@auth-craft/client 0.1.0 → 0.1.1

package/dist/transport/provider/storage/indexeddb.js

@@ -0,0 +1,72 @@
+/**
+ * IndexedDB storage - only stores refresh token in IndexedDB
+ * Suitable for body-based refresh strategy
+ * Persists refresh token for reuse after reload
+ *
+ * @param options - Storage options or legacy dbName string
+ * @param legacyRefreshTokenKey - Legacy refreshTokenKey (for backward compatibility)
+ */
+export function createIndexedDBStorage(options = 'FetchGuardDB', legacyRefreshTokenKey) {
+    // Support both new options object and legacy string arguments
+    const config = typeof options === 'string'
+        ? { dbName: options, refreshTokenKey: legacyRefreshTokenKey ?? 'refreshToken', onError: undefined }
+        : {
+            dbName: options.dbName ?? 'FetchGuardDB',
+            refreshTokenKey: options.refreshTokenKey ?? 'refreshToken',
+            onError: options.onError,
+        };
+    const { dbName, refreshTokenKey, onError } = config;
+    const storeName = 'tokens';
+    const openDB = () => {
+        return new Promise((resolve, reject) => {
+            const request = indexedDB.open(dbName, 1);
+            request.onerror = () => reject(request.error);
+            request.onsuccess = () => resolve(request.result);
+            request.onupgradeneeded = (event) => {
+                const db = event.target.result;
+                if (!db.objectStoreNames.contains(storeName)) {
+                    const store = db.createObjectStore(storeName, { keyPath: 'key' });
+                    store.createIndex('timestamp', 'timestamp', { unique: false });
+                }
+            };
+        });
+    };
+    const promisifyRequest = (request) => {
+        return new Promise((resolve, reject) => {
+            request.onsuccess = () => resolve(request.result);
+            request.onerror = () => reject(request.error);
+        });
+    };
+    return {
+        async get() {
+            try {
+                const db = await openDB();
+                const transaction = db.transaction([storeName], 'readonly');
+                const store = transaction.objectStore(storeName);
+                const result = await promisifyRequest(store.get(refreshTokenKey));
+                return result?.value || null;
+            }
+            catch (error) {
+                onError?.(error, 'get');
+                return null;
+            }
+        },
+        async set(token) {
+            try {
+                const db = await openDB();
+                const transaction = db.transaction([storeName], 'readwrite');
+                const store = transaction.objectStore(storeName);
+                if (token) {
+                    await promisifyRequest(store.put({ key: refreshTokenKey, value: token, timestamp: Date.now() }));
+                }
+                else {
+                    await promisifyRequest(store.delete(refreshTokenKey));
+                }
+            }
+            catch (error) {
+                onError?.(error, token ? 'set' : 'delete');
+            }
+        },
+    };
+}
+//# sourceMappingURL=indexeddb.js.map

package/dist/transport/provider/storage/indexeddb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.js","sourceRoot":"","sources":["../../../../src/transport/provider/storage/indexeddb.ts"],"names":[],"mappings":"AAkBA;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAA4C,cAAc,EAC1D,qBAA8B;IAE9B,8DAA8D;IAC9D,MAAM,MAAM,GACV,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,qBAAqB,IAAI,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE;QACnG,CAAC,CAAC;YACE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,cAAc;YACxC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,cAAc;YAC1D,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;IAER,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACpD,MAAM,SAAS,GAAG,QAAQ,CAAC;IAE3B,MAAM,MAAM,GAAG,GAAyB,EAAE;QACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAE1C,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAElD,OAAO,CAAC,eAAe,GAAG,CAAC,KAAK,EAAE,EAAE;gBAClC,MAAM,EAAE,GAAI,KAAK,CAAC,MAA2B,CAAC,MAAM,CAAC;gBACrD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7C,MAAM,KAAK,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;oBAClE,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAI,OAAsB,EAAc,EAAE;QACjE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,GAAG;YACP,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;gBAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;gBAClE,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC,KAAc,EAAE,KAAK,CAAC,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,KAAK;YACb,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;gBAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBAEjD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;gBACnG,CAAC;qBAAM,CAAC;oBACN,MAAM,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC,KAAc,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/transport/provider/strategy/body.d.ts

@@ -0,0 +1,28 @@
+import type { AuthStrategy } from '../../types';
+/**
+ * Body auth strategy - all auth operations via request body
+ * Suitable for SPA applications
+ *
+ * All tokens/credentials are sent in request body
+ *
+ * Login URL can be:
+ * - Configured once: loginUrl: 'https://api.example.com/auth/login'
+ * - Passed per call: login(payload, 'https://...')
+ *
+ * Header priority (lowest to highest):
+ * - defaultHeaders (from FetchGuardOptions)
+ * - headers (from ProviderPresetConfig)
+ * - Content-Type: application/json
+ */
+export declare function createBodyStrategy(config: {
+    refreshUrl: string;
+    loginUrl: string;
+    logoutUrl: string;
+    headers?: Record<string, string>;
+    defaultHeaders?: Record<string, string>;
+}): AuthStrategy;
+/**
+ * Standard body strategy
+ */
+export declare const bodyStrategy: AuthStrategy;
+//# sourceMappingURL=body.d.ts.map

package/dist/transport/provider/strategy/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../../../src/transport/provider/strategy/body.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAwB,MAAM,aAAa,CAAC;AAEtE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,GAAG,YAAY,CAqDf;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,cAIvB,CAAC"}

package/dist/transport/provider/strategy/body.js

@@ -0,0 +1,73 @@
+/**
+ * Body auth strategy - all auth operations via request body
+ * Suitable for SPA applications
+ *
+ * All tokens/credentials are sent in request body
+ *
+ * Login URL can be:
+ * - Configured once: loginUrl: 'https://api.example.com/auth/login'
+ * - Passed per call: login(payload, 'https://...')
+ *
+ * Header priority (lowest to highest):
+ * - defaultHeaders (from FetchGuardOptions)
+ * - headers (from ProviderPresetConfig)
+ * - Content-Type: application/json
+ */
+export function createBodyStrategy(config) {
+    const baseHeaders = {
+        ...config.defaultHeaders,
+        ...config.headers,
+        'Content-Type': 'application/json',
+    };
+    return {
+        async refresh(refreshToken) {
+            if (!refreshToken) {
+                throw new Error('No refresh token available');
+            }
+            return fetch(config.refreshUrl, {
+                method: 'POST',
+                headers: baseHeaders,
+                body: JSON.stringify({ refreshToken }),
+                credentials: 'include',
+            });
+        },
+        async login(payload, url) {
+            return fetch(url || config.loginUrl, {
+                method: 'POST',
+                headers: baseHeaders,
+                body: JSON.stringify(payload),
+                credentials: 'include',
+            });
+        },
+        async logout(payload) {
+            return fetch(config.logoutUrl, {
+                method: 'POST',
+                headers: baseHeaders,
+                body: payload ? JSON.stringify(payload) : undefined,
+                credentials: 'include',
+            });
+        },
+        async exchangeToken(accessToken, url, options = {}) {
+            const { method = 'POST', payload, headers } = options;
+            return fetch(url, {
+                method,
+                headers: {
+                    ...baseHeaders,
+                    ...headers,
+                    Authorization: `Bearer ${accessToken}`,
+                },
+                body: payload ? JSON.stringify(payload) : undefined,
+                credentials: 'include',
+            });
+        },
+    };
+}
+/**
+ * Standard body strategy
+ */
+export const bodyStrategy = createBodyStrategy({
+    refreshUrl: '/auth/refresh',
+    loginUrl: '/auth/login',
+    logoutUrl: '/auth/logout',
+});
+//# sourceMappingURL=body.js.map

package/dist/transport/provider/strategy/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../../../src/transport/provider/strategy/body.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAMlC;IACC,MAAM,WAAW,GAAG;QAClB,GAAG,MAAM,CAAC,cAAc;QACxB,GAAG,MAAM,CAAC,OAAO;QACjB,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,YAAY;YACxB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;YAED,OAAO,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;gBACtC,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG;YACtB,OAAO,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE;gBACnC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnD,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,GAAW,EAAE,UAAgC,EAAE;YACtF,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;YACtD,OAAO,KAAK,CAAC,GAAG,EAAE;gBAChB,MAAM;gBACN,OAAO,EAAE;oBACP,GAAG,WAAW;oBACd,GAAG,OAAO;oBACV,aAAa,EAAE,UAAU,WAAW,EAAE;iBACvC;gBACD,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnD,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;IAC7C,UAAU,EAAE,eAAe;IAC3B,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,cAAc;CAC1B,CAAC,CAAC"}

package/dist/transport/provider/strategy/cookie.d.ts

@@ -0,0 +1,29 @@
+import type { AuthStrategy } from '../../types';
+/**
+ * Cookie auth strategy - all auth operations via httpOnly cookies
+ * Suitable for SSR and cross-domain authentication
+ *
+ * Refresh token is sent automatically via httpOnly cookie
+ * Credentials are sent in request body
+ *
+ * Login URL can be:
+ * - Configured once: loginUrl: 'https://api.example.com/auth/login'
+ * - Passed per call: login(payload, 'https://...')
+ *
+ * Header priority (lowest to highest):
+ * - defaultHeaders (from FetchGuardOptions)
+ * - headers (from ProviderPresetConfig)
+ * - Content-Type: application/json
+ */
+export declare function createCookieStrategy(config: {
+    refreshUrl: string;
+    loginUrl: string;
+    logoutUrl: string;
+    headers?: Record<string, string>;
+    defaultHeaders?: Record<string, string>;
+}): AuthStrategy;
+/**
+ * Standard cookie strategy
+ */
+export declare const cookieStrategy: AuthStrategy;
+//# sourceMappingURL=cookie.d.ts.map

package/dist/transport/provider/strategy/cookie.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../../../src/transport/provider/strategy/cookie.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAwB,MAAM,aAAa,CAAC;AAEtE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,GAAG,YAAY,CAgDf;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,cAIzB,CAAC"}

package/dist/transport/provider/strategy/cookie.js

@@ -0,0 +1,70 @@
+/**
+ * Cookie auth strategy - all auth operations via httpOnly cookies
+ * Suitable for SSR and cross-domain authentication
+ *
+ * Refresh token is sent automatically via httpOnly cookie
+ * Credentials are sent in request body
+ *
+ * Login URL can be:
+ * - Configured once: loginUrl: 'https://api.example.com/auth/login'
+ * - Passed per call: login(payload, 'https://...')
+ *
+ * Header priority (lowest to highest):
+ * - defaultHeaders (from FetchGuardOptions)
+ * - headers (from ProviderPresetConfig)
+ * - Content-Type: application/json
+ */
+export function createCookieStrategy(config) {
+    const baseHeaders = {
+        ...config.defaultHeaders,
+        ...config.headers,
+        'Content-Type': 'application/json',
+    };
+    return {
+        async refresh() {
+            return fetch(config.refreshUrl, {
+                method: 'POST',
+                headers: baseHeaders,
+                credentials: 'include',
+            });
+        },
+        async login(payload, url) {
+            return fetch(url || config.loginUrl, {
+                method: 'POST',
+                headers: baseHeaders,
+                body: JSON.stringify(payload),
+                credentials: 'include',
+            });
+        },
+        async logout(payload) {
+            return fetch(config.logoutUrl, {
+                method: 'POST',
+                headers: baseHeaders,
+                body: payload ? JSON.stringify(payload) : undefined,
+                credentials: 'include',
+            });
+        },
+        async exchangeToken(accessToken, url, options = {}) {
+            const { method = 'POST', payload, headers } = options;
+            return fetch(url, {
+                method,
+                headers: {
+                    ...baseHeaders,
+                    ...headers,
+                    Authorization: `Bearer ${accessToken}`,
+                },
+                body: payload ? JSON.stringify(payload) : undefined,
+                credentials: 'include',
+            });
+        },
+    };
+}
+/**
+ * Standard cookie strategy
+ */
+export const cookieStrategy = createCookieStrategy({
+    refreshUrl: '/auth/refresh',
+    loginUrl: '/auth/login',
+    logoutUrl: '/auth/logout',
+});
+//# sourceMappingURL=cookie.js.map

package/dist/transport/provider/strategy/cookie.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.js","sourceRoot":"","sources":["../../../../src/transport/provider/strategy/cookie.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAMpC;IACC,MAAM,WAAW,GAAG;QAClB,GAAG,MAAM,CAAC,cAAc;QACxB,GAAG,MAAM,CAAC,OAAO;QACjB,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO;YACX,OAAO,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW;gBACpB,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG;YACtB,OAAO,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE;gBACnC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnD,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,GAAW,EAAE,UAAgC,EAAE;YACtF,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;YACtD,OAAO,KAAK,CAAC,GAAG,EAAE;gBAChB,MAAM;gBACN,OAAO,EAAE;oBACP,GAAG,WAAW;oBACd,GAAG,OAAO;oBACV,aAAa,EAAE,UAAU,WAAW,EAAE;iBACvC;gBACD,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnD,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC;IACjD,UAAU,EAAE,eAAe;IAC3B,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,cAAc;CAC1B,CAAC,CAAC"}

package/dist/transport/result.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Result parser — turn a raw FetchEnvelope (or transport-level error) into a
+ * domain `Result<T>` by trusting the backend's ts-micro-result envelope.
+ *
+ * This is the piece that lets a typed client auto-bind: instead of every SDK
+ * method hand-writing "judge status + JSON.parse + map errors", the transport
+ * exposes one place that deserializes `{ ok, data, errors, meta }`. The Web
+ * Worker token isolation is untouched — this runs on the result the client
+ * already resolved, after the Worker has done the fetch.
+ */
+import { type Result } from 'ts-micro-result';
+import type { FetchEnvelope } from './types';
+/**
+ * Deserialize a JSON body that is expected to be a ts-micro-result envelope.
+ * Falls back to treating the parsed JSON as raw data when it isn't an envelope.
+ */
+export declare function deserializeResult<T>(jsonString: string): Result<T>;
+/**
+ * Convert `Result<FetchEnvelope>` (what client.get/post/... resolve to) into a
+ * domain `Result<T>`.
+ *
+ * - network/transport error  → mapped network error
+ * - 204                      → ok(undefined)
+ * - 5xx                      → backend Result if present, else a SERVER_ERROR
+ * - 2xx–4xx                  → trust the backend's envelope (ok/err)
+ */
+export declare function toResult<T>(envelopeResult: Result<FetchEnvelope>): Result<T>;
+//# sourceMappingURL=result.d.ts.map

package/dist/transport/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/transport/result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAA6B,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAiBlE;AA6BD;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAsB5E"}

package/dist/transport/result.js

@@ -0,0 +1,87 @@
+/**
+ * Result parser — turn a raw FetchEnvelope (or transport-level error) into a
+ * domain `Result<T>` by trusting the backend's ts-micro-result envelope.
+ *
+ * This is the piece that lets a typed client auto-bind: instead of every SDK
+ * method hand-writing "judge status + JSON.parse + map errors", the transport
+ * exposes one place that deserializes `{ ok, data, errors, meta }`. The Web
+ * Worker token isolation is untouched — this runs on the result the client
+ * already resolved, after the Worker has done the fetch.
+ */
+import { err, ok } from 'ts-micro-result';
+import { ERROR_CODES } from './error-codes';
+/**
+ * Deserialize a JSON body that is expected to be a ts-micro-result envelope.
+ * Falls back to treating the parsed JSON as raw data when it isn't an envelope.
+ */
+export function deserializeResult(jsonString) {
+    try {
+        const parsed = JSON.parse(jsonString);
+        if (parsed && parsed.ok === true) {
+            return ok(parsed.data, parsed.meta);
+        }
+        if (parsed && parsed.ok === false && Array.isArray(parsed.errors)) {
+            return err(parsed.errors, parsed.meta);
+        }
+        // Not an envelope — treat the whole payload as the data.
+        return ok(parsed);
+    }
+    catch {
+        return err({ code: 'PARSE_ERROR', message: 'Failed to parse response JSON' });
+    }
+}
+/** True when the body parses to a ts-micro-result envelope (has a boolean `ok`). */
+function isResultEnvelope(body) {
+    try {
+        const parsed = JSON.parse(body);
+        return parsed && typeof parsed.ok === 'boolean';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Map a transport-level (network) error to a stable domain error.
+ */
+function mapNetworkError(errors) {
+    const code = errors[0]?.code;
+    if (code === ERROR_CODES.NETWORK_ERROR) {
+        return err({ code: 'NETWORK_ERROR', message: 'Connection failed' });
+    }
+    if (code === ERROR_CODES.REQUEST_CANCELLED) {
+        return err({ code: 'REQUEST_CANCELLED', message: 'Request was cancelled' });
+    }
+    if (code === ERROR_CODES.REQUEST_TIMEOUT) {
+        return err({ code: 'REQUEST_TIMEOUT', message: 'Request timed out' });
+    }
+    return err(errors);
+}
+/**
+ * Convert `Result<FetchEnvelope>` (what client.get/post/... resolve to) into a
+ * domain `Result<T>`.
+ *
+ * - network/transport error  → mapped network error
+ * - 204                      → ok(undefined)
+ * - 5xx                      → backend Result if present, else a SERVER_ERROR
+ * - 2xx–4xx                  → trust the backend's envelope (ok/err)
+ */
+export function toResult(envelopeResult) {
+    if (!envelopeResult.ok) {
+        return mapNetworkError(envelopeResult.errors);
+    }
+    const { status, body } = envelopeResult.data;
+    if (status === 204) {
+        return ok(undefined);
+    }
+    if (status >= 500) {
+        // Forward a real backend error envelope if present; otherwise (HTML error
+        // page, gateway text, unparseable body) surface a clear SERVER_ERROR rather
+        // than a misleading PARSE_ERROR.
+        if (isResultEnvelope(body)) {
+            return deserializeResult(body);
+        }
+        return err({ code: 'SERVER_ERROR', message: `Internal server error (${status})` });
+    }
+    return deserializeResult(body);
+}
+//# sourceMappingURL=result.js.map

package/dist/transport/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/transport/result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAoB,GAAG,EAAE,EAAE,EAAe,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAG5C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAI,UAAkB;IACrD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEtC,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QAED,yDAAyD;QACzD,OAAO,EAAE,CAAC,MAAW,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAI,MAA8B;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IAC7B,IAAI,IAAI,KAAK,WAAW,CAAC,aAAa,EAAE,CAAC;QACvC,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAC3C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,CAAC,eAAe,EAAE,CAAC;QACzC,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC,MAAuB,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAI,cAAqC;IAC/D,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,OAAO,eAAe,CAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC;IAE7C,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC,SAAc,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,0EAA0E;QAC1E,4EAA4E;QAC5E,iCAAiC;QACjC,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,iBAAiB,CAAI,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,MAAM,GAAG,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO,iBAAiB,CAAI,IAAI,CAAC,CAAC;AACpC,CAAC"}