@palantir/pack.auth 0.0.1-beta.1

package/.turbo/turbo-lint.log

@@ -0,0 +1,42 @@
+
+> @palantir/pack.auth@0.0.1-beta.1 lint /home/runner/work/pack/pack/packages/auth/core
+> eslint ./src ; dprint check --config $(find-up dprint.json) --allow-no-files
+
+
+/home/runner/work/pack/pack/packages/auth/core/src/__tests__/AuthModuleImpl.test.ts
+   80:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  127:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  133:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  139:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  144:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  149:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  154:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  160:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  175:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  198:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+  246:14  warning  A method that is not declared with `this: void` may cause unintentional scoping of `this` when separated from its object.
+Consider using an arrow function or explicitly `.bind()`ing the method to avoid calling the method with an unintended `this` value. 
+If a function does not access `this`, it can be annotated with `this: void`  @typescript-eslint/unbound-method
+
+✖ 11 problems (0 errors, 11 warnings)
+

package/.turbo/turbo-transpileBrowser.log

@@ -0,0 +1,5 @@
+
+> @palantir/pack.auth@0.0.1-beta.1 transpileBrowser /home/runner/work/pack/pack/packages/auth/core
+> monorepo-transpile -f esm -m bundle -t browser
+
+👍

package/.turbo/turbo-transpileCjs.log

@@ -0,0 +1,5 @@
+
+> @palantir/pack.auth@0.0.1-beta.1 transpileCjs /home/runner/work/pack/pack/packages/auth/core
+> monorepo-transpile -f cjs -m bundle -t node
+
+👍

package/.turbo/turbo-transpileEsm.log

@@ -0,0 +1,5 @@
+
+> @palantir/pack.auth@0.0.1-beta.1 transpileEsm /home/runner/work/pack/pack/packages/auth/core
+> monorepo-transpile -f esm -m bundle -t node
+
+👍

package/.turbo/turbo-transpileTypes.log

@@ -0,0 +1,5 @@
+
+> @palantir/pack.auth@0.0.1-beta.1 transpileTypes /home/runner/work/pack/pack/packages/auth/core
+> monorepo-transpile -f esm -m types -t node
+
+👍

package/.turbo/turbo-typecheck.log

@@ -0,0 +1,4 @@
+
+> @palantir/pack.auth@0.0.1-beta.1 typecheck /home/runner/work/pack/pack/packages/auth/core
+> tsc --noEmit --emitDeclarationOnly false
+

package/LICENSE.txt

@@ -0,0 +1,13 @@
+Copyright 2025 Palantir Technologies, Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/README.md

@@ -0,0 +1,105 @@
+# @palantir/pack.auth
+
+Authentication types and interfaces for PACK applications.
+
+## Overview
+
+This package provides the core authentication types, interfaces, and utilities used across PACK applications. It defines the contract for authentication but does not include specific implementations - those are provided by companion packages like `@palantir/pack.auth.foundry`.
+
+## Key Concepts
+
+### Authentication vs Validation
+
+PACK distinguishes between two important concepts:
+
+- **Authentication** (`isAuthenticated()`): Whether the app has a token/credentials available
+- **Validation** (`isValidated()`): Whether those credentials have been verified with the platform
+
+This separation allows for:
+
+- Fast startup without blocking network calls
+- Explicit control over when validation occurs
+- Support for pre-existing token scenarios
+
+### Example Flow
+
+```typescript
+import { createClient } from "@osdk/client";
+import { createPublicOauthClient } from "@osdk/oauth";
+
+const client = createClient(baseUrl, ontologyRid, auth);
+const app = initPackApp(client, options);
+
+// Authenticated immediately if token is available
+console.log(app.auth.isAuthenticated()); // true (for static tokens)
+console.log(app.auth.isValidated()); // false (not yet validated)
+console.log(app.auth.getCurrentUser()); // undefined (no user data yet)
+
+// Explicitly validate when needed
+const isValid = await app.auth.validateToken();
+if (isValid) {
+  console.log(app.auth.isValidated()); // true
+  console.log(app.auth.getCurrentUser()); // UserRef with platform data
+}
+```
+
+## Core Types
+
+### AuthModule
+
+The main authentication interface providing:
+
+- Token access (`getToken()`, `getTokenOrUndefined()`)
+- Authentication state (`isAuthenticated()`, `isValidated()`)
+- User information (`getCurrentUser()`)
+- Auth lifecycle (`signIn()`, `signOut()`, `refresh()`)
+- State changes (`onAuthStateChange()`)
+- Token validation (`validateToken()`)
+
+### AuthState
+
+Represents the current authentication state:
+
+- `Authenticating`: Currently in progress
+- `Authenticated`: Has valid credentials
+- `Unauthenticated`: No credentials or signed out
+- `Error`: Authentication failed
+
+### UserRef
+
+Provides access to current user information with caching:
+
+- `userId`: Platform user identifier
+- `get()`: Fetch full user data from platform API
+- Built-in 5-minute cache for performance
+
+## Usage
+
+This package is typically used indirectly through `initPackApp()` from `@palantir/pack.app`. The auth module is automatically available on the app instance:
+
+```typescript
+import { createClient } from "@osdk/client";
+import { createPublicOauthClient } from "@osdk/oauth";
+import { initPackApp } from "@palantir/pack.app";
+
+// Create OSDK client with authentication
+const auth = createPublicOauthClient(
+  "your-client-id",
+  "https://your-foundry-instance.com",
+  "http://localhost:3000/callback",
+);
+const client = createClient(baseUrl, ontologyRid, auth);
+
+const app = initPackApp(client, {
+  app: { appId: "your-app" },
+});
+
+// Auth module is available as app.auth
+await app.auth.signIn();
+const user = app.auth.getCurrentUser();
+```
+
+## Implementation Packages
+
+- **@palantir/pack.auth-foundry**: Foundry-specific auth implementations (OAuth, static tokens)
+- Additional implementation packages can be created for other platforms

package/build/browser/index.js

@@ -0,0 +1,155 @@
+import { assertIsAppInternal } from '@palantir/pack.core';
+
+// src/types/AuthModule.ts
+
+// src/types/AuthState.ts
+var AuthState = {
+  Authenticated: "authenticated",
+  Authenticating: "authenticating",
+  Error: "error",
+  Initializing: "initializing",
+  Unauthenticated: "unauthenticated"
+};
+
+// src/types/UserRef.ts
+var UserRefBrand = Symbol("UserRef");
+var INVALID_USER_ID = "INVALID_USER_REF";
+var INVALID_USER_REF = Object.freeze({
+  userId: INVALID_USER_ID,
+  [UserRefBrand]: UserRefBrand,
+  get: () => Promise.reject(new Error("Invalid user reference"))
+});
+function invalidUserRef() {
+  return INVALID_USER_REF;
+}
+function isValidUserRef(userRef) {
+  return userRef.userId !== INVALID_USER_ID && userRef.userId !== "";
+}
+var createUserRef = (app, userId) => {
+  return new UserRefImpl(app, userId);
+};
+var UserRefImpl = class {
+  userId;
+  #authModule;
+  constructor(app, userId) {
+    this.#authModule = getAuthModule(app);
+    this.userId = userId;
+  }
+  get(force) {
+    return this.#authModule.getUserData(this.userId, force);
+  }
+};
+
+// src/utils/AuthModuleImpl.ts
+var AuthModuleImpl = class {
+  #authService;
+  app;
+  signInPromise;
+  constructor(app, authService) {
+    this.app = app;
+    this.#authService = authService;
+  }
+  // AuthModule interface implementation
+  isAuthenticated() {
+    return this.#authService.isAuthenticated();
+  }
+  async getToken() {
+    return this.#authService.getToken();
+  }
+  getTokenOrUndefined() {
+    return this.#authService.getTokenOrUndefined();
+  }
+  async signIn() {
+    if (this.signInPromise) {
+      return this.signInPromise;
+    }
+    this.signInPromise = (async () => {
+      try {
+        await this.#authService.signIn();
+      } finally {
+        this.signInPromise = void 0;
+      }
+    })();
+    return this.signInPromise;
+  }
+  async signOut() {
+    return this.#authService.signOut();
+  }
+  async refresh() {
+    if (!this.#authService.refresh) {
+      throw new Error("Refresh not supported for this auth client type");
+    }
+    return this.#authService.refresh();
+  }
+  onAuthStateChange(callback) {
+    return this.#authService.onAuthStateChange(callback);
+  }
+  onTokenChange(callback) {
+    return this.#authService.onTokenChange(callback);
+  }
+  async waitForAuth() {
+    if (this.isAuthenticated()) {
+      return Promise.resolve();
+    }
+    return new Promise((resolve, reject) => {
+      const unsubscribe = this.onAuthStateChange((event) => {
+        if (event.state === AuthState.Authenticated) {
+          unsubscribe();
+          resolve();
+        } else if (event.state === AuthState.Error) {
+          unsubscribe();
+          reject(new Error("Authentication failed", {
+            cause: event.error
+          }));
+        }
+      });
+    });
+  }
+  getCurrentUser() {
+    const userId = this.#authService.getCurrentUserId();
+    if (!userId) {
+      return void 0;
+    }
+    return createUserRef(this.app, userId);
+  }
+  async validateToken() {
+    return this.#authService.validateToken();
+  }
+  async getUserData(userId, force) {
+    return this.#authService.getUserData(userId, force);
+  }
+  dispose() {
+    this.#authService.dispose();
+    this.signInPromise = void 0;
+  }
+};
+
+// src/constants/AuthModuleKey.ts
+var AUTH_MODULE_KEY = {
+  appMemberName: "auth",
+  key: Symbol.for("pack.auth"),
+  initModule: (app, config) => {
+    if (!config) {
+      throw new Error("AuthModuleConfig is required to initialize AuthModule");
+    }
+    return new AuthModuleImpl(app, config.authService);
+  }
+};
+
+// src/types/AuthModule.ts
+function getAuthModule(app) {
+  assertIsAppInternal(app);
+  return app.getModule(AUTH_MODULE_KEY);
+}
+
+// src/utils/AuthModuleConfig.ts
+function createAuthModuleConfig(authService) {
+  const config = {
+    authService
+  };
+  return [AUTH_MODULE_KEY, config];
+}
+
+export { AuthModuleImpl, AuthState, createAuthModuleConfig, createUserRef, getAuthModule, invalidUserRef, isValidUserRef };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/build/browser/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types/AuthState.ts","../../src/types/UserRef.ts","../../src/utils/AuthModuleImpl.ts","../../src/constants/AuthModuleKey.ts","../../src/types/AuthModule.ts","../../src/utils/AuthModuleConfig.ts"],"names":[],"mappings":";;;;;AAgBO,IAAM,SAAA,GAAY;AAAA,EACvB,aAAA,EAAe,eAAA;AAAA,EACf,cAAA,EAAgB,gBAAA;AAAA,EAChB,KAAA,EAAO,OAAA;AAAA,EACP,YAAA,EAAc,cAAA;AAAA,EACd,eAAA,EAAiB;AACnB;;;ACLA,IAAM,YAAA,GAAe,OAAO,SAAS,CAAA;AAOrC,IAAM,eAAA,GAAkB,kBAAA;AACxB,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO;AAAA,EACrC,MAAA,EAAQ,eAAA;AAAA,EACR,CAAC,YAAY,GAAG,YAAA;AAAA,EAChB,KAAK,MAAM,OAAA,CAAQ,OAAO,IAAI,KAAA,CAAM,wBAAwB,CAAC;AAC/D,CAAC,CAAA;AACM,SAAS,cAAA,GAAiB;AAC/B,EAAA,OAAO,gBAAA;AACT;AACO,SAAS,eAAe,OAAA,EAAS;AACtC,EAAA,OAAO,OAAA,CAAQ,MAAA,KAAW,eAAA,IAAmB,OAAA,CAAQ,MAAA,KAAW,EAAA;AAClE;AACO,IAAM,aAAA,GAAgB,CAAC,GAAA,EAAK,MAAA,KAAW;AAC5C,EAAA,OAAO,IAAI,WAAA,CAAY,GAAA,EAAK,MAAM,CAAA;AACpC;AACA,IAAM,cAAN,MAAkB;AAAA,EAChB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA,CAAY,KAAK,MAAA,EAAQ;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,cAAc,GAAG,CAAA;AACpC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EACA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACxD;AACF,CAAA;;;AC/BO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAAA;AAAA,EACA,GAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA,CAAY,KAAK,WAAA,EAAa;AAC5B,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,YAAA,GAAe,WAAA;AAAA,EACtB;AAAA;AAAA,EAGA,eAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,aAAa,eAAA,EAAgB;AAAA,EAC3C;AAAA,EACA,MAAM,QAAA,GAAW;AACf,IAAA,OAAO,IAAA,CAAK,aAAa,QAAA,EAAS;AAAA,EACpC;AAAA,EACA,mBAAA,GAAsB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,mBAAA,EAAoB;AAAA,EAC/C;AAAA,EACA,MAAM,MAAA,GAAS;AACb,IAAA,IAAI,KAAK,aAAA,EAAe;AACtB,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,iBAAiB,YAAY;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,aAAa,MAAA,EAAO;AAAA,MACjC,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,MACvB;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,kBAAkB,QAAA,EAAU;AAC1B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,iBAAA,CAAkB,QAAQ,CAAA;AAAA,EACrD;AAAA,EACA,cAAc,QAAA,EAAU;AACtB,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc,QAAQ,CAAA;AAAA,EACjD;AAAA,EACA,MAAM,WAAA,GAAc;AAElB,IAAA,IAAI,IAAA,CAAK,iBAAgB,EAAG;AAC1B,MAAA,OAAO,QAAQ,OAAA,EAAQ;AAAA,IACzB;AACA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,iBAAA,CAAkB,CAAA,KAAA,KAAS;AAClD,QAAA,IAAI,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,aAAA,EAAe;AAC3C,UAAA,WAAA,EAAY;AACZ,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,KAAA,EAAO;AAC1C,UAAA,WAAA,EAAY;AACZ,UAAA,MAAA,CAAO,IAAI,MAAM,uBAAA,EAAyB;AAAA,YACxC,OAAO,KAAA,CAAM;AAAA,WACd,CAAC,CAAA;AAAA,QACJ;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EACA,cAAA,GAAiB;AACf,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,gBAAA,EAAiB;AAClD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AAAA,EACvC;AAAA,EACA,MAAM,aAAA,GAAgB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,aAAA,EAAc;AAAA,EACzC;AAAA,EACA,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO;AAC/B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,WAAA,CAAY,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpD;AAAA,EACA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,aAAa,OAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,EACvB;AACF;;;ACpFO,IAAM,eAAA,GAAkB;AAAA,EAC7B,aAAA,EAAe,MAAA;AAAA,EACf,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AAAA,EAC3B,UAAA,EAAY,CAAC,GAAA,EAAK,MAAA,KAAW;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,cAAA,CAAe,GAAA,EAAK,MAAA,CAAO,WAAW,CAAA;AAAA,EACnD;AACF,CAAA;;;ACOO,SAAS,cAAc,GAAA,EAAK;AACjC,EAAA,mBAAA,CAAoB,GAAG,CAAA;AACvB,EAAA,OAAO,GAAA,CAAI,UAAU,eAAe,CAAA;AACtC;;;ACRO,SAAS,uBAAuB,WAAA,EAAa;AAClD,EAAA,MAAM,MAAA,GAAS;AAAA,IACb;AAAA,GACF;AACA,EAAA,OAAO,CAAC,iBAAiB,MAAM,CAAA;AACjC","file":"index.js","sourcesContent":["/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport const AuthState = {\n  Authenticated: \"authenticated\",\n  Authenticating: \"authenticating\",\n  Error: \"error\",\n  Initializing: \"initializing\",\n  Unauthenticated: \"unauthenticated\"\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getAuthModule } from \"./AuthModule.js\";\nconst UserRefBrand = Symbol(\"UserRef\");\n\n/**\n * Reference to a user from the platform API.\n * Provides access to user information with caching.\n */\n\nconst INVALID_USER_ID = \"INVALID_USER_REF\";\nconst INVALID_USER_REF = Object.freeze({\n  userId: INVALID_USER_ID,\n  [UserRefBrand]: UserRefBrand,\n  get: () => Promise.reject(new Error(\"Invalid user reference\"))\n});\nexport function invalidUserRef() {\n  return INVALID_USER_REF;\n}\nexport function isValidUserRef(userRef) {\n  return userRef.userId !== INVALID_USER_ID && userRef.userId !== \"\";\n}\nexport const createUserRef = (app, userId) => {\n  return new UserRefImpl(app, userId);\n};\nclass UserRefImpl {\n  userId;\n  #authModule;\n  constructor(app, userId) {\n    this.#authModule = getAuthModule(app);\n    this.userId = userId;\n  }\n  get(force) {\n    return this.#authModule.getUserData(this.userId, force);\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthState } from \"../types/AuthState.js\";\nimport { createUserRef } from \"../types/UserRef.js\";\nexport class AuthModuleImpl {\n  #authService;\n  app;\n  signInPromise;\n  constructor(app, authService) {\n    this.app = app;\n    this.#authService = authService;\n  }\n\n  // AuthModule interface implementation\n  isAuthenticated() {\n    return this.#authService.isAuthenticated();\n  }\n  async getToken() {\n    return this.#authService.getToken();\n  }\n  getTokenOrUndefined() {\n    return this.#authService.getTokenOrUndefined();\n  }\n  async signIn() {\n    if (this.signInPromise) {\n      return this.signInPromise;\n    }\n    this.signInPromise = (async () => {\n      try {\n        await this.#authService.signIn();\n      } finally {\n        this.signInPromise = undefined;\n      }\n    })();\n    return this.signInPromise;\n  }\n  async signOut() {\n    return this.#authService.signOut();\n  }\n  async refresh() {\n    if (!this.#authService.refresh) {\n      throw new Error(\"Refresh not supported for this auth client type\");\n    }\n    return this.#authService.refresh();\n  }\n  onAuthStateChange(callback) {\n    return this.#authService.onAuthStateChange(callback);\n  }\n  onTokenChange(callback) {\n    return this.#authService.onTokenChange(callback);\n  }\n  async waitForAuth() {\n    // If already authenticated, resolve immediately\n    if (this.isAuthenticated()) {\n      return Promise.resolve();\n    }\n    return new Promise((resolve, reject) => {\n      const unsubscribe = this.onAuthStateChange(event => {\n        if (event.state === AuthState.Authenticated) {\n          unsubscribe();\n          resolve();\n        } else if (event.state === AuthState.Error) {\n          unsubscribe();\n          reject(new Error(\"Authentication failed\", {\n            cause: event.error\n          }));\n        }\n      });\n    });\n  }\n  getCurrentUser() {\n    const userId = this.#authService.getCurrentUserId();\n    if (!userId) {\n      return undefined;\n    }\n    return createUserRef(this.app, userId);\n  }\n  async validateToken() {\n    return this.#authService.validateToken();\n  }\n  async getUserData(userId, force) {\n    return this.#authService.getUserData(userId, force);\n  }\n  dispose() {\n    this.#authService.dispose();\n    this.signInPromise = undefined;\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthModuleImpl } from \"../utils/AuthModuleImpl.js\";\nexport const AUTH_MODULE_KEY = {\n  appMemberName: \"auth\",\n  key: Symbol.for(\"pack.auth\"),\n  initModule: (app, config) => {\n    if (!config) {\n      throw new Error(\"AuthModuleConfig is required to initialize AuthModule\");\n    }\n    return new AuthModuleImpl(app, config.authService);\n  }\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { assertIsAppInternal } from \"@palantir/pack.core\";\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * AuthModule provides unified authentication services for PACK applications.\n *\n * It wraps OSDK OAuth clients and provides a consistent interface for authentication\n * state management, token access, and auth lifecycle events.\n */\n// TODO: functions should be method style\n\n/**\n * Get the auth module from an PACK app instance.\n *\n * @param app - PACK app instance\n * @returns The auth module\n */\nexport function getAuthModule(app) {\n  assertIsAppInternal(app);\n  return app.getModule(AUTH_MODULE_KEY);\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * Configuration for AuthModule initialization\n */\n\n/**\n * Creates an auth module configuration tuple.\n *\n * @param authService - The auth service to use\n * @returns Module configuration tuple for the auth module\n */\nexport function createAuthModuleConfig(authService) {\n  const config = {\n    authService\n  };\n  return [AUTH_MODULE_KEY, config];\n}"]}

package/build/cjs/index.cjs

@@ -0,0 +1,163 @@
+'use strict';
+
+var pack_core = require('@palantir/pack.core');
+
+// src/types/AuthModule.ts
+
+// src/types/AuthState.ts
+var AuthState = {
+  Authenticated: "authenticated",
+  Authenticating: "authenticating",
+  Error: "error",
+  Initializing: "initializing",
+  Unauthenticated: "unauthenticated"
+};
+
+// src/types/UserRef.ts
+var UserRefBrand = Symbol("UserRef");
+var INVALID_USER_ID = "INVALID_USER_REF";
+var INVALID_USER_REF = Object.freeze({
+  userId: INVALID_USER_ID,
+  [UserRefBrand]: UserRefBrand,
+  get: () => Promise.reject(new Error("Invalid user reference"))
+});
+function invalidUserRef() {
+  return INVALID_USER_REF;
+}
+function isValidUserRef(userRef) {
+  return userRef.userId !== INVALID_USER_ID && userRef.userId !== "";
+}
+var createUserRef = (app, userId) => {
+  return new UserRefImpl(app, userId);
+};
+var UserRefImpl = class {
+  userId;
+  #authModule;
+  constructor(app, userId) {
+    this.#authModule = getAuthModule(app);
+    this.userId = userId;
+  }
+  get(force) {
+    return this.#authModule.getUserData(this.userId, force);
+  }
+};
+
+// src/utils/AuthModuleImpl.ts
+var AuthModuleImpl = class {
+  #authService;
+  app;
+  signInPromise;
+  constructor(app, authService) {
+    this.app = app;
+    this.#authService = authService;
+  }
+  // AuthModule interface implementation
+  isAuthenticated() {
+    return this.#authService.isAuthenticated();
+  }
+  async getToken() {
+    return this.#authService.getToken();
+  }
+  getTokenOrUndefined() {
+    return this.#authService.getTokenOrUndefined();
+  }
+  async signIn() {
+    if (this.signInPromise) {
+      return this.signInPromise;
+    }
+    this.signInPromise = (async () => {
+      try {
+        await this.#authService.signIn();
+      } finally {
+        this.signInPromise = void 0;
+      }
+    })();
+    return this.signInPromise;
+  }
+  async signOut() {
+    return this.#authService.signOut();
+  }
+  async refresh() {
+    if (!this.#authService.refresh) {
+      throw new Error("Refresh not supported for this auth client type");
+    }
+    return this.#authService.refresh();
+  }
+  onAuthStateChange(callback) {
+    return this.#authService.onAuthStateChange(callback);
+  }
+  onTokenChange(callback) {
+    return this.#authService.onTokenChange(callback);
+  }
+  async waitForAuth() {
+    if (this.isAuthenticated()) {
+      return Promise.resolve();
+    }
+    return new Promise((resolve, reject) => {
+      const unsubscribe = this.onAuthStateChange((event) => {
+        if (event.state === AuthState.Authenticated) {
+          unsubscribe();
+          resolve();
+        } else if (event.state === AuthState.Error) {
+          unsubscribe();
+          reject(new Error("Authentication failed", {
+            cause: event.error
+          }));
+        }
+      });
+    });
+  }
+  getCurrentUser() {
+    const userId = this.#authService.getCurrentUserId();
+    if (!userId) {
+      return void 0;
+    }
+    return createUserRef(this.app, userId);
+  }
+  async validateToken() {
+    return this.#authService.validateToken();
+  }
+  async getUserData(userId, force) {
+    return this.#authService.getUserData(userId, force);
+  }
+  dispose() {
+    this.#authService.dispose();
+    this.signInPromise = void 0;
+  }
+};
+
+// src/constants/AuthModuleKey.ts
+var AUTH_MODULE_KEY = {
+  appMemberName: "auth",
+  key: Symbol.for("pack.auth"),
+  initModule: (app, config) => {
+    if (!config) {
+      throw new Error("AuthModuleConfig is required to initialize AuthModule");
+    }
+    return new AuthModuleImpl(app, config.authService);
+  }
+};
+
+// src/types/AuthModule.ts
+function getAuthModule(app) {
+  pack_core.assertIsAppInternal(app);
+  return app.getModule(AUTH_MODULE_KEY);
+}
+
+// src/utils/AuthModuleConfig.ts
+function createAuthModuleConfig(authService) {
+  const config = {
+    authService
+  };
+  return [AUTH_MODULE_KEY, config];
+}
+
+exports.AuthModuleImpl = AuthModuleImpl;
+exports.AuthState = AuthState;
+exports.createAuthModuleConfig = createAuthModuleConfig;
+exports.createUserRef = createUserRef;
+exports.getAuthModule = getAuthModule;
+exports.invalidUserRef = invalidUserRef;
+exports.isValidUserRef = isValidUserRef;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/build/cjs/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types/AuthState.ts","../../src/types/UserRef.ts","../../src/utils/AuthModuleImpl.ts","../../src/constants/AuthModuleKey.ts","../../src/types/AuthModule.ts","../../src/utils/AuthModuleConfig.ts"],"names":["assertIsAppInternal"],"mappings":";;;;;;;AAgBO,IAAM,SAAA,GAAY;AAAA,EACvB,aAAA,EAAe,eAAA;AAAA,EACf,cAAA,EAAgB,gBAAA;AAAA,EAChB,KAAA,EAAO,OAAA;AAAA,EACP,YAAA,EAAc,cAAA;AAAA,EACd,eAAA,EAAiB;AACnB;;;ACLA,IAAM,YAAA,GAAe,OAAO,SAAS,CAAA;AAOrC,IAAM,eAAA,GAAkB,kBAAA;AACxB,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO;AAAA,EACrC,MAAA,EAAQ,eAAA;AAAA,EACR,CAAC,YAAY,GAAG,YAAA;AAAA,EAChB,KAAK,MAAM,OAAA,CAAQ,OAAO,IAAI,KAAA,CAAM,wBAAwB,CAAC;AAC/D,CAAC,CAAA;AACM,SAAS,cAAA,GAAiB;AAC/B,EAAA,OAAO,gBAAA;AACT;AACO,SAAS,eAAe,OAAA,EAAS;AACtC,EAAA,OAAO,OAAA,CAAQ,MAAA,KAAW,eAAA,IAAmB,OAAA,CAAQ,MAAA,KAAW,EAAA;AAClE;AACO,IAAM,aAAA,GAAgB,CAAC,GAAA,EAAK,MAAA,KAAW;AAC5C,EAAA,OAAO,IAAI,WAAA,CAAY,GAAA,EAAK,MAAM,CAAA;AACpC;AACA,IAAM,cAAN,MAAkB;AAAA,EAChB,MAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA,CAAY,KAAK,MAAA,EAAQ;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,cAAc,GAAG,CAAA;AACpC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA,EACA,IAAI,KAAA,EAAO;AACT,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,WAAA,CAAY,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACxD;AACF,CAAA;;;AC/BO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAAA;AAAA,EACA,GAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA,CAAY,KAAK,WAAA,EAAa;AAC5B,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,YAAA,GAAe,WAAA;AAAA,EACtB;AAAA;AAAA,EAGA,eAAA,GAAkB;AAChB,IAAA,OAAO,IAAA,CAAK,aAAa,eAAA,EAAgB;AAAA,EAC3C;AAAA,EACA,MAAM,QAAA,GAAW;AACf,IAAA,OAAO,IAAA,CAAK,aAAa,QAAA,EAAS;AAAA,EACpC;AAAA,EACA,mBAAA,GAAsB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,mBAAA,EAAoB;AAAA,EAC/C;AAAA,EACA,MAAM,MAAA,GAAS;AACb,IAAA,IAAI,KAAK,aAAA,EAAe;AACtB,MAAA,OAAO,IAAA,CAAK,aAAA;AAAA,IACd;AACA,IAAA,IAAA,CAAK,iBAAiB,YAAY;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,aAAa,MAAA,EAAO;AAAA,MACjC,CAAA,SAAE;AACA,QAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,MACvB;AAAA,IACF,CAAA,GAAG;AACH,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,MAAM,OAAA,GAAU;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,IACnE;AACA,IAAA,OAAO,IAAA,CAAK,aAAa,OAAA,EAAQ;AAAA,EACnC;AAAA,EACA,kBAAkB,QAAA,EAAU;AAC1B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,iBAAA,CAAkB,QAAQ,CAAA;AAAA,EACrD;AAAA,EACA,cAAc,QAAA,EAAU;AACtB,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc,QAAQ,CAAA;AAAA,EACjD;AAAA,EACA,MAAM,WAAA,GAAc;AAElB,IAAA,IAAI,IAAA,CAAK,iBAAgB,EAAG;AAC1B,MAAA,OAAO,QAAQ,OAAA,EAAQ;AAAA,IACzB;AACA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,WAAA,GAAc,IAAA,CAAK,iBAAA,CAAkB,CAAA,KAAA,KAAS;AAClD,QAAA,IAAI,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,aAAA,EAAe;AAC3C,UAAA,WAAA,EAAY;AACZ,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA,MAAA,IAAW,KAAA,CAAM,KAAA,KAAU,SAAA,CAAU,KAAA,EAAO;AAC1C,UAAA,WAAA,EAAY;AACZ,UAAA,MAAA,CAAO,IAAI,MAAM,uBAAA,EAAyB;AAAA,YACxC,OAAO,KAAA,CAAM;AAAA,WACd,CAAC,CAAA;AAAA,QACJ;AAAA,MACF,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EACA,cAAA,GAAiB;AACf,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,YAAA,CAAa,gBAAA,EAAiB;AAClD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,MAAM,CAAA;AAAA,EACvC;AAAA,EACA,MAAM,aAAA,GAAgB;AACpB,IAAA,OAAO,IAAA,CAAK,aAAa,aAAA,EAAc;AAAA,EACzC;AAAA,EACA,MAAM,WAAA,CAAY,MAAA,EAAQ,KAAA,EAAO;AAC/B,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,WAAA,CAAY,MAAA,EAAQ,KAAK,CAAA;AAAA,EACpD;AAAA,EACA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,aAAa,OAAA,EAAQ;AAC1B,IAAA,IAAA,CAAK,aAAA,GAAgB,MAAA;AAAA,EACvB;AACF;;;ACpFO,IAAM,eAAA,GAAkB;AAAA,EAC7B,aAAA,EAAe,MAAA;AAAA,EACf,GAAA,EAAK,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AAAA,EAC3B,UAAA,EAAY,CAAC,GAAA,EAAK,MAAA,KAAW;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,IACzE;AACA,IAAA,OAAO,IAAI,cAAA,CAAe,GAAA,EAAK,MAAA,CAAO,WAAW,CAAA;AAAA,EACnD;AACF,CAAA;;;ACOO,SAAS,cAAc,GAAA,EAAK;AACjC,EAAAA,6BAAA,CAAoB,GAAG,CAAA;AACvB,EAAA,OAAO,GAAA,CAAI,UAAU,eAAe,CAAA;AACtC;;;ACRO,SAAS,uBAAuB,WAAA,EAAa;AAClD,EAAA,MAAM,MAAA,GAAS;AAAA,IACb;AAAA,GACF;AACA,EAAA,OAAO,CAAC,iBAAiB,MAAM,CAAA;AACjC","file":"index.cjs","sourcesContent":["/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport const AuthState = {\n  Authenticated: \"authenticated\",\n  Authenticating: \"authenticating\",\n  Error: \"error\",\n  Initializing: \"initializing\",\n  Unauthenticated: \"unauthenticated\"\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getAuthModule } from \"./AuthModule.js\";\nconst UserRefBrand = Symbol(\"UserRef\");\n\n/**\n * Reference to a user from the platform API.\n * Provides access to user information with caching.\n */\n\nconst INVALID_USER_ID = \"INVALID_USER_REF\";\nconst INVALID_USER_REF = Object.freeze({\n  userId: INVALID_USER_ID,\n  [UserRefBrand]: UserRefBrand,\n  get: () => Promise.reject(new Error(\"Invalid user reference\"))\n});\nexport function invalidUserRef() {\n  return INVALID_USER_REF;\n}\nexport function isValidUserRef(userRef) {\n  return userRef.userId !== INVALID_USER_ID && userRef.userId !== \"\";\n}\nexport const createUserRef = (app, userId) => {\n  return new UserRefImpl(app, userId);\n};\nclass UserRefImpl {\n  userId;\n  #authModule;\n  constructor(app, userId) {\n    this.#authModule = getAuthModule(app);\n    this.userId = userId;\n  }\n  get(force) {\n    return this.#authModule.getUserData(this.userId, force);\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthState } from \"../types/AuthState.js\";\nimport { createUserRef } from \"../types/UserRef.js\";\nexport class AuthModuleImpl {\n  #authService;\n  app;\n  signInPromise;\n  constructor(app, authService) {\n    this.app = app;\n    this.#authService = authService;\n  }\n\n  // AuthModule interface implementation\n  isAuthenticated() {\n    return this.#authService.isAuthenticated();\n  }\n  async getToken() {\n    return this.#authService.getToken();\n  }\n  getTokenOrUndefined() {\n    return this.#authService.getTokenOrUndefined();\n  }\n  async signIn() {\n    if (this.signInPromise) {\n      return this.signInPromise;\n    }\n    this.signInPromise = (async () => {\n      try {\n        await this.#authService.signIn();\n      } finally {\n        this.signInPromise = undefined;\n      }\n    })();\n    return this.signInPromise;\n  }\n  async signOut() {\n    return this.#authService.signOut();\n  }\n  async refresh() {\n    if (!this.#authService.refresh) {\n      throw new Error(\"Refresh not supported for this auth client type\");\n    }\n    return this.#authService.refresh();\n  }\n  onAuthStateChange(callback) {\n    return this.#authService.onAuthStateChange(callback);\n  }\n  onTokenChange(callback) {\n    return this.#authService.onTokenChange(callback);\n  }\n  async waitForAuth() {\n    // If already authenticated, resolve immediately\n    if (this.isAuthenticated()) {\n      return Promise.resolve();\n    }\n    return new Promise((resolve, reject) => {\n      const unsubscribe = this.onAuthStateChange(event => {\n        if (event.state === AuthState.Authenticated) {\n          unsubscribe();\n          resolve();\n        } else if (event.state === AuthState.Error) {\n          unsubscribe();\n          reject(new Error(\"Authentication failed\", {\n            cause: event.error\n          }));\n        }\n      });\n    });\n  }\n  getCurrentUser() {\n    const userId = this.#authService.getCurrentUserId();\n    if (!userId) {\n      return undefined;\n    }\n    return createUserRef(this.app, userId);\n  }\n  async validateToken() {\n    return this.#authService.validateToken();\n  }\n  async getUserData(userId, force) {\n    return this.#authService.getUserData(userId, force);\n  }\n  dispose() {\n    this.#authService.dispose();\n    this.signInPromise = undefined;\n  }\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AuthModuleImpl } from \"../utils/AuthModuleImpl.js\";\nexport const AUTH_MODULE_KEY = {\n  appMemberName: \"auth\",\n  key: Symbol.for(\"pack.auth\"),\n  initModule: (app, config) => {\n    if (!config) {\n      throw new Error(\"AuthModuleConfig is required to initialize AuthModule\");\n    }\n    return new AuthModuleImpl(app, config.authService);\n  }\n};","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { assertIsAppInternal } from \"@palantir/pack.core\";\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * AuthModule provides unified authentication services for PACK applications.\n *\n * It wraps OSDK OAuth clients and provides a consistent interface for authentication\n * state management, token access, and auth lifecycle events.\n */\n// TODO: functions should be method style\n\n/**\n * Get the auth module from an PACK app instance.\n *\n * @param app - PACK app instance\n * @returns The auth module\n */\nexport function getAuthModule(app) {\n  assertIsAppInternal(app);\n  return app.getModule(AUTH_MODULE_KEY);\n}","/*\n * Copyright 2025 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AUTH_MODULE_KEY } from \"../constants/AuthModuleKey.js\";\n\n/**\n * Configuration for AuthModule initialization\n */\n\n/**\n * Creates an auth module configuration tuple.\n *\n * @param authService - The auth service to use\n * @returns Module configuration tuple for the auth module\n */\nexport function createAuthModuleConfig(authService) {\n  const config = {\n    authService\n  };\n  return [AUTH_MODULE_KEY, config];\n}"]}