@owlmeans/client-auth 0.1.7 → 0.1.9

package/README.md

@@ -67,3 +67,20 @@ Auth service alias: `'auth'`.
 - [`@owlmeans/auth`](../auth) — `Auth` type returned by `useSelfAuth`
 - [`@owlmeans/auth-common`](../auth-common) — auth module route definitions
 - [`@owlmeans/server-auth`](../server-auth) — server-side counterpart
+
+<!-- owlmeans:agent-guidance:start -->
+## Agent guidance
+
+This package ships embedded Claude Code skills and GitHub Copilot instructions under
+`agent-meta/`. After installing your `@owlmeans/*` packages, run the OwlMeans
+agent-skills installer to place them into your project's native locations
+(`.claude/skills/` and `.github/instructions/`):
+
+```sh
+npx @owlmeans/agent-skills
+```
+
+The embedded files are version-matched to this package release. Do not edit them
+directly — they are regenerated on each publish. To contribute guidance edits,
+open a PR against the source monorepo.
+<!-- owlmeans:agent-guidance:end -->

package/agent-meta/instructions/client-auth.instructions.md

@@ -0,0 +1,42 @@
+---
+description: "How to use @owlmeans/client-auth — client-side auth manager and UI components, setupExternalAuthentication() to wire OAuth/OIDC flows."
+applyTo: "**/*.ts, **/*.tsx"
+---
+<!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
+
+# @owlmeans/client-auth
+
+**Layer:** Client
+**Install:** `"@owlmeans/client-auth": "^0.1.9"` in `dependencies`
+
+## Key Exports
+
+| Export | Description |
+|--------|-------------|
+| `setupExternalAuthentication(alias)` | Register OAuth/OIDC external auth flow |
+| Auth components | Login UI primitives |
+| Auth service | Client-side auth manager |
+| Modules | Auth module declarations |
+| Constants | Auth aliases |
+
+## Subpath Exports
+
+- `./manager`, `./manager/modules`, `./manager/plugins`
+
+## Usage
+
+```typescript
+import { setupExternalAuthentication } from '@owlmeans/client-auth'
+setupExternalAuthentication(AUTH_WEB)
+```
+
+## Product-Viable Usage Notes
+
+- The manager web app imports `DEFAULT_ALIAS` from `@owlmeans/client-auth` as the client-side equivalent of `DEFAULT_GUARD`.
+- It imports `@owlmeans/web-oidc-rp/auth/plugins` for side effects; that registers OIDC and Google authentication plugins in the client auth manager.
+- During Google/OIDC redirects, plugins persist the client auth control state, restore it on return, then submit `AuthCredentials` to the server auth flow.
+- The browser receives and stores a normal OwlMeans bearer token. Product authorization remains server-side through module gates and handler checks, not through client-only state.
+
+## Depends On
+
+- `@owlmeans/auth`, `@owlmeans/auth-common`, `@owlmeans/client-context`, `@owlmeans/client-entrypoint`, `react`

package/agent-meta/manifest.json

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": 1,
+  "package": "@owlmeans/client-auth",
+  "version": "0.1.9",
+  "generatedAt": "2026-06-14T13:34:06.125Z",
+  "canonicalRepo": "https://github.com/owlmeans/common",
+  "entries": [
+    {
+      "kind": "skill",
+      "name": "client-auth",
+      "category": "package-specific",
+      "file": "skills/client-auth/SKILL.md",
+      "canonicalPath": ".claude/skills/client-auth/SKILL.md"
+    },
+    {
+      "kind": "instruction",
+      "name": "client-auth",
+      "category": "package-specific",
+      "file": "instructions/client-auth.instructions.md",
+      "canonicalPath": ".github/instructions/client-auth.instructions.md"
+    }
+  ]
+}

package/agent-meta/skills/client-auth/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: client-auth
+description: How to use @owlmeans/client-auth — client-side auth manager and UI components, setupExternalAuthentication() to wire OAuth/OIDC flows. Auto-invoked when importing client-auth helpers or registering external authentication.
+user-invocable: false
+---
+<!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
+
+# @owlmeans/client-auth
+
+**Layer:** Client
+**Install:** `"@owlmeans/client-auth": "^0.1.9"` in `dependencies`
+
+## Key Exports
+
+| Export | Description |
+|--------|-------------|
+| `setupExternalAuthentication(alias)` | Register OAuth/OIDC external auth flow module |
+| Auth components | Login UI primitives |
+| Auth service | Client-side auth manager service |
+| Modules | Auth module declarations |
+| Constants | Auth aliases (re-exports `AUTH_API`) |
+
+## Subpath Exports
+
+- `./manager` — client-side auth manager
+- `./manager/modules` — manager module declarations
+- `./manager/plugins` — pluggable token providers
+
+## Usage
+
+```typescript
+import { setupExternalAuthentication } from '@owlmeans/client-auth'
+
+setupExternalAuthentication(AUTH_WEB) // alias of the web auth service
+```
+
+## Product-Viable Usage Notes
+
+- The manager web app imports `DEFAULT_ALIAS` from `@owlmeans/client-auth` as the client-side equivalent of `DEFAULT_GUARD`.
+- It imports `@owlmeans/web-oidc-rp/auth/plugins` for side effects; that registers OIDC and Google authentication plugins in the client auth manager.
+- During Google/OIDC redirects, plugins persist the client auth control state, restore it on return, then submit `AuthCredentials` to the server auth flow.
+- The browser receives and stores a normal OwlMeans bearer token. Product authorization remains server-side through module gates and handler checks, not through client-only state.
+
+## Depends On
+
+- `@owlmeans/auth`, `@owlmeans/auth-common`
+- `@owlmeans/client-context`, `@owlmeans/client-entrypoint`
+- `react` (peer)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/client-auth",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -43,24 +43,24 @@
     }
   },
   "dependencies": {
-    "@owlmeans/auth": "^0.1.7",
-    "@owlmeans/auth-common": "^0.1.7",
-    "@owlmeans/basic-envelope": "^0.1.7",
-    "@owlmeans/basic-keys": "^0.1.7",
-    "@owlmeans/client": "^0.1.7",
-    "@owlmeans/client-context": "^0.1.7",
-    "@owlmeans/client-flow": "^0.1.7",
-    "@owlmeans/client-entrypoint": "^0.1.7",
-    "@owlmeans/client-resource": "^0.1.7",
-    "@owlmeans/client-socket": "^0.1.7",
-    "@owlmeans/context": "^0.1.7",
-    "@owlmeans/did": "^0.1.7",
-    "@owlmeans/error": "^0.1.7",
-    "@owlmeans/flow": "^0.1.7",
-    "@owlmeans/entrypoint": "^0.1.7",
-    "@owlmeans/resource": "^0.1.7",
-    "@owlmeans/socket": "^0.1.7",
-    "@owlmeans/web-flow": "^0.1.7",
+    "@owlmeans/auth": "^0.1.9",
+    "@owlmeans/auth-common": "^0.1.9",
+    "@owlmeans/basic-envelope": "^0.1.9",
+    "@owlmeans/basic-keys": "^0.1.9",
+    "@owlmeans/client": "^0.1.9",
+    "@owlmeans/client-context": "^0.1.9",
+    "@owlmeans/client-flow": "^0.1.9",
+    "@owlmeans/client-entrypoint": "^0.1.9",
+    "@owlmeans/client-resource": "^0.1.9",
+    "@owlmeans/client-socket": "^0.1.9",
+    "@owlmeans/context": "^0.1.9",
+    "@owlmeans/did": "^0.1.9",
+    "@owlmeans/error": "^0.1.9",
+    "@owlmeans/flow": "^0.1.9",
+    "@owlmeans/entrypoint": "^0.1.9",
+    "@owlmeans/resource": "^0.1.9",
+    "@owlmeans/socket": "^0.1.9",
+    "@owlmeans/web-flow": "^0.1.9",
     "@scure/base": "^1.1.9"
   },
   "peerDependencies": {
@@ -69,7 +69,7 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
-    "@owlmeans/test-auth": "^0.1.7",
+    "@owlmeans/test-auth": "^0.1.9",
     "@types/bun": "^1.3.0",
     "@types/react": "^19.2.7",
     "nodemon": "^3.1.11",