Auth SDK 1.0: every Auth operation as a method, flattened sign-in and typed errors
@productcraft/auth 1.0 covers the whole Auth API: auth.consumer(slug).signin() for end users, auth.admin.app(id) for app management, with retries, automatic idempotency keys, pagination and typed errors.
End-user calls hang off auth.consumer("my-app") and are flattened: signin(), signup(), refresh() and me.retrieve(). App management lives on auth.admin.app(appId), which now reaches custom domains, tenants, webhook endpoints, imports, exports and bulk actions, and auth.verifyToken(jwt, { app }) verifies an access token at the top level.
Lists walk every page for you, failures are classes you can catch (AuthenticationError, NotFoundError), and auth.webhooks.unwrap() verifies deliveries. Every 0.x method name still works as a deprecated alias for all of 1.x. The Auth docs and the API reference use the new methods; the migration guide lists each rename and the few breaking changes (snake_case query parameters, lists that return pages).