@alneas/appkit-react 0.1.0 → 0.3.0

package/dist/tools/components/auth/types.d.ts

@@ -1,4 +1,16 @@
 import { z } from 'zod';
+/**
+ * Zod schema for Appkit display-user records with a required ID and valid email.
+ *
+ * @remarks Optional metadata accepts arbitrary values; this schema does not establish
+ * session validity or authorization. See AuthProvider for session verification.
+ *
+ * @example
+ * ```ts
+ * import { UserSchema } from '@alneas/appkit-react/tools/auth';
+ * const user = UserSchema.parse({ id: 'display-1', email: 'reader@example.com' });
+ * ```
+ */
 export declare const UserSchema: z.ZodObject<{
     id: z.ZodString;
     email: z.ZodString;
@@ -8,247 +20,458 @@ export declare const UserSchema: z.ZodObject<{
     emailVerified: z.ZodOptional<z.ZodBoolean>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, z.core.$strip>;
-/** ユーザー情報の定義 */
-export type User = z.infer<typeof UserSchema>;
-/** 組み込み OAuth プロバイダー */
-export type BuiltInOAuthProvider = 'google' | 'line' | 'apple' | 'github';
 /**
- * OAuth プロバイダー
+ * Display-user shape inferred from UserSchema; exclude credentials from optimistic storage.
  *
- * 組み込みプロバイダー (`google`, `line`, `apple`, `github`) に加え、
- * Supabase Dashboard で設定したカスタム OIDC プロバイダー名も指定可能です。
+ * @see AuthProvider for consumption.
+ */
+export type User = z.infer<typeof UserSchema>;
+/**
+ * Common OAuth identifiers; actual support depends on the host adapter/backend.
  *
- * @example
- * ```tsx
- * // 組み込みプロバイダー
- * await loginWithProvider('google');
+ * @see AuthAdapter.loginWithProvider.
+ */
+export type BuiltInOAuthProvider = 'google' | 'line' | 'apple' | 'github';
+/**
+ * OAuth identifier supporting both common names and host-defined custom provider names.
  *
- * // カスタム OIDC プロバイダー（Supabase Dashboard で設定した名前）
- * await loginWithProvider('line-oidc');
- * ```
+ * @see AuthAdapter.loginWithProvider.
  */
 export type OAuthProvider = BuiltInOAuthProvider | (string & {});
+/**
+ * Optional OAuth redirect, scopes and provider query parameters interpreted by the host adapter.
+ *
+ * @see AuthAdapter.loginWithProvider.
+ */
 export interface OAuthLoginOptions {
+    /**
+     * Post-authentication destination interpreted by the adapter.
+     */
     redirectTo?: string;
+    /**
+     * Optional requested provider scopes; adapter support varies.
+     */
     scopes?: string[];
+    /**
+     * Additional provider query parameters; host validation is required.
+     */
     queryParams?: Record<string, string>;
 }
 /**
- * 認証アダプターのインターフェース
- * Firebase, Supabase, Mock などの認証プロバイダーを抽象化します。
+ * Host authentication contract consumed by AuthProvider.
+ *
+ * @remarks Implementations own network access, credentials, session validation and backend
+ * authorization. Optional methods are exposed only when supplied. Methods may reject with
+ * backend/transport errors; AuthProvider tracks login/register/logout/OAuth errors.
+ *
+ * @see AuthProvider for a complete host-adapter example.
  */
 export interface AuthAdapter {
     /**
-     * Optional non-secret namespace for this backend/tenant's optimistic session storage.
-     * Defaults to runtime adapter identity (no cross-reload reuse). Never infer it from cached
-     * profiles or credentials. Provider instances always have separate session query keys.
+     * Optional non-secret backend/tenant namespace for optimistic display cache reuse; omission uses runtime adapter identity.
      */
     readonly cacheScope?: string;
-    /** ログイン */
+    /**
+     * Sign in with email/password.
+     *
+     * @param email - Account email.
+     *
+     * @param password - Account password.
+     *
+     * @returns Signed-in user after adapter completion.
+     */
     login: (email: string, password: string) => Promise<User>;
-    /** 新規登録 */
+    /**
+     * Create an account through the host backend.
+     *
+     * @param email - New account email.
+     *
+     * @param password - New account password.
+     *
+     * @param data - Optional name passed by the bundled registration form.
+     *
+     * @returns Registered user.
+     */
     register: (email: string, password: string, data?: {
+        /** Optional display name. */
         name?: string;
     }) => Promise<User>;
-    /** ログアウト */
+    /**
+     * End the host session.
+     *
+     * @returns No value after sign-out completion.
+     */
     logout: () => Promise<void>;
-    /** パスワードリセットメール送信 */
+    /**
+     * Request a password reset.
+     *
+     * @param email - Account email.
+     *
+     * @returns No value after the host accepts the request; email delivery is host-owned.
+     */
     resetPassword: (email: string) => Promise<void>;
-    /** メールアドレス変更 */
+    /**
+     * Request an account email change.
+     *
+     * @param email - New account email.
+     *
+     * @returns No value after host completion.
+     */
     updateEmail: (email: string) => Promise<void>;
-    /** パスワード変更 */
+    /**
+     * Request an account password change.
+     *
+     * @param password - New password.
+     *
+     * @returns No value after host completion.
+     */
     updatePassword: (password: string) => Promise<void>;
     /**
-     * 再認証（パスワード変更・メール変更前に必要）
+     * Optional confirmation of current credentials.
      *
-     * Firebase などのプロバイダーではセキュリティ上、メールアドレスや
-     * パスワードの変更前に現在のパスワードで再認証する必要があります。
-     * アダプターが対応していない場合は undefined になります。
+     * @param password - Current account password.
      *
-     * @param password - 現在のパスワード
+     * @returns No value after host confirmation.
      */
     reauthenticate?: (password: string) => Promise<void>;
     /**
-     * メールアドレス確認メールを送信
+     * Optional verification-email request.
      *
-     * 新規登録後やメールアドレス変更後に、確認用メールを送信します。
-     * アダプターが対応していない場合は undefined になります。
+     * @returns No value after request completion; delivery is host-owned.
      */
     sendVerificationEmail?: () => Promise<void>;
     /**
-     * 認証トークンを取得
-     *
-     * API 呼び出し時の Authorization ヘッダーに使用するトークンを返します。
-     * Firebase の場合は ID Token、Supabase の場合は access_token を返します。
-     * アダプターが対応していない場合は undefined になります。
+     * Optional host token lookup.
      *
-     * @returns トークン文字列、または未認証の場合は null
+     * @returns Token string or null when unavailable; token type is adapter-specific.
      */
     getToken?: () => Promise<string | null>;
-    /** 現在のユーザーを取得 */
+    /**
+     * Read the current host session user.
+     *
+     * @returns User or null for no session; adapter-specific error handling may reject.
+     */
     getCurrentUser: () => Promise<User | null>;
     /**
-     * 認証状態の変更を監視
+     * Subscribe to host user-state changes.
+     *
+     * @param callback - Receives each observed user or null; timing and initial invocation are adapter-specific.
+     *
+     * @returns Cleanup that stops future observation subject to in-flight adapter work.
      */
     onAuthStateChanged: (callback: (user: User | null) => void) => () => void;
-    /** OAuth サインイン (Google/LINE など) */
+    /**
+     * Optional OAuth sign-in operation.
+     *
+     * @param provider - Host-configured provider identifier.
+     *
+     * @param options - Optional redirect, scopes and query parameters.
+     *
+     * @returns User when available, or null for a redirect-only/incomplete sign-in.
+     */
     loginWithProvider?: (provider: OAuthProvider, options?: OAuthLoginOptions) => Promise<User | null>;
 }
 /**
- * ユーザープロファイルの基本型
- * id は認証ユーザーの uid と同一
+ * Persisted profile keyed by the authentication user ID.
+ *
+ * @see UserProfileProvider for adapter usage.
  */
 export interface BaseProfile {
+    /**
+     * Authentication user ID used as the profile key.
+     */
     id: string;
+    /**
+     * Profile email stored by the host.
+     */
     email: string;
+    /**
+     * Optional host creation timestamp; no format validation is performed.
+     */
     created_at?: Date | string;
+    /**
+     * Optional update timestamp; UserProfileProvider updates use an ISO string.
+     */
     updated_at?: Date | string;
 }
 /**
- * プロファイルアダプターのインターフェース
- * データベースとの同期を抽象化します。
+ * Host persistence contract for authenticated profile records.
+ *
+ * @typeParam T - Persisted record extending BaseProfile; defaults to BaseProfile.
+ *
+ * @remarks No concrete profile backend is bundled. The host must enforce authorization
+ * and decide persistence/transaction behavior; operations may reject with backend errors.
  *
- * @template T プロファイルの型 (BaseProfile を継承)
+ * @see UserProfileProvider for setup.
  */
 export interface ProfileAdapter<T extends BaseProfile = BaseProfile> {
-    /** テーブル/コレクション名 */
+    /**
+     * Collection name used in detail/list query keys.
+     */
     tableName: string;
     /**
-     * 新規ユーザー作成時にプロファイルを作成
-     * @param uid 認証ユーザーID
-     * @param authUser 認証ユーザー情報
-     * @param additionalData 追加データ
+     * Create a profile for an authenticated user.
+     *
+     * @param uid - Authentication user ID.
+     *
+     * @param authUser - Authenticated display user.
+     *
+     * @param additionalData - Optional default profile fields supplied by UserProfileProvider.
+     *
+     * @returns Created persisted profile.
      */
     create: (uid: string, authUser: User, additionalData?: Partial<T>) => Promise<T>;
     /**
-     * ログイン時にプロファイルを取得
-     * @param uid 認証ユーザーID
+     * Read a profile by authentication user ID.
+     *
+     * @param uid - Profile/user identifier.
+     *
+     * @returns Profile or null when absent.
      */
     get: (uid: string) => Promise<T | null>;
     /**
-     * プロファイルを更新
-     * @param uid 認証ユーザーID
-     * @param updates 更新データ
+     * Persist partial profile updates.
+     *
+     * @param uid - Profile identifier.
+     *
+     * @param updates - Partial fields to persist.
+     *
+     * @returns Updated persisted record.
      */
     update: (uid: string, updates: Partial<T>) => Promise<T>;
     /**
-     * プロファイルを削除
-     * @param uid 認証ユーザーID
+     * Delete a persisted profile.
+     *
+     * @param uid - Profile identifier.
+     *
+     * @returns No value after deletion completes.
      */
     delete: (uid: string) => Promise<void>;
     /**
-     * プロファイルの存在確認
-     * @param uid 認証ユーザーID
+     * Optional existence check.
+     *
+     * @param uid - Profile/user identifier.
+     *
+     * @returns Whether the host record exists.
      */
     exists?: (uid: string) => Promise<boolean>;
 }
-/** 招待種別 */
+/**
+ * Target category for a host-managed invitation.
+ *
+ * @see InvitationAdapter.create.
+ */
 export type InvitationType = 'organization' | 'project' | 'team';
-/** 招待ステータス */
+/**
+ * Host invitation lifecycle state; the type does not perform transitions or expiry checks.
+ *
+ * @see InvitationAdapter.
+ */
 export type InvitationState = 'pending' | 'accepted' | 'declined' | 'expired' | 'cancelled';
 /**
- * 招待情報の定義
+ * Host-managed invitation record with target, recipient and response metadata.
+ *
+ * @see InvitationAdapter.getByToken.
  */
 export interface Invitation {
+    /**
+     * Host invitation identifier.
+     */
     id: string;
-    /** 招待種別 */
+    /**
+     * Invited resource category.
+     */
     type: InvitationType;
-    /** 対象ID (organization_id, project_id, team_id) */
+    /**
+     * Host resource identifier.
+     */
     targetId: string;
-    /** 対象名 (表示用) */
+    /**
+     * Optional target display name.
+     */
     targetName?: string;
-    /** 招待先メールアドレス */
+    /**
+     * Recipient email address.
+     */
     inviteeEmail: string;
-    /** 招待先ユーザーID (既存ユーザーの場合) */
+    /**
+     * Recipient user identifier when already known.
+     */
     inviteeUserId?: string;
-    /** 付与する役割 */
+    /**
+     * Role to grant after host acceptance.
+     */
     role: string;
-    /** ステータス */
+    /**
+     * Current host-managed lifecycle state.
+     */
     state: InvitationState;
-    /** 招待トークン (リンク用) */
+    /**
+     * Invitation-link token; validate and protect it in host code.
+     */
     token: string;
-    /** 有効期限 */
+    /**
+     * Host expiration timestamp as Date or string.
+     */
     expiresAt: Date | string;
-    /** 招待者ID */
+    /**
+     * Inviting user identifier.
+     */
     invitedBy: string;
-    /** 招待者名 (表示用) */
+    /**
+     * Optional inviting user display name.
+     */
     invitedByName?: string;
-    /** 作成日時 */
+    /**
+     * Host creation timestamp.
+     */
     createdAt: Date | string;
-    /** 応答日時 */
+    /**
+     * Optional host acceptance/decline timestamp.
+     */
     respondedAt?: Date | string;
 }
 /**
- * 招待作成パラメータ
+ * Inputs for host invitation creation; no bundled implementation imposes defaults.
+ *
+ * @see InvitationAdapter.create.
  */
 export interface CreateInvitationParams {
+    /**
+     * Invited resource category.
+     */
     type: InvitationType;
+    /**
+     * Target resource identifier.
+     */
     targetId: string;
+    /**
+     * Recipient email address.
+     */
     inviteeEmail: string;
+    /**
+     * Role requested for the recipient.
+     */
     role: string;
-    /** 有効期限 (時間, デフォルト: 168 = 7日) */
+    /**
+     * Optional lifetime in hours; this interface does not enforce a seven-day or other default.
+     */
     expirationHours?: number;
-    /** メッセージ */
+    /**
+     * Optional host-delivered message.
+     */
     message?: string;
 }
 /**
- * 招待承諾時のコールバック
- * organization_members, project_members, team_members への追加処理を実装
+ * Host callback for adding an accepted user to the invited resource.
+ *
+ * @param invitation - Invitation being accepted.
+ *
+ * @param userId - Accepting user identifier.
+ *
+ * @returns No value after host membership work completes.
+ *
+ * @remarks Invocation order and rollback on rejection depend on the host adapter.
+ *
+ * @see InvitationAdapter.accept.
  */
 export type OnInvitationAcceptedCallback = (invitation: Invitation, userId: string) => Promise<void>;
 /**
- * 招待アダプターのインターフェース
- * 組織/プロジェクト/チームへの招待・承認フローを抽象化します。
+ * Host contract for invitation persistence and lifecycle operations.
+ *
+ * @remarks No implementation is bundled here. Host code owns expiry, token validation,
+ * permissions, delivery and transaction semantics. Any operation may reject on backend
+ * failure; optional cleanup is undefined when unsupported.
+ *
+ * @example
+ * ```ts
+ * import type { InvitationAdapter } from '@alneas/appkit-react/tools/auth';
+ * export async function inspectInvitation(adapter: InvitationAdapter, token: string) {
+ *   return adapter.getByToken(token);
+ * }
+ * ```
  */
 export interface InvitationAdapter {
-    /** テーブル/コレクション名 */
+    /**
+     * Host collection name for invitations.
+     */
     tableName: string;
     /**
-     * 招待を作成
-     * @param params 招待パラメータ
-     * @param invitedBy 招待者のユーザーID
+     * Create and optionally deliver an invitation through the host.
+     *
+     * @param params - Recipient, target, role and optional lifetime/message.
+     *
+     * @param invitedBy - Inviting user identifier.
+     *
+     * @returns Created invitation.
      */
     create: (params: CreateInvitationParams, invitedBy: string) => Promise<Invitation>;
     /**
-     * トークンで招待を取得
-     * @param token 招待トークン
+     * Find an invitation by host token.
+     *
+     * @param token - Invitation-link token.
+     *
+     * @returns Matching invitation or null.
      */
     getByToken: (token: string) => Promise<Invitation | null>;
     /**
-     * 招待を承諾
-     * @param token 招待トークン
-     * @param userId 承諾するユーザーID
-     * @param onAccepted メンバー追加処理のコールバック
+     * Accept an invitation and optionally perform membership work.
+     *
+     * @param token - Invitation-link token.
+     *
+     * @param userId - Accepting user identifier.
+     *
+     * @param onAccepted - Optional async host membership callback; host implementation defines ordering and rollback.
+     *
+     * @returns No value after host acceptance completes.
      */
     accept: (token: string, userId: string, onAccepted?: OnInvitationAcceptedCallback) => Promise<void>;
     /**
-     * 招待を拒否
-     * @param token 招待トークン
+     * Decline a host invitation.
+     *
+     * @param token - Invitation-link token.
+     *
+     * @returns No value after host completion.
      */
     decline: (token: string) => Promise<void>;
     /**
-     * ユーザーの保留中の招待を取得
-     * @param email ユーザーのメールアドレス
+     * List pending invitations for a recipient.
+     *
+     * @param email - Recipient email.
+     *
+     * @returns Invitation array, possibly empty.
      */
     listPendingForUser: (email: string) => Promise<Invitation[]>;
     /**
-     * 対象の保留中の招待を取得
-     * @param type 招待種別
-     * @param targetId 対象ID
+     * List pending invitations for a resource.
+     *
+     * @param type - Resource category.
+     *
+     * @param targetId - Resource identifier.
+     *
+     * @returns Invitation array, possibly empty.
      */
     listPendingForTarget: (type: InvitationType, targetId: string) => Promise<Invitation[]>;
     /**
-     * 招待をキャンセル
-     * @param invitationId 招待ID
+     * Cancel a host invitation.
+     *
+     * @param invitationId - Invitation identifier.
+     *
+     * @returns No value after cancellation completes.
      */
     cancel: (invitationId: string) => Promise<void>;
     /**
-     * 招待を再送信 (トークン再生成 + 期限延長)
-     * @param invitationId 招待ID
+     * Request host invitation reissue/delivery.
+     *
+     * @param invitationId - Invitation identifier.
+     *
+     * @returns Updated invitation; token/expiry policy is host-owned.
      */
     resend: (invitationId: string) => Promise<Invitation>;
     /**
-     * 期限切れ招待をクリーンアップ
+     * Optional host expiry cleanup.
+     *
+     * @returns Count of invitations affected by the host cleanup policy.
      */
     cleanupExpired?: () => Promise<number>;
 }

package/dist/tools/components/auth/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","names":["UserSchema","z"],"sources":["../../../../src/tools/components/auth/types.ts"],"sourcesContent":["import { z } from 'zod';\n\nexport const UserSchema = z.object({\n  /** ユーザーの一意識別子 */\n  id: z.string(),\n  /** メールアドレス */\n  email: z.string().email(),\n  /** 表示名 */\n  name: z.string().optional(),\n  /** アバター画像URL */\n  avatarUrl: z.string().optional(),\n  /** ユーザーロール (例: \"admin\", \"user\") */\n  role: z.string().optional(),\n  /** メールアドレスが認証済みかどうか（Firebase 等で利用） */\n  emailVerified: z.boolean().optional(),\n  /** 認証プロバイダー固有のメタデータ */\n  metadata: z.record(z.string(), z.any()).optional(),\n});\n\n/** ユーザー情報の定義 */\nexport type User = z.infer<typeof UserSchema>;\n\n/** 組み込み OAuth プロバイダー */\nexport type BuiltInOAuthProvider = 'google' | 'line' | 'apple' | 'github';\n\n/**\n * OAuth プロバイダー\n *\n * 組み込みプロバイダー (`google`, `line`, `apple`, `github`) に加え、\n * Supabase Dashboard で設定したカスタム OIDC プロバイダー名も指定可能です。\n *\n * @example\n * ```tsx\n * // 組み込みプロバイダー\n * await loginWithProvider('google');\n *\n * // カスタム OIDC プロバイダー（Supabase Dashboard で設定した名前）\n * await loginWithProvider('line-oidc');\n * ```\n */\nexport type OAuthProvider = BuiltInOAuthProvider | (string & {});\n\nexport interface OAuthLoginOptions {\n  redirectTo?: string;\n  scopes?: string[];\n  queryParams?: Record<string, string>;\n}\n\n/**\n * 認証アダプターのインターフェース\n * Firebase, Supabase, Mock などの認証プロバイダーを抽象化します。\n */\nexport interface AuthAdapter {\n  /**\n   * Optional non-secret namespace for this backend/tenant's optimistic session storage.\n   * Defaults to runtime adapter identity (no cross-reload reuse). Never infer it from cached\n   * profiles or credentials. Provider instances always have separate session query keys.\n   */\n  readonly cacheScope?: string;\n  /** ログイン */\n  login: (email: string, password: string) => Promise<User>;\n  /** 新規登録 */\n  register: (email: string, password: string, data?: { name?: string }) => Promise<User>;\n  /** ログアウト */\n  logout: () => Promise<void>;\n  /** パスワードリセットメール送信 */\n  resetPassword: (email: string) => Promise<void>;\n  /** メールアドレス変更 */\n  updateEmail: (email: string) => Promise<void>;\n  /** パスワード変更 */\n  updatePassword: (password: string) => Promise<void>;\n  /**\n   * 再認証（パスワード変更・メール変更前に必要）\n   *\n   * Firebase などのプロバイダーではセキュリティ上、メールアドレスや\n   * パスワードの変更前に現在のパスワードで再認証する必要があります。\n   * アダプターが対応していない場合は undefined になります。\n   *\n   * @param password - 現在のパスワード\n   */\n  reauthenticate?: (password: string) => Promise<void>;\n  /**\n   * メールアドレス確認メールを送信\n   *\n   * 新規登録後やメールアドレス変更後に、確認用メールを送信します。\n   * アダプターが対応していない場合は undefined になります。\n   */\n  sendVerificationEmail?: () => Promise<void>;\n  /**\n   * 認証トークンを取得\n   *\n   * API 呼び出し時の Authorization ヘッダーに使用するトークンを返します。\n   * Firebase の場合は ID Token、Supabase の場合は access_token を返します。\n   * アダプターが対応していない場合は undefined になります。\n   *\n   * @returns トークン文字列、または未認証の場合は null\n   */\n  getToken?: () => Promise<string | null>;\n  /** 現在のユーザーを取得 */\n  getCurrentUser: () => Promise<User | null>;\n\n  /**\n   * 認証状態の変更を監視\n   */\n  onAuthStateChanged: (callback: (user: User | null) => void) => () => void;\n  /** OAuth サインイン (Google/LINE など) */\n  loginWithProvider?: (\n    provider: OAuthProvider,\n    options?: OAuthLoginOptions,\n  ) => Promise<User | null>;\n}\n\n/**\n * ユーザープロファイルの基本型\n * id は認証ユーザーの uid と同一\n */\nexport interface BaseProfile {\n  id: string;\n  email: string;\n  created_at?: Date | string;\n  updated_at?: Date | string;\n}\n\n/**\n * プロファイルアダプターのインターフェース\n * データベースとの同期を抽象化します。\n *\n * @template T プロファイルの型 (BaseProfile を継承)\n */\nexport interface ProfileAdapter<T extends BaseProfile = BaseProfile> {\n  /** テーブル/コレクション名 */\n  tableName: string;\n\n  /**\n   * 新規ユーザー作成時にプロファイルを作成\n   * @param uid 認証ユーザーID\n   * @param authUser 認証ユーザー情報\n   * @param additionalData 追加データ\n   */\n  create: (uid: string, authUser: User, additionalData?: Partial<T>) => Promise<T>;\n\n  /**\n   * ログイン時にプロファイルを取得\n   * @param uid 認証ユーザーID\n   */\n  get: (uid: string) => Promise<T | null>;\n\n  /**\n   * プロファイルを更新\n   * @param uid 認証ユーザーID\n   * @param updates 更新データ\n   */\n  update: (uid: string, updates: Partial<T>) => Promise<T>;\n\n  /**\n   * プロファイルを削除\n   * @param uid 認証ユーザーID\n   */\n  delete: (uid: string) => Promise<void>;\n\n  /**\n   * プロファイルの存在確認\n   * @param uid 認証ユーザーID\n   */\n  exists?: (uid: string) => Promise<boolean>;\n}\n\n// =====================================================\n// Invitation System\n// =====================================================\n\n/** 招待種別 */\nexport type InvitationType = 'organization' | 'project' | 'team';\n\n/** 招待ステータス */\nexport type InvitationState = 'pending' | 'accepted' | 'declined' | 'expired' | 'cancelled';\n\n/**\n * 招待情報の定義\n */\nexport interface Invitation {\n  id: string;\n  /** 招待種別 */\n  type: InvitationType;\n  /** 対象ID (organization_id, project_id, team_id) */\n  targetId: string;\n  /** 対象名 (表示用) */\n  targetName?: string;\n  /** 招待先メールアドレス */\n  inviteeEmail: string;\n  /** 招待先ユーザーID (既存ユーザーの場合) */\n  inviteeUserId?: string;\n  /** 付与する役割 */\n  role: string;\n  /** ステータス */\n  state: InvitationState;\n  /** 招待トークン (リンク用) */\n  token: string;\n  /** 有効期限 */\n  expiresAt: Date | string;\n  /** 招待者ID */\n  invitedBy: string;\n  /** 招待者名 (表示用) */\n  invitedByName?: string;\n  /** 作成日時 */\n  createdAt: Date | string;\n  /** 応答日時 */\n  respondedAt?: Date | string;\n}\n\n/**\n * 招待作成パラメータ\n */\nexport interface CreateInvitationParams {\n  type: InvitationType;\n  targetId: string;\n  inviteeEmail: string;\n  role: string;\n  /** 有効期限 (時間, デフォルト: 168 = 7日) */\n  expirationHours?: number;\n  /** メッセージ */\n  message?: string;\n}\n\n/**\n * 招待承諾時のコールバック\n * organization_members, project_members, team_members への追加処理を実装\n */\nexport type OnInvitationAcceptedCallback = (\n  invitation: Invitation,\n  userId: string,\n) => Promise<void>;\n\n/**\n * 招待アダプターのインターフェース\n * 組織/プロジェクト/チームへの招待・承認フローを抽象化します。\n */\nexport interface InvitationAdapter {\n  /** テーブル/コレクション名 */\n  tableName: string;\n\n  /**\n   * 招待を作成\n   * @param params 招待パラメータ\n   * @param invitedBy 招待者のユーザーID\n   */\n  create: (params: CreateInvitationParams, invitedBy: string) => Promise<Invitation>;\n\n  /**\n   * トークンで招待を取得\n   * @param token 招待トークン\n   */\n  getByToken: (token: string) => Promise<Invitation | null>;\n\n  /**\n   * 招待を承諾\n   * @param token 招待トークン\n   * @param userId 承諾するユーザーID\n   * @param onAccepted メンバー追加処理のコールバック\n   */\n  accept: (\n    token: string,\n    userId: string,\n    onAccepted?: OnInvitationAcceptedCallback,\n  ) => Promise<void>;\n\n  /**\n   * 招待を拒否\n   * @param token 招待トークン\n   */\n  decline: (token: string) => Promise<void>;\n\n  /**\n   * ユーザーの保留中の招待を取得\n   * @param email ユーザーのメールアドレス\n   */\n  listPendingForUser: (email: string) => Promise<Invitation[]>;\n\n  /**\n   * 対象の保留中の招待を取得\n   * @param type 招待種別\n   * @param targetId 対象ID\n   */\n  listPendingForTarget: (type: InvitationType, targetId: string) => Promise<Invitation[]>;\n\n  /**\n   * 招待をキャンセル\n   * @param invitationId 招待ID\n   */\n  cancel: (invitationId: string) => Promise<void>;\n\n  /**\n   * 招待を再送信 (トークン再生成 + 期限延長)\n   * @param invitationId 招待ID\n   */\n  resend: (invitationId: string) => Promise<Invitation>;\n\n  /**\n   * 期限切れ招待をクリーンアップ\n   */\n  cleanupExpired?: () => Promise<number>;\n}\n"],"mappings":";;;AAEA,IAAaA,IAAaC,EAAE,OAAO;CAEjC,IAAIA,EAAE,OAAO;CAEb,OAAOA,EAAE,OAAO,CAAC,CAAC,MAAM;CAExB,MAAMA,EAAE,OAAO,CAAC,CAAC,SAAS;CAE1B,WAAWA,EAAE,OAAO,CAAC,CAAC,SAAS;CAE/B,MAAMA,EAAE,OAAO,CAAC,CAAC,SAAS;CAE1B,eAAeA,EAAE,QAAQ,CAAC,CAAC,SAAS;CAEpC,UAAUA,EAAE,OAAOA,EAAE,OAAO,GAAGA,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS;AACnD,CAAC"}
+{"version":3,"file":"types.js","names":["UserSchema","z"],"sources":["../../../../src/tools/components/auth/types.ts"],"sourcesContent":["import { z } from 'zod';\n\n/**\n * Zod schema for Appkit display-user records with a required ID and valid email.\n *\n * @remarks Optional metadata accepts arbitrary values; this schema does not establish\n * session validity or authorization. See AuthProvider for session verification.\n *\n * @example\n * ```ts\n * import { UserSchema } from '@alneas/appkit-react/tools/auth';\n * const user = UserSchema.parse({ id: 'display-1', email: 'reader@example.com' });\n * ```\n */\nexport const UserSchema = z.object({\n  /**\n   * Stable display user identifier.\n   */\n  id: z.string(),\n  /**\n   * Required valid email address.\n   */\n  email: z.string().email(),\n  /**\n   * Optional display name.\n   */\n  name: z.string().optional(),\n  /**\n   * Optional avatar URL; not validated as a URL by this schema.\n   */\n  avatarUrl: z.string().optional(),\n  /**\n   * Optional host role string used for display.\n   */\n  role: z.string().optional(),\n  /**\n   * Optional host assertion of email verification.\n   */\n  emailVerified: z.boolean().optional(),\n  /**\n   * Optional string-keyed metadata; arbitrary values are accepted.\n   */\n  metadata: z.record(z.string(), z.any()).optional(),\n});\n\n/**\n * Display-user shape inferred from UserSchema; exclude credentials from optimistic storage.\n *\n * @see AuthProvider for consumption.\n */\nexport type User = z.infer<typeof UserSchema>;\n\n/**\n * Common OAuth identifiers; actual support depends on the host adapter/backend.\n *\n * @see AuthAdapter.loginWithProvider.\n */\nexport type BuiltInOAuthProvider = 'google' | 'line' | 'apple' | 'github';\n\n/**\n * OAuth identifier supporting both common names and host-defined custom provider names.\n *\n * @see AuthAdapter.loginWithProvider.\n */\nexport type OAuthProvider = BuiltInOAuthProvider | (string & {});\n\n/**\n * Optional OAuth redirect, scopes and provider query parameters interpreted by the host adapter.\n *\n * @see AuthAdapter.loginWithProvider.\n */\nexport interface OAuthLoginOptions {\n  /**\n   * Post-authentication destination interpreted by the adapter.\n   */\n  redirectTo?: string;\n  /**\n   * Optional requested provider scopes; adapter support varies.\n   */\n  scopes?: string[];\n  /**\n   * Additional provider query parameters; host validation is required.\n   */\n  queryParams?: Record<string, string>;\n}\n\n/**\n * Host authentication contract consumed by AuthProvider.\n *\n * @remarks Implementations own network access, credentials, session validation and backend\n * authorization. Optional methods are exposed only when supplied. Methods may reject with\n * backend/transport errors; AuthProvider tracks login/register/logout/OAuth errors.\n *\n * @see AuthProvider for a complete host-adapter example.\n */\nexport interface AuthAdapter {\n  /**\n   * Optional non-secret backend/tenant namespace for optimistic display cache reuse; omission uses runtime adapter identity.\n   */\n  readonly cacheScope?: string;\n  /**\n   * Sign in with email/password.\n   *\n   * @param email - Account email.\n   *\n   * @param password - Account password.\n   *\n   * @returns Signed-in user after adapter completion.\n   */\n  login: (email: string, password: string) => Promise<User>;\n  /**\n   * Create an account through the host backend.\n   *\n   * @param email - New account email.\n   *\n   * @param password - New account password.\n   *\n   * @param data - Optional name passed by the bundled registration form.\n   *\n   * @returns Registered user.\n   */\n  register: (email: string, password: string, data?: {\n    /** Optional display name. */\n    name?: string;\n  }) => Promise<User>;\n  /**\n   * End the host session.\n   *\n   * @returns No value after sign-out completion.\n   */\n  logout: () => Promise<void>;\n  /**\n   * Request a password reset.\n   *\n   * @param email - Account email.\n   *\n   * @returns No value after the host accepts the request; email delivery is host-owned.\n   */\n  resetPassword: (email: string) => Promise<void>;\n  /**\n   * Request an account email change.\n   *\n   * @param email - New account email.\n   *\n   * @returns No value after host completion.\n   */\n  updateEmail: (email: string) => Promise<void>;\n  /**\n   * Request an account password change.\n   *\n   * @param password - New password.\n   *\n   * @returns No value after host completion.\n   */\n  updatePassword: (password: string) => Promise<void>;\n  /**\n   * Optional confirmation of current credentials.\n   *\n   * @param password - Current account password.\n   *\n   * @returns No value after host confirmation.\n   */\n  reauthenticate?: (password: string) => Promise<void>;\n  /**\n   * Optional verification-email request.\n   *\n   * @returns No value after request completion; delivery is host-owned.\n   */\n  sendVerificationEmail?: () => Promise<void>;\n  /**\n   * Optional host token lookup.\n   *\n   * @returns Token string or null when unavailable; token type is adapter-specific.\n   */\n  getToken?: () => Promise<string | null>;\n  /**\n   * Read the current host session user.\n   *\n   * @returns User or null for no session; adapter-specific error handling may reject.\n   */\n  getCurrentUser: () => Promise<User | null>;\n  /**\n   * Subscribe to host user-state changes.\n   *\n   * @param callback - Receives each observed user or null; timing and initial invocation are adapter-specific.\n   *\n   * @returns Cleanup that stops future observation subject to in-flight adapter work.\n   */\n\n  onAuthStateChanged: (callback: (user: User | null) => void) => () => void;\n  /**\n   * Optional OAuth sign-in operation.\n   *\n   * @param provider - Host-configured provider identifier.\n   *\n   * @param options - Optional redirect, scopes and query parameters.\n   *\n   * @returns User when available, or null for a redirect-only/incomplete sign-in.\n   */\n  loginWithProvider?: (\n    provider: OAuthProvider,\n    options?: OAuthLoginOptions,\n  ) => Promise<User | null>;\n}\n\n/**\n * Persisted profile keyed by the authentication user ID.\n *\n * @see UserProfileProvider for adapter usage.\n */\nexport interface BaseProfile {\n  /**\n   * Authentication user ID used as the profile key.\n   */\n  id: string;\n  /**\n   * Profile email stored by the host.\n   */\n  email: string;\n  /**\n   * Optional host creation timestamp; no format validation is performed.\n   */\n  created_at?: Date | string;\n  /**\n   * Optional update timestamp; UserProfileProvider updates use an ISO string.\n   */\n  updated_at?: Date | string;\n}\n\n/**\n * Host persistence contract for authenticated profile records.\n *\n * @typeParam T - Persisted record extending BaseProfile; defaults to BaseProfile.\n *\n * @remarks No concrete profile backend is bundled. The host must enforce authorization\n * and decide persistence/transaction behavior; operations may reject with backend errors.\n *\n * @see UserProfileProvider for setup.\n */\nexport interface ProfileAdapter<T extends BaseProfile = BaseProfile> {\n  /**\n   * Collection name used in detail/list query keys.\n   */\n  tableName: string;\n  /**\n   * Create a profile for an authenticated user.\n   *\n   * @param uid - Authentication user ID.\n   *\n   * @param authUser - Authenticated display user.\n   *\n   * @param additionalData - Optional default profile fields supplied by UserProfileProvider.\n   *\n   * @returns Created persisted profile.\n   */\n\n  create: (uid: string, authUser: User, additionalData?: Partial<T>) => Promise<T>;\n  /**\n   * Read a profile by authentication user ID.\n   *\n   * @param uid - Profile/user identifier.\n   *\n   * @returns Profile or null when absent.\n   */\n\n  get: (uid: string) => Promise<T | null>;\n  /**\n   * Persist partial profile updates.\n   *\n   * @param uid - Profile identifier.\n   *\n   * @param updates - Partial fields to persist.\n   *\n   * @returns Updated persisted record.\n   */\n\n  update: (uid: string, updates: Partial<T>) => Promise<T>;\n  /**\n   * Delete a persisted profile.\n   *\n   * @param uid - Profile identifier.\n   *\n   * @returns No value after deletion completes.\n   */\n\n  delete: (uid: string) => Promise<void>;\n  /**\n   * Optional existence check.\n   *\n   * @param uid - Profile/user identifier.\n   *\n   * @returns Whether the host record exists.\n   */\n\n  exists?: (uid: string) => Promise<boolean>;\n}\n\n// =====================================================\n// Invitation System\n// =====================================================\n\n/**\n * Target category for a host-managed invitation.\n *\n * @see InvitationAdapter.create.\n */\nexport type InvitationType = 'organization' | 'project' | 'team';\n\n/**\n * Host invitation lifecycle state; the type does not perform transitions or expiry checks.\n *\n * @see InvitationAdapter.\n */\nexport type InvitationState = 'pending' | 'accepted' | 'declined' | 'expired' | 'cancelled';\n\n/**\n * Host-managed invitation record with target, recipient and response metadata.\n *\n * @see InvitationAdapter.getByToken.\n */\nexport interface Invitation {\n  /**\n   * Host invitation identifier.\n   */\n  id: string;\n  /**\n   * Invited resource category.\n   */\n  type: InvitationType;\n  /**\n   * Host resource identifier.\n   */\n  targetId: string;\n  /**\n   * Optional target display name.\n   */\n  targetName?: string;\n  /**\n   * Recipient email address.\n   */\n  inviteeEmail: string;\n  /**\n   * Recipient user identifier when already known.\n   */\n  inviteeUserId?: string;\n  /**\n   * Role to grant after host acceptance.\n   */\n  role: string;\n  /**\n   * Current host-managed lifecycle state.\n   */\n  state: InvitationState;\n  /**\n   * Invitation-link token; validate and protect it in host code.\n   */\n  token: string;\n  /**\n   * Host expiration timestamp as Date or string.\n   */\n  expiresAt: Date | string;\n  /**\n   * Inviting user identifier.\n   */\n  invitedBy: string;\n  /**\n   * Optional inviting user display name.\n   */\n  invitedByName?: string;\n  /**\n   * Host creation timestamp.\n   */\n  createdAt: Date | string;\n  /**\n   * Optional host acceptance/decline timestamp.\n   */\n  respondedAt?: Date | string;\n}\n\n/**\n * Inputs for host invitation creation; no bundled implementation imposes defaults.\n *\n * @see InvitationAdapter.create.\n */\nexport interface CreateInvitationParams {\n  /**\n   * Invited resource category.\n   */\n  type: InvitationType;\n  /**\n   * Target resource identifier.\n   */\n  targetId: string;\n  /**\n   * Recipient email address.\n   */\n  inviteeEmail: string;\n  /**\n   * Role requested for the recipient.\n   */\n  role: string;\n  /**\n   * Optional lifetime in hours; this interface does not enforce a seven-day or other default.\n   */\n  expirationHours?: number;\n  /**\n   * Optional host-delivered message.\n   */\n  message?: string;\n}\n\n/**\n * Host callback for adding an accepted user to the invited resource.\n *\n * @param invitation - Invitation being accepted.\n *\n * @param userId - Accepting user identifier.\n *\n * @returns No value after host membership work completes.\n *\n * @remarks Invocation order and rollback on rejection depend on the host adapter.\n *\n * @see InvitationAdapter.accept.\n */\nexport type OnInvitationAcceptedCallback = (\n  invitation: Invitation,\n  userId: string,\n) => Promise<void>;\n\n/**\n * Host contract for invitation persistence and lifecycle operations.\n *\n * @remarks No implementation is bundled here. Host code owns expiry, token validation,\n * permissions, delivery and transaction semantics. Any operation may reject on backend\n * failure; optional cleanup is undefined when unsupported.\n *\n * @example\n * ```ts\n * import type { InvitationAdapter } from '@alneas/appkit-react/tools/auth';\n * export async function inspectInvitation(adapter: InvitationAdapter, token: string) {\n *   return adapter.getByToken(token);\n * }\n * ```\n */\nexport interface InvitationAdapter {\n  /**\n   * Host collection name for invitations.\n   */\n  tableName: string;\n  /**\n   * Create and optionally deliver an invitation through the host.\n   *\n   * @param params - Recipient, target, role and optional lifetime/message.\n   *\n   * @param invitedBy - Inviting user identifier.\n   *\n   * @returns Created invitation.\n   */\n\n  create: (params: CreateInvitationParams, invitedBy: string) => Promise<Invitation>;\n  /**\n   * Find an invitation by host token.\n   *\n   * @param token - Invitation-link token.\n   *\n   * @returns Matching invitation or null.\n   */\n\n  getByToken: (token: string) => Promise<Invitation | null>;\n  /**\n   * Accept an invitation and optionally perform membership work.\n   *\n   * @param token - Invitation-link token.\n   *\n   * @param userId - Accepting user identifier.\n   *\n   * @param onAccepted - Optional async host membership callback; host implementation defines ordering and rollback.\n   *\n   * @returns No value after host acceptance completes.\n   */\n\n  accept: (\n    token: string,\n    userId: string,\n    onAccepted?: OnInvitationAcceptedCallback,\n  ) => Promise<void>;\n  /**\n   * Decline a host invitation.\n   *\n   * @param token - Invitation-link token.\n   *\n   * @returns No value after host completion.\n   */\n\n  decline: (token: string) => Promise<void>;\n  /**\n   * List pending invitations for a recipient.\n   *\n   * @param email - Recipient email.\n   *\n   * @returns Invitation array, possibly empty.\n   */\n\n  listPendingForUser: (email: string) => Promise<Invitation[]>;\n  /**\n   * List pending invitations for a resource.\n   *\n   * @param type - Resource category.\n   *\n   * @param targetId - Resource identifier.\n   *\n   * @returns Invitation array, possibly empty.\n   */\n\n  listPendingForTarget: (type: InvitationType, targetId: string) => Promise<Invitation[]>;\n  /**\n   * Cancel a host invitation.\n   *\n   * @param invitationId - Invitation identifier.\n   *\n   * @returns No value after cancellation completes.\n   */\n\n  cancel: (invitationId: string) => Promise<void>;\n  /**\n   * Request host invitation reissue/delivery.\n   *\n   * @param invitationId - Invitation identifier.\n   *\n   * @returns Updated invitation; token/expiry policy is host-owned.\n   */\n\n  resend: (invitationId: string) => Promise<Invitation>;\n  /**\n   * Optional host expiry cleanup.\n   *\n   * @returns Count of invitations affected by the host cleanup policy.\n   */\n\n  cleanupExpired?: () => Promise<number>;\n}\n"],"mappings":";;;AAcA,IAAaA,IAAaC,EAAE,OAAO;CAIjC,IAAIA,EAAE,OAAO;CAIb,OAAOA,EAAE,OAAO,CAAC,CAAC,MAAM;CAIxB,MAAMA,EAAE,OAAO,CAAC,CAAC,SAAS;CAI1B,WAAWA,EAAE,OAAO,CAAC,CAAC,SAAS;CAI/B,MAAMA,EAAE,OAAO,CAAC,CAAC,SAAS;CAI1B,eAAeA,EAAE,QAAQ,CAAC,CAAC,SAAS;CAIpC,UAAUA,EAAE,OAAOA,EAAE,OAAO,GAAGA,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS;AACnD,CAAC"}

package/dist/tools/components/auth/useAuth.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"useAuth.cjs","names":["createContext","useContext","react","AuthContext","useAuth","context"],"sources":["../../../../src/tools/components/auth/useAuth.ts"],"sourcesContent":["import { createContext, useContext } from 'react';\nimport type { AuthAdapter, User } from './types';\n\nexport interface AuthState {\n  user: User | null;\n  isLoading: boolean;\n  error: Error | null;\n}\n\n/**\n * 認証コンテキストの値\n *\n * AuthProvider 配下のコンポーネントで useAuth() を通じて取得できます。\n * アダプターが対応していないオプショナルメソッドは undefined になります。\n */\nexport interface AuthContextValue extends AuthState {\n  /** セッションが裏で再検証され、確定した状態か。`optimisticSession` 無効時は常に true */\n  isSessionVerified?: boolean;\n  /** 再検証によって「未ログイン」が確定しているか。`optimisticSession` 無効時は false */\n  isLoggedOutKnown?: boolean;\n  /** 楽観セッションキャッシュを利用中か */\n  optimisticSession?: boolean;\n  /** メール/パスワードでログイン */\n  login: AuthAdapter['login'];\n  /** 新規ユーザー登録 */\n  register: AuthAdapter['register'];\n  /** ログアウト */\n  logout: AuthAdapter['logout'];\n  /** パスワードリセットメール送信 */\n  resetPassword: AuthAdapter['resetPassword'];\n  /** メールアドレス変更 */\n  updateEmail: AuthAdapter['updateEmail'];\n  /** パスワード変更 */\n  updatePassword: AuthAdapter['updatePassword'];\n  /** 再認証（パスワード/メール変更前に必要、アダプター対応時のみ） */\n  reauthenticate?: AuthAdapter['reauthenticate'];\n  /** メールアドレス確認メール送信（アダプター対応時のみ） */\n  sendVerificationEmail?: AuthAdapter['sendVerificationEmail'];\n  /** 認証トークン取得（API 連携用、アダプター対応時のみ） */\n  getToken?: AuthAdapter['getToken'];\n  /** OAuth プロバイダーでログイン（アダプター対応時のみ） */\n  loginWithProvider?: AuthAdapter['loginWithProvider'];\n}\n\nexport const AuthContext = createContext<AuthContextValue | null>(null);\n\n/**\n * 現在の認証状態およびログイン・ログアウト等の認証操作関数を提供するReactフック。\n */\nexport const useAuth = () => {\n  const context = useContext(AuthContext);\n  if (!context) {\n    throw new Error('useAuth must be used within an AuthProvider');\n  }\n  return context;\n};\n"],"mappings":"A,uGA4CA,IAAaG,GAAA,EAAcH,EAAAA,cAAAA,CAAuC,IAAI,EAKzDI,MAAgB,CAC3B,IAAMC,GAAA,EAAUJ,EAAAA,WAAAA,CAAWE,CAAW,EACtC,GAAI,CAACE,EACH,MAAU,MAAM,6CAA6C,EAE/D,OAAOA,CACT,E"}
+{"version":3,"file":"useAuth.cjs","names":["createContext","useContext","react","AuthContext","useAuth","context"],"sources":["../../../../src/tools/components/auth/useAuth.ts"],"sourcesContent":["import { createContext, useContext } from 'react';\nimport type { AuthAdapter, User } from './types';\n\n/**\n * Current display authentication state; see useAuth for provider setup.\n *\n * @see useAuth for the canonical usage example.\n */\nexport interface AuthState {\n  /**\n   * Current display user or null; optimistic display is not proof of a verified session.\n   */\n  user: User | null;\n  /**\n   * True during initial hydration/query loading or tracked login/register/logout/OAuth work.\n   */\n  isLoading: boolean;\n  /**\n   * Last tracked action error or session-query error; null when none is present.\n   */\n  error: Error | null;\n}\n\n/**\n * Authentication state and adapter-backed actions exposed by AuthProvider.\n *\n * @remarks Optional adapter capabilities are undefined when unsupported.\n *\n * @see useAuth for consumption; see AuthAdapter for argument/result contracts.\n */\nexport interface AuthContextValue extends AuthState {\n    /**\n     * Whether a session query has fetched without placeholder data; false before verification even when optimistic caching is disabled.\n     */\n  isSessionVerified?: boolean;\n    /**\n     * Whether backend verification completed with user null; independent of whether optimistic caching is enabled.\n     */\n  isLoggedOutKnown?: boolean;\n    /**\n     * Whether the provider enabled optimistic display caching.\n     */\n  optimisticSession?: boolean;\n    /**\n     * Sign in through the adapter; see AuthAdapter.login.\n     *\n     * @param email - Account email.\n     *\n     * @param password - Account password.\n     *\n     * @returns Signed-in user; adapter failures reject.\n     */\n  login: AuthAdapter['login'];\n    /**\n     * Register through the adapter; see AuthAdapter.register.\n     *\n     * @param email - New account email.\n     *\n     * @param password - New account password.\n     *\n     * @param data - Optional display name.\n     *\n     * @returns Registered user; adapter failures reject.\n     */\n  register: AuthAdapter['register'];\n    /**\n     * Sign out through the adapter; see AuthAdapter.logout.\n     *\n     * @returns No value after adapter sign-out; adapter failures reject.\n     */\n  logout: AuthAdapter['logout'];\n    /**\n     * Request a reset through the adapter; see AuthAdapter.resetPassword.\n     *\n     * @param email - Account email.\n     *\n     * @returns No value after the adapter accepts the reset request; failures reject.\n     */\n  resetPassword: AuthAdapter['resetPassword'];\n    /**\n     * Change email through the adapter; see AuthAdapter.updateEmail.\n     *\n     * @param email - Replacement email.\n     *\n     * @returns No value after adapter completion; failures reject.\n     */\n  updateEmail: AuthAdapter['updateEmail'];\n    /**\n     * Change password through the adapter; see AuthAdapter.updatePassword.\n     *\n     * @param password - Replacement password.\n     *\n     * @returns No value after adapter completion; failures reject.\n     */\n  updatePassword: AuthAdapter['updatePassword'];\n    /**\n     * Optional adapter reauthentication capability; see AuthAdapter.reauthenticate.\n     */\n  reauthenticate?: AuthAdapter['reauthenticate'];\n    /**\n     * Optional verification-email capability; see AuthAdapter.sendVerificationEmail.\n     */\n  sendVerificationEmail?: AuthAdapter['sendVerificationEmail'];\n    /**\n     * Optional token capability; see AuthAdapter.getToken.\n     */\n  getToken?: AuthAdapter['getToken'];\n    /**\n     * Optional OAuth capability; see AuthAdapter.loginWithProvider.\n     */\n  loginWithProvider?: AuthAdapter['loginWithProvider'];\n}\n\n/**\n * Nullable React authentication context; AuthProvider owns its populated value.\n *\n * @see useAuth for supported consumption and missing-provider checks.\n */\nexport const AuthContext = createContext<AuthContextValue | null>(null);\n\n/**\n * Reads authentication state and adapter actions from the nearest AuthProvider.\n *\n * @returns Current display state and provider actions; optional capabilities can be undefined.\n *\n * @throws Error when used outside AuthProvider.\n *\n * @remarks Requires AuthProvider inside QueryClientProvider; no CSS is required by the hook.\n * Actions can reject with adapter errors. Backend authorization remains host-owned.\n *\n * @example\n * ```tsx\n * import type { ReactNode } from 'react';\n * import { QueryClient, QueryClientProvider } from '@tanstack/react-query';\n * import { AuthProvider, useAuth, type AuthAdapter } from '@alneas/appkit-react/tools/auth';\n *\n * function Content() { const { user } = useAuth(); return <span>{user?.email ?? 'Signed out'}</span>; }\n * export function Example({ adapter, queryClient }: { adapter: AuthAdapter; queryClient: QueryClient }) {\n *   return <QueryClientProvider client={queryClient}><AuthProvider adapter={adapter}><Content /></AuthProvider></QueryClientProvider>;\n * }\n * ```\n */\nexport const useAuth = () => {\n  const context = useContext(AuthContext);\n  if (!context) {\n    throw new Error('useAuth must be used within an AuthProvider');\n  }\n  return context;\n};\n"],"mappings":"A,uGAsHA,IAAaG,GAAA,EAAcH,EAAAA,cAAAA,CAAuC,IAAI,EAwBzDI,MAAgB,CAC3B,IAAMC,GAAA,EAAUJ,EAAAA,WAAAA,CAAWE,CAAW,EACtC,GAAI,CAACE,EACH,MAAU,MAAM,6CAA6C,EAE/D,OAAOA,CACT,E"}