@absolutejs/auth 0.80.1 → 0.82.0

package/dist/manifest.js

@@ -48,6 +48,28 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
+// src/credentials/integration.ts
+var credentialsIntegrationSource = `import { Elysia } from 'elysia';
+import { createAuthContext, createCredentialsApi, createSignoutApi } from '@absolutejs/auth/server';
+import { credentialsConfiguration } from './credentials.config';
+
+export const credentialsApi = createCredentialsApi(credentialsConfiguration);
+export const sessionApi = createSignoutApi({ authSessionStore: credentialsConfiguration.authSessionStore });
+export const accountApi = new Elysia()
+  .use(createAuthContext({ authSessionStore: credentialsConfiguration.authSessionStore }))
+  .get('/api/account', ({ absoluteAuthStatus, status }) => {
+    if (!absoluteAuthStatus.user) return status(401, { error: 'Sign in required' });
+    return { user: absoluteAuthStatus.user };
+  });
+// Mount credentialsApi, sessionApi and accountApi for credentials-only apps.
+// For OAuth apps use full auth without its credentials block and without a
+// duplicate sessionApi mount. sessionApi is the narrow default sign-out type.
+// Browser: treaty<typeof credentialsApi>(origin).auth.login.post({email,password})
+// Sign-out: treaty<typeof sessionApi>(origin).oauth2.signout.delete()
+// Execute directly typed calls in React Query mutationFns.
+// Elysia 2 schema routes: .post(path, { body: schema }, handler).
+`;
+
 // node_modules/typebox/build/system/memory/memory.mjs
 var exports_memory = {};
 __export(exports_memory, {
@@ -8519,6 +8541,39 @@ var manifest = defineManifest()({
     }
   },
   tools: {
+    get_credentials_integration: tool.workspace({
+      annotations: { readOnlyHint: true },
+      authorization: {
+        approval: "never",
+        audience: "admin",
+        effects: ["read"],
+        requiredScopes: ["auth:inspect"]
+      },
+      capabilities: ["read"],
+      description: "Get the package-owned typed email/password API and protected account route recipe. Reuse createCredentialsApi rather than inventing request wrappers. Requires application-owned user callbacks, a durable session and credential store, and real email delivery.",
+      input: exports_typebox.Object({}),
+      handler: () => JSON.stringify({
+        configurationModule: "credentials.config.ts",
+        requiredBindings: [
+          "authSessionStore",
+          "credentialStore",
+          "getUserByEmail",
+          "onCreateCredentialUser",
+          "onSendEmail"
+        ],
+        requiredExport: "credentialsConfiguration",
+        routes: [
+          "POST /auth/register",
+          "POST /auth/login",
+          "POST /auth/verify-email",
+          "POST /auth/verify-email/request",
+          "POST /auth/reset-password",
+          "POST /auth/reset-password/request"
+        ],
+        source: credentialsIntegrationSource,
+        validation: "Typecheck the generated module and run signup, login, verification, reset and protected-route tests. Never replace missing infrastructure with an in-memory production store or no-op email delivery."
+      })
+    }),
     list_sign_in_providers: tool.workspace({
       annotations: { readOnlyHint: true },
       authorization: {
@@ -8543,7 +8598,7 @@ var manifest = defineManifest()({
   },
   wiring: [
     {
-      description: "Sign in with Google, GitHub, and 60+ other services. Add email/password later from settings.",
+      description: "Sign in with Google, GitHub, and 60+ other services. For email/password use get_credentials_integration and supply application-owned user, storage and email bindings.",
       id: "default",
       server: {
         code: [
@@ -8576,5 +8631,5 @@ export {
   manifest
 };
 
-//# debugId=D79DDECC0863A70764756E2164756E21
+//# debugId=E30FD38FB40CAD6A64756E2164756E21
 //# sourceMappingURL=manifest.js.map