@molecule/app-routing
Core interface · routing · App (browser) · v1.0.3 · Apache-2.0
Client-side routing with guards and navigation
npm install @molecule/app-routingHow it works
@molecule/app-routing is the routing core interface on the app (browser) side: the API your app calls, with no vendor inside.
Choose the implementation by bonding one of its 4 providers: @molecule/app-routing-next, @molecule/app-routing-react-navigation, @molecule/app-routing-react-router, @molecule/app-routing-vue-router.
import {
createBrowserRouter,
setRouter,
navigate,
getParams,
getQuery,
} from '@molecule/app-routing'
// Wire the router ONCE at app startup (before any navigate/getParams call):
setRouter(
createBrowserRouter({
routes: [
{ path: '/', name: 'home' },
{ path: '/projects/:id', name: 'project', requiresAuth: true },
],
}),
)
// Navigate in-app (SPA — no full reload). `replace` skips a history entry.
navigate('/projects/42')
navigate('/login', { replace: true, state: { from: '/projects/42' } })
// Read the current route's params + query string anywhere:
const { id } = getParams<{ id: string }>() // '42' on /projects/:id
const query = getQuery() // { sort: 'recent' } on ?sort=recentProviders (4): @molecule/app-routing-next, @molecule/app-routing-react-navigation, @molecule/app-routing-react-router, @molecule/app-routing-vue-router
Works with: @molecule/app-bond, @molecule/app-i18n, @molecule/app-logger
Reference
Client-side routing interface for molecule.dev.
Provides a unified routing API that works across different routing libraries (React Router, Next.js, Vue Router, etc.).
Auto-generated, AI-first package reference for the molecule.dev ecosystem. It is written to be read by coding agents as much as by people, and is generated from this package's source — edit
src/index.tsJSDoc, not this file.
Quick Start
import {
createBrowserRouter,
setRouter,
navigate,
getParams,
getQuery,
} from '@molecule/app-routing'
// Wire the router ONCE at app startup (before any navigate/getParams call):
setRouter(
createBrowserRouter({
routes: [
{ path: '/', name: 'home' },
{ path: '/projects/:id', name: 'project', requiresAuth: true },
],
}),
)
// Navigate in-app (SPA — no full reload). `replace` skips a history entry.
navigate('/projects/42')
navigate('/login', { replace: true, state: { from: '/projects/42' } })
// Read the current route's params + query string anywhere:
const { id } = getParams<{ id: string }>() // '42' on /projects/:id
const query = getQuery() // { sort: 'recent' } on ?sort=recent
Type
core
Installation
npm install @molecule/app-routing @molecule/app-bond @molecule/app-i18n @molecule/app-logger
API
Interfaces
RouteLocation
Current URL decomposed into pathname, search string, hash, navigation state, and unique key.
interface RouteLocation {
/**
* Current pathname.
*/
pathname: string
/**
* Query string (including leading ?).
*/
search: string
/**
* Hash (including leading #).
*/
hash: string
/**
* State data passed with navigation.
*/
state?: unknown
/**
* Unique key for this location.
*/
key?: string
}
RouteMatch
Result of matching a URL against a route pattern (path, params, query string).
interface RouteMatch<Params extends RouteParams = RouteParams> {
/**
* Route path pattern.
*/
path: string
/**
* Matched URL pathname.
*/
pathname: string
/**
* Route parameters.
*/
params: Params
/**
* Whether this is an exact match.
*/
isExact: boolean
}
NavigateOptions
Options for programmatic navigation (replace vs push, carry state, preserve query/hash).
interface NavigateOptions {
/**
* Replace current history entry instead of pushing.
*/
replace?: boolean
/**
* State to pass with navigation.
*/
state?: unknown
/**
* Preserve current query params.
*/
preserveQuery?: boolean
/**
* Preserve current hash.
*/
preserveHash?: boolean
}
RouteDefinition
Route configuration entry (path pattern, name, auth requirements, roles, children).
interface RouteDefinition {
/**
* Route path pattern.
*/
path: string
/**
* Route name (for named routes).
*/
name?: string
/**
* Whether the route requires exact matching.
*/
exact?: boolean
/**
* Whether the route requires authentication.
*/
requiresAuth?: boolean
/**
* Required roles/permissions.
*/
roles?: string[]
/**
* Route metadata.
*/
meta?: Record<string, unknown>
/**
* Child routes.
*/
children?: RouteDefinition[]
}
Router
Client-side router providing navigation, guards, route matching, and history control.
All routing providers must implement this interface.
interface Router {
/**
* Returns the current route location (pathname, search, hash, state).
*/
getLocation(): RouteLocation
/**
* Gets the current route params.
*/
getParams<T extends RouteParams = RouteParams>(): T
/**
* Gets the current query params.
*/
getQuery(): QueryParams
/**
* Gets a specific query parameter.
*/
getQueryParam(key: string): string | undefined
/**
* Gets the current hash.
*/
getHash(): string
/**
* Navigates to a path.
*/
navigate(path: string, options?: NavigateOptions): void
/**
* Navigates to a named route.
*/
navigateTo(
name: string,
params?: RouteParams,
query?: QueryParams,
options?: NavigateOptions,
): void
/**
* Goes back in history.
*/
back(): void
/**
* Goes forward in history.
*/
forward(): void
/**
* Goes to a specific point in history.
*/
go(delta: number): void
/**
* Updates the current query params.
*/
setQuery(params: QueryParams, options?: NavigateOptions): void
/**
* Updates a specific query parameter.
*/
setQueryParam(key: string, value: string | undefined, options?: NavigateOptions): void
/**
* Updates the current hash.
*/
setHash(hash: string, options?: NavigateOptions): void
/**
* Checks if a path matches the current location.
*
* @returns `true` if the path matches the current route.
*/
isActive(path: string, exact?: boolean): boolean
/**
* Matches a path pattern against a pathname.
*/
matchPath<Params extends RouteParams = RouteParams>(
pattern: string,
pathname: string,
): RouteMatch<Params> | null
/**
* Generates a URL from a named route.
*/
generatePath(name: string, params?: RouteParams, query?: QueryParams): string
/**
* Subscribes to route changes.
*/
subscribe(listener: RouteChangeListener): () => void
/**
* Adds a navigation guard.
*/
addGuard(guard: NavigationGuard): () => void
/**
* Registers route definitions.
*/
registerRoutes(routes: RouteDefinition[]): void
/**
* Gets all registered routes.
*/
getRoutes(): RouteDefinition[]
/**
* Destroys the router.
*/
destroy(): void
}
RouterConfig
Configuration options for creating a router instance.
interface RouterConfig {
/**
* Router mode.
*/
mode?: 'history' | 'hash' | 'memory'
/**
* Base path.
*/
basePath?: string
/**
* Initial routes.
*/
routes?: RouteDefinition[]
}
Types
RouteParams
URL path parameter key-value map extracted from dynamic route segments (e.g. { id: '123' }).
type RouteParams = Record<string, string>
QueryParams
URL query string parameter map (single values or arrays for repeated keys).
type QueryParams = Record<string, string | string[] | undefined>
GuardResult
Navigation guard result.
type GuardResult = boolean | string | { path: string; replace?: boolean } | void
NavigationGuard
Navigation guard function invoked before each navigation.
Return false to cancel, a string/path to redirect, or void to allow.
type NavigationGuard = (
to: RouteLocation,
from: RouteLocation | null,
) => GuardResult | Promise<GuardResult>
to— The target route location being navigated to.from— The current route location being navigated away from, ornullon initial load.
RouteChangeListener
Callback invoked on each route change with the new location and the navigation action that triggered it.
type RouteChangeListener = (location: RouteLocation, action: 'push' | 'replace' | 'pop') => void
Functions
setRouter(router)
Registers a router as the active singleton. Called by bond packages
(e.g. @molecule/app-routing-react) during application startup.
function setRouter(router: Router): void
router— The router implementation to bond.
getRouter()
Retrieves the bonded router. If none is bonded, automatically creates a browser-based router (in browser environments) or a memory-based router (in SSR/test environments).
function getRouter(): Router
Returns: The active router instance.
navigate(path, options)
Navigates to a path using the bonded router.
function navigate(path: string, options?: NavigateOptions): void
path— The target path to navigate to.options— Navigation options such asreplaceandstate.
Returns: Nothing.
getLocation()
Returns the current route location from the bonded router.
function getLocation(): RouteLocation
Returns: The current location (pathname, search, hash, state).
getParams()
Returns the current route parameters from the bonded router.
function getParams(): T
Returns: The current route parameters as a typed record.
getQuery()
Returns the current query parameters from the bonded router.
function getQuery(): QueryParams
Returns: The current query parameters as a record.
createBrowserRouter(config)
Creates a browser history-based router using the History API (or hash mode). Supports navigation guards, named routes, and route change subscriptions.
function createBrowserRouter(config?: RouterConfig): Router
config— Router configuration (mode, basePath, initial routes).
Returns: A Router instance bound to the browser history.
createMemoryRouter(config)
Creates an in-memory router for testing and SSR environments. Maintains a synthetic history stack without touching browser APIs.
function createMemoryRouter(config?: RouterConfig & { initialEntries?: string[] }): Router
config— Router configuration with optionalinitialEntriesfor the history stack.
Returns: A Router instance backed by an in-memory history.
parseQuery(search)
Parses a URL query string (e.g. ?foo=bar&baz=1) into a
QueryParams object. Duplicate keys produce string arrays.
function parseQuery(search: string): QueryParams
search— The query string to parse (with or without leading?).
Returns: A key-value map of query parameters.
stringifyQuery(params)
Serializes a QueryParams object into a query string with leading ?.
Returns an empty string if no parameters are present.
function stringifyQuery(params: QueryParams): string
params— The query parameters to serialize.
Returns: The query string (e.g. ?foo=bar&baz=1) or ''.
matchPath(pattern, pathname, exact)
Matches a route pattern (e.g. /users/:id) against a pathname.
Extracts named parameters from the URL.
function matchPath(pattern: string, pathname: string, exact?: boolean): RouteMatch<Params> | null
pattern— Route pattern with:paramplaceholders.pathname— The actual URL pathname to match against.exact— Iftrue, requires a full match (no trailing segments).
Returns: A RouteMatch with extracted params, or null if no match.
generatePath(pattern, params)
Generates a URL path from a route pattern by substituting named parameters.
function generatePath(pattern: string, params?: RouteParams): string
pattern— Route pattern with:paramplaceholders (e.g./users/:id).params— Parameter values to substitute into the pattern.
Returns: The generated path with parameters URL-encoded.
Available Providers
| Provider | Package |
|---|---|
| Next.js | @molecule/app-routing-next |
| React Navigation | @molecule/app-routing-react-navigation |
| React Router | @molecule/app-routing-react-router |
| Vue Router | @molecule/app-routing-vue-router |
Injection Notes
Requirements
Peer dependencies:
@molecule/app-bond^1.0.1@molecule/app-i18n^1.0.1@molecule/app-logger^1.0.1
Runtime Dependencies
@molecule/app-bond@molecule/app-i18n@molecule/app-logger
Navigate and read the location through this abstraction (navigate, getParams,
getQuery, or the framework hook) — do NOT import react-router / vue-router directly
or use window.location for in-app navigation; that couples you to one library and loses SPA
behavior.
- A
NavigationGuardis UX, NOT security. A client route guard only hides a screen — the REAL protection is your API checking auth + ownership on every request (see theauthskill and the database ownership rule). Never gate sensitive DATA behind a client guard alone; anyone can call the API directly or edit client state. - Never put a secret or token in a route param or query string. URLs leak into browser
history, server logs, and the
Refererheader — deliver a reset/verify token as a one-time link you validate server-side, and don't persist it client-side afterward.
Translations
Translation strings are provided by @molecule/app-locales-routing.