@hraness/suite-accounts 0.9.20

package/dist/urls.js

@@ -0,0 +1,391 @@
+// src/identity/consumers.ts
+import { err, ok } from "@hraness/result";
+
+// src/immutable.ts
+function deepFreeze(value) {
+  const visited = new WeakSet;
+  function freezeOwned(current) {
+    if (current === null || typeof current !== "object")
+      return;
+    if (visited.has(current))
+      return;
+    visited.add(current);
+    for (const key of Reflect.ownKeys(current)) {
+      const descriptor = Object.getOwnPropertyDescriptor(current, key);
+      if (descriptor !== undefined && "value" in descriptor) {
+        freezeOwned(descriptor.value);
+      }
+    }
+    Object.freeze(current);
+  }
+  freezeOwned(value);
+  return value;
+}
+
+// src/identity/consumers.ts
+var SUITE_CONSUMER_IDS = deepFreeze([
+  "accounts",
+  "act60",
+  "elders",
+  "soundfish",
+  "oh-computer",
+  "draw-money",
+  "oprte",
+  "sponge"
+]);
+var LEGACY_SUITE_CONSUMER_IDS = deepFreeze([
+  "kitchen"
+]);
+function parseSuiteConsumerId(value) {
+  switch (value) {
+    case "accounts":
+    case "act60":
+    case "elders":
+    case "soundfish":
+    case "oh-computer":
+    case "draw-money":
+    case "oprte":
+    case "sponge":
+      return ok(value);
+    case "kitchen":
+      return ok("oprte");
+    default:
+      return err("invalid-consumer");
+  }
+}
+
+// src/registry.ts
+var SUITE_ACCOUNTS_REMOTE_ENVIRONMENTS = deepFreeze([
+  "production"
+]);
+var accountsCookies = deepFreeze({
+  chunked: ["account_data", "session_data"],
+  names: [
+    "account_data",
+    "convex_jwt",
+    "dont_remember",
+    "session_data",
+    "session_token"
+  ]
+});
+var consumerCookies = deepFreeze({
+  chunked: ["session_data"],
+  names: ["dont_remember", "session_data", "session_token"]
+});
+var SUITE_ACCOUNTS_DEPLOYMENTS = deepFreeze({
+  production: {
+    accountsOrigin: "https://account.hraness.com",
+    convexSiteUrl: "https://qualified-marmot-22.convex.site",
+    convexUrl: "https://qualified-marmot-22.convex.cloud"
+  }
+});
+function unsupported(siteUrl) {
+  return { billingReturn: { kind: "unsupported" }, siteUrl };
+}
+function oidcSite(id, displayName, productionSiteUrl) {
+  return {
+    auth: { basePath: "/api/suite-auth", kind: "oidc-rp" },
+    displayName,
+    environments: {
+      production: unsupported(productionSiteUrl)
+    },
+    id
+  };
+}
+var SUITE_ACCOUNTS_REGISTERED_CONSUMER_IDS = deepFreeze([
+  "accounts",
+  "act60",
+  "soundfish",
+  "oh-computer",
+  "draw-money",
+  "sponge"
+]);
+var SUITE_ACCOUNTS_CONSUMERS = deepFreeze({
+  accounts: {
+    auth: {
+      basePath: "/api/auth",
+      cookies: accountsCookies,
+      kind: "authority"
+    },
+    displayName: "Accounts",
+    environments: {
+      production: {
+        billingReturn: { kind: "supported", path: "/account" },
+        siteUrl: "https://account.hraness.com"
+      }
+    },
+    id: "accounts"
+  },
+  act60: oidcSite("act60", "ACT60", "https://act60.me"),
+  soundfish: {
+    auth: { basePath: "/api/suite-auth", kind: "oidc-rp" },
+    displayName: "Soundfish",
+    environments: {
+      production: unsupported("https://sound.fish")
+    },
+    id: "soundfish"
+  },
+  "oh-computer": oidcSite("oh-computer", "Oh", "https://oh.computer"),
+  "draw-money": {
+    auth: {
+      basePath: "/api/auth",
+      cookies: consumerCookies,
+      kind: "proxy"
+    },
+    displayName: "Draw Money",
+    environments: {
+      production: unsupported("https://draw.money")
+    },
+    id: "draw-money"
+  },
+  sponge: oidcSite("sponge", "Sponge", "https://spongesearch.com")
+});
+var SUITE_ACCOUNTS_CURRENT_ORIGIN_OVERRIDES = deepFreeze({
+  sponge: {
+    production: unsupported("https://sponge.computer")
+  }
+});
+var SUITE_ACCOUNTS_CURRENT_CONSUMER_IDS = deepFreeze([
+  "accounts",
+  "act60",
+  "soundfish",
+  "oh-computer",
+  "sponge",
+  "peopleblade",
+  "aicharts",
+  "hraness",
+  "soulscrape",
+  "platonik",
+  "ghostget",
+  "alt",
+  "algal"
+]);
+function currentOidcSite(id, displayName, productionSiteUrl) {
+  return {
+    auth: { basePath: "/api/suite-auth", kind: "oidc-rp" },
+    displayName,
+    environments: {
+      production: unsupported(productionSiteUrl)
+    },
+    id
+  };
+}
+var SUITE_ACCOUNTS_CURRENT_CONSUMERS = deepFreeze({
+  accounts: SUITE_ACCOUNTS_CONSUMERS.accounts,
+  act60: SUITE_ACCOUNTS_CONSUMERS.act60,
+  soundfish: SUITE_ACCOUNTS_CONSUMERS.soundfish,
+  "oh-computer": SUITE_ACCOUNTS_CONSUMERS["oh-computer"],
+  sponge: currentOidcSite("sponge", "Sponge", SUITE_ACCOUNTS_CURRENT_ORIGIN_OVERRIDES.sponge.production.siteUrl),
+  peopleblade: currentOidcSite("peopleblade", "PeopleBlade", "https://peopleblade.com"),
+  aicharts: currentOidcSite("aicharts", "AI Charts", "https://aicharts.io"),
+  hraness: currentOidcSite("hraness", "Hraness", "https://hraness.com"),
+  soulscrape: currentOidcSite("soulscrape", "Soulscrape", "https://soulscrape.com"),
+  platonik: currentOidcSite("platonik", "Platonik", "https://platonik.space"),
+  ghostget: currentOidcSite("ghostget", "Ghostget", "https://ghostget.com"),
+  alt: currentOidcSite("alt", "Alt", "https://alt.dog"),
+  algal: currentOidcSite("algal", "Algal", "https://algal.cloud")
+});
+var SUITE_ACCOUNTS_ACTIVE_CONSUMER_IDS = deepFreeze([
+  "accounts",
+  "act60",
+  "soundfish",
+  "oh-computer",
+  "sponge"
+]);
+var SUITE_EMAIL_OTP_REQUIRED_OIDC_CONSUMER_IDS = deepFreeze(SUITE_ACCOUNTS_REGISTERED_CONSUMER_IDS.filter((consumer) => SUITE_ACCOUNTS_CONSUMERS[consumer].auth.kind === "oidc-rp"));
+function suiteAccountsConsumerRequiresEmailOtp(consumer) {
+  return SUITE_EMAIL_OTP_REQUIRED_OIDC_CONSUMER_IDS.includes(consumer);
+}
+var SUITE_ACCOUNTS_LINKED_OIDC_CONSUMER_IDS = deepFreeze([
+  "soundfish"
+]);
+var SUITE_ACCOUNTS_CURRENT_EMAIL_OTP_REQUIRED_OIDC_CONSUMER_IDS = deepFreeze(SUITE_ACCOUNTS_CURRENT_CONSUMER_IDS.filter((consumer) => SUITE_ACCOUNTS_CURRENT_CONSUMERS[consumer].auth.kind === "oidc-rp"));
+var SUITE_ACCOUNTS_CURRENT_LINKED_OIDC_CONSUMER_IDS = deepFreeze([
+  "soundfish",
+  "peopleblade",
+  "ghostget"
+]);
+var SUITE_ACCOUNTS_CURRENT_BROWSER_DEVICE_CODE_CONSUMER_IDS = deepFreeze([
+  "act60",
+  "soundfish",
+  "oh-computer",
+  "sponge",
+  "peopleblade",
+  "aicharts",
+  "hraness",
+  "soulscrape",
+  "platonik",
+  "ghostget",
+  "alt"
+]);
+var SUITE_ACCOUNTS_CURRENT_DEVICE_CLIENT_IDS = deepFreeze([
+  "algal-cli"
+]);
+var SUITE_ACCOUNTS_CURRENT_DEVICE_CLIENTS = deepFreeze({
+  "algal-cli": {
+    consumer: "algal",
+    displayName: "Algal CLI",
+    environments: ["production"],
+    id: "algal-cli"
+  }
+});
+function isSuiteAccountsConsumerId(value) {
+  return typeof value === "string" && SUITE_CONSUMER_IDS.includes(value);
+}
+function isSuiteAccountsRegisteredConsumerId(value) {
+  return typeof value === "string" && SUITE_ACCOUNTS_REGISTERED_CONSUMER_IDS.includes(value);
+}
+function isSuiteAccountsOidcConsumerId(value) {
+  return isSuiteAccountsRegisteredConsumerId(value) && SUITE_ACCOUNTS_CONSUMERS[value].auth.kind === "oidc-rp";
+}
+function isSuiteAccountsLinkedOidcConsumerId(value) {
+  return SUITE_ACCOUNTS_LINKED_OIDC_CONSUMER_IDS.includes(value);
+}
+function isSuiteAccountsOAuthConsumerId(value) {
+  return isSuiteAccountsRegisteredConsumerId(value) && SUITE_ACCOUNTS_CONSUMERS[value].auth.kind === "oidc-rp";
+}
+function isSuiteAccountsCurrentConsumerId(value) {
+  return typeof value === "string" && SUITE_ACCOUNTS_CURRENT_CONSUMER_IDS.includes(value);
+}
+function isSuiteAccountsCurrentOidcConsumerId(value) {
+  return getSuiteAccountsCurrentConsumer(value).auth.kind === "oidc-rp";
+}
+function isSuiteAccountsCurrentLinkedOidcConsumerId(value) {
+  return SUITE_ACCOUNTS_CURRENT_LINKED_OIDC_CONSUMER_IDS.includes(value);
+}
+function isSuiteAccountsCurrentOAuthConsumerId(value) {
+  return getSuiteAccountsCurrentConsumer(value).auth.kind === "oidc-rp";
+}
+function isSuiteAccountsCurrentBrowserDeviceCodeConsumerId(value) {
+  return typeof value === "string" && SUITE_ACCOUNTS_CURRENT_BROWSER_DEVICE_CODE_CONSUMER_IDS.includes(value);
+}
+function isSuiteAccountsCurrentDeviceClientId(value) {
+  return typeof value === "string" && SUITE_ACCOUNTS_CURRENT_DEVICE_CLIENT_IDS.includes(value);
+}
+function suiteAccountsCurrentConsumerRequiresEmailOtp(consumer) {
+  return SUITE_ACCOUNTS_CURRENT_EMAIL_OTP_REQUIRED_OIDC_CONSUMER_IDS.includes(consumer);
+}
+function getSuiteAccountsConsumer(consumer) {
+  return SUITE_ACCOUNTS_CONSUMERS[consumer];
+}
+function getSuiteAccountsConsumerEnvironment(consumer, environment) {
+  if (!isSuiteAccountsRegisteredConsumerId(consumer))
+    return null;
+  const registration = getSuiteAccountsConsumer(consumer);
+  return registration.environments[environment] ?? null;
+}
+function getSuiteAccountsCurrentConsumer(consumer) {
+  return SUITE_ACCOUNTS_CURRENT_CONSUMERS[consumer];
+}
+function getSuiteAccountsCurrentConsumerEnvironment(consumer, environment) {
+  if (!isSuiteAccountsCurrentConsumerId(consumer))
+    return null;
+  return getSuiteAccountsCurrentConsumer(consumer).environments[environment] ?? null;
+}
+function isSuiteAccountsActiveConsumerId(value) {
+  return SUITE_ACCOUNTS_ACTIVE_CONSUMER_IDS.includes(value);
+}
+function getSuiteAccountsDeployment(environment) {
+  return SUITE_ACCOUNTS_DEPLOYMENTS[environment];
+}
+
+// src/urls.ts
+var SUITE_ACCOUNTS_OAUTH_RESOURCE = "https://hraness.com/suite";
+var CENTRAL_PATHS = deepFreeze({
+  account: "/account",
+  home: "/",
+  login: "/login"
+});
+function suiteAccountsCentralUrl(environment, destination) {
+  return new URL(CENTRAL_PATHS[destination], getSuiteAccountsDeployment(environment).accountsOrigin).href;
+}
+function suiteAccountsBillingReturnUrl(consumer, environment) {
+  const consumerEnvironment = getSuiteAccountsConsumerEnvironment(consumer, environment);
+  if (consumerEnvironment === null)
+    return null;
+  return consumerEnvironment.billingReturn.kind === "supported" ? new URL(consumerEnvironment.billingReturn.path, consumerEnvironment.siteUrl).href : null;
+}
+function suiteAccountsOidcClientRegistration(consumer, environment) {
+  if (!isSuiteAccountsConsumerId(consumer) || !isSuiteAccountsOAuthConsumerId(consumer))
+    return null;
+  const consumerEnvironment = getSuiteAccountsConsumerEnvironment(consumer, environment);
+  if (consumerEnvironment === null)
+    return null;
+  return deepFreeze({
+    callbackUrl: new URL("/api/suite-auth/callback", consumerEnvironment.siteUrl).href,
+    clientId: `hraness:${consumer}:${environment}:v1`
+  });
+}
+function suiteAccountsCurrentOidcClientRegistration(consumer, environment) {
+  if (!isSuiteAccountsCurrentConsumerId(consumer) || !isSuiteAccountsCurrentOAuthConsumerId(consumer))
+    return null;
+  const consumerEnvironment = getSuiteAccountsCurrentConsumerEnvironment(consumer, environment);
+  if (consumerEnvironment === null)
+    return null;
+  return deepFreeze({
+    callbackUrl: new URL("/api/suite-auth/callback", consumerEnvironment.siteUrl).href,
+    clientId: `hraness:${consumer}:${environment}:v1`
+  });
+}
+function suiteAccountsOidcClientRequiresEmailOtp(clientId) {
+  if (typeof clientId !== "string")
+    return false;
+  return SUITE_EMAIL_OTP_REQUIRED_OIDC_CONSUMER_IDS.some((consumer) => suiteAccountsOidcClientRegistration(consumer, "production")?.clientId === clientId);
+}
+function suiteAccountsCurrentOidcClientRequiresEmailOtp(clientId) {
+  if (typeof clientId !== "string")
+    return false;
+  return SUITE_ACCOUNTS_CURRENT_EMAIL_OTP_REQUIRED_OIDC_CONSUMER_IDS.some((consumer) => suiteAccountsCurrentOidcClientRegistration(consumer, "production")?.clientId === clientId);
+}
+var DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+function suiteAccountsCurrentDeviceClientRegistration(deviceClient, environment) {
+  if (!isSuiteAccountsCurrentDeviceClientId(deviceClient))
+    return null;
+  const registration = SUITE_ACCOUNTS_CURRENT_DEVICE_CLIENTS[deviceClient];
+  if (!registration.environments.includes(environment) || suiteAccountsCurrentOidcClientRegistration(registration.consumer, environment) === null) {
+    return null;
+  }
+  return deepFreeze({
+    clientId: `hraness:${deviceClient}:${environment}:v1`,
+    consumer: registration.consumer,
+    grantTypes: [DEVICE_CODE_GRANT_TYPE],
+    redirectUris: [],
+    scopes: ["openid", "email", "profile"],
+    tokenEndpointAuthMethod: "none"
+  });
+}
+function suiteAccountsCurrentDeviceCodeClientAllowed(clientId) {
+  if (typeof clientId !== "string")
+    return false;
+  return SUITE_ACCOUNTS_CURRENT_DEVICE_CLIENT_IDS.some((deviceClient) => suiteAccountsCurrentDeviceClientRegistration(deviceClient, "production")?.clientId === clientId) || SUITE_ACCOUNTS_CURRENT_BROWSER_DEVICE_CODE_CONSUMER_IDS.some((consumer) => isSuiteAccountsCurrentBrowserDeviceCodeConsumerId(consumer) && suiteAccountsCurrentOidcClientRegistration(consumer, "production")?.clientId === clientId);
+}
+function suiteAccountsOidcProviderConfiguration(environment) {
+  const issuer = getSuiteAccountsDeployment(environment).accountsOrigin;
+  const authBase = new URL("/api/auth/", issuer);
+  return deepFreeze({
+    authorizationEndpoint: new URL("oauth2/authorize", authBase).href,
+    deviceAuthorizationEndpoint: new URL("oauth2/device_authorization", authBase).href,
+    deviceTokenEndpoint: new URL("oauth2/device/token", authBase).href,
+    discoveryEndpoint: new URL("/.well-known/openid-configuration", issuer).href,
+    entitlementReceiptEndpoint: new URL("/suite/entitlements/receipt", issuer).href,
+    identityLinkReceiptEndpoint: new URL("/suite/identity-links/receipt", issuer).href,
+    issuer,
+    jwksEndpoint: new URL("jwks", authBase).href,
+    resource: SUITE_ACCOUNTS_OAUTH_RESOURCE,
+    revocationEndpoint: new URL("oauth2/revoke", authBase).href,
+    tokenEndpoint: new URL("oauth2/token", authBase).href,
+    userInfoAudience: new URL("oauth2/userinfo", authBase).href
+  });
+}
+export {
+  suiteAccountsOidcProviderConfiguration,
+  suiteAccountsOidcClientRequiresEmailOtp,
+  suiteAccountsOidcClientRegistration,
+  suiteAccountsCurrentOidcClientRequiresEmailOtp,
+  suiteAccountsCurrentOidcClientRegistration,
+  suiteAccountsCurrentDeviceCodeClientAllowed,
+  suiteAccountsCurrentDeviceClientRegistration,
+  suiteAccountsCentralUrl,
+  suiteAccountsBillingReturnUrl,
+  SUITE_ACCOUNTS_OAUTH_RESOURCE
+};

package/package.json

@@ -0,0 +1,263 @@
+{
+  "name": "@hraness/suite-accounts",
+  "version": "0.9.20",
+  "description": "Validated client and protocol boundaries for Hraness Accounts.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": [
+    "./dist/auth-client.js",
+    "./dist/react.js",
+    "./src/profile-form.css",
+    "./dist/stylex.css",
+    "./compiler-foundation.css"
+  ],
+  "packageManager": "bun@1.3.14",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hraness/suite-accounts.git"
+  },
+  "homepage": "https://github.com/hraness/suite-accounts#readme",
+  "bugs": {
+    "url": "https://github.com/hraness/suite-accounts/issues"
+  },
+  "keywords": [
+    "accounts",
+    "authentication",
+    "oauth",
+    "oidc",
+    "pkce",
+    "typescript"
+  ],
+  "exports": {
+    ".": {
+      "bun": "./dist/index.js",
+      "types": "./src/index.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./auth-client": {
+      "bun": "./dist/auth-client.js",
+      "types": "./src/auth-client.ts",
+      "import": "./dist/auth-client.js",
+      "default": "./dist/auth-client.js"
+    },
+    "./auth-proxy": {
+      "bun": "./dist/auth-proxy.js",
+      "types": "./src/auth-proxy.ts",
+      "import": "./dist/auth-proxy.js",
+      "default": "./dist/auth-proxy.js"
+    },
+    "./bearer-verifier": {
+      "bun": "./dist/bearer-verifier.js",
+      "types": "./src/bearer-verifier.ts",
+      "import": "./dist/bearer-verifier.js",
+      "default": "./dist/bearer-verifier.js"
+    },
+    "./browser-session": {
+      "bun": "./dist/browser-session.js",
+      "types": "./src/browser-session.ts",
+      "import": "./dist/browser-session.js",
+      "default": "./dist/browser-session.js"
+    },
+    "./client-configuration": {
+      "bun": "./dist/client-configuration.js",
+      "types": "./src/client-configuration.ts",
+      "import": "./dist/client-configuration.js",
+      "default": "./dist/client-configuration.js"
+    },
+    "./convex-browser-auth": {
+      "bun": "./dist/convex-browser-auth.js",
+      "types": "./src/convex-browser-auth.ts",
+      "import": "./dist/convex-browser-auth.js",
+      "default": "./dist/convex-browser-auth.js"
+    },
+    "./convex-browser-auth-browser": {
+      "bun": "./dist/convex-browser-auth-browser.js",
+      "types": "./src/convex-browser-auth-browser.ts",
+      "import": "./dist/convex-browser-auth-browser.js",
+      "default": "./dist/convex-browser-auth-browser.js"
+    },
+    "./convex-browser-auth-server": {
+      "bun": "./dist/convex-browser-auth-server.js",
+      "types": "./src/convex-browser-auth-server.ts",
+      "import": "./dist/convex-browser-auth-server.js",
+      "default": "./dist/convex-browser-auth-server.js"
+    },
+    "./entitlements": {
+      "bun": "./dist/entitlements.js",
+      "types": "./src/entitlements.ts",
+      "import": "./dist/entitlements.js",
+      "default": "./dist/entitlements.js"
+    },
+    "./identity": {
+      "bun": "./dist/identity/index.js",
+      "types": "./src/identity/index.ts",
+      "import": "./dist/identity/index.js",
+      "default": "./dist/identity/index.js"
+    },
+    "./identity/functions": {
+      "bun": "./dist/identity/functions.js",
+      "types": "./src/identity/functions.ts",
+      "import": "./dist/identity/functions.js",
+      "default": "./dist/identity/functions.js"
+    },
+    "./identity/return-targets": {
+      "bun": "./dist/identity/return-targets.js",
+      "types": "./src/identity/return-targets.ts",
+      "import": "./dist/identity/return-targets.js",
+      "default": "./dist/identity/return-targets.js"
+    },
+    "./oidc-device-code": {
+      "bun": "./dist/oidc-device-code.js",
+      "types": "./src/oidc-device-code.ts",
+      "import": "./dist/oidc-device-code.js",
+      "default": "./dist/oidc-device-code.js"
+    },
+    "./oidc-rp": {
+      "bun": "./dist/oidc-rp.js",
+      "types": "./src/oidc-rp.ts",
+      "import": "./dist/oidc-rp.js",
+      "default": "./dist/oidc-rp.js"
+    },
+    "./oidc-session-policy": {
+      "bun": "./dist/oidc-session-policy.js",
+      "types": "./src/oidc-session-policy.ts",
+      "import": "./dist/oidc-session-policy.js",
+      "default": "./dist/oidc-session-policy.js"
+    },
+    "./oidc-surface-server": {
+      "bun": "./dist/oidc-surface-server.js",
+      "types": "./src/oidc-surface-server.ts",
+      "import": "./dist/oidc-surface-server.js",
+      "default": "./dist/oidc-surface-server.js"
+    },
+    "./profile": {
+      "bun": "./dist/profile.js",
+      "types": "./src/profile.ts",
+      "import": "./dist/profile.js",
+      "default": "./dist/profile.js"
+    },
+    "./profile-form": {
+      "bun": "./dist/profile-form.js",
+      "types": "./src/profile-form.tsx",
+      "import": "./dist/profile-form.js",
+      "default": "./dist/profile-form.js"
+    },
+    "./profile-form.css": "./src/profile-form.css",
+    "./stylex.css": "./dist/stylex.css",
+    "./stylex-manifest.json": "./dist/stylex-manifest.json",
+    "./compiler-foundation.css": "./compiler-foundation.css",
+    "./public-config": {
+      "bun": "./dist/public-config.js",
+      "types": "./src/public-config.ts",
+      "import": "./dist/public-config.js",
+      "default": "./dist/public-config.js"
+    },
+    "./react": {
+      "bun": "./dist/react.js",
+      "types": "./src/react.tsx",
+      "import": "./dist/react.js",
+      "default": "./dist/react.js"
+    },
+    "./receipt-verifier": {
+      "bun": "./dist/receipt-verifier.js",
+      "types": "./src/receipt-verifier.ts",
+      "import": "./dist/receipt-verifier.js",
+      "default": "./dist/receipt-verifier.js"
+    },
+    "./registry": {
+      "bun": "./dist/registry.js",
+      "types": "./src/registry.ts",
+      "import": "./dist/registry.js",
+      "default": "./dist/registry.js"
+    },
+    "./urls": {
+      "bun": "./dist/urls.js",
+      "types": "./src/urls.ts",
+      "import": "./dist/urls.js",
+      "default": "./dist/urls.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./src/index.ts",
+  "files": [
+    "dist",
+    "src/**/*.ts",
+    "src/**/*.tsx",
+    "src/profile-form.css",
+    "compiler-foundation.css",
+    "!src/**/*.test.ts",
+    "!src/**/*.test.tsx",
+    "!src/**/*.property.test.ts",
+    "!src/test-support.ts",
+    "portfolio-inventory.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "kb:refresh": "bunx --bun github:hraness/kb#v0.15.2 refresh --root kb",
+    "kb:check:lane": "bunx --bun github:hraness/kb#v0.15.2 check --root kb --no-catalog",
+    "kb:check": "bunx --bun github:hraness/kb#v0.15.2 check --root kb && bunx --bun github:hraness/kb#v0.15.2 agents check --root kb --repo .",
+    "kb:catalog": "bunx --bun github:hraness/kb#v0.15.2 catalog --root kb",
+    "build": "bun run ./scripts/build.ts",
+    "lint": "eslint src scripts",
+    "typecheck": "tsc --noEmit",
+    "test": "bun test --preload ./scripts/register-stylex-test-transform.ts ./src",
+    "test:property": "bun test ./src/*.property.test.ts ./src/identity/*.property.test.ts",
+    "test:package": "bun run ./scripts/package-smoke.ts",
+    "test:browser": "bun run test:browser:profile && bun run test:browser:public-profile && bun run test:browser:oidc",
+    "test:browser:oidc": "bun run ./scripts/oidc-navigation-browser.ts",
+    "test:browser:profile": "bun run ./scripts/profile-form-browser.ts",
+    "test:browser:public-profile": "bun run ./scripts/public-profile-form-browser.ts",
+    "check:stylex": "bun run ./scripts/check-stylex.ts",
+    "check:determinism": "bun run ./scripts/check-determinism.ts",
+    "check:portfolio-inventory": "bun run ./scripts/check-portfolio-inventory.ts",
+    "check:private-boundary": "bun run ./scripts/check-private-boundary.ts",
+    "check": "bun run check:portfolio-inventory && bun run lint && bun run typecheck && bun run test && bun run build && bun run check:stylex && bun run check:determinism && bun run check:private-boundary && bun run test:package",
+    "prepack": "bun run check"
+  },
+  "dependencies": {
+    "@convex-dev/better-auth": "0.12.5",
+    "@hraness/result": "github:hraness/result#17b311c0b31cf456777efc7d7f5fa1f1cafefe74",
+    "@stylexjs/stylex": "0.19.0",
+    "better-auth": "1.6.25",
+    "convex": "1.44.0",
+    "jose": "6.2.4"
+  },
+  "peerDependencies": {
+    "react": ">=18.3.1 <20",
+    "react-dom": ">=18.3.1 <20"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    },
+    "react-dom": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@babel/core": "7.29.7",
+    "@babel/plugin-syntax-jsx": "7.29.7",
+    "@babel/plugin-syntax-typescript": "7.29.7",
+    "@eslint/js": "^9.39.2",
+    "@hraness/ui": "github:hraness/ui#v0.5.12",
+    "@stylexjs/babel-plugin": "0.19.0",
+    "@types/babel__core": "7.20.5",
+    "@types/bun": "^1.3.14",
+    "@types/node": "^24.10.1",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "eslint": "^9.39.2",
+    "fast-check": "^4.8.0",
+    "lightningcss": "1.33.0",
+    "playwright-core": "1.62.0",
+    "react": "19.2.3",
+    "react-dom": "19.2.3",
+    "typescript": "^6.0.3",
+    "typescript-eslint": "^8.53.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/portfolio-inventory.json

@@ -0,0 +1,37 @@
+{
+  "contract": "hraness.portfolio-inventory/v1",
+  "formatVersion": 1,
+  "repository": "hraness/suite-accounts",
+  "components": [
+    {
+      "kind": "package",
+      "name": "@hraness/suite-accounts",
+      "path": ".",
+      "visibility": "public",
+      "version": "0.9.20"
+    }
+  ],
+  "dependencies": [
+    {
+      "from": "@hraness/suite-accounts",
+      "scope": "runtime",
+      "specifier": "github:hraness/result#17b311c0b31cf456777efc7d7f5fa1f1cafefe74",
+      "to": "@hraness/result"
+    },
+    {
+      "from": "@hraness/suite-accounts",
+      "scope": "development",
+      "specifier": "github:hraness/ui#v0.5.12",
+      "to": "@hraness/ui"
+    }
+  ],
+  "deployments": [],
+  "brands": [],
+  "publications": [
+    {
+      "component": "@hraness/suite-accounts",
+      "packageName": "@hraness/suite-accounts",
+      "repository": "hraness/suite-accounts"
+    }
+  ]
+}