@aethex.os/passport 1.0.0

package/README.md

@@ -0,0 +1,132 @@
+# @aethex.os/passport
+
+OAuth federation for multi-provider auth — let users log in with GitHub, Discord, Google, Roblox, or any provider, and link them all to a single unified identity. Storage-adapter pattern means it works with any database.
+
+## Install
+
+```bash
+npm install @aethex.os/passport
+```
+
+## Concept
+
+Instead of one user per OAuth provider, `@aethex.os/passport` maintains a **Foundation Passport** — one canonical user record that can have multiple OAuth providers attached to it. Log in with Discord, later link GitHub, they're the same user.
+
+## Setup with Supabase
+
+```ts
+import { createClient } from "@supabase/supabase-js";
+import { createPassportManager, createSupabasePassportAdapter } from "@aethex.os/passport";
+
+const supabase = createClient(process.env.SUPABASE_URL!, process.env.SUPABASE_SERVICE_ROLE!);
+
+const passport = createPassportManager({
+  storage: createSupabasePassportAdapter(supabase),
+});
+```
+
+**Required Supabase tables:**
+
+```sql
+create table user_profiles (
+  id uuid primary key default gen_random_uuid(),
+  email text unique not null,
+  username text unique not null,
+  full_name text,
+  avatar_url text,
+  created_at timestamptz default now()
+);
+
+create table provider_identities (
+  user_id uuid references user_profiles(id),
+  provider text not null,
+  provider_user_id text not null,
+  email text,
+  username text,
+  avatar_url text,
+  linked_at timestamptz default now(),
+  primary key (user_id, provider)
+);
+```
+
+## Login / sign-up (federation)
+
+```ts
+// In your Discord/GitHub/Google OAuth callback
+const result = await passport.federateOAuthUser("discord", {
+  id: discordUser.id,
+  email: discordUser.email,
+  username: discordUser.username,
+  name: discordUser.global_name,
+  avatar: `https://cdn.discordapp.com/avatars/${discordUser.id}/${discordUser.avatar}.webp`,
+});
+
+console.log(result.userId);      // Foundation Passport ID
+console.log(result.isNewUser);   // true if just signed up
+```
+
+## Link an additional provider
+
+```ts
+// User is already logged in, now linking GitHub to their account
+await passport.linkProvider(currentUserId, "github", {
+  id: githubUser.id,
+  email: githubUser.email,
+  username: githubUser.login,
+  avatar: githubUser.avatar_url,
+});
+```
+
+## Unlink a provider
+
+```ts
+// Prevents unlinking the last auth method
+await passport.unlinkProvider(userId, "github");
+```
+
+## List linked providers
+
+```ts
+const providers = await passport.getLinkedProviders(userId);
+// ["discord", "github"]
+```
+
+## Custom storage adapter
+
+Works with any database by implementing the `PassportStorageAdapter` interface:
+
+```ts
+import type { PassportStorageAdapter } from "@aethex.os/passport";
+
+const myAdapter: PassportStorageAdapter = {
+  findIdentity: async (provider, providerUserId) => { /* ... */ },
+  createUser:   async (data) => { /* return new userId */ },
+  linkProvider: async (userId, provider, providerUserId, data) => { /* ... */ },
+  findUserByEmail: async (email) => { /* return userId or null */ },
+  listUserProviders: async (userId) => { /* return provider[] */ },
+  unlinkProvider: async (userId, provider) => { /* ... */ },
+};
+
+const passport = createPassportManager({ storage: myAdapter });
+```
+
+## Testing with in-memory adapter
+
+```ts
+import { createPassportManager, createMemoryPassportAdapter } from "@aethex.os/passport";
+
+const passport = createPassportManager({ storage: createMemoryPassportAdapter() });
+```
+
+## API
+
+| Method | Description |
+|--------|-------------|
+| `passport.federateOAuthUser(provider, user)` | Login or sign-up via any OAuth provider |
+| `passport.linkProvider(userId, provider, user)` | Link an additional provider to an existing user |
+| `passport.unlinkProvider(userId, provider)` | Unlink a provider (guards against unlinking the last one) |
+| `passport.getLinkedProviders(userId)` | List all providers linked to a user |
+
+---
+
+Part of the [`@aethex.os`](https://www.npmjs.com/search?q=%40aethex.os) toolkit.

package/lib/adapters/memory.d.ts

@@ -0,0 +1,3 @@
+import type { PassportStorageAdapter } from "../federation";
+export declare function createMemoryPassportAdapter(): PassportStorageAdapter;
+//# sourceMappingURL=memory.d.ts.map

package/lib/adapters/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/adapters/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAA8C,MAAM,eAAe,CAAC;AAkBxG,wBAAgB,2BAA2B,IAAI,sBAAsB,CAwCpE"}

package/lib/adapters/memory.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMemoryPassportAdapter = createMemoryPassportAdapter;
+// In-memory adapter — useful for tests and prototyping
+function createMemoryPassportAdapter() {
+    const users = [];
+    const identities = [];
+    let idCounter = 1;
+    return {
+        async findIdentity(provider, providerUserId) {
+            const identity = identities.find(i => i.provider === provider && i.providerUserId === providerUserId);
+            if (!identity)
+                return null;
+            return { userId: identity.userId, provider: identity.provider, providerUserId: identity.providerUserId };
+        },
+        async createUser(data) {
+            const id = String(idCounter++);
+            users.push({ id, ...data });
+            return id;
+        },
+        async linkProvider(userId, provider, providerUserId, data) {
+            const idx = identities.findIndex(i => i.userId === userId && i.provider === provider);
+            if (idx >= 0) {
+                identities[idx] = { userId, provider, providerUserId, data };
+            }
+            else {
+                identities.push({ userId, provider, providerUserId, data });
+            }
+        },
+        async findUserByEmail(email) {
+            return users.find(u => u.email === email)?.id ?? null;
+        },
+        async listUserProviders(userId) {
+            return identities.filter(i => i.userId === userId).map(i => i.provider);
+        },
+        async unlinkProvider(userId, provider) {
+            const idx = identities.findIndex(i => i.userId === userId && i.provider === provider);
+            if (idx >= 0)
+                identities.splice(idx, 1);
+        },
+    };
+}
+//# sourceMappingURL=memory.js.map

package/lib/adapters/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/adapters/memory.ts"],"names":[],"mappings":";;AAkBA,kEAwCC;AAzCD,uDAAuD;AACvD,SAAgB,2BAA2B;IACzC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,cAAc;YACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;YACtG,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC3G,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI;YACnB,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI;YACvD,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YACtF,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;QACxD,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,MAAM;YAC5B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1E,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ;YACnC,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YACtF,IAAI,GAAG,IAAI,CAAC;gBAAE,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/adapters/supabase.d.ts

@@ -0,0 +1,6 @@
+import type { PassportStorageAdapter } from "../federation";
+export interface SupabaseClient {
+    from: (table: string) => any;
+}
+export declare function createSupabasePassportAdapter(supabase: SupabaseClient): PassportStorageAdapter;
+//# sourceMappingURL=supabase.d.ts.map

package/lib/adapters/supabase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.d.ts","sourceRoot":"","sources":["../../src/adapters/supabase.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAA8C,MAAM,eAAe,CAAC;AAExG,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC;CAC9B;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,cAAc,GAAG,sBAAsB,CAwE9F"}

package/lib/adapters/supabase.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSupabasePassportAdapter = createSupabasePassportAdapter;
+function createSupabasePassportAdapter(supabase) {
+    return {
+        async findIdentity(provider, providerUserId) {
+            const { data, error } = await supabase
+                .from("provider_identities")
+                .select("user_id")
+                .eq("provider", provider)
+                .eq("provider_user_id", providerUserId)
+                .single();
+            if (error || !data)
+                return null;
+            return { userId: data.user_id, provider, providerUserId };
+        },
+        async createUser(data) {
+            const { data: user, error } = await supabase
+                .from("user_profiles")
+                .insert({
+                email: data.email,
+                full_name: data.name,
+                avatar_url: data.avatar ?? null,
+                username: data.username,
+                created_at: new Date().toISOString(),
+            })
+                .select("id")
+                .single();
+            if (error || !user)
+                throw new Error(`Failed to create user: ${error?.message}`);
+            return user.id;
+        },
+        async linkProvider(userId, provider, providerUserId, oauthUser) {
+            const { error } = await supabase.from("provider_identities").upsert({
+                user_id: userId,
+                provider,
+                provider_user_id: providerUserId,
+                email: oauthUser.email,
+                username: oauthUser.username,
+                avatar_url: oauthUser.avatar,
+                linked_at: new Date().toISOString(),
+            }, { onConflict: "user_id,provider" });
+            if (error)
+                throw new Error(`Failed to link provider: ${error.message}`);
+        },
+        async findUserByEmail(email) {
+            const { data } = await supabase
+                .from("user_profiles")
+                .select("id")
+                .eq("email", email)
+                .single();
+            return data?.id ?? null;
+        },
+        async listUserProviders(userId) {
+            const { data } = await supabase
+                .from("provider_identities")
+                .select("provider")
+                .eq("user_id", userId);
+            return (data ?? []).map((r) => r.provider);
+        },
+        async unlinkProvider(userId, provider) {
+            const { error } = await supabase
+                .from("provider_identities")
+                .delete()
+                .eq("user_id", userId)
+                .eq("provider", provider);
+            if (error)
+                throw new Error(`Failed to unlink provider: ${error.message}`);
+        },
+    };
+}
+//# sourceMappingURL=supabase.js.map

package/lib/adapters/supabase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.js","sourceRoot":"","sources":["../../src/adapters/supabase.ts"],"names":[],"mappings":";;AAMA,sEAwEC;AAxED,SAAgB,6BAA6B,CAAC,QAAwB;IACpE,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,QAAuB,EAAE,cAAsB;YAChE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;iBACnC,IAAI,CAAC,qBAAqB,CAAC;iBAC3B,MAAM,CAAC,SAAS,CAAC;iBACjB,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;iBACxB,EAAE,CAAC,kBAAkB,EAAE,cAAc,CAAC;iBACtC,MAAM,EAAE,CAAC;YAEZ,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;QAC5D,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;iBACzC,IAAI,CAAC,eAAe,CAAC;iBACrB,MAAM,CAAC;gBACN,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,UAAU,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;iBACD,MAAM,CAAC,IAAI,CAAC;iBACZ,MAAM,EAAE,CAAC;YAEZ,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,QAAuB,EAAE,cAAsB,EAAE,SAAoB;YACtG,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC;gBAClE,OAAO,EAAE,MAAM;gBACf,QAAQ;gBACR,gBAAgB,EAAE,cAAc;gBAChC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,UAAU,EAAE,SAAS,CAAC,MAAM;gBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAEvC,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,KAAa;YACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ;iBAC5B,IAAI,CAAC,eAAe,CAAC;iBACrB,MAAM,CAAC,IAAI,CAAC;iBACZ,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;iBAClB,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,MAAc;YACpC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ;iBAC5B,IAAI,CAAC,qBAAqB,CAAC;iBAC3B,MAAM,CAAC,UAAU,CAAC;iBAClB,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAuB;YAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;iBAC7B,IAAI,CAAC,qBAAqB,CAAC;iBAC3B,MAAM,EAAE;iBACR,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;iBACrB,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAE5B,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/federation.d.ts

@@ -0,0 +1,47 @@
+export type OAuthProvider = "github" | "discord" | "google" | "roblox" | "ethereum" | string;
+export interface OAuthUser {
+    id: string;
+    email: string;
+    name?: string;
+    avatar?: string;
+    username?: string;
+}
+export interface FederationResult {
+    userId: string;
+    email: string;
+    isNewUser: boolean;
+    providerLinked: boolean;
+}
+export interface ProviderIdentity {
+    userId: string;
+    provider: OAuthProvider;
+    providerUserId: string;
+}
+export interface PassportStorageAdapter {
+    findIdentity(provider: OAuthProvider, providerUserId: string): Promise<ProviderIdentity | null>;
+    createUser(data: {
+        email: string;
+        name: string;
+        avatar?: string;
+        username: string;
+    }): Promise<string>;
+    linkProvider(userId: string, provider: OAuthProvider, providerUserId: string, data: OAuthUser): Promise<void>;
+    findUserByEmail(email: string): Promise<string | null>;
+    listUserProviders(userId: string): Promise<OAuthProvider[]>;
+    unlinkProvider(userId: string, provider: OAuthProvider): Promise<void>;
+}
+export interface PassportConfig {
+    storage: PassportStorageAdapter;
+    generateUsername?: (preferred?: string) => Promise<string>;
+}
+export declare class PassportManager {
+    private storage;
+    private generateUsername;
+    constructor(config: PassportConfig);
+    federateOAuthUser(provider: OAuthProvider, oauthUser: OAuthUser): Promise<FederationResult>;
+    linkProvider(userId: string, provider: OAuthProvider, oauthUser: OAuthUser): Promise<void>;
+    unlinkProvider(userId: string, provider: OAuthProvider): Promise<void>;
+    getLinkedProviders(userId: string): Promise<OAuthProvider[]>;
+}
+export declare function createPassportManager(config: PassportConfig): PassportManager;
+//# sourceMappingURL=federation.d.ts.map

package/lib/federation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation.d.ts","sourceRoot":"","sources":["../src/federation.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;AAE7F,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,aAAa,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAChG,UAAU,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9G,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvD,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5D,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,sBAAsB,CAAC;IAChC,gBAAgB,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5D;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,gBAAgB,CAA0C;gBAEtD,MAAM,EAAE,cAAc;IAK5B,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoC3F,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1F,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtE,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;CAGnE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,eAAe,CAE7E"}

package/lib/federation.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PassportManager = void 0;
+exports.createPassportManager = createPassportManager;
+class PassportManager {
+    constructor(config) {
+        this.storage = config.storage;
+        this.generateUsername = config.generateUsername ?? defaultGenerateUsername;
+    }
+    async federateOAuthUser(provider, oauthUser) {
+        const existing = await this.storage.findIdentity(provider, oauthUser.id);
+        if (existing) {
+            return {
+                userId: existing.userId,
+                email: oauthUser.email,
+                isNewUser: false,
+                providerLinked: true,
+            };
+        }
+        // Check if email already exists under a different provider
+        const existingUserId = await this.storage.findUserByEmail(oauthUser.email);
+        let userId;
+        let isNewUser = false;
+        if (existingUserId) {
+            userId = existingUserId;
+        }
+        else {
+            const username = await this.generateUsername(oauthUser.username);
+            userId = await this.storage.createUser({
+                email: oauthUser.email,
+                name: oauthUser.name ?? oauthUser.username ?? "User",
+                avatar: oauthUser.avatar,
+                username,
+            });
+            isNewUser = true;
+        }
+        await this.storage.linkProvider(userId, provider, oauthUser.id, oauthUser);
+        return { userId, email: oauthUser.email, isNewUser, providerLinked: true };
+    }
+    async linkProvider(userId, provider, oauthUser) {
+        const existing = await this.storage.findIdentity(provider, oauthUser.id);
+        if (existing && existing.userId !== userId) {
+            throw new Error(`This ${provider} account is already linked to a different user.`);
+        }
+        await this.storage.linkProvider(userId, provider, oauthUser.id, oauthUser);
+    }
+    async unlinkProvider(userId, provider) {
+        const providers = await this.storage.listUserProviders(userId);
+        if (providers.length <= 1) {
+            throw new Error("Cannot unlink the last login method. Add another provider first.");
+        }
+        await this.storage.unlinkProvider(userId, provider);
+    }
+    async getLinkedProviders(userId) {
+        return this.storage.listUserProviders(userId);
+    }
+}
+exports.PassportManager = PassportManager;
+function createPassportManager(config) {
+    return new PassportManager(config);
+}
+async function defaultGenerateUsername(preferred) {
+    const base = preferred?.toLowerCase().replace(/[^a-z0-9_-]/g, "") ?? "user";
+    const slug = base.length >= 3 ? base : "user";
+    return `${slug}_${Math.random().toString(36).substring(2, 7)}`;
+}
+//# sourceMappingURL=federation.js.map

package/lib/federation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation.js","sourceRoot":"","sources":["../src/federation.ts"],"names":[],"mappings":";;;AAuGA,sDAEC;AApED,MAAa,eAAe;IAI1B,YAAY,MAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAAuB,EAAE,SAAoB;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAEzE,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,SAAS,EAAE,KAAK;gBAChB,cAAc,EAAE,IAAI;aACrB,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAE3E,IAAI,MAAc,CAAC;QACnB,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,GAAG,cAAc,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACjE,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;gBACrC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,IAAI,MAAM;gBACpD,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,QAAQ;aACT,CAAC,CAAC;YACH,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAE3E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,QAAuB,EAAE,SAAoB;QAC9E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,iDAAiD,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAuB;QAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;CACF;AAhED,0CAgEC;AAED,SAAgB,qBAAqB,CAAC,MAAsB;IAC1D,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,SAAkB;IACvD,MAAM,IAAI,GAAG,SAAS,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,6 @@
+export { PassportManager, createPassportManager } from "./federation";
+export type { OAuthProvider, OAuthUser, FederationResult, PassportStorageAdapter, PassportConfig, ProviderIdentity } from "./federation";
+export { createSupabasePassportAdapter } from "./adapters/supabase";
+export type { SupabaseClient } from "./adapters/supabase";
+export { createMemoryPassportAdapter } from "./adapters/memory";
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACtE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEzI,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC"}

package/lib/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMemoryPassportAdapter = exports.createSupabasePassportAdapter = exports.createPassportManager = exports.PassportManager = void 0;
+var federation_1 = require("./federation");
+Object.defineProperty(exports, "PassportManager", { enumerable: true, get: function () { return federation_1.PassportManager; } });
+Object.defineProperty(exports, "createPassportManager", { enumerable: true, get: function () { return federation_1.createPassportManager; } });
+var supabase_1 = require("./adapters/supabase");
+Object.defineProperty(exports, "createSupabasePassportAdapter", { enumerable: true, get: function () { return supabase_1.createSupabasePassportAdapter; } });
+var memory_1 = require("./adapters/memory");
+Object.defineProperty(exports, "createMemoryPassportAdapter", { enumerable: true, get: function () { return memory_1.createMemoryPassportAdapter; } });
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,2CAAsE;AAA7D,6GAAA,eAAe,OAAA;AAAE,mHAAA,qBAAqB,OAAA;AAG/C,gDAAoE;AAA3D,yHAAA,6BAA6B,OAAA;AAGtC,4CAAgE;AAAvD,qHAAA,2BAA2B,OAAA"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@aethex.os/passport",
+  "version": "1.0.0",
+  "description": "OAuth federation for multi-provider auth — link GitHub, Discord, Google, and more to a single unified user identity",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "files": [
+    "lib"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch"
+  },
+  "keywords": [
+    "oauth",
+    "federation",
+    "auth",
+    "identity",
+    "passport",
+    "social-login",
+    "github",
+    "discord",
+    "google",
+    "multi-provider",
+    "aethex"
+  ],
+  "author": "AeThex Corporation",
+  "license": "MIT",
+  "homepage": "https://aethex.dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/AeThex-Corporation/AeThex-OS.git",
+    "directory": "packages/aethex-passport"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.3.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}