@molecule/app-auth 1.0.0

package/dist/types.d.ts

@@ -0,0 +1,387 @@
+/**
+ * Type definitions for client-side authentication.
+ *
+ * @module
+ */
+/**
+ * User profile information.
+ */
+export interface UserProfile {
+    /**
+     * Unique user identifier.
+     */
+    id: string;
+    /**
+     * User's email address.
+     */
+    email?: string;
+    /**
+     * User's display name.
+     */
+    name?: string;
+    /**
+     * User's avatar/profile image URL.
+     */
+    avatar?: string;
+    /**
+     * User's roles or permissions.
+     */
+    roles?: string[];
+    /**
+     * Additional metadata.
+     */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Email/password login credentials with optional "remember me" flag.
+ */
+export interface LoginCredentials {
+    /**
+     * Email or username.
+     */
+    email: string;
+    /**
+     * Password.
+     */
+    password: string;
+    /**
+     * Whether to remember the session.
+     */
+    remember?: boolean;
+    /**
+     * Time-based one-time password (TOTP) from the user's authenticator app.
+     * Required when the account has two-factor auth enabled — the server
+     * answers `{ twoFactorRequired: true }` (HTTP 206) until a valid token
+     * is supplied.
+     */
+    twoFactorToken?: string;
+}
+/**
+ * New user registration payload (email, password, optional name and metadata).
+ */
+export interface RegisterData {
+    /**
+     * Email address.
+     */
+    email: string;
+    /**
+     * Password.
+     */
+    password: string;
+    /**
+     * Display name.
+     */
+    name?: string;
+    /**
+     * Additional registration fields.
+     */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Successful authentication result containing the user, access/refresh tokens, and expiration.
+ */
+export interface AuthResult<T = UserProfile> {
+    /**
+     * Authenticated user.
+     */
+    user: T;
+    /**
+     * Access token (for token-based auth).
+     */
+    accessToken?: string;
+    /**
+     * Refresh token (for token-based auth).
+     */
+    refreshToken?: string;
+    /**
+     * Token expiration time (Unix timestamp).
+     */
+    expiresAt?: number;
+    /**
+     * Set (with HTTP 206) when the account has two-factor auth enabled and the
+     * login did not include a valid `twoFactorToken`. No tokens or user are
+     * issued until login is retried with the TOTP — callers must check this
+     * flag BEFORE treating the result as a successful authentication.
+     */
+    twoFactorRequired?: boolean;
+}
+/**
+ * Password reset request data.
+ */
+export interface PasswordResetRequest {
+    /**
+     * Email address.
+     */
+    email: string;
+}
+/**
+ * Password reset confirmation data.
+ */
+export interface PasswordResetConfirm {
+    /**
+     * Reset token.
+     */
+    token: string;
+    /**
+     * New password.
+     */
+    password: string;
+}
+/**
+ * Reactive authentication state snapshot (initialized, authenticated, user, loading, and error).
+ */
+export interface AuthState<T = UserProfile> {
+    /**
+     * Whether auth state has been initialized.
+     */
+    initialized: boolean;
+    /**
+     * Whether the user is authenticated.
+     */
+    authenticated: boolean;
+    /**
+     * Current user (if authenticated).
+     */
+    user: T | null;
+    /**
+     * Whether an auth operation is in progress.
+     */
+    loading: boolean;
+    /**
+     * Last auth error (if any).
+     */
+    error: string | null;
+}
+/**
+ * Auth event types.
+ */
+export type AuthEvent = {
+    type: 'login';
+    user: UserProfile;
+} | {
+    type: 'logout';
+} | {
+    type: 'register';
+    user: UserProfile;
+} | {
+    type: 'refresh';
+} | {
+    type: 'error';
+    error: string;
+};
+/**
+ * Callback invoked when an authentication event occurs (login, logout, etc.).
+ */
+export type AuthEventListener = (event: AuthEvent) => void;
+/**
+ * Auth client interface that all auth bond packages must implement.
+ * Provides login/logout/register flows, token management, profile
+ * updates, and auth state subscription.
+ */
+export interface AuthClient<T = UserProfile> {
+    /**
+     * Returns the current authentication state snapshot.
+     */
+    getState(): AuthState<T>;
+    /**
+     * Returns whether the user is currently authenticated.
+     */
+    isAuthenticated(): boolean;
+    /**
+     * Gets the current user.
+     */
+    getUser(): T | null;
+    /**
+     * Updates the cached user object (state + persistent storage) without
+     * hitting the network. Intended for local refreshes after a per-app
+     * mutation (e.g., the user just PATCHed their own profile and the
+     * server returned the canonical row). Does NOT change tokens.
+     */
+    setUser(user: T | null): void;
+    /**
+     * Gets the current access token.
+     */
+    getAccessToken(): string | null;
+    /**
+     * Stores the access token in the configured token storage adapter (in-memory
+     * by default). Use this to seed the token after an out-of-band exchange (e.g.
+     * the OAuth code→token redirect) instead of writing to `localStorage` directly,
+     * which would violate the in-memory-default storage contract and make the bearer
+     * token JS-readable (XSS-exfiltratable). Pass `null` to clear it.
+     */
+    setAccessToken(token: string | null): void;
+    /**
+     * Gets the refresh token.
+     */
+    getRefreshToken(): string | null;
+    /**
+     * Logs in with credentials.
+     */
+    login(credentials: LoginCredentials): Promise<AuthResult<T>>;
+    /**
+     * Logs out the current user.
+     */
+    logout(): Promise<void>;
+    /**
+     * Registers a new user.
+     */
+    register(data: RegisterData): Promise<AuthResult<T>>;
+    /**
+     * Refreshes the access token.
+     */
+    refresh(): Promise<AuthResult<T>>;
+    /**
+     * Requests a password reset.
+     */
+    requestPasswordReset(data: PasswordResetRequest): Promise<void>;
+    /**
+     * Confirms a password reset.
+     */
+    confirmPasswordReset(data: PasswordResetConfirm): Promise<void>;
+    /**
+     * Updates the current user's profile.
+     */
+    updateProfile(data: Partial<T>): Promise<T>;
+    /**
+     * Changes the current user's password.
+     */
+    changePassword(oldPassword: string, newPassword: string): Promise<void>;
+    /**
+     * Initializes auth state (e.g., from stored tokens).
+     */
+    initialize(): Promise<void>;
+    /**
+     * Subscribes to auth state changes.
+     */
+    subscribe(callback: (state: AuthState<T>) => void): () => void;
+    /**
+     * Subscribes to auth state changes (alias for subscribe).
+     */
+    onAuthChange(callback: (state: AuthState<T>) => void): () => void;
+    /**
+     * Gets the current access token (alias for getAccessToken).
+     */
+    getToken?(): string | null;
+    /**
+     * Adds an auth event listener.
+     */
+    addEventListener(listener: AuthEventListener): () => void;
+    /**
+     * Destroys the auth client.
+     */
+    destroy(): void;
+}
+/**
+ * Minimal key-value storage adapter used by the auth client for
+ * persisting tokens and user data.
+ */
+export interface StorageAdapter {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+}
+/**
+ * Configuration options for creating an auth client, including API
+ * endpoints, storage strategy, token refresh, and OAuth providers.
+ */
+export interface AuthClientConfig {
+    /**
+     * API base URL.
+     */
+    baseURL?: string;
+    /**
+     * Login endpoint.
+     */
+    loginEndpoint?: string;
+    /**
+     * Logout endpoint.
+     */
+    logoutEndpoint?: string;
+    /**
+     * Register endpoint.
+     */
+    registerEndpoint?: string;
+    /**
+     * Refresh endpoint.
+     */
+    refreshEndpoint?: string;
+    /**
+     * User profile endpoint.
+     */
+    profileEndpoint?: string;
+    /**
+     * Current-user endpoint for session restore (default `/users/me`). Called by
+     * `initialize()` with credentials to re-establish the session from the
+     * httpOnly cookie after a full page load — the only way to stay logged in when
+     * the bearer token is held in memory (the secure default; a localStorage copy
+     * is XSS-exfiltratable). Must return the user (as `user` or `props`).
+     */
+    currentUserEndpoint?: string;
+    /**
+     * Storage key prefix.
+     */
+    storagePrefix?: string;
+    /**
+     * Token storage type or custom storage adapter.
+     * - 'memory': In-memory storage (lost on page refresh)
+     * - StorageAdapter: Custom storage implementation (e.g., from `@molecule/app-storage`)
+     *
+     * @example
+     * ```typescript
+     * // Use in-memory storage
+     * storage: 'memory'
+     *
+     * // Use custom storage from `@molecule/app-storage`
+     * import { getProvider } from '@molecule/app-storage'
+     * const storageProvider = getProvider()
+     * storage: {
+     *   getItem: (key) => storageProvider.get(key),
+     *   setItem: (key, value) => storageProvider.set(key, value),
+     *   removeItem: (key) => storageProvider.remove(key),
+     * }
+     * ```
+     */
+    storage?: 'memory' | StorageAdapter;
+    /**
+     * Auto refresh tokens before expiry.
+     */
+    autoRefresh?: boolean;
+    /**
+     * Refresh tokens this many seconds before expiry.
+     */
+    refreshBuffer?: number;
+    /**
+     * Forgot password / password reset request endpoint.
+     */
+    forgotPasswordEndpoint?: string;
+    /**
+     * Password reset confirmation endpoint.
+     */
+    resetPasswordEndpoint?: string;
+    /**
+     * Change password endpoint.
+     */
+    changePasswordEndpoint?: string;
+    /**
+     * Available OAuth providers (e.g., ['github', 'google', 'gitlab']).
+     */
+    oauthProviders?: string[];
+    /**
+     * OAuth endpoint path (default: '/oauth').
+     */
+    oauthEndpoint?: string;
+}
+/**
+ * Internal token storage interface for reading and writing access/refresh
+ * tokens and user profile data.
+ */
+export interface TokenStorage {
+    getAccessToken(): string | null;
+    setAccessToken(token: string | null): void;
+    getRefreshToken(): string | null;
+    setRefreshToken(token: string | null): void;
+    getUser<T = UserProfile>(): T | null;
+    setUser<T = UserProfile>(user: T | null): void;
+    clear(): void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAA;IAEV;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAElB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,WAAW;IACzC;;OAEG;IACH,IAAI,EAAE,CAAC,CAAA;IAEP;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAA;IAEb;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC,GAAG,WAAW;IACxC;;OAEG;IACH,WAAW,EAAE,OAAO,CAAA;IAEpB;;OAEG;IACH,aAAa,EAAE,OAAO,CAAA;IAEtB;;OAEG;IACH,IAAI,EAAE,CAAC,GAAG,IAAI,CAAA;IAEd;;OAEG;IACH,OAAO,EAAE,OAAO,CAAA;IAEhB;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAA;AAE1D;;;;GAIG;AACH,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,WAAW;IACzC;;OAEG;IACH,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAAA;IAExB;;OAEG;IACH,eAAe,IAAI,OAAO,CAAA;IAE1B;;OAEG;IACH,OAAO,IAAI,CAAC,GAAG,IAAI,CAAA;IAEnB;;;;;OAKG;IACH,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IAE7B;;OAEG;IACH,cAAc,IAAI,MAAM,GAAG,IAAI,CAAA;IAE/B;;;;;;OAMG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAE1C;;OAEG;IACH,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAEhC;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAE5D;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAEpD;;OAEG;IACH,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAEjC;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE/D;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE/D;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAE3C;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvE;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3B;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAE9D;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAEjE;;OAEG;IACH,QAAQ,CAAC,IAAI,MAAM,GAAG,IAAI,CAAA;IAE1B;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAAA;IAEzD;;OAEG;IACH,OAAO,IAAI,IAAI,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACnC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAE5B;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,cAAc,CAAA;IAEnC;;OAEG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IAErB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAE/B;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAE9B;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAE/B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IAEzB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,cAAc,IAAI,MAAM,GAAG,IAAI,CAAA;IAC/B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC1C,eAAe,IAAI,MAAM,GAAG,IAAI,CAAA;IAChC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC3C,OAAO,CAAC,CAAC,GAAG,WAAW,KAAK,CAAC,GAAG,IAAI,CAAA;IACpC,OAAO,CAAC,CAAC,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;IAC9C,KAAK,IAAI,IAAI,CAAA;CACd"}

package/dist/types.js

@@ -0,0 +1,7 @@
+/**
+ * Type definitions for client-side authentication.
+ *
+ * @module
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/utilities.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Convenience wrappers around the auth client methods.
+ *
+ * These delegate to the bonded auth client retrieved via `getClient()`.
+ *
+ * @module
+ */
+import type { AuthResult, LoginCredentials, RegisterData, UserProfile } from './types.js';
+/**
+ * Checks if the current user is authenticated.
+ *
+ * @returns `true` if the user has an active session.
+ */
+export declare const isAuthenticated: () => boolean;
+/**
+ * Returns the current user profile, or `null` if not authenticated.
+ * @returns The user profile, or `null` if not authenticated.
+ */
+export declare const getUser: <T extends UserProfile = UserProfile>() => T | null;
+/**
+ * Logs in with the given credentials (email/username + password).
+ *
+ * @param credentials - Email/username and password.
+ * @returns The auth result containing tokens and user profile.
+ */
+export declare const login: (credentials: LoginCredentials) => Promise<AuthResult>;
+/**
+ * Logs out the current user, clearing tokens and session state.
+ * @returns A promise that resolves when logout completes.
+ */
+export declare const logout: () => Promise<void>;
+/**
+ * Registers a new user account.
+ *
+ * @param data - Registration data (email, password, name, etc.).
+ * @returns The auth result containing tokens and user profile.
+ */
+export declare const register: (data: RegisterData) => Promise<AuthResult>;
+//# sourceMappingURL=utilities.d.ts.map

package/dist/utilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utilities.d.ts","sourceRoot":"","sources":["../src/utilities.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEzF;;;;GAIG;AACH,eAAO,MAAM,eAAe,QAAO,OAAwC,CAAA;AAE3E;;;GAGG;AACH,eAAO,MAAM,OAAO,GAAI,CAAC,SAAS,WAAW,GAAG,WAAW,OAAK,CAAC,GAAG,IAAgC,CAAA;AAEpG;;;;;GAKG;AACH,eAAO,MAAM,KAAK,GAAI,aAAa,gBAAgB,KAAG,OAAO,CAAC,UAAU,CACxC,CAAA;AAEhC;;;GAGG;AACH,eAAO,MAAM,MAAM,QAAO,OAAO,CAAC,IAAI,CAAyB,CAAA;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,GAAI,MAAM,YAAY,KAAG,OAAO,CAAC,UAAU,CAA+B,CAAA"}

package/dist/utilities.js

@@ -0,0 +1,39 @@
+/**
+ * Convenience wrappers around the auth client methods.
+ *
+ * These delegate to the bonded auth client retrieved via `getClient()`.
+ *
+ * @module
+ */
+import { getClient } from './provider.js';
+/**
+ * Checks if the current user is authenticated.
+ *
+ * @returns `true` if the user has an active session.
+ */
+export const isAuthenticated = () => getClient().isAuthenticated();
+/**
+ * Returns the current user profile, or `null` if not authenticated.
+ * @returns The user profile, or `null` if not authenticated.
+ */
+export const getUser = () => getClient().getUser();
+/**
+ * Logs in with the given credentials (email/username + password).
+ *
+ * @param credentials - Email/username and password.
+ * @returns The auth result containing tokens and user profile.
+ */
+export const login = (credentials) => getClient().login(credentials);
+/**
+ * Logs out the current user, clearing tokens and session state.
+ * @returns A promise that resolves when logout completes.
+ */
+export const logout = () => getClient().logout();
+/**
+ * Registers a new user account.
+ *
+ * @param data - Registration data (email, password, name, etc.).
+ * @returns The auth result containing tokens and user profile.
+ */
+export const register = (data) => getClient().register(data);
+//# sourceMappingURL=utilities.js.map

package/dist/utilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utilities.js","sourceRoot":"","sources":["../src/utilities.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAGzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAY,EAAE,CAAC,SAAS,EAAE,CAAC,eAAe,EAAE,CAAA;AAE3E;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,GAAkD,EAAE,CAAC,SAAS,EAAK,CAAC,OAAO,EAAE,CAAA;AAEpG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,WAA6B,EAAuB,EAAE,CAC1E,SAAS,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;AAEhC;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,GAAkB,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,CAAA;AAE/D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAkB,EAAuB,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@molecule/app-auth",
+  "version": "1.0.0",
+  "description": "Client-side authentication interface for molecule.dev",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "molecule",
+    "auth",
+    "authentication",
+    "jwt"
+  ],
+  "license": "Apache-2.0",
+  "peerDependencies": {
+    "@molecule/app-bond": "^1.0.0",
+    "@molecule/app-i18n": "^1.0.0",
+    "@molecule/app-logger": "^1.0.0"
+  },
+  "devDependencies": {
+    "@molecule/app-bond": "1.0.0",
+    "@molecule/app-i18n": "1.0.0",
+    "@molecule/app-logger": "1.0.0",
+    "@types/node": "26.1.2",
+    "typescript": "6.0.3",
+    "vitest": "4.1.10"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/molecule-dev/molecule.git",
+    "directory": "packages/app/core/auth"
+  },
+  "homepage": "https://github.com/molecule-dev/molecule/tree/main/packages/app/core/auth",
+  "bugs": "https://github.com/molecule-dev/molecule/issues",
+  "publishConfig": {
+    "access": "public"
+  }
+}