@ai-matrx/auth 0.3.3 → 0.3.5

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog — @ai-matrx/auth
 
+## 0.3.5
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/auth/v0.3.4..npm/auth/v0.3.5 -- apps/shared/auth`).
+No source changes intended and no consumer action required.
+
+## 0.3.4
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/auth/v0.3.3..npm/auth/v0.3.4 -- apps/shared/auth`).
+No source changes intended and no consumer action required.
+
 ## 0.3.3
 
 Automatic changed-only republish (docs/metadata drift since the last tag — see

package/dist/credentials.d.cts

@@ -60,10 +60,17 @@ type MatrxCredential = {
  * The async source of the current credential. `get()` resolves when the host
  * knows its auth state (null = anonymous); `onChange` lets transports refresh
  * cached headers when the credential rotates.
+ *
+ * `ready()` is the session-ready signal: it resolves once sign-in has settled
+ * (a session attached, or the host knows there is none). Transports await it
+ * — bounded — before reading the credential, so a call issued while a session
+ * is still attaching never leaves anonymously. Omit it when `get()` already
+ * waits.
  */
 interface CredentialsPort {
     get(): Promise<MatrxCredential | null>;
     onChange?(cb: () => void): () => void;
+    ready?(): Promise<void>;
 }
 /** Prefix that marks a bearer token as an AI Matrx API key, never a JWT. */
 declare const API_KEY_PREFIX = "mx_";

package/dist/credentials.d.ts

@@ -60,10 +60,17 @@ type MatrxCredential = {
  * The async source of the current credential. `get()` resolves when the host
  * knows its auth state (null = anonymous); `onChange` lets transports refresh
  * cached headers when the credential rotates.
+ *
+ * `ready()` is the session-ready signal: it resolves once sign-in has settled
+ * (a session attached, or the host knows there is none). Transports await it
+ * — bounded — before reading the credential, so a call issued while a session
+ * is still attaching never leaves anonymously. Omit it when `get()` already
+ * waits.
  */
 interface CredentialsPort {
     get(): Promise<MatrxCredential | null>;
     onChange?(cb: () => void): () => void;
+    ready?(): Promise<void>;
 }
 /** Prefix that marks a bearer token as an AI Matrx API key, never a JWT. */
 declare const API_KEY_PREFIX = "mx_";

package/dist/matrx-oauth.cjs

@@ -131,7 +131,7 @@ function personIdFromAccessToken(token) {
     expiresAtMs: typeof payload.exp === "number" ? payload.exp * 1e3 : null
   };
 }
-function extractErrorMessage(raw) {
+function oauthErrorFromBody(raw) {
   try {
     const j = JSON.parse(raw);
     for (const key of ["error_description", "error_message", "msg", "error", "code"]) {
@@ -268,7 +268,7 @@ function createMatrxOAuth(config, ports) {
       };
     }
     const code = String(body["error"] ?? body["error_code"] ?? res.status);
-    const detail = extractErrorMessage(text) ?? text.slice(0, 200);
+    const detail = oauthErrorFromBody(text) ?? text.slice(0, 200);
     if (isExchange) {
       throw new MatrxOAuthError("token_exchange_failed", `Token exchange failed (${res.status}): ${detail}`);
     }

package/dist/matrx-oauth.js

@@ -97,7 +97,7 @@ function personIdFromAccessToken(token) {
     expiresAtMs: typeof payload.exp === "number" ? payload.exp * 1e3 : null
   };
 }
-function extractErrorMessage(raw) {
+function oauthErrorFromBody(raw) {
   try {
     const j = JSON.parse(raw);
     for (const key of ["error_description", "error_message", "msg", "error", "code"]) {
@@ -234,7 +234,7 @@ function createMatrxOAuth(config, ports) {
       };
     }
     const code = String(body["error"] ?? body["error_code"] ?? res.status);
-    const detail = extractErrorMessage(text) ?? text.slice(0, 200);
+    const detail = oauthErrorFromBody(text) ?? text.slice(0, 200);
     if (isExchange) {
       throw new MatrxOAuthError("token_exchange_failed", `Token exchange failed (${res.status}): ${detail}`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/auth",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "AI Matrx sign-in, session and organizations for every app: sign in/out, session storage and refresh per platform (browser, Next.js, extension, desktop, Node), the current person, their organizations and favourites, the one active organization (held requests, never a list filter), and the credentials @ai-matrx/data and @ai-matrx/api read.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -211,5 +211,5 @@
     "test": "vitest run",
     "verify:tarball": "node ./scripts/verify-tarball.mjs"
   },
-  "gitHead": "74ed4eaab1a7c0a791b80979812f1dad0973d4a8"
+  "gitHead": "6bf5dc0d5ee5a5071f767405726c136bf7f5ab69"
 }