@korajs/auth 0.1.0 → 0.3.0

package/dist/{auth-client-CrDNuh10.d.cts → org-client-BVTLKcIk.d.cts}

@@ -62,6 +62,7 @@ declare class AuthClient {
     private _state;
     private _user;
     private _refreshPromise;
+    private _initialized;
     /**
      * Creates a new AuthClient.
      *
@@ -108,8 +109,9 @@ declare class AuthClient {
     /**
      * Sign out the current user.
      *
-     * Clears local tokens and state. Does not make a network request to the
-     * server -- tokens are simply discarded locally.
+     * Clears local tokens and attempts to revoke the refresh token on the server
+     * (best-effort — succeeds even if the server is unreachable). This ensures that
+     * stolen refresh tokens cannot be used after the user explicitly signs out.
      */
     signOut(): Promise<void>;
     /**
@@ -178,4 +180,176 @@ declare class AuthClient {
     private request;
 }
 
-export { AuthClient as A, type AuthClientConfig as a, AuthError as b, type AuthState as c, type AuthUser as d };
+/**
+ * Organization info returned by the server.
+ */
+interface ClientOrganization {
+    id: string;
+    name: string;
+    slug: string;
+    ownerId: string;
+    createdAt: number;
+    updatedAt: number;
+    metadata: Record<string, unknown>;
+}
+/**
+ * Membership info returned by the server.
+ */
+interface ClientMembership {
+    id: string;
+    orgId: string;
+    userId: string;
+    role: string;
+    invitedBy: string | null;
+    joinedAt: number;
+}
+/**
+ * Invitation info returned by the server.
+ */
+interface ClientInvitation {
+    id: string;
+    orgId: string;
+    email: string;
+    role: string;
+    invitedBy: string;
+    token: string;
+    createdAt: number;
+    expiresAt: number;
+    status: string;
+}
+/**
+ * Configuration for the OrgClient.
+ */
+interface OrgClientConfig {
+    /** Base URL of the auth/org server */
+    serverUrl: string;
+    /** Function that returns a valid access token for authenticated requests */
+    getAccessToken: () => Promise<string | null>;
+}
+/**
+ * Thrown when an org operation fails.
+ */
+declare class OrgClientError extends KoraError {
+    constructor(message: string, code: string, context?: Record<string, unknown>);
+}
+/**
+ * Client-side organization manager.
+ *
+ * Handles org CRUD, member management, invitations, and active org switching.
+ * Framework-agnostic — works in any JavaScript environment with `fetch`.
+ *
+ * @example
+ * ```typescript
+ * const orgClient = new OrgClient({
+ *   serverUrl: 'http://localhost:3001',
+ *   getAccessToken: () => authClient.getAccessToken(),
+ * })
+ *
+ * const org = await orgClient.createOrg({ name: 'Acme Inc', slug: 'acme' })
+ * orgClient.switchOrg(org.id)
+ * ```
+ */
+declare class OrgClient {
+    private readonly serverUrl;
+    private readonly getAccessToken;
+    private readonly listeners;
+    private _activeOrgId;
+    private _activeOrg;
+    private _activeRole;
+    constructor(config: OrgClientConfig);
+    /** Currently active organization ID */
+    get activeOrgId(): string | null;
+    /** Currently active organization */
+    get activeOrg(): ClientOrganization | null;
+    /** Current user's role in the active organization */
+    get activeRole(): string | null;
+    /**
+     * Create a new organization.
+     */
+    createOrg(params: {
+        name: string;
+        slug?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<ClientOrganization>;
+    /**
+     * List all organizations the current user belongs to.
+     */
+    listOrgs(): Promise<ClientOrganization[]>;
+    /**
+     * Get an organization by ID.
+     */
+    getOrg(orgId: string): Promise<ClientOrganization>;
+    /**
+     * Update an organization.
+     */
+    updateOrg(orgId: string, params: {
+        name?: string;
+        slug?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<ClientOrganization>;
+    /**
+     * Delete an organization.
+     */
+    deleteOrg(orgId: string): Promise<void>;
+    /**
+     * Switch the active organization context.
+     * Fetches the org details and the user's membership/role.
+     */
+    switchOrg(orgId: string): Promise<void>;
+    /**
+     * Clear the active organization (no org selected).
+     */
+    clearActiveOrg(): void;
+    /**
+     * List members of an organization.
+     */
+    listMembers(orgId: string): Promise<ClientMembership[]>;
+    /**
+     * Remove a member from an organization.
+     */
+    removeMember(orgId: string, userId: string): Promise<void>;
+    /**
+     * Update a member's role.
+     */
+    updateMemberRole(orgId: string, userId: string, role: string): Promise<ClientMembership>;
+    /**
+     * Transfer ownership to another member.
+     */
+    transferOwnership(orgId: string, newOwnerId: string): Promise<void>;
+    /**
+     * Leave an organization (remove yourself).
+     */
+    leaveOrg(orgId: string): Promise<void>;
+    /**
+     * Invite a user to an organization by email.
+     */
+    inviteMember(orgId: string, params: {
+        email: string;
+        role: string;
+    }): Promise<ClientInvitation>;
+    /**
+     * Accept an invitation by token.
+     */
+    acceptInvitation(token: string): Promise<ClientMembership>;
+    /**
+     * List pending invitations for an organization.
+     */
+    listInvitations(orgId: string): Promise<ClientInvitation[]>;
+    /**
+     * Revoke a pending invitation.
+     */
+    revokeInvitation(orgId: string, invitationId: string): Promise<void>;
+    /**
+     * List pending invitations for the current user's email.
+     */
+    listMyInvitations(email: string): Promise<ClientInvitation[]>;
+    /**
+     * Subscribe to active org changes.
+     * @returns Unsubscribe function
+     */
+    onOrgChange(callback: (orgId: string | null) => void): () => void;
+    private notifyListeners;
+    private request;
+}
+
+export { AuthClient as A, type ClientInvitation as C, OrgClient as O, type AuthClientConfig as a, AuthError as b, type AuthState as c, type AuthUser as d, type ClientMembership as e, type ClientOrganization as f, type OrgClientConfig as g, OrgClientError as h };

package/dist/{auth-client-CrDNuh10.d.ts → org-client-BVTLKcIk.d.ts}

@@ -62,6 +62,7 @@ declare class AuthClient {
     private _state;
     private _user;
     private _refreshPromise;
+    private _initialized;
     /**
      * Creates a new AuthClient.
      *
@@ -108,8 +109,9 @@ declare class AuthClient {
     /**
      * Sign out the current user.
      *
-     * Clears local tokens and state. Does not make a network request to the
-     * server -- tokens are simply discarded locally.
+     * Clears local tokens and attempts to revoke the refresh token on the server
+     * (best-effort — succeeds even if the server is unreachable). This ensures that
+     * stolen refresh tokens cannot be used after the user explicitly signs out.
      */
     signOut(): Promise<void>;
     /**
@@ -178,4 +180,176 @@ declare class AuthClient {
     private request;
 }
 
-export { AuthClient as A, type AuthClientConfig as a, AuthError as b, type AuthState as c, type AuthUser as d };
+/**
+ * Organization info returned by the server.
+ */
+interface ClientOrganization {
+    id: string;
+    name: string;
+    slug: string;
+    ownerId: string;
+    createdAt: number;
+    updatedAt: number;
+    metadata: Record<string, unknown>;
+}
+/**
+ * Membership info returned by the server.
+ */
+interface ClientMembership {
+    id: string;
+    orgId: string;
+    userId: string;
+    role: string;
+    invitedBy: string | null;
+    joinedAt: number;
+}
+/**
+ * Invitation info returned by the server.
+ */
+interface ClientInvitation {
+    id: string;
+    orgId: string;
+    email: string;
+    role: string;
+    invitedBy: string;
+    token: string;
+    createdAt: number;
+    expiresAt: number;
+    status: string;
+}
+/**
+ * Configuration for the OrgClient.
+ */
+interface OrgClientConfig {
+    /** Base URL of the auth/org server */
+    serverUrl: string;
+    /** Function that returns a valid access token for authenticated requests */
+    getAccessToken: () => Promise<string | null>;
+}
+/**
+ * Thrown when an org operation fails.
+ */
+declare class OrgClientError extends KoraError {
+    constructor(message: string, code: string, context?: Record<string, unknown>);
+}
+/**
+ * Client-side organization manager.
+ *
+ * Handles org CRUD, member management, invitations, and active org switching.
+ * Framework-agnostic — works in any JavaScript environment with `fetch`.
+ *
+ * @example
+ * ```typescript
+ * const orgClient = new OrgClient({
+ *   serverUrl: 'http://localhost:3001',
+ *   getAccessToken: () => authClient.getAccessToken(),
+ * })
+ *
+ * const org = await orgClient.createOrg({ name: 'Acme Inc', slug: 'acme' })
+ * orgClient.switchOrg(org.id)
+ * ```
+ */
+declare class OrgClient {
+    private readonly serverUrl;
+    private readonly getAccessToken;
+    private readonly listeners;
+    private _activeOrgId;
+    private _activeOrg;
+    private _activeRole;
+    constructor(config: OrgClientConfig);
+    /** Currently active organization ID */
+    get activeOrgId(): string | null;
+    /** Currently active organization */
+    get activeOrg(): ClientOrganization | null;
+    /** Current user's role in the active organization */
+    get activeRole(): string | null;
+    /**
+     * Create a new organization.
+     */
+    createOrg(params: {
+        name: string;
+        slug?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<ClientOrganization>;
+    /**
+     * List all organizations the current user belongs to.
+     */
+    listOrgs(): Promise<ClientOrganization[]>;
+    /**
+     * Get an organization by ID.
+     */
+    getOrg(orgId: string): Promise<ClientOrganization>;
+    /**
+     * Update an organization.
+     */
+    updateOrg(orgId: string, params: {
+        name?: string;
+        slug?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<ClientOrganization>;
+    /**
+     * Delete an organization.
+     */
+    deleteOrg(orgId: string): Promise<void>;
+    /**
+     * Switch the active organization context.
+     * Fetches the org details and the user's membership/role.
+     */
+    switchOrg(orgId: string): Promise<void>;
+    /**
+     * Clear the active organization (no org selected).
+     */
+    clearActiveOrg(): void;
+    /**
+     * List members of an organization.
+     */
+    listMembers(orgId: string): Promise<ClientMembership[]>;
+    /**
+     * Remove a member from an organization.
+     */
+    removeMember(orgId: string, userId: string): Promise<void>;
+    /**
+     * Update a member's role.
+     */
+    updateMemberRole(orgId: string, userId: string, role: string): Promise<ClientMembership>;
+    /**
+     * Transfer ownership to another member.
+     */
+    transferOwnership(orgId: string, newOwnerId: string): Promise<void>;
+    /**
+     * Leave an organization (remove yourself).
+     */
+    leaveOrg(orgId: string): Promise<void>;
+    /**
+     * Invite a user to an organization by email.
+     */
+    inviteMember(orgId: string, params: {
+        email: string;
+        role: string;
+    }): Promise<ClientInvitation>;
+    /**
+     * Accept an invitation by token.
+     */
+    acceptInvitation(token: string): Promise<ClientMembership>;
+    /**
+     * List pending invitations for an organization.
+     */
+    listInvitations(orgId: string): Promise<ClientInvitation[]>;
+    /**
+     * Revoke a pending invitation.
+     */
+    revokeInvitation(orgId: string, invitationId: string): Promise<void>;
+    /**
+     * List pending invitations for the current user's email.
+     */
+    listMyInvitations(email: string): Promise<ClientInvitation[]>;
+    /**
+     * Subscribe to active org changes.
+     * @returns Unsubscribe function
+     */
+    onOrgChange(callback: (orgId: string | null) => void): () => void;
+    private notifyListeners;
+    private request;
+}
+
+export { AuthClient as A, type ClientInvitation as C, OrgClient as O, type AuthClientConfig as a, AuthError as b, type AuthState as c, type AuthUser as d, type ClientMembership as e, type ClientOrganization as f, type OrgClientConfig as g, OrgClientError as h };

package/dist/password-hash-HDH6VQCQ.js

@@ -0,0 +1,9 @@
+import {
+  hashPassword,
+  verifyPassword
+} from "./chunk-HOZXDR6Y.js";
+export {
+  hashPassword,
+  verifyPassword
+};
+//# sourceMappingURL=password-hash-HDH6VQCQ.js.map

package/dist/password-hash-HDH6VQCQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/react.cjs

@@ -22,9 +22,13 @@ var react_exports = {};
 __export(react_exports, {
   AuthContext: () => AuthContext,
   AuthProvider: () => AuthProvider,
+  OrgContext: () => OrgContext,
   useAuth: () => useAuth,
   useAuthStatus: () => useAuthStatus,
-  useCurrentUser: () => useCurrentUser
+  useCurrentUser: () => useCurrentUser,
+  useOrg: () => useOrg,
+  useOrgMembers: () => useOrgMembers,
+  usePermission: () => usePermission
 });
 module.exports = __toCommonJS(react_exports);
 
@@ -195,12 +199,189 @@ function useAuthStatus() {
     isLoading
   };
 }
+
+// src/react/org-hooks.ts
+var import_react4 = require("react");
+var OrgContext = (0, import_react4.createContext)(null);
+function useOrgContext() {
+  const ctx = (0, import_react4.useContext)(OrgContext);
+  if (ctx === null) {
+    throw new Error(
+      "useOrg / useOrgMembers / usePermission must be used within an <OrgProvider>. Wrap your component tree with <OrgProvider client={orgClient}>."
+    );
+  }
+  return ctx;
+}
+function useOrg() {
+  const { client } = useOrgContext();
+  const [error, setError] = (0, import_react4.useState)(null);
+  const orgSnapshotRef = (0, import_react4.useRef)({
+    orgId: client.activeOrgId,
+    org: client.activeOrg,
+    role: client.activeRole
+  });
+  const subscribe = (0, import_react4.useCallback)(
+    (onStoreChange) => {
+      return client.onOrgChange(() => {
+        orgSnapshotRef.current = {
+          orgId: client.activeOrgId,
+          org: client.activeOrg,
+          role: client.activeRole
+        };
+        onStoreChange();
+      });
+    },
+    [client]
+  );
+  const getSnapshot = (0, import_react4.useCallback)(() => orgSnapshotRef.current, []);
+  const { orgId, org, role } = (0, import_react4.useSyncExternalStore)(subscribe, getSnapshot);
+  const switchOrg = (0, import_react4.useCallback)(
+    async (newOrgId) => {
+      setError(null);
+      try {
+        await client.switchOrg(newOrgId);
+      } catch (err) {
+        setError(err instanceof Error ? err.message : String(err));
+      }
+    },
+    [client]
+  );
+  const createOrg = (0, import_react4.useCallback)(
+    async (params) => {
+      setError(null);
+      try {
+        return await client.createOrg(params);
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        setError(msg);
+        throw err;
+      }
+    },
+    [client]
+  );
+  const leaveOrg = (0, import_react4.useCallback)(async () => {
+    if (!orgId) return;
+    setError(null);
+    try {
+      await client.leaveOrg(orgId);
+    } catch (err) {
+      setError(err instanceof Error ? err.message : String(err));
+    }
+  }, [client, orgId]);
+  const clearOrg = (0, import_react4.useCallback)(() => {
+    client.clearActiveOrg();
+  }, [client]);
+  const listOrgs = (0, import_react4.useCallback)(async () => {
+    try {
+      return await client.listOrgs();
+    } catch (err) {
+      setError(err instanceof Error ? err.message : String(err));
+      return [];
+    }
+  }, [client]);
+  return { org, role, orgId, switchOrg, createOrg, leaveOrg, clearOrg, listOrgs, error };
+}
+function useOrgMembers(orgId) {
+  const { client } = useOrgContext();
+  const [members, setMembers] = (0, import_react4.useState)([]);
+  const [isLoading, setIsLoading] = (0, import_react4.useState)(true);
+  const [error, setError] = (0, import_react4.useState)(null);
+  const refresh = (0, import_react4.useCallback)(async () => {
+    setIsLoading(true);
+    setError(null);
+    try {
+      const result = await client.listMembers(orgId);
+      setMembers(result);
+    } catch (err) {
+      setError(err instanceof Error ? err.message : String(err));
+    } finally {
+      setIsLoading(false);
+    }
+  }, [client, orgId]);
+  (0, import_react4.useEffect)(() => {
+    refresh();
+  }, [refresh]);
+  const invite = (0, import_react4.useCallback)(
+    async (email, role) => {
+      setError(null);
+      try {
+        const result = await client.inviteMember(orgId, { email, role });
+        return result;
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        setError(msg);
+        throw err;
+      }
+    },
+    [client, orgId]
+  );
+  const removeMember = (0, import_react4.useCallback)(
+    async (userId) => {
+      setError(null);
+      try {
+        await client.removeMember(orgId, userId);
+        await refresh();
+      } catch (err) {
+        setError(err instanceof Error ? err.message : String(err));
+      }
+    },
+    [client, orgId, refresh]
+  );
+  const updateRole = (0, import_react4.useCallback)(
+    async (userId, role) => {
+      setError(null);
+      try {
+        await client.updateMemberRole(orgId, userId, role);
+        await refresh();
+      } catch (err) {
+        setError(err instanceof Error ? err.message : String(err));
+      }
+    },
+    [client, orgId, refresh]
+  );
+  return { members, isLoading, refresh, invite, removeMember, updateRole, error };
+}
+function usePermission(requiredRole) {
+  const { client } = useOrgContext();
+  const snapshotRef = (0, import_react4.useRef)(checkPermission(client.activeRole, requiredRole));
+  const subscribe = (0, import_react4.useCallback)(
+    (onStoreChange) => {
+      return client.onOrgChange(() => {
+        const newValue = checkPermission(client.activeRole, requiredRole);
+        if (newValue !== snapshotRef.current) {
+          snapshotRef.current = newValue;
+          onStoreChange();
+        }
+      });
+    },
+    [client, requiredRole]
+  );
+  const getSnapshot = (0, import_react4.useCallback)(() => snapshotRef.current, []);
+  return (0, import_react4.useSyncExternalStore)(subscribe, getSnapshot);
+}
+var ROLE_LEVELS = {
+  viewer: 10,
+  billing: 15,
+  member: 20,
+  admin: 30,
+  owner: 40
+};
+function checkPermission(currentRole, requiredRole) {
+  if (!currentRole) return false;
+  const currentLevel = ROLE_LEVELS[currentRole] ?? 0;
+  const requiredLevel = ROLE_LEVELS[requiredRole] ?? 0;
+  return currentLevel >= requiredLevel;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AuthContext,
   AuthProvider,
+  OrgContext,
   useAuth,
   useAuthStatus,
-  useCurrentUser
+  useCurrentUser,
+  useOrg,
+  useOrgMembers,
+  usePermission
 });
 //# sourceMappingURL=react.cjs.map