@bstockwelldev/auth-next 0.1.0

package/CONSUMER.md

@@ -0,0 +1,25 @@
+# Consumer guide: @bstockwelldev/auth-next
+
+## Trust boundaries
+
+**In package:**
+
+- `validateNextAuthUrl` — no module-level side effects
+- `resolveAuthEnvStatus` — pure function over `process.env` (or injected env)
+- `buildOAuthProvidersFromEnv` — OAuth providers from env keys
+- `createAuthOptions` — thin factory (~80 lines): providers + secret + callbacks
+
+**Stay in your app:**
+
+- Credentials / E2E test providers
+- `ensureSupabaseAuthUser`, signup telemetry, admin email
+- JWT callbacks with DB role sync and OAuth account persistence
+- `supabaseAdmin` and billing hooks
+
+## Dedup
+
+`validateNextAuthUrl` consolidates checks previously duplicated in `check-env.ts` and `validateAuthEnv.ts`. Call from `resolveAuthEnvStatus` or standalone at startup.
+
+## Optional peer
+
+`@bstockwelldev/env-kit` — use `nextAuthEnvSchema` in app preflight; not required at runtime by this package.

package/README.md

@@ -0,0 +1,41 @@
+# @bstockwelldev/auth-next
+
+NextAuth options factory, OAuth provider env resolution, and `NEXTAUTH_URL` validation.
+
+## Install
+
+```bash
+pnpm add @bstockwelldev/auth-next next-auth @bstockwelldev/env-kit
+```
+
+## Usage
+
+```typescript
+import {
+  resolveAuthEnvStatus,
+  buildOAuthProvidersFromEnv,
+  createAuthOptions,
+} from '@bstockwelldev/auth-next';
+import GoogleProvider from 'next-auth/providers/google';
+
+const authEnv = resolveAuthEnvStatus({
+  log: logger,
+  providers: [
+    { name: 'Google', idKey: 'GOOGLE_CLIENT_ID', secretKey: 'GOOGLE_CLIENT_SECRET' },
+  ],
+});
+
+const providers = buildOAuthProvidersFromEnv(
+  [{ name: 'Google', idKey: 'GOOGLE_CLIENT_ID', secretKey: 'GOOGLE_CLIENT_SECRET', create: GoogleProvider }],
+  { log: logger },
+);
+
+export const authOptions = createAuthOptions({
+  enabled: authEnv.enabled,
+  providers,
+  secret: process.env.NEXTAUTH_SECRET,
+  callbacks: { /* app jwt/session */ },
+});
+```
+
+See [CONSUMER.md](./CONSUMER.md).

package/dist/index.d.ts

@@ -0,0 +1,61 @@
+import type { NextAuthOptions } from 'next-auth';
+import type { OAuthConfig, OAuthUserConfig } from 'next-auth/providers/oauth';
+export type AuthLogger = {
+    debug?: (message: string, meta?: Record<string, unknown>) => void;
+    info?: (message: string, meta?: Record<string, unknown>) => void;
+    warn?: (message: string, meta?: Record<string, unknown>) => void;
+    error?: (message: string, meta?: Record<string, unknown>) => void;
+};
+export type ProviderStatus = {
+    enabled: boolean;
+    missingKeys: string[];
+};
+export type AuthEnvStatus = {
+    enabled: boolean;
+    providers: Record<string, ProviderStatus>;
+    enabledProviders: string[];
+};
+export type DeprecatedProviderKeys = {
+    id: string;
+    secret: string;
+};
+export type OAuthProviderEnvConfig = {
+    name: string;
+    idKey: string;
+    secretKey: string;
+    deprecated?: DeprecatedProviderKeys;
+    /** When false, provider is reported disabled without env key checks. */
+    isEnabled?: (env: NodeJS.ProcessEnv) => boolean;
+    /** Optional missing-key placeholder when disabled by feature flag. */
+    disabledMissingKeys?: string[];
+};
+export type OAuthFactory = (options: OAuthUserConfig<Record<string, unknown>>) => OAuthConfig<Record<string, unknown>>;
+export type OAuthProviderDefinition = OAuthProviderEnvConfig & {
+    create: OAuthFactory;
+    configure?: (options: OAuthUserConfig<Record<string, unknown>>, env: NodeJS.ProcessEnv) => void;
+};
+export type ResolveAuthEnvOptions = {
+    env?: NodeJS.ProcessEnv;
+    log?: AuthLogger;
+    providers?: OAuthProviderEnvConfig[];
+};
+export type ValidateNextAuthUrlOptions = {
+    env?: NodeJS.ProcessEnv;
+    log?: AuthLogger;
+};
+export type CreateAuthOptionsInput = {
+    enabled: boolean;
+    providers: NextAuthOptions['providers'];
+    secret?: string;
+    trustHost?: boolean;
+    callbacks?: NextAuthOptions['callbacks'];
+    log?: AuthLogger;
+};
+export declare function validateNextAuthUrl(options?: ValidateNextAuthUrlOptions): void;
+export declare function resolveAuthEnvStatus(options?: ResolveAuthEnvOptions): AuthEnvStatus;
+export declare function buildOAuthProvidersFromEnv(definitions: OAuthProviderDefinition[], options?: {
+    env?: NodeJS.ProcessEnv;
+    log?: AuthLogger;
+}): NextAuthOptions['providers'];
+export declare function createAuthOptions(input: CreateAuthOptionsInput): NextAuthOptions | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE9E,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACnE,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1C,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,wEAAwE;IACxE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC;IAChD,sEAAsE;IACtE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvH,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,GAAG;IAC7D,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,CAAC,EAAE,CACV,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACjD,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,IAAI,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,SAAS,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB,CAAC;AAMF,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,0BAA+B,GACvC,IAAI,CAyEN;AA4CD,wBAAgB,oBAAoB,CAClC,OAAO,GAAE,qBAA0B,GAClC,aAAa,CA6Cf;AAED,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,uBAAuB,EAAE,EACtC,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,GAAG,CAAC,EAAE,UAAU,CAAA;CAAO,GAC1D,eAAe,CAAC,WAAW,CAAC,CAsB9B;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,GAC5B,eAAe,GAAG,IAAI,CAiCxB"}

package/dist/index.js

@@ -0,0 +1,166 @@
+function resolveEnv(env) {
+    return env ?? process.env;
+}
+export function validateNextAuthUrl(options = {}) {
+    const env = resolveEnv(options.env);
+    const log = options.log;
+    const nextAuthUrl = env.NEXTAUTH_URL;
+    if (!nextAuthUrl) {
+        log?.warn?.('[Auth] NEXTAUTH_URL not set. Host validation may fail.');
+        return;
+    }
+    if (nextAuthUrl.endsWith('/')) {
+        log?.warn?.('[Auth] NEXTAUTH_URL has a trailing slash. Remove it to avoid issues.', { nextAuthUrl });
+    }
+    try {
+        const url = new URL(nextAuthUrl);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+            log?.error?.('[Auth] NEXTAUTH_URL has invalid protocol. Must be http:// or https://', { protocol: url.protocol, nextAuthUrl });
+            return;
+        }
+        const hostname = url.hostname;
+        if (hostname === '127.0.0.1' && env.NODE_ENV === 'development') {
+            log?.warn?.("[Auth] NEXTAUTH_URL uses 127.0.0.1. Consider using 'localhost' for consistency.", { nextAuthUrl });
+        }
+        if (env.NODE_ENV === 'development') {
+            const port = url.port || (url.protocol === 'https:' ? '443' : '80');
+            const expectedPort = env.PORT || '3000';
+            if (port !== expectedPort) {
+                log?.warn?.("[Auth] NEXTAUTH_URL port doesn't match expected port. Ensure your dev server runs on the port specified in NEXTAUTH_URL.", {
+                    nextAuthUrl,
+                    urlPort: port,
+                    expectedPort,
+                });
+            }
+        }
+        if (url.pathname !== '/' && url.pathname !== '') {
+            log?.warn?.('[Auth] NEXTAUTH_URL has a pathname. This is unusual and may cause issues.', { nextAuthUrl, pathname: url.pathname });
+        }
+        if (url.search || url.hash) {
+            log?.warn?.('[Auth] NEXTAUTH_URL contains query parameters or hash. These are ignored.', { nextAuthUrl });
+        }
+        log?.debug?.('[Auth] NEXTAUTH_URL format is valid', {
+            nextAuthUrl: `${url.protocol}//${url.host}`,
+        });
+    }
+    catch (error) {
+        log?.error?.('[Auth] NEXTAUTH_URL is not a valid URL', {
+            nextAuthUrl,
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
+}
+function checkProviderEnv(env, config, log) {
+    if (config.isEnabled && !config.isEnabled(env)) {
+        return {
+            enabled: false,
+            missingKeys: config.disabledMissingKeys ?? [],
+        };
+    }
+    let id = env[config.idKey];
+    let secret = env[config.secretKey];
+    if ((!id || !secret) && config.deprecated) {
+        const depId = env[config.deprecated.id];
+        const depSecret = env[config.deprecated.secret];
+        if (depId && depSecret) {
+            id = depId;
+            secret = depSecret;
+            log?.warn?.(`[Auth] Detected ${config.deprecated.id}/${config.deprecated.secret}; use ${config.idKey}/${config.secretKey}`);
+        }
+        else if (depId || depSecret) {
+            log?.warn?.(`[Auth] Detected ${config.deprecated.id}/${config.deprecated.secret}; use ${config.idKey}/${config.secretKey}`);
+        }
+    }
+    const missing = [];
+    if (!id)
+        missing.push(config.idKey);
+    if (!secret)
+        missing.push(config.secretKey);
+    const enabled = missing.length === 0;
+    if (!enabled) {
+        log?.warn?.(`[Auth] ${config.name} provider disabled. Missing: ${missing.join(', ')}`);
+    }
+    return { enabled, missingKeys: missing };
+}
+export function resolveAuthEnvStatus(options = {}) {
+    const env = resolveEnv(options.env);
+    const log = options.log;
+    const providerConfigs = options.providers ?? [];
+    const enabled = Boolean(env.NEXTAUTH_SECRET);
+    validateNextAuthUrl({ env, log });
+    if (!enabled) {
+        log?.warn?.('[Auth] NEXTAUTH_SECRET not set. Authentication disabled.');
+    }
+    else {
+        const secret = env.NEXTAUTH_SECRET;
+        if (secret && secret.length < 32) {
+            log?.warn?.('[Auth] NEXTAUTH_SECRET is shorter than 32 characters. Consider using a longer secret for better security.');
+        }
+        const weakSecrets = [
+            'secret',
+            'changeme',
+            'your-secret-key',
+            'nextauth-secret',
+        ];
+        if (secret &&
+            weakSecrets.some((weak) => secret.toLowerCase().includes(weak))) {
+            log?.warn?.('[Auth] NEXTAUTH_SECRET appears to be a placeholder or weak secret. Use a strong, random secret in production.');
+        }
+    }
+    const providers = {};
+    for (const config of providerConfigs) {
+        const key = config.name.toLowerCase();
+        providers[key] = checkProviderEnv(env, config, log);
+    }
+    const enabledProviders = Object.entries(providers)
+        .filter(([, info]) => info.enabled)
+        .map(([name]) => name);
+    return { enabled, providers, enabledProviders };
+}
+export function buildOAuthProvidersFromEnv(definitions, options = {}) {
+    const env = resolveEnv(options.env);
+    const log = options.log;
+    const providers = [];
+    for (const definition of definitions) {
+        const status = checkProviderEnv(env, definition, log);
+        if (!status.enabled) {
+            continue;
+        }
+        const clientId = env[definition.idKey];
+        const clientSecret = env[definition.secretKey];
+        const oauthOptions = {
+            clientId,
+            clientSecret,
+        };
+        definition.configure?.(oauthOptions, env);
+        providers.push(definition.create(oauthOptions));
+    }
+    return providers;
+}
+export function createAuthOptions(input) {
+    if (!input.enabled) {
+        return null;
+    }
+    const env = process.env;
+    const nextAuthUrl = env.NEXTAUTH_URL;
+    if (!nextAuthUrl) {
+        input.log?.warn?.('[Auth] NEXTAUTH_URL is missing. This may cause redirect issues.');
+    }
+    else {
+        const isLocal = nextAuthUrl.includes('localhost') || nextAuthUrl.includes('127.0.0.1');
+        const isProd = env.NODE_ENV === 'production';
+        if (isProd && isLocal) {
+            input.log?.warn?.(`[Auth] NEXTAUTH_URL (${nextAuthUrl}) points to localhost in production. This will break OAuth redirects.`);
+        }
+        else if (!isProd && !isLocal) {
+            input.log?.info?.(`[Auth] NEXTAUTH_URL (${nextAuthUrl}) points to a remote domain in development. Ensure OAuth providers allow this.`);
+        }
+    }
+    return {
+        providers: input.providers,
+        secret: input.secret,
+        trustHost: input.trustHost,
+        callbacks: input.callbacks,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmEA,SAAS,UAAU,CAAC,GAAuB;IACzC,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,UAAsC,EAAE;IAExC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,GAAG,EAAE,IAAI,EAAE,CAAC,wDAAwD,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,EAAE,IAAI,EAAE,CACT,sEAAsE,EACtE,EAAE,WAAW,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QAEjC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,GAAG,EAAE,KAAK,EAAE,CACV,uEAAuE,EACvE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,CACxC,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC9B,IAAI,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/D,GAAG,EAAE,IAAI,EAAE,CACT,iFAAiF,EACjF,EAAE,WAAW,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC;YACxC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,GAAG,EAAE,IAAI,EAAE,CACT,0HAA0H,EAC1H;oBACE,WAAW;oBACX,OAAO,EAAE,IAAI;oBACb,YAAY;iBACb,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAChD,GAAG,EAAE,IAAI,EAAE,CACT,2EAA2E,EAC3E,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CACxC,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,GAAG,EAAE,IAAI,EAAE,CACT,2EAA2E,EAC3E,EAAE,WAAW,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,GAAG,EAAE,KAAK,EAAE,CAAC,qCAAqC,EAAE;YAClD,WAAW,EAAE,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,EAAE,KAAK,EAAE,CAAC,wCAAwC,EAAE;YACrD,WAAW;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAsB,EACtB,MAA8B,EAC9B,GAAgB;IAEhB,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,MAAM,CAAC,mBAAmB,IAAI,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;YACvB,EAAE,GAAG,KAAK,CAAC;YACX,MAAM,GAAG,SAAS,CAAC;YACnB,GAAG,EAAE,IAAI,EAAE,CACT,mBAAmB,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,SAAS,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE,CAC/G,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,GAAG,EAAE,IAAI,EAAE,CACT,mBAAmB,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,SAAS,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,EAAE,IAAI,EAAE,CACT,UAAU,MAAM,CAAC,IAAI,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,UAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE7C,mBAAmB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAElC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,EAAE,IAAI,EAAE,CAAC,0DAA0D,CAAC,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;QACnC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACjC,GAAG,EAAE,IAAI,EAAE,CACT,2GAA2G,CAC5G,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,QAAQ;YACR,UAAU;YACV,iBAAiB;YACjB,iBAAiB;SAClB,CAAC;QACF,IACE,MAAM;YACN,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAC/D,CAAC;YACD,GAAG,EAAE,IAAI,EAAE,CACT,+GAA+G,CAChH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,SAAS,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;SAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAEzB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,WAAsC,EACtC,UAAyD,EAAE;IAE3D,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,SAAS,GAAiC,EAAE,CAAC;IAEnD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAE,CAAC;QACxC,MAAM,YAAY,GAAG,GAAG,CAAC,UAAU,CAAC,SAAS,CAAE,CAAC;QAChD,MAAM,YAAY,GAA6C;YAC7D,QAAQ;YACR,YAAY;SACb,CAAC;QACF,UAAU,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC1C,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAA6B;IAE7B,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CACf,iEAAiE,CAClE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GACX,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;QAE7C,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;YACtB,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CACf,wBAAwB,WAAW,uEAAuE,CAC3G,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CACf,wBAAwB,WAAW,gFAAgF,CACpH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;KACR,CAAC;AACvB,CAAC"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@bstockwelldev/auth-next",
+  "version": "0.1.0",
+  "description": "NextAuth options factory and auth env validation for @bstockwelldev SaaS apps",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "CONSUMER.md"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "prepare": "tsc -p tsconfig.json"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bstockwelldev/codex-apps.git",
+    "directory": "packages/auth-next"
+  },
+  "keywords": [
+    "nextauth",
+    "auth",
+    "oauth",
+    "saas"
+  ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "@bstockwelldev/env-kit": "^0.1.0",
+    "next-auth": "^4.24.0"
+  },
+  "peerDependenciesMeta": {
+    "@bstockwelldev/env-kit": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@bstockwelldev/env-kit": "workspace:*",
+    "@types/node": "^20.17.10",
+    "next-auth": "^4.24.11",
+    "typescript": "^5.7.2",
+    "vitest": "^3.2.4"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}