@kulkan/kulterra-api-client 1.1.1

package/CHANGELOG.md

@@ -0,0 +1,41 @@
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+
+### Changed
+
+### Deprecated
+
+### Removed
+
+### Fixed
+
+### Security
+
+## [1.1.0] - 2026-04-04
+
+### Added
+
+- **`HttpClient.post`** and **`HttpPost`** type for JSON bodies (Axios-compatible).
+- **Auth endpoints** (`src/endpoints/auth.ts`): `postRegister`, `postLogin`, `getGoogleOAuthStart`, `postGoogleOAuthCallback`, `postRefresh`, `postLogout`, `getMe`.
+- **`createApiClient`** exposes **`auth`** namespace delegating to the auth endpoints.
+- **Peer dependency** on `@kulkan/kulterra-contracts` **≥ 1.1.1** (align with service ports and Auth0 helper types on the API).
+- README updated with endpoint table and OAuth flow notes.
+
+### Changed
+
+- **`createApiClient`** now requires an `http` implementation that provides both **`get`** and **`post`** (breaking for consumers that only implemented `get`).
+
+## [1.0.0] - 2026-04-02
+
+### Added
+
+- Initial public release of `@kulkan/kulterra-api-client`.
+- MIT license, README, and npm publish tooling (validate, build, Husky, lint-staged).

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ipetsadmin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,129 @@
+# `@kulkan/kulterra-api-client`
+
+Typed HTTP client for the Truffa API. Consumed by web and mobile apps. **No baked-in base URL:** pass a preconfigured HTTP layer (typically an [Axios](https://axios-http.com/) instance with `baseURL` set). Request and response shapes come from [`@kulkan/kulterra-contracts`](https://www.npmjs.com/package/@kulkan/contracts).
+
+## Requirements
+
+- **Node.js** ≥ 18.18
+- **Peer dependency:** `@kulkan/kulterra-contracts` **≥ 1.1.0** (auth types and shared envelopes)
+
+## Installation
+
+```bash
+pnpm add @kulkan/kulterra-api-client @kulkan/kulterra-contracts
+# or
+npm install @kulkan/kulterra-api-client @kulkan/kulterra-contracts
+```
+
+## What ships today
+
+| Export                                 | Description                                                                                                                                       |
+| -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `createApiClient(options)`             | Factory returning `healthCheck` + **`auth`** namespace                                                                                            |
+| `ApiClient` / `CreateApiClientOptions` | Typed client and `{ http: HttpClient }` options                                                                                                   |
+| `HttpClient`                           | **`get`** and **`post`** (minimal surface compatible with Axios)                                                                                  |
+| `HttpGet` / `HttpPost`                 | Method signatures                                                                                                                                 |
+| Named auth helpers                     | `postRegister`, `postLogin`, `getGoogleOAuthStart`, `postGoogleOAuthCallback`, `postRefresh`, `postLogout`, `getMe` (see `src/endpoints/auth.ts`) |
+
+### Endpoints implemented
+
+| HTTP   | Path                                              | Client                                                                                     |
+| ------ | ------------------------------------------------- | ------------------------------------------------------------------------------------------ |
+| `GET`  | `/api/v1/health-check`                            | `client.healthCheck()`                                                                     |
+| `POST` | `/api/v1/auth/register`                           | `client.auth.register(body)` or `postRegister(http, body)`                                 |
+| `POST` | `/api/v1/auth/login`                              | `client.auth.login(body)` or `postLogin(http, body)`                                       |
+| `GET`  | `/api/v1/auth/oauth/google/start?redirectUri=...` | `client.auth.getGoogleOAuthStart(redirectUri)` or `getGoogleOAuthStart(http, redirectUri)` |
+| `POST` | `/api/v1/auth/oauth/google/callback`              | `client.auth.postGoogleOAuthCallback(body)` or `postGoogleOAuthCallback(http, body)`       |
+| `POST` | `/api/v1/auth/refresh`                            | `client.auth.refresh(body)` or `postRefresh(http, body)`                                   |
+| `POST` | `/api/v1/auth/logout`                             | `client.auth.logout(body)` or `postLogout(http, body)`                                     |
+| `GET`  | `/api/v1/auth/me`                                 | `client.auth.me(accessToken)` or `getMe(http, accessToken)`                                |
+
+Responses follow **`IApiResponse<T>`** from contracts (`success`, `data`, etc.). Auth session payloads are **`AuthSessionResponse`** (`TokenPair` + `user`). **`logout`** returns **204** with no JSON body.
+
+### Usage example (Axios)
+
+Paths are **relative to `baseURL`** (e.g. `https://api.example.com`).
+
+```typescript
+import axios from 'axios';
+import { createApiClient } from '@kulkan/kulterra-api-client';
+
+const http = axios.create({
+  baseURL: process.env.API_BASE_URL,
+  timeout: 30_000,
+  headers: { 'Content-Type': 'application/json' },
+});
+
+const api = createApiClient({ http });
+
+const health = await api.healthCheck();
+const session = await api.auth.login({ email: 'user@example.com', password: '********' });
+// session.data — IApiResponse<AuthSessionResponse>; use session.data?.data for the inner payload when using Axios default response shape
+```
+
+Axios returns `{ data: body }` where `body` is the full JSON from the server. For `IApiResponse<AuthSessionResponse>`, the **envelope** is in `response.data`; the **`AuthSessionResponse`** is typically `response.data.data` (depending on your typings).
+
+### OAuth (mobile / web)
+
+1. Call **`getGoogleOAuthStart`** with the same **`redirectUri`** you registered in Auth0 and in the API’s `OAUTH_ALLOWED_REDIRECT_URIS`.
+2. Open **`authorizationUrl`** in a browser / `ASWebAuthenticationSession`.
+3. After redirect, **`POST`** the **`code`**, **`state`**, and **`redirectUri`** to **`postGoogleOAuthCallback`**.
+
+### Why a factory?
+
+`createApiClient({ http })` keeps env and transport out of this package, supports multiple backends in one app, and makes tests easy with a mock `http` object.
+
+---
+
+## Architecture
+
+1. **`HttpClient`** — abstraction over GET/POST (`{ data: T }` shape, Axios-compatible).
+2. **`src/endpoints/*.ts`** — thin functions: `(http, …args) => Promise<…>`.
+3. **`createApiClient`** — wires `http` into endpoints.
+4. **`@kulkan/kulterra-contracts`** — DTOs (`RegisterRequest`, `AuthSessionResponse`, …).
+
+### Extending further
+
+If you add PATCH/PUT/DELETE, extend **`HttpClient`** in `src/http-client.ts` and add endpoint modules. For request config (query params, headers), align types with your adapter (Axios uses a second `config` argument on `get`/`post`).
+
+---
+
+## Testing
+
+Inject a fake **`HttpClient`** with **`get`** and **`post`** mocks and assert URLs and payloads.
+
+```typescript
+import type { HttpClient } from '@kulkan/kulterra-api-client';
+import { createApiClient } from '@kulkan/kulterra-api-client';
+
+const http: HttpClient = {
+  get: jest.fn().mockResolvedValue({ data: { success: true, data: {} } }),
+  post: jest.fn().mockResolvedValue({ data: { success: true, data: {} } }),
+};
+
+const api = createApiClient({ http });
+await api.healthCheck();
+expect(http.get).toHaveBeenCalledWith('/api/v1/health-check', undefined);
+```
+
+---
+
+## Development (this repository)
+
+| Script                    | Purpose                              |
+| ------------------------- | ------------------------------------ |
+| `pnpm run build`          | `tsup` → `dist/` (CJS, ESM, `.d.ts`) |
+| `pnpm run typecheck`      | `tsc --noEmit`                       |
+| `pnpm run lint`           | ESLint                               |
+| `pnpm run validate`       | typecheck + lint + Prettier check    |
+| `pnpm run prepublishOnly` | validate + build before publish      |
+
+---
+
+## Changelog
+
+See [CHANGELOG.md](./CHANGELOG.md).
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/index.d.mts

@@ -0,0 +1,41 @@
+import { RegisterRequest, IApiResponse, AuthSessionResponse, LoginRequest, OAuthGoogleStartResponse, OAuthGoogleCallbackRequest, RefreshRequest, LogoutRequest, AuthUserResponse, HealthCheck } from '@kulkan/kulterra-contracts';
+
+type HttpGet = <TResponse>(url: string, config?: unknown) => Promise<{
+    data: TResponse;
+}>;
+type HttpPost = <TResponse, TBody = unknown>(url: string, body?: TBody, config?: unknown) => Promise<{
+    data: TResponse;
+}>;
+interface HttpClient {
+    readonly get: HttpGet;
+    readonly post: HttpPost;
+}
+
+declare function postRegister(http: HttpClient, body: RegisterRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postLogin(http: HttpClient, body: LoginRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function getGoogleOAuthStart(http: HttpClient, redirectUri: string): Promise<IApiResponse<OAuthGoogleStartResponse>>;
+declare function postGoogleOAuthCallback(http: HttpClient, body: OAuthGoogleCallbackRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postRefresh(http: HttpClient, body: RefreshRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postLogout(http: HttpClient, body: LogoutRequest): Promise<void>;
+declare function getMe(http: HttpClient, accessToken: string): Promise<IApiResponse<AuthUserResponse>>;
+
+declare function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<HealthCheck>>;
+
+interface CreateApiClientOptions {
+    readonly http: HttpClient;
+}
+interface ApiClient {
+    readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;
+    readonly auth: {
+        readonly register: (body: Parameters<typeof postRegister>[1]) => ReturnType<typeof postRegister>;
+        readonly login: (body: Parameters<typeof postLogin>[1]) => ReturnType<typeof postLogin>;
+        readonly getGoogleOAuthStart: (redirectUri: string) => ReturnType<typeof getGoogleOAuthStart>;
+        readonly postGoogleOAuthCallback: (body: Parameters<typeof postGoogleOAuthCallback>[1]) => ReturnType<typeof postGoogleOAuthCallback>;
+        readonly refresh: (body: Parameters<typeof postRefresh>[1]) => ReturnType<typeof postRefresh>;
+        readonly logout: (body: Parameters<typeof postLogout>[1]) => ReturnType<typeof postLogout>;
+        readonly me: (accessToken: string) => ReturnType<typeof getMe>;
+    };
+}
+declare function createApiClient(options: CreateApiClientOptions): ApiClient;
+
+export { type ApiClient, type CreateApiClientOptions, type HttpClient, type HttpGet, type HttpPost, createApiClient, getGoogleOAuthStart, getMe, postGoogleOAuthCallback, postLogin, postLogout, postRefresh, postRegister };

package/dist/index.d.ts

@@ -0,0 +1,41 @@
+import { RegisterRequest, IApiResponse, AuthSessionResponse, LoginRequest, OAuthGoogleStartResponse, OAuthGoogleCallbackRequest, RefreshRequest, LogoutRequest, AuthUserResponse, HealthCheck } from '@kulkan/kulterra-contracts';
+
+type HttpGet = <TResponse>(url: string, config?: unknown) => Promise<{
+    data: TResponse;
+}>;
+type HttpPost = <TResponse, TBody = unknown>(url: string, body?: TBody, config?: unknown) => Promise<{
+    data: TResponse;
+}>;
+interface HttpClient {
+    readonly get: HttpGet;
+    readonly post: HttpPost;
+}
+
+declare function postRegister(http: HttpClient, body: RegisterRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postLogin(http: HttpClient, body: LoginRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function getGoogleOAuthStart(http: HttpClient, redirectUri: string): Promise<IApiResponse<OAuthGoogleStartResponse>>;
+declare function postGoogleOAuthCallback(http: HttpClient, body: OAuthGoogleCallbackRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postRefresh(http: HttpClient, body: RefreshRequest): Promise<IApiResponse<AuthSessionResponse>>;
+declare function postLogout(http: HttpClient, body: LogoutRequest): Promise<void>;
+declare function getMe(http: HttpClient, accessToken: string): Promise<IApiResponse<AuthUserResponse>>;
+
+declare function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<HealthCheck>>;
+
+interface CreateApiClientOptions {
+    readonly http: HttpClient;
+}
+interface ApiClient {
+    readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;
+    readonly auth: {
+        readonly register: (body: Parameters<typeof postRegister>[1]) => ReturnType<typeof postRegister>;
+        readonly login: (body: Parameters<typeof postLogin>[1]) => ReturnType<typeof postLogin>;
+        readonly getGoogleOAuthStart: (redirectUri: string) => ReturnType<typeof getGoogleOAuthStart>;
+        readonly postGoogleOAuthCallback: (body: Parameters<typeof postGoogleOAuthCallback>[1]) => ReturnType<typeof postGoogleOAuthCallback>;
+        readonly refresh: (body: Parameters<typeof postRefresh>[1]) => ReturnType<typeof postRefresh>;
+        readonly logout: (body: Parameters<typeof postLogout>[1]) => ReturnType<typeof postLogout>;
+        readonly me: (accessToken: string) => ReturnType<typeof getMe>;
+    };
+}
+declare function createApiClient(options: CreateApiClientOptions): ApiClient;
+
+export { type ApiClient, type CreateApiClientOptions, type HttpClient, type HttpGet, type HttpPost, createApiClient, getGoogleOAuthStart, getMe, postGoogleOAuthCallback, postLogin, postLogout, postRefresh, postRegister };

package/dist/index.js

@@ -0,0 +1,83 @@
+'use strict';
+
+// src/endpoints/auth.ts
+var AUTH_BASE = "/api/v1/auth";
+async function postRegister(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/register`,
+    body
+  );
+  return data;
+}
+async function postLogin(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/login`,
+    body
+  );
+  return data;
+}
+async function getGoogleOAuthStart(http, redirectUri) {
+  const q = new URLSearchParams({ redirectUri });
+  const { data } = await http.get(
+    `${AUTH_BASE}/oauth/google/start?${q.toString()}`
+  );
+  return data;
+}
+async function postGoogleOAuthCallback(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/oauth/google/callback`,
+    body
+  );
+  return data;
+}
+async function postRefresh(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/refresh`,
+    body
+  );
+  return data;
+}
+async function postLogout(http, body) {
+  await http.post(`${AUTH_BASE}/logout`, body);
+}
+async function getMe(http, accessToken) {
+  const { data } = await http.get(`${AUTH_BASE}/me`, {
+    headers: { Authorization: `Bearer ${accessToken}` }
+  });
+  return data;
+}
+
+// src/endpoints/health-check.ts
+var HEALTH_CHECK_PATH = "/api/v1/health-check";
+async function fetchHealthCheck(http) {
+  const { data: body } = await http.get(HEALTH_CHECK_PATH);
+  return body;
+}
+
+// src/create-api-client.ts
+function createApiClient(options) {
+  const { http } = options;
+  return {
+    healthCheck: () => fetchHealthCheck(http),
+    auth: {
+      register: (body) => postRegister(http, body),
+      login: (body) => postLogin(http, body),
+      getGoogleOAuthStart: (redirectUri) => getGoogleOAuthStart(http, redirectUri),
+      postGoogleOAuthCallback: (body) => postGoogleOAuthCallback(http, body),
+      refresh: (body) => postRefresh(http, body),
+      logout: (body) => postLogout(http, body),
+      me: (accessToken) => getMe(http, accessToken)
+    }
+  };
+}
+
+exports.createApiClient = createApiClient;
+exports.getGoogleOAuthStart = getGoogleOAuthStart;
+exports.getMe = getMe;
+exports.postGoogleOAuthCallback = postGoogleOAuthCallback;
+exports.postLogin = postLogin;
+exports.postLogout = postLogout;
+exports.postRefresh = postRefresh;
+exports.postRegister = postRegister;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/endpoints/auth.ts","../src/endpoints/health-check.ts","../src/create-api-client.ts"],"names":[],"mappings":";;;AAcA,IAAM,SAAA,GAAY,cAAA;AAKlB,eAAsB,YAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,SAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,SAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,MAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,mBAAA,CACpB,MACA,WAAA,EACiD;AACjD,EAAA,MAAM,CAAA,GAAI,IAAI,eAAA,CAAgB,EAAE,aAAa,CAAA;AAC7C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,GAAA;AAAA,IAC1B,CAAA,EAAG,SAAS,CAAA,oBAAA,EAAuB,CAAA,CAAE,UAAU,CAAA;AAAA,GACjD;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,uBAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,sBAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,WAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,QAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,UAAA,CAAW,MAAkB,IAAA,EAAoC;AACrF,EAAA,MAAM,IAAA,CAAK,IAAA,CAA+B,CAAA,EAAG,SAAS,WAAW,IAAI,CAAA;AACvE;AAKA,eAAsB,KAAA,CACpB,MACA,WAAA,EACyC;AACzC,EAAA,MAAM,EAAE,MAAK,GAAI,MAAM,KAAK,GAAA,CAAoC,CAAA,EAAG,SAAS,CAAA,GAAA,CAAA,EAAO;AAAA,IACjF,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,WAAW,CAAA,CAAA;AAAG,GACnD,CAAA;AACD,EAAA,OAAO,IAAA;AACT;;;ACpGA,IAAM,iBAAA,GAAoB,sBAAA;AAY1B,eAAsB,iBAAiB,IAAA,EAAsD;AAC3F,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,KAAS,MAAM,IAAA,CAAK,IAA+B,iBAAiB,CAAA;AAElF,EAAA,OAAO,IAAA;AACT;;;ACqBO,SAAS,gBAAgB,OAAA,EAA4C;AAC1E,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,MAAM,gBAAA,CAAiB,IAAI,CAAA;AAAA,IACxC,IAAA,EAAM;AAAA,MACJ,QAAA,EAAU,CAAC,IAAA,KAAS,YAAA,CAAa,MAAM,IAAI,CAAA;AAAA,MAC3C,KAAA,EAAO,CAAC,IAAA,KAAS,SAAA,CAAU,MAAM,IAAI,CAAA;AAAA,MACrC,mBAAA,EAAqB,CAAC,WAAA,KAAgB,mBAAA,CAAoB,MAAM,WAAW,CAAA;AAAA,MAC3E,uBAAA,EAAyB,CAAC,IAAA,KAAS,uBAAA,CAAwB,MAAM,IAAI,CAAA;AAAA,MACrE,OAAA,EAAS,CAAC,IAAA,KAAS,WAAA,CAAY,MAAM,IAAI,CAAA;AAAA,MACzC,MAAA,EAAQ,CAAC,IAAA,KAAS,UAAA,CAAW,MAAM,IAAI,CAAA;AAAA,MACvC,EAAA,EAAI,CAAC,WAAA,KAAgB,KAAA,CAAM,MAAM,WAAW;AAAA;AAC9C,GACF;AACF","file":"index.js","sourcesContent":["import type {\n  AuthSessionResponse,\n  AuthUserResponse,\n  IApiResponse,\n  LoginRequest,\n  LogoutRequest,\n  OAuthGoogleCallbackRequest,\n  OAuthGoogleStartResponse,\n  RefreshRequest,\n  RegisterRequest,\n} from '@kulkan/kulterra-contracts';\n\nimport type { HttpClient } from '../http-client';\n\nconst AUTH_BASE = '/api/v1/auth' as const;\n\n/**\n * POST /api/v1/auth/register\n */\nexport async function postRegister(\n  http: HttpClient,\n  body: RegisterRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, RegisterRequest>(\n    `${AUTH_BASE}/register`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/login\n */\nexport async function postLogin(\n  http: HttpClient,\n  body: LoginRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, LoginRequest>(\n    `${AUTH_BASE}/login`,\n    body,\n  );\n  return data;\n}\n\n/**\n * GET /api/v1/auth/oauth/google/start?redirectUri=...\n */\nexport async function getGoogleOAuthStart(\n  http: HttpClient,\n  redirectUri: string,\n): Promise<IApiResponse<OAuthGoogleStartResponse>> {\n  const q = new URLSearchParams({ redirectUri });\n  const { data } = await http.get<IApiResponse<OAuthGoogleStartResponse>>(\n    `${AUTH_BASE}/oauth/google/start?${q.toString()}`,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/oauth/google/callback\n */\nexport async function postGoogleOAuthCallback(\n  http: HttpClient,\n  body: OAuthGoogleCallbackRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, OAuthGoogleCallbackRequest>(\n    `${AUTH_BASE}/oauth/google/callback`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/refresh\n */\nexport async function postRefresh(\n  http: HttpClient,\n  body: RefreshRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, RefreshRequest>(\n    `${AUTH_BASE}/refresh`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/logout — 204 No Content (no JSON body).\n */\nexport async function postLogout(http: HttpClient, body: LogoutRequest): Promise<void> {\n  await http.post<undefined, LogoutRequest>(`${AUTH_BASE}/logout`, body);\n}\n\n/**\n * GET /api/v1/auth/me — requires `Authorization: Bearer <accessToken>`.\n */\nexport async function getMe(\n  http: HttpClient,\n  accessToken: string,\n): Promise<IApiResponse<AuthUserResponse>> {\n  const { data } = await http.get<IApiResponse<AuthUserResponse>>(`${AUTH_BASE}/me`, {\n    headers: { Authorization: `Bearer ${accessToken}` },\n  });\n  return data;\n}\n","import type { IApiResponse, HealthCheck } from '@kulkan/kulterra-contracts';\nimport type { HttpClient } from '../http-client';\n\n/** Same path as `/api/${v1}/health-check` on the server when `v1` is the string `'v1'`. */\nconst HEALTH_CHECK_PATH = '/api/v1/health-check' as const;\n\n/**\n * GET /api/v1/health-check — server liveness.\n *\n * Returns the full JSON the server sends (`IApiResponse<HealthCheck>`).\n *\n * **Why not `data.data` here?** Adapters like Axios wrap the HTTP body in a property also\n * called `data`. That outer `data` is the entire `res.json(...)` object. The inner\n * `IApiResponse.data` is the `HealthCheck` payload — use `.data` on the **returned** value,\n * e.g. `(await fetchHealthCheck(http)).data`.\n */\nexport async function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<HealthCheck>> {\n  const { data: body } = await http.get<IApiResponse<HealthCheck>>(HEALTH_CHECK_PATH);\n\n  return body;\n}\n","import {\n  getGoogleOAuthStart,\n  getMe,\n  postGoogleOAuthCallback,\n  postLogin,\n  postLogout,\n  postRefresh,\n  postRegister,\n} from './endpoints/auth';\nimport { fetchHealthCheck } from './endpoints/health-check';\nimport type { HttpClient } from './http-client';\n\nexport interface CreateApiClientOptions {\n  /**\n   * Preconfigured HTTP client (e.g. Axios instance with `baseURL` set).\n   * Paths in this library are relative to that base (e.g. `/api/v1/...`).\n   * Both `get` and `post` are required for auth flows.\n   */\n  readonly http: HttpClient;\n}\n\nexport interface ApiClient {\n  readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;\n  readonly auth: {\n    readonly register: (\n      body: Parameters<typeof postRegister>[1],\n    ) => ReturnType<typeof postRegister>;\n    readonly login: (body: Parameters<typeof postLogin>[1]) => ReturnType<typeof postLogin>;\n    readonly getGoogleOAuthStart: (redirectUri: string) => ReturnType<typeof getGoogleOAuthStart>;\n    readonly postGoogleOAuthCallback: (\n      body: Parameters<typeof postGoogleOAuthCallback>[1],\n    ) => ReturnType<typeof postGoogleOAuthCallback>;\n    readonly refresh: (body: Parameters<typeof postRefresh>[1]) => ReturnType<typeof postRefresh>;\n    readonly logout: (body: Parameters<typeof postLogout>[1]) => ReturnType<typeof postLogout>;\n    readonly me: (accessToken: string) => ReturnType<typeof getMe>;\n  };\n}\n\n/**\n * Creates a typed API client backed by the provided HTTP implementation.\n */\nexport function createApiClient(options: CreateApiClientOptions): ApiClient {\n  const { http } = options;\n\n  return {\n    healthCheck: () => fetchHealthCheck(http),\n    auth: {\n      register: (body) => postRegister(http, body),\n      login: (body) => postLogin(http, body),\n      getGoogleOAuthStart: (redirectUri) => getGoogleOAuthStart(http, redirectUri),\n      postGoogleOAuthCallback: (body) => postGoogleOAuthCallback(http, body),\n      refresh: (body) => postRefresh(http, body),\n      logout: (body) => postLogout(http, body),\n      me: (accessToken) => getMe(http, accessToken),\n    },\n  };\n}\n"]}

package/dist/index.mjs

@@ -0,0 +1,74 @@
+// src/endpoints/auth.ts
+var AUTH_BASE = "/api/v1/auth";
+async function postRegister(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/register`,
+    body
+  );
+  return data;
+}
+async function postLogin(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/login`,
+    body
+  );
+  return data;
+}
+async function getGoogleOAuthStart(http, redirectUri) {
+  const q = new URLSearchParams({ redirectUri });
+  const { data } = await http.get(
+    `${AUTH_BASE}/oauth/google/start?${q.toString()}`
+  );
+  return data;
+}
+async function postGoogleOAuthCallback(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/oauth/google/callback`,
+    body
+  );
+  return data;
+}
+async function postRefresh(http, body) {
+  const { data } = await http.post(
+    `${AUTH_BASE}/refresh`,
+    body
+  );
+  return data;
+}
+async function postLogout(http, body) {
+  await http.post(`${AUTH_BASE}/logout`, body);
+}
+async function getMe(http, accessToken) {
+  const { data } = await http.get(`${AUTH_BASE}/me`, {
+    headers: { Authorization: `Bearer ${accessToken}` }
+  });
+  return data;
+}
+
+// src/endpoints/health-check.ts
+var HEALTH_CHECK_PATH = "/api/v1/health-check";
+async function fetchHealthCheck(http) {
+  const { data: body } = await http.get(HEALTH_CHECK_PATH);
+  return body;
+}
+
+// src/create-api-client.ts
+function createApiClient(options) {
+  const { http } = options;
+  return {
+    healthCheck: () => fetchHealthCheck(http),
+    auth: {
+      register: (body) => postRegister(http, body),
+      login: (body) => postLogin(http, body),
+      getGoogleOAuthStart: (redirectUri) => getGoogleOAuthStart(http, redirectUri),
+      postGoogleOAuthCallback: (body) => postGoogleOAuthCallback(http, body),
+      refresh: (body) => postRefresh(http, body),
+      logout: (body) => postLogout(http, body),
+      me: (accessToken) => getMe(http, accessToken)
+    }
+  };
+}
+
+export { createApiClient, getGoogleOAuthStart, getMe, postGoogleOAuthCallback, postLogin, postLogout, postRefresh, postRegister };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/endpoints/auth.ts","../src/endpoints/health-check.ts","../src/create-api-client.ts"],"names":[],"mappings":";AAcA,IAAM,SAAA,GAAY,cAAA;AAKlB,eAAsB,YAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,SAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,SAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,MAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,mBAAA,CACpB,MACA,WAAA,EACiD;AACjD,EAAA,MAAM,CAAA,GAAI,IAAI,eAAA,CAAgB,EAAE,aAAa,CAAA;AAC7C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,GAAA;AAAA,IAC1B,CAAA,EAAG,SAAS,CAAA,oBAAA,EAAuB,CAAA,CAAE,UAAU,CAAA;AAAA,GACjD;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,uBAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,sBAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,WAAA,CACpB,MACA,IAAA,EAC4C;AAC5C,EAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,IAAA,CAAK,IAAA;AAAA,IAC1B,GAAG,SAAS,CAAA,QAAA,CAAA;AAAA,IACZ;AAAA,GACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,eAAsB,UAAA,CAAW,MAAkB,IAAA,EAAoC;AACrF,EAAA,MAAM,IAAA,CAAK,IAAA,CAA+B,CAAA,EAAG,SAAS,WAAW,IAAI,CAAA;AACvE;AAKA,eAAsB,KAAA,CACpB,MACA,WAAA,EACyC;AACzC,EAAA,MAAM,EAAE,MAAK,GAAI,MAAM,KAAK,GAAA,CAAoC,CAAA,EAAG,SAAS,CAAA,GAAA,CAAA,EAAO;AAAA,IACjF,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,WAAW,CAAA,CAAA;AAAG,GACnD,CAAA;AACD,EAAA,OAAO,IAAA;AACT;;;ACpGA,IAAM,iBAAA,GAAoB,sBAAA;AAY1B,eAAsB,iBAAiB,IAAA,EAAsD;AAC3F,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,KAAS,MAAM,IAAA,CAAK,IAA+B,iBAAiB,CAAA;AAElF,EAAA,OAAO,IAAA;AACT;;;ACqBO,SAAS,gBAAgB,OAAA,EAA4C;AAC1E,EAAA,MAAM,EAAE,MAAK,GAAI,OAAA;AAEjB,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,MAAM,gBAAA,CAAiB,IAAI,CAAA;AAAA,IACxC,IAAA,EAAM;AAAA,MACJ,QAAA,EAAU,CAAC,IAAA,KAAS,YAAA,CAAa,MAAM,IAAI,CAAA;AAAA,MAC3C,KAAA,EAAO,CAAC,IAAA,KAAS,SAAA,CAAU,MAAM,IAAI,CAAA;AAAA,MACrC,mBAAA,EAAqB,CAAC,WAAA,KAAgB,mBAAA,CAAoB,MAAM,WAAW,CAAA;AAAA,MAC3E,uBAAA,EAAyB,CAAC,IAAA,KAAS,uBAAA,CAAwB,MAAM,IAAI,CAAA;AAAA,MACrE,OAAA,EAAS,CAAC,IAAA,KAAS,WAAA,CAAY,MAAM,IAAI,CAAA;AAAA,MACzC,MAAA,EAAQ,CAAC,IAAA,KAAS,UAAA,CAAW,MAAM,IAAI,CAAA;AAAA,MACvC,EAAA,EAAI,CAAC,WAAA,KAAgB,KAAA,CAAM,MAAM,WAAW;AAAA;AAC9C,GACF;AACF","file":"index.mjs","sourcesContent":["import type {\n  AuthSessionResponse,\n  AuthUserResponse,\n  IApiResponse,\n  LoginRequest,\n  LogoutRequest,\n  OAuthGoogleCallbackRequest,\n  OAuthGoogleStartResponse,\n  RefreshRequest,\n  RegisterRequest,\n} from '@kulkan/kulterra-contracts';\n\nimport type { HttpClient } from '../http-client';\n\nconst AUTH_BASE = '/api/v1/auth' as const;\n\n/**\n * POST /api/v1/auth/register\n */\nexport async function postRegister(\n  http: HttpClient,\n  body: RegisterRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, RegisterRequest>(\n    `${AUTH_BASE}/register`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/login\n */\nexport async function postLogin(\n  http: HttpClient,\n  body: LoginRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, LoginRequest>(\n    `${AUTH_BASE}/login`,\n    body,\n  );\n  return data;\n}\n\n/**\n * GET /api/v1/auth/oauth/google/start?redirectUri=...\n */\nexport async function getGoogleOAuthStart(\n  http: HttpClient,\n  redirectUri: string,\n): Promise<IApiResponse<OAuthGoogleStartResponse>> {\n  const q = new URLSearchParams({ redirectUri });\n  const { data } = await http.get<IApiResponse<OAuthGoogleStartResponse>>(\n    `${AUTH_BASE}/oauth/google/start?${q.toString()}`,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/oauth/google/callback\n */\nexport async function postGoogleOAuthCallback(\n  http: HttpClient,\n  body: OAuthGoogleCallbackRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, OAuthGoogleCallbackRequest>(\n    `${AUTH_BASE}/oauth/google/callback`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/refresh\n */\nexport async function postRefresh(\n  http: HttpClient,\n  body: RefreshRequest,\n): Promise<IApiResponse<AuthSessionResponse>> {\n  const { data } = await http.post<IApiResponse<AuthSessionResponse>, RefreshRequest>(\n    `${AUTH_BASE}/refresh`,\n    body,\n  );\n  return data;\n}\n\n/**\n * POST /api/v1/auth/logout — 204 No Content (no JSON body).\n */\nexport async function postLogout(http: HttpClient, body: LogoutRequest): Promise<void> {\n  await http.post<undefined, LogoutRequest>(`${AUTH_BASE}/logout`, body);\n}\n\n/**\n * GET /api/v1/auth/me — requires `Authorization: Bearer <accessToken>`.\n */\nexport async function getMe(\n  http: HttpClient,\n  accessToken: string,\n): Promise<IApiResponse<AuthUserResponse>> {\n  const { data } = await http.get<IApiResponse<AuthUserResponse>>(`${AUTH_BASE}/me`, {\n    headers: { Authorization: `Bearer ${accessToken}` },\n  });\n  return data;\n}\n","import type { IApiResponse, HealthCheck } from '@kulkan/kulterra-contracts';\nimport type { HttpClient } from '../http-client';\n\n/** Same path as `/api/${v1}/health-check` on the server when `v1` is the string `'v1'`. */\nconst HEALTH_CHECK_PATH = '/api/v1/health-check' as const;\n\n/**\n * GET /api/v1/health-check — server liveness.\n *\n * Returns the full JSON the server sends (`IApiResponse<HealthCheck>`).\n *\n * **Why not `data.data` here?** Adapters like Axios wrap the HTTP body in a property also\n * called `data`. That outer `data` is the entire `res.json(...)` object. The inner\n * `IApiResponse.data` is the `HealthCheck` payload — use `.data` on the **returned** value,\n * e.g. `(await fetchHealthCheck(http)).data`.\n */\nexport async function fetchHealthCheck(http: HttpClient): Promise<IApiResponse<HealthCheck>> {\n  const { data: body } = await http.get<IApiResponse<HealthCheck>>(HEALTH_CHECK_PATH);\n\n  return body;\n}\n","import {\n  getGoogleOAuthStart,\n  getMe,\n  postGoogleOAuthCallback,\n  postLogin,\n  postLogout,\n  postRefresh,\n  postRegister,\n} from './endpoints/auth';\nimport { fetchHealthCheck } from './endpoints/health-check';\nimport type { HttpClient } from './http-client';\n\nexport interface CreateApiClientOptions {\n  /**\n   * Preconfigured HTTP client (e.g. Axios instance with `baseURL` set).\n   * Paths in this library are relative to that base (e.g. `/api/v1/...`).\n   * Both `get` and `post` are required for auth flows.\n   */\n  readonly http: HttpClient;\n}\n\nexport interface ApiClient {\n  readonly healthCheck: () => ReturnType<typeof fetchHealthCheck>;\n  readonly auth: {\n    readonly register: (\n      body: Parameters<typeof postRegister>[1],\n    ) => ReturnType<typeof postRegister>;\n    readonly login: (body: Parameters<typeof postLogin>[1]) => ReturnType<typeof postLogin>;\n    readonly getGoogleOAuthStart: (redirectUri: string) => ReturnType<typeof getGoogleOAuthStart>;\n    readonly postGoogleOAuthCallback: (\n      body: Parameters<typeof postGoogleOAuthCallback>[1],\n    ) => ReturnType<typeof postGoogleOAuthCallback>;\n    readonly refresh: (body: Parameters<typeof postRefresh>[1]) => ReturnType<typeof postRefresh>;\n    readonly logout: (body: Parameters<typeof postLogout>[1]) => ReturnType<typeof postLogout>;\n    readonly me: (accessToken: string) => ReturnType<typeof getMe>;\n  };\n}\n\n/**\n * Creates a typed API client backed by the provided HTTP implementation.\n */\nexport function createApiClient(options: CreateApiClientOptions): ApiClient {\n  const { http } = options;\n\n  return {\n    healthCheck: () => fetchHealthCheck(http),\n    auth: {\n      register: (body) => postRegister(http, body),\n      login: (body) => postLogin(http, body),\n      getGoogleOAuthStart: (redirectUri) => getGoogleOAuthStart(http, redirectUri),\n      postGoogleOAuthCallback: (body) => postGoogleOAuthCallback(http, body),\n      refresh: (body) => postRefresh(http, body),\n      logout: (body) => postLogout(http, body),\n      me: (accessToken) => getMe(http, accessToken),\n    },\n  };\n}\n"]}

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "@kulkan/kulterra-api-client",
+  "version": "1.1.1",
+  "description": "Client used to interact with KulTerra project API",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js",
+      "default": "./dist/index.mjs"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "lint-staged": {
+    "src/**/*.{ts,tsx}": [
+      "eslint --fix --max-warnings 0",
+      "prettier --write"
+    ],
+    "tsup.config.ts": "prettier --write",
+    "*.{json,md}": "prettier --write"
+  },
+  "engines": {
+    "node": ">=18.18.0"
+  },
+  "keywords": [
+    "types",
+    "typescript",
+    "shared"
+  ],
+  "author": "",
+  "license": "MIT",
+  "devDependencies": {
+    "@kulkan/kulterra-contracts": "1.1.5",
+    "@eslint/js": "^10.0.1",
+    "@types/express": "^5.0.5",
+    "@types/node": "^24.10.0",
+    "eslint": "^10.1.0",
+    "eslint-config-prettier": "^10.1.8",
+    "husky": "^9.1.7",
+    "lint-staged": "^16.4.0",
+    "prettier": "^3.8.1",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.58.0"
+  },
+  "peerDependencies": {
+    "@kulkan/kulterra-contracts": ">=1.1.5"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint . --cache --cache-location .eslintcache",
+    "lint:fix": "eslint . --fix --cache --cache-location .eslintcache",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "validate": "pnpm run typecheck && pnpm run lint && pnpm run format:check",
+    "publish:npm": "pnpm publish --access public --no-git-checks"
+  }
+}