@palantir/pack.auth 0.0.1-beta.1 → 0.0.2

package/.turbo/turbo-lint.log

@@ -1,6 +1,6 @@
 
-> @palantir/pack.auth@0.0.1-beta.1 lint /home/runner/work/pack/pack/packages/auth/core
-> eslint ./src ; dprint check --config $(find-up dprint.json) --allow-no-files
+> @palantir/pack.auth@0.0.2 lint /home/runner/work/pack/pack/packages/auth/core
+> eslint ./src && dprint check --config $(find-up dprint.json) --allow-no-files
 
 
 /home/runner/work/pack/pack/packages/auth/core/src/__tests__/AuthModuleImpl.test.ts

package/.turbo/turbo-transpileBrowser.log

@@ -1,5 +1,5 @@
 
-> @palantir/pack.auth@0.0.1-beta.1 transpileBrowser /home/runner/work/pack/pack/packages/auth/core
+> @palantir/pack.auth@0.0.2 transpileBrowser /home/runner/work/pack/pack/packages/auth/core
 > monorepo-transpile -f esm -m bundle -t browser
 
 👍

package/.turbo/turbo-transpileCjs.log

@@ -1,5 +1,5 @@
 
-> @palantir/pack.auth@0.0.1-beta.1 transpileCjs /home/runner/work/pack/pack/packages/auth/core
+> @palantir/pack.auth@0.0.2 transpileCjs /home/runner/work/pack/pack/packages/auth/core
 > monorepo-transpile -f cjs -m bundle -t node
 
 👍

package/.turbo/turbo-transpileEsm.log

@@ -1,5 +1,5 @@
 
-> @palantir/pack.auth@0.0.1-beta.1 transpileEsm /home/runner/work/pack/pack/packages/auth/core
+> @palantir/pack.auth@0.0.2 transpileEsm /home/runner/work/pack/pack/packages/auth/core
 > monorepo-transpile -f esm -m bundle -t node
 
 👍

package/.turbo/turbo-transpileTypes.log

@@ -1,5 +1,5 @@
 
-> @palantir/pack.auth@0.0.1-beta.1 transpileTypes /home/runner/work/pack/pack/packages/auth/core
+> @palantir/pack.auth@0.0.2 transpileTypes /home/runner/work/pack/pack/packages/auth/core
 > monorepo-transpile -f esm -m types -t node
 
 👍

package/.turbo/turbo-typecheck.log

@@ -1,4 +1,4 @@
 
-> @palantir/pack.auth@0.0.1-beta.1 typecheck /home/runner/work/pack/pack/packages/auth/core
+> @palantir/pack.auth@0.0.2 typecheck /home/runner/work/pack/pack/packages/auth/core
 > tsc --noEmit --emitDeclarationOnly false
 

package/CHANGELOG.md

@@ -0,0 +1,21 @@
+# @palantir/pack.auth
+
+## 0.0.2
+
+### Patch Changes
+
+- 67df6e4: Documented public apis
+- Updated dependencies [eba27ae]
+- Updated dependencies [67df6e4]
+  - @palantir/pack.core@0.1.1
+
+## 0.0.1
+
+### Patch Changes
+
+- 8ed48e6: Initial release of auth packages
+- 09f7acd: Add activity & presence custom event subscriptions
+- Updated dependencies [8698373]
+- Updated dependencies [77c07c4]
+- Updated dependencies [3ebc927]
+  - @palantir/pack.core@0.1.0

package/build/browser/index.js

@@ -105,12 +105,12 @@ var AuthModuleImpl = class {
       });
     });
   }
-  getCurrentUser() {
-    const userId = this.#authService.getCurrentUserId();
-    if (!userId) {
-      return void 0;
+  getCurrentUser(allowUnverified = false) {
+    const userId = this.#authService.getCurrentUserId(allowUnverified);
+    if (userId != null) {
+      return createUserRef(this.app, userId);
     }
-    return createUserRef(this.app, userId);
+    return void 0;
   }
   async validateToken() {
     return this.#authService.validateToken();

package/build/browser/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/types/AuthState.ts","../../src/types/UserRef.ts","../../src/utils/AuthModuleImpl.ts","../../src/constants/AuthModuleKey.ts","../../src/types/AuthModule.ts","../../src/utils/AuthModuleConfig.ts"],"names":[],"mappings":";;;;;AAgBO,IAAM,SAAA,GAAY;AAAA,EACvB,aAAA,EAAe,eAAA;AAAA,EACf,cAAA,EAAgB,gBAAA;AAAA,EAChB,KAAA,EAAO,OAAA;AAAA,EACP,YAAA,EAAc,cAAA;AAAA,EACd,eAAA,EAAiB;AACnB;;;ACLA,IAAM,YAAA,GAAe,OAAO,SAAS,CAAA;AAOrC,IAAM,eAAA,GAAkB,kBAAA;AACxB,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO;AAAA,EACrC,MAAA,EAAQ,eAAA;AAAA,EACR,CAAC,YAAY,GAAG,YAAA;AAAA,EAChB,KAAK,MAAM,OAAA,CAAQ,OAAO,IAAI,KAAA,CAAM,wBAAwB,CAAC;AAC/D,CAAC,CAAA;AACM,SAAS,cAAA,GAAiB;AAC/B,EAAA,OAAO,gBAAA;AACT;AACO,SAAS,eAAe,OAAA,EAAS;AACtC,EAAA,OAAO,OAAA,CAAQ,MAAA,KAAW,eAAA,IAAmB,OAAA,CAAQ,MAAA,KAAW,EAAA;AAClE;AACO,IAAM,aAAA,GAAgB,CAAC,GAAA,EAAK,MAAA,KAAW;AAC5C,EAAA,OAAO,IAAI,WAAA,CAAY,GAAA,EAAK,MAAM,CAAA;AACpC;AACA,IAAM,cAAN,MAAkB;AAAA,EAChB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA,CAAY,KAAK,MAAA,EAAQ;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,cAAc,GAAG,CAAA;AACpC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EACA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACxD;AACF,CAAA;;;AC/BO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAAA;AAAA,EACA,GAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA,CAAY,KAAK,WAAA,EAAa;AAC5B,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,YAAA,GAAe,WAAA;AAAA,EACtB;AAAA;AAAA,EAGA,eAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,aAAa,eAAA,EAAgB;AAAA,EAC3C;AAAA,EACA,MAAM,QAAA,GAAW;AACf,IAAA,OAAO,IAAA,CAAK,aAAa,QAAA,EAAS;AAAA,EACpC;AAAA,EACA,mBAAA,GAAsB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,mBAAA,EAAoB;AAAA,EAC/C;AAAA,EACA,MAAM,MAAA,GAAS;AACb,IAAA,IAAI,KAAK,aAAA,EAAe;AACtB,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,iBAAiB,YAAY;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,aAAa,MAAA,EAAO;AAAA,MACjC,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,MACvB;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,kBAAkB,QAAA,EAAU;AAC1B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,iBAAA,CAAkB,QAAQ,CAAA;AAAA,EACrD;AAAA,EACA,cAAc,QAAA,EAAU;AACtB,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc,QAAQ,CAAA;AAAA,EACjD;AAAA,EACA,MAAM,WAAA,GAAc;AAElB,IAAA,IAAI,IAAA,CAAK,iBAAgB,EAAG;AAC1B,MAAA,OAAO,QAAQ,OAAA,EAAQ;AAAA,IACzB;AACA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,iBAAA,CAAkB,CAAA,KAAA,KAAS;AAClD,QAAA,IAAI,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,aAAA,EAAe;AAC3C,UAAA,WAAA,EAAY;AACZ,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,KAAA,EAAO;AAC1C,UAAA,WAAA,EAAY;AACZ,UAAA,MAAA,CAAO,IAAI,MAAM,uBAAA,EAAyB;AAAA,YACxC,OAAO,KAAA,CAAM;AAAA,WACd,CAAC,CAAA;AAAA,QACJ;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EACA,cAAA,GAAiB;AACf,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,gBAAA,EAAiB;AAClD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AAAA,EACvC;AAAA,EACA,MAAM,aAAA,GAAgB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,aAAA,EAAc;AAAA,EACzC;AAAA,EACA,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO;AAC/B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,WAAA,CAAY,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpD;AAAA,EACA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,aAAa,OAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,EACvB;AACF;;;ACpFO,IAAM,eAAA,GAAkB;AAAA,EAC7B,aAAA,EAAe,MAAA;AAAA,EACf,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AAAA,EAC3B,UAAA,EAAY,CAAC,GAAA,EAAK,MAAA,KAAW;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,cAAA,CAAe,GAAA,EAAK,MAAA,CAAO,WAAW,CAAA;AAAA,EACnD;AACF,CAAA;;;ACOO,SAAS,cAAc,GAAA,EAAK;AACjC,EAAA,mBAAA,CAAoB,GAAG,CAAA;AACvB,EAAA,OAAO,GAAA,CAAI,UAAU,eAAe,CAAA;AACtC;;;ACRO,SAAS,uBAAuB,WAAA,EAAa;AAClD,EAAA,MAAM,MAAA,GAAS;AAAA,IACb;AAAA,GACF;AACA,EAAA,OAAO,CAAC,iBAAiB,MAAM,CAAA;AACjC","file":"index.js","sourcesContent":["/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport const AuthState = {\n  Authenticated: \"authenticated\",\n  Authenticating: \"authenticating\",\n  Error: \"error\",\n  Initializing: \"initializing\",\n  Unauthenticated: \"unauthenticated\"\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getAuthModule } from \"./AuthModule.js\";\nconst UserRefBrand = Symbol(\"UserRef\");\n\n/**\n * Reference to a user from the platform API.\n * Provides access to user information with caching.\n */\n\nconst INVALID_USER_ID = \"INVALID_USER_REF\";\nconst INVALID_USER_REF = Object.freeze({\n  userId: INVALID_USER_ID,\n  [UserRefBrand]: UserRefBrand,\n  get: () => Promise.reject(new Error(\"Invalid user reference\"))\n});\nexport function invalidUserRef() {\n  return INVALID_USER_REF;\n}\nexport function isValidUserRef(userRef) {\n  return userRef.userId !== INVALID_USER_ID && userRef.userId !== \"\";\n}\nexport const createUserRef = (app, userId) => {\n  return new UserRefImpl(app, userId);\n};\nclass UserRefImpl {\n  userId;\n  #authModule;\n  constructor(app, userId) {\n    this.#authModule = getAuthModule(app);\n    this.userId = userId;\n  }\n  get(force) {\n    return this.#authModule.getUserData(this.userId, force);\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthState } from \"../types/AuthState.js\";\nimport { createUserRef } from \"../types/UserRef.js\";\nexport class AuthModuleImpl {\n  #authService;\n  app;\n  signInPromise;\n  constructor(app, authService) {\n    this.app = app;\n    this.#authService = authService;\n  }\n\n  // AuthModule interface implementation\n  isAuthenticated() {\n    return this.#authService.isAuthenticated();\n  }\n  async getToken() {\n    return this.#authService.getToken();\n  }\n  getTokenOrUndefined() {\n    return this.#authService.getTokenOrUndefined();\n  }\n  async signIn() {\n    if (this.signInPromise) {\n      return this.signInPromise;\n    }\n    this.signInPromise = (async () => {\n      try {\n        await this.#authService.signIn();\n      } finally {\n        this.signInPromise = undefined;\n      }\n    })();\n    return this.signInPromise;\n  }\n  async signOut() {\n    return this.#authService.signOut();\n  }\n  async refresh() {\n    if (!this.#authService.refresh) {\n      throw new Error(\"Refresh not supported for this auth client type\");\n    }\n    return this.#authService.refresh();\n  }\n  onAuthStateChange(callback) {\n    return this.#authService.onAuthStateChange(callback);\n  }\n  onTokenChange(callback) {\n    return this.#authService.onTokenChange(callback);\n  }\n  async waitForAuth() {\n    // If already authenticated, resolve immediately\n    if (this.isAuthenticated()) {\n      return Promise.resolve();\n    }\n    return new Promise((resolve, reject) => {\n      const unsubscribe = this.onAuthStateChange(event => {\n        if (event.state === AuthState.Authenticated) {\n          unsubscribe();\n          resolve();\n        } else if (event.state === AuthState.Error) {\n          unsubscribe();\n          reject(new Error(\"Authentication failed\", {\n            cause: event.error\n          }));\n        }\n      });\n    });\n  }\n  getCurrentUser() {\n    const userId = this.#authService.getCurrentUserId();\n    if (!userId) {\n      return undefined;\n    }\n    return createUserRef(this.app, userId);\n  }\n  async validateToken() {\n    return this.#authService.validateToken();\n  }\n  async getUserData(userId, force) {\n    return this.#authService.getUserData(userId, force);\n  }\n  dispose() {\n    this.#authService.dispose();\n    this.signInPromise = undefined;\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthModuleImpl } from \"../utils/AuthModuleImpl.js\";\nexport const AUTH_MODULE_KEY = {\n  appMemberName: \"auth\",\n  key: Symbol.for(\"pack.auth\"),\n  initModule: (app, config) => {\n    if (!config) {\n      throw new Error(\"AuthModuleConfig is required to initialize AuthModule\");\n    }\n    return new AuthModuleImpl(app, config.authService);\n  }\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { assertIsAppInternal } from \"@palantir/pack.core\";\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * AuthModule provides unified authentication services for PACK applications.\n *\n * It wraps OSDK OAuth clients and provides a consistent interface for authentication\n * state management, token access, and auth lifecycle events.\n */\n// TODO: functions should be method style\n\n/**\n * Get the auth module from an PACK app instance.\n *\n * @param app - PACK app instance\n * @returns The auth module\n */\nexport function getAuthModule(app) {\n  assertIsAppInternal(app);\n  return app.getModule(AUTH_MODULE_KEY);\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * Configuration for AuthModule initialization\n */\n\n/**\n * Creates an auth module configuration tuple.\n *\n * @param authService - The auth service to use\n * @returns Module configuration tuple for the auth module\n */\nexport function createAuthModuleConfig(authService) {\n  const config = {\n    authService\n  };\n  return [AUTH_MODULE_KEY, config];\n}"]}
+{"version":3,"sources":["../../src/types/AuthState.ts","../../src/types/UserRef.ts","../../src/utils/AuthModuleImpl.ts","../../src/constants/AuthModuleKey.ts","../../src/types/AuthModule.ts","../../src/utils/AuthModuleConfig.ts"],"names":[],"mappings":";;;;;AAgBO,IAAM,SAAA,GAAY;AAAA,EACvB,aAAA,EAAe,eAAA;AAAA,EACf,cAAA,EAAgB,gBAAA;AAAA,EAChB,KAAA,EAAO,OAAA;AAAA,EACP,YAAA,EAAc,cAAA;AAAA,EACd,eAAA,EAAiB;AACnB;;;ACLA,IAAM,YAAA,GAAe,OAAO,SAAS,CAAA;AAOrC,IAAM,eAAA,GAAkB,kBAAA;AACxB,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO;AAAA,EACrC,MAAA,EAAQ,eAAA;AAAA,EACR,CAAC,YAAY,GAAG,YAAA;AAAA,EAChB,KAAK,MAAM,OAAA,CAAQ,OAAO,IAAI,KAAA,CAAM,wBAAwB,CAAC;AAC/D,CAAC,CAAA;AAeM,SAAS,cAAA,GAAiB;AAC/B,EAAA,OAAO,gBAAA;AACT;AAcO,SAAS,eAAe,OAAA,EAAS;AACtC,EAAA,OAAO,OAAA,CAAQ,MAAA,KAAW,eAAA,IAAmB,OAAA,CAAQ,MAAA,KAAW,EAAA;AAClE;AACO,IAAM,aAAA,GAAgB,CAAC,GAAA,EAAK,MAAA,KAAW;AAC5C,EAAA,OAAO,IAAI,WAAA,CAAY,GAAA,EAAK,MAAM,CAAA;AACpC;AACA,IAAM,cAAN,MAAkB;AAAA,EAChB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA,CAAY,KAAK,MAAA,EAAQ;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,cAAc,GAAG,CAAA;AACpC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EACA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACxD;AACF,CAAA;;;AC1DO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAAA;AAAA,EACA,GAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA,CAAY,KAAK,WAAA,EAAa;AAC5B,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,YAAA,GAAe,WAAA;AAAA,EACtB;AAAA;AAAA,EAGA,eAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,aAAa,eAAA,EAAgB;AAAA,EAC3C;AAAA,EACA,MAAM,QAAA,GAAW;AACf,IAAA,OAAO,IAAA,CAAK,aAAa,QAAA,EAAS;AAAA,EACpC;AAAA,EACA,mBAAA,GAAsB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,mBAAA,EAAoB;AAAA,EAC/C;AAAA,EACA,MAAM,MAAA,GAAS;AACb,IAAA,IAAI,KAAK,aAAA,EAAe;AACtB,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,iBAAiB,YAAY;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,aAAa,MAAA,EAAO;AAAA,MACjC,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,MACvB;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,kBAAkB,QAAA,EAAU;AAC1B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,iBAAA,CAAkB,QAAQ,CAAA;AAAA,EACrD;AAAA,EACA,cAAc,QAAA,EAAU;AACtB,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc,QAAQ,CAAA;AAAA,EACjD;AAAA,EACA,MAAM,WAAA,GAAc;AAElB,IAAA,IAAI,IAAA,CAAK,iBAAgB,EAAG;AAC1B,MAAA,OAAO,QAAQ,OAAA,EAAQ;AAAA,IACzB;AACA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,iBAAA,CAAkB,CAAA,KAAA,KAAS;AAClD,QAAA,IAAI,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,aAAA,EAAe;AAC3C,UAAA,WAAA,EAAY;AACZ,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,KAAA,EAAO;AAC1C,UAAA,WAAA,EAAY;AACZ,UAAA,MAAA,CAAO,IAAI,MAAM,uBAAA,EAAyB;AAAA,YACxC,OAAO,KAAA,CAAM;AAAA,WACd,CAAC,CAAA;AAAA,QACJ;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EACA,cAAA,CAAe,kBAAkB,KAAA,EAAO;AACtC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,gBAAA,CAAiB,eAAe,CAAA;AACjE,IAAA,IAAI,UAAU,IAAA,EAAM;AAClB,MAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AAAA,IACvC;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EACA,MAAM,aAAA,GAAgB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,aAAA,EAAc;AAAA,EACzC;AAAA,EACA,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO;AAC/B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,WAAA,CAAY,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpD;AAAA,EACA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,aAAa,OAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,EACvB;AACF;;;ACpFO,IAAM,eAAA,GAAkB;AAAA,EAC7B,aAAA,EAAe,MAAA;AAAA,EACf,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AAAA,EAC3B,UAAA,EAAY,CAAC,GAAA,EAAK,MAAA,KAAW;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,cAAA,CAAe,GAAA,EAAK,MAAA,CAAO,WAAW,CAAA;AAAA,EACnD;AACF,CAAA;;;ACMO,SAAS,cAAc,GAAA,EAAK;AACjC,EAAA,mBAAA,CAAoB,GAAG,CAAA;AACvB,EAAA,OAAO,GAAA,CAAI,UAAU,eAAe,CAAA;AACtC;;;ACPO,SAAS,uBAAuB,WAAA,EAAa;AAClD,EAAA,MAAM,MAAA,GAAS;AAAA,IACb;AAAA,GACF;AACA,EAAA,OAAO,CAAC,iBAAiB,MAAM,CAAA;AACjC","file":"index.js","sourcesContent":["/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport const AuthState = {\n  Authenticated: \"authenticated\",\n  Authenticating: \"authenticating\",\n  Error: \"error\",\n  Initializing: \"initializing\",\n  Unauthenticated: \"unauthenticated\"\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getAuthModule } from \"./AuthModule.js\";\nconst UserRefBrand = Symbol(\"UserRef\");\n\n/**\n * Reference to a user from the platform API.\n * Provides access to user information with caching.\n */\n\nconst INVALID_USER_ID = \"INVALID_USER_REF\";\nconst INVALID_USER_REF = Object.freeze({\n  userId: INVALID_USER_ID,\n  [UserRefBrand]: UserRefBrand,\n  get: () => Promise.reject(new Error(\"Invalid user reference\"))\n});\n\n/**\n * Get an invalid user reference. This is a stable reference that can be used to\n * represent an invalid user.\n *\n * Not to be confused with a valid reference to a non-existent user, an invalid\n * reference is one that is not properly initialized. For example, code that\n * initializes with an undefined or empty userId might produce an invalid user\n * reference rather than propagate nullish types.\n *\n * Most operations on an invalid reference are no-ops. For the rest, it is\n * recommended to check for validity using {@link isValidUserRef} before\n * performing operations.\n */\nexport function invalidUserRef() {\n  return INVALID_USER_REF;\n}\n\n/**\n * Check if a user reference is valid.\n *\n * Not to be confused with a valid reference to a non-existent user, an invalid\n * reference is one that is not properly initialized. For example, code that\n * initializes with an undefined or empty userId might produce an invalid user\n * reference rather than propagate nullish types.\n *\n * Most operations on an invalid reference are no-ops. For the rest, it is\n * recommended to check for validity using this function before performing\n * operations.\n */\nexport function isValidUserRef(userRef) {\n  return userRef.userId !== INVALID_USER_ID && userRef.userId !== \"\";\n}\nexport const createUserRef = (app, userId) => {\n  return new UserRefImpl(app, userId);\n};\nclass UserRefImpl {\n  userId;\n  #authModule;\n  constructor(app, userId) {\n    this.#authModule = getAuthModule(app);\n    this.userId = userId;\n  }\n  get(force) {\n    return this.#authModule.getUserData(this.userId, force);\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthState } from \"../types/AuthState.js\";\nimport { createUserRef } from \"../types/UserRef.js\";\nexport class AuthModuleImpl {\n  #authService;\n  app;\n  signInPromise;\n  constructor(app, authService) {\n    this.app = app;\n    this.#authService = authService;\n  }\n\n  // AuthModule interface implementation\n  isAuthenticated() {\n    return this.#authService.isAuthenticated();\n  }\n  async getToken() {\n    return this.#authService.getToken();\n  }\n  getTokenOrUndefined() {\n    return this.#authService.getTokenOrUndefined();\n  }\n  async signIn() {\n    if (this.signInPromise) {\n      return this.signInPromise;\n    }\n    this.signInPromise = (async () => {\n      try {\n        await this.#authService.signIn();\n      } finally {\n        this.signInPromise = undefined;\n      }\n    })();\n    return this.signInPromise;\n  }\n  async signOut() {\n    return this.#authService.signOut();\n  }\n  async refresh() {\n    if (!this.#authService.refresh) {\n      throw new Error(\"Refresh not supported for this auth client type\");\n    }\n    return this.#authService.refresh();\n  }\n  onAuthStateChange(callback) {\n    return this.#authService.onAuthStateChange(callback);\n  }\n  onTokenChange(callback) {\n    return this.#authService.onTokenChange(callback);\n  }\n  async waitForAuth() {\n    // If already authenticated, resolve immediately\n    if (this.isAuthenticated()) {\n      return Promise.resolve();\n    }\n    return new Promise((resolve, reject) => {\n      const unsubscribe = this.onAuthStateChange(event => {\n        if (event.state === AuthState.Authenticated) {\n          unsubscribe();\n          resolve();\n        } else if (event.state === AuthState.Error) {\n          unsubscribe();\n          reject(new Error(\"Authentication failed\", {\n            cause: event.error\n          }));\n        }\n      });\n    });\n  }\n  getCurrentUser(allowUnverified = false) {\n    const userId = this.#authService.getCurrentUserId(allowUnverified);\n    if (userId != null) {\n      return createUserRef(this.app, userId);\n    }\n    return undefined;\n  }\n  async validateToken() {\n    return this.#authService.validateToken();\n  }\n  async getUserData(userId, force) {\n    return this.#authService.getUserData(userId, force);\n  }\n  dispose() {\n    this.#authService.dispose();\n    this.signInPromise = undefined;\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthModuleImpl } from \"../utils/AuthModuleImpl.js\";\nexport const AUTH_MODULE_KEY = {\n  appMemberName: \"auth\",\n  key: Symbol.for(\"pack.auth\"),\n  initModule: (app, config) => {\n    if (!config) {\n      throw new Error(\"AuthModuleConfig is required to initialize AuthModule\");\n    }\n    return new AuthModuleImpl(app, config.authService);\n  }\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { assertIsAppInternal } from \"@palantir/pack.core\";\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * AuthModule provides unified authentication services for PACK applications.\n *\n * It wraps OSDK OAuth clients and provides a consistent interface for authentication\n * state management, token access, and auth lifecycle events.\n */\n\n/**\n * Get the auth module from an PACK app instance.\n *\n * @param app - PACK app instance\n * @returns The auth module\n */\nexport function getAuthModule(app) {\n  assertIsAppInternal(app);\n  return app.getModule(AUTH_MODULE_KEY);\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * Configuration for AuthModule initialization\n */\n\n/**\n * Creates an auth module configuration tuple.\n *\n * @param authService - The auth service to use\n * @returns Module configuration tuple for the auth module\n */\nexport function createAuthModuleConfig(authService) {\n  const config = {\n    authService\n  };\n  return [AUTH_MODULE_KEY, config];\n}"]}

package/build/cjs/index.cjs

@@ -107,12 +107,12 @@ var AuthModuleImpl = class {
       });
     });
   }
-  getCurrentUser() {
-    const userId = this.#authService.getCurrentUserId();
-    if (!userId) {
-      return void 0;
+  getCurrentUser(allowUnverified = false) {
+    const userId = this.#authService.getCurrentUserId(allowUnverified);
+    if (userId != null) {
+      return createUserRef(this.app, userId);
     }
-    return createUserRef(this.app, userId);
+    return void 0;
   }
   async validateToken() {
     return this.#authService.validateToken();

package/build/cjs/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/types/AuthState.ts","../../src/types/UserRef.ts","../../src/utils/AuthModuleImpl.ts","../../src/constants/AuthModuleKey.ts","../../src/types/AuthModule.ts","../../src/utils/AuthModuleConfig.ts"],"names":["assertIsAppInternal"],"mappings":";;;;;;;AAgBO,IAAM,SAAA,GAAY;AAAA,EACvB,aAAA,EAAe,eAAA;AAAA,EACf,cAAA,EAAgB,gBAAA;AAAA,EAChB,KAAA,EAAO,OAAA;AAAA,EACP,YAAA,EAAc,cAAA;AAAA,EACd,eAAA,EAAiB;AACnB;;;ACLA,IAAM,YAAA,GAAe,OAAO,SAAS,CAAA;AAOrC,IAAM,eAAA,GAAkB,kBAAA;AACxB,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO;AAAA,EACrC,MAAA,EAAQ,eAAA;AAAA,EACR,CAAC,YAAY,GAAG,YAAA;AAAA,EAChB,KAAK,MAAM,OAAA,CAAQ,OAAO,IAAI,KAAA,CAAM,wBAAwB,CAAC;AAC/D,CAAC,CAAA;AACM,SAAS,cAAA,GAAiB;AAC/B,EAAA,OAAO,gBAAA;AACT;AACO,SAAS,eAAe,OAAA,EAAS;AACtC,EAAA,OAAO,OAAA,CAAQ,MAAA,KAAW,eAAA,IAAmB,OAAA,CAAQ,MAAA,KAAW,EAAA;AAClE;AACO,IAAM,aAAA,GAAgB,CAAC,GAAA,EAAK,MAAA,KAAW;AAC5C,EAAA,OAAO,IAAI,WAAA,CAAY,GAAA,EAAK,MAAM,CAAA;AACpC;AACA,IAAM,cAAN,MAAkB;AAAA,EAChB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA,CAAY,KAAK,MAAA,EAAQ;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,cAAc,GAAG,CAAA;AACpC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EACA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACxD;AACF,CAAA;;;AC/BO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAAA;AAAA,EACA,GAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA,CAAY,KAAK,WAAA,EAAa;AAC5B,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,YAAA,GAAe,WAAA;AAAA,EACtB;AAAA;AAAA,EAGA,eAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,aAAa,eAAA,EAAgB;AAAA,EAC3C;AAAA,EACA,MAAM,QAAA,GAAW;AACf,IAAA,OAAO,IAAA,CAAK,aAAa,QAAA,EAAS;AAAA,EACpC;AAAA,EACA,mBAAA,GAAsB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,mBAAA,EAAoB;AAAA,EAC/C;AAAA,EACA,MAAM,MAAA,GAAS;AACb,IAAA,IAAI,KAAK,aAAA,EAAe;AACtB,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,iBAAiB,YAAY;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,aAAa,MAAA,EAAO;AAAA,MACjC,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,MACvB;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,kBAAkB,QAAA,EAAU;AAC1B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,iBAAA,CAAkB,QAAQ,CAAA;AAAA,EACrD;AAAA,EACA,cAAc,QAAA,EAAU;AACtB,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc,QAAQ,CAAA;AAAA,EACjD;AAAA,EACA,MAAM,WAAA,GAAc;AAElB,IAAA,IAAI,IAAA,CAAK,iBAAgB,EAAG;AAC1B,MAAA,OAAO,QAAQ,OAAA,EAAQ;AAAA,IACzB;AACA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,iBAAA,CAAkB,CAAA,KAAA,KAAS;AAClD,QAAA,IAAI,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,aAAA,EAAe;AAC3C,UAAA,WAAA,EAAY;AACZ,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,KAAA,EAAO;AAC1C,UAAA,WAAA,EAAY;AACZ,UAAA,MAAA,CAAO,IAAI,MAAM,uBAAA,EAAyB;AAAA,YACxC,OAAO,KAAA,CAAM;AAAA,WACd,CAAC,CAAA;AAAA,QACJ;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EACA,cAAA,GAAiB;AACf,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,gBAAA,EAAiB;AAClD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AAAA,EACvC;AAAA,EACA,MAAM,aAAA,GAAgB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,aAAA,EAAc;AAAA,EACzC;AAAA,EACA,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO;AAC/B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,WAAA,CAAY,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpD;AAAA,EACA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,aAAa,OAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,EACvB;AACF;;;ACpFO,IAAM,eAAA,GAAkB;AAAA,EAC7B,aAAA,EAAe,MAAA;AAAA,EACf,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AAAA,EAC3B,UAAA,EAAY,CAAC,GAAA,EAAK,MAAA,KAAW;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,cAAA,CAAe,GAAA,EAAK,MAAA,CAAO,WAAW,CAAA;AAAA,EACnD;AACF,CAAA;;;ACOO,SAAS,cAAc,GAAA,EAAK;AACjC,EAAAA,6BAAA,CAAoB,GAAG,CAAA;AACvB,EAAA,OAAO,GAAA,CAAI,UAAU,eAAe,CAAA;AACtC;;;ACRO,SAAS,uBAAuB,WAAA,EAAa;AAClD,EAAA,MAAM,MAAA,GAAS;AAAA,IACb;AAAA,GACF;AACA,EAAA,OAAO,CAAC,iBAAiB,MAAM,CAAA;AACjC","file":"index.cjs","sourcesContent":["/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport const AuthState = {\n  Authenticated: \"authenticated\",\n  Authenticating: \"authenticating\",\n  Error: \"error\",\n  Initializing: \"initializing\",\n  Unauthenticated: \"unauthenticated\"\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getAuthModule } from \"./AuthModule.js\";\nconst UserRefBrand = Symbol(\"UserRef\");\n\n/**\n * Reference to a user from the platform API.\n * Provides access to user information with caching.\n */\n\nconst INVALID_USER_ID = \"INVALID_USER_REF\";\nconst INVALID_USER_REF = Object.freeze({\n  userId: INVALID_USER_ID,\n  [UserRefBrand]: UserRefBrand,\n  get: () => Promise.reject(new Error(\"Invalid user reference\"))\n});\nexport function invalidUserRef() {\n  return INVALID_USER_REF;\n}\nexport function isValidUserRef(userRef) {\n  return userRef.userId !== INVALID_USER_ID && userRef.userId !== \"\";\n}\nexport const createUserRef = (app, userId) => {\n  return new UserRefImpl(app, userId);\n};\nclass UserRefImpl {\n  userId;\n  #authModule;\n  constructor(app, userId) {\n    this.#authModule = getAuthModule(app);\n    this.userId = userId;\n  }\n  get(force) {\n    return this.#authModule.getUserData(this.userId, force);\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthState } from \"../types/AuthState.js\";\nimport { createUserRef } from \"../types/UserRef.js\";\nexport class AuthModuleImpl {\n  #authService;\n  app;\n  signInPromise;\n  constructor(app, authService) {\n    this.app = app;\n    this.#authService = authService;\n  }\n\n  // AuthModule interface implementation\n  isAuthenticated() {\n    return this.#authService.isAuthenticated();\n  }\n  async getToken() {\n    return this.#authService.getToken();\n  }\n  getTokenOrUndefined() {\n    return this.#authService.getTokenOrUndefined();\n  }\n  async signIn() {\n    if (this.signInPromise) {\n      return this.signInPromise;\n    }\n    this.signInPromise = (async () => {\n      try {\n        await this.#authService.signIn();\n      } finally {\n        this.signInPromise = undefined;\n      }\n    })();\n    return this.signInPromise;\n  }\n  async signOut() {\n    return this.#authService.signOut();\n  }\n  async refresh() {\n    if (!this.#authService.refresh) {\n      throw new Error(\"Refresh not supported for this auth client type\");\n    }\n    return this.#authService.refresh();\n  }\n  onAuthStateChange(callback) {\n    return this.#authService.onAuthStateChange(callback);\n  }\n  onTokenChange(callback) {\n    return this.#authService.onTokenChange(callback);\n  }\n  async waitForAuth() {\n    // If already authenticated, resolve immediately\n    if (this.isAuthenticated()) {\n      return Promise.resolve();\n    }\n    return new Promise((resolve, reject) => {\n      const unsubscribe = this.onAuthStateChange(event => {\n        if (event.state === AuthState.Authenticated) {\n          unsubscribe();\n          resolve();\n        } else if (event.state === AuthState.Error) {\n          unsubscribe();\n          reject(new Error(\"Authentication failed\", {\n            cause: event.error\n          }));\n        }\n      });\n    });\n  }\n  getCurrentUser() {\n    const userId = this.#authService.getCurrentUserId();\n    if (!userId) {\n      return undefined;\n    }\n    return createUserRef(this.app, userId);\n  }\n  async validateToken() {\n    return this.#authService.validateToken();\n  }\n  async getUserData(userId, force) {\n    return this.#authService.getUserData(userId, force);\n  }\n  dispose() {\n    this.#authService.dispose();\n    this.signInPromise = undefined;\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthModuleImpl } from \"../utils/AuthModuleImpl.js\";\nexport const AUTH_MODULE_KEY = {\n  appMemberName: \"auth\",\n  key: Symbol.for(\"pack.auth\"),\n  initModule: (app, config) => {\n    if (!config) {\n      throw new Error(\"AuthModuleConfig is required to initialize AuthModule\");\n    }\n    return new AuthModuleImpl(app, config.authService);\n  }\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { assertIsAppInternal } from \"@palantir/pack.core\";\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * AuthModule provides unified authentication services for PACK applications.\n *\n * It wraps OSDK OAuth clients and provides a consistent interface for authentication\n * state management, token access, and auth lifecycle events.\n */\n// TODO: functions should be method style\n\n/**\n * Get the auth module from an PACK app instance.\n *\n * @param app - PACK app instance\n * @returns The auth module\n */\nexport function getAuthModule(app) {\n  assertIsAppInternal(app);\n  return app.getModule(AUTH_MODULE_KEY);\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * Configuration for AuthModule initialization\n */\n\n/**\n * Creates an auth module configuration tuple.\n *\n * @param authService - The auth service to use\n * @returns Module configuration tuple for the auth module\n */\nexport function createAuthModuleConfig(authService) {\n  const config = {\n    authService\n  };\n  return [AUTH_MODULE_KEY, config];\n}"]}
+{"version":3,"sources":["../../src/types/AuthState.ts","../../src/types/UserRef.ts","../../src/utils/AuthModuleImpl.ts","../../src/constants/AuthModuleKey.ts","../../src/types/AuthModule.ts","../../src/utils/AuthModuleConfig.ts"],"names":["assertIsAppInternal"],"mappings":";;;;;;;AAgBO,IAAM,SAAA,GAAY;AAAA,EACvB,aAAA,EAAe,eAAA;AAAA,EACf,cAAA,EAAgB,gBAAA;AAAA,EAChB,KAAA,EAAO,OAAA;AAAA,EACP,YAAA,EAAc,cAAA;AAAA,EACd,eAAA,EAAiB;AACnB;;;ACLA,IAAM,YAAA,GAAe,OAAO,SAAS,CAAA;AAOrC,IAAM,eAAA,GAAkB,kBAAA;AACxB,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO;AAAA,EACrC,MAAA,EAAQ,eAAA;AAAA,EACR,CAAC,YAAY,GAAG,YAAA;AAAA,EAChB,KAAK,MAAM,OAAA,CAAQ,OAAO,IAAI,KAAA,CAAM,wBAAwB,CAAC;AAC/D,CAAC,CAAA;AAeM,SAAS,cAAA,GAAiB;AAC/B,EAAA,OAAO,gBAAA;AACT;AAcO,SAAS,eAAe,OAAA,EAAS;AACtC,EAAA,OAAO,OAAA,CAAQ,MAAA,KAAW,eAAA,IAAmB,OAAA,CAAQ,MAAA,KAAW,EAAA;AAClE;AACO,IAAM,aAAA,GAAgB,CAAC,GAAA,EAAK,MAAA,KAAW;AAC5C,EAAA,OAAO,IAAI,WAAA,CAAY,GAAA,EAAK,MAAM,CAAA;AACpC;AACA,IAAM,cAAN,MAAkB;AAAA,EAChB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA,CAAY,KAAK,MAAA,EAAQ;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,cAAc,GAAG,CAAA;AACpC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EACA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACxD;AACF,CAAA;;;AC1DO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAAA;AAAA,EACA,GAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA,CAAY,KAAK,WAAA,EAAa;AAC5B,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,YAAA,GAAe,WAAA;AAAA,EACtB;AAAA;AAAA,EAGA,eAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,aAAa,eAAA,EAAgB;AAAA,EAC3C;AAAA,EACA,MAAM,QAAA,GAAW;AACf,IAAA,OAAO,IAAA,CAAK,aAAa,QAAA,EAAS;AAAA,EACpC;AAAA,EACA,mBAAA,GAAsB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,mBAAA,EAAoB;AAAA,EAC/C;AAAA,EACA,MAAM,MAAA,GAAS;AACb,IAAA,IAAI,KAAK,aAAA,EAAe;AACtB,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,iBAAiB,YAAY;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,aAAa,MAAA,EAAO;AAAA,MACjC,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,MACvB;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,kBAAkB,QAAA,EAAU;AAC1B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,iBAAA,CAAkB,QAAQ,CAAA;AAAA,EACrD;AAAA,EACA,cAAc,QAAA,EAAU;AACtB,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc,QAAQ,CAAA;AAAA,EACjD;AAAA,EACA,MAAM,WAAA,GAAc;AAElB,IAAA,IAAI,IAAA,CAAK,iBAAgB,EAAG;AAC1B,MAAA,OAAO,QAAQ,OAAA,EAAQ;AAAA,IACzB;AACA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,iBAAA,CAAkB,CAAA,KAAA,KAAS;AAClD,QAAA,IAAI,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,aAAA,EAAe;AAC3C,UAAA,WAAA,EAAY;AACZ,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,KAAA,EAAO;AAC1C,UAAA,WAAA,EAAY;AACZ,UAAA,MAAA,CAAO,IAAI,MAAM,uBAAA,EAAyB;AAAA,YACxC,OAAO,KAAA,CAAM;AAAA,WACd,CAAC,CAAA;AAAA,QACJ;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EACA,cAAA,CAAe,kBAAkB,KAAA,EAAO;AACtC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,gBAAA,CAAiB,eAAe,CAAA;AACjE,IAAA,IAAI,UAAU,IAAA,EAAM;AAClB,MAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AAAA,IACvC;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EACA,MAAM,aAAA,GAAgB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,aAAA,EAAc;AAAA,EACzC;AAAA,EACA,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO;AAC/B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,WAAA,CAAY,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpD;AAAA,EACA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,aAAa,OAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,EACvB;AACF;;;ACpFO,IAAM,eAAA,GAAkB;AAAA,EAC7B,aAAA,EAAe,MAAA;AAAA,EACf,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AAAA,EAC3B,UAAA,EAAY,CAAC,GAAA,EAAK,MAAA,KAAW;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,cAAA,CAAe,GAAA,EAAK,MAAA,CAAO,WAAW,CAAA;AAAA,EACnD;AACF,CAAA;;;ACMO,SAAS,cAAc,GAAA,EAAK;AACjC,EAAAA,6BAAA,CAAoB,GAAG,CAAA;AACvB,EAAA,OAAO,GAAA,CAAI,UAAU,eAAe,CAAA;AACtC;;;ACPO,SAAS,uBAAuB,WAAA,EAAa;AAClD,EAAA,MAAM,MAAA,GAAS;AAAA,IACb;AAAA,GACF;AACA,EAAA,OAAO,CAAC,iBAAiB,MAAM,CAAA;AACjC","file":"index.cjs","sourcesContent":["/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport const AuthState = {\n  Authenticated: \"authenticated\",\n  Authenticating: \"authenticating\",\n  Error: \"error\",\n  Initializing: \"initializing\",\n  Unauthenticated: \"unauthenticated\"\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getAuthModule } from \"./AuthModule.js\";\nconst UserRefBrand = Symbol(\"UserRef\");\n\n/**\n * Reference to a user from the platform API.\n * Provides access to user information with caching.\n */\n\nconst INVALID_USER_ID = \"INVALID_USER_REF\";\nconst INVALID_USER_REF = Object.freeze({\n  userId: INVALID_USER_ID,\n  [UserRefBrand]: UserRefBrand,\n  get: () => Promise.reject(new Error(\"Invalid user reference\"))\n});\n\n/**\n * Get an invalid user reference. This is a stable reference that can be used to\n * represent an invalid user.\n *\n * Not to be confused with a valid reference to a non-existent user, an invalid\n * reference is one that is not properly initialized. For example, code that\n * initializes with an undefined or empty userId might produce an invalid user\n * reference rather than propagate nullish types.\n *\n * Most operations on an invalid reference are no-ops. For the rest, it is\n * recommended to check for validity using {@link isValidUserRef} before\n * performing operations.\n */\nexport function invalidUserRef() {\n  return INVALID_USER_REF;\n}\n\n/**\n * Check if a user reference is valid.\n *\n * Not to be confused with a valid reference to a non-existent user, an invalid\n * reference is one that is not properly initialized. For example, code that\n * initializes with an undefined or empty userId might produce an invalid user\n * reference rather than propagate nullish types.\n *\n * Most operations on an invalid reference are no-ops. For the rest, it is\n * recommended to check for validity using this function before performing\n * operations.\n */\nexport function isValidUserRef(userRef) {\n  return userRef.userId !== INVALID_USER_ID && userRef.userId !== \"\";\n}\nexport const createUserRef = (app, userId) => {\n  return new UserRefImpl(app, userId);\n};\nclass UserRefImpl {\n  userId;\n  #authModule;\n  constructor(app, userId) {\n    this.#authModule = getAuthModule(app);\n    this.userId = userId;\n  }\n  get(force) {\n    return this.#authModule.getUserData(this.userId, force);\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthState } from \"../types/AuthState.js\";\nimport { createUserRef } from \"../types/UserRef.js\";\nexport class AuthModuleImpl {\n  #authService;\n  app;\n  signInPromise;\n  constructor(app, authService) {\n    this.app = app;\n    this.#authService = authService;\n  }\n\n  // AuthModule interface implementation\n  isAuthenticated() {\n    return this.#authService.isAuthenticated();\n  }\n  async getToken() {\n    return this.#authService.getToken();\n  }\n  getTokenOrUndefined() {\n    return this.#authService.getTokenOrUndefined();\n  }\n  async signIn() {\n    if (this.signInPromise) {\n      return this.signInPromise;\n    }\n    this.signInPromise = (async () => {\n      try {\n        await this.#authService.signIn();\n      } finally {\n        this.signInPromise = undefined;\n      }\n    })();\n    return this.signInPromise;\n  }\n  async signOut() {\n    return this.#authService.signOut();\n  }\n  async refresh() {\n    if (!this.#authService.refresh) {\n      throw new Error(\"Refresh not supported for this auth client type\");\n    }\n    return this.#authService.refresh();\n  }\n  onAuthStateChange(callback) {\n    return this.#authService.onAuthStateChange(callback);\n  }\n  onTokenChange(callback) {\n    return this.#authService.onTokenChange(callback);\n  }\n  async waitForAuth() {\n    // If already authenticated, resolve immediately\n    if (this.isAuthenticated()) {\n      return Promise.resolve();\n    }\n    return new Promise((resolve, reject) => {\n      const unsubscribe = this.onAuthStateChange(event => {\n        if (event.state === AuthState.Authenticated) {\n          unsubscribe();\n          resolve();\n        } else if (event.state === AuthState.Error) {\n          unsubscribe();\n          reject(new Error(\"Authentication failed\", {\n            cause: event.error\n          }));\n        }\n      });\n    });\n  }\n  getCurrentUser(allowUnverified = false) {\n    const userId = this.#authService.getCurrentUserId(allowUnverified);\n    if (userId != null) {\n      return createUserRef(this.app, userId);\n    }\n    return undefined;\n  }\n  async validateToken() {\n    return this.#authService.validateToken();\n  }\n  async getUserData(userId, force) {\n    return this.#authService.getUserData(userId, force);\n  }\n  dispose() {\n    this.#authService.dispose();\n    this.signInPromise = undefined;\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthModuleImpl } from \"../utils/AuthModuleImpl.js\";\nexport const AUTH_MODULE_KEY = {\n  appMemberName: \"auth\",\n  key: Symbol.for(\"pack.auth\"),\n  initModule: (app, config) => {\n    if (!config) {\n      throw new Error(\"AuthModuleConfig is required to initialize AuthModule\");\n    }\n    return new AuthModuleImpl(app, config.authService);\n  }\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { assertIsAppInternal } from \"@palantir/pack.core\";\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * AuthModule provides unified authentication services for PACK applications.\n *\n * It wraps OSDK OAuth clients and provides a consistent interface for authentication\n * state management, token access, and auth lifecycle events.\n */\n\n/**\n * Get the auth module from an PACK app instance.\n *\n * @param app - PACK app instance\n * @returns The auth module\n */\nexport function getAuthModule(app) {\n  assertIsAppInternal(app);\n  return app.getModule(AUTH_MODULE_KEY);\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * Configuration for AuthModule initialization\n */\n\n/**\n * Creates an auth module configuration tuple.\n *\n * @param authService - The auth service to use\n * @returns Module configuration tuple for the auth module\n */\nexport function createAuthModuleConfig(authService) {\n  const config = {\n    authService\n  };\n  return [AUTH_MODULE_KEY, config];\n}"]}

package/build/cjs/index.d.cts

@@ -31,7 +31,32 @@ interface UserRef {
      */
     readonly get: (force?: boolean) => Promise<unknown>;
 }
+/**
+ * Get an invalid user reference. This is a stable reference that can be used to
+ * represent an invalid user.
+ *
+ * Not to be confused with a valid reference to a non-existent user, an invalid
+ * reference is one that is not properly initialized. For example, code that
+ * initializes with an undefined or empty userId might produce an invalid user
+ * reference rather than propagate nullish types.
+ *
+ * Most operations on an invalid reference are no-ops. For the rest, it is
+ * recommended to check for validity using {@link isValidUserRef} before
+ * performing operations.
+ */
 declare function invalidUserRef(): UserRef;
+/**
+ * Check if a user reference is valid.
+ *
+ * Not to be confused with a valid reference to a non-existent user, an invalid
+ * reference is one that is not properly initialized. For example, code that
+ * initializes with an undefined or empty userId might produce an invalid user
+ * reference rather than propagate nullish types.
+ *
+ * Most operations on an invalid reference are no-ops. For the rest, it is
+ * recommended to check for validity using this function before performing
+ * operations.
+ */
 declare function isValidUserRef(userRef: UserRef): boolean;
 declare const createUserRef: (app: PackAppInternal, userId: UserId) => UserRef;
 
@@ -63,66 +88,69 @@ interface AuthModule {
     /**
      * Get the current user information.
      * Returns undefined if not authenticated or user data not available.
+     *
+     * @param allowUnverified - If true, will extract userId from token without validation.
+     *                          Defaults to false (requires validated token).
      */
-    readonly getCurrentUser: () => UserRef | undefined;
+    getCurrentUser(allowUnverified?: boolean): UserRef | undefined;
     /**
      * Get an access token, automatically refreshing if needed.
      * Throws if authentication fails or user is not signed in.
      */
-    readonly getToken: () => Promise<string>;
+    getToken(): Promise<string>;
     /**
      * Get the current access token without refresh, returns undefined if expired or unavailable.
      */
-    readonly getTokenOrUndefined: () => string | undefined;
+    getTokenOrUndefined(): string | undefined;
     /**
      * Get user data for a specific user ID.
      * @param userId - The user ID to fetch data for
      * @param force - Force refresh of cached data
      * @returns Promise resolving to user data
      */
-    readonly getUserData: (userId: string, force?: boolean) => Promise<unknown>;
+    getUserData(userId: string, force?: boolean): Promise<unknown>;
     /**
      * Check if the user is currently authenticated with a valid token.
      */
-    readonly isAuthenticated: () => boolean;
+    isAuthenticated(): boolean;
     /**
      * Subscribe to authentication state changes.
      *
      * @param callback Function called when auth state changes
      * @returns Unsubscribe function
      */
-    readonly onAuthStateChange: (callback: AuthStateCallback) => Unsubscribe;
+    onAuthStateChange(callback: AuthStateCallback): Unsubscribe;
     /**
      * Subscribe to token changes.
      *
      * @param callback Function called when token changes
      * @returns Unsubscribe function
      */
-    readonly onTokenChange: (callback: TokenChangeCallback) => Unsubscribe;
+    onTokenChange(callback: TokenChangeCallback): Unsubscribe;
     /**
      * Manually refresh the access token using the refresh token.
      * Only available for public OAuth clients.
      */
-    readonly refresh?: () => Promise<void>;
+    refresh?(): Promise<void>;
     /**
      * Initiate sign-in flow. For public clients, this redirects to OAuth.
      * For confidential clients, this performs client credentials flow.
      */
-    readonly signIn: () => Promise<void>;
+    signIn(): Promise<void>;
     /**
      * Sign out the current user and clear tokens.
      */
-    readonly signOut: () => Promise<void>;
+    signOut(): Promise<void>;
     /**
      * Validate the current token by checking with the platform API.
      * Returns true if the token is valid, false otherwise.
      */
-    readonly validateToken: () => Promise<boolean>;
+    validateToken(): Promise<boolean>;
     /**
      * Wait for authentication to complete. Resolves when authenticated,
      * rejects if authentication fails or times out.
      */
-    readonly waitForAuth: () => Promise<void>;
+    waitForAuth(): Promise<void>;
 }
 /**
  * Get the auth module from an PACK app instance.
@@ -133,12 +161,15 @@ interface AuthModule {
 declare function getAuthModule(app: PackAppInternal): AuthModule;
 
 /**
- * Base interface for auth services that wrap different OAuth client implementations
+ * Base interface for auth services that wrap different OAuth client implementations.
+ *
+ * This provides necessary functionality for other pack modules to seamlessly handle
+ * authentication flow & token management events such as initial login or token refresh.
  */
 interface BaseAuthService {
     dispose(): void;
     getCurrentState(): AuthState;
-    getCurrentUserId(): string | undefined;
+    getCurrentUserId(allowUnverified?: boolean): string | undefined;
     getToken(): Promise<string>;
     getTokenOrUndefined(): string | undefined;
     getUserData(userId: string, force?: boolean): Promise<unknown>;
@@ -180,7 +211,7 @@ declare class AuthModuleImpl implements AuthModule {
     onAuthStateChange(callback: AuthStateCallback): Unsubscribe;
     onTokenChange(callback: TokenChangeCallback): Unsubscribe;
     waitForAuth(): Promise<void>;
-    getCurrentUser(): UserRef | undefined;
+    getCurrentUser(allowUnverified?: boolean): UserRef | undefined;
     validateToken(): Promise<boolean>;
     getUserData(userId: string, force?: boolean): Promise<unknown>;
     dispose(): void;

package/build/esm/index.js

@@ -105,12 +105,12 @@ var AuthModuleImpl = class {
       });
     });
   }
-  getCurrentUser() {
-    const userId = this.#authService.getCurrentUserId();
-    if (!userId) {
-      return void 0;
+  getCurrentUser(allowUnverified = false) {
+    const userId = this.#authService.getCurrentUserId(allowUnverified);
+    if (userId != null) {
+      return createUserRef(this.app, userId);
     }
-    return createUserRef(this.app, userId);
+    return void 0;
   }
   async validateToken() {
     return this.#authService.validateToken();

package/build/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/types/AuthState.ts","../../src/types/UserRef.ts","../../src/utils/AuthModuleImpl.ts","../../src/constants/AuthModuleKey.ts","../../src/types/AuthModule.ts","../../src/utils/AuthModuleConfig.ts"],"names":[],"mappings":";;;;;AAgBO,IAAM,SAAA,GAAY;AAAA,EACvB,aAAA,EAAe,eAAA;AAAA,EACf,cAAA,EAAgB,gBAAA;AAAA,EAChB,KAAA,EAAO,OAAA;AAAA,EACP,YAAA,EAAc,cAAA;AAAA,EACd,eAAA,EAAiB;AACnB;;;ACLA,IAAM,YAAA,GAAe,OAAO,SAAS,CAAA;AAOrC,IAAM,eAAA,GAAkB,kBAAA;AACxB,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO;AAAA,EACrC,MAAA,EAAQ,eAAA;AAAA,EACR,CAAC,YAAY,GAAG,YAAA;AAAA,EAChB,KAAK,MAAM,OAAA,CAAQ,OAAO,IAAI,KAAA,CAAM,wBAAwB,CAAC;AAC/D,CAAC,CAAA;AACM,SAAS,cAAA,GAAiB;AAC/B,EAAA,OAAO,gBAAA;AACT;AACO,SAAS,eAAe,OAAA,EAAS;AACtC,EAAA,OAAO,OAAA,CAAQ,MAAA,KAAW,eAAA,IAAmB,OAAA,CAAQ,MAAA,KAAW,EAAA;AAClE;AACO,IAAM,aAAA,GAAgB,CAAC,GAAA,EAAK,MAAA,KAAW;AAC5C,EAAA,OAAO,IAAI,WAAA,CAAY,GAAA,EAAK,MAAM,CAAA;AACpC;AACA,IAAM,cAAN,MAAkB;AAAA,EAChB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA,CAAY,KAAK,MAAA,EAAQ;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,cAAc,GAAG,CAAA;AACpC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EACA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACxD;AACF,CAAA;;;AC/BO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAAA;AAAA,EACA,GAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA,CAAY,KAAK,WAAA,EAAa;AAC5B,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,YAAA,GAAe,WAAA;AAAA,EACtB;AAAA;AAAA,EAGA,eAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,aAAa,eAAA,EAAgB;AAAA,EAC3C;AAAA,EACA,MAAM,QAAA,GAAW;AACf,IAAA,OAAO,IAAA,CAAK,aAAa,QAAA,EAAS;AAAA,EACpC;AAAA,EACA,mBAAA,GAAsB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,mBAAA,EAAoB;AAAA,EAC/C;AAAA,EACA,MAAM,MAAA,GAAS;AACb,IAAA,IAAI,KAAK,aAAA,EAAe;AACtB,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,iBAAiB,YAAY;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,aAAa,MAAA,EAAO;AAAA,MACjC,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,MACvB;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,kBAAkB,QAAA,EAAU;AAC1B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,iBAAA,CAAkB,QAAQ,CAAA;AAAA,EACrD;AAAA,EACA,cAAc,QAAA,EAAU;AACtB,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc,QAAQ,CAAA;AAAA,EACjD;AAAA,EACA,MAAM,WAAA,GAAc;AAElB,IAAA,IAAI,IAAA,CAAK,iBAAgB,EAAG;AAC1B,MAAA,OAAO,QAAQ,OAAA,EAAQ;AAAA,IACzB;AACA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,iBAAA,CAAkB,CAAA,KAAA,KAAS;AAClD,QAAA,IAAI,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,aAAA,EAAe;AAC3C,UAAA,WAAA,EAAY;AACZ,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,KAAA,EAAO;AAC1C,UAAA,WAAA,EAAY;AACZ,UAAA,MAAA,CAAO,IAAI,MAAM,uBAAA,EAAyB;AAAA,YACxC,OAAO,KAAA,CAAM;AAAA,WACd,CAAC,CAAA;AAAA,QACJ;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EACA,cAAA,GAAiB;AACf,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,gBAAA,EAAiB;AAClD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AAAA,EACvC;AAAA,EACA,MAAM,aAAA,GAAgB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,aAAA,EAAc;AAAA,EACzC;AAAA,EACA,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO;AAC/B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,WAAA,CAAY,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpD;AAAA,EACA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,aAAa,OAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,EACvB;AACF;;;ACpFO,IAAM,eAAA,GAAkB;AAAA,EAC7B,aAAA,EAAe,MAAA;AAAA,EACf,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AAAA,EAC3B,UAAA,EAAY,CAAC,GAAA,EAAK,MAAA,KAAW;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,cAAA,CAAe,GAAA,EAAK,MAAA,CAAO,WAAW,CAAA;AAAA,EACnD;AACF,CAAA;;;ACOO,SAAS,cAAc,GAAA,EAAK;AACjC,EAAA,mBAAA,CAAoB,GAAG,CAAA;AACvB,EAAA,OAAO,GAAA,CAAI,UAAU,eAAe,CAAA;AACtC;;;ACRO,SAAS,uBAAuB,WAAA,EAAa;AAClD,EAAA,MAAM,MAAA,GAAS;AAAA,IACb;AAAA,GACF;AACA,EAAA,OAAO,CAAC,iBAAiB,MAAM,CAAA;AACjC","file":"index.js","sourcesContent":["/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport const AuthState = {\n  Authenticated: \"authenticated\",\n  Authenticating: \"authenticating\",\n  Error: \"error\",\n  Initializing: \"initializing\",\n  Unauthenticated: \"unauthenticated\"\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getAuthModule } from \"./AuthModule.js\";\nconst UserRefBrand = Symbol(\"UserRef\");\n\n/**\n * Reference to a user from the platform API.\n * Provides access to user information with caching.\n */\n\nconst INVALID_USER_ID = \"INVALID_USER_REF\";\nconst INVALID_USER_REF = Object.freeze({\n  userId: INVALID_USER_ID,\n  [UserRefBrand]: UserRefBrand,\n  get: () => Promise.reject(new Error(\"Invalid user reference\"))\n});\nexport function invalidUserRef() {\n  return INVALID_USER_REF;\n}\nexport function isValidUserRef(userRef) {\n  return userRef.userId !== INVALID_USER_ID && userRef.userId !== \"\";\n}\nexport const createUserRef = (app, userId) => {\n  return new UserRefImpl(app, userId);\n};\nclass UserRefImpl {\n  userId;\n  #authModule;\n  constructor(app, userId) {\n    this.#authModule = getAuthModule(app);\n    this.userId = userId;\n  }\n  get(force) {\n    return this.#authModule.getUserData(this.userId, force);\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthState } from \"../types/AuthState.js\";\nimport { createUserRef } from \"../types/UserRef.js\";\nexport class AuthModuleImpl {\n  #authService;\n  app;\n  signInPromise;\n  constructor(app, authService) {\n    this.app = app;\n    this.#authService = authService;\n  }\n\n  // AuthModule interface implementation\n  isAuthenticated() {\n    return this.#authService.isAuthenticated();\n  }\n  async getToken() {\n    return this.#authService.getToken();\n  }\n  getTokenOrUndefined() {\n    return this.#authService.getTokenOrUndefined();\n  }\n  async signIn() {\n    if (this.signInPromise) {\n      return this.signInPromise;\n    }\n    this.signInPromise = (async () => {\n      try {\n        await this.#authService.signIn();\n      } finally {\n        this.signInPromise = undefined;\n      }\n    })();\n    return this.signInPromise;\n  }\n  async signOut() {\n    return this.#authService.signOut();\n  }\n  async refresh() {\n    if (!this.#authService.refresh) {\n      throw new Error(\"Refresh not supported for this auth client type\");\n    }\n    return this.#authService.refresh();\n  }\n  onAuthStateChange(callback) {\n    return this.#authService.onAuthStateChange(callback);\n  }\n  onTokenChange(callback) {\n    return this.#authService.onTokenChange(callback);\n  }\n  async waitForAuth() {\n    // If already authenticated, resolve immediately\n    if (this.isAuthenticated()) {\n      return Promise.resolve();\n    }\n    return new Promise((resolve, reject) => {\n      const unsubscribe = this.onAuthStateChange(event => {\n        if (event.state === AuthState.Authenticated) {\n          unsubscribe();\n          resolve();\n        } else if (event.state === AuthState.Error) {\n          unsubscribe();\n          reject(new Error(\"Authentication failed\", {\n            cause: event.error\n          }));\n        }\n      });\n    });\n  }\n  getCurrentUser() {\n    const userId = this.#authService.getCurrentUserId();\n    if (!userId) {\n      return undefined;\n    }\n    return createUserRef(this.app, userId);\n  }\n  async validateToken() {\n    return this.#authService.validateToken();\n  }\n  async getUserData(userId, force) {\n    return this.#authService.getUserData(userId, force);\n  }\n  dispose() {\n    this.#authService.dispose();\n    this.signInPromise = undefined;\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthModuleImpl } from \"../utils/AuthModuleImpl.js\";\nexport const AUTH_MODULE_KEY = {\n  appMemberName: \"auth\",\n  key: Symbol.for(\"pack.auth\"),\n  initModule: (app, config) => {\n    if (!config) {\n      throw new Error(\"AuthModuleConfig is required to initialize AuthModule\");\n    }\n    return new AuthModuleImpl(app, config.authService);\n  }\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { assertIsAppInternal } from \"@palantir/pack.core\";\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * AuthModule provides unified authentication services for PACK applications.\n *\n * It wraps OSDK OAuth clients and provides a consistent interface for authentication\n * state management, token access, and auth lifecycle events.\n */\n// TODO: functions should be method style\n\n/**\n * Get the auth module from an PACK app instance.\n *\n * @param app - PACK app instance\n * @returns The auth module\n */\nexport function getAuthModule(app) {\n  assertIsAppInternal(app);\n  return app.getModule(AUTH_MODULE_KEY);\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * Configuration for AuthModule initialization\n */\n\n/**\n * Creates an auth module configuration tuple.\n *\n * @param authService - The auth service to use\n * @returns Module configuration tuple for the auth module\n */\nexport function createAuthModuleConfig(authService) {\n  const config = {\n    authService\n  };\n  return [AUTH_MODULE_KEY, config];\n}"]}
+{"version":3,"sources":["../../src/types/AuthState.ts","../../src/types/UserRef.ts","../../src/utils/AuthModuleImpl.ts","../../src/constants/AuthModuleKey.ts","../../src/types/AuthModule.ts","../../src/utils/AuthModuleConfig.ts"],"names":[],"mappings":";;;;;AAgBO,IAAM,SAAA,GAAY;AAAA,EACvB,aAAA,EAAe,eAAA;AAAA,EACf,cAAA,EAAgB,gBAAA;AAAA,EAChB,KAAA,EAAO,OAAA;AAAA,EACP,YAAA,EAAc,cAAA;AAAA,EACd,eAAA,EAAiB;AACnB;;;ACLA,IAAM,YAAA,GAAe,OAAO,SAAS,CAAA;AAOrC,IAAM,eAAA,GAAkB,kBAAA;AACxB,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO;AAAA,EACrC,MAAA,EAAQ,eAAA;AAAA,EACR,CAAC,YAAY,GAAG,YAAA;AAAA,EAChB,KAAK,MAAM,OAAA,CAAQ,OAAO,IAAI,KAAA,CAAM,wBAAwB,CAAC;AAC/D,CAAC,CAAA;AAeM,SAAS,cAAA,GAAiB;AAC/B,EAAA,OAAO,gBAAA;AACT;AAcO,SAAS,eAAe,OAAA,EAAS;AACtC,EAAA,OAAO,OAAA,CAAQ,MAAA,KAAW,eAAA,IAAmB,OAAA,CAAQ,MAAA,KAAW,EAAA;AAClE;AACO,IAAM,aAAA,GAAgB,CAAC,GAAA,EAAK,MAAA,KAAW;AAC5C,EAAA,OAAO,IAAI,WAAA,CAAY,GAAA,EAAK,MAAM,CAAA;AACpC;AACA,IAAM,cAAN,MAAkB;AAAA,EAChB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA,CAAY,KAAK,MAAA,EAAQ;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,cAAc,GAAG,CAAA;AACpC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EACA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACxD;AACF,CAAA;;;AC1DO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAAA;AAAA,EACA,GAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA,CAAY,KAAK,WAAA,EAAa;AAC5B,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,YAAA,GAAe,WAAA;AAAA,EACtB;AAAA;AAAA,EAGA,eAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,aAAa,eAAA,EAAgB;AAAA,EAC3C;AAAA,EACA,MAAM,QAAA,GAAW;AACf,IAAA,OAAO,IAAA,CAAK,aAAa,QAAA,EAAS;AAAA,EACpC;AAAA,EACA,mBAAA,GAAsB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,mBAAA,EAAoB;AAAA,EAC/C;AAAA,EACA,MAAM,MAAA,GAAS;AACb,IAAA,IAAI,KAAK,aAAA,EAAe;AACtB,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,iBAAiB,YAAY;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,aAAa,MAAA,EAAO;AAAA,MACjC,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,MACvB;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,kBAAkB,QAAA,EAAU;AAC1B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,iBAAA,CAAkB,QAAQ,CAAA;AAAA,EACrD;AAAA,EACA,cAAc,QAAA,EAAU;AACtB,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc,QAAQ,CAAA;AAAA,EACjD;AAAA,EACA,MAAM,WAAA,GAAc;AAElB,IAAA,IAAI,IAAA,CAAK,iBAAgB,EAAG;AAC1B,MAAA,OAAO,QAAQ,OAAA,EAAQ;AAAA,IACzB;AACA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,iBAAA,CAAkB,CAAA,KAAA,KAAS;AAClD,QAAA,IAAI,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,aAAA,EAAe;AAC3C,UAAA,WAAA,EAAY;AACZ,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,KAAA,EAAO;AAC1C,UAAA,WAAA,EAAY;AACZ,UAAA,MAAA,CAAO,IAAI,MAAM,uBAAA,EAAyB;AAAA,YACxC,OAAO,KAAA,CAAM;AAAA,WACd,CAAC,CAAA;AAAA,QACJ;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EACA,cAAA,CAAe,kBAAkB,KAAA,EAAO;AACtC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,gBAAA,CAAiB,eAAe,CAAA;AACjE,IAAA,IAAI,UAAU,IAAA,EAAM;AAClB,MAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AAAA,IACvC;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EACA,MAAM,aAAA,GAAgB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,aAAA,EAAc;AAAA,EACzC;AAAA,EACA,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO;AAC/B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,WAAA,CAAY,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpD;AAAA,EACA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,aAAa,OAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,EACvB;AACF;;;ACpFO,IAAM,eAAA,GAAkB;AAAA,EAC7B,aAAA,EAAe,MAAA;AAAA,EACf,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AAAA,EAC3B,UAAA,EAAY,CAAC,GAAA,EAAK,MAAA,KAAW;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,cAAA,CAAe,GAAA,EAAK,MAAA,CAAO,WAAW,CAAA;AAAA,EACnD;AACF,CAAA;;;ACMO,SAAS,cAAc,GAAA,EAAK;AACjC,EAAA,mBAAA,CAAoB,GAAG,CAAA;AACvB,EAAA,OAAO,GAAA,CAAI,UAAU,eAAe,CAAA;AACtC;;;ACPO,SAAS,uBAAuB,WAAA,EAAa;AAClD,EAAA,MAAM,MAAA,GAAS;AAAA,IACb;AAAA,GACF;AACA,EAAA,OAAO,CAAC,iBAAiB,MAAM,CAAA;AACjC","file":"index.js","sourcesContent":["/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport const AuthState = {\n  Authenticated: \"authenticated\",\n  Authenticating: \"authenticating\",\n  Error: \"error\",\n  Initializing: \"initializing\",\n  Unauthenticated: \"unauthenticated\"\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getAuthModule } from \"./AuthModule.js\";\nconst UserRefBrand = Symbol(\"UserRef\");\n\n/**\n * Reference to a user from the platform API.\n * Provides access to user information with caching.\n */\n\nconst INVALID_USER_ID = \"INVALID_USER_REF\";\nconst INVALID_USER_REF = Object.freeze({\n  userId: INVALID_USER_ID,\n  [UserRefBrand]: UserRefBrand,\n  get: () => Promise.reject(new Error(\"Invalid user reference\"))\n});\n\n/**\n * Get an invalid user reference. This is a stable reference that can be used to\n * represent an invalid user.\n *\n * Not to be confused with a valid reference to a non-existent user, an invalid\n * reference is one that is not properly initialized. For example, code that\n * initializes with an undefined or empty userId might produce an invalid user\n * reference rather than propagate nullish types.\n *\n * Most operations on an invalid reference are no-ops. For the rest, it is\n * recommended to check for validity using {@link isValidUserRef} before\n * performing operations.\n */\nexport function invalidUserRef() {\n  return INVALID_USER_REF;\n}\n\n/**\n * Check if a user reference is valid.\n *\n * Not to be confused with a valid reference to a non-existent user, an invalid\n * reference is one that is not properly initialized. For example, code that\n * initializes with an undefined or empty userId might produce an invalid user\n * reference rather than propagate nullish types.\n *\n * Most operations on an invalid reference are no-ops. For the rest, it is\n * recommended to check for validity using this function before performing\n * operations.\n */\nexport function isValidUserRef(userRef) {\n  return userRef.userId !== INVALID_USER_ID && userRef.userId !== \"\";\n}\nexport const createUserRef = (app, userId) => {\n  return new UserRefImpl(app, userId);\n};\nclass UserRefImpl {\n  userId;\n  #authModule;\n  constructor(app, userId) {\n    this.#authModule = getAuthModule(app);\n    this.userId = userId;\n  }\n  get(force) {\n    return this.#authModule.getUserData(this.userId, force);\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthState } from \"../types/AuthState.js\";\nimport { createUserRef } from \"../types/UserRef.js\";\nexport class AuthModuleImpl {\n  #authService;\n  app;\n  signInPromise;\n  constructor(app, authService) {\n    this.app = app;\n    this.#authService = authService;\n  }\n\n  // AuthModule interface implementation\n  isAuthenticated() {\n    return this.#authService.isAuthenticated();\n  }\n  async getToken() {\n    return this.#authService.getToken();\n  }\n  getTokenOrUndefined() {\n    return this.#authService.getTokenOrUndefined();\n  }\n  async signIn() {\n    if (this.signInPromise) {\n      return this.signInPromise;\n    }\n    this.signInPromise = (async () => {\n      try {\n        await this.#authService.signIn();\n      } finally {\n        this.signInPromise = undefined;\n      }\n    })();\n    return this.signInPromise;\n  }\n  async signOut() {\n    return this.#authService.signOut();\n  }\n  async refresh() {\n    if (!this.#authService.refresh) {\n      throw new Error(\"Refresh not supported for this auth client type\");\n    }\n    return this.#authService.refresh();\n  }\n  onAuthStateChange(callback) {\n    return this.#authService.onAuthStateChange(callback);\n  }\n  onTokenChange(callback) {\n    return this.#authService.onTokenChange(callback);\n  }\n  async waitForAuth() {\n    // If already authenticated, resolve immediately\n    if (this.isAuthenticated()) {\n      return Promise.resolve();\n    }\n    return new Promise((resolve, reject) => {\n      const unsubscribe = this.onAuthStateChange(event => {\n        if (event.state === AuthState.Authenticated) {\n          unsubscribe();\n          resolve();\n        } else if (event.state === AuthState.Error) {\n          unsubscribe();\n          reject(new Error(\"Authentication failed\", {\n            cause: event.error\n          }));\n        }\n      });\n    });\n  }\n  getCurrentUser(allowUnverified = false) {\n    const userId = this.#authService.getCurrentUserId(allowUnverified);\n    if (userId != null) {\n      return createUserRef(this.app, userId);\n    }\n    return undefined;\n  }\n  async validateToken() {\n    return this.#authService.validateToken();\n  }\n  async getUserData(userId, force) {\n    return this.#authService.getUserData(userId, force);\n  }\n  dispose() {\n    this.#authService.dispose();\n    this.signInPromise = undefined;\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthModuleImpl } from \"../utils/AuthModuleImpl.js\";\nexport const AUTH_MODULE_KEY = {\n  appMemberName: \"auth\",\n  key: Symbol.for(\"pack.auth\"),\n  initModule: (app, config) => {\n    if (!config) {\n      throw new Error(\"AuthModuleConfig is required to initialize AuthModule\");\n    }\n    return new AuthModuleImpl(app, config.authService);\n  }\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { assertIsAppInternal } from \"@palantir/pack.core\";\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * AuthModule provides unified authentication services for PACK applications.\n *\n * It wraps OSDK OAuth clients and provides a consistent interface for authentication\n * state management, token access, and auth lifecycle events.\n */\n\n/**\n * Get the auth module from an PACK app instance.\n *\n * @param app - PACK app instance\n * @returns The auth module\n */\nexport function getAuthModule(app) {\n  assertIsAppInternal(app);\n  return app.getModule(AUTH_MODULE_KEY);\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * Configuration for AuthModule initialization\n */\n\n/**\n * Creates an auth module configuration tuple.\n *\n * @param authService - The auth service to use\n * @returns Module configuration tuple for the auth module\n */\nexport function createAuthModuleConfig(authService) {\n  const config = {\n    authService\n  };\n  return [AUTH_MODULE_KEY, config];\n}"]}

package/build/types/types/AuthModule.d.ts

@@ -12,66 +12,69 @@ export interface AuthModule {
 	/**
 	* Get the current user information.
 	* Returns undefined if not authenticated or user data not available.
+	*
+	* @param allowUnverified - If true, will extract userId from token without validation.
+	*                          Defaults to false (requires validated token).
 	*/
-	readonly getCurrentUser: () => UserRef | undefined;
+	getCurrentUser(allowUnverified?: boolean): UserRef | undefined;
 	/**
 	* Get an access token, automatically refreshing if needed.
 	* Throws if authentication fails or user is not signed in.
 	*/
-	readonly getToken: () => Promise<string>;
+	getToken(): Promise<string>;
 	/**
 	* Get the current access token without refresh, returns undefined if expired or unavailable.
 	*/
-	readonly getTokenOrUndefined: () => string | undefined;
+	getTokenOrUndefined(): string | undefined;
 	/**
 	* Get user data for a specific user ID.
 	* @param userId - The user ID to fetch data for
 	* @param force - Force refresh of cached data
 	* @returns Promise resolving to user data
 	*/
-	readonly getUserData: (userId: string, force?: boolean) => Promise<unknown>;
+	getUserData(userId: string, force?: boolean): Promise<unknown>;
 	/**
 	* Check if the user is currently authenticated with a valid token.
 	*/
-	readonly isAuthenticated: () => boolean;
+	isAuthenticated(): boolean;
 	/**
 	* Subscribe to authentication state changes.
 	*
 	* @param callback Function called when auth state changes
 	* @returns Unsubscribe function
 	*/
-	readonly onAuthStateChange: (callback: AuthStateCallback) => Unsubscribe;
+	onAuthStateChange(callback: AuthStateCallback): Unsubscribe;
 	/**
 	* Subscribe to token changes.
 	*
 	* @param callback Function called when token changes
 	* @returns Unsubscribe function
 	*/
-	readonly onTokenChange: (callback: TokenChangeCallback) => Unsubscribe;
+	onTokenChange(callback: TokenChangeCallback): Unsubscribe;
 	/**
 	* Manually refresh the access token using the refresh token.
 	* Only available for public OAuth clients.
 	*/
-	readonly refresh?: () => Promise<void>;
+	refresh?(): Promise<void>;
 	/**
 	* Initiate sign-in flow. For public clients, this redirects to OAuth.
 	* For confidential clients, this performs client credentials flow.
 	*/
-	readonly signIn: () => Promise<void>;
+	signIn(): Promise<void>;
 	/**
 	* Sign out the current user and clear tokens.
 	*/
-	readonly signOut: () => Promise<void>;
+	signOut(): Promise<void>;
 	/**
 	* Validate the current token by checking with the platform API.
 	* Returns true if the token is valid, false otherwise.
 	*/
-	readonly validateToken: () => Promise<boolean>;
+	validateToken(): Promise<boolean>;
 	/**
 	* Wait for authentication to complete. Resolves when authenticated,
 	* rejects if authentication fails or times out.
 	*/
-	readonly waitForAuth: () => Promise<void>;
+	waitForAuth(): Promise<void>;
 }
 /**
 * Get the auth module from an PACK app instance.

package/build/types/types/AuthModule.d.ts.map

@@ -1 +1 @@
-{"mappings":"AAgBA,cAAc,iBAAiB,mBAAmB;AAGlD,cAAc,yBAAyB;AACvC,cAAc,2BAA2B;AACzC,cAAc,eAAe;;;;;;;AAS7B,iBAAiB,WAAW;;;;;UAKjB,sBAAsB;;;;;UAMtB,gBAAgB;;;;UAKhB;;;;;;;UAQA,cAAc,gBAAgB,oBAAoB;;;;UAKlD;;;;;;;UAQA,oBAAoB,UAAU,sBAAsB;;;;;;;UAQpD,gBAAgB,UAAU,wBAAwB;;;;;UAMlD,gBAAgB;;;;;UAMhB,cAAc;;;;UAKd,eAAe;;;;;UAMf,qBAAqB;;;;;UAMrB,mBAAmB;;;;;;;;AAS9B,OAAO,iBAAS,cAAc,KAAK,kBAAkB","names":[],"sources":["../../../src/types/AuthModule.ts"],"version":3,"file":"AuthModule.d.ts"}
+{"mappings":"AAgBA,cAAc,iBAAiB,mBAAmB;AAGlD,cAAc,yBAAyB;AACvC,cAAc,2BAA2B;AACzC,cAAc,eAAe;;;;;;;AAQ7B,iBAAiB,WAAW;;;;;;;;CAQ1B,eAAe,4BAA4B;;;;;CAM3C,YAAY;;;;CAKZ;;;;;;;CAQA,YAAY,gBAAgB,kBAAkB;;;;CAK9C;;;;;;;CAQA,kBAAkB,UAAU,oBAAoB;;;;;;;CAQhD,cAAc,UAAU,sBAAsB;;;;;CAM9C,YAAY;;;;;CAMZ,UAAU;;;;CAKV,WAAW;;;;;CAMX,iBAAiB;;;;;CAMjB,eAAe;;;;;;;;AASjB,OAAO,iBAAS,cAAc,KAAK,kBAAkB","names":[],"sources":["../../../src/types/AuthModule.ts"],"version":3,"file":"AuthModule.d.ts"}

package/build/types/types/BaseAuthService.d.ts

@@ -2,12 +2,15 @@ import type { Unsubscribe } from "@palantir/pack.core";
 import type { AuthState, AuthStateCallback } from "./AuthState.js";
 import type { TokenChangeCallback } from "./TokenChange.js";
 /**
-* Base interface for auth services that wrap different OAuth client implementations
+* Base interface for auth services that wrap different OAuth client implementations.
+*
+* This provides necessary functionality for other pack modules to seamlessly handle
+* authentication flow & token management events such as initial login or token refresh.
 */
 export interface BaseAuthService {
 	dispose(): void;
 	getCurrentState(): AuthState;
-	getCurrentUserId(): string | undefined;
+	getCurrentUserId(allowUnverified?: boolean): string | undefined;
 	getToken(): Promise<string>;
 	getTokenOrUndefined(): string | undefined;
 	getUserData(userId: string, force?: boolean): Promise<unknown>;

package/build/types/types/BaseAuthService.d.ts.map

@@ -1 +1 @@
-{"mappings":"AAgBA,cAAc,mBAAmB;AACjC,cAAc,WAAW,yBAAyB;AAClD,cAAc,2BAA2B;;;;AAKzC,iBAAiB,gBAAgB;CAC/B;CACA,mBAAmB;CACnB;CACA,YAAY;CACZ;CACA,YAAY,gBAAgB,kBAAkB;CAC9C;CACA;CACA,kBAAkB,UAAU,oBAAoB;CAChD,cAAc,UAAU,sBAAsB;CAC9C,YAAY;CACZ,UAAU;CACV,WAAW;CACX,iBAAiB","names":[],"sources":["../../../src/types/BaseAuthService.ts"],"version":3,"file":"BaseAuthService.d.ts"}
+{"mappings":"AAgBA,cAAc,mBAAmB;AACjC,cAAc,WAAW,yBAAyB;AAClD,cAAc,2BAA2B;;;;;;;AAQzC,iBAAiB,gBAAgB;CAC/B;CACA,mBAAmB;CACnB,iBAAiB;CACjB,YAAY;CACZ;CACA,YAAY,gBAAgB,kBAAkB;CAC9C;CACA;CACA,kBAAkB,UAAU,oBAAoB;CAChD,cAAc,UAAU,sBAAsB;CAC9C,YAAY;CACZ,UAAU;CACV,WAAW;CACX,iBAAiB","names":[],"sources":["../../../src/types/BaseAuthService.ts"],"version":3,"file":"BaseAuthService.d.ts"}

package/build/types/types/UserRef.d.ts

@@ -15,7 +15,32 @@ export interface UserRef {
 	*/
 	readonly get: (force?: boolean) => Promise<unknown>;
 }
+/**
+* Get an invalid user reference. This is a stable reference that can be used to
+* represent an invalid user.
+*
+* Not to be confused with a valid reference to a non-existent user, an invalid
+* reference is one that is not properly initialized. For example, code that
+* initializes with an undefined or empty userId might produce an invalid user
+* reference rather than propagate nullish types.
+*
+* Most operations on an invalid reference are no-ops. For the rest, it is
+* recommended to check for validity using {@link isValidUserRef} before
+* performing operations.
+*/
 export declare function invalidUserRef(): UserRef;
+/**
+* Check if a user reference is valid.
+*
+* Not to be confused with a valid reference to a non-existent user, an invalid
+* reference is one that is not properly initialized. For example, code that
+* initializes with an undefined or empty userId might produce an invalid user
+* reference rather than propagate nullish types.
+*
+* Most operations on an invalid reference are no-ops. For the rest, it is
+* recommended to check for validity using this function before performing
+* operations.
+*/
 export declare function isValidUserRef(userRef: UserRef): boolean;
 export declare const createUserRef: (app: PackAppInternal, userId: UserId) => UserRef;
 export {};

package/build/types/types/UserRef.d.ts.map

@@ -1 +1 @@
-{"mappings":"AAgBA,cAAc,UAAU,uBAAuB;AAI/C,cAAMA;AACN,YAAY,SAAS,SAAS;;;;;AAM9B,iBAAiB,QAAQ;UACd,QAAQ;WACP,sBAAsB;;;;;;UAOvB,MAAM,oBAAoB;;AAYrC,OAAO,iBAAS,kBAAkB;AAIlC,OAAO,iBAAS,eAAe,SAAS;AAIxC,OAAO,cAAM,gBACX,KAAK,iBACL,QAAQ,WACP","names":["UserRefBrand: unique symbol"],"sources":["../../../src/types/UserRef.ts"],"version":3,"file":"UserRef.d.ts"}
+{"mappings":"AAgBA,cAAc,UAAU,uBAAuB;AAI/C,cAAMA;AACN,YAAY,SAAS,SAAS;;;;;AAM9B,iBAAiB,QAAQ;UACd,QAAQ;WACP,sBAAsB;;;;;;UAOvB,MAAM,oBAAoB;;;;;;;;;;;;;;;AAyBrC,OAAO,iBAAS,kBAAkB;;;;;;;;;;;;;AAgBlC,OAAO,iBAAS,eAAe,SAAS;AAIxC,OAAO,cAAM,gBACX,KAAK,iBACL,QAAQ,WACP","names":["UserRefBrand: unique symbol"],"sources":["../../../src/types/UserRef.ts"],"version":3,"file":"UserRef.d.ts"}

package/build/types/utils/AuthModuleImpl.d.ts

@@ -18,7 +18,7 @@ export declare class AuthModuleImpl implements AuthModule {
 	onAuthStateChange(callback: AuthStateCallback): Unsubscribe;
 	onTokenChange(callback: TokenChangeCallback): Unsubscribe;
 	waitForAuth(): Promise<void>;
-	getCurrentUser(): UserRef | undefined;
+	getCurrentUser(allowUnverified?: boolean): UserRef | undefined;
 	validateToken(): Promise<boolean>;
 	getUserData(userId: string, force?: boolean): Promise<unknown>;
 	dispose(): void;

package/build/types/utils/AuthModuleImpl.d.ts.map

@@ -1 +1 @@
-{"mappings":"AAgBA,cAAc,sBAAsB,mBAAmB;AACvD,cAAc,kBAAkB;AAChC,cAAc,yBAAyB;AAEvC,cAAc,uBAAuB;AACrC,cAAc,2BAA2B;AACzC,cAAc,eAAe;AAG7B,OAAO,cAAM,0BAA0B,WAAW;;CAEhD,iBAAiB;CACjB,QAAQ;CAER,YAAY,KAAK,iBAAiB,aAAa;CAM/C;CAIA,AAAM,YAAY;CAIlB;CAIA,AAAM,UAAU;CAgBhB,AAAM,WAAW;CAIjB,AAAM,WAAW;CAQjB,kBAAkB,UAAU,oBAAoB;CAIhD,cAAc,UAAU,sBAAsB;CAI9C,AAAM,eAAe;CAmBrB,kBAAkB;CAQlB,AAAM,iBAAiB;CAIvB,AAAM,YAAY,gBAAgB,kBAAkB;CAIpD","names":[],"sources":["../../../src/utils/AuthModuleImpl.ts"],"version":3,"file":"AuthModuleImpl.d.ts"}
+{"mappings":"AAgBA,cAAc,sBAAsB,mBAAmB;AACvD,cAAc,kBAAkB;AAChC,cAAc,yBAAyB;AAEvC,cAAc,uBAAuB;AACrC,cAAc,2BAA2B;AACzC,cAAc,eAAe;AAG7B,OAAO,cAAM,0BAA0B,WAAW;;CAEhD,iBAAiB;CACjB,QAAQ;CAER,YAAY,KAAK,iBAAiB,aAAa;CAM/C;CAIA,AAAM,YAAY;CAIlB;CAIA,AAAM,UAAU;CAgBhB,AAAM,WAAW;CAIjB,AAAM,WAAW;CAQjB,kBAAkB,UAAU,oBAAoB;CAIhD,cAAc,UAAU,sBAAsB;CAI9C,AAAM,eAAe;CAmBrB,eAAe,4BAA0B;CAQzC,AAAM,iBAAiB;CAIvB,AAAM,YAAY,gBAAgB,kBAAkB;CAIpD","names":[],"sources":["../../../src/utils/AuthModuleImpl.ts"],"version":3,"file":"AuthModuleImpl.d.ts"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@palantir/pack.auth",
-  "version": "0.0.1-beta.1",
+  "version": "0.0.2",
   "description": "Authentication system for PACK applications",
   "license": "Apache-2.0",
   "repository": {
@@ -29,7 +29,7 @@
   },
   "dependencies": {
     "tiny-invariant": "^1.3.3",
-    "@palantir/pack.core": "0.1.0-beta.2"
+    "@palantir/pack.core": "0.1.1"
   },
   "peerDependencies": {
     "@osdk/client": "~2.4.2"
@@ -39,7 +39,7 @@
     "tslib": "^2.8.1",
     "typescript": "^5.9.2",
     "vitest-mock-extended": "^3.1.0",
-    "@palantir/pack.monorepo.tsconfig": "~0.4.0-beta.1"
+    "@palantir/pack.monorepo.tsconfig": "~0.4.3"
   },
   "publishConfig": {
     "access": "public"
@@ -54,8 +54,8 @@
   "type": "module",
   "scripts": {
     "clean": "rimraf .turbo build dist lib test-output *.tgz tsconfig.tsbuildinfo",
-    "lint": "eslint ./src ; dprint check --config $(find-up dprint.json) --allow-no-files",
-    "lint:fix": "eslint ./src --fix ; dprint fmt --config $(find-up dprint.json) --allow-no-files",
+    "lint": "eslint ./src && dprint check --config $(find-up dprint.json) --allow-no-files",
+    "lint:fix": "eslint ./src --fix && dprint fmt --config $(find-up dprint.json) --allow-no-files",
     "test": "vitest run --passWithNoTests -u",
     "test:watch": "vitest --passWithNoTests",
     "transpileBrowser": "monorepo-transpile -f esm -m bundle -t browser",

package/src/types/AuthModule.ts

@@ -27,24 +27,26 @@ import type { UserRef } from "./UserRef.js";
  * It wraps OSDK OAuth clients and provides a consistent interface for authentication
  * state management, token access, and auth lifecycle events.
  */
-// TODO: functions should be method style
 export interface AuthModule {
   /**
    * Get the current user information.
    * Returns undefined if not authenticated or user data not available.
+   *
+   * @param allowUnverified - If true, will extract userId from token without validation.
+   *                          Defaults to false (requires validated token).
    */
-  readonly getCurrentUser: () => UserRef | undefined;
+  getCurrentUser(allowUnverified?: boolean): UserRef | undefined;
 
   /**
    * Get an access token, automatically refreshing if needed.
    * Throws if authentication fails or user is not signed in.
    */
-  readonly getToken: () => Promise<string>;
+  getToken(): Promise<string>;
 
   /**
    * Get the current access token without refresh, returns undefined if expired or unavailable.
    */
-  readonly getTokenOrUndefined: () => string | undefined;
+  getTokenOrUndefined(): string | undefined;
 
   /**
    * Get user data for a specific user ID.
@@ -52,12 +54,12 @@ export interface AuthModule {
    * @param force - Force refresh of cached data
    * @returns Promise resolving to user data
    */
-  readonly getUserData: (userId: string, force?: boolean) => Promise<unknown>;
+  getUserData(userId: string, force?: boolean): Promise<unknown>;
 
   /**
    * Check if the user is currently authenticated with a valid token.
    */
-  readonly isAuthenticated: () => boolean;
+  isAuthenticated(): boolean;
 
   /**
    * Subscribe to authentication state changes.
@@ -65,7 +67,7 @@ export interface AuthModule {
    * @param callback Function called when auth state changes
    * @returns Unsubscribe function
    */
-  readonly onAuthStateChange: (callback: AuthStateCallback) => Unsubscribe;
+  onAuthStateChange(callback: AuthStateCallback): Unsubscribe;
 
   /**
    * Subscribe to token changes.
@@ -73,36 +75,36 @@ export interface AuthModule {
    * @param callback Function called when token changes
    * @returns Unsubscribe function
    */
-  readonly onTokenChange: (callback: TokenChangeCallback) => Unsubscribe;
+  onTokenChange(callback: TokenChangeCallback): Unsubscribe;
 
   /**
    * Manually refresh the access token using the refresh token.
    * Only available for public OAuth clients.
    */
-  readonly refresh?: () => Promise<void>;
+  refresh?(): Promise<void>;
 
   /**
    * Initiate sign-in flow. For public clients, this redirects to OAuth.
    * For confidential clients, this performs client credentials flow.
    */
-  readonly signIn: () => Promise<void>;
+  signIn(): Promise<void>;
 
   /**
    * Sign out the current user and clear tokens.
    */
-  readonly signOut: () => Promise<void>;
+  signOut(): Promise<void>;
 
   /**
    * Validate the current token by checking with the platform API.
    * Returns true if the token is valid, false otherwise.
    */
-  readonly validateToken: () => Promise<boolean>;
+  validateToken(): Promise<boolean>;
 
   /**
    * Wait for authentication to complete. Resolves when authenticated,
    * rejects if authentication fails or times out.
    */
-  readonly waitForAuth: () => Promise<void>;
+  waitForAuth(): Promise<void>;
 }
 
 /**

package/src/types/BaseAuthService.ts

@@ -19,12 +19,15 @@ import type { AuthState, AuthStateCallback } from "./AuthState.js";
 import type { TokenChangeCallback } from "./TokenChange.js";
 
 /**
- * Base interface for auth services that wrap different OAuth client implementations
+ * Base interface for auth services that wrap different OAuth client implementations.
+ *
+ * This provides necessary functionality for other pack modules to seamlessly handle
+ * authentication flow & token management events such as initial login or token refresh.
  */
 export interface BaseAuthService {
   dispose(): void;
   getCurrentState(): AuthState;
-  getCurrentUserId(): string | undefined;
+  getCurrentUserId(allowUnverified?: boolean): string | undefined;
   getToken(): Promise<string>;
   getTokenOrUndefined(): string | undefined;
   getUserData(userId: string, force?: boolean): Promise<unknown>;

package/src/types/UserRef.ts

@@ -46,10 +46,35 @@ const INVALID_USER_REF: UserRef = Object.freeze(
   } as const,
 );
 
+/**
+ * Get an invalid user reference. This is a stable reference that can be used to
+ * represent an invalid user.
+ *
+ * Not to be confused with a valid reference to a non-existent user, an invalid
+ * reference is one that is not properly initialized. For example, code that
+ * initializes with an undefined or empty userId might produce an invalid user
+ * reference rather than propagate nullish types.
+ *
+ * Most operations on an invalid reference are no-ops. For the rest, it is
+ * recommended to check for validity using {@link isValidUserRef} before
+ * performing operations.
+ */
 export function invalidUserRef(): UserRef {
   return INVALID_USER_REF;
 }
 
+/**
+ * Check if a user reference is valid.
+ *
+ * Not to be confused with a valid reference to a non-existent user, an invalid
+ * reference is one that is not properly initialized. For example, code that
+ * initializes with an undefined or empty userId might produce an invalid user
+ * reference rather than propagate nullish types.
+ *
+ * Most operations on an invalid reference are no-ops. For the rest, it is
+ * recommended to check for validity using this function before performing
+ * operations.
+ */
 export function isValidUserRef(userRef: UserRef): boolean {
   return userRef.userId !== INVALID_USER_ID && userRef.userId !== "";
 }

package/src/utils/AuthModuleImpl.ts

@@ -101,12 +101,12 @@ export class AuthModuleImpl implements AuthModule {
     });
   }
 
-  getCurrentUser(): UserRef | undefined {
-    const userId = this.#authService.getCurrentUserId();
-    if (!userId) {
-      return undefined;
+  getCurrentUser(allowUnverified = false): UserRef | undefined {
+    const userId = this.#authService.getCurrentUserId(allowUnverified);
+    if (userId != null) {
+      return createUserRef(this.app, userId);
     }
-    return createUserRef(this.app, userId);
+    return undefined;
   }
 
   async validateToken(): Promise<boolean> {