@authrim/sveltekit 0.1.0

package/dist/providers/http.js

@@ -0,0 +1,65 @@
+/**
+ * Browser HTTP Client
+ *
+ * P0: credentials デフォルトは 'omit' - 必要な場合のみ 'include' を明示指定
+ * P0: 機密データのログ出力をマスキング
+ */
+import { sanitizeJsonForLogging } from '../utils/sensitive-data.js';
+export class BrowserHttpClient {
+    defaultCredentials;
+    defaultTimeout;
+    debug;
+    constructor(options) {
+        this.defaultCredentials = options?.credentials ?? 'omit';
+        this.defaultTimeout = options?.timeout ?? 30000;
+        this.debug = options?.debug ?? false;
+    }
+    debugLog(message, data) {
+        if (!this.debug)
+            return;
+        if (data) {
+            const sanitized = typeof data === 'string' ? sanitizeJsonForLogging(data) : JSON.stringify(data);
+            console.debug(`[Authrim HTTP] ${message}`, sanitized);
+        }
+        else {
+            console.debug(`[Authrim HTTP] ${message}`);
+        }
+    }
+    async fetch(url, options) {
+        const controller = new AbortController();
+        const timeout = options?.timeout ?? this.defaultTimeout;
+        const timeoutId = setTimeout(() => controller.abort(), timeout);
+        this.debugLog(`${options?.method ?? 'GET'} ${url}`, options?.body);
+        try {
+            const response = await globalThis.fetch(url, {
+                method: options?.method ?? 'GET',
+                headers: options?.headers,
+                body: options?.body,
+                signal: options?.signal ?? controller.signal,
+                credentials: options?.credentials ?? this.defaultCredentials,
+            });
+            const contentType = response.headers.get('content-type') ?? '';
+            let data;
+            if (contentType.includes('application/json')) {
+                data = (await response.json());
+            }
+            else {
+                data = (await response.text());
+            }
+            const headers = {};
+            response.headers.forEach((value, key) => {
+                headers[key] = value;
+            });
+            return {
+                status: response.status,
+                statusText: response.statusText,
+                headers,
+                data,
+                ok: response.ok,
+            };
+        }
+        finally {
+            clearTimeout(timeoutId);
+        }
+    }
+}

package/dist/providers/index.d.ts

@@ -0,0 +1,4 @@
+export { BrowserHttpClient, type BrowserHttpClientOptions, type BrowserHttpOptions } from './http.js';
+export { BrowserCryptoProvider } from './crypto.js';
+export { createBrowserStorage, type BrowserStorageOptions } from './storage.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,wBAAwB,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACtG,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/providers/index.js

@@ -0,0 +1,3 @@
+export { BrowserHttpClient } from './http.js';
+export { BrowserCryptoProvider } from './crypto.js';
+export { createBrowserStorage } from './storage.js';

package/dist/providers/storage.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Browser Storage Provider
+ *
+ * P2: デフォルトは sessionStorage (XSS耐性優先)
+ * localStorage は明示的 opt-in のみ
+ */
+import type { AuthrimStorage } from '@authrim/core';
+export interface BrowserStorageOptions {
+    /** Storage key prefix (default: 'authrim') */
+    prefix?: string;
+    /**
+     * Storage type (default: 'sessionStorage')
+     *
+     * - 'memory': 最も安全。タブを閉じると消える。SPA推奨。
+     * - 'sessionStorage': ページリロードで維持、タブを閉じると消える。
+     * - 'localStorage': 永続化。XSS脆弱性あり、明示的 opt-in のみ。
+     */
+    storage?: 'memory' | 'sessionStorage' | 'localStorage';
+}
+export declare function createBrowserStorage(options?: BrowserStorageOptions): AuthrimStorage;
+//# sourceMappingURL=storage.d.ts.map

package/dist/providers/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/lib/providers/storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,WAAW,qBAAqB;IACpC,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,gBAAgB,GAAG,cAAc,CAAC;CACxD;AAiFD,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,cAAc,CAepF"}

package/dist/providers/storage.js

@@ -0,0 +1,83 @@
+/**
+ * Browser Storage Provider
+ *
+ * P2: デフォルトは sessionStorage (XSS耐性優先)
+ * localStorage は明示的 opt-in のみ
+ */
+class MemoryStorage {
+    data = new Map();
+    async get(key) {
+        return this.data.get(key) ?? null;
+    }
+    async set(key, value) {
+        this.data.set(key, value);
+    }
+    async remove(key) {
+        this.data.delete(key);
+    }
+    async getAll() {
+        return Object.fromEntries(this.data);
+    }
+    async clear() {
+        this.data.clear();
+    }
+}
+class WebStorage {
+    storage;
+    prefix;
+    constructor(storage, prefix) {
+        this.storage = storage;
+        this.prefix = prefix;
+    }
+    key(key) {
+        return `${this.prefix}:${key}`;
+    }
+    async get(key) {
+        return this.storage.getItem(this.key(key));
+    }
+    async set(key, value) {
+        this.storage.setItem(this.key(key), value);
+    }
+    async remove(key) {
+        this.storage.removeItem(this.key(key));
+    }
+    async getAll() {
+        const result = {};
+        const prefixWithColon = `${this.prefix}:`;
+        for (let i = 0; i < this.storage.length; i++) {
+            const fullKey = this.storage.key(i);
+            if (fullKey?.startsWith(prefixWithColon)) {
+                const key = fullKey.slice(prefixWithColon.length);
+                const value = this.storage.getItem(fullKey);
+                if (value !== null) {
+                    result[key] = value;
+                }
+            }
+        }
+        return result;
+    }
+    async clear() {
+        const prefixWithColon = `${this.prefix}:`;
+        const keysToRemove = [];
+        for (let i = 0; i < this.storage.length; i++) {
+            const fullKey = this.storage.key(i);
+            if (fullKey?.startsWith(prefixWithColon)) {
+                keysToRemove.push(fullKey);
+            }
+        }
+        keysToRemove.forEach((key) => this.storage.removeItem(key));
+    }
+}
+export function createBrowserStorage(options) {
+    const storageType = options?.storage ?? 'sessionStorage';
+    const prefix = options?.prefix ?? 'authrim';
+    if (storageType === 'memory') {
+        return new MemoryStorage();
+    }
+    if (typeof window === 'undefined') {
+        // SSR: use memory storage
+        return new MemoryStorage();
+    }
+    const storage = storageType === 'localStorage' ? localStorage : sessionStorage;
+    return new WebStorage(storage, prefix);
+}

package/dist/server/handle.d.ts

@@ -0,0 +1,46 @@
+/**
+ * SvelteKit Handle Hook for Authentication
+ */
+import type { Handle, RequestEvent } from '@sveltejs/kit';
+import { type ServerSessionManager, type ServerSessionManagerOptions, type ServerAuthContext } from './session.js';
+export interface AuthHandleOptions extends ServerSessionManagerOptions {
+    /**
+     * Callback URL paths that should handle auth callbacks
+     * Default: ['/auth/callback']
+     */
+    callbackPaths?: string[];
+}
+/**
+ * Create auth handle for SvelteKit hooks
+ *
+ * @example
+ * ```typescript
+ * // src/hooks.server.ts
+ * import { createAuthHandle } from '@authrim/sveltekit/server';
+ *
+ * export const handle = createAuthHandle();
+ * ```
+ */
+export declare function createAuthHandle(options?: AuthHandleOptions): Handle;
+/**
+ * Get session manager for use in server-side code
+ */
+export declare function getServerSessionManager(options?: ServerSessionManagerOptions): ServerSessionManager;
+/**
+ * Get auth context from event (requires createAuthHandle to be used)
+ *
+ * Note: For full type safety, add this to your src/app.d.ts:
+ * ```typescript
+ * import type { ServerAuthContext } from '@authrim/sveltekit/server';
+ *
+ * declare global {
+ *   namespace App {
+ *     interface Locals {
+ *       auth?: ServerAuthContext;
+ *     }
+ *   }
+ * }
+ * ```
+ */
+export declare function getAuthFromEvent(event: RequestEvent): ServerAuthContext | null;
+//# sourceMappingURL=handle.d.ts.map

package/dist/server/handle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.d.ts","sourceRoot":"","sources":["../../src/lib/server/handle.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,EACvB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,iBAAkB,SAAQ,2BAA2B;IACpE;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAmBpE;AAMD;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,CAAC,EAAE,2BAA2B,GACpC,oBAAoB,CAEtB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,iBAAiB,GAAG,IAAI,CAE9E"}

package/dist/server/handle.js

@@ -0,0 +1,60 @@
+/**
+ * SvelteKit Handle Hook for Authentication
+ */
+import { createServerSessionManager, } from './session.js';
+/**
+ * Create auth handle for SvelteKit hooks
+ *
+ * @example
+ * ```typescript
+ * // src/hooks.server.ts
+ * import { createAuthHandle } from '@authrim/sveltekit/server';
+ *
+ * export const handle = createAuthHandle();
+ * ```
+ */
+export function createAuthHandle(options) {
+    const sessionManager = createServerSessionManager(options);
+    const callbackPaths = options?.callbackPaths ?? ['/auth/callback'];
+    return async ({ event, resolve }) => {
+        // Load session into locals
+        const authContext = await sessionManager.get(event);
+        if (authContext) {
+            event.locals.auth = authContext;
+        }
+        // Handle auth callbacks
+        if (isCallbackPath(event.url.pathname, callbackPaths)) {
+            // Let the page handle the callback
+            return resolve(event);
+        }
+        return resolve(event);
+    };
+}
+function isCallbackPath(pathname, callbackPaths) {
+    return callbackPaths.some((path) => pathname.startsWith(path));
+}
+/**
+ * Get session manager for use in server-side code
+ */
+export function getServerSessionManager(options) {
+    return createServerSessionManager(options);
+}
+/**
+ * Get auth context from event (requires createAuthHandle to be used)
+ *
+ * Note: For full type safety, add this to your src/app.d.ts:
+ * ```typescript
+ * import type { ServerAuthContext } from '@authrim/sveltekit/server';
+ *
+ * declare global {
+ *   namespace App {
+ *     interface Locals {
+ *       auth?: ServerAuthContext;
+ *     }
+ *   }
+ * }
+ * ```
+ */
+export function getAuthFromEvent(event) {
+    return event.locals.auth ?? null;
+}

package/dist/server/index.d.ts

@@ -0,0 +1,4 @@
+export { createServerSessionManager, type ServerSessionManager, type ServerSessionManagerOptions, type ServerAuthContext, } from './session.js';
+export { createAuthHandle, getServerSessionManager, getAuthFromEvent, type AuthHandleOptions, } from './handle.js';
+export { requireAuth, createAuthLoad, isAuthenticated, getUser, getSession, type AuthLoadOptions, } from './load.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,WAAW,EACX,cAAc,EACd,eAAe,EACf,OAAO,EACP,UAAU,EACV,KAAK,eAAe,GACrB,MAAM,WAAW,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,3 @@
+export { createServerSessionManager, } from './session.js';
+export { createAuthHandle, getServerSessionManager, getAuthFromEvent, } from './handle.js';
+export { requireAuth, createAuthLoad, isAuthenticated, getUser, getSession, } from './load.js';

package/dist/server/load.d.ts

@@ -0,0 +1,83 @@
+/**
+ * SvelteKit Load Helpers for Authentication
+ *
+ * For full type safety, add this to your src/app.d.ts:
+ * ```typescript
+ * import type { ServerAuthContext } from '@authrim/sveltekit/server';
+ *
+ * declare global {
+ *   namespace App {
+ *     interface Locals {
+ *       auth?: ServerAuthContext;
+ *     }
+ *   }
+ * }
+ * ```
+ */
+import type { RequestEvent } from '@sveltejs/kit';
+import type { ServerAuthContext } from './session.js';
+export interface AuthLoadOptions {
+    /**
+     * Redirect URL for unauthenticated users
+     * Default: '/login'
+     */
+    loginUrl?: string;
+    /**
+     * URL parameter to store the original URL
+     * Default: 'redirectTo'
+     */
+    redirectParam?: string;
+}
+/**
+ * Create auth load helper for protected routes
+ *
+ * @example
+ * ```typescript
+ * // src/routes/dashboard/+page.server.ts
+ * import { requireAuth } from '@authrim/sveltekit/server';
+ *
+ * export const load = requireAuth();
+ * ```
+ */
+export declare function requireAuth(options?: AuthLoadOptions): ({ locals, url }: RequestEvent) => Promise<{
+    auth: ServerAuthContext;
+}>;
+/**
+ * Create auth load helper that passes auth data without requiring it
+ *
+ * @example
+ * ```typescript
+ * // src/routes/+layout.server.ts
+ * import { createAuthLoad } from '@authrim/sveltekit/server';
+ *
+ * export const load = createAuthLoad();
+ * ```
+ */
+export declare function createAuthLoad(): ({ locals }: RequestEvent) => Promise<{
+    auth: ServerAuthContext | null;
+}>;
+/**
+ * Check if user is authenticated in server-side code
+ *
+ * @param locals - App.Locals from SvelteKit (requires auth?: ServerAuthContext in app.d.ts)
+ */
+export declare function isAuthenticated(locals: {
+    auth?: ServerAuthContext;
+}): boolean;
+/**
+ * Get user from locals
+ *
+ * @param locals - App.Locals from SvelteKit (requires auth?: ServerAuthContext in app.d.ts)
+ */
+export declare function getUser(locals: {
+    auth?: ServerAuthContext;
+}): import("@authrim/core").User | null;
+/**
+ * Get session from locals
+ *
+ * @param locals - App.Locals from SvelteKit (requires auth?: ServerAuthContext in app.d.ts)
+ */
+export declare function getSession(locals: {
+    auth?: ServerAuthContext;
+}): import("@authrim/core").Session | null;
+//# sourceMappingURL=load.d.ts.map

package/dist/server/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/lib/server/load.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,eAAe,IAIrC,iBAAiB,YAAY;;GAa5C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,KACd,YAAY,YAAY;;GAOvC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,iBAAiB,CAAA;CAAE,GAAG,OAAO,CAE7E;AAED;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,iBAAiB,CAAA;CAAE,uCAE3D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,iBAAiB,CAAA;CAAE,0CAE9D"}

package/dist/server/load.js

@@ -0,0 +1,86 @@
+/**
+ * SvelteKit Load Helpers for Authentication
+ *
+ * For full type safety, add this to your src/app.d.ts:
+ * ```typescript
+ * import type { ServerAuthContext } from '@authrim/sveltekit/server';
+ *
+ * declare global {
+ *   namespace App {
+ *     interface Locals {
+ *       auth?: ServerAuthContext;
+ *     }
+ *   }
+ * }
+ * ```
+ */
+import { redirect } from '@sveltejs/kit';
+/**
+ * Create auth load helper for protected routes
+ *
+ * @example
+ * ```typescript
+ * // src/routes/dashboard/+page.server.ts
+ * import { requireAuth } from '@authrim/sveltekit/server';
+ *
+ * export const load = requireAuth();
+ * ```
+ */
+export function requireAuth(options) {
+    const loginUrl = options?.loginUrl ?? '/login';
+    const redirectParam = options?.redirectParam ?? 'redirectTo';
+    return async ({ locals, url }) => {
+        const auth = locals.auth;
+        if (!auth) {
+            const redirectUrl = new URL(loginUrl, url.origin);
+            redirectUrl.searchParams.set(redirectParam, url.pathname + url.search);
+            throw redirect(302, redirectUrl.toString());
+        }
+        return {
+            auth,
+        };
+    };
+}
+/**
+ * Create auth load helper that passes auth data without requiring it
+ *
+ * @example
+ * ```typescript
+ * // src/routes/+layout.server.ts
+ * import { createAuthLoad } from '@authrim/sveltekit/server';
+ *
+ * export const load = createAuthLoad();
+ * ```
+ */
+export function createAuthLoad() {
+    return async ({ locals }) => {
+        const auth = locals.auth;
+        return {
+            auth: auth ?? null,
+        };
+    };
+}
+/**
+ * Check if user is authenticated in server-side code
+ *
+ * @param locals - App.Locals from SvelteKit (requires auth?: ServerAuthContext in app.d.ts)
+ */
+export function isAuthenticated(locals) {
+    return locals.auth !== undefined && locals.auth !== null;
+}
+/**
+ * Get user from locals
+ *
+ * @param locals - App.Locals from SvelteKit (requires auth?: ServerAuthContext in app.d.ts)
+ */
+export function getUser(locals) {
+    return locals.auth?.user ?? null;
+}
+/**
+ * Get session from locals
+ *
+ * @param locals - App.Locals from SvelteKit (requires auth?: ServerAuthContext in app.d.ts)
+ */
+export function getSession(locals) {
+    return locals.auth?.session ?? null;
+}

package/dist/server/session.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Server Session Manager
+ *
+ * Cookie を完全に抽象化するレイヤー
+ */
+import type { RequestEvent } from '@sveltejs/kit';
+import type { Session, User } from '@authrim/core';
+/**
+ * サーバー側の認証コンテキスト
+ */
+export interface ServerAuthContext {
+    session: Session;
+    user: User;
+}
+/**
+ * ServerSessionManager のオプション
+ */
+export interface ServerSessionManagerOptions {
+    /** Cookie 名 (default: 'authrim_session') */
+    cookieName?: string;
+    /** SameSite 設定 (default: 'lax') */
+    sameSite?: 'strict' | 'lax' | 'none';
+    /** Secure フラグ (default: true in production) */
+    secure?: boolean;
+    /** Path (default: '/') */
+    path?: string;
+    /** 有効期限（秒）(default: 7 days) */
+    maxAge?: number;
+    /** HttpOnly フラグ (default: true) */
+    httpOnly?: boolean;
+}
+/**
+ * Cookie API を隠す抽象化レイヤー
+ */
+export interface ServerSessionManager {
+    get(event: RequestEvent): Promise<ServerAuthContext | null>;
+    set(event: RequestEvent, context: ServerAuthContext): void;
+    clear(event: RequestEvent): void;
+}
+/**
+ * ServerSessionManager ファクトリ
+ */
+export declare function createServerSessionManager(options?: ServerSessionManagerOptions): ServerSessionManager;
+//# sourceMappingURL=session.d.ts.map

package/dist/server/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/lib/server/session.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,IAAI,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC,+CAA+C;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC5D,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC3D,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;CAClC;AAKD;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,CAAC,EAAE,2BAA2B,GACpC,oBAAoB,CA0CtB"}

package/dist/server/session.js

@@ -0,0 +1,50 @@
+/**
+ * Server Session Manager
+ *
+ * Cookie を完全に抽象化するレイヤー
+ */
+const DEFAULT_COOKIE_NAME = 'authrim_session';
+const DEFAULT_MAX_AGE = 7 * 24 * 60 * 60; // 7 days
+/**
+ * ServerSessionManager ファクトリ
+ */
+export function createServerSessionManager(options) {
+    const cookieName = options?.cookieName ?? DEFAULT_COOKIE_NAME;
+    const sameSite = options?.sameSite ?? 'lax';
+    const secure = options?.secure ?? process.env.NODE_ENV === 'production';
+    const path = options?.path ?? '/';
+    const maxAge = options?.maxAge ?? DEFAULT_MAX_AGE;
+    const httpOnly = options?.httpOnly ?? true;
+    return {
+        async get(event) {
+            const cookie = event.cookies.get(cookieName);
+            if (!cookie) {
+                return null;
+            }
+            try {
+                const data = JSON.parse(cookie);
+                // Validate structure
+                if (!data.session || !data.user) {
+                    return null;
+                }
+                return data;
+            }
+            catch {
+                return null;
+            }
+        },
+        set(event, context) {
+            const value = JSON.stringify(context);
+            event.cookies.set(cookieName, value, {
+                path,
+                sameSite,
+                secure,
+                httpOnly,
+                maxAge,
+            });
+        },
+        clear(event) {
+            event.cookies.delete(cookieName, { path });
+        },
+    };
+}

package/dist/stores/auth.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Svelte Auth Stores
+ *
+ * 設計原則:
+ * - 全て Readable（Writable は export しない）
+ * - イベントが Source of Truth（Store はイベントの projection）
+ * - loadingState は 'idle' が完全安定状態
+ */
+import { type Readable, type Writable } from 'svelte/store';
+import type { Session, User, DirectAuthError } from '@authrim/core';
+/**
+ * ローディング状態
+ *
+ * ルール:
+ * - 'idle' は「完全に安定」状態
+ * - 全処理完了後は必ず 'idle' に戻る
+ * - エラー発生時も 'idle' に戻す（error !== null が唯一の異常判定）
+ */
+export type AuthLoadingState = 'idle' | 'initializing' | 'authenticating' | 'refreshing' | 'signing_out';
+/**
+ * Auth Error (UI 向けに簡略化)
+ */
+export interface AuthError {
+    code: string;
+    message: string;
+    details?: unknown;
+}
+/**
+ * 公開ストアインターフェース（全て Readable）
+ */
+export interface AuthStores {
+    session: Readable<Session | null>;
+    user: Readable<User | null>;
+    isAuthenticated: Readable<boolean>;
+    loadingState: Readable<AuthLoadingState>;
+    error: Readable<AuthError | null>;
+}
+/**
+ * 内部ストアインターフェース（writable アクセス）
+ */
+export interface InternalAuthStores {
+    _session: Writable<Session | null>;
+    _user: Writable<User | null>;
+    _loadingState: Writable<AuthLoadingState>;
+    _error: Writable<AuthError | null>;
+    public: AuthStores;
+}
+/**
+ * ストアファクトリ
+ */
+export declare function createAuthStores(): InternalAuthStores;
+/**
+ * DirectAuthError から AuthError への変換
+ */
+export declare function toAuthError(error: DirectAuthError | Error | unknown): AuthError;
+//# sourceMappingURL=auth.d.ts.map

package/dist/stores/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/stores/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAqB,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC5B,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACzC,KAAK,EAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACnC,KAAK,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC7B,aAAa,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC1C,MAAM,EAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACnC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,kBAAkB,CA0BrD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,KAAK,GAAG,OAAO,GAAG,SAAS,CAoB/E"}