@authsome/ui-core 0.1.0

package/README.md

@@ -0,0 +1,164 @@
+# @authsome/ui-core
+
+Framework-agnostic authentication core for AuthSome UI.
+
+## Installation
+
+```bash
+pnpm add @authsome/ui-core
+```
+
+## Features
+
+- **Provider Adapters**: Built-in support for AuthSome, Clerk, Supabase, and custom backends
+- **Observable State**: Framework-agnostic state management
+- **Complete Auth Flows**: Email/password, OAuth, magic links, 2FA, passkeys, phone auth
+- **Type Safe**: Full TypeScript support
+- **Zero Dependencies**: Minimal footprint
+
+## Usage
+
+### Basic Setup with AuthSome
+
+```typescript
+import { AuthClient, AuthSomeAdapter } from '@authsome/ui-core';
+
+// Create adapter
+const adapter = new AuthSomeAdapter();
+await adapter.initialize({
+  apiUrl: 'https://your-api.com/auth',
+});
+
+// Create client
+const authClient = new AuthClient({
+  provider: adapter,
+  autoRefresh: true,
+});
+
+// Initialize
+await authClient.initialize();
+
+// Subscribe to auth state
+const unsubscribe = authClient.subscribe((state) => {
+  console.log('Auth state:', state);
+});
+
+// Sign in
+await authClient.signIn({
+  email: 'user@example.com',
+  password: 'password',
+});
+```
+
+### Using with Clerk
+
+```typescript
+import { AuthClient, ClerkAdapter } from '@authsome/ui-core';
+
+const adapter = new ClerkAdapter();
+await adapter.initialize({
+  publishableKey: 'pk_test_...',
+});
+
+const authClient = new AuthClient({ provider: adapter });
+```
+
+### Using with Supabase
+
+```typescript
+import { AuthClient, SupabaseAdapter } from '@authsome/ui-core';
+
+const adapter = new SupabaseAdapter();
+await adapter.initialize({
+  url: 'https://your-project.supabase.co',
+  anonKey: 'your-anon-key',
+});
+
+const authClient = new AuthClient({ provider: adapter });
+```
+
+### Custom Backend
+
+```typescript
+import { AuthClient, GenericAdapter } from '@authsome/ui-core';
+
+const adapter = new GenericAdapter();
+await adapter.initialize({
+  baseUrl: 'https://your-api.com',
+  endpoints: {
+    signIn: '/auth/login',
+    signUp: '/auth/register',
+    signOut: '/auth/logout',
+    getCurrentUser: '/auth/me',
+    // ... other endpoints
+  },
+  transforms: {
+    transformAuthResponse: (res) => ({
+      user: res.user,
+      session: res.session,
+    }),
+  },
+});
+
+const authClient = new AuthClient({ provider: adapter });
+```
+
+## API Reference
+
+### AuthClient
+
+The main authentication client.
+
+```typescript
+const client = new AuthClient({
+  provider: adapter,
+  autoRefresh: true, // Auto-refresh sessions
+  refreshInterval: 300000, // 5 minutes
+});
+```
+
+### Methods
+
+- `initialize()`: Initialize the client and restore session
+- `signIn(request)`: Sign in with credentials
+- `signUp(request)`: Register a new user
+- `signOut()`: Sign out current user
+- `updateUser(request)`: Update user profile
+- `changePassword(request)`: Change user password
+- `requestPasswordReset(request)`: Request password reset email
+- `confirmPasswordReset(request)`: Confirm password reset with token
+- `getOAuthUrl(request)`: Get OAuth authorization URL
+- `handleOAuthCallback(request)`: Handle OAuth callback
+- `sendMagicLink(request)`: Send magic link email
+- `verifyMagicLink(request)`: Verify magic link token
+- `sendPhoneCode(request)`: Send phone verification code
+- `verifyPhoneCode(request)`: Verify phone code
+- `setupTwoFactor(request)`: Setup 2FA
+- `verifyTwoFactor(request)`: Verify 2FA code
+- `disableTwoFactor()`: Disable 2FA
+- `getTwoFactorStatus()`: Get enabled 2FA methods
+- `registerPasskey(request)`: Register a passkey
+- `authenticatePasskey(request)`: Authenticate with passkey
+- `listPasskeys()`: List user's passkeys
+- `deletePasskey(id)`: Delete a passkey
+- `refreshSession()`: Manually refresh session
+- `subscribe(listener)`: Subscribe to auth state changes
+- `destroy()`: Cleanup resources
+
+### Auth State
+
+```typescript
+interface AuthContext {
+  state: AuthState; // AUTHENTICATED | UNAUTHENTICATED | LOADING | ERROR
+  user: User | null;
+  session: Session | null;
+  error: AuthError | null;
+  isAuthenticated: boolean;
+  isLoading: boolean;
+}
+```
+
+## License
+
+MIT
+

package/dist/adapters/index.d.mts

@@ -0,0 +1,57 @@
+import { c as AuthProvider, z as ProviderConfig, S as SignInRequest, y as AuthResponse, d as SignUpRequest, t as User, u as Session, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, a as AuthError } from '../provider-DXf_a2WT.mjs';
+
+/**
+ * Base auth provider implementation
+ */
+
+/**
+ * Base provider class with common functionality
+ */
+declare abstract class BaseAuthProvider implements AuthProvider {
+    abstract readonly name: string;
+    protected config: ProviderConfig;
+    protected initialized: boolean;
+    /**
+     * Initialize the provider
+     */
+    initialize(config: ProviderConfig): Promise<void>;
+    /**
+     * Ensure provider is initialized
+     */
+    protected ensureInitialized(): void;
+    /**
+     * Make HTTP request
+     */
+    protected request<T>(url: string, options?: RequestInit): Promise<T>;
+    abstract signIn(request: SignInRequest): Promise<AuthResponse>;
+    abstract signUp(request: SignUpRequest): Promise<AuthResponse>;
+    abstract signOut(): Promise<void>;
+    abstract getCurrentUser(): Promise<User | null>;
+    abstract getCurrentSession(): Promise<Session | null>;
+    abstract refreshSession(): Promise<Session>;
+    abstract updateUser(request: UpdateUserRequest): Promise<User>;
+    abstract changePassword(request: PasswordChangeRequest): Promise<void>;
+    abstract requestPasswordReset(request: PasswordResetRequest): Promise<void>;
+    abstract confirmPasswordReset(request: PasswordResetConfirmRequest): Promise<void>;
+    abstract oauthSignIn(request: OAuthSignInRequest): Promise<string>;
+    abstract oauthCallback(request: OAuthCallbackRequest): Promise<AuthResponse>;
+    abstract getOAuthProviders(): Promise<OAuthProvider[]>;
+    abstract sendMagicLink(request: MagicLinkRequest): Promise<void>;
+    abstract verifyMagicLink(request: MagicLinkVerifyRequest): Promise<AuthResponse>;
+    abstract sendPhoneCode(request: PhoneAuthRequest): Promise<void>;
+    abstract verifyPhoneCode(request: PhoneVerifyRequest): Promise<AuthResponse>;
+    abstract setupTwoFactor(request: TwoFactorSetupRequest): Promise<TwoFactorSetupResponse>;
+    abstract verifyTwoFactor(request: TwoFactorVerifyRequest): Promise<AuthResponse>;
+    abstract disableTwoFactor(): Promise<void>;
+    abstract getTwoFactorStatus(): Promise<TwoFactorMethod[]>;
+    abstract registerPasskey(request: PasskeyRegisterRequest): Promise<PasskeyCredential>;
+    abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;
+    abstract listPasskeys(): Promise<PasskeyCredential[]>;
+    abstract deletePasskey(credentialId: string): Promise<void>;
+    /**
+     * Normalize error to AuthError
+     */
+    normalizeError(error: unknown): AuthError;
+}
+
+export { BaseAuthProvider };

package/dist/adapters/index.d.ts

@@ -0,0 +1,57 @@
+import { c as AuthProvider, z as ProviderConfig, S as SignInRequest, y as AuthResponse, d as SignUpRequest, t as User, u as Session, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, a as AuthError } from '../provider-DXf_a2WT.js';
+
+/**
+ * Base auth provider implementation
+ */
+
+/**
+ * Base provider class with common functionality
+ */
+declare abstract class BaseAuthProvider implements AuthProvider {
+    abstract readonly name: string;
+    protected config: ProviderConfig;
+    protected initialized: boolean;
+    /**
+     * Initialize the provider
+     */
+    initialize(config: ProviderConfig): Promise<void>;
+    /**
+     * Ensure provider is initialized
+     */
+    protected ensureInitialized(): void;
+    /**
+     * Make HTTP request
+     */
+    protected request<T>(url: string, options?: RequestInit): Promise<T>;
+    abstract signIn(request: SignInRequest): Promise<AuthResponse>;
+    abstract signUp(request: SignUpRequest): Promise<AuthResponse>;
+    abstract signOut(): Promise<void>;
+    abstract getCurrentUser(): Promise<User | null>;
+    abstract getCurrentSession(): Promise<Session | null>;
+    abstract refreshSession(): Promise<Session>;
+    abstract updateUser(request: UpdateUserRequest): Promise<User>;
+    abstract changePassword(request: PasswordChangeRequest): Promise<void>;
+    abstract requestPasswordReset(request: PasswordResetRequest): Promise<void>;
+    abstract confirmPasswordReset(request: PasswordResetConfirmRequest): Promise<void>;
+    abstract oauthSignIn(request: OAuthSignInRequest): Promise<string>;
+    abstract oauthCallback(request: OAuthCallbackRequest): Promise<AuthResponse>;
+    abstract getOAuthProviders(): Promise<OAuthProvider[]>;
+    abstract sendMagicLink(request: MagicLinkRequest): Promise<void>;
+    abstract verifyMagicLink(request: MagicLinkVerifyRequest): Promise<AuthResponse>;
+    abstract sendPhoneCode(request: PhoneAuthRequest): Promise<void>;
+    abstract verifyPhoneCode(request: PhoneVerifyRequest): Promise<AuthResponse>;
+    abstract setupTwoFactor(request: TwoFactorSetupRequest): Promise<TwoFactorSetupResponse>;
+    abstract verifyTwoFactor(request: TwoFactorVerifyRequest): Promise<AuthResponse>;
+    abstract disableTwoFactor(): Promise<void>;
+    abstract getTwoFactorStatus(): Promise<TwoFactorMethod[]>;
+    abstract registerPasskey(request: PasskeyRegisterRequest): Promise<PasskeyCredential>;
+    abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;
+    abstract listPasskeys(): Promise<PasskeyCredential[]>;
+    abstract deletePasskey(credentialId: string): Promise<void>;
+    /**
+     * Normalize error to AuthError
+     */
+    normalizeError(error: unknown): AuthError;
+}
+
+export { BaseAuthProvider };

package/dist/adapters/index.js

@@ -0,0 +1,94 @@
+'use strict';
+
+// src/types/auth.ts
+var AuthError = class _AuthError extends Error {
+  constructor(message, type = "unknown_error" /* UNKNOWN_ERROR */, options) {
+    super(message);
+    this.name = "AuthError";
+    this.type = type;
+    this.details = options?.details;
+    this.code = options?.code;
+    this.originalError = options?.originalError;
+    if (Error.captureStackTrace) {
+      Error.captureStackTrace(this, _AuthError);
+    }
+  }
+};
+
+// src/utils/errors.ts
+function isAuthError(error) {
+  return error instanceof AuthError;
+}
+function toAuthError(error) {
+  if (isAuthError(error)) {
+    return error;
+  }
+  if (error instanceof Error) {
+    return new AuthError(error.message, "unknown_error" /* UNKNOWN_ERROR */, {
+      details: {
+        originalError: error.name,
+        stack: error.stack
+      }
+    });
+  }
+  if (typeof error === "string") {
+    return new AuthError(error, "unknown_error" /* UNKNOWN_ERROR */);
+  }
+  return new AuthError(
+    "An unknown error occurred",
+    "unknown_error" /* UNKNOWN_ERROR */,
+    { details: { error } }
+  );
+}
+
+// src/adapters/base-provider.ts
+var BaseAuthProvider = class {
+  constructor() {
+    this.config = {};
+    this.initialized = false;
+  }
+  /**
+   * Initialize the provider
+   */
+  async initialize(config) {
+    this.config = config;
+    this.initialized = true;
+  }
+  /**
+   * Ensure provider is initialized
+   */
+  ensureInitialized() {
+    if (!this.initialized) {
+      throw new Error(`Provider ${this.name} is not initialized`);
+    }
+  }
+  /**
+   * Make HTTP request
+   */
+  async request(url, options = {}) {
+    const response = await fetch(url, {
+      ...options,
+      headers: {
+        "Content-Type": "application/json",
+        ...options.headers
+      }
+    });
+    if (!response.ok) {
+      const error = await response.json().catch(() => ({
+        message: response.statusText
+      }));
+      throw error;
+    }
+    return response.json();
+  }
+  /**
+   * Normalize error to AuthError
+   */
+  normalizeError(error) {
+    return toAuthError(error);
+  }
+};
+
+exports.BaseAuthProvider = BaseAuthProvider;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types/auth.ts","../../src/utils/errors.ts","../../src/adapters/base-provider.ts"],"names":[],"mappings":";;;AAyEO,IAAM,SAAA,GAAN,MAAM,UAAA,SAAkB,KAAA,CAAM;AAAA,EAMnC,WAAA,CACE,OAAA,EACA,IAAA,GAAsB,eAAA,sBACtB,OAAA,EAKA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAU,OAAA,EAAS,OAAA;AACxB,IAAA,IAAA,CAAK,OAAO,OAAA,EAAS,IAAA;AACrB,IAAA,IAAA,CAAK,gBAAgB,OAAA,EAAS,aAAA;AAG9B,IAAA,IAAI,MAAM,iBAAA,EAAmB;AAC3B,MAAA,KAAA,CAAM,iBAAA,CAAkB,MAAM,UAAS,CAAA;AAAA,IACzC;AAAA,EACF;AACF,CAAA;;;AC7EO,SAAS,YAAY,KAAA,EAAoC;AAC9D,EAAA,OAAO,KAAA,YAAiB,SAAA;AAC1B;AAKO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,IAAI,SAAA,CAAU,KAAA,CAAM,OAAA,EAAA,eAAA,sBAAsC;AAAA,MAC/D,OAAA,EAAS;AAAA,QACP,eAAe,KAAA,CAAM,IAAA;AAAA,QACrB,OAAO,KAAA,CAAM;AAAA;AACf,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,UAAU,KAAA,EAAA,eAAA,qBAAkC;AAAA,EACzD;AAEA,EAAA,OAAO,IAAI,SAAA;AAAA,IACT,2BAAA;AAAA,IAAA,eAAA;AAAA,IAEA,EAAE,OAAA,EAAS,EAAE,KAAA,EAAM;AAAE,GACvB;AACF;;;AChBO,IAAe,mBAAf,MAAwD;AAAA,EAAxD,WAAA,GAAA;AAEL,IAAA,IAAA,CAAU,SAAyB,EAAC;AACpC,IAAA,IAAA,CAAU,WAAA,GAAc,KAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKxB,MAAM,WAAW,MAAA,EAAuC;AACtD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKU,iBAAA,GAA0B;AAClC,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,IAAA,CAAK,IAAI,CAAA,mBAAA,CAAqB,CAAA;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,OAAA,CACd,GAAA,EACA,OAAA,GAAuB,EAAC,EACZ;AACZ,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,GAAG,OAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,OAAA,CAAQ;AAAA;AACb,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,QAAQ,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,MAAM,OAAO;AAAA,QAC/C,SAAS,QAAA,CAAS;AAAA,OACpB,CAAE,CAAA;AACF,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,SAAS,IAAA,EAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAgCA,eAAe,KAAA,EAA2B;AACxC,IAAA,OAAO,YAAY,KAAK,CAAA;AAAA,EAC1B;AACF","file":"index.js","sourcesContent":["/**\n * Core authentication types and interfaces\n */\n\n/**\n * Authentication state enum\n */\nexport enum AuthState {\n  AUTHENTICATED = 'authenticated',\n  UNAUTHENTICATED = 'unauthenticated',\n  LOADING = 'loading',\n  ERROR = 'error',\n}\n\n/**\n * User profile interface\n */\nexport interface User {\n  id: string;\n  email?: string;\n  username?: string;\n  phone?: string;\n  emailVerified?: boolean;\n  phoneVerified?: boolean;\n  name?: string;\n  firstName?: string;\n  lastName?: string;\n  avatar?: string;\n  metadata?: Record<string, unknown>;\n  createdAt?: Date;\n  updatedAt?: Date;\n  \n  // Organization fields\n  organizationId?: string;\n  organizationRole?: string;\n  organizationMemberships?: OrganizationMembership[];\n}\n\n/**\n * Session interface\n */\nexport interface Session {\n  id: string;\n  userId: string;\n  token: string;\n  expiresAt?: Date;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Auth error types\n */\nexport enum AuthErrorType {\n  INVALID_CREDENTIALS = 'invalid_credentials',\n  USER_NOT_FOUND = 'user_not_found',\n  USER_ALREADY_EXISTS = 'user_already_exists',\n  INVALID_TOKEN = 'invalid_token',\n  TOKEN_EXPIRED = 'token_expired',\n  NETWORK_ERROR = 'network_error',\n  VALIDATION_ERROR = 'validation_error',\n  MFA_REQUIRED = 'mfa_required',\n  EMAIL_NOT_VERIFIED = 'email_not_verified',\n  PHONE_NOT_VERIFIED = 'phone_not_verified',\n  RATE_LIMIT_EXCEEDED = 'rate_limit_exceeded',\n  UNKNOWN_ERROR = 'unknown_error',\n}\n\n/**\n * Auth error class\n * \n * Extends Error to provide proper error handling with auth-specific context\n */\nexport class AuthError extends Error {\n  public readonly type: AuthErrorType;\n  public readonly details?: Record<string, unknown>;\n  public readonly code?: string | number;\n  public readonly originalError?: unknown;\n\n  constructor(\n    message: string,\n    type: AuthErrorType = AuthErrorType.UNKNOWN_ERROR,\n    options?: {\n      details?: Record<string, unknown>;\n      code?: string | number;\n      originalError?: unknown;\n    }\n  ) {\n    super(message);\n    this.name = 'AuthError';\n    this.type = type;\n    this.details = options?.details;\n    this.code = options?.code;\n    this.originalError = options?.originalError;\n\n    // Maintains proper stack trace for where our error was thrown (only available on V8)\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, AuthError);\n    }\n  }\n}\n\n/**\n * Auth context state\n */\nexport interface AuthContext {\n  state: AuthState;\n  user: User | null;\n  session: Session | null;\n  error: AuthError | null;\n  isAuthenticated: boolean;\n  isLoading: boolean;\n}\n\n/**\n * OAuth provider types\n */\nexport enum OAuthProvider {\n  GOOGLE = 'google',\n  GITHUB = 'github',\n  FACEBOOK = 'facebook',\n  TWITTER = 'twitter',\n  MICROSOFT = 'microsoft',\n  APPLE = 'apple',\n  LINKEDIN = 'linkedin',\n  DISCORD = 'discord',\n}\n\n/**\n * OAuth configuration\n */\nexport interface OAuthConfig {\n  provider: OAuthProvider;\n  clientId: string;\n  redirectUri: string;\n  scope?: string[];\n  state?: string;\n}\n\n/**\n * 2FA method types\n */\nexport enum TwoFactorMethod {\n  TOTP = 'totp',\n  SMS = 'sms',\n  EMAIL = 'email',\n  BACKUP_CODE = 'backup_code',\n}\n\n/**\n * 2FA configuration\n */\nexport interface TwoFactorConfig {\n  method: TwoFactorMethod;\n  enabled: boolean;\n  verified?: boolean;\n}\n\n/**\n * Passkey/WebAuthn types\n */\nexport interface PasskeyCredential {\n  id: string;\n  name?: string;\n  createdAt?: Date;\n  lastUsedAt?: Date;\n}\n\n/**\n * Validation error\n */\nexport interface ValidationError {\n  field: string;\n  message: string;\n  code?: string;\n}\n\n/**\n * Organization interface\n */\nexport interface Organization {\n  id: string;\n  name: string;\n  slug: string;\n  logoUrl?: string;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Organization membership interface\n */\nexport interface OrganizationMembership {\n  organization: Organization;\n  role: 'owner' | 'admin' | 'member';\n  permissions?: string[];\n}\n\n","/**\n * Error handling utilities\n */\n\nimport { AuthError, AuthErrorType } from '../types';\n\n/**\n * Create an auth error\n * \n * @deprecated Use `new AuthError()` directly instead\n */\nexport function createAuthError(\n  type: AuthErrorType,\n  message: string,\n  details?: Record<string, unknown>,\n  code?: string | number\n): AuthError {\n  return new AuthError(message, type, { details, code });\n}\n\n/**\n * Check if an error is an auth error\n */\nexport function isAuthError(error: unknown): error is AuthError {\n  return error instanceof AuthError;\n}\n\n/**\n * Convert unknown error to auth error\n */\nexport function toAuthError(error: unknown): AuthError {\n  if (isAuthError(error)) {\n    return error;\n  }\n\n  if (error instanceof Error) {\n    return new AuthError(error.message, AuthErrorType.UNKNOWN_ERROR, {\n      details: {\n        originalError: error.name,\n        stack: error.stack,\n      },\n    });\n  }\n\n  if (typeof error === 'string') {\n    return new AuthError(error, AuthErrorType.UNKNOWN_ERROR);\n  }\n\n  return new AuthError(\n    'An unknown error occurred',\n    AuthErrorType.UNKNOWN_ERROR,\n    { details: { error } }\n  );\n}\n\n/**\n * Check if error is a network error\n */\nexport function isNetworkError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return (\n      error.name === 'NetworkError' ||\n      error.message.includes('network') ||\n      error.message.includes('fetch')\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error indicates authentication is required\n */\nexport function isUnauthenticatedError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return (\n      error.type === AuthErrorType.INVALID_TOKEN ||\n      error.type === AuthErrorType.TOKEN_EXPIRED\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error requires MFA\n */\nexport function isMFARequiredError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return error.type === AuthErrorType.MFA_REQUIRED;\n  }\n  return false;\n}\n","/**\n * Base auth provider implementation\n */\n\nimport type {\n  AuthProvider,\n  AuthResponse,\n  SignInRequest,\n  SignUpRequest,\n  UpdateUserRequest,\n  PasswordChangeRequest,\n  PasswordResetRequest,\n  PasswordResetConfirmRequest,\n  OAuthSignInRequest,\n  OAuthCallbackRequest,\n  MagicLinkRequest,\n  MagicLinkVerifyRequest,\n  PhoneAuthRequest,\n  PhoneVerifyRequest,\n  TwoFactorSetupRequest,\n  TwoFactorSetupResponse,\n  TwoFactorVerifyRequest,\n  PasskeyRegisterRequest,\n  PasskeyAuthRequest,\n  User,\n  Session,\n  OAuthProvider,\n  TwoFactorMethod,\n  PasskeyCredential,\n  AuthError,\n  ProviderConfig,\n} from '../types';\nimport { toAuthError } from '../utils';\n\n/**\n * Base provider class with common functionality\n */\nexport abstract class BaseAuthProvider implements AuthProvider {\n  abstract readonly name: string;\n  protected config: ProviderConfig = {};\n  protected initialized = false;\n\n  /**\n   * Initialize the provider\n   */\n  async initialize(config: ProviderConfig): Promise<void> {\n    this.config = config;\n    this.initialized = true;\n  }\n\n  /**\n   * Ensure provider is initialized\n   */\n  protected ensureInitialized(): void {\n    if (!this.initialized) {\n      throw new Error(`Provider ${this.name} is not initialized`);\n    }\n  }\n\n  /**\n   * Make HTTP request\n   */\n  protected async request<T>(\n    url: string,\n    options: RequestInit = {}\n  ): Promise<T> {\n    const response = await fetch(url, {\n      ...options,\n      headers: {\n        'Content-Type': 'application/json',\n        ...options.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.json().catch(() => ({\n        message: response.statusText,\n      }));\n      throw error;\n    }\n\n    return response.json();\n  }\n\n  // Abstract methods that must be implemented by subclasses\n  abstract signIn(request: SignInRequest): Promise<AuthResponse>;\n  abstract signUp(request: SignUpRequest): Promise<AuthResponse>;\n  abstract signOut(): Promise<void>;\n  abstract getCurrentUser(): Promise<User | null>;\n  abstract getCurrentSession(): Promise<Session | null>;\n  abstract refreshSession(): Promise<Session>;\n  abstract updateUser(request: UpdateUserRequest): Promise<User>;\n  abstract changePassword(request: PasswordChangeRequest): Promise<void>;\n  abstract requestPasswordReset(request: PasswordResetRequest): Promise<void>;\n  abstract confirmPasswordReset(request: PasswordResetConfirmRequest): Promise<void>;\n  abstract oauthSignIn(request: OAuthSignInRequest): Promise<string>;\n  abstract oauthCallback(request: OAuthCallbackRequest): Promise<AuthResponse>;\n  abstract getOAuthProviders(): Promise<OAuthProvider[]>;\n  abstract sendMagicLink(request: MagicLinkRequest): Promise<void>;\n  abstract verifyMagicLink(request: MagicLinkVerifyRequest): Promise<AuthResponse>;\n  abstract sendPhoneCode(request: PhoneAuthRequest): Promise<void>;\n  abstract verifyPhoneCode(request: PhoneVerifyRequest): Promise<AuthResponse>;\n  abstract setupTwoFactor(request: TwoFactorSetupRequest): Promise<TwoFactorSetupResponse>;\n  abstract verifyTwoFactor(request: TwoFactorVerifyRequest): Promise<AuthResponse>;\n  abstract disableTwoFactor(): Promise<void>;\n  abstract getTwoFactorStatus(): Promise<TwoFactorMethod[]>;\n  abstract registerPasskey(request: PasskeyRegisterRequest): Promise<PasskeyCredential>;\n  abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;\n  abstract listPasskeys(): Promise<PasskeyCredential[]>;\n  abstract deletePasskey(credentialId: string): Promise<void>;\n\n  /**\n   * Normalize error to AuthError\n   */\n  normalizeError(error: unknown): AuthError {\n    return toAuthError(error);\n  }\n}\n\n"]}

package/dist/adapters/index.mjs

@@ -0,0 +1,92 @@
+// src/types/auth.ts
+var AuthError = class _AuthError extends Error {
+  constructor(message, type = "unknown_error" /* UNKNOWN_ERROR */, options) {
+    super(message);
+    this.name = "AuthError";
+    this.type = type;
+    this.details = options?.details;
+    this.code = options?.code;
+    this.originalError = options?.originalError;
+    if (Error.captureStackTrace) {
+      Error.captureStackTrace(this, _AuthError);
+    }
+  }
+};
+
+// src/utils/errors.ts
+function isAuthError(error) {
+  return error instanceof AuthError;
+}
+function toAuthError(error) {
+  if (isAuthError(error)) {
+    return error;
+  }
+  if (error instanceof Error) {
+    return new AuthError(error.message, "unknown_error" /* UNKNOWN_ERROR */, {
+      details: {
+        originalError: error.name,
+        stack: error.stack
+      }
+    });
+  }
+  if (typeof error === "string") {
+    return new AuthError(error, "unknown_error" /* UNKNOWN_ERROR */);
+  }
+  return new AuthError(
+    "An unknown error occurred",
+    "unknown_error" /* UNKNOWN_ERROR */,
+    { details: { error } }
+  );
+}
+
+// src/adapters/base-provider.ts
+var BaseAuthProvider = class {
+  constructor() {
+    this.config = {};
+    this.initialized = false;
+  }
+  /**
+   * Initialize the provider
+   */
+  async initialize(config) {
+    this.config = config;
+    this.initialized = true;
+  }
+  /**
+   * Ensure provider is initialized
+   */
+  ensureInitialized() {
+    if (!this.initialized) {
+      throw new Error(`Provider ${this.name} is not initialized`);
+    }
+  }
+  /**
+   * Make HTTP request
+   */
+  async request(url, options = {}) {
+    const response = await fetch(url, {
+      ...options,
+      headers: {
+        "Content-Type": "application/json",
+        ...options.headers
+      }
+    });
+    if (!response.ok) {
+      const error = await response.json().catch(() => ({
+        message: response.statusText
+      }));
+      throw error;
+    }
+    return response.json();
+  }
+  /**
+   * Normalize error to AuthError
+   */
+  normalizeError(error) {
+    return toAuthError(error);
+  }
+};
+
+export { BaseAuthProvider };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/adapters/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types/auth.ts","../../src/utils/errors.ts","../../src/adapters/base-provider.ts"],"names":[],"mappings":";AAyEO,IAAM,SAAA,GAAN,MAAM,UAAA,SAAkB,KAAA,CAAM;AAAA,EAMnC,WAAA,CACE,OAAA,EACA,IAAA,GAAsB,eAAA,sBACtB,OAAA,EAKA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAU,OAAA,EAAS,OAAA;AACxB,IAAA,IAAA,CAAK,OAAO,OAAA,EAAS,IAAA;AACrB,IAAA,IAAA,CAAK,gBAAgB,OAAA,EAAS,aAAA;AAG9B,IAAA,IAAI,MAAM,iBAAA,EAAmB;AAC3B,MAAA,KAAA,CAAM,iBAAA,CAAkB,MAAM,UAAS,CAAA;AAAA,IACzC;AAAA,EACF;AACF,CAAA;;;AC7EO,SAAS,YAAY,KAAA,EAAoC;AAC9D,EAAA,OAAO,KAAA,YAAiB,SAAA;AAC1B;AAKO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,IAAI,SAAA,CAAU,KAAA,CAAM,OAAA,EAAA,eAAA,sBAAsC;AAAA,MAC/D,OAAA,EAAS;AAAA,QACP,eAAe,KAAA,CAAM,IAAA;AAAA,QACrB,OAAO,KAAA,CAAM;AAAA;AACf,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,UAAU,KAAA,EAAA,eAAA,qBAAkC;AAAA,EACzD;AAEA,EAAA,OAAO,IAAI,SAAA;AAAA,IACT,2BAAA;AAAA,IAAA,eAAA;AAAA,IAEA,EAAE,OAAA,EAAS,EAAE,KAAA,EAAM;AAAE,GACvB;AACF;;;AChBO,IAAe,mBAAf,MAAwD;AAAA,EAAxD,WAAA,GAAA;AAEL,IAAA,IAAA,CAAU,SAAyB,EAAC;AACpC,IAAA,IAAA,CAAU,WAAA,GAAc,KAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKxB,MAAM,WAAW,MAAA,EAAuC;AACtD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKU,iBAAA,GAA0B;AAClC,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,IAAA,CAAK,IAAI,CAAA,mBAAA,CAAqB,CAAA;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,OAAA,CACd,GAAA,EACA,OAAA,GAAuB,EAAC,EACZ;AACZ,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,GAAG,OAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,OAAA,CAAQ;AAAA;AACb,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,QAAQ,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,MAAM,OAAO;AAAA,QAC/C,SAAS,QAAA,CAAS;AAAA,OACpB,CAAE,CAAA;AACF,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,SAAS,IAAA,EAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAgCA,eAAe,KAAA,EAA2B;AACxC,IAAA,OAAO,YAAY,KAAK,CAAA;AAAA,EAC1B;AACF","file":"index.mjs","sourcesContent":["/**\n * Core authentication types and interfaces\n */\n\n/**\n * Authentication state enum\n */\nexport enum AuthState {\n  AUTHENTICATED = 'authenticated',\n  UNAUTHENTICATED = 'unauthenticated',\n  LOADING = 'loading',\n  ERROR = 'error',\n}\n\n/**\n * User profile interface\n */\nexport interface User {\n  id: string;\n  email?: string;\n  username?: string;\n  phone?: string;\n  emailVerified?: boolean;\n  phoneVerified?: boolean;\n  name?: string;\n  firstName?: string;\n  lastName?: string;\n  avatar?: string;\n  metadata?: Record<string, unknown>;\n  createdAt?: Date;\n  updatedAt?: Date;\n  \n  // Organization fields\n  organizationId?: string;\n  organizationRole?: string;\n  organizationMemberships?: OrganizationMembership[];\n}\n\n/**\n * Session interface\n */\nexport interface Session {\n  id: string;\n  userId: string;\n  token: string;\n  expiresAt?: Date;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Auth error types\n */\nexport enum AuthErrorType {\n  INVALID_CREDENTIALS = 'invalid_credentials',\n  USER_NOT_FOUND = 'user_not_found',\n  USER_ALREADY_EXISTS = 'user_already_exists',\n  INVALID_TOKEN = 'invalid_token',\n  TOKEN_EXPIRED = 'token_expired',\n  NETWORK_ERROR = 'network_error',\n  VALIDATION_ERROR = 'validation_error',\n  MFA_REQUIRED = 'mfa_required',\n  EMAIL_NOT_VERIFIED = 'email_not_verified',\n  PHONE_NOT_VERIFIED = 'phone_not_verified',\n  RATE_LIMIT_EXCEEDED = 'rate_limit_exceeded',\n  UNKNOWN_ERROR = 'unknown_error',\n}\n\n/**\n * Auth error class\n * \n * Extends Error to provide proper error handling with auth-specific context\n */\nexport class AuthError extends Error {\n  public readonly type: AuthErrorType;\n  public readonly details?: Record<string, unknown>;\n  public readonly code?: string | number;\n  public readonly originalError?: unknown;\n\n  constructor(\n    message: string,\n    type: AuthErrorType = AuthErrorType.UNKNOWN_ERROR,\n    options?: {\n      details?: Record<string, unknown>;\n      code?: string | number;\n      originalError?: unknown;\n    }\n  ) {\n    super(message);\n    this.name = 'AuthError';\n    this.type = type;\n    this.details = options?.details;\n    this.code = options?.code;\n    this.originalError = options?.originalError;\n\n    // Maintains proper stack trace for where our error was thrown (only available on V8)\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, AuthError);\n    }\n  }\n}\n\n/**\n * Auth context state\n */\nexport interface AuthContext {\n  state: AuthState;\n  user: User | null;\n  session: Session | null;\n  error: AuthError | null;\n  isAuthenticated: boolean;\n  isLoading: boolean;\n}\n\n/**\n * OAuth provider types\n */\nexport enum OAuthProvider {\n  GOOGLE = 'google',\n  GITHUB = 'github',\n  FACEBOOK = 'facebook',\n  TWITTER = 'twitter',\n  MICROSOFT = 'microsoft',\n  APPLE = 'apple',\n  LINKEDIN = 'linkedin',\n  DISCORD = 'discord',\n}\n\n/**\n * OAuth configuration\n */\nexport interface OAuthConfig {\n  provider: OAuthProvider;\n  clientId: string;\n  redirectUri: string;\n  scope?: string[];\n  state?: string;\n}\n\n/**\n * 2FA method types\n */\nexport enum TwoFactorMethod {\n  TOTP = 'totp',\n  SMS = 'sms',\n  EMAIL = 'email',\n  BACKUP_CODE = 'backup_code',\n}\n\n/**\n * 2FA configuration\n */\nexport interface TwoFactorConfig {\n  method: TwoFactorMethod;\n  enabled: boolean;\n  verified?: boolean;\n}\n\n/**\n * Passkey/WebAuthn types\n */\nexport interface PasskeyCredential {\n  id: string;\n  name?: string;\n  createdAt?: Date;\n  lastUsedAt?: Date;\n}\n\n/**\n * Validation error\n */\nexport interface ValidationError {\n  field: string;\n  message: string;\n  code?: string;\n}\n\n/**\n * Organization interface\n */\nexport interface Organization {\n  id: string;\n  name: string;\n  slug: string;\n  logoUrl?: string;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Organization membership interface\n */\nexport interface OrganizationMembership {\n  organization: Organization;\n  role: 'owner' | 'admin' | 'member';\n  permissions?: string[];\n}\n\n","/**\n * Error handling utilities\n */\n\nimport { AuthError, AuthErrorType } from '../types';\n\n/**\n * Create an auth error\n * \n * @deprecated Use `new AuthError()` directly instead\n */\nexport function createAuthError(\n  type: AuthErrorType,\n  message: string,\n  details?: Record<string, unknown>,\n  code?: string | number\n): AuthError {\n  return new AuthError(message, type, { details, code });\n}\n\n/**\n * Check if an error is an auth error\n */\nexport function isAuthError(error: unknown): error is AuthError {\n  return error instanceof AuthError;\n}\n\n/**\n * Convert unknown error to auth error\n */\nexport function toAuthError(error: unknown): AuthError {\n  if (isAuthError(error)) {\n    return error;\n  }\n\n  if (error instanceof Error) {\n    return new AuthError(error.message, AuthErrorType.UNKNOWN_ERROR, {\n      details: {\n        originalError: error.name,\n        stack: error.stack,\n      },\n    });\n  }\n\n  if (typeof error === 'string') {\n    return new AuthError(error, AuthErrorType.UNKNOWN_ERROR);\n  }\n\n  return new AuthError(\n    'An unknown error occurred',\n    AuthErrorType.UNKNOWN_ERROR,\n    { details: { error } }\n  );\n}\n\n/**\n * Check if error is a network error\n */\nexport function isNetworkError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return (\n      error.name === 'NetworkError' ||\n      error.message.includes('network') ||\n      error.message.includes('fetch')\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error indicates authentication is required\n */\nexport function isUnauthenticatedError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return (\n      error.type === AuthErrorType.INVALID_TOKEN ||\n      error.type === AuthErrorType.TOKEN_EXPIRED\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error requires MFA\n */\nexport function isMFARequiredError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return error.type === AuthErrorType.MFA_REQUIRED;\n  }\n  return false;\n}\n","/**\n * Base auth provider implementation\n */\n\nimport type {\n  AuthProvider,\n  AuthResponse,\n  SignInRequest,\n  SignUpRequest,\n  UpdateUserRequest,\n  PasswordChangeRequest,\n  PasswordResetRequest,\n  PasswordResetConfirmRequest,\n  OAuthSignInRequest,\n  OAuthCallbackRequest,\n  MagicLinkRequest,\n  MagicLinkVerifyRequest,\n  PhoneAuthRequest,\n  PhoneVerifyRequest,\n  TwoFactorSetupRequest,\n  TwoFactorSetupResponse,\n  TwoFactorVerifyRequest,\n  PasskeyRegisterRequest,\n  PasskeyAuthRequest,\n  User,\n  Session,\n  OAuthProvider,\n  TwoFactorMethod,\n  PasskeyCredential,\n  AuthError,\n  ProviderConfig,\n} from '../types';\nimport { toAuthError } from '../utils';\n\n/**\n * Base provider class with common functionality\n */\nexport abstract class BaseAuthProvider implements AuthProvider {\n  abstract readonly name: string;\n  protected config: ProviderConfig = {};\n  protected initialized = false;\n\n  /**\n   * Initialize the provider\n   */\n  async initialize(config: ProviderConfig): Promise<void> {\n    this.config = config;\n    this.initialized = true;\n  }\n\n  /**\n   * Ensure provider is initialized\n   */\n  protected ensureInitialized(): void {\n    if (!this.initialized) {\n      throw new Error(`Provider ${this.name} is not initialized`);\n    }\n  }\n\n  /**\n   * Make HTTP request\n   */\n  protected async request<T>(\n    url: string,\n    options: RequestInit = {}\n  ): Promise<T> {\n    const response = await fetch(url, {\n      ...options,\n      headers: {\n        'Content-Type': 'application/json',\n        ...options.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.json().catch(() => ({\n        message: response.statusText,\n      }));\n      throw error;\n    }\n\n    return response.json();\n  }\n\n  // Abstract methods that must be implemented by subclasses\n  abstract signIn(request: SignInRequest): Promise<AuthResponse>;\n  abstract signUp(request: SignUpRequest): Promise<AuthResponse>;\n  abstract signOut(): Promise<void>;\n  abstract getCurrentUser(): Promise<User | null>;\n  abstract getCurrentSession(): Promise<Session | null>;\n  abstract refreshSession(): Promise<Session>;\n  abstract updateUser(request: UpdateUserRequest): Promise<User>;\n  abstract changePassword(request: PasswordChangeRequest): Promise<void>;\n  abstract requestPasswordReset(request: PasswordResetRequest): Promise<void>;\n  abstract confirmPasswordReset(request: PasswordResetConfirmRequest): Promise<void>;\n  abstract oauthSignIn(request: OAuthSignInRequest): Promise<string>;\n  abstract oauthCallback(request: OAuthCallbackRequest): Promise<AuthResponse>;\n  abstract getOAuthProviders(): Promise<OAuthProvider[]>;\n  abstract sendMagicLink(request: MagicLinkRequest): Promise<void>;\n  abstract verifyMagicLink(request: MagicLinkVerifyRequest): Promise<AuthResponse>;\n  abstract sendPhoneCode(request: PhoneAuthRequest): Promise<void>;\n  abstract verifyPhoneCode(request: PhoneVerifyRequest): Promise<AuthResponse>;\n  abstract setupTwoFactor(request: TwoFactorSetupRequest): Promise<TwoFactorSetupResponse>;\n  abstract verifyTwoFactor(request: TwoFactorVerifyRequest): Promise<AuthResponse>;\n  abstract disableTwoFactor(): Promise<void>;\n  abstract getTwoFactorStatus(): Promise<TwoFactorMethod[]>;\n  abstract registerPasskey(request: PasskeyRegisterRequest): Promise<PasskeyCredential>;\n  abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;\n  abstract listPasskeys(): Promise<PasskeyCredential[]>;\n  abstract deletePasskey(credentialId: string): Promise<void>;\n\n  /**\n   * Normalize error to AuthError\n   */\n  normalizeError(error: unknown): AuthError {\n    return toAuthError(error);\n  }\n}\n\n"]}