woodsportal-client-sdk 4.0.4-dev.9 → 4.0.7-dev.1

package/dist/chunk-YNOZWRK3.js

@@ -0,0 +1,306 @@
+import { WP_STORAGE_KEYS, CLIENT_COOKIE_MIGRATIONS, CLIENT_SESSION_STORAGE_MIGRATIONS, LEGACY_CLIENT_AUTH_COOKIES, LEGACY_CLIENT_SESSION_EXACT, wpClientIframeRefreshKey, wpClientIframeRefreshExpKey, WP_UI_THEME } from './chunk-BKT4MFQM.js';
+import Cookies from 'js-cookie';
+
+// src/main/core/utils/storage-keys.ts
+var defaults = {
+  loginDetails: WP_STORAGE_KEYS.c.auth.login,
+  refreshToken: WP_STORAGE_KEYS.c.auth.refresh,
+  portal: WP_STORAGE_KEYS.c.auth.portal,
+  subscriptionType: WP_STORAGE_KEYS.c.auth.sub,
+  authUser: WP_STORAGE_KEYS.c.auth.login,
+  pagination: WP_STORAGE_KEYS.c.ui.pag,
+  routeMenu: WP_STORAGE_KEYS.c.ui.menu,
+  associationView: WP_STORAGE_KEYS.c.ui.assoc,
+  emailVerified: WP_STORAGE_KEYS.c.auth.emailOk
+};
+var runtimeKeys = { ...defaults };
+function configureStorageKeys(overrides = {}) {
+  runtimeKeys = { ...defaults, ...runtimeKeys, ...overrides };
+  if (overrides.authUser === void 0) {
+    runtimeKeys.authUser = runtimeKeys.loginDetails;
+  }
+}
+function resetStorageKeysForTests() {
+  runtimeKeys = { ...defaults };
+}
+function getStorageKeys() {
+  return runtimeKeys;
+}
+function cookieSecureFlag() {
+  if (typeof window === "undefined") return true;
+  return window.location.protocol === "https:";
+}
+function isCorruptCookieRawValue(raw) {
+  return raw == null || raw === "" || raw === "undefined" || raw === "null";
+}
+function stringifyCookieValue(value) {
+  if (value === void 0 || value === null) {
+    return null;
+  }
+  if (typeof value === "string") {
+    return isCorruptCookieRawValue(value) ? null : value;
+  }
+  const serialized = JSON.stringify(value);
+  if (serialized === void 0 || isCorruptCookieRawValue(serialized)) {
+    return null;
+  }
+  return serialized;
+}
+var setCookie = (key, value, expire) => {
+  if (!key || isCorruptCookieRawValue(value)) {
+    return void 0;
+  }
+  return Cookies.set(key, value, {
+    expires: expire,
+    sameSite: cookieSecureFlag() ? "none" : "lax",
+    secure: cookieSecureFlag()
+  });
+};
+var getCookie = (key) => {
+  return Cookies.get(key);
+};
+function parseCookieJson(key) {
+  if (key == null || key === "") {
+    return null;
+  }
+  const raw = getCookie(key);
+  if (isCorruptCookieRawValue(raw)) {
+    if (raw === "undefined" || raw === "null") {
+      Cookies.remove(key);
+    }
+    return null;
+  }
+  try {
+    return JSON.parse(raw);
+  } catch {
+    Cookies.remove(key);
+    return null;
+  }
+}
+var clearClientAuthCookies = () => {
+  getClientAuthCookieNamesToClear().forEach((name) => Cookies.remove(name));
+  for (const legacyAccess of ["woodsportal_access_token", "AUTH_CRED"]) {
+    Cookies.remove(legacyAccess);
+  }
+};
+var isCookieExpired = (key) => {
+  const value = Cookies.get(key);
+  if (value === void 0) {
+    return true;
+  }
+  try {
+    const parsed = JSON.parse(value);
+    if (parsed && typeof parsed === "object" && "expiresAt" in parsed) {
+      const expiresAt = parsed.expiresAt;
+      return typeof expiresAt === "number" && Date.now() > expiresAt;
+    }
+    return false;
+  } catch {
+    return false;
+  }
+};
+
+// src/main/core/utils/storage-migration.ts
+function migrateCookiePair(legacy, canonical) {
+  const value = Cookies.get(legacy);
+  if (value === void 0) {
+    return;
+  }
+  if (isCorruptCookieRawValue(value)) {
+    Cookies.remove(legacy);
+    return;
+  }
+  if (!Cookies.get(canonical)) {
+    Cookies.set(canonical, value);
+  }
+  Cookies.remove(legacy);
+}
+function migrateLocalStoragePair(legacy, canonical) {
+  if (typeof window === "undefined" || !window.localStorage) {
+    return;
+  }
+  try {
+    const value = window.localStorage.getItem(legacy);
+    if (value == null) {
+      return;
+    }
+    if (!window.localStorage.getItem(canonical)) {
+      window.localStorage.setItem(canonical, value);
+    }
+    window.localStorage.removeItem(legacy);
+  } catch {
+  }
+}
+function migrateSessionStoragePair(legacy, canonical) {
+  if (typeof window === "undefined" || !window.sessionStorage) {
+    return;
+  }
+  try {
+    const value = window.sessionStorage.getItem(legacy);
+    if (value == null) {
+      return;
+    }
+    if (!window.sessionStorage.getItem(canonical)) {
+      window.sessionStorage.setItem(canonical, value);
+    }
+    window.sessionStorage.removeItem(legacy);
+  } catch {
+  }
+}
+function migrateIframeRefreshKeys() {
+  if (typeof window === "undefined" || !window.localStorage) {
+    return;
+  }
+  try {
+    const keys = Object.keys(window.localStorage).filter((k) => k.startsWith("wp_iframe_rt_"));
+    for (const legacyKey of keys) {
+      const suffix = legacyKey.slice("wp_iframe_rt_".length);
+      if (suffix.endsWith("_exp")) {
+        continue;
+      }
+      const hubId = suffix;
+      const token = window.localStorage.getItem(legacyKey);
+      const exp = window.localStorage.getItem(`${legacyKey}_exp`);
+      const newKey = wpClientIframeRefreshKey(hubId);
+      const newExpKey = wpClientIframeRefreshExpKey(hubId);
+      if (token != null && !window.localStorage.getItem(newKey)) {
+        window.localStorage.setItem(newKey, token);
+      }
+      if (exp != null && !window.localStorage.getItem(newExpKey)) {
+        window.localStorage.setItem(newExpKey, exp);
+      }
+      window.localStorage.removeItem(legacyKey);
+      window.localStorage.removeItem(`${legacyKey}_exp`);
+    }
+  } catch {
+  }
+}
+function removeLegacyAccessTokenCookies() {
+  const keys = getStorageKeys();
+  const legacyAccess = ["woodsportal_access_token", "AUTH_CRED"];
+  for (const name of legacyAccess) {
+    Cookies.remove(name);
+  }
+  if (keys.authUser && keys.authUser !== keys.loginDetails) {
+    Cookies.remove(keys.authUser);
+  }
+}
+function migrateLegacyStorageKeys() {
+  if (typeof window === "undefined") {
+    return;
+  }
+  for (const [legacy, canonical] of CLIENT_COOKIE_MIGRATIONS) {
+    migrateCookiePair(legacy, canonical);
+  }
+  migrateLocalStoragePair("hubSpotData", WP_STORAGE_KEYS.c.hub);
+  migrateLocalStoragePair("theme", WP_UI_THEME);
+  for (const [legacy, canonical] of CLIENT_SESSION_STORAGE_MIGRATIONS) {
+    migrateSessionStoragePair(legacy, canonical);
+  }
+  migrateIframeRefreshKeys();
+  removeLegacyAccessTokenCookies();
+  try {
+    window.sessionStorage?.removeItem("entredEmail");
+  } catch {
+  }
+}
+function getClientAuthCookieNamesToClear() {
+  const keys = getStorageKeys();
+  const configured = [
+    keys.loginDetails,
+    keys.refreshToken,
+    keys.portal,
+    keys.subscriptionType,
+    keys.authUser,
+    keys.pagination,
+    keys.routeMenu,
+    keys.associationView,
+    keys.emailVerified
+  ].filter((name) => Boolean(name));
+  const canonical = [
+    WP_STORAGE_KEYS.c.auth.login,
+    WP_STORAGE_KEYS.c.auth.refresh,
+    WP_STORAGE_KEYS.c.auth.portal,
+    WP_STORAGE_KEYS.c.auth.sub,
+    WP_STORAGE_KEYS.c.auth.emailOk,
+    WP_STORAGE_KEYS.c.ui.pag,
+    WP_STORAGE_KEYS.c.ui.menu,
+    WP_STORAGE_KEYS.c.ui.assoc
+  ];
+  return [.../* @__PURE__ */ new Set([...configured, ...canonical, ...LEGACY_CLIENT_AUTH_COOKIES])];
+}
+function clearClientSessionStorageKeys() {
+  if (typeof window === "undefined" || !window.sessionStorage) {
+    return;
+  }
+  try {
+    for (const [legacy, canonical] of CLIENT_SESSION_STORAGE_MIGRATIONS) {
+      if (canonical === WP_STORAGE_KEYS.c.login.email || canonical === WP_STORAGE_KEYS.c.login.force || canonical === WP_STORAGE_KEYS.c.login.passkey || canonical === WP_STORAGE_KEYS.c.login.done) {
+        continue;
+      }
+      window.sessionStorage.removeItem(legacy);
+      window.sessionStorage.removeItem(canonical);
+    }
+    for (const key of LEGACY_CLIENT_SESSION_EXACT) {
+      if (key === "entredEmail") {
+        window.sessionStorage.removeItem(key);
+      }
+    }
+    const preservedLoginKeys = /* @__PURE__ */ new Set([
+      WP_STORAGE_KEYS.c.login.email,
+      WP_STORAGE_KEYS.c.login.force,
+      WP_STORAGE_KEYS.c.login.passkey,
+      WP_STORAGE_KEYS.c.login.done,
+      "woodsportal.login.email",
+      "woodsportal.login.forcePreLogin",
+      "woodsportal.login.passkeyPrimaryEnrolled",
+      "woodsportal.login.preLoginCompletedKey"
+    ]);
+    const keysToRemove = [];
+    for (let i = 0; i < window.sessionStorage.length; i++) {
+      const key = window.sessionStorage.key(i);
+      if (!key || preservedLoginKeys.has(key)) continue;
+      if (key.startsWith("woodsportal.mfa.") || key.startsWith("wp.c.mfa.")) {
+        keysToRemove.push(key);
+      }
+      if (key === WP_STORAGE_KEYS.c.auth.err || key === WP_STORAGE_KEYS.c.auth.refreshExhausted || key === "authError") {
+        keysToRemove.push(key);
+      }
+      if (key === WP_STORAGE_KEYS.c.sso.cb || key === "sso_callback_processed") {
+        keysToRemove.push(key);
+      }
+    }
+    keysToRemove.forEach((k) => window.sessionStorage.removeItem(k));
+  } catch {
+  }
+}
+function clearClientIframeRefreshLocalKeys() {
+  if (typeof window === "undefined" || !window.localStorage) {
+    return;
+  }
+  try {
+    const keys = Object.keys(window.localStorage).filter(
+      (k) => k.startsWith("wp_iframe_rt_") || k.startsWith(WP_STORAGE_KEYS.c.auth.iframeRtPrefix)
+    );
+    keys.forEach((k) => window.localStorage.removeItem(k));
+  } catch {
+  }
+}
+function clearStaleIframeRefreshForOtherHubs(activeHubId) {
+  if (activeHubId == null || typeof window === "undefined" || !window.localStorage) {
+    return;
+  }
+  const activePrefix = WP_STORAGE_KEYS.c.auth.iframeRtPrefix;
+  const activeKey = wpClientIframeRefreshKey(activeHubId);
+  try {
+    const keys = Object.keys(window.localStorage).filter(
+      (k) => (k.startsWith("wp_iframe_rt_") || k.startsWith(activePrefix)) && k !== activeKey && k !== wpClientIframeRefreshExpKey(activeHubId)
+    );
+    keys.forEach((k) => window.localStorage.removeItem(k));
+  } catch {
+  }
+}
+
+export { clearClientAuthCookies, clearClientIframeRefreshLocalKeys, clearClientSessionStorageKeys, clearStaleIframeRefreshForOtherHubs, configureStorageKeys, getClientAuthCookieNamesToClear, getCookie, getStorageKeys, isCookieExpired, isCorruptCookieRawValue, migrateLegacyStorageKeys, parseCookieJson, resetStorageKeysForTests, setCookie, stringifyCookieValue };
+//# sourceMappingURL=chunk-YNOZWRK3.js.map
+//# sourceMappingURL=chunk-YNOZWRK3.js.map

package/dist/chunk-YNOZWRK3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/main/core/utils/storage-keys.ts","../src/main/core/utils/cookie.ts","../src/main/core/utils/storage-migration.ts"],"names":["Cookies"],"mappings":";;;;AAcA,IAAM,QAAA,GAAuC;AAAA,EACzC,YAAA,EAAc,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,KAAA;AAAA,EACrC,YAAA,EAAc,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,OAAA;AAAA,EACrC,MAAA,EAAQ,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,MAAA;AAAA,EAC/B,gBAAA,EAAkB,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,GAAA;AAAA,EACzC,QAAA,EAAU,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,KAAA;AAAA,EACjC,UAAA,EAAY,eAAA,CAAgB,CAAA,CAAE,EAAA,CAAG,GAAA;AAAA,EACjC,SAAA,EAAW,eAAA,CAAgB,CAAA,CAAE,EAAA,CAAG,IAAA;AAAA,EAChC,eAAA,EAAiB,eAAA,CAAgB,CAAA,CAAE,EAAA,CAAG,KAAA;AAAA,EACtC,aAAA,EAAe,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK;AAC1C,CAAA;AAEA,IAAI,WAAA,GAA0C,EAAE,GAAG,QAAA,EAAS;AAErD,SAAS,oBAAA,CAAqB,SAAA,GAA8B,EAAC,EAAS;AACzE,EAAA,WAAA,GAAc,EAAE,GAAG,QAAA,EAAU,GAAG,WAAA,EAAa,GAAG,SAAA,EAAU;AAC1D,EAAA,IAAI,SAAA,CAAU,aAAa,MAAA,EAAW;AAClC,IAAA,WAAA,CAAY,WAAW,WAAA,CAAY,YAAA;AAAA,EACvC;AACJ;AAGO,SAAS,wBAAA,GAAiC;AAC7C,EAAA,WAAA,GAAc,EAAE,GAAG,QAAA,EAAS;AAChC;AAEO,SAAS,cAAA,GAAuD;AACnE,EAAA,OAAO,WAAA;AACX;ACvCA,SAAS,gBAAA,GAA4B;AACjC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,OAAO,MAAA,CAAO,SAAS,QAAA,KAAa,QAAA;AACxC;AAGO,SAAS,wBAAwB,GAAA,EAAyC;AAC7E,EAAA,OAAO,OAAO,IAAA,IAAQ,GAAA,KAAQ,EAAA,IAAM,GAAA,KAAQ,eAAe,GAAA,KAAQ,MAAA;AACvE;AAGO,SAAS,qBAAqB,KAAA,EAA+B;AAChE,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AACvC,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC3B,IAAA,OAAO,uBAAA,CAAwB,KAAK,CAAA,GAAI,IAAA,GAAO,KAAA;AAAA,EACnD;AACA,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AACvC,EAAA,IAAI,UAAA,KAAe,MAAA,IAAa,uBAAA,CAAwB,UAAU,CAAA,EAAG;AACjE,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,OAAO,UAAA;AACX;AAEO,IAAM,SAAA,GAAY,CAAC,GAAA,EAAa,KAAA,EAAe,MAAA,KAA2B;AAC7E,EAAA,IAAI,CAAC,GAAA,IAAO,uBAAA,CAAwB,KAAK,CAAA,EAAG;AACxC,IAAA,OAAO,MAAA;AAAA,EACX;AACA,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAA,EAAO;AAAA,IAC3B,OAAA,EAAS,MAAA;AAAA,IACT,QAAA,EAAU,gBAAA,EAAiB,GAAI,MAAA,GAAS,KAAA;AAAA,IACxC,QAAQ,gBAAA;AAAiB,GAC5B,CAAA;AACL;AAEO,IAAM,SAAA,GAAiB,CAAC,GAAA,KAAa;AACxC,EAAA,OAAO,OAAA,CAAQ,IAAI,GAAG,CAAA;AAC1B;AAGO,SAAS,gBAA6B,GAAA,EAA0C;AACnF,EAAA,IAAI,GAAA,IAAO,IAAA,IAAQ,GAAA,KAAQ,EAAA,EAAI;AAC3B,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,MAAM,GAAA,GAAM,UAAU,GAAG,CAAA;AACzB,EAAA,IAAI,uBAAA,CAAwB,GAAG,CAAA,EAAG;AAC9B,IAAA,IAAI,GAAA,KAAQ,WAAA,IAAe,GAAA,KAAQ,MAAA,EAAQ;AACvC,MAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,IACtB;AACA,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACzB,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAClB,IAAA,OAAO,IAAA;AAAA,EACX;AACJ;AAOO,IAAM,yBAAyB,MAAM;AACxC,EAAA,+BAAA,GAAkC,OAAA,CAAQ,CAAC,SAAS,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AACxE,EAAA,KAAA,MAAW,YAAA,IAAgB,CAAC,0BAAA,EAA4B,WAAW,CAAA,EAAG;AAClE,IAAA,OAAA,CAAQ,OAAO,YAAY,CAAA;AAAA,EAC/B;AACJ;AAKO,IAAM,eAAA,GAAkB,CAAC,GAAA,KAAyB;AACrD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC7B,EAAA,IAAI,UAAU,MAAA,EAAW;AACrB,IAAA,OAAO,IAAA;AAAA,EACX;AACA,EAAA,IAAI;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAC/B,IAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,IAAY,eAAe,MAAA,EAAQ;AAC/D,MAAA,MAAM,YAAa,MAAA,CAAkC,SAAA;AACrD,MAAA,OAAO,OAAO,SAAA,KAAc,QAAA,IAAY,IAAA,CAAK,KAAI,GAAI,SAAA;AAAA,IACzD;AACA,IAAA,OAAO,KAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AAEJ,IAAA,OAAO,KAAA;AAAA,EACX;AACJ;;;AChFA,SAAS,iBAAA,CAAkB,QAAgB,SAAA,EAAyB;AAChE,EAAA,MAAM,KAAA,GAAQA,OAAAA,CAAQ,GAAA,CAAI,MAAM,CAAA;AAChC,EAAA,IAAI,UAAU,MAAA,EAAW;AACrB,IAAA;AAAA,EACJ;AACA,EAAA,IAAI,uBAAA,CAAwB,KAAK,CAAA,EAAG;AAChC,IAAAA,OAAAA,CAAQ,OAAO,MAAM,CAAA;AACrB,IAAA;AAAA,EACJ;AACA,EAAA,IAAI,CAACA,OAAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,EAAG;AACzB,IAAAA,OAAAA,CAAQ,GAAA,CAAI,SAAA,EAAW,KAAK,CAAA;AAAA,EAChC;AACA,EAAAA,OAAAA,CAAQ,OAAO,MAAM,CAAA;AACzB;AAEA,SAAS,uBAAA,CAAwB,QAAgB,SAAA,EAAyB;AACtE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,MAAM,CAAA;AAChD,IAAA,IAAI,SAAS,IAAA,EAAM;AACf,MAAA;AAAA,IACJ;AACA,IAAA,IAAI,CAAC,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA,EAAG;AACzC,MAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAA,EAAW,KAAK,CAAA;AAAA,IAChD;AACA,IAAA,MAAA,CAAO,YAAA,CAAa,WAAW,MAAM,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,SAAS,yBAAA,CAA0B,QAAgB,SAAA,EAAyB;AACxE,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,cAAA,EAAgB;AACzD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,cAAA,CAAe,OAAA,CAAQ,MAAM,CAAA;AAClD,IAAA,IAAI,SAAS,IAAA,EAAM;AACf,MAAA;AAAA,IACJ;AACA,IAAA,IAAI,CAAC,MAAA,CAAO,cAAA,CAAe,OAAA,CAAQ,SAAS,CAAA,EAAG;AAC3C,MAAA,MAAA,CAAO,cAAA,CAAe,OAAA,CAAQ,SAAA,EAAW,KAAK,CAAA;AAAA,IAClD;AACA,IAAA,MAAA,CAAO,cAAA,CAAe,WAAW,MAAM,CAAA;AAAA,EAC3C,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,SAAS,wBAAA,GAAiC;AACtC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,eAAe,CAAC,CAAA;AACzF,IAAA,KAAA,MAAW,aAAa,IAAA,EAAM;AAC1B,MAAA,MAAM,MAAA,GAAS,SAAA,CAAU,KAAA,CAAM,eAAA,CAAgB,MAAM,CAAA;AACrD,MAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG;AACzB,QAAA;AAAA,MACJ;AACA,MAAA,MAAM,KAAA,GAAQ,MAAA;AACd,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA;AACnD,MAAA,MAAM,MAAM,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAC1D,MAAA,MAAM,MAAA,GAAS,yBAAyB,KAAK,CAAA;AAC7C,MAAA,MAAM,SAAA,GAAY,4BAA4B,KAAK,CAAA;AACnD,MAAA,IAAI,SAAS,IAAA,IAAQ,CAAC,OAAO,YAAA,CAAa,OAAA,CAAQ,MAAM,CAAA,EAAG;AACvD,QAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,MAAA,EAAQ,KAAK,CAAA;AAAA,MAC7C;AACA,MAAA,IAAI,OAAO,IAAA,IAAQ,CAAC,OAAO,YAAA,CAAa,OAAA,CAAQ,SAAS,CAAA,EAAG;AACxD,QAAA,MAAA,CAAO,YAAA,CAAa,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA;AAAA,MAC9C;AACA,MAAA,MAAA,CAAO,YAAA,CAAa,WAAW,SAAS,CAAA;AACxC,MAAA,MAAA,CAAO,YAAA,CAAa,UAAA,CAAW,CAAA,EAAG,SAAS,CAAA,IAAA,CAAM,CAAA;AAAA,IACrD;AAAA,EACJ,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEA,SAAS,8BAAA,GAAuC;AAC5C,EAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,EAAA,MAAM,YAAA,GAAe,CAAC,0BAAA,EAA4B,WAAW,CAAA;AAC7D,EAAA,KAAA,MAAW,QAAQ,YAAA,EAAc;AAC7B,IAAAA,OAAAA,CAAQ,OAAO,IAAI,CAAA;AAAA,EACvB;AACA,EAAA,IAAI,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,QAAA,KAAa,KAAK,YAAA,EAAc;AAEtD,IAAAA,OAAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAAA,EAChC;AACJ;AAMO,SAAS,wBAAA,GAAiC;AAC7C,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA;AAAA,EACJ;AAEA,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,wBAAA,EAA0B;AACxD,IAAA,iBAAA,CAAkB,QAAQ,SAAS,CAAA;AAAA,EACvC;AAEA,EAAA,uBAAA,CAAwB,aAAA,EAAe,eAAA,CAAgB,CAAA,CAAE,GAAG,CAAA;AAC5D,EAAA,uBAAA,CAAwB,SAAS,WAAW,CAAA;AAE5C,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,iCAAA,EAAmC;AACjE,IAAA,yBAAA,CAA0B,QAAQ,SAAS,CAAA;AAAA,EAC/C;AAEA,EAAA,wBAAA,EAAyB;AACzB,EAAA,8BAAA,EAA+B;AAG/B,EAAA,IAAI;AACA,IAAA,MAAA,CAAO,cAAA,EAAgB,WAAW,aAAa,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAGO,SAAS,+BAAA,GAA4C;AACxD,EAAA,MAAM,OAAO,cAAA,EAAe;AAC5B,EAAA,MAAM,UAAA,GAAa;AAAA,IACf,IAAA,CAAK,YAAA;AAAA,IACL,IAAA,CAAK,YAAA;AAAA,IACL,IAAA,CAAK,MAAA;AAAA,IACL,IAAA,CAAK,gBAAA;AAAA,IACL,IAAA,CAAK,QAAA;AAAA,IACL,IAAA,CAAK,UAAA;AAAA,IACL,IAAA,CAAK,SAAA;AAAA,IACL,IAAA,CAAK,eAAA;AAAA,IACL,IAAA,CAAK;AAAA,IACP,MAAA,CAAO,CAAC,IAAA,KAAyB,OAAA,CAAQ,IAAI,CAAC,CAAA;AAEhD,EAAA,MAAM,SAAA,GAAY;AAAA,IACd,eAAA,CAAgB,EAAE,IAAA,CAAK,KAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,OAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,MAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,GAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,IAAA,CAAK,OAAA;AAAA,IACvB,eAAA,CAAgB,EAAE,EAAA,CAAG,GAAA;AAAA,IACrB,eAAA,CAAgB,EAAE,EAAA,CAAG,IAAA;AAAA,IACrB,eAAA,CAAgB,EAAE,EAAA,CAAG;AAAA,GACzB;AAEA,EAAA,OAAO,CAAC,mBAAG,IAAI,GAAA,CAAI,CAAC,GAAG,UAAA,EAAY,GAAG,SAAA,EAAW,GAAG,0BAA0B,CAAC,CAAC,CAAA;AACpF;AAEO,SAAS,6BAAA,GAAsC;AAClD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,cAAA,EAAgB;AACzD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,SAAS,CAAA,IAAK,iCAAA,EAAmC;AACjE,MAAA,IACI,cAAc,eAAA,CAAgB,CAAA,CAAE,MAAM,KAAA,IACtC,SAAA,KAAc,gBAAgB,CAAA,CAAE,KAAA,CAAM,SACtC,SAAA,KAAc,eAAA,CAAgB,EAAE,KAAA,CAAM,OAAA,IACtC,cAAc,eAAA,CAAgB,CAAA,CAAE,MAAM,IAAA,EACxC;AACE,QAAA;AAAA,MACJ;AACA,MAAA,MAAA,CAAO,cAAA,CAAe,WAAW,MAAM,CAAA;AACvC,MAAA,MAAA,CAAO,cAAA,CAAe,WAAW,SAAS,CAAA;AAAA,IAC9C;AACA,IAAA,KAAA,MAAW,OAAO,2BAAA,EAA6B;AAC3C,MAAA,IAAI,QAAQ,aAAA,EAAe;AACvB,QAAA,MAAA,CAAO,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,MACxC;AAAA,IACJ;AACA,IAAA,MAAM,kBAAA,uBAAyB,GAAA,CAAI;AAAA,MAC/B,eAAA,CAAgB,EAAE,KAAA,CAAM,KAAA;AAAA,MACxB,eAAA,CAAgB,EAAE,KAAA,CAAM,KAAA;AAAA,MACxB,eAAA,CAAgB,EAAE,KAAA,CAAM,OAAA;AAAA,MACxB,eAAA,CAAgB,EAAE,KAAA,CAAM,IAAA;AAAA,MACxB,yBAAA;AAAA,MACA,iCAAA;AAAA,MACA,0CAAA;AAAA,MACA;AAAA,KACH,CAAA;AACD,IAAA,MAAM,eAAyB,EAAC;AAChC,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,cAAA,CAAe,QAAQ,CAAA,EAAA,EAAK;AACnD,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,cAAA,CAAe,GAAA,CAAI,CAAC,CAAA;AACvC,MAAA,IAAI,CAAC,GAAA,IAAO,kBAAA,CAAmB,GAAA,CAAI,GAAG,CAAA,EAAG;AACzC,MAAA,IAAI,IAAI,UAAA,CAAW,kBAAkB,KAAK,GAAA,CAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AACnE,QAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,MACzB;AACA,MAAA,IAAI,GAAA,KAAQ,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,GAAA,IAAO,GAAA,KAAQ,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,gBAAA,IAAoB,GAAA,KAAQ,WAAA,EAAa;AAC9G,QAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,MACzB;AACA,MAAA,IAAI,QAAQ,eAAA,CAAgB,CAAA,CAAE,GAAA,CAAI,EAAA,IAAM,QAAQ,wBAAA,EAA0B;AACtE,QAAA,YAAA,CAAa,KAAK,GAAG,CAAA;AAAA,MACzB;AAAA,IACJ;AACA,IAAA,YAAA,CAAa,QAAQ,CAAC,CAAA,KAAM,OAAO,cAAA,CAAe,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EACnE,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEO,SAAS,iCAAA,GAA0C;AACtD,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AACvD,IAAA;AAAA,EACJ;AACA,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,CAAE,MAAA;AAAA,MAC1C,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,eAAe,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,cAAc;AAAA,KAC9F;AACA,IAAA,IAAA,CAAK,QAAQ,CAAC,CAAA,KAAM,OAAO,YAAA,CAAa,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ;AAEO,SAAS,oCAAoC,WAAA,EAAgD;AAChG,EAAA,IAAI,eAAe,IAAA,IAAQ,OAAO,WAAW,WAAA,IAAe,CAAC,OAAO,YAAA,EAAc;AAC9E,IAAA;AAAA,EACJ;AACA,EAAA,MAAM,YAAA,GAAe,eAAA,CAAgB,CAAA,CAAE,IAAA,CAAK,cAAA;AAC5C,EAAA,MAAM,SAAA,GAAY,yBAAyB,WAAW,CAAA;AACtD,EAAA,IAAI;AACA,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,YAAY,CAAA,CAAE,MAAA;AAAA,MAC1C,CAAC,CAAA,KAAA,CAAO,CAAA,CAAE,UAAA,CAAW,eAAe,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,YAAY,CAAA,KAAM,CAAA,KAAM,SAAA,IAAa,CAAA,KAAM,4BAA4B,WAAW;AAAA,KAC5I;AACA,IAAA,IAAA,CAAK,QAAQ,CAAC,CAAA,KAAM,OAAO,YAAA,CAAa,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,EACzD,CAAA,CAAA,MAAQ;AAAA,EAER;AACJ","file":"chunk-YNOZWRK3.js","sourcesContent":["import { WP_STORAGE_KEYS } from './wp-storage-keys'\n\nexport interface StorageKeyConfig {\n    loginDetails?: string\n    refreshToken?: string\n    portal?: string\n    subscriptionType?: string\n    authUser?: string\n    pagination?: string\n    routeMenu?: string\n    associationView?: string\n    emailVerified?: string\n}\n\nconst defaults: Required<StorageKeyConfig> = {\n    loginDetails: WP_STORAGE_KEYS.c.auth.login,\n    refreshToken: WP_STORAGE_KEYS.c.auth.refresh,\n    portal: WP_STORAGE_KEYS.c.auth.portal,\n    subscriptionType: WP_STORAGE_KEYS.c.auth.sub,\n    authUser: WP_STORAGE_KEYS.c.auth.login,\n    pagination: WP_STORAGE_KEYS.c.ui.pag,\n    routeMenu: WP_STORAGE_KEYS.c.ui.menu,\n    associationView: WP_STORAGE_KEYS.c.ui.assoc,\n    emailVerified: WP_STORAGE_KEYS.c.auth.emailOk\n}\n\nlet runtimeKeys: Required<StorageKeyConfig> = { ...defaults }\n\nexport function configureStorageKeys(overrides: StorageKeyConfig = {}): void {\n    runtimeKeys = { ...defaults, ...runtimeKeys, ...overrides }\n    if (overrides.authUser === undefined) {\n        runtimeKeys.authUser = runtimeKeys.loginDetails\n    }\n}\n\n/** Test helper — restore default cookie key names. */\nexport function resetStorageKeysForTests(): void {\n    runtimeKeys = { ...defaults }\n}\n\nexport function getStorageKeys(): Readonly<Required<StorageKeyConfig>> {\n    return runtimeKeys\n}\n\nexport { WP_STORAGE_KEYS } from './wp-storage-keys'\n","import Cookies from 'js-cookie'\nimport { getClientAuthCookieNamesToClear } from './storage-migration'\n\nfunction cookieSecureFlag(): boolean {\n    if (typeof window === 'undefined') return true\n    return window.location.protocol === 'https:'\n}\n\n/** Values that must never be persisted in readable cookies. */\nexport function isCorruptCookieRawValue(raw: string | null | undefined): boolean {\n    return raw == null || raw === '' || raw === 'undefined' || raw === 'null'\n}\n\n/** Serialize a value for cookie storage; returns null when write should be skipped. */\nexport function stringifyCookieValue(value: unknown): string | null {\n    if (value === undefined || value === null) {\n        return null\n    }\n    if (typeof value === 'string') {\n        return isCorruptCookieRawValue(value) ? null : value\n    }\n    const serialized = JSON.stringify(value)\n    if (serialized === undefined || isCorruptCookieRawValue(serialized)) {\n        return null\n    }\n    return serialized\n}\n\nexport const setCookie = (key: string, value: string, expire?: number | Date) => {\n    if (!key || isCorruptCookieRawValue(value)) {\n        return undefined\n    }\n    return Cookies.set(key, value, {\n        expires: expire,\n        sameSite: cookieSecureFlag() ? 'none' : 'lax',\n        secure: cookieSecureFlag()\n    })\n}\n\nexport const getCookie: any = (key: any) => {\n    return Cookies.get(key)\n}\n\n/** Parse JSON stored in a cookie; removes corrupt values on read (self-heal). */\nexport function parseCookieJson<T = unknown>(key: string | null | undefined): T | null {\n    if (key == null || key === '') {\n        return null\n    }\n    const raw = getCookie(key)\n    if (isCorruptCookieRawValue(raw)) {\n        if (raw === 'undefined' || raw === 'null') {\n            Cookies.remove(key)\n        }\n        return null\n    }\n    try {\n        return JSON.parse(raw) as T\n    } catch {\n        Cookies.remove(key)\n        return null\n    }\n}\n\nexport const removeCookie = (key: any) => {\n    return Cookies.remove(key)\n}\n\n/** Clears client-portal session cookies only (does not wipe admin cookies on shared localhost). */\nexport const clearClientAuthCookies = () => {\n    getClientAuthCookieNamesToClear().forEach((name) => Cookies.remove(name))\n    for (const legacyAccess of ['woodsportal_access_token', 'AUTH_CRED']) {\n        Cookies.remove(legacyAccess)\n    }\n}\n\n/** @deprecated Prefer {@link clearClientAuthCookies} */\nexport const removeAllCookie = clearClientAuthCookies\n\nexport const isCookieExpired = (key: string): boolean => {\n    const value = Cookies.get(key)\n    if (value === undefined) {\n        return true\n    }\n    try {\n        const parsed = JSON.parse(value)\n        if (parsed && typeof parsed === 'object' && 'expiresAt' in parsed) {\n            const expiresAt = (parsed as { expiresAt?: number }).expiresAt\n            return typeof expiresAt === 'number' && Date.now() > expiresAt\n        }\n        return false\n    } catch {\n        // Plain string values (e.g. refresh token) rely on browser cookie expiry.\n        return false\n    }\n}\n","import Cookies from 'js-cookie'\nimport {\n    CLIENT_COOKIE_MIGRATIONS,\n    CLIENT_SESSION_STORAGE_MIGRATIONS,\n    LEGACY_CLIENT_AUTH_COOKIES,\n    LEGACY_CLIENT_SESSION_EXACT,\n    WP_STORAGE_KEYS,\n    WP_UI_THEME,\n    wpClientIframeRefreshKey,\n    wpClientIframeRefreshExpKey\n} from './wp-storage-keys'\nimport { getStorageKeys } from './storage-keys'\nimport { isCorruptCookieRawValue } from './cookie'\n\nfunction migrateCookiePair(legacy: string, canonical: string): void {\n    const value = Cookies.get(legacy)\n    if (value === undefined) {\n        return\n    }\n    if (isCorruptCookieRawValue(value)) {\n        Cookies.remove(legacy)\n        return\n    }\n    if (!Cookies.get(canonical)) {\n        Cookies.set(canonical, value)\n    }\n    Cookies.remove(legacy)\n}\n\nfunction migrateLocalStoragePair(legacy: string, canonical: string): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        const value = window.localStorage.getItem(legacy)\n        if (value == null) {\n            return\n        }\n        if (!window.localStorage.getItem(canonical)) {\n            window.localStorage.setItem(canonical, value)\n        }\n        window.localStorage.removeItem(legacy)\n    } catch {\n        // private mode\n    }\n}\n\nfunction migrateSessionStoragePair(legacy: string, canonical: string): void {\n    if (typeof window === 'undefined' || !window.sessionStorage) {\n        return\n    }\n    try {\n        const value = window.sessionStorage.getItem(legacy)\n        if (value == null) {\n            return\n        }\n        if (!window.sessionStorage.getItem(canonical)) {\n            window.sessionStorage.setItem(canonical, value)\n        }\n        window.sessionStorage.removeItem(legacy)\n    } catch {\n        // ignore\n    }\n}\n\nfunction migrateIframeRefreshKeys(): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        const keys = Object.keys(window.localStorage).filter((k) => k.startsWith('wp_iframe_rt_'))\n        for (const legacyKey of keys) {\n            const suffix = legacyKey.slice('wp_iframe_rt_'.length)\n            if (suffix.endsWith('_exp')) {\n                continue\n            }\n            const hubId = suffix\n            const token = window.localStorage.getItem(legacyKey)\n            const exp = window.localStorage.getItem(`${legacyKey}_exp`)\n            const newKey = wpClientIframeRefreshKey(hubId)\n            const newExpKey = wpClientIframeRefreshExpKey(hubId)\n            if (token != null && !window.localStorage.getItem(newKey)) {\n                window.localStorage.setItem(newKey, token)\n            }\n            if (exp != null && !window.localStorage.getItem(newExpKey)) {\n                window.localStorage.setItem(newExpKey, exp)\n            }\n            window.localStorage.removeItem(legacyKey)\n            window.localStorage.removeItem(`${legacyKey}_exp`)\n        }\n    } catch {\n        // ignore\n    }\n}\n\nfunction removeLegacyAccessTokenCookies(): void {\n    const keys = getStorageKeys()\n    const legacyAccess = ['woodsportal_access_token', 'AUTH_CRED']\n    for (const name of legacyAccess) {\n        Cookies.remove(name)\n    }\n    if (keys.authUser && keys.authUser !== keys.loginDetails) {\n        // legacy duplicate profile mirror — uplift handled by migration; drop separate user cookie\n        Cookies.remove(keys.authUser)\n    }\n}\n\n/**\n * One-time uplift: read legacy browser keys, write canonical `wp.*` keys, delete legacy.\n * Safe to call on every boot (idempotent).\n */\nexport function migrateLegacyStorageKeys(): void {\n    if (typeof window === 'undefined') {\n        return\n    }\n\n    for (const [legacy, canonical] of CLIENT_COOKIE_MIGRATIONS) {\n        migrateCookiePair(legacy, canonical)\n    }\n\n    migrateLocalStoragePair('hubSpotData', WP_STORAGE_KEYS.c.hub)\n    migrateLocalStoragePair('theme', WP_UI_THEME)\n\n    for (const [legacy, canonical] of CLIENT_SESSION_STORAGE_MIGRATIONS) {\n        migrateSessionStoragePair(legacy, canonical)\n    }\n\n    migrateIframeRefreshKeys()\n    removeLegacyAccessTokenCookies()\n\n    // Drop dead forget-password key\n    try {\n        window.sessionStorage?.removeItem('entredEmail')\n    } catch {\n        // ignore\n    }\n}\n\n/** All client auth cookie names to remove on logout (canonical + legacy + configured). */\nexport function getClientAuthCookieNamesToClear(): string[] {\n    const keys = getStorageKeys()\n    const configured = [\n        keys.loginDetails,\n        keys.refreshToken,\n        keys.portal,\n        keys.subscriptionType,\n        keys.authUser,\n        keys.pagination,\n        keys.routeMenu,\n        keys.associationView,\n        keys.emailVerified\n    ].filter((name): name is string => Boolean(name))\n\n    const canonical = [\n        WP_STORAGE_KEYS.c.auth.login,\n        WP_STORAGE_KEYS.c.auth.refresh,\n        WP_STORAGE_KEYS.c.auth.portal,\n        WP_STORAGE_KEYS.c.auth.sub,\n        WP_STORAGE_KEYS.c.auth.emailOk,\n        WP_STORAGE_KEYS.c.ui.pag,\n        WP_STORAGE_KEYS.c.ui.menu,\n        WP_STORAGE_KEYS.c.ui.assoc\n    ]\n\n    return [...new Set([...configured, ...canonical, ...LEGACY_CLIENT_AUTH_COOKIES])]\n}\n\nexport function clearClientSessionStorageKeys(): void {\n    if (typeof window === 'undefined' || !window.sessionStorage) {\n        return\n    }\n    try {\n        for (const [legacy, canonical] of CLIENT_SESSION_STORAGE_MIGRATIONS) {\n            if (\n                canonical === WP_STORAGE_KEYS.c.login.email ||\n                canonical === WP_STORAGE_KEYS.c.login.force ||\n                canonical === WP_STORAGE_KEYS.c.login.passkey ||\n                canonical === WP_STORAGE_KEYS.c.login.done\n            ) {\n                continue\n            }\n            window.sessionStorage.removeItem(legacy)\n            window.sessionStorage.removeItem(canonical)\n        }\n        for (const key of LEGACY_CLIENT_SESSION_EXACT) {\n            if (key === 'entredEmail') {\n                window.sessionStorage.removeItem(key)\n            }\n        }\n        const preservedLoginKeys = new Set([\n            WP_STORAGE_KEYS.c.login.email,\n            WP_STORAGE_KEYS.c.login.force,\n            WP_STORAGE_KEYS.c.login.passkey,\n            WP_STORAGE_KEYS.c.login.done,\n            'woodsportal.login.email',\n            'woodsportal.login.forcePreLogin',\n            'woodsportal.login.passkeyPrimaryEnrolled',\n            'woodsportal.login.preLoginCompletedKey'\n        ])\n        const keysToRemove: string[] = []\n        for (let i = 0; i < window.sessionStorage.length; i++) {\n            const key = window.sessionStorage.key(i)\n            if (!key || preservedLoginKeys.has(key)) continue\n            if (key.startsWith('woodsportal.mfa.') || key.startsWith('wp.c.mfa.')) {\n                keysToRemove.push(key)\n            }\n            if (key === WP_STORAGE_KEYS.c.auth.err || key === WP_STORAGE_KEYS.c.auth.refreshExhausted || key === 'authError') {\n                keysToRemove.push(key)\n            }\n            if (key === WP_STORAGE_KEYS.c.sso.cb || key === 'sso_callback_processed') {\n                keysToRemove.push(key)\n            }\n        }\n        keysToRemove.forEach((k) => window.sessionStorage.removeItem(k))\n    } catch {\n        // ignore\n    }\n}\n\nexport function clearClientIframeRefreshLocalKeys(): void {\n    if (typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    try {\n        const keys = Object.keys(window.localStorage).filter(\n            (k) => k.startsWith('wp_iframe_rt_') || k.startsWith(WP_STORAGE_KEYS.c.auth.iframeRtPrefix)\n        )\n        keys.forEach((k) => window.localStorage.removeItem(k))\n    } catch {\n        // ignore\n    }\n}\n\nexport function clearStaleIframeRefreshForOtherHubs(activeHubId: string | number | undefined): void {\n    if (activeHubId == null || typeof window === 'undefined' || !window.localStorage) {\n        return\n    }\n    const activePrefix = WP_STORAGE_KEYS.c.auth.iframeRtPrefix\n    const activeKey = wpClientIframeRefreshKey(activeHubId)\n    try {\n        const keys = Object.keys(window.localStorage).filter(\n            (k) => (k.startsWith('wp_iframe_rt_') || k.startsWith(activePrefix)) && k !== activeKey && k !== wpClientIframeRefreshExpKey(activeHubId)\n        )\n        keys.forEach((k) => window.localStorage.removeItem(k))\n    } catch {\n        // ignore\n    }\n}\n"]}

package/dist/cross-tab-session-TUFJ6KU7.js

@@ -0,0 +1,9 @@
+export { applyCrossTabSessionRevocation, installCrossTabSessionListener, resetCrossTabSessionSyncForTests, signalSessionChanged } from './chunk-6YOL5LPB.js';
+import './chunk-55MIERLJ.js';
+import './chunk-BURJ2NUL.js';
+import './chunk-PFOSN7EB.js';
+import './chunk-B2OVKOJU.js';
+import './chunk-YNOZWRK3.js';
+import './chunk-BKT4MFQM.js';
+//# sourceMappingURL=cross-tab-session-TUFJ6KU7.js.map
+//# sourceMappingURL=cross-tab-session-TUFJ6KU7.js.map

package/dist/cross-tab-session-TUFJ6KU7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"cross-tab-session-TUFJ6KU7.js"}

package/dist/entries/auth.d.ts

@@ -1,5 +1,5 @@
-import { p as preLogin, l as login, c as clientSession, h as handoff, a as logout, v as verifyEmail, r as registerExistingUser, f as forgetPassword, b as resetPassword, d as resetPasswordVerifyToken, e as verifyEmailResend, g as resendEmail, i as changePassword, m as me, j as profile, k as profileUpdate, n as verifyOtp, s as sendMfaOtp, o as pendingPasskeyOptions, q as pendingPasskeyVerify, t as getMfaStatus, u as setMfaPreferences, w as startPhoneVerify, x as confirmPhoneVerify, y as totpEnrollStart, z as totpEnrollVerify, A as totpDisable, B as phoneUnverify, C as backupCodesRegenerate, D as mfaOptOut, E as webauthnRegisterOptions, F as webauthnRegisterVerify, G as webauthnAuthOptions, H as webauthnAuthVerify, I as listWebauthnCredentials, J as deleteWebauthnCredential, K as passkeyLoginOptions, L as passkeyLoginVerify, M as getSecurityOverview, N as getSecurityLoginActivity, O as getSecuritySessions, P as revokeSecuritySession, Q as revokeOtherSecuritySessions, R as getLoginBootstrap, S as getSsoDetails, T as generateSsoUrl, U as ssoCallback, V as getRefreshToken, W as getAuthRefreshToken, X as getAccessToken, Y as clearAccessToken, Z as isAuthenticated, _ as isAuthenticateApp, $ as isAccessTokenExpired, a0 as isExpiresAccessToken } from '../http-errors-DqdtoJ1y.js';
-export { an as ActiveSession, aH as EditorPreviewMockHandler, aI as EditorPreviewMockResult, ao as HttpClientConfig, ap as HttpErrorKind, aJ as LoginBootstrapMfaPolicy, aK as LoginBootstrapPortal, aL as LoginBootstrapResponse, aM as LoginBootstrapSsoProvider, ar as LoginHistoryRow, as as LoginResponseData, at as MfaEnrollmentStatus, au as MfaMethod, av as MfaMethodOption, aw as MfaPortalScopeContext, ax as PaginationResponse, ay as SERVICE_UNAVAILABLE_MESSAGE, az as SecurityOverview, a2 as TwoFaVerificationRequest, aB as classifyHttpError, aC as getFieldErrors, aD as getFormErrors, aE as getHttpErrorMessage, aF as initializeHttpClient, aG as isServiceUnavailableError, aN as setEditorPreviewMockHandler } from '../http-errors-DqdtoJ1y.js';
+import { p as preLogin, l as login, c as clientSession, h as handoff, a as logout, r as register, v as verifyEmail, b as registerExistingUser, f as forgetPassword, d as resetPassword, e as resetPasswordVerifyToken, g as verifyEmailResend, i as resendEmail, j as changePassword, m as me, k as profile, n as profileUpdate, o as verifyOtp, s as sendMfaOtp, q as pendingPasskeyOptions, t as pendingPasskeyVerify, u as getMfaStatus, w as setMfaPreferences, x as startPhoneVerify, y as confirmPhoneVerify, z as totpEnrollStart, A as totpEnrollVerify, B as totpDisable, C as phoneUnverify, D as backupCodesRegenerate, E as mfaOptOut, F as webauthnRegisterOptions, G as webauthnRegisterVerify, H as webauthnAuthOptions, I as webauthnAuthVerify, J as listWebauthnCredentials, K as deleteWebauthnCredential, L as passkeyLoginOptions, M as passkeyLoginVerify, N as getSecurityOverview, O as getSecurityLoginActivity, P as getSecuritySessions, Q as revokeSecuritySession, R as revokeOtherSecuritySessions, S as getLoginBootstrap, T as getSsoDetails, U as generateSsoUrl, V as ssoCallback, W as getRefreshToken, X as refreshSession, Y as getAuthRefreshToken, Z as getAccessToken, _ as clearAccessToken, $ as isAuthenticated, a0 as isAuthenticateApp, a1 as isAccessTokenExpired, a2 as isExpiresAccessToken, a3 as hasRefreshSession, a4 as hasValidAccessToken, a5 as didLastRefreshFail, a6 as isSessionRefreshExhausted, a7 as isRefreshInFlight, a8 as resetSessionAuthState, a9 as clearSessionRefreshExhaustedState, aa as hydrateSessionRefreshState, ab as SessionContractInput } from '../http-errors-Bwhj6cfB.js';
+export { ay as ActiveSession, az as ApiErrorPayload, aA as AuthErrorAction, aB as AuthErrorCode, aC as AuthErrorCodeValue, aD as AuthFunnelState, aE as AuthInterceptorPolicyConfig, aF as AuthPolicyRoutes, aG as AuthRouteAction, bl as EditorPreviewMockHandler, bm as EditorPreviewMockResult, aH as HttpClientConfig, aI as HttpErrorKind, bn as LoginBootstrapMfaPolicy, bo as LoginBootstrapPortal, bp as LoginBootstrapResponse, bq as LoginBootstrapSsoProvider, aK as LoginHistoryRow, aL as LoginResponseData, aM as MfaBootRecoveryResult, aN as MfaEnrollmentStatus, aO as MfaMethod, aP as MfaMethodOption, aQ as MfaPortalScopeContext, aR as PaginationResponse, aS as SERVICE_UNAVAILABLE_MESSAGE, aT as SecurityOverview, aV as StoredAuthError, ad as TwoFaVerificationRequest, aW as UnauthorizedPageCopy, aX as WoodsportalRequestConfig, aY as classifyHttpError, a_ as getFieldErrors, a$ as getFormErrors, b0 as getHttpErrorMessage, b2 as getUnauthorizedPageCopy, b3 as hasAuthenticatedAccess, b4 as hasValidAccess, b5 as initializeHttpClient, b6 as isFullyAuthenticated, b7 as isMfaPendingSession, b8 as isOptionalAuthFailureUrl, b9 as isServiceUnavailableError, ba as isSessionProbeUrl, bb as parseApiErrorPayload, bc as persistAuthError, bd as readPersistedAuthError, be as recoverMfaGateOnBoot, bg as resolveAuthErrorAction, bh as resolveAuthRouteAction, br as setEditorPreviewMockHandler, bi as setSessionLifecycleListener, bj as startVisibilityRefreshScheduler, bk as stopVisibilityRefreshScheduler } from '../http-errors-Bwhj6cfB.js';
 export { C as ChangePasswordPayload, F as ForgetPasswordPayload, L as LoginPayload, P as PreLoginPayload, a as ResetPasswordPayload, R as ResetPasswordVerifyTokenPayload, V as VerifyEmailPayload } from '../index-Bh9eY8sA.js';
 import 'axios';
 
@@ -10,6 +10,7 @@ declare const api: {
         clientSession: typeof clientSession;
         handoff: typeof handoff;
         logout: typeof logout;
+        register: typeof register;
         verifyEmail: typeof verifyEmail;
         registerExistingUser: typeof registerExistingUser;
         forgetPassword: typeof forgetPassword;
@@ -61,6 +62,7 @@ declare const api: {
         };
         session: {
             getRefreshToken: typeof getRefreshToken;
+            refreshSession: typeof refreshSession;
             refreshAccessToken: typeof getAuthRefreshToken;
             getAccessToken: typeof getAccessToken;
             clearAccessToken: typeof clearAccessToken;
@@ -69,8 +71,20 @@ declare const api: {
             isAccessTokenExpired: typeof isAccessTokenExpired;
             isExpiresAccessToken: typeof isExpiresAccessToken;
             isCookieExpired: (key: string) => boolean;
+            hasRefreshSession: typeof hasRefreshSession;
+            hasValidAccessToken: typeof hasValidAccessToken;
+            didLastRefreshFail: typeof didLastRefreshFail;
+            isSessionRefreshExhausted: typeof isSessionRefreshExhausted;
+            isRefreshInFlight: typeof isRefreshInFlight;
+            resetSessionAuthState: typeof resetSessionAuthState;
+            clearSessionRefreshExhaustedState: typeof clearSessionRefreshExhaustedState;
+            hydrateSessionRefreshState: typeof hydrateSessionRefreshState;
+            contract: () => SessionContractInput;
+            isFullyAuthenticated: () => boolean;
+            hasAuthenticatedAccess: () => boolean;
+            hasValidAccess: () => boolean;
         };
     };
 };
 
-export { api };
+export { SessionContractInput, api };

package/dist/entries/auth.js

@@ -1,7 +1,12 @@
-import { authApi } from '../chunk-VCYJAVD3.js';
-export { SERVICE_UNAVAILABLE_MESSAGE, classifyHttpError, getFieldErrors, getFormErrors, getHttpErrorMessage, initializeHttpClient, isServiceUnavailableError, setEditorPreviewMockHandler } from '../chunk-4AMFPSO2.js';
-import '../chunk-ZEJGWZK3.js';
-import '../chunk-QPSCMK4W.js';
+import { authApi } from '../chunk-HAXXPW65.js';
+export { hasAuthenticatedAccess, hasValidAccess, isFullyAuthenticated, isMfaPendingSession, recoverMfaGateOnBoot, resolveAuthRouteAction } from '../chunk-HAXXPW65.js';
+export { isOptionalAuthFailureUrl, isSessionProbeUrl, persistAuthError, readPersistedAuthError, resolveAuthErrorAction } from '../chunk-GUYIJ4ZE.js';
+export { SERVICE_UNAVAILABLE_MESSAGE, classifyHttpError, getFieldErrors, getFormErrors, getHttpErrorMessage, initializeHttpClient, isServiceUnavailableError, setEditorPreviewMockHandler, startVisibilityRefreshScheduler, stopVisibilityRefreshScheduler } from '../chunk-WNE4LSVH.js';
+import '../chunk-PFOSN7EB.js';
+export { setSessionLifecycleListener } from '../chunk-B2OVKOJU.js';
+export { AuthErrorCode, getUnauthorizedPageCopy, parseApiErrorPayload } from '../chunk-COHBSTHF.js';
+import '../chunk-YNOZWRK3.js';
+import '../chunk-BKT4MFQM.js';
 
 // src/main/entries/auth.ts
 var api = {

package/dist/entries/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/main/entries/auth.ts"],"names":[],"mappings":";;;;;;AAoCO,IAAM,GAAA,GAAM;AAAA,EACf,IAAA,EAAM;AACV","file":"auth.js","sourcesContent":["/**\n * Auth-only subpath export — login, MFA, security, SSO, token helpers.\n * Does not import CRM feature modules.\n */\nimport { authApi } from '../api/nested-auth-api'\n\nexport { initializeHttpClient, getFormErrors, getFieldErrors, setEditorPreviewMockHandler } from '../core/http/http-client'\nexport type { HttpClientConfig, EditorPreviewMockHandler, EditorPreviewMockResult } from '../core/http/http-client'\n\nexport { classifyHttpError, getHttpErrorMessage, isServiceUnavailableError, SERVICE_UNAVAILABLE_MESSAGE } from '../core/http/http-errors'\nexport type { HttpErrorKind } from '../core/http/http-errors'\n\nexport type {\n    PreLoginPayload,\n    LoginPayload,\n    VerifyEmailPayload,\n    ResetPasswordVerifyTokenPayload,\n    ResetPasswordPayload,\n    ForgetPasswordPayload,\n    ChangePasswordPayload,\n    MfaMethod,\n    MfaMethodOption,\n    MfaPortalScopeContext,\n    LoginBootstrapResponse,\n    LoginBootstrapMfaPolicy,\n    LoginBootstrapPortal,\n    LoginBootstrapSsoProvider,\n    LoginResponseData,\n    TwoFaVerificationRequest,\n    MfaEnrollmentStatus,\n    SecurityOverview,\n    LoginHistoryRow,\n    ActiveSession,\n    PaginationResponse\n} from '../core/types'\n\nexport const api = {\n    auth: authApi\n}\n"]}
+{"version":3,"sources":["../../src/main/entries/auth.ts"],"names":[],"mappings":";;;;;;;;;;;AAsEO,IAAM,GAAA,GAAM;AAAA,EACf,IAAA,EAAM;AACV","file":"auth.js","sourcesContent":["/**\n * Auth-only subpath export — login, MFA, security, SSO, token helpers.\n * Does not import CRM feature modules.\n */\nimport { authApi } from '../api/nested-auth-api'\n\nexport { initializeHttpClient, getFormErrors, getFieldErrors, setEditorPreviewMockHandler } from '../core/http/http-client'\nexport { setSessionLifecycleListener } from '../core/http/token-store'\nexport type { HttpClientConfig, EditorPreviewMockHandler, EditorPreviewMockResult } from '../core/http/http-client'\n\nexport { classifyHttpError, getHttpErrorMessage, isServiceUnavailableError, SERVICE_UNAVAILABLE_MESSAGE } from '../core/http/http-errors'\nexport type { HttpErrorKind } from '../core/http/http-errors'\n\nexport {\n    AuthErrorCode,\n    parseApiErrorPayload,\n    getUnauthorizedPageCopy,\n    resolveAuthErrorAction,\n    isOptionalAuthFailureUrl,\n    isSessionProbeUrl,\n    persistAuthError,\n    readPersistedAuthError,\n    hasValidAccess,\n    isFullyAuthenticated,\n    isMfaPendingSession,\n    hasAuthenticatedAccess,\n    recoverMfaGateOnBoot,\n    startVisibilityRefreshScheduler,\n    stopVisibilityRefreshScheduler,\n    resolveAuthRouteAction\n} from '../core/auth/index.js'\nexport type {\n    ApiErrorPayload,\n    StoredAuthError,\n    AuthErrorCodeValue,\n    UnauthorizedPageCopy,\n    AuthErrorAction,\n    AuthPolicyRoutes,\n    AuthInterceptorPolicyConfig,\n    WoodsportalRequestConfig,\n    SessionContractInput,\n    MfaBootRecoveryResult,\n    AuthRouteAction,\n    AuthFunnelState\n} from '../core/auth/index.js'\n\nexport type {\n    PreLoginPayload,\n    LoginPayload,\n    VerifyEmailPayload,\n    ResetPasswordVerifyTokenPayload,\n    ResetPasswordPayload,\n    ForgetPasswordPayload,\n    ChangePasswordPayload,\n    MfaMethod,\n    MfaMethodOption,\n    MfaPortalScopeContext,\n    LoginBootstrapResponse,\n    LoginBootstrapMfaPolicy,\n    LoginBootstrapPortal,\n    LoginBootstrapSsoProvider,\n    LoginResponseData,\n    TwoFaVerificationRequest,\n    MfaEnrollmentStatus,\n    SecurityOverview,\n    LoginHistoryRow,\n    ActiveSession,\n    PaginationResponse\n} from '../core/types'\n\nexport const api = {\n    auth: authApi\n}\n"]}

package/dist/entries/crm.d.ts

@@ -160,6 +160,7 @@ declare const store: {
             modifiedObjectsData(results: any): void;
             clearTablePrependData(): void;
             setTablePrependData(response: any, props?: any): Promise<void>;
+            updateTablePrependData(response: any, payload?: any): any;
         };
     };
     user: {

package/dist/entries/crm.js

@@ -1,8 +1,12 @@
-import { crmApi } from '../chunk-2TG7X2ML.js';
-import { navigationApi, storage } from '../chunk-4AMFPSO2.js';
-import '../chunk-7Q6HRCUA.js';
-import { actions8, syncStore, actions5, emailStore, actions4, noteStore, actions7, userStore, actions2, tableStore, tableUiActions, tableUiStore } from '../chunk-ZEJGWZK3.js';
-import '../chunk-QPSCMK4W.js';
+import { crmApi } from '../chunk-FJAOCLB4.js';
+import '../chunk-55MIERLJ.js';
+import { navigationApi } from '../chunk-WNE4LSVH.js';
+import '../chunk-BURJ2NUL.js';
+import { actions8, syncStore, actions5, emailStore, actions4, noteStore, actions6, userStore, actions2, tableStore, tableUiActions, tableUiStore } from '../chunk-PFOSN7EB.js';
+import { storage } from '../chunk-B2OVKOJU.js';
+import '../chunk-COHBSTHF.js';
+import '../chunk-YNOZWRK3.js';
+import '../chunk-BKT4MFQM.js';
 
 // src/main/entries/crm.ts
 var api = {
@@ -13,7 +17,7 @@ var store = {
   storage,
   tableUi: { store: tableUiStore, actions: tableUiActions },
   table: { store: tableStore, actions: actions2 },
-  user: { store: userStore, actions: actions7 },
+  user: { store: userStore, actions: actions6 },
   note: { store: noteStore, actions: actions4 },
   email: { store: emailStore, actions: actions5 },
   sync: { store: syncStore, actions: actions8 }

package/dist/entries/crm.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/main/entries/crm.ts"],"names":["actions"],"mappings":";;;;;;;AAqBO,IAAM,GAAA,GAAM;AAAA,EACf,GAAA,EAAK,MAAA;AAAA,EACL,UAAA,EAAY;AAChB;AAEO,IAAM,KAAA,GAAQ;AAAA,EACjB,OAAA;AAAA,EACA,OAAA,EAAS,EAAE,KAAA,EAAO,YAAA,EAAc,SAAS,cAAA,EAAe;AAAA,EACxD,KAAA,EAAO,EAAE,KAAA,EAAO,UAAA,WAAYA,QAAA,EAAsB;AAAA,EAClD,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA,EAAY;AAAA,EAC/C,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA,EAAY;AAAA,EAC/C,KAAA,EAAO,EAAE,KAAA,EAAO,UAAA,EAAY,SAASA,QAAAA,EAAa;AAAA,EAClD,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA;AACvC","file":"crm.js","sourcesContent":["/**\n * CRM subpath export — pipelines, objects, notes, emails, files, cache purge, navigation, state.\n */\nimport { crmApi } from '../api/nested-crm-api'\nimport { navigationApi } from '../api/navigation-api'\nimport {\n    tableStore,\n    tableActions,\n    tableUiStore,\n    tableUiActions,\n    userStore,\n    userActions,\n    noteStore,\n    noteActions,\n    emailStore,\n    emailActions,\n    syncStore,\n    syncActions\n} from '../state'\nimport { storage } from '../core/utils/localStorage'\n\nexport const api = {\n    crm: crmApi,\n    navigation: navigationApi\n}\n\nexport const store = {\n    storage,\n    tableUi: { store: tableUiStore, actions: tableUiActions },\n    table: { store: tableStore, actions: tableActions },\n    user: { store: userStore, actions: userActions },\n    note: { store: noteStore, actions: noteActions },\n    email: { store: emailStore, actions: emailActions },\n    sync: { store: syncStore, actions: syncActions }\n}\n\nexport type { CrmCachePurgeOptions } from '../core/types/cache-purge'\nexport type {\n    CachePurgeRequest,\n    CachePurgeTarget,\n    CachePurgeListQuery,\n    CachePurgeView,\n    CachePurgeDomain,\n    CachePurgeMode,\n    PurgeResult,\n    CreateCachePurgeJobOptions\n} from '../core/types/cache-purge'\n"]}
+{"version":3,"sources":["../../src/main/entries/crm.ts"],"names":["actions"],"mappings":";;;;;;;;;;;AAqBO,IAAM,GAAA,GAAM;AAAA,EACf,GAAA,EAAK,MAAA;AAAA,EACL,UAAA,EAAY;AAChB;AAEO,IAAM,KAAA,GAAQ;AAAA,EACjB,OAAA;AAAA,EACA,OAAA,EAAS,EAAE,KAAA,EAAO,YAAA,EAAc,SAAS,cAAA,EAAe;AAAA,EACxD,KAAA,EAAO,EAAE,KAAA,EAAO,UAAA,WAAYA,QAAA,EAAsB;AAAA,EAClD,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA,EAAY;AAAA,EAC/C,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA,EAAY;AAAA,EAC/C,KAAA,EAAO,EAAE,KAAA,EAAO,UAAA,EAAY,SAASA,QAAAA,EAAa;AAAA,EAClD,IAAA,EAAM,EAAE,KAAA,EAAO,SAAA,EAAW,SAASA,QAAAA;AACvC","file":"crm.js","sourcesContent":["/**\n * CRM subpath export — pipelines, objects, notes, emails, files, cache purge, navigation, state.\n */\nimport { crmApi } from '../api/nested-crm-api'\nimport { navigationApi } from '../api/navigation-api'\nimport {\n    tableStore,\n    tableActions,\n    tableUiStore,\n    tableUiActions,\n    userStore,\n    userActions,\n    noteStore,\n    noteActions,\n    emailStore,\n    emailActions,\n    syncStore,\n    syncActions\n} from '../state'\nimport { storage } from '../core/utils/localStorage'\n\nexport const api = {\n    crm: crmApi,\n    navigation: navigationApi\n}\n\nexport const store = {\n    storage,\n    tableUi: { store: tableUiStore, actions: tableUiActions },\n    table: { store: tableStore, actions: tableActions },\n    user: { store: userStore, actions: userActions },\n    note: { store: noteStore, actions: noteActions },\n    email: { store: emailStore, actions: emailActions },\n    sync: { store: syncStore, actions: syncActions }\n}\n\nexport type { CrmCachePurgeOptions } from '../core/types/cache-purge'\nexport type {\n    CachePurgeRequest,\n    CachePurgeTarget,\n    CachePurgeListQuery,\n    CachePurgeView,\n    CachePurgeDomain,\n    CachePurgeMode,\n    PurgeResult,\n    CreateCachePurgeJobOptions\n} from '../core/types/cache-purge'\n"]}