@instroc/auth 1.3.0 → 2.0.0-alpha.1

package/dist/forms.d.ts

@@ -1 +1 @@
-export { M as MessageOverrides, O as OnErrorResult, m as UseForgotPasswordFormOptions, n as UseForgotPasswordFormReturn, U as UseLoginFormOptions, h as UseLoginFormReturn, k as UseOtpFormOptions, l as UseOtpFormReturn, o as UseResetPasswordFormOptions, p as UseResetPasswordFormReturn, i as UseSignupFormOptions, j as UseSignupFormReturn, f as useForgotPasswordForm, u as useLoginForm, e as useOtpForm, g as useResetPasswordForm, d as useSignupForm } from './index-iglVgSQI.js';
+export { M as MessageOverrides, O as OnErrorResult, m as UseForgotPasswordFormOptions, n as UseForgotPasswordFormReturn, U as UseLoginFormOptions, h as UseLoginFormReturn, k as UseOtpFormOptions, l as UseOtpFormReturn, o as UseResetPasswordFormOptions, p as UseResetPasswordFormReturn, i as UseSignupFormOptions, j as UseSignupFormReturn, f as useForgotPasswordForm, u as useLoginForm, e as useOtpForm, g as useResetPasswordForm, d as useSignupForm } from './index-BsFMnPty.js';

package/dist/forms.js

@@ -4,7 +4,7 @@ import {
   useOtpForm,
   useResetPasswordForm,
   useSignupForm
-} from "./chunk-WPSPVFVM.js";
+} from "./chunk-L3F76GZD.js";
 export {
   useForgotPasswordForm,
   useLoginForm,

package/dist/{index-iglVgSQI.d.ts → index-BsFMnPty.d.ts}

@@ -369,4 +369,4 @@ interface UseResetPasswordFormReturn {
  */
 declare function useResetPasswordForm(options: UseResetPasswordFormOptions): UseResetPasswordFormReturn;
 
-export { type AuthProviderProps as A, type LoginCredentials as L, type MessageOverrides as M, type OnErrorResult as O, type RefreshResponse as R, type SignupCredentials as S, type UseLoginFormOptions as U, type VisibilityConfig as V, type AuthContextValue as a, type AuthUser as b, type AuthSession as c, useSignupForm as d, useOtpForm as e, useForgotPasswordForm as f, useResetPasswordForm as g, type UseLoginFormReturn as h, type UseSignupFormOptions as i, type UseSignupFormReturn as j, type UseOtpFormOptions as k, type UseOtpFormReturn as l, type UseForgotPasswordFormOptions as m, type UseForgotPasswordFormReturn as n, type UseResetPasswordFormOptions as o, type UseResetPasswordFormReturn as p, type AuthState as q, type AuthConfig as r, type OAuthProvider as s, type SignupResult as t, useLoginForm as u, type UpdateProfileData as v, type AuthResponse as w };
+export { type AuthContextValue as A, type LoginCredentials as L, type MessageOverrides as M, type OnErrorResult as O, type RefreshResponse as R, type SignupCredentials as S, type UseLoginFormOptions as U, type VisibilityConfig as V, type AuthUser as a, type AuthSession as b, type AuthProviderProps as c, useSignupForm as d, useOtpForm as e, useForgotPasswordForm as f, useResetPasswordForm as g, type UseLoginFormReturn as h, type UseSignupFormOptions as i, type UseSignupFormReturn as j, type UseOtpFormOptions as k, type UseOtpFormReturn as l, type UseForgotPasswordFormOptions as m, type UseForgotPasswordFormReturn as n, type UseResetPasswordFormOptions as o, type UseResetPasswordFormReturn as p, type AuthState as q, type AuthConfig as r, type OAuthProvider as s, type SignupResult as t, useLoginForm as u, type UpdateProfileData as v, type AuthResponse as w };

package/dist/index.d.ts

@@ -1,10 +1,21 @@
-import { A as AuthProviderProps, a as AuthContextValue, b as AuthUser, c as AuthSession } from './index-iglVgSQI.js';
-export { r as AuthConfig, w as AuthResponse, q as AuthState, L as LoginCredentials, M as MessageOverrides, s as OAuthProvider, O as OnErrorResult, R as RefreshResponse, S as SignupCredentials, t as SignupResult, v as UpdateProfileData, m as UseForgotPasswordFormOptions, n as UseForgotPasswordFormReturn, U as UseLoginFormOptions, h as UseLoginFormReturn, k as UseOtpFormOptions, l as UseOtpFormReturn, o as UseResetPasswordFormOptions, p as UseResetPasswordFormReturn, i as UseSignupFormOptions, j as UseSignupFormReturn, V as VisibilityConfig, f as useForgotPasswordForm, u as useLoginForm, e as useOtpForm, g as useResetPasswordForm, d as useSignupForm } from './index-iglVgSQI.js';
-
-declare function AuthProvider({ children, projectId: initialProjectId, baseUrl, persistSession, onAuthStateChange, }: AuthProviderProps): JSX.Element;
-declare function useAuthContext(): AuthContextValue;
+import { A as AuthContextValue, a as AuthUser, b as AuthSession, c as AuthProviderProps } from './index-BsFMnPty.js';
+export { r as AuthConfig, w as AuthResponse, q as AuthState, L as LoginCredentials, M as MessageOverrides, s as OAuthProvider, O as OnErrorResult, R as RefreshResponse, S as SignupCredentials, t as SignupResult, v as UpdateProfileData, m as UseForgotPasswordFormOptions, n as UseForgotPasswordFormReturn, U as UseLoginFormOptions, h as UseLoginFormReturn, k as UseOtpFormOptions, l as UseOtpFormReturn, o as UseResetPasswordFormOptions, p as UseResetPasswordFormReturn, i as UseSignupFormOptions, j as UseSignupFormReturn, V as VisibilityConfig, f as useForgotPasswordForm, u as useLoginForm, e as useOtpForm, g as useResetPasswordForm, d as useSignupForm } from './index-BsFMnPty.js';
+import * as react_jsx_runtime from 'react/jsx-runtime';
 
+/**
+ * Primary auth hook. Reads state from the singleton auth store, returns
+ * imperative actions bound to the current config. Safe to call from any
+ * component depth — no provider tree required.
+ *
+ * `useAuthContext` is preserved as a legacy alias so existing generated
+ * code (`const { user } = useAuthContext()`) keeps working.
+ */
 declare function useAuth(): AuthContextValue;
+/**
+ * Legacy alias — pre-v2 generated code uses `useAuthContext` and we keep
+ * it indefinitely so nothing breaks. New code should use `useAuth()`.
+ */
+declare const useAuthContext: typeof useAuth;
 declare function useUser(): {
     user: AuthUser | null;
     loading: boolean;
@@ -34,12 +45,6 @@ declare function useAuthRequired(): {
  * Returns `false` while loading or when unauthenticated.
  */
 declare function useIsOwner(): boolean;
-/**
- * Minimal JWT payload decoder — no signature check (the server already
- * verified it). Returns undefined if the token is malformed. We only read
- * the `is_owner` boolean claim, which the BaaS auth signer sets from
- * `_users.is_owner`.
- */
 /**
  * Returns true if the current visitor is a member of the Instroc workspace
  * that owns this published app. Used by premium templates to gate owner-only
@@ -57,10 +62,11 @@ declare function useIsOwner(): boolean;
  * cookie is what the privacy gate uses to allow workspace members into
  * private apps.
  *
- * Dev/preview note: when running on `localhost`, `*.fly.dev`, or
- * `*.workers.dev` (dev-session HMR, editor preview), the hook returns `true`
- * so template authors can see admin UI while building. In production
- * (`*.instroc.app` and custom domains) the server answer is authoritative.
+ * Dev/preview note: when running on `localhost`, `*.fly.dev`, `*.workers.dev`,
+ * or `preview.instroc.app` (dev-session HMR, editor preview iframe, published
+ * preview snapshots), the hook returns `true` so template authors can see
+ * admin UI while building. In production (`*.instroc.app` subdomains and
+ * custom domains) the server answer is authoritative.
  */
 declare function useIsWorkspaceMember(): boolean;
 
@@ -95,4 +101,24 @@ declare class AuthError extends Error {
     constructor(message: string, status: number, code?: string);
 }
 
+/**
+ * Legacy backward-compat shim for v1's `<AuthProvider>`.
+ *
+ * v2 of the SDK is store-based — auth state lives in a module-level
+ * singleton, hooks read from it directly, and there's no required
+ * provider in the tree. This component is kept so existing generated
+ * apps that mount `<AuthProvider projectId="...">` keep working
+ * unchanged. Internally it just calls `initInstroc` with the props and
+ * subscribes the `onAuthStateChange` listener.
+ *
+ * New code should call `initInstroc({ projectId })` once in main.tsx
+ * and skip the wrapper entirely.
+ *
+ * This shim is intentionally minimal — no React state, no useCallback
+ * gymnastics. The whole provider exists only so old generated main.tsx
+ * files don't crash with "AuthProvider is not a function" after the
+ * v2 upgrade.
+ */
+declare function AuthProvider({ children, projectId, baseUrl, persistSession, onAuthStateChange, }: AuthProviderProps): react_jsx_runtime.JSX.Element;
+
 export { AuthContextValue, AuthError, AuthProvider, AuthProviderProps, AuthSession, AuthUser, useAuth, useAuthContext, useAuthRequired, useIsOwner, useIsWorkspaceMember, useSession, useUser };

package/dist/index.js

@@ -1,6 +1,7 @@
 import {
   AuthError,
-  AuthProvider,
+  ensureAuthBootstrap,
+  subscribeAuthStateChange,
   useAuth,
   useAuthContext,
   useAuthRequired,
@@ -13,7 +14,40 @@ import {
   useSession,
   useSignupForm,
   useUser
-} from "./chunk-WPSPVFVM.js";
+} from "./chunk-L3F76GZD.js";
+
+// src/provider.tsx
+import { useEffect } from "react";
+import { initInstroc, setInstrocProjectId } from "@instroc/client";
+import { Fragment, jsx } from "react/jsx-runtime";
+function AuthProvider({
+  children,
+  projectId,
+  baseUrl,
+  persistSession,
+  onAuthStateChange
+}) {
+  if (projectId) {
+    initInstroc({
+      projectId,
+      ...baseUrl !== void 0 ? { baseUrl } : {},
+      ...persistSession !== void 0 ? { persistSession } : {}
+    });
+  }
+  ensureAuthBootstrap();
+  useEffect(() => {
+    if (projectId) {
+      setInstrocProjectId(projectId);
+    }
+  }, [projectId]);
+  useEffect(() => {
+    if (!onAuthStateChange)
+      return;
+    const unsub = subscribeAuthStateChange(onAuthStateChange);
+    return unsub;
+  }, [onAuthStateChange]);
+  return /* @__PURE__ */ jsx(Fragment, { children });
+}
 export {
   AuthError,
   AuthProvider,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@instroc/auth",
-  "version": "1.3.0",
-  "description": "Authentication hooks for Instroc Cloud — useAuth, useUser, AuthProvider, and headless form hooks",
+  "version": "2.0.0-alpha.1",
+  "description": "Authentication hooks for Instroc Cloud — store-based useAuth/useUser with backward-compatible AuthProvider shim",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -23,11 +23,12 @@
     "dev": "tsup --watch"
   },
   "peerDependencies": {
-    "react": "^18.0.0"
+    "react": "^18.0.0 || ^19.0.0"
+  },
+  "dependencies": {
+    "@instroc/client": "workspace:*"
   },
   "devDependencies": {
-    "react": "^18.2.0",
-    "@types/react": "^18.2.0",
     "tsup": "^8.0.0",
     "typescript": "^5.3.0"
   },