@auth-craft/client 0.1.2 → 0.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auth-craft/client",
-  "version": "0.1.2",
+  "version": "0.2.1",
   "description": "Contract-driven typed frontend client for Auth Craft. Methods are generated from @auth-craft/api-contract; tokens are isolated in a Web Worker. Import the root for all groups, or @auth-craft/client/core for a scope-agnostic core you wire per scope.",
   "type": "module",
   "main": "./dist/index.js",
@@ -26,12 +26,12 @@
   ],
   "dependencies": {
     "ts-micro-result": "^3.3.0",
-    "valibot": "^1.4.1",
-    "@auth-craft/api-contract": "^0.1.2"
+    "valibot": "^1.4.2",
+    "@auth-craft/api-contract": "^0.1.3"
   },
   "devDependencies": {
-    "typescript": "^6.0.3",
-    "vitest": "^4.1.8"
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.10"
   },
   "license": "MIT",
   "publishConfig": {

package/dist/proxy.d.ts

@@ -1,75 +0,0 @@
-/**
- * Contract-driven typed proxy.
- *
- * Given a transport (the absorbed FetchGuard client) and a map of contract
- * endpoints, this builds a typed method per endpoint. The `kind` discriminator
- * decides how each one is dispatched:
- *
- *   data   → transport.callJson(method, url, body)   (auto-bound, typed Result<T>)
- *   login  → transport.login(body, url)              (Worker session bootstrap)
- *   logout → transport.logout(body)
- *   exchange → transport.exchangeToken(url, { payload })
- *
- * Types flow straight from the contract: the input is inferred from the body
- * schema, the output from the response schema (or AuthResult for login/logout).
- * A route change to the contract therefore re-types every call site at build.
- */
-import type { Endpoint, PathParams } from '@auth-craft/api-contract';
-import { type FetchGuardClient } from '@auth-craft/transport';
-import { type Result } from 'ts-micro-result';
-import type { InferInput, InferOutput } from 'valibot';
-export interface AuthResult {
-    authenticated: boolean;
-    user?: unknown;
-    expiresAt?: number | null;
-}
-/** Whether an endpoint has any `:param` segments. */
-type HasParams<P extends string> = PathParams<P> extends never ? false : true;
-/** The `params` argument, required only when the path has params. */
-type ParamsArg<P extends string> = HasParams<P> extends true ? {
-    params: Record<PathParams<P>, string | number>;
-} : {
-    params?: undefined;
-};
-/** Body argument, present only when the endpoint declares a body schema. */
-type BodyArg<E> = E extends {
-    body: infer S;
-} ? {
-    body: InferInput<S extends import('valibot').GenericSchema ? S : never>;
-} : {
-    body?: undefined;
-};
-/** Query argument, present only when the endpoint declares a query schema. */
-type QueryArg<E> = E extends {
-    query: infer S;
-} ? {
-    query?: InferInput<S extends import('valibot').GenericSchema ? S : never>;
-} : {
-    query?: undefined;
-};
-/** The single call argument object for a generated method. */
-type CallArg<E extends Endpoint> = ParamsArg<E['path']> & BodyArg<E> & QueryArg<E>;
-/** The resolved return type of a generated method. */
-type CallReturn<E extends Endpoint> = E extends {
-    kind: 'data';
-} ? E extends {
-    response: infer R;
-} ? Result<InferOutput<R extends import('valibot').GenericSchema ? R : never>> : Result<unknown> : E extends {
-    kind: 'login';
-} ? E extends {
-    response: infer R;
-} ? Result<InferOutput<R extends import('valibot').GenericSchema ? R : never>> : Result<AuthResult> : Result<AuthResult>;
-/** Does this arg shape need any argument at all? */
-type NeedsArg<E extends Endpoint> = HasParams<E['path']> extends true ? true : E extends {
-    body: unknown;
-} ? true : false;
-export type EndpointMethod<E extends Endpoint> = NeedsArg<E> extends true ? (arg: CallArg<E>) => Promise<CallReturn<E>> : (arg?: CallArg<E>) => Promise<CallReturn<E>>;
-export type ContractClient<C extends Record<string, Endpoint>> = {
-    [K in keyof C]: EndpointMethod<C[K]>;
-};
-/**
- * Build a typed client object from a contract group.
- */
-export declare function buildClient<C extends Record<string, Endpoint>>(transport: FetchGuardClient, contract: C, buildUrl: (path: string) => string): ContractClient<C>;
-export {};
-//# sourceMappingURL=proxy.d.ts.map

package/dist/proxy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAEpE,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAGtD,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,CAAA;IACtB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,qDAAqD;AACrD,KAAK,SAAS,CAAC,CAAC,SAAS,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,KAAK,GAAG,IAAI,CAAA;AAE7E,qEAAqE;AACrE,KAAK,SAAS,CAAC,CAAC,SAAS,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,GACxD;IAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;CAAE,GAClD;IAAE,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,CAAA;AAE1B,4EAA4E;AAC5E,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,UAAU,CAAC,CAAC,SAAS,OAAO,SAAS,EAAE,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,CAAA;CAAE,GAC3E;IAAE,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,CAAA;AAExB,8EAA8E;AAC9E,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,KAAK,EAAE,MAAM,CAAC,CAAA;CAAE,GAC3C;IAAE,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC,SAAS,OAAO,SAAS,EAAE,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,CAAA;CAAE,GAC7E;IAAE,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,CAAA;AAEzB,8DAA8D;AAC9D,KAAK,OAAO,CAAC,CAAC,SAAS,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;AAElF,sDAAsD;AACtD,KAAK,UAAU,CAAC,CAAC,SAAS,QAAQ,IAAI,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5D,CAAC,SAAS;IAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;CAAE,GAC7B,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,OAAO,SAAS,EAAE,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAC1E,MAAM,CAAC,OAAO,CAAC,GACjB,CAAC,SAAS;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAEzB,CAAC,SAAS;IAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;CAAE,GAC7B,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,OAAO,SAAS,EAAE,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAC1E,MAAM,CAAC,UAAU,CAAC,GACpB,MAAM,CAAC,UAAU,CAAC,CAAA;AAExB,oDAAoD;AACpD,KAAK,QAAQ,CAAC,CAAC,SAAS,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,IAAI,GACjE,IAAI,GACJ,CAAC,SAAS;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACzB,IAAI,GACJ,KAAK,CAAA;AAEX,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,SAAS,IAAI,GACrE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAC3C,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AAEhD,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI;KAC9D,CAAC,IAAI,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CACrC,CAAA;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC5D,SAAS,EAAE,gBAAgB,EAC3B,QAAQ,EAAE,CAAC,EACX,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GACjC,cAAc,CAAC,CAAC,CAAC,CAgCnB"}

package/dist/proxy.js

@@ -1,95 +0,0 @@
-/**
- * Contract-driven typed proxy.
- *
- * Given a transport (the absorbed FetchGuard client) and a map of contract
- * endpoints, this builds a typed method per endpoint. The `kind` discriminator
- * decides how each one is dispatched:
- *
- *   data   → transport.callJson(method, url, body)   (auto-bound, typed Result<T>)
- *   login  → transport.login(body, url)              (Worker session bootstrap)
- *   logout → transport.logout(body)
- *   exchange → transport.exchangeToken(url, { payload })
- *
- * Types flow straight from the contract: the input is inferred from the body
- * schema, the output from the response schema (or AuthResult for login/logout).
- * A route change to the contract therefore re-types every call site at build.
- */
-import { fillPath } from '@auth-craft/api-contract';
-import { deserializeResult } from '@auth-craft/transport';
-import { err, ok } from 'ts-micro-result';
-/**
- * Build a typed client object from a contract group.
- */
-export function buildClient(transport, contract, buildUrl) {
-    const out = {};
-    for (const key of Object.keys(contract)) {
-        const ep = contract[key];
-        out[key] = async (arg) => {
-            const path = fillPath(ep.path, arg?.params);
-            const url = buildUrl(path) + buildQueryString(arg?.query);
-            const body = arg?.body;
-            const requiresAuth = ep.public !== true;
-            switch (ep.kind) {
-                case 'data':
-                    return transport.callJson(ep.method, url, body, { requiresAuth });
-                case 'login':
-                    return dispatchLogin(transport, body, url);
-                case 'logout':
-                    return transport.logout(body);
-                case 'exchange':
-                    return transport.exchangeToken(url, {
-                        ...(body !== undefined ? { payload: body } : {})
-                    });
-                default:
-                    return err({ code: 'UNKNOWN_KIND', message: `Unknown endpoint kind for '${key}'.` });
-            }
-        };
-    }
-    return out;
-}
-/**
- * Dispatch a login-kind endpoint and normalize the outcome.
- *
- * FetchGuard's login() resolves the AuthResult when a session is established. A
- * 2-step login (credential challenge / MFA required) comes back as a non-error
- * HTTP body that FetchGuard surfaces via `meta.params.body`. We deserialize that
- * envelope so the caller gets the discriminated login result (tokens | challenge
- * | mfa) instead of an opaque "not authenticated" — matching the old SDK's
- * behaviour, but in ONE place instead of per method.
- */
-async function dispatchLogin(transport, body, url) {
-    const result = await transport.login(body, url);
-    // Session established → return the tokens/auth-state shape.
-    if (result.ok && result.data.authenticated) {
-        return ok({
-            accessToken: '',
-            expiresAt: result.data.expiresAt ?? 0
-        });
-    }
-    // Not authenticated: the backend body may carry a challenge / MFA requirement
-    // (a legitimate 2-step step), or a real error. Deserialize and forward it.
-    if (!result.ok) {
-        const params = result.meta?.params;
-        if (params?.body) {
-            const parsed = deserializeResult(params.body);
-            // Forward whatever the backend said — challenge/mfa (ok) or error (err).
-            return parsed;
-        }
-        return err(result.errors);
-    }
-    // ok but not authenticated and no body to interpret — surface a generic error.
-    return err({ code: 'LOGIN_FAILED', message: 'Authentication did not establish a session' });
-}
-/** Serialize a query object to a `?a=1&b=2` string (skips undefined). */
-function buildQueryString(query) {
-    if (!query)
-        return '';
-    const params = new URLSearchParams();
-    for (const [k, v] of Object.entries(query)) {
-        if (v !== undefined && v !== null)
-            params.set(k, String(v));
-    }
-    const qs = params.toString();
-    return qs ? `?${qs}` : '';
-}
-//# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAyB,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,iBAAiB,CAAA;AA0DtD;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,SAA2B,EAC3B,QAAW,EACX,QAAkC;IAElC,MAAM,GAAG,GAAG,EAGX,CAAA;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAa,CAAA;QACpC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACzD,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,CAAA;YACtB,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,KAAK,IAAI,CAAA;YAEvC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;gBAChB,KAAK,MAAM;oBACT,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;gBACnE,KAAK,OAAO;oBACV,OAAO,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;gBAC5C,KAAK,QAAQ;oBACX,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAA6B,CAAA;gBAC3D,KAAK,UAAU;oBACb,OAAO,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE;wBAClC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAA+B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5E,CAA6B,CAAA;gBAChC;oBACE,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,8BAA8B,GAAG,IAAI,EAAE,CAAC,CAAA;YACxF,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED,OAAO,GAAwB,CAAA;AACjC,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,aAAa,CAC1B,SAA2B,EAC3B,IAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAE/C,4DAA4D;IAC5D,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC;YACR,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC;SACtC,CAAC,CAAA;IACJ,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAuC,CAAA;QACnE,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,iBAAiB,CAAU,MAAM,CAAC,IAAI,CAAC,CAAA;YACtD,yEAAyE;YACzE,OAAO,MAAM,CAAA;QACf,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3B,CAAC;IAED,+EAA+E;IAC/E,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAA;AAC7F,CAAC;AAED,yEAAyE;AACzE,SAAS,gBAAgB,CAAC,KAA+B;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;IACpC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;IAC5B,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC3B,CAAC"}