@asteby/metacore-auth 6.0.0 → 7.1.0

package/README.md

@@ -99,3 +99,24 @@ export function SignInRoute() {
 - **Factory, not singleton** — `createApiClient` avoids baking env vars into the library. The host app wires token / language / branch getters.
 - **Pages are brand-less** — accept `brandName`, `logo`, `showcase`, `headerSlot`, `footerSlot` so each app supplies its own identity.
 - **`onSubmit` delegated** — pages don't assume endpoints, toasts, or navigation. The caller owns the network layer.
+
+## `AuthProvider` / `useAuth` are deprecated
+
+Both exports remain in the public API for back-compat, but they are now thin wrappers over `useAuthStore`:
+
+- `AuthProvider` is a `Fragment` that, on mount, optionally seeds the store with an `initialUser` / `initialAccessToken` (SSR / hydration use-case). It owns no local state and renders no Context.
+- `useAuth()` projects the store's `AuthUser` down to the legacy `{ user, login, logout, isAuthenticated }` shape. `login` / `logout` mutate the same store, so `useAuth()` and `useAuthStore` cannot diverge.
+
+**Prefer `useAuthStore` directly in new code:**
+
+```ts
+// Reading
+const user = useAuthStore((state) => state.auth.user)
+
+// Writing
+useAuthStore.getState().auth.setUser(fullUser)
+useAuthStore.getState().auth.setAccessToken(token)
+useAuthStore.getState().auth.reset() // clears both user & token
+```
+
+The legacy hook is kept indefinitely; it's free of cost now that it's a read-through. The deprecation is purely a "prefer the typed, fully-featured surface" hint — not a removal timeline.

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export { useAuthStore, AUTH_STORAGE_KEYS } from './store';
 export type { AuthUser, AuthState } from './store';
 export { AuthProvider, useAuth } from './provider';
-export type { AuthProviderProps } from './provider';
+export type { AuthProviderProps, LegacyAuthUser } from './provider';
 export { createApiClient } from './api-client';
 export type { CreateApiClientOptions, ApiClient } from './api-client';
 export { createAuthGuard } from './guards';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AACzD,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAGlD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAClD,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,YAAY,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAGrE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,YAAY,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAGtD,cAAc,SAAS,CAAA;AAGvB,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AACzD,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAIlD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAClD,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAGnE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,YAAY,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAGrE,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,YAAY,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAGtD,cAAc,SAAS,CAAA;AAGvB,cAAc,cAAc,CAAA"}

package/dist/index.js

@@ -1,6 +1,7 @@
 // Store
 export { useAuthStore, AUTH_STORAGE_KEYS } from './store';
-// Provider
+// Provider — thin wrapper around the store, kept for back-compat.
+// New code should consume `useAuthStore` directly.
 export { AuthProvider, useAuth } from './provider';
 // API client factory
 export { createApiClient } from './api-client';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAGzD,WAAW;AACX,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGlD,qBAAqB;AACrB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAG9C,eAAe;AACf,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAG1C,QAAQ;AACR,cAAc,SAAS,CAAA;AAEvB,aAAa;AACb,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAGzD,kEAAkE;AAClE,mDAAmD;AACnD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGlD,qBAAqB;AACrB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAG9C,eAAe;AACf,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAG1C,QAAQ;AACR,cAAc,SAAS,CAAA;AAEvB,aAAa;AACb,cAAc,cAAc,CAAA"}

package/dist/provider.d.ts

@@ -1,21 +1,26 @@
 import type { ReactNode } from 'react';
-interface User {
+import { type AuthUser } from './store';
+/**
+ * Lightweight legacy user shape returned by {@link useAuth}.
+ *
+ * This is a strict subset of {@link AuthUser} kept for backwards-compatibility
+ * with consumers written against the original Context-based AuthProvider. New
+ * code should consume {@link AuthUser} via `useAuthStore` directly.
+ */
+export interface LegacyAuthUser {
     name: string;
     email: string;
     role: string;
     avatar: string;
 }
-interface AuthContextType {
-    user: User | null;
-    login: (email: string, role: string) => void;
-    logout: () => void;
-    isAuthenticated: boolean;
-}
 export interface AuthProviderProps {
     children: ReactNode;
     /**
      * localStorage key used to persist the lightweight user object.
-     * Default: `saas_user`
+     *
+     * @deprecated The canonical store now manages persistence under
+     * `AUTH_STORAGE_KEYS.USER_STORAGE` / `AUTH_STORAGE_KEYS.ACCESS_TOKEN`. This
+     * prop is kept as a no-op for source compatibility.
      */
     storageKey?: string;
     /**
@@ -23,13 +28,58 @@ export interface AuthProviderProps {
      */
     signInPath?: string;
     /**
-     * Default avatar URL injected into the lightweight user returned by
-     * `login(email, role)`. Apps can override per-use by calling
-     * `useAuthStore().setUser()` directly with the full user payload.
+     * Default avatar URL injected into the lightweight user produced by the
+     * legacy `login(email, role)` helper.
      */
     defaultAvatar?: string;
+    /**
+     * Optional initial user to seed the store with on mount. Useful for SSR /
+     * hydration scenarios where the host knows the user before the store has
+     * had a chance to read from `localStorage`. Once seeded, all subsequent
+     * state lives in the zustand store.
+     */
+    initialUser?: AuthUser | null;
+    /**
+     * Optional initial access token to seed the store with on mount. Same
+     * SSR/hydration use-case as {@link initialUser}.
+     */
+    initialAccessToken?: string;
 }
-export declare function AuthProvider({ children, storageKey, signInPath, defaultAvatar, }: AuthProviderProps): import("react/jsx-runtime").JSX.Element;
-export declare function useAuth(): AuthContextType;
-export {};
+/**
+ * Thin wrapper that forwards an optional initial user/token into
+ * {@link useAuthStore} on mount. **All state lives in the zustand store** —
+ * the provider holds no local state and renders no Context.
+ *
+ * @deprecated Use `useAuthStore` directly. `AuthProvider` is retained for
+ * back-compat and for SSR / initial-state injection. The matching legacy
+ * `useAuth` hook reads from the same store, so mounting the provider is
+ * purely optional for new code.
+ */
+export declare function AuthProvider({ children, initialUser, initialAccessToken, storageKey: _storageKey, }: AuthProviderProps): import("react/jsx-runtime").JSX.Element;
+/**
+ * Legacy auth hook. Reads from the canonical {@link useAuthStore} and exposes
+ * the original `{ user, login, logout, isAuthenticated }` shape so that
+ * consumers written against the pre-store API keep working.
+ *
+ * Behavioural notes for back-compat:
+ * - `user` is projected down to the {@link LegacyAuthUser} subset.
+ * - `login(email, role)` builds a minimal user and writes it to the store via
+ *   `auth.setUser(...)`. Apps that need the full {@link AuthUser} should
+ *   call `useAuthStore.getState().auth.setUser(fullUser)` themselves.
+ * - `logout()` calls `auth.reset()` (which clears both user and token) and
+ *   navigates to {@link AuthProviderProps.signInPath} (defaults to `/sign-in`).
+ *
+ * @deprecated Prefer `useAuthStore(state => state.auth.user)` (or the full
+ * `auth` slice) for new code. This hook will continue to work — it's a
+ * read-through to the same store — but the canonical type is {@link AuthUser}.
+ */
+export declare function useAuth(options?: {
+    signInPath?: string;
+    defaultAvatar?: string;
+}): {
+    user: LegacyAuthUser | null;
+    login: (email: string, role: string) => void;
+    logout: () => void;
+    isAuthenticated: boolean;
+};
 //# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGtC,UAAU,IAAI;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,eAAe;IACvB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;IACjB,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5C,MAAM,EAAE,MAAM,IAAI,CAAA;IAClB,eAAe,EAAE,OAAO,CAAA;CACzB;AAID,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,SAAS,CAAA;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,UAAwB,EACxB,UAAuB,EACvB,aAAkB,GACnB,EAAE,iBAAiB,2CA0CnB;AAED,wBAAgB,OAAO,oBAMtB"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAEtC,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAA;AAErD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,SAAS,CAAA;IACnB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;IAC7B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,WAAW,EACX,kBAAkB,EAIlB,UAAU,EAAE,WAAW,GACxB,EAAE,iBAAiB,2CAiBnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,OAAO,CAAC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO;;mBAc7D,MAAM,QAAQ,MAAM;;;EAuB3C"}

package/dist/provider.js

@@ -1,48 +1,86 @@
-import { jsx as _jsx } from "react/jsx-runtime";
-import { createContext, useContext, useEffect, useState } from 'react';
+import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
+import { useEffect, useRef } from 'react';
 import { useNavigate } from '@tanstack/react-router';
-const AuthContext = createContext(undefined);
-export function AuthProvider({ children, storageKey = 'saas_user', signInPath = '/sign-in', defaultAvatar = '', }) {
-    const navigate = useNavigate();
-    const [user, setUser] = useState(null);
-    // Load user from localStorage on mount (simple persistence)
+import { useAuthStore } from './store';
+/**
+ * Thin wrapper that forwards an optional initial user/token into
+ * {@link useAuthStore} on mount. **All state lives in the zustand store** —
+ * the provider holds no local state and renders no Context.
+ *
+ * @deprecated Use `useAuthStore` directly. `AuthProvider` is retained for
+ * back-compat and for SSR / initial-state injection. The matching legacy
+ * `useAuth` hook reads from the same store, so mounting the provider is
+ * purely optional for new code.
+ */
+export function AuthProvider({ children, initialUser, initialAccessToken, 
+// storageKey is intentionally accepted but unused: kept in the signature
+// so existing consumers don't break, and so editors still surface it as a
+// prop with a deprecation hint via JSDoc.
+storageKey: _storageKey, }) {
+    const seededRef = useRef(false);
     useEffect(() => {
-        const storedUser = localStorage.getItem(storageKey);
-        if (storedUser) {
-            try {
-                setUser(JSON.parse(storedUser));
-            }
-            catch (e) {
-                console.error('Failed to parse user from storage', e);
-            }
+        if (seededRef.current)
+            return;
+        seededRef.current = true;
+        const { auth } = useAuthStore.getState();
+        if (initialUser !== undefined && auth.user == null) {
+            auth.setUser(initialUser);
+        }
+        if (initialAccessToken && !auth.accessToken) {
+            auth.setAccessToken(initialAccessToken);
         }
-    }, [storageKey]);
+    }, [initialUser, initialAccessToken]);
+    return _jsx(_Fragment, { children: children });
+}
+/**
+ * Legacy auth hook. Reads from the canonical {@link useAuthStore} and exposes
+ * the original `{ user, login, logout, isAuthenticated }` shape so that
+ * consumers written against the pre-store API keep working.
+ *
+ * Behavioural notes for back-compat:
+ * - `user` is projected down to the {@link LegacyAuthUser} subset.
+ * - `login(email, role)` builds a minimal user and writes it to the store via
+ *   `auth.setUser(...)`. Apps that need the full {@link AuthUser} should
+ *   call `useAuthStore.getState().auth.setUser(fullUser)` themselves.
+ * - `logout()` calls `auth.reset()` (which clears both user and token) and
+ *   navigates to {@link AuthProviderProps.signInPath} (defaults to `/sign-in`).
+ *
+ * @deprecated Prefer `useAuthStore(state => state.auth.user)` (or the full
+ * `auth` slice) for new code. This hook will continue to work — it's a
+ * read-through to the same store — but the canonical type is {@link AuthUser}.
+ */
+export function useAuth(options = {}) {
+    const { signInPath = '/sign-in', defaultAvatar = '' } = options;
+    const navigate = useNavigate();
+    const user = useAuthStore((state) => state.auth.user);
+    const legacyUser = user
+        ? {
+            name: user.name,
+            email: user.email,
+            role: user.role,
+            avatar: user.avatar ?? defaultAvatar,
+        }
+        : null;
     const login = (email, role) => {
         const emailLocal = email.split('@')[0] ?? email;
-        const newUser = {
+        const next = {
+            id: '',
             name: emailLocal,
             email,
             role,
             avatar: defaultAvatar,
         };
-        setUser(newUser);
-        localStorage.setItem(storageKey, JSON.stringify(newUser));
+        useAuthStore.getState().auth.setUser(next);
     };
     const logout = () => {
-        setUser(null);
-        localStorage.removeItem(storageKey);
-        localStorage.removeItem('auth-storage');
-        // Note: host app is expected to have `signInPath` in its route tree; cast to any
-        // so we don't require callers to register a literal type here.
+        useAuthStore.getState().auth.reset();
         navigate({ to: signInPath });
     };
-    return (_jsx(AuthContext.Provider, { value: { user, login, logout, isAuthenticated: !!user }, children: children }));
-}
-export function useAuth() {
-    const context = useContext(AuthContext);
-    if (context === undefined) {
-        throw new Error('useAuth must be used within an AuthProvider');
-    }
-    return context;
+    return {
+        user: legacyUser,
+        login,
+        logout,
+        isAuthenticated: !!user,
+    };
 }
 //# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEtE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAgBpD,MAAM,WAAW,GAAG,aAAa,CAA8B,SAAS,CAAC,CAAA;AAqBzE,MAAM,UAAU,YAAY,CAAC,EAC3B,QAAQ,EACR,UAAU,GAAG,WAAW,EACxB,UAAU,GAAG,UAAU,EACvB,aAAa,GAAG,EAAE,GACA;IAClB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAc,IAAI,CAAC,CAAA;IAEnD,4DAA4D;IAC5D,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAS,CAAC,CAAA;YACzC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAA;YACvD,CAAC;QACH,CAAC;IACH,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhB,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAA;QAC/C,MAAM,OAAO,GAAS;YACpB,IAAI,EAAE,UAAU;YAChB,KAAK;YACL,IAAI;YACJ,MAAM,EAAE,aAAa;SACtB,CAAA;QACD,OAAO,CAAC,OAAO,CAAC,CAAA;QAChB,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;IAC3D,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,OAAO,CAAC,IAAI,CAAC,CAAA;QACb,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QACnC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;QACvC,iFAAiF;QACjF,+DAA+D;QAC/D,QAAQ,CAAC,EAAE,EAAE,EAAE,UAAmB,EAAE,CAAC,CAAA;IACvC,CAAC,CAAA;IAED,OAAO,CACL,KAAC,WAAW,CAAC,QAAQ,IAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,YAC1E,QAAQ,GACY,CACxB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;IACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAA;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAiB,MAAM,SAAS,CAAA;AAiDrD;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,QAAQ,EACR,WAAW,EACX,kBAAkB;AAClB,yEAAyE;AACzE,0EAA0E;AAC1E,0CAA0C;AAC1C,UAAU,EAAE,WAAW,GACL;IAClB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAE/B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,CAAC,OAAO;YAAE,OAAM;QAC7B,SAAS,CAAC,OAAO,GAAG,IAAI,CAAA;QAExB,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAA;QACxC,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACnD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC3B,CAAC;QACD,IAAI,kBAAkB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACzC,CAAC;IACH,CAAC,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAErC,OAAO,4BAAG,QAAQ,GAAI,CAAA;AACxB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,OAAO,CAAC,UAA2D,EAAE;IACnF,MAAM,EAAE,UAAU,GAAG,UAAU,EAAE,aAAa,GAAG,EAAE,EAAE,GAAG,OAAO,CAAA;IAC/D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAA;IAC9B,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAErD,MAAM,UAAU,GAA0B,IAAI;QAC5C,CAAC,CAAC;YACE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa;SACrC;QACH,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAA;QAC/C,MAAM,IAAI,GAAa;YACrB,EAAE,EAAE,EAAE;YACN,IAAI,EAAE,UAAU;YAChB,KAAK;YACL,IAAI;YACJ,MAAM,EAAE,aAAa;SACtB,CAAA;QACD,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA;QACpC,QAAQ,CAAC,EAAE,EAAE,EAAE,UAAmB,EAAE,CAAC,CAAA;IACvC,CAAC,CAAA;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,KAAK;QACL,MAAM;QACN,eAAe,EAAE,CAAC,CAAC,IAAI;KACxB,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@asteby/metacore-auth",
-  "version": "6.0.0",
+  "version": "7.1.0",
   "description": "Metacore auth kit — Zustand store, API client factory, login/signup/forgot pages, guards for TanStack Router",
   "license": "Apache-2.0",
   "repository": {
@@ -63,7 +63,7 @@
     "@tanstack/react-router": ">=1.100",
     "framer-motion": ">=10",
     "zustand": ">=5",
-    "@asteby/metacore-ui": "^0.7.0"
+    "@asteby/metacore-ui": "^2.0.0"
   },
   "peerDependenciesMeta": {
     "framer-motion": {
@@ -71,9 +71,9 @@
     }
   },
   "dependencies": {
-    "@hookform/resolvers": "^3.9.0",
+    "@hookform/resolvers": "^5.0.0",
     "axios": "^1.7.7",
-    "lucide-react": "^0.460.0",
+    "lucide-react": "^1.0.0",
     "react-hook-form": "^7.72.0",
     "zod": "^4.3.0"
   },
@@ -84,9 +84,10 @@
     "framer-motion": "^12.0.0",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
-    "typescript": "^5.6.0",
+    "typescript": "^6.0.0",
+    "vitest": "^4.0.0",
     "zustand": "^5.0.0",
-    "@asteby/metacore-ui": "0.7.0"
+    "@asteby/metacore-ui": "2.0.0"
   },
   "publishConfig": {
     "access": "public"
@@ -95,6 +96,7 @@
     "build": "tsc -p tsconfig.json",
     "dev": "tsc -w -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
     "clean": "rm -rf dist"
   }
 }