@keimelion/sdk 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Keimelion
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,198 @@
-# Temporary Holding Version
+# @keimelion/sdk
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Official TypeScript SDK for the [Keimelion](https://keimelion.com) API.
+
+It is the **single source of truth for the API contract**: request and response Zod schemas,
+enums, error codes and a typed `fetch`-based HTTP client. The API itself imports its contract
+schemas from this package, and every consumer (frontend, Chrome extension, back-office)
+installs it from npm.
+
+| Subpath                  | Content                                                                                                                                                                           |
+| ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `@keimelion/sdk/schemas` | Zod request / response schemas + their `XInput` / `XParsed` types, shared primitives (pagination, password, username, slug, url, currency, sort), error envelope, refine messages |
+| `@keimelion/sdk/enums`   | `ErrorCode`, `HttpStatus`, `HttpMethod`, `HttpHeader` and every domain enum (`UserRoles`, `ItemStatuses`, `SupportedCurrencies`…)                                                 |
+| `@keimelion/sdk/client`  | `createClient`, `ApiError`, `HttpClient`                                                                                                                                          |
+
+Admin endpoints will live under `client.admin.*` in the same client (no separate subpath).
+
+Runs in browsers, Node.js ≥ 20 and MV3 service workers: the sources never import Node-only
+modules, an ORM, an HTTP framework or a DB driver (enforced by ESLint in CI).
+
+## Install
+
+```bash
+npm install @keimelion/sdk zod
+```
+
+`zod` (`^4.5.0`) is a **peer dependency**: it is never bundled, your app provides it.
+The package is public on npmjs — no registry token, `.npmrc` or build secret is needed.
+
+## Usage
+
+```ts
+import { ApiError, createClient } from '@keimelion/sdk/client'
+import { ErrorCode } from '@keimelion/sdk/enums'
+
+const client = createClient({
+  baseUrl: 'https://api.keimelion.com',
+  getToken: async () => (await storage.get('accessToken')) ?? null,
+  // fetch: customFetch, // optional, defaults to globalThis.fetch
+  // timeoutMs: 10_000, // optional, defaults to 30 s; null disables it
+})
+
+try {
+  const { accessToken, refreshToken, user } = await client.auth.login({
+    email: 'jane@example.com',
+    password: 'secret',
+  })
+  user.createdAt // Date — ISO timestamps are decoded into Date objects
+
+  const rotated = await client.auth.refresh({ refreshToken })
+  await client.auth.logout({ refreshToken: rotated.refreshToken })
+} catch (error) {
+  if (error instanceof ApiError && error.code === ErrorCode.UNPROCESSABLE_ENTITY) {
+    console.log(error.status, error.message, error.issues) // [{ path, message, code }]
+  }
+  throw error
+}
+```
+
+- `getToken` may be sync or async; when it returns `null` no `Authorization` header is sent.
+- Requests are **not** validated client-side (the API is the authority). Responses are parsed
+  with the SDK schema: a body that does not match throws `ApiError` with
+  `code: 'INVALID_RESPONSE'` (`ClientErrorCode.INVALID_RESPONSE`), the Zod error as `cause`.
+- Any API error (`{ message, code, metadata }`) throws `ApiError` exposing `status`, `code`,
+  `message`, `metadata` and `issues` (`metadata.issues` of a 422, `[]` otherwise).
+- When no HTTP response is received, the client also throws `ApiError`, with `status: 0` and
+  the original error as `cause`: `NETWORK_ERROR` (offline, DNS, CORS), `TIMEOUT` (`timeoutMs`
+  elapsed) or `ABORTED` (the caller's `signal` fired). `ApiError` is the only error type a
+  consumer has to handle.
+- `message` is an English developer message, never meant for end users: UIs translate from
+  `code` (and `issues[].code` for a 422).
+- There is no automatic refresh / 401 interceptor in 0.x yet: call `client.auth.refresh()`
+  yourself when an access token expires.
+
+### Picking only the domains you need
+
+`createClient()` instantiates every domain. A consumer that only needs a few (e.g. the
+extension) composes the core HTTP client with the domain factories, so bundlers drop the rest:
+
+```ts
+import { createAuthClient, createHttpClient } from '@keimelion/sdk/client'
+
+const http = createHttpClient({ baseUrl, getToken })
+const auth = createAuthClient(http)
+```
+
+### Client layout (for SDK contributors)
+
+```
+src/client/
+  _core/          http-client.ts, api-error.ts — transport, shared by every domain
+  <domain>/       <domain>.client.ts (createXClient(http)) + <domain>.paths.ts
+  admin/<res>/    one folder per admin resource, composed into client.admin.<res>
+  create-client.ts
+```
+
+A domain method describes its request declaratively; `HttpClient.request` does the rest:
+
+```ts
+http.request({
+  method: HttpMethod.GET,
+  path: '/v1/lists/:id', // `:name` segments are filled from pathParams, URL-encoded
+  pathParams: { id },
+  query: { page: 2, 'title[ilike]': 'xmas', tag: ['a', 'b'] }, // nullish values are skipped
+  auth: RequestAuthMode.NONE, // public route; or { token: 'rsv_…' } to bypass getToken
+  signal, // AbortSignal, forwarded to fetch
+  responseSchema: listDetailResponseSchema, // noContentResponseSchema for a 204
+})
+```
+
+### Using the schemas
+
+```ts
+import { loginResponseSchema, type LoginRequestInput } from '@keimelion/sdk/schemas'
+
+const session = loginResponseSchema.parse(json) // session.user.createdAt is a Date
+```
+
+## Contract conventions
+
+- `@keimelion/sdk/schemas` re-exports every domain **flat**, so every exported name must be
+  unique across the whole package (a collision fails `tsc` with TS2308). Name schemas
+  `<domain><Action><Kind>Schema`, where `<Kind>` is `Request`, `Response`, `Query` or
+  `Params`: `listsCreateRequestSchema`, `adminUsersListQuerySchema`,
+  `reservationsCancelResponseSchema`. Auth actions are unique on their own, so auth keeps
+  `loginRequestSchema`, `refreshResponseSchema`… Entity shapes reused across endpoints are
+  `<entity>DetailSchema` / `<entity>SummarySchema` (`userDetailSchema`).
+- A schema used by more than one domain lives in `src/schemas/_shared/` (e.g.
+  `imageDetailSchema`, `emailSchema`), never in one domain imported by another.
+- Every schema exports **two types** next to it: `XInput = z.input<typeof xSchema>` (what a
+  caller sends / what is on the wire) and `XParsed = z.output<typeof xSchema>` (what the API
+  handler receives / what the client returns). CI fails if one is missing.
+- Response schemas are plain `z.object` (unknown keys are **stripped**, not rejected), so
+  additive API fields are non-breaking for older clients. Adding an **enum value** is not:
+  it requires an SDK release before the API starts sending it.
+- Timestamps (`*_at` columns) use a codec: ISO string on the wire ↔ `Date` once parsed.
+- Calendar dates without a time (`*_date` columns, e.g. a future `event_date`) stay
+  `YYYY-MM-DD` strings (`z.iso.date()`): turning them into a `Date` shifts the day depending
+  on the viewer's timezone.
+- Postgres `numeric` columns (prices, FX rates) are **strings** on the wire, never numbers.
+- Response schemas never declare internal columns (password / token hashes, internal
+  tokens).
+- Enums are defined here and the API derives its `pgEnum`s from them: **changing an enum
+  requires a paired DB migration in Keimelion-API**.
+
+## SDK first, then the API
+
+Any change to an API request or response shape is made **in this repo first**:
+
+1. SDK PR (schemas + client method + tests) → merged into `dev` → released to npm.
+2. API PR bumps `@keimelion/sdk` to the released version and adapts the endpoint.
+
+The API types its mappers on the SDK output types and asserts each happy-path response with
+`schema.parse(...)` in its tests, so a drift fails `tsc` or the test suite.
+
+## Local development with yalc
+
+To develop the SDK and a consumer side by side without publishing:
+
+```bash
+# in Keimelion-SDK
+npm run build && npx yalc publish     # once
+npm run dev                           # tsup --watch, `yalc push` after each build
+
+# in the consumer (Keimelion-API, frontend…)
+npx yalc link @keimelion/sdk          # symlink, package.json and lockfile untouched
+npm ci                                # back to the registry version when done
+```
+
+Always use `yalc link`, **never `yalc add`**: `add` rewrites `package.json` to
+`file:.yalc/...` and breaks `npm ci` in CI. Consumers gitignore `.yalc/` and `yalc.lock`, and
+a husky `pre-commit` hook rejects a `file:.yalc` dependency or a staged `yalc.lock`.
+
+## Scripts
+
+| Script                    | Role                                                                                                        |
+| ------------------------- | ----------------------------------------------------------------------------------------------------------- |
+| `npm run build`           | `tsup` (ESM-only + `.d.ts`), then zod-not-bundled check, `publint --strict`, `attw`                         |
+| `npm run lint`            | ESLint (strict + stylistic type-checked, Node/server import guard) + schema type-export check               |
+| `npm run typecheck`       | `tsc --noEmit` (strict, no `@types/node`)                                                                   |
+| `npm test`                | Vitest                                                                                                      |
+| `npm run test:pack [dir]` | `npm pack`, install the tarball + zod in a scratch project, import every subpath from ESM and type-check it |
+
+## Release
+
+Same pipeline as every Keimelion repo (reusable workflows of
+[Keimelion-Infra](https://github.com/Keimelion/Keimelion-Infra), see its
+`docs/release-process.md`): feature PRs are squash-merged into `dev` with a Conventional
+Commit title; a `dev → main` release PR (merge commit) triggers CI → semantic-release
+(tag, GitHub Release, `CHANGELOG.md`) → **npm-publish** (only when a version was tagged):
+build, `publint`, `attw`, `npm publish --provenance --access public`.
+
+The package is in **0.x**: a breaking change bumps the minor version (`0.1.0 → 0.2.0`), so
+consumers should depend on `^0.x.0`.
+
+## License
+
+[MIT](./LICENSE)

package/dist/chunk-2LLUUBMQ.js

@@ -0,0 +1,26 @@
+// src/enums/currency.ts
+var SupportedCurrencies = {
+  EUR: "EUR",
+  USD: "USD",
+  GBP: "GBP",
+  CHF: "CHF",
+  CAD: "CAD",
+  AUD: "AUD",
+  JPY: "JPY"
+};
+var SUPPORTED_CURRENCY_VALUES = Object.values(SupportedCurrencies);
+
+// src/enums/auth-provider.ts
+var AUTH_PROVIDER_VALUES = ["email", "google"];
+
+// src/enums/user-role.ts
+var UserRoles = {
+  USER: "user",
+  MODERATOR: "moderator",
+  ADMIN: "admin"
+};
+var USER_ROLE_VALUES = Object.values(UserRoles);
+
+export { AUTH_PROVIDER_VALUES, SUPPORTED_CURRENCY_VALUES, SupportedCurrencies, USER_ROLE_VALUES, UserRoles };
+//# sourceMappingURL=chunk-2LLUUBMQ.js.map
+//# sourceMappingURL=chunk-2LLUUBMQ.js.map

package/dist/chunk-2LLUUBMQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/enums/currency.ts","../src/enums/auth-provider.ts","../src/enums/user-role.ts"],"names":[],"mappings":";AAMW,IAAM,mBAAA,GAAsB;AAAA,EACrC,GAAA,EAAK,KAAA;AAAA,EACL,GAAA,EAAK,KAAA;AAAA,EACL,GAAA,EAAK,KAAA;AAAA,EACL,GAAA,EAAK,KAAA;AAAA,EACL,GAAA,EAAK,KAAA;AAAA,EACL,GAAA,EAAK,KAAA;AAAA,EACL,GAAA,EAAK;AACP;AAIO,IAAM,yBAAA,GAA4B,MAAA,CAAO,MAAA,CAAO,mBAAmB;;;AClBnE,IAAM,oBAAA,GAAuB,CAAC,OAAA,EAAS,QAAQ;;;ACA/C,IAAM,SAAA,GAAY;AAAA,EACvB,IAAA,EAAM,MAAA;AAAA,EACN,SAAA,EAAW,WAAA;AAAA,EACX,KAAA,EAAO;AACT;AAIO,IAAM,gBAAA,GAAmB,MAAA,CAAO,MAAA,CAAO,SAAS","file":"chunk-2LLUUBMQ.js","sourcesContent":["/**\n * ISO 4217 currencies supported by the API for item source prices and\n * read-time FX normalization.\n *\n * The API seeds its `currencies` table from this set: adding or removing a code\n * requires a paired DB migration in Keimelion-API.\n */ export const SupportedCurrencies = {\n  EUR: 'EUR',\n  USD: 'USD',\n  GBP: 'GBP',\n  CHF: 'CHF',\n  CAD: 'CAD',\n  AUD: 'AUD',\n  JPY: 'JPY',\n} as const\n\nexport type SupportedCurrency = (typeof SupportedCurrencies)[keyof typeof SupportedCurrencies]\n\nexport const SUPPORTED_CURRENCY_VALUES = Object.values(SupportedCurrencies) as [\n  SupportedCurrency,\n  ...SupportedCurrency[],\n]\n","export const AUTH_PROVIDER_VALUES = ['email', 'google'] as const\nexport type AuthProvider = (typeof AUTH_PROVIDER_VALUES)[number]\n","export const UserRoles = {\n  USER: 'user',\n  MODERATOR: 'moderator',\n  ADMIN: 'admin',\n} as const\n\nexport type UserRole = (typeof UserRoles)[keyof typeof UserRoles]\n\nexport const USER_ROLE_VALUES = Object.values(UserRoles) as [UserRole, ...UserRole[]]\n"]}

package/dist/chunk-E3CTTWFQ.js

@@ -0,0 +1,33 @@
+// src/enums/http.ts
+var HttpMethod = {
+  GET: "GET",
+  POST: "POST",
+  PUT: "PUT",
+  PATCH: "PATCH",
+  DELETE: "DELETE",
+  OPTIONS: "OPTIONS"
+};
+var HttpHeader = {
+  ACCEPT: "Accept",
+  CONTENT_TYPE: "Content-Type",
+  AUTHORIZATION: "Authorization"
+};
+var HttpStatus = {
+  OK: 200,
+  CREATED: 201,
+  NO_CONTENT: 204,
+  BAD_REQUEST: 400,
+  UNAUTHORIZED: 401,
+  FORBIDDEN: 403,
+  NOT_FOUND: 404,
+  CONFLICT: 409,
+  GONE: 410,
+  PAYLOAD_TOO_LARGE: 413,
+  UNPROCESSABLE_ENTITY: 422,
+  TOO_MANY_REQUESTS: 429,
+  INTERNAL_SERVER_ERROR: 500
+};
+
+export { HttpHeader, HttpMethod, HttpStatus };
+//# sourceMappingURL=chunk-E3CTTWFQ.js.map
+//# sourceMappingURL=chunk-E3CTTWFQ.js.map

package/dist/chunk-E3CTTWFQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/enums/http.ts"],"names":[],"mappings":";AAAO,IAAM,UAAA,GAAa;AAAA,EACxB,GAAA,EAAK,KAAA;AAAA,EACL,IAAA,EAAM,MAAA;AAAA,EACN,GAAA,EAAK,KAAA;AAAA,EACL,KAAA,EAAO,OAAA;AAAA,EACP,MAAA,EAAQ,QAAA;AAAA,EACR,OAAA,EAAS;AACX;AAGO,IAAM,UAAA,GAAa;AAAA,EACxB,MAAA,EAAQ,QAAA;AAAA,EACR,YAAA,EAAc,cAAA;AAAA,EACd,aAAA,EAAe;AACjB;AAGO,IAAM,UAAA,GAAa;AAAA,EACxB,EAAA,EAAI,GAAA;AAAA,EACJ,OAAA,EAAS,GAAA;AAAA,EACT,UAAA,EAAY,GAAA;AAAA,EACZ,WAAA,EAAa,GAAA;AAAA,EACb,YAAA,EAAc,GAAA;AAAA,EACd,SAAA,EAAW,GAAA;AAAA,EACX,SAAA,EAAW,GAAA;AAAA,EACX,QAAA,EAAU,GAAA;AAAA,EACV,IAAA,EAAM,GAAA;AAAA,EACN,iBAAA,EAAmB,GAAA;AAAA,EACnB,oBAAA,EAAsB,GAAA;AAAA,EACtB,iBAAA,EAAmB,GAAA;AAAA,EACnB,qBAAA,EAAuB;AACzB","file":"chunk-E3CTTWFQ.js","sourcesContent":["export const HttpMethod = {\n  GET: 'GET',\n  POST: 'POST',\n  PUT: 'PUT',\n  PATCH: 'PATCH',\n  DELETE: 'DELETE',\n  OPTIONS: 'OPTIONS',\n} as const\nexport type HttpMethod = (typeof HttpMethod)[keyof typeof HttpMethod]\n\nexport const HttpHeader = {\n  ACCEPT: 'Accept',\n  CONTENT_TYPE: 'Content-Type',\n  AUTHORIZATION: 'Authorization',\n} as const\nexport type HttpHeader = (typeof HttpHeader)[keyof typeof HttpHeader]\n\nexport const HttpStatus = {\n  OK: 200,\n  CREATED: 201,\n  NO_CONTENT: 204,\n  BAD_REQUEST: 400,\n  UNAUTHORIZED: 401,\n  FORBIDDEN: 403,\n  NOT_FOUND: 404,\n  CONFLICT: 409,\n  GONE: 410,\n  PAYLOAD_TOO_LARGE: 413,\n  UNPROCESSABLE_ENTITY: 422,\n  TOO_MANY_REQUESTS: 429,\n  INTERNAL_SERVER_ERROR: 500,\n} as const\nexport type HttpStatus = (typeof HttpStatus)[keyof typeof HttpStatus]\n"]}

package/dist/chunk-VT6MXJE5.js

@@ -0,0 +1,126 @@
+import { SupportedCurrencies, SUPPORTED_CURRENCY_VALUES, USER_ROLE_VALUES, AUTH_PROVIDER_VALUES } from './chunk-2LLUUBMQ.js';
+import { z } from 'zod';
+
+var DEFAULT_DISPLAY_CURRENCY = SupportedCurrencies.USD;
+var supportedCurrencyEnum = z.enum(SupportedCurrencies, {
+  error: () => `currency must be one of: ${SUPPORTED_CURRENCY_VALUES.join(", ")}`
+});
+var displayCurrencyQuerySchema = z.object({
+  currency: supportedCurrencyEnum.optional()
+});
+var emailSchema = z.string().trim().toLowerCase().pipe(z.email());
+var VALIDATION_ROOT_PATH = "<root>";
+var validationIssueSchema = z.object({
+  path: z.string(),
+  message: z.string(),
+  code: z.string()
+});
+var validationErrorMetadataSchema = z.object({
+  issues: z.array(validationIssueSchema)
+});
+var apiErrorBodySchema = z.object({
+  message: z.string(),
+  code: z.string(),
+  metadata: z.record(z.string(), z.unknown())
+});
+var isoDateTimeSchema = z.codec(z.iso.datetime({ offset: true }), z.date(), {
+  decode: (isoString) => new Date(isoString),
+  encode: (date) => date.toISOString()
+});
+var imageUrlsSchema = z.object({
+  sm: z.url(),
+  md: z.url(),
+  lg: z.url()
+});
+var imageDetailSchema = z.object({
+  id: z.guid(),
+  hash: z.string(),
+  mime: z.string(),
+  sizeBytes: z.number().int().nonnegative(),
+  width: z.number().int().nonnegative(),
+  height: z.number().int().nonnegative(),
+  createdAt: isoDateTimeSchema,
+  urls: imageUrlsSchema
+});
+var messageResponseSchema = z.object({
+  message: z.string()
+});
+var MIN_PASSWORD_LENGTH = 8;
+var MAX_PASSWORD_LENGTH = 72;
+var passwordSchema = z.string().min(MIN_PASSWORD_LENGTH).max(MAX_PASSWORD_LENGTH);
+var USERNAME_MIN_LENGTH = 1;
+var USERNAME_MAX_LENGTH = 100;
+var USERNAME_REGEX = new RegExp(
+  `^[\\p{L}\\p{N}_-]{${String(USERNAME_MIN_LENGTH)},${String(USERNAME_MAX_LENGTH)}}$`,
+  "u"
+);
+var usernameSchema = z.string().trim().regex(
+  USERNAME_REGEX,
+  `username must be ${String(USERNAME_MIN_LENGTH)}-${String(USERNAME_MAX_LENGTH)} letters, digits, underscores, or dashes`
+);
+var userDetailSchema = z.object({
+  id: z.guid(),
+  email: z.string(),
+  username: z.string().nullable(),
+  authProvider: z.enum(AUTH_PROVIDER_VALUES),
+  role: z.enum(USER_ROLE_VALUES),
+  avatarImageId: z.guid().nullable(),
+  avatar: imageDetailSchema.nullable(),
+  isCgvAccepted: z.boolean(),
+  cgvAcceptedAt: isoDateTimeSchema.nullable(),
+  isMarketingOptedIn: z.boolean(),
+  defaultCurrency: supportedCurrencyEnum,
+  emailVerifiedAt: isoDateTimeSchema.nullable(),
+  lastActiveAt: isoDateTimeSchema.nullable(),
+  createdAt: isoDateTimeSchema,
+  updatedAt: isoDateTimeSchema
+});
+var forgotPasswordRequestSchema = z.object({
+  email: emailSchema
+});
+var forgotPasswordResponseSchema = messageResponseSchema;
+var loginRequestSchema = z.object({
+  email: emailSchema,
+  password: z.string().min(1)
+});
+var loginResponseSchema = z.object({
+  accessToken: z.string(),
+  refreshToken: z.string(),
+  user: userDetailSchema
+});
+var logoutRequestSchema = z.object({
+  refreshToken: z.string().min(1).optional()
+});
+var logoutResponseSchema = messageResponseSchema;
+var refreshRequestSchema = z.object({
+  refreshToken: z.string().min(1)
+});
+var refreshResponseSchema = z.object({
+  accessToken: z.string(),
+  refreshToken: z.string()
+});
+var optionalUsernameSchema = usernameSchema.nullable().optional().transform((value) => value ?? null);
+var registerRequestSchema = z.object({
+  email: emailSchema,
+  password: passwordSchema,
+  username: optionalUsernameSchema,
+  isMarketingOptedIn: z.boolean().default(false),
+  defaultCurrency: supportedCurrencyEnum.optional()
+});
+var registerResponseSchema = z.object({
+  user: userDetailSchema,
+  refreshToken: z.string()
+});
+var resetPasswordRequestSchema = z.object({
+  passwordResetToken: z.string().min(1),
+  password: passwordSchema
+});
+var resetPasswordResponseSchema = messageResponseSchema;
+var verifyEmailRequestSchema = z.object({
+  token: z.guid()
+});
+var verifyEmailResponseSchema = messageResponseSchema;
+
+export { DEFAULT_DISPLAY_CURRENCY, MAX_PASSWORD_LENGTH, MIN_PASSWORD_LENGTH, USERNAME_MAX_LENGTH, USERNAME_MIN_LENGTH, USERNAME_REGEX, VALIDATION_ROOT_PATH, apiErrorBodySchema, displayCurrencyQuerySchema, emailSchema, forgotPasswordRequestSchema, forgotPasswordResponseSchema, imageDetailSchema, imageUrlsSchema, isoDateTimeSchema, loginRequestSchema, loginResponseSchema, logoutRequestSchema, logoutResponseSchema, messageResponseSchema, passwordSchema, refreshRequestSchema, refreshResponseSchema, registerRequestSchema, registerResponseSchema, resetPasswordRequestSchema, resetPasswordResponseSchema, supportedCurrencyEnum, userDetailSchema, usernameSchema, validationErrorMetadataSchema, validationIssueSchema, verifyEmailRequestSchema, verifyEmailResponseSchema };
+//# sourceMappingURL=chunk-VT6MXJE5.js.map
+//# sourceMappingURL=chunk-VT6MXJE5.js.map

package/dist/chunk-VT6MXJE5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/schemas/_shared/currency.ts","../src/schemas/_shared/email.ts","../src/schemas/_shared/error.ts","../src/schemas/_shared/timestamp.ts","../src/schemas/_shared/image-detail.ts","../src/schemas/_shared/message-response.ts","../src/schemas/_shared/password.ts","../src/schemas/_shared/username.ts","../src/schemas/users/user-detail.ts","../src/schemas/auth/forgot-password.ts","../src/schemas/auth/login.ts","../src/schemas/auth/logout.ts","../src/schemas/auth/refresh.ts","../src/schemas/auth/register.ts","../src/schemas/auth/reset-password.ts","../src/schemas/auth/verify-email.ts"],"names":["z"],"mappings":";;;AAOO,IAAM,2BAA8C,mBAAA,CAAoB;AAExE,IAAM,qBAAA,GAAwB,CAAA,CAAE,IAAA,CAAK,mBAAA,EAAqB;AAAA,EAC/D,OAAO,MAAM,CAAA,yBAAA,EAA4B,yBAAA,CAA0B,IAAA,CAAK,IAAI,CAAC,CAAA;AAC/E,CAAC;AAKM,IAAM,0BAAA,GAA6B,EAAE,MAAA,CAAO;AAAA,EACjD,QAAA,EAAU,sBAAsB,QAAA;AAClC,CAAC;ACfM,IAAM,WAAA,GAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,IAAA,CAAKA,CAAAA,CAAE,KAAA,EAAO;ACDlE,IAAM,oBAAA,GAAuB;AAE7B,IAAM,qBAAA,GAAwBA,EAAE,MAAA,CAAO;AAAA,EAC5C,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,EACf,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,EAClB,IAAA,EAAMA,EAAE,MAAA;AACV,CAAC;AAKM,IAAM,6BAAA,GAAgCA,EAAE,MAAA,CAAO;AAAA,EACpD,MAAA,EAAQA,CAAAA,CAAE,KAAA,CAAM,qBAAqB;AACvC,CAAC;AAKM,IAAM,kBAAA,GAAqBA,EAAE,MAAA,CAAO;AAAA,EACzC,OAAA,EAASA,EAAE,MAAA,EAAO;AAAA,EAClB,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,EACf,QAAA,EAAUA,EAAE,MAAA,CAAOA,CAAAA,CAAE,QAAO,EAAGA,CAAAA,CAAE,SAAS;AAC5C,CAAC;ACtBM,IAAM,iBAAA,GAAoBA,CAAAA,CAAE,KAAA,CAAMA,CAAAA,CAAE,GAAA,CAAI,QAAA,CAAS,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA,EAAGA,CAAAA,CAAE,MAAK,EAAG;AAAA,EACnF,MAAA,EAAQ,CAAC,SAAA,KAAc,IAAI,KAAK,SAAS,CAAA;AAAA,EACzC,MAAA,EAAQ,CAAC,IAAA,KAAS,IAAA,CAAK,WAAA;AACzB,CAAC;ACFM,IAAM,eAAA,GAAkBA,EAAE,MAAA,CAAO;AAAA,EACtC,EAAA,EAAIA,EAAE,GAAA,EAAI;AAAA,EACV,EAAA,EAAIA,EAAE,GAAA,EAAI;AAAA,EACV,EAAA,EAAIA,EAAE,GAAA;AACR,CAAC;AAKM,IAAM,iBAAA,GAAoBA,EAAE,MAAA,CAAO;AAAA,EACxC,EAAA,EAAIA,EAAE,IAAA,EAAK;AAAA,EACX,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,EACf,IAAA,EAAMA,EAAE,MAAA,EAAO;AAAA,EACf,WAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,WAAA,EAAY;AAAA,EACxC,OAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,WAAA,EAAY;AAAA,EACpC,QAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,WAAA,EAAY;AAAA,EACrC,SAAA,EAAW,iBAAA;AAAA,EACX,IAAA,EAAM;AACR,CAAC;ACnBM,IAAM,qBAAA,GAAwBA,EAAE,MAAA,CAAO;AAAA,EAC5C,OAAA,EAASA,EAAE,MAAA;AACb,CAAC;ACFM,IAAM,mBAAA,GAAsB;AAC5B,IAAM,mBAAA,GAAsB;AAE5B,IAAM,cAAA,GAAiBA,EAAE,MAAA,EAAO,CAAE,IAAI,mBAAmB,CAAA,CAAE,IAAI,mBAAmB;ACHlF,IAAM,mBAAA,GAAsB;AAC5B,IAAM,mBAAA,GAAsB;AAC5B,IAAM,iBAAiB,IAAI,MAAA;AAAA,EAChC,qBAAqB,MAAA,CAAO,mBAAmB,CAAC,CAAA,CAAA,EAAI,MAAA,CAAO,mBAAmB,CAAC,CAAA,EAAA,CAAA;AAAA,EAC/E;AACF;AAEO,IAAM,cAAA,GAAiBA,CAAAA,CAC3B,MAAA,EAAO,CACP,MAAK,CACL,KAAA;AAAA,EACC,cAAA;AAAA,EACA,oBAAoB,MAAA,CAAO,mBAAmB,CAAC,CAAA,CAAA,EAAI,MAAA,CAAO,mBAAmB,CAAC,CAAA,wCAAA;AAChF;ACRK,IAAM,gBAAA,GAAmBA,EAAE,MAAA,CAAO;AAAA,EACvC,EAAA,EAAIA,EAAE,IAAA,EAAK;AAAA,EACX,KAAA,EAAOA,EAAE,MAAA,EAAO;AAAA,EAChB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC9B,YAAA,EAAcA,CAAAA,CAAE,IAAA,CAAK,oBAAoB,CAAA;AAAA,EACzC,IAAA,EAAMA,CAAAA,CAAE,IAAA,CAAK,gBAAgB,CAAA;AAAA,EAC7B,aAAA,EAAeA,CAAAA,CAAE,IAAA,EAAK,CAAE,QAAA,EAAS;AAAA,EACjC,MAAA,EAAQ,kBAAkB,QAAA,EAAS;AAAA,EACnC,aAAA,EAAeA,EAAE,OAAA,EAAQ;AAAA,EACzB,aAAA,EAAe,kBAAkB,QAAA,EAAS;AAAA,EAC1C,kBAAA,EAAoBA,EAAE,OAAA,EAAQ;AAAA,EAC9B,eAAA,EAAiB,qBAAA;AAAA,EACjB,eAAA,EAAiB,kBAAkB,QAAA,EAAS;AAAA,EAC5C,YAAA,EAAc,kBAAkB,QAAA,EAAS;AAAA,EACzC,SAAA,EAAW,iBAAA;AAAA,EACX,SAAA,EAAW;AACb,CAAC;ACnBM,IAAM,2BAAA,GAA8BA,EAAE,MAAA,CAAO;AAAA,EAClD,KAAA,EAAO;AACT,CAAC;AAKM,IAAM,4BAAA,GAA+B;ACPrC,IAAM,kBAAA,GAAqBA,EAAE,MAAA,CAAO;AAAA,EACzC,KAAA,EAAO,WAAA;AAAA,EACP,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAC5B,CAAC;AAKM,IAAM,mBAAA,GAAsBA,EAAE,MAAA,CAAO;AAAA,EAC1C,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,EACtB,YAAA,EAAcA,EAAE,MAAA,EAAO;AAAA,EACvB,IAAA,EAAM;AACR,CAAC;ACbM,IAAM,mBAAA,GAAsBA,EAAE,MAAA,CAAO;AAAA,EAC1C,cAAcA,CAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA;AAClC,CAAC;AAKM,IAAM,oBAAA,GAAuB;ACR7B,IAAM,oBAAA,GAAuBA,EAAE,MAAA,CAAO;AAAA,EAC3C,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAChC,CAAC;AAKM,IAAM,qBAAA,GAAwBA,EAAE,MAAA,CAAO;AAAA,EAC5C,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,EACtB,YAAA,EAAcA,EAAE,MAAA;AAClB,CAAC;ACLD,IAAM,sBAAA,GAAyB,cAAA,CAC5B,QAAA,EAAS,CACT,QAAA,GACA,SAAA,CAAU,CAAC,KAAA,KAAU,KAAA,IAAS,IAAI,CAAA;AAE9B,IAAM,qBAAA,GAAwBA,EAAE,MAAA,CAAO;AAAA,EAC5C,KAAA,EAAO,WAAA;AAAA,EACP,QAAA,EAAU,cAAA;AAAA,EACV,QAAA,EAAU,sBAAA;AAAA,EACV,kBAAA,EAAoBA,CAAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA,EAC7C,eAAA,EAAiB,sBAAsB,QAAA;AACzC,CAAC;AAKM,IAAM,sBAAA,GAAyBA,EAAE,MAAA,CAAO;AAAA,EAC7C,IAAA,EAAM,gBAAA;AAAA,EACN,YAAA,EAAcA,EAAE,MAAA;AAClB,CAAC;ACtBM,IAAM,0BAAA,GAA6BA,EAAE,MAAA,CAAO;AAAA,EACjD,kBAAA,EAAoBA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACpC,QAAA,EAAU;AACZ,CAAC;AAKM,IAAM,2BAAA,GAA8B;ACTpC,IAAM,wBAAA,GAA2BA,EAAE,MAAA,CAAO;AAAA,EAC/C,KAAA,EAAOA,EAAE,IAAA;AACX,CAAC;AAKM,IAAM,yBAAA,GAA4B","file":"chunk-VT6MXJE5.js","sourcesContent":["import { z } from 'zod'\nimport {\n  SUPPORTED_CURRENCY_VALUES,\n  SupportedCurrencies,\n  type SupportedCurrency,\n} from '../../enums/currency.js'\n\nexport const DEFAULT_DISPLAY_CURRENCY: SupportedCurrency = SupportedCurrencies.USD\n\nexport const supportedCurrencyEnum = z.enum(SupportedCurrencies, {\n  error: () => `currency must be one of: ${SUPPORTED_CURRENCY_VALUES.join(', ')}`,\n})\n\nexport type SupportedCurrencyInput = z.input<typeof supportedCurrencyEnum>\nexport type SupportedCurrencyParsed = z.output<typeof supportedCurrencyEnum>\n\nexport const displayCurrencyQuerySchema = z.object({\n  currency: supportedCurrencyEnum.optional(),\n})\n\nexport type DisplayCurrencyQueryInput = z.input<typeof displayCurrencyQuerySchema>\nexport type DisplayCurrencyQueryParsed = z.output<typeof displayCurrencyQuerySchema>\n","import { z } from 'zod'\n\n// Normalise before validating: z.email() alone would reject surrounding whitespace.\nexport const emailSchema = z.string().trim().toLowerCase().pipe(z.email())\n\nexport type EmailInput = z.input<typeof emailSchema>\nexport type EmailParsed = z.output<typeof emailSchema>\n","import { z } from 'zod'\n\nexport const VALIDATION_ROOT_PATH = '<root>'\n\nexport const validationIssueSchema = z.object({\n  path: z.string(),\n  message: z.string(),\n  code: z.string(),\n})\n\nexport type ValidationIssueInput = z.input<typeof validationIssueSchema>\nexport type ValidationIssueParsed = z.output<typeof validationIssueSchema>\n\nexport const validationErrorMetadataSchema = z.object({\n  issues: z.array(validationIssueSchema),\n})\n\nexport type ValidationErrorMetadataInput = z.input<typeof validationErrorMetadataSchema>\nexport type ValidationErrorMetadataParsed = z.output<typeof validationErrorMetadataSchema>\n\nexport const apiErrorBodySchema = z.object({\n  message: z.string(),\n  code: z.string(),\n  metadata: z.record(z.string(), z.unknown()),\n})\n\nexport type ApiErrorBodyInput = z.input<typeof apiErrorBodySchema>\nexport type ApiErrorBodyParsed = z.output<typeof apiErrorBodySchema>\n","import { z } from 'zod'\n\nexport const isoDateTimeSchema = z.codec(z.iso.datetime({ offset: true }), z.date(), {\n  decode: (isoString) => new Date(isoString),\n  encode: (date) => date.toISOString(),\n})\n\nexport type IsoDateTimeInput = z.input<typeof isoDateTimeSchema>\nexport type IsoDateTimeParsed = z.output<typeof isoDateTimeSchema>\n","import { z } from 'zod'\nimport { isoDateTimeSchema } from './timestamp.js'\n\nexport const imageUrlsSchema = z.object({\n  sm: z.url(),\n  md: z.url(),\n  lg: z.url(),\n})\n\nexport type ImageUrlsInput = z.input<typeof imageUrlsSchema>\nexport type ImageUrlsParsed = z.output<typeof imageUrlsSchema>\n\nexport const imageDetailSchema = z.object({\n  id: z.guid(),\n  hash: z.string(),\n  mime: z.string(),\n  sizeBytes: z.number().int().nonnegative(),\n  width: z.number().int().nonnegative(),\n  height: z.number().int().nonnegative(),\n  createdAt: isoDateTimeSchema,\n  urls: imageUrlsSchema,\n})\n\nexport type ImageDetailInput = z.input<typeof imageDetailSchema>\nexport type ImageDetailParsed = z.output<typeof imageDetailSchema>\n","import { z } from 'zod'\n\nexport const messageResponseSchema = z.object({\n  message: z.string(),\n})\n\nexport type MessageResponseInput = z.input<typeof messageResponseSchema>\nexport type MessageResponseParsed = z.output<typeof messageResponseSchema>\n","import { z } from 'zod'\n\nexport const MIN_PASSWORD_LENGTH = 8\nexport const MAX_PASSWORD_LENGTH = 72\n\nexport const passwordSchema = z.string().min(MIN_PASSWORD_LENGTH).max(MAX_PASSWORD_LENGTH)\n\nexport type PasswordInput = z.input<typeof passwordSchema>\nexport type PasswordParsed = z.output<typeof passwordSchema>\n","import { z } from 'zod'\n\nexport const USERNAME_MIN_LENGTH = 1\nexport const USERNAME_MAX_LENGTH = 100\nexport const USERNAME_REGEX = new RegExp(\n  `^[\\\\p{L}\\\\p{N}_-]{${String(USERNAME_MIN_LENGTH)},${String(USERNAME_MAX_LENGTH)}}$`,\n  'u',\n)\n\nexport const usernameSchema = z\n  .string()\n  .trim()\n  .regex(\n    USERNAME_REGEX,\n    `username must be ${String(USERNAME_MIN_LENGTH)}-${String(USERNAME_MAX_LENGTH)} letters, digits, underscores, or dashes`,\n  )\n\nexport type UsernameInput = z.input<typeof usernameSchema>\nexport type UsernameParsed = z.output<typeof usernameSchema>\n","import { z } from 'zod'\nimport { AUTH_PROVIDER_VALUES } from '../../enums/auth-provider.js'\nimport { USER_ROLE_VALUES } from '../../enums/user-role.js'\nimport { supportedCurrencyEnum } from '../_shared/currency.js'\nimport { isoDateTimeSchema } from '../_shared/timestamp.js'\nimport { imageDetailSchema } from '../_shared/image-detail.js'\n\nexport const userDetailSchema = z.object({\n  id: z.guid(),\n  email: z.string(),\n  username: z.string().nullable(),\n  authProvider: z.enum(AUTH_PROVIDER_VALUES),\n  role: z.enum(USER_ROLE_VALUES),\n  avatarImageId: z.guid().nullable(),\n  avatar: imageDetailSchema.nullable(),\n  isCgvAccepted: z.boolean(),\n  cgvAcceptedAt: isoDateTimeSchema.nullable(),\n  isMarketingOptedIn: z.boolean(),\n  defaultCurrency: supportedCurrencyEnum,\n  emailVerifiedAt: isoDateTimeSchema.nullable(),\n  lastActiveAt: isoDateTimeSchema.nullable(),\n  createdAt: isoDateTimeSchema,\n  updatedAt: isoDateTimeSchema,\n})\n\nexport type UserDetailInput = z.input<typeof userDetailSchema>\nexport type UserDetailParsed = z.output<typeof userDetailSchema>\n","import { z } from 'zod'\nimport { messageResponseSchema } from '../_shared/message-response.js'\nimport { emailSchema } from '../_shared/email.js'\n\nexport const forgotPasswordRequestSchema = z.object({\n  email: emailSchema,\n})\n\nexport type ForgotPasswordRequestInput = z.input<typeof forgotPasswordRequestSchema>\nexport type ForgotPasswordRequestParsed = z.output<typeof forgotPasswordRequestSchema>\n\nexport const forgotPasswordResponseSchema = messageResponseSchema\n\nexport type ForgotPasswordResponseInput = z.input<typeof forgotPasswordResponseSchema>\nexport type ForgotPasswordResponseParsed = z.output<typeof forgotPasswordResponseSchema>\n","import { z } from 'zod'\nimport { userDetailSchema } from '../users/user-detail.js'\nimport { emailSchema } from '../_shared/email.js'\n\nexport const loginRequestSchema = z.object({\n  email: emailSchema,\n  password: z.string().min(1),\n})\n\nexport type LoginRequestInput = z.input<typeof loginRequestSchema>\nexport type LoginRequestParsed = z.output<typeof loginRequestSchema>\n\nexport const loginResponseSchema = z.object({\n  accessToken: z.string(),\n  refreshToken: z.string(),\n  user: userDetailSchema,\n})\n\nexport type LoginResponseInput = z.input<typeof loginResponseSchema>\nexport type LoginResponseParsed = z.output<typeof loginResponseSchema>\n","import { z } from 'zod'\nimport { messageResponseSchema } from '../_shared/message-response.js'\n\nexport const logoutRequestSchema = z.object({\n  refreshToken: z.string().min(1).optional(),\n})\n\nexport type LogoutRequestInput = z.input<typeof logoutRequestSchema>\nexport type LogoutRequestParsed = z.output<typeof logoutRequestSchema>\n\nexport const logoutResponseSchema = messageResponseSchema\n\nexport type LogoutResponseInput = z.input<typeof logoutResponseSchema>\nexport type LogoutResponseParsed = z.output<typeof logoutResponseSchema>\n","import { z } from 'zod'\n\nexport const refreshRequestSchema = z.object({\n  refreshToken: z.string().min(1),\n})\n\nexport type RefreshRequestInput = z.input<typeof refreshRequestSchema>\nexport type RefreshRequestParsed = z.output<typeof refreshRequestSchema>\n\nexport const refreshResponseSchema = z.object({\n  accessToken: z.string(),\n  refreshToken: z.string(),\n})\n\nexport type RefreshResponseInput = z.input<typeof refreshResponseSchema>\nexport type RefreshResponseParsed = z.output<typeof refreshResponseSchema>\n","import { z } from 'zod'\nimport { passwordSchema } from '../_shared/password.js'\nimport { usernameSchema } from '../_shared/username.js'\nimport { supportedCurrencyEnum } from '../_shared/currency.js'\nimport { userDetailSchema } from '../users/user-detail.js'\nimport { emailSchema } from '../_shared/email.js'\n\nconst optionalUsernameSchema = usernameSchema\n  .nullable()\n  .optional()\n  .transform((value) => value ?? null)\n\nexport const registerRequestSchema = z.object({\n  email: emailSchema,\n  password: passwordSchema,\n  username: optionalUsernameSchema,\n  isMarketingOptedIn: z.boolean().default(false),\n  defaultCurrency: supportedCurrencyEnum.optional(),\n})\n\nexport type RegisterRequestInput = z.input<typeof registerRequestSchema>\nexport type RegisterRequestParsed = z.output<typeof registerRequestSchema>\n\nexport const registerResponseSchema = z.object({\n  user: userDetailSchema,\n  refreshToken: z.string(),\n})\n\nexport type RegisterResponseInput = z.input<typeof registerResponseSchema>\nexport type RegisterResponseParsed = z.output<typeof registerResponseSchema>\n","import { z } from 'zod'\nimport { passwordSchema } from '../_shared/password.js'\nimport { messageResponseSchema } from '../_shared/message-response.js'\n\nexport const resetPasswordRequestSchema = z.object({\n  passwordResetToken: z.string().min(1),\n  password: passwordSchema,\n})\n\nexport type ResetPasswordRequestInput = z.input<typeof resetPasswordRequestSchema>\nexport type ResetPasswordRequestParsed = z.output<typeof resetPasswordRequestSchema>\n\nexport const resetPasswordResponseSchema = messageResponseSchema\n\nexport type ResetPasswordResponseInput = z.input<typeof resetPasswordResponseSchema>\nexport type ResetPasswordResponseParsed = z.output<typeof resetPasswordResponseSchema>\n","import { z } from 'zod'\nimport { messageResponseSchema } from '../_shared/message-response.js'\n\nexport const verifyEmailRequestSchema = z.object({\n  token: z.guid(),\n})\n\nexport type VerifyEmailRequestInput = z.input<typeof verifyEmailRequestSchema>\nexport type VerifyEmailRequestParsed = z.output<typeof verifyEmailRequestSchema>\n\nexport const verifyEmailResponseSchema = messageResponseSchema\n\nexport type VerifyEmailResponseInput = z.input<typeof verifyEmailResponseSchema>\nexport type VerifyEmailResponseParsed = z.output<typeof verifyEmailResponseSchema>\n"]}

package/dist/client/index.d.ts

@@ -0,0 +1,97 @@
+import { RegisterRequestInput, RegisterResponseParsed, VerifyEmailRequestInput, VerifyEmailResponseParsed, LoginRequestInput, LoginResponseParsed, RefreshRequestInput, RefreshResponseParsed, LogoutRequestInput, LogoutResponseParsed, ForgotPasswordRequestInput, ForgotPasswordResponseParsed, ResetPasswordRequestInput, ResetPasswordResponseParsed, ValidationIssueParsed } from '../schemas/index.js';
+import { z } from 'zod';
+import { HttpMethod, ErrorCode } from '../enums/index.js';
+
+declare const DEFAULT_TIMEOUT_MS = 30000;
+type TokenProvider = () => string | null | Promise<string | null>;
+type FetchFunction = (url: string, init: RequestInit) => Promise<Response>;
+type PathParams = Record<string, string | number>;
+type QueryValue = string | number | boolean | null | undefined;
+type QueryParams = Record<string, QueryValue | readonly QueryValue[]>;
+declare const RequestAuthMode: {
+    readonly TOKEN_PROVIDER: "token-provider";
+    readonly NONE: "none";
+};
+type RequestAuthMode = (typeof RequestAuthMode)[keyof typeof RequestAuthMode];
+type RequestAuth = RequestAuthMode | {
+    token: string;
+};
+interface HttpRequest<TResponseSchema extends z.ZodType> {
+    method: HttpMethod;
+    path: string;
+    pathParams?: PathParams;
+    query?: QueryParams;
+    body?: unknown;
+    auth?: RequestAuth;
+    signal?: AbortSignal;
+    responseSchema: TResponseSchema;
+}
+interface HttpClient {
+    request<TResponseSchema extends z.ZodType>(request: HttpRequest<TResponseSchema>): Promise<z.output<TResponseSchema>>;
+}
+interface HttpClientOptions {
+    baseUrl: string;
+    getToken: TokenProvider;
+    fetch?: FetchFunction;
+    timeoutMs?: number | null;
+}
+declare function createHttpClient(options: HttpClientOptions): HttpClient;
+
+interface AuthClient {
+    register(input: RegisterRequestInput): Promise<RegisterResponseParsed>;
+    verifyEmail(input: VerifyEmailRequestInput): Promise<VerifyEmailResponseParsed>;
+    login(input: LoginRequestInput): Promise<LoginResponseParsed>;
+    refresh(input: RefreshRequestInput): Promise<RefreshResponseParsed>;
+    logout(input?: LogoutRequestInput): Promise<LogoutResponseParsed>;
+    forgotPassword(input: ForgotPasswordRequestInput): Promise<ForgotPasswordResponseParsed>;
+    resetPassword(input: ResetPasswordRequestInput): Promise<ResetPasswordResponseParsed>;
+}
+declare function createAuthClient(http: HttpClient): AuthClient;
+
+type CreateClientOptions = HttpClientOptions;
+interface KeimelionClient {
+    http: HttpClient;
+    auth: AuthClient;
+}
+declare function createClient(options: CreateClientOptions): KeimelionClient;
+
+declare const ClientErrorCode: {
+    readonly INVALID_RESPONSE: "INVALID_RESPONSE";
+    readonly NETWORK_ERROR: "NETWORK_ERROR";
+    readonly TIMEOUT: "TIMEOUT";
+    readonly ABORTED: "ABORTED";
+};
+type ClientErrorCode = (typeof ClientErrorCode)[keyof typeof ClientErrorCode];
+type ApiErrorCode = ErrorCode | ClientErrorCode | (string & Record<never, never>);
+declare const INVALID_RESPONSE_MESSAGE = "The API response does not match the expected contract";
+declare const NETWORK_ERROR_MESSAGE = "The API could not be reached";
+declare const TIMEOUT_MESSAGE = "The API did not respond in time";
+declare const ABORTED_MESSAGE = "The request was aborted";
+interface ApiErrorOptions {
+    status: number;
+    code: ApiErrorCode;
+    message: string;
+    metadata: Record<string, unknown>;
+    cause?: unknown;
+}
+declare class ApiError extends Error {
+    readonly name = "ApiError";
+    readonly status: number;
+    readonly code: ApiErrorCode;
+    readonly metadata: Record<string, unknown>;
+    readonly issues: ValidationIssueParsed[];
+    constructor(options: ApiErrorOptions);
+}
+
+declare const AuthPaths: {
+    readonly REGISTER: "/v1/auth/register";
+    readonly VERIFY_EMAIL: "/v1/auth/verify-email";
+    readonly LOGIN: "/v1/auth/login";
+    readonly REFRESH: "/v1/auth/refresh";
+    readonly LOGOUT: "/v1/auth/logout";
+    readonly FORGOT_PASSWORD: "/v1/auth/forgot-password";
+    readonly RESET_PASSWORD: "/v1/auth/reset-password";
+};
+
+export { ABORTED_MESSAGE, ApiError, AuthPaths, ClientErrorCode, DEFAULT_TIMEOUT_MS, INVALID_RESPONSE_MESSAGE, NETWORK_ERROR_MESSAGE, RequestAuthMode, TIMEOUT_MESSAGE, createAuthClient, createClient, createHttpClient };
+export type { ApiErrorCode, ApiErrorOptions, AuthClient, CreateClientOptions, FetchFunction, HttpClient, HttpClientOptions, HttpRequest, KeimelionClient, PathParams, QueryParams, QueryValue, RequestAuth, TokenProvider };