@fengsoft/auth-fastify 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog
+
+All notable changes to this package will be documented in this file.
+
+## 0.1.0
+
+- Initial public release.

package/LICENSE

@@ -0,0 +1,100 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction, and
+distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by the copyright
+owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all other entities
+that control, are controlled by, or are under common control with that entity.
+For the purposes of this definition, "control" means (i) the power, direct or
+indirect, to cause the direction or management of such entity, whether by
+contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the
+outstanding shares, or (iii) beneficial ownership of such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity exercising
+permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications, including
+but not limited to software source code, documentation source, and configuration
+files.
+
+"Object" form shall mean any form resulting from mechanical transformation or
+translation of a Source form, including but not limited to compiled object code,
+generated documentation, and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or Object form, made
+available under the License, as indicated by a copyright notice that is included
+in or attached to the work.
+
+"Derivative Works" shall mean any work, whether in Source or Object form, that
+is based on (or derived from) the Work and for which the editorial revisions,
+annotations, elaborations, or other modifications represent, as a whole, an
+original work of authorship.
+
+"Contribution" shall mean any work of authorship, including the original version
+of the Work and any modifications or additions to that Work or Derivative Works,
+that is intentionally submitted to Licensor for inclusion in the Work by the
+copyright owner or by an individual or Legal Entity authorized to submit on
+behalf of the copyright owner.
+
+"Contributor" shall mean Licensor and any individual or Legal Entity on behalf
+of whom a Contribution has been received by Licensor and subsequently
+incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of this
+License, each Contributor hereby grants to You a perpetual, worldwide,
+non-exclusive, no-charge, royalty-free, irrevocable copyright license to
+reproduce, prepare Derivative Works of, publicly display, publicly perform,
+sublicense, and distribute the Work and such Derivative Works in Source or
+Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of this License,
+each Contributor hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable patent license to make, have made, use,
+offer to sell, sell, import, and otherwise transfer the Work.
+
+4. Redistribution. You may reproduce and distribute copies of the Work or
+Derivative Works thereof in any medium, with or without modifications, and in
+Source or Object form, provided that You meet the following conditions:
+
+You must give any other recipients of the Work or Derivative Works a copy of
+this License; and
+
+You must cause any modified files to carry prominent notices stating that You
+changed the files; and
+
+You must retain, in the Source form of any Derivative Works that You distribute,
+all copyright, patent, trademark, and attribution notices from the Source form
+of the Work; and
+
+If the Work includes a "NOTICE" text file as part of its distribution, then any
+Derivative Works that You distribute must include a readable copy of the
+attribution notices contained within such NOTICE file.
+
+5. Submission of Contributions. Unless You explicitly state otherwise, any
+Contribution intentionally submitted for inclusion in the Work by You to the
+Licensor shall be under the terms and conditions of this License.
+
+6. Trademarks. This License does not grant permission to use the trade names,
+trademarks, service marks, or product names of the Licensor.
+
+7. Disclaimer of Warranty. Unless required by applicable law or agreed to in
+writing, Licensor provides the Work on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied.
+
+8. Limitation of Liability. In no event and under no legal theory shall any
+Contributor be liable to You for damages arising as a result of this License or
+out of the use or inability to use the Work.
+
+9. Accepting Warranty or Additional Liability. While redistributing the Work or
+Derivative Works thereof, You may choose to offer, and charge a fee for,
+acceptance of support, warranty, indemnity, or other liability obligations.
+

package/README.md

@@ -0,0 +1,24 @@
+# @fengsoft/auth-fastify
+
+Fastify adapter surface for Better Auth routes, session loading, and request guards.
+
+## Install
+
+```bash
+pnpm add @fengsoft/auth-fastify fastify better-auth
+```
+
+## Use When
+
+- you are wiring Better Auth into a Fastify app
+- you want reusable route plugins and session hydration helpers
+
+## Related Packages
+
+- `@fengsoft/auth-core`
+- `@fengsoft/auth-organizations`
+
+## Source
+
+- Repo: `fengsoft/auth-core`
+- Docs: see the root repository README and docs app for architecture and adoption guides

package/dist/auth-contracts/src/index.d.ts

@@ -0,0 +1,89 @@
+import type { Id, Timestamp } from "@fengsoft/foundation-contracts";
+export declare const AUTH_ROLES: readonly ["owner", "admin", "member", "viewer"];
+export type AuthRole = (typeof AUTH_ROLES)[number];
+export type AuthPermission = string;
+export type AuthUser = {
+    id: Id;
+    email: string;
+    name: string | null;
+    emailVerified: boolean;
+    createdAt: Timestamp;
+    updatedAt: Timestamp;
+};
+export type AuthSession = {
+    id: Id;
+    user: AuthUser;
+    activeOrganizationId: Id | null;
+    expiresAt: Timestamp;
+    createdAt: Timestamp;
+};
+export type AuthOrganization = {
+    id: Id;
+    name: string;
+    slug: string;
+    createdAt: Timestamp;
+    updatedAt: Timestamp;
+};
+export type AuthMembership = {
+    id: Id;
+    organizationId: Id;
+    userId: Id;
+    role: AuthRole;
+    permissions: AuthPermission[];
+    createdAt: Timestamp;
+};
+export type AuthInvite = {
+    id: Id;
+    email: string;
+    organizationId: Id;
+    role: AuthRole;
+    status: "pending" | "accepted" | "revoked";
+    expiresAt: Timestamp;
+    createdAt: Timestamp;
+};
+export type AuthApiKeyOwnerType = "user" | "organization";
+export type AuthApiKeyPermissions = Record<string, string[]>;
+export type AuthApiKey = {
+    id: Id;
+    configId: string;
+    label: string | null;
+    start: string | null;
+    prefix: string | null;
+    ownerType: AuthApiKeyOwnerType;
+    ownerId: Id;
+    enabled: boolean;
+    permissions: AuthApiKeyPermissions | null;
+    metadata: Record<string, unknown> | null;
+    rateLimitEnabled: boolean;
+    rateLimitTimeWindow: number | null;
+    rateLimitMax: number | null;
+    requestCount: number;
+    remaining: number | null;
+    refillAmount: number | null;
+    refillInterval: number | null;
+    lastRefillAt: Timestamp | null;
+    lastUsedAt: Timestamp | null;
+    expiresAt: Timestamp | null;
+    createdAt: Timestamp;
+    updatedAt: Timestamp;
+};
+export type CreatedAuthApiKey = {
+    apiKey: AuthApiKey;
+    secret: string;
+};
+export type AuthApiKeyVerificationResult = {
+    valid: boolean;
+    apiKey: AuthApiKey | null;
+    errorCode: string | null;
+    errorMessage: string | null;
+};
+export type AuthAuditEvent = {
+    id: Id;
+    action: string;
+    actorId: Id | null;
+    organizationId: Id | null;
+    resourceType: string;
+    resourceId: Id | null;
+    createdAt: Timestamp;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/auth-contracts/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../auth-contracts/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAEpE,eAAO,MAAM,UAAU,iDAAkD,CAAC;AAE1E,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,MAAM,MAAM,QAAQ,GAAG;IACtB,EAAE,EAAE,EAAE,CAAC;IACP,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACzB,EAAE,EAAE,EAAE,CAAC;IACP,IAAI,EAAE,QAAQ,CAAC;IACf,oBAAoB,EAAE,EAAE,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,EAAE,EAAE,EAAE,CAAC;IACP,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC5B,EAAE,EAAE,EAAE,CAAC;IACP,cAAc,EAAE,EAAE,CAAC;IACnB,MAAM,EAAE,EAAE,CAAC;IACX,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,SAAS,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACxB,EAAE,EAAE,EAAE,CAAC;IACP,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,EAAE,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3C,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,cAAc,CAAC;AAC1D,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAE7D,MAAM,MAAM,UAAU,GAAG;IACxB,EAAE,EAAE,EAAE,CAAC;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,OAAO,EAAE,EAAE,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC5B,EAAE,EAAE,EAAE,CAAC;IACP,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC;IACnB,cAAc,EAAE,EAAE,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;CACrB,CAAC"}

package/dist/auth-contracts/src/index.js

@@ -0,0 +1,2 @@
+export const AUTH_ROLES = ["owner", "admin", "member", "viewer"];
+//# sourceMappingURL=index.js.map

package/dist/auth-contracts/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../auth-contracts/src/index.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC"}

package/dist/auth-core/src/index.d.ts

@@ -0,0 +1,105 @@
+import { type ApiKeyConfigurationOptions, type ApiKeyOptions } from "@better-auth/api-key";
+import type { AuthSession, AuthUser } from "@fengsoft/auth-contracts";
+import { type EnvSource, z } from "@fengsoft/foundation-config";
+import type { Auth as BetterAuthInstance, BetterAuthOptions, BetterAuthPlugin } from "better-auth";
+import { APIError } from "better-auth";
+import { organization } from "better-auth/plugins";
+type TimestampLike = Date | string;
+type AuthHeaders = Headers | Array<[string, string]> | Record<string, string>;
+type BetterAuthUserPayload = {
+    id: string;
+    email: string;
+    name?: string | null;
+    emailVerified: boolean;
+    createdAt: TimestampLike;
+    updatedAt: TimestampLike;
+};
+type BetterAuthSessionRecord = {
+    id: string;
+    expiresAt: TimestampLike;
+    createdAt: TimestampLike;
+    updatedAt: TimestampLike;
+    token: string;
+    activeOrganizationId?: string | null;
+};
+export type BetterAuthSessionPayload = {
+    session: BetterAuthSessionRecord;
+    user: BetterAuthUserPayload;
+};
+export type AuthenticatedSessionResult = {
+    cookie: string;
+    headers: Headers;
+    session: AuthSession;
+};
+export declare const authEnvironmentSchema: z.ZodObject<{
+    AUTH_SECRET: z.ZodString;
+    AUTH_BASE_URL: z.ZodURL;
+    AUTH_TRUSTED_ORIGINS: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuthEnvironment = z.infer<typeof authEnvironmentSchema>;
+export type AuthRuntimeConfig = {
+    baseURL: string;
+    secret: string;
+    trustedOrigins: string[];
+};
+export type SignUpInput = {
+    email: string;
+    password: string;
+    name?: string | null;
+};
+export type SignInInput = {
+    email: string;
+    password: string;
+};
+export type PasswordResetInput = {
+    email: string;
+    redirectTo?: string;
+};
+export type PasswordResetConfirmationInput = {
+    token: string;
+    newPassword: string;
+};
+export type AuthCoreAdapter = {
+    signUp: (input: SignUpInput) => Promise<AuthSession>;
+    signIn: (input: SignInInput) => Promise<AuthSession>;
+    signOut: (sessionId: string) => Promise<void>;
+    getSession: (sessionId: string) => Promise<AuthSession | null>;
+    getUser: (userId: string) => Promise<AuthUser | null>;
+    revokeSession: (sessionId: string) => Promise<void>;
+    verifyEmail: (token: string) => Promise<void>;
+    requestPasswordReset: (input: PasswordResetInput) => Promise<void>;
+    confirmPasswordReset: (input: PasswordResetConfirmationInput) => Promise<void>;
+};
+export type BetterAuthService = {
+    auth: BetterAuthInstance;
+    confirmPasswordReset: (input: PasswordResetConfirmationInput) => Promise<void>;
+    getSession: (headers: AuthHeaders) => Promise<AuthSession | null>;
+    getUserFromHeaders: (headers: AuthHeaders) => Promise<AuthUser | null>;
+    requestPasswordReset: (input: PasswordResetInput) => Promise<void>;
+    revokeSession: (token: string, headers: AuthHeaders) => Promise<void>;
+    signIn: (input: SignInInput, headers?: AuthHeaders) => Promise<AuthenticatedSessionResult>;
+    signOut: (headers: AuthHeaders) => Promise<void>;
+    signUp: (input: SignUpInput, headers?: AuthHeaders) => Promise<AuthenticatedSessionResult>;
+    verifyEmail: (token: string, callbackURL?: string) => Promise<void>;
+};
+export type OrganizationPluginOptions = Exclude<Parameters<typeof organization>[0], undefined>;
+export type ApiKeyPluginFeatureOptions = {
+    configurations?: ApiKeyConfigurationOptions | ApiKeyConfigurationOptions[];
+    options?: ApiKeyOptions;
+};
+export type CreateBetterAuthOptions = Omit<BetterAuthOptions, "plugins"> & {
+    organizations?: boolean | OrganizationPluginOptions;
+    apiKeys?: boolean | ApiKeyPluginFeatureOptions;
+    plugins?: BetterAuthPlugin[];
+};
+export declare function readAuthRuntimeConfig(env?: EnvSource): AuthRuntimeConfig;
+export declare function normalizeAuthUser(user: BetterAuthUserPayload): AuthUser;
+export declare function normalizeBetterAuthSession(payload: BetterAuthSessionPayload): AuthSession;
+export declare function createBetterAuthOptions(options: CreateBetterAuthOptions): BetterAuthOptions;
+export declare function createBetterAuthServer(options: CreateBetterAuthOptions): BetterAuthInstance;
+export declare function getSessionFromHeaders(auth: BetterAuthInstance, headers: AuthHeaders): Promise<AuthSession | null>;
+export declare function createBetterAuthService(auth: BetterAuthInstance): BetterAuthService;
+export declare function isBetterAuthError(error: unknown): error is APIError;
+export declare function createAuthCore(adapter: AuthCoreAdapter): AuthCoreAdapter;
+export { APIError };
+//# sourceMappingURL=index.d.ts.map

package/dist/auth-core/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../auth-core/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAElB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAgB,KAAK,SAAS,EAAE,CAAC,EAAE,MAAM,6BAA6B,CAAC;AAE9E,OAAO,KAAK,EACX,IAAI,IAAI,kBAAkB,EAC1B,iBAAiB,EACjB,gBAAgB,EAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,QAAQ,EAAc,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAInD,KAAK,aAAa,GAAG,IAAI,GAAG,MAAM,CAAC;AACnC,KAAK,WAAW,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE9E,KAAK,qBAAqB,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,aAAa,CAAC;IACzB,SAAS,EAAE,aAAa,CAAC;CACzB,CAAC;AAEF,KAAK,uBAAuB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,aAAa,CAAC;IACzB,SAAS,EAAE,aAAa,CAAC;IACzB,SAAS,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACtC,OAAO,EAAE,uBAAuB,CAAC;IACjC,IAAI,EAAE,qBAAqB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,WAAW,CAAC;CACrB,CAAC;AAEF,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,MAAM,iBAAiB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC/D,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACtD,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,oBAAoB,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,oBAAoB,EAAE,CACrB,KAAK,EAAE,8BAA8B,KACjC,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,kBAAkB,CAAC;IACzB,oBAAoB,EAAE,CACrB,KAAK,EAAE,8BAA8B,KACjC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,UAAU,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAClE,kBAAkB,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACvE,oBAAoB,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,EAAE,CACP,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACzC,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,EAAE,CACP,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAC9C,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,EAClC,SAAS,CACT,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG;IACxC,cAAc,CAAC,EAAE,0BAA0B,GAAG,0BAA0B,EAAE,CAAC;IAC3E,OAAO,CAAC,EAAE,aAAa,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG;IAC1E,aAAa,CAAC,EAAE,OAAO,GAAG,yBAAyB,CAAC;IACpD,OAAO,CAAC,EAAE,OAAO,GAAG,0BAA0B,CAAC;IAC/C,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC7B,CAAC;AA6GF,wBAAgB,qBAAqB,CACpC,GAAG,GAAE,SAAuB,GAC1B,iBAAiB,CAQnB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,QAAQ,CASvE;AAED,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,wBAAwB,GAC/B,WAAW,CAQb;AAED,wBAAgB,uBAAuB,CACtC,OAAO,EAAE,uBAAuB,GAC9B,iBAAiB,CAqBnB;AAED,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,uBAAuB,GAC9B,kBAAkB,CAWpB;AAED,wBAAsB,qBAAqB,CAC1C,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAU7B;AAED,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,kBAAkB,GACtB,iBAAiB,CAsFnB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAEnE;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe,CAGxE;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/auth-core/src/index.js

@@ -0,0 +1,227 @@
+import { apiKey, } from "@better-auth/api-key";
+import { createConfig, z } from "@fengsoft/foundation-config";
+import { createLogger } from "@fengsoft/foundation-observability";
+import { APIError, betterAuth } from "better-auth";
+import { organization } from "better-auth/plugins";
+const logger = createLogger("auth-core");
+export const authEnvironmentSchema = z.object({
+    AUTH_SECRET: z.string().min(1),
+    AUTH_BASE_URL: z.url(),
+    AUTH_TRUSTED_ORIGINS: z.string().optional(),
+});
+function normalizeTimestamp(value) {
+    return value instanceof Date
+        ? value.toISOString()
+        : new Date(value).toISOString();
+}
+function splitOrigins(value) {
+    if (!value) {
+        return [];
+    }
+    return value
+        .split(",")
+        .map((origin) => origin.trim())
+        .filter((origin) => origin.length > 0);
+}
+function toHeaders(headers) {
+    return new Headers(headers);
+}
+function getSetCookieValues(headers) {
+    const withGetSetCookie = headers;
+    if (typeof withGetSetCookie.getSetCookie === "function") {
+        return withGetSetCookie.getSetCookie();
+    }
+    const setCookie = headers.get("set-cookie");
+    return setCookie ? [setCookie] : [];
+}
+function extractCookiePair(headers) {
+    for (const value of getSetCookieValues(headers)) {
+        const [cookie] = value.split(";");
+        if (cookie && cookie.length > 0) {
+            return cookie;
+        }
+    }
+    return null;
+}
+function withCookie(headers, cookie) {
+    const resolvedHeaders = toHeaders(headers);
+    resolvedHeaders.set("cookie", cookie);
+    return resolvedHeaders;
+}
+function resolveOrganizationPlugins(organizations) {
+    if (organizations === false) {
+        return [];
+    }
+    if (organizations === true || organizations === undefined) {
+        return [organization({ allowUserToCreateOrganization: true })];
+    }
+    return [organization(organizations)];
+}
+function resolveApiKeyPlugins(apiKeys) {
+    if (apiKeys === false || apiKeys === undefined) {
+        return [];
+    }
+    if (apiKeys === true) {
+        return [apiKey()];
+    }
+    return [apiKey(apiKeys.configurations, apiKeys.options)];
+}
+async function sessionFromResponse(auth, response, headers) {
+    const cookie = extractCookiePair(response.headers);
+    if (!cookie) {
+        throw new Error("Better Auth did not return a session cookie.");
+    }
+    const session = await getSessionFromHeaders(auth, withCookie(headers, cookie));
+    if (!session) {
+        throw new Error("Better Auth returned a cookie but the session could not be loaded.");
+    }
+    return {
+        cookie,
+        headers: withCookie(headers, cookie),
+        session,
+    };
+}
+export function readAuthRuntimeConfig(env = process.env) {
+    const parsed = createConfig(authEnvironmentSchema, env);
+    return {
+        baseURL: parsed.AUTH_BASE_URL,
+        secret: parsed.AUTH_SECRET,
+        trustedOrigins: splitOrigins(parsed.AUTH_TRUSTED_ORIGINS),
+    };
+}
+export function normalizeAuthUser(user) {
+    return {
+        id: user.id,
+        email: user.email,
+        name: user.name ?? null,
+        emailVerified: user.emailVerified,
+        createdAt: normalizeTimestamp(user.createdAt),
+        updatedAt: normalizeTimestamp(user.updatedAt),
+    };
+}
+export function normalizeBetterAuthSession(payload) {
+    return {
+        id: payload.session.id,
+        user: normalizeAuthUser(payload.user),
+        activeOrganizationId: payload.session.activeOrganizationId ?? null,
+        expiresAt: normalizeTimestamp(payload.session.expiresAt),
+        createdAt: normalizeTimestamp(payload.session.createdAt),
+    };
+}
+export function createBetterAuthOptions(options) {
+    const { organizations = true, apiKeys = false, plugins = [], emailAndPassword, ...rest } = options;
+    return {
+        ...rest,
+        emailAndPassword: {
+            ...emailAndPassword,
+            enabled: emailAndPassword?.enabled ?? true,
+        },
+        plugins: [
+            ...resolveOrganizationPlugins(organizations),
+            ...resolveApiKeyPlugins(apiKeys),
+            ...plugins,
+        ],
+    };
+}
+export function createBetterAuthServer(options) {
+    logger.info("Creating Better Auth server", {
+        baseURL: options.baseURL,
+        apiKeys: options.apiKeys === undefined || options.apiKeys === false
+            ? "disabled"
+            : "enabled",
+        organizations: options.organizations === false ? "disabled" : "enabled",
+    });
+    return betterAuth(createBetterAuthOptions(options));
+}
+export async function getSessionFromHeaders(auth, headers) {
+    const session = await auth.api.getSession({
+        headers: toHeaders(headers),
+    });
+    if (!session) {
+        return null;
+    }
+    return normalizeBetterAuthSession(session);
+}
+export function createBetterAuthService(auth) {
+    const signIn = async (input, headers) => {
+        const response = await auth.api.signInEmail({
+            asResponse: true,
+            body: {
+                email: input.email,
+                password: input.password,
+            },
+            headers: toHeaders(headers),
+        });
+        return sessionFromResponse(auth, response, headers);
+    };
+    const signUp = async (input, headers) => {
+        await auth.api.signUpEmail({
+            body: {
+                email: input.email,
+                password: input.password,
+                name: input.name ?? input.email,
+            },
+            headers: toHeaders(headers),
+        });
+        return signIn({
+            email: input.email,
+            password: input.password,
+        }, headers);
+    };
+    return {
+        auth,
+        signUp,
+        signIn,
+        getSession: (headers) => getSessionFromHeaders(auth, headers),
+        getUserFromHeaders: async (headers) => {
+            const session = await getSessionFromHeaders(auth, headers);
+            return session?.user ?? null;
+        },
+        signOut: async (headers) => {
+            await auth.api.signOut({
+                headers: toHeaders(headers),
+            });
+        },
+        revokeSession: async (token, headers) => {
+            await auth.api.revokeSession({
+                body: {
+                    token,
+                },
+                headers: toHeaders(headers),
+            });
+        },
+        verifyEmail: async (token, callbackURL) => {
+            await auth.api.verifyEmail({
+                query: {
+                    token,
+                    callbackURL,
+                },
+            });
+        },
+        requestPasswordReset: async (input) => {
+            await auth.api.requestPasswordReset({
+                body: {
+                    email: input.email,
+                    redirectTo: input.redirectTo,
+                },
+            });
+        },
+        confirmPasswordReset: async (input) => {
+            await auth.api.resetPassword({
+                body: {
+                    newPassword: input.newPassword,
+                    token: input.token,
+                },
+            });
+        },
+    };
+}
+export function isBetterAuthError(error) {
+    return error instanceof APIError;
+}
+export function createAuthCore(adapter) {
+    logger.info("Auth core adapter registered");
+    return adapter;
+}
+export { APIError };
+//# sourceMappingURL=index.js.map

package/dist/auth-core/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../auth-core/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,MAAM,GACN,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAkB,CAAC,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAMlE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;AAkCzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,GAAG,EAAE;IACtB,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAqFH,SAAS,kBAAkB,CAAC,KAAoB;IAC/C,OAAO,KAAK,YAAY,IAAI;QAC3B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;QACrB,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACX,CAAC;IAED,OAAO,KAAK;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,OAAqB;IACvC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC3C,MAAM,gBAAgB,GAAG,OAAkC,CAAC;IAC5D,IAAI,OAAO,gBAAgB,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACzD,OAAO,gBAAgB,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB;IAC1C,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC;QACf,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,OAAgC,EAAE,MAAc;IACnE,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3C,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtC,OAAO,eAAe,CAAC;AACxB,CAAC;AAED,SAAS,0BAA0B,CAClC,aAAuD;IAEvD,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACX,CAAC;IAED,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,CAAC,YAAY,CAAC,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,oBAAoB,CAC5B,OAA2C;IAE3C,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,EAAE,CAAC;IACX,CAAC;IAED,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,mBAAmB,CACjC,IAAwB,EACxB,QAAkB,EAClB,OAAqB;IAErB,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAC1C,IAAI,EACJ,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAC3B,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,oEAAoE,CACpE,CAAC;IACH,CAAC;IAED,OAAO;QACN,MAAM;QACN,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;QACpC,OAAO;KACP,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,MAAiB,OAAO,CAAC,GAAG;IAE5B,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAExD,OAAO;QACN,OAAO,EAAE,MAAM,CAAC,aAAa;QAC7B,MAAM,EAAE,MAAM,CAAC,WAAW;QAC1B,cAAc,EAAE,YAAY,CAAC,MAAM,CAAC,oBAAoB,CAAC;KACzD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC5D,OAAO;QACN,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC7C,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;KAC7C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,OAAiC;IAEjC,OAAO;QACN,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;QACtB,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC;QACrC,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,oBAAoB,IAAI,IAAI;QAClE,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QACxD,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;KACxD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,OAAgC;IAEhC,MAAM,EACL,aAAa,GAAG,IAAI,EACpB,OAAO,GAAG,KAAK,EACf,OAAO,GAAG,EAAE,EACZ,gBAAgB,EAChB,GAAG,IAAI,EACP,GAAG,OAAO,CAAC;IAEZ,OAAO;QACN,GAAG,IAAI;QACP,gBAAgB,EAAE;YACjB,GAAG,gBAAgB;YACnB,OAAO,EAAE,gBAAgB,EAAE,OAAO,IAAI,IAAI;SAC1C;QACD,OAAO,EAAE;YACR,GAAG,0BAA0B,CAAC,aAAa,CAAC;YAC5C,GAAG,oBAAoB,CAAC,OAAO,CAAC;YAChC,GAAG,OAAO;SACV;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACrC,OAAgC;IAEhC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;QAC1C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EACN,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;YACzD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,SAAS;QACb,aAAa,EAAE,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;KACvE,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,IAAwB,EACxB,OAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACzC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,IAAwB;IAExB,MAAM,MAAM,GAAG,KAAK,EACnB,KAAkB,EAClB,OAAqB,EACiB,EAAE;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;YAC3C,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACxB;YACD,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;SAC3B,CAAC,CAAC;QAEH,OAAO,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EACnB,KAAkB,EAClB,OAAqB,EACiB,EAAE;QACxC,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;YAC1B,IAAI,EAAE;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK;aAC/B;YACD,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;SAC3B,CAAC,CAAC;QAEH,OAAO,MAAM,CACZ;YACC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACxB,EACD,OAAO,CACP,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACN,IAAI;QACJ,MAAM;QACN,MAAM;QACN,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC;QAC7D,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC1B,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACtB,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;aAC3B,CAAC,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvC,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;gBAC5B,IAAI,EAAE;oBACL,KAAK;iBACL;gBACD,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;aAC3B,CAAC,CAAC;QACJ,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YACzC,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC1B,KAAK,EAAE;oBACN,KAAK;oBACL,WAAW;iBACX;aACD,CAAC,CAAC;QACJ,CAAC;QACD,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACrC,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBACnC,IAAI,EAAE;oBACL,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC5B;aACD,CAAC,CAAC;QACJ,CAAC;QACD,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACrC,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;gBAC5B,IAAI,EAAE;oBACL,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;iBAClB;aACD,CAAC,CAAC;QACJ,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC/C,OAAO,KAAK,YAAY,QAAQ,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAwB;IACtD,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/auth-fastify/src/index.d.ts

@@ -0,0 +1,19 @@
+import type { AuthSession } from "@fengsoft/auth-contracts";
+import type { Auth as BetterAuthInstance } from "better-auth";
+import type { FastifyPluginAsync, FastifyRequest, preHandlerHookHandler } from "fastify";
+export type SessionResolver = (request: FastifyRequest) => Promise<AuthSession | null>;
+export type BetterAuthRouteOptions = {
+    baseURL?: string;
+    path?: string;
+};
+declare module "fastify" {
+    interface FastifyRequest {
+        authSession: AuthSession | null;
+    }
+}
+export declare function createAuthPlugin(resolveSession: SessionResolver): FastifyPluginAsync;
+export declare function createBetterAuthSessionResolver(auth: BetterAuthInstance): SessionResolver;
+export declare function createBetterAuthSessionPlugin(auth: BetterAuthInstance): FastifyPluginAsync;
+export declare function createBetterAuthRoutePlugin(auth: BetterAuthInstance, options?: BetterAuthRouteOptions): FastifyPluginAsync;
+export declare function createRequireSessionHook(): preHandlerHookHandler;
+//# sourceMappingURL=index.d.ts.map

package/dist/auth-fastify/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,KAAK,EAAE,IAAI,IAAI,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,KAAK,EACX,kBAAkB,EAElB,cAAc,EACd,qBAAqB,EACrB,MAAM,SAAS,CAAC;AAEjB,MAAM,MAAM,eAAe,GAAG,CAC7B,OAAO,EAAE,cAAc,KACnB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;AAEjC,MAAM,MAAM,sBAAsB,GAAG;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AASF,OAAO,QAAQ,SAAS,CAAC;IACxB,UAAU,cAAc;QACvB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;KAChC;CACD;AAgGD,wBAAgB,gBAAgB,CAC/B,cAAc,EAAE,eAAe,GAC7B,kBAAkB,CAQpB;AAED,wBAAgB,+BAA+B,CAC9C,IAAI,EAAE,kBAAkB,GACtB,eAAe,CAQjB;AAED,wBAAgB,6BAA6B,CAC5C,IAAI,EAAE,kBAAkB,GACtB,kBAAkB,CAEpB;AAED,wBAAgB,2BAA2B,CAC1C,IAAI,EAAE,kBAAkB,EACxB,OAAO,GAAE,sBAA2B,GAClC,kBAAkB,CAWpB;AAED,wBAAgB,wBAAwB,IAAI,qBAAqB,CAWhE"}

package/dist/auth-fastify/src/index.js

@@ -0,0 +1,104 @@
+import { normalizeBetterAuthSession } from "@fengsoft/auth-core";
+import { fromNodeHeaders } from "better-auth/node";
+function shouldIncludeBody(method) {
+    const normalizedMethod = method.toUpperCase();
+    return normalizedMethod !== "GET" && normalizedMethod !== "HEAD";
+}
+function createRequestUrl(request, baseURL) {
+    const host = request.headers.host ?? "localhost";
+    const origin = baseURL ?? `${request.protocol ?? "http"}://${host}`;
+    return new URL(request.raw.url ?? request.url, origin);
+}
+function serializeRequestBody(request, headers) {
+    if (!shouldIncludeBody(request.method) || request.body == null) {
+        return undefined;
+    }
+    if (typeof request.body === "string" ||
+        request.body instanceof ArrayBuffer ||
+        request.body instanceof DataView ||
+        request.body instanceof Uint8Array) {
+        return request.body;
+    }
+    if (ArrayBuffer.isView(request.body)) {
+        return new Uint8Array(request.body.buffer, request.body.byteOffset, request.body.byteLength);
+    }
+    const contentType = headers.get("content-type") ?? "";
+    if (contentType.includes("application/x-www-form-urlencoded")) {
+        const formEntries = Object.entries(request.body);
+        return new URLSearchParams(formEntries).toString();
+    }
+    if (!headers.has("content-type")) {
+        headers.set("content-type", "application/json");
+    }
+    return JSON.stringify(request.body);
+}
+async function replyWithAuthResponse(reply, response) {
+    reply.code(response.status);
+    for (const [name, value] of response.headers.entries()) {
+        reply.header(name, value);
+    }
+    const bodyText = await response.text();
+    if (bodyText.length === 0) {
+        void reply.send();
+        return;
+    }
+    const contentType = response.headers.get("content-type") ?? "";
+    if (contentType.includes("application/json")) {
+        void reply.send(JSON.parse(bodyText));
+        return;
+    }
+    void reply.send(bodyText);
+}
+async function forwardToBetterAuth(auth, request, reply, baseURL) {
+    const headers = fromNodeHeaders(request.headers);
+    const body = serializeRequestBody(request, headers);
+    const authRequest = new Request(createRequestUrl(request, baseURL), {
+        method: request.method,
+        headers,
+        body,
+        duplex: body ? "half" : undefined,
+    });
+    const response = await auth.handler(authRequest);
+    await replyWithAuthResponse(reply, response);
+}
+export function createAuthPlugin(resolveSession) {
+    return async (app) => {
+        app.decorateRequest("authSession", null);
+        app.addHook("preHandler", async (request) => {
+            request.authSession = await resolveSession(request);
+        });
+    };
+}
+export function createBetterAuthSessionResolver(auth) {
+    return async (request) => {
+        const session = await auth.api.getSession({
+            headers: fromNodeHeaders(request.headers),
+        });
+        return session ? normalizeBetterAuthSession(session) : null;
+    };
+}
+export function createBetterAuthSessionPlugin(auth) {
+    return createAuthPlugin(createBetterAuthSessionResolver(auth));
+}
+export function createBetterAuthRoutePlugin(auth, options = {}) {
+    const routePath = options.path ?? "/api/auth";
+    return async (app) => {
+        app.route({
+            method: ["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"],
+            url: `${routePath}/*`,
+            handler: async (request, reply) => forwardToBetterAuth(auth, request, reply, options.baseURL),
+        });
+    };
+}
+export function createRequireSessionHook() {
+    return async (request, reply) => {
+        if (request.authSession) {
+            return;
+        }
+        void reply.code(401).send({
+            code: "UNAUTHORIZED",
+            message: "Authentication required.",
+        });
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/auth-fastify/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AA8BnD,SAAS,iBAAiB,CAAC,MAAc;IACxC,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,gBAAgB,KAAK,KAAK,IAAI,gBAAgB,KAAK,MAAM,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAuB,EAAE,OAAgB;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,MAAM,IAAI,EAAE,CAAC;IAEpE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,oBAAoB,CAC5B,OAAuB,EACvB,OAAgB;IAEhB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,IACC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,OAAO,CAAC,IAAI,YAAY,WAAW;QACnC,OAAO,CAAC,IAAI,YAAY,QAAQ;QAChC,OAAO,CAAC,IAAI,YAAY,UAAU,EACjC,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,UAAU,CACpB,OAAO,CAAC,IAAI,CAAC,MAAM,EACnB,OAAO,CAAC,IAAI,CAAC,UAAU,EACvB,OAAO,CAAC,IAAI,CAAC,UAAU,CACvB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QAC/D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAA8B,CAAC,CAAC;QAC3E,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,KAAmB,EACnB,QAAkB;IAElB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO;IACR,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC9C,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,OAAO;IACR,CAAC;IAED,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,mBAAmB,CACjC,IAAwB,EACxB,OAAuB,EACvB,KAAmB,EACnB,OAAgB;IAEhB,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE;QACnE,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KACjC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC/B,cAA+B;IAE/B,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACpB,GAAG,CAAC,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAEzC,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC3C,OAAO,CAAC,WAAW,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC9C,IAAwB;IAExB,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YACzC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC;SACzC,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC5C,IAAwB;IAExB,OAAO,gBAAgB,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,IAAwB,EACxB,UAAkC,EAAE;IAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IAE9C,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACpB,GAAG,CAAC,KAAK,CAAC;YACT,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;YACpE,GAAG,EAAE,GAAG,SAAS,IAAI;YACrB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CACjC,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC;SAC3D,CAAC,CAAC;IACJ,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB;IACvC,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC7D,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO;QACR,CAAC;QAED,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACzB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,0BAA0B;SACnC,CAAC,CAAC;IACJ,CAAC,CAAC;AACH,CAAC"}

package/dist/foundation-config/src/index.d.ts

@@ -0,0 +1,9 @@
+import { type ZodObject, type ZodRawShape, z } from "zod";
+export type EnvSource = Record<string, string | undefined>;
+export declare function readRequiredEnv(name: string, env?: EnvSource): string;
+export declare function readOptionalEnv(name: string, env?: EnvSource): string | undefined;
+export declare function readUrl(name: string, env?: EnvSource): URL;
+export declare function readInt(name: string, fallback: number, env?: EnvSource): number;
+export declare function createConfig<TShape extends ZodRawShape>(schema: ZodObject<TShape>, env?: EnvSource): z.core.$InferObjectOutput<TShape, {}>;
+export { z };
+//# sourceMappingURL=index.d.ts.map

package/dist/foundation-config/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../foundation-config/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE1D,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAE3D,wBAAgB,eAAe,CAC9B,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,SAAuB,GAC1B,MAAM,CAMR;AAED,wBAAgB,eAAe,CAC9B,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,SAAuB,GAC1B,MAAM,GAAG,SAAS,CAGpB;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,SAAuB,GAAG,GAAG,CAEvE;AAED,wBAAgB,OAAO,CACtB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,SAAuB,GAC1B,MAAM,CAQR;AAED,wBAAgB,YAAY,CAAC,MAAM,SAAS,WAAW,EACtD,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,EACzB,GAAG,GAAE,SAAuB,yCAG5B;AAED,OAAO,EAAE,CAAC,EAAE,CAAC"}

package/dist/foundation-config/src/index.js

@@ -0,0 +1,28 @@
+import { z } from "zod";
+export function readRequiredEnv(name, env = process.env) {
+    const value = env[name]?.trim();
+    if (!value) {
+        throw new Error(`Missing required environment variable: ${name}`);
+    }
+    return value;
+}
+export function readOptionalEnv(name, env = process.env) {
+    const value = env[name]?.trim();
+    return value && value.length > 0 ? value : undefined;
+}
+export function readUrl(name, env = process.env) {
+    return new URL(readRequiredEnv(name, env));
+}
+export function readInt(name, fallback, env = process.env) {
+    const raw = env[name]?.trim();
+    if (!raw) {
+        return fallback;
+    }
+    const value = Number.parseInt(raw, 10);
+    return Number.isNaN(value) ? fallback : value;
+}
+export function createConfig(schema, env = process.env) {
+    return schema.parse(env);
+}
+export { z };
+//# sourceMappingURL=index.js.map

package/dist/foundation-config/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../foundation-config/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,CAAC,EAAE,MAAM,KAAK,CAAC;AAI1D,MAAM,UAAU,eAAe,CAC9B,IAAY,EACZ,MAAiB,OAAO,CAAC,GAAG;IAE5B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAC9B,IAAY,EACZ,MAAiB,OAAO,CAAC,GAAG;IAE5B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IAChC,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,MAAiB,OAAO,CAAC,GAAG;IACjE,OAAO,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,OAAO,CACtB,IAAY,EACZ,QAAgB,EAChB,MAAiB,OAAO,CAAC,GAAG;IAE5B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,YAAY,CAC3B,MAAyB,EACzB,MAAiB,OAAO,CAAC,GAAG;IAE5B,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,OAAO,EAAE,CAAC,EAAE,CAAC"}

package/dist/foundation-contracts/src/index.d.ts

@@ -0,0 +1,24 @@
+export type Id = string;
+export type Timestamp = string;
+export type MetadataValue = string | number | boolean | null | MetadataValue[] | {
+    [key: string]: MetadataValue;
+};
+export type Metadata = Record<string, MetadataValue>;
+export type ErrorEnvelope = {
+    code: string;
+    message: string;
+    status: number;
+    requestId?: string;
+    details?: Metadata;
+};
+export type PageRequest = {
+    cursor?: string | null;
+    limit?: number;
+};
+export type PageResult<TItem> = {
+    items: TItem[];
+    nextCursor: string | null;
+    totalCount?: number;
+};
+export declare function createErrorEnvelope(input: ErrorEnvelope): ErrorEnvelope;
+//# sourceMappingURL=index.d.ts.map

package/dist/foundation-contracts/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../foundation-contracts/src/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,EAAE,GAAG,MAAM,CAAC;AACxB,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAC/B,MAAM,MAAM,aAAa,GACtB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,aAAa,EAAE,GACf;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAAA;CAAE,CAAC;AAEpC,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAErD,MAAM,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,UAAU,CAAC,KAAK,IAAI;IAC/B,KAAK,EAAE,KAAK,EAAE,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAEvE"}

package/dist/foundation-contracts/src/index.js

@@ -0,0 +1,4 @@
+export function createErrorEnvelope(input) {
+    return input;
+}
+//# sourceMappingURL=index.js.map

package/dist/foundation-contracts/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../foundation-contracts/src/index.ts"],"names":[],"mappings":"AA+BA,MAAM,UAAU,mBAAmB,CAAC,KAAoB;IACvD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/foundation-observability/src/index.d.ts

@@ -0,0 +1,16 @@
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export type LogContext = Record<string, unknown>;
+export type Logger = {
+    debug: (message: string, context?: LogContext) => void;
+    info: (message: string, context?: LogContext) => void;
+    warn: (message: string, context?: LogContext) => void;
+    error: (message: string, context?: LogContext) => void;
+};
+export declare function createLogger(scope: string): Logger;
+export declare function createRequestId(prefix?: string): string;
+export declare function createHealthPayload(service: string): {
+    service: string;
+    status: "ok";
+    timestamp: string;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/foundation-observability/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../foundation-observability/src/index.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAC3D,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,MAAM,MAAM,MAAM,GAAG;IACpB,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;IACvD,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;IACtD,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;IACtD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;CACvD,CAAC;AAgCF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOlD;AAED,wBAAgB,eAAe,CAAC,MAAM,SAAQ,GAAG,MAAM,CAEtD;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM;;;;EAMlD"}

package/dist/foundation-observability/src/index.js

@@ -0,0 +1,43 @@
+import { randomUUID } from "node:crypto";
+function writeLog(level, scope, message, context) {
+    const payload = {
+        level,
+        scope,
+        message,
+        context: context ?? {},
+        timestamp: new Date().toISOString(),
+    };
+    switch (level) {
+        case "debug":
+            console.debug(payload);
+            return;
+        case "info":
+            console.info(payload);
+            return;
+        case "warn":
+            console.warn(payload);
+            return;
+        case "error":
+            console.error(payload);
+            return;
+    }
+}
+export function createLogger(scope) {
+    return {
+        debug: (message, context) => writeLog("debug", scope, message, context),
+        info: (message, context) => writeLog("info", scope, message, context),
+        warn: (message, context) => writeLog("warn", scope, message, context),
+        error: (message, context) => writeLog("error", scope, message, context),
+    };
+}
+export function createRequestId(prefix = "req") {
+    return `${prefix}_${randomUUID()}`;
+}
+export function createHealthPayload(service) {
+    return {
+        service,
+        status: "ok",
+        timestamp: new Date().toISOString(),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/foundation-observability/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../foundation-observability/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,SAAS,QAAQ,CAChB,KAAe,EACf,KAAa,EACb,OAAe,EACf,OAAoB;IAEpB,MAAM,OAAO,GAAG;QACf,KAAK;QACL,KAAK;QACL,OAAO;QACP,OAAO,EAAE,OAAO,IAAI,EAAE;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IAEF,QAAQ,KAAK,EAAE,CAAC;QACf,KAAK,OAAO;YACX,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO;QACR,KAAK,MAAM;YACV,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO;QACR,KAAK,MAAM;YACV,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO;QACR,KAAK,OAAO;YACX,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO;IACT,CAAC;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACzC,OAAO;QACN,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;QACvE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;QACrE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;QACrE,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;KACvE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAM,GAAG,KAAK;IAC7C,OAAO,GAAG,MAAM,IAAI,UAAU,EAAE,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe;IAClD,OAAO;QACN,OAAO;QACP,MAAM,EAAE,IAAa;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@fengsoft/auth-fastify",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "better-auth": "^1.5.6",
+    "fastify": "^5.8.4",
+    "@fengsoft/auth-core": "0.1.0",
+    "@fengsoft/auth-contracts": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "lint": "biome check src package.json tsconfig.json"
+  }
+}