@molecule/app-http 1.5.5 → 1.5.6

package/README.md

@@ -3,7 +3,7 @@ AUTO-GENERATED — DO NOT EDIT THIS FILE.
 Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
 Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
 To change this document, edit the module-level JSDoc in src/index.ts.
-Generated: 2026-11-06T02:49:46.331Z
+Generated: 2026-11-06T22:35:11.084Z
 -->
 
 # @molecule/app-http
@@ -1111,9 +1111,10 @@ Two mistakes that break in preview/production (seen in real imported apps):
   stay in YOUR API; the browser calls your API and the API uses the secret server-side.
   Only a publishable/public key may ever be client-side.
 
-Auth (the bearer token / session cookie) is attached by the client's interceptors — do not
-read a token from `localStorage` or hand-attach it (the token is memory-only; see the user
-resource).
+Auth (the bearer token / session cookie) is attached by the bonded client's
+interceptors and token source. Keep persistence in `@molecule/app-auth`'s
+`AuthClientConfig.storage`; use the bonded client instead of reading storage
+or hand-attaching headers in each component.
 An API that wants another scheme than `Bearer` (`Authorization: Token <jwt>`) passes
 `authScheme: 'Token'` to the client's CONSTRUCTOR — `setClient(createFetchClient({ baseURL,
 authScheme: 'Token' }))`, or the bonded provider's constructor

package/dist/index.d.ts

@@ -56,9 +56,10 @@
  *   stay in YOUR API; the browser calls your API and the API uses the secret server-side.
  *   Only a publishable/public key may ever be client-side.
  *
- * Auth (the bearer token / session cookie) is attached by the client's interceptors — do not
- * read a token from `localStorage` or hand-attach it (the token is memory-only; see the user
- * resource).
+ * Auth (the bearer token / session cookie) is attached by the bonded client's
+ * interceptors and token source. Keep persistence in `@molecule/app-auth`'s
+ * `AuthClientConfig.storage`; use the bonded client instead of reading storage
+ * or hand-attaching headers in each component.
  * An API that wants another scheme than `Bearer` (`Authorization: Token <jwt>`) passes
  * `authScheme: 'Token'` to the client's CONSTRUCTOR — `setClient(createFetchClient({ baseURL,
  * authScheme: 'Token' }))`, or the bonded provider's constructor

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuHG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwHG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA"}

package/dist/index.js

@@ -56,9 +56,10 @@
  *   stay in YOUR API; the browser calls your API and the API uses the secret server-side.
  *   Only a publishable/public key may ever be client-side.
  *
- * Auth (the bearer token / session cookie) is attached by the client's interceptors — do not
- * read a token from `localStorage` or hand-attach it (the token is memory-only; see the user
- * resource).
+ * Auth (the bearer token / session cookie) is attached by the bonded client's
+ * interceptors and token source. Keep persistence in `@molecule/app-auth`'s
+ * `AuthClientConfig.storage`; use the bonded client instead of reading storage
+ * or hand-attaching headers in each component.
  * An API that wants another scheme than `Bearer` (`Authorization: Token <jwt>`) passes
  * `authScheme: 'Token'` to the client's CONSTRUCTOR — `setClient(createFetchClient({ baseURL,
  * authScheme: 'Token' }))`, or the bonded provider's constructor

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuHG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwHG;AAEH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA;AACjC,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/app-http",
-  "version": "1.5.5",
+  "version": "1.5.6",
   "description": "Client HTTP interface for molecule.dev",
   "type": "module",
   "main": "dist/index.js",