@finueva/auth 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Finueva
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,50 @@
+# @finueva/auth
+
+Experimental public SDK for Finueva Auth. Version `0.x` may introduce breaking changes; `1.0.0` will mark the stable interface.
+
+```sh
+pnpm add @finueva/auth
+```
+
+## Browser
+
+```ts
+import { createAuthClient } from "@finueva/auth";
+
+const auth = createAuthClient({
+  authOrigin: "https://auth.finueva.com",
+  appOrigin: window.location.origin,
+});
+
+const session = await auth.getSession();
+await auth.signIn({ email, password });
+const credential = await auth.getDriveCredential({
+  workspace: { type: "personal" },
+});
+await auth.signOut();
+```
+
+The Auth session uses the Auth-owned HTTP-only cookie. Drive credentials are cached only in memory, shared across concurrent requests, and renewed once they have two minutes remaining. Passing `forceRefresh: true` requests a replacement after a Drive authentication failure; the SDK never replays a Drive request.
+
+## Server
+
+```ts
+import { createServerAuth } from "@finueva/auth/server";
+
+const auth = createServerAuth({
+  authOrigin: "https://auth.finueva.com",
+  appOrigin: "https://files.finueva.com",
+  request,
+});
+
+const session = await auth.getSession();
+```
+
+The server client is request-scoped. It forwards the incoming Auth cookie only to Auth and never sends it to Drive.
+
+## Current Limits
+
+- Only personal workspace credentials are supported.
+- Cross-root SSO and organization switching are not part of `0.1.0`.
+- The package does not persist Drive credentials or expose Better Auth internals.
+- Public errors are `AuthError` instances with stable, value-free codes.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,100 @@
+# Third-Party Notices
+
+`@finueva/auth` bundles browser/runtime code from the packages listed below.
+
+## @chiballc/utils 2.2.22
+
+Source: https://github.com/ChibaLLC/utils
+
+ISC License
+
+Copyright (c) AllanBosire
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+## Better Auth 1.6.22
+
+Source: https://github.com/better-auth/better-auth
+
+The MIT License (MIT)
+
+Copyright (c) 2024 - present, Bereket Engida
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+## ofetch 1.5.1
+
+Source: https://github.com/unjs/ofetch
+
+MIT License
+
+Copyright (c) Pooya Parsa <pooya@pi0.io>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+## ufo 1.6.4
+
+Source: https://github.com/unjs/ufo
+
+MIT License
+
+Copyright (c) Pooya Parsa <pooya@pi0.io>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/errors-C-cHFWC7.d.ts

@@ -0,0 +1,55 @@
+//#region src/types.d.ts
+interface AuthUser {
+  id: string;
+  name: string;
+  email: string;
+  emailVerified: boolean;
+  image: string | null;
+}
+interface AuthSession {
+  id: string;
+  expiresAt: Date;
+  user: AuthUser;
+}
+interface PersonalWorkspaceSelection {
+  type: "personal";
+}
+interface DriveCredential {
+  tokenType: "Bearer";
+  token: string;
+  expiresAt: Date;
+}
+interface SignInInput {
+  email: string;
+  password: string;
+}
+interface DriveCredentialInput {
+  workspace: PersonalWorkspaceSelection;
+  forceRefresh?: boolean;
+}
+interface AuthClientOptions {
+  authOrigin: string;
+  appOrigin: string;
+  fetch?: typeof globalThis.fetch;
+  now?: () => number;
+  timeoutMs?: number;
+}
+interface FinuevaAuthClient {
+  getSession(): Promise<AuthSession | null>;
+  signIn(input: SignInInput): Promise<AuthSession>;
+  signOut(): Promise<void>;
+  getDriveCredential(input: DriveCredentialInput): Promise<DriveCredential>;
+  onSessionChange(listener: (session: AuthSession | null) => void): () => void;
+}
+//#endregion
+//#region src/errors.d.ts
+type AuthErrorCode = "invalid_credentials" | "authentication_required" | "request_origin_denied" | "invalid_workspace_selection" | "credential_rate_limited" | "state_conflict" | "access_denied" | "identity_authority_unavailable";
+type AuthErrorStatus = 401 | 403 | 409 | 422 | 429 | 503;
+declare class AuthError extends Error {
+  readonly code: AuthErrorCode;
+  readonly status: AuthErrorStatus;
+  readonly retryAfterSeconds?: number;
+  constructor(code: AuthErrorCode, status: AuthErrorStatus, retryAfterSeconds?: number);
+}
+//#endregion
+export { AuthSession as a, DriveCredentialInput as c, SignInInput as d, AuthClientOptions as i, FinuevaAuthClient as l, AuthErrorCode as n, AuthUser as o, AuthErrorStatus as r, DriveCredential as s, AuthError as t, PersonalWorkspaceSelection as u };

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+import { a as AuthSession, c as DriveCredentialInput, d as SignInInput, i as AuthClientOptions, l as FinuevaAuthClient, n as AuthErrorCode, o as AuthUser, r as AuthErrorStatus, s as DriveCredential, t as AuthError, u as PersonalWorkspaceSelection } from "./errors-C-cHFWC7.js";
+//#region src/client.d.ts
+declare function createAuthClient(options: AuthClientOptions): FinuevaAuthClient;
+//#endregion
+export { type AuthClientOptions, AuthError, type AuthErrorCode, type AuthErrorStatus, type AuthSession, type AuthUser, type DriveCredential, type DriveCredentialInput, type FinuevaAuthClient, type PersonalWorkspaceSelection, type SignInInput, createAuthClient };