@pofsis-nbt/pofsis-auth 0.1.0

package/API.md

@@ -0,0 +1,166 @@
+# @pofsis-nbt/pofsis-auth API
+
+Import supported APIs from `@pofsis-nbt/pofsis-auth`. Import component CSS separately from `@pofsis-nbt/pofsis-auth/style.css`. Internal source paths are not public entry points.
+
+## `PofsisAuth`
+
+Provides authentication state, restores refresh-cookie sessions, performs OAuth/PKCE redirects and callback exchange, coordinates cross-tab logout, and owns `/login`, `/auth/callback`, and `/auth/error`.
+
+```tsx
+<PofsisAuth
+    appName="Orbit"
+    apiBaseUrl="https://auth.example.com/api"
+    authUrl="https://auth.example.com/authorize"
+    scope="openid profile email"
+    postLoginPath="/"
+    components={{ LoadingScreen, ErrorScreen }}
+>
+    <App />
+</PofsisAuth>
+```
+
+### `PofsisAuthProps`
+
+| Property        | Type                     | Default                | Purpose                                  |
+| --------------- | ------------------------ | ---------------------- | ---------------------------------------- |
+| `children`      | `ReactNode`              | Required               | Application tree receiving auth context. |
+| `appName`       | `string`                 | Required               | Auth identity/application label.         |
+| `apiBaseUrl`    | `string`                 | Required               | POFSIS Auth API base URL.                |
+| `authUrl`       | `string`                 | Required               | OAuth authorization endpoint.            |
+| `scope`         | `string`                 | `openid profile email` | OAuth scopes.                            |
+| `postLoginPath` | `string`                 | `/`                    | Fallback destination after callback.     |
+| `components`    | `AuthComponentOverrides` | Built-in screens       | Loading and error UI overrides.          |
+
+The package does not read environment variables. Consumers resolve environment or runtime settings before rendering this component.
+
+## `RequireAuth`
+
+Renders authenticated children, displays a fallback while authentication is unresolved, and starts login when no session is available.
+
+### `RequireAuthProps`
+
+| Property            | Type         | Default                   | Purpose                           |
+| ------------------- | ------------ | ------------------------- | --------------------------------- |
+| `children`          | `ReactNode`  | Required                  | Authenticated content.            |
+| `fallback`          | `ReactNode`  | Configured loading screen | Loading or redirecting content.   |
+| `onUnauthenticated` | `() => void` | Calls `login()`           | Optional router-specific handler. |
+
+## `useAuth`
+
+Returns `AuthContextValue` from the nearest `PofsisAuth` and throws when used outside the provider.
+
+### State
+
+| Value             | Type                     | Meaning                                 |
+| ----------------- | ------------------------ | --------------------------------------- |
+| `user`            | `PofsisUser \| null`     | Current account identity.               |
+| `session`         | `SessionPayload \| null` | Current non-token session data.         |
+| `isAuthenticated` | `boolean`                | Whether a session is active.            |
+| `isLoading`       | `boolean`                | Whether initial restoration is running. |
+
+### `login(options?)`
+
+Starts OAuth authorization. `AuthLaunchOptions` supports:
+
+| Property    | Type                                           | Behavior                                  |
+| ----------- | ---------------------------------------------- | ----------------------------------------- |
+| `screen`    | `'login' \| 'signup' \| 'reset' \| 'register'` | Auth screen; `register` aliases `signup`. |
+| `loginHint` | `string`                                       | Valid email or Philippine mobile hint.    |
+| `method`    | `'password' \| 'passkey' \| 'otp'`             | Login-only method hint.                   |
+| `returnUrl` | `string`                                       | Safe local path restored after callback.  |
+
+The `/login` route maps `screen`, `login_hint`, `method`, and legacy `email` query parameters into these options. `login_hint` takes precedence over `email`. Invalid or oversized hints are ignored.
+
+### `logout()`
+
+Posts to remote logout, clears local state, broadcasts logout to other tabs, and navigates to the registered logout URI or `/login`. Local cleanup still occurs if the remote request fails.
+
+### `refreshSession()`
+
+Uses the registered OAuth client and refresh cookie to request an in-memory access token and session. Concurrent calls share one request.
+
+### `getAccessToken()`
+
+Returns the current in-memory access token as `string | null` without triggering refresh.
+
+### `getAccountProfile()`
+
+Returns `Promise<AccountProfile>`, refreshing authentication when required and synchronizing returned profile fields into the context user.
+
+### `updateAccountProfile(profile)`
+
+Accepts `{ firstName?: string | null; lastName?: string | null }` and returns the synchronized `AccountProfile`.
+
+### `uploadAccountProfileImage(kind, file)`
+
+Uploads a `File` for kind `'profile'` or `'cover'` and returns the synchronized `AccountProfile`.
+
+### `deleteAccountProfileImage(kind)`
+
+Deletes the `'profile'` or `'cover'` image and returns the synchronized `AccountProfile`.
+
+### `completeCallback(code, state)`
+
+Verifies OAuth state and the PKCE verifier, exchanges the authorization code, and accepts the session. `PofsisAuth` normally calls this automatically.
+
+## Components
+
+### `AuthLoadingScreen`
+
+Default full-page loading UI. `AuthLoadingScreenProps.callback` selects callback-specific copy.
+
+### `AuthErrorScreen`
+
+Default full-page error UI. `AuthErrorScreenProps.retryHref` defaults to `/login`.
+
+### `AuthComponentOverrides`
+
+```ts
+type AuthComponentOverrides = {
+    LoadingScreen?: ComponentType<AuthLoadingScreenProps>
+    ErrorScreen?: ComponentType<AuthErrorScreenProps>
+}
+```
+
+## `attachAuthInterceptor`
+
+```ts
+const detach = attachAuthInterceptor(client, getToken, refresh)
+```
+
+Adds a Bearer token to Axios requests and retries one failed request after a `401` refresh. The returned cleanup function ejects both interceptors.
+
+## `resolveConfig`
+
+```ts
+const config = resolveConfig({
+    appName: 'Orbit',
+    apiBaseUrl: 'https://auth.example.com/api',
+    authUrl: 'https://auth.example.com/authorize',
+})
+```
+
+Validates caller-supplied configuration, removes one trailing slash from URL values, defaults the scope, and throws when required values are missing. `ConfigOverrides` remains the accepted input type for direct validation.
+
+## Exported types
+
+- `PofsisAuthProps`
+- `RequireAuthProps`
+- `PofsisAuthConfig`
+- `ConfigOverrides`
+- `PofsisUser`
+- `AccountProfile`
+- `SessionPayload`
+- `TokenResponse`
+- `OAuthClientConfig`
+- `AuthContextValue`
+- `AuthLaunchOptions`
+- `AuthScreen`
+- `AuthMethod`
+- `AuthComponentOverrides`
+- `AuthLoadingScreenProps`
+- `AuthErrorScreenProps`
+
+## Internal APIs
+
+Raw requests, PKCE utilities, launch-option normalization, context construction, callback routing, and source assets are private. Consumers must not import from `src`, `dist/auth`, `dist/components`, or `dist/context`; only exported package subpaths are supported.

package/README.md

@@ -0,0 +1,236 @@
+# @pofsis-nbt/pofsis-auth
+
+React integration for POFSIS OAuth 2.0 authorization-code authentication with PKCE, refresh-cookie session restoration, account profile management, reusable authentication UI, and Axios authorization support.
+
+The package ships one implementation for JavaScript and TypeScript applications:
+
+- ESM: `dist/index.js`
+- CommonJS: `dist/index.cjs`
+- TypeScript declarations: `dist/index.d.ts`
+- Component styles: `dist/style.css`
+
+## Requirements
+
+- Node.js `^20.19.0` or `>=22.12.0` for package development and builds
+- React and React DOM 18 or newer
+- Axios 1 or newer only when using `attachAuthInterceptor`
+
+## Install
+
+```bash
+npm install @pofsis-nbt/pofsis-auth react react-dom
+```
+
+Install Axios when using the optional interceptor helper:
+
+```bash
+npm install axios
+```
+
+## JavaScript usage
+
+Import the package stylesheet once in the application entry point:
+
+```jsx
+import '@pofsis-nbt/pofsis-auth/style.css'
+import { PofsisAuth, RequireAuth } from '@pofsis-nbt/pofsis-auth'
+
+export function App() {
+    return (
+        <PofsisAuth
+            appName="Orbit"
+            apiBaseUrl="https://auth.example.com/api"
+            authUrl="https://auth.example.com/authorize"
+        >
+            <RequireAuth>
+                <YourApplication />
+            </RequireAuth>
+        </PofsisAuth>
+    )
+}
+```
+
+## TypeScript usage
+
+The same imports provide bundled declarations; no separate type package is needed:
+
+```tsx
+import '@pofsis-nbt/pofsis-auth/style.css'
+import { PofsisAuth, RequireAuth, type PofsisAuthProps } from '@pofsis-nbt/pofsis-auth'
+
+const authConfig: Pick<PofsisAuthProps, 'appName' | 'apiBaseUrl' | 'authUrl' | 'scope'> = {
+    appName: 'Orbit',
+    apiBaseUrl: 'https://auth.example.com/api',
+    authUrl: 'https://auth.example.com/authorize',
+    scope: 'openid profile email',
+}
+
+export function App() {
+    return (
+        <PofsisAuth {...authConfig}>
+            <RequireAuth>
+                <YourApplication />
+            </RequireAuth>
+        </PofsisAuth>
+    )
+}
+```
+
+## Supplying runtime configuration
+
+The library never reads `import.meta.env`, `process.env`, or another environment system. The consuming application supplies configuration through `PofsisAuth`.
+
+### Vite consumer
+
+```tsx
+<PofsisAuth
+    appName={import.meta.env.VITE_POFSIS_APP_NAME}
+    apiBaseUrl={import.meta.env.VITE_POFSIS_API_BASE_URL}
+    authUrl={import.meta.env.VITE_POFSIS_AUTH_URL}
+    scope={import.meta.env.VITE_POFSIS_SCOPE}
+>
+    <AppRoutes />
+</PofsisAuth>
+```
+
+### Framework-neutral runtime configuration
+
+```tsx
+const runtimeConfig = window.applicationConfig.auth
+
+<PofsisAuth
+    appName={runtimeConfig.appName}
+    apiBaseUrl={runtimeConfig.apiBaseUrl}
+    authUrl={runtimeConfig.authUrl}
+    scope={runtimeConfig.scope}
+>
+    <AppRoutes />
+</PofsisAuth>
+```
+
+`appName`, `apiBaseUrl`, and `authUrl` are required. `scope` defaults to `openid profile email`.
+
+## Auth routes
+
+`PofsisAuth` handles these browser paths before rendering application children:
+
+| Path             | Behavior                                                                                              |
+| ---------------- | ----------------------------------------------------------------------------------------------------- |
+| `/login`         | Starts the PKCE authorization redirect.                                                               |
+| `/auth/callback` | Verifies state, exchanges the authorization code, and redirects to the saved path or `postLoginPath`. |
+| `/auth/error`    | Renders the configured error screen.                                                                  |
+
+The consuming application must serve its SPA entry point for these paths and register the callback and logout URIs with POFSIS Auth.
+
+## Session and login
+
+```tsx
+import { useAuth } from '@pofsis-nbt/pofsis-auth'
+
+export function AccountMenu() {
+    const { isAuthenticated, login, logout, user } = useAuth()
+
+    if (!isAuthenticated) {
+        return <button onClick={() => void login()}>Sign in</button>
+    }
+
+    return <button onClick={() => void logout()}>Sign out {user?.displayName}</button>
+}
+```
+
+Access tokens remain in memory and are not persisted.
+
+Login supports screens and editable hints:
+
+```tsx
+void login({
+    screen: 'login',
+    loginHint: 'sample@example.com',
+    method: 'password',
+    returnUrl: '/requested-page',
+})
+```
+
+- `screen`: `login`, `signup`, or `reset`; `register` remains a compatibility alias for `signup`.
+- `method`: `password`, `passkey`, or `otp`; applied only to the login screen.
+- `loginHint`: a valid email or Philippine mobile number.
+- `returnUrl`: a local path beginning with one `/`, never `//`.
+
+The `/login` route accepts `screen`, `login_hint`, `method`, and legacy `email` query parameters. Hints are editable and untrusted; they never bypass authentication or authorization.
+
+## Custom auth UI
+
+```tsx
+import type { AuthErrorScreenProps, AuthLoadingScreenProps } from '@pofsis-nbt/pofsis-auth'
+
+function LoadingScreen({ callback }: AuthLoadingScreenProps) {
+    return <p>{callback ? 'Completing sign-in...' : 'Restoring session...'}</p>
+}
+
+function ErrorScreen({ retryHref }: AuthErrorScreenProps) {
+    return <a href={retryHref}>Try signing in again</a>
+}
+
+;<PofsisAuth {...authConfig} components={{ LoadingScreen, ErrorScreen }}>
+    <YourApplication />
+</PofsisAuth>
+```
+
+`RequireAuth` also accepts a route-specific `fallback`.
+
+## Axios integration
+
+```tsx
+import { useEffect } from 'react'
+import axios from 'axios'
+import { attachAuthInterceptor, useAuth } from '@pofsis-nbt/pofsis-auth'
+
+const api = axios.create({ baseURL: '/api' })
+
+function ApiBridge() {
+    const { getAccessToken, refreshSession } = useAuth()
+
+    useEffect(
+        () => attachAuthInterceptor(api, getAccessToken, refreshSession),
+        [getAccessToken, refreshSession],
+    )
+
+    return null
+}
+```
+
+The returned cleanup function ejects both interceptors.
+
+## CommonJS
+
+Bundlers and Node-compatible tooling can use the CommonJS export:
+
+```js
+const { PofsisAuth, RequireAuth } = require('@pofsis-nbt/pofsis-auth')
+```
+
+Import the stylesheet through the consuming bundler:
+
+```js
+require('@pofsis-nbt/pofsis-auth/style.css')
+```
+
+## Development and packaging
+
+```bash
+npm run typecheck
+npm test
+npm run build
+npm run pack:check
+```
+
+`npm run build` creates ESM, CommonJS, declarations, source maps, and CSS under `dist/`. `npm run pack:check` performs an npm dry run only; it does not publish.
+
+## Migrating from `@pofsis/auth-react`
+
+1. Replace imports with `@pofsis-nbt/pofsis-auth`.
+2. Import `@pofsis-nbt/pofsis-auth/style.css` once.
+3. Pass `appName`, `apiBaseUrl`, and `authUrl` explicitly to `PofsisAuth`.
+4. Remove Vite dependency-prebundle workarounds used for the source-only package.
+
+See [API.md](./API.md) for the complete supported public API. Files below package-internal source directories are not public entry points.

package/dist/PofsisAuth.d.ts

@@ -0,0 +1,7 @@
+import type { PofsisAuthProps } from './types';
+/**
+ * Single integration surface for tool apps.
+ * Handles session restore, PKCE login, and fixed paths `/login`, `/auth/callback`, `/auth/error`.
+ */
+export declare function PofsisAuth({ children, appName, apiBaseUrl, authUrl, components, scope, postLoginPath, }: PofsisAuthProps): import("react").JSX.Element;
+//# sourceMappingURL=PofsisAuth.d.ts.map

package/dist/PofsisAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PofsisAuth.d.ts","sourceRoot":"","sources":["../src/PofsisAuth.tsx"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAIR,eAAe,EAElB,MAAM,SAAS,CAAA;AAmVhB;;;GAGG;AACH,wBAAgB,UAAU,CAAC,EACvB,QAAQ,EACR,OAAO,EACP,UAAU,EACV,OAAO,EACP,UAAU,EACV,KAAK,EACL,aAAmB,GACtB,EAAE,eAAe,+BA4BjB"}

package/dist/attachAuthInterceptor.d.ts

@@ -0,0 +1,7 @@
+import type { AxiosInstance } from 'axios';
+/**
+ * Attach Bearer token + single 401 refresh/retry to an axios instance.
+ * Optional — only needed when the tool calls APIs with the access token.
+ */
+export declare function attachAuthInterceptor(client: AxiosInstance, getToken: () => string | null, refresh: () => Promise<void>): () => void;
+//# sourceMappingURL=attachAuthInterceptor.d.ts.map

package/dist/attachAuthInterceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachAuthInterceptor.d.ts","sourceRoot":"","sources":["../src/attachAuthInterceptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAA0C,MAAM,OAAO,CAAA;AAIlF;;;GAGG;AACH,wBAAgB,qBAAqB,CACjC,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,EAC7B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,cAoB/B"}

package/dist/auth/api.d.ts

@@ -0,0 +1,14 @@
+import type { AccountProfile, OAuthClientConfig, PofsisAuthConfig, TokenResponse } from '../types';
+export declare function fetchOAuthClient(config: PofsisAuthConfig): Promise<OAuthClientConfig>;
+export declare function exchangeCode(config: PofsisAuthConfig, code: string, verifier: string, client: Pick<OAuthClientConfig, 'client_id' | 'redirect_uri'>): Promise<TokenResponse>;
+export declare function refresh(config: PofsisAuthConfig, clientId: string): Promise<TokenResponse | null>;
+export declare function checkSession(config: PofsisAuthConfig): Promise<boolean>;
+export declare function signOut(config: PofsisAuthConfig): Promise<void>;
+export declare function getAccountProfile(config: PofsisAuthConfig, accessToken: string): Promise<AccountProfile>;
+export declare function updateAccountProfile(config: PofsisAuthConfig, accessToken: string, profile: {
+    firstName?: string | null;
+    lastName?: string | null;
+}): Promise<AccountProfile>;
+export declare function uploadAccountProfileImage(config: PofsisAuthConfig, accessToken: string, kind: 'profile' | 'cover', file: File): Promise<AccountProfile>;
+export declare function deleteAccountProfileImage(config: PofsisAuthConfig, accessToken: string, kind: 'profile' | 'cover'): Promise<AccountProfile>;
+//# sourceMappingURL=api.d.ts.map

package/dist/auth/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/auth/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAiClG,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,8BAQ9D;AAED,wBAAsB,YAAY,CAC9B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,GAAG,cAAc,CAAC,0BAahE;AAED,wBAAsB,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,iCASvE;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,gBAAgB,oBAO1D;AAED,wBAAsB,OAAO,CAAC,MAAM,EAAE,gBAAgB,iBAErD;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,2BAKpF;AAED,wBAAsB,oBAAoB,CACtC,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,2BAQnE;AAED,wBAAsB,yBAAyB,CAC3C,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,SAAS,GAAG,OAAO,EACzB,IAAI,EAAE,IAAI,2BAUb;AAED,wBAAsB,yBAAyB,CAC3C,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,SAAS,GAAG,OAAO,2BAO5B"}

package/dist/auth/authLaunch.d.ts

@@ -0,0 +1,20 @@
+import type { AuthLaunchOptions, AuthMethod, AuthScreen } from '../types';
+export declare function normalizeAuthLaunchOptions(value: unknown, defaultScreen?: AuthScreen): {
+    returnUrl: string | undefined;
+    screen: AuthScreen;
+    loginHint: string | undefined;
+    method: AuthMethod | undefined;
+};
+export declare function authLaunchOptionsFromSearch(search: string): {
+    returnUrl: string | undefined;
+    screen: AuthScreen;
+    loginHint: string | undefined;
+    method: AuthMethod | undefined;
+};
+export declare function buildAuthDestination({ authUrl, appName, query, options, }: {
+    authUrl: string;
+    appName: string;
+    query: URLSearchParams;
+    options?: AuthLaunchOptions;
+}): string;
+//# sourceMappingURL=authLaunch.d.ts.map

package/dist/auth/authLaunch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authLaunch.d.ts","sourceRoot":"","sources":["../../src/auth/authLaunch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAiBzE,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,GAAE,UAAoB;;;;;EAkB7F;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM;;;;;EAYzD;AAED,wBAAgB,oBAAoB,CAAC,EACjC,OAAO,EACP,OAAO,EACP,KAAK,EACL,OAAO,GACV,EAAE;IACC,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,eAAe,CAAA;IACtB,OAAO,CAAC,EAAE,iBAAiB,CAAA;CAC9B,UAoBA"}

package/dist/auth/config.d.ts

@@ -0,0 +1,7 @@
+import type { PofsisAuthConfig } from '../types';
+export type ConfigOverrides = Partial<PofsisAuthConfig>;
+/**
+ * Validate and normalize caller-supplied auth configuration.
+ */
+export declare function resolveConfig(overrides?: ConfigOverrides): PofsisAuthConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/auth/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/auth/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAMhD,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAEvD;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,GAAE,eAAoB,GAAG,gBAAgB,CAoB/E"}

package/dist/auth/pkce.d.ts

@@ -0,0 +1,3 @@
+export declare const randomValue: () => string;
+export declare function pkceChallenge(verifier: string): Promise<string>;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/auth/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/auth/pkce.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,WAAW,cAA2D,CAAA;AAEnF,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,mBAInD"}

package/dist/components/AuthErrorScreen.d.ts

@@ -0,0 +1,4 @@
+import './AuthErrorScreen.css';
+import type { AuthErrorScreenProps } from '../types';
+export declare function AuthErrorScreen({ retryHref }: AuthErrorScreenProps): import("react").JSX.Element;
+//# sourceMappingURL=AuthErrorScreen.d.ts.map

package/dist/components/AuthErrorScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthErrorScreen.d.ts","sourceRoot":"","sources":["../../src/components/AuthErrorScreen.tsx"],"names":[],"mappings":"AAEA,OAAO,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAqFpD,wBAAgB,eAAe,CAAC,EAAE,SAAoB,EAAE,EAAE,oBAAoB,+BAwB7E"}

package/dist/components/AuthLoadingScreen.d.ts

@@ -0,0 +1,4 @@
+import './AuthLoadingScreen.css';
+import type { AuthLoadingScreenProps } from '../types';
+export declare function AuthLoadingScreen({ callback }: AuthLoadingScreenProps): import("react").JSX.Element;
+//# sourceMappingURL=AuthLoadingScreen.d.ts.map

package/dist/components/AuthLoadingScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthLoadingScreen.d.ts","sourceRoot":"","sources":["../../src/components/AuthLoadingScreen.tsx"],"names":[],"mappings":"AACA,OAAO,yBAAyB,CAAA;AAChC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAqCtD,wBAAgB,iBAAiB,CAAC,EAAE,QAAgB,EAAE,EAAE,sBAAsB,+BAU7E"}

package/dist/components/AuthPathShell.d.ts

@@ -0,0 +1,11 @@
+import { type ReactNode } from 'react';
+import type { AuthComponentOverrides } from '../types';
+type AuthPathShellProps = {
+    children: ReactNode;
+    components: Required<AuthComponentOverrides>;
+    postLoginPath: string;
+    returnPathKey: string;
+};
+export declare function AuthPathShell({ children, components, postLoginPath, returnPathKey, }: AuthPathShellProps): import("react").JSX.Element | null;
+export {};
+//# sourceMappingURL=AuthPathShell.d.ts.map

package/dist/components/AuthPathShell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthPathShell.d.ts","sourceRoot":"","sources":["../../src/components/AuthPathShell.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAGrE,OAAO,KAAK,EAAE,sBAAsB,EAAoB,MAAM,UAAU,CAAA;AAExE,KAAK,kBAAkB,GAAG;IACtB,QAAQ,EAAE,SAAS,CAAA;IACnB,UAAU,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IAC5C,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;CACxB,CAAA;AAqED,wBAAgB,aAAa,CAAC,EAC1B,QAAQ,EACR,UAAU,EACV,aAAa,EACb,aAAa,GAChB,EAAE,kBAAkB,sCA2BpB"}

package/dist/components/RequireAuth.d.ts

@@ -0,0 +1,13 @@
+import { type ReactNode } from 'react';
+export type RequireAuthProps = {
+    children: ReactNode;
+    /** Rendered while session is restoring. */
+    fallback?: ReactNode;
+    /** Called when unauthenticated (default: redirect to /login). */
+    onUnauthenticated?: () => void;
+};
+/**
+ * Guard for authenticated UI. Router-agnostic — defaults to assigning /login.
+ */
+export declare function RequireAuth({ children, fallback, onUnauthenticated }: RequireAuthProps): import("react").JSX.Element;
+//# sourceMappingURL=RequireAuth.d.ts.map

package/dist/components/RequireAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequireAuth.d.ts","sourceRoot":"","sources":["../../src/components/RequireAuth.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,SAAS,EAAE,MAAM,OAAO,CAAA;AAK7D,MAAM,MAAM,gBAAgB,GAAG;IAC3B,QAAQ,EAAE,SAAS,CAAA;IACnB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAA;CACjC,CAAA;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,gBAAgB,+BAmBtF"}

package/dist/components/index.d.ts

@@ -0,0 +1,5 @@
+export { AuthErrorScreen } from './AuthErrorScreen';
+export { AuthLoadingScreen } from './AuthLoadingScreen';
+export { RequireAuth } from './RequireAuth';
+export type { RequireAuthProps } from './RequireAuth';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA"}

package/dist/context/AuthComponentsContext.d.ts

@@ -0,0 +1,3 @@
+import type { AuthComponentOverrides } from '../types';
+export declare const AuthComponentsContext: import("react").Context<Required<AuthComponentOverrides> | null>;
+//# sourceMappingURL=AuthComponentsContext.d.ts.map

package/dist/context/AuthComponentsContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthComponentsContext.d.ts","sourceRoot":"","sources":["../../src/context/AuthComponentsContext.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAEtD,eAAO,MAAM,qBAAqB,kEAA+D,CAAA"}

package/dist/context/AuthContext.d.ts

@@ -0,0 +1,3 @@
+import type { AuthContextValue } from '../types';
+export declare const AuthContext: import("react").Context<AuthContextValue | null>;
+//# sourceMappingURL=AuthContext.d.ts.map

package/dist/context/AuthContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthContext.d.ts","sourceRoot":"","sources":["../../src/context/AuthContext.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAEhD,eAAO,MAAM,WAAW,kDAA+C,CAAA"}

package/dist/context/useAuth.d.ts

@@ -0,0 +1,3 @@
+import type { AuthContextValue } from '../types';
+export declare function useAuth(): AuthContextValue;
+//# sourceMappingURL=useAuth.d.ts.map

package/dist/context/useAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../src/context/useAuth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAGhD,wBAAgB,OAAO,IAAI,gBAAgB,CAI1C"}