@multiplatform.one/keycloak 6.1.0 → 6.3.0

package/types/betterAuth/expoClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expoClient.d.ts","sourceRoot":"","sources":["../../src/betterAuth/expoClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAiBuqB,CAAC;iBAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAAy3C,CAAC;aAAwC,CAAC;mBAA2C,CAAC;eAAiC,CAAC;;;;;iBAA+U,CAAC;iBAAmC,CAAC;;YAAmD,CAAC;gBAAuC,CAAC;gBAA2C,CAAC;sBAAwC,CAAC;cAAwC,CAAC;cAA8C,CAAC;eAA+B,CAAC;mBAAyG,CAAC;yBAAuB,CAAC;;eAAyC,CAAC;;;aAA0G,CAAC;YAA+B,CAAC;;;;;;;;;;;;YAA+e,CAAC;aAAgB,CAAC;cAAiB,CAAC;cAAiB,CAAC;;aAA8F,CAAC;oBAAiE,CAAC;cAAgC,CAAC;mBAAkG,CAAC;yBAA0E,CAAC;qBAAwC,CAAC;;;uBAAkF,CAAC;+GAAuL,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAHt4I;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/types/betterAuth/index.d.ts

@@ -0,0 +1,3 @@
+export { getAuthClient, type AuthClient } from "./client";
+export { getExpoAuthClient, type ExpoAuthClient } from "./expoClient";
+//# sourceMappingURL=index.d.ts.map

package/types/betterAuth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/betterAuth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/types/frappeToken.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Keycloak access token for Frappe API requests — web variant.
+ *
+ * Web HTTP requests to a same-origin bench could ride the better-auth
+ * account cookie, but the Socket.IO realtime handshake cannot: frappe's
+ * socketio auth middleware only accepts a frappe `sid` cookie or an
+ * `Authorization` header (it never forwards arbitrary cookies to the web
+ * server). So the web client fetches the Keycloak access token from
+ * better-auth's same-origin `/get-access-token` endpoint (which refreshes
+ * server-side when expired, authenticated by the better-auth session
+ * cookie) and sends `Authorization: Bearer <token>` on every REST request
+ * and socket handshake — the same transport native uses. The bench's
+ * frappe_keycloak auth hook validates the JWT against the realm public key.
+ */
+/** Returns a valid Keycloak access token, or undefined when signed out. */
+export declare function getKeycloakBearerToken(): Promise<string | undefined>;
+/** Drop the cached token (sign-out). */
+export declare function clearKeycloakBearerToken(): void;
+//# sourceMappingURL=frappeToken.d.ts.map

package/types/frappeToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frappeToken.d.ts","sourceRoot":"","sources":["../src/frappeToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,2EAA2E;AAC3E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmC1E;AAED,wCAAwC;AACxC,wBAAgB,wBAAwB,SAEvC"}

package/types/frappeToken.native.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Keycloak access token for Frappe API requests — native variant.
+ *
+ * Native Frappe requests can't ride the better-auth cookies (they live in the
+ * SecureStore jar, not the OS cookie store), so the Frappe HttpClient sends
+ * `Authorization: Bearer <keycloak access token>` instead — the bench's
+ * frappe_keycloak auth hook checks the Bearer header first. The token comes
+ * from better-auth's /get-access-token endpoint (which refreshes server-side
+ * when expired), authenticated with the SecureStore cookie jar.
+ */
+/** Returns a valid Keycloak access token, or undefined when signed out. */
+export declare function getKeycloakBearerToken(): Promise<string | undefined>;
+/** Drop the cached token (sign-out). */
+export declare function clearKeycloakBearerToken(): void;
+//# sourceMappingURL=frappeToken.native.d.ts.map

package/types/frappeToken.native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frappeToken.native.d.ts","sourceRoot":"","sources":["../src/frappeToken.native.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,2EAA2E;AAC3E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuB1E;AAED,wCAAwC;AACxC,wBAAgB,wBAAwB,SAEvC"}

package/types/hooks/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./useAuthConfig";
+export * from "./useTokensFromQuery/index";
+export * from "./useTokensFromState";
+//# sourceMappingURL=index.d.ts.map

package/types/hooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC"}

package/types/hooks/useAuthConfig.d.ts

@@ -0,0 +1,2 @@
+export declare function useAuthConfig(): import("..").AuthConfig;
+//# sourceMappingURL=useAuthConfig.d.ts.map

package/types/hooks/useAuthConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthConfig.d.ts","sourceRoot":"","sources":["../../src/hooks/useAuthConfig.ts"],"names":[],"mappings":"AAGA,wBAAgB,aAAa,4BAE5B"}

package/types/hooks/useTokensFromQuery/index.d.ts

@@ -0,0 +1,2 @@
+export declare function useTokensFromQuery(): boolean;
+//# sourceMappingURL=index.d.ts.map

package/types/hooks/useTokensFromQuery/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hooks/useTokensFromQuery/index.ts"],"names":[],"mappings":"AAGA,wBAAgB,kBAAkB,YAWjC"}

package/types/hooks/useTokensFromQuery/index.native.d.ts

@@ -0,0 +1,2 @@
+export declare const useTokensFromQuery: () => boolean;
+//# sourceMappingURL=index.native.d.ts.map

package/types/hooks/useTokensFromQuery/index.native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.native.d.ts","sourceRoot":"","sources":["../../../src/hooks/useTokensFromQuery/index.native.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,eAAc,CAAC"}

package/types/hooks/useTokensFromState.d.ts

@@ -0,0 +1,2 @@
+export declare function useTokensFromStore(): boolean;
+//# sourceMappingURL=useTokensFromState.d.ts.map

package/types/hooks/useTokensFromState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTokensFromState.d.ts","sourceRoot":"","sources":["../../src/hooks/useTokensFromState.ts"],"names":[],"mappings":"AAGA,wBAAgB,kBAAkB,YAGjC"}

package/types/index.d.ts

@@ -0,0 +1,10 @@
+export * from "./Authenticated";
+export * from "./authConfig";
+export * from "./hooks/index";
+export * from "./keycloak/index";
+export * from "./provider/index";
+export * from "./session/index";
+export * from "./token";
+export * from "./types";
+export { getKeycloakBearerToken } from "./frappeToken";
+//# sourceMappingURL=index.d.ts.map

package/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC"}

package/types/keycloak/base.d.ts

@@ -0,0 +1,50 @@
+import type KeycloakClient from "@multiplatform.one/keycloak-js";
+import type { KeycloakLoginOptions as KeycloakJsLoginOptions, KeycloakLogoutOptions as KeycloakJsLogoutOptions } from "@multiplatform.one/keycloak-js";
+import type { Session } from "../session/index";
+import type { AccessTokenParsed, TokenParsed } from "../token";
+import type { KeycloakMock } from "../types";
+import type { KeycloakConfig } from "./config";
+export declare class BaseKeycloak {
+    readonly config: KeycloakConfig;
+    authenticated: boolean;
+    clientId: string;
+    email?: string;
+    idToken?: string;
+    idTokenParsed?: TokenParsed;
+    realm: string;
+    realmAccess?: RealmAccess;
+    refreshToken?: string;
+    refreshTokenParsed?: TokenParsed;
+    resourceAccess?: ResourceAccess;
+    sessionId?: string;
+    subject?: string;
+    token?: string;
+    tokenParsed?: AccessTokenParsed;
+    username?: string;
+    protected _keycloakClient?: KeycloakClient;
+    protected _login?: (_options: KeycloakLoginOptions) => Promise<undefined>;
+    protected _logout?: (_options: KeycloakLogoutOptions) => Promise<undefined>;
+    protected _mock?: KeycloakMock;
+    constructor(config: KeycloakConfig, input?: string | KeycloakClient | KeycloakMock | Session, idToken?: string, refreshToken?: string, login?: (_options: KeycloakLoginOptions) => Promise<undefined>, logout?: (_options: KeycloakLogoutOptions) => Promise<undefined>);
+    protected _handleInputObject(input: KeycloakClient | KeycloakMock | Session): void;
+    protected _parseTokens(): void;
+    protected _clear(): void;
+    protected _sync(): void;
+    getUserInfo(): Promise<any>;
+    login(options?: KeycloakLoginOptions): Promise<void>;
+    logout(options?: KeycloakLogoutOptions): Promise<void>;
+}
+export declare function useKeycloak(): import(".").Keycloak | null | undefined;
+export type KeycloakLogoutOptions = KeycloakJsLogoutOptions;
+export type KeycloakLoginOptions = KeycloakJsLoginOptions & {
+    redirect?: boolean;
+};
+export interface ResourceAccess {
+    [clientId: string]: {
+        roles: string[];
+    };
+}
+export interface RealmAccess {
+    roles: string[];
+}
+//# sourceMappingURL=base.d.ts.map

package/types/keycloak/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/keycloak/base.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,cAAc,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EACV,oBAAoB,IAAI,sBAAsB,EAC9C,qBAAqB,IAAI,uBAAuB,EACjD,MAAM,gCAAgC,CAAC;AAGxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG/C,qBAAa,YAAY;aAuBL,MAAM,EAAE,cAAc;IAtBjC,aAAa,UAAS;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAEzB,SAAS,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC;IAC3C,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1E,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5E,SAAS,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;gBAGb,MAAM,EAAE,cAAc,EACtC,KAAK,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,YAAY,GAAG,OAAO,EACxD,OAAO,CAAC,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE,MAAM,EACrB,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC,SAAS,CAAC,EAC9D,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,OAAO,CAAC,SAAS,CAAC;IAiBlE,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,cAAc,GAAG,YAAY,GAAG,OAAO;IAQ3E,SAAS,CAAC,YAAY;IAYtB,SAAS,CAAC,MAAM;IAgBhB,SAAS,CAAC,KAAK;IA0CT,WAAW;IAeX,KAAK,CAAC,OAAO,GAAE,oBAAyB;IAUxC,MAAM,CAAC,OAAO,GAAE,qBAA0B;CAQjD;AAED,wBAAgB,WAAW,4CAI1B;AAED,MAAM,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC5D,MAAM,MAAM,oBAAoB,GAAG,sBAAsB,GAAG;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEnF,MAAM,WAAW,cAAc;IAC7B,CAAC,QAAQ,EAAE,MAAM,GAAG;QAClB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB"}

package/types/keycloak/config.d.ts

@@ -0,0 +1,12 @@
+import type { KeycloakServerConfig } from "@multiplatform.one/keycloak-js";
+/** App config uses the Keycloak-server shape ({ url, realm, clientId }), not generic OIDC. */
+export interface KeycloakConfig extends KeycloakServerConfig {
+    publicClientId?: string;
+    scopes?: string[];
+    /** Better Auth server base URL (for native/Expo). Defaults to same origin on web. */
+    betterAuthBaseUrl?: string;
+    /** Expo deep-link scheme (e.g. "multiplatform-one"). Used by @better-auth/expo client. */
+    expoScheme?: string;
+}
+export declare const KeycloakConfigContext: import("react").Context<KeycloakConfig>;
+//# sourceMappingURL=config.d.ts.map

package/types/keycloak/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/keycloak/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAG3E,8FAA8F;AAC9F,MAAM,WAAW,cAAe,SAAQ,oBAAoB;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,qBAAqB,yCAIhC,CAAC"}

package/types/keycloak/context.d.ts

@@ -0,0 +1,3 @@
+import type { Keycloak } from ".";
+export declare const KeycloakContext: import("react").Context<Keycloak | undefined>;
+//# sourceMappingURL=context.d.ts.map

package/types/keycloak/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/keycloak/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,CAAC;AAElC,eAAO,MAAM,eAAe,+CAAiD,CAAC"}

package/types/keycloak/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * File: /src/keycloak/index.ts
+ * Project: @multiplatform.one/keycloak
+ *
+ * Better Auth–powered Keycloak class and useKeycloak hook for web.
+ * Replaces the previous next-auth/react based implementation.
+ */
+import type KeycloakClient from "@multiplatform.one/keycloak-js";
+import type { Session } from "../session/index";
+import type { KeycloakMock } from "../types";
+import { BaseKeycloak, type KeycloakLoginOptions, type KeycloakLogoutOptions } from "./base";
+export declare class Keycloak extends BaseKeycloak {
+    protected _handleInputObject(input: KeycloakClient | KeycloakMock | Session): void;
+    login(options?: KeycloakLoginOptions): Promise<void>;
+    logout(options?: KeycloakLogoutOptions): Promise<void>;
+}
+export declare function useKeycloak(): Keycloak | null | undefined;
+export * from "./base";
+export * from "./config";
+//# sourceMappingURL=index.d.ts.map

package/types/keycloak/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/keycloak/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,cAAc,MAAM,gCAAgC,CAAC;AAKjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,KAAK,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAI7F,qBAAa,QAAS,SAAQ,YAAY;IACxC,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,cAAc,GAAG,YAAY,GAAG,OAAO;IAcrE,KAAK,CAAC,OAAO,GAAE,oBAAyB;IAgBxC,MAAM,CAAC,OAAO,GAAE,qBAA0B;CAqBjD;AAED,wBAAgB,WAAW,gCAwB1B;AAED,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}

package/types/keycloak/index.native.d.ts

@@ -0,0 +1,7 @@
+import { BaseKeycloak } from "./base";
+export declare class Keycloak extends BaseKeycloak {
+}
+export declare function useKeycloak(): import(".").Keycloak | Keycloak | null | undefined;
+export * from "./base";
+export * from "./config";
+//# sourceMappingURL=index.native.d.ts.map

package/types/keycloak/index.native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.native.d.ts","sourceRoot":"","sources":["../../src/keycloak/index.native.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAItC,qBAAa,QAAS,SAAQ,YAAY;CAAG;AAE7C,wBAAgB,WAAW,uDAY1B;AAED,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}

package/types/keycloak/index.webext.d.ts

@@ -0,0 +1,19 @@
+/**
+ * File: /src/keycloak/index.webext.ts
+ * Project: @multiplatform.one/keycloak
+ *
+ * WebExt Keycloak class using Better Auth client for login/logout.
+ * Patched Keycloak JS client when available (iframe/token scenarios).
+ */
+import type KeycloakClient from "@multiplatform.one/keycloak-js";
+import type { KeycloakMock } from "../types";
+import { BaseKeycloak, type KeycloakLoginOptions, type KeycloakLogoutOptions } from "./base";
+export declare class Keycloak extends BaseKeycloak {
+    protected _handleInputObject(input: KeycloakClient | KeycloakMock): void;
+    login(options?: KeycloakLoginOptions): Promise<void>;
+    logout(options?: KeycloakLogoutOptions): Promise<void>;
+}
+export declare function useKeycloak(): import(".").Keycloak | null | undefined;
+export * from "./base";
+export * from "./config";
+//# sourceMappingURL=index.webext.d.ts.map

package/types/keycloak/index.webext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.webext.d.ts","sourceRoot":"","sources":["../../src/keycloak/index.webext.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,cAAc,MAAM,gCAAgC,CAAC;AAKjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,KAAK,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAG7F,qBAAa,QAAS,SAAQ,YAAY;IACxC,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,cAAc,GAAG,YAAY;IAQ3D,KAAK,CAAC,OAAO,GAAE,oBAAyB;IAgBxC,MAAM,CAAC,OAAO,GAAE,qBAA0B;CAiBjD;AAED,wBAAgB,WAAW,4CAK1B;AAED,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}

package/types/one.d.ts

@@ -0,0 +1,28 @@
+/**
+ * File: /src/one.ts
+ * Project: @multiplatform.one/keycloak
+ *
+ * Better Auth server configuration factory for apps using One.
+ * Replaces the previous Auth.js (createAuthConfig) approach.
+ * Stateless sessions — no database required.
+ */
+export declare function createAuth(config: AuthHandlerConfig): import("better-auth").Auth<any>;
+export interface KeycloakOptions {
+    adminPassword?: string;
+    adminUsername?: string;
+    baseUrl?: string;
+    clientId: string;
+    clientSecret: string;
+    realm?: string;
+    authorization?: Record<string, any>;
+}
+export interface AuthHandlerConfig {
+    baseUrl?: string;
+    keycloak: KeycloakOptions;
+    secret?: string;
+    scopes?: string[];
+    /** Expo deep-link scheme (e.g. "multiplatform-one") — added to trustedOrigins. */
+    expoScheme?: string;
+}
+export type Auth = ReturnType<typeof createAuth>;
+//# sourceMappingURL=one.d.ts.map

package/types/one.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"one.d.ts","sourceRoot":"","sources":["../src/one.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,wBAAgB,UAAU,CAAC,MAAM,EAAE,iBAAiB,mCA+CnD;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC"}

package/types/provider/AfterAuth.d.ts

@@ -0,0 +1,6 @@
+import { type ComponentType, type PropsWithChildren } from "react";
+export interface AfterAuthProps extends PropsWithChildren {
+    loadingComponent?: ComponentType;
+}
+export declare function AfterAuth({ children, loadingComponent: _loadingComponent }: AfterAuthProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=AfterAuth.d.ts.map

package/types/provider/AfterAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AfterAuth.d.ts","sourceRoot":"","sources":["../../src/provider/AfterAuth.tsx"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAa,MAAM,OAAO,CAAC;AAK9E,MAAM,WAAW,cAAe,SAAQ,iBAAiB;IACvD,gBAAgB,CAAC,EAAE,aAAa,CAAC;CAClC;AAED,wBAAgB,SAAS,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,EAAE,cAAc,2CAwD1F"}

package/types/provider/KeycloakProvider.d.ts

@@ -0,0 +1,17 @@
+import type { PropsWithChildren } from "react";
+import type { AuthConfig } from "../authConfig";
+export interface KeycloakProviderProps extends PropsWithChildren, AuthConfig {
+    baseUrl?: string;
+    clientId?: string;
+    publicClientId?: string;
+    realm?: string;
+    /** Better Auth server base URL (drives the native sign-in flow). Without it
+     * the native provider falls back to a hardcoded localhost:5000 -- on macOS
+     * that's ControlCenter (AirPlay) answering 403 to everything, which makes
+     * the Login button a perfectly silent no-op. */
+    betterAuthBaseUrl?: string;
+    /** App scheme for the Expo auth-session redirect (native). */
+    expoScheme?: string;
+}
+export declare function KeycloakProvider({ baseUrl, betterAuthBaseUrl, children, clientId, expoScheme, loginRedirectUri, debug, disabled, iframeSso, publicClientId, realm, }: KeycloakProviderProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=KeycloakProvider.d.ts.map

package/types/provider/KeycloakProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakProvider.d.ts","sourceRoot":"","sources":["../../src/provider/KeycloakProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAE/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAIhD,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB,EAAE,UAAU;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;oDAGgD;IAChD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,gBAAgB,CAAC,EAC/B,OAAO,EACP,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,gBAAgB,EAChB,KAAK,EACL,QAAQ,EACR,SAAS,EACT,cAAc,EACd,KAAK,GACN,EAAE,qBAAqB,2CAsBvB"}

package/types/provider/authProvider/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * File: /src/provider/auth_provider/index.tsx
+ * Project: @multiplatform.one/keycloak
+ *
+ * Web AuthProvider using Better Auth.
+ * Replaces the previous next-auth SessionProvider approach.
+ * For cookie-based (session) auth, Better Auth manages the session
+ * server-side; no client-side SessionProvider wrapper is needed.
+ * Patched Keycloak JS client for iframe/direct-token strategies.
+ */
+import type { AuthProviderProps } from "./shared";
+export declare function AuthProvider({ children, disabled, keycloakConfig, keycloakInitOptions, loadingComponent, }: AuthProviderProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/types/provider/authProvider/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/provider/authProvider/index.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAcH,OAAO,KAAK,EAAE,iBAAiB,EAAyB,MAAM,UAAU,CAAC;AAGzE,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,mBAAmB,EACnB,gBAAgB,GACjB,EAAE,iBAAiB,2CA0WnB"}

package/types/provider/authProvider/index.native.d.ts

@@ -0,0 +1,15 @@
+/**
+ * File: /src/provider/auth_provider/index.native.tsx
+ * Project: @multiplatform.one/keycloak
+ *
+ * Native (Expo) AuthProvider using the hand-rolled Better Auth flow
+ * (betterAuth/expoAuthFlow.native.ts): fetch + expo-web-browser + SecureStore.
+ * Deliberately NOT @better-auth/expo/client — its import graph drags
+ * better-auth's cookies module -> @better-auth/core db schema -> zod into the
+ * Hermes bundle, and zod's module init dies under the vxrn/rolldown dev
+ * transform. The server side stays better-auth (the expo() plugin provides
+ * /expo-authorization-proxy and the cookie hand-back).
+ */
+import type { AuthProviderProps } from "./shared";
+export declare function AuthProvider({ children, disabled, keycloakConfig, loadingComponent, }: AuthProviderProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=index.native.d.ts.map

package/types/provider/authProvider/index.native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.native.d.ts","sourceRoot":"","sources":["../../../src/provider/authProvider/index.native.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElD,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,gBAAgB,GACjB,EAAE,iBAAiB,2CA6FnB"}

package/types/provider/authProvider/index.webext.d.ts

@@ -0,0 +1,14 @@
+/**
+ * File: /src/provider/auth_provider/index.webext.tsx
+ * Project: @multiplatform.one/keycloak
+ *
+ * WebExt AuthProvider using Better Auth client.
+ * Web extensions run in a browser context — Better Auth client
+ * works via same-origin cookies. The extension must have host
+ * permissions for the Better Auth server origin.
+ *
+ * Patched Keycloak JS client for direct-token scenarios (iframe, store).
+ */
+import type { AuthProviderProps } from "./shared";
+export declare function AuthProvider({ children, disabled, keycloakConfig, keycloakInitOptions, loadingComponent, }: AuthProviderProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=index.webext.d.ts.map

package/types/provider/authProvider/index.webext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.webext.d.ts","sourceRoot":"","sources":["../../../src/provider/authProvider/index.webext.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAcH,OAAO,KAAK,EAAE,iBAAiB,EAAyB,MAAM,UAAU,CAAC;AAGzE,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,mBAAmB,EACnB,gBAAgB,GACjB,EAAE,iBAAiB,2CA+UnB"}

package/types/provider/authProvider/shared.d.ts

@@ -0,0 +1,38 @@
+/**
+ * File: /src/provider/auth_provider/shared.ts
+ * Project: @multiplatform.one/keycloak
+ *
+ * Shared types and constants for AuthProvider.
+ * No longer depends on next-auth.
+ */
+import type { KeycloakInitOptions } from "@multiplatform.one/keycloak-js";
+import type { ComponentType, PropsWithChildren } from "react";
+import type { KeycloakConfig } from "../../keycloak/index";
+export declare const defaultKeycloakInitOptions: KeycloakInitOptions;
+export interface MessageSchema {
+    type: string;
+    payload?: string;
+}
+export interface AuthProviderProps extends PropsWithChildren {
+    disabled?: boolean;
+    keycloakConfig: KeycloakConfig;
+    keycloakInitOptions?: KeycloakInitOptions;
+    loadingComponent?: ComponentType;
+}
+export interface Tokens<B = boolean> {
+    idToken?: string | B;
+    refreshToken?: string | B;
+    token?: string | B;
+}
+export declare enum AuthStrategy {
+    BetterAuth = "better-auth",
+    ExpoAuth = "expo-auth",
+    KeycloakClientImplicit = "keycloak-client-implicit",
+    KeycloakClientStandard = "keycloak-client-standard"
+}
+export declare enum AuthSource {
+    Query = "query",
+    Session = "session",
+    Store = "store"
+}
+//# sourceMappingURL=shared.d.ts.map

package/types/provider/authProvider/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/provider/authProvider/shared.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,eAAO,MAAM,0BAA0B,EAAE,mBAMxC,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,cAAc,CAAC;IAC/B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,gBAAgB,CAAC,EAAE,aAAa,CAAC;CAClC;AAED,MAAM,WAAW,MAAM,CAAC,CAAC,GAAG,OAAO;IACjC,OAAO,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;CACpB;AAED,oBAAY,YAAY;IACtB,UAAU,gBAAgB;IAC1B,QAAQ,cAAc;IACtB,sBAAsB,6BAA6B;IACnD,sBAAsB,6BAA6B;CACpD;AAED,oBAAY,UAAU;IACpB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,KAAK,UAAU;CAChB"}

package/types/provider/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./AfterAuth";
+export * from "./authProvider";
+export * from "./KeycloakProvider";
+//# sourceMappingURL=index.d.ts.map

package/types/provider/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/provider/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC"}

package/types/session/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * File: /src/session/index.ts
+ * Project: @multiplatform.one/keycloak
+ *
+ * Better Auth session hook for web.
+ * Replaces the previous next-auth/react useSession.
+ */
+export interface Session {
+    accessToken?: string;
+    err?: Error;
+    idToken?: string;
+    refreshToken?: string;
+    user?: {
+        id: string;
+        name?: string | null;
+        email?: string | null;
+        image?: string | null;
+    };
+    expires?: string;
+}
+export type SessionStatus = "loading" | "authenticated" | "unauthenticated";
+export interface SessionContextValue<_R extends boolean = false> {
+    session: Session | null;
+    status: SessionStatus;
+    update?: () => void;
+}
+declare let useSession: <R extends boolean = false>(_options?: Record<string, unknown>) => SessionContextValue<R>;
+export { useSession };
+//# sourceMappingURL=index.d.ts.map

package/types/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,MAAM,WAAW,OAAO;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,KAAK,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAE5E,MAAM,WAAW,mBAAmB,CAAC,EAAE,SAAS,OAAO,GAAG,KAAK;IAC7D,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,QAAA,IAAI,UAAU,GAAI,CAAC,SAAS,OAAO,GAAG,KAAK,EACzC,WAAW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACjC,mBAAmB,CAAC,CAAC,CAEvB,CAAC;AAwBF,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/types/session/index.native.d.ts

@@ -0,0 +1,13 @@
+/**
+ * File: /src/session/index.native.ts
+ * Project: @multiplatform.one/keycloak
+ *
+ * Native session hook backed by a tiny external store the AuthProvider feeds
+ * (no better-auth client on native -- see betterAuth/expoAuthFlow.native.ts).
+ */
+import type { Session, SessionContextValue, SessionStatus } from "./index";
+/** Fed by the native AuthProvider on mount / sign-in / sign-out. */
+export declare function setNativeSession(session: Session | null, status?: SessionStatus): void;
+export declare function getSession(): Promise<Session | null>;
+export declare function useSession<R extends boolean = false>(_options?: Record<string, unknown>): SessionContextValue<R>;
+//# sourceMappingURL=index.native.d.ts.map

package/types/session/index.native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.native.d.ts","sourceRoot":"","sources":["../../src/session/index.native.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAU3E,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,aAAa,QAM/E;AAOD,wBAAsB,UAAU,4BAE/B;AAED,wBAAgB,UAAU,CAAC,CAAC,SAAS,OAAO,GAAG,KAAK,EAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,mBAAmB,CAAC,CAAC,CAAC,CAMxB"}

package/types/session/index.webext.d.ts

@@ -0,0 +1,11 @@
+/**
+ * File: /src/session/index.webext.ts
+ * Project: @multiplatform.one/keycloak
+ *
+ * Session stub for web extensions. Uses Better Auth client internally
+ * when available; otherwise returns empty session.
+ */
+import type { SessionContextValue } from "./index";
+export declare function getSession(): Promise<null>;
+export declare function useSession<R extends boolean = false>(_options?: Record<string, unknown>): SessionContextValue<R>;
+//# sourceMappingURL=index.webext.d.ts.map

package/types/session/index.webext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.webext.d.ts","sourceRoot":"","sources":["../../src/session/index.webext.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEnD,wBAAsB,UAAU,kBAE/B;AAED,wBAAgB,UAAU,CAAC,CAAC,SAAS,OAAO,GAAG,KAAK,EAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,mBAAmB,CAAC,CAAC,CAAC,CAExB"}

package/types/state.d.ts

@@ -0,0 +1,18 @@
+export declare const persist: boolean;
+export interface AuthTokenState {
+    idToken: string;
+    refreshToken: string;
+    token: string;
+}
+export interface AuthState extends AuthTokenState {
+    setIdToken: (idToken: string) => void;
+    setRefreshToken: (refreshToken: string) => void;
+    setToken: (token: string) => void;
+    setTokens: (tokens: {
+        idToken?: string;
+        refreshToken?: string;
+        token?: string;
+    }) => void;
+}
+export declare function useAuthStore(): AuthState;
+//# sourceMappingURL=state.d.ts.map

package/types/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,OAAO,SAAmD,CAAC;AAExE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAU,SAAQ,cAAc;IAC/C,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,SAAS,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC1F;AAOD,wBAAgB,YAAY,IAAI,SAAS,CAUxC"}