@authsome/ui-core 0.1.3 → 0.1.5

package/dist/adapters/index.d.mts

@@ -1,4 +1,4 @@
-import { c as AuthProvider, C as ProviderConfig, S as SignInRequest, B as AuthResponse, d as SignUpRequest, t as User, u as Session, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, a as AuthError } from '../provider-C8km9A8U.mjs';
+import { c as AuthProvider, E as ProviderConfig, S as SignInRequest, D as AuthResponse, d as SignUpRequest, t as User, u as Session, w as SessionData, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, R as RequestContext, C as CookieData, a as AuthError } from '../provider-KGfwPsXv.mjs';
 
 /**
  * Base auth provider implementation
@@ -28,6 +28,7 @@ declare abstract class BaseAuthProvider implements AuthProvider {
     abstract signOut(): Promise<void>;
     abstract getCurrentUser(): Promise<User | null>;
     abstract getCurrentSession(): Promise<Session | null>;
+    abstract getCurrentSessionData(): Promise<SessionData | null>;
     abstract refreshSession(): Promise<Session>;
     abstract updateUser(request: UpdateUserRequest): Promise<User>;
     abstract changePassword(request: PasswordChangeRequest): Promise<void>;
@@ -48,6 +49,13 @@ declare abstract class BaseAuthProvider implements AuthProvider {
     abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;
     abstract listPasskeys(): Promise<PasskeyCredential[]>;
     abstract deletePasskey(credentialId: string): Promise<void>;
+    /**
+     * Optional edge runtime context methods
+     * Default implementations do nothing - subclasses can override
+     */
+    setContext?(context: RequestContext): void;
+    getCookies?(): CookieData[];
+    clearContext?(): void;
     /**
      * Normalize error to AuthError
      */

package/dist/adapters/index.d.ts

@@ -1,4 +1,4 @@
-import { c as AuthProvider, C as ProviderConfig, S as SignInRequest, B as AuthResponse, d as SignUpRequest, t as User, u as Session, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, a as AuthError } from '../provider-C8km9A8U.js';
+import { c as AuthProvider, E as ProviderConfig, S as SignInRequest, D as AuthResponse, d as SignUpRequest, t as User, u as Session, w as SessionData, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, R as RequestContext, C as CookieData, a as AuthError } from '../provider-KGfwPsXv.js';
 
 /**
  * Base auth provider implementation
@@ -28,6 +28,7 @@ declare abstract class BaseAuthProvider implements AuthProvider {
     abstract signOut(): Promise<void>;
     abstract getCurrentUser(): Promise<User | null>;
     abstract getCurrentSession(): Promise<Session | null>;
+    abstract getCurrentSessionData(): Promise<SessionData | null>;
     abstract refreshSession(): Promise<Session>;
     abstract updateUser(request: UpdateUserRequest): Promise<User>;
     abstract changePassword(request: PasswordChangeRequest): Promise<void>;
@@ -48,6 +49,13 @@ declare abstract class BaseAuthProvider implements AuthProvider {
     abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;
     abstract listPasskeys(): Promise<PasskeyCredential[]>;
     abstract deletePasskey(credentialId: string): Promise<void>;
+    /**
+     * Optional edge runtime context methods
+     * Default implementations do nothing - subclasses can override
+     */
+    setContext?(context: RequestContext): void;
+    getCookies?(): CookieData[];
+    clearContext?(): void;
     /**
      * Normalize error to AuthError
      */

package/dist/adapters/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/types/auth.ts","../../src/utils/errors.ts","../../src/adapters/base-provider.ts"],"names":[],"mappings":";;;AAyEO,IAAM,SAAA,GAAN,MAAM,UAAA,SAAkB,KAAA,CAAM;AAAA,EAMnC,WAAA,CACE,OAAA,EACA,IAAA,GAAsB,eAAA,sBACtB,OAAA,EAKA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAU,OAAA,EAAS,OAAA;AACxB,IAAA,IAAA,CAAK,OAAO,OAAA,EAAS,IAAA;AACrB,IAAA,IAAA,CAAK,gBAAgB,OAAA,EAAS,aAAA;AAG9B,IAAA,IAAI,MAAM,iBAAA,EAAmB;AAC3B,MAAA,KAAA,CAAM,iBAAA,CAAkB,MAAM,UAAS,CAAA;AAAA,IACzC;AAAA,EACF;AACF,CAAA;;;AC7EO,SAAS,YAAY,KAAA,EAAoC;AAC9D,EAAA,OAAO,KAAA,YAAiB,SAAA;AAC1B;AAKO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,IAAI,SAAA,CAAU,KAAA,CAAM,OAAA,EAAA,eAAA,sBAAsC;AAAA,MAC/D,OAAA,EAAS;AAAA,QACP,eAAe,KAAA,CAAM,IAAA;AAAA,QACrB,OAAO,KAAA,CAAM;AAAA;AACf,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,UAAU,KAAA,EAAA,eAAA,qBAAkC;AAAA,EACzD;AAEA,EAAA,OAAO,IAAI,SAAA;AAAA,IACT,2BAAA;AAAA,IAAA,eAAA;AAAA,IAEA,EAAE,OAAA,EAAS,EAAE,KAAA,EAAM;AAAE,GACvB;AACF;;;AChBO,IAAe,mBAAf,MAAwD;AAAA,EAAxD,WAAA,GAAA;AAEL,IAAA,IAAA,CAAU,SAAyB,EAAC;AACpC,IAAA,IAAA,CAAU,WAAA,GAAc,KAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKxB,MAAM,WAAW,MAAA,EAAuC;AACtD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKU,iBAAA,GAA0B;AAClC,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,IAAA,CAAK,IAAI,CAAA,mBAAA,CAAqB,CAAA;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,OAAA,CACd,GAAA,EACA,OAAA,GAAuB,EAAC,EACZ;AACZ,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,GAAG,OAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,OAAA,CAAQ;AAAA;AACb,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,QAAQ,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,MAAM,OAAO;AAAA,QAC/C,SAAS,QAAA,CAAS;AAAA,OACpB,CAAE,CAAA;AACF,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,SAAS,IAAA,EAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAgCA,eAAe,KAAA,EAA2B;AACxC,IAAA,OAAO,YAAY,KAAK,CAAA;AAAA,EAC1B;AACF","file":"index.js","sourcesContent":["/**\n * Core authentication types and interfaces\n */\n\n/**\n * Authentication state enum\n */\nexport enum AuthState {\n  AUTHENTICATED = 'authenticated',\n  UNAUTHENTICATED = 'unauthenticated',\n  LOADING = 'loading',\n  ERROR = 'error',\n}\n\n/**\n * User profile interface\n */\nexport interface User {\n  id: string;\n  email?: string;\n  username?: string;\n  phone?: string;\n  emailVerified?: boolean;\n  phoneVerified?: boolean;\n  name?: string;\n  firstName?: string;\n  lastName?: string;\n  avatar?: string;\n  metadata?: Record<string, unknown>;\n  createdAt?: Date;\n  updatedAt?: Date;\n  \n  // Organization fields\n  organizationId?: string;\n  organizationRole?: string;\n  organizationMemberships?: OrganizationMembership[];\n}\n\n/**\n * Session interface\n */\nexport interface Session {\n  id: string;\n  userId: string;\n  token: string;\n  expiresAt?: Date;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Auth error types\n */\nexport enum AuthErrorType {\n  INVALID_CREDENTIALS = 'invalid_credentials',\n  USER_NOT_FOUND = 'user_not_found',\n  USER_ALREADY_EXISTS = 'user_already_exists',\n  INVALID_TOKEN = 'invalid_token',\n  TOKEN_EXPIRED = 'token_expired',\n  NETWORK_ERROR = 'network_error',\n  VALIDATION_ERROR = 'validation_error',\n  MFA_REQUIRED = 'mfa_required',\n  EMAIL_NOT_VERIFIED = 'email_not_verified',\n  PHONE_NOT_VERIFIED = 'phone_not_verified',\n  RATE_LIMIT_EXCEEDED = 'rate_limit_exceeded',\n  UNKNOWN_ERROR = 'unknown_error',\n}\n\n/**\n * Auth error class\n * \n * Extends Error to provide proper error handling with auth-specific context\n */\nexport class AuthError extends Error {\n  public readonly type: AuthErrorType;\n  public readonly details?: Record<string, unknown>;\n  public readonly code?: string | number;\n  public readonly originalError?: unknown;\n\n  constructor(\n    message: string,\n    type: AuthErrorType = AuthErrorType.UNKNOWN_ERROR,\n    options?: {\n      details?: Record<string, unknown>;\n      code?: string | number;\n      originalError?: unknown;\n    }\n  ) {\n    super(message);\n    this.name = 'AuthError';\n    this.type = type;\n    this.details = options?.details;\n    this.code = options?.code;\n    this.originalError = options?.originalError;\n\n    // Maintains proper stack trace for where our error was thrown (only available on V8)\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, AuthError);\n    }\n  }\n}\n\n/**\n * Auth context state\n */\nexport interface AuthContext {\n  state: AuthState;\n  user: User | null;\n  session: Session | null;\n  error: AuthError | null;\n  isAuthenticated: boolean;\n  isLoading: boolean;\n}\n\n/**\n * OAuth provider types\n */\nexport enum OAuthProvider {\n  GOOGLE = 'google',\n  GITHUB = 'github',\n  FACEBOOK = 'facebook',\n  TWITTER = 'twitter',\n  MICROSOFT = 'microsoft',\n  APPLE = 'apple',\n  LINKEDIN = 'linkedin',\n  DISCORD = 'discord',\n}\n\n/**\n * OAuth configuration\n */\nexport interface OAuthConfig {\n  provider: OAuthProvider;\n  clientId: string;\n  redirectUri: string;\n  scope?: string[];\n  state?: string;\n}\n\n/**\n * 2FA method types\n */\nexport enum TwoFactorMethod {\n  TOTP = 'totp',\n  SMS = 'sms',\n  EMAIL = 'email',\n  BACKUP_CODE = 'backup_code',\n}\n\n/**\n * 2FA configuration\n */\nexport interface TwoFactorConfig {\n  method: TwoFactorMethod;\n  enabled: boolean;\n  verified?: boolean;\n}\n\n/**\n * Passkey/WebAuthn types\n */\nexport interface PasskeyCredential {\n  id: string;\n  name?: string;\n  createdAt?: Date;\n  lastUsedAt?: Date;\n}\n\n/**\n * Validation error\n */\nexport interface ValidationError {\n  field: string;\n  message: string;\n  code?: string;\n}\n\n/**\n * Organization interface\n */\nexport interface Organization {\n  id: string;\n  name: string;\n  slug: string;\n  logoUrl?: string;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Organization membership interface\n */\nexport interface OrganizationMembership {\n  organization: Organization;\n  role: 'owner' | 'admin' | 'member';\n  permissions?: string[];\n}\n\n","/**\n * Error handling utilities\n */\n\nimport { AuthError, AuthErrorType } from '../types';\n\n/**\n * Create an auth error\n * \n * @deprecated Use `new AuthError()` directly instead\n */\nexport function createAuthError(\n  type: AuthErrorType,\n  message: string,\n  details?: Record<string, unknown>,\n  code?: string | number\n): AuthError {\n  return new AuthError(message, type, { details, code });\n}\n\n/**\n * Check if an error is an auth error\n */\nexport function isAuthError(error: unknown): error is AuthError {\n  return error instanceof AuthError;\n}\n\n/**\n * Convert unknown error to auth error\n */\nexport function toAuthError(error: unknown): AuthError {\n  if (isAuthError(error)) {\n    return error;\n  }\n\n  if (error instanceof Error) {\n    return new AuthError(error.message, AuthErrorType.UNKNOWN_ERROR, {\n      details: {\n        originalError: error.name,\n        stack: error.stack,\n      },\n    });\n  }\n\n  if (typeof error === 'string') {\n    return new AuthError(error, AuthErrorType.UNKNOWN_ERROR);\n  }\n\n  return new AuthError(\n    'An unknown error occurred',\n    AuthErrorType.UNKNOWN_ERROR,\n    { details: { error } }\n  );\n}\n\n/**\n * Check if error is a network error\n */\nexport function isNetworkError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return (\n      error.name === 'NetworkError' ||\n      error.message.includes('network') ||\n      error.message.includes('fetch')\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error indicates authentication is required\n */\nexport function isUnauthenticatedError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return (\n      error.type === AuthErrorType.INVALID_TOKEN ||\n      error.type === AuthErrorType.TOKEN_EXPIRED\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error requires MFA\n */\nexport function isMFARequiredError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return error.type === AuthErrorType.MFA_REQUIRED;\n  }\n  return false;\n}\n","/**\n * Base auth provider implementation\n */\n\nimport type {\n  AuthProvider,\n  AuthResponse,\n  SignInRequest,\n  SignUpRequest,\n  UpdateUserRequest,\n  PasswordChangeRequest,\n  PasswordResetRequest,\n  PasswordResetConfirmRequest,\n  OAuthSignInRequest,\n  OAuthCallbackRequest,\n  MagicLinkRequest,\n  MagicLinkVerifyRequest,\n  PhoneAuthRequest,\n  PhoneVerifyRequest,\n  TwoFactorSetupRequest,\n  TwoFactorSetupResponse,\n  TwoFactorVerifyRequest,\n  PasskeyRegisterRequest,\n  PasskeyAuthRequest,\n  User,\n  Session,\n  OAuthProvider,\n  TwoFactorMethod,\n  PasskeyCredential,\n  AuthError,\n  ProviderConfig,\n} from '../types';\nimport { toAuthError } from '../utils';\n\n/**\n * Base provider class with common functionality\n */\nexport abstract class BaseAuthProvider implements AuthProvider {\n  abstract readonly name: string;\n  protected config: ProviderConfig = {};\n  protected initialized = false;\n\n  /**\n   * Initialize the provider\n   */\n  async initialize(config: ProviderConfig): Promise<void> {\n    this.config = config;\n    this.initialized = true;\n  }\n\n  /**\n   * Ensure provider is initialized\n   */\n  protected ensureInitialized(): void {\n    if (!this.initialized) {\n      throw new Error(`Provider ${this.name} is not initialized`);\n    }\n  }\n\n  /**\n   * Make HTTP request\n   */\n  protected async request<T>(\n    url: string,\n    options: RequestInit = {}\n  ): Promise<T> {\n    const response = await fetch(url, {\n      ...options,\n      headers: {\n        'Content-Type': 'application/json',\n        ...options.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.json().catch(() => ({\n        message: response.statusText,\n      }));\n      throw error;\n    }\n\n    return response.json();\n  }\n\n  // Abstract methods that must be implemented by subclasses\n  abstract signIn(request: SignInRequest): Promise<AuthResponse>;\n  abstract signUp(request: SignUpRequest): Promise<AuthResponse>;\n  abstract signOut(): Promise<void>;\n  abstract getCurrentUser(): Promise<User | null>;\n  abstract getCurrentSession(): Promise<Session | null>;\n  abstract refreshSession(): Promise<Session>;\n  abstract updateUser(request: UpdateUserRequest): Promise<User>;\n  abstract changePassword(request: PasswordChangeRequest): Promise<void>;\n  abstract requestPasswordReset(request: PasswordResetRequest): Promise<void>;\n  abstract confirmPasswordReset(request: PasswordResetConfirmRequest): Promise<void>;\n  abstract oauthSignIn(request: OAuthSignInRequest): Promise<string>;\n  abstract oauthCallback(request: OAuthCallbackRequest): Promise<AuthResponse>;\n  abstract getOAuthProviders(): Promise<OAuthProvider[]>;\n  abstract sendMagicLink(request: MagicLinkRequest): Promise<void>;\n  abstract verifyMagicLink(request: MagicLinkVerifyRequest): Promise<AuthResponse>;\n  abstract sendPhoneCode(request: PhoneAuthRequest): Promise<void>;\n  abstract verifyPhoneCode(request: PhoneVerifyRequest): Promise<AuthResponse>;\n  abstract setupTwoFactor(request: TwoFactorSetupRequest): Promise<TwoFactorSetupResponse>;\n  abstract verifyTwoFactor(request: TwoFactorVerifyRequest): Promise<AuthResponse>;\n  abstract disableTwoFactor(): Promise<void>;\n  abstract getTwoFactorStatus(): Promise<TwoFactorMethod[]>;\n  abstract registerPasskey(request: PasskeyRegisterRequest): Promise<PasskeyCredential>;\n  abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;\n  abstract listPasskeys(): Promise<PasskeyCredential[]>;\n  abstract deletePasskey(credentialId: string): Promise<void>;\n\n  /**\n   * Normalize error to AuthError\n   */\n  normalizeError(error: unknown): AuthError {\n    return toAuthError(error);\n  }\n}\n\n"]}
+{"version":3,"sources":["../../src/types/auth.ts","../../src/utils/errors.ts","../../src/adapters/base-provider.ts"],"names":[],"mappings":";;;AAmFO,IAAM,SAAA,GAAN,MAAM,UAAA,SAAkB,KAAA,CAAM;AAAA,EAMnC,WAAA,CACE,OAAA,EACA,IAAA,GAAsB,eAAA,sBACtB,OAAA,EAKA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAU,OAAA,EAAS,OAAA;AACxB,IAAA,IAAA,CAAK,OAAO,OAAA,EAAS,IAAA;AACrB,IAAA,IAAA,CAAK,gBAAgB,OAAA,EAAS,aAAA;AAG9B,IAAA,IAAI,MAAM,iBAAA,EAAmB;AAC3B,MAAA,KAAA,CAAM,iBAAA,CAAkB,MAAM,UAAS,CAAA;AAAA,IACzC;AAAA,EACF;AACF,CAAA;;;ACvFO,SAAS,YAAY,KAAA,EAAoC;AAC9D,EAAA,OAAO,KAAA,YAAiB,SAAA;AAC1B;AAKO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,IAAI,SAAA,CAAU,KAAA,CAAM,OAAA,EAAA,eAAA,sBAAsC;AAAA,MAC/D,OAAA,EAAS;AAAA,QACP,eAAe,KAAA,CAAM,IAAA;AAAA,QACrB,OAAO,KAAA,CAAM;AAAA;AACf,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,UAAU,KAAA,EAAA,eAAA,qBAAkC;AAAA,EACzD;AAEA,EAAA,OAAO,IAAI,SAAA;AAAA,IACT,2BAAA;AAAA,IAAA,eAAA;AAAA,IAEA,EAAE,OAAA,EAAS,EAAE,KAAA,EAAM;AAAE,GACvB;AACF;;;ACbO,IAAe,mBAAf,MAAwD;AAAA,EAAxD,WAAA,GAAA;AAEL,IAAA,IAAA,CAAU,SAAyB,EAAC;AACpC,IAAA,IAAA,CAAU,WAAA,GAAc,KAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKxB,MAAM,WAAW,MAAA,EAAuC;AACtD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKU,iBAAA,GAA0B;AAClC,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,IAAA,CAAK,IAAI,CAAA,mBAAA,CAAqB,CAAA;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,OAAA,CACd,GAAA,EACA,OAAA,GAAuB,EAAC,EACZ;AACZ,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,GAAG,OAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,OAAA,CAAQ;AAAA;AACb,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,QAAQ,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,MAAM,OAAO;AAAA,QAC/C,SAAS,QAAA,CAAS;AAAA,OACpB,CAAE,CAAA;AACF,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,SAAS,IAAA,EAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAyCA,eAAe,KAAA,EAA2B;AACxC,IAAA,OAAO,YAAY,KAAK,CAAA;AAAA,EAC1B;AACF","file":"index.js","sourcesContent":["/**\n * Core authentication types and interfaces\n */\n\n/**\n * Authentication state enum\n */\nexport enum AuthState {\n  AUTHENTICATED = 'authenticated',\n  UNAUTHENTICATED = 'unauthenticated',\n  LOADING = 'loading',\n  ERROR = 'error',\n}\n\n/**\n * User profile interface\n */\nexport interface User {\n  id: string;\n  email?: string;\n  username?: string;\n  phone?: string;\n  emailVerified?: boolean;\n  phoneVerified?: boolean;\n  name?: string;\n  firstName?: string;\n  lastName?: string;\n  avatar?: string;\n  metadata?: Record<string, unknown>;\n  createdAt?: Date;\n  updatedAt?: Date;\n  \n  // Organization fields\n  organizationId?: string;\n  organizationRole?: string;\n  organizationMemberships?: OrganizationMembership[];\n}\n\n/**\n * Session interface\n */\nexport interface Session {\n  id: string;\n  userId: string;\n  token: string;\n  expiresAt?: Date;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Session data with user and session combined\n * Used for efficient retrieval of both user and session in one call\n */\nexport interface SessionData {\n  user: User;\n  session: Session;\n  expiresAt: number;\n}\n\n/**\n * Auth error types\n */\nexport enum AuthErrorType {\n  INVALID_CREDENTIALS = 'invalid_credentials',\n  USER_NOT_FOUND = 'user_not_found',\n  USER_ALREADY_EXISTS = 'user_already_exists',\n  INVALID_TOKEN = 'invalid_token',\n  TOKEN_EXPIRED = 'token_expired',\n  NETWORK_ERROR = 'network_error',\n  VALIDATION_ERROR = 'validation_error',\n  MFA_REQUIRED = 'mfa_required',\n  EMAIL_NOT_VERIFIED = 'email_not_verified',\n  PHONE_NOT_VERIFIED = 'phone_not_verified',\n  RATE_LIMIT_EXCEEDED = 'rate_limit_exceeded',\n  UNKNOWN_ERROR = 'unknown_error',\n}\n\n/**\n * Auth error class\n * \n * Extends Error to provide proper error handling with auth-specific context\n */\nexport class AuthError extends Error {\n  public readonly type: AuthErrorType;\n  public readonly details?: Record<string, unknown>;\n  public readonly code?: string | number;\n  public readonly originalError?: unknown;\n\n  constructor(\n    message: string,\n    type: AuthErrorType = AuthErrorType.UNKNOWN_ERROR,\n    options?: {\n      details?: Record<string, unknown>;\n      code?: string | number;\n      originalError?: unknown;\n    }\n  ) {\n    super(message);\n    this.name = 'AuthError';\n    this.type = type;\n    this.details = options?.details;\n    this.code = options?.code;\n    this.originalError = options?.originalError;\n\n    // Maintains proper stack trace for where our error was thrown (only available on V8)\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, AuthError);\n    }\n  }\n}\n\n/**\n * Auth context state\n */\nexport interface AuthContext {\n  state: AuthState;\n  user: User | null;\n  session: Session | null;\n  error: AuthError | null;\n  isAuthenticated: boolean;\n  isLoading: boolean;\n}\n\n/**\n * OAuth provider types\n */\nexport enum OAuthProvider {\n  GOOGLE = 'google',\n  GITHUB = 'github',\n  FACEBOOK = 'facebook',\n  TWITTER = 'twitter',\n  MICROSOFT = 'microsoft',\n  APPLE = 'apple',\n  LINKEDIN = 'linkedin',\n  DISCORD = 'discord',\n}\n\n/**\n * OAuth configuration\n */\nexport interface OAuthConfig {\n  provider: OAuthProvider;\n  clientId: string;\n  redirectUri: string;\n  scope?: string[];\n  state?: string;\n}\n\n/**\n * 2FA method types\n */\nexport enum TwoFactorMethod {\n  TOTP = 'totp',\n  SMS = 'sms',\n  EMAIL = 'email',\n  BACKUP_CODE = 'backup_code',\n}\n\n/**\n * 2FA configuration\n */\nexport interface TwoFactorConfig {\n  method: TwoFactorMethod;\n  enabled: boolean;\n  verified?: boolean;\n}\n\n/**\n * Passkey/WebAuthn types\n */\nexport interface PasskeyCredential {\n  id: string;\n  name?: string;\n  createdAt?: Date;\n  lastUsedAt?: Date;\n}\n\n/**\n * Validation error\n */\nexport interface ValidationError {\n  field: string;\n  message: string;\n  code?: string;\n}\n\n/**\n * Organization interface\n */\nexport interface Organization {\n  id: string;\n  name: string;\n  slug: string;\n  logoUrl?: string;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Organization membership interface\n */\nexport interface OrganizationMembership {\n  organization: Organization;\n  role: 'owner' | 'admin' | 'member';\n  permissions?: string[];\n}\n\n","/**\n * Error handling utilities\n */\n\nimport { AuthError, AuthErrorType } from '../types';\n\n/**\n * Create an auth error\n * \n * @deprecated Use `new AuthError()` directly instead\n */\nexport function createAuthError(\n  type: AuthErrorType,\n  message: string,\n  details?: Record<string, unknown>,\n  code?: string | number\n): AuthError {\n  return new AuthError(message, type, { details, code });\n}\n\n/**\n * Check if an error is an auth error\n */\nexport function isAuthError(error: unknown): error is AuthError {\n  return error instanceof AuthError;\n}\n\n/**\n * Convert unknown error to auth error\n */\nexport function toAuthError(error: unknown): AuthError {\n  if (isAuthError(error)) {\n    return error;\n  }\n\n  if (error instanceof Error) {\n    return new AuthError(error.message, AuthErrorType.UNKNOWN_ERROR, {\n      details: {\n        originalError: error.name,\n        stack: error.stack,\n      },\n    });\n  }\n\n  if (typeof error === 'string') {\n    return new AuthError(error, AuthErrorType.UNKNOWN_ERROR);\n  }\n\n  return new AuthError(\n    'An unknown error occurred',\n    AuthErrorType.UNKNOWN_ERROR,\n    { details: { error } }\n  );\n}\n\n/**\n * Check if error is a network error\n */\nexport function isNetworkError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return (\n      error.name === 'NetworkError' ||\n      error.message.includes('network') ||\n      error.message.includes('fetch')\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error indicates authentication is required\n */\nexport function isUnauthenticatedError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return (\n      error.type === AuthErrorType.INVALID_TOKEN ||\n      error.type === AuthErrorType.TOKEN_EXPIRED\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error requires MFA\n */\nexport function isMFARequiredError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return error.type === AuthErrorType.MFA_REQUIRED;\n  }\n  return false;\n}\n","/**\n * Base auth provider implementation\n */\n\nimport type {\n  AuthProvider,\n  AuthResponse,\n  SignInRequest,\n  SignUpRequest,\n  UpdateUserRequest,\n  PasswordChangeRequest,\n  PasswordResetRequest,\n  PasswordResetConfirmRequest,\n  OAuthSignInRequest,\n  OAuthCallbackRequest,\n  MagicLinkRequest,\n  MagicLinkVerifyRequest,\n  PhoneAuthRequest,\n  PhoneVerifyRequest,\n  TwoFactorSetupRequest,\n  TwoFactorSetupResponse,\n  TwoFactorVerifyRequest,\n  PasskeyRegisterRequest,\n  PasskeyAuthRequest,\n  User,\n  Session,\n  SessionData,\n  OAuthProvider,\n  TwoFactorMethod,\n  PasskeyCredential,\n  AuthError,\n  ProviderConfig,\n  RequestContext,\n  CookieData,\n} from '../types';\nimport { toAuthError } from '../utils';\n\n/**\n * Base provider class with common functionality\n */\nexport abstract class BaseAuthProvider implements AuthProvider {\n  abstract readonly name: string;\n  protected config: ProviderConfig = {};\n  protected initialized = false;\n\n  /**\n   * Initialize the provider\n   */\n  async initialize(config: ProviderConfig): Promise<void> {\n    this.config = config;\n    this.initialized = true;\n  }\n\n  /**\n   * Ensure provider is initialized\n   */\n  protected ensureInitialized(): void {\n    if (!this.initialized) {\n      throw new Error(`Provider ${this.name} is not initialized`);\n    }\n  }\n\n  /**\n   * Make HTTP request\n   */\n  protected async request<T>(\n    url: string,\n    options: RequestInit = {}\n  ): Promise<T> {\n    const response = await fetch(url, {\n      ...options,\n      headers: {\n        'Content-Type': 'application/json',\n        ...options.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.json().catch(() => ({\n        message: response.statusText,\n      }));\n      throw error;\n    }\n\n    return response.json();\n  }\n\n  // Abstract methods that must be implemented by subclasses\n  abstract signIn(request: SignInRequest): Promise<AuthResponse>;\n  abstract signUp(request: SignUpRequest): Promise<AuthResponse>;\n  abstract signOut(): Promise<void>;\n  abstract getCurrentUser(): Promise<User | null>;\n  abstract getCurrentSession(): Promise<Session | null>;\n  abstract getCurrentSessionData(): Promise<SessionData | null>;\n  abstract refreshSession(): Promise<Session>;\n  abstract updateUser(request: UpdateUserRequest): Promise<User>;\n  abstract changePassword(request: PasswordChangeRequest): Promise<void>;\n  abstract requestPasswordReset(request: PasswordResetRequest): Promise<void>;\n  abstract confirmPasswordReset(request: PasswordResetConfirmRequest): Promise<void>;\n  abstract oauthSignIn(request: OAuthSignInRequest): Promise<string>;\n  abstract oauthCallback(request: OAuthCallbackRequest): Promise<AuthResponse>;\n  abstract getOAuthProviders(): Promise<OAuthProvider[]>;\n  abstract sendMagicLink(request: MagicLinkRequest): Promise<void>;\n  abstract verifyMagicLink(request: MagicLinkVerifyRequest): Promise<AuthResponse>;\n  abstract sendPhoneCode(request: PhoneAuthRequest): Promise<void>;\n  abstract verifyPhoneCode(request: PhoneVerifyRequest): Promise<AuthResponse>;\n  abstract setupTwoFactor(request: TwoFactorSetupRequest): Promise<TwoFactorSetupResponse>;\n  abstract verifyTwoFactor(request: TwoFactorVerifyRequest): Promise<AuthResponse>;\n  abstract disableTwoFactor(): Promise<void>;\n  abstract getTwoFactorStatus(): Promise<TwoFactorMethod[]>;\n  abstract registerPasskey(request: PasskeyRegisterRequest): Promise<PasskeyCredential>;\n  abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;\n  abstract listPasskeys(): Promise<PasskeyCredential[]>;\n  abstract deletePasskey(credentialId: string): Promise<void>;\n\n  /**\n   * Optional edge runtime context methods\n   * Default implementations do nothing - subclasses can override\n   */\n  setContext?(context: RequestContext): void;\n  getCookies?(): CookieData[];\n  clearContext?(): void;\n\n  /**\n   * Normalize error to AuthError\n   */\n  normalizeError(error: unknown): AuthError {\n    return toAuthError(error);\n  }\n}\n\n"]}

package/dist/adapters/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/types/auth.ts","../../src/utils/errors.ts","../../src/adapters/base-provider.ts"],"names":[],"mappings":";AAyEO,IAAM,SAAA,GAAN,MAAM,UAAA,SAAkB,KAAA,CAAM;AAAA,EAMnC,WAAA,CACE,OAAA,EACA,IAAA,GAAsB,eAAA,sBACtB,OAAA,EAKA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAU,OAAA,EAAS,OAAA;AACxB,IAAA,IAAA,CAAK,OAAO,OAAA,EAAS,IAAA;AACrB,IAAA,IAAA,CAAK,gBAAgB,OAAA,EAAS,aAAA;AAG9B,IAAA,IAAI,MAAM,iBAAA,EAAmB;AAC3B,MAAA,KAAA,CAAM,iBAAA,CAAkB,MAAM,UAAS,CAAA;AAAA,IACzC;AAAA,EACF;AACF,CAAA;;;AC7EO,SAAS,YAAY,KAAA,EAAoC;AAC9D,EAAA,OAAO,KAAA,YAAiB,SAAA;AAC1B;AAKO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,IAAI,SAAA,CAAU,KAAA,CAAM,OAAA,EAAA,eAAA,sBAAsC;AAAA,MAC/D,OAAA,EAAS;AAAA,QACP,eAAe,KAAA,CAAM,IAAA;AAAA,QACrB,OAAO,KAAA,CAAM;AAAA;AACf,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,UAAU,KAAA,EAAA,eAAA,qBAAkC;AAAA,EACzD;AAEA,EAAA,OAAO,IAAI,SAAA;AAAA,IACT,2BAAA;AAAA,IAAA,eAAA;AAAA,IAEA,EAAE,OAAA,EAAS,EAAE,KAAA,EAAM;AAAE,GACvB;AACF;;;AChBO,IAAe,mBAAf,MAAwD;AAAA,EAAxD,WAAA,GAAA;AAEL,IAAA,IAAA,CAAU,SAAyB,EAAC;AACpC,IAAA,IAAA,CAAU,WAAA,GAAc,KAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKxB,MAAM,WAAW,MAAA,EAAuC;AACtD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKU,iBAAA,GAA0B;AAClC,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,IAAA,CAAK,IAAI,CAAA,mBAAA,CAAqB,CAAA;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,OAAA,CACd,GAAA,EACA,OAAA,GAAuB,EAAC,EACZ;AACZ,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,GAAG,OAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,OAAA,CAAQ;AAAA;AACb,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,QAAQ,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,MAAM,OAAO;AAAA,QAC/C,SAAS,QAAA,CAAS;AAAA,OACpB,CAAE,CAAA;AACF,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,SAAS,IAAA,EAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAgCA,eAAe,KAAA,EAA2B;AACxC,IAAA,OAAO,YAAY,KAAK,CAAA;AAAA,EAC1B;AACF","file":"index.mjs","sourcesContent":["/**\n * Core authentication types and interfaces\n */\n\n/**\n * Authentication state enum\n */\nexport enum AuthState {\n  AUTHENTICATED = 'authenticated',\n  UNAUTHENTICATED = 'unauthenticated',\n  LOADING = 'loading',\n  ERROR = 'error',\n}\n\n/**\n * User profile interface\n */\nexport interface User {\n  id: string;\n  email?: string;\n  username?: string;\n  phone?: string;\n  emailVerified?: boolean;\n  phoneVerified?: boolean;\n  name?: string;\n  firstName?: string;\n  lastName?: string;\n  avatar?: string;\n  metadata?: Record<string, unknown>;\n  createdAt?: Date;\n  updatedAt?: Date;\n  \n  // Organization fields\n  organizationId?: string;\n  organizationRole?: string;\n  organizationMemberships?: OrganizationMembership[];\n}\n\n/**\n * Session interface\n */\nexport interface Session {\n  id: string;\n  userId: string;\n  token: string;\n  expiresAt?: Date;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Auth error types\n */\nexport enum AuthErrorType {\n  INVALID_CREDENTIALS = 'invalid_credentials',\n  USER_NOT_FOUND = 'user_not_found',\n  USER_ALREADY_EXISTS = 'user_already_exists',\n  INVALID_TOKEN = 'invalid_token',\n  TOKEN_EXPIRED = 'token_expired',\n  NETWORK_ERROR = 'network_error',\n  VALIDATION_ERROR = 'validation_error',\n  MFA_REQUIRED = 'mfa_required',\n  EMAIL_NOT_VERIFIED = 'email_not_verified',\n  PHONE_NOT_VERIFIED = 'phone_not_verified',\n  RATE_LIMIT_EXCEEDED = 'rate_limit_exceeded',\n  UNKNOWN_ERROR = 'unknown_error',\n}\n\n/**\n * Auth error class\n * \n * Extends Error to provide proper error handling with auth-specific context\n */\nexport class AuthError extends Error {\n  public readonly type: AuthErrorType;\n  public readonly details?: Record<string, unknown>;\n  public readonly code?: string | number;\n  public readonly originalError?: unknown;\n\n  constructor(\n    message: string,\n    type: AuthErrorType = AuthErrorType.UNKNOWN_ERROR,\n    options?: {\n      details?: Record<string, unknown>;\n      code?: string | number;\n      originalError?: unknown;\n    }\n  ) {\n    super(message);\n    this.name = 'AuthError';\n    this.type = type;\n    this.details = options?.details;\n    this.code = options?.code;\n    this.originalError = options?.originalError;\n\n    // Maintains proper stack trace for where our error was thrown (only available on V8)\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, AuthError);\n    }\n  }\n}\n\n/**\n * Auth context state\n */\nexport interface AuthContext {\n  state: AuthState;\n  user: User | null;\n  session: Session | null;\n  error: AuthError | null;\n  isAuthenticated: boolean;\n  isLoading: boolean;\n}\n\n/**\n * OAuth provider types\n */\nexport enum OAuthProvider {\n  GOOGLE = 'google',\n  GITHUB = 'github',\n  FACEBOOK = 'facebook',\n  TWITTER = 'twitter',\n  MICROSOFT = 'microsoft',\n  APPLE = 'apple',\n  LINKEDIN = 'linkedin',\n  DISCORD = 'discord',\n}\n\n/**\n * OAuth configuration\n */\nexport interface OAuthConfig {\n  provider: OAuthProvider;\n  clientId: string;\n  redirectUri: string;\n  scope?: string[];\n  state?: string;\n}\n\n/**\n * 2FA method types\n */\nexport enum TwoFactorMethod {\n  TOTP = 'totp',\n  SMS = 'sms',\n  EMAIL = 'email',\n  BACKUP_CODE = 'backup_code',\n}\n\n/**\n * 2FA configuration\n */\nexport interface TwoFactorConfig {\n  method: TwoFactorMethod;\n  enabled: boolean;\n  verified?: boolean;\n}\n\n/**\n * Passkey/WebAuthn types\n */\nexport interface PasskeyCredential {\n  id: string;\n  name?: string;\n  createdAt?: Date;\n  lastUsedAt?: Date;\n}\n\n/**\n * Validation error\n */\nexport interface ValidationError {\n  field: string;\n  message: string;\n  code?: string;\n}\n\n/**\n * Organization interface\n */\nexport interface Organization {\n  id: string;\n  name: string;\n  slug: string;\n  logoUrl?: string;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Organization membership interface\n */\nexport interface OrganizationMembership {\n  organization: Organization;\n  role: 'owner' | 'admin' | 'member';\n  permissions?: string[];\n}\n\n","/**\n * Error handling utilities\n */\n\nimport { AuthError, AuthErrorType } from '../types';\n\n/**\n * Create an auth error\n * \n * @deprecated Use `new AuthError()` directly instead\n */\nexport function createAuthError(\n  type: AuthErrorType,\n  message: string,\n  details?: Record<string, unknown>,\n  code?: string | number\n): AuthError {\n  return new AuthError(message, type, { details, code });\n}\n\n/**\n * Check if an error is an auth error\n */\nexport function isAuthError(error: unknown): error is AuthError {\n  return error instanceof AuthError;\n}\n\n/**\n * Convert unknown error to auth error\n */\nexport function toAuthError(error: unknown): AuthError {\n  if (isAuthError(error)) {\n    return error;\n  }\n\n  if (error instanceof Error) {\n    return new AuthError(error.message, AuthErrorType.UNKNOWN_ERROR, {\n      details: {\n        originalError: error.name,\n        stack: error.stack,\n      },\n    });\n  }\n\n  if (typeof error === 'string') {\n    return new AuthError(error, AuthErrorType.UNKNOWN_ERROR);\n  }\n\n  return new AuthError(\n    'An unknown error occurred',\n    AuthErrorType.UNKNOWN_ERROR,\n    { details: { error } }\n  );\n}\n\n/**\n * Check if error is a network error\n */\nexport function isNetworkError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return (\n      error.name === 'NetworkError' ||\n      error.message.includes('network') ||\n      error.message.includes('fetch')\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error indicates authentication is required\n */\nexport function isUnauthenticatedError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return (\n      error.type === AuthErrorType.INVALID_TOKEN ||\n      error.type === AuthErrorType.TOKEN_EXPIRED\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error requires MFA\n */\nexport function isMFARequiredError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return error.type === AuthErrorType.MFA_REQUIRED;\n  }\n  return false;\n}\n","/**\n * Base auth provider implementation\n */\n\nimport type {\n  AuthProvider,\n  AuthResponse,\n  SignInRequest,\n  SignUpRequest,\n  UpdateUserRequest,\n  PasswordChangeRequest,\n  PasswordResetRequest,\n  PasswordResetConfirmRequest,\n  OAuthSignInRequest,\n  OAuthCallbackRequest,\n  MagicLinkRequest,\n  MagicLinkVerifyRequest,\n  PhoneAuthRequest,\n  PhoneVerifyRequest,\n  TwoFactorSetupRequest,\n  TwoFactorSetupResponse,\n  TwoFactorVerifyRequest,\n  PasskeyRegisterRequest,\n  PasskeyAuthRequest,\n  User,\n  Session,\n  OAuthProvider,\n  TwoFactorMethod,\n  PasskeyCredential,\n  AuthError,\n  ProviderConfig,\n} from '../types';\nimport { toAuthError } from '../utils';\n\n/**\n * Base provider class with common functionality\n */\nexport abstract class BaseAuthProvider implements AuthProvider {\n  abstract readonly name: string;\n  protected config: ProviderConfig = {};\n  protected initialized = false;\n\n  /**\n   * Initialize the provider\n   */\n  async initialize(config: ProviderConfig): Promise<void> {\n    this.config = config;\n    this.initialized = true;\n  }\n\n  /**\n   * Ensure provider is initialized\n   */\n  protected ensureInitialized(): void {\n    if (!this.initialized) {\n      throw new Error(`Provider ${this.name} is not initialized`);\n    }\n  }\n\n  /**\n   * Make HTTP request\n   */\n  protected async request<T>(\n    url: string,\n    options: RequestInit = {}\n  ): Promise<T> {\n    const response = await fetch(url, {\n      ...options,\n      headers: {\n        'Content-Type': 'application/json',\n        ...options.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.json().catch(() => ({\n        message: response.statusText,\n      }));\n      throw error;\n    }\n\n    return response.json();\n  }\n\n  // Abstract methods that must be implemented by subclasses\n  abstract signIn(request: SignInRequest): Promise<AuthResponse>;\n  abstract signUp(request: SignUpRequest): Promise<AuthResponse>;\n  abstract signOut(): Promise<void>;\n  abstract getCurrentUser(): Promise<User | null>;\n  abstract getCurrentSession(): Promise<Session | null>;\n  abstract refreshSession(): Promise<Session>;\n  abstract updateUser(request: UpdateUserRequest): Promise<User>;\n  abstract changePassword(request: PasswordChangeRequest): Promise<void>;\n  abstract requestPasswordReset(request: PasswordResetRequest): Promise<void>;\n  abstract confirmPasswordReset(request: PasswordResetConfirmRequest): Promise<void>;\n  abstract oauthSignIn(request: OAuthSignInRequest): Promise<string>;\n  abstract oauthCallback(request: OAuthCallbackRequest): Promise<AuthResponse>;\n  abstract getOAuthProviders(): Promise<OAuthProvider[]>;\n  abstract sendMagicLink(request: MagicLinkRequest): Promise<void>;\n  abstract verifyMagicLink(request: MagicLinkVerifyRequest): Promise<AuthResponse>;\n  abstract sendPhoneCode(request: PhoneAuthRequest): Promise<void>;\n  abstract verifyPhoneCode(request: PhoneVerifyRequest): Promise<AuthResponse>;\n  abstract setupTwoFactor(request: TwoFactorSetupRequest): Promise<TwoFactorSetupResponse>;\n  abstract verifyTwoFactor(request: TwoFactorVerifyRequest): Promise<AuthResponse>;\n  abstract disableTwoFactor(): Promise<void>;\n  abstract getTwoFactorStatus(): Promise<TwoFactorMethod[]>;\n  abstract registerPasskey(request: PasskeyRegisterRequest): Promise<PasskeyCredential>;\n  abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;\n  abstract listPasskeys(): Promise<PasskeyCredential[]>;\n  abstract deletePasskey(credentialId: string): Promise<void>;\n\n  /**\n   * Normalize error to AuthError\n   */\n  normalizeError(error: unknown): AuthError {\n    return toAuthError(error);\n  }\n}\n\n"]}
+{"version":3,"sources":["../../src/types/auth.ts","../../src/utils/errors.ts","../../src/adapters/base-provider.ts"],"names":[],"mappings":";AAmFO,IAAM,SAAA,GAAN,MAAM,UAAA,SAAkB,KAAA,CAAM;AAAA,EAMnC,WAAA,CACE,OAAA,EACA,IAAA,GAAsB,eAAA,sBACtB,OAAA,EAKA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAU,OAAA,EAAS,OAAA;AACxB,IAAA,IAAA,CAAK,OAAO,OAAA,EAAS,IAAA;AACrB,IAAA,IAAA,CAAK,gBAAgB,OAAA,EAAS,aAAA;AAG9B,IAAA,IAAI,MAAM,iBAAA,EAAmB;AAC3B,MAAA,KAAA,CAAM,iBAAA,CAAkB,MAAM,UAAS,CAAA;AAAA,IACzC;AAAA,EACF;AACF,CAAA;;;ACvFO,SAAS,YAAY,KAAA,EAAoC;AAC9D,EAAA,OAAO,KAAA,YAAiB,SAAA;AAC1B;AAKO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,IAAI,SAAA,CAAU,KAAA,CAAM,OAAA,EAAA,eAAA,sBAAsC;AAAA,MAC/D,OAAA,EAAS;AAAA,QACP,eAAe,KAAA,CAAM,IAAA;AAAA,QACrB,OAAO,KAAA,CAAM;AAAA;AACf,KACD,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,UAAU,KAAA,EAAA,eAAA,qBAAkC;AAAA,EACzD;AAEA,EAAA,OAAO,IAAI,SAAA;AAAA,IACT,2BAAA;AAAA,IAAA,eAAA;AAAA,IAEA,EAAE,OAAA,EAAS,EAAE,KAAA,EAAM;AAAE,GACvB;AACF;;;ACbO,IAAe,mBAAf,MAAwD;AAAA,EAAxD,WAAA,GAAA;AAEL,IAAA,IAAA,CAAU,SAAyB,EAAC;AACpC,IAAA,IAAA,CAAU,WAAA,GAAc,KAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKxB,MAAM,WAAW,MAAA,EAAuC;AACtD,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKU,iBAAA,GAA0B;AAClC,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACrB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,SAAA,EAAY,IAAA,CAAK,IAAI,CAAA,mBAAA,CAAqB,CAAA;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,OAAA,CACd,GAAA,EACA,OAAA,GAAuB,EAAC,EACZ;AACZ,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAChC,GAAG,OAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,GAAG,OAAA,CAAQ;AAAA;AACb,KACD,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,QAAQ,MAAM,QAAA,CAAS,IAAA,EAAK,CAAE,MAAM,OAAO;AAAA,QAC/C,SAAS,QAAA,CAAS;AAAA,OACpB,CAAE,CAAA;AACF,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,SAAS,IAAA,EAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAyCA,eAAe,KAAA,EAA2B;AACxC,IAAA,OAAO,YAAY,KAAK,CAAA;AAAA,EAC1B;AACF","file":"index.mjs","sourcesContent":["/**\n * Core authentication types and interfaces\n */\n\n/**\n * Authentication state enum\n */\nexport enum AuthState {\n  AUTHENTICATED = 'authenticated',\n  UNAUTHENTICATED = 'unauthenticated',\n  LOADING = 'loading',\n  ERROR = 'error',\n}\n\n/**\n * User profile interface\n */\nexport interface User {\n  id: string;\n  email?: string;\n  username?: string;\n  phone?: string;\n  emailVerified?: boolean;\n  phoneVerified?: boolean;\n  name?: string;\n  firstName?: string;\n  lastName?: string;\n  avatar?: string;\n  metadata?: Record<string, unknown>;\n  createdAt?: Date;\n  updatedAt?: Date;\n  \n  // Organization fields\n  organizationId?: string;\n  organizationRole?: string;\n  organizationMemberships?: OrganizationMembership[];\n}\n\n/**\n * Session interface\n */\nexport interface Session {\n  id: string;\n  userId: string;\n  token: string;\n  expiresAt?: Date;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Session data with user and session combined\n * Used for efficient retrieval of both user and session in one call\n */\nexport interface SessionData {\n  user: User;\n  session: Session;\n  expiresAt: number;\n}\n\n/**\n * Auth error types\n */\nexport enum AuthErrorType {\n  INVALID_CREDENTIALS = 'invalid_credentials',\n  USER_NOT_FOUND = 'user_not_found',\n  USER_ALREADY_EXISTS = 'user_already_exists',\n  INVALID_TOKEN = 'invalid_token',\n  TOKEN_EXPIRED = 'token_expired',\n  NETWORK_ERROR = 'network_error',\n  VALIDATION_ERROR = 'validation_error',\n  MFA_REQUIRED = 'mfa_required',\n  EMAIL_NOT_VERIFIED = 'email_not_verified',\n  PHONE_NOT_VERIFIED = 'phone_not_verified',\n  RATE_LIMIT_EXCEEDED = 'rate_limit_exceeded',\n  UNKNOWN_ERROR = 'unknown_error',\n}\n\n/**\n * Auth error class\n * \n * Extends Error to provide proper error handling with auth-specific context\n */\nexport class AuthError extends Error {\n  public readonly type: AuthErrorType;\n  public readonly details?: Record<string, unknown>;\n  public readonly code?: string | number;\n  public readonly originalError?: unknown;\n\n  constructor(\n    message: string,\n    type: AuthErrorType = AuthErrorType.UNKNOWN_ERROR,\n    options?: {\n      details?: Record<string, unknown>;\n      code?: string | number;\n      originalError?: unknown;\n    }\n  ) {\n    super(message);\n    this.name = 'AuthError';\n    this.type = type;\n    this.details = options?.details;\n    this.code = options?.code;\n    this.originalError = options?.originalError;\n\n    // Maintains proper stack trace for where our error was thrown (only available on V8)\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, AuthError);\n    }\n  }\n}\n\n/**\n * Auth context state\n */\nexport interface AuthContext {\n  state: AuthState;\n  user: User | null;\n  session: Session | null;\n  error: AuthError | null;\n  isAuthenticated: boolean;\n  isLoading: boolean;\n}\n\n/**\n * OAuth provider types\n */\nexport enum OAuthProvider {\n  GOOGLE = 'google',\n  GITHUB = 'github',\n  FACEBOOK = 'facebook',\n  TWITTER = 'twitter',\n  MICROSOFT = 'microsoft',\n  APPLE = 'apple',\n  LINKEDIN = 'linkedin',\n  DISCORD = 'discord',\n}\n\n/**\n * OAuth configuration\n */\nexport interface OAuthConfig {\n  provider: OAuthProvider;\n  clientId: string;\n  redirectUri: string;\n  scope?: string[];\n  state?: string;\n}\n\n/**\n * 2FA method types\n */\nexport enum TwoFactorMethod {\n  TOTP = 'totp',\n  SMS = 'sms',\n  EMAIL = 'email',\n  BACKUP_CODE = 'backup_code',\n}\n\n/**\n * 2FA configuration\n */\nexport interface TwoFactorConfig {\n  method: TwoFactorMethod;\n  enabled: boolean;\n  verified?: boolean;\n}\n\n/**\n * Passkey/WebAuthn types\n */\nexport interface PasskeyCredential {\n  id: string;\n  name?: string;\n  createdAt?: Date;\n  lastUsedAt?: Date;\n}\n\n/**\n * Validation error\n */\nexport interface ValidationError {\n  field: string;\n  message: string;\n  code?: string;\n}\n\n/**\n * Organization interface\n */\nexport interface Organization {\n  id: string;\n  name: string;\n  slug: string;\n  logoUrl?: string;\n  createdAt?: Date;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Organization membership interface\n */\nexport interface OrganizationMembership {\n  organization: Organization;\n  role: 'owner' | 'admin' | 'member';\n  permissions?: string[];\n}\n\n","/**\n * Error handling utilities\n */\n\nimport { AuthError, AuthErrorType } from '../types';\n\n/**\n * Create an auth error\n * \n * @deprecated Use `new AuthError()` directly instead\n */\nexport function createAuthError(\n  type: AuthErrorType,\n  message: string,\n  details?: Record<string, unknown>,\n  code?: string | number\n): AuthError {\n  return new AuthError(message, type, { details, code });\n}\n\n/**\n * Check if an error is an auth error\n */\nexport function isAuthError(error: unknown): error is AuthError {\n  return error instanceof AuthError;\n}\n\n/**\n * Convert unknown error to auth error\n */\nexport function toAuthError(error: unknown): AuthError {\n  if (isAuthError(error)) {\n    return error;\n  }\n\n  if (error instanceof Error) {\n    return new AuthError(error.message, AuthErrorType.UNKNOWN_ERROR, {\n      details: {\n        originalError: error.name,\n        stack: error.stack,\n      },\n    });\n  }\n\n  if (typeof error === 'string') {\n    return new AuthError(error, AuthErrorType.UNKNOWN_ERROR);\n  }\n\n  return new AuthError(\n    'An unknown error occurred',\n    AuthErrorType.UNKNOWN_ERROR,\n    { details: { error } }\n  );\n}\n\n/**\n * Check if error is a network error\n */\nexport function isNetworkError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return (\n      error.name === 'NetworkError' ||\n      error.message.includes('network') ||\n      error.message.includes('fetch')\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error indicates authentication is required\n */\nexport function isUnauthenticatedError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return (\n      error.type === AuthErrorType.INVALID_TOKEN ||\n      error.type === AuthErrorType.TOKEN_EXPIRED\n    );\n  }\n  return false;\n}\n\n/**\n * Check if error requires MFA\n */\nexport function isMFARequiredError(error: unknown): boolean {\n  if (isAuthError(error)) {\n    return error.type === AuthErrorType.MFA_REQUIRED;\n  }\n  return false;\n}\n","/**\n * Base auth provider implementation\n */\n\nimport type {\n  AuthProvider,\n  AuthResponse,\n  SignInRequest,\n  SignUpRequest,\n  UpdateUserRequest,\n  PasswordChangeRequest,\n  PasswordResetRequest,\n  PasswordResetConfirmRequest,\n  OAuthSignInRequest,\n  OAuthCallbackRequest,\n  MagicLinkRequest,\n  MagicLinkVerifyRequest,\n  PhoneAuthRequest,\n  PhoneVerifyRequest,\n  TwoFactorSetupRequest,\n  TwoFactorSetupResponse,\n  TwoFactorVerifyRequest,\n  PasskeyRegisterRequest,\n  PasskeyAuthRequest,\n  User,\n  Session,\n  SessionData,\n  OAuthProvider,\n  TwoFactorMethod,\n  PasskeyCredential,\n  AuthError,\n  ProviderConfig,\n  RequestContext,\n  CookieData,\n} from '../types';\nimport { toAuthError } from '../utils';\n\n/**\n * Base provider class with common functionality\n */\nexport abstract class BaseAuthProvider implements AuthProvider {\n  abstract readonly name: string;\n  protected config: ProviderConfig = {};\n  protected initialized = false;\n\n  /**\n   * Initialize the provider\n   */\n  async initialize(config: ProviderConfig): Promise<void> {\n    this.config = config;\n    this.initialized = true;\n  }\n\n  /**\n   * Ensure provider is initialized\n   */\n  protected ensureInitialized(): void {\n    if (!this.initialized) {\n      throw new Error(`Provider ${this.name} is not initialized`);\n    }\n  }\n\n  /**\n   * Make HTTP request\n   */\n  protected async request<T>(\n    url: string,\n    options: RequestInit = {}\n  ): Promise<T> {\n    const response = await fetch(url, {\n      ...options,\n      headers: {\n        'Content-Type': 'application/json',\n        ...options.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const error = await response.json().catch(() => ({\n        message: response.statusText,\n      }));\n      throw error;\n    }\n\n    return response.json();\n  }\n\n  // Abstract methods that must be implemented by subclasses\n  abstract signIn(request: SignInRequest): Promise<AuthResponse>;\n  abstract signUp(request: SignUpRequest): Promise<AuthResponse>;\n  abstract signOut(): Promise<void>;\n  abstract getCurrentUser(): Promise<User | null>;\n  abstract getCurrentSession(): Promise<Session | null>;\n  abstract getCurrentSessionData(): Promise<SessionData | null>;\n  abstract refreshSession(): Promise<Session>;\n  abstract updateUser(request: UpdateUserRequest): Promise<User>;\n  abstract changePassword(request: PasswordChangeRequest): Promise<void>;\n  abstract requestPasswordReset(request: PasswordResetRequest): Promise<void>;\n  abstract confirmPasswordReset(request: PasswordResetConfirmRequest): Promise<void>;\n  abstract oauthSignIn(request: OAuthSignInRequest): Promise<string>;\n  abstract oauthCallback(request: OAuthCallbackRequest): Promise<AuthResponse>;\n  abstract getOAuthProviders(): Promise<OAuthProvider[]>;\n  abstract sendMagicLink(request: MagicLinkRequest): Promise<void>;\n  abstract verifyMagicLink(request: MagicLinkVerifyRequest): Promise<AuthResponse>;\n  abstract sendPhoneCode(request: PhoneAuthRequest): Promise<void>;\n  abstract verifyPhoneCode(request: PhoneVerifyRequest): Promise<AuthResponse>;\n  abstract setupTwoFactor(request: TwoFactorSetupRequest): Promise<TwoFactorSetupResponse>;\n  abstract verifyTwoFactor(request: TwoFactorVerifyRequest): Promise<AuthResponse>;\n  abstract disableTwoFactor(): Promise<void>;\n  abstract getTwoFactorStatus(): Promise<TwoFactorMethod[]>;\n  abstract registerPasskey(request: PasskeyRegisterRequest): Promise<PasskeyCredential>;\n  abstract authenticatePasskey(request: PasskeyAuthRequest): Promise<AuthResponse>;\n  abstract listPasskeys(): Promise<PasskeyCredential[]>;\n  abstract deletePasskey(credentialId: string): Promise<void>;\n\n  /**\n   * Optional edge runtime context methods\n   * Default implementations do nothing - subclasses can override\n   */\n  setContext?(context: RequestContext): void;\n  getCookies?(): CookieData[];\n  clearContext?(): void;\n\n  /**\n   * Normalize error to AuthError\n   */\n  normalizeError(error: unknown): AuthError {\n    return toAuthError(error);\n  }\n}\n\n"]}

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { A as AuthErrorType, a as AuthError, V as ValidationError, b as AuthContext, c as AuthProvider, S as SignInRequest, d as SignUpRequest, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, r as Organization, s as OrganizationMembership, t as User, u as Session } from './provider-C8km9A8U.mjs';
-export { B as AuthResponse, v as AuthState, y as FieldDefinition, F as FieldValidation, w as OAuthConfig, C as ProviderConfig, z as SignupFieldsResponse, x as TwoFactorConfig } from './provider-C8km9A8U.mjs';
+import { A as AuthErrorType, a as AuthError, V as ValidationError, C as CookieData, b as AuthContext, c as AuthProvider, S as SignInRequest, d as SignUpRequest, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, r as Organization, s as OrganizationMembership, t as User, u as Session } from './provider-KGfwPsXv.mjs';
+export { D as AuthResponse, v as AuthState, z as FieldDefinition, F as FieldValidation, x as OAuthConfig, E as ProviderConfig, R as RequestContext, w as SessionData, B as SignupFieldsResponse, y as TwoFactorConfig } from './provider-KGfwPsXv.mjs';
 import { Storage, Observable, Unsubscribe } from './types/index.mjs';
 export { Listener, LocalStorageAdapter, MemoryStorageAdapter, SessionStorageAdapter } from './types/index.mjs';
 export { BaseAuthProvider } from './adapters/index.mjs';
@@ -262,6 +262,42 @@ declare class TokenManager {
     private decodeToken;
 }
 
+/**
+ * Cookie utility functions
+ * Framework-agnostic helpers for cookie parsing and serialization
+ */
+
+/**
+ * Parse Set-Cookie header value into CookieData
+ * @param setCookieHeader - The Set-Cookie header value
+ * @returns Parsed cookie data
+ */
+declare function parseCookie(setCookieHeader: string): CookieData | null;
+/**
+ * Extract multiple cookies from Set-Cookie headers
+ * @param setCookieHeaders - Array of Set-Cookie header values or single string
+ * @returns Array of parsed cookies
+ */
+declare function extractCookiesFromHeaders(setCookieHeaders: string | string[]): CookieData[];
+/**
+ * Serialize a CookieData object into a Set-Cookie header value
+ * @param cookie - The cookie data to serialize
+ * @returns Set-Cookie header value
+ */
+declare function serializeCookie(cookie: CookieData): string;
+/**
+ * Parse Cookie header value into key-value pairs
+ * @param cookieHeader - The Cookie header value
+ * @returns Object with cookie name-value pairs
+ */
+declare function parseCookieOptions(cookieHeader: string): Record<string, string>;
+/**
+ * Convert cookie object to Cookie header string
+ * @param cookies - Object with cookie name-value pairs
+ * @returns Cookie header value
+ */
+declare function serializeCookies(cookies: Record<string, string>): string;
+
 /**
  * Locale utility functions
  */
@@ -590,6 +626,7 @@ declare enum FlowConfigType {
     COMPLETE_SIGN_UP_FLOW = "complete_sign_up_flow",// signup → verify email → complete profile
     SECURE_SIGN_IN_FLOW = "secure_sign_in_flow",// signin → MFA → success
     PASSWORD_RESET_FLOW = "password_reset_flow",
+    EMAIL_VERIFICATION_FLOW = "email_verification_flow",
     CUSTOM = "custom"
 }
 /**
@@ -710,6 +747,10 @@ declare const oauthSignInFlow: FlowConfig;
  * Password reset flow
  */
 declare const passwordResetFlow: FlowConfig;
+/**
+ * Email verification flow
+ */
+declare const emailVerificationFlow: FlowConfig;
 /**
  * Get predefined flow configuration by type
  */
@@ -725,6 +766,7 @@ declare const predefinedFlows: {
     phone_auth_flow: FlowConfig;
     oauth_sign_in: FlowConfig;
     password_reset_flow: FlowConfig;
+    email_verification_flow: FlowConfig;
 };
 
-export { AuthClient, type AuthClientConfig, AuthContext, AuthError, AuthErrorType, type AuthLocale, AuthProvider, type DeepPartial, FlowAction, type FlowConfig, FlowConfigType, FlowEngine, type FlowEvent, type FlowState, FlowStep, type FlowTransition, MagicLinkRequest, MagicLinkVerifyRequest, OAuthCallbackRequest, OAuthProvider, OAuthSignInRequest, Observable, Organization, OrganizationMembership, PasskeyAuthRequest, PasskeyCredential, PasskeyRegisterRequest, PasswordChangeRequest, PasswordResetConfirmRequest, PasswordResetRequest, PhoneAuthRequest, PhoneVerifyRequest, Session, SignInRequest, SignUpRequest, Storage, TokenManager, TwoFactorMethod, TwoFactorSetupRequest, TwoFactorSetupResponse, TwoFactorVerifyRequest, Unsubscribe, UpdateUserRequest, User, ValidationError, completeSignUpFlow, createAuthError, createLocale, defaultLocale, getFlowConfig, interpolate, isAuthError, isMFARequiredError, isNetworkError, isUnauthenticatedError, magicLinkFlow, oauthSignInFlow, passwordResetFlow, phoneAuthFlow, predefinedFlows, signInWithMFAFlow, simpleSignInFlow, toAuthError, validate2FACode, validateEmail, validatePassword, validatePhone, validateRequired, validateUsername };
+export { AuthClient, type AuthClientConfig, AuthContext, AuthError, AuthErrorType, type AuthLocale, AuthProvider, CookieData, type DeepPartial, FlowAction, type FlowConfig, FlowConfigType, FlowEngine, type FlowEvent, type FlowState, FlowStep, type FlowTransition, MagicLinkRequest, MagicLinkVerifyRequest, OAuthCallbackRequest, OAuthProvider, OAuthSignInRequest, Observable, Organization, OrganizationMembership, PasskeyAuthRequest, PasskeyCredential, PasskeyRegisterRequest, PasswordChangeRequest, PasswordResetConfirmRequest, PasswordResetRequest, PhoneAuthRequest, PhoneVerifyRequest, Session, SignInRequest, SignUpRequest, Storage, TokenManager, TwoFactorMethod, TwoFactorSetupRequest, TwoFactorSetupResponse, TwoFactorVerifyRequest, Unsubscribe, UpdateUserRequest, User, ValidationError, completeSignUpFlow, createAuthError, createLocale, defaultLocale, emailVerificationFlow, extractCookiesFromHeaders, getFlowConfig, interpolate, isAuthError, isMFARequiredError, isNetworkError, isUnauthenticatedError, magicLinkFlow, oauthSignInFlow, parseCookie, parseCookieOptions, passwordResetFlow, phoneAuthFlow, predefinedFlows, serializeCookie, serializeCookies, signInWithMFAFlow, simpleSignInFlow, toAuthError, validate2FACode, validateEmail, validatePassword, validatePhone, validateRequired, validateUsername };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { A as AuthErrorType, a as AuthError, V as ValidationError, b as AuthContext, c as AuthProvider, S as SignInRequest, d as SignUpRequest, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, r as Organization, s as OrganizationMembership, t as User, u as Session } from './provider-C8km9A8U.js';
-export { B as AuthResponse, v as AuthState, y as FieldDefinition, F as FieldValidation, w as OAuthConfig, C as ProviderConfig, z as SignupFieldsResponse, x as TwoFactorConfig } from './provider-C8km9A8U.js';
+import { A as AuthErrorType, a as AuthError, V as ValidationError, C as CookieData, b as AuthContext, c as AuthProvider, S as SignInRequest, d as SignUpRequest, U as UpdateUserRequest, P as PasswordChangeRequest, e as PasswordResetRequest, f as PasswordResetConfirmRequest, O as OAuthSignInRequest, g as OAuthCallbackRequest, h as OAuthProvider, M as MagicLinkRequest, i as MagicLinkVerifyRequest, j as PhoneAuthRequest, k as PhoneVerifyRequest, T as TwoFactorSetupRequest, l as TwoFactorSetupResponse, m as TwoFactorVerifyRequest, n as TwoFactorMethod, o as PasskeyRegisterRequest, p as PasskeyCredential, q as PasskeyAuthRequest, r as Organization, s as OrganizationMembership, t as User, u as Session } from './provider-KGfwPsXv.js';
+export { D as AuthResponse, v as AuthState, z as FieldDefinition, F as FieldValidation, x as OAuthConfig, E as ProviderConfig, R as RequestContext, w as SessionData, B as SignupFieldsResponse, y as TwoFactorConfig } from './provider-KGfwPsXv.js';
 import { Storage, Observable, Unsubscribe } from './types/index.js';
 export { Listener, LocalStorageAdapter, MemoryStorageAdapter, SessionStorageAdapter } from './types/index.js';
 export { BaseAuthProvider } from './adapters/index.js';
@@ -262,6 +262,42 @@ declare class TokenManager {
     private decodeToken;
 }
 
+/**
+ * Cookie utility functions
+ * Framework-agnostic helpers for cookie parsing and serialization
+ */
+
+/**
+ * Parse Set-Cookie header value into CookieData
+ * @param setCookieHeader - The Set-Cookie header value
+ * @returns Parsed cookie data
+ */
+declare function parseCookie(setCookieHeader: string): CookieData | null;
+/**
+ * Extract multiple cookies from Set-Cookie headers
+ * @param setCookieHeaders - Array of Set-Cookie header values or single string
+ * @returns Array of parsed cookies
+ */
+declare function extractCookiesFromHeaders(setCookieHeaders: string | string[]): CookieData[];
+/**
+ * Serialize a CookieData object into a Set-Cookie header value
+ * @param cookie - The cookie data to serialize
+ * @returns Set-Cookie header value
+ */
+declare function serializeCookie(cookie: CookieData): string;
+/**
+ * Parse Cookie header value into key-value pairs
+ * @param cookieHeader - The Cookie header value
+ * @returns Object with cookie name-value pairs
+ */
+declare function parseCookieOptions(cookieHeader: string): Record<string, string>;
+/**
+ * Convert cookie object to Cookie header string
+ * @param cookies - Object with cookie name-value pairs
+ * @returns Cookie header value
+ */
+declare function serializeCookies(cookies: Record<string, string>): string;
+
 /**
  * Locale utility functions
  */
@@ -590,6 +626,7 @@ declare enum FlowConfigType {
     COMPLETE_SIGN_UP_FLOW = "complete_sign_up_flow",// signup → verify email → complete profile
     SECURE_SIGN_IN_FLOW = "secure_sign_in_flow",// signin → MFA → success
     PASSWORD_RESET_FLOW = "password_reset_flow",
+    EMAIL_VERIFICATION_FLOW = "email_verification_flow",
     CUSTOM = "custom"
 }
 /**
@@ -710,6 +747,10 @@ declare const oauthSignInFlow: FlowConfig;
  * Password reset flow
  */
 declare const passwordResetFlow: FlowConfig;
+/**
+ * Email verification flow
+ */
+declare const emailVerificationFlow: FlowConfig;
 /**
  * Get predefined flow configuration by type
  */
@@ -725,6 +766,7 @@ declare const predefinedFlows: {
     phone_auth_flow: FlowConfig;
     oauth_sign_in: FlowConfig;
     password_reset_flow: FlowConfig;
+    email_verification_flow: FlowConfig;
 };
 
-export { AuthClient, type AuthClientConfig, AuthContext, AuthError, AuthErrorType, type AuthLocale, AuthProvider, type DeepPartial, FlowAction, type FlowConfig, FlowConfigType, FlowEngine, type FlowEvent, type FlowState, FlowStep, type FlowTransition, MagicLinkRequest, MagicLinkVerifyRequest, OAuthCallbackRequest, OAuthProvider, OAuthSignInRequest, Observable, Organization, OrganizationMembership, PasskeyAuthRequest, PasskeyCredential, PasskeyRegisterRequest, PasswordChangeRequest, PasswordResetConfirmRequest, PasswordResetRequest, PhoneAuthRequest, PhoneVerifyRequest, Session, SignInRequest, SignUpRequest, Storage, TokenManager, TwoFactorMethod, TwoFactorSetupRequest, TwoFactorSetupResponse, TwoFactorVerifyRequest, Unsubscribe, UpdateUserRequest, User, ValidationError, completeSignUpFlow, createAuthError, createLocale, defaultLocale, getFlowConfig, interpolate, isAuthError, isMFARequiredError, isNetworkError, isUnauthenticatedError, magicLinkFlow, oauthSignInFlow, passwordResetFlow, phoneAuthFlow, predefinedFlows, signInWithMFAFlow, simpleSignInFlow, toAuthError, validate2FACode, validateEmail, validatePassword, validatePhone, validateRequired, validateUsername };
+export { AuthClient, type AuthClientConfig, AuthContext, AuthError, AuthErrorType, type AuthLocale, AuthProvider, CookieData, type DeepPartial, FlowAction, type FlowConfig, FlowConfigType, FlowEngine, type FlowEvent, type FlowState, FlowStep, type FlowTransition, MagicLinkRequest, MagicLinkVerifyRequest, OAuthCallbackRequest, OAuthProvider, OAuthSignInRequest, Observable, Organization, OrganizationMembership, PasskeyAuthRequest, PasskeyCredential, PasskeyRegisterRequest, PasswordChangeRequest, PasswordResetConfirmRequest, PasswordResetRequest, PhoneAuthRequest, PhoneVerifyRequest, Session, SignInRequest, SignUpRequest, Storage, TokenManager, TwoFactorMethod, TwoFactorSetupRequest, TwoFactorSetupResponse, TwoFactorVerifyRequest, Unsubscribe, UpdateUserRequest, User, ValidationError, completeSignUpFlow, createAuthError, createLocale, defaultLocale, emailVerificationFlow, extractCookiesFromHeaders, getFlowConfig, interpolate, isAuthError, isMFARequiredError, isNetworkError, isUnauthenticatedError, magicLinkFlow, oauthSignInFlow, parseCookie, parseCookieOptions, passwordResetFlow, phoneAuthFlow, predefinedFlows, serializeCookie, serializeCookies, signInWithMFAFlow, simpleSignInFlow, toAuthError, validate2FACode, validateEmail, validatePassword, validatePhone, validateRequired, validateUsername };

package/dist/index.js

@@ -554,6 +554,106 @@ var TokenManager = class {
   }
 };
 
+// src/utils/cookies.ts
+function parseCookie(setCookieHeader) {
+  if (!setCookieHeader) return null;
+  const parts = setCookieHeader.split(";").map((p) => p.trim());
+  if (parts.length === 0) return null;
+  const [nameValue] = parts;
+  const [name, value] = nameValue.split("=");
+  if (!name || value === void 0) return null;
+  const cookieData = { name, value };
+  const options = {};
+  for (let i = 1; i < parts.length; i++) {
+    const part = parts[i];
+    const lowerPart = part.toLowerCase();
+    if (lowerPart === "httponly") {
+      options.httpOnly = true;
+    } else if (lowerPart === "secure") {
+      options.secure = true;
+    } else if (lowerPart.startsWith("path=")) {
+      options.path = part.substring(5);
+    } else if (lowerPart.startsWith("domain=")) {
+      options.domain = part.substring(7);
+    } else if (lowerPart.startsWith("max-age=")) {
+      const maxAge = parseInt(part.substring(8), 10);
+      if (!isNaN(maxAge)) {
+        options.maxAge = maxAge;
+      }
+    } else if (lowerPart.startsWith("expires=")) {
+      const expiresStr = part.substring(8);
+      const expiresDate = new Date(expiresStr);
+      if (!isNaN(expiresDate.getTime())) {
+        options.expires = expiresDate;
+      }
+    } else if (lowerPart.startsWith("samesite=")) {
+      const sameSiteValue = lowerPart.substring(9);
+      if (sameSiteValue === "strict" || sameSiteValue === "lax" || sameSiteValue === "none") {
+        options.sameSite = sameSiteValue;
+      }
+    }
+  }
+  if (Object.keys(options).length > 0) {
+    cookieData.options = options;
+  }
+  return cookieData;
+}
+function extractCookiesFromHeaders(setCookieHeaders) {
+  const headers = Array.isArray(setCookieHeaders) ? setCookieHeaders : [setCookieHeaders];
+  const cookies = [];
+  for (const header of headers) {
+    const cookie = parseCookie(header);
+    if (cookie) {
+      cookies.push(cookie);
+    }
+  }
+  return cookies;
+}
+function serializeCookie(cookie) {
+  const parts = [`${cookie.name}=${cookie.value}`];
+  if (cookie.options) {
+    const opts = cookie.options;
+    if (opts.path) {
+      parts.push(`Path=${opts.path}`);
+    }
+    if (opts.domain) {
+      parts.push(`Domain=${opts.domain}`);
+    }
+    if (opts.expires) {
+      parts.push(`Expires=${opts.expires.toUTCString()}`);
+    }
+    if (opts.maxAge !== void 0) {
+      parts.push(`Max-Age=${opts.maxAge}`);
+    }
+    if (opts.httpOnly) {
+      parts.push("HttpOnly");
+    }
+    if (opts.secure) {
+      parts.push("Secure");
+    }
+    if (opts.sameSite) {
+      const sameSite = opts.sameSite.charAt(0).toUpperCase() + opts.sameSite.slice(1);
+      parts.push(`SameSite=${sameSite}`);
+    }
+  }
+  return parts.join("; ");
+}
+function parseCookieOptions(cookieHeader) {
+  const cookies = {};
+  if (!cookieHeader) return cookies;
+  const pairs = cookieHeader.split(";").map((p) => p.trim());
+  for (const pair of pairs) {
+    const [name, value] = pair.split("=");
+    if (name && value !== void 0) {
+      cookies[name.trim()] = value.trim();
+    }
+  }
+  return cookies;
+}
+function serializeCookies(cookies) {
+  return Object.entries(cookies).map(([key, value]) => `${key}=${value}`).join("; ");
+}
+
 // src/adapters/base-provider.ts
 var BaseAuthProvider = class {
   constructor() {
@@ -1151,6 +1251,7 @@ var FlowConfigType = /* @__PURE__ */ ((FlowConfigType2) => {
   FlowConfigType2["COMPLETE_SIGN_UP_FLOW"] = "complete_sign_up_flow";
   FlowConfigType2["SECURE_SIGN_IN_FLOW"] = "secure_sign_in_flow";
   FlowConfigType2["PASSWORD_RESET_FLOW"] = "password_reset_flow";
+  FlowConfigType2["EMAIL_VERIFICATION_FLOW"] = "email_verification_flow";
   FlowConfigType2["CUSTOM"] = "custom";
   return FlowConfigType2;
 })(FlowConfigType || {});
@@ -1556,6 +1657,27 @@ var passwordResetFlow = {
     }
   }
 };
+var emailVerificationFlow = {
+  name: "Email Verification",
+  description: "Verify email address with code or link",
+  initialStep: "email_verification_required" /* EMAIL_VERIFICATION_REQUIRED */,
+  allowedSteps: [
+    "email_verification_required" /* EMAIL_VERIFICATION_REQUIRED */,
+    "email_verification_sent" /* EMAIL_VERIFICATION_SENT */,
+    "success" /* SUCCESS */,
+    "error" /* ERROR */
+  ],
+  transitions: {
+    ["email_verification_required" /* EMAIL_VERIFICATION_REQUIRED */]: {
+      onSuccess: "email_verification_sent" /* EMAIL_VERIFICATION_SENT */,
+      onError: "email_verification_required" /* EMAIL_VERIFICATION_REQUIRED */
+    },
+    ["email_verification_sent" /* EMAIL_VERIFICATION_SENT */]: {
+      onSuccess: "success" /* SUCCESS */,
+      onError: "email_verification_required" /* EMAIL_VERIFICATION_REQUIRED */
+    }
+  }
+};
 function getFlowConfig(type) {
   switch (type) {
     case "simple_sign_in" /* SIMPLE_SIGN_IN */:
@@ -1572,6 +1694,8 @@ function getFlowConfig(type) {
       return oauthSignInFlow;
     case "password_reset_flow" /* PASSWORD_RESET_FLOW */:
       return passwordResetFlow;
+    case "email_verification_flow" /* EMAIL_VERIFICATION_FLOW */:
+      return emailVerificationFlow;
     default:
       throw new Error(`Unknown flow type: ${type}`);
   }
@@ -1583,7 +1707,8 @@ var predefinedFlows = {
   ["magic_link_flow" /* MAGIC_LINK_FLOW */]: magicLinkFlow,
   ["phone_auth_flow" /* PHONE_AUTH_FLOW */]: phoneAuthFlow,
   ["oauth_sign_in" /* OAUTH_SIGN_IN */]: oauthSignInFlow,
-  ["password_reset_flow" /* PASSWORD_RESET_FLOW */]: passwordResetFlow
+  ["password_reset_flow" /* PASSWORD_RESET_FLOW */]: passwordResetFlow,
+  ["email_verification_flow" /* EMAIL_VERIFICATION_FLOW */]: emailVerificationFlow
 };
 
 exports.AuthClient = AuthClient;
@@ -1606,6 +1731,8 @@ exports.completeSignUpFlow = completeSignUpFlow;
 exports.createAuthError = createAuthError;
 exports.createLocale = createLocale;
 exports.defaultLocale = defaultLocale;
+exports.emailVerificationFlow = emailVerificationFlow;
+exports.extractCookiesFromHeaders = extractCookiesFromHeaders;
 exports.getFlowConfig = getFlowConfig;
 exports.interpolate = interpolate;
 exports.isAuthError = isAuthError;
@@ -1614,9 +1741,13 @@ exports.isNetworkError = isNetworkError;
 exports.isUnauthenticatedError = isUnauthenticatedError;
 exports.magicLinkFlow = magicLinkFlow;
 exports.oauthSignInFlow = oauthSignInFlow;
+exports.parseCookie = parseCookie;
+exports.parseCookieOptions = parseCookieOptions;
 exports.passwordResetFlow = passwordResetFlow;
 exports.phoneAuthFlow = phoneAuthFlow;
 exports.predefinedFlows = predefinedFlows;
+exports.serializeCookie = serializeCookie;
+exports.serializeCookies = serializeCookies;
 exports.signInWithMFAFlow = signInWithMFAFlow;
 exports.simpleSignInFlow = simpleSignInFlow;
 exports.toAuthError = toAuthError;