@auth-craft/client 0.1.0 → 0.1.2

package/dist/transport/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/transport/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC1D,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EACL,UAAU,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,aAAa,GACd,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,SAAS,EACT,SAAS,EACT,aAAa,EACb,cAAc,EACd,aAAa,EACb,SAAS,EACT,WAAW,EACX,SAAS,GACV,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,mBAAmB,EACnB,WAAW,EACX,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACjC,YAAY,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAGjE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE5E,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAGlF,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACvD,YAAY,EACV,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,aAAa,EACb,eAAe,EACf,YAAY,GACb,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,cAAc,EACd,WAAW,EACX,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC"}

package/dist/transport/index.js

@@ -0,0 +1,32 @@
+// Main exports
+export { createClient, FetchGuardClient } from './client';
+// Error codes for type-safe error matching
+export { ERROR_CODES } from './error-codes';
+// Organized error definitions
+export { AuthErrors, DomainErrors, GeneralErrors, InitErrors, RequestErrors, } from './errors';
+// Helper functions for common Result patterns
+export { getErrorBody, getErrorMessage, getStatus, hasStatus, isClientError, isNetworkError, isServerError, isSuccess, matchResult, parseJson, } from './helpers';
+// Message protocol types (for advanced usage)
+export { MSG } from './messages';
+// Provider factory
+export { createProvider } from './provider/create-provider';
+// Parser modules
+export { bodyParser } from './provider/parser/body';
+export { cookieParser } from './provider/parser/cookie';
+// Preset providers (recommended)
+export { createBodyProvider, createCookieProvider, } from './provider/presets';
+// Storage modules
+export { createIndexedDBStorage } from './provider/storage/indexeddb';
+export { bodyStrategy, createBodyStrategy } from './provider/strategy/body';
+// Strategy modules
+export { cookieStrategy, createCookieStrategy } from './provider/strategy/cookie';
+// Result parser — deserialize a backend ts-micro-result envelope into Result<T>.
+// Used by callJson() and by the contract-driven typed client.
+export { deserializeResult, toResult } from './result';
+// Binary utilities (for decoding binary responses)
+export { base64ToArrayBuffer, isBinaryContentType, } from './utils/binary';
+// FormData utilities (for advanced usage)
+export { deserializeFormData, isFormData, isSerializedFormData, serializeFormData, } from './utils/formdata';
+// Registry utilities
+export { clearProviders, getProvider, hasProvider, listProviders, registerProvider, unregisterProvider, } from './utils/registry';
+//# sourceMappingURL=index.js.map

package/dist/transport/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/transport/index.ts"],"names":[],"mappings":"AAAA,eAAe;AACf,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE1D,2CAA2C;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,8BAA8B;AAC9B,OAAO,EACL,UAAU,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,aAAa,GACd,MAAM,UAAU,CAAC;AAClB,8CAA8C;AAC9C,OAAO,EACL,YAAY,EACZ,eAAe,EACf,SAAS,EACT,SAAS,EACT,aAAa,EACb,cAAc,EACd,aAAa,EACb,SAAS,EACT,WAAW,EACX,SAAS,GACV,MAAM,WAAW,CAAC;AAMnB,8CAA8C;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAGjC,mBAAmB;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,iBAAiB;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,iCAAiC;AACjC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,kBAAkB;AAClB,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,mBAAmB;AACnB,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,iFAAiF;AACjF,8DAA8D;AAC9D,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AA4BvD,mDAAmD;AACnD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,0CAA0C;AAC1C,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,qBAAqB;AACrB,OAAO,EACL,cAAc,EACd,WAAW,EACX,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC"}

package/dist/transport/messages.d.ts

@@ -0,0 +1,104 @@
+import type { ErrorDetail, ResultMeta } from 'ts-micro-result';
+import type { AuthResult, FetchEnvelope, FetchGuardRequestInit, ProviderPresetConfig, RefreshReason, WorkerConfig } from './types';
+/**
+ * MESSAGE PAYLOADS - SINGLE SOURCE OF TRUTH
+ *
+ * Define all message payloads here. Type unions and MSG constants are auto-generated.
+ *
+ * USAGE:
+ * - To add a new message: Just add one line to the appropriate interface
+ * - Payload types are automatically inferred
+ * - MSG constants are automatically generated
+ *
+ * EXAMPLE:
+ * ```typescript
+ * interface MainPayloads {
+ *   NEW_MESSAGE: { foo: string }  // Add this line
+ * }
+ * // => Automatically get MainToWorkerMessage union with NEW_MESSAGE
+ * // => Automatically get MSG.NEW_MESSAGE = 'NEW_MESSAGE'
+ * ```
+ */
+/**
+ * Payloads for messages sent from Main thread → Worker thread
+ */
+export interface MainPayloads {
+    SETUP: {
+        config: WorkerConfig;
+        providerConfig: ProviderPresetConfig | string | null;
+    };
+    FETCH: {
+        url: string;
+        options?: FetchGuardRequestInit;
+    };
+    AUTH_CALL: {
+        method: string;
+        args: unknown[];
+        emitEvent?: boolean;
+    };
+    CANCEL: undefined;
+    PING: {
+        timestamp: number;
+    };
+}
+/**
+ * Payloads for messages sent from Worker thread → Main thread
+ */
+export interface WorkerPayloads {
+    ERROR: {
+        errors: readonly ErrorDetail[];
+        meta?: ResultMeta;
+        status?: number;
+    };
+    READY: undefined;
+    SETUP_ERROR: {
+        error: string;
+    };
+    PONG: {
+        timestamp: number;
+    };
+    LOG: {
+        level: 'info' | 'warn' | 'error';
+        message: string;
+    };
+    AUTH_STATE_CHANGED: AuthResult;
+    AUTH_CALL_RESULT: AuthResult;
+    FETCH_RESULT: FetchEnvelope;
+    FETCH_ERROR: {
+        error: string;
+        status?: number;
+    };
+    TOKEN_REFRESHED: {
+        reason: RefreshReason;
+    };
+}
+/**
+ * Generate message type from payload definition
+ * Handles optional payloads (undefined) gracefully
+ */
+type MessageFromPayloads<P> = {
+    [K in keyof P]: {
+        id: string;
+        type: K;
+    } & (P[K] extends undefined ? Record<never, never> : {
+        payload: P[K];
+    });
+}[keyof P];
+/**
+ * Message type unions - auto-generated from payload interfaces
+ */
+export type MainToWorkerMessage = MessageFromPayloads<MainPayloads>;
+export type WorkerToMainMessage = MessageFromPayloads<WorkerPayloads>;
+/**
+ * Message type unions for compile-time type checking
+ */
+export type MainType = keyof MainPayloads;
+export type WorkerType = keyof WorkerPayloads;
+export type MessageType = MainType | WorkerType;
+/**
+ * MSG constants object
+ * Usage: MSG.SETUP, MSG.FETCH, etc.
+ */
+export declare const MSG: { readonly [K in MessageType]: K; };
+export {};
+//# sourceMappingURL=messages.d.ts.map

package/dist/transport/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/transport/messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,KAAK,EACV,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,cAAc,EAAE,oBAAoB,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACtF,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,qBAAqB,CAAA;KAAE,CAAC;IACxD,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACpE,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE;QAAE,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,UAAU,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,KAAK,EAAE,SAAS,CAAC;IACjB,WAAW,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,kBAAkB,EAAE,UAAU,CAAC;IAC/B,gBAAgB,EAAE,UAAU,CAAC;IAC7B,YAAY,EAAE,aAAa,CAAC;IAC5B,WAAW,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,eAAe,EAAE;QAAE,MAAM,EAAE,aAAa,CAAA;KAAE,CAAC;CAC5C;AAED;;;GAGG;AACH,KAAK,mBAAmB,CAAC,CAAC,IAAI;KAC3B,CAAC,IAAI,MAAM,CAAC,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC,CAAA;KAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;KAAE,CAAC;CAC9G,CAAC,MAAM,CAAC,CAAC,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;AACpE,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;AAC1C,MAAM,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC;AAC9C,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,GAAG,EAmBV,EAAE,QAAQ,EAAE,CAAC,IAAI,WAAW,GAAG,CAAC,GAAE,CAAC"}

package/dist/transport/messages.js

@@ -0,0 +1,24 @@
+/**
+ * MSG constants object
+ * Usage: MSG.SETUP, MSG.FETCH, etc.
+ */
+export const MSG = Object.freeze({
+    // Main -> Worker messages
+    SETUP: 'SETUP',
+    FETCH: 'FETCH',
+    AUTH_CALL: 'AUTH_CALL',
+    CANCEL: 'CANCEL',
+    PING: 'PING',
+    // Worker -> Main messages
+    ERROR: 'ERROR',
+    READY: 'READY',
+    SETUP_ERROR: 'SETUP_ERROR',
+    PONG: 'PONG',
+    LOG: 'LOG',
+    AUTH_STATE_CHANGED: 'AUTH_STATE_CHANGED',
+    AUTH_CALL_RESULT: 'AUTH_CALL_RESULT',
+    FETCH_RESULT: 'FETCH_RESULT',
+    FETCH_ERROR: 'FETCH_ERROR',
+    TOKEN_REFRESHED: 'TOKEN_REFRESHED',
+});
+//# sourceMappingURL=messages.js.map

package/dist/transport/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/transport/messages.ts"],"names":[],"mappings":"AA8EA;;;GAGG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,0BAA0B;IAC1B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IAEZ,0BAA0B;IAC1B,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,aAAa;IAC1B,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,kBAAkB,EAAE,oBAAoB;IACxC,gBAAgB,EAAE,kBAAkB;IACpC,YAAY,EAAE,cAAc;IAC5B,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE,iBAAiB;CACnC,CAAuC,CAAC"}

package/dist/transport/provider/create-provider.d.ts

@@ -0,0 +1,38 @@
+import { type Result } from 'ts-micro-result';
+import type { AuthStrategy, RefreshTokenStorage, TokenInfo, TokenParser, TokenProvider } from '../types';
+/**
+ * Custom auth method type
+ */
+type CustomAuthMethod = (...args: unknown[]) => Promise<Result<TokenInfo>>;
+/**
+ * Configuration for creating provider
+ *
+ * refreshStorage: OPTIONAL - to load refresh token initially when worker starts
+ * - undefined: cookie-based auth (httpOnly cookie, no need to load)
+ * - RefreshTokenStorage: body-based auth (load from IndexedDB on startup)
+ *
+ * strategy: AuthStrategy with refresh (required), login/logout (required)
+ *
+ * customMethods: OPTIONAL - custom auth methods (loginWithPhone, loginWithGoogle, etc.)
+ */
+export interface ProviderConfig {
+    refreshStorage?: RefreshTokenStorage;
+    parser: TokenParser;
+    strategy: AuthStrategy;
+    customMethods?: Record<string, CustomAuthMethod>;
+}
+/**
+ * Factory function to create TokenProvider from modular components
+ *
+ * Provider automatically handles refresh token:
+ * - If refreshToken is null and storage exists → load from storage initially
+ * - If refreshToken exists → use token from worker memory
+ * - Cookie-based (no storage) → always null
+ *
+ * Custom methods:
+ * - User can add custom auth methods (loginWithPhone, loginWithGoogle, etc.)
+ * - Custom methods will be spread into provider object
+ */
+export declare function createProvider(config: ProviderConfig): TokenProvider;
+export {};
+//# sourceMappingURL=create-provider.d.ts.map

package/dist/transport/provider/create-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-provider.d.ts","sourceRoot":"","sources":["../../../src/transport/provider/create-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EACV,YAAY,EAEZ,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,aAAa,EACd,MAAM,UAAU,CAAC;AAElB;;GAEG;AACH,KAAK,gBAAgB,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AAE3E;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAClD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,aAAa,CAiIpE"}

package/dist/transport/provider/create-provider.js

@@ -0,0 +1,127 @@
+import { err, ok } from 'ts-micro-result';
+import { AuthErrors, RequestErrors } from '../errors';
+/**
+ * Factory function to create TokenProvider from modular components
+ *
+ * Provider automatically handles refresh token:
+ * - If refreshToken is null and storage exists → load from storage initially
+ * - If refreshToken exists → use token from worker memory
+ * - Cookie-based (no storage) → always null
+ *
+ * Custom methods:
+ * - User can add custom auth methods (loginWithPhone, loginWithGoogle, etc.)
+ * - Custom methods will be spread into provider object
+ */
+export function createProvider(config) {
+    const baseProvider = {
+        async refreshToken(refreshToken) {
+            // Load from storage if no token provided (null or undefined)
+            let currentRefreshToken = refreshToken ?? null;
+            if (currentRefreshToken === null && config.refreshStorage) {
+                currentRefreshToken = await config.refreshStorage.get();
+            }
+            try {
+                const response = await config.strategy.refresh(currentRefreshToken);
+                if (!response.ok) {
+                    // Read response body for error details
+                    const body = await response.text().catch(() => '');
+                    return err(AuthErrors.TokenRefreshFailed(), { params: { body, status: response.status } });
+                }
+                const tokenInfo = await config.parser.parse(response);
+                if (!tokenInfo.token) {
+                    return err(AuthErrors.TokenRefreshFailed({ message: 'No access token in response' }));
+                }
+                if (config.refreshStorage && tokenInfo.refreshToken) {
+                    await config.refreshStorage.set(tokenInfo.refreshToken);
+                }
+                return ok(tokenInfo);
+            }
+            catch (error) {
+                return err(RequestErrors.NetworkError({ message: String(error) }));
+            }
+        },
+        async login(payload, url) {
+            try {
+                const response = await config.strategy.login(payload, url);
+                if (!response.ok) {
+                    // Read response body for error details
+                    const body = await response.text().catch(() => '');
+                    return err(AuthErrors.LoginFailed(), { params: { body, status: response.status } });
+                }
+                const tokenInfo = await config.parser.parse(response);
+                if (!tokenInfo.token) {
+                    // HTTP 200 with no token is NOT a failure: it's a 2-step login result
+                    // (credential challenge / MFA / identity verification). Forward the raw
+                    // body in meta.params (same shape as the HTTP-error branch above) so the
+                    // proxy's dispatchLogin can deserialize and surface the discriminated
+                    // login-result instead of an opaque "No access token".
+                    const body = await response.clone().text().catch(() => '');
+                    return err(AuthErrors.LoginFailed({ message: 'No access token in response' }), {
+                        params: { body, status: response.status },
+                    });
+                }
+                if (config.refreshStorage && tokenInfo.refreshToken) {
+                    await config.refreshStorage.set(tokenInfo.refreshToken);
+                }
+                return ok(tokenInfo);
+            }
+            catch (error) {
+                return err(RequestErrors.NetworkError({ message: String(error) }));
+            }
+        },
+        async logout(payload) {
+            try {
+                const response = await config.strategy.logout(payload);
+                if (!response.ok) {
+                    // Read response body for error details
+                    const body = await response.text().catch(() => '');
+                    return err(AuthErrors.LogoutFailed(), { params: { body, status: response.status } });
+                }
+                if (config.refreshStorage) {
+                    await config.refreshStorage.set(null);
+                }
+                return ok({
+                    token: '',
+                    refreshToken: undefined,
+                    expiresAt: undefined,
+                    user: null, // Explicitly clear user on logout
+                });
+            }
+            catch (error) {
+                return err(RequestErrors.NetworkError({ message: String(error) }));
+            }
+        },
+        async exchangeToken(accessToken, url, options = {}) {
+            if (!accessToken) {
+                return err(AuthErrors.NotAuthenticated());
+            }
+            try {
+                const response = await config.strategy.exchangeToken(accessToken, url, options);
+                if (!response.ok) {
+                    const body = await response.text().catch(() => '');
+                    return err(AuthErrors.TokenExchangeFailed(), { params: { body, status: response.status } });
+                }
+                const tokenInfo = await config.parser.parse(response);
+                if (!tokenInfo.token) {
+                    return err(AuthErrors.TokenExchangeFailed({ message: 'No access token in response' }));
+                }
+                if (config.refreshStorage && tokenInfo.refreshToken) {
+                    await config.refreshStorage.set(tokenInfo.refreshToken);
+                }
+                return ok(tokenInfo);
+            }
+            catch (error) {
+                return err(RequestErrors.NetworkError({ message: String(error) }));
+            }
+        },
+    };
+    // Merge custom methods if provided
+    if (config.customMethods) {
+        return {
+            ...baseProvider,
+            ...config.customMethods,
+        };
+    }
+    return baseProvider;
+}
+//# sourceMappingURL=create-provider.js.map

package/dist/transport/provider/create-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-provider.js","sourceRoot":"","sources":["../../../src/transport/provider/create-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAiCtD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,MAAM,YAAY,GAA+E;QAC/F,KAAK,CAAC,YAAY,CAAC,YAA4B;YAC7C,6DAA6D;YAC7D,IAAI,mBAAmB,GAAG,YAAY,IAAI,IAAI,CAAC;YAC/C,IAAI,mBAAmB,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1D,mBAAmB,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;YAC1D,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBAEpE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,uCAAuC;oBACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnD,OAAO,GAAG,CAAC,UAAU,CAAC,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC7F,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBACrB,OAAO,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC;gBACxF,CAAC;gBAED,IAAI,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;oBACpD,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC1D,CAAC;gBAED,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAAY;YACxC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAE3D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,uCAAuC;oBACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnD,OAAO,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACtF,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBACrB,sEAAsE;oBACtE,wEAAwE;oBACxE,yEAAyE;oBACzE,sEAAsE;oBACtE,uDAAuD;oBACvD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC3D,OAAO,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,EAAE;wBAC7E,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;qBAC1C,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;oBACpD,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC1D,CAAC;gBAED,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAiB;YAC5B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAEvD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,uCAAuC;oBACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnD,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACvF,CAAC;gBAED,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1B,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxC,CAAC;gBAED,OAAO,EAAE,CAAC;oBACR,KAAK,EAAE,EAAE;oBACT,YAAY,EAAE,SAAS;oBACvB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,IAAI,EAAE,kCAAkC;iBAC/C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,GAAW,EAAE,UAAgC,EAAE;YACtF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,GAAG,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBAEhF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnD,OAAO,GAAG,CAAC,UAAU,CAAC,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9F,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBACrB,OAAO,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC;gBACzF,CAAC;gBAED,IAAI,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;oBACpD,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC1D,CAAC;gBAED,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;KACF,CAAC;IAEF,mCAAmC;IACnC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO;YACL,GAAG,YAAY;YACf,GAAG,MAAM,CAAC,aAAa;SACP,CAAC;IACrB,CAAC;IAED,OAAO,YAA6B,CAAC;AACvC,CAAC"}

package/dist/transport/provider/parser/body.d.ts

@@ -0,0 +1,7 @@
+import type { TokenParser } from '../../types';
+/**
+ * Body parser - parse token from response body (JSON)
+ * Expects response format: { data: { accessToken, refreshToken, expiresAt?, user? } }
+ */
+export declare const bodyParser: TokenParser;
+//# sourceMappingURL=body.d.ts.map

package/dist/transport/provider/parser/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../../../src/transport/provider/parser/body.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,WAUxB,CAAC"}

package/dist/transport/provider/parser/body.js

@@ -0,0 +1,17 @@
+import { normalizeExpiresAt } from './normalize';
+/**
+ * Body parser - parse token from response body (JSON)
+ * Expects response format: { data: { accessToken, refreshToken, expiresAt?, user? } }
+ */
+export const bodyParser = {
+    async parse(response) {
+        const json = await response.clone().json();
+        return {
+            token: json.data.accessToken,
+            refreshToken: json.data.refreshToken,
+            expiresAt: normalizeExpiresAt(json.data.expiresAt),
+            user: json.data.user,
+        };
+    },
+};
+//# sourceMappingURL=body.js.map

package/dist/transport/provider/parser/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../../../src/transport/provider/parser/body.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAgB;IACrC,KAAK,CAAC,KAAK,CAAC,QAAQ;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAC5B,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpC,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAClD,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;SACrB,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/transport/provider/parser/cookie.d.ts

@@ -0,0 +1,8 @@
+import type { TokenParser } from '../../types';
+/**
+ * Cookie parser - parse access token from response body
+ * Expects response format: { data: { accessToken, expiresAt?, user? } }
+ * Refresh token is automatically set by backend into httpOnly cookie
+ */
+export declare const cookieParser: TokenParser;
+//# sourceMappingURL=cookie.d.ts.map

package/dist/transport/provider/parser/cookie.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../../../src/transport/provider/parser/cookie.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,WAS1B,CAAC"}

package/dist/transport/provider/parser/cookie.js

@@ -0,0 +1,17 @@
+import { normalizeExpiresAt } from './normalize';
+/**
+ * Cookie parser - parse access token from response body
+ * Expects response format: { data: { accessToken, expiresAt?, user? } }
+ * Refresh token is automatically set by backend into httpOnly cookie
+ */
+export const cookieParser = {
+    async parse(response) {
+        const json = await response.clone().json();
+        return {
+            token: json.data.accessToken,
+            expiresAt: normalizeExpiresAt(json.data.expiresAt),
+            user: json.data.user,
+        };
+    },
+};
+//# sourceMappingURL=cookie.js.map

package/dist/transport/provider/parser/cookie.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.js","sourceRoot":"","sources":["../../../../src/transport/provider/parser/cookie.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,KAAK,CAAC,KAAK,CAAC,QAAQ;QAClB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAC5B,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAClD,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;SACrB,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/transport/provider/parser/normalize.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Normalize expiresAt to milliseconds timestamp
+ * Supports: milliseconds, seconds, ISO string, null/undefined
+ */
+export declare function normalizeExpiresAt(value: unknown): number | undefined;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/transport/provider/parser/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../../src/transport/provider/parser/normalize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAiBrE"}

package/dist/transport/provider/parser/normalize.js

@@ -0,0 +1,21 @@
+/**
+ * Normalize expiresAt to milliseconds timestamp
+ * Supports: milliseconds, seconds, ISO string, null/undefined
+ */
+export function normalizeExpiresAt(value) {
+    if (value == null)
+        return undefined;
+    if (typeof value === 'number') {
+        // Detect seconds vs milliseconds:
+        // - Milliseconds: 13+ digits (e.g., 1767860146000)
+        // - Seconds: 10 digits (e.g., 1767860146)
+        // Threshold: 10^12 (Sep 2001 in ms, year 33658 in seconds)
+        return value < 1e12 ? value * 1000 : value;
+    }
+    if (typeof value === 'string') {
+        const ts = Date.parse(value);
+        return Number.isNaN(ts) ? undefined : ts;
+    }
+    return undefined;
+}
+//# sourceMappingURL=normalize.js.map

package/dist/transport/provider/parser/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../../../src/transport/provider/parser/normalize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAEpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,kCAAkC;QAClC,mDAAmD;QACnD,0CAA0C;QAC1C,2DAA2D;QAC3D,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7C,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/transport/provider/presets.d.ts

@@ -0,0 +1,31 @@
+import type { TokenProvider } from '../types';
+/**
+ * Cookie Provider - uses httpOnly cookies
+ * Suitable for SSR and cross-domain authentication
+ *
+ * Access token: Worker memory
+ * Refresh token: httpOnly cookie (managed by backend)
+ */
+export declare function createCookieProvider(config: {
+    refreshUrl: string;
+    loginUrl: string;
+    logoutUrl: string;
+    headers?: Record<string, string>;
+    defaultHeaders?: Record<string, string>;
+}): TokenProvider;
+/**
+ * Body Provider - refresh token in response body, persisted to IndexedDB
+ * Suitable for SPA applications
+ *
+ * Access token: Worker memory
+ * Refresh token: IndexedDB (persists across reload)
+ */
+export declare function createBodyProvider(config: {
+    refreshUrl: string;
+    loginUrl: string;
+    logoutUrl: string;
+    refreshTokenKey?: string;
+    headers?: Record<string, string>;
+    defaultHeaders?: Record<string, string>;
+}): TokenProvider;
+//# sourceMappingURL=presets.d.ts.map

package/dist/transport/provider/presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../../src/transport/provider/presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAQ9C;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,GAAG,aAAa,CAMhB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,GAAG,aAAa,CAMhB"}

package/dist/transport/provider/presets.js

@@ -0,0 +1,35 @@
+import { createProvider } from './create-provider';
+import { bodyParser } from './parser/body';
+import { cookieParser } from './parser/cookie';
+import { createIndexedDBStorage } from './storage/indexeddb';
+import { createBodyStrategy } from './strategy/body';
+import { createCookieStrategy } from './strategy/cookie';
+/**
+ * Cookie Provider - uses httpOnly cookies
+ * Suitable for SSR and cross-domain authentication
+ *
+ * Access token: Worker memory
+ * Refresh token: httpOnly cookie (managed by backend)
+ */
+export function createCookieProvider(config) {
+    return createProvider({
+        refreshStorage: undefined,
+        parser: cookieParser,
+        strategy: createCookieStrategy(config),
+    });
+}
+/**
+ * Body Provider - refresh token in response body, persisted to IndexedDB
+ * Suitable for SPA applications
+ *
+ * Access token: Worker memory
+ * Refresh token: IndexedDB (persists across reload)
+ */
+export function createBodyProvider(config) {
+    return createProvider({
+        refreshStorage: createIndexedDBStorage('FetchGuardDB', config.refreshTokenKey || 'refreshToken'),
+        parser: bodyParser,
+        strategy: createBodyStrategy(config),
+    });
+}
+//# sourceMappingURL=presets.js.map

package/dist/transport/provider/presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.js","sourceRoot":"","sources":["../../../src/transport/provider/presets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAMpC;IACC,OAAO,cAAc,CAAC;QACpB,cAAc,EAAE,SAAS;QACzB,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC;KACvC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAOlC;IACC,OAAO,cAAc,CAAC;QACpB,cAAc,EAAE,sBAAsB,CAAC,cAAc,EAAE,MAAM,CAAC,eAAe,IAAI,cAAc,CAAC;QAChG,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC;KACrC,CAAC,CAAC;AACL,CAAC"}

package/dist/transport/provider/register-presets.d.ts

@@ -0,0 +1,10 @@
+import type { ProviderPresetConfig, TokenProvider } from '../types';
+/**
+ * Build provider from preset config
+ * This is called in worker when receiving SETUP message
+ *
+ * @param config - Provider preset config
+ * @param defaultHeaders - Default headers from FetchGuardOptions (applied to all requests including auth)
+ */
+export declare function buildProviderFromPreset(config: ProviderPresetConfig, defaultHeaders?: Record<string, string>): TokenProvider;
+//# sourceMappingURL=register-presets.d.ts.map

package/dist/transport/provider/register-presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-presets.d.ts","sourceRoot":"","sources":["../../../src/transport/provider/register-presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGpE;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtC,aAAa,CAwBf"}

package/dist/transport/provider/register-presets.js

@@ -0,0 +1,32 @@
+import { createBodyProvider, createCookieProvider } from './presets';
+/**
+ * Build provider from preset config
+ * This is called in worker when receiving SETUP message
+ *
+ * @param config - Provider preset config
+ * @param defaultHeaders - Default headers from FetchGuardOptions (applied to all requests including auth)
+ */
+export function buildProviderFromPreset(config, defaultHeaders) {
+    switch (config.type) {
+        case 'cookie-auth':
+            return createCookieProvider({
+                refreshUrl: config.refreshUrl,
+                loginUrl: config.loginUrl,
+                logoutUrl: config.logoutUrl,
+                headers: config.headers,
+                defaultHeaders,
+            });
+        case 'body-auth':
+            return createBodyProvider({
+                refreshUrl: config.refreshUrl,
+                loginUrl: config.loginUrl,
+                logoutUrl: config.logoutUrl,
+                refreshTokenKey: config.refreshTokenKey,
+                headers: config.headers,
+                defaultHeaders,
+            });
+        default:
+            throw new Error(`Unknown provider type: ${String(config.type)}`);
+    }
+}
+//# sourceMappingURL=register-presets.js.map

package/dist/transport/provider/register-presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-presets.js","sourceRoot":"","sources":["../../../src/transport/provider/register-presets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA4B,EAC5B,cAAuC;IAEvC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,oBAAoB,CAAC;gBAC1B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc;aACf,CAAC,CAAC;QAEL,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC;gBACxB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc;aACf,CAAC,CAAC;QAEL;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAE,MAA6B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC"}

package/dist/transport/provider/storage/indexeddb.d.ts

@@ -0,0 +1,26 @@
+import type { RefreshTokenStorage, StorageErrorCallback } from '../../types';
+/**
+ * IndexedDB storage options
+ */
+export interface IndexedDBStorageOptions {
+    /** Database name (default: 'FetchGuardDB') */
+    dbName?: string;
+    /** Key for refresh token (default: 'refreshToken') */
+    refreshTokenKey?: string;
+    /**
+     * Error callback for debugging storage failures
+     * Called when IndexedDB operations fail (quota exceeded, permission denied, etc.)
+     * Storage still fails closed (returns null), but this allows logging/debugging.
+     */
+    onError?: StorageErrorCallback;
+}
+/**
+ * IndexedDB storage - only stores refresh token in IndexedDB
+ * Suitable for body-based refresh strategy
+ * Persists refresh token for reuse after reload
+ *
+ * @param options - Storage options or legacy dbName string
+ * @param legacyRefreshTokenKey - Legacy refreshTokenKey (for backward compatibility)
+ */
+export declare function createIndexedDBStorage(options?: IndexedDBStorageOptions | string, legacyRefreshTokenKey?: string): RefreshTokenStorage;
+//# sourceMappingURL=indexeddb.d.ts.map

package/dist/transport/provider/storage/indexeddb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.d.ts","sourceRoot":"","sources":["../../../../src/transport/provider/storage/indexeddb.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,uBAAuB,GAAG,MAAuB,EAC1D,qBAAqB,CAAC,EAAE,MAAM,GAC7B,mBAAmB,CAmErB"}