@dbx-tools/shared-auth 0.9.36 → 0.9.38

package/README.md

@@ -1,28 +1,64 @@
 # `@dbx-tools/shared-auth`
 
-Browser-safe schemas and types for passwordless authentication and Databricks
-profile selection.
+Keep passwordless sign-in, passkey controls, and Databricks profile selectors
+consistent across browser and server packages. The package provides shared
+schemas for validating responses at the network boundary plus browser helpers
+that work with `@dbx-tools/auth-gate`.
 
-Key features:
-
-- compatibility schemas for email OTP request and verification routes;
-- logout result and redirect contract;
-- gate status with optional passkey capability;
-- Databricks auth-type and target values;
-- secret-free profile summaries, profile lists, and selector values;
-- resolved Databricks authentication client fields for browser auth checks;
-- one shared session-cookie name for Node transports and browser clients.
+## Read Authentication Status
 
 ```ts
 import { authStatusSchema } from "@dbx-tools/shared-auth";
 
+const response = await fetch("/api/auth/status", { credentials: "include" });
 const status = authStatusSchema.parse(await response.json());
+
+if (status.enabled && !status.authenticated) {
+  showSignIn();
+}
+```
+
+Use the request, verification, logout, and status schemas when custom UI or
+transport code calls the auth gate directly.
+
+## Build A Profile Selector
+
+Profile summaries never include tokens or client secrets. Validate values before
+rendering or persisting a selection:
+
+```ts
+import {
+  databricksProfileListSchema,
+  databricksProfileSelectionSchema,
+} from "@dbx-tools/shared-auth";
+
+const profiles = databricksProfileListSchema.parse(await response.json());
+const selection = databricksProfileSelectionSchema.parse({
+  kind: "profile",
+  profile: profiles[0].name,
+});
+```
+
+Use `{ kind: "ambient" }` when the consuming runtime should choose its normal
+Databricks authentication source.
+
+## Use Browser Sign-In Helpers
+
+The `browser` module requests and verifies email OTPs, starts passkey sign-in or
+enrollment, manages enrolled passkeys, reads gate status, and logs out through
+the server-provided same-origin redirect.
+
+```ts
+import { requestEmailOtp, verifyEmailOtp } from "@dbx-tools/shared-auth/browser";
+
+await requestEmailOtp("person@example.com");
+await verifyEmailOtp("person@example.com", code, "Person");
 ```
 
-## Modules
+## Package API
 
-- `auth` - passwordless gate wire schemas and types.
-- `browser` - Better Auth and passkey browser client.
-- `config` - Databricks auth-type and target values.
-- `profile` - secret-free profile selector contracts.
-- `client` - resolved Databricks authentication client fields.
+- `auth` validates passwordless gate requests and responses.
+- `browser` performs email OTP, passkey, status, and logout operations.
+- `config` defines Databricks authentication and target values.
+- `profile` validates secret-free profile lists and selections.
+- `client` validates resolved, secret-free Databricks client information.

package/index.ts

@@ -3,7 +3,7 @@
 // Hand edits are overwritten on the next watch; this file is read-only.
 
 export const PACKAGE_IDENTIFIER = "@dbx-tools/shared-auth";
-export const PACKAGE_VERSION = "0.9.36";
+export const PACKAGE_VERSION = "0.9.38";
 export * as auth from "./src/auth.ts";
 export * as browser from "./src/browser.ts";
 export * as client from "./src/client.ts";

package/lib/index.d.ts

@@ -1,5 +1,5 @@
 export declare const PACKAGE_IDENTIFIER = "@dbx-tools/shared-auth";
-export declare const PACKAGE_VERSION = "0.9.36";
+export declare const PACKAGE_VERSION = "0.9.38";
 export * as auth from "./src/auth.ts";
 export * as browser from "./src/browser.ts";
 export * as client from "./src/client.ts";

package/lib/index.js

@@ -2,7 +2,7 @@
 // Regenerated from the exporting modules in ./src.
 // Hand edits are overwritten on the next watch; this file is read-only.
 export const PACKAGE_IDENTIFIER = "@dbx-tools/shared-auth";
-export const PACKAGE_VERSION = "0.9.36";
+export const PACKAGE_VERSION = "0.9.38";
 export * as auth from "./src/auth.js";
 export * as browser from "./src/browser.js";
 export * as client from "./src/client.js";
@@ -14,4 +14,4 @@ export { databricksAuthClientInfoSchema } from "./src/client.js";
 export { AuthType, TargetKind } from "./src/config.js";
 export { authTypeSchema, targetKindSchema } from "./src/config-schema.js";
 export { databricksProfileSummarySchema, databricksProfileListSchema, databricksProfileSelectionSchema } from "./src/profile.js";
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSwyQ0FBMkM7QUFDM0MsbURBQW1EO0FBQ25ELHdFQUF3RTtBQUV4RSxNQUFNLENBQUMsTUFBTSxrQkFBa0IsR0FBRyx3QkFBd0IsQ0FBQztBQUMzRCxNQUFNLENBQUMsTUFBTSxlQUFlLEdBQUcsUUFBUSxDQUFDO0FBQ3hDLE9BQU8sS0FBSyxJQUFJLE1BQU0sZUFBZSxDQUFDO0FBQ3RDLE9BQU8sS0FBSyxPQUFPLE1BQU0sa0JBQWtCLENBQUM7QUFDNUMsT0FBTyxLQUFLLE1BQU0sTUFBTSxpQkFBaUIsQ0FBQztBQUMxQyxPQUFPLEtBQUssTUFBTSxNQUFNLGlCQUFpQixDQUFDO0FBQzFDLE9BQU8sS0FBSyxZQUFZLE1BQU0sd0JBQXdCLENBQUM7QUFDdkQsT0FBTyxLQUFLLE9BQU8sTUFBTSxrQkFBa0IsQ0FBQztBQUM1QyxPQUFPLEVBQUUsY0FBYyxFQUFFLG1CQUFtQixFQUFFLGlCQUFpQixFQUFFLHVCQUF1QixFQUFFLGdCQUFnQixFQUFFLHNCQUFzQixFQUFFLHNCQUFzQixFQUFFLGdCQUFnQixFQUFFLE1BQU0sZUFBZSxDQUFDO0FBR3BNLE9BQU8sRUFBRSw4QkFBOEIsRUFBRSxNQUFNLGlCQUFpQixDQUFDO0FBRWpFLE9BQU8sRUFBRSxRQUFRLEVBQUUsVUFBVSxFQUFFLE1BQU0saUJBQWlCLENBQUM7QUFDdkQsT0FBTyxFQUFFLGNBQWMsRUFBRSxnQkFBZ0IsRUFBRSxNQUFNLHdCQUF3QixDQUFDO0FBQzFFLE9BQU8sRUFBRSw4QkFBOEIsRUFBRSwyQkFBMkIsRUFBRSxnQ0FBZ0MsRUFBRSxNQUFNLGtCQUFrQixDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiLy8gR0VORVJBVEVEIGJ5IHByb2plbiB3YXRjaCAtIERPIE5PVCBFRElULlxuLy8gUmVnZW5lcmF0ZWQgZnJvbSB0aGUgZXhwb3J0aW5nIG1vZHVsZXMgaW4gLi9zcmMuXG4vLyBIYW5kIGVkaXRzIGFyZSBvdmVyd3JpdHRlbiBvbiB0aGUgbmV4dCB3YXRjaDsgdGhpcyBmaWxlIGlzIHJlYWQtb25seS5cblxuZXhwb3J0IGNvbnN0IFBBQ0tBR0VfSURFTlRJRklFUiA9IFwiQGRieC10b29scy9zaGFyZWQtYXV0aFwiO1xuZXhwb3J0IGNvbnN0IFBBQ0tBR0VfVkVSU0lPTiA9IFwiMC45LjM4XCI7XG5leHBvcnQgKiBhcyBhdXRoIGZyb20gXCIuL3NyYy9hdXRoLnRzXCI7XG5leHBvcnQgKiBhcyBicm93c2VyIGZyb20gXCIuL3NyYy9icm93c2VyLnRzXCI7XG5leHBvcnQgKiBhcyBjbGllbnQgZnJvbSBcIi4vc3JjL2NsaWVudC50c1wiO1xuZXhwb3J0ICogYXMgY29uZmlnIGZyb20gXCIuL3NyYy9jb25maWcudHNcIjtcbmV4cG9ydCAqIGFzIGNvbmZpZ1NjaGVtYSBmcm9tIFwiLi9zcmMvY29uZmlnLXNjaGVtYS50c1wiO1xuZXhwb3J0ICogYXMgcHJvZmlsZSBmcm9tIFwiLi9zcmMvcHJvZmlsZS50c1wiO1xuZXhwb3J0IHsgQVVUSF9CQVNFX1BBVEgsIFNFU1NJT05fQ09PS0lFX05BTUUsIGF1dGhSZXF1ZXN0U2NoZW1hLCBhdXRoUmVxdWVzdFJlc3VsdFNjaGVtYSwgYXV0aFZlcmlmeVNjaGVtYSwgYXV0aFZlcmlmeVJlc3VsdFNjaGVtYSwgYXV0aExvZ291dFJlc3VsdFNjaGVtYSwgYXV0aFN0YXR1c1NjaGVtYSB9IGZyb20gXCIuL3NyYy9hdXRoLnRzXCI7XG5leHBvcnQgdHlwZSB7IEF1dGhSZXF1ZXN0LCBBdXRoUmVxdWVzdFJlc3VsdCwgQXV0aFZlcmlmeSwgQXV0aFZlcmlmeVJlc3VsdCwgQXV0aExvZ291dFJlc3VsdCwgQXV0aFN0YXR1cyB9IGZyb20gXCIuL3NyYy9hdXRoLnRzXCI7XG5leHBvcnQgdHlwZSB7IFBhc3NrZXlPcGVyYXRpb24gfSBmcm9tIFwiLi9zcmMvYnJvd3Nlci50c1wiO1xuZXhwb3J0IHsgZGF0YWJyaWNrc0F1dGhDbGllbnRJbmZvU2NoZW1hIH0gZnJvbSBcIi4vc3JjL2NsaWVudC50c1wiO1xuZXhwb3J0IHR5cGUgeyBEYXRhYnJpY2tzQXV0aENsaWVudEluZm8gfSBmcm9tIFwiLi9zcmMvY2xpZW50LnRzXCI7XG5leHBvcnQgeyBBdXRoVHlwZSwgVGFyZ2V0S2luZCB9IGZyb20gXCIuL3NyYy9jb25maWcudHNcIjtcbmV4cG9ydCB7IGF1dGhUeXBlU2NoZW1hLCB0YXJnZXRLaW5kU2NoZW1hIH0gZnJvbSBcIi4vc3JjL2NvbmZpZy1zY2hlbWEudHNcIjtcbmV4cG9ydCB7IGRhdGFicmlja3NQcm9maWxlU3VtbWFyeVNjaGVtYSwgZGF0YWJyaWNrc1Byb2ZpbGVMaXN0U2NoZW1hLCBkYXRhYnJpY2tzUHJvZmlsZVNlbGVjdGlvblNjaGVtYSB9IGZyb20gXCIuL3NyYy9wcm9maWxlLnRzXCI7XG5leHBvcnQgdHlwZSB7IERhdGFicmlja3NQcm9maWxlU3VtbWFyeSwgRGF0YWJyaWNrc1Byb2ZpbGVMaXN0LCBEYXRhYnJpY2tzUHJvZmlsZVNlbGVjdGlvbiB9IGZyb20gXCIuL3NyYy9wcm9maWxlLnRzXCI7XG4iXX0=

package/lib/src/auth.d.ts

@@ -17,35 +17,48 @@ export { AUTH_BASE_PATH };
  * `/api/email/authz` from being treated as public authentication endpoints.
  */
 export declare function isAuthPath(path: string): boolean;
+/** Shared Better Auth session-cookie name used by browser and server packages. */
 export declare const SESSION_COOKIE_NAME = "dbx-tools-auth";
+/** Request schema for sending an email one-time password. */
 export declare const authRequestSchema: z.ZodObject<{
     email: z.ZodString;
 }, z.core.$strip>;
+/** Validated request for an email one-time password. */
 export type AuthRequest = z.infer<typeof authRequestSchema>;
+/** Response schema for an accepted one-time-password request. */
 export declare const authRequestResultSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
     retryAfter: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
+/** Accepted one-time-password request result and optional retry delay. */
 export type AuthRequestResult = z.infer<typeof authRequestResultSchema>;
+/** Request schema for verifying an email one-time password. */
 export declare const authVerifySchema: z.ZodObject<{
     email: z.ZodString;
     code: z.ZodString;
 }, z.core.$strip>;
+/** Email address and code submitted to establish a session. */
 export type AuthVerify = z.infer<typeof authVerifySchema>;
+/** Response schema for one-time-password verification. */
 export declare const authVerifyResultSchema: z.ZodObject<{
     ok: z.ZodBoolean;
     retryAfter: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
+/** Verification outcome and optional retry delay. */
 export type AuthVerifyResult = z.infer<typeof authVerifyResultSchema>;
+/** Response schema returned after clearing an authentication session. */
 export declare const authLogoutResultSchema: z.ZodObject<{
     ok: z.ZodBoolean;
     redirectTo: z.ZodString;
 }, z.core.$strip>;
+/** Logout outcome plus the validated same-origin destination. */
 export type AuthLogoutResult = z.infer<typeof authLogoutResultSchema>;
+/** Response schema describing gate availability and the current browser session. */
 export declare const authStatusSchema: z.ZodObject<{
     authenticated: z.ZodBoolean;
     email: z.ZodOptional<z.ZodString>;
     enabled: z.ZodBoolean;
     passkeysEnabled: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
+/** Gate availability, session identity, and optional passkey capability. */
 export type AuthStatus = z.infer<typeof authStatusSchema>;

package/lib/src/auth.js

@@ -20,30 +20,37 @@ export function isAuthPath(path) {
     const pathname = path.split("?", 1)[0] ?? path;
     return pathname === AUTH_BASE_PATH || pathname.startsWith(`${AUTH_BASE_PATH}/`);
 }
+/** Shared Better Auth session-cookie name used by browser and server packages. */
 export const SESSION_COOKIE_NAME = "dbx-tools-auth";
+/** Request schema for sending an email one-time password. */
 export const authRequestSchema = z.object({
     email: z.string().describe("Address to email a one-time code to, if it is authorized."),
 });
+/** Response schema for an accepted one-time-password request. */
 export const authRequestResultSchema = z.object({
     ok: z.literal(true),
     retryAfter: z.number().optional(),
 });
+/** Request schema for verifying an email one-time password. */
 export const authVerifySchema = z.object({
     email: z.string(),
     code: z.string(),
 });
+/** Response schema for one-time-password verification. */
 export const authVerifyResultSchema = z.object({
     ok: z.boolean(),
     retryAfter: z.number().optional(),
 });
+/** Response schema returned after clearing an authentication session. */
 export const authLogoutResultSchema = z.object({
     ok: z.boolean(),
     redirectTo: z.string(),
 });
+/** Response schema describing gate availability and the current browser session. */
 export const authStatusSchema = z.object({
     authenticated: z.boolean(),
     email: z.string().optional(),
     enabled: z.boolean(),
     passkeysEnabled: z.boolean().optional(),
 });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -65,7 +65,7 @@
       "./package.json": "./package.json"
     }
   },
-  "version": "0.9.36",
+  "version": "0.9.38",
   "types": "./lib/index.d.ts",
   "dbxToolsConfig": {
     "tags": [

package/src/auth.ts

@@ -25,41 +25,54 @@ export function isAuthPath(path: string): boolean {
   return pathname === AUTH_BASE_PATH || pathname.startsWith(`${AUTH_BASE_PATH}/`);
 }
 
+/** Shared Better Auth session-cookie name used by browser and server packages. */
 export const SESSION_COOKIE_NAME = "dbx-tools-auth";
 
+/** Request schema for sending an email one-time password. */
 export const authRequestSchema = z.object({
   email: z.string().describe("Address to email a one-time code to, if it is authorized."),
 });
+/** Validated request for an email one-time password. */
 export type AuthRequest = z.infer<typeof authRequestSchema>;
 
+/** Response schema for an accepted one-time-password request. */
 export const authRequestResultSchema = z.object({
   ok: z.literal(true),
   retryAfter: z.number().optional(),
 });
+/** Accepted one-time-password request result and optional retry delay. */
 export type AuthRequestResult = z.infer<typeof authRequestResultSchema>;
 
+/** Request schema for verifying an email one-time password. */
 export const authVerifySchema = z.object({
   email: z.string(),
   code: z.string(),
 });
+/** Email address and code submitted to establish a session. */
 export type AuthVerify = z.infer<typeof authVerifySchema>;
 
+/** Response schema for one-time-password verification. */
 export const authVerifyResultSchema = z.object({
   ok: z.boolean(),
   retryAfter: z.number().optional(),
 });
+/** Verification outcome and optional retry delay. */
 export type AuthVerifyResult = z.infer<typeof authVerifyResultSchema>;
 
+/** Response schema returned after clearing an authentication session. */
 export const authLogoutResultSchema = z.object({
   ok: z.boolean(),
   redirectTo: z.string(),
 });
+/** Logout outcome plus the validated same-origin destination. */
 export type AuthLogoutResult = z.infer<typeof authLogoutResultSchema>;
 
+/** Response schema describing gate availability and the current browser session. */
 export const authStatusSchema = z.object({
   authenticated: z.boolean(),
   email: z.string().optional(),
   enabled: z.boolean(),
   passkeysEnabled: z.boolean().optional(),
 });
+/** Gate availability, session identity, and optional passkey capability. */
 export type AuthStatus = z.infer<typeof authStatusSchema>;