@agentuity/auth 0.0.100 → 0.0.101

package/dist/auth0/client.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Auth0 client-side authentication provider for React.
+ *
+ * @module auth0/client
+ */
+import React from 'react';
+import type { useAuth0 as Auth0UseAuth } from '@auth0/auth0-react';
+type UseAuth0 = typeof Auth0UseAuth;
+export interface AgentuityAuth0Props {
+    /** React children to render */
+    children: React.ReactNode;
+    /** Auth0's useAuth0 hook from @auth0/auth0-react */
+    useAuth0: UseAuth0;
+    /** Token refresh interval in milliseconds (default: 60000 = 1 minute) */
+    refreshInterval?: number;
+    /** Options to pass to getAccessTokenSilently */
+    tokenOptions?: Parameters<ReturnType<UseAuth0>['getAccessTokenSilently']>[0];
+}
+/**
+ * Agentuity authentication provider for Auth0.
+ *
+ * This component integrates Auth0 authentication with Agentuity's context,
+ * automatically injecting auth tokens into API calls via useAPI and useWebsocket.
+ *
+ * Must be a child of both Auth0Provider and AgentuityProvider.
+ *
+ * @example
+ * ```tsx
+ * import { Auth0Provider, useAuth0 } from '@auth0/auth0-react';
+ * import { AgentuityProvider } from '@agentuity/react';
+ * import { AgentuityAuth0 } from '@agentuity/auth/auth0';
+ *
+ * <Auth0Provider domain={domain} clientId={clientId} authorizationParams={{ redirect_uri: window.location.origin }}>
+ *   <AgentuityProvider>
+ *     <AgentuityAuth0 useAuth0={useAuth0}>
+ *       <App />
+ *     </AgentuityAuth0>
+ *   </AgentuityProvider>
+ * </Auth0Provider>
+ * ```
+ */
+export declare function AgentuityAuth0({ children, useAuth0, refreshInterval, tokenOptions, }: AgentuityAuth0Props): import("react/jsx-runtime").JSX.Element;
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/auth0/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/auth0/client.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAA4B,MAAM,OAAO,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGnE,KAAK,QAAQ,GAAG,OAAO,YAAY,CAAC;AAEpC,MAAM,WAAW,mBAAmB;IACnC,+BAA+B;IAC/B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAE1B,oDAAoD;IACpD,QAAQ,EAAE,QAAQ,CAAC;IAEnB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,gDAAgD;IAChD,YAAY,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAC7E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,cAAc,CAAC,EAC9B,QAAQ,EACR,QAAQ,EACR,eAAuB,EACvB,YAAY,GACZ,EAAE,mBAAmB,2CAsDrB"}

package/dist/auth0/client.js

@@ -0,0 +1,79 @@
+import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
+/**
+ * Auth0 client-side authentication provider for React.
+ *
+ * @module auth0/client
+ */
+import { useEffect, useRef } from 'react';
+import { useAuth } from '@agentuity/react';
+/**
+ * Agentuity authentication provider for Auth0.
+ *
+ * This component integrates Auth0 authentication with Agentuity's context,
+ * automatically injecting auth tokens into API calls via useAPI and useWebsocket.
+ *
+ * Must be a child of both Auth0Provider and AgentuityProvider.
+ *
+ * @example
+ * ```tsx
+ * import { Auth0Provider, useAuth0 } from '@auth0/auth0-react';
+ * import { AgentuityProvider } from '@agentuity/react';
+ * import { AgentuityAuth0 } from '@agentuity/auth/auth0';
+ *
+ * <Auth0Provider domain={domain} clientId={clientId} authorizationParams={{ redirect_uri: window.location.origin }}>
+ *   <AgentuityProvider>
+ *     <AgentuityAuth0 useAuth0={useAuth0}>
+ *       <App />
+ *     </AgentuityAuth0>
+ *   </AgentuityProvider>
+ * </Auth0Provider>
+ * ```
+ */
+export function AgentuityAuth0({ children, useAuth0, refreshInterval = 60000, tokenOptions, }) {
+    const { getAccessTokenSilently, isLoading, isAuthenticated } = useAuth0();
+    const { setAuthHeader, setAuthLoading } = useAuth();
+    // Use ref for tokenOptions to avoid infinite re-renders when parent passes inline object
+    const tokenOptionsRef = useRef(tokenOptions);
+    tokenOptionsRef.current = tokenOptions;
+    useEffect(() => {
+        if (isLoading || !setAuthHeader || !setAuthLoading) {
+            if (setAuthLoading) {
+                setAuthLoading(true);
+            }
+            return;
+        }
+        // Not authenticated - clear auth header
+        if (!isAuthenticated) {
+            setAuthHeader(null);
+            setAuthLoading(false);
+            return;
+        }
+        const fetchToken = async () => {
+            try {
+                setAuthLoading(true);
+                const token = await getAccessTokenSilently(tokenOptionsRef.current);
+                setAuthHeader(token ? `Bearer ${token}` : null);
+            }
+            catch (error) {
+                console.error('Failed to get Auth0 token:', error instanceof Error ? error.message : 'Unknown error');
+                setAuthHeader(null);
+            }
+            finally {
+                setAuthLoading(false);
+            }
+        };
+        fetchToken();
+        // Refresh token periodically
+        const interval = setInterval(fetchToken, refreshInterval);
+        return () => clearInterval(interval);
+    }, [
+        getAccessTokenSilently,
+        isLoading,
+        isAuthenticated,
+        setAuthHeader,
+        setAuthLoading,
+        refreshInterval,
+    ]);
+    return _jsx(_Fragment, { children: children });
+}
+//# sourceMappingURL=client.js.map

package/dist/auth0/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/auth0/client.tsx"],"names":[],"mappings":";AAAA;;;;GAIG;AAEH,OAAc,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAEjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAkB3C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,cAAc,CAAC,EAC9B,QAAQ,EACR,QAAQ,EACR,eAAe,GAAG,KAAK,EACvB,YAAY,GACS;IACrB,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC1E,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IAEpD,yFAAyF;IACzF,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7C,eAAe,CAAC,OAAO,GAAG,YAAY,CAAC;IAEvC,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,SAAS,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;YACpD,IAAI,cAAc,EAAE,CAAC;gBACpB,cAAc,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,OAAO;QACR,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,eAAe,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,CAAC;YACpB,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO;QACR,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;YAC7B,IAAI,CAAC;gBACJ,cAAc,CAAC,IAAI,CAAC,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBACpE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CACZ,4BAA4B,EAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CACxD,CAAC;gBACF,aAAa,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACV,cAAc,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC,CAAC;QAEF,UAAU,EAAE,CAAC;QAEb,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,EAAE;QACF,sBAAsB;QACtB,SAAS;QACT,eAAe;QACf,aAAa;QACb,cAAc;QACd,eAAe;KACf,CAAC,CAAC;IAEH,OAAO,4BAAG,QAAQ,GAAI,CAAC;AACxB,CAAC"}

package/dist/auth0/index.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Auth0 authentication provider for Agentuity.
+ *
+ * Provides client-side (React) and server-side (Hono) authentication.
+ *
+ * @example Client-side
+ * ```tsx
+ * import { Auth0Provider, useAuth0 } from '@auth0/auth0-react';
+ * import { AgentuityProvider } from '@agentuity/react';
+ * import { AgentuityAuth0 } from '@agentuity/auth/auth0';
+ *
+ * <Auth0Provider domain={domain} clientId={clientId} authorizationParams={{ redirect_uri: window.location.origin }}>
+ *   <AgentuityProvider>
+ *     <AgentuityAuth0 useAuth0={useAuth0}>
+ *       <App />
+ *     </AgentuityAuth0>
+ *   </AgentuityProvider>
+ * </Auth0Provider>
+ * ```
+ *
+ * @example Server-side
+ * ```typescript
+ * import { createMiddleware } from '@agentuity/auth/auth0/server';
+ *
+ * router.get('/api/profile', createMiddleware(), async (c) => {
+ *   const user = await c.var.auth.getUser();
+ *   return c.json({ email: user.email });
+ * });
+ * ```
+ *
+ * @module auth0
+ */
+export { AgentuityAuth0 } from './client';
+export type { AgentuityAuth0Props } from './client';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth0/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth0/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC"}

package/dist/auth0/index.js

@@ -0,0 +1,38 @@
+/**
+ * Auth0 authentication provider for Agentuity.
+ *
+ * Provides client-side (React) and server-side (Hono) authentication.
+ *
+ * @example Client-side
+ * ```tsx
+ * import { Auth0Provider, useAuth0 } from '@auth0/auth0-react';
+ * import { AgentuityProvider } from '@agentuity/react';
+ * import { AgentuityAuth0 } from '@agentuity/auth/auth0';
+ *
+ * <Auth0Provider domain={domain} clientId={clientId} authorizationParams={{ redirect_uri: window.location.origin }}>
+ *   <AgentuityProvider>
+ *     <AgentuityAuth0 useAuth0={useAuth0}>
+ *       <App />
+ *     </AgentuityAuth0>
+ *   </AgentuityProvider>
+ * </Auth0Provider>
+ * ```
+ *
+ * @example Server-side
+ * ```typescript
+ * import { createMiddleware } from '@agentuity/auth/auth0/server';
+ *
+ * router.get('/api/profile', createMiddleware(), async (c) => {
+ *   const user = await c.var.auth.getUser();
+ *   return c.json({ email: user.email });
+ * });
+ * ```
+ *
+ * @module auth0
+ */
+// Client-side exports (safe for browser)
+export { AgentuityAuth0 } from './client';
+// Server-side exports are NOT exported from the main index to prevent bundling server deps in frontend
+// Import server code directly from '@agentuity/auth/auth0/server' instead
+// This ensures jsonwebtoken/jwks-rsa are never bundled into browser code
+//# sourceMappingURL=index.js.map

package/dist/auth0/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth0/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,yCAAyC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG1C,uGAAuG;AACvG,0EAA0E;AAC1E,yEAAyE"}

package/dist/auth0/server.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Auth0 server-side authentication middleware for Hono.
+ *
+ * @module auth0/server
+ */
+import type { AgentuityAuth } from '../types';
+/**
+ * Environment type for Auth0 middleware - provides typed context variables.
+ */
+export type Auth0Env = {
+    Variables: {
+        auth: AgentuityAuth<Auth0User, Auth0JWTPayload>;
+    };
+};
+/**
+ * Auth0 JWT payload structure.
+ */
+export interface Auth0JWTPayload {
+    /** Subject (user ID) */
+    sub: string;
+    /** Email address */
+    email?: string;
+    /** Email verification status */
+    email_verified?: boolean;
+    /** Full name */
+    name?: string;
+    /** Given name */
+    given_name?: string;
+    /** Family name */
+    family_name?: string;
+    /** Picture URL */
+    picture?: string;
+    /** Additional claims */
+    [key: string]: unknown;
+}
+/**
+ * Auth0 user info from Management API.
+ */
+export interface Auth0User {
+    /** User ID */
+    user_id: string;
+    /** Email address */
+    email?: string;
+    /** Email verification status */
+    email_verified?: boolean;
+    /** Full name */
+    name?: string;
+    /** Given name */
+    given_name?: string;
+    /** Family name */
+    family_name?: string;
+    /** Picture URL */
+    picture?: string;
+    /** Additional user metadata */
+    [key: string]: unknown;
+}
+/**
+ * Options for Auth0 middleware.
+ */
+export interface Auth0MiddlewareOptions {
+    /** Auth0 domain (defaults to process.env.AUTH0_DOMAIN) */
+    domain?: string;
+    /** Auth0 audience/API identifier (defaults to process.env.AUTH0_AUDIENCE) */
+    audience?: string;
+    /** Auth0 issuer (defaults to https://{domain}/) */
+    issuer?: string;
+    /** Custom token extractor function */
+    getToken?: (authHeader: string) => string;
+    /** Whether to fetch full user profile from Management API (requires AUTH0_M2M_CLIENT_ID and AUTH0_M2M_CLIENT_SECRET) */
+    fetchUserProfile?: boolean;
+}
+/**
+ * Create Hono middleware for Auth0 authentication.
+ *
+ * This middleware:
+ * - Extracts and validates JWT tokens from Authorization header
+ * - Returns 401 if token is missing or invalid
+ * - Exposes authenticated user via c.var.auth
+ *
+ * @example
+ * ```typescript
+ * import { createMiddleware } from '@agentuity/auth/auth0';
+ *
+ * router.get('/api/profile', createMiddleware(), async (c) => {
+ *   const user = await c.var.auth.getUser();
+ *   return c.json({ email: user.email });
+ * });
+ * ```
+ */
+export declare function createMiddleware(options?: Auth0MiddlewareOptions): import("hono/types").MiddlewareHandler<Auth0Env, string, {}, Response>;
+//# sourceMappingURL=server.d.ts.map

package/dist/auth0/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/auth0/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,UAAU,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG;IACtB,SAAS,EAAE;QACV,IAAI,EAAE,aAAa,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;KAChD,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACzB,cAAc;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACtC,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAE1C,wHAAwH;IACxH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,sBAA2B,0EAgJpE"}

package/dist/auth0/server.js

@@ -0,0 +1,237 @@
+/**
+ * Auth0 server-side authentication middleware for Hono.
+ *
+ * @module auth0/server
+ */
+import { createMiddleware as createHonoMiddleware } from 'hono/factory';
+import jwt from 'jsonwebtoken';
+import jwksClient from 'jwks-rsa';
+/**
+ * Create Hono middleware for Auth0 authentication.
+ *
+ * This middleware:
+ * - Extracts and validates JWT tokens from Authorization header
+ * - Returns 401 if token is missing or invalid
+ * - Exposes authenticated user via c.var.auth
+ *
+ * @example
+ * ```typescript
+ * import { createMiddleware } from '@agentuity/auth/auth0';
+ *
+ * router.get('/api/profile', createMiddleware(), async (c) => {
+ *   const user = await c.var.auth.getUser();
+ *   return c.json({ email: user.email });
+ * });
+ * ```
+ */
+export function createMiddleware(options = {}) {
+    const domain = options.domain || process.env.AGENTUITY_PUBLIC_AUTH0_DOMAIN || process.env.AUTH0_DOMAIN;
+    const audience = options.audience || process.env.AGENTUITY_PUBLIC_AUTH0_AUDIENCE || process.env.AUTH0_AUDIENCE;
+    const issuer = options.issuer || (domain ? `https://${domain}/` : undefined);
+    if (!domain) {
+        console.error('[Auth0 Auth] AUTH0_DOMAIN is not set. Add it to your .env file or pass domain option to createMiddleware()');
+        throw new Error('Auth0 domain is required (set AUTH0_DOMAIN or pass domain option)');
+    }
+    if (!issuer) {
+        throw new Error('Auth0 issuer is required');
+    }
+    // Create JWKS client for fetching signing keys
+    const client = jwksClient({
+        jwksUri: `https://${domain}/.well-known/jwks.json`,
+        cache: true,
+        cacheMaxAge: 86400000, // 24 hours
+    });
+    // Get signing key function for jwt.verify
+    const getKey = (header, callback) => {
+        if (!header.kid) {
+            callback(new Error('No kid in token header'));
+            return;
+        }
+        client.getSigningKey(header.kid, (err, key) => {
+            if (err) {
+                callback(err);
+                return;
+            }
+            if (!key) {
+                callback(new Error('No signing key found'));
+                return;
+            }
+            const signingKey = key.getPublicKey();
+            callback(null, signingKey);
+        });
+    };
+    return createHonoMiddleware(async (c, next) => {
+        const authHeader = c.req.header('Authorization');
+        if (!authHeader) {
+            return c.json({ error: 'Unauthorized' }, 401);
+        }
+        try {
+            // Extract token from Bearer header
+            let token;
+            if (options.getToken) {
+                token = options.getToken(authHeader);
+            }
+            else {
+                // Validate Authorization scheme is Bearer
+                if (!authHeader.match(/^Bearer\s+/i)) {
+                    return c.json({ error: 'Unauthorized' }, 401);
+                }
+                token = authHeader.replace(/^Bearer\s+/i, '');
+            }
+            // Ensure token is not empty
+            if (!token || token.trim().length === 0) {
+                return c.json({ error: 'Unauthorized' }, 401);
+            }
+            // Verify token with Auth0
+            const verifyOptions = {
+                issuer,
+                algorithms: ['RS256'],
+            };
+            // Only validate audience if it's configured
+            if (audience) {
+                verifyOptions.audience = audience;
+            }
+            const payload = await new Promise((resolve, reject) => {
+                jwt.verify(token, getKey, verifyOptions, (err, decoded) => {
+                    if (err) {
+                        reject(err);
+                        return;
+                    }
+                    if (!decoded || typeof decoded !== 'object') {
+                        reject(new Error('Invalid token payload'));
+                        return;
+                    }
+                    resolve(decoded);
+                });
+            });
+            // Validate payload has required subject claim
+            if (!payload.sub || typeof payload.sub !== 'string') {
+                throw new Error('Invalid token: missing or invalid subject claim');
+            }
+            // Memoize user fetch to avoid multiple API calls
+            let cachedUser = null;
+            // Create auth object with Auth0 payload types
+            const auth = {
+                async getUser() {
+                    if (cachedUser) {
+                        return cachedUser;
+                    }
+                    // If fetchUserProfile is enabled, fetch from Management API (more complete data)
+                    if (options.fetchUserProfile) {
+                        const user = await fetchUserFromManagementAPI(payload.sub);
+                        cachedUser = mapAuth0UserToAgentuityUser(user);
+                    }
+                    else {
+                        // Fetch from /userinfo endpoint (access token has openid scope)
+                        const user = await fetchUserFromUserInfo(domain, token);
+                        cachedUser = mapAuth0UserToAgentuityUser(user);
+                    }
+                    return cachedUser;
+                },
+                async getToken() {
+                    return token;
+                },
+                raw: payload,
+            };
+            c.set('auth', auth);
+            await next();
+        }
+        catch (error) {
+            const hasErrorCode = error && typeof error === 'object' && 'code' in error && typeof error.code === 'string';
+            console.error('[Auth0 Auth] Authentication failed', { hasErrorCode });
+            return c.json({ error: 'Unauthorized' }, 401);
+        }
+    });
+}
+/**
+ * Fetch user info from Auth0 /userinfo endpoint using access token.
+ */
+async function fetchUserFromUserInfo(domain, accessToken) {
+    const response = await fetch(`https://${domain}/userinfo`, {
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to fetch user info: ${response.status}`);
+    }
+    const userInfo = (await response.json());
+    return {
+        user_id: userInfo.sub,
+        email: userInfo.email,
+        email_verified: userInfo.email_verified,
+        name: userInfo.name,
+        given_name: userInfo.given_name,
+        family_name: userInfo.family_name,
+        picture: userInfo.picture,
+    };
+}
+/**
+ * Map Auth0 User to AgentuityAuthUser.
+ */
+function mapAuth0UserToAgentuityUser(user) {
+    return {
+        id: user.user_id,
+        name: user.name ||
+            (user.given_name && user.family_name
+                ? `${user.given_name} ${user.family_name}`.trim()
+                : user.given_name || user.family_name),
+        email: user.email,
+        raw: user,
+    };
+}
+// M2M token cache to avoid fetching on every request
+let cachedM2MToken = null;
+/**
+ * Get M2M access token for Management API, with caching.
+ */
+async function getM2MAccessToken(domain, clientId, clientSecret) {
+    // Return cached token if still valid (with 60s buffer before expiry)
+    if (cachedM2MToken && Date.now() < cachedM2MToken.expiresAt - 60000) {
+        return cachedM2MToken.token;
+    }
+    const tokenResponse = await fetch(`https://${domain}/oauth/token`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            client_id: clientId,
+            client_secret: clientSecret,
+            audience: `https://${domain}/api/v2/`,
+            grant_type: 'client_credentials',
+        }),
+    });
+    if (!tokenResponse.ok) {
+        throw new Error('Failed to get Management API access token');
+    }
+    const { access_token, expires_in } = (await tokenResponse.json());
+    cachedM2MToken = {
+        token: access_token,
+        expiresAt: Date.now() + expires_in * 1000,
+    };
+    return access_token;
+}
+/**
+ * Fetch user profile from Auth0 Management API.
+ */
+async function fetchUserFromManagementAPI(userId) {
+    const clientId = process.env.AUTH0_M2M_CLIENT_ID;
+    const clientSecret = process.env.AUTH0_M2M_CLIENT_SECRET;
+    const domain = process.env.AGENTUITY_PUBLIC_AUTH0_DOMAIN || process.env.AUTH0_DOMAIN;
+    if (!clientId || !clientSecret || !domain) {
+        throw new Error('AUTH0_M2M_CLIENT_ID, AUTH0_M2M_CLIENT_SECRET, and AUTH0_DOMAIN must be set to fetch user profile');
+    }
+    // Get cached or fresh Management API access token
+    const accessToken = await getM2MAccessToken(domain, clientId, clientSecret);
+    // Fetch user from Management API
+    const userResponse = await fetch(`https://${domain}/api/v2/users/${encodeURIComponent(userId)}`, {
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!userResponse.ok) {
+        throw new Error('Failed to fetch user from Management API');
+    }
+    return (await userResponse.json());
+}
+//# sourceMappingURL=server.js.map

package/dist/auth0/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/auth0/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,GAAG,MAAM,cAAc,CAAC;AAC/B,OAAO,UAAU,MAAM,UAAU,CAAC;AA4ElC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkC,EAAE;IACpE,MAAM,MAAM,GACX,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACzF,MAAM,QAAQ,GACb,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC/F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE7E,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACZ,4GAA4G,CAC5G,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;IAED,+CAA+C;IAC/C,MAAM,MAAM,GAAG,UAAU,CAAC;QACzB,OAAO,EAAE,WAAW,MAAM,wBAAwB;QAClD,KAAK,EAAE,IAAI;QACX,WAAW,EAAE,QAAQ,EAAE,WAAW;KAClC,CAAC,CAAC;IAEH,0CAA0C;IAC1C,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,QAAgC,EAAE,EAAE;QAC1E,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;YAC9C,OAAO;QACR,CAAC;QACD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAiB,EAAE,GAA2B,EAAE,EAAE;YACnF,IAAI,GAAG,EAAE,CAAC;gBACT,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO;YACR,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACV,QAAQ,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAC5C,OAAO;YACR,CAAC;YACD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,oBAAoB,CAAW,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC;YACJ,mCAAmC;YACnC,IAAI,KAAa,CAAC;YAClB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACP,0CAA0C;gBAC1C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;oBACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC/C,CAAC;gBACD,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,4BAA4B;YAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC;YAED,0BAA0B;YAC1B,MAAM,aAAa,GAAsB;gBACxC,MAAM;gBACN,UAAU,EAAE,CAAC,OAAO,CAAC;aACrB,CAAC;YAEF,4CAA4C;YAC5C,IAAI,QAAQ,EAAE,CAAC;gBACd,aAAa,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACnC,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACtE,GAAG,CAAC,MAAM,CACT,KAAK,EACL,MAAM,EACN,aAAa,EACb,CAAC,GAA4B,EAAE,OAA4C,EAAE,EAAE;oBAC9E,IAAI,GAAG,EAAE,CAAC;wBACT,MAAM,CAAC,GAAG,CAAC,CAAC;wBACZ,OAAO;oBACR,CAAC;oBACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;wBAC7C,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;wBAC3C,OAAO;oBACR,CAAC;oBACD,OAAO,CAAC,OAA0B,CAAC,CAAC;gBACrC,CAAC,CACD,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,8CAA8C;YAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACpE,CAAC;YAED,iDAAiD;YACjD,IAAI,UAAU,GAAwC,IAAI,CAAC;YAE3D,8CAA8C;YAC9C,MAAM,IAAI,GAA8C;gBACvD,KAAK,CAAC,OAAO;oBACZ,IAAI,UAAU,EAAE,CAAC;wBAChB,OAAO,UAAU,CAAC;oBACnB,CAAC;oBAED,iFAAiF;oBACjF,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;wBAC9B,MAAM,IAAI,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBAC3D,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;oBAChD,CAAC;yBAAM,CAAC;wBACP,gEAAgE;wBAChE,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,MAAO,EAAE,KAAK,CAAC,CAAC;wBACzD,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;oBAChD,CAAC;oBAED,OAAO,UAAU,CAAC;gBACnB,CAAC;gBAED,KAAK,CAAC,QAAQ;oBACb,OAAO,KAAK,CAAC;gBACd,CAAC;gBAED,GAAG,EAAE,OAAO;aACZ,CAAC;YAEF,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,YAAY,GACjB,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;YACzF,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAAC,MAAc,EAAE,WAAmB;IACvE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,MAAM,WAAW,EAAE;QAC1D,OAAO,EAAE;YACR,aAAa,EAAE,UAAU,WAAW,EAAE;SACtC;KACD,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAStC,CAAC;IAEF,OAAO;QACN,OAAO,EAAE,QAAQ,CAAC,GAAG;QACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;KACzB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAAC,IAAe;IACnD,OAAO;QACN,EAAE,EAAE,IAAI,CAAC,OAAO;QAChB,IAAI,EACH,IAAI,CAAC,IAAI;YACT,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW;gBACnC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;gBACjD,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC;QACxC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI;KACT,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,IAAI,cAAc,GAAgD,IAAI,CAAC;AAEvE;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAC/B,MAAc,EACd,QAAgB,EAChB,YAAoB;IAEpB,qEAAqE;IACrE,IAAI,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;QACrE,OAAO,cAAc,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,WAAW,MAAM,cAAc,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;YAC3B,QAAQ,EAAE,WAAW,MAAM,UAAU;YACrC,UAAU,EAAE,oBAAoB;SAChC,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAG/D,CAAC;IAEF,cAAc,GAAG;QAChB,KAAK,EAAE,YAAY;QACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI;KACzC,CAAC;IAEF,OAAO,YAAY,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACjD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAErF,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACd,kGAAkG,CAClG,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE5E,iCAAiC;IACjC,MAAM,YAAY,GAAG,MAAM,KAAK,CAC/B,WAAW,MAAM,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC9D;QACC,OAAO,EAAE;YACR,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,cAAc,EAAE,kBAAkB;SAClC;KACD,CACD,CAAC;IAEF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAc,CAAC;AACjD,CAAC"}

package/dist/clerk/index.d.ts

@@ -33,5 +33,5 @@
 export { AgentuityClerk } from './client';
 export type { AgentuityClerkProps } from './client';
 export { createMiddleware } from './server';
-export type { ClerkMiddlewareOptions, ClerkJWTPayload } from './server';
+export type { ClerkMiddlewareOptions, ClerkJWTPayload, ClerkEnv } from './server';
 //# sourceMappingURL=index.d.ts.map

package/dist/clerk/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clerk/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,YAAY,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/clerk/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,YAAY,EAAE,sBAAsB,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC"}

package/dist/clerk/server.d.ts

@@ -3,7 +3,6 @@
  *
  * @module clerk/server
  */
-import type { MiddlewareHandler } from 'hono';
 import type { User } from '@clerk/backend';
 import type { AgentuityAuth } from '../types';
 /**
@@ -15,6 +14,14 @@ export interface ClerkJWTPayload {
     /** Additional claims */
     [key: string]: unknown;
 }
+/**
+ * Environment type for Clerk middleware - provides typed context variables.
+ */
+export type ClerkEnv = {
+    Variables: {
+        auth: AgentuityAuth<User, ClerkJWTPayload>;
+    };
+};
 /**
  * Options for Clerk middleware.
  */
@@ -44,13 +51,5 @@ export interface ClerkMiddlewareOptions {
  * });
  * ```
  */
-export declare function createMiddleware(options?: ClerkMiddlewareOptions): MiddlewareHandler;
-/**
- * Augment Hono's context types to include auth.
- */
-declare module 'hono' {
-    interface ContextVariableMap {
-        auth: AgentuityAuth<User, ClerkJWTPayload>;
-    }
-}
+export declare function createMiddleware(options?: ClerkMiddlewareOptions): import("hono/types").MiddlewareHandler<ClerkEnv, string, {}, Response>;
 //# sourceMappingURL=server.d.ts.map

package/dist/clerk/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/clerk/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE9C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,UAAU,CAAC;AAEjE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,wBAAwB;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACtC,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAE1C,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,sBAA2B,GAAG,iBAAiB,CA6FxF;AAcD;;GAEG;AACH,OAAO,QAAQ,MAAM,CAAC;IACrB,UAAU,kBAAkB;QAC3B,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;KAC3C;CACD"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/clerk/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,UAAU,CAAC;AAEjE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,wBAAwB;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG;IACtB,SAAS,EAAE;QACV,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;KAC3C,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACtC,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAE1C,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,sBAA2B,0EA6FpE"}

package/dist/clerk/server.js

@@ -3,6 +3,7 @@
  *
  * @module clerk/server
  */
+import { createMiddleware as createHonoMiddleware } from 'hono/factory';
 import { createClerkClient, verifyToken } from '@clerk/backend';
 /**
  * Create Hono middleware for Clerk authentication.
@@ -36,7 +37,7 @@ export function createMiddleware(options = {}) {
     }
     // Create Clerk client instance
     const clerkClient = createClerkClient({ secretKey });
-    return async (c, next) => {
+    return createHonoMiddleware(async (c, next) => {
         const authHeader = c.req.header('Authorization');
         if (!authHeader) {
             return c.json({ error: 'Unauthorized' }, 401);
@@ -94,7 +95,7 @@ export function createMiddleware(options = {}) {
             console.error(`[Clerk Auth] Authentication failed: ${errorCode} - ${errorMessage}`);
             return c.json({ error: 'Unauthorized' }, 401);
         }
-    };
+    });
 }
 /**
  * Map Clerk User to AgentuityAuthUser.

package/dist/clerk/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/clerk/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AA4BhE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkC,EAAE;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACpE,MAAM,cAAc,GACnB,OAAO,CAAC,cAAc;QACtB,OAAO,CAAC,GAAG,CAAC,sCAAsC;QAClD,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAEnC,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CACZ,mHAAmH,CACnH,CAAC;QACF,MAAM,IAAI,KAAK,CACd,8EAA8E,CAC9E,CAAC;IACH,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACX,sHAAsH,CACtH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAErD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC;YACJ,mCAAmC;YACnC,IAAI,KAAa,CAAC;YAClB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACP,0CAA0C;gBAC1C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;oBACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC/C,CAAC;gBACD,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,4BAA4B;YAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC;YAED,6DAA6D;YAC7D,MAAM,OAAO,GAAG,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE;gBACzC,SAAS;aACT,CAAC,CAAoB,CAAC;YAEvB,8CAA8C;YAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACpE,CAAC;YAED,iDAAiD;YACjD,IAAI,UAAU,GAAmC,IAAI,CAAC;YAEtD,uDAAuD;YACvD,MAAM,IAAI,GAAyC;gBAClD,KAAK,CAAC,OAAO;oBACZ,IAAI,UAAU,EAAE,CAAC;wBAChB,OAAO,UAAU,CAAC;oBACnB,CAAC;oBACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC1D,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;oBAC/C,OAAO,UAAU,CAAC;gBACnB,CAAC;gBAED,KAAK,CAAC,QAAQ;oBACb,OAAO,KAAK,CAAC;gBACd,CAAC;gBAED,GAAG,EAAE,OAAO;aACZ,CAAC;YAEF,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,MAAM,SAAS,GACd,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACtF,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,kBAAkB,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,uCAAuC,SAAS,MAAM,YAAY,EAAE,CAAC,CAAC;YACpF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAAC,SAAe;IACnD,OAAO;QACN,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,IAAI,EAAE,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,IAAI,SAAS,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,SAAS;QACpF,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY;QAChD,GAAG,EAAE,SAAS;KACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/clerk/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,IAAI,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAqChE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkC,EAAE;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACpE,MAAM,cAAc,GACnB,OAAO,CAAC,cAAc;QACtB,OAAO,CAAC,GAAG,CAAC,sCAAsC;QAClD,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAEnC,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CACZ,mHAAmH,CACnH,CAAC;QACF,MAAM,IAAI,KAAK,CACd,8EAA8E,CAC9E,CAAC;IACH,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACX,sHAAsH,CACtH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAErD,OAAO,oBAAoB,CAAW,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC;YACJ,mCAAmC;YACnC,IAAI,KAAa,CAAC;YAClB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACP,0CAA0C;gBAC1C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;oBACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC/C,CAAC;gBACD,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,4BAA4B;YAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC;YAED,6DAA6D;YAC7D,MAAM,OAAO,GAAG,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE;gBACzC,SAAS;aACT,CAAC,CAAoB,CAAC;YAEvB,8CAA8C;YAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACpE,CAAC;YAED,iDAAiD;YACjD,IAAI,UAAU,GAAmC,IAAI,CAAC;YAEtD,uDAAuD;YACvD,MAAM,IAAI,GAAyC;gBAClD,KAAK,CAAC,OAAO;oBACZ,IAAI,UAAU,EAAE,CAAC;wBAChB,OAAO,UAAU,CAAC;oBACnB,CAAC;oBACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC1D,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;oBAC/C,OAAO,UAAU,CAAC;gBACnB,CAAC;gBAED,KAAK,CAAC,QAAQ;oBACb,OAAO,KAAK,CAAC;gBACd,CAAC;gBAED,GAAG,EAAE,OAAO;aACZ,CAAC;YAEF,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,MAAM,SAAS,GACd,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACtF,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,kBAAkB,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,uCAAuC,SAAS,MAAM,YAAY,EAAE,CAAC,CAAC;YACpF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAAC,SAAe;IACnD,OAAO;QACN,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,IAAI,EAAE,GAAG,SAAS,CAAC,SAAS,IAAI,EAAE,IAAI,SAAS,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,SAAS;QACpF,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY;QAChD,GAAG,EAAE,SAAS;KACd,CAAC;AACH,CAAC"}