@ankhorage/auth-supabase 0.0.0-stage → 2.0.0

package/dist/session.js

@@ -0,0 +1,124 @@
+export function normalizeSupabaseSession(body, now = Date.now()) {
+    if (!isRecord(body))
+        return null;
+    const accessToken = stringValue(body.access_token);
+    const user = normalizeSupabaseUser(body.user);
+    if (accessToken === undefined || user === null)
+        return null;
+    const session = { accessToken, user };
+    const refreshToken = stringValue(body.refresh_token);
+    const tokenType = stringValue(body.token_type);
+    const expiresAt = normalizeExpiresAt(body.expires_at, body.expires_in, now);
+    if (refreshToken !== undefined)
+        session.refreshToken = refreshToken;
+    if (tokenType !== undefined)
+        session.tokenType = tokenType;
+    if (expiresAt !== undefined)
+        session.expiresAt = expiresAt;
+    return session;
+}
+export function normalizeSupabaseUser(body) {
+    if (!isRecord(body))
+        return null;
+    const id = stringValue(body.id);
+    if (id === undefined)
+        return null;
+    const metadata = mergeMetadata(body.user_metadata, body.raw_user_meta_data, body.app_metadata, body.raw_app_meta_data);
+    const user = { id };
+    const email = stringValue(body.email) ?? metadataString(metadata, ['email']);
+    const phone = stringValue(body.phone) ?? metadataString(metadata, ['phone']);
+    const username = metadataString(metadata, ['username', 'user_name', 'preferred_username']);
+    const displayName = metadataString(metadata, [
+        'displayName',
+        'display_name',
+        'full_name',
+        'name',
+    ]);
+    const avatarUrl = metadataString(metadata, ['avatarUrl', 'avatar_url', 'picture']);
+    if (email !== undefined)
+        user.email = email;
+    if (phone !== undefined)
+        user.phone = phone;
+    if (username !== undefined)
+        user.username = username;
+    if (displayName !== undefined)
+        user.displayName = displayName;
+    if (avatarUrl !== undefined)
+        user.avatarUrl = avatarUrl;
+    if (metadata !== undefined)
+        user.metadata = metadata;
+    return user;
+}
+export function parseStoredSession(value) {
+    if (value === null)
+        return null;
+    try {
+        const parsed = JSON.parse(value);
+        if (!isAuthSession(parsed))
+            return null;
+        return {
+            ...parsed,
+            ...(parsed.expiresAt !== undefined
+                ? { expiresAt: normalizeStoredExpiresAt(parsed.expiresAt) }
+                : {}),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+export function isAuthSessionExpired(session, now = Date.now()) {
+    const expiresAt = session?.expiresAt;
+    return typeof expiresAt === 'number' && Number.isFinite(expiresAt) && expiresAt <= now;
+}
+function normalizeStoredExpiresAt(value) {
+    return value < 10_000_000_000 ? value * 1000 : value;
+}
+function normalizeExpiresAt(expiresAt, expiresIn, now) {
+    const directExpiresAt = numberValue(expiresAt);
+    if (directExpiresAt !== undefined)
+        return directExpiresAt < 10_000_000_000 ? directExpiresAt * 1000 : directExpiresAt;
+    const ttl = numberValue(expiresIn);
+    return ttl === undefined ? undefined : now + ttl * 1000;
+}
+function mergeMetadata(...values) {
+    const metadata = {};
+    for (const value of values)
+        if (isRecord(value))
+            Object.assign(metadata, value);
+    return Object.keys(metadata).length > 0 ? metadata : undefined;
+}
+function metadataString(metadata, keys) {
+    if (metadata === undefined)
+        return undefined;
+    for (const key of keys) {
+        const value = stringValue(Reflect.get(metadata, key));
+        if (value !== undefined)
+            return value;
+    }
+    return undefined;
+}
+function isAuthSession(value) {
+    if (!isRecord(value) || stringValue(value.accessToken) === undefined)
+        return false;
+    if (!isRecord(value.user) || stringValue(value.user.id) === undefined)
+        return false;
+    return (value.expiresAt === undefined ||
+        (typeof value.expiresAt === 'number' && Number.isFinite(value.expiresAt)));
+}
+function stringValue(value) {
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+function numberValue(value) {
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    if (typeof value === 'string') {
+        const parsed = Number.parseInt(value, 10);
+        return Number.isFinite(parsed) ? parsed : undefined;
+    }
+    return undefined;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,wBAAwB,CAAC,IAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACtE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,OAAO,GAAgB,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACnD,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC5E,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;IACpE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3D,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,QAAQ,GAAG,aAAa,CAC5B,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,iBAAiB,CACvB,CAAC;IACF,MAAM,IAAI,GAAa,EAAE,EAAE,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,EAAE;QAC3C,aAAa;QACb,cAAc;QACd,WAAW;QACX,MAAM;KACP,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IAEnF,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAC5C,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACrD,IAAI,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAC9D,IAAI,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IACxD,IAAI,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO;YACL,GAAG,MAAM;YACT,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,SAAS,EAAE,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAuC,EACvC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;IACrC,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG,CAAC;AACzF,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACvD,CAAC;AAED,SAAS,kBAAkB,CACzB,SAAkB,EAClB,SAAkB,EAClB,GAAW;IAEX,MAAM,eAAe,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,eAAe,KAAK,SAAS;QAC/B,OAAO,eAAe,GAAG,cAAc,CAAC,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;IACrF,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,GAAG,MAAiB;IACzC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CACrB,QAA6C,EAC7C,IAAuB;IAEvB,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpF,OAAO,CACL,KAAK,CAAC,SAAS,KAAK,SAAS;QAC7B,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import type { AuthSession, AuthUser } from '@ankhorage/contracts/auth';\n\nexport function normalizeSupabaseSession(body: unknown, now = Date.now()): AuthSession | null {\n  if (!isRecord(body)) return null;\n  const accessToken = stringValue(body.access_token);\n  const user = normalizeSupabaseUser(body.user);\n  if (accessToken === undefined || user === null) return null;\n  const session: AuthSession = { accessToken, user };\n  const refreshToken = stringValue(body.refresh_token);\n  const tokenType = stringValue(body.token_type);\n  const expiresAt = normalizeExpiresAt(body.expires_at, body.expires_in, now);\n  if (refreshToken !== undefined) session.refreshToken = refreshToken;\n  if (tokenType !== undefined) session.tokenType = tokenType;\n  if (expiresAt !== undefined) session.expiresAt = expiresAt;\n  return session;\n}\n\nexport function normalizeSupabaseUser(body: unknown): AuthUser | null {\n  if (!isRecord(body)) return null;\n  const id = stringValue(body.id);\n  if (id === undefined) return null;\n\n  const metadata = mergeMetadata(\n    body.user_metadata,\n    body.raw_user_meta_data,\n    body.app_metadata,\n    body.raw_app_meta_data,\n  );\n  const user: AuthUser = { id };\n  const email = stringValue(body.email) ?? metadataString(metadata, ['email']);\n  const phone = stringValue(body.phone) ?? metadataString(metadata, ['phone']);\n  const username = metadataString(metadata, ['username', 'user_name', 'preferred_username']);\n  const displayName = metadataString(metadata, [\n    'displayName',\n    'display_name',\n    'full_name',\n    'name',\n  ]);\n  const avatarUrl = metadataString(metadata, ['avatarUrl', 'avatar_url', 'picture']);\n\n  if (email !== undefined) user.email = email;\n  if (phone !== undefined) user.phone = phone;\n  if (username !== undefined) user.username = username;\n  if (displayName !== undefined) user.displayName = displayName;\n  if (avatarUrl !== undefined) user.avatarUrl = avatarUrl;\n  if (metadata !== undefined) user.metadata = metadata;\n  return user;\n}\n\nexport function parseStoredSession(value: string | null): AuthSession | null {\n  if (value === null) return null;\n  try {\n    const parsed: unknown = JSON.parse(value);\n    if (!isAuthSession(parsed)) return null;\n    return {\n      ...parsed,\n      ...(parsed.expiresAt !== undefined\n        ? { expiresAt: normalizeStoredExpiresAt(parsed.expiresAt) }\n        : {}),\n    };\n  } catch {\n    return null;\n  }\n}\n\nexport function isAuthSessionExpired(\n  session: AuthSession | null | undefined,\n  now = Date.now(),\n): boolean {\n  const expiresAt = session?.expiresAt;\n  return typeof expiresAt === 'number' && Number.isFinite(expiresAt) && expiresAt <= now;\n}\n\nfunction normalizeStoredExpiresAt(value: number): number {\n  return value < 10_000_000_000 ? value * 1000 : value;\n}\n\nfunction normalizeExpiresAt(\n  expiresAt: unknown,\n  expiresIn: unknown,\n  now: number,\n): number | undefined {\n  const directExpiresAt = numberValue(expiresAt);\n  if (directExpiresAt !== undefined)\n    return directExpiresAt < 10_000_000_000 ? directExpiresAt * 1000 : directExpiresAt;\n  const ttl = numberValue(expiresIn);\n  return ttl === undefined ? undefined : now + ttl * 1000;\n}\n\nfunction mergeMetadata(...values: unknown[]): Record<string, unknown> | undefined {\n  const metadata: Record<string, unknown> = {};\n  for (const value of values) if (isRecord(value)) Object.assign(metadata, value);\n  return Object.keys(metadata).length > 0 ? metadata : undefined;\n}\n\nfunction metadataString(\n  metadata: Record<string, unknown> | undefined,\n  keys: readonly string[],\n): string | undefined {\n  if (metadata === undefined) return undefined;\n  for (const key of keys) {\n    const value = stringValue(Reflect.get(metadata, key));\n    if (value !== undefined) return value;\n  }\n  return undefined;\n}\n\nfunction isAuthSession(value: unknown): value is AuthSession {\n  if (!isRecord(value) || stringValue(value.accessToken) === undefined) return false;\n  if (!isRecord(value.user) || stringValue(value.user.id) === undefined) return false;\n  return (\n    value.expiresAt === undefined ||\n    (typeof value.expiresAt === 'number' && Number.isFinite(value.expiresAt))\n  );\n}\n\nfunction stringValue(value: unknown): string | undefined {\n  return typeof value === 'string' && value.length > 0 ? value : undefined;\n}\n\nfunction numberValue(value: unknown): number | undefined {\n  if (typeof value === 'number' && Number.isFinite(value)) return value;\n  if (typeof value === 'string') {\n    const parsed = Number.parseInt(value, 10);\n    return Number.isFinite(parsed) ? parsed : undefined;\n  }\n  return undefined;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/types.d.ts

@@ -0,0 +1,63 @@
+import type { AuthOAuthErrorCode, AuthOAuthErrorStage, AuthOAuthProviderId, AuthSession } from '@ankhorage/contracts/auth';
+export type SupabaseAuthFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/** Returns cryptographically secure random bytes for OAuth PKCE verifier generation. */
+export type SupabaseAuthRandomBytes = (length: number) => Uint8Array;
+export interface SupabaseAuthStorage {
+    getItem(key: string): string | Promise<string | null> | null;
+    setItem(key: string, value: string): void | Promise<void>;
+    removeItem(key: string): void | Promise<void>;
+}
+export declare const SUPABASE_AUTH_PROFILE_FIELDS: readonly ["email", "displayName", "avatarUrl", "username", "phone"];
+export type SupabaseAuthProfileField = (typeof SUPABASE_AUTH_PROFILE_FIELDS)[number];
+export interface SupabaseAuthProfileVerificationConfig {
+    /** App-owned profile table generated by @ankhorage/infra. */
+    table: string;
+    /** Configured profile fields whose provider metadata should match when available. */
+    fields?: readonly SupabaseAuthProfileField[];
+    /** Number of reads used to allow the auth.users trigger to become visible through PostgREST. */
+    maxAttempts?: number;
+    /** Delay between profile reads. Use zero for deterministic tests. */
+    retryDelayMs?: number;
+}
+export interface SupabaseOAuthProfileVerificationInput {
+    correlationId: string;
+    provider: AuthOAuthProviderId;
+    session: AuthSession;
+}
+export type SupabaseOAuthProfileVerificationResult = {
+    ok: true;
+} | {
+    ok: false;
+    message: string;
+};
+export type SupabaseOAuthProfileVerifier = (input: SupabaseOAuthProfileVerificationInput) => Promise<SupabaseOAuthProfileVerificationResult>;
+export type SupabaseOAuthLifecycleStatus = 'started' | 'cancelled' | 'error' | 'profile_verified' | 'authenticated';
+export interface SupabaseOAuthLifecycleEvent {
+    correlationId: string;
+    provider: AuthOAuthProviderId;
+    stage: AuthOAuthErrorStage;
+    status: SupabaseOAuthLifecycleStatus;
+    errorCode?: AuthOAuthErrorCode;
+}
+/**
+ * Receives metadata-only OAuth lifecycle events. Events never contain callback URLs,
+ * authorization codes, tokens, client secrets, private keys, or session payloads.
+ */
+export type SupabaseOAuthLifecycleObserver = (event: SupabaseOAuthLifecycleEvent) => void | Promise<void>;
+export interface SupabaseAuthConfig {
+    url: string;
+    anonKey: string;
+    fetch?: SupabaseAuthFetch;
+    storage?: SupabaseAuthStorage;
+    storageKey?: string;
+    oauthProviders?: readonly AuthOAuthProviderId[];
+    oauthRandomBytes?: SupabaseAuthRandomBytes;
+    profileVerification?: SupabaseAuthProfileVerificationConfig;
+    onOAuthLifecycleEvent?: SupabaseOAuthLifecycleObserver;
+}
+export type SupabaseAuthErrorCode = 'invalid_credentials' | 'missing_identifier' | 'missing_password' | 'missing_refresh_token' | 'network_error' | 'provider_error' | 'session_expired' | 'session_persistence_failed' | 'unsupported_identifier' | 'validation_error';
+export interface SupabaseProviderErrorCause {
+    status?: number;
+    body?: unknown;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACZ,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEpG,wFAAwF;AACxF,MAAM,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7D,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,eAAO,MAAM,4BAA4B,qEAM/B,CAAC;AACX,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAErF,MAAM,WAAW,qCAAqC;IACpD,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,MAAM,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC7C,gGAAgG;IAChG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qCAAqC;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,sCAAsC,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,4BAA4B,GAAG,CACzC,KAAK,EAAE,qCAAqC,KACzC,OAAO,CAAC,sCAAsC,CAAC,CAAC;AAErD,MAAM,MAAM,4BAA4B,GACtC,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAE3E,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,MAAM,EAAE,4BAA4B,CAAC;IACrC,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,MAAM,8BAA8B,GAAG,CAC3C,KAAK,EAAE,2BAA2B,KAC/B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAChD,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,mBAAmB,CAAC,EAAE,qCAAqC,CAAC;IAC5D,qBAAqB,CAAC,EAAE,8BAA8B,CAAC;CACxD;AAED,MAAM,MAAM,qBAAqB,GAC7B,qBAAqB,GACrB,oBAAoB,GACpB,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,4BAA4B,GAC5B,wBAAwB,GACxB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB"}

package/dist/types.js

@@ -0,0 +1,8 @@
+export const SUPABASE_AUTH_PROFILE_FIELDS = [
+    'email',
+    'displayName',
+    'avatarUrl',
+    'username',
+    'phone',
+];
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,OAAO;IACP,aAAa;IACb,WAAW;IACX,UAAU;IACV,OAAO;CACC,CAAC","sourcesContent":["import type {\n  AuthOAuthErrorCode,\n  AuthOAuthErrorStage,\n  AuthOAuthProviderId,\n  AuthSession,\n} from '@ankhorage/contracts/auth';\n\nexport type SupabaseAuthFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;\n\n/** Returns cryptographically secure random bytes for OAuth PKCE verifier generation. */\nexport type SupabaseAuthRandomBytes = (length: number) => Uint8Array;\n\nexport interface SupabaseAuthStorage {\n  getItem(key: string): string | Promise<string | null> | null;\n  setItem(key: string, value: string): void | Promise<void>;\n  removeItem(key: string): void | Promise<void>;\n}\n\nexport const SUPABASE_AUTH_PROFILE_FIELDS = [\n  'email',\n  'displayName',\n  'avatarUrl',\n  'username',\n  'phone',\n] as const;\nexport type SupabaseAuthProfileField = (typeof SUPABASE_AUTH_PROFILE_FIELDS)[number];\n\nexport interface SupabaseAuthProfileVerificationConfig {\n  /** App-owned profile table generated by @ankhorage/infra. */\n  table: string;\n  /** Configured profile fields whose provider metadata should match when available. */\n  fields?: readonly SupabaseAuthProfileField[];\n  /** Number of reads used to allow the auth.users trigger to become visible through PostgREST. */\n  maxAttempts?: number;\n  /** Delay between profile reads. Use zero for deterministic tests. */\n  retryDelayMs?: number;\n}\n\nexport interface SupabaseOAuthProfileVerificationInput {\n  correlationId: string;\n  provider: AuthOAuthProviderId;\n  session: AuthSession;\n}\n\nexport type SupabaseOAuthProfileVerificationResult = { ok: true } | { ok: false; message: string };\n\nexport type SupabaseOAuthProfileVerifier = (\n  input: SupabaseOAuthProfileVerificationInput,\n) => Promise<SupabaseOAuthProfileVerificationResult>;\n\nexport type SupabaseOAuthLifecycleStatus =\n  'started' | 'cancelled' | 'error' | 'profile_verified' | 'authenticated';\n\nexport interface SupabaseOAuthLifecycleEvent {\n  correlationId: string;\n  provider: AuthOAuthProviderId;\n  stage: AuthOAuthErrorStage;\n  status: SupabaseOAuthLifecycleStatus;\n  errorCode?: AuthOAuthErrorCode;\n}\n\n/**\n * Receives metadata-only OAuth lifecycle events. Events never contain callback URLs,\n * authorization codes, tokens, client secrets, private keys, or session payloads.\n */\nexport type SupabaseOAuthLifecycleObserver = (\n  event: SupabaseOAuthLifecycleEvent,\n) => void | Promise<void>;\n\nexport interface SupabaseAuthConfig {\n  url: string;\n  anonKey: string;\n  fetch?: SupabaseAuthFetch;\n  storage?: SupabaseAuthStorage;\n  storageKey?: string;\n  oauthProviders?: readonly AuthOAuthProviderId[];\n  oauthRandomBytes?: SupabaseAuthRandomBytes;\n  profileVerification?: SupabaseAuthProfileVerificationConfig;\n  onOAuthLifecycleEvent?: SupabaseOAuthLifecycleObserver;\n}\n\nexport type SupabaseAuthErrorCode =\n  | 'invalid_credentials'\n  | 'missing_identifier'\n  | 'missing_password'\n  | 'missing_refresh_token'\n  | 'network_error'\n  | 'provider_error'\n  | 'session_expired'\n  | 'session_persistence_failed'\n  | 'unsupported_identifier'\n  | 'validation_error';\n\nexport interface SupabaseProviderErrorCause {\n  status?: number;\n  body?: unknown;\n}\n"]}

package/package.json

@@ -1,6 +1,72 @@
 {
   "name": "@ankhorage/auth-supabase",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "type": "module",
+  "version": "2.0.0",
+  "description": "Supabase adapter implementing the provider-neutral Ankhorage auth port.",
+  "homepage": "https://github.com/ankhorage/auth-supabase#readme",
+  "bugs": {
+    "url": "https://github.com/ankhorage/auth-supabase/issues"
+  },
+  "license": "MIT",
+  "main": "./dist/index.js",
+  "sideEffects": false,
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ankhorage/auth-supabase.git"
+  },
+  "keywords": [
+    "adapter",
+    "ankhorage",
+    "auth",
+    "authentication",
+    "gotrue",
+    "oauth",
+    "secret-store",
+    "session",
+    "supabase",
+    "typescript"
+  ],
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "rm -rf dist tsconfig.tsbuildinfo && bun x tsc -p tsconfig.json",
+    "changeset": "ankhorage-changeset",
+    "changeset:status": "ankhorage-changeset status --since=origin/main",
+    "docs": "paradox && ankhorage-prettier --write paradox README.md",
+    "lint": "ankhorage-eslint . --max-warnings=0",
+    "lint:fix": "ankhorage-eslint . --fix --max-warnings=0",
+    "format": "ankhorage-prettier --write .",
+    "format:check": "ankhorage-prettier --check .",
+    "prepack": "bun run build",
+    "test": "bun test src",
+    "typecheck": "bun x tsc --noEmit -p tsconfig.json",
+    "version-packages": "ankhorage-changeset version",
+    "knip:check": "ankhorage-knip"
+  },
+  "devDependencies": {
+    "@ankhorage/devtools": "^2.3.14",
+    "@ankhorage/paradox": "^0.3.3",
+    "@types/bun": "^1.4.2",
+    "@types/node": "^26.6.5",
+    "typescript": "^6.0.3"
+  },
+  "dependencies": {
+    "@ankhorage/auth": "^0.1.2",
+    "@ankhorage/contracts": "^25.2.0",
+    "@noble/hashes": "2.4.0"
+  },
+  "packageManager": "bun@1.4.2"
+}