@molecule/app-svelte 1.0.0

package/dist/stores/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Svelte stores for molecule.dev framework bindings.
+ *
+ * @module
+ */
+export * from './async-state.js';
+export * from './auth.js';
+export * from './capacitor-app.js';
+export * from './change-password.js';
+export * from './device.js';
+export * from './forms.js';
+export * from './http.js';
+export * from './i18n.js';
+export * from './logger.js';
+export * from './login.js';
+export * from './oauth.js';
+export * from './password-reset.js';
+export * from './platform.js';
+export * from './promise.js';
+export * from './push.js';
+export * from './router.js';
+export * from './signup.js';
+export * from './state.js';
+export * from './storage.js';
+export * from './theme.js';
+export * from './version.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/stores/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/stores/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,kBAAkB,CAAA;AAChC,cAAc,WAAW,CAAA;AACzB,cAAc,oBAAoB,CAAA;AAClC,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA"}

package/dist/stores/index.js

@@ -0,0 +1,27 @@
+/**
+ * Svelte stores for molecule.dev framework bindings.
+ *
+ * @module
+ */
+export * from './async-state.js';
+export * from './auth.js';
+export * from './capacitor-app.js';
+export * from './change-password.js';
+export * from './device.js';
+export * from './forms.js';
+export * from './http.js';
+export * from './i18n.js';
+export * from './logger.js';
+export * from './login.js';
+export * from './oauth.js';
+export * from './password-reset.js';
+export * from './platform.js';
+export * from './promise.js';
+export * from './push.js';
+export * from './router.js';
+export * from './signup.js';
+export * from './state.js';
+export * from './storage.js';
+export * from './theme.js';
+export * from './version.js';
+//# sourceMappingURL=index.js.map

package/dist/stores/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/stores/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,kBAAkB,CAAA;AAChC,cAAc,WAAW,CAAA;AACzB,cAAc,oBAAoB,CAAA;AAClC,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,qBAAqB,CAAA;AACnC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA"}

package/dist/stores/logger.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Svelte utilities for logging.
+ *
+ * @module
+ */
+import type { Logger, LoggerConfig, LoggerProvider, LogLevel } from '@molecule/app-logger';
+/**
+ * Logger helper functions.
+ */
+interface LoggerHelpers {
+    getLogger: (name?: string) => Logger;
+    createLogger: (config: LoggerConfig) => Logger;
+    setLevel: (level: LogLevel) => void;
+    getLevel: () => LogLevel;
+    enable: () => void;
+    disable: () => void;
+    isEnabled: () => boolean;
+}
+/**
+ * Get a logger instance.
+ *
+ * @param name - Logger name
+ * @returns Logger instance
+ *
+ * @example
+ * ```svelte
+ * <script>
+ *   import { getLogger } from '@molecule/app-svelte'
+ *   import { onMount, onDestroy } from 'svelte'
+ *
+ *   const logger = getLogger('MyComponent')
+ *
+ *   onMount(() => {
+ *     logger.info('Component mounted')
+ *   })
+ *
+ *   onDestroy(() => {
+ *     logger.debug('Component destroyed')
+ *   })
+ *
+ *   function handleError(error) {
+ *     logger.error('Operation failed', error)
+ *   }
+ * </script>
+ * ```
+ */
+export declare function getLogger(name?: string): Logger;
+/**
+ * Create a logger with custom configuration.
+ *
+ * @param config - Logger configuration
+ * @returns Logger instance
+ */
+export declare function createLogger(config: LoggerConfig): Logger;
+/**
+ * Get the root logger.
+ *
+ * @returns Root logger instance
+ */
+export declare function getRootLogger(): Logger;
+/**
+ * Create a child logger with additional context.
+ *
+ * @param name - Parent logger name
+ * @param context - Additional context
+ * @returns Child logger instance
+ */
+export declare function getChildLogger(name: string, context: Record<string, unknown>): Logger;
+/**
+ * Create logger helpers from context.
+ *
+ * @returns Logger helper functions
+ */
+export declare function createLoggerHelpers(): LoggerHelpers;
+/**
+ * Create logger helpers from a specific provider.
+ *
+ * @param provider - Logger provider
+ * @returns Logger helper functions
+ */
+export declare function createLoggerHelpersFromProvider(provider: LoggerProvider): LoggerHelpers;
+export {};
+//# sourceMappingURL=logger.d.ts.map

package/dist/stores/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/stores/logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAI1F;;GAEG;AACH,UAAU,aAAa;IACrB,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAA;IACpC,YAAY,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,MAAM,CAAA;IAC9C,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAA;IACnC,QAAQ,EAAE,MAAM,QAAQ,CAAA;IACxB,MAAM,EAAE,MAAM,IAAI,CAAA;IAClB,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,SAAS,EAAE,MAAM,OAAO,CAAA;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAGzD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAGtC;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAIrF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAanD;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,cAAc,GAAG,aAAa,CAWvF"}

package/dist/stores/logger.js

@@ -0,0 +1,104 @@
+/**
+ * Svelte utilities for logging.
+ *
+ * @module
+ */
+import { getLoggerProvider } from '../context.js';
+/**
+ * Get a logger instance.
+ *
+ * @param name - Logger name
+ * @returns Logger instance
+ *
+ * @example
+ * ```svelte
+ * <script>
+ *   import { getLogger } from '@molecule/app-svelte'
+ *   import { onMount, onDestroy } from 'svelte'
+ *
+ *   const logger = getLogger('MyComponent')
+ *
+ *   onMount(() => {
+ *     logger.info('Component mounted')
+ *   })
+ *
+ *   onDestroy(() => {
+ *     logger.debug('Component destroyed')
+ *   })
+ *
+ *   function handleError(error) {
+ *     logger.error('Operation failed', error)
+ *   }
+ * </script>
+ * ```
+ */
+export function getLogger(name) {
+    const provider = getLoggerProvider();
+    return provider.getLogger(name);
+}
+/**
+ * Create a logger with custom configuration.
+ *
+ * @param config - Logger configuration
+ * @returns Logger instance
+ */
+export function createLogger(config) {
+    const provider = getLoggerProvider();
+    return provider.createLogger(config);
+}
+/**
+ * Get the root logger.
+ *
+ * @returns Root logger instance
+ */
+export function getRootLogger() {
+    const provider = getLoggerProvider();
+    return provider.getLogger();
+}
+/**
+ * Create a child logger with additional context.
+ *
+ * @param name - Parent logger name
+ * @param context - Additional context
+ * @returns Child logger instance
+ */
+export function getChildLogger(name, context) {
+    const provider = getLoggerProvider();
+    const parent = provider.getLogger(name);
+    return parent.withContext(context);
+}
+/**
+ * Create logger helpers from context.
+ *
+ * @returns Logger helper functions
+ */
+export function createLoggerHelpers() {
+    const provider = getLoggerProvider();
+    return {
+        getLogger: (name) => provider.getLogger(name),
+        createLogger: (config) => provider.createLogger(config),
+        setLevel: (level) => provider.setLevel(level),
+        getLevel: () => provider.getLevel(),
+        enable: () => provider.enable(),
+        disable: () => provider.disable(),
+        isEnabled: () => provider.isEnabled(),
+    };
+}
+/**
+ * Create logger helpers from a specific provider.
+ *
+ * @param provider - Logger provider
+ * @returns Logger helper functions
+ */
+export function createLoggerHelpersFromProvider(provider) {
+    return {
+        getLogger: (name) => provider.getLogger(name),
+        createLogger: (config) => provider.createLogger(config),
+        setLevel: (level) => provider.setLevel(level),
+        getLevel: () => provider.getLevel(),
+        enable: () => provider.enable(),
+        disable: () => provider.disable(),
+        isEnabled: () => provider.isEnabled(),
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/stores/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/stores/logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAejD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAA;IACpC,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAA;IACpC,OAAO,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAA;IACpC,OAAO,QAAQ,CAAC,SAAS,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAgC;IAC3E,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAA;IACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACvC,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAA;IAEpC,OAAO;QACL,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;QACtD,YAAY,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC;QACrE,QAAQ,EAAE,CAAC,KAA+D,EAAE,EAAE,CAC5E,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE;QACnC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE;QAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE;QACjC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE;KACtC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAAC,QAAwB;IACtE,OAAO;QACL,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;QACtD,YAAY,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC;QACrE,QAAQ,EAAE,CAAC,KAA+D,EAAE,EAAE,CAC5E,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE;QACnC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE;QAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE;QACjC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE;KACtC,CAAA;AACH,CAAC"}

package/dist/stores/login.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Svelte store for login with async state tracking.
+ *
+ * @module
+ */
+import type { AuthResult } from '@molecule/app-auth';
+import { type PromiseStore } from './promise.js';
+/**
+ * Login store type.
+ */
+export type LoginStore<T = unknown> = PromiseStore<AuthResult<T>>;
+/**
+ * Creates a login store with async state tracking.
+ *
+ * @returns Login promise store
+ *
+ * @example
+ * ```svelte
+ * <script>
+ *   import { createLoginStore } from '@molecule/app-svelte'
+ *   const login = createLoginStore()
+ * </script>
+ *
+ * <button
+ *   on:click={() => login.call({ email, password })}
+ *   disabled={$login.status === 'pending'}
+ * >
+ *   {$login.status === 'pending' ? 'Logging in...' : 'Login'}
+ * </button>
+ * ```
+ */
+export declare function createLoginStore<T = unknown>(): LoginStore<T>;
+//# sourceMappingURL=login.d.ts.map

package/dist/stores/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/stores/login.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAoB,MAAM,oBAAoB,CAAA;AAGtE,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,cAAc,CAAA;AAEpE;;GAEG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AAEjE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,GAAG,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,CAG7D"}

package/dist/stores/login.js

@@ -0,0 +1,32 @@
+/**
+ * Svelte store for login with async state tracking.
+ *
+ * @module
+ */
+import { getAuthClient } from '../context.js';
+import { createPromiseStore } from './promise.js';
+/**
+ * Creates a login store with async state tracking.
+ *
+ * @returns Login promise store
+ *
+ * @example
+ * ```svelte
+ * <script>
+ *   import { createLoginStore } from '@molecule/app-svelte'
+ *   const login = createLoginStore()
+ * </script>
+ *
+ * <button
+ *   on:click={() => login.call({ email, password })}
+ *   disabled={$login.status === 'pending'}
+ * >
+ *   {$login.status === 'pending' ? 'Logging in...' : 'Login'}
+ * </button>
+ * ```
+ */
+export function createLoginStore() {
+    const client = getAuthClient();
+    return createPromiseStore((credentials) => client.login(credentials));
+}
+//# sourceMappingURL=login.js.map

package/dist/stores/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/stores/login.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAqB,MAAM,cAAc,CAAA;AAOpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,aAAa,EAAK,CAAA;IACjC,OAAO,kBAAkB,CAAC,CAAC,WAA6B,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;AACzF,CAAC"}

package/dist/stores/oauth.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Svelte OAuth helpers.
+ *
+ * Provides helpers to build OAuth URLs and start a login via a full-page
+ * redirect, and automatically handles the OAuth callback by detecting `code`
+ * and `state` URL parameters and exchanging them for a session (see
+ * {@link OAuthHelpers.handleCallback} for manual use).
+ *
+ * @module
+ */
+import { type Readable } from 'svelte/store';
+import type { AuthClient } from '@molecule/app-auth';
+/**
+ * OAuth configuration options.
+ */
+export interface OAuthOptions {
+    /** Base URL for the API server (e.g. `https://api.example.com`). */
+    baseURL?: string;
+    /** List of supported OAuth provider names (e.g. `['google', 'github']`). */
+    oauthProviders?: string[];
+    /** Path prefix for OAuth initiation routes. Defaults to `/oauth`. */
+    oauthEndpoint?: string;
+    /** Path for the OAuth login POST endpoint. Defaults to `/users/log-in/oauth`. */
+    loginEndpoint?: string;
+    /** Callback fired after a successful OAuth login. */
+    onSuccess?: () => void;
+    /** Callback fired with an error message when the OAuth login fails. */
+    onError?: (error: string) => void;
+    /**
+     * Explicit auth client used to establish the session after the callback
+     * exchange. Defaults to the client in Svelte context (only resolvable when
+     * called during component initialization) — pass one explicitly for
+     * callers/tests outside a component/context.
+     */
+    authClient?: AuthClient<unknown>;
+}
+/**
+ * OAuth helpers returned by {@link createOAuthHelpers}.
+ */
+export interface OAuthHelpers {
+    /** Readable store of available OAuth provider names. */
+    providers: Readable<string[]>;
+    /** Builds the OAuth initiation URL for a provider. */
+    getOAuthUrl: (provider: string) => string;
+    /** Full-page redirect to the provider's OAuth initiation endpoint. */
+    redirect: (provider: string) => void;
+    /**
+     * Handles an OAuth callback: when the current URL carries a `code` param and
+     * a provider was stashed by {@link redirect}, exchanges the code for a
+     * session. A guarded no-op otherwise. Runs automatically when
+     * {@link createOAuthHelpers} is called in a browser; exposed for manual
+     * invocation (e.g. tests or custom callback screens).
+     */
+    handleCallback: () => Promise<void>;
+}
+/**
+ * Creates OAuth helpers for provider-based authentication flows.
+ *
+ * When created in a browser, automatically handles OAuth callbacks by
+ * detecting `code` and `state` URL parameters and exchanging them for a
+ * session (a guarded no-op when there is no callback code in the URL).
+ *
+ * Session establishment: the exchange result is applied to the resolved auth
+ * client (an explicit `options.authClient`, else the Svelte-context client
+ * when created during component initialization). When NO client is available,
+ * the server has already established the httpOnly-cookie session via the
+ * exchange, so a user-carrying response still counts as success —
+ * `options.onSuccess` fires; a response with no user fires `options.onError`.
+ *
+ * @param options - OAuth configuration (base URL, providers, endpoint paths, callbacks, auth client).
+ * @returns An object containing a readable providers store, URL builder, redirect function, and callback handler.
+ */
+export declare function createOAuthHelpers(options?: OAuthOptions): OAuthHelpers;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/stores/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/stores/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,QAAQ,EAAY,MAAM,cAAc,CAAA;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAIpD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7B,sDAAsD;IACtD,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAA;IACzC,sEAAsE;IACtE,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;IACpC;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,YAAY,CA+JvE"}

package/dist/stores/oauth.js

@@ -0,0 +1,183 @@
+/**
+ * Svelte OAuth helpers.
+ *
+ * Provides helpers to build OAuth URLs and start a login via a full-page
+ * redirect, and automatically handles the OAuth callback by detecting `code`
+ * and `state` URL parameters and exchanging them for a session (see
+ * {@link OAuthHelpers.handleCallback} for manual use).
+ *
+ * @module
+ */
+import { readable } from 'svelte/store';
+import { getAuthClient } from '../context.js';
+/**
+ * Creates OAuth helpers for provider-based authentication flows.
+ *
+ * When created in a browser, automatically handles OAuth callbacks by
+ * detecting `code` and `state` URL parameters and exchanging them for a
+ * session (a guarded no-op when there is no callback code in the URL).
+ *
+ * Session establishment: the exchange result is applied to the resolved auth
+ * client (an explicit `options.authClient`, else the Svelte-context client
+ * when created during component initialization). When NO client is available,
+ * the server has already established the httpOnly-cookie session via the
+ * exchange, so a user-carrying response still counts as success —
+ * `options.onSuccess` fires; a response with no user fires `options.onError`.
+ *
+ * @param options - OAuth configuration (base URL, providers, endpoint paths, callbacks, auth client).
+ * @returns An object containing a readable providers store, URL builder, redirect function, and callback handler.
+ */
+export function createOAuthHelpers(options) {
+    const baseURL = options?.baseURL ?? '';
+    const oauthEndpoint = options?.oauthEndpoint ?? '/oauth';
+    const loginEndpoint = options?.loginEndpoint ?? '/users/log-in/oauth';
+    // Resolve the auth client AT CREATION TIME — Svelte context is only
+    // available during component initialization, never inside the async
+    // callback. An explicit `options.authClient` wins.
+    let authClient = options?.authClient ?? null;
+    if (!authClient) {
+        try {
+            authClient = getAuthClient();
+        }
+        catch (_error) {
+            /* Called outside component initialization or without an auth context —
+               handleCallback falls back to the httpOnly-cookie session path. */
+        }
+    }
+    const providers = readable(options?.oauthProviders ?? []);
+    const getOAuthUrl = (provider) => {
+        // Encode the provider as a single path segment so a (future) caller passing an
+        // untrusted value can never inject a path/query/scheme into the opened URL —
+        // defense-in-depth on top of the upstream static provider allowlist. Plain
+        // provider names ('github', 'google') pass through unchanged.
+        return `${baseURL}${oauthEndpoint}/${encodeURIComponent(provider)}`;
+    };
+    /** Stash which provider initiated the flow so the callback knows it's ours. */
+    const stashProvider = (provider) => {
+        try {
+            sessionStorage.setItem('oauth_provider', provider);
+        }
+        catch (_error) {
+            /* SSR-safe — sessionStorage is unavailable in SSR/sandboxed environments */
+        }
+    };
+    /**
+     * Append the current page's PATH as `redirect_to` so the api's initiation
+     * endpoint (`GET /users/oauth/:provider`) builds a provider `redirect_uri`
+     * that lands the callback back on THIS page — the one where the helpers are
+     * mounted (e.g. `/login`) — instead of the app root, where nothing may be
+     * listening for the `code` param. Path only (no origin/query): the server
+     * validates it as a same-origin absolute path, so it can never become an
+     * open redirect. Servers that predate the param simply ignore it.
+     */
+    const withReturnPath = (url) => {
+        const path = typeof window !== 'undefined' ? window.location.pathname : '';
+        if (!path || path === '/')
+            return url;
+        return `${url}${url.includes('?') ? '&' : '?'}redirect_to=${encodeURIComponent(path)}`;
+    };
+    const redirect = (provider) => {
+        stashProvider(provider);
+        window.location.href = withReturnPath(getOAuthUrl(provider));
+    };
+    const handleCallback = async () => {
+        if (typeof window === 'undefined')
+            return;
+        const params = new URLSearchParams(window.location.search);
+        const code = params.get('code');
+        const state = params.get('state');
+        if (!code)
+            return;
+        // Retrieve the provider that initiated the flow
+        let provider = null;
+        try {
+            provider = sessionStorage.getItem('oauth_provider');
+        }
+        catch (_error) {
+            /* SSR-safe — sessionStorage is unavailable in SSR/sandboxed environments */
+        }
+        if (!provider)
+            return;
+        // Clean up URL (remove code/state params) and sessionStorage
+        const cleanUrl = new URL(window.location.href);
+        cleanUrl.searchParams.delete('code');
+        cleanUrl.searchParams.delete('state');
+        window.history.replaceState({}, '', cleanUrl.toString());
+        try {
+            sessionStorage.removeItem('oauth_provider');
+        }
+        catch (_error) {
+            /* SSR-safe — sessionStorage is unavailable in SSR/sandboxed environments */
+        }
+        // Exchange code for session
+        try {
+            const response = await fetch(`${baseURL}${loginEndpoint}`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                credentials: 'include', // Send cookies (oauth_state/oauth_verifier) for state validation
+                body: JSON.stringify({
+                    server: provider,
+                    code,
+                    state: state || undefined,
+                    redirect_uri: window.location.origin,
+                }),
+            });
+            if (!response.ok) {
+                const data = await response.json().catch(() => ({ error: 'OAuth login failed' }));
+                options?.onError?.(data.error || 'OAuth login failed');
+                return;
+            }
+            const data = await response.json().catch(() => null);
+            // Store the token from the response
+            const authHeader = response.headers.get('authorization') || response.headers.get('set-authorization');
+            const token = authHeader ? authHeader.replace('Bearer ', '') : null;
+            // The authenticated user is `props` (molecule resource convention) or `user`
+            // (generic AuthResult).
+            const user = data && typeof data === 'object'
+                ? (data.props ??
+                    data.user ??
+                    null)
+                : null;
+            if (authClient) {
+                // Seed the token + user via the auth client and let `initialize()` flip
+                // `authenticated` — mirrors what `authClient.login()` does for password
+                // login. A result with no user is not a real session.
+                if (token)
+                    authClient.setAccessToken(token);
+                if (user && typeof user === 'object') {
+                    authClient.setUser(user);
+                    await authClient.initialize();
+                    options?.onSuccess?.();
+                }
+                else {
+                    options?.onError?.('OAuth login failed');
+                }
+            }
+            else if (user && typeof user === 'object') {
+                // No auth client available: the server has already established the
+                // httpOnly-cookie session via the exchange, so a user-carrying response
+                // still counts as success.
+                options?.onSuccess?.();
+            }
+            else {
+                options?.onError?.('OAuth login failed');
+            }
+        }
+        catch (err) {
+            options?.onError?.(err instanceof Error && err.message ? err.message : 'OAuth login failed');
+        }
+    };
+    // Auto-handle the OAuth callback at creation when in a browser — a guarded
+    // no-op unless the URL carries a callback `code` and a provider was stashed
+    // by `redirect`, so this is safe to run on every creation.
+    if (typeof window !== 'undefined') {
+        void handleCallback();
+    }
+    return {
+        providers,
+        getOAuthUrl,
+        redirect,
+        handleCallback,
+    };
+}
+//# sourceMappingURL=oauth.js.map

package/dist/stores/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/stores/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAiB,QAAQ,EAAE,MAAM,cAAc,CAAA;AAItD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AA+C7C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAsB;IACvD,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,EAAE,CAAA;IACtC,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,QAAQ,CAAA;IACxD,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,qBAAqB,CAAA;IAErE,oEAAoE;IACpE,oEAAoE;IACpE,mDAAmD;IACnD,IAAI,UAAU,GAA+B,OAAO,EAAE,UAAU,IAAI,IAAI,CAAA;IACxE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,UAAU,GAAG,aAAa,EAAE,CAAA;QAC9B,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB;gFACoE;QACtE,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,EAAE,cAAc,IAAI,EAAE,CAAC,CAAA;IAEzD,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAU,EAAE;QAC/C,+EAA+E;QAC/E,6EAA6E;QAC7E,2EAA2E;QAC3E,8DAA8D;QAC9D,OAAO,GAAG,OAAO,GAAG,aAAa,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAA;IACrE,CAAC,CAAA;IAED,+EAA+E;IAC/E,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAQ,EAAE;QAC/C,IAAI,CAAC;YACH,cAAc,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;QACpD,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,4EAA4E;QAC9E,CAAC;IACH,CAAC,CAAA;IAED;;;;;;;;OAQG;IACH,MAAM,cAAc,GAAG,CAAC,GAAW,EAAU,EAAE;QAC7C,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1E,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,GAAG,CAAA;QACrC,OAAO,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAA;IACxF,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAQ,EAAE;QAC1C,aAAa,CAAC,QAAQ,CAAC,CAAA;QACvB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAA;IAED,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;QAC/C,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAM;QAEzC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEjC,IAAI,CAAC,IAAI;YAAE,OAAM;QAEjB,gDAAgD;QAChD,IAAI,QAAQ,GAAkB,IAAI,CAAA;QAClC,IAAI,CAAC;YACH,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACrD,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,4EAA4E;QAC9E,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,OAAM;QAErB,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC9C,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACpC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QACxD,IAAI,CAAC;YACH,cAAc,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAA;QAC7C,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,4EAA4E;QAC9E,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,aAAa,EAAE,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,WAAW,EAAE,SAAS,EAAE,iEAAiE;gBACzF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM,EAAE,QAAQ;oBAChB,IAAI;oBACJ,KAAK,EAAE,KAAK,IAAI,SAAS;oBACzB,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;iBACrC,CAAC;aACH,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAA;gBACjF,OAAO,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAA;gBACtD,OAAM;YACR,CAAC;YAED,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YAC7D,oCAAoC;YACpC,MAAM,UAAU,GACd,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;YACpF,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAEnE,6EAA6E;YAC7E,wBAAwB;YACxB,MAAM,IAAI,GACR,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAC9B,CAAC,CAAC,CAAE,IAA4C,CAAC,KAAK;oBACnD,IAA4C,CAAC,IAAI;oBAClD,IAAI,CAAC;gBACP,CAAC,CAAC,IAAI,CAAA;YAEV,IAAI,UAAU,EAAE,CAAC;gBACf,wEAAwE;gBACxE,wEAAwE;gBACxE,sDAAsD;gBACtD,IAAI,KAAK;oBAAE,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;gBAC3C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;oBACxB,MAAM,UAAU,CAAC,UAAU,EAAE,CAAA;oBAC7B,OAAO,EAAE,SAAS,EAAE,EAAE,CAAA;gBACxB,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,OAAO,EAAE,CAAC,oBAAoB,CAAC,CAAA;gBAC1C,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5C,mEAAmE;gBACnE,wEAAwE;gBACxE,2BAA2B;gBAC3B,OAAO,EAAE,SAAS,EAAE,EAAE,CAAA;YACxB,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,OAAO,EAAE,CAAC,oBAAoB,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC,CAAA;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,2DAA2D;IAC3D,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,KAAK,cAAc,EAAE,CAAA;IACvB,CAAC;IAED,OAAO;QACL,SAAS;QACT,WAAW;QACX,QAAQ;QACR,cAAc;KACf,CAAA;AACH,CAAC"}

package/dist/stores/password-reset.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Svelte store for password reset with async state tracking.
+ *
+ * @module
+ */
+import type { Readable } from 'svelte/store';
+import type { PasswordResetConfirm, PasswordResetRequest } from '@molecule/app-auth';
+import type { PromiseState } from '@molecule/app-utilities';
+/**
+ * Password reset stores.
+ */
+export interface PasswordResetStores {
+    request: Readable<PromiseState<void>> & {
+        call: (data: PasswordResetRequest) => Promise<void>;
+        cancel: (message?: string) => void;
+        reset: () => void;
+    };
+    confirm: Readable<PromiseState<void>> & {
+        call: (data: PasswordResetConfirm) => Promise<void>;
+        cancel: (message?: string) => void;
+        reset: () => void;
+    };
+    resetAll: () => void;
+}
+/**
+ * Creates password reset stores with async state tracking.
+ *
+ * @returns Password reset stores for request and confirm steps
+ */
+export declare function createPasswordResetStores(): PasswordResetStores;
+//# sourceMappingURL=password-reset.d.ts.map

package/dist/stores/password-reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.d.ts","sourceRoot":"","sources":["../../src/stores/password-reset.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAE5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAK3D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG;QACtC,IAAI,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;QACnD,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QAClC,KAAK,EAAE,MAAM,IAAI,CAAA;KAClB,CAAA;IACD,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG;QACtC,IAAI,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;QACnD,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;QAClC,KAAK,EAAE,MAAM,IAAI,CAAA;KAClB,CAAA;IACD,QAAQ,EAAE,MAAM,IAAI,CAAA;CACrB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,IAAI,mBAAmB,CAmB/D"}