,EAAqB,MAAA,EAAQ,2BAAA,EAA6B,QAAQ,SAAA,EAAU;AACjG;;;AChFO,SAAS,kBAAkB,OAAA,EAA8E;AAC5G,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAe,OAAO,OAAA,KAAoD;AACpG,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,cAAA,CAAe,kBAAkB,OAAO,CAAA;AAC3E,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,iBAAA,EAAmB,MAAA;AAAA,IACnB;AAAA,GACJ;AACJ;;;ACVO,SAAS,cAAc,OAAA,EAAqC;AAC/D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,eAAe,YAAY;AACrD,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,GAAA,CAAI,aAAA,EAAc;AACrD,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,UAAA,EAAY,MAAA;AAAA,IACZ,aAAA,EAAe,MAAA;AAAA,IACf;AAAA,GACJ;AACJ;AAEO,SAAS,eAAe,OAAA,EAAqC;AAChE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAqC,OAAO,OAAA,KAAiB;AACvF,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,GAAA,CAAI,eAAe,OAAO,CAAA;AAC7D,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,WAAA,EAAa,MAAA;AAAA,IACb,cAAA,EAAgB,MAAA;AAAA,IAChB;AAAA,GACJ;AACJ;AAEO,SAAS,YAAY,OAAA,EAAqC;AAC7D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAqC,OAAO,OAAA,KAAiB;AACvF,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,GAAA,CAAI,YAAY,OAAO,CAAA;AAC1D,IAAA,MAAM,mBAAmB,QAAQ,CAAA;AACjC,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,QAAA,EAAU,MAAA;AAAA,IACV,WAAA,EAAa,MAAA;AAAA,IACb;AAAA,GACJ;AACJ;;;ACzCA,IAAI,iBAAA,GAAyC,IAAA;AAE7C,eAAe,WAAA,GAAc;AACzB,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACpB,IAAA,iBAAA,GAAoB,MAAA,CAAO,IAAA,CAAK,EAAA,EAAG,CAAE,QAAQ,MAAM;AAC/C,MAAA,iBAAA,GAAoB,IAAA;AAAA,IACxB,CAAC,CAAA;AAAA,EACL;AACA,EAAA,OAAO,iBAAA;AACX;AAEO,SAAS,GAAG,OAAA,EAAqC;AACpD,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,eAAe,YAAY;AACrD,IAAA,MAAM,QAAA,GAAgB,MAAM,WAAA,EAAY;AACxC,IAAAA,QAAA,CAAY,WAAW,QAAQ,CAAA;AAC/B,IAAA,OAAO,QAAA,EAAU,IAAA;AAAA,EACrB,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,EAAA,EAAI,MAAA;AAAA,IACJ;AAAA,GACJ;AACJ;AAEO,SAAS,QAAQ,OAAA,EAAqC;AACzD,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAe,OAAO,OAAA,KAAiB;AACjE,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,IAAA,CAAK,QAAQ,OAAO,CAAA;AACvD,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,OAAA,EAAS,MAAA;AAAA,IACT;AAAA,GACJ;AACJ;AAEO,SAAS,cAAc,OAAA,EAAqC;AAC/D,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAAe,OAAO,OAAA,KAAiB;AACjE,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,IAAA,CAAK,cAAc,OAAO,CAAA;AAC7D,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,aAAA,EAAe,MAAA;AAAA,IACf,aAAA,EAAe,MAAA;AAAA,IACf;AAAA,GACJ;AACJ;AAKO,SAAS,eAAe,OAAA,EAAqC;AAChE,EAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,cAAA,CAA2C,OAAO,OAAA,KAAiB;AAC7F,IAAA,MAAM,QAAA,GAAgB,MAAM,MAAA,CAAO,IAAA,CAAK,eAAe,OAAO,CAAA;AAC9D,IAAA,OAAO,QAAA;AAAA,EACX,GAAG,OAAO,CAAA;AAEV,EAAA,OAAO;AAAA,IACH,MAAA;AAAA,IACA,cAAA,EAAgB,MAAA;AAAA,IAChB;AAAA,GACJ;AACJ;;;ACAO,IAAM,OAAA,GAAU;AAAA,EACnB,QAAA;AAAA,EACA,KAAA;AAAA,EACA,aAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA,oBAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EACA,wBAAA;AAAA,EACA,iBAAA;AAAA,EACA,WAAA;AAAA,EACA,cAAA;AAAA,EACA,EAAA;AAAA,EACA,OAAA;AAAA,EACA,aAAA,EAAe,aAAA;AAAA,EACf,GAAA,EAAK;AAAA,IACD,SAAA;AAAA,IACA,OAAA,EAAS,UAAA;AAAA,IACT,qBAAA;AAAA,IACA,oBAAA;AAAA,IACA,SAAA,EAAW,YAAA;AAAA,IACX,cAAA,EAAgB,iBAAA;AAAA,IAChB,gBAAA;AAAA,IACA,kBAAA;AAAA,IACA,eAAA;AAAA,IACA,gBAAA;AAAA,IACA,WAAA;AAAA,IACA,aAAA;AAAA,IACA,qBAAA;AAAA,IACA,MAAA,EAAQ,SAAA;AAAA,IACR,SAAA;AAAA,IACA,uBAAA;AAAA,IACA,sBAAA;AAAA,IACA,mBAAA;AAAA,IACA,kBAAA;AAAA,IACA,uBAAA;AAAA,IACA,wBAAA;AAAA,IACA,mBAAA;AAAA,IACA;AAAA,GACJ;AAAA,EACA,QAAA,EAAU;AAAA,IACN,WAAA,EAAa,mBAAA;AAAA,IACb,gBAAA,EAAkB,wBAAA;AAAA,IAClB,WAAA,EAAa,mBAAA;AAAA,IACb,aAAA,EAAe,qBAAA;AAAA,IACf,mBAAA,EAAqB;AAAA,GACzB;AAAA,EACA,cAAA,EAAgB,iBAAA;AAAA,EAChB,GAAA,EAAK;AAAA,IACD,UAAA,EAAY,aAAA;AAAA,IACZ,WAAA,EAAa,cAAA;AAAA,IACb,QAAA,EAAU;AAAA,GACd;AAAA,EACA,OAAA,EAAS;AAAA,IACL,eAAA;AAAA,IACA,cAAA;AAAA,IACA,kBAAA,EAAoB,mBAAA;AAAA,IACpB,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,eAAA;AAAA,IACA,iBAAA;AAAA,IACA,oBAAA;AAAA,IACA,oBAAA;AAAA,IACA,eAAA;AAAA,IACA,iBAAA;AAAA,IACA,mBAAA;AAAA,IACA,UAAU,OAA6B;AAAA,MACnC,cAAA,EAAgB,MAAM,OAAA,CAAQ,cAAA,EAAgB,CAAA;AAAA,MAC9C,oBAAA;AAAA,MACA;AAAA,KACJ,CAAA;AAAA,IACA,oBAAA,EAAsB,MAClB,oBAAA,CAA6B;AAAA,MACzB,cAAA,EAAgB,MAAM,OAAA,CAAQ,cAAA,EAAgB,CAAA;AAAA,MAC9C,oBAAA;AAAA,MACA;AAAA,KACH,CAAA;AAAA,IACL,sBAAA,EAAwB,MACpB,sBAAA,CAA+B;AAAA,MAC3B,cAAA,EAAgB,MAAM,OAAA,CAAQ,cAAA,EAAgB,CAAA;AAAA,MAC9C,oBAAA;AAAA,MACA;AAAA,KACH,CAAA;AAAA,IACL,cAAA,EAAgB,MACZ,cAAA,CAAe;AAAA,MACX,cAAA,EAAgB,MAAM,OAAA,CAAQ,cAAA,EAAgB,CAAA;AAAA,MAC9C,oBAAA;AAAA,MACA;AAAA,KACH;AAAA;AAEb;;;ACtJO,SAAS,qBAAqB,KAAA,EAAoD;AACrF,EAAA,MAAM,UAAA,GAAa,MAAM,aAAA,EAAc;AACvC,EAAA,MAAM,QAAA,GAAW,MAAM,cAAA,EAAe;AACtC,EAAA,MAAM,UAAA,GAAa,MAAM,eAAA,EAAgB;AAEzC,EAAA,IAAI,cAAc,QAAA,EAAU;AACxB,IAAA,OAAO,SAAA;AAAA,EACX;AAEA,EAAA,IAAI,UAAA,IAAc,CAAC,QAAA,EAAU;AACzB,IAAA,KAAA,CAAM,cAAA,EAAe;AACrB,IAAA,OAAO,gBAAA;AAAA,EACX;AAEA,EAAA,IAAI,QAAA,IAAY,CAAC,UAAA,IAAc,CAAC,UAAA,EAAY;AACxC,IAAA,KAAA,CAAM,qBAAA,EAAsB;AAC5B,IAAA,OAAO,qBAAA;AAAA,EACX;AAEA,EAAA,OAAO,MAAA;AACX;;;ACRO,SAAS,uBAAuB,KAAA,EAAqD;AACxF,EAAA,MAAM,EAAE,QAAA,EAAU,iBAAA,EAAmB,OAAA,EAAS,MAAA,EAAQ,UAAU,WAAA,GAAc,KAAA,EAAO,gBAAA,GAAmB,KAAA,EAAM,GAAI,KAAA;AAElH,EAAA,IAAI,WAAA,EAAa;AACb,IAAA,OAAO,EAAE,MAAM,OAAA,EAAQ;AAAA,EAC3B;AAEA,EAAA,IAAI,mBAAA,CAAoB,OAAO,CAAA,EAAG;AAC9B,IAAA,IAAI,aAAa,QAAA,EAAU;AACvB,MAAA,OAAO,EAAE,MAAM,OAAA,EAAQ;AAAA,IAC3B;AACA,IAAA,OAAO,EAAE,MAAM,cAAA,EAAe;AAAA,EAClC;AAEA,EAAA,IAAI,gBAAA,EAAkB;AAClB,IAAA,OAAO,EAAE,MAAM,aAAA,EAAc;AAAA,EACjC;AAEA,EAAA,MAAM,aAAA,GAAgB,qBAAqB,OAAO,CAAA;AAElD,EAAA,IAAI,CAAC,aAAA,EAAe;AAChB,IAAA,IAAI,iBAAA,CAAkB,QAAQ,CAAA,EAAG;AAC7B,MAAA,OAAO,EAAE,MAAM,OAAA,EAAQ;AAAA,IAC3B;AACA,IAAA,OAAO,EAAE,MAAM,gBAAA,EAAiB;AAAA,EACpC;AAEA,EAAA,IAAI,MAAA,EAAQ;AACR,IAAA,IAAI,MAAA,CAAO,kBAAkB,KAAA,EAAO;AAChC,MAAA,OAAO,EAAE,IAAA,EAAM,iBAAA,EAAmB,IAAA,EAAM,cAAA,EAAe;AAAA,IAC3D;AACA,IAAA,IAAI,CAAC,OAAO,KAAA,EAAO;AACf,MAAA,OAAO,EAAE,IAAA,EAAM,iBAAA,EAAmB,IAAA,EAAM,YAAA,EAAa;AAAA,IACzD;AACA,IAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AAClB,MAAA,OAAO,EAAE,IAAA,EAAM,iBAAA,EAAmB,IAAA,EAAM,eAAA,EAAgB;AAAA,IAC5D;AAAA,EACJ;AAEA,EAAA,OAAO,EAAE,MAAM,OAAA,EAAQ;AAC3B","file":"chunk-PKDLBVD7.js","sourcesContent":["/**\n * Shared session predicates for client and admin portals.\n * Apps supply lane-specific refresh hints (cookie name / timing cookie).\n */\n\nexport type SessionContractInput = {\n    /** In-memory access JWT present. */\n    hasAccessToken: () => boolean\n    /** Access JWT expired or within proactive refresh buffer. */\n    isAccessTokenExpired: () => boolean\n    /** Refresh session still valid (cookie / timing hint). */\n    hasRefreshSession: () => boolean\n    /** MFA gate: temp JWT + pending context. */\n    isMfaPending?: () => boolean\n}\n\nexport function hasValidAccess(input: SessionContractInput): boolean {\n    return input.hasAccessToken() && !input.isAccessTokenExpired()\n}\n\nexport function isFullyAuthenticated(input: SessionContractInput): boolean {\n    if (input.isMfaPending?.()) {\n        return false\n    }\n    if (hasValidAccess(input)) {\n        return true\n    }\n    return input.hasRefreshSession()\n}\n\nexport function isMfaPendingSession(input: SessionContractInput): boolean {\n    return Boolean(input.isMfaPending?.())\n}\n\nexport function hasAuthenticatedAccess(input: SessionContractInput): boolean {\n    if (input.isMfaPending?.()) {\n        return Boolean(input.hasAccessToken())\n    }\n    return hasValidAccess(input)\n}\n","import { setPortal, setSubscriptionType, setAccessToken, setRefreshToken, setLoggedInDetails } from './auth-utils'\nimport { setConfig } from '../utils/hub-context'\nimport { actions as userActions } from '../../state/crm/use-user'\n\nfunction unwrapLoginBody(response: any): Record<string, any> {\n    return (response?.data ?? response ?? {}) as Record<string, any>\n}\n\n/**\n * Persists a full authenticated session (access + refresh tokens, portal, login details).\n * Use after successful login or MFA verify when `twoFactorRequired` is false.\n */\nexport async function completeLoginSession(response: any): Promise<any> {\n    const body = unwrapLoginBody(response)\n    const tokenData: any = body?.tokenData || {}\n    const loggedInDetails: any = body?.loggedInDetails || {}\n    const currentPortal: any = loggedInDetails?.currentPortal || {}\n    const currentPortalId: any = currentPortal?.portalId || null\n    const subscriptionType = loggedInDetails?.subscriptionType || 'BASIC'\n\n    const token = tokenData?.token\n    const refreshToken = tokenData?.refreshToken\n    const expiresIn = tokenData?.expiresIn\n    const refreshExpiresAt = tokenData?.refreshExpiresAt\n    const rExpiresIn = tokenData?.refreshExpiresIn\n\n    setPortal(currentPortal)\n    setSubscriptionType(subscriptionType)\n    await setAccessToken(token, expiresIn)\n    await setRefreshToken(refreshToken, refreshExpiresAt ?? rExpiresIn)\n    await setLoggedInDetails(body)\n    userActions.setProfile(response?.data != null ? response : { data: body })\n\n    setConfig.setDevPortalId(currentPortalId)\n\n    return response\n}\n\n/**\n * Applies login/MFA-step response token rules:\n * - MFA pending: temp access JWT only (no refresh until verify completes)\n * - Full session: {@link completeLoginSession}\n */\nexport async function applyLoginResponse(response: any): Promise<any> {\n    const data = unwrapLoginBody(response)\n    if (data?.twoFactorRequired === true) {\n        const tokenData: any = data?.tokenData || {}\n        const token = tokenData?.token\n        const expiresIn = tokenData?.expiresIn\n        if (token) {\n            await setAccessToken(token, expiresIn)\n        }\n        return response\n    }\n    return completeLoginSession(response)\n}\n","import { Client } from '../../../core/http/client-assembler'\nimport type {\n    LoginPayload,\n    LoginResponseData,\n    MutationOptions,\n    PreLoginPayload,\n    ForgetPasswordPayload,\n    VerifyEmailPayload,\n    ResetPasswordVerifyTokenPayload,\n    ResetPasswordPayload\n} from '../../../core/types'\nimport { createMutation } from '../../../core/mutation/createMutation'\nimport { applyLoginResponse } from '../../../core/http/login-session'\nimport { getParam } from '../../../core/utils/param'\nimport { clearClientAuthCookies } from '../../../core/utils/cookie'\nimport { clearAccessToken } from '../../../core/http/token-store'\n\nexport function preLogin(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<PreLoginPayload, any>(async (payload: any) => {\n        const response: any = await Client.authentication.preLogin(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        preLogin: mutate,\n        isLoading\n    }\n}\n\n/**\n * Password login for the client portal.\n *\n * **API:** `POST /api/auth/login?hubId={hubId}`\n * **Session:** When `twoFactorRequired` is true, stores only the temp access JWT (no refresh until MFA completes).\n */\nexport function login(options?: MutationOptions<LoginResponseData, any>) {\n    const { mutate, isLoading } = createMutation<LoginPayload, LoginResponseData>(async (payload: any) => {\n        const response = (await Client.authentication.login(payload)) as LoginResponseData\n        await applyLoginResponse(response)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        login: mutate,\n        isLoading\n    }\n}\n\nexport interface ClientSessionPayload {\n    accessToken: string\n    refreshToken?: string\n}\n\n/**\n * Exchange a management/deep-link token for a portal client session.\n *\n * **API:** `POST /api/auth/client-session`\n * **Auth:** Bearer access token header; optional refresh token in body.\n */\nexport interface AuthHandoffPayload {\n    code: string\n    hubId: number\n}\n\n/**\n * Redeem a one-time admin portal handoff code for a full client session.\n *\n * **API:** `POST /api/auth/handoff?hubId={hubId}`\n */\nexport function handoff(options?: MutationOptions<LoginResponseData, any>) {\n    const { mutate, isLoading } = createMutation<AuthHandoffPayload, LoginResponseData>(async (payload) => {\n        const response = (await Client.authentication.handoff(payload!)) as LoginResponseData\n        await applyLoginResponse(response)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        handoff: mutate,\n        isLoading\n    }\n}\n\nexport function clientSession(options?: MutationOptions<LoginResponseData, any>) {\n    const { mutate, isLoading } = createMutation<ClientSessionPayload, LoginResponseData>(async (payload?: ClientSessionPayload) => {\n        const response = (await Client.authentication.clientSession(payload!)) as LoginResponseData\n        await applyLoginResponse(response)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        clientSession: mutate,\n        isLoading\n    }\n}\n\nexport function register(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<any, any>(async (payload: any) => {\n        const response: any = await Client.authentication.register(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        register: mutate,\n        isLoading\n    }\n}\n\nexport function verifyEmail(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<VerifyEmailPayload, any>(async (payload: any) => {\n        const verifyEmailPayload: VerifyEmailPayload = payload || {}\n        const token: any = getParam('token')\n        if (!verifyEmailPayload?.token) verifyEmailPayload.token = token\n        const response: any = await Client.authentication.verifyEmail(verifyEmailPayload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        verifyEmail: mutate,\n        isLoading\n    }\n}\n\nexport function resetPasswordVerifyToken(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<ResetPasswordVerifyTokenPayload, any>(async (payload: any) => {\n        const resetPasswordVerifyTokenPayload: ResetPasswordVerifyTokenPayload = payload || {}\n        const token: any = getParam('token')\n        if (!resetPasswordVerifyTokenPayload?.token) resetPasswordVerifyTokenPayload.token = token\n        const response: any = await Client.authentication.resetPasswordVerifyToken(resetPasswordVerifyTokenPayload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        resetPasswordVerifyToken: mutate,\n        isLoading\n    }\n}\n\nexport function resetPassword(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<ResetPasswordPayload, any>(async (payload: any) => {\n        const response: any = await Client.authentication.resetPassword(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        resetPassword: mutate,\n        isLoading\n    }\n}\n\nexport function forgetPassword(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<ForgetPasswordPayload, any>(async (payload: any) => {\n        const response: any = await Client.authentication.forgetPassword(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        forgetPassword: mutate,\n        isLoading\n    }\n}\n\nexport function logout(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation(async () => {\n        const response: any = await Client.authentication.logout()\n\n        clearAccessToken()\n        clearClientAuthCookies()\n\n        return response\n    }, options)\n\n    return {\n        mutate,\n        logout: mutate,\n        isLoading\n    }\n}\n\nexport function registerExistingUser(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<any, any>(async (payload: any) => {\n        const response: any = await Client.authentication.registerExistingUser(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        registerExistingUser: mutate,\n        isLoading\n    }\n}\n\nexport function verifyEmailResend(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<any, any>(async (payload: any) => {\n        const response: any = await Client.authentication.verifyEmailResend(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        verifyEmailResend: mutate,\n        isLoading\n    }\n}\n\nexport function resendEmail(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<any, any>(async (payload: any) => {\n        const response: any = await Client.authentication.resendEmail(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        resendEmail: mutate,\n        isLoading\n    }\n}\n","import { Client } from '../../../core/http/client-assembler'\nimport { createMutation } from '../../../core/mutation/createMutation'\nimport { applyLoginResponse } from '../../../core/http/login-session'\nimport type {\n    LoginResponseData,\n    MfaEnrollmentStatus,\n    MfaOtpSendRequest,\n    MfaPendingPasskeyOptionsRequest,\n    MfaPendingPasskeyVerifyRequest,\n    MfaPreferenceRequest,\n    MfaStatusQuery,\n    MutationOptions,\n    PasskeyLoginOptionsRequest,\n    PasskeyLoginVerifyRequest,\n    PhoneVerifyConfirmRequest,\n    PhoneVerifyStartRequest,\n    BackupCodesRegenerateRequest,\n    MfaBackupCodesResponse,\n    MfaOptOutRequest,\n    PhoneUnverifyRequest,\n    TotpDisableRequest,\n    TotpEnrollVerifyRequest,\n    TwoFaVerificationRequest,\n    WebAuthnVerifyRequest\n} from '../../../core/types'\n\n/**\n * Complete the MFA login step after `api.login()` returned `twoFactorRequired: true`.\n *\n * **API:** `POST /api/auth/verify-otp?hubId={hubId}`\n * **Auth:** Bearer temp JWT; body `{ token, otp, method }` (`EMAIL_OTP` | `SMS_OTP` | `TOTP` | `BACKUP_CODE`).\n * **Session:** On success persists full access + refresh tokens (skips when still MFA-pending).\n */\nexport function verifyOtp(options?: MutationOptions<LoginResponseData, any>) {\n    const { mutate, isLoading } = createMutation<TwoFaVerificationRequest, LoginResponseData>(async (payload?: TwoFaVerificationRequest) => {\n        const response = (await Client.authentication.verifyOtp(payload!)) as LoginResponseData\n        await applyLoginResponse(response)\n        return response\n    }, options)\n\n    return { mutate, verifyOtp: mutate, isLoading }\n}\n\n/**\n * Resend OTP or switch to email/SMS on the MFA login gate.\n *\n * **API:** `POST /api/auth/mfa/pending/otp/send`\n * **Auth:** Bearer temp JWT; body `{ token, method }`.\n */\nexport function sendMfaOtp(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<MfaOtpSendRequest, any>(\n        async (payload?: MfaOtpSendRequest) => Client.mfa.sendPendingOtp(payload!),\n        options\n    )\n\n    return { mutate, sendOtp: mutate, sendMfaOtp: mutate, isLoading }\n}\n\n/**\n * Start WebAuthn ceremony for passkey as second factor during login.\n *\n * **API:** `POST /api/auth/mfa/pending/passkey/authenticate/options`\n * **Auth:** Bearer temp JWT; body `{ token, portalId? }`.\n */\nexport function pendingPasskeyOptions(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<MfaPendingPasskeyOptionsRequest, any>(\n        async (payload?: MfaPendingPasskeyOptionsRequest) => Client.mfa.pendingPasskeyOptions(payload!),\n        options\n    )\n\n    return { mutate, pendingPasskeyOptions: mutate, isLoading }\n}\n\n/**\n * Finish passkey MFA-step and complete login when successful.\n *\n * **API:** `POST /api/auth/mfa/pending/passkey/authenticate/verify?hubId={hubId}`\n * **Auth:** Bearer temp JWT; body `{ token, challengeId, credential, portalId? }`.\n * **Session:** On success persists full access + refresh tokens.\n */\nexport function pendingPasskeyVerify(options?: MutationOptions<LoginResponseData, any>) {\n    const { mutate, isLoading } = createMutation<MfaPendingPasskeyVerifyRequest, LoginResponseData>(\n        async (payload?: MfaPendingPasskeyVerifyRequest) => {\n            const response = (await Client.mfa.pendingPasskeyVerify(payload!)) as LoginResponseData\n            await applyLoginResponse(response)\n            return response\n        },\n        options\n    )\n\n    return { mutate, pendingPasskeyVerify: mutate, isLoading }\n}\n\n/**\n * MFA enrollment and policy snapshot for the security settings UI.\n *\n * **API:** `GET /api/auth/mfa/status?portalId={portalId}`\n * **Auth:** Bearer access JWT (full session).\n */\nexport function getMfaStatus(options?: MutationOptions<MfaEnrollmentStatus, any>) {\n    const { mutate, isLoading } = createMutation<MfaStatusQuery | undefined, MfaEnrollmentStatus>(\n        async (payload) => (await Client.mfa.getStatus(payload)) as MfaEnrollmentStatus,\n        options\n    )\n\n    return { mutate, getStatus: mutate, getMfaStatus: mutate, isLoading }\n}\n\n/**\n * Set the user's default MFA method for this hub/portal scope.\n *\n * **API:** `PUT /api/auth/mfa/preferences?portalId={portalId}`\n * **Auth:** Bearer access JWT; body `{ defaultMethod }`.\n */\nexport function setMfaPreferences(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<MfaPreferenceRequest & MfaStatusQuery, any>(\n        async (payload?: MfaPreferenceRequest & MfaStatusQuery) => {\n            const { portalId, ...data } = payload!\n            return Client.mfa.setPreferences(data, { portalId })\n        },\n        options\n    )\n\n    return { mutate, setPreferences: mutate, setMfaPreferences: mutate, isLoading }\n}\n\n/**\n * Send OTP to verify the user's phone number (enables SMS OTP at login).\n *\n * **API:** `POST /api/auth/mfa/phone/verify/start?portalId={portalId}`\n * **Auth:** Bearer access JWT; body `{ phone }` (E.164, e.g. `+14155552671`).\n */\nexport function startPhoneVerify(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<PhoneVerifyStartRequest & MfaStatusQuery, any>(async (payload) => {\n        const { portalId, ...data } = payload ?? { phone: '' }\n        return Client.mfa.startPhoneVerify(data, portalId != null ? { portalId } : undefined)\n    }, options)\n\n    return { mutate, startPhoneVerify: mutate, isLoading }\n}\n\n/**\n * Confirm phone verification with the OTP code.\n *\n * **API:** `POST /api/auth/mfa/phone/verify/confirm?portalId={portalId}`\n * **Auth:** Bearer access JWT; body `{ phone, code }`.\n */\nexport function confirmPhoneVerify(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<PhoneVerifyConfirmRequest & MfaStatusQuery, any>(async (payload) => {\n        const { portalId, ...data } = payload ?? { phone: '', code: '' }\n        return Client.mfa.confirmPhoneVerify(data, portalId != null ? { portalId } : undefined)\n    }, options)\n\n    return { mutate, confirmPhoneVerify: mutate, isLoading }\n}\n\n/**\n * Start TOTP authenticator enrollment for the current portal scope.\n *\n * **API:** `POST /api/auth/mfa/totp/enroll/start?portalId={portalId}`\n * **Auth:** Bearer access JWT. Returns `secret`, `otpauthUri`, `scopeKey`.\n */\nexport function totpEnrollStart(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<MfaStatusQuery | undefined, any>(async (payload) => Client.mfa.totpEnrollStart(payload), options)\n\n    return { mutate, totpEnrollStart: mutate, isLoading }\n}\n\n/**\n * Confirm TOTP enrollment and receive one-time backup codes.\n *\n * **API:** `POST /api/auth/mfa/totp/enroll/verify?portalId={portalId}`\n * **Auth:** Bearer access JWT; body `{ code, portalId? }`.\n */\nexport function totpEnrollVerify(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<TotpEnrollVerifyRequest, any>(\n        async (payload?: TotpEnrollVerifyRequest) => Client.mfa.totpEnrollVerify(payload!),\n        options\n    )\n\n    return { mutate, totpEnrollVerify: mutate, isLoading }\n}\n\n/**\n * Disable TOTP for the current scope (requires current password).\n *\n * **API:** `POST /api/auth/mfa/totp/disable`\n * **Auth:** Bearer access JWT; body `{ password }`.\n */\nexport function totpDisable(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<TotpDisableRequest & MfaStatusQuery, any>(async (payload?: TotpDisableRequest & MfaStatusQuery) => {\n        const { portalId, ...data } = payload!\n        return Client.mfa.totpDisable(data, { portalId })\n    }, options)\n\n    return { mutate, totpDisable: mutate, isLoading }\n}\n\n/**\n * Remove SMS MFA by clearing phone verification for the current scope.\n *\n * **API:** `POST /api/auth/mfa/phone/unverify?portalId={portalId}`\n */\nexport function phoneUnverify(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<PhoneUnverifyRequest & MfaStatusQuery, any>(\n        async (payload?: PhoneUnverifyRequest & MfaStatusQuery) => {\n            const { portalId, ...data } = payload!\n            return Client.mfa.phoneUnverify(data, { portalId })\n        },\n        options\n    )\n\n    return { mutate, phoneUnverify: mutate, isLoading }\n}\n\n/**\n * Regenerate backup codes (password + TOTP step-up). Plaintext codes returned once.\n *\n * **API:** `POST /api/auth/mfa/backup-codes/regenerate?portalId={portalId}`\n */\nexport function backupCodesRegenerate(options?: MutationOptions<MfaBackupCodesResponse, any>) {\n    const { mutate, isLoading } = createMutation<BackupCodesRegenerateRequest & MfaStatusQuery, MfaBackupCodesResponse>(\n        async (payload?: BackupCodesRegenerateRequest & MfaStatusQuery) => {\n            const { portalId, ...data } = payload!\n            return Client.mfa.backupCodesRegenerate(data, { portalId })\n        },\n        options\n    )\n\n    return { mutate, backupCodesRegenerate: mutate, isLoading }\n}\n\n/**\n * Turn off all voluntary MFA enrollments when policy allows.\n *\n * **API:** `POST /api/auth/mfa/opt-out?portalId={portalId}`\n */\nexport function mfaOptOut(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<MfaOptOutRequest & MfaStatusQuery, any>(async (payload?: MfaOptOutRequest & MfaStatusQuery) => {\n        const { portalId, ...data } = payload!\n        return Client.mfa.optOut(data, { portalId })\n    }, options)\n\n    return { mutate, optOut: mutate, mfaOptOut: mutate, isLoading }\n}\n\n/**\n * Start passkey (WebAuthn) registration ceremony.\n *\n * **API:** `POST /api/auth/mfa/webauthn/register/options?portalId={portalId}`\n * **Auth:** Bearer access JWT.\n */\nexport function webauthnRegisterOptions(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<MfaStatusQuery | undefined, any>(\n        async (payload) => Client.mfa.webauthnRegisterOptions(payload),\n        options\n    )\n\n    return { mutate, webauthnRegisterOptions: mutate, isLoading }\n}\n\n/**\n * Complete passkey registration after `@simplewebauthn/browser` ceremony.\n *\n * **API:** `POST /api/auth/mfa/webauthn/register/verify?portalId={portalId}`\n * **Auth:** Bearer access JWT; body `{ challengeId, credential, nickname?, portalId? }`.\n */\nexport function webauthnRegisterVerify(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<WebAuthnVerifyRequest, any>(\n        async (payload?: WebAuthnVerifyRequest) => Client.mfa.webauthnRegisterVerify(payload!),\n        options\n    )\n\n    return { mutate, webauthnRegisterVerify: mutate, isLoading }\n}\n\n/**\n * Start passkey authentication ceremony while logged in (re-verify).\n *\n * **API:** `POST /api/auth/mfa/webauthn/authenticate/options?portalId={portalId}`\n * **Auth:** Bearer access JWT.\n */\nexport function webauthnAuthOptions(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<MfaStatusQuery | undefined, any>(async (payload) => Client.mfa.webauthnAuthOptions(payload), options)\n\n    return { mutate, webauthnAuthOptions: mutate, isLoading }\n}\n\n/**\n * Complete logged-in passkey re-verification.\n *\n * **API:** `POST /api/auth/mfa/webauthn/authenticate/verify?portalId={portalId}`\n * **Auth:** Bearer access JWT; body `{ challengeId, credential, portalId? }`.\n */\nexport function webauthnAuthVerify(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<WebAuthnVerifyRequest, any>(\n        async (payload?: WebAuthnVerifyRequest) => Client.mfa.webauthnAuthVerify(payload!),\n        options\n    )\n\n    return { mutate, webauthnAuthVerify: mutate, isLoading }\n}\n\n/**\n * List passkeys registered for the portal scope.\n *\n * **API:** `GET /api/auth/mfa/webauthn/credentials?portalId={portalId}`\n * **Auth:** Bearer access JWT.\n */\nexport function listWebauthnCredentials(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<MfaStatusQuery | undefined, any>(\n        async (payload) => Client.mfa.listWebauthnCredentials(payload),\n        options\n    )\n\n    return { mutate, listWebauthnCredentials: mutate, isLoading }\n}\n\n/**\n * Remove a registered passkey.\n *\n * **API:** `DELETE /api/auth/mfa/webauthn/credentials/{credentialRecordId}?portalId={portalId}`\n * **Auth:** Bearer access JWT.\n */\nexport function deleteWebauthnCredential(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<{ credentialRecordId: string | number } & MfaStatusQuery, any>(\n        async (payload?: { credentialRecordId: string | number } & MfaStatusQuery) => {\n            const { credentialRecordId, portalId } = payload!\n            return Client.mfa.deleteWebauthnCredential(credentialRecordId, { portalId })\n        },\n        options\n    )\n\n    return { mutate, deleteWebauthnCredential: mutate, isLoading }\n}\n\n/**\n * Start passwordless passkey login (when `PASSKEY_PRIMARY` is allowed).\n *\n * **API:** `POST /api/auth/passkey/login/options?hubId={hubId}`\n * **Auth:** Public; body `{ email, hubId?, portalId? }`.\n */\nexport function passkeyLoginOptions(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<PasskeyLoginOptionsRequest, any>(\n        async (payload?: PasskeyLoginOptionsRequest) => Client.mfa.passkeyLoginOptions(payload!),\n        options\n    )\n\n    return { mutate, passkeyLoginOptions: mutate, isLoading }\n}\n\n/**\n * Finish passwordless passkey login; may return `twoFactorRequired` if policy requires MFA.\n *\n * **API:** `POST /api/auth/passkey/login/verify?hubId={hubId}`\n * **Auth:** Public; body `{ challengeId, credential, portalId? }`.\n * **Session:** Applies MFA-aware token rules via {@link applyLoginResponse}.\n */\nexport function passkeyLoginVerify(options?: MutationOptions<LoginResponseData, any>) {\n    const { mutate, isLoading } = createMutation<PasskeyLoginVerifyRequest, LoginResponseData>(async (payload?: PasskeyLoginVerifyRequest) => {\n        const response = (await Client.mfa.passkeyLoginVerify(payload!)) as LoginResponseData\n        await applyLoginResponse(response)\n        return response\n    }, options)\n\n    return { mutate, passkeyLoginVerify: mutate, isLoading }\n}\n","import { Client } from '../../../core/http/client-assembler'\nimport { createMutation } from '../../../core/mutation/createMutation'\nimport type {\n    MutationOptions,\n    RevokeSecuritySessionPayload,\n    SecurityLoginActivityQuery,\n    SecurityOverviewQuery,\n    SecuritySessionsQuery\n} from '../../../core/types'\n\n/**\n * Security settings overview (password age, MFA methods, policy flags).\n * Use this for the Security page — not `api.me()` + `api.getMfaStatus()`.\n *\n * **API:** `GET /api/auth/security/overview?portalId={portalId}`\n * **Auth:** Bearer access JWT.\n */\nexport function getSecurityOverview(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<SecurityOverviewQuery | undefined, any>(\n        async (payload) => Client.security.getOverview(payload),\n        options\n    )\n\n    return { mutate, getOverview: mutate, getSecurityOverview: mutate, isLoading }\n}\n\n/**\n * Paginated login activity for the Security page.\n *\n * **API:** `GET /api/auth/security/login-activity?page=&limit=&sort=`\n * **Auth:** Bearer access JWT.\n */\nexport function getSecurityLoginActivity(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<SecurityLoginActivityQuery | undefined, any>(\n        async (payload) => Client.security.getLoginActivity(payload),\n        options\n    )\n\n    return { mutate, getLoginActivity: mutate, getSecurityLoginActivity: mutate, isLoading }\n}\n\n/**\n * List active sessions (refresh-token families) for the Security page.\n *\n * **API:** `GET /api/auth/security/sessions?currentFamilyId=`\n * **Auth:** Bearer access JWT; optional `refreshToken` in payload → `X-Refresh-Token` header to mark current session.\n */\nexport function getSecuritySessions(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<SecuritySessionsQuery | undefined, any>(\n        async (payload) => Client.security.getSessions(payload),\n        options\n    )\n\n    return { mutate, getSessions: mutate, getSecuritySessions: mutate, isLoading }\n}\n\n/**\n * Sign out a single device/session by `familyId`.\n *\n * **API:** `POST /api/auth/security/sessions/{familyId}/revoke`\n * **Auth:** Bearer access JWT; optional `refreshToken` in payload.\n */\nexport function revokeSecuritySession(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<RevokeSecuritySessionPayload, any>(\n        async (payload?: RevokeSecuritySessionPayload) => Client.security.revokeSession(payload!),\n        options\n    )\n\n    return { mutate, revokeSession: mutate, revokeSecuritySession: mutate, isLoading }\n}\n\n/**\n * Sign out all other devices; keeps the current session when `refreshToken` is provided.\n *\n * **API:** `POST /api/auth/security/sessions/revoke-others`\n * **Auth:** Bearer access JWT; optional `refreshToken` in payload → `X-Refresh-Token` header.\n */\nexport function revokeOtherSecuritySessions(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<{ refreshToken?: string } | undefined, any>(\n        async (payload) => Client.security.revokeOtherSessions(payload?.refreshToken),\n        options\n    )\n\n    return { mutate, revokeOtherSessions: mutate, revokeOtherSecuritySessions: mutate, isLoading }\n}\n","import { Client } from '../../../core/http/client-assembler'\nimport type { MutationOptions } from '../../../core/types'\nimport { createMutation } from '../../../core/mutation/createMutation'\n\nexport function getLoginBootstrap(options?: MutationOptions<any, { hubId?: number; portalId?: number } | void>) {\n    const { mutate, isLoading } = createMutation(async (payload?: { hubId?: number; portalId?: number }) => {\n        const response: any = await Client.authentication.getLoginBootstrap(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        getLoginBootstrap: mutate,\n        isLoading\n    }\n}\n","import { Client } from '../../../core/http/client-assembler'\nimport type { MutationOptions, PreLoginPayload } from '../../../core/types'\nimport { createMutation } from '../../../core/mutation/createMutation'\nimport { applyLoginResponse } from '../../../core/http/login-session'\n\nexport function getSsoDetails(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation(async () => {\n        const response: any = await Client.sso.getSsoDetails()\n        return response\n    }, options)\n\n    return {\n        mutate,\n        getDetails: mutate,\n        getSsoDetails: mutate,\n        isLoading\n    }\n}\n\nexport function generateSsoUrl(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<PreLoginPayload, any>(async (payload: any) => {\n        const response: any = await Client.sso.generateSsoUrl(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        generateUrl: mutate,\n        generateSsoUrl: mutate,\n        isLoading\n    }\n}\n\nexport function ssoCallback(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<PreLoginPayload, any>(async (payload: any) => {\n        const response: any = await Client.sso.ssoCallback(payload)\n        await applyLoginResponse(response)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        callback: mutate,\n        ssoCallback: mutate,\n        isLoading\n    }\n}\n","import { Client } from '../../../core/http/client-assembler'\nimport type { ChangePasswordPayload, MutationOptions } from '../../../core/types'\nimport { createMutation } from '../../../core/mutation/createMutation'\nimport { actions as userActions } from '../../../state/crm/use-user'\n\nlet meRequestInFlight: Promise<any> | null = null\n\nasync function fetchMeOnce() {\n    if (!meRequestInFlight) {\n        meRequestInFlight = Client.user.me().finally(() => {\n            meRequestInFlight = null\n        })\n    }\n    return meRequestInFlight\n}\n\nexport function me(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation(async () => {\n        const response: any = await fetchMeOnce()\n        userActions.setProfile(response)\n        return response?.data\n    }, options)\n\n    return {\n        mutate,\n        me: mutate,\n        isLoading\n    }\n}\n\nexport function profile(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation(async (paylaod: any) => {\n        const response: any = await Client.user.profile(paylaod)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        profile: mutate,\n        isLoading\n    }\n}\n\nexport function profileUpdate(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation(async (paylaod: any) => {\n        const response: any = await Client.user.profileUpdate(paylaod)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        updateProfile: mutate,\n        profileUpdate: mutate,\n        isLoading\n    }\n}\n\n/** @deprecated Use {@link profileUpdate} — same factory; 3.0 nested key is `updateProfile`. */\nexport const updateProfile = profileUpdate\n\nexport function changePassword(options?: MutationOptions<any, any>) {\n    const { mutate, isLoading } = createMutation<ChangePasswordPayload, any>(async (payload: any) => {\n        const response: any = await Client.user.changePassword(payload)\n        return response\n    }, options)\n\n    return {\n        mutate,\n        changePassword: mutate,\n        isLoading\n    }\n}\n","import {\n    preLogin,\n    login,\n    clientSession,\n    handoff,\n    register,\n    verifyEmail,\n    forgetPassword,\n    logout,\n    resetPasswordVerifyToken,\n    resetPassword,\n    registerExistingUser,\n    verifyEmailResend,\n    resendEmail\n} from '../features/auth/api/authentication'\nimport {\n    verifyOtp,\n    sendMfaOtp,\n    pendingPasskeyOptions,\n    pendingPasskeyVerify,\n    getMfaStatus,\n    setMfaPreferences,\n    startPhoneVerify,\n    confirmPhoneVerify,\n    totpEnrollStart,\n    totpEnrollVerify,\n    totpDisable,\n    phoneUnverify,\n    backupCodesRegenerate,\n    mfaOptOut,\n    webauthnRegisterOptions,\n    webauthnRegisterVerify,\n    webauthnAuthOptions,\n    webauthnAuthVerify,\n    listWebauthnCredentials,\n    deleteWebauthnCredential,\n    passkeyLoginOptions,\n    passkeyLoginVerify\n} from '../features/auth/api/mfa'\nimport {\n    getSecurityOverview,\n    getSecurityLoginActivity,\n    getSecuritySessions,\n    revokeSecuritySession,\n    revokeOtherSecuritySessions\n} from '../features/auth/api/security'\nimport { getLoginBootstrap } from '../features/auth/api/login-bootstrap'\nimport { getSsoDetails, generateSsoUrl, ssoCallback } from '../features/auth/api/sso'\nimport { changePassword, me, profile, profileUpdate } from '../features/auth/api/users'\nimport { getRefreshToken } from '../core/http/auth-utils'\nimport { getAuthRefreshToken } from '../core/http/http-client'\nimport {\n    clearAccessToken,\n    getAccessToken,\n    isAuthenticateApp,\n    isAuthenticated,\n    isExpiresAccessToken,\n    isAccessTokenExpired,\n    hasRefreshSession,\n    hasValidAccessToken,\n    refreshSession\n} from '../core/http/token-store'\nimport { isCookieExpired } from '../core/utils/cookie'\nimport {\n    hasValidAccess,\n    isFullyAuthenticated as isFullyAuthenticatedContract,\n    hasAuthenticatedAccess as hasAuthenticatedAccessContract,\n    type SessionContractInput\n} from '../core/auth/session-contract'\n\n/** Canonical nested auth API (SDK 3.0). */\nexport const authApi = {\n    preLogin,\n    login,\n    clientSession,\n    handoff,\n    logout,\n    register,\n    verifyEmail,\n    registerExistingUser,\n    forgetPassword,\n    resetPassword,\n    resetPasswordVerifyToken,\n    verifyEmailResend,\n    resendEmail,\n    changePassword,\n    me,\n    profile,\n    updateProfile: profileUpdate,\n    mfa: {\n        verifyOtp,\n        sendOtp: sendMfaOtp,\n        pendingPasskeyOptions,\n        pendingPasskeyVerify,\n        getStatus: getMfaStatus,\n        setPreferences: setMfaPreferences,\n        startPhoneVerify,\n        confirmPhoneVerify,\n        totpEnrollStart,\n        totpEnrollVerify,\n        totpDisable,\n        phoneUnverify,\n        backupCodesRegenerate,\n        optOut: mfaOptOut,\n        mfaOptOut,\n        webauthnRegisterOptions,\n        webauthnRegisterVerify,\n        webauthnAuthOptions,\n        webauthnAuthVerify,\n        listWebauthnCredentials,\n        deleteWebauthnCredential,\n        passkeyLoginOptions,\n        passkeyLoginVerify\n    },\n    security: {\n        getOverview: getSecurityOverview,\n        getLoginActivity: getSecurityLoginActivity,\n        getSessions: getSecuritySessions,\n        revokeSession: revokeSecuritySession,\n        revokeOtherSessions: revokeOtherSecuritySessions\n    },\n    loginBootstrap: getLoginBootstrap,\n    sso: {\n        getDetails: getSsoDetails,\n        generateUrl: generateSsoUrl,\n        callback: ssoCallback\n    },\n    session: {\n        getRefreshToken,\n        refreshSession,\n        refreshAccessToken: getAuthRefreshToken,\n        getAccessToken,\n        clearAccessToken,\n        isAuthenticated,\n        isAuthenticateApp,\n        isAccessTokenExpired,\n        isExpiresAccessToken,\n        isCookieExpired,\n        hasRefreshSession,\n        hasValidAccessToken,\n        contract: (): SessionContractInput => ({\n            hasAccessToken: () => Boolean(getAccessToken()),\n            isAccessTokenExpired: isAccessTokenExpired,\n            hasRefreshSession\n        }),\n        isFullyAuthenticated: () =>\n            isFullyAuthenticatedContract({\n                hasAccessToken: () => Boolean(getAccessToken()),\n                isAccessTokenExpired: isAccessTokenExpired,\n                hasRefreshSession\n            }),\n        hasAuthenticatedAccess: () =>\n            hasAuthenticatedAccessContract({\n                hasAccessToken: () => Boolean(getAccessToken()),\n                isAccessTokenExpired: isAccessTokenExpired,\n                hasRefreshSession\n            }),\n        hasValidAccess: () =>\n            hasValidAccess({\n                hasAccessToken: () => Boolean(getAccessToken()),\n                isAccessTokenExpired: isAccessTokenExpired,\n                hasRefreshSession\n            })\n    }\n}\n","export type MfaBootRecoveryResult = 'pending' | 'orphan_cleared' | 'stale_token_cleared' | 'none'\n\nexport type MfaBootRecoveryInput = {\n    hasMfaContext: () => boolean\n    hasAccessToken: () => boolean\n    hasRefreshToken: () => boolean\n    clearMfaOrphan: () => void\n    clearStaleAccessToken: () => void\n}\n\n/**\n * Normalize MFA gate state on cold load before the router mounts.\n * Temp JWT is in-memory only — mid-MFA page refresh cannot resume without re-login.\n */\nexport function recoverMfaGateOnBoot(input: MfaBootRecoveryInput): MfaBootRecoveryResult {\n    const hasContext = input.hasMfaContext()\n    const hasToken = input.hasAccessToken()\n    const hasRefresh = input.hasRefreshToken()\n\n    if (hasContext && hasToken) {\n        return 'pending'\n    }\n\n    if (hasContext && !hasToken) {\n        input.clearMfaOrphan()\n        return 'orphan_cleared'\n    }\n\n    if (hasToken && !hasContext && !hasRefresh) {\n        input.clearStaleAccessToken()\n        return 'stale_token_cleared'\n    }\n\n    return 'none'\n}\n\nexport type { VisibilityRefreshOptions } from '../http/visibility-refresh-scheduler.js'\nexport { startVisibilityRefreshScheduler, stopVisibilityRefreshScheduler } from '../http/visibility-refresh-scheduler.js'\n","import { isFullyAuthenticated, isMfaPendingSession, type SessionContractInput } from './session-contract.js'\n\nexport type AuthRouteAction =\n    | { kind: 'allow' }\n    | { kind: 'show_loader' }\n    | { kind: 'redirect_login'; returnUrl?: string }\n    | { kind: 'redirect_mfa' }\n    | { kind: 'redirect_funnel'; step: 'email_verify' | 'hub_select' | 'portal_select' }\n\nexport type AuthFunnelState = {\n    emailVerified?: boolean\n    hubId?: number | string | null\n    portalId?: number | string | null\n}\n\nexport type ResolveAuthRouteActionInput = {\n    pathname: string\n    isPublicAuthRoute: (pathname: string) => boolean\n    session: SessionContractInput\n    funnel?: AuthFunnelState\n    mfaRoute: string\n    previewMode?: boolean\n    /** When refresh hint exists but access token missing — session restoring. */\n    sessionRestoring?: boolean\n}\n\nexport function resolveAuthRouteAction(input: ResolveAuthRouteActionInput): AuthRouteAction {\n    const { pathname, isPublicAuthRoute, session, funnel, mfaRoute, previewMode = false, sessionRestoring = false } = input\n\n    if (previewMode) {\n        return { kind: 'allow' }\n    }\n\n    if (isMfaPendingSession(session)) {\n        if (pathname === mfaRoute) {\n            return { kind: 'allow' }\n        }\n        return { kind: 'redirect_mfa' }\n    }\n\n    if (sessionRestoring) {\n        return { kind: 'show_loader' }\n    }\n\n    const authenticated = isFullyAuthenticated(session)\n\n    if (!authenticated) {\n        if (isPublicAuthRoute(pathname)) {\n            return { kind: 'allow' }\n        }\n        return { kind: 'redirect_login' }\n    }\n\n    if (funnel) {\n        if (funnel.emailVerified === false) {\n            return { kind: 'redirect_funnel', step: 'email_verify' }\n        }\n        if (!funnel.hubId) {\n            return { kind: 'redirect_funnel', step: 'hub_select' }\n        }\n        if (!funnel.portalId) {\n            return { kind: 'redirect_funnel', step: 'portal_select' }\n        }\n    }\n\n    return { kind: 'allow' }\n}\n"]}

package/dist/{chunk-QPSCMK4W.js → chunk-TVUBMDXX.js}

@@ -71,43 +71,98 @@ var isCookieExpired = (key) => {
 // src/main/core/http/token-store.ts
 var accessToken = null;
 var tokenExpiresAt = null;
+var accessTtlMs = null;
 var refreshCallback = null;
+var refreshBufferSeconds = 60;
+var refreshPromise = null;
+var lastSuccessfulRefreshAt = null;
+var MIN_SHORT_TTL_BUFFER_MS = 5e3;
+var MIN_PROACTIVE_REFRESH_INTERVAL_MS = 3e4;
+function getEffectiveBufferMs(ttlMs) {
+  const capMs = refreshBufferSeconds * 1e3;
+  let buffer;
+  if (ttlMs <= capMs) {
+    buffer = Math.max(MIN_SHORT_TTL_BUFFER_MS, Math.floor(ttlMs * 0.2));
+  } else {
+    buffer = capMs;
+  }
+  const maxBuffer = Math.max(0, ttlMs - 1e3);
+  return Math.min(buffer, maxBuffer);
+}
+function getCurrentBufferMs() {
+  if (accessTtlMs != null && accessTtlMs > 0) {
+    return getEffectiveBufferMs(accessTtlMs);
+  }
+  return refreshBufferSeconds * 1e3;
+}
 function getAccessToken() {
   return accessToken;
 }
 function storAccessToken(token, expiresIn) {
   accessToken = token;
-  if (expiresIn) {
-    tokenExpiresAt = Date.now() + expiresIn * 1e3;
+  if (expiresIn != null && expiresIn > 0) {
+    accessTtlMs = expiresIn * 1e3;
+    tokenExpiresAt = Date.now() + accessTtlMs;
   } else {
+    accessTtlMs = null;
     tokenExpiresAt = null;
   }
 }
 function clearAccessToken() {
   accessToken = null;
   tokenExpiresAt = null;
+  accessTtlMs = null;
+  lastSuccessfulRefreshAt = null;
+}
+function setRefreshBufferSeconds(seconds) {
+  refreshBufferSeconds = Math.max(0, seconds);
 }
 function isExpiresAccessToken() {
   if (!accessToken) return true;
   if (tokenExpiresAt === null) return false;
-  return Date.now() >= tokenExpiresAt;
+  const bufferMs = getCurrentBufferMs();
+  return Date.now() >= tokenExpiresAt - bufferMs;
 }
 function setRefreshCallback(callback) {
   refreshCallback = callback;
 }
+async function refreshSession(options = {}) {
+  const { force = false } = options;
+  if (!force && lastSuccessfulRefreshAt != null && Date.now() - lastSuccessfulRefreshAt < MIN_PROACTIVE_REFRESH_INTERVAL_MS) {
+    return;
+  }
+  if (!refreshCallback) {
+    return;
+  }
+  if (!refreshPromise) {
+    refreshPromise = (async () => {
+      const { getRefreshToken: getRefreshToken2 } = await import('./auth-utils-VTD5TFYE.js');
+      const refreshToken = getRefreshToken2();
+      if (!refreshToken) {
+        throw new Error("Session expired: missing refresh token");
+      }
+      const result = await refreshCallback(refreshToken);
+      if (!result.success || !result.token) {
+        throw new Error("Session refresh failed");
+      }
+      lastSuccessfulRefreshAt = Date.now();
+    })().finally(() => {
+      refreshPromise = null;
+    });
+  }
+  await refreshPromise;
+}
 async function ensureValidRefresh() {
-  if (isExpiresAccessToken() && refreshCallback) {
-    const { getRefreshToken: getRefreshToken2 } = await import('./auth-utils-MNMC2QGX.js');
-    const refreshToken = getRefreshToken2();
-    if (refreshToken) {
-      await refreshCallback(refreshToken);
-    }
+  if (!isExpiresAccessToken()) {
+    return;
   }
+  await refreshSession({ force: true });
 }
 function isAuthenticateApp() {
   const token = getAccessToken();
   if (token) {
-    if (tokenExpiresAt === null || Date.now() < tokenExpiresAt) {
+    const bufferMs = getCurrentBufferMs();
+    if (tokenExpiresAt === null || Date.now() < tokenExpiresAt - bufferMs) {
       return true;
     }
   }
@@ -122,6 +177,12 @@ function isAuthenticated() {
 function isAccessTokenExpired() {
   return isExpiresAccessToken();
 }
+function hasRefreshSession() {
+  return !isCookieExpired(getStorageKeys().refreshToken);
+}
+function hasValidAccessToken() {
+  return Boolean(getAccessToken()) && !isExpiresAccessToken();
+}
 
 // src/main/core/http/iframe-session-storage.ts
 var IFRAME_RT_PREFIX = "wp_iframe_rt_";
@@ -232,6 +293,6 @@ function getSubscriptionType() {
   return JSON.parse(getCookie(getStorageKeys().subscriptionType || null) || null);
 }
 
-export { DEV_API_URL, DEV_PORTAL_ID, HUBSPOT_DATA, HUB_ID, PORTAL_ID, clearAccessToken, clearClientAuthCookies, configureStorageKeys, ensureValidRefresh, getAccessToken, getCookie, getPortal, getProfile, getRefreshToken, getSubscriptionType, isAccessTokenExpired, isAuthenticateApp, isAuthenticated, isCookieExpired, isExpiresAccessToken, setAccessToken, setIframeStorageMode, setLoggedInDetails, setPortal, setProfileDetails, setRefreshCallback, setRefreshToken, setSubscriptionType };
-//# sourceMappingURL=chunk-QPSCMK4W.js.map
-//# sourceMappingURL=chunk-QPSCMK4W.js.map
+export { DEV_API_URL, DEV_PORTAL_ID, HUBSPOT_DATA, HUB_ID, PORTAL_ID, clearAccessToken, clearClientAuthCookies, configureStorageKeys, ensureValidRefresh, getAccessToken, getCookie, getPortal, getProfile, getRefreshToken, getSubscriptionType, hasRefreshSession, hasValidAccessToken, isAccessTokenExpired, isAuthenticateApp, isAuthenticated, isCookieExpired, isExpiresAccessToken, refreshSession, setAccessToken, setIframeStorageMode, setLoggedInDetails, setPortal, setProfileDetails, setRefreshBufferSeconds, setRefreshCallback, setRefreshToken, setSubscriptionType, storAccessToken };
+//# sourceMappingURL=chunk-TVUBMDXX.js.map
+//# sourceMappingURL=chunk-TVUBMDXX.js.map

package/dist/chunk-TVUBMDXX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/main/core/utils/constants.ts","../src/main/core/utils/storage-keys.ts","../src/main/core/utils/cookie.ts","../src/main/core/http/token-store.ts","../src/main/core/http/iframe-session-storage.ts","../src/main/core/http/auth-utils.ts"],"names":["getRefreshToken"],"mappings":";;;;;AACO,IAAM,aAAA,GAAgB,cAAA;AACtB,IAAM,aAAA,GAAgB,cAAA;AACtB,IAAM,MAAA,GAAS,QAAA;AACf,IAAM,iBAAA,GAAoB,kBAAA;AAG1B,IAAM,YAAA,GAAe;AACrB,IAAM,MAAA,GAAS;AACf,IAAM,aAAA,GAAgB;AACtB,IAAM,SAAA,GAAY;AAClB,IAAM,WAAA,GAAc;;;ACD3B,IAAM,QAAA,GAAuC;AAAA,EACzC,YAAA,EAAc,aAAA;AAAA,EACd,YAAA,EAAc,aAAA;AAAA,EACd,MAAA,EAAQ,MAAA;AAAA,EACR,gBAAA,EAAkB,iBAAA;AAAA,EAClB,QAAA,EAAU;AACd,CAAA;AAEA,IAAI,WAAA,GAA0C,EAAE,GAAG,QAAA,EAAS;AAErD,SAAS,oBAAA,CAAqB,SAAA,GAA8B,EAAC,EAAS;AACzE,EAAA,WAAA,GAAc,EAAE,GAAG,QAAA,EAAU,GAAG,WAAA,EAAa,GAAG,SAAA,EAAU;AAC9D;AAOO,SAAS,cAAA,GAAuD;AACnE,EAAA,OAAO,WAAA;AACX;;;AC5BA,SAAS,gBAAA,GAA4B;AACjC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,OAAO,MAAA,CAAO,SAAS,QAAA,KAAa,QAAA;AACxC;AAEO,IAAM,SAAA,GAAY,CAAC,GAAA,EAAa,KAAA,EAAe,MAAA,KAA2B;AAC7E,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAA,EAAO;AAAA,IAC3B,OAAA,EAAS,MAAA;AAAA,IACT,QAAA,EAAU,gBAAA,EAAiB,GAAI,MAAA,GAAS,KAAA;AAAA,IACxC,QAAQ,gBAAA;AAAiB,GAC5B,CAAA;AACL,CAAA;AAEO,IAAM,SAAA,GAAiB,CAAC,GAAA,KAAa;AACxC,EAAA,OAAO,OAAA,CAAQ,IAAI,GAAG,CAAA;AAC1B;AAOO,IAAM,yBAAyB,MAAM;AACxC,EAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,EAAA,MAAM,QAAQ,IAAI,GAAA;AAAA,IACd,CAAC,IAAA,CAAK,YAAA,EAAc,IAAA,CAAK,YAAA,EAAc,KAAK,MAAA,EAAQ,IAAA,CAAK,gBAAA,EAAkB,IAAA,CAAK,QAAQ,CAAA,CAAE,MAAA,CAAO,CAAC,IAAA,KAAyB,OAAA,CAAQ,IAAI,CAAC;AAAA,GAC5I;AACA,EAAA,KAAA,CAAM,QAAQ,CAAC,IAAA,KAAS,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AAChD;AAUO,IAAM,eAAA,GAAkB,CAAC,GAAA,KAAyB;AACrD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC7B,EAAA,IAAI,UAAU,MAAA,EAAW;AACrB,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,IAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,eAAe,MAAA,EAAQ;AAC/D,MAAA,MAAM,YAAa,MAAA,CAAkC,SAAA;AACrD,MAAA,OAAO,OAAO,SAAA,KAAc,QAAA,IAAY,IAAA,CAAK,KAAI,GAAI,SAAA;AAAA,IACzD;AAEA,IAAA,OAAO,KAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;;;AC7CA,IAAI,WAAA,GAA6B,IAAA;AAEjC,IAAI,cAAA,GAAgC,IAAA;AAEpC,IAAI,WAAA,GAA6B,IAAA;AAEjC,IAAI,eAAA,GAA0G,IAAA;AAE9G,IAAI,oBAAA,GAAuB,EAAA;AAE3B,IAAI,cAAA,GAAuC,IAAA;AAI3C,IAAI,uBAAA,GAAyC,IAAA;AAE7C,IAAM,uBAAA,GAA0B,GAAA;AAEhC,IAAM,iCAAA,GAAoC,GAAA;AAInC,SAAS,qBAAqB,KAAA,EAAuB;AACxD,EAAA,MAAM,QAAQ,oBAAA,GAAuB,GAAA;AAErC,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI,SAAS,KAAA,EAAO;AAChB,IAAA,MAAA,GAAS,KAAK,GAAA,CAAI,uBAAA,EAAyB,KAAK,KAAA,CAAM,KAAA,GAAQ,GAAG,CAAC,CAAA;AAAA,EACtE,CAAA,MAAO;AACH,IAAA,MAAA,GAAS,KAAA;AAAA,EACb;AAGA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,QAAQ,GAAK,CAAA;AAC3C,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,SAAS,CAAA;AACrC;AAEA,SAAS,kBAAA,GAA6B;AAClC,EAAA,IAAI,WAAA,IAAe,IAAA,IAAQ,WAAA,GAAc,CAAA,EAAG;AACxC,IAAA,OAAO,qBAAqB,WAAW,CAAA;AAAA,EAC3C;AAEA,EAAA,OAAO,oBAAA,GAAuB,GAAA;AAClC;AAEO,SAAS,cAAA,GAAgC;AAC5C,EAAA,OAAO,WAAA;AACX;AAEO,SAAS,eAAA,CAAgB,OAAe,SAAA,EAA0B;AACrE,EAAA,WAAA,GAAc,KAAA;AAId,EAAA,IAAI,SAAA,IAAa,IAAA,IAAQ,SAAA,GAAY,CAAA,EAAG;AACpC,IAAA,WAAA,GAAc,SAAA,GAAY,GAAA;AAE1B,IAAA,cAAA,GAAiB,IAAA,CAAK,KAAI,GAAI,WAAA;AAAA,EAClC,CAAA,MAAO;AACH,IAAA,WAAA,GAAc,IAAA;AAEd,IAAA,cAAA,GAAiB,IAAA;AAAA,EACrB;AACJ;AAEO,SAAS,gBAAA,GAAyB;AACrC,EAAA,WAAA,GAAc,IAAA;AAEd,EAAA,cAAA,GAAiB,IAAA;AAEjB,EAAA,WAAA,GAAc,IAAA;AAId,EAAA,uBAAA,GAA0B,IAAA;AAC9B;AAEO,SAAS,wBAAwB,OAAA,EAAuB;AAC3D,EAAA,oBAAA,GAAuB,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAO,CAAA;AAC9C;AAUO,SAAS,oBAAA,GAAgC;AAC5C,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AAEzB,EAAA,IAAI,cAAA,KAAmB,MAAM,OAAO,KAAA;AAEpC,EAAA,MAAM,WAAW,kBAAA,EAAmB;AAEpC,EAAA,OAAO,IAAA,CAAK,GAAA,EAAI,IAAK,cAAA,GAAiB,QAAA;AAC1C;AAUO,SAAS,mBAAmB,QAAA,EAA+F;AAC9H,EAAA,eAAA,GAAkB,QAAA;AACtB;AAcA,eAAsB,cAAA,CAAe,OAAA,GAAiC,EAAC,EAAkB;AACrF,EAAA,MAAM,EAAE,KAAA,GAAQ,KAAA,EAAM,GAAI,OAAA;AAE1B,EAAA,IAAI,CAAC,SAAS,uBAAA,IAA2B,IAAA,IAAQ,KAAK,GAAA,EAAI,GAAI,0BAA0B,iCAAA,EAAmC;AACvH,IAAA;AAAA,EACJ;AAEA,EAAA,IAAI,CAAC,eAAA,EAAiB;AAClB,IAAA;AAAA,EACJ;AAEA,EAAA,IAAI,CAAC,cAAA,EAAgB;AACjB,IAAA,cAAA,GAAA,CAAkB,YAAY;AAC1B,MAAA,MAAM,EAAE,eAAA,EAAAA,gBAAAA,EAAgB,GAAI,MAAM,OAAO,0BAAiB,CAAA;AAC1D,MAAA,MAAM,eAAeA,gBAAAA,EAAgB;AAErC,MAAA,IAAI,CAAC,YAAA,EAAc;AAGf,QAAA,MAAM,IAAI,MAAM,wCAAwC,CAAA;AAAA,MAC5D;AAEA,MAAA,MAAM,MAAA,GAAS,MAAM,eAAA,CAAiB,YAAY,CAAA;AAElD,MAAA,IAAI,CAAC,MAAA,CAAO,OAAA,IAAW,CAAC,OAAO,KAAA,EAAO;AAGlC,QAAA,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAAA,MAC5C;AAIA,MAAA,uBAAA,GAA0B,KAAK,GAAA,EAAI;AAAA,IACvC,CAAA,GAAG,CAAE,OAAA,CAAQ,MAAM;AACf,MAAA,cAAA,GAAiB,IAAA;AAAA,IACrB,CAAC,CAAA;AAAA,EACL;AAEA,EAAA,MAAM,cAAA;AACV;AAUA,eAAsB,kBAAA,GAAoC;AACtD,EAAA,IAAI,CAAC,sBAAqB,EAAG;AACzB,IAAA;AAAA,EACJ;AAGA,EAAA,MAAM,cAAA,CAAe,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AACxC;AAEO,SAAS,iBAAA,GAAoB;AAChC,EAAA,MAAM,QAAQ,cAAA,EAAe;AAE7B,EAAA,IAAI,KAAA,EAAO;AACP,IAAA,MAAM,WAAW,kBAAA,EAAmB;AAEpC,IAAA,IAAI,mBAAmB,IAAA,IAAQ,IAAA,CAAK,GAAA,EAAI,GAAI,iBAAiB,QAAA,EAAU;AACnE,MAAA,OAAO,IAAA;AAAA,IACX;AAAA,EACJ;AAEA,EAAA,IAAI,CAAC,eAAA,CAAgB,cAAA,EAAe,CAAE,YAAY,CAAA,EAAG;AACjD,IAAA,OAAO,IAAA;AAAA,EACX;AAEA,EAAA,OAAO,KAAA;AACX;AAIO,SAAS,eAAA,GAAkB;AAC9B,EAAA,OAAO,iBAAA,EAAkB;AAC7B;AAIO,SAAS,oBAAA,GAAuB;AACnC,EAAA,OAAO,oBAAA,EAAqB;AAChC;AAEO,SAAS,iBAAA,GAA6B;AACzC,EAAA,OAAO,CAAC,eAAA,CAAgB,cAAA,EAAe,CAAE,YAAY,CAAA;AACzD;AAEO,SAAS,mBAAA,GAA+B;AAC3C,EAAA,OAAO,OAAA,CAAQ,cAAA,EAAgB,CAAA,IAAK,CAAC,oBAAA,EAAqB;AAC9D;;;ACjOA,IAAM,gBAAA,GAAmB,eAAA;AAEzB,IAAI,iBAAA,GAAoB,KAAA;AAEjB,SAAS,qBAAqB,OAAA,EAAwB;AACzD,EAAA,iBAAA,GAAoB,OAAA;AACxB;AAEO,SAAS,mBAAA,GAA+B;AAC3C,EAAA,OAAO,iBAAA;AACX;AAEA,SAAS,SAAA,GAAoB;AACzB,EAAA,MAAM,QAAQ,OAAO,MAAA,KAAW,WAAA,GAAe,MAAA,CAAkE,aAAa,KAAA,GAAQ,MAAA;AACtI,EAAA,OAAO,CAAA,EAAG,gBAAgB,CAAA,EAAG,KAAA,IAAS,SAAS,CAAA,CAAA;AACnD;AAEO,SAAS,sBAAA,GAAwC;AACpD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,WAAW,CAAA;AACnD,IAAA,OAAO,GAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,GAAe,IAAA;AAAA,EAC/C,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAEO,SAAS,uBAAA,CAAwB,OAAe,WAAA,EAA4B;AAC/E,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAA,CAAO,aAAa,OAAA,CAAQ,SAAA,IAAa,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAC9D,IAAA,IAAI,eAAe,IAAA,EAAM;AACrB,MAAA,MAAA,CAAO,YAAA,CAAa,QAAQ,CAAA,EAAG,SAAA,EAAW,CAAA,IAAA,CAAA,EAAQ,MAAA,CAAO,WAAW,CAAC,CAAA;AAAA,IACzE;AAAA,EACJ,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;;;AClCO,IAAM,kBAAA,GAAqB,OAAO,IAAA,KAAc;AACnD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAiB;AACjC,IAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,IAAA,SAAA,CAAU,IAAA,CAAK,YAAA,EAAc,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACjD,IAAA,IAAI,IAAA,CAAK,QAAA,KAAa,IAAA,CAAK,YAAA,EAAc;AACrC,MAAA,SAAA,CAAU,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,IACjD;AACA,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AAEO,IAAM,iBAAA,GAAoB,OAAO,IAAA,KAAc;AAClD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAiB;AACjC,IAAA,SAAA,CAAU,gBAAe,CAAE,YAAA,EAAc,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAC7D,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AAEO,SAAS,eAAA,CAAgB,OAAe,SAAA,EAAmB;AAC9D,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAiB;AACjC,IAAA,IAAI,SAAA;AACJ,IAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,SAAA,GAAY,IAAA,EAAmB;AAChE,MAAA,SAAA,GAAY,SAAA;AAAA,IAChB,CAAA,MAAA,IAAW,OAAO,SAAA,KAAc,QAAA,IAAY,YAAY,GAAA,EAAe;AACnE,MAAA,SAAA,GAAY,SAAA,GAAY,GAAA;AAAA,IAC5B,CAAA,MAAO;AACH,MAAA,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAA,CAAK,SAAA,IAAa,CAAA,IAAK,GAAA;AAAA,IAChD;AACA,IAAA,SAAA,CAAU,cAAA,EAAe,CAAE,YAAA,EAAc,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,IAAI,IAAA,CAAK,SAAS,CAAC,CAAA;AACnF,IAAA,IAAI,qBAAoB,EAAG;AACvB,MAAA,uBAAA,CAAwB,OAAO,SAAS,CAAA;AAAA,IAC5C;AACA,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AAEO,SAAS,cAAA,CAAe,OAAe,SAAA,EAAoB;AAC9D,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAiB;AACjC,IAAA,eAAA,CAAgB,OAAO,SAAS,CAAA;AAChC,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AAEO,IAAM,SAAA,GAAY,OAAO,IAAA,KAAc;AAC1C,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAiB;AACjC,IAAA,SAAA,CAAU,gBAAe,CAAE,MAAA,EAAQ,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACvD,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AAEO,IAAM,mBAAA,GAAsB,OAAO,IAAA,KAAc;AACpD,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAiB;AACjC,IAAA,SAAA,CAAU,gBAAe,CAAE,gBAAA,EAAkB,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AACjE,IAAA,OAAA,EAAQ;AAAA,EACZ,CAAC,CAAA;AACL;AAGO,SAAS,UAAA,GAA4B;AACxC,EAAA,OAAO,IAAA,CAAK,MAAM,SAAA,CAAU,cAAA,GAAiB,YAAA,IAAgB,IAAI,KAAK,IAAI,CAAA;AAC9E;AAEO,SAAS,eAAA,GAAiC;AAC7C,EAAA,MAAM,UAAA,GAAa,KAAK,KAAA,CAAM,SAAA,CAAU,gBAAe,CAAE,YAAA,IAAgB,IAAI,CAAA,IAAK,IAAI,CAAA;AACtF,EAAA,IAAI,UAAA,EAAY;AACZ,IAAA,OAAO,UAAA;AAAA,EACX;AACA,EAAA,IAAI,qBAAoB,EAAG;AACvB,IAAA,OAAO,sBAAA,EAAuB;AAAA,EAClC;AACA,EAAA,OAAO,IAAA;AACX;AAEO,SAAS,SAAA,GAAwB;AACpC,EAAA,OAAO,IAAA,CAAK,MAAM,SAAA,CAAU,cAAA,GAAiB,MAAA,IAAU,IAAI,KAAK,IAAI,CAAA;AACxE;AAEO,SAAS,mBAAA,GAAqC;AACjD,EAAA,OAAO,IAAA,CAAK,MAAM,SAAA,CAAU,cAAA,GAAiB,gBAAA,IAAoB,IAAI,KAAK,IAAI,CAAA;AAClF","file":"chunk-TVUBMDXX.js","sourcesContent":["// cookies\nexport const LOGIN_DETAILS = 'loginDetails'\nexport const REFRESH_TOKEN = 'refreshToken'\nexport const PORTAL = 'portal'\nexport const SUBSCRIPTION_TYPE = 'subscriptionType'\n\n// variables\nexport const HUBSPOT_DATA = 'hubSpotData'\nexport const HUB_ID = 'hubId'\nexport const DEV_PORTAL_ID = 'devPortalId'\nexport const PORTAL_ID = 'portalId'\nexport const DEV_API_URL = 'devApiUrl'\n","import { LOGIN_DETAILS, PORTAL, REFRESH_TOKEN, SUBSCRIPTION_TYPE } from './constants'\n\nexport interface StorageKeyConfig {\n    loginDetails?: string\n    refreshToken?: string\n    portal?: string\n    subscriptionType?: string\n    authUser?: string\n}\n\nconst defaults: Required<StorageKeyConfig> = {\n    loginDetails: LOGIN_DETAILS,\n    refreshToken: REFRESH_TOKEN,\n    portal: PORTAL,\n    subscriptionType: SUBSCRIPTION_TYPE,\n    authUser: LOGIN_DETAILS\n}\n\nlet runtimeKeys: Required<StorageKeyConfig> = { ...defaults }\n\nexport function configureStorageKeys(overrides: StorageKeyConfig = {}): void {\n    runtimeKeys = { ...defaults, ...runtimeKeys, ...overrides }\n}\n\n/** Test helper — restore default cookie key names. */\nexport function resetStorageKeysForTests(): void {\n    runtimeKeys = { ...defaults }\n}\n\nexport function getStorageKeys(): Readonly<Required<StorageKeyConfig>> {\n    return runtimeKeys\n}\n","import Cookies from 'js-cookie'\nimport { getStorageKeys } from './storage-keys'\n\nfunction cookieSecureFlag(): boolean {\n    if (typeof window === 'undefined') return true\n    return window.location.protocol === 'https:'\n}\n\nexport const setCookie = (key: string, value: string, expire?: number | Date) => {\n    return Cookies.set(key, value, {\n        expires: expire,\n        sameSite: cookieSecureFlag() ? 'none' : 'lax',\n        secure: cookieSecureFlag()\n    })\n}\n\nexport const getCookie: any = (key: any) => {\n    return Cookies.get(key)\n}\n\nexport const removeCookie = (key: any) => {\n    return Cookies.remove(key)\n}\n\n/** Clears client-portal session cookies only (does not wipe admin cookies on shared localhost). */\nexport const clearClientAuthCookies = () => {\n    const keys = getStorageKeys()\n    const names = new Set(\n        [keys.loginDetails, keys.refreshToken, keys.portal, keys.subscriptionType, keys.authUser].filter((name): name is string => Boolean(name))\n    )\n    names.forEach((name) => Cookies.remove(name))\n}\n\n/** @deprecated Prefer {@link clearClientAuthCookies} */\nexport const removeAllCookie = clearClientAuthCookies\n\n// export const isCookieExpired = (key: string): boolean => {\n//   const value = Cookies.get(key);\n//   return value === undefined; // true means expired or never set\n// };\n\nexport const isCookieExpired = (key: string): boolean => {\n    const value = Cookies.get(key)\n    if (value === undefined) {\n        return true\n    }\n    try {\n        const parsed = JSON.parse(value)\n        if (parsed && typeof parsed === 'object' && 'expiresAt' in parsed) {\n            const expiresAt = (parsed as { expiresAt?: number }).expiresAt\n            return typeof expiresAt === 'number' && Date.now() > expiresAt\n        }\n        // Refresh/auth cookies store a JSON-encoded string token; rely on browser cookie expiry.\n        return false\n    } catch {\n        return true\n    }\n}\n","/**\n\n * Token storage utilities\n\n * These functions handle access token management\n\n */\n\nimport { isCookieExpired } from '../utils/cookie.js'\n\nimport { getStorageKeys } from '../utils/storage-keys'\n\nlet accessToken: string | null = null\n\nlet tokenExpiresAt: number | null = null\n\nlet accessTtlMs: number | null = null\n\nlet refreshCallback: ((refreshToken: string) => Promise<{ token: string | null; success: boolean }>) | null = null\n\nlet refreshBufferSeconds = 60\n\nlet refreshPromise: Promise<void> | null = null\n\nlet lastRefreshFailed = false\n\nlet lastSuccessfulRefreshAt: number | null = null\n\nconst MIN_SHORT_TTL_BUFFER_MS = 5_000\n\nconst MIN_PROACTIVE_REFRESH_INTERVAL_MS = 30_000\n\n/** Exported for unit tests. */\n\nexport function getEffectiveBufferMs(ttlMs: number): number {\n    const capMs = refreshBufferSeconds * 1000\n\n    let buffer: number\n    if (ttlMs <= capMs) {\n        buffer = Math.max(MIN_SHORT_TTL_BUFFER_MS, Math.floor(ttlMs * 0.2))\n    } else {\n        buffer = capMs\n    }\n\n    // Buffer must stay inside the token lifetime — otherwise every request looks \"expired\".\n    const maxBuffer = Math.max(0, ttlMs - 1_000)\n    return Math.min(buffer, maxBuffer)\n}\n\nfunction getCurrentBufferMs(): number {\n    if (accessTtlMs != null && accessTtlMs > 0) {\n        return getEffectiveBufferMs(accessTtlMs)\n    }\n\n    return refreshBufferSeconds * 1000\n}\n\nexport function getAccessToken(): string | null {\n    return accessToken\n}\n\nexport function storAccessToken(token: string, expiresIn?: number): void {\n    accessToken = token\n\n    lastRefreshFailed = false\n\n    if (expiresIn != null && expiresIn > 0) {\n        accessTtlMs = expiresIn * 1000\n\n        tokenExpiresAt = Date.now() + accessTtlMs\n    } else {\n        accessTtlMs = null\n\n        tokenExpiresAt = null\n    }\n}\n\nexport function clearAccessToken(): void {\n    accessToken = null\n\n    tokenExpiresAt = null\n\n    accessTtlMs = null\n\n    lastRefreshFailed = false\n\n    lastSuccessfulRefreshAt = null\n}\n\nexport function setRefreshBufferSeconds(seconds: number): void {\n    refreshBufferSeconds = Math.max(0, seconds)\n}\n\nexport function getRefreshBufferSeconds(): number {\n    return refreshBufferSeconds\n}\n\nexport function didLastRefreshFail(): boolean {\n    return lastRefreshFailed\n}\n\nexport function isExpiresAccessToken(): boolean {\n    if (!accessToken) return true\n\n    if (tokenExpiresAt === null) return false\n\n    const bufferMs = getCurrentBufferMs()\n\n    return Date.now() >= tokenExpiresAt - bufferMs\n}\n\n/**\n\n * Set the refresh callback function\n\n * This is called by the HTTP client during initialization\n\n */\n\nexport function setRefreshCallback(callback: (refreshToken: string) => Promise<{ token: string | null; success: boolean }>): void {\n    refreshCallback = callback\n}\n\nexport function isRefreshInFlight(): boolean {\n    return refreshPromise != null\n}\n\nexport type RefreshSessionOptions = {\n    /** Bypass min proactive refresh interval (e.g. 401 retry, cold bootstrap). */\n\n    force?: boolean\n}\n\n/** Single deduped refresh entry point for bootstrap, HTTP client, and visibility handlers. */\n\nexport async function refreshSession(options: RefreshSessionOptions = {}): Promise<void> {\n    const { force = false } = options\n\n    if (!force && lastSuccessfulRefreshAt != null && Date.now() - lastSuccessfulRefreshAt < MIN_PROACTIVE_REFRESH_INTERVAL_MS) {\n        return\n    }\n\n    if (!refreshCallback) {\n        return\n    }\n\n    if (!refreshPromise) {\n        refreshPromise = (async () => {\n            const { getRefreshToken } = await import('./auth-utils.js')\n            const refreshToken = getRefreshToken()\n\n            if (!refreshToken) {\n                lastRefreshFailed = true\n\n                throw new Error('Session expired: missing refresh token')\n            }\n\n            const result = await refreshCallback!(refreshToken)\n\n            if (!result.success || !result.token) {\n                lastRefreshFailed = true\n\n                throw new Error('Session refresh failed')\n            }\n\n            lastRefreshFailed = false\n\n            lastSuccessfulRefreshAt = Date.now()\n        })().finally(() => {\n            refreshPromise = null\n        })\n    }\n\n    await refreshPromise\n}\n\n/**\n\n * Ensures the access token is valid, refreshing if necessary.\n\n * Throws when refresh is required but fails (avoids bearer-less 401 loops).\n\n */\n\nexport async function ensureValidRefresh(): Promise<void> {\n    if (!isExpiresAccessToken()) {\n        return\n    }\n\n    // Pre-request refresh must not be throttled by the proactive min interval.\n    await refreshSession({ force: true })\n}\n\nexport function isAuthenticateApp() {\n    const token = getAccessToken()\n\n    if (token) {\n        const bufferMs = getCurrentBufferMs()\n\n        if (tokenExpiresAt === null || Date.now() < tokenExpiresAt - bufferMs) {\n            return true\n        }\n    }\n\n    if (!isCookieExpired(getStorageKeys().refreshToken)) {\n        return true\n    }\n\n    return false\n}\n\n/** Preferred 3.0 name for {@link isAuthenticateApp}. */\n\nexport function isAuthenticated() {\n    return isAuthenticateApp()\n}\n\n/** Preferred 3.0 name for {@link isExpiresAccessToken}. */\n\nexport function isAccessTokenExpired() {\n    return isExpiresAccessToken()\n}\n\nexport function hasRefreshSession(): boolean {\n    return !isCookieExpired(getStorageKeys().refreshToken)\n}\n\nexport function hasValidAccessToken(): boolean {\n    return Boolean(getAccessToken()) && !isExpiresAccessToken()\n}\n","/**\n * Iframe-safe refresh token persistence (HubSpot CMS editor third-party cookie fallback).\n */\n\nconst IFRAME_RT_PREFIX = 'wp_iframe_rt_'\n\nlet iframeStorageMode = false\n\nexport function setIframeStorageMode(enabled: boolean): void {\n    iframeStorageMode = enabled\n}\n\nexport function isIframeStorageMode(): boolean {\n    return iframeStorageMode\n}\n\nfunction iframeKey(): string {\n    const hubId = typeof window !== 'undefined' ? (window as Window & { hubSpotData?: { hubId?: string | number } }).hubSpotData?.hubId : undefined\n    return `${IFRAME_RT_PREFIX}${hubId ?? 'default'}`\n}\n\nexport function readIframeRefreshToken(): string | null {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return null\n    }\n    try {\n        const raw = window.localStorage.getItem(iframeKey())\n        return raw ? (JSON.parse(raw) as string) : null\n    } catch {\n        return null\n    }\n}\n\nexport function writeIframeRefreshToken(token: string, expiresAtMs?: number): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        window.localStorage.setItem(iframeKey(), JSON.stringify(token))\n        if (expiresAtMs != null) {\n            window.localStorage.setItem(`${iframeKey()}_exp`, String(expiresAtMs))\n        }\n    } catch {\n        // private mode / blocked storage\n    }\n}\n\nexport function clearIframeRefreshToken(): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        window.localStorage.removeItem(iframeKey())\n        window.localStorage.removeItem(`${iframeKey()}_exp`)\n    } catch {\n        // ignore\n    }\n}\n\nexport function iframeRefreshTokenExpired(): boolean {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return true\n    }\n    try {\n        const expRaw = window.localStorage.getItem(`${iframeKey()}_exp`)\n        if (!expRaw) {\n            return false\n        }\n        const exp = Number(expRaw)\n        return Number.isFinite(exp) && Date.now() > exp\n    } catch {\n        return true\n    }\n}\n","/**\n * Authentication utility functions\n * These handle refresh token management\n */\n\nimport { setCookie, getCookie } from '../utils/cookie'\nimport { getStorageKeys } from '../utils/storage-keys'\nimport { storAccessToken } from './token-store'\nimport { isIframeStorageMode, readIframeRefreshToken, writeIframeRefreshToken } from './iframe-session-storage'\n\n// Set data\nexport const setLoggedInDetails = async (data: any) => {\n    return new Promise((resolve: any) => {\n        const keys = getStorageKeys()\n        setCookie(keys.loginDetails, JSON.stringify(data))\n        if (keys.authUser !== keys.loginDetails) {\n            setCookie(keys.authUser, JSON.stringify(data))\n        }\n        resolve()\n    })\n}\n\nexport const setProfileDetails = async (data: any) => {\n    return new Promise((resolve: any) => {\n        setCookie(getStorageKeys().loginDetails, JSON.stringify(data))\n        resolve()\n    })\n}\n\nexport function setRefreshToken(token: string, expiresAt: number) {\n    return new Promise((resolve: any) => {\n        let expiresMs: number\n        if (typeof expiresAt === 'number' && expiresAt > 1_000_000_000_000) {\n            expiresMs = expiresAt\n        } else if (typeof expiresAt === 'number' && expiresAt > 1_000_000_000) {\n            expiresMs = expiresAt * 1000\n        } else {\n            expiresMs = Date.now() + (expiresAt || 0) * 1000\n        }\n        setCookie(getStorageKeys().refreshToken, JSON.stringify(token), new Date(expiresMs))\n        if (isIframeStorageMode()) {\n            writeIframeRefreshToken(token, expiresMs)\n        }\n        resolve()\n    })\n}\n\nexport function setAccessToken(token: string, expiresIn?: number) {\n    return new Promise((resolve: any) => {\n        storAccessToken(token, expiresIn)\n        resolve()\n    })\n}\n\nexport const setPortal = async (data: any) => {\n    return new Promise((resolve: any) => {\n        setCookie(getStorageKeys().portal, JSON.stringify(data))\n        resolve()\n    })\n}\n\nexport const setSubscriptionType = async (data: any) => {\n    return new Promise((resolve: any) => {\n        setCookie(getStorageKeys().subscriptionType, JSON.stringify(data))\n        resolve()\n    })\n}\n\n// Get data\nexport function getProfile(): string | null {\n    return JSON.parse(getCookie(getStorageKeys().loginDetails || null) || null)\n}\n\nexport function getRefreshToken(): string | null {\n    const fromCookie = JSON.parse(getCookie(getStorageKeys().refreshToken || null) || null)\n    if (fromCookie) {\n        return fromCookie\n    }\n    if (isIframeStorageMode()) {\n        return readIframeRefreshToken()\n    }\n    return null\n}\n\nexport function getPortal(): any | null {\n    return JSON.parse(getCookie(getStorageKeys().portal || null) || null)\n}\n\nexport function getSubscriptionType(): string | null {\n    return JSON.parse(getCookie(getStorageKeys().subscriptionType || null) || null)\n}\n"]}

package/dist/{chunk-S5NYXGLE.js → chunk-YLJINMP2.js}

@@ -1,4 +1,4 @@
-import { createStore } from './chunk-PWTYQHOQ.js';
+import { createStore } from './chunk-O64WTOPM.js';
 
 // src/main/state/crm/use-multi-object.ts
 var multiObjectStore = createStore({
@@ -91,5 +91,5 @@ var actions = {
 };
 
 export { actions, multiObjectStore };
-//# sourceMappingURL=chunk-S5NYXGLE.js.map
-//# sourceMappingURL=chunk-S5NYXGLE.js.map
+//# sourceMappingURL=chunk-YLJINMP2.js.map
+//# sourceMappingURL=chunk-YLJINMP2.js.map

package/dist/{chunk-S5NYXGLE.js.map → chunk-YLJINMP2.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/main/state/crm/use-multi-object.ts"],"names":[],"mappings":";;;AAQO,IAAM,mBAAmB,WAAA,CAAmC;AAAA,EAC/D,SAAS,EAAC;AAAA,EACV,oBAAoB,EAAC;AAAA,EACrB,MAAM;AACV,CAAC;AAED,SAAS,aAAa,OAAA,EAAsB;AACxC,EAAA,OAAO,MAAA,CAAO,OAAA,EAAS,mBAAA,IAAuB,EAAE,CAAA;AACpD;AAEO,IAAM,OAAA,GAAU;AAAA,EACnB,kBAAA,CAAmB,UAAe,OAAA,EAAc;AAC5C,IAAA,MAAM,GAAA,GAAM,aAAa,OAAO,CAAA;AAChC,IAAA,MAAM,KAAA,GAAQ,iBAAiB,QAAA,EAAS;AAExC,IAAA,MAAM,IAAA,GAAO,QAAA,EAAU,IAAA,EAAM,OAAA,EAAS,QAAQ,EAAC;AAC/C,IAAA,MAAM,SAAS,IAAI,GAAA;AAAA,MACf,IAAA,CACK,IAAI,CAAC,GAAA,KAAa,IAAI,EAAA,IAAM,GAAA,CAAI,YAAY,CAAA,CAC5C,MAAA,CAAO,CAAC,OAAgB,EAAA,IAAM,IAAA,IAAQ,OAAO,EAAE,CAAA,CAC/C,IAAI,CAAC,EAAA,KAAgB,MAAA,CAAO,EAAE,CAAC;AAAA,KACxC;AAEA,IAAA,IAAI,gBAAA,GAAA,CAAoB,MAAM,kBAAA,CAAmB,GAAG,KAAK,EAAC,EAAG,MAAA,CAAO,CAAC,IAAA,KAAc;AAC/E,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,EAAA,IAAM,IAAA,CAAK,YAAA;AAC/B,MAAA,IAAI,MAAA,IAAU,IAAA,IAAQ,MAAA,KAAW,EAAA,EAAI,OAAO,IAAA;AAC5C,MAAA,OAAO,CAAC,MAAA,CAAO,GAAA,CAAI,MAAA,CAAO,MAAM,CAAC,CAAA;AAAA,IACrC,CAAC,CAAA;AAED,IAAA,MAAM,gBAAA,GAAmB,SAAS,gBAAA,IAAoB,EAAA;AACtD,IAAA,MAAM,QAAA,GAAW,QAAA,EAAU,IAAA,EAAM,QAAA,IAAY,EAAA;AAC7C,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA;AAE/B,IAAA,IAAI,QAAA,EAAU,IAAA,EAAM,KAAA,GAAQ,CAAA,IAAK,SAAS,aAAA,EAAe;AACrD,MAAA,gBAAA,GAAmB,EAAC;AAAA,IACxB;AAEA,IAAA,IAAI,QAAA,EAAU,QAAA,IAAY,QAAA,CAAS,QAAA,KAAa,QAAA,EAAU;AACtD,MAAA,gBAAA,GAAmB,EAAC;AAAA,IACxB;AAEA,IAAA,IAAI,QAAA,EAAU,gBAAA,IAAoB,QAAA,CAAS,gBAAA,KAAqB,gBAAA,EAAkB;AAC9E,MAAA,gBAAA,GAAmB,EAAC;AAAA,IACxB;AAEA,IAAA,gBAAA,CAAiB,QAAA,CAAS;AAAA,MACtB,OAAA,EAAS,EAAE,GAAG,KAAA,CAAM,SAAS,CAAC,GAAG,GAAG,QAAA,EAAS;AAAA,MAC7C,kBAAA,EAAoB,EAAE,GAAG,KAAA,CAAM,oBAAoB,CAAC,GAAG,GAAG,gBAAA,EAAiB;AAAA,MAC3E,IAAA,EAAM;AAAA,QACF,GAAG,KAAA,CAAM,IAAA;AAAA,QACT,CAAC,GAAG,GAAG,EAAE,kBAAkB,QAAA;AAAS;AACxC,KACH,CAAA;AAAA,EACL,CAAA;AAAA,EAEA,4BAA4B,mBAAA,EAA8B;AACtD,IAAA,MAAM,KAAA,GAAQ,iBAAiB,QAAA,EAAS;AAExC,IAAA,IAAI,CAAC,mBAAA,EAAqB;AACtB,MAAA,gBAAA,CAAiB,QAAA,CAAS,EAAE,kBAAA,EAAoB,IAAI,CAAA;AACpD,MAAA;AAAA,IACJ;AAEA,IAAA,MAAM,GAAA,GAAM,OAAO,mBAAmB,CAAA;AACtC,IAAA,MAAM,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,IAAA,KAAS,KAAA,CAAM,kBAAA;AACpC,IAAA,gBAAA,CAAiB,QAAA,CAAS,EAAE,kBAAA,EAAoB,IAAA,EAAM,CAAA;AAAA,EAC1D,CAAA;AAAA,EAEA,MAAM,yBAAA,CAA0B,QAAA,EAAe,KAAA,EAAa;AACxD,IAAA,MAAM,GAAA,GAAM,aAAa,KAAK,CAAA;AAC9B,IAAA,MAAM,KAAA,GAAQ,iBAAiB,QAAA,EAAS;AACxC,IAAA,MAAM,aAAA,GAAgB,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA;AACvC,IAAA,IAAI,IAAA,GAAc,KAAA,CAAM,kBAAA,CAAmB,GAAG,KAAK,EAAC;AAEpD,IAAA,IAAI,aAAA,EAAe,IAAA,EAAM,KAAA,GAAQ,CAAA,EAAG;AAChC,MAAA,IAAI,aAAa,SAAA,EAAW;AACxB,QAAA,MAAM,GAAA,GAAM,eAAe,IAAA,EAAM,OAAA,EAAS,QAAQ,MAAA,CAAO,CAAC,KAAU,IAAA,KAAc;AAC9E,UAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AACd,YAAA,GAAA,CAAI,IAAA,CAAK,GAAG,CAAA,GAAI,SAAA;AAAA,UACpB;AACA,UAAA,OAAO,GAAA;AAAA,QACX,CAAA,EAAG,EAAE,CAAA;AACL,QAAA,IAAA,GAAO,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA;AAAA,MACxB,CAAA,MAAA,IAAW,UAAU,IAAA,EAAM;AACvB,QAAA,MAAM,OAAO,QAAA,EAAU,IAAA;AACvB,QAAA,IAAI,CAAC,IAAA,EAAM;AACP,UAAA,gBAAA,CAAiB,QAAA,CAAS;AAAA,YACtB,kBAAA,EAAoB,EAAE,GAAG,KAAA,CAAM,oBAAoB,CAAC,GAAG,GAAG,EAAC;AAAE,WAChE,CAAA;AACD,UAAA;AAAA,QACJ;AAEA,QAAA,MAAM,MAAM,MAAA,CAAO,WAAA,CAAY,OAAO,OAAA,CAAQ,IAAI,EAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,KAAK,MAAW,CAAC,CAAA,EAAG,OAAO,KAAA,IAAS,KAAK,CAAC,CAAC,CAAA;AAExG,QAAA,IAAA,GAAO,CAAC,GAAG,IAAI,CAAA;AACf,QAAA,IAAI,IAAA,CAAK,SAAS,CAAA,EAAG;AACjB,UAAA,IAAA,CAAK,CAAC,CAAA,GAAI,GAAA;AAAA,QACd,CAAA,MAAO;AACH,UAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AAAA,QACjB;AAAA,MACJ;AAAA,IACJ;AAEA,IAAA,gBAAA,CAAiB,QAAA,CAAS;AAAA,MACtB,kBAAA,EAAoB,EAAE,GAAG,KAAA,CAAM,oBAAoB,CAAC,GAAG,GAAG,IAAA;AAAK,KAClE,CAAA;AAAA,EACL;AACJ","file":"chunk-S5NYXGLE.js","sourcesContent":["import { createStore } from './store'\n\nexport interface MultiObjectTableState {\n    objects: Record<string, any>\n    objectsPrependData: Record<string, any[]>\n    meta: Record<string, { selectedPipeline: string; viewType: string }>\n}\n\nexport const multiObjectStore = createStore<MultiObjectTableState>({\n    objects: {},\n    objectsPrependData: {},\n    meta: {}\n})\n\nfunction getObjectKey(payload: any): string {\n    return String(payload?.hubspotObjectTypeId ?? '')\n}\n\nexport const actions = {\n    setMultiObjectData(response: any, payload: any) {\n        const key = getObjectKey(payload)\n        const state = multiObjectStore.getState()\n\n        const rows = response?.data?.results?.rows ?? []\n        const rowIds = new Set(\n            rows\n                .map((row: any) => row.id ?? row.hs_object_id)\n                .filter((id: unknown) => id != null && id !== '')\n                .map((id: unknown) => String(id))\n        )\n\n        let newPrependForKey = (state.objectsPrependData[key] ?? []).filter((item: any) => {\n            const itemId = item.id ?? item.hs_object_id\n            if (itemId == null || itemId === '') return true\n            return !rowIds.has(String(itemId))\n        })\n\n        const selectedPipeline = payload?.selectedPipeline ?? ''\n        const viewType = response?.info?.viewType ?? ''\n        const prevMeta = state.meta[key]\n\n        if (response?.data?.total < 1 || payload?.componentName) {\n            newPrependForKey = []\n        }\n\n        if (prevMeta?.viewType && prevMeta.viewType !== viewType) {\n            newPrependForKey = []\n        }\n\n        if (prevMeta?.selectedPipeline && prevMeta.selectedPipeline !== selectedPipeline) {\n            newPrependForKey = []\n        }\n\n        multiObjectStore.setState({\n            objects: { ...state.objects, [key]: response },\n            objectsPrependData: { ...state.objectsPrependData, [key]: newPrependForKey },\n            meta: {\n                ...state.meta,\n                [key]: { selectedPipeline, viewType }\n            }\n        })\n    },\n\n    clearMultiObjectPrependData(hubspotObjectTypeId?: string) {\n        const state = multiObjectStore.getState()\n\n        if (!hubspotObjectTypeId) {\n            multiObjectStore.setState({ objectsPrependData: {} })\n            return\n        }\n\n        const key = String(hubspotObjectTypeId)\n        const { [key]: _, ...rest } = state.objectsPrependData\n        multiObjectStore.setState({ objectsPrependData: rest })\n    },\n\n    async setMultiObjectPrependData(response: any, props?: any) {\n        const key = getObjectKey(props)\n        const state = multiObjectStore.getState()\n        const tableResponse = state.objects[key]\n        let rows: any[] = state.objectsPrependData[key] ?? []\n\n        if (tableResponse?.data?.total > 1) {\n            if (response === 'loading') {\n                const row = tableResponse?.data?.results?.columns.reduce((acc: any, item: any) => {\n                    if (!item.hidden) {\n                        acc[item.key] = 'loading'\n                    }\n                    return acc\n                }, {})\n                rows = [row, ...rows]\n            } else if (response?.data) {\n                const data = response?.data\n                if (!data) {\n                    multiObjectStore.setState({\n                        objectsPrependData: { ...state.objectsPrependData, [key]: [] }\n                    })\n                    return\n                }\n\n                const row = Object.fromEntries(Object.entries(data).map(([k, value]: any) => [k, value?.value ?? value]))\n\n                rows = [...rows]\n                if (rows.length > 0) {\n                    rows[0] = row\n                } else {\n                    rows.push(row)\n                }\n            }\n        }\n\n        multiObjectStore.setState({\n            objectsPrependData: { ...state.objectsPrependData, [key]: rows }\n        })\n    }\n}\n"]}
+{"version":3,"sources":["../src/main/state/crm/use-multi-object.ts"],"names":[],"mappings":";;;AAQO,IAAM,mBAAmB,WAAA,CAAmC;AAAA,EAC/D,SAAS,EAAC;AAAA,EACV,oBAAoB,EAAC;AAAA,EACrB,MAAM;AACV,CAAC;AAED,SAAS,aAAa,OAAA,EAAsB;AACxC,EAAA,OAAO,MAAA,CAAO,OAAA,EAAS,mBAAA,IAAuB,EAAE,CAAA;AACpD;AAEO,IAAM,OAAA,GAAU;AAAA,EACnB,kBAAA,CAAmB,UAAe,OAAA,EAAc;AAC5C,IAAA,MAAM,GAAA,GAAM,aAAa,OAAO,CAAA;AAChC,IAAA,MAAM,KAAA,GAAQ,iBAAiB,QAAA,EAAS;AAExC,IAAA,MAAM,IAAA,GAAO,QAAA,EAAU,IAAA,EAAM,OAAA,EAAS,QAAQ,EAAC;AAC/C,IAAA,MAAM,SAAS,IAAI,GAAA;AAAA,MACf,IAAA,CACK,IAAI,CAAC,GAAA,KAAa,IAAI,EAAA,IAAM,GAAA,CAAI,YAAY,CAAA,CAC5C,MAAA,CAAO,CAAC,OAAgB,EAAA,IAAM,IAAA,IAAQ,OAAO,EAAE,CAAA,CAC/C,IAAI,CAAC,EAAA,KAAgB,MAAA,CAAO,EAAE,CAAC;AAAA,KACxC;AAEA,IAAA,IAAI,gBAAA,GAAA,CAAoB,MAAM,kBAAA,CAAmB,GAAG,KAAK,EAAC,EAAG,MAAA,CAAO,CAAC,IAAA,KAAc;AAC/E,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,EAAA,IAAM,IAAA,CAAK,YAAA;AAC/B,MAAA,IAAI,MAAA,IAAU,IAAA,IAAQ,MAAA,KAAW,EAAA,EAAI,OAAO,IAAA;AAC5C,MAAA,OAAO,CAAC,MAAA,CAAO,GAAA,CAAI,MAAA,CAAO,MAAM,CAAC,CAAA;AAAA,IACrC,CAAC,CAAA;AAED,IAAA,MAAM,gBAAA,GAAmB,SAAS,gBAAA,IAAoB,EAAA;AACtD,IAAA,MAAM,QAAA,GAAW,QAAA,EAAU,IAAA,EAAM,QAAA,IAAY,EAAA;AAC7C,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA;AAE/B,IAAA,IAAI,QAAA,EAAU,IAAA,EAAM,KAAA,GAAQ,CAAA,IAAK,SAAS,aAAA,EAAe;AACrD,MAAA,gBAAA,GAAmB,EAAC;AAAA,IACxB;AAEA,IAAA,IAAI,QAAA,EAAU,QAAA,IAAY,QAAA,CAAS,QAAA,KAAa,QAAA,EAAU;AACtD,MAAA,gBAAA,GAAmB,EAAC;AAAA,IACxB;AAEA,IAAA,IAAI,QAAA,EAAU,gBAAA,IAAoB,QAAA,CAAS,gBAAA,KAAqB,gBAAA,EAAkB;AAC9E,MAAA,gBAAA,GAAmB,EAAC;AAAA,IACxB;AAEA,IAAA,gBAAA,CAAiB,QAAA,CAAS;AAAA,MACtB,OAAA,EAAS,EAAE,GAAG,KAAA,CAAM,SAAS,CAAC,GAAG,GAAG,QAAA,EAAS;AAAA,MAC7C,kBAAA,EAAoB,EAAE,GAAG,KAAA,CAAM,oBAAoB,CAAC,GAAG,GAAG,gBAAA,EAAiB;AAAA,MAC3E,IAAA,EAAM;AAAA,QACF,GAAG,KAAA,CAAM,IAAA;AAAA,QACT,CAAC,GAAG,GAAG,EAAE,kBAAkB,QAAA;AAAS;AACxC,KACH,CAAA;AAAA,EACL,CAAA;AAAA,EAEA,4BAA4B,mBAAA,EAA8B;AACtD,IAAA,MAAM,KAAA,GAAQ,iBAAiB,QAAA,EAAS;AAExC,IAAA,IAAI,CAAC,mBAAA,EAAqB;AACtB,MAAA,gBAAA,CAAiB,QAAA,CAAS,EAAE,kBAAA,EAAoB,IAAI,CAAA;AACpD,MAAA;AAAA,IACJ;AAEA,IAAA,MAAM,GAAA,GAAM,OAAO,mBAAmB,CAAA;AACtC,IAAA,MAAM,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,IAAA,KAAS,KAAA,CAAM,kBAAA;AACpC,IAAA,gBAAA,CAAiB,QAAA,CAAS,EAAE,kBAAA,EAAoB,IAAA,EAAM,CAAA;AAAA,EAC1D,CAAA;AAAA,EAEA,MAAM,yBAAA,CAA0B,QAAA,EAAe,KAAA,EAAa;AACxD,IAAA,MAAM,GAAA,GAAM,aAAa,KAAK,CAAA;AAC9B,IAAA,MAAM,KAAA,GAAQ,iBAAiB,QAAA,EAAS;AACxC,IAAA,MAAM,aAAA,GAAgB,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA;AACvC,IAAA,IAAI,IAAA,GAAc,KAAA,CAAM,kBAAA,CAAmB,GAAG,KAAK,EAAC;AAEpD,IAAA,IAAI,aAAA,EAAe,IAAA,EAAM,KAAA,GAAQ,CAAA,EAAG;AAChC,MAAA,IAAI,aAAa,SAAA,EAAW;AACxB,QAAA,MAAM,GAAA,GAAM,eAAe,IAAA,EAAM,OAAA,EAAS,QAAQ,MAAA,CAAO,CAAC,KAAU,IAAA,KAAc;AAC9E,UAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AACd,YAAA,GAAA,CAAI,IAAA,CAAK,GAAG,CAAA,GAAI,SAAA;AAAA,UACpB;AACA,UAAA,OAAO,GAAA;AAAA,QACX,CAAA,EAAG,EAAE,CAAA;AACL,QAAA,IAAA,GAAO,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA;AAAA,MACxB,CAAA,MAAA,IAAW,UAAU,IAAA,EAAM;AACvB,QAAA,MAAM,OAAO,QAAA,EAAU,IAAA;AACvB,QAAA,IAAI,CAAC,IAAA,EAAM;AACP,UAAA,gBAAA,CAAiB,QAAA,CAAS;AAAA,YACtB,kBAAA,EAAoB,EAAE,GAAG,KAAA,CAAM,oBAAoB,CAAC,GAAG,GAAG,EAAC;AAAE,WAChE,CAAA;AACD,UAAA;AAAA,QACJ;AAEA,QAAA,MAAM,MAAM,MAAA,CAAO,WAAA,CAAY,OAAO,OAAA,CAAQ,IAAI,EAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,KAAK,MAAW,CAAC,CAAA,EAAG,OAAO,KAAA,IAAS,KAAK,CAAC,CAAC,CAAA;AAExG,QAAA,IAAA,GAAO,CAAC,GAAG,IAAI,CAAA;AACf,QAAA,IAAI,IAAA,CAAK,SAAS,CAAA,EAAG;AACjB,UAAA,IAAA,CAAK,CAAC,CAAA,GAAI,GAAA;AAAA,QACd,CAAA,MAAO;AACH,UAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AAAA,QACjB;AAAA,MACJ;AAAA,IACJ;AAEA,IAAA,gBAAA,CAAiB,QAAA,CAAS;AAAA,MACtB,kBAAA,EAAoB,EAAE,GAAG,KAAA,CAAM,oBAAoB,CAAC,GAAG,GAAG,IAAA;AAAK,KAClE,CAAA;AAAA,EACL;AACJ","file":"chunk-YLJINMP2.js","sourcesContent":["import { createStore } from './store'\n\nexport interface MultiObjectTableState {\n    objects: Record<string, any>\n    objectsPrependData: Record<string, any[]>\n    meta: Record<string, { selectedPipeline: string; viewType: string }>\n}\n\nexport const multiObjectStore = createStore<MultiObjectTableState>({\n    objects: {},\n    objectsPrependData: {},\n    meta: {}\n})\n\nfunction getObjectKey(payload: any): string {\n    return String(payload?.hubspotObjectTypeId ?? '')\n}\n\nexport const actions = {\n    setMultiObjectData(response: any, payload: any) {\n        const key = getObjectKey(payload)\n        const state = multiObjectStore.getState()\n\n        const rows = response?.data?.results?.rows ?? []\n        const rowIds = new Set(\n            rows\n                .map((row: any) => row.id ?? row.hs_object_id)\n                .filter((id: unknown) => id != null && id !== '')\n                .map((id: unknown) => String(id))\n        )\n\n        let newPrependForKey = (state.objectsPrependData[key] ?? []).filter((item: any) => {\n            const itemId = item.id ?? item.hs_object_id\n            if (itemId == null || itemId === '') return true\n            return !rowIds.has(String(itemId))\n        })\n\n        const selectedPipeline = payload?.selectedPipeline ?? ''\n        const viewType = response?.info?.viewType ?? ''\n        const prevMeta = state.meta[key]\n\n        if (response?.data?.total < 1 || payload?.componentName) {\n            newPrependForKey = []\n        }\n\n        if (prevMeta?.viewType && prevMeta.viewType !== viewType) {\n            newPrependForKey = []\n        }\n\n        if (prevMeta?.selectedPipeline && prevMeta.selectedPipeline !== selectedPipeline) {\n            newPrependForKey = []\n        }\n\n        multiObjectStore.setState({\n            objects: { ...state.objects, [key]: response },\n            objectsPrependData: { ...state.objectsPrependData, [key]: newPrependForKey },\n            meta: {\n                ...state.meta,\n                [key]: { selectedPipeline, viewType }\n            }\n        })\n    },\n\n    clearMultiObjectPrependData(hubspotObjectTypeId?: string) {\n        const state = multiObjectStore.getState()\n\n        if (!hubspotObjectTypeId) {\n            multiObjectStore.setState({ objectsPrependData: {} })\n            return\n        }\n\n        const key = String(hubspotObjectTypeId)\n        const { [key]: _, ...rest } = state.objectsPrependData\n        multiObjectStore.setState({ objectsPrependData: rest })\n    },\n\n    async setMultiObjectPrependData(response: any, props?: any) {\n        const key = getObjectKey(props)\n        const state = multiObjectStore.getState()\n        const tableResponse = state.objects[key]\n        let rows: any[] = state.objectsPrependData[key] ?? []\n\n        if (tableResponse?.data?.total > 1) {\n            if (response === 'loading') {\n                const row = tableResponse?.data?.results?.columns.reduce((acc: any, item: any) => {\n                    if (!item.hidden) {\n                        acc[item.key] = 'loading'\n                    }\n                    return acc\n                }, {})\n                rows = [row, ...rows]\n            } else if (response?.data) {\n                const data = response?.data\n                if (!data) {\n                    multiObjectStore.setState({\n                        objectsPrependData: { ...state.objectsPrependData, [key]: [] }\n                    })\n                    return\n                }\n\n                const row = Object.fromEntries(Object.entries(data).map(([k, value]: any) => [k, value?.value ?? value]))\n\n                rows = [...rows]\n                if (rows.length > 0) {\n                    rows[0] = row\n                } else {\n                    rows.push(row)\n                }\n            }\n        }\n\n        multiObjectStore.setState({\n            objectsPrependData: { ...state.objectsPrependData, [key]: rows }\n        })\n    }\n}\n"]}

package/dist/entries/auth.d.ts

@@ -1,5 +1,5 @@
-import { p as preLogin, l as login, c as clientSession, h as handoff, a as logout, v as verifyEmail, r as registerExistingUser, f as forgetPassword, b as resetPassword, d as resetPasswordVerifyToken, e as verifyEmailResend, g as resendEmail, i as changePassword, m as me, j as profile, k as profileUpdate, n as verifyOtp, s as sendMfaOtp, o as pendingPasskeyOptions, q as pendingPasskeyVerify, t as getMfaStatus, u as setMfaPreferences, w as startPhoneVerify, x as confirmPhoneVerify, y as totpEnrollStart, z as totpEnrollVerify, A as totpDisable, B as phoneUnverify, C as backupCodesRegenerate, D as mfaOptOut, E as webauthnRegisterOptions, F as webauthnRegisterVerify, G as webauthnAuthOptions, H as webauthnAuthVerify, I as listWebauthnCredentials, J as deleteWebauthnCredential, K as passkeyLoginOptions, L as passkeyLoginVerify, M as getSecurityOverview, N as getSecurityLoginActivity, O as getSecuritySessions, P as revokeSecuritySession, Q as revokeOtherSecuritySessions, R as getLoginBootstrap, S as getSsoDetails, T as generateSsoUrl, U as ssoCallback, V as getRefreshToken, W as getAuthRefreshToken, X as getAccessToken, Y as clearAccessToken, Z as isAuthenticated, _ as isAuthenticateApp, $ as isAccessTokenExpired, a0 as isExpiresAccessToken } from '../http-errors-DqdtoJ1y.js';
-export { an as ActiveSession, aH as EditorPreviewMockHandler, aI as EditorPreviewMockResult, ao as HttpClientConfig, ap as HttpErrorKind, aJ as LoginBootstrapMfaPolicy, aK as LoginBootstrapPortal, aL as LoginBootstrapResponse, aM as LoginBootstrapSsoProvider, ar as LoginHistoryRow, as as LoginResponseData, at as MfaEnrollmentStatus, au as MfaMethod, av as MfaMethodOption, aw as MfaPortalScopeContext, ax as PaginationResponse, ay as SERVICE_UNAVAILABLE_MESSAGE, az as SecurityOverview, a2 as TwoFaVerificationRequest, aB as classifyHttpError, aC as getFieldErrors, aD as getFormErrors, aE as getHttpErrorMessage, aF as initializeHttpClient, aG as isServiceUnavailableError, aN as setEditorPreviewMockHandler } from '../http-errors-DqdtoJ1y.js';
+import { p as preLogin, l as login, c as clientSession, h as handoff, a as logout, r as register, v as verifyEmail, b as registerExistingUser, f as forgetPassword, d as resetPassword, e as resetPasswordVerifyToken, g as verifyEmailResend, i as resendEmail, j as changePassword, m as me, k as profile, n as profileUpdate, o as verifyOtp, s as sendMfaOtp, q as pendingPasskeyOptions, t as pendingPasskeyVerify, u as getMfaStatus, w as setMfaPreferences, x as startPhoneVerify, y as confirmPhoneVerify, z as totpEnrollStart, A as totpEnrollVerify, B as totpDisable, C as phoneUnverify, D as backupCodesRegenerate, E as mfaOptOut, F as webauthnRegisterOptions, G as webauthnRegisterVerify, H as webauthnAuthOptions, I as webauthnAuthVerify, J as listWebauthnCredentials, K as deleteWebauthnCredential, L as passkeyLoginOptions, M as passkeyLoginVerify, N as getSecurityOverview, O as getSecurityLoginActivity, P as getSecuritySessions, Q as revokeSecuritySession, R as revokeOtherSecuritySessions, S as getLoginBootstrap, T as getSsoDetails, U as generateSsoUrl, V as ssoCallback, W as getRefreshToken, X as refreshSession, Y as getAuthRefreshToken, Z as getAccessToken, _ as clearAccessToken, $ as isAuthenticated, a0 as isAuthenticateApp, a1 as isAccessTokenExpired, a2 as isExpiresAccessToken, a3 as hasRefreshSession, a4 as hasValidAccessToken, a5 as SessionContractInput } from '../http-errors-D8bdo9vF.js';
+export { as as ActiveSession, at as ApiErrorPayload, au as AuthErrorAction, av as AuthErrorCode, aw as AuthErrorCodeValue, ax as AuthFunnelState, ay as AuthInterceptorPolicyConfig, az as AuthPolicyRoutes, aA as AuthRouteAction, ba as EditorPreviewMockHandler, bb as EditorPreviewMockResult, aB as HttpClientConfig, aC as HttpErrorKind, bc as LoginBootstrapMfaPolicy, bd as LoginBootstrapPortal, be as LoginBootstrapResponse, bf as LoginBootstrapSsoProvider, aE as LoginHistoryRow, aF as LoginResponseData, aG as MfaBootRecoveryResult, aH as MfaEnrollmentStatus, aI as MfaMethod, aJ as MfaMethodOption, aK as MfaPortalScopeContext, aL as PaginationResponse, aM as SERVICE_UNAVAILABLE_MESSAGE, aN as SecurityOverview, aP as StoredAuthError, a7 as TwoFaVerificationRequest, aQ as UnauthorizedPageCopy, aR as WoodsportalRequestConfig, aS as classifyHttpError, aT as getFieldErrors, aU as getFormErrors, aV as getHttpErrorMessage, aW as getUnauthorizedPageCopy, aX as hasAuthenticatedAccess, aY as hasValidAccess, aZ as initializeHttpClient, a_ as isFullyAuthenticated, a$ as isMfaPendingSession, b0 as isOptionalAuthFailureUrl, b1 as isServiceUnavailableError, b2 as isSessionProbeUrl, b3 as parseApiErrorPayload, b4 as persistAuthError, b5 as recoverMfaGateOnBoot, b6 as resolveAuthErrorAction, b7 as resolveAuthRouteAction, bg as setEditorPreviewMockHandler, b8 as startVisibilityRefreshScheduler, b9 as stopVisibilityRefreshScheduler } from '../http-errors-D8bdo9vF.js';
 export { C as ChangePasswordPayload, F as ForgetPasswordPayload, L as LoginPayload, P as PreLoginPayload, a as ResetPasswordPayload, R as ResetPasswordVerifyTokenPayload, V as VerifyEmailPayload } from '../index-Bh9eY8sA.js';
 import 'axios';
 
@@ -10,6 +10,7 @@ declare const api: {
         clientSession: typeof clientSession;
         handoff: typeof handoff;
         logout: typeof logout;
+        register: typeof register;
         verifyEmail: typeof verifyEmail;
         registerExistingUser: typeof registerExistingUser;
         forgetPassword: typeof forgetPassword;
@@ -61,6 +62,7 @@ declare const api: {
         };
         session: {
             getRefreshToken: typeof getRefreshToken;
+            refreshSession: typeof refreshSession;
             refreshAccessToken: typeof getAuthRefreshToken;
             getAccessToken: typeof getAccessToken;
             clearAccessToken: typeof clearAccessToken;
@@ -69,8 +71,14 @@ declare const api: {
             isAccessTokenExpired: typeof isAccessTokenExpired;
             isExpiresAccessToken: typeof isExpiresAccessToken;
             isCookieExpired: (key: string) => boolean;
+            hasRefreshSession: typeof hasRefreshSession;
+            hasValidAccessToken: typeof hasValidAccessToken;
+            contract: () => SessionContractInput;
+            isFullyAuthenticated: () => boolean;
+            hasAuthenticatedAccess: () => boolean;
+            hasValidAccess: () => boolean;
         };
     };
 };
 
-export { api };
+export { SessionContractInput, api };

package/dist/entries/auth.js

@@ -1,7 +1,10 @@
-import { authApi } from '../chunk-6TWR2S4E.js';
-export { SERVICE_UNAVAILABLE_MESSAGE, classifyHttpError, getFieldErrors, getFormErrors, getHttpErrorMessage, initializeHttpClient, isServiceUnavailableError, setEditorPreviewMockHandler } from '../chunk-ZMZPDWQL.js';
-import '../chunk-PWTYQHOQ.js';
-import '../chunk-QPSCMK4W.js';
+import { authApi } from '../chunk-PKDLBVD7.js';
+export { hasAuthenticatedAccess, hasValidAccess, isFullyAuthenticated, isMfaPendingSession, recoverMfaGateOnBoot, resolveAuthRouteAction } from '../chunk-PKDLBVD7.js';
+export { isOptionalAuthFailureUrl, isSessionProbeUrl, persistAuthError, resolveAuthErrorAction } from '../chunk-MFIGS74G.js';
+export { SERVICE_UNAVAILABLE_MESSAGE, classifyHttpError, getFieldErrors, getFormErrors, getHttpErrorMessage, initializeHttpClient, isServiceUnavailableError, setEditorPreviewMockHandler, startVisibilityRefreshScheduler, stopVisibilityRefreshScheduler } from '../chunk-FY7OTASP.js';
+import '../chunk-O64WTOPM.js';
+import '../chunk-TVUBMDXX.js';
+export { AuthErrorCode, getUnauthorizedPageCopy, parseApiErrorPayload } from '../chunk-COHBSTHF.js';
 
 // src/main/entries/auth.ts
 var api = {

package/dist/entries/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/main/entries/auth.ts"],"names":[],"mappings":";;;;;;AAoCO,IAAM,GAAA,GAAM;AAAA,EACf,IAAA,EAAM;AACV","file":"auth.js","sourcesContent":["/**\n * Auth-only subpath export — login, MFA, security, SSO, token helpers.\n * Does not import CRM feature modules.\n */\nimport { authApi } from '../api/nested-auth-api'\n\nexport { initializeHttpClient, getFormErrors, getFieldErrors, setEditorPreviewMockHandler } from '../core/http/http-client'\nexport type { HttpClientConfig, EditorPreviewMockHandler, EditorPreviewMockResult } from '../core/http/http-client'\n\nexport { classifyHttpError, getHttpErrorMessage, isServiceUnavailableError, SERVICE_UNAVAILABLE_MESSAGE } from '../core/http/http-errors'\nexport type { HttpErrorKind } from '../core/http/http-errors'\n\nexport type {\n    PreLoginPayload,\n    LoginPayload,\n    VerifyEmailPayload,\n    ResetPasswordVerifyTokenPayload,\n    ResetPasswordPayload,\n    ForgetPasswordPayload,\n    ChangePasswordPayload,\n    MfaMethod,\n    MfaMethodOption,\n    MfaPortalScopeContext,\n    LoginBootstrapResponse,\n    LoginBootstrapMfaPolicy,\n    LoginBootstrapPortal,\n    LoginBootstrapSsoProvider,\n    LoginResponseData,\n    TwoFaVerificationRequest,\n    MfaEnrollmentStatus,\n    SecurityOverview,\n    LoginHistoryRow,\n    ActiveSession,\n    PaginationResponse\n} from '../core/types'\n\nexport const api = {\n    auth: authApi\n}\n"]}
+{"version":3,"sources":["../../src/main/entries/auth.ts"],"names":[],"mappings":";;;;;;;;;AAoEO,IAAM,GAAA,GAAM;AAAA,EACf,IAAA,EAAM;AACV","file":"auth.js","sourcesContent":["/**\n * Auth-only subpath export — login, MFA, security, SSO, token helpers.\n * Does not import CRM feature modules.\n */\nimport { authApi } from '../api/nested-auth-api'\n\nexport { initializeHttpClient, getFormErrors, getFieldErrors, setEditorPreviewMockHandler } from '../core/http/http-client'\nexport type { HttpClientConfig, EditorPreviewMockHandler, EditorPreviewMockResult } from '../core/http/http-client'\n\nexport { classifyHttpError, getHttpErrorMessage, isServiceUnavailableError, SERVICE_UNAVAILABLE_MESSAGE } from '../core/http/http-errors'\nexport type { HttpErrorKind } from '../core/http/http-errors'\n\nexport {\n    AuthErrorCode,\n    parseApiErrorPayload,\n    getUnauthorizedPageCopy,\n    resolveAuthErrorAction,\n    isOptionalAuthFailureUrl,\n    isSessionProbeUrl,\n    persistAuthError,\n    hasValidAccess,\n    isFullyAuthenticated,\n    isMfaPendingSession,\n    hasAuthenticatedAccess,\n    recoverMfaGateOnBoot,\n    startVisibilityRefreshScheduler,\n    stopVisibilityRefreshScheduler,\n    resolveAuthRouteAction\n} from '../core/auth/index.js'\nexport type {\n    ApiErrorPayload,\n    StoredAuthError,\n    AuthErrorCodeValue,\n    UnauthorizedPageCopy,\n    AuthErrorAction,\n    AuthPolicyRoutes,\n    AuthInterceptorPolicyConfig,\n    WoodsportalRequestConfig,\n    SessionContractInput,\n    MfaBootRecoveryResult,\n    AuthRouteAction,\n    AuthFunnelState\n} from '../core/auth/index.js'\n\nexport type {\n    PreLoginPayload,\n    LoginPayload,\n    VerifyEmailPayload,\n    ResetPasswordVerifyTokenPayload,\n    ResetPasswordPayload,\n    ForgetPasswordPayload,\n    ChangePasswordPayload,\n    MfaMethod,\n    MfaMethodOption,\n    MfaPortalScopeContext,\n    LoginBootstrapResponse,\n    LoginBootstrapMfaPolicy,\n    LoginBootstrapPortal,\n    LoginBootstrapSsoProvider,\n    LoginResponseData,\n    TwoFaVerificationRequest,\n    MfaEnrollmentStatus,\n    SecurityOverview,\n    LoginHistoryRow,\n    ActiveSession,\n    PaginationResponse\n} from '../core/types'\n\nexport const api = {\n    auth: authApi\n}\n"]}

package/dist/entries/crm.js

@@ -1,8 +1,8 @@
-import { crmApi } from '../chunk-VWVUW5QN.js';
-import { navigationApi, storage } from '../chunk-ZMZPDWQL.js';
-import '../chunk-S5NYXGLE.js';
-import { actions8, syncStore, actions5, emailStore, actions4, noteStore, actions7, userStore, actions2, tableStore, tableUiActions, tableUiStore } from '../chunk-PWTYQHOQ.js';
-import '../chunk-QPSCMK4W.js';
+import { crmApi } from '../chunk-JQDLK3GN.js';
+import { navigationApi, storage } from '../chunk-FY7OTASP.js';
+import '../chunk-YLJINMP2.js';
+import { actions8, syncStore, actions5, emailStore, actions4, noteStore, actions7, userStore, actions2, tableStore, tableUiActions, tableUiStore } from '../chunk-O64WTOPM.js';
+import '../chunk-TVUBMDXX.js';
 
 // src/main/entries/crm.ts
 var api = {