@baliola/auth-sdk 0.2.0

package/dist/requests-eTORIjY5.d.ts

@@ -0,0 +1,42 @@
+//#region src/types/requests.d.ts
+/** Optional captcha argument shared by every public unauthenticated entrypoint. */
+type CaptchaArgs = {
+  /** Cloudflare Turnstile token. Required when captcha is enabled on the server. */captchaToken?: string;
+};
+type SendLoginCodeInput = {
+  email: string;
+} & CaptchaArgs;
+type VerifyLoginCodeInput = {
+  email: string;
+  code: string;
+};
+type ResendLoginCodeInput = {
+  email: string;
+} & CaptchaArgs;
+type RegisterInput = {
+  email: string;
+  password: string;
+} & CaptchaArgs;
+type VerifyRegistrationCodeInput = {
+  email: string;
+  code: string;
+};
+type ResendRegistrationCodeInput = {
+  email: string;
+} & CaptchaArgs;
+type LoginWithPasswordInput = {
+  email: string;
+  password: string;
+} & CaptchaArgs;
+type SetPasswordInput = {
+  password: string;
+};
+type ChangePasswordInput = {
+  currentPassword: string;
+  newPassword: string;
+};
+type LoginWithGoogleInput = {
+  idToken: string;
+};
+//#endregion
+export { RegisterInput as a, SendLoginCodeInput as c, VerifyRegistrationCodeInput as d, LoginWithPasswordInput as i, SetPasswordInput as l, ChangePasswordInput as n, ResendLoginCodeInput as o, LoginWithGoogleInput as r, ResendRegistrationCodeInput as s, CaptchaArgs as t, VerifyLoginCodeInput as u };

package/dist/session-Cs_P7ojF.d.ts

@@ -0,0 +1,49 @@
+//#region src/types/session.d.ts
+type Account = {
+  id: string;
+  email: string;
+  status: string;
+};
+type Project = {
+  id: string;
+  name: string;
+  displayName: string | null; /** Exact-match CORS origins enforced by the auth server for this project. */
+  allowedOrigins: string[];
+};
+type AuthSession = {
+  accessToken: string;
+  refreshToken: string; /** Token lifetime in seconds (server-provided). */
+  expiresIn: number; /** SDK-set: ms epoch when this session was received from the server. */
+  issuedAt: number; /** SDK-computed: ms epoch when accessToken expires (issuedAt + expiresIn * 1000). */
+  expiresAt: number;
+  account: Account;
+  project?: Project;
+  roles: string[];
+  permissions: string[];
+};
+/** Per-OTP metadata returned alongside send/resend responses. */
+type OtpInfo = {
+  /** Seconds until the code expires (relative to the server clock). */expiresInSeconds: number; /** ISO timestamp when the code expires. */
+  expiresAt: string; /** Seconds until another resend is permitted (0 = ready). */
+  canResendInSeconds: number; /** Resend attempts left for this OTP record. */
+  resendsRemaining: number;
+};
+/** Result of `auth.emailOtp.sendLoginCode`. */
+type SendLoginCodeResult = {
+  /** Whether the BE recognizes the email as an existing account or a new signup. */flow: 'login' | 'signup'; /** Available login methods for this email. */
+  methods: ('password' | 'passwordless')[]; /** OTP timing metadata. */
+  otp: OtpInfo;
+};
+/** Result of any resend method (`emailOtp.resendLoginCode`, `emailPassword.resendRegistrationCode`). */
+type ResendCodeResult = {
+  otp: OtpInfo;
+};
+/** Result of `auth.emailPassword.register`. */
+type RegisterResult = {
+  otp: OtpInfo;
+};
+type SessionChangeHandler = (session: AuthSession | null) => void;
+type ErrorSource = 'session-change-handler' | 'broadcast-channel-message';
+type ErrorHandler = (error: Error, source: ErrorSource) => void;
+//#endregion
+export { OtpInfo as a, ResendCodeResult as c, ErrorSource as i, SendLoginCodeResult as l, AuthSession as n, Project as o, ErrorHandler as r, RegisterResult as s, Account as t, SessionChangeHandler as u };

package/dist/sessionStore-BDdEpbL8.d.ts

@@ -0,0 +1,35 @@
+import { n as AuthSession } from "./session-Cs_P7ojF.js";
+
+//#region src/store/sessionStore.d.ts
+/**
+ * Pluggable session storage. May be sync or async.
+ *
+ * The SDK awaits `get()` only in `loadSession()` and writes on every
+ * session change. Sync reads of the current session happen against the
+ * client's in-memory mirror (via `auth.getSession()`), not the store.
+ */
+interface SessionStore {
+  get(): AuthSession | null | Promise<AuthSession | null>;
+  set(session: AuthSession | null): void | Promise<void>;
+}
+/**
+ * In-process memory store. Default if no store is supplied to
+ * `createAuthClient`. Suitable for: server-side requests, tests,
+ * any context where session does not need to persist across reloads.
+ */
+declare function memoryStore(): SessionStore;
+type LocalStorageStoreOptions = {
+  /** Key under which the serialized session is stored. Defaults to `baliola.auth.session`. */key?: string;
+};
+/**
+ * Browser localStorage-backed store. Persists across page reloads in the
+ * same origin. Throws on construction if `globalThis.localStorage` is not
+ * available — call only in browser environments.
+ *
+ * Known limitation: cross-tab sync is not implemented. Tab A logging
+ * out does not automatically propagate to Tab B until B makes a request
+ * and receives a 401.
+ */
+declare function localStorageStore(options?: LocalStorageStoreOptions): SessionStore;
+//#endregion
+export { memoryStore as i, SessionStore as n, localStorageStore as r, LocalStorageStoreOptions as t };

package/dist/sessionStore-DD6lON9W.js

@@ -0,0 +1,50 @@
+//#region src/store/sessionStore.ts
+/**
+* In-process memory store. Default if no store is supplied to
+* `createAuthClient`. Suitable for: server-side requests, tests,
+* any context where session does not need to persist across reloads.
+*/
+function memoryStore() {
+	let current = null;
+	return {
+		get() {
+			return current;
+		},
+		set(session) {
+			current = session;
+		}
+	};
+}
+const DEFAULT_LOCALSTORAGE_KEY = "baliola.auth.session";
+/**
+* Browser localStorage-backed store. Persists across page reloads in the
+* same origin. Throws on construction if `globalThis.localStorage` is not
+* available — call only in browser environments.
+*
+* Known limitation: cross-tab sync is not implemented. Tab A logging
+* out does not automatically propagate to Tab B until B makes a request
+* and receives a 401.
+*/
+function localStorageStore(options = {}) {
+	if (typeof globalThis.localStorage === "undefined") throw new Error("localStorageStore() requires globalThis.localStorage. Use memoryStore() in non-browser environments.");
+	const key = options.key ?? DEFAULT_LOCALSTORAGE_KEY;
+	const storage = globalThis.localStorage;
+	return {
+		get() {
+			const raw = storage.getItem(key);
+			if (raw === null) return null;
+			try {
+				return JSON.parse(raw);
+			} catch {
+				storage.removeItem(key);
+				return null;
+			}
+		},
+		set(session) {
+			if (session === null) storage.removeItem(key);
+			else storage.setItem(key, JSON.stringify(session));
+		}
+	};
+}
+//#endregion
+export { memoryStore as n, localStorageStore as t };

package/dist/store/index.d.ts

@@ -0,0 +1,2 @@
+import { i as memoryStore, n as SessionStore, r as localStorageStore, t as LocalStorageStoreOptions } from "../sessionStore-BDdEpbL8.js";
+export { type LocalStorageStoreOptions, type SessionStore, localStorageStore, memoryStore };

package/dist/store/index.js

@@ -0,0 +1,2 @@
+import { n as memoryStore, t as localStorageStore } from "../sessionStore-DD6lON9W.js";
+export { localStorageStore, memoryStore };

package/dist/tokens-BXrPLi5B.d.ts

@@ -0,0 +1,29 @@
+//#region src/types/tokens.d.ts
+/**
+ * One project the session is scoped to. A scoped login (`clientId` supplied)
+ * carries a single entry; a central login (`clientId` omitted) carries every
+ * project the account has active roles in.
+ */
+type AccessTokenPayloadProject = {
+  id: string;
+  name: string;
+  clientId: string;
+};
+/**
+ * Decoded shape of the JWT access token issued by Baliola Auth.
+ * Provided for consumer reference (e.g. when manually decoding the JWT
+ * with their own library); the SDK does not parse JWTs itself.
+ */
+type AccessTokenPayload = {
+  accountId: string;
+  email: string;
+  projects: AccessTokenPayloadProject[];
+  roles?: string[];
+  permissions?: string[];
+  iat?: number;
+  exp?: number;
+  sub?: string;
+  iss?: string;
+};
+//#endregion
+export { AccessTokenPayloadProject as n, AccessTokenPayload as t };

package/dist/types/index.d.ts

@@ -0,0 +1,4 @@
+import { a as OtpInfo, c as ResendCodeResult, i as ErrorSource, l as SendLoginCodeResult, n as AuthSession, o as Project, r as ErrorHandler, s as RegisterResult, t as Account, u as SessionChangeHandler } from "../session-Cs_P7ojF.js";
+import { a as RegisterInput, c as SendLoginCodeInput, d as VerifyRegistrationCodeInput, i as LoginWithPasswordInput, l as SetPasswordInput, n as ChangePasswordInput, o as ResendLoginCodeInput, r as LoginWithGoogleInput, s as ResendRegistrationCodeInput, t as CaptchaArgs, u as VerifyLoginCodeInput } from "../requests-eTORIjY5.js";
+import { n as AccessTokenPayloadProject, t as AccessTokenPayload } from "../tokens-BXrPLi5B.js";
+export { type AccessTokenPayload, type AccessTokenPayloadProject, type Account, type AuthSession, type CaptchaArgs, type ChangePasswordInput, type ErrorHandler, type ErrorSource, type LoginWithGoogleInput, type LoginWithPasswordInput, type OtpInfo, type Project, type RegisterInput, type RegisterResult, type ResendCodeResult, type ResendLoginCodeInput, type ResendRegistrationCodeInput, type SendLoginCodeInput, type SendLoginCodeResult, type SessionChangeHandler, type SetPasswordInput, type VerifyLoginCodeInput, type VerifyRegistrationCodeInput };

package/dist/types/index.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@baliola/auth-sdk",
+  "version": "0.2.0",
+  "description": "Client SDK for Baliola Auth",
+  "license": "SEE LICENSE IN LICENSE",
+  "author": "Baliola Development Team",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "import": "./dist/client/index.js"
+    },
+    "./errors": {
+      "types": "./dist/errors/index.d.ts",
+      "import": "./dist/errors/index.js"
+    },
+    "./store": {
+      "types": "./dist/store/index.d.ts",
+      "import": "./dist/store/index.js"
+    },
+    "./types": {
+      "types": "./dist/types/index.d.ts",
+      "import": "./dist/types/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/baliola/baliola-auth.git",
+    "directory": "sdk"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc --noEmit",
+    "test": "bun test test/unit",
+    "prepublishOnly": "bun run build"
+  },
+  "devDependencies": {
+    "@types/bun": "latest",
+    "tsdown": "^0.21.10",
+    "typescript": "^5.7.0"
+  }
+}