@ttt-productions/auth-core 0.0.0 → 0.0.2

package/dist/auth.d.ts

@@ -0,0 +1,10 @@
+import type { Auth, User } from "firebase/auth";
+export type Unsubscribe = () => void;
+export declare function getAuthUser(auth: Auth): User | null;
+/**
+ * Thin wrapper around Firebase onAuthStateChanged.
+ * - always returns the unsubscribe function
+ * - preserves Firebase callback signature
+ */
+export declare function onAuthStateChanged(auth: Auth, cb: (user: User | null) => void, onError?: (error: unknown) => void): Unsubscribe;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAGhD,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC;AAErC,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,KAAK,IAAI,EAC/B,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACjC,WAAW,CAEb"}

package/dist/auth.js

@@ -0,0 +1,13 @@
+import { onAuthStateChanged as fbOnAuthStateChanged } from "firebase/auth";
+export function getAuthUser(auth) {
+    return auth.currentUser;
+}
+/**
+ * Thin wrapper around Firebase onAuthStateChanged.
+ * - always returns the unsubscribe function
+ * - preserves Firebase callback signature
+ */
+export function onAuthStateChanged(auth, cb, onError) {
+    return fbOnAuthStateChanged(auth, cb, onError);
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,IAAI,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAI3E,MAAM,UAAU,WAAW,CAAC,IAAU;IACpC,OAAO,IAAI,CAAC,WAAW,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAU,EACV,EAA+B,EAC/B,OAAkC;IAElC,OAAO,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC"}

package/dist/claims.d.ts

@@ -0,0 +1,27 @@
+import type { Auth, User, IdTokenResult } from "firebase/auth";
+export type IdTokenClaims = IdTokenResult["claims"];
+export type ParsedClaims = {
+    roles: string[];
+    raw: IdTokenClaims;
+};
+/**
+ * Get the current user's ID token claims.
+ * Returns null if no current user.
+ */
+export declare function getIdTokenClaims(user: User | null): Promise<IdTokenClaims | null>;
+/**
+ * Forces refresh of ID token + claims.
+ * Returns null if no current user.
+ */
+export declare function refreshClaims(user: User | null): Promise<IdTokenClaims | null>;
+/**
+ * Convenience helper when you only have Auth.
+ */
+export declare function refreshClaimsFromAuth(auth: Auth): Promise<IdTokenClaims | null>;
+/**
+ * Keep parsing intentionally minimal and generic:
+ * - normalize "roles" into string[]
+ * - keep raw claims attached
+ */
+export declare function parseClaims(claims: IdTokenClaims | null | undefined): ParsedClaims;
+//# sourceMappingURL=claims.d.ts.map

package/dist/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../src/claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE/D,MAAM,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;AAEpD,MAAM,MAAM,YAAY,GAAG;IAEzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,GAAG,EAAE,aAAa,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAIvF;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAIpF;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAErF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,CAUlF"}

package/dist/claims.js

@@ -0,0 +1,40 @@
+/**
+ * Get the current user's ID token claims.
+ * Returns null if no current user.
+ */
+export async function getIdTokenClaims(user) {
+    if (!user)
+        return null;
+    const res = await user.getIdTokenResult(false);
+    return res.claims;
+}
+/**
+ * Forces refresh of ID token + claims.
+ * Returns null if no current user.
+ */
+export async function refreshClaims(user) {
+    if (!user)
+        return null;
+    const res = await user.getIdTokenResult(true);
+    return res.claims;
+}
+/**
+ * Convenience helper when you only have Auth.
+ */
+export async function refreshClaimsFromAuth(auth) {
+    return refreshClaims(auth.currentUser);
+}
+/**
+ * Keep parsing intentionally minimal and generic:
+ * - normalize "roles" into string[]
+ * - keep raw claims attached
+ */
+export function parseClaims(claims) {
+    const raw = (claims ?? {});
+    const rolesValue = raw.roles;
+    const roles = Array.isArray(rolesValue) ? rolesValue.filter((x) => typeof x === "string") :
+        typeof rolesValue === "string" ? [rolesValue] :
+            [];
+    return { roles, raw };
+}
+//# sourceMappingURL=claims.js.map

package/dist/claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../src/claims.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAiB;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAiB;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAU;IACpD,OAAO,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAwC;IAClE,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAkB,CAAC;IAE5C,MAAM,UAAU,GAAI,GAAW,CAAC,KAAK,CAAC;IACtC,MAAM,KAAK,GACT,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;QAC7E,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAC/C,EAAE,CAAC;IAEL,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,9 @@
+export type AuthErrorCode = "AUTH_UNKNOWN" | "AUTH_NETWORK_ERROR" | "AUTH_TOO_MANY_REQUESTS" | "AUTH_POPUP_CLOSED" | "AUTH_POPUP_BLOCKED" | "AUTH_CANCELLED" | "AUTH_USER_DISABLED" | "AUTH_USER_NOT_FOUND" | "AUTH_WRONG_PASSWORD" | "AUTH_INVALID_EMAIL" | "AUTH_EMAIL_ALREADY_IN_USE" | "AUTH_WEAK_PASSWORD" | "AUTH_REQUIRES_RECENT_LOGIN" | "AUTH_INVALID_CREDENTIAL" | "AUTH_ACCOUNT_EXISTS_WITH_DIFFERENT_CREDENTIAL" | "AUTH_PROVIDER_ALREADY_LINKED" | "AUTH_CREDENTIAL_ALREADY_IN_USE";
+export type NormalizedAuthError = {
+    code: AuthErrorCode;
+    message: string;
+    firebaseCode?: string;
+    details?: Record<string, unknown>;
+};
+export declare function normalizeAuthError(err: unknown, details?: Record<string, unknown>): NormalizedAuthError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,oBAAoB,GACpB,wBAAwB,GACxB,mBAAmB,GACnB,oBAAoB,GACpB,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,GACrB,qBAAqB,GACrB,oBAAoB,GACpB,2BAA2B,GAC3B,oBAAoB,GACpB,4BAA4B,GAC5B,yBAAyB,GACzB,+CAA+C,GAC/C,8BAA8B,GAC9B,gCAAgC,CAAC;AAErC,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AA4EF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,mBAAmB,CAyBvG"}

package/dist/errors.js

@@ -0,0 +1,96 @@
+function pickFirebaseCode(err) {
+    if (!err || typeof err !== "object")
+        return undefined;
+    const anyErr = err;
+    const c = anyErr.code;
+    return typeof c === "string" ? c : undefined;
+}
+const MAP = {
+    "auth/network-request-failed": {
+        code: "AUTH_NETWORK_ERROR",
+        message: "Network error. Please check your connection and try again."
+    },
+    "auth/too-many-requests": {
+        code: "AUTH_TOO_MANY_REQUESTS",
+        message: "Too many attempts. Please wait a moment and try again."
+    },
+    "auth/popup-closed-by-user": {
+        code: "AUTH_POPUP_CLOSED",
+        message: "Sign-in popup was closed."
+    },
+    "auth/popup-blocked": {
+        code: "AUTH_POPUP_BLOCKED",
+        message: "Sign-in popup was blocked by the browser."
+    },
+    "auth/cancelled-popup-request": {
+        code: "AUTH_CANCELLED",
+        message: "Sign-in was cancelled."
+    },
+    "auth/user-disabled": {
+        code: "AUTH_USER_DISABLED",
+        message: "This account has been disabled."
+    },
+    "auth/user-not-found": {
+        code: "AUTH_USER_NOT_FOUND",
+        message: "No account found with that email."
+    },
+    "auth/wrong-password": {
+        code: "AUTH_WRONG_PASSWORD",
+        message: "Incorrect password."
+    },
+    "auth/invalid-email": {
+        code: "AUTH_INVALID_EMAIL",
+        message: "Invalid email address."
+    },
+    "auth/email-already-in-use": {
+        code: "AUTH_EMAIL_ALREADY_IN_USE",
+        message: "That email is already in use."
+    },
+    "auth/weak-password": {
+        code: "AUTH_WEAK_PASSWORD",
+        message: "Password is too weak."
+    },
+    "auth/requires-recent-login": {
+        code: "AUTH_REQUIRES_RECENT_LOGIN",
+        message: "Please re-authenticate and try again."
+    },
+    "auth/invalid-credential": {
+        code: "AUTH_INVALID_CREDENTIAL",
+        message: "Invalid credentials. Please try again."
+    },
+    "auth/account-exists-with-different-credential": {
+        code: "AUTH_ACCOUNT_EXISTS_WITH_DIFFERENT_CREDENTIAL",
+        message: "An account already exists with a different sign-in method."
+    },
+    "auth/provider-already-linked": {
+        code: "AUTH_PROVIDER_ALREADY_LINKED",
+        message: "That provider is already linked to this account."
+    },
+    "auth/credential-already-in-use": {
+        code: "AUTH_CREDENTIAL_ALREADY_IN_USE",
+        message: "Those credentials are already associated with another account."
+    }
+};
+export function normalizeAuthError(err, details) {
+    const firebaseCode = pickFirebaseCode(err);
+    const mapped = firebaseCode ? MAP[firebaseCode] : undefined;
+    if (mapped) {
+        return {
+            code: mapped.code,
+            message: mapped.message,
+            firebaseCode,
+            details
+        };
+    }
+    // best-effort message (don’t leak weird objects)
+    const msg = typeof err?.message === "string"
+        ? err.message
+        : "Authentication error. Please try again.";
+    return {
+        code: "AUTH_UNKNOWN",
+        message: msg,
+        firebaseCode,
+        details
+    };
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AA0BA,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,MAAM,GAAG,GAAU,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACtB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,GAAG,GAA6D;IACpE,6BAA6B,EAAE;QAC7B,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,4DAA4D;KACtE;IACD,wBAAwB,EAAE;QACxB,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,wDAAwD;KAClE;IACD,2BAA2B,EAAE;QAC3B,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,2BAA2B;KACrC;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,2CAA2C;KACrD;IACD,8BAA8B,EAAE;QAC9B,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,wBAAwB;KAClC;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,iCAAiC;KAC3C;IACD,qBAAqB,EAAE;QACrB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,mCAAmC;KAC7C;IACD,qBAAqB,EAAE;QACrB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,qBAAqB;KAC/B;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,wBAAwB;KAClC;IACD,2BAA2B,EAAE;QAC3B,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,+BAA+B;KACzC;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,uBAAuB;KACjC;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,uCAAuC;KACjD;IACD,yBAAyB,EAAE;QACzB,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,wCAAwC;KAClD;IACD,+CAA+C,EAAE;QAC/C,IAAI,EAAE,+CAA+C;QACrD,OAAO,EAAE,4DAA4D;KACtE;IACD,8BAA8B,EAAE;QAC9B,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,kDAAkD;KAC5D;IACD,gCAAgC,EAAE;QAChC,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,gEAAgE;KAC1E;CACF,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,OAAiC;IAChF,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY;YACZ,OAAO;SACR,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,MAAM,GAAG,GACP,OAAQ,GAAW,EAAE,OAAO,KAAK,QAAQ;QACvC,CAAC,CAAE,GAAW,CAAC,OAAO;QACtB,CAAC,CAAC,yCAAyC,CAAC;IAEhD,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,GAAG;QACZ,YAAY;QACZ,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./auth";
+export * from "./claims";
+export * from "./errors";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}

package/{src/index.ts → dist/index.js}

@@ -1,3 +1,4 @@
 export * from "./auth";
 export * from "./claims";
 export * from "./errors";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}

package/dist/react/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./useAuthState";
+//# sourceMappingURL=index.d.ts.map

package/dist/react/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/dist/react/index.js

@@ -0,0 +1,2 @@
+export * from "./useAuthState";
+//# sourceMappingURL=index.js.map

package/dist/react/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/react/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/dist/react/useAuthState.d.ts

@@ -0,0 +1,8 @@
+import type { Auth, User } from "firebase/auth";
+export type AuthState = {
+    user: User | null;
+    loading: boolean;
+    error: unknown | null;
+};
+export declare function useAuthState(auth: Auth): AuthState;
+//# sourceMappingURL=useAuthState.d.ts.map

package/dist/react/useAuthState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthState.d.ts","sourceRoot":"","sources":["../../src/react/useAuthState.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAGhD,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,CAuBlD"}

package/dist/react/useAuthState.js

@@ -0,0 +1,21 @@
+import { useEffect, useState } from "react";
+import { onAuthStateChanged } from "../auth";
+export function useAuthState(auth) {
+    const [user, setUser] = useState(() => auth.currentUser);
+    const [loading, setLoading] = useState(true);
+    const [error, setError] = useState(null);
+    useEffect(() => {
+        setLoading(true);
+        const unsub = onAuthStateChanged(auth, (u) => {
+            setUser(u);
+            setError(null);
+            setLoading(false);
+        }, (e) => {
+            setError(e);
+            setLoading(false);
+        });
+        return unsub;
+    }, [auth]);
+    return { user, loading, error };
+}
+//# sourceMappingURL=useAuthState.js.map

package/dist/react/useAuthState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthState.js","sourceRoot":"","sources":["../../src/react/useAuthState.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAQ7C,MAAM,UAAU,YAAY,CAAC,IAAU;IACrC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAc,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAU,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAiB,IAAI,CAAC,CAAC;IAEzD,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,kBAAkB,CAC9B,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE;YACJ,OAAO,CAAC,CAAC,CAAC,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;YACJ,QAAQ,CAAC,CAAC,CAAC,CAAC;YACZ,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CACF,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC"}

package/package.json

@@ -1,31 +1,57 @@
 {
-  "name": "@ttt-productions/auth-core",
-  "version": "0.0.0",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/ttt-productions/ttt-packages.git",
-    "directory": "packages/auth-core"
-  },
-  "sideEffects": false,
-  "main": "dist/index.cjs",
-  "module": "dist/index.js",
-  "types": "dist/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.cjs"
+    "name": "@ttt-productions/auth-core",
+    "version": "0.0.2",
+    "description": "Shared Firebase authentication utilities and React hooks for TTT Productions apps",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/ttt-productions/ttt-packages.git",
+        "directory": "packages/auth-core"
     },
-    "./react": {
-      "types": "./dist/react/index.d.ts",
-      "import": "./dist/react/index.js",
-      "require": "./dist/react/index.cjs"
-    }
-  },
-  "peerDependencies": {
-    "firebase": "^10.0.0"
-  },
-  "peerDependenciesMeta": {
-    "react": { "optional": true }
-  }
+    "type": "module",
+    "main": "dist/index.js",
+    "module": "dist/index.js",
+    "types": "dist/index.d.ts",
+    "sideEffects": false,
+    "files": [
+        "dist"
+    ],
+    "exports": {
+        ".": {
+            "types": "./dist/index.d.ts",
+            "default": "./dist/index.js"
+        },
+        "./react": {
+            "types": "./dist/react/index.d.ts",
+            "default": "./dist/react/index.js"
+        }
+    },
+    "scripts": {
+        "build": "tsc",
+        "clean": "rm -rf dist *.tsbuildinfo",
+        "typecheck": "tsc --noEmit",
+        "prepublishOnly": "npm run clean && npm run build"
+    },
+    "peerDependencies": {
+        "firebase": ">=10.0.0",
+        "react": ">=19.0.0",
+        "react-dom": ">=19.0.0"
+    },
+    "peerDependenciesMeta": {
+        "react": {
+            "optional": true
+        },
+        "react-dom": {
+            "optional": true
+        }
+    },
+    "devDependencies": {
+        "@types/react": "^19.0.0",
+        "@types/react-dom": "^19.0.0",
+        "firebase": "^10.0.0",
+        "react": "^19.2.0",
+        "react-dom": "^19.2.0",
+        "typescript": "^5.8.3"
+    },
+    "author": "DJ (TTT Productions)",
+    "license": "MIT"
 }

package/src/auth.ts

@@ -1,21 +0,0 @@
-import type { Auth, User } from "firebase/auth";
-import { onAuthStateChanged as fbOnAuthStateChanged } from "firebase/auth";
-
-export type Unsubscribe = () => void;
-
-export function getAuthUser(auth: Auth): User | null {
-  return auth.currentUser;
-}
-
-/**
- * Thin wrapper around Firebase onAuthStateChanged.
- * - always returns the unsubscribe function
- * - preserves Firebase callback signature
- */
-export function onAuthStateChanged(
-  auth: Auth,
-  cb: (user: User | null) => void,
-  onError?: (error: unknown) => void
-): Unsubscribe {
-  return fbOnAuthStateChanged(auth, cb, onError);
-}

package/src/claims.ts

@@ -1,54 +0,0 @@
-import type { Auth, User, IdTokenResult } from "firebase/auth";
-
-export type IdTokenClaims = IdTokenResult["claims"];
-
-export type ParsedClaims = {
-  // common defaults (kept generic)
-  roles: string[];
-  // raw claims for app-level decisions
-  raw: IdTokenClaims;
-};
-
-/**
- * Get the current user's ID token claims.
- * Returns null if no current user.
- */
-export async function getIdTokenClaims(user: User | null): Promise<IdTokenClaims | null> {
-  if (!user) return null;
-  const res = await user.getIdTokenResult(false);
-  return res.claims;
-}
-
-/**
- * Forces refresh of ID token + claims.
- * Returns null if no current user.
- */
-export async function refreshClaims(user: User | null): Promise<IdTokenClaims | null> {
-  if (!user) return null;
-  const res = await user.getIdTokenResult(true);
-  return res.claims;
-}
-
-/**
- * Convenience helper when you only have Auth.
- */
-export async function refreshClaimsFromAuth(auth: Auth): Promise<IdTokenClaims | null> {
-  return refreshClaims(auth.currentUser);
-}
-
-/**
- * Keep parsing intentionally minimal and generic:
- * - normalize "roles" into string[]
- * - keep raw claims attached
- */
-export function parseClaims(claims: IdTokenClaims | null | undefined): ParsedClaims {
-  const raw = (claims ?? {}) as IdTokenClaims;
-
-  const rolesValue = (raw as any).roles;
-  const roles =
-    Array.isArray(rolesValue) ? rolesValue.filter((x) => typeof x === "string") :
-    typeof rolesValue === "string" ? [rolesValue] :
-    [];
-
-  return { roles, raw };
-}

package/src/errors.ts

@@ -1,126 +0,0 @@
-export type AuthErrorCode =
-  | "AUTH_UNKNOWN"
-  | "AUTH_NETWORK_ERROR"
-  | "AUTH_TOO_MANY_REQUESTS"
-  | "AUTH_POPUP_CLOSED"
-  | "AUTH_POPUP_BLOCKED"
-  | "AUTH_CANCELLED"
-  | "AUTH_USER_DISABLED"
-  | "AUTH_USER_NOT_FOUND"
-  | "AUTH_WRONG_PASSWORD"
-  | "AUTH_INVALID_EMAIL"
-  | "AUTH_EMAIL_ALREADY_IN_USE"
-  | "AUTH_WEAK_PASSWORD"
-  | "AUTH_REQUIRES_RECENT_LOGIN"
-  | "AUTH_INVALID_CREDENTIAL"
-  | "AUTH_ACCOUNT_EXISTS_WITH_DIFFERENT_CREDENTIAL"
-  | "AUTH_PROVIDER_ALREADY_LINKED"
-  | "AUTH_CREDENTIAL_ALREADY_IN_USE";
-
-export type NormalizedAuthError = {
-  code: AuthErrorCode;
-  message: string;
-  firebaseCode?: string;
-  details?: Record<string, unknown>;
-};
-
-function pickFirebaseCode(err: unknown): string | undefined {
-  if (!err || typeof err !== "object") return undefined;
-  const anyErr = err as any;
-  const c = anyErr.code;
-  return typeof c === "string" ? c : undefined;
-}
-
-const MAP: Record<string, { code: AuthErrorCode; message: string }> = {
-  "auth/network-request-failed": {
-    code: "AUTH_NETWORK_ERROR",
-    message: "Network error. Please check your connection and try again."
-  },
-  "auth/too-many-requests": {
-    code: "AUTH_TOO_MANY_REQUESTS",
-    message: "Too many attempts. Please wait a moment and try again."
-  },
-  "auth/popup-closed-by-user": {
-    code: "AUTH_POPUP_CLOSED",
-    message: "Sign-in popup was closed."
-  },
-  "auth/popup-blocked": {
-    code: "AUTH_POPUP_BLOCKED",
-    message: "Sign-in popup was blocked by the browser."
-  },
-  "auth/cancelled-popup-request": {
-    code: "AUTH_CANCELLED",
-    message: "Sign-in was cancelled."
-  },
-  "auth/user-disabled": {
-    code: "AUTH_USER_DISABLED",
-    message: "This account has been disabled."
-  },
-  "auth/user-not-found": {
-    code: "AUTH_USER_NOT_FOUND",
-    message: "No account found with that email."
-  },
-  "auth/wrong-password": {
-    code: "AUTH_WRONG_PASSWORD",
-    message: "Incorrect password."
-  },
-  "auth/invalid-email": {
-    code: "AUTH_INVALID_EMAIL",
-    message: "Invalid email address."
-  },
-  "auth/email-already-in-use": {
-    code: "AUTH_EMAIL_ALREADY_IN_USE",
-    message: "That email is already in use."
-  },
-  "auth/weak-password": {
-    code: "AUTH_WEAK_PASSWORD",
-    message: "Password is too weak."
-  },
-  "auth/requires-recent-login": {
-    code: "AUTH_REQUIRES_RECENT_LOGIN",
-    message: "Please re-authenticate and try again."
-  },
-  "auth/invalid-credential": {
-    code: "AUTH_INVALID_CREDENTIAL",
-    message: "Invalid credentials. Please try again."
-  },
-  "auth/account-exists-with-different-credential": {
-    code: "AUTH_ACCOUNT_EXISTS_WITH_DIFFERENT_CREDENTIAL",
-    message: "An account already exists with a different sign-in method."
-  },
-  "auth/provider-already-linked": {
-    code: "AUTH_PROVIDER_ALREADY_LINKED",
-    message: "That provider is already linked to this account."
-  },
-  "auth/credential-already-in-use": {
-    code: "AUTH_CREDENTIAL_ALREADY_IN_USE",
-    message: "Those credentials are already associated with another account."
-  }
-};
-
-export function normalizeAuthError(err: unknown, details?: Record<string, unknown>): NormalizedAuthError {
-  const firebaseCode = pickFirebaseCode(err);
-
-  const mapped = firebaseCode ? MAP[firebaseCode] : undefined;
-  if (mapped) {
-    return {
-      code: mapped.code,
-      message: mapped.message,
-      firebaseCode,
-      details
-    };
-  }
-
-  // best-effort message (don’t leak weird objects)
-  const msg =
-    typeof (err as any)?.message === "string"
-      ? (err as any).message
-      : "Authentication error. Please try again.";
-
-  return {
-    code: "AUTH_UNKNOWN",
-    message: msg,
-    firebaseCode,
-    details
-  };
-}

package/src/react/index.ts

@@ -1 +0,0 @@
-export * from "./useAuthState";

package/src/react/useAuthState.ts

@@ -1,34 +0,0 @@
-import { useEffect, useState } from "react";
-import type { Auth, User } from "firebase/auth";
-import { onAuthStateChanged } from "../auth";
-
-export type AuthState = {
-  user: User | null;
-  loading: boolean;
-  error: unknown | null;
-};
-
-export function useAuthState(auth: Auth): AuthState {
-  const [user, setUser] = useState<User | null>(() => auth.currentUser);
-  const [loading, setLoading] = useState<boolean>(true);
-  const [error, setError] = useState<unknown | null>(null);
-
-  useEffect(() => {
-    setLoading(true);
-    const unsub = onAuthStateChanged(
-      auth,
-      (u) => {
-        setUser(u);
-        setError(null);
-        setLoading(false);
-      },
-      (e) => {
-        setError(e);
-        setLoading(false);
-      }
-    );
-    return unsub;
-  }, [auth]);
-
-  return { user, loading, error };
-}

package/tsconfig.json

@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.json",
-  "compilerOptions": {
-    "outDir": "dist",
-    "rootDir": "src"
-  },
-  "include": ["src"]
-}