@farm.js/auth 0.1.0-beta.6

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2024 Farm.js Team
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/dist/client.d.ts

@@ -0,0 +1,31 @@
+import type { FarmAuthClientOptions, FarmAuthCredentials, FarmAuthSignUpInput } from "./types.js";
+export declare function createFarmAuthClient(options?: FarmAuthClientOptions): {
+    signIn: (input: FarmAuthCredentials) => any;
+    signUp: (input: FarmAuthSignUpInput) => any;
+    signOut: () => any;
+    getSession: () => any;
+    useAuth: () => {
+        user: any;
+        session: any;
+        isPending: any;
+        isRefetching: any;
+        error: any;
+        refetch: any;
+        signIn: (input: FarmAuthCredentials) => any;
+        signUp: (input: FarmAuthSignUpInput) => any;
+        signOut: () => any;
+    };
+};
+export declare const getSession: () => any, signIn: (input: FarmAuthCredentials) => any, signOut: () => any, signUp: (input: FarmAuthSignUpInput) => any, useAuth: () => {
+    user: any;
+    session: any;
+    isPending: any;
+    isRefetching: any;
+    error: any;
+    refetch: any;
+    signIn: (input: FarmAuthCredentials) => any;
+    signUp: (input: FarmAuthSignUpInput) => any;
+    signOut: () => any;
+};
+export type { FarmAuthClientOptions, FarmAuthCredentials, FarmAuthSignUpInput } from "./types.js";
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAElG,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B;oBAG/C,mBAAmB;oBAInB,mBAAmB;;;;;;;;;;wBAJnB,mBAAmB;wBAInB,mBAAmB;;;EAmC3C;AAID,eAAO,MAAQ,UAAU,aAAE,MAAM,UA3CR,mBAAmB,UA2CT,OAAO,aAAE,MAAM,UAvCzB,mBAAmB,UAuCQ,OAAO;;;;;;;oBA3ClC,mBAAmB;oBAInB,mBAAmB;;CAuCiC,CAAC;AAE9E,YAAY,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC"}

package/dist/client.js

@@ -0,0 +1,40 @@
+"use client";
+import { createAuthClient } from "better-auth/react";
+export function createFarmAuthClient(options = {}) {
+    const client = createAuthClient(options);
+    function signIn(input) {
+        return client.signIn.email(input);
+    }
+    function signUp(input) {
+        return client.signUp.email(input);
+    }
+    function signOut() {
+        return client.signOut();
+    }
+    function getSession() {
+        return client.getSession();
+    }
+    function useAuth() {
+        const state = client.useSession();
+        return {
+            user: state.data?.user ?? null,
+            session: state.data?.session ?? null,
+            isPending: state.isPending,
+            isRefetching: state.isRefetching,
+            error: state.error,
+            refetch: state.refetch,
+            signIn,
+            signUp,
+            signOut,
+        };
+    }
+    return {
+        signIn,
+        signUp,
+        signOut,
+        getSession,
+        useAuth,
+    };
+}
+const defaultClient = createFarmAuthClient();
+export const { getSession, signIn, signOut, signUp, useAuth } = defaultClient;

package/dist/config.d.ts

@@ -0,0 +1,3 @@
+import type { FarmAuthUserConfig, ResolvedFarmAuthConfig } from "./types.js";
+export declare function resolveFarmAuthConfig(input: FarmAuthUserConfig | undefined): ResolvedFarmAuthConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAK7E,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,kBAAkB,GAAG,SAAS,GACpC,sBAAsB,CAiDxB"}

package/dist/config.js

@@ -0,0 +1,70 @@
+const DEFAULT_SESSION_EXPIRES_IN = 60 * 60 * 24 * 7;
+const DEFAULT_SESSION_UPDATE_AGE = 60 * 60 * 24;
+export function resolveFarmAuthConfig(input) {
+    if (input === false || input === undefined) {
+        return {
+            enabled: false,
+            basePath: "/api/auth",
+            emailAndPassword: {
+                enabled: true,
+                requireEmailVerification: false,
+                minPasswordLength: 8,
+                maxPasswordLength: 128,
+            },
+            session: {
+                expiresIn: DEFAULT_SESSION_EXPIRES_IN,
+                updateAge: DEFAULT_SESSION_UPDATE_AGE,
+            },
+            database: {
+                path: ".farm/auth.sqlite",
+                migrateInDevelopment: true,
+            },
+        };
+    }
+    const config = input === true ? {} : input;
+    const passwordConfig = typeof config.emailAndPassword === "object" ? config.emailAndPassword : {};
+    const basePath = normalizeBasePath(config.basePath);
+    const resolved = {
+        enabled: config.enabled !== false,
+        appName: config.appName,
+        basePath,
+        emailAndPassword: {
+            enabled: config.emailAndPassword !== false,
+            requireEmailVerification: passwordConfig.requireEmailVerification ?? false,
+            minPasswordLength: passwordConfig.minPasswordLength ?? 8,
+            maxPasswordLength: passwordConfig.maxPasswordLength ?? 128,
+        },
+        session: {
+            expiresIn: config.session?.expiresIn ?? DEFAULT_SESSION_EXPIRES_IN,
+            updateAge: config.session?.updateAge ?? DEFAULT_SESSION_UPDATE_AGE,
+        },
+        database: {
+            url: config.database?.url,
+            path: config.database?.path || ".farm/auth.sqlite",
+            migrateInDevelopment: config.database?.migrateInDevelopment ?? true,
+        },
+    };
+    validateFarmAuthConfig(resolved);
+    return resolved;
+}
+function normalizeBasePath(value) {
+    const path = (value || "/api/auth").trim();
+    const withLeadingSlash = path.startsWith("/") ? path : `/${path}`;
+    const normalized = withLeadingSlash.replace(/\/+/g, "/").replace(/\/+$/, "");
+    return normalized || "/api/auth";
+}
+function validateFarmAuthConfig(config) {
+    const { minPasswordLength, maxPasswordLength } = config.emailAndPassword;
+    if (!Number.isInteger(minPasswordLength) || minPasswordLength < 1) {
+        throw new Error("auth.emailAndPassword.minPasswordLength must be a positive integer.");
+    }
+    if (!Number.isInteger(maxPasswordLength) || maxPasswordLength < minPasswordLength) {
+        throw new Error("auth.emailAndPassword.maxPasswordLength must be an integer greater than or equal to minPasswordLength.");
+    }
+    if (!Number.isInteger(config.session.expiresIn) || config.session.expiresIn < 1) {
+        throw new Error("auth.session.expiresIn must be a positive integer.");
+    }
+    if (!Number.isInteger(config.session.updateAge) || config.session.updateAge < 0) {
+        throw new Error("auth.session.updateAge must be a non-negative integer.");
+    }
+}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { resolveFarmAuthConfig } from "./config.js";
+export type { FarmAuthConfig, FarmAuthClientOptions, FarmAuthCredentials, FarmAuthDatabaseConfig, FarmAuthEmailAndPasswordConfig, FarmAuthSession, FarmAuthSessionConfig, FarmAuthSessionData, FarmAuthSignUpInput, FarmAuthUser, FarmAuthUserConfig, ResolvedFarmAuthConfig, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,8BAA8B,EAC9B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1 @@
+export { resolveFarmAuthConfig } from "./config.js";

package/dist/internal.d.ts

@@ -0,0 +1,22 @@
+import type { ResolvedFarmAuthConfig } from "./types.js";
+interface FarmAuthIntegrationOptions {
+    root: string;
+    mode: "development" | "production";
+}
+interface FarmAuthIntegration {
+    readonly kind: "farm-integration";
+    category: "auth";
+    type: "farm-auth";
+    instance: {
+        readonly kind: "farm-auth-runtime";
+    };
+    routes: Array<{
+        path: string;
+        methods: readonly ["GET", "POST"];
+        handler(request: Request): Promise<Response>;
+    }>;
+}
+export declare function createFarmAuthIntegration(config: ResolvedFarmAuthConfig, options: FarmAuthIntegrationOptions): FarmAuthIntegration;
+export declare function migrateFarmAuth(): Promise<void>;
+export {};
+//# sourceMappingURL=internal.d.ts.map

package/dist/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../src/internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAOzD,UAAU,0BAA0B;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,GAAG,YAAY,CAAC;CACpC;AAED,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;KAAE,CAAC;IACjD,MAAM,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;KAC9C,CAAC,CAAC;CACJ;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,0BAA0B,GAClC,mBAAmB,CAmBrB;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAErD"}

package/dist/internal.js

@@ -0,0 +1,23 @@
+import { configureFarmAuth, getFarmAuthRuntime, migrateFarmAuth as runMigration, } from "./runtime.js";
+export function createFarmAuthIntegration(config, options) {
+    configureFarmAuth(config, options);
+    return {
+        kind: "farm-integration",
+        category: "auth",
+        type: "farm-auth",
+        instance: Object.freeze({ kind: "farm-auth-runtime" }),
+        routes: [
+            {
+                path: `${config.basePath}/[...auth]`,
+                methods: ["GET", "POST"],
+                async handler(request) {
+                    const runtime = await getFarmAuthRuntime();
+                    return runtime.handler(request);
+                },
+            },
+        ],
+    };
+}
+export async function migrateFarmAuth() {
+    await runMigration();
+}

package/dist/runtime.d.ts

@@ -0,0 +1,19 @@
+import type { ResolvedFarmAuthConfig } from "./types.js";
+interface FarmAuthRuntimeOptions {
+    root: string;
+    mode: "development" | "production";
+}
+interface BetterAuthRuntime {
+    handler(request: Request): Promise<Response>;
+    api: {
+        getSession(input: {
+            headers: Headers;
+        }): Promise<unknown>;
+    };
+}
+export declare function configureFarmAuth(config: ResolvedFarmAuthConfig, options: FarmAuthRuntimeOptions): void;
+export declare function getFarmAuthRuntime(): Promise<BetterAuthRuntime>;
+export declare function getFarmAuthRequest(request?: Request): Request;
+export declare function migrateFarmAuth(): Promise<void>;
+export {};
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAMzD,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,GAAG,YAAY,CAAC;CACpC;AAED,UAAU,iBAAiB;IACzB,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,GAAG,EAAE;QACH,UAAU,CAAC,KAAK,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KAC3D,CAAC;CACH;AAmBD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,sBAAsB,GAC9B,IAAI,CAYN;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAUrE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAU7D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAgBrD"}

package/dist/runtime.js

@@ -0,0 +1,140 @@
+import { mkdir } from "node:fs/promises";
+import { createRequire } from "node:module";
+import path from "node:path";
+const FARM_AUTH_STATE_KEY = Symbol.for("@farm.js/auth/runtime");
+const CURRENT_REQUEST_RESOLVER_KEY = Symbol.for("farm.currentRequestResolver");
+const loadNodeModule = createRequire(import.meta.url);
+function getState() {
+    const runtime = globalThis;
+    runtime[FARM_AUTH_STATE_KEY] ||= {};
+    return runtime[FARM_AUTH_STATE_KEY];
+}
+export function configureFarmAuth(config, options) {
+    const state = getState();
+    const changed = JSON.stringify(state.config) !== JSON.stringify(config) ||
+        state.options?.root !== options.root ||
+        state.options?.mode !== options.mode;
+    state.config = config;
+    state.options = options;
+    if (changed) {
+        state.runtime = undefined;
+    }
+}
+export async function getFarmAuthRuntime() {
+    const state = getState();
+    if (!state.config?.enabled || !state.options) {
+        throw new Error("Farm Auth is not enabled. Add `auth: true` to farm.config.ts before using @farm.js/auth.");
+    }
+    state.runtime ||= createRuntime(state.config, state.options);
+    return state.runtime;
+}
+export function getFarmAuthRequest(request) {
+    if (request)
+        return request;
+    const current = globalThis[CURRENT_REQUEST_RESOLVER_KEY]?.();
+    if (!current) {
+        throw new Error("No current request is available. Farm Auth server helpers can only be used during a request, or with an explicit `request` option.");
+    }
+    return current;
+}
+export async function migrateFarmAuth() {
+    const state = getState();
+    if (!state.config?.enabled || !state.options) {
+        throw new Error("Farm Auth is not enabled in farm.config.ts.");
+    }
+    const options = await createBetterAuthOptions(state.config, state.options, {
+        migration: true,
+    });
+    const { getMigrations } = await import("better-auth/db/migration");
+    try {
+        const migrations = await getMigrations(options);
+        await migrations.runMigrations();
+    }
+    finally {
+        await closeDatabase(options.database);
+    }
+}
+async function createRuntime(config, options) {
+    const authOptions = await createBetterAuthOptions(config, options);
+    if (options.mode === "development" && config.database.migrateInDevelopment) {
+        const { getMigrations } = await import("better-auth/db/migration");
+        const migrations = await getMigrations(authOptions);
+        await migrations.runMigrations();
+    }
+    const { betterAuth } = await import("better-auth");
+    return betterAuth(authOptions);
+}
+async function createBetterAuthOptions(config, options, runtimeOptions = {}) {
+    const secret = process.env.FARM_AUTH_SECRET || process.env.AUTH_SECRET || process.env.BETTER_AUTH_SECRET;
+    if (options.mode === "production" && !secret && !runtimeOptions.migration) {
+        throw new Error("Farm Auth requires FARM_AUTH_SECRET (or AUTH_SECRET) in production. Generate a random 32-byte secret and add it to your deployment environment.");
+    }
+    return {
+        appName: config.appName || "Farm app",
+        baseURL: resolveBaseURL(options.mode),
+        basePath: config.basePath,
+        secret: secret || "farm-auth-development-or-migration-secret",
+        database: await createDatabase(config, options),
+        emailAndPassword: {
+            enabled: config.emailAndPassword.enabled,
+            requireEmailVerification: config.emailAndPassword.requireEmailVerification,
+            minPasswordLength: config.emailAndPassword.minPasswordLength,
+            maxPasswordLength: config.emailAndPassword.maxPasswordLength,
+        },
+        session: {
+            expiresIn: config.session.expiresIn,
+            updateAge: config.session.updateAge,
+        },
+    };
+}
+function resolveBaseURL(mode) {
+    const configured = process.env.FARM_AUTH_URL || process.env.BETTER_AUTH_URL;
+    if (configured)
+        return configured;
+    if (process.env.VERCEL_URL) {
+        return process.env.VERCEL_URL.startsWith("http")
+            ? process.env.VERCEL_URL
+            : `https://${process.env.VERCEL_URL}`;
+    }
+    return mode === "development" ? "http://localhost:3000" : undefined;
+}
+async function closeDatabase(database) {
+    if (!database || typeof database !== "object")
+        return;
+    const connection = database;
+    if (typeof connection.end === "function") {
+        await connection.end();
+        return;
+    }
+    if (typeof connection.close === "function") {
+        await connection.close();
+    }
+}
+async function createDatabase(config, options) {
+    const databaseUrl = config.database.url || process.env.DATABASE_URL;
+    if (databaseUrl) {
+        const { Pool } = await import("pg");
+        return new Pool({ connectionString: databaseUrl });
+    }
+    if (options.mode === "production") {
+        throw new Error("Farm Auth requires DATABASE_URL in production. Config loading and `farm build` do not connect to the database; the connection is opened only by auth requests or `farm auth migrate`.");
+    }
+    const databasePath = path.resolve(options.root, config.database.path);
+    await mkdir(path.dirname(databasePath), { recursive: true });
+    try {
+        const { DatabaseSync } = loadNodeModule("node:sqlite");
+        return new DatabaseSync(databasePath);
+    }
+    catch {
+        // node:sqlite is available on Node 22+. Keep the native package fallback
+        // for supported older Node releases.
+    }
+    try {
+        const imported = await import("better-sqlite3");
+        const Database = imported.default;
+        return new Database(databasePath);
+    }
+    catch (error) {
+        throw new Error(`Farm Auth could not open its local SQLite database. Install better-sqlite3 or set DATABASE_URL. ${error instanceof Error ? error.message : String(error)}`);
+    }
+}

package/dist/server.d.ts

@@ -0,0 +1,19 @@
+import type { FarmAuthLookupOptions, FarmAuthSession, FarmAuthUser } from "./types.js";
+/**
+ * Farm Auth server helpers. Use `required: true` when anonymous access should
+ * immediately return a 401 response.
+ */
+declare function session(options: FarmAuthLookupOptions & {
+    required: true;
+}): Promise<FarmAuthSession>;
+declare function session(options?: FarmAuthLookupOptions): Promise<FarmAuthSession | null>;
+declare function user(options: FarmAuthLookupOptions & {
+    required: true;
+}): Promise<FarmAuthUser>;
+declare function user(options?: FarmAuthLookupOptions): Promise<FarmAuthUser | null>;
+export declare const auth: {
+    session: typeof session;
+    user: typeof user;
+};
+export type { FarmAuthLookupOptions, FarmAuthSession, FarmAuthSessionData, FarmAuthUser, } from "./types.js";
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAsBvF;;;GAGG;AACH,iBAAS,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAChG,iBAAS,OAAO,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;AAKnF,iBAAS,IAAI,CAAC,OAAO,EAAE,qBAAqB,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAC1F,iBAAS,IAAI,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;AAK7E,eAAO,MAAM,IAAI;;;CAAoB,CAAC;AAEtC,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/server.js

@@ -0,0 +1,22 @@
+import { getFarmAuthRequest, getFarmAuthRuntime } from "./runtime.js";
+async function readSession(options = {}) {
+    const request = getFarmAuthRequest(options.request);
+    const runtime = await getFarmAuthRuntime();
+    const session = (await runtime.api.getSession({
+        headers: request.headers,
+    }));
+    if (!session && options.required) {
+        throw Response.json({
+            error: "Authentication required",
+            code: "FARM_AUTH_REQUIRED",
+        }, { status: 401 });
+    }
+    return session;
+}
+function session(options) {
+    return readSession(options);
+}
+async function user(options) {
+    return (await readSession(options))?.user ?? null;
+}
+export const auth = { session, user };

package/dist/types.d.ts

@@ -0,0 +1,105 @@
+export interface FarmAuthEmailAndPasswordConfig {
+    /** Require a verified email before creating a session. @default false */
+    requireEmailVerification?: boolean;
+    /** Smallest accepted password length. @default 8 */
+    minPasswordLength?: number;
+    /** Largest accepted password length. @default 128 */
+    maxPasswordLength?: number;
+}
+export interface FarmAuthSessionConfig {
+    /** Session lifetime in seconds. @default 604800 */
+    expiresIn?: number;
+    /** Session refresh interval in seconds. @default 86400 */
+    updateAge?: number;
+}
+export interface FarmAuthDatabaseConfig {
+    /**
+     * Postgres connection string. Defaults to DATABASE_URL.
+     * Local development falls back to SQLite when no URL is present.
+     */
+    url?: string;
+    /** Local SQLite path. @default ".farm/auth.sqlite" */
+    path?: string;
+    /** Automatically update the schema in development. @default true */
+    migrateInDevelopment?: boolean;
+}
+export interface FarmAuthConfig {
+    /** Set false to disable auth without removing its configuration. @default true */
+    enabled?: boolean;
+    /** Display name used by authentication emails and metadata. */
+    appName?: string;
+    /** Route prefix for the auth endpoints. @default "/api/auth" */
+    basePath?: string;
+    /**
+     * Email/password authentication. It is enabled by default; set false to
+     * disable it when adding another sign-in method.
+     */
+    emailAndPassword?: boolean | FarmAuthEmailAndPasswordConfig;
+    session?: FarmAuthSessionConfig;
+    database?: FarmAuthDatabaseConfig;
+}
+export type FarmAuthUserConfig = boolean | FarmAuthConfig;
+export interface ResolvedFarmAuthConfig {
+    enabled: boolean;
+    appName?: string;
+    basePath: string;
+    emailAndPassword: {
+        enabled: boolean;
+        requireEmailVerification: boolean;
+        minPasswordLength: number;
+        maxPasswordLength: number;
+    };
+    session: {
+        expiresIn: number;
+        updateAge: number;
+    };
+    database: {
+        url?: string;
+        path: string;
+        migrateInDevelopment: boolean;
+    };
+}
+export interface FarmAuthUser {
+    id: string;
+    name: string;
+    email: string;
+    emailVerified: boolean;
+    image?: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface FarmAuthSessionData {
+    id: string;
+    userId: string;
+    expiresAt: Date;
+    token: string;
+    createdAt: Date;
+    updatedAt: Date;
+    ipAddress?: string | null;
+    userAgent?: string | null;
+}
+export interface FarmAuthSession {
+    session: FarmAuthSessionData;
+    user: FarmAuthUser;
+}
+export interface FarmAuthLookupOptions {
+    /** Return a 401 Response when no session exists. */
+    required?: boolean;
+    /** Override the current Farm request, primarily for route handlers and tests. */
+    request?: Request;
+}
+export interface FarmAuthCredentials {
+    email: string;
+    password: string;
+    rememberMe?: boolean;
+}
+export interface FarmAuthSignUpInput extends FarmAuthCredentials {
+    name: string;
+}
+export interface FarmAuthClientOptions {
+    /** Must match auth.basePath when that option is customized. */
+    basePath?: string;
+    /** Optional absolute origin for non-browser clients. */
+    baseURL?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,8BAA8B;IAC7C,yEAAyE;IACzE,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qDAAqD;IACrD,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,GAAG,8BAA8B,CAAC;IAC5D,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,cAAc,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,wBAAwB,EAAE,OAAO,CAAC;QAClC,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,EAAE;QACR,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,oBAAoB,EAAE,OAAO,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,oDAAoD;IACpD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iFAAiF;IACjF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/types.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@farm.js/auth",
+  "version": "0.1.0-beta.6",
+  "description": "Farm-native authentication with email/password, server helpers, and React hooks",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/farming-labs/farm.js",
+    "directory": "packages/farm-auth"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js",
+      "default": "./dist/server.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js",
+      "default": "./dist/client.js"
+    },
+    "./internal": {
+      "types": "./dist/internal.d.ts",
+      "import": "./dist/internal.js",
+      "default": "./dist/internal.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "better-auth": "1.5.5",
+    "pg": "8.20.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^20.10.5",
+    "@types/react": "^18.2.45",
+    "react": "19.2.8",
+    "typescript": "^5.3.3",
+    "vitest": "^1.1.0"
+  },
+  "peerDependencies": {
+    "react": "^18.2.0 || ^19.0.0"
+  },
+  "optionalDependencies": {
+    "better-sqlite3": "12.8.0"
+  },
+  "scripts": {
+    "build": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\" && tsc",
+    "dev": "tsc --watch",
+    "type-check": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}