@molecule/app-solid 1.0.0

package/dist/primitives/oauth.js

@@ -0,0 +1,232 @@
+/**
+ * Solid.js primitive for OAuth authentication.
+ *
+ * Builds provider initiation URLs, starts the full-page redirect flow, and
+ * automatically handles the OAuth callback: when the page loads with a `code`
+ * (+ optional `state`) URL parameter and a stashed provider, the code is
+ * exchanged for a session via `POST {baseURL}{loginEndpoint}`.
+ *
+ * Session establishment prefers an auth client — an explicit
+ * {@link CreateOAuthOptions.authClient} override, else the surrounding
+ * `MoleculeProvider`'s client. Without any client, the code exchange itself
+ * has already established the httpOnly-cookie session server-side, so a
+ * user-carrying response still counts as a successful login.
+ *
+ * @module
+ */
+import { getOwner, onMount } from 'solid-js';
+import { getAuthClient } from '../context.js';
+/**
+ * Creates OAuth helpers.
+ *
+ * Automatically handles OAuth callbacks by detecting `code` and `state` URL
+ * parameters and exchanging them for a session:
+ *   - Inside a Solid owner (component setup / `createRoot`), the callback
+ *     handling is deferred to `onMount` so it runs client-side after mount.
+ *   - Outside an owner (a plain function call, e.g. bootstrap code), it runs
+ *     immediately at creation, browser-guarded.
+ *
+ * @param options - OAuth configuration
+ *
+ * @example
+ * ```tsx
+ * const { providers, getOAuthUrl, redirect } = createOAuth({
+ *   baseURL: 'https://api.example.com',
+ *   oauthProviders: ['github', 'google'],
+ *   onSuccess: () => navigate('/dashboard'),
+ *   onError: (error) => setErrorMessage(error),
+ * })
+ *
+ * return (
+ *   <For each={providers()}>
+ *     {(provider) => (
+ *       <button onClick={() => redirect(provider)}>
+ *         Login with {provider}
+ *       </button>
+ *     )}
+ *   </For>
+ * )
+ * ```
+ * @returns The created instance.
+ */
+export function createOAuth(options) {
+    const baseURL = options?.baseURL ?? '';
+    const oauthEndpoint = options?.oauthEndpoint ?? '/oauth';
+    const loginEndpoint = options?.loginEndpoint ?? '/users/log-in/oauth';
+    const providersList = options?.oauthProviders ?? [];
+    const providers = () => providersList;
+    // Resolve the auth client once at creation: an explicit override wins;
+    // otherwise fall back to the surrounding MoleculeProvider context.
+    let authClient = options?.authClient ?? null;
+    if (!authClient) {
+        try {
+            authClient = getAuthClient();
+        }
+        catch (_error) {
+            // Intentional noop: created outside a MoleculeProvider (or without auth
+            // configured). The helper still works — handleCallback falls back to the
+            // server-established httpOnly-cookie session (see its JSDoc).
+            authClient = null;
+        }
+    }
+    const getOAuthUrl = (provider) => {
+        // Encode the provider as a single path segment so a (future) caller passing an
+        // untrusted value can never inject a path/query/scheme into the opened URL —
+        // defense-in-depth on top of the upstream static provider allowlist. Plain
+        // provider names ('github', 'google') pass through unchanged.
+        return `${baseURL}${oauthEndpoint}/${encodeURIComponent(provider)}`;
+    };
+    /** Stash which provider initiated the flow so the callback knows it's ours. */
+    const stashProvider = (provider) => {
+        try {
+            sessionStorage.setItem('oauth_provider', provider);
+        }
+        catch (_error) {
+            /* SSR-safe — sessionStorage is unavailable in SSR/sandboxed environments */
+        }
+    };
+    /**
+     * Append the current page's PATH as `redirect_to` so the api's initiation
+     * endpoint (`GET /users/oauth/:provider`) builds a provider `redirect_uri`
+     * that lands the callback back on THIS page — the one with `createOAuth`
+     * mounted (e.g. `/login`) — instead of the app root, where nothing may be
+     * listening for the `code` param. Path only (no origin/query): the server
+     * validates it as a same-origin absolute path, so it can never become an
+     * open redirect. Servers that predate the param simply ignore it.
+     */
+    const withReturnPath = (url) => {
+        const path = typeof window !== 'undefined' ? window.location.pathname : '';
+        if (!path || path === '/')
+            return url;
+        return `${url}${url.includes('?') ? '&' : '?'}redirect_to=${encodeURIComponent(path)}`;
+    };
+    const redirect = (provider) => {
+        stashProvider(provider);
+        window.location.href = withReturnPath(getOAuthUrl(provider));
+    };
+    /** Surface a failure message to the configured error callback. */
+    const surfaceError = (error) => {
+        options?.onError?.(error);
+    };
+    /**
+     * Establish the authenticated session from an exchange result: seed the
+     * access token + user and let `initialize()` flip `authenticated`. Mirrors
+     * what `authClient.login()` does for password login. Returns whether a user
+     * was set (a result with no user is not a real session).
+     */
+    const establishSession = async (client, token, user) => {
+        // Seed the token via the auth client's configured token storage adapter
+        // (in-memory by default) — NOT localStorage directly. Writing the bearer
+        // token to localStorage violates the in-memory-default storage contract and
+        // makes it JS-readable (XSS-exfiltratable).
+        if (token)
+            client.setAccessToken(token);
+        if (user && typeof user === 'object') {
+            client.setUser(user);
+            await client.initialize();
+            return true;
+        }
+        return false;
+    };
+    const handleCallback = async () => {
+        if (typeof window === 'undefined')
+            return;
+        const params = new URLSearchParams(window.location.search);
+        const code = params.get('code');
+        const state = params.get('state');
+        if (!code)
+            return;
+        // Retrieve the provider that initiated the flow
+        let provider = null;
+        try {
+            provider = sessionStorage.getItem('oauth_provider');
+        }
+        catch (_error) {
+            /* SSR-safe — sessionStorage is unavailable in SSR/sandboxed environments */
+        }
+        if (!provider)
+            return;
+        // Clean up URL (remove code/state params) and sessionStorage
+        const cleanUrl = new URL(window.location.href);
+        cleanUrl.searchParams.delete('code');
+        cleanUrl.searchParams.delete('state');
+        window.history.replaceState({}, '', cleanUrl.toString());
+        try {
+            sessionStorage.removeItem('oauth_provider');
+        }
+        catch (_error) {
+            /* SSR-safe — sessionStorage is unavailable in SSR/sandboxed environments */
+        }
+        // Exchange code for session
+        try {
+            const response = await fetch(`${baseURL}${loginEndpoint}`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                credentials: 'include', // Send cookies (oauth_state) for state validation
+                body: JSON.stringify({
+                    server: provider,
+                    code,
+                    state: state || undefined,
+                    redirect_uri: window.location.origin,
+                }),
+            });
+            if (!response.ok) {
+                const data = (await response.json().catch(() => null));
+                surfaceError(data && typeof data.error === 'string' && data.error ? data.error : 'OAuth login failed');
+                return;
+            }
+            const data = await response.json().catch(() => null);
+            // Store the token from the response
+            const authHeader = response.headers.get('authorization') || response.headers.get('set-authorization');
+            const token = authHeader ? authHeader.replace('Bearer ', '') : null;
+            // The authenticated user is `props` (molecule resource convention) or `user`
+            // (generic AuthResult). OAuth issues no refresh token, so we carry the token +
+            // user to whoever will own the session.
+            const user = data && typeof data === 'object'
+                ? (data.props ??
+                    data.user ??
+                    null)
+                : null;
+            if (authClient) {
+                const ok = await establishSession(authClient, token, user);
+                if (ok)
+                    options?.onSuccess?.();
+                else
+                    surfaceError('OAuth login failed');
+                return;
+            }
+            // No auth client available: the server already established the
+            // httpOnly-cookie session during the code exchange, so a user-carrying
+            // response still counts as a successful login. A response with no user
+            // means no session was established — surface the failure.
+            if (user && typeof user === 'object')
+                options?.onSuccess?.();
+            else
+                surfaceError('OAuth login failed');
+        }
+        catch (err) {
+            surfaceError(err instanceof Error && err.message ? err.message : 'OAuth login failed');
+        }
+    };
+    // Auto-handle the OAuth callback:
+    //   - Inside a Solid owner (component setup / createRoot), defer to onMount
+    //     so the exchange runs client-side after the component mounts.
+    //   - Outside an owner (plain function call — e.g. bootstrap code), run
+    //     immediately, browser-guarded. handleCallback itself no-ops unless the
+    //     URL carries a `code` param and a provider was stashed.
+    if (getOwner()) {
+        onMount(() => {
+            void handleCallback();
+        });
+    }
+    else if (typeof window !== 'undefined') {
+        void handleCallback();
+    }
+    return {
+        providers,
+        getOAuthUrl,
+        redirect,
+        handleCallback,
+    };
+}
+//# sourceMappingURL=oauth.js.map

package/dist/primitives/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/primitives/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAI5C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAqD7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,WAAW,CAAC,OAA4B;IACtD,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,EAAE,CAAA;IACtC,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,QAAQ,CAAA;IACxD,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,qBAAqB,CAAA;IACrE,MAAM,aAAa,GAAG,OAAO,EAAE,cAAc,IAAI,EAAE,CAAA;IAEnD,MAAM,SAAS,GAAuB,GAAG,EAAE,CAAC,aAAa,CAAA;IAEzD,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,UAAU,GAA+B,OAAO,EAAE,UAAU,IAAI,IAAI,CAAA;IACxE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,UAAU,GAAG,aAAa,EAAE,CAAA;QAC9B,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,wEAAwE;YACxE,yEAAyE;YACzE,8DAA8D;YAC9D,UAAU,GAAG,IAAI,CAAA;QACnB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAU,EAAE;QAC/C,+EAA+E;QAC/E,6EAA6E;QAC7E,2EAA2E;QAC3E,8DAA8D;QAC9D,OAAO,GAAG,OAAO,GAAG,aAAa,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAA;IACrE,CAAC,CAAA;IAED,+EAA+E;IAC/E,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAQ,EAAE;QAC/C,IAAI,CAAC;YACH,cAAc,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACpD,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,4EAA4E;QAC9E,CAAC;IACH,CAAC,CAAA;IAED;;;;;;;;OAQG;IACH,MAAM,cAAc,GAAG,CAAC,GAAW,EAAU,EAAE;QAC7C,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1E,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,GAAG,CAAA;QACrC,OAAO,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAA;IACxF,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAQ,EAAE;QAC1C,aAAa,CAAC,QAAQ,CAAC,CAAA;QACvB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAA;IAED,kEAAkE;IAClE,MAAM,YAAY,GAAG,CAAC,KAAa,EAAQ,EAAE;QAC3C,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC,CAAA;IAED;;;;;OAKG;IACH,MAAM,gBAAgB,GAAG,KAAK,EAC5B,MAA2B,EAC3B,KAAoB,EACpB,IAAa,EACK,EAAE;QACpB,wEAAwE;QACxE,yEAAyE;QACzE,4EAA4E;QAC5E,4CAA4C;QAC5C,IAAI,KAAK;YAAE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;QACvC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpB,MAAM,MAAM,CAAC,UAAU,EAAE,CAAA;YACzB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;QAC/C,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAM;QAEzC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEjC,IAAI,CAAC,IAAI;YAAE,OAAM;QAEjB,gDAAgD;QAChD,IAAI,QAAQ,GAAkB,IAAI,CAAA;QAClC,IAAI,CAAC;YACH,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACrD,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,4EAA4E;QAC9E,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,OAAM;QAErB,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC9C,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACpC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC;YACH,cAAc,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAA;QAC7C,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,4EAA4E;QAC9E,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,aAAa,EAAE,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,WAAW,EAAE,SAAS,EAAE,kDAAkD;gBAC1E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM,EAAE,QAAQ;oBAChB,IAAI;oBACJ,KAAK,EAAE,KAAK,IAAI,SAAS;oBACzB,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;iBACrC,CAAC;aACH,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA+B,CAAA;gBACpF,YAAY,CACV,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CACzF,CAAA;gBACD,OAAM;YACR,CAAC;YAED,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YAC7D,oCAAoC;YACpC,MAAM,UAAU,GACd,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;YACpF,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAEnE,6EAA6E;YAC7E,+EAA+E;YAC/E,wCAAwC;YACxC,MAAM,IAAI,GACR,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAC9B,CAAC,CAAC,CAAE,IAA4C,CAAC,KAAK;oBACnD,IAA4C,CAAC,IAAI;oBAClD,IAAI,CAAC;gBACP,CAAC,CAAC,IAAI,CAAA;YAEV,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;gBAC1D,IAAI,EAAE;oBAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAA;;oBACzB,YAAY,CAAC,oBAAoB,CAAC,CAAA;gBACvC,OAAM;YACR,CAAC;YAED,+DAA+D;YAC/D,uEAAuE;YACvE,uEAAuE;YACvE,0DAA0D;YAC1D,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAA;;gBACvD,YAAY,CAAC,oBAAoB,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAA;QACxF,CAAC;IACH,CAAC,CAAA;IAED,kCAAkC;IAClC,4EAA4E;IAC5E,mEAAmE;IACnE,wEAAwE;IACxE,4EAA4E;IAC5E,6DAA6D;IAC7D,IAAI,QAAQ,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,EAAE;YACX,KAAK,cAAc,EAAE,CAAA;QACvB,CAAC,CAAC,CAAA;IACJ,CAAC;SAAM,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QACzC,KAAK,cAAc,EAAE,CAAA;IACvB,CAAC;IAED,OAAO;QACL,SAAS;QACT,WAAW;QACX,QAAQ;QACR,cAAc;KACf,CAAA;AACH,CAAC"}

package/dist/primitives/password-reset.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Solid.js primitive for password reset with async state tracking.
+ *
+ * @module
+ */
+import type { Accessor } from 'solid-js';
+import type { PasswordResetConfirm, PasswordResetRequest } from '@molecule/app-auth';
+import type { PromiseState } from '@molecule/app-utilities';
+/**
+ * Return type for createPasswordReset primitive.
+ */
+export interface CreatePasswordResetReturn {
+    requestState: Accessor<PromiseState<void>>;
+    confirmState: Accessor<PromiseState<void>>;
+    requestReset: (data: PasswordResetRequest) => Promise<void>;
+    confirmReset: (data: PasswordResetConfirm) => Promise<void>;
+    reset: () => void;
+}
+/**
+ * Creates a password reset primitive with async state tracking.
+ *
+ * @returns Password reset state and actions
+ *
+ * @example
+ * ```tsx
+ * const { requestState, confirmState, requestReset, confirmReset } = createPasswordReset()
+ *
+ * // Request phase
+ * <button
+ *   onClick={() => requestReset({ email: email() })}
+ *   disabled={requestState().status === 'pending'}
+ * >
+ *   Send Reset Email
+ * </button>
+ *
+ * // Confirm phase
+ * <button
+ *   onClick={() => confirmReset({ token: token(), password: password() })}
+ *   disabled={confirmState().status === 'pending'}
+ * >
+ *   Reset Password
+ * </button>
+ * ```
+ */
+export declare function createPasswordReset(): CreatePasswordResetReturn;
+//# sourceMappingURL=password-reset.d.ts.map

package/dist/primitives/password-reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.d.ts","sourceRoot":"","sources":["../../src/primitives/password-reset.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAK3D;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1C,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1C,YAAY,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,YAAY,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,mBAAmB,IAAI,yBAAyB,CAiB/D"}

package/dist/primitives/password-reset.js

@@ -0,0 +1,49 @@
+/**
+ * Solid.js primitive for password reset with async state tracking.
+ *
+ * @module
+ */
+import { getAuthClient } from '../context.js';
+import { createPromise } from './promise.js';
+/**
+ * Creates a password reset primitive with async state tracking.
+ *
+ * @returns Password reset state and actions
+ *
+ * @example
+ * ```tsx
+ * const { requestState, confirmState, requestReset, confirmReset } = createPasswordReset()
+ *
+ * // Request phase
+ * <button
+ *   onClick={() => requestReset({ email: email() })}
+ *   disabled={requestState().status === 'pending'}
+ * >
+ *   Send Reset Email
+ * </button>
+ *
+ * // Confirm phase
+ * <button
+ *   onClick={() => confirmReset({ token: token(), password: password() })}
+ *   disabled={confirmState().status === 'pending'}
+ * >
+ *   Reset Password
+ * </button>
+ * ```
+ */
+export function createPasswordReset() {
+    const client = getAuthClient();
+    const request = createPromise((data) => client.requestPasswordReset(data));
+    const confirm = createPromise((data) => client.confirmPasswordReset(data));
+    return {
+        requestState: request.state,
+        confirmState: confirm.state,
+        requestReset: request.call,
+        confirmReset: confirm.call,
+        reset: () => {
+            request.reset();
+            confirm.reset();
+        },
+    };
+}
+//# sourceMappingURL=password-reset.js.map

package/dist/primitives/password-reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.js","sourceRoot":"","sources":["../../src/primitives/password-reset.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAa5C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAA;IAE9B,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,IAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAA;IAEhG,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,IAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAA;IAEhG,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,YAAY,EAAE,OAAO,CAAC,IAAI;QAC1B,YAAY,EAAE,OAAO,CAAC,IAAI;QAC1B,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,KAAK,EAAE,CAAA;YACf,OAAO,CAAC,KAAK,EAAE,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/primitives/platform.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Solid.js primitives for platform detection.
+ *
+ * @module
+ */
+import type { Platform } from '@molecule/app-platform';
+/**
+ * Platform primitives return type.
+ */
+export interface PlatformPrimitives {
+    platform: Platform;
+    isNative: boolean;
+    isMobile: boolean;
+    isDesktop: boolean;
+    isWeb: boolean;
+    isDevelopment: boolean;
+    isProduction: boolean;
+    isPlatform: (...platforms: Platform[]) => boolean;
+}
+/**
+ * Create platform primitives for detecting the current platform.
+ *
+ * This is a static primitive (no reactive signals) since the platform
+ * does not change during the lifecycle of the app.
+ *
+ * @returns Platform primitives object
+ *
+ * @example
+ * ```tsx
+ * import { createPlatform } from '@molecule/app-solid'
+ *
+ * function PlatformInfo() {
+ *   const { platform, isWeb, isMobile, isPlatform } = createPlatform()
+ *
+ *   return (
+ *     <div>
+ *       <p>Platform: {platform}</p>
+ *       <p>Is Web: {isWeb ? 'Yes' : 'No'}</p>
+ *       <Show when={isPlatform('ios', 'android')}>
+ *         <p>Running on mobile native</p>
+ *       </Show>
+ *     </div>
+ *   )
+ * }
+ * ```
+ */
+export declare function createPlatform(): PlatformPrimitives;
+//# sourceMappingURL=platform.d.ts.map

package/dist/primitives/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/primitives/platform.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAGtD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,QAAQ,CAAA;IAClB,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;IACjB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,OAAO,CAAA;IACd,aAAa,EAAE,OAAO,CAAA;IACtB,YAAY,EAAE,OAAO,CAAA;IACrB,UAAU,EAAE,CAAC,GAAG,SAAS,EAAE,QAAQ,EAAE,KAAK,OAAO,CAAA;CAClD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,cAAc,IAAI,kBAAkB,CAanD"}

package/dist/primitives/platform.js

@@ -0,0 +1,47 @@
+/**
+ * Solid.js primitives for platform detection.
+ *
+ * @module
+ */
+import { isPlatform, platform } from '@molecule/app-platform';
+/**
+ * Create platform primitives for detecting the current platform.
+ *
+ * This is a static primitive (no reactive signals) since the platform
+ * does not change during the lifecycle of the app.
+ *
+ * @returns Platform primitives object
+ *
+ * @example
+ * ```tsx
+ * import { createPlatform } from '@molecule/app-solid'
+ *
+ * function PlatformInfo() {
+ *   const { platform, isWeb, isMobile, isPlatform } = createPlatform()
+ *
+ *   return (
+ *     <div>
+ *       <p>Platform: {platform}</p>
+ *       <p>Is Web: {isWeb ? 'Yes' : 'No'}</p>
+ *       <Show when={isPlatform('ios', 'android')}>
+ *         <p>Running on mobile native</p>
+ *       </Show>
+ *     </div>
+ *   )
+ * }
+ * ```
+ */
+export function createPlatform() {
+    const info = platform();
+    return {
+        platform: info.platform,
+        isNative: info.isNative,
+        isMobile: info.isMobile,
+        isDesktop: info.isDesktop,
+        isWeb: info.isWeb,
+        isDevelopment: info.isDevelopment,
+        isProduction: info.isProduction,
+        isPlatform: (...platforms) => isPlatform(...platforms),
+    };
+}
+//# sourceMappingURL=platform.js.map

package/dist/primitives/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/primitives/platform.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAgB7D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;IAEvB,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,UAAU,EAAE,CAAC,GAAG,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;KACvD,CAAA;AACH,CAAC"}

package/dist/primitives/promise.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Solid.js primitive for tracking async function state.
+ *
+ * @module
+ */
+import type { PromiseState } from '@molecule/app-utilities';
+/**
+ * Promise state accessor with actions.
+ */
+export interface CreatePromiseReturn<T> {
+    state: () => PromiseState<T>;
+    call: (...args: any[]) => Promise<T>;
+    cancel: (message?: string) => void;
+    reset: () => void;
+}
+/**
+ * Primitive that wraps an async function with reactive state tracking.
+ *
+ * @param asyncFn - The async function to wrap
+ * @returns Object with state accessor, call, cancel, and reset functions
+ *
+ * @example
+ * ```tsx
+ * import { createPromise } from '@molecule/app-solid'
+ *
+ * function UserLoader() {
+ *   const { state, call } = createPromise((id: string) => fetchUser(id))
+ *
+ *   return (
+ *     <div>
+ *       <button onClick={() => call('123')} disabled={state().status === 'pending'}>
+ *         {state().status === 'pending' ? 'Loading...' : 'Fetch User'}
+ *       </button>
+ *       <Show when={state().value}>
+ *         <div>{state().value!.name}</div>
+ *       </Show>
+ *       <Show when={state().error}>
+ *         <div>Error: {state().error!.message}</div>
+ *       </Show>
+ *     </div>
+ *   )
+ * }
+ * ```
+ */
+export declare function createPromise<T extends (...args: any[]) => Promise<any>>(asyncFn: T): CreatePromiseReturn<Awaited<ReturnType<T>>>;
+//# sourceMappingURL=promise.d.ts.map

package/dist/primitives/promise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promise.d.ts","sourceRoot":"","sources":["../../src/primitives/promise.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,yBAAyB,CAAA;AAE1E;;GAEG;AACH,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,KAAK,EAAE,MAAM,YAAY,CAAC,CAAC,CAAC,CAAA;IAC5B,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IACpC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;IAClC,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,EACtE,OAAO,EAAE,CAAC,GACT,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CA8E7C"}

package/dist/primitives/promise.js

@@ -0,0 +1,104 @@
+/**
+ * Solid.js primitive for tracking async function state.
+ *
+ * @module
+ */
+/* eslint-disable @typescript-eslint/no-explicit-any */
+import { batch, createSignal, onCleanup } from 'solid-js';
+const INITIAL_STATE = {
+    status: 'idle',
+    value: null,
+    error: null,
+};
+/**
+ * Primitive that wraps an async function with reactive state tracking.
+ *
+ * @param asyncFn - The async function to wrap
+ * @returns Object with state accessor, call, cancel, and reset functions
+ *
+ * @example
+ * ```tsx
+ * import { createPromise } from '@molecule/app-solid'
+ *
+ * function UserLoader() {
+ *   const { state, call } = createPromise((id: string) => fetchUser(id))
+ *
+ *   return (
+ *     <div>
+ *       <button onClick={() => call('123')} disabled={state().status === 'pending'}>
+ *         {state().status === 'pending' ? 'Loading...' : 'Fetch User'}
+ *       </button>
+ *       <Show when={state().value}>
+ *         <div>{state().value!.name}</div>
+ *       </Show>
+ *       <Show when={state().error}>
+ *         <div>Error: {state().error!.message}</div>
+ *       </Show>
+ *     </div>
+ *   )
+ * }
+ * ```
+ */
+export function createPromise(asyncFn) {
+    const [state, setState] = createSignal(INITIAL_STATE);
+    let callId = 0;
+    let cleaned = false;
+    onCleanup(() => {
+        cleaned = true;
+    });
+    const call = (...args) => {
+        callId += 1;
+        const thisCallId = callId;
+        batch(() => {
+            setState({
+                status: 'pending',
+                value: null,
+                error: null,
+            });
+        });
+        return asyncFn(...args).then((resolved) => {
+            if (thisCallId === callId && !cleaned) {
+                batch(() => {
+                    setState({
+                        status: 'resolved',
+                        value: resolved,
+                        error: null,
+                    });
+                });
+            }
+            return resolved;
+        }, (err) => {
+            const rejection = err instanceof Error ? err : new Error(String(err));
+            if (thisCallId === callId && !cleaned) {
+                batch(() => {
+                    setState({
+                        status: 'rejected',
+                        value: null,
+                        error: rejection,
+                    });
+                });
+            }
+            throw rejection;
+        });
+    };
+    const cancel = (message) => {
+        callId += 1;
+        if (!cleaned) {
+            batch(() => {
+                setState({
+                    status: 'rejected',
+                    value: null,
+                    error: message ? new Error(message) : null,
+                });
+            });
+        }
+    };
+    const reset = () => {
+        callId += 1;
+        if (!cleaned) {
+            setState(INITIAL_STATE);
+        }
+    };
+    return { state, call, cancel, reset };
+}
+//# sourceMappingURL=promise.js.map

package/dist/primitives/promise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promise.js","sourceRoot":"","sources":["../../src/primitives/promise.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,uDAAuD;AACvD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAczD,MAAM,aAAa,GAAwB;IACzC,MAAM,EAAE,MAAuB;IAC/B,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,IAAI;CACZ,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAU;IAIV,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAkB,aAAgC,CAAC,CAAA;IAEzF,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,CAAC,GAAG,IAAW,EAAc,EAAE;QAC1C,MAAM,IAAI,CAAC,CAAA;QACX,MAAM,UAAU,GAAG,MAAM,CAAA;QAEzB,KAAK,CAAC,GAAG,EAAE;YACT,QAAQ,CAAC;gBACP,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,IAAI;aACZ,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAC1B,CAAC,QAAW,EAAE,EAAE;YACd,IAAI,UAAU,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACtC,KAAK,CAAC,GAAG,EAAE;oBACT,QAAQ,CAAC;wBACP,MAAM,EAAE,UAAU;wBAClB,KAAK,EAAE,QAAQ;wBACf,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,QAAQ,CAAA;QACjB,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;YACf,MAAM,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;YAErE,IAAI,UAAU,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACtC,KAAK,CAAC,GAAG,EAAE;oBACT,QAAQ,CAAC;wBACP,MAAM,EAAE,UAAU;wBAClB,KAAK,EAAE,IAAI;wBACX,KAAK,EAAE,SAAS;qBACjB,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,SAAS,CAAA;QACjB,CAAC,CACF,CAAA;IACH,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAQ,EAAE;QACxC,MAAM,IAAI,CAAC,CAAA;QAEX,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,GAAG,EAAE;gBACT,QAAQ,CAAC;oBACP,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;iBAC3C,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,MAAM,IAAI,CAAC,CAAA;QAEX,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,aAAgC,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC,CAAA;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AACvC,CAAC"}

package/dist/primitives/push.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Solid.js primitives for push notifications.
+ *
+ * @module
+ */
+import { type Accessor } from 'solid-js';
+import type { NotificationActionListener, NotificationReceivedListener, PermissionStatus, PushRegisterOptions, PushToken, TokenChangeListener } from '@molecule/app-push';
+/**
+ * Push primitives return type.
+ */
+export interface PushPrimitives {
+    permission: Accessor<PermissionStatus | null>;
+    token: Accessor<PushToken | null>;
+    checkPermission: () => Promise<PermissionStatus>;
+    requestPermission: () => Promise<PermissionStatus>;
+    register: (options?: PushRegisterOptions) => Promise<PushToken>;
+    unregister: () => Promise<void>;
+    onNotificationReceived: (listener: NotificationReceivedListener) => () => void;
+    onNotificationAction: (listener: NotificationActionListener) => () => void;
+    onTokenChange: (listener: TokenChangeListener) => () => void;
+    setBadge: (count: number) => Promise<void>;
+    clearBadge: () => Promise<void>;
+}
+/**
+ * Create push notification primitives.
+ *
+ * @returns Push primitives object
+ *
+ * @example
+ * ```tsx
+ * import { createPush } from '@molecule/app-solid'
+ *
+ * function NotificationButton() {
+ *   const { permission, requestPermission, register } = createPush()
+ *
+ *   const handleEnable = async () => {
+ *     const status = await requestPermission()
+ *     if (status === 'granted') {
+ *       await register()
+ *     }
+ *   }
+ *
+ *   return (
+ *     <Show when={permission() !== 'granted'}>
+ *       <button onClick={handleEnable}>Enable Notifications</button>
+ *     </Show>
+ *   )
+ * }
+ * ```
+ */
+export declare function createPush(): PushPrimitives;
+//# sourceMappingURL=push.d.ts.map

package/dist/primitives/push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../../src/primitives/push.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,QAAQ,EAAgB,MAAM,UAAU,CAAA;AAEtD,OAAO,KAAK,EACV,0BAA0B,EAC1B,4BAA4B,EAC5B,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACT,mBAAmB,EACpB,MAAM,oBAAoB,CAAA;AAG3B;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAC7C,KAAK,EAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IACjC,eAAe,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAChD,iBAAiB,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAClD,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/D,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,sBAAsB,EAAE,CAAC,QAAQ,EAAE,4BAA4B,KAAK,MAAM,IAAI,CAAA;IAC9E,oBAAoB,EAAE,CAAC,QAAQ,EAAE,0BAA0B,KAAK,MAAM,IAAI,CAAA;IAC1E,aAAa,EAAE,CAAC,QAAQ,EAAE,mBAAmB,KAAK,MAAM,IAAI,CAAA;IAC5D,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,UAAU,IAAI,cAAc,CA0C3C"}