@classic-homes/auth 1.5.2 → 1.8.0

package/dist/{auth.svelte-YNXMXION.js → auth.svelte-FIHKI5BD.js}

@@ -1,3 +1,3 @@
-export { authActions, authStore, currentUser, isAuthenticated } from './chunk-ZJYMNGGH.js';
-import './chunk-NCVJ2HGP.js';
+export { authActions, authStore, currentUser, isAuthenticated } from './chunk-EBTCVIUQ.js';
+import './chunk-HVOZBQIF.js';
 import './chunk-X7KH4DDN.js';

package/dist/{chunk-ZJYMNGGH.js → chunk-EBTCVIUQ.js}

@@ -1,4 +1,4 @@
-import { authApi } from './chunk-NCVJ2HGP.js';
+import { authApi } from './chunk-HVOZBQIF.js';
 import { isInitialized, getConfig, hasRole, hasAnyRole, hasAllRoles, decodeJWT, getStorage, getDefaultStorage } from './chunk-X7KH4DDN.js';
 
 // src/svelte/stores/auth.svelte.ts

package/dist/{chunk-NCVJ2HGP.js → chunk-HVOZBQIF.js}

@@ -77,7 +77,7 @@ function updateStoredTokens(accessToken, refreshToken) {
   parsed.accessToken = accessToken;
   parsed.refreshToken = refreshToken;
   storage.setItem(storageKey, JSON.stringify(parsed));
-  import('./auth.svelte-YNXMXION.js').then(({ authStore }) => {
+  import('./auth.svelte-FIHKI5BD.js').then(({ authStore }) => {
     authStore.updateTokens(accessToken, refreshToken);
   }).catch(() => {
   });
@@ -92,7 +92,7 @@ function clearStoredAuth() {
 async function expireSession() {
   clearStoredAuth();
   try {
-    const { authStore } = await import('./auth.svelte-YNXMXION.js');
+    const { authStore } = await import('./auth.svelte-FIHKI5BD.js');
     authStore.handleSessionExpired();
   } catch {
   }
@@ -302,8 +302,8 @@ async function apiRequestInternal(endpoint, options, isRetry) {
       }
     }
     if (!response.ok) {
-      const dataObj = data;
-      const errorMessage = data.error?.message || (typeof dataObj.message === "string" ? dataObj.message : void 0) || data.meta?.message || (typeof dataObj.detail === "string" ? dataObj.detail : void 0) || `Request failed (${response.status})`;
+      const errorBody = data ?? {};
+      const errorMessage = errorBody.error?.message || (typeof errorBody.message === "string" ? errorBody.message : void 0) || errorBody.meta?.message || (typeof errorBody.detail === "string" ? errorBody.detail : void 0) || `Request failed (${response.status})`;
       const error = new Error(errorMessage);
       config.onAuthError?.(error);
       throw error;

package/dist/{chunk-O6GYC4PA.js → chunk-QTX7L4QY.js}

@@ -1,4 +1,4 @@
-import { authApi } from './chunk-NCVJ2HGP.js';
+import { authApi } from './chunk-HVOZBQIF.js';
 import { getUserRoles, hasAnyRole } from './chunk-X7KH4DDN.js';
 
 // src/core/guards.ts
@@ -59,7 +59,7 @@ var AuthService = class {
     }
     if (options?.autoSetAuth !== false && !isMfaChallengeResponse(response)) {
       try {
-        const { authStore } = await import('./auth.svelte-YNXMXION.js');
+        const { authStore } = await import('./auth.svelte-FIHKI5BD.js');
         authStore.setAuth(
           response.accessToken,
           response.refreshToken,
@@ -245,7 +245,7 @@ var AuthService = class {
     }
     if (options?.autoSetAuth !== false) {
       try {
-        const { authStore } = await import('./auth.svelte-YNXMXION.js');
+        const { authStore } = await import('./auth.svelte-FIHKI5BD.js');
         authStore.setAuth(
           response.accessToken,
           response.refreshToken,

package/dist/{chunk-GVNUEBEP.js → chunk-UGD4PNYI.js}

@@ -1,5 +1,5 @@
-import { authService } from './chunk-O6GYC4PA.js';
-import { authStore, currentUser, isAuthenticated, authActions } from './chunk-ZJYMNGGH.js';
+import { authService } from './chunk-QTX7L4QY.js';
+import { authStore, currentUser, isAuthenticated, authActions } from './chunk-EBTCVIUQ.js';
 import { isInitialized, initAuth, getUserRoles } from './chunk-X7KH4DDN.js';
 
 // src/svelte/guards/auth-guard.ts

package/dist/core/index.d.ts

@@ -20,6 +20,14 @@ interface ApiRequestOptions extends Omit<RequestInit, 'body' | 'signal'> {
     /** AbortSignal for manual cancellation */
     signal?: AbortSignal;
 }
+/**
+ * The CHAPI envelope shape, for endpoints that wrap their payload in `data`.
+ *
+ * NOTE: this is NOT the return type of `apiRequest`/`api.*`. Those resolve to
+ * the parsed response body itself — pass the envelope as the type argument
+ * (`api.get<{ data: User }>(...)`) and unwrap with `extractData` when the
+ * endpoint actually wraps. Many CHAPI endpoints return their payload bare.
+ */
 interface ApiResponse<T = unknown> {
     data?: T;
     meta?: {
@@ -72,16 +80,16 @@ declare function extractData<T>(response: {
 /**
  * Make an API request.
  */
-declare function apiRequest<T = unknown>(endpoint: string, options?: ApiRequestOptions): Promise<ApiResponse<T>>;
+declare function apiRequest<T = unknown>(endpoint: string, options?: ApiRequestOptions): Promise<T>;
 /**
  * Convenience methods for common HTTP methods.
  */
 declare const api: {
-    get: <T = unknown>(endpoint: string, authenticated?: boolean, customFetch?: typeof fetch) => Promise<ApiResponse<T>>;
-    post: <T = unknown>(endpoint: string, body: unknown, authenticated?: boolean, customFetch?: typeof fetch) => Promise<ApiResponse<T>>;
-    put: <T = unknown>(endpoint: string, body: unknown, authenticated?: boolean, customFetch?: typeof fetch) => Promise<ApiResponse<T>>;
-    patch: <T = unknown>(endpoint: string, body: unknown, authenticated?: boolean, customFetch?: typeof fetch) => Promise<ApiResponse<T>>;
-    delete: <T = unknown>(endpoint: string, authenticated?: boolean, customFetch?: typeof fetch, body?: unknown) => Promise<ApiResponse<T>>;
+    get: <T = unknown>(endpoint: string, authenticated?: boolean, customFetch?: typeof fetch) => Promise<T>;
+    post: <T = unknown>(endpoint: string, body: unknown, authenticated?: boolean, customFetch?: typeof fetch) => Promise<T>;
+    put: <T = unknown>(endpoint: string, body: unknown, authenticated?: boolean, customFetch?: typeof fetch) => Promise<T>;
+    patch: <T = unknown>(endpoint: string, body: unknown, authenticated?: boolean, customFetch?: typeof fetch) => Promise<T>;
+    delete: <T = unknown>(endpoint: string, authenticated?: boolean, customFetch?: typeof fetch, body?: unknown) => Promise<T>;
 };
 
 /**

package/dist/core/index.js

@@ -1,3 +1,3 @@
-export { AuthService, RoleDeniedError, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse, isRoleDeniedError } from '../chunk-O6GYC4PA.js';
-export { api, apiRequest, authApi, clearStoredAuth, extractData, getAccessToken, getRefreshToken, getSessionToken, updateStoredTokens } from '../chunk-NCVJ2HGP.js';
+export { AuthService, RoleDeniedError, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse, isRoleDeniedError } from '../chunk-QTX7L4QY.js';
+export { api, apiRequest, authApi, clearStoredAuth, extractData, getAccessToken, getRefreshToken, getSessionToken, updateStoredTokens } from '../chunk-HVOZBQIF.js';
 export { ROLE_HIERARCHY, ROLE_NAMES, computePrimaryRole, createMemoryStorage, createSessionStorage, decodeJWT, extractClaims, getConfig, getDefaultStorage, getEffectiveLevel, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, getUserRoles, hasAllRoles, hasAnyRole, hasRole, initAuth, isInitialized, isTokenExpired, resetConfig } from '../chunk-X7KH4DDN.js';

package/dist/index.js

@@ -1,5 +1,5 @@
-export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from './chunk-GVNUEBEP.js';
-export { AuthService, RoleDeniedError, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse, isRoleDeniedError } from './chunk-O6GYC4PA.js';
-export { authActions, authStore, currentUser, isAuthenticated } from './chunk-ZJYMNGGH.js';
-export { api, apiRequest, authApi, clearStoredAuth, extractData, getAccessToken, getRefreshToken, getSessionToken, updateStoredTokens } from './chunk-NCVJ2HGP.js';
+export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from './chunk-UGD4PNYI.js';
+export { AuthService, RoleDeniedError, authService, formatUserRoles, getAvailableMethods, getAvatarFallback, getDisplayName, getGreeting, getMfaToken, getUserEmail, getUserInitials, isLoginSuccessResponse, isMfaChallengeResponse, isRoleDeniedError } from './chunk-QTX7L4QY.js';
+export { authActions, authStore, currentUser, isAuthenticated } from './chunk-EBTCVIUQ.js';
+export { api, apiRequest, authApi, clearStoredAuth, extractData, getAccessToken, getRefreshToken, getSessionToken, updateStoredTokens } from './chunk-HVOZBQIF.js';
 export { ROLE_HIERARCHY, ROLE_NAMES, computePrimaryRole, createMemoryStorage, createSessionStorage, decodeJWT, extractClaims, getConfig, getDefaultStorage, getEffectiveLevel, getFetch, getStorage, getTokenExpiration, getTokenRemainingTime, getUserRoles, hasAllRoles, hasAnyRole, hasRole, initAuth, isInitialized, isTokenExpired, resetConfig } from './chunk-X7KH4DDN.js';

package/dist/svelte/index.js

@@ -1,5 +1,5 @@
-export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from '../chunk-GVNUEBEP.js';
-export { RoleDeniedError, formatUserRoles, getAvatarFallback, getDisplayName, getGreeting, getUserEmail, getUserInitials, isRoleDeniedError } from '../chunk-O6GYC4PA.js';
-export { authActions, authStore, currentUser, isAuthenticated } from '../chunk-ZJYMNGGH.js';
-import '../chunk-NCVJ2HGP.js';
+export { canAccess, checkAuth, createAuthClient, createAuthGuard, createAuthHook, createNavFilter, filterByAccess, filterNavSections, matchesRoute, protectedLoad, requireAuth, requirePermission, requireRole, routePatterns } from '../chunk-UGD4PNYI.js';
+export { RoleDeniedError, formatUserRoles, getAvatarFallback, getDisplayName, getGreeting, getUserEmail, getUserInitials, isRoleDeniedError } from '../chunk-QTX7L4QY.js';
+export { authActions, authStore, currentUser, isAuthenticated } from '../chunk-EBTCVIUQ.js';
+import '../chunk-HVOZBQIF.js';
 export { initAuth, isInitialized } from '../chunk-X7KH4DDN.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classic-homes/auth",
-  "version": "1.5.2",
+  "version": "1.8.0",
   "description": "Authentication services and Svelte bindings for Classic Theme apps",
   "type": "module",
   "main": "dist/index.js",