@ursalock/client 0.2.2 → 0.3.0

package/dist/index.d.ts

@@ -27,9 +27,9 @@ interface AuthState {
 /** Auth provider interface */
 interface AuthProvider {
     /** Sign up a new user */
-    signUp(options: SignUpOptions): Promise<ZKAuthResult$1>;
+    signUp(options: SignUpOptions): Promise<ZKAuthResult>;
     /** Sign in an existing user */
-    signIn(options: SignInOptions): Promise<ZKAuthResult$1>;
+    signIn(options: SignInOptions): Promise<ZKAuthResult>;
     /** Sign out the current user */
     signOut(): Promise<void>;
     /** Get current auth state */
@@ -58,15 +58,6 @@ interface AuthResult {
     token?: string;
     error?: string;
 }
-/** Result of ZK auth operations (passkey with PRF) */
-interface ZKAuthResult$1 {
-    success: boolean;
-    user?: User;
-    token?: string;
-    /** ZK Credential with derived encryption keys */
-    credential?: ZKCredential;
-    error?: string;
-}
 
 /**
  * Auth provider interfaces
@@ -251,7 +242,7 @@ declare class VaultClient {
         password?: string;
         usePasskey?: boolean;
         displayName?: string;
-    }): Promise<ZKAuthResult$1>;
+    }): Promise<ZKAuthResult>;
     /**
      * Sign in an existing user
      */
@@ -259,7 +250,7 @@ declare class VaultClient {
         email?: string;
         password?: string;
         usePasskey?: boolean;
-    }): Promise<ZKAuthResult$1>;
+    }): Promise<ZKAuthResult>;
     /**
      * Sign out
      */
@@ -352,27 +343,6 @@ declare class EmailAuth implements IAuthProvider {
      * @deprecated Use signUp() instead
      */
     register(credentials: EmailCredentials): Promise<ZKAuthResult>;
-    /**
-     * Request password reset email
-     */
-    forgotPassword(email: string): Promise<{
-        success: boolean;
-        error?: string;
-    }>;
-    /**
-     * Reset password with token
-     */
-    resetPassword(token: string, newPassword: string): Promise<{
-        success: boolean;
-        error?: string;
-    }>;
-    /**
-     * Change password (when logged in)
-     */
-    changePassword(currentPassword: string, newPassword: string, authToken: string): Promise<{
-        success: boolean;
-        error?: string;
-    }>;
     /**
      * Validate email format
      */
@@ -418,9 +388,13 @@ declare class TokenManager {
      */
     setToken(token: Token): void;
     /**
-     * Get current token
+     * Get current token (returns null if expired, without side effects)
      */
     getToken(): Token | null;
+    /**
+     * Check if the current token is expired
+     */
+    isExpired(): boolean;
     /**
      * Get access token string (convenience method)
      */
@@ -494,7 +468,7 @@ declare function useSignUp(client: VaultClient): {
         password?: string;
         usePasskey?: boolean;
         displayName?: string;
-    }) => Promise<ZKAuthResult$1>;
+    }) => Promise<ZKAuthResult>;
     isLoading: boolean;
     error: Error | null;
 };
@@ -520,7 +494,7 @@ declare function useSignIn(client: VaultClient): {
         email?: string;
         password?: string;
         usePasskey?: boolean;
-    }) => Promise<ZKAuthResult$1>;
+    }) => Promise<ZKAuthResult>;
     isLoading: boolean;
     error: Error | null;
 };

package/dist/index.js

@@ -270,80 +270,6 @@ var EmailAuth = class {
   async register(credentials) {
     return this.signUp(credentials);
   }
-  /**
-   * Request password reset email
-   */
-  async forgotPassword(email) {
-    if (!this.isValidEmail(email)) {
-      return { success: false, error: "Invalid email address" };
-    }
-    try {
-      await this.httpClient.fetch(
-        `${this.options.serverUrl}/auth/email/forgot-password`,
-        {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({ email })
-        }
-      );
-      return { success: true };
-    } catch {
-      return { success: true };
-    }
-  }
-  /**
-   * Reset password with token
-   */
-  async resetPassword(token, newPassword) {
-    if (!newPassword || newPassword.length < 8) {
-      return { success: false, error: "Password must be at least 8 characters" };
-    }
-    try {
-      const res = await this.httpClient.fetch(
-        `${this.options.serverUrl}/auth/email/reset-password`,
-        {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({ token, password: newPassword })
-        }
-      );
-      if (!res.ok) {
-        const err = await res.json();
-        return { success: false, error: err.message ?? "Reset failed" };
-      }
-      return { success: true };
-    } catch {
-      return { success: false, error: "Network error" };
-    }
-  }
-  /**
-   * Change password (when logged in)
-   */
-  async changePassword(currentPassword, newPassword, authToken) {
-    if (!newPassword || newPassword.length < 8) {
-      return { success: false, error: "New password must be at least 8 characters" };
-    }
-    try {
-      const res = await this.httpClient.fetch(
-        `${this.options.serverUrl}/auth/email/change-password`,
-        {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            "Authorization": `Bearer ${authToken}`
-          },
-          body: JSON.stringify({ currentPassword, newPassword })
-        }
-      );
-      if (!res.ok) {
-        const err = await res.json();
-        return { success: false, error: err.message ?? "Change failed" };
-      }
-      return { success: true };
-    } catch {
-      return { success: false, error: "Network error" };
-    }
-  }
   /**
    * Validate email format
    */
@@ -381,16 +307,22 @@ var TokenManager = class _TokenManager {
     this.notifyListeners();
   }
   /**
-   * Get current token
+   * Get current token (returns null if expired, without side effects)
    */
   getToken() {
     if (!this.token) return null;
-    if (Date.now() >= this.token.expiresAt) {
-      this.clearToken();
+    if (this.isExpired()) {
       return null;
     }
     return this.token;
   }
+  /**
+   * Check if the current token is expired
+   */
+  isExpired() {
+    if (!this.token) return true;
+    return Date.now() >= this.token.expiresAt;
+  }
   /**
    * Get access token string (convenience method)
    */
@@ -401,8 +333,7 @@ var TokenManager = class _TokenManager {
    * Check if token is valid
    */
   isValid() {
-    const token = this.getToken();
-    return token !== null && Date.now() < token.expiresAt;
+    return this.token !== null && !this.isExpired();
   }
   /**
    * Clear token
@@ -558,7 +489,15 @@ var VaultClient = class {
       error: null,
       credential: null
     };
-    this.initialize();
+    this.initialize().catch((err) => {
+      this.updateState({
+        isAuthenticated: false,
+        user: null,
+        isLoading: false,
+        error: err instanceof Error ? err : new Error(String(err)),
+        credential: null
+      });
+    });
   }
   // ==================
   // Public Auth Methods
@@ -813,7 +752,7 @@ var VaultClient = class {
 function useAuth(client) {
   const subscribe = useCallback(
     (callback) => {
-      return client.subscribe(callback);
+      return client.subscribe(() => callback());
     },
     [client]
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ursalock/client",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "Auth and API client for ursalock with E2EE passkey encryption",
   "type": "module",
   "main": "./dist/index.js",