@clivly/auth-clerk 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Clivly
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,20 @@
+# @clivly/auth-clerk
+
+[Clerk](https://clerk.com) implementation of Clivly's `ClivlyAuthAdapter`. Resolves a CRM end-user's identity from the host app's Clerk session.
+
+`@clerk/backend` is a peer dependency.
+
+```ts
+import { createClerkAuthAdapter } from "@clivly/auth-clerk";
+
+const authAdapter = createClerkAuthAdapter({
+  secretKey: process.env.CLERK_SECRET_KEY!,
+  publishableKey: process.env.CLERK_PUBLISHABLE_KEY,
+});
+
+const user = await authAdapter.getUser(request); // { id, email, name } | null
+```
+
+## License
+
+MIT

package/dist/index.d.mts

@@ -0,0 +1,32 @@
+import { ClivlyAuthAdapter, ClivlyUser } from "@clivly/core";
+
+//#region src/map.d.ts
+interface ClerkLikeUser {
+  emailAddresses?: Array<{
+    id: string;
+    emailAddress: string;
+  }>;
+  firstName?: string | null;
+  id: string;
+  lastName?: string | null;
+  primaryEmailAddressId?: string | null;
+}
+declare function clerkUserToClivlyUser(user: ClerkLikeUser): ClivlyUser | null;
+//#endregion
+//#region src/index.d.ts
+interface ClerkAuthAdapterOptions {
+  /** Origins allowed to make authenticated requests (CSRF protection). */
+  authorizedParties?: string[];
+  /** Clerk publishable key (pk_…) — improves handshake reliability. */
+  publishableKey?: string;
+  /** Clerk secret key (sk_…). */
+  secretKey: string;
+}
+/**
+ * Clerk → ClivlyAuthAdapter. Resolves the CRM end-user's identity from the host
+ * app's Clerk session on each request. Answers "who is this person?" only —
+ * CRM authorization lives in the separate `crm_members` layer.
+ */
+declare function createClerkAuthAdapter(options: ClerkAuthAdapterOptions): ClivlyAuthAdapter;
+//#endregion
+export { ClerkAuthAdapterOptions, type ClerkLikeUser, clerkUserToClivlyUser, createClerkAuthAdapter };

package/dist/index.mjs

@@ -0,0 +1,32 @@
+import { createClerkClient } from "@clerk/backend";
+//#region src/map.ts
+function clerkUserToClivlyUser(user) {
+	const email = (user.emailAddresses?.find((address) => address.id === user.primaryEmailAddressId))?.emailAddress ?? user.emailAddresses?.[0]?.emailAddress;
+	if (!email) return null;
+	const name = [user.firstName, user.lastName].filter(Boolean).join(" ") || void 0;
+	return {
+		id: user.id,
+		email,
+		name
+	};
+}
+//#endregion
+//#region src/index.ts
+/**
+* Clerk → ClivlyAuthAdapter. Resolves the CRM end-user's identity from the host
+* app's Clerk session on each request. Answers "who is this person?" only —
+* CRM authorization lives in the separate `crm_members` layer.
+*/
+function createClerkAuthAdapter(options) {
+	const client = createClerkClient({
+		secretKey: options.secretKey,
+		publishableKey: options.publishableKey
+	});
+	return { async getUser(req) {
+		const auth = (await client.authenticateRequest(req, { authorizedParties: options.authorizedParties })).toAuth();
+		if (!auth?.userId) return null;
+		return clerkUserToClivlyUser(await client.users.getUser(auth.userId));
+	} };
+}
+//#endregion
+export { clerkUserToClivlyUser, createClerkAuthAdapter };

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@clivly/auth-clerk",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Clerk implementation of Clivly's ClivlyAuthAdapter.",
+  "license": "MIT",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@clivly/core": "0.1.0"
+  },
+  "peerDependencies": {
+    "@clerk/backend": ">=1"
+  },
+  "devDependencies": {
+    "@clerk/backend": "^1.34.0",
+    "tsdown": "^0.21.9",
+    "typescript": "^6",
+    "@clivly.com/config": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "check-types": "tsc --noEmit"
+  },
+  "main": "./dist/index.mjs",
+  "types": "./dist/index.d.mts"
+}