@clivly/auth-workos 0.1.0 → 0.2.0

package/dist/index.cjs

@@ -0,0 +1,47 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _workos_inc_node = require("@workos-inc/node");
+//#region src/map.ts
+function workosUserToClivlyUser(user) {
+	if (!user.email) return null;
+	const name = [user.firstName, user.lastName].filter(Boolean).join(" ") || void 0;
+	return {
+		id: user.id,
+		email: user.email,
+		name
+	};
+}
+function readCookie(req, name) {
+	const header = req.headers.get("cookie");
+	if (!header) return null;
+	for (const part of header.split(";")) {
+		const eq = part.indexOf("=");
+		if (eq === -1) continue;
+		if (part.slice(0, eq).trim() === name) return decodeURIComponent(part.slice(eq + 1).trim());
+	}
+	return null;
+}
+//#endregion
+//#region src/index.ts
+const DEFAULT_COOKIE_NAME = "wos-session";
+/**
+* WorkOS → ClivlyAuthAdapter. Unseals the host app's AuthKit session cookie and
+* resolves the CRM end-user's identity. Answers "who is this person?" only —
+* CRM authorization lives in the separate `crm_members` layer.
+*/
+function createWorkOSAuthAdapter(options) {
+	const workos = new _workos_inc_node.WorkOS(options.apiKey, { clientId: options.clientId });
+	const cookieName = options.cookieName ?? DEFAULT_COOKIE_NAME;
+	return { async getUser(req) {
+		const sessionData = readCookie(req, cookieName);
+		if (!sessionData) return null;
+		const result = await workos.userManagement.loadSealedSession({
+			sessionData,
+			cookiePassword: options.cookiePassword
+		}).authenticate();
+		if (!result.authenticated) return null;
+		return workosUserToClivlyUser(result.user);
+	} };
+}
+//#endregion
+exports.createWorkOSAuthAdapter = createWorkOSAuthAdapter;
+exports.workosUserToClivlyUser = workosUserToClivlyUser;

package/dist/index.d.cts

@@ -0,0 +1,30 @@
+import { ClivlyAuthAdapter, ClivlyUser } from "@clivly/core";
+
+//#region src/map.d.ts
+interface WorkOSLikeUser {
+  email: string;
+  firstName?: string | null;
+  id: string;
+  lastName?: string | null;
+}
+declare function workosUserToClivlyUser(user: WorkOSLikeUser): ClivlyUser | null;
+//#endregion
+//#region src/index.d.ts
+interface WorkOSAuthAdapterOptions {
+  /** WorkOS API key (sk_…). */
+  apiKey: string;
+  /** WorkOS client ID (client_…). */
+  clientId: string;
+  /** Session cookie name. Defaults to `wos-session`. */
+  cookieName?: string;
+  /** Password used to unseal the AuthKit session cookie. */
+  cookiePassword: string;
+}
+/**
+ * WorkOS → ClivlyAuthAdapter. Unseals the host app's AuthKit session cookie and
+ * resolves the CRM end-user's identity. Answers "who is this person?" only —
+ * CRM authorization lives in the separate `crm_members` layer.
+ */
+declare function createWorkOSAuthAdapter(options: WorkOSAuthAdapterOptions): ClivlyAuthAdapter;
+//#endregion
+export { WorkOSAuthAdapterOptions, type WorkOSLikeUser, createWorkOSAuthAdapter, workosUserToClivlyUser };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clivly/auth-workos",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "private": false,
   "type": "module",
   "description": "WorkOS implementation of Clivly's ClivlyAuthAdapter.",
@@ -8,8 +8,14 @@
   "sideEffects": false,
   "exports": {
     ".": {
-      "types": "./dist/index.d.mts",
-      "import": "./dist/index.mjs"
+      "import": {
+        "types": "./dist/index.d.mts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
     }
   },
   "files": [
@@ -19,7 +25,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@clivly/core": "0.1.0"
+    "@clivly/core": "0.2.0"
   },
   "peerDependencies": {
     "@workos-inc/node": ">=7"
@@ -27,13 +33,13 @@
   "devDependencies": {
     "@workos-inc/node": "^7.75.0",
     "tsdown": "^0.21.9",
-    "typescript": "^6",
-    "@clivly.com/config": "0.0.0"
+    "typescript": "^6"
   },
   "scripts": {
     "build": "tsdown",
     "check-types": "tsc --noEmit"
   },
-  "main": "./dist/index.mjs",
-  "types": "./dist/index.d.mts"
+  "main": "./dist/index.cjs",
+  "types": "./dist/index.d.cts",
+  "module": "./dist/index.mjs"
 }