@dailyautomations/auth 1.0.0

package/dist/provisioning.js

@@ -0,0 +1,224 @@
+"use strict";
+/**
+ * @daily/auth Provisioning Service
+ * Auto-provision workspaces and app registrations for users
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProvisioningService = void 0;
+const errors_js_1 = require("./errors.js");
+class ProvisioningService {
+    supabase;
+    appSlug;
+    constructor(supabase, appSlug) {
+        this.supabase = supabase;
+        this.appSlug = appSlug;
+    }
+    /**
+     * Provision a new user with workspace and app registration
+     * Called on signup
+     */
+    async provisionNewUser(userId, email, options) {
+        const workspaceName = options?.workspaceName || this.generateWorkspaceName(email);
+        const workspaceSlug = options?.workspaceSlug || this.generateSlug(workspaceName);
+        try {
+            // Create workspace
+            const { data: workspace, error: wsError } = await this.supabase
+                .from('daily_core.workspaces')
+                .insert({
+                name: workspaceName,
+                slug: workspaceSlug,
+                owner_id: userId,
+                settings: {},
+            })
+                .select()
+                .single();
+            if (wsError) {
+                throw new errors_js_1.DailyAuthError('PROVISIONING_FAILED', `Failed to create workspace: ${wsError.message}`);
+            }
+            // Create workspace membership (owner)
+            const { data: membership, error: memberError } = await this.supabase
+                .from('daily_core.workspace_members')
+                .insert({
+                workspace_id: workspace.id,
+                user_id: userId,
+                role: 'owner',
+            })
+                .select()
+                .single();
+            if (memberError) {
+                throw new errors_js_1.DailyAuthError('PROVISIONING_FAILED', `Failed to create membership: ${memberError.message}`);
+            }
+            // Create app registration
+            const { data: appReg, error: appError } = await this.supabase
+                .from('daily_core.app_registrations')
+                .insert({
+                workspace_id: workspace.id,
+                app_slug: this.appSlug,
+                enabled: true,
+                settings: options?.appSettings || {},
+            })
+                .select()
+                .single();
+            if (appError) {
+                throw new errors_js_1.DailyAuthError('PROVISIONING_FAILED', `Failed to create app registration: ${appError.message}`);
+            }
+            return {
+                workspace: {
+                    id: workspace.id,
+                    name: workspace.name,
+                    slug: workspace.slug,
+                    role: 'owner',
+                },
+                appRegistration: {
+                    id: appReg.id,
+                    appSlug: this.appSlug,
+                    enabled: true,
+                    isFirstAccess: true,
+                },
+                membership: {
+                    id: membership.id,
+                    role: 'owner',
+                },
+            };
+        }
+        catch (err) {
+            if (err instanceof errors_js_1.DailyAuthError)
+                throw err;
+            throw new errors_js_1.DailyAuthError('PROVISIONING_FAILED', `Provisioning failed: ${err.message}`);
+        }
+    }
+    /**
+     * Ensure user has access to current app
+     * Creates app_registration if missing (first time on this app)
+     */
+    async ensureAppAccess(userId) {
+        // Get user's primary workspace (first one they own)
+        const workspaces = await this.getUserWorkspaces(userId);
+        if (workspaces.length === 0) {
+            // User has no workspace - shouldn't happen after proper signup
+            return {};
+        }
+        // Use first owned workspace, or first available
+        const workspace = workspaces.find((w) => w.role === 'owner') || workspaces[0];
+        // Check if app registration exists for this workspace
+        const { data: existingReg } = await this.supabase
+            .from('daily_core.app_registrations')
+            .select('*')
+            .eq('workspace_id', workspace.id)
+            .eq('app_slug', this.appSlug)
+            .single();
+        if (existingReg) {
+            return {
+                workspace,
+                appRegistration: {
+                    id: existingReg.id,
+                    appSlug: this.appSlug,
+                    enabled: existingReg.enabled,
+                    isFirstAccess: false,
+                },
+            };
+        }
+        // First time accessing this app - create registration
+        const { data: newReg, error } = await this.supabase
+            .from('daily_core.app_registrations')
+            .insert({
+            workspace_id: workspace.id,
+            app_slug: this.appSlug,
+            enabled: true,
+            settings: {},
+        })
+            .select()
+            .single();
+        if (error) {
+            console.error('Failed to create app registration:', error);
+            return { workspace };
+        }
+        return {
+            workspace,
+            appRegistration: {
+                id: newReg.id,
+                appSlug: this.appSlug,
+                enabled: true,
+                isFirstAccess: true,
+            },
+        };
+    }
+    /**
+     * Get all workspaces for a user
+     */
+    async getUserWorkspaces(userId) {
+        // Get memberships
+        const { data: memberships, error: memberError } = await this.supabase
+            .from('daily_core.workspace_members')
+            .select('workspace_id, role')
+            .eq('user_id', userId);
+        if (memberError || !memberships || memberships.length === 0) {
+            return [];
+        }
+        const workspaceIds = memberships.map((m) => m.workspace_id);
+        // Get workspace details
+        const { data: workspaces, error: wsError } = await this.supabase
+            .from('daily_core.workspaces')
+            .select('id, name, slug')
+            .in('id', workspaceIds);
+        if (wsError || !workspaces) {
+            return [];
+        }
+        // Combine data
+        return workspaces.map((ws) => {
+            const membership = memberships.find((m) => m.workspace_id === ws.id);
+            return {
+                id: ws.id,
+                name: ws.name,
+                slug: ws.slug,
+                role: (membership?.role || 'member'),
+            };
+        });
+    }
+    /**
+     * Check if app registration exists for workspace
+     */
+    async getAppRegistration(workspaceId) {
+        const { data, error } = await this.supabase
+            .from('daily_core.app_registrations')
+            .select('*')
+            .eq('workspace_id', workspaceId)
+            .eq('app_slug', this.appSlug)
+            .single();
+        if (error || !data) {
+            return null;
+        }
+        return {
+            id: data.id,
+            appSlug: this.appSlug,
+            enabled: data.enabled,
+            isFirstAccess: false,
+        };
+    }
+    /**
+     * Generate workspace name from email
+     */
+    generateWorkspaceName(email) {
+        const localPart = email.split('@')[0];
+        // Capitalize and clean up
+        return localPart
+            .replace(/[._-]/g, ' ')
+            .replace(/\b\w/g, (c) => c.toUpperCase())
+            .trim() + "'s Workspace";
+    }
+    /**
+     * Generate URL-safe slug from name
+     */
+    generateSlug(name) {
+        const base = name
+            .toLowerCase()
+            .replace(/[']/g, '')
+            .replace(/[^a-z0-9]+/g, '-')
+            .replace(/^-|-$/g, '');
+        // Add random suffix to ensure uniqueness
+        const suffix = Math.random().toString(36).substring(2, 6);
+        return `${base}-${suffix}`;
+    }
+}
+exports.ProvisioningService = ProvisioningService;
+//# sourceMappingURL=provisioning.js.map

package/dist/provisioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.js","sourceRoot":"","sources":["../src/provisioning.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAWH,2CAA6C;AAE7C,MAAa,mBAAmB;IAEpB;IACA;IAFV,YACU,QAAwB,EACxB,OAAgB;QADhB,aAAQ,GAAR,QAAQ,CAAgB;QACxB,YAAO,GAAP,OAAO,CAAS;IACvB,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAAc,EACd,KAAa,EACb,OAA6B;QAE7B,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAEjF,IAAI,CAAC;YACH,mBAAmB;YACnB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;iBAC5D,IAAI,CAAC,uBAAuB,CAAC;iBAC7B,MAAM,CAAC;gBACN,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC;iBACD,MAAM,EAAE;iBACR,MAAM,EAAE,CAAC;YAEZ,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,0BAAc,CACtB,qBAAqB,EACrB,+BAA+B,OAAO,CAAC,OAAO,EAAE,CACjD,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;iBACjE,IAAI,CAAC,8BAA8B,CAAC;iBACpC,MAAM,CAAC;gBACN,YAAY,EAAE,SAAS,CAAC,EAAE;gBAC1B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,OAAO;aACd,CAAC;iBACD,MAAM,EAAE;iBACR,MAAM,EAAE,CAAC;YAEZ,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,0BAAc,CACtB,qBAAqB,EACrB,gCAAgC,WAAW,CAAC,OAAO,EAAE,CACtD,CAAC;YACJ,CAAC;YAED,0BAA0B;YAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;iBAC1D,IAAI,CAAC,8BAA8B,CAAC;iBACpC,MAAM,CAAC;gBACN,YAAY,EAAE,SAAS,CAAC,EAAE;gBAC1B,QAAQ,EAAE,IAAI,CAAC,OAAO;gBACtB,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE;aACrC,CAAC;iBACD,MAAM,EAAE;iBACR,MAAM,EAAE,CAAC;YAEZ,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,0BAAc,CACtB,qBAAqB,EACrB,sCAAsC,QAAQ,CAAC,OAAO,EAAE,CACzD,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,SAAS,EAAE;oBACT,EAAE,EAAE,SAAS,CAAC,EAAE;oBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,OAAO;iBACd;gBACD,eAAe,EAAE;oBACf,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,OAAO,EAAE,IAAI;oBACb,aAAa,EAAE,IAAI;iBACpB;gBACD,UAAU,EAAE;oBACV,EAAE,EAAE,UAAU,CAAC,EAAE;oBACjB,IAAI,EAAE,OAAO;iBACd;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,0BAAc;gBAAE,MAAM,GAAG,CAAC;YAC7C,MAAM,IAAI,0BAAc,CACtB,qBAAqB,EACrB,wBAAyB,GAAa,CAAC,OAAO,EAAE,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc;QAIlC,oDAAoD;QACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAExD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,+DAA+D;YAC/D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,gDAAgD;QAChD,MAAM,SAAS,GACb,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAE9D,sDAAsD;QACtD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAC9C,IAAI,CAAC,8BAA8B,CAAC;aACpC,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;aAChC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC;aAC5B,MAAM,EAAE,CAAC;QAEZ,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO;gBACL,SAAS;gBACT,eAAe,EAAE;oBACf,EAAE,EAAE,WAAW,CAAC,EAAE;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,OAAO,EAAE,WAAW,CAAC,OAAO;oBAC5B,aAAa,EAAE,KAAK;iBACrB;aACF,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAChD,IAAI,CAAC,8BAA8B,CAAC;aACpC,MAAM,CAAC;YACN,YAAY,EAAE,SAAS,CAAC,EAAE;YAC1B,QAAQ,EAAE,IAAI,CAAC,OAAO;YACtB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,EAAE;SACb,CAAC;aACD,MAAM,EAAE;aACR,MAAM,EAAE,CAAC;QAEZ,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QAED,OAAO;YACL,SAAS;YACT,eAAe,EAAE;gBACf,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,IAAI;aACpB;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAc;QACpC,kBAAkB;QAClB,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAClE,IAAI,CAAC,8BAA8B,CAAC;aACpC,MAAM,CAAC,oBAAoB,CAAC;aAC5B,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEzB,IAAI,WAAW,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAE5D,wBAAwB;QACxB,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAC7D,IAAI,CAAC,uBAAuB,CAAC;aAC7B,MAAM,CAAC,gBAAgB,CAAC;aACxB,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAE1B,IAAI,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,eAAe;QACf,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAC3B,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,IAAI,QAAQ,CAAkB;aACtD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,WAAmB;QAEnB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,8BAA8B,CAAC;aACpC,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;aAC/B,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC;aAC5B,MAAM,EAAE,CAAC;QAEZ,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,KAAK;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,KAAa;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,0BAA0B;QAC1B,OAAO,SAAS;aACb,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;aACtB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aACxC,IAAI,EAAE,GAAG,cAAc,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,IAAY;QAC/B,MAAM,IAAI,GAAG,IAAI;aACd,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;aACnB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;aAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAEzB,yCAAyC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;IAC7B,CAAC;CACF;AAnQD,kDAmQC"}

package/dist/react.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @daily/auth React hooks
+ *
+ * Import via: import { AuthProvider, useAuth, useUser } from '@daily/auth/react';
+ */
+export { AuthProvider, useAuth, useUser, useAuthClient, } from './hooks/index.js';
+//# sourceMappingURL=react.d.ts.map

package/dist/react.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,OAAO,EACP,aAAa,GACd,MAAM,kBAAkB,CAAC"}

package/dist/react.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * @daily/auth React hooks
+ *
+ * Import via: import { AuthProvider, useAuth, useUser } from '@daily/auth/react';
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useAuthClient = exports.useUser = exports.useAuth = exports.AuthProvider = void 0;
+var index_js_1 = require("./hooks/index.js");
+Object.defineProperty(exports, "AuthProvider", { enumerable: true, get: function () { return index_js_1.AuthProvider; } });
+Object.defineProperty(exports, "useAuth", { enumerable: true, get: function () { return index_js_1.useAuth; } });
+Object.defineProperty(exports, "useUser", { enumerable: true, get: function () { return index_js_1.useUser; } });
+Object.defineProperty(exports, "useAuthClient", { enumerable: true, get: function () { return index_js_1.useAuthClient; } });
+//# sourceMappingURL=react.js.map

package/dist/react.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6CAK0B;AAJxB,wGAAA,YAAY,OAAA;AACZ,mGAAA,OAAO,OAAA;AACP,mGAAA,OAAO,OAAA;AACP,yGAAA,aAAa,OAAA"}

package/dist/types.d.ts

@@ -0,0 +1,99 @@
+/**
+ * @daily/auth Types
+ * Standard auth toolkit for Daily applications
+ */
+import type { User, Session } from '@supabase/supabase-js';
+export type WorkspaceRole = 'owner' | 'admin' | 'member' | 'viewer';
+export type OAuthProvider = 'google' | 'github' | 'azure';
+export interface DailyAuthOptions {
+    /** Supabase project URL */
+    supabaseUrl: string;
+    /** Supabase anon key (client-side) */
+    supabaseAnonKey: string;
+    /** Service role key for server-side operations (optional) */
+    serviceKey?: string;
+    /** Auto-create workspace on signup (default: true) */
+    autoCreateWorkspace?: boolean;
+    /** Default workspace name template */
+    workspaceNameTemplate?: (email: string) => string;
+}
+export interface SignUpParams {
+    email: string;
+    password: string;
+    metadata?: {
+        displayName?: string;
+        avatarUrl?: string;
+        [key: string]: unknown;
+    };
+    /** Custom workspace name (optional) */
+    workspaceName?: string;
+}
+export interface SignInParams {
+    email: string;
+    password: string;
+}
+export interface OAuthParams {
+    provider: OAuthProvider;
+    redirectTo?: string;
+    scopes?: string;
+}
+export interface ResetPasswordParams {
+    email: string;
+    redirectTo?: string;
+}
+export interface AuthResult {
+    user: User | null;
+    session: Session | null;
+    isNewUser: boolean;
+    workspace?: WorkspaceInfo;
+    error?: AuthErrorInfo;
+}
+export interface WorkspaceInfo {
+    id: string;
+    name: string;
+    slug: string;
+    role: WorkspaceRole;
+}
+export interface AuthErrorInfo {
+    code: AuthErrorCode;
+    message: string;
+    hint?: string;
+}
+export type AuthErrorCode = 'INVALID_CREDENTIALS' | 'EMAIL_NOT_CONFIRMED' | 'EMAIL_ALREADY_EXISTS' | 'WEAK_PASSWORD' | 'WORKSPACE_CREATION_FAILED' | 'RATE_LIMITED' | 'NETWORK_ERROR' | 'UNKNOWN_ERROR';
+export interface JWTPayload {
+    sub: string;
+    email?: string;
+    role?: string;
+    aud: string;
+    exp: number;
+    iat: number;
+}
+export interface AuthMiddlewareOptions {
+    supabaseUrl: string;
+    supabaseServiceKey: string;
+    /** Routes that don't require authentication */
+    publicPaths?: string[];
+}
+export interface AuthenticatedRequest {
+    user: User;
+    session: Session;
+    workspace?: WorkspaceInfo;
+}
+export interface AuthState {
+    user: User | null;
+    session: Session | null;
+    workspace: WorkspaceInfo | null;
+    isLoading: boolean;
+    isAuthenticated: boolean;
+    error: AuthErrorInfo | null;
+}
+export interface AuthActions {
+    signUp: (params: SignUpParams) => Promise<AuthResult>;
+    signIn: (params: SignInParams) => Promise<AuthResult>;
+    signInWithOAuth: (params: OAuthParams) => Promise<void>;
+    signOut: () => Promise<void>;
+    resetPassword: (params: ResetPasswordParams) => Promise<void>;
+    switchWorkspace: (workspaceId: string) => Promise<void>;
+}
+export type UseAuthReturn = AuthState & AuthActions;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAM3D,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAM1D,MAAM,WAAW,gBAAgB;IAC/B,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IAEpB,sCAAsC;IACtC,eAAe,EAAE,MAAM,CAAC;IAExB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,sDAAsD;IACtD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,sCAAsC;IACtC,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACnD;AAMD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE;QACT,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAMD,MAAM,MAAM,aAAa,GACrB,qBAAqB,GACrB,qBAAqB,GACrB,sBAAsB,GACtB,eAAe,GACf,2BAA2B,GAC3B,cAAc,GACd,eAAe,GACf,eAAe,CAAC;AAMpB,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAMD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,eAAe,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,aAAa,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,WAAW,CAAC"}

package/dist/types.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * @daily/auth Types
+ * Standard auth toolkit for Daily applications
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/dist/workspace.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @daily/auth Workspace Service
+ * Create and manage workspaces for users
+ */
+import type { SupabaseClient } from '@supabase/supabase-js';
+import type { WorkspaceInfo } from './types.js';
+export declare class WorkspaceService {
+    private supabase;
+    private nameTemplate?;
+    constructor(supabase: SupabaseClient, nameTemplate?: ((email: string) => string) | undefined);
+    /**
+     * Create a workspace for a new user
+     */
+    createForUser(userId: string, email: string, customName?: string): Promise<WorkspaceInfo>;
+    /**
+     * Get all workspaces for a user
+     */
+    getForUser(userId: string): Promise<WorkspaceInfo[]>;
+    /**
+     * Generate workspace name from email
+     */
+    private generateName;
+    /**
+     * Generate URL-safe slug
+     */
+    private generateSlug;
+}
+//# sourceMappingURL=workspace.d.ts.map

package/dist/workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,YAAY,CAAC;AAG/D,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,YAAY,CAAC;gBADb,QAAQ,EAAE,cAAc,EACxB,YAAY,CAAC,GAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,aAAA;IAGlD;;OAEG;IACG,aAAa,CACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,aAAa,CAAC;IAyDzB;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAkC1D;;OAEG;IACH,OAAO,CAAC,YAAY;IAcpB;;OAEG;IACH,OAAO,CAAC,YAAY;CAUrB"}

package/dist/workspace.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * @daily/auth Workspace Service
+ * Create and manage workspaces for users
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkspaceService = void 0;
+const errors_js_1 = require("./errors.js");
+class WorkspaceService {
+    supabase;
+    nameTemplate;
+    constructor(supabase, nameTemplate) {
+        this.supabase = supabase;
+        this.nameTemplate = nameTemplate;
+    }
+    /**
+     * Create a workspace for a new user
+     */
+    async createForUser(userId, email, customName) {
+        const workspaceName = customName || this.generateName(email);
+        const workspaceSlug = this.generateSlug(workspaceName);
+        try {
+            // Create workspace
+            const { data: workspace, error: wsError } = await this.supabase
+                .from('workspaces')
+                .insert({
+                name: workspaceName,
+                slug: workspaceSlug,
+                owner_id: userId,
+                settings: {},
+            })
+                .select()
+                .single();
+            if (wsError) {
+                throw new errors_js_1.DailyAuthError('WORKSPACE_CREATION_FAILED', `Failed to create workspace: ${wsError.message}`);
+            }
+            // Create membership (owner)
+            const { error: memberError } = await this.supabase
+                .from('workspace_members')
+                .insert({
+                workspace_id: workspace.id,
+                user_id: userId,
+                role: 'owner',
+            });
+            if (memberError) {
+                // Try to clean up workspace
+                await this.supabase.from('workspaces').delete().eq('id', workspace.id);
+                throw new errors_js_1.DailyAuthError('WORKSPACE_CREATION_FAILED', `Failed to create membership: ${memberError.message}`);
+            }
+            return {
+                id: workspace.id,
+                name: workspace.name,
+                slug: workspace.slug,
+                role: 'owner',
+            };
+        }
+        catch (err) {
+            if (err instanceof errors_js_1.DailyAuthError)
+                throw err;
+            throw new errors_js_1.DailyAuthError('WORKSPACE_CREATION_FAILED', `Workspace creation failed: ${err.message}`);
+        }
+    }
+    /**
+     * Get all workspaces for a user
+     */
+    async getForUser(userId) {
+        // Get memberships
+        const { data: memberships, error: memberError } = await this.supabase
+            .from('workspace_members')
+            .select('workspace_id, role')
+            .eq('user_id', userId);
+        if (memberError || !memberships || memberships.length === 0) {
+            return [];
+        }
+        const workspaceIds = memberships.map((m) => m.workspace_id);
+        // Get workspace details
+        const { data: workspaces, error: wsError } = await this.supabase
+            .from('workspaces')
+            .select('id, name, slug')
+            .in('id', workspaceIds);
+        if (wsError || !workspaces) {
+            return [];
+        }
+        return workspaces.map((ws) => {
+            const membership = memberships.find((m) => m.workspace_id === ws.id);
+            return {
+                id: ws.id,
+                name: ws.name,
+                slug: ws.slug,
+                role: (membership?.role || 'member'),
+            };
+        });
+    }
+    /**
+     * Generate workspace name from email
+     */
+    generateName(email) {
+        if (this.nameTemplate) {
+            return this.nameTemplate(email);
+        }
+        const localPart = email.split('@')[0];
+        return (localPart
+            .replace(/[._-]/g, ' ')
+            .replace(/\b\w/g, (c) => c.toUpperCase())
+            .trim() + "'s Workspace");
+    }
+    /**
+     * Generate URL-safe slug
+     */
+    generateSlug(name) {
+        const base = name
+            .toLowerCase()
+            .replace(/[']/g, '')
+            .replace(/[^a-z0-9]+/g, '-')
+            .replace(/^-|-$/g, '');
+        const suffix = Math.random().toString(36).substring(2, 6);
+        return `${base}-${suffix}`;
+    }
+}
+exports.WorkspaceService = WorkspaceService;
+//# sourceMappingURL=workspace.js.map

package/dist/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAIH,2CAA6C;AAE7C,MAAa,gBAAgB;IAEjB;IACA;IAFV,YACU,QAAwB,EACxB,YAAwC;QADxC,aAAQ,GAAR,QAAQ,CAAgB;QACxB,iBAAY,GAAZ,YAAY,CAA4B;IAC/C,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,MAAc,EACd,KAAa,EACb,UAAmB;QAEnB,MAAM,aAAa,GAAG,UAAU,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,mBAAmB;YACnB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;iBAC5D,IAAI,CAAC,YAAY,CAAC;iBAClB,MAAM,CAAC;gBACN,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC;iBACD,MAAM,EAAE;iBACR,MAAM,EAAE,CAAC;YAEZ,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,0BAAc,CACtB,2BAA2B,EAC3B,+BAA+B,OAAO,CAAC,OAAO,EAAE,CACjD,CAAC;YACJ,CAAC;YAED,4BAA4B;YAC5B,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;iBAC/C,IAAI,CAAC,mBAAmB,CAAC;iBACzB,MAAM,CAAC;gBACN,YAAY,EAAE,SAAS,CAAC,EAAE;gBAC1B,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YAEL,IAAI,WAAW,EAAE,CAAC;gBAChB,4BAA4B;gBAC5B,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;gBACvE,MAAM,IAAI,0BAAc,CACtB,2BAA2B,EAC3B,gCAAgC,WAAW,CAAC,OAAO,EAAE,CACtD,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,0BAAc;gBAAE,MAAM,GAAG,CAAC;YAC7C,MAAM,IAAI,0BAAc,CACtB,2BAA2B,EAC3B,8BAA+B,GAAa,CAAC,OAAO,EAAE,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,kBAAkB;QAClB,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAClE,IAAI,CAAC,mBAAmB,CAAC;aACzB,MAAM,CAAC,oBAAoB,CAAC;aAC5B,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEzB,IAAI,WAAW,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAE5D,wBAAwB;QACxB,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aAC7D,IAAI,CAAC,YAAY,CAAC;aAClB,MAAM,CAAC,gBAAgB,CAAC;aACxB,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAE1B,IAAI,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAC3B,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,IAAI,QAAQ,CAAkB;aACtD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,KAAa;QAChC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,OAAO,CACL,SAAS;aACN,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;aACtB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aACxC,IAAI,EAAE,GAAG,cAAc,CAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,IAAY;QAC/B,MAAM,IAAI,GAAG,IAAI;aACd,WAAW,EAAE;aACb,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;aACnB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;aAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;IAC7B,CAAC;CACF;AAzID,4CAyIC"}

package/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "@dailyautomations/auth",
+  "version": "1.0.0",
+  "description": "Unified SSO authentication for Daily applications",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "default": "./dist/client.js"
+    },
+    "./middleware": {
+      "types": "./dist/middleware.d.ts",
+      "default": "./dist/middleware.js"
+    },
+    "./react": {
+      "types": "./dist/react.d.ts",
+      "default": "./dist/react.js"
+    },
+    "./hooks": {
+      "types": "./dist/hooks/index.d.ts",
+      "default": "./dist/hooks/index.js"
+    },
+    "./types": {
+      "types": "./dist/types.d.ts",
+      "default": "./dist/types.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc --watch",
+    "test": "vitest",
+    "test:coverage": "vitest --coverage",
+    "lint": "eslint src --ext .ts,.tsx",
+    "typecheck": "tsc --noEmit"
+  },
+  "keywords": [
+    "daily",
+    "auth",
+    "sso",
+    "supabase",
+    "authentication"
+  ],
+  "author": "DailyX Engineering Team",
+  "license": "UNLICENSED",
+  "dependencies": {
+    "@supabase/supabase-js": "^2.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.0",
+    "@types/react": "^18.2.0",
+    "@typescript-eslint/eslint-plugin": "^6.19.0",
+    "@typescript-eslint/parser": "^6.19.0",
+    "eslint": "^8.56.0",
+    "typescript": "^5.3.3",
+    "vitest": "^1.2.0"
+  },
+  "peerDependencies": {
+    "@supabase/supabase-js": "^2.0.0",
+    "react": ">=18.0.0"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  }
+}