@ipetsadmin/api-client 1.0.0 → 1.1.1

package/CHANGELOG.md

@@ -19,6 +19,34 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Security
 
+## [1.1.1] - 2026-04-25
+
+### Added
+
+- **`HttpPatch`** and **`HttpClient.patch`** for JSON bodies (Axios-compatible), used by email verification.
+- **`patchVerifyEmail`** — `PATCH /api/v1/auth/verify-email` (`VerifyEmailRequest` from `@ipetsadmin/contracts`). Exposed as **`api.auth.verifyEmail`** and as a named export.
+- **`fetchHealthCheck`** (`src/endpoints/health-check.ts`) — `GET /api/v1/health-check` returning **`IApiResponse<HealthCheck>`**.
+- **`createApiClient`** exposes **`healthCheck()`** delegating to **`fetchHealthCheck`**.
+
+### Changed
+
+- **`HttpClient`** now requires **`patch`** in addition to **`get`** and **`post`** (breaking for custom HTTP adapters that only implemented **`get`** / **`post`**).
+- **Dev dependency** on **`@ipetsadmin/contracts`** raised to **1.1.7** for typings (`VerifyEmailRequest`, etc.). **Peer dependency** remains **`>= 1.1.1`**; use a contracts version that includes **`VerifyEmailRequest`** if you call **`patchVerifyEmail`**.
+
+## [1.1.0] - 2026-04-04
+
+### Added
+
+- **`HttpClient.post`** and **`HttpPost`** type for JSON bodies (Axios-compatible).
+- **Auth endpoints** (`src/endpoints/auth.ts`): `postRegister`, `postLogin`, `getGoogleOAuthStart`, `postGoogleOAuthCallback`, `postRefresh`, `postLogout`, `getMe`.
+- **`createApiClient`** exposes **`auth`** namespace delegating to the auth endpoints.
+- **Peer dependency** on `@ipetsadmin/contracts` **≥ 1.1.1** (align with service ports and Auth0 helper types on the API).
+- README updated with endpoint table and OAuth flow notes.
+
+### Changed
+
+- **`createApiClient`** now requires an `http` implementation that provides both **`get`** and **`post`** (breaking for consumers that only implemented `get`).
+
 ## [1.0.0] - 2026-04-02
 
 ### Added

package/README.md

@@ -1,11 +1,11 @@
 # `@ipetsadmin/api-client`
 
-Typed HTTP client for the Truffa API. This package is meant to be consumed by front-end and mobile apps. It does **not** own API URL configuration: you pass in a preconfigured HTTP implementation (typically an [Axios](https://axios-http.com/) instance with `baseURL` already set). Request and response **shapes** come from [`@ipetsadmin/contracts`](https://www.npmjs.com/package/@ipetsadmin/contracts) (or domain-specific types you align with that package).
+Typed HTTP client for the Truffa API. Consumed by web and mobile apps. **No baked-in base URL:** pass a preconfigured HTTP layer (typically an [Axios](https://axios-http.com/) instance with `baseURL` set). Request and response shapes come from [`@ipetsadmin/contracts`](https://www.npmjs.com/package/@ipetsadmin/contracts).
 
 ## Requirements
 
 - **Node.js** ≥ 18.18
-- **Peer dependency:** `@ipetsadmin/contracts` (install it next to this package in your app)
+- **Peer dependency:** `@ipetsadmin/contracts` **≥ 1.1.1** (auth types, `VerifyEmailRequest`, and `IApiResponse` envelopes). Use a contracts version that includes any DTO you call (e.g. `VerifyEmailRequest` for **`verifyEmail`**).
 
 ## Installation
 
@@ -15,338 +15,98 @@ pnpm add @ipetsadmin/api-client @ipetsadmin/contracts
 npm install @ipetsadmin/api-client @ipetsadmin/contracts
 ```
 
-## Current implementation
+## What ships today
 
-### What ships today
+| Export                                 | Description                                                                                                                                              |
+| -------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `createApiClient(options)`             | Factory returning **`healthCheck`** and **`auth`** namespace                                                                                             |
+| `ApiClient` / `CreateApiClientOptions` | Typed client and `{ http: HttpClient }` options                                                                                                          |
+| `HttpClient`                           | **`get`**, **`post`**, and **`patch`** (minimal surface compatible with Axios)                                                                           |
+| `HttpGet` / `HttpPost` / `HttpPatch`   | Method signatures                                                                                                                                        |
+| Named helpers                          | Same calls as `client.*` — see [`src/endpoints/auth.ts`](./src/endpoints/auth.ts) and [`src/endpoints/health-check.ts`](./src/endpoints/health-check.ts) |
 
-| Export                     | Description                                                             |
-| -------------------------- | ----------------------------------------------------------------------- |
-| `createApiClient(options)` | Factory that returns an object of API methods.                          |
-| `ApiClient`                | Type of the object returned by `createApiClient`.                       |
-| `CreateApiClientOptions`   | `{ http: HttpClient }`.                                                 |
-| `HttpClient`               | Minimal interface your HTTP layer must satisfy (today: **`get` only**). |
-| `HttpGet`                  | Type of the `get` method.                                               |
+### Parity with `@ipetsadmin/api-main`
 
-### Endpoints implemented
+The API currently mounts **one public JSON surface** used by this client (see `api-main` `server.ts` / `routes/auth.routes.ts`):
 
-| Method | Path                   | Client method          |
-| ------ | ---------------------- | ---------------------- |
-| `GET`  | `/api/v1/health-check` | `client.healthCheck()` |
+| Area       | Server routes this client implements |
+| ---------- | ------------------------------------ |
+| **Health** | `GET /api/v1/health-check`           |
+| **Auth**   | All routes under `/api/v1/auth/…`    |
 
-The health check returns `Promise<IApiResponse<unknown>>` using the shared envelope from `@ipetsadmin/contracts`. When the canonical health payload exists in contracts, replace `unknown` with that type in `src/endpoints/health-check.ts`.
+`api-main` also serves **OpenAPI** (`/api-docs`, `/api-docs.json`) when enabled; that is not wrapped here.
+
+### Endpoints
+
+| HTTP    | Path                                              | `createApiClient`                              | Named helper                             |
+| ------- | ------------------------------------------------- | ---------------------------------------------- | ---------------------------------------- |
+| `GET`   | `/api/v1/health-check`                            | `client.healthCheck()`                         | `fetchHealthCheck(http)`                 |
+| `POST`  | `/api/v1/auth/register`                           | `client.auth.register(body)`                   | `postRegister(http, body)`               |
+| `POST`  | `/api/v1/auth/login`                              | `client.auth.login(body)`                      | `postLogin(http, body)`                  |
+| `GET`   | `/api/v1/auth/oauth/google/start?redirectUri=...` | `client.auth.getGoogleOAuthStart(redirectUri)` | `getGoogleOAuthStart(http, redirectUri)` |
+| `POST`  | `/api/v1/auth/oauth/google/callback`              | `client.auth.postGoogleOAuthCallback(body)`    | `postGoogleOAuthCallback(http, body)`    |
+| `POST`  | `/api/v1/auth/refresh`                            | `client.auth.refresh(body)`                    | `postRefresh(http, body)`                |
+| `POST`  | `/api/v1/auth/logout`                             | `client.auth.logout(body)`                     | `postLogout(http, body)`                 |
+| `PATCH` | `/api/v1/auth/verify-email`                       | `client.auth.verifyEmail(body)`                | `patchVerifyEmail(http, body)`           |
+| `GET`   | `/api/v1/auth/me`                                 | `client.auth.me(accessToken)`                  | `getMe(http, accessToken)`               |
+
+Responses use **`IApiResponse<T>`** from contracts (`success`, `data`, etc.). Auth session payloads are **`AuthSessionResponse`** (`TokenPair` + `user`). **`logout`** returns **204** with no JSON body. **`verifyEmail`** success envelope matches the server (typically `data` may be empty).
 
 ### Usage example (Axios)
 
-Configure Axios once in your app (base URL, timeouts, auth interceptors). Paths in this library are **relative to `baseURL`** (e.g. `/api/v1/...`).
+Paths are **relative to `baseURL`** (e.g. `https://api.example.com`).
 
 ```typescript
 import axios from 'axios';
 import { createApiClient } from '@ipetsadmin/api-client';
 
 const http = axios.create({
-  baseURL: process.env.API_BASE_URL, // e.g. https://api.example.com
-  timeout: 15_000,
+  baseURL: process.env.API_BASE_URL,
+  timeout: 30_000,
   headers: { 'Content-Type': 'application/json' },
 });
 
 const api = createApiClient({ http });
 
 const health = await api.healthCheck();
-// health is IApiResponse<unknown>
-```
-
-Axios’s `get` signature matches what this library expects: it returns a `Promise` that resolves to an object with a `data` property.
-
-### Why a factory?
-
-`createApiClient({ http })` keeps this package free of environment-specific configuration, supports multiple backends or tenants in one app, and makes tests trivial by injecting a mock `http` object.
-
----
-
-## Architecture overview
-
-1. **`HttpClient`** — Abstraction over “how” HTTP is performed (Axios, `fetch` wrapper, etc.).
-2. **`src/endpoints/*.ts`** — One module per route (or per resource): pure async functions that take `http` and return typed data.
-3. **`createApiClient`** — Wires `http` into those functions and exposes a stable, discoverable API.
-4. **`@ipetsadmin/contracts`** — Source of truth for DTOs shared with the server (e.g. `IApiResponse<T>`).
-
-When the API adds a route, add an endpoint module, extend `HttpClient` if you need new verbs, and add a method on the object returned by `createApiClient`.
-
----
-
-## Extending `HttpClient` for all HTTP verbs
-
-Right now `HttpClient` only declares `get`. For **POST**, **PATCH**, **PUT**, and **DELETE**, extend the interface so adapters (Axios) stay type-safe and consistent.
-
-Axios maps HTTP concepts roughly as follows:
-
-| Concern      | Axios request config field                                     |
-| ------------ | -------------------------------------------------------------- |
-| URL path     | First argument `url` (often built from path + **path params**) |
-| Query string | `params`                                                       |
-| JSON body    | `data`                                                         |
-| Headers      | `headers`                                                      |
-
-Recommended shape (mirror Axios so an `AxiosInstance` is assignable with minimal wrapping):
-
-```typescript
-// src/http-client.ts — extend when you add non-GET endpoints
-
-/** Optional config aligned with Axios (params, data, headers, etc.). */
-export type HttpRequestConfig = {
-  params?: Record<string, unknown>;
-  data?: unknown;
-  headers?: Record<string, string>;
-};
-
-export type HttpGet = <TResponse>(
-  url: string,
-  config?: HttpRequestConfig,
-) => Promise<{ data: TResponse }>;
-
-export type HttpPost = <TResponse>(
-  url: string,
-  config?: HttpRequestConfig,
-) => Promise<{ data: TResponse }>;
-
-export type HttpPut = HttpPost;
-export type HttpPatch = HttpPost;
-
-export type HttpDelete = <TResponse>(
-  url: string,
-  config?: HttpRequestConfig,
-) => Promise<{ data: TResponse }>;
-
-export interface HttpClient {
-  readonly get: HttpGet;
-  readonly post: HttpPost;
-  readonly put: HttpPut;
-  readonly patch: HttpPatch;
-  readonly delete: HttpDelete;
-}
-```
-
-**Adapter example (Axios):** if TypeScript complains about `config` width, use a typed wrapper:
-
-```typescript
-import type { AxiosInstance } from 'axios';
-import type { HttpClient, HttpRequestConfig } from '@ipetsadmin/api-client';
-
-export function createAxiosHttpClient(instance: AxiosInstance): HttpClient {
-  return {
-    get: (url, config) => instance.get(url, config),
-    post: (url, config) => instance.post(url, config?.data, config),
-    put: (url, config) => instance.put(url, config?.data, config),
-    patch: (url, config) => instance.patch(url, config?.data, config),
-    delete: (url, config) => instance.delete(url, config),
-  };
-}
-```
-
-Note: Axios’s `post`/`put`/`patch` take `data` as the second argument and `config` as the third; the wrapper above keeps your **endpoint** code calling `http.post(url, { data, params, headers })` in one place. Adjust the wrapper to match how you prefer to thread `config`.
-
----
-
-## Implementing endpoints: patterns by verb
-
-Conventions used below:
-
-- **Path** — string constant; combine with **path parameters** via a small helper or template.
-- **Query** — `config.params` (Axios serializes to the query string).
-- **Body** — `config.data` for JSON bodies.
-- **Headers** — `config.headers` for per-request headers (auth, idempotency keys, etc.).
-- **Types** — import request/response types from `@ipetsadmin/contracts` when they exist.
-
-Assume:
-
-```typescript
-import type { IApiResponse } from '@ipetsadmin/contracts';
-import type { HttpClient } from '../http-client';
-```
-
-### Path parameters
-
-Build the URL in the endpoint (keep templates next to the constant for clarity):
-
-```typescript
-const USER_BY_ID_PATH = '/api/v1/users/:userId' as const;
-
-function buildUserPath(userId: string): string {
-  return USER_BY_ID_PATH.replace(':userId', encodeURIComponent(userId));
-}
-
-// GET /api/v1/users/42
-await http.get<IApiResponse<UserDto>>(buildUserPath('42'));
-```
-
-For many segments, a tiny helper avoids mistakes:
-
-```typescript
-function buildPath(template: string, params: Record<string, string | number>): string {
-  let path = template;
-  for (const [key, value] of Object.entries(params)) {
-    path = path.replace(`:${key}`, encodeURIComponent(String(value)));
-  }
-  return path;
-}
-
-// '/api/v1/orgs/:orgId/projects/:projectId'
-buildPath('/api/v1/orgs/:orgId/projects/:projectId', {
-  orgId: 'acme',
-  projectId: 'proj-1',
-});
-```
-
-### GET — query and headers
-
-```typescript
-const SEARCH_PATH = '/api/v1/items' as const;
-
-export interface ListItemsParams {
-  readonly query?: Record<string, string | number | boolean | undefined>;
-  readonly headers?: Record<string, string>;
-}
-
-export async function fetchItems(
-  http: HttpClient,
-  args: ListItemsParams = {},
-): Promise<IApiResponse<ItemSummary[]>> {
-  const { data } = await http.get<IApiResponse<ItemSummary[]>>(SEARCH_PATH, {
-    params: args.query,
-    headers: args.headers,
-  });
-  return data;
-}
-```
-
-### POST — body, query, headers
-
-```typescript
-const CREATE_ITEM_PATH = '/api/v1/items' as const;
-
-export interface CreateItemInput {
-  readonly body: CreateItemRequestDto;
-  readonly query?: Record<string, string | number | boolean | undefined>;
-  readonly headers?: Record<string, string>;
-}
-
-export async function createItem(
-  http: HttpClient,
-  input: CreateItemInput,
-): Promise<IApiResponse<ItemDto>> {
-  const { data } = await http.post<IApiResponse<ItemDto>>(CREATE_ITEM_PATH, {
-    data: input.body,
-    params: input.query,
-    headers: input.headers,
-  });
-  return data;
-}
-```
-
-### PATCH — partial body, path id
-
-```typescript
-const ITEM_PATH = '/api/v1/items/:itemId' as const;
-
-export interface UpdateItemInput {
-  readonly itemId: string;
-  readonly body: Partial<UpdateItemRequestDto>;
-  readonly headers?: Record<string, string>;
-}
-
-export async function updateItem(
-  http: HttpClient,
-  input: UpdateItemInput,
-): Promise<IApiResponse<ItemDto>> {
-  const path = buildPath(ITEM_PATH, { itemId: input.itemId });
-  const { data } = await http.patch<IApiResponse<ItemDto>>(path, {
-    data: input.body,
-    headers: input.headers,
-  });
-  return data;
-}
+const session = await api.auth.login({ email: 'user@example.com', password: '********' });
+// session — IApiResponse<AuthSessionResponse>; with Axios, the HTTP body is axiosResponse.data
 ```
 
-### PUT — full replacement body
+For **`IApiResponse<AuthSessionResponse>`**, the **envelope** is the JSON body; the **`AuthSessionResponse`** is usually **`response.data.data`** (outer `data` = Axios, inner `data` = API payload), depending on typings.
 
-Same pattern as PATCH; use when the API semantics are “replace resource”:
-
-```typescript
-export async function replaceItem(
-  http: HttpClient,
-  input: { itemId: string; body: ReplaceItemRequestDto; headers?: Record<string, string> },
-): Promise<IApiResponse<ItemDto>> {
-  const path = buildPath('/api/v1/items/:itemId', { itemId: input.itemId });
-  const { data } = await http.put<IApiResponse<ItemDto>>(path, {
-    data: input.body,
-    headers: input.headers,
-  });
-  return data;
-}
-```
+### OAuth (mobile / web)
 
-### DELETE — path params; optional body for APIs that require one
+1. Call **`getGoogleOAuthStart`** with the same **`redirectUri`** you registered in Auth0 and in the API’s `OAUTH_ALLOWED_REDIRECT_URIS`.
+2. Open **`authorizationUrl`** in a browser / `ASWebAuthenticationSession`.
+3. After redirect, send **`code`**, **`state`**, and **`redirectUri`** with **`postGoogleOAuthCallback`**.
 
-Many DELETE endpoints have **no body**; omit `data`:
+### Email verification
 
-```typescript
-export async function deleteItem(
-  http: HttpClient,
-  itemId: string,
-  headers?: Record<string, string>,
-): Promise<IApiResponse<void>> {
-  const path = buildPath('/api/v1/items/:itemId', { itemId });
-  const { data } = await http.delete<IApiResponse<void>>(path, { headers });
-  return data;
-}
-```
+Call **`api.auth.verifyEmail({ token })`** (or **`patchVerifyEmail`**) with the one-time token from the verification link your backend emails. Shapes: **`VerifyEmailRequest`** from `@ipetsadmin/contracts`.
 
-If your API uses a JSON body on DELETE (uncommon but possible):
+### Why a factory?
 
-```typescript
-await http.delete<IApiResponse<void>>(path, {
-  data: { reason: 'user_request' },
-  headers: { 'Content-Type': 'application/json' },
-});
-```
+`createApiClient({ http })` keeps env and transport out of this package, supports multiple backends in one app, and makes tests easy with a mock `http` object.
 
 ---
 
-## Wiring new endpoints into `createApiClient`
+## Architecture
 
-1. Add `src/endpoints/your-endpoint.ts` with a `fetch*` / `create*` / `update*` function that takes `http` first (and an `input` object for non-trivial inputs).
-2. Extend `HttpClient` if the verb is not available yet.
-3. Add a method on `ApiClient` and delegate to the endpoint function.
+1. **`HttpClient`** — abstraction over **`get` / `post` / `patch`** (`{ data: T }` response shape, Axios-compatible).
+2. **`src/endpoints/*.ts`** — thin functions: `(http, …args) => Promise<…>`.
+3. **`createApiClient`** — wires `http` into those endpoints.
+4. **`@ipetsadmin/contracts`** — DTOs (`RegisterRequest`, `AuthSessionResponse`, `VerifyEmailRequest`, …).
 
-Example after adding `fetchItems` and `createItem`:
-
-```typescript
-// src/create-api-client.ts
-import { createItem } from './endpoints/create-item';
-import { fetchItems } from './endpoints/list-items';
-import { fetchHealthCheck } from './endpoints/health-check';
-import type { HttpClient } from './http-client';
-
-export function createApiClient(options: { http: HttpClient }) {
-  const { http } = options;
-
-  return {
-    healthCheck: () => fetchHealthCheck(http),
-    listItems: (params?: ListItemsParams) => fetchItems(http, params),
-    createItem: (input: CreateItemInput) => createItem(http, input),
-  };
-}
-```
+### Extending further
 
-Export new types (`ListItemsParams`, `CreateItemInput`, etc.) from `src/index.ts` if consumers need them.
+Add methods on **`HttpClient`** in `src/http-client.ts`, then new endpoint modules. For query params, headers, and `Authorization`, align with your adapter (Axios passes a `config` object to **`get`**, **`post`**, and **`patch`**; **`getMe`** already sets `Authorization: Bearer` for the access token argument).
 
 ---
 
 ## Testing
 
-Inject a fake `HttpClient` and assert the right URL, method, and payload were used.
-
-**With the current `HttpClient` (only `get`):**
+Inject a fake **`HttpClient`** with **`get`**, **`post`**, and **`patch`** mocks and assert URLs and payloads.
 
 ```typescript
 import type { HttpClient } from '@ipetsadmin/api-client';
@@ -354,34 +114,33 @@ import { createApiClient } from '@ipetsadmin/api-client';
 
 const http: HttpClient = {
   get: jest.fn().mockResolvedValue({ data: { success: true, data: {} } }),
+  post: jest.fn().mockResolvedValue({ data: { success: true, data: {} } }),
+  patch: jest.fn().mockResolvedValue({ data: { success: true } }),
 };
 
 const api = createApiClient({ http });
 await api.healthCheck();
-
 expect(http.get).toHaveBeenCalledWith('/api/v1/health-check', undefined);
 ```
 
-**After you extend `HttpClient` with `post` / `put` / `patch` / `delete`,** add matching mocks (e.g. `post: jest.fn()`) so the object satisfies the full interface.
-
 ---
 
 ## Development (this repository)
 
-| Script                    | Purpose                                                                   |
-| ------------------------- | ------------------------------------------------------------------------- |
-| `pnpm run build`          | Produce `dist/` (CJS, ESM, `.d.ts`) via [tsup](https://tsup.egoist.dev/). |
-| `pnpm run typecheck`      | `tsc --noEmit`                                                            |
-| `pnpm run lint`           | ESLint                                                                    |
-| `pnpm run validate`       | typecheck + lint + Prettier check                                         |
-| `pnpm run prepublishOnly` | runs validate and build before publish                                    |
+| Script                    | Purpose                              |
+| ------------------------- | ------------------------------------ |
+| `pnpm run build`          | `tsup` → `dist/` (CJS, ESM, `.d.ts`) |
+| `pnpm run typecheck`      | `tsc --noEmit`                       |
+| `pnpm run lint`           | ESLint                               |
+| `pnpm run validate`       | typecheck + lint + Prettier check    |
+| `pnpm run prepublishOnly` | validate + build before publish      |
 
 ---
 
-## Summary
+## Changelog
+
+See [CHANGELOG.md](./CHANGELOG.md).
 
-- **Today:** `createApiClient({ http })` + `healthCheck()` + `HttpClient` with **`get` only**.
-- **Next:** Extend `HttpClient` with `post` / `put` / `patch` / `delete` and optional `HttpRequestConfig`, then add endpoint modules that use **path helpers**, **`params`**, **`data`**, and **`headers`** as shown above.
-- **Types:** Prefer `@ipetsadmin/contracts` for DTOs and `IApiResponse<T>` for envelope responses.
+## License
 
-For changes to this package, see [CHANGELOG.md](./CHANGELOG.md).
+MIT — see [LICENSE](./LICENSE).

package/dist/index.d.mts

@@ -1,20 +1,47 @@
-import { IApiResponse } from '@ipetsadmin/contracts';
+import { RegisterRequest, IApiResponse, AuthSessionResponse, LoginRequest, OAuthGoogleStartResponse, OAuthGoogleCallbackRequest, RefreshRequest, LogoutRequest, VerifyEmailRequest, AuthUserResponse, HealthCheck } from '@ipetsadmin/contracts';
 
 type HttpGet = <TResponse>(url: string, config?: unknown) => Promise<{
     data: TResponse;
 }>;
+type HttpPost = <TResponse, TBody = unknown>(url: string, body?: TBody, config?: unknown) => Promise<{
+    data: TResponse;
+}>;
+type HttpPatch = <TResponse, TBody = unknown>(url: string, body?: TBody, config?: unknown) => Promise<{
+    data: TResponse;
+}>;
 interface HttpClient {
     readonly get: HttpGet;
+    readonly post: HttpPost;
+    readonly patch: HttpPatch;
 }
 
-declare function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<unknown>>;
+declare function postRegister(http: HttpClient, body: RegisterRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postLogin(http: HttpClient, body: LoginRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function getGoogleOAuthStart(http: HttpClient, redirectUri: string): Promise<IApiResponse<OAuthGoogleStartResponse>>;
+declare function postGoogleOAuthCallback(http: HttpClient, body: OAuthGoogleCallbackRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postRefresh(http: HttpClient, body: RefreshRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postLogout(http: HttpClient, body: LogoutRequest): Promise<void>;
+declare function getMe(http: HttpClient, accessToken: string): Promise<IApiResponse<AuthUserResponse>>;
+declare function patchVerifyEmail(http: HttpClient, body: VerifyEmailRequest): Promise<IApiResponse<void>>;
+
+declare function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<HealthCheck>>;
 
 interface CreateApiClientOptions {
     readonly http: HttpClient;
 }
 interface ApiClient {
     readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;
+    readonly auth: {
+        readonly register: (body: Parameters<typeof postRegister>[1]) => ReturnType<typeof postRegister>;
+        readonly login: (body: Parameters<typeof postLogin>[1]) => ReturnType<typeof postLogin>;
+        readonly getGoogleOAuthStart: (redirectUri: string) => ReturnType<typeof getGoogleOAuthStart>;
+        readonly postGoogleOAuthCallback: (body: Parameters<typeof postGoogleOAuthCallback>[1]) => ReturnType<typeof postGoogleOAuthCallback>;
+        readonly refresh: (body: Parameters<typeof postRefresh>[1]) => ReturnType<typeof postRefresh>;
+        readonly logout: (body: Parameters<typeof postLogout>[1]) => ReturnType<typeof postLogout>;
+        readonly verifyEmail: (body: Parameters<typeof patchVerifyEmail>[1]) => ReturnType<typeof patchVerifyEmail>;
+        readonly me: (accessToken: string) => ReturnType<typeof getMe>;
+    };
 }
 declare function createApiClient(options: CreateApiClientOptions): ApiClient;
 
-export { type ApiClient, type CreateApiClientOptions, type HttpClient, type HttpGet, createApiClient };
+export { type ApiClient, type CreateApiClientOptions, type HttpClient, type HttpGet, type HttpPatch, type HttpPost, createApiClient, getGoogleOAuthStart, getMe, patchVerifyEmail, postGoogleOAuthCallback, postLogin, postLogout, postRefresh, postRegister };

package/dist/index.d.ts

@@ -1,20 +1,47 @@
-import { IApiResponse } from '@ipetsadmin/contracts';
+import { RegisterRequest, IApiResponse, AuthSessionResponse, LoginRequest, OAuthGoogleStartResponse, OAuthGoogleCallbackRequest, RefreshRequest, LogoutRequest, VerifyEmailRequest, AuthUserResponse, HealthCheck } from '@ipetsadmin/contracts';
 
 type HttpGet = <TResponse>(url: string, config?: unknown) => Promise<{
     data: TResponse;
 }>;
+type HttpPost = <TResponse, TBody = unknown>(url: string, body?: TBody, config?: unknown) => Promise<{
+    data: TResponse;
+}>;
+type HttpPatch = <TResponse, TBody = unknown>(url: string, body?: TBody, config?: unknown) => Promise<{
+    data: TResponse;
+}>;
 interface HttpClient {
     readonly get: HttpGet;
+    readonly post: HttpPost;
+    readonly patch: HttpPatch;
 }
 
-declare function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<unknown>>;
+declare function postRegister(http: HttpClient, body: RegisterRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postLogin(http: HttpClient, body: LoginRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function getGoogleOAuthStart(http: HttpClient, redirectUri: string): Promise<IApiResponse<OAuthGoogleStartResponse>>;
+declare function postGoogleOAuthCallback(http: HttpClient, body: OAuthGoogleCallbackRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postRefresh(http: HttpClient, body: RefreshRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postLogout(http: HttpClient, body: LogoutRequest): Promise<void>;
+declare function getMe(http: HttpClient, accessToken: string): Promise<IApiResponse<AuthUserResponse>>;
+declare function patchVerifyEmail(http: HttpClient, body: VerifyEmailRequest): Promise<IApiResponse<void>>;
+
+declare function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<HealthCheck>>;
 
 interface CreateApiClientOptions {
     readonly http: HttpClient;
 }
 interface ApiClient {
     readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;
+    readonly auth: {
+        readonly register: (body: Parameters<typeof postRegister>[1]) => ReturnType<typeof postRegister>;
+        readonly login: (body: Parameters<typeof postLogin>[1]) => ReturnType<typeof postLogin>;
+        readonly getGoogleOAuthStart: (redirectUri: string) => ReturnType<typeof getGoogleOAuthStart>;
+        readonly postGoogleOAuthCallback: (body: Parameters<typeof postGoogleOAuthCallback>[1]) => ReturnType<typeof postGoogleOAuthCallback>;
+        readonly refresh: (body: Parameters<typeof postRefresh>[1]) => ReturnType<typeof postRefresh>;
+        readonly logout: (body: Parameters<typeof postLogout>[1]) => ReturnType<typeof postLogout>;
+        readonly verifyEmail: (body: Parameters<typeof patchVerifyEmail>[1]) => ReturnType<typeof patchVerifyEmail>;
+        readonly me: (accessToken: string) => ReturnType<typeof getMe>;
+    };
 }
 declare function createApiClient(options: CreateApiClientOptions): ApiClient;
 
-export { type ApiClient, type CreateApiClientOptions, type HttpClient, type HttpGet, createApiClient };
+export { type ApiClient, type CreateApiClientOptions, type HttpClient, type HttpGet, type HttpPatch, type HttpPost, createApiClient, getGoogleOAuthStart, getMe, patchVerifyEmail, postGoogleOAuthCallback, postLogin, postLogout, postRefresh, postRegister };

package/dist/index.js

@@ -1,20 +1,92 @@
 'use strict';
 
+// src/endpoints/auth.ts
+var AUTH_BASE = "/api/v1/auth";
+async function postRegister(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/register`,
+    body
+  );
+  return data;
+}
+async function postLogin(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/login`,
+    body
+  );
+  return data;
+}
+async function getGoogleOAuthStart(http, redirectUri) {
+  const q = new URLSearchParams({ redirectUri });
+  const { data } = await http.get(
+    `${AUTH_BASE}/oauth/google/start?${q.toString()}`
+  );
+  return data;
+}
+async function postGoogleOAuthCallback(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/oauth/google/callback`,
+    body
+  );
+  return data;
+}
+async function postRefresh(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/refresh`,
+    body
+  );
+  return data;
+}
+async function postLogout(http, body) {
+  await http.post(`${AUTH_BASE}/logout`, body);
+}
+async function getMe(http, accessToken) {
+  const { data } = await http.get(`${AUTH_BASE}/me`, {
+    headers: { Authorization: `Bearer ${accessToken}` }
+  });
+  return data;
+}
+async function patchVerifyEmail(http, body) {
+  const { data } = await http.patch(
+    `${AUTH_BASE}/verify-email`,
+    body
+  );
+  return data;
+}
+
 // src/endpoints/health-check.ts
 var HEALTH_CHECK_PATH = "/api/v1/health-check";
 async function fetchHealthCheck(http) {
-  const { data } = await http.get(HEALTH_CHECK_PATH);
-  return data;
+  const { data: body } = await http.get(HEALTH_CHECK_PATH);
+  return body;
 }
 
 // src/create-api-client.ts
 function createApiClient(options) {
   const { http } = options;
   return {
-    healthCheck: () => fetchHealthCheck(http)
+    healthCheck: () => fetchHealthCheck(http),
+    auth: {
+      register: (body) => postRegister(http, body),
+      login: (body) => postLogin(http, body),
+      getGoogleOAuthStart: (redirectUri) => getGoogleOAuthStart(http, redirectUri),
+      postGoogleOAuthCallback: (body) => postGoogleOAuthCallback(http, body),
+      refresh: (body) => postRefresh(http, body),
+      logout: (body) => postLogout(http, body),
+      verifyEmail: (body) => patchVerifyEmail(http, body),
+      me: (accessToken) => getMe(http, accessToken)
+    }
   };
 }
 
 exports.createApiClient = createApiClient;
+exports.getGoogleOAuthStart = getGoogleOAuthStart;
+exports.getMe = getMe;
+exports.patchVerifyEmail = patchVerifyEmail;
+exports.postGoogleOAuthCallback = postGoogleOAuthCallback;
+exports.postLogin = postLogin;
+exports.postLogout = postLogout;
+exports.postRefresh = postRefresh;
+exports.postRegister = postRegister;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/endpoints/health-check.ts","../src/create-api-client.ts"],"names":[],"mappings":";;;AAGA,IAAM,iBAAA,GAAoB,sBAAA;AAO1B,eAAsB,iBAAiB,IAAA,EAAkD;AACvF,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAA2B,iBAAiB,CAAA;AACxE,EAAA,OAAO,IAAA;AACT;;;ACKO,SAAS,gBAAgB,OAAA,EAA4C;AAC1E,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,MAAM,gBAAA,CAAiB,IAAI;AAAA,GAC1C;AACF","file":"index.js","sourcesContent":["import type { IApiResponse } from '@ipetsadmin/contracts';\nimport type { HttpClient } from '../http-client';\n\nconst HEALTH_CHECK_PATH = '/api/v1/health-check' as const;\n\n/**\n * GET /api/v1/health-check — server liveness.\n * Response shape is the standard API envelope; payload typing can be refined\n * in `@ipetsadmin/contracts` when the health payload is finalized.\n */\nexport async function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<unknown>> {\n  const { data } = await http.get<IApiResponse<unknown>>(HEALTH_CHECK_PATH);\n  return data;\n}\n","import { fetchHealthCheck } from './endpoints/health-check';\nimport type { HttpClient } from './http-client';\n\nexport interface CreateApiClientOptions {\n  /**\n   * Preconfigured HTTP client (e.g. Axios instance with `baseURL` set).\n   * Paths in this library are relative to that base (e.g. `/api/v1/...`).\n   */\n  readonly http: HttpClient;\n}\n\nexport interface ApiClient {\n  readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;\n}\n\n/**\n * Creates a typed API client backed by the provided HTTP implementation.\n */\nexport function createApiClient(options: CreateApiClientOptions): ApiClient {\n  const { http } = options;\n\n  return {\n    healthCheck: () => fetchHealthCheck(http),\n  };\n}\n"]}
+{"version":3,"sources":["../src/endpoints/auth.ts","../src/endpoints/health-check.ts","../src/create-api-client.ts"],"names":[],"mappings":";;;AAeA,IAAM,SAAA,GAAY,cAAA;AAKlB,eAAsB,YAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,SAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,SAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,MAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,mBAAA,CACpB,MACA,WAAA,EACiD;AACjD,EAAA,MAAM,CAAA,GAAI,IAAI,eAAA,CAAgB,EAAE,aAAa,CAAA;AAC7C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,GAAA;AAAA,IAC1B,CAAA,EAAG,SAAS,CAAA,oBAAA,EAAuB,CAAA,CAAE,UAAU,CAAA;AAAA,GACjD;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,uBAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,sBAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,WAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,QAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,UAAA,CAAW,MAAkB,IAAA,EAAoC;AACrF,EAAA,MAAM,IAAA,CAAK,IAAA,CAA+B,CAAA,EAAG,SAAS,WAAW,IAAI,CAAA;AACvE;AAKA,eAAsB,KAAA,CACpB,MACA,WAAA,EACyC;AACzC,EAAA,MAAM,EAAE,MAAK,GAAI,MAAM,KAAK,GAAA,CAAoC,CAAA,EAAG,SAAS,CAAA,GAAA,CAAA,EAAO;AAAA,IACjF,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,WAAW,CAAA,CAAA;AAAG,GACnD,CAAA;AACD,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,gBAAA,CACpB,MACA,IAAA,EAC6B;AAC7B,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,aAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;;;ACnHA,IAAM,iBAAA,GAAoB,sBAAA;AAY1B,eAAsB,iBAAiB,IAAA,EAAsD;AAC3F,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,KAAS,MAAM,IAAA,CAAK,IAA+B,iBAAiB,CAAA;AAElF,EAAA,OAAO,IAAA;AACT;;;ACyBO,SAAS,gBAAgB,OAAA,EAA4C;AAC1E,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,MAAM,gBAAA,CAAiB,IAAI,CAAA;AAAA,IACxC,IAAA,EAAM;AAAA,MACJ,QAAA,EAAU,CAAC,IAAA,KAAS,YAAA,CAAa,MAAM,IAAI,CAAA;AAAA,MAC3C,KAAA,EAAO,CAAC,IAAA,KAAS,SAAA,CAAU,MAAM,IAAI,CAAA;AAAA,MACrC,mBAAA,EAAqB,CAAC,WAAA,KAAgB,mBAAA,CAAoB,MAAM,WAAW,CAAA;AAAA,MAC3E,uBAAA,EAAyB,CAAC,IAAA,KAAS,uBAAA,CAAwB,MAAM,IAAI,CAAA;AAAA,MACrE,OAAA,EAAS,CAAC,IAAA,KAAS,WAAA,CAAY,MAAM,IAAI,CAAA;AAAA,MACzC,MAAA,EAAQ,CAAC,IAAA,KAAS,UAAA,CAAW,MAAM,IAAI,CAAA;AAAA,MACvC,WAAA,EAAa,CAAC,IAAA,KAAS,gBAAA,CAAiB,MAAM,IAAI,CAAA;AAAA,MAClD,EAAA,EAAI,CAAC,WAAA,KAAgB,KAAA,CAAM,MAAM,WAAW;AAAA;AAC9C,GACF;AACF","file":"index.js","sourcesContent":["import type {\n  AuthSessionResponse,\n  AuthUserResponse,\n  IApiResponse,\n  LoginRequest,\n  LogoutRequest,\n  OAuthGoogleCallbackRequest,\n  OAuthGoogleStartResponse,\n  RefreshRequest,\n  RegisterRequest,\n  VerifyEmailRequest,\n} from '@ipetsadmin/contracts';\n\nimport type { HttpClient } from '../http-client';\n\nconst AUTH_BASE = '/api/v1/auth' as const;\n\n/**\n * POST /api/v1/auth/register\n */\nexport async function postRegister(\n  http: HttpClient,\n  body: RegisterRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, RegisterRequest>(\n    `${AUTH_BASE}/register`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/login\n */\nexport async function postLogin(\n  http: HttpClient,\n  body: LoginRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, LoginRequest>(\n    `${AUTH_BASE}/login`,\n    body,\n  );\n  return data;\n}\n\n/**\n * GET /api/v1/auth/oauth/google/start?redirectUri=...\n */\nexport async function getGoogleOAuthStart(\n  http: HttpClient,\n  redirectUri: string,\n): Promise<IApiResponse<OAuthGoogleStartResponse>> {\n  const q = new URLSearchParams({ redirectUri });\n  const { data } = await http.get<IApiResponse<OAuthGoogleStartResponse>>(\n    `${AUTH_BASE}/oauth/google/start?${q.toString()}`,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/oauth/google/callback\n */\nexport async function postGoogleOAuthCallback(\n  http: HttpClient,\n  body: OAuthGoogleCallbackRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, OAuthGoogleCallbackRequest>(\n    `${AUTH_BASE}/oauth/google/callback`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/refresh\n */\nexport async function postRefresh(\n  http: HttpClient,\n  body: RefreshRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, RefreshRequest>(\n    `${AUTH_BASE}/refresh`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/logout — 204 No Content (no JSON body).\n */\nexport async function postLogout(http: HttpClient, body: LogoutRequest): Promise<void> {\n  await http.post<undefined, LogoutRequest>(`${AUTH_BASE}/logout`, body);\n}\n\n/**\n * GET /api/v1/auth/me — requires `Authorization: Bearer <accessToken>`.\n */\nexport async function getMe(\n  http: HttpClient,\n  accessToken: string,\n): Promise<IApiResponse<AuthUserResponse>> {\n  const { data } = await http.get<IApiResponse<AuthUserResponse>>(`${AUTH_BASE}/me`, {\n    headers: { Authorization: `Bearer ${accessToken}` },\n  });\n  return data;\n}\n\n/**\n * PATCH /api/v1/auth/verify-email\n */\nexport async function patchVerifyEmail(\n  http: HttpClient,\n  body: VerifyEmailRequest,\n): Promise<IApiResponse<void>> {\n  const { data } = await http.patch<IApiResponse<void>, VerifyEmailRequest>(\n    `${AUTH_BASE}/verify-email`,\n    body,\n  );\n  return data;\n}\n","import type { IApiResponse, HealthCheck } from '@ipetsadmin/contracts';\nimport type { HttpClient } from '../http-client';\n\n/** Same path as `/api/${v1}/health-check` on the server when `v1` is the string `'v1'`. */\nconst HEALTH_CHECK_PATH = '/api/v1/health-check' as const;\n\n/**\n * GET /api/v1/health-check — server liveness.\n *\n * Returns the full JSON the server sends (`IApiResponse<HealthCheck>`).\n *\n * **Why not `data.data` here?** Adapters like Axios wrap the HTTP body in a property also\n * called `data`. That outer `data` is the entire `res.json(...)` object. The inner\n * `IApiResponse.data` is the `HealthCheck` payload — use `.data` on the **returned** value,\n * e.g. `(await fetchHealthCheck(http)).data`.\n */\nexport async function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<HealthCheck>> {\n  const { data: body } = await http.get<IApiResponse<HealthCheck>>(HEALTH_CHECK_PATH);\n\n  return body;\n}\n","import {\n  getGoogleOAuthStart,\n  getMe,\n  patchVerifyEmail,\n  postGoogleOAuthCallback,\n  postLogin,\n  postLogout,\n  postRefresh,\n  postRegister,\n} from './endpoints/auth';\nimport { fetchHealthCheck } from './endpoints/health-check';\nimport type { HttpClient } from './http-client';\n\nexport interface CreateApiClientOptions {\n  /**\n   * Preconfigured HTTP client (e.g. Axios instance with `baseURL` set).\n   * Paths in this library are relative to that base (e.g. `/api/v1/...`).\n   * Both `get` and `post` are required for auth flows.\n   */\n  readonly http: HttpClient;\n}\n\nexport interface ApiClient {\n  readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;\n  readonly auth: {\n    readonly register: (\n      body: Parameters<typeof postRegister>[1],\n    ) => ReturnType<typeof postRegister>;\n    readonly login: (body: Parameters<typeof postLogin>[1]) => ReturnType<typeof postLogin>;\n    readonly getGoogleOAuthStart: (redirectUri: string) => ReturnType<typeof getGoogleOAuthStart>;\n    readonly postGoogleOAuthCallback: (\n      body: Parameters<typeof postGoogleOAuthCallback>[1],\n    ) => ReturnType<typeof postGoogleOAuthCallback>;\n    readonly refresh: (body: Parameters<typeof postRefresh>[1]) => ReturnType<typeof postRefresh>;\n    readonly logout: (body: Parameters<typeof postLogout>[1]) => ReturnType<typeof postLogout>;\n    readonly verifyEmail: (\n      body: Parameters<typeof patchVerifyEmail>[1],\n    ) => ReturnType<typeof patchVerifyEmail>;\n    readonly me: (accessToken: string) => ReturnType<typeof getMe>;\n  };\n}\n\n/**\n * Creates a typed API client backed by the provided HTTP implementation.\n */\nexport function createApiClient(options: CreateApiClientOptions): ApiClient {\n  const { http } = options;\n\n  return {\n    healthCheck: () => fetchHealthCheck(http),\n    auth: {\n      register: (body) => postRegister(http, body),\n      login: (body) => postLogin(http, body),\n      getGoogleOAuthStart: (redirectUri) => getGoogleOAuthStart(http, redirectUri),\n      postGoogleOAuthCallback: (body) => postGoogleOAuthCallback(http, body),\n      refresh: (body) => postRefresh(http, body),\n      logout: (body) => postLogout(http, body),\n      verifyEmail: (body) => patchVerifyEmail(http, body),\n      me: (accessToken) => getMe(http, accessToken),\n    },\n  };\n}\n"]}

package/dist/index.mjs

@@ -1,18 +1,82 @@
+// src/endpoints/auth.ts
+var AUTH_BASE = "/api/v1/auth";
+async function postRegister(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/register`,
+    body
+  );
+  return data;
+}
+async function postLogin(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/login`,
+    body
+  );
+  return data;
+}
+async function getGoogleOAuthStart(http, redirectUri) {
+  const q = new URLSearchParams({ redirectUri });
+  const { data } = await http.get(
+    `${AUTH_BASE}/oauth/google/start?${q.toString()}`
+  );
+  return data;
+}
+async function postGoogleOAuthCallback(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/oauth/google/callback`,
+    body
+  );
+  return data;
+}
+async function postRefresh(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/refresh`,
+    body
+  );
+  return data;
+}
+async function postLogout(http, body) {
+  await http.post(`${AUTH_BASE}/logout`, body);
+}
+async function getMe(http, accessToken) {
+  const { data } = await http.get(`${AUTH_BASE}/me`, {
+    headers: { Authorization: `Bearer ${accessToken}` }
+  });
+  return data;
+}
+async function patchVerifyEmail(http, body) {
+  const { data } = await http.patch(
+    `${AUTH_BASE}/verify-email`,
+    body
+  );
+  return data;
+}
+
 // src/endpoints/health-check.ts
 var HEALTH_CHECK_PATH = "/api/v1/health-check";
 async function fetchHealthCheck(http) {
-  const { data } = await http.get(HEALTH_CHECK_PATH);
-  return data;
+  const { data: body } = await http.get(HEALTH_CHECK_PATH);
+  return body;
 }
 
 // src/create-api-client.ts
 function createApiClient(options) {
   const { http } = options;
   return {
-    healthCheck: () => fetchHealthCheck(http)
+    healthCheck: () => fetchHealthCheck(http),
+    auth: {
+      register: (body) => postRegister(http, body),
+      login: (body) => postLogin(http, body),
+      getGoogleOAuthStart: (redirectUri) => getGoogleOAuthStart(http, redirectUri),
+      postGoogleOAuthCallback: (body) => postGoogleOAuthCallback(http, body),
+      refresh: (body) => postRefresh(http, body),
+      logout: (body) => postLogout(http, body),
+      verifyEmail: (body) => patchVerifyEmail(http, body),
+      me: (accessToken) => getMe(http, accessToken)
+    }
   };
 }
 
-export { createApiClient };
+export { createApiClient, getGoogleOAuthStart, getMe, patchVerifyEmail, postGoogleOAuthCallback, postLogin, postLogout, postRefresh, postRegister };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/endpoints/health-check.ts","../src/create-api-client.ts"],"names":[],"mappings":";AAGA,IAAM,iBAAA,GAAoB,sBAAA;AAO1B,eAAsB,iBAAiB,IAAA,EAAkD;AACvF,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAA2B,iBAAiB,CAAA;AACxE,EAAA,OAAO,IAAA;AACT;;;ACKO,SAAS,gBAAgB,OAAA,EAA4C;AAC1E,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,MAAM,gBAAA,CAAiB,IAAI;AAAA,GAC1C;AACF","file":"index.mjs","sourcesContent":["import type { IApiResponse } from '@ipetsadmin/contracts';\nimport type { HttpClient } from '../http-client';\n\nconst HEALTH_CHECK_PATH = '/api/v1/health-check' as const;\n\n/**\n * GET /api/v1/health-check — server liveness.\n * Response shape is the standard API envelope; payload typing can be refined\n * in `@ipetsadmin/contracts` when the health payload is finalized.\n */\nexport async function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<unknown>> {\n  const { data } = await http.get<IApiResponse<unknown>>(HEALTH_CHECK_PATH);\n  return data;\n}\n","import { fetchHealthCheck } from './endpoints/health-check';\nimport type { HttpClient } from './http-client';\n\nexport interface CreateApiClientOptions {\n  /**\n   * Preconfigured HTTP client (e.g. Axios instance with `baseURL` set).\n   * Paths in this library are relative to that base (e.g. `/api/v1/...`).\n   */\n  readonly http: HttpClient;\n}\n\nexport interface ApiClient {\n  readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;\n}\n\n/**\n * Creates a typed API client backed by the provided HTTP implementation.\n */\nexport function createApiClient(options: CreateApiClientOptions): ApiClient {\n  const { http } = options;\n\n  return {\n    healthCheck: () => fetchHealthCheck(http),\n  };\n}\n"]}
+{"version":3,"sources":["../src/endpoints/auth.ts","../src/endpoints/health-check.ts","../src/create-api-client.ts"],"names":[],"mappings":";AAeA,IAAM,SAAA,GAAY,cAAA;AAKlB,eAAsB,YAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,SAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,SAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,MAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,mBAAA,CACpB,MACA,WAAA,EACiD;AACjD,EAAA,MAAM,CAAA,GAAI,IAAI,eAAA,CAAgB,EAAE,aAAa,CAAA;AAC7C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,GAAA;AAAA,IAC1B,CAAA,EAAG,SAAS,CAAA,oBAAA,EAAuB,CAAA,CAAE,UAAU,CAAA;AAAA,GACjD;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,uBAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,sBAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,WAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,QAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,UAAA,CAAW,MAAkB,IAAA,EAAoC;AACrF,EAAA,MAAM,IAAA,CAAK,IAAA,CAA+B,CAAA,EAAG,SAAS,WAAW,IAAI,CAAA;AACvE;AAKA,eAAsB,KAAA,CACpB,MACA,WAAA,EACyC;AACzC,EAAA,MAAM,EAAE,MAAK,GAAI,MAAM,KAAK,GAAA,CAAoC,CAAA,EAAG,SAAS,CAAA,GAAA,CAAA,EAAO;AAAA,IACjF,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,WAAW,CAAA,CAAA;AAAG,GACnD,CAAA;AACD,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,gBAAA,CACpB,MACA,IAAA,EAC6B;AAC7B,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,KAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,aAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;;;ACnHA,IAAM,iBAAA,GAAoB,sBAAA;AAY1B,eAAsB,iBAAiB,IAAA,EAAsD;AAC3F,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,KAAS,MAAM,IAAA,CAAK,IAA+B,iBAAiB,CAAA;AAElF,EAAA,OAAO,IAAA;AACT;;;ACyBO,SAAS,gBAAgB,OAAA,EAA4C;AAC1E,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,MAAM,gBAAA,CAAiB,IAAI,CAAA;AAAA,IACxC,IAAA,EAAM;AAAA,MACJ,QAAA,EAAU,CAAC,IAAA,KAAS,YAAA,CAAa,MAAM,IAAI,CAAA;AAAA,MAC3C,KAAA,EAAO,CAAC,IAAA,KAAS,SAAA,CAAU,MAAM,IAAI,CAAA;AAAA,MACrC,mBAAA,EAAqB,CAAC,WAAA,KAAgB,mBAAA,CAAoB,MAAM,WAAW,CAAA;AAAA,MAC3E,uBAAA,EAAyB,CAAC,IAAA,KAAS,uBAAA,CAAwB,MAAM,IAAI,CAAA;AAAA,MACrE,OAAA,EAAS,CAAC,IAAA,KAAS,WAAA,CAAY,MAAM,IAAI,CAAA;AAAA,MACzC,MAAA,EAAQ,CAAC,IAAA,KAAS,UAAA,CAAW,MAAM,IAAI,CAAA;AAAA,MACvC,WAAA,EAAa,CAAC,IAAA,KAAS,gBAAA,CAAiB,MAAM,IAAI,CAAA;AAAA,MAClD,EAAA,EAAI,CAAC,WAAA,KAAgB,KAAA,CAAM,MAAM,WAAW;AAAA;AAC9C,GACF;AACF","file":"index.mjs","sourcesContent":["import type {\n  AuthSessionResponse,\n  AuthUserResponse,\n  IApiResponse,\n  LoginRequest,\n  LogoutRequest,\n  OAuthGoogleCallbackRequest,\n  OAuthGoogleStartResponse,\n  RefreshRequest,\n  RegisterRequest,\n  VerifyEmailRequest,\n} from '@ipetsadmin/contracts';\n\nimport type { HttpClient } from '../http-client';\n\nconst AUTH_BASE = '/api/v1/auth' as const;\n\n/**\n * POST /api/v1/auth/register\n */\nexport async function postRegister(\n  http: HttpClient,\n  body: RegisterRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, RegisterRequest>(\n    `${AUTH_BASE}/register`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/login\n */\nexport async function postLogin(\n  http: HttpClient,\n  body: LoginRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, LoginRequest>(\n    `${AUTH_BASE}/login`,\n    body,\n  );\n  return data;\n}\n\n/**\n * GET /api/v1/auth/oauth/google/start?redirectUri=...\n */\nexport async function getGoogleOAuthStart(\n  http: HttpClient,\n  redirectUri: string,\n): Promise<IApiResponse<OAuthGoogleStartResponse>> {\n  const q = new URLSearchParams({ redirectUri });\n  const { data } = await http.get<IApiResponse<OAuthGoogleStartResponse>>(\n    `${AUTH_BASE}/oauth/google/start?${q.toString()}`,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/oauth/google/callback\n */\nexport async function postGoogleOAuthCallback(\n  http: HttpClient,\n  body: OAuthGoogleCallbackRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, OAuthGoogleCallbackRequest>(\n    `${AUTH_BASE}/oauth/google/callback`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/refresh\n */\nexport async function postRefresh(\n  http: HttpClient,\n  body: RefreshRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, RefreshRequest>(\n    `${AUTH_BASE}/refresh`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/logout — 204 No Content (no JSON body).\n */\nexport async function postLogout(http: HttpClient, body: LogoutRequest): Promise<void> {\n  await http.post<undefined, LogoutRequest>(`${AUTH_BASE}/logout`, body);\n}\n\n/**\n * GET /api/v1/auth/me — requires `Authorization: Bearer <accessToken>`.\n */\nexport async function getMe(\n  http: HttpClient,\n  accessToken: string,\n): Promise<IApiResponse<AuthUserResponse>> {\n  const { data } = await http.get<IApiResponse<AuthUserResponse>>(`${AUTH_BASE}/me`, {\n    headers: { Authorization: `Bearer ${accessToken}` },\n  });\n  return data;\n}\n\n/**\n * PATCH /api/v1/auth/verify-email\n */\nexport async function patchVerifyEmail(\n  http: HttpClient,\n  body: VerifyEmailRequest,\n): Promise<IApiResponse<void>> {\n  const { data } = await http.patch<IApiResponse<void>, VerifyEmailRequest>(\n    `${AUTH_BASE}/verify-email`,\n    body,\n  );\n  return data;\n}\n","import type { IApiResponse, HealthCheck } from '@ipetsadmin/contracts';\nimport type { HttpClient } from '../http-client';\n\n/** Same path as `/api/${v1}/health-check` on the server when `v1` is the string `'v1'`. */\nconst HEALTH_CHECK_PATH = '/api/v1/health-check' as const;\n\n/**\n * GET /api/v1/health-check — server liveness.\n *\n * Returns the full JSON the server sends (`IApiResponse<HealthCheck>`).\n *\n * **Why not `data.data` here?** Adapters like Axios wrap the HTTP body in a property also\n * called `data`. That outer `data` is the entire `res.json(...)` object. The inner\n * `IApiResponse.data` is the `HealthCheck` payload — use `.data` on the **returned** value,\n * e.g. `(await fetchHealthCheck(http)).data`.\n */\nexport async function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<HealthCheck>> {\n  const { data: body } = await http.get<IApiResponse<HealthCheck>>(HEALTH_CHECK_PATH);\n\n  return body;\n}\n","import {\n  getGoogleOAuthStart,\n  getMe,\n  patchVerifyEmail,\n  postGoogleOAuthCallback,\n  postLogin,\n  postLogout,\n  postRefresh,\n  postRegister,\n} from './endpoints/auth';\nimport { fetchHealthCheck } from './endpoints/health-check';\nimport type { HttpClient } from './http-client';\n\nexport interface CreateApiClientOptions {\n  /**\n   * Preconfigured HTTP client (e.g. Axios instance with `baseURL` set).\n   * Paths in this library are relative to that base (e.g. `/api/v1/...`).\n   * Both `get` and `post` are required for auth flows.\n   */\n  readonly http: HttpClient;\n}\n\nexport interface ApiClient {\n  readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;\n  readonly auth: {\n    readonly register: (\n      body: Parameters<typeof postRegister>[1],\n    ) => ReturnType<typeof postRegister>;\n    readonly login: (body: Parameters<typeof postLogin>[1]) => ReturnType<typeof postLogin>;\n    readonly getGoogleOAuthStart: (redirectUri: string) => ReturnType<typeof getGoogleOAuthStart>;\n    readonly postGoogleOAuthCallback: (\n      body: Parameters<typeof postGoogleOAuthCallback>[1],\n    ) => ReturnType<typeof postGoogleOAuthCallback>;\n    readonly refresh: (body: Parameters<typeof postRefresh>[1]) => ReturnType<typeof postRefresh>;\n    readonly logout: (body: Parameters<typeof postLogout>[1]) => ReturnType<typeof postLogout>;\n    readonly verifyEmail: (\n      body: Parameters<typeof patchVerifyEmail>[1],\n    ) => ReturnType<typeof patchVerifyEmail>;\n    readonly me: (accessToken: string) => ReturnType<typeof getMe>;\n  };\n}\n\n/**\n * Creates a typed API client backed by the provided HTTP implementation.\n */\nexport function createApiClient(options: CreateApiClientOptions): ApiClient {\n  const { http } = options;\n\n  return {\n    healthCheck: () => fetchHealthCheck(http),\n    auth: {\n      register: (body) => postRegister(http, body),\n      login: (body) => postLogin(http, body),\n      getGoogleOAuthStart: (redirectUri) => getGoogleOAuthStart(http, redirectUri),\n      postGoogleOAuthCallback: (body) => postGoogleOAuthCallback(http, body),\n      refresh: (body) => postRefresh(http, body),\n      logout: (body) => postLogout(http, body),\n      verifyEmail: (body) => patchVerifyEmail(http, body),\n      me: (accessToken) => getMe(http, accessToken),\n    },\n  };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ipetsadmin/api-client",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "description": "Client used to interact with Truffa project API",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -38,7 +38,7 @@
   "author": "",
   "license": "MIT",
   "devDependencies": {
-    "@ipetsadmin/contracts": "^1.0.3",
+    "@ipetsadmin/contracts": "1.1.7",
     "@eslint/js": "^10.0.1",
     "@types/express": "^5.0.5",
     "@types/node": "^24.10.0",
@@ -52,7 +52,7 @@
     "typescript-eslint": "^8.58.0"
   },
   "peerDependencies": {
-    "@ipetsadmin/contracts": "^1.0.0"
+    "@ipetsadmin/contracts": ">=1.1.1"
   },
   "publishConfig": {
     "access": "public"