@finueva/auth 0.4.0 → 0.6.0

package/README.md

@@ -23,6 +23,10 @@ const stop = auth.onAuthStateChange((state) => {
 
 const session = await auth.getSession();
 await auth.signIn({ email, password });
+await auth.sendVerificationEmail({
+  email,
+  callbackURL: `${window.location.origin}/account/email-verified`,
+});
 const organizations = await auth.listOrganizations();
 const acceptance = await auth.acceptInvitation({ invitationId });
 const credential = await auth.getDriveCredential({
@@ -37,6 +41,8 @@ stop();
 
 The Auth session uses the Auth-owned HTTP-only cookie. `getSession()` and `onSessionChange()` report Better Auth authority results only. `onAuthStateChange()` separately emits `loading`, non-authoritative `cached`, authoritative `authenticated`/`unauthenticated`, or non-authoritative `unavailable`; it verifies every cache hint immediately.
 
+`sendVerificationEmail({ email, callbackURL? })` sends one non-retried request. An explicit callback must be an exact absolute URL on `appOrigin`; it is never persisted by the SDK. Without one, the email lands on Auth's value-free verification result page after Better Auth completes verification.
+
 DOM browsers use local storage by default. Set `persistence` to `"session"`, `"memory"`, or a structural driver with `getItem`, `setItem`, and `removeItem`; Workers and Node default to memory. The one 16 KiB versioned snapshot contains only a normalized session and its Auth authority identity. It expires with the session and never contains cookies, passwords, Drive credentials, tokens, headers, workspace selection, Better Auth payloads, or errors. Persistence failure cannot change an Auth request result.
 
 A workspace is either `{ type: "personal" }` or `{ type: "organization", organizationId }`; organization IDs must match `[A-Za-z0-9_-]{1,128}`. Workspace selections are strict and reject additional properties locally with `invalid_workspace_selection` before making a request.

package/THIRD_PARTY_NOTICES.md

@@ -2,7 +2,7 @@
 
 `@finueva/auth` bundles browser/runtime code from the packages listed below.
 
-## @chiballc/utils 2.2.22
+## @chiballc/utils 2.5.0
 
 Source: https://github.com/ChibaLLC/utils
 

package/dist/device.d.ts

@@ -1,4 +1,4 @@
-import { o as AuthSession } from "./types-zEqO1_r2.js";
+import { o as AuthSession } from "./types-HSdjQWMZ.js";
 //#region src/device.d.ts
 type DeviceAuthorizationErrorCode = "device_access_denied" | "device_authorization_cancelled" | "device_code_expired" | "invalid_device_authorization" | "identity_authority_unavailable";
 declare class DeviceAuthorizationError extends Error {

package/dist/device.js

@@ -1,45 +1,3 @@
-//#region ../../node_modules/.pnpm/destr@2.0.5/node_modules/destr/dist/index.mjs
-const suspectProtoRx = /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/;
-const suspectConstructorRx = /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/;
-const JsonSigRx = /^\s*["[{]|^\s*-?\d{1,16}(\.\d{1,17})?([Ee][+-]?\d+)?\s*$/;
-function jsonParseTransform(key, value) {
-	if (key === "__proto__" || key === "constructor" && value && typeof value === "object" && "prototype" in value) {
-		warnKeyDropped(key);
-		return;
-	}
-	return value;
-}
-function warnKeyDropped(key) {
-	console.warn(`[destr] Dropping "${key}" key to prevent prototype pollution.`);
-}
-function destr(value, options = {}) {
-	if (typeof value !== "string") return value;
-	if (value[0] === "\"" && value[value.length - 1] === "\"" && value.indexOf("\\") === -1) return value.slice(1, -1);
-	const _value = value.trim();
-	if (_value.length <= 9) switch (_value.toLowerCase()) {
-		case "true": return true;
-		case "false": return false;
-		case "undefined": return;
-		case "null": return null;
-		case "nan": return NaN;
-		case "infinity": return Number.POSITIVE_INFINITY;
-		case "-infinity": return Number.NEGATIVE_INFINITY;
-	}
-	if (!JsonSigRx.test(value)) {
-		if (options.strict) throw new SyntaxError("[destr] Invalid JSON");
-		return value;
-	}
-	try {
-		if (suspectProtoRx.test(value) || suspectConstructorRx.test(value)) {
-			if (options.strict) throw new Error("[destr] Possible prototype pollution");
-			return JSON.parse(value, jsonParseTransform);
-		}
-		return JSON.parse(value);
-	} catch (error) {
-		if (options.strict) throw error;
-		return value;
-	}
-}
 String.fromCharCode;
 const HASH_RE = /#/g;
 const AMPERSAND_RE = /&/g;
@@ -215,6 +173,49 @@ function stringifyParsedURL(parsed) {
 	return (parsed.protocol || parsed[protocolRelative] ? (parsed.protocol || "") + "//" : "") + auth + host + pathname + search + hash;
 }
 //#endregion
+//#region ../../node_modules/.pnpm/destr@2.0.5/node_modules/destr/dist/index.mjs
+const suspectProtoRx = /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/;
+const suspectConstructorRx = /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/;
+const JsonSigRx = /^\s*["[{]|^\s*-?\d{1,16}(\.\d{1,17})?([Ee][+-]?\d+)?\s*$/;
+function jsonParseTransform(key, value) {
+	if (key === "__proto__" || key === "constructor" && value && typeof value === "object" && "prototype" in value) {
+		warnKeyDropped(key);
+		return;
+	}
+	return value;
+}
+function warnKeyDropped(key) {
+	console.warn(`[destr] Dropping "${key}" key to prevent prototype pollution.`);
+}
+function destr(value, options = {}) {
+	if (typeof value !== "string") return value;
+	if (value[0] === "\"" && value[value.length - 1] === "\"" && value.indexOf("\\") === -1) return value.slice(1, -1);
+	const _value = value.trim();
+	if (_value.length <= 9) switch (_value.toLowerCase()) {
+		case "true": return true;
+		case "false": return false;
+		case "undefined": return;
+		case "null": return null;
+		case "nan": return NaN;
+		case "infinity": return Number.POSITIVE_INFINITY;
+		case "-infinity": return Number.NEGATIVE_INFINITY;
+	}
+	if (!JsonSigRx.test(value)) {
+		if (options.strict) throw new SyntaxError("[destr] Invalid JSON");
+		return value;
+	}
+	try {
+		if (suspectProtoRx.test(value) || suspectConstructorRx.test(value)) {
+			if (options.strict) throw new Error("[destr] Possible prototype pollution");
+			return JSON.parse(value, jsonParseTransform);
+		}
+		return JSON.parse(value);
+	} catch (error) {
+		if (options.strict) throw error;
+		return value;
+	}
+}
+//#endregion
 //#region ../../node_modules/.pnpm/ofetch@1.5.1/node_modules/ofetch/dist/shared/ofetch.CWycOUEr.mjs
 var FetchError = class extends Error {
 	constructor(message, opts) {
@@ -705,7 +706,7 @@ function createDeviceAuth(options) {
 	async function requestAuthorization(requestOptions = {}) {
 		if (requestOptions.signal?.aborted) throw cancelled();
 		try {
-			return normalizeAuthorization((await requestJsonResponse(`${authOrigin}/api/v1/auth/device/code`, {
+			return normalizeAuthorization((await requestJsonResponse(joinURL(authOrigin, "api/v1/auth/device/code"), {
 				fetch: requestFetch,
 				timeoutMs,
 				method: "POST",
@@ -734,7 +735,7 @@ function createDeviceAuth(options) {
 			if (requestBudget <= 0) throw expired();
 			let response;
 			try {
-				response = await requestJsonResponse(`${authOrigin}/api/v1/auth/device/token`, {
+				response = await requestJsonResponse(joinURL(authOrigin, "api/v1/auth/device/token"), {
 					fetch: requestFetch,
 					timeoutMs: Math.min(timeoutMs, requestBudget),
 					method: "POST",
@@ -782,7 +783,7 @@ function createDeviceAuth(options) {
 		const current = await getToken();
 		if (!current) return null;
 		try {
-			return await requestJsonResponse(`${authOrigin}/api/v1/auth/${path}`, {
+			return await requestJsonResponse(joinURL(authOrigin, "api/v1/auth", path), {
 				fetch: requestFetch,
 				timeoutMs,
 				method: body ? "POST" : "GET",
@@ -797,7 +798,7 @@ function createDeviceAuth(options) {
 		const current = await getToken();
 		if (!current) return;
 		try {
-			await requestJsonResponse(`${authOrigin}/api/v1/auth/${path}`, {
+			await requestJsonResponse(joinURL(authOrigin, "api/v1/auth", path), {
 				fetch: requestFetch,
 				timeoutMs,
 				method: "POST",

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { a as AuthPersistenceDriver, c as AuthUser, d as FinuevaAuthClient, f as InvitationAcceptance, g as WorkspaceSelection, h as SignInInput, i as AuthPersistence, l as DriveCredential, m as PersonalWorkspaceSelection, n as AuthClientOptions, o as AuthSession, p as OrganizationWorkspaceSelection, r as AuthOrganization, s as AuthState, t as AcceptInvitationInput, u as DriveCredentialInput } from "./types-zEqO1_r2.js";
+import { _ as WorkspaceSelection, a as AuthPersistenceDriver, c as AuthUser, d as FinuevaAuthClient, f as InvitationAcceptance, g as SignInInput, h as SendVerificationEmailInput, i as AuthPersistence, l as DriveCredential, m as PersonalWorkspaceSelection, n as AuthClientOptions, o as AuthSession, p as OrganizationWorkspaceSelection, r as AuthOrganization, s as AuthState, t as AcceptInvitationInput, u as DriveCredentialInput } from "./types-HSdjQWMZ.js";
 import { n as AuthErrorCode, r as AuthErrorStatus, t as AuthError } from "./errors-Crd93Rah.js";
 //#region src/client.d.ts
 declare function createAuthClient(options: AuthClientOptions): FinuevaAuthClient;
 //#endregion
-export { type AcceptInvitationInput, type AuthClientOptions, AuthError, type AuthErrorCode, type AuthErrorStatus, type AuthOrganization, type AuthPersistence, type AuthPersistenceDriver, type AuthSession, type AuthState, type AuthUser, type DriveCredential, type DriveCredentialInput, type FinuevaAuthClient, type InvitationAcceptance, type OrganizationWorkspaceSelection, type PersonalWorkspaceSelection, type SignInInput, type WorkspaceSelection, createAuthClient };
+export { type AcceptInvitationInput, type AuthClientOptions, AuthError, type AuthErrorCode, type AuthErrorStatus, type AuthOrganization, type AuthPersistence, type AuthPersistenceDriver, type AuthSession, type AuthState, type AuthUser, type DriveCredential, type DriveCredentialInput, type FinuevaAuthClient, type InvitationAcceptance, type OrganizationWorkspaceSelection, type PersonalWorkspaceSelection, type SendVerificationEmailInput, type SignInInput, type WorkspaceSelection, createAuthClient };

package/dist/index.js

@@ -1,4 +1,24 @@
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/broadcast-channel.mjs
+//#region \0rolldown/runtime.js
+var __defProp$1 = Object.defineProperty;
+var __esmMin = (fn, res, err) => () => {
+	if (err) throw err[0];
+	try {
+		return fn && (res = fn(fn = 0)), res;
+	} catch (e) {
+		throw err = [e], e;
+	}
+};
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp$1(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp$1(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/broadcast-channel.mjs
 const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
 const now$1 = () => Math.floor(Date.now() / 1e3);
 var WindowBroadcastChannel = class {
@@ -205,7 +225,7 @@ let onMount = ($store, initialize) => {
 	});
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/equality.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/equality.mjs
 function isPlainObject$1(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const prototype = Object.getPrototypeOf(value);
@@ -233,7 +253,7 @@ function withEquality(store, isEqual) {
 	});
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/focus-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/focus-manager.mjs
 const kFocusManager = Symbol.for("better-auth:focus-manager");
 var WindowFocusManager = class {
 	listeners = new Set();
@@ -262,7 +282,7 @@ function getGlobalFocusManager() {
 	return globalThis[kFocusManager];
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/online-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/online-manager.mjs
 const kOnlineManager = Symbol.for("better-auth:online-manager");
 var WindowOnlineManager = class {
 	listeners = new Set();
@@ -294,7 +314,7 @@ function getGlobalOnlineManager() {
 	return globalThis[kOnlineManager];
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/parser.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/parser.mjs
 const PROTO_POLLUTION_PATTERNS = {
 	proto: /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/,
 	constructor: /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/,
@@ -363,7 +383,7 @@ function parseJSON(value, options = { strict: true }) {
 	return betterJSONParse(value, options);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/session-refresh.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/session-refresh.mjs
 const now = () => Math.floor(Date.now() / 1e3);
 const FOCUS_REFETCH_RATE_LIMIT_SECONDS = 5;
 function createSessionRefreshManager(opts) {
@@ -660,7 +680,7 @@ var BetterAuthError = class extends Error {
 	}
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/utils/url.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/utils/url.mjs
 const SLASH_CHAR_CODE = "/".charCodeAt(0);
 function trimTrailingSlashes(value) {
 	let end = value.length;
@@ -754,7 +774,7 @@ function isSafeUrlScheme(value) {
 	return !DANGEROUS_URL_SCHEMES.includes(parsed.protocol);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/fetch-plugins.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/fetch-plugins.mjs
 const redirectPlugin = {
 	id: "redirect",
 	name: "Redirect",
@@ -769,7 +789,7 @@ const redirectPlugin = {
 	} }
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/session-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/session-atom.mjs
 const isServer = () => typeof window === "undefined";
 function normalizeSessionResponse(res) {
 	if (typeof res === "object" && res !== null && "data" in res && "error" in res) return res;
@@ -1417,7 +1437,7 @@ var betterFetch = async (url, options) => {
 	};
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/config.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/config.mjs
 const resolvePublicAuthUrl = (basePath) => {
 	if (typeof process === "undefined") return void 0;
 	const path = basePath ?? "/api/auth";
@@ -1515,7 +1535,7 @@ const getClientConfig = (options, loadEnv) => {
 	};
 };
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/utils/is-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/utils/is-atom.mjs
 function isAtom(value) {
 	return typeof value === "object" && value !== null && "get" in value && typeof value.get === "function" && "lc" in value && typeof value.lc === "number";
 }
@@ -1533,7 +1553,7 @@ function toKebabCase(input) {
 	return splitWords(input).map((word) => word.toLowerCase()).join("-");
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/proxy.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/proxy.mjs
 function getMethod(path, knownPathMethods, args) {
 	const method = knownPathMethods[path];
 	const { fetchOptions, query: _query, ...body } = args || {};
@@ -1602,7 +1622,7 @@ function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomLis
 	return createProxy();
 }
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_95de1d9b4b5221fcaa380f950243e93e/node_modules/better-auth/dist/client/vanilla.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.6.22_drizzle-kit@0.31.10_drizzle-orm@0.45.2_@libsql+client@0.17.4_kysely@_fc032d4b6d0d0a5be5267474da10b212/node_modules/better-auth/dist/client/vanilla.mjs
 function createAuthClient$1(options) {
 	const { pluginPathMethods, pluginsActions, pluginsAtoms, $fetch, atomListeners, $store } = getClientConfig(options);
 	const resolvedHooks = {};
@@ -1615,7 +1635,7 @@ function createAuthClient$1(options) {
 	}, $fetch, pluginPathMethods, pluginsAtoms, atomListeners);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@chiballc+utils@2.2.22_magic-string@0.30.21_magicast@0.5.3_rolldown@1.2.0_vite@7.3.6_@t_7ea103523467af2ecb75df55c94dbb80/node_modules/@chiballc/utils/dist/index.mjs
+//#region ../../node_modules/.pnpm/@chiballc+utils@2.5.0_@hono+zod-openapi@1.5.1_hono@4.13.0_zod@4.4.3__hono@4.13.0_magic-_deb761a9672ce7cf69932b564bd2142d/node_modules/@chiballc/utils/dist/index.mjs
 function isPromise(arg) {
 	return arg && typeof arg.then === "function";
 }
@@ -2149,6 +2169,7 @@ function createFetch(globalOptions = {}) {
 }
 //#endregion
 //#region src/shared.ts
+const DRIVE_CREDENTIAL_LIFETIME_SECONDS = 840;
 const id = /^[A-Za-z0-9_-]{1,128}$/;
 const email = /^[^\s@]+@[^\s@]+$/;
 function normalizeOrigin(value, name) {
@@ -2187,7 +2208,7 @@ function normalizeSession(value) {
 	};
 }
 function normalizeDriveCredential(value, now) {
-	if (!isObject(value) || value.tokenType !== "Bearer" || value.expiresIn !== 900 || typeof value.token !== "string" || value.token.length === 0 || value.token.length + 7 > 16 * 1024) throw authorityUnavailable();
+	if (!isObject(value) || value.tokenType !== "Bearer" || value.expiresIn !== DRIVE_CREDENTIAL_LIFETIME_SECONDS || typeof value.token !== "string" || value.token.length === 0 || value.token.length + 7 > 16 * 1024) throw authorityUnavailable();
 	return {
 		tokenType: "Bearer",
 		token: value.token,
@@ -2211,6 +2232,27 @@ function normalizeInvitationInput(value) {
 	if (!isObject(value) || Object.keys(value).length !== 1 || !isId(value.invitationId)) throw new AuthError("invalid_invitation", 422);
 	return { invitationId: value.invitationId };
 }
+function normalizeVerificationEmailInput(value, appOrigin) {
+	if (!isObject(value)) throw new TypeError("verification email input is invalid");
+	const keys = Object.keys(value);
+	if (keys.length !== 1 && keys.length !== 2 || !keys.includes("email") || keys.length === 2 && !keys.includes("callbackURL") || typeof value.email !== "string" || value.email.length > 320 || !email.test(value.email)) throw new TypeError("verification email input is invalid");
+	if (value.callbackURL === void 0) return { email: value.email };
+	if (typeof value.callbackURL !== "string" || value.callbackURL.length > 2048 || /[^\x20-\x7e]/.test(value.callbackURL)) throw new TypeError("callbackURL must belong to appOrigin");
+	let callback;
+	try {
+		callback = new URL(value.callbackURL);
+	} catch {
+		throw new TypeError("callbackURL must belong to appOrigin");
+	}
+	if (callback.origin !== appOrigin || callback.username || callback.password || callback.toString() !== value.callbackURL) throw new TypeError("callbackURL must belong to appOrigin");
+	return {
+		email: value.email,
+		callbackURL: value.callbackURL
+	};
+}
+function normalizeVerificationEmailResponse(value) {
+	if (!isObject(value) || value.status !== true) throw authorityUnavailable();
+}
 function normalizeInvitationAcceptance(value, invitationId) {
 	if (!isObject(value) || !isObject(value.invitation) || !isObject(value.member) || value.invitation.id !== invitationId || value.invitation.status !== "accepted" || !isId(value.invitation.organizationId) || value.member.organizationId !== value.invitation.organizationId) throw authorityUnavailable();
 	return { organizationId: value.invitation.organizationId };
@@ -2780,120 +2822,148 @@ function createRequiredError(driver, name) {
 	if (Array.isArray(name)) return createError(driver, `Missing some of the required options ${name.map((n) => "`" + n + "`").join(", ")}`);
 	return createError(driver, `Missing required option \`${name}\`.`);
 }
-//#endregion
-//#region ../../node_modules/.pnpm/unstorage@1.17.5/node_modules/unstorage/drivers/localstorage.mjs
-const DRIVER_NAME$2 = "localstorage";
-var localstorage_default = defineDriver((opts = {}) => {
-	const storage = opts.storage || opts.localStorage || opts.sessionStorage || (opts.window || globalThis.window)?.[opts.windowKey || "localStorage"];
-	if (!storage) throw createRequiredError(DRIVER_NAME$2, "localStorage");
-	const base = opts.base ? normalizeKey(opts.base) : "";
-	const r = (key) => (base ? `${base}:` : "") + key;
-	let _storageListener;
-	const _unwatch = () => {
-		if (_storageListener) opts.window?.removeEventListener("storage", _storageListener);
-		_storageListener = void 0;
-	};
-	return {
-		name: DRIVER_NAME$2,
-		options: opts,
-		getInstance: () => storage,
-		hasItem(key) {
-			return Object.prototype.hasOwnProperty.call(storage, r(key));
-		},
-		getItem(key) {
-			return storage.getItem(r(key));
-		},
-		setItem(key, value) {
-			return storage.setItem(r(key), value);
-		},
-		removeItem(key) {
-			return storage.removeItem(r(key));
-		},
-		getKeys() {
-			const allKeys = Object.keys(storage);
-			return base ? allKeys.filter((key) => key.startsWith(`${base}:`)).map((key) => key.slice(base.length + 1)) : allKeys;
-		},
-		clear(prefix) {
-			const _base = [base, prefix].filter(Boolean).join(":");
-			if (_base) {
-				for (const key of Object.keys(storage)) if (key.startsWith(`${_base}:`)) storage?.removeItem(key);
-			} else storage.clear();
-		},
-		dispose() {
-			if (opts.window && _storageListener) opts.window.removeEventListener("storage", _storageListener);
-		},
-		watch(callback) {
-			if (!opts.window) return _unwatch;
-			_storageListener = (ev) => {
-				if (ev.key) callback(ev.newValue ? "update" : "remove", ev.key);
-			};
-			opts.window.addEventListener("storage", _storageListener);
-			return _unwatch;
-		}
-	};
-});
+var init_utils = __esmMin((() => {}));
 //#endregion
 //#region ../../node_modules/.pnpm/unstorage@1.17.5/node_modules/unstorage/drivers/memory.mjs
-const DRIVER_NAME$1 = "memory";
-var memory_default = defineDriver(() => {
-	const data = new Map();
-	return {
-		name: DRIVER_NAME$1,
-		getInstance: () => data,
-		hasItem(key) {
-			return data.has(key);
-		},
-		getItem(key) {
-			return data.get(key) ?? null;
-		},
-		getItemRaw(key) {
-			return data.get(key) ?? null;
-		},
-		setItem(key, value) {
-			data.set(key, value);
-		},
-		setItemRaw(key, value) {
-			data.set(key, value);
-		},
-		removeItem(key) {
-			data.delete(key);
-		},
-		getKeys() {
-			return [...data.keys()];
-		},
-		clear() {
-			data.clear();
-		},
-		dispose() {
-			data.clear();
-		}
-	};
-});
+var memory_exports = __exportAll({ default: () => memory_default });
+var DRIVER_NAME$2, memory_default;
+var init_memory = __esmMin((() => {
+	init_utils();
+	DRIVER_NAME$2 = "memory";
+	memory_default = defineDriver(() => {
+		const data = new Map();
+		return {
+			name: DRIVER_NAME$2,
+			getInstance: () => data,
+			hasItem(key) {
+				return data.has(key);
+			},
+			getItem(key) {
+				return data.get(key) ?? null;
+			},
+			getItemRaw(key) {
+				return data.get(key) ?? null;
+			},
+			setItem(key, value) {
+				data.set(key, value);
+			},
+			setItemRaw(key, value) {
+				data.set(key, value);
+			},
+			removeItem(key) {
+				data.delete(key);
+			},
+			getKeys() {
+				return [...data.keys()];
+			},
+			clear() {
+				data.clear();
+			},
+			dispose() {
+				data.clear();
+			}
+		};
+	});
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/unstorage@1.17.5/node_modules/unstorage/drivers/localstorage.mjs
+var localstorage_exports = __exportAll({ default: () => localstorage_default });
+var DRIVER_NAME$1, localstorage_default;
+var init_localstorage = __esmMin((() => {
+	init_utils();
+	DRIVER_NAME$1 = "localstorage";
+	localstorage_default = defineDriver((opts = {}) => {
+		const storage = opts.storage || opts.localStorage || opts.sessionStorage || (opts.window || globalThis.window)?.[opts.windowKey || "localStorage"];
+		if (!storage) throw createRequiredError(DRIVER_NAME$1, "localStorage");
+		const base = opts.base ? normalizeKey(opts.base) : "";
+		const r = (key) => (base ? `${base}:` : "") + key;
+		let _storageListener;
+		const _unwatch = () => {
+			if (_storageListener) opts.window?.removeEventListener("storage", _storageListener);
+			_storageListener = void 0;
+		};
+		return {
+			name: DRIVER_NAME$1,
+			options: opts,
+			getInstance: () => storage,
+			hasItem(key) {
+				return Object.prototype.hasOwnProperty.call(storage, r(key));
+			},
+			getItem(key) {
+				return storage.getItem(r(key));
+			},
+			setItem(key, value) {
+				return storage.setItem(r(key), value);
+			},
+			removeItem(key) {
+				return storage.removeItem(r(key));
+			},
+			getKeys() {
+				const allKeys = Object.keys(storage);
+				return base ? allKeys.filter((key) => key.startsWith(`${base}:`)).map((key) => key.slice(base.length + 1)) : allKeys;
+			},
+			clear(prefix) {
+				const _base = [base, prefix].filter(Boolean).join(":");
+				if (_base) {
+					for (const key of Object.keys(storage)) if (key.startsWith(`${_base}:`)) storage?.removeItem(key);
+				} else storage.clear();
+			},
+			dispose() {
+				if (opts.window && _storageListener) opts.window.removeEventListener("storage", _storageListener);
+			},
+			watch(callback) {
+				if (!opts.window) return _unwatch;
+				_storageListener = (ev) => {
+					if (ev.key) callback(ev.newValue ? "update" : "remove", ev.key);
+				};
+				opts.window.addEventListener("storage", _storageListener);
+				return _unwatch;
+			}
+		};
+	});
+}));
 //#endregion
 //#region ../../node_modules/.pnpm/unstorage@1.17.5/node_modules/unstorage/drivers/session-storage.mjs
-const DRIVER_NAME = "session-storage";
-var session_storage_default = defineDriver((opts = {}) => {
-	return {
-		...localstorage_default({
-			windowKey: "sessionStorage",
-			...opts
-		}),
-		name: DRIVER_NAME
-	};
-});
+var session_storage_exports = __exportAll({ default: () => session_storage_default });
+var DRIVER_NAME, session_storage_default;
+var init_session_storage = __esmMin((() => {
+	init_utils();
+	init_localstorage();
+	DRIVER_NAME = "session-storage";
+	session_storage_default = defineDriver((opts = {}) => {
+		return {
+			...localstorage_default({
+				windowKey: "sessionStorage",
+				...opts
+			}),
+			name: DRIVER_NAME
+		};
+	});
+}));
 //#endregion
 //#region src/persistence.ts
 const KEY = "finueva-auth:session:v1";
 const MAX_SNAPSHOT_BYTES = 16 * 1024;
 const MAX_FUTURE_SKEW_MS = 300 * 1e3;
 function createSessionPersistence(persistence, authOrigin, now, timeoutMs) {
-	const storage = createStorage({ driver: guardRawValues(selectDriver(persistence)) });
+	validatePersistence(persistence);
+	const storageCache = {};
+	const storage = async (persistence) => {
+		if (typeof persistence === "string") {
+			if (storageCache[persistence]) return storageCache[persistence];
+			const storage = createStorage({ driver: guardRawValues(await selectDriver(persistence)) });
+			storageCache[persistence] = storage;
+			return storage;
+		}
+		if (typeof persistence === "object" && persistence !== null) return createStorage({ driver: guardRawValues(adaptDriver(persistence)) });
+		return createStorage({ driver: guardRawValues(await selectDriver(persistence)) });
+	};
 	let enabled = true;
 	let generation = 0;
 	let queue = Promise.resolve();
 	const operationTimeoutMs = Math.min(timeoutMs, 1e3);
-	function cleanup() {
-		return Promise.resolve().then(() => storage.removeItem(KEY));
+	async function cleanup() {
+		await (await storage(persistence)).removeItem(KEY);
 	}
 	async function finishesWithin(work) {
 		let timeout;
@@ -2926,12 +2996,13 @@ function createSessionPersistence(persistence, authOrigin, now, timeoutMs) {
 	return {
 		hydrate(accept) {
 			schedule(async (isCurrent) => {
-				const value = await storage.getItem(KEY);
+				const _storage = await storage(persistence);
+				const value = await _storage.getItem(KEY);
 				if (!isCurrent()) return;
 				if (value === null) return;
 				const session = readSnapshot(value, authOrigin, now());
 				if (!session) {
-					await storage.removeItem(KEY);
+					await _storage.removeItem(KEY);
 					return;
 				}
 				if (isCurrent()) accept(session);
@@ -2952,8 +3023,9 @@ function createSessionPersistence(persistence, authOrigin, now, timeoutMs) {
 			};
 			schedule(async () => {
 				const cachedAt = now();
+				const _storage = await storage(persistence);
 				if (expiresAt <= cachedAt) {
-					await storage.removeItem(KEY);
+					await _storage.removeItem(KEY);
 					return;
 				}
 				const snapshot = {
@@ -2963,28 +3035,57 @@ function createSessionPersistence(persistence, authOrigin, now, timeoutMs) {
 					session: normalizedSession
 				};
 				if (byteLength(JSON.stringify(snapshot)) > MAX_SNAPSHOT_BYTES) {
-					await storage.removeItem(KEY);
+					await _storage.removeItem(KEY);
 					return;
 				}
-				await storage.setItem(KEY, snapshot);
-				if (expiresAt <= now()) await storage.removeItem(KEY);
+				await _storage.setItem(KEY, snapshot);
+				if (expiresAt <= now()) await _storage.removeItem(KEY);
 			});
 		},
 		remove() {
-			schedule(() => storage.removeItem(KEY));
+			schedule(async () => {
+				(await storage(persistence)).removeItem(KEY);
+			});
 		}
 	};
 }
-function selectDriver(persistence) {
+function validatePersistence(persistence) {
+	if (persistence === void 0) return;
+	if (persistence === "local" || persistence === "session" || persistence === "memory") return;
+	if (typeof persistence === "object" && persistence !== null) {
+		adaptDriver(persistence);
+		return;
+	}
+	throw new TypeError("persistence must be local, session, memory, or a driver");
+}
+async function selectDriver(persistence) {
 	if (typeof persistence === "object" && persistence !== null) return adaptDriver(persistence);
-	if (persistence === "memory") return memory_default();
+	if (persistence === "memory") {
+		const { default: memoryDriver } = await Promise.resolve().then(() => (init_memory(), memory_exports));
+		return memoryDriver();
+	}
 	if (persistence === "local" || persistence === "session") {
 		const storage = browserStorage(persistence);
-		return storage ? persistence === "local" ? localstorage_default({ storage }) : session_storage_default({ storage }) : memory_default();
+		if (persistence === "local") {
+			const { default: localStorageDriver } = await Promise.resolve().then(() => (init_localstorage(), localstorage_exports));
+			if (storage) return localStorageDriver({ storage });
+			const { default: memoryDriver } = await Promise.resolve().then(() => (init_memory(), memory_exports));
+			return memoryDriver();
+		} else {
+			const { default: sessionStorageDriver } = await Promise.resolve().then(() => (init_session_storage(), session_storage_exports));
+			if (storage) return sessionStorageDriver({ storage });
+			const { default: memoryDriver } = await Promise.resolve().then(() => (init_memory(), memory_exports));
+			return memoryDriver();
+		}
 	}
 	if (persistence !== void 0) throw new TypeError("persistence must be local, session, memory, or a driver");
 	const storage = browserStorage("local");
-	return storage ? localstorage_default({ storage }) : memory_default();
+	if (storage) {
+		const { default: localStorageDriver } = await Promise.resolve().then(() => (init_localstorage(), localstorage_exports));
+		return localStorageDriver({ storage });
+	}
+	const { default: memoryDriver } = await Promise.resolve().then(() => (init_memory(), memory_exports));
+	return memoryDriver();
 }
 function browserStorage(mode) {
 	try {
@@ -3324,6 +3425,16 @@ function createAuthClient(options) {
 				if (activeSignInGeneration === generation) activeSignInGeneration = void 0;
 			}
 		},
+		async sendVerificationEmail(input) {
+			const body = normalizeVerificationEmailInput(input, appOrigin);
+			normalizeVerificationEmailResponse(await requestJson(joinURL(authOrigin, "api/v1/auth/send-verification-email"), {
+				fetch: fetchImpl,
+				timeoutMs,
+				method: "POST",
+				headers: { "content-type": "application/json; charset=utf-8" },
+				body
+			}));
+		},
 		signOut,
 		getDriveCredential(input) {
 			let workspace;

package/dist/server.d.ts

@@ -1,4 +1,4 @@
-import { c as AuthUser, f as InvitationAcceptance, g as WorkspaceSelection, l as DriveCredential, m as PersonalWorkspaceSelection, o as AuthSession, p as OrganizationWorkspaceSelection, r as AuthOrganization, t as AcceptInvitationInput, u as DriveCredentialInput } from "./types-zEqO1_r2.js";
+import { _ as WorkspaceSelection, c as AuthUser, f as InvitationAcceptance, l as DriveCredential, m as PersonalWorkspaceSelection, o as AuthSession, p as OrganizationWorkspaceSelection, r as AuthOrganization, t as AcceptInvitationInput, u as DriveCredentialInput } from "./types-HSdjQWMZ.js";
 import { n as AuthErrorCode, r as AuthErrorStatus, t as AuthError } from "./errors-Crd93Rah.js";
 //#region src/server.d.ts
 interface ServerAuthOptions {

package/dist/server.js

@@ -466,6 +466,7 @@ var AuthError = class extends Error {
 };
 //#endregion
 //#region src/shared.ts
+const DRIVE_CREDENTIAL_LIFETIME_SECONDS = 840;
 const id = /^[A-Za-z0-9_-]{1,128}$/;
 const email = /^[^\s@]+@[^\s@]+$/;
 function normalizeOrigin(value, name) {
@@ -504,7 +505,7 @@ function normalizeSession(value) {
 	};
 }
 function normalizeDriveCredential(value, now) {
-	if (!isObject(value) || value.tokenType !== "Bearer" || value.expiresIn !== 900 || typeof value.token !== "string" || value.token.length === 0 || value.token.length + 7 > 16 * 1024) throw authorityUnavailable();
+	if (!isObject(value) || value.tokenType !== "Bearer" || value.expiresIn !== DRIVE_CREDENTIAL_LIFETIME_SECONDS || typeof value.token !== "string" || value.token.length === 0 || value.token.length + 7 > 16 * 1024) throw authorityUnavailable();
 	return {
 		tokenType: "Bearer",
 		token: value.token,

package/dist/{types-zEqO1_r2.d.ts → types-HSdjQWMZ.d.ts}

@@ -64,6 +64,10 @@ interface SignInInput {
   email: string;
   password: string;
 }
+interface SendVerificationEmailInput {
+  email: string;
+  callbackURL?: string;
+}
 interface DriveCredentialInput {
   workspace: WorkspaceSelection;
   forceRefresh?: boolean;
@@ -80,6 +84,7 @@ interface FinuevaAuthClient {
   acceptInvitation(input: AcceptInvitationInput): Promise<InvitationAcceptance>;
   getSession(): Promise<AuthSession | null>;
   listOrganizations(): Promise<AuthOrganization[]>;
+  sendVerificationEmail(input: SendVerificationEmailInput): Promise<void>;
   signIn(input: SignInInput): Promise<AuthSession>;
   signOut(): Promise<void>;
   getDriveCredential(input: DriveCredentialInput): Promise<DriveCredential>;
@@ -87,4 +92,4 @@ interface FinuevaAuthClient {
   onSessionChange(listener: (session: AuthSession | null) => void): () => void;
 }
 //#endregion
-export { AuthPersistenceDriver as a, AuthUser as c, FinuevaAuthClient as d, InvitationAcceptance as f, WorkspaceSelection as g, SignInInput as h, AuthPersistence as i, DriveCredential as l, PersonalWorkspaceSelection as m, AuthClientOptions as n, AuthSession as o, OrganizationWorkspaceSelection as p, AuthOrganization as r, AuthState as s, AcceptInvitationInput as t, DriveCredentialInput as u };
+export { WorkspaceSelection as _, AuthPersistenceDriver as a, AuthUser as c, FinuevaAuthClient as d, InvitationAcceptance as f, SignInInput as g, SendVerificationEmailInput as h, AuthPersistence as i, DriveCredential as l, PersonalWorkspaceSelection as m, AuthClientOptions as n, AuthSession as o, OrganizationWorkspaceSelection as p, AuthOrganization as r, AuthState as s, AcceptInvitationInput as t, DriveCredentialInput as u };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finueva/auth",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "Public browser and server SDK for Finueva Auth",
   "type": "module",
   "sideEffects": false,
@@ -40,7 +40,7 @@
   "scripts": {
     "build": "rolldown -c",
     "coverage": "vitest run --coverage",
-    "lint": "eslint .",
+    "lint": "oxlint . --deny-warnings",
     "test": "pnpm test:unit && pnpm build && pnpm test:package",
     "test:composition": "node scripts/test-composition.mjs",
     "test:package": "node scripts/test-package.mjs",
@@ -48,8 +48,9 @@
     "typecheck": "tsc --noEmit"
   },
   "devDependencies": {
-    "@chiballc/utils": "2.2.22",
+    "@chiballc/utils": "2.5.0",
     "@types/node": "24.13.3",
+    "@typescript/native": "npm:typescript@7.0.2",
     "@vitest/coverage-v8": "4.1.10",
     "better-auth": "1.6.22",
     "miniflare": "4.20260722.0",
@@ -57,7 +58,7 @@
     "playwright": "1.62.0",
     "rolldown": "1.2.0",
     "rolldown-plugin-dts": "0.27.14",
-    "typescript": "5.9.2",
+    "typescript": "npm:@typescript/typescript6@6.0.2",
     "ufo": "1.6.4",
     "unstorage": "1.17.5",
     "vitest": "4.1.10"