@krishp/one-auth 0.0.1

package/README.md

@@ -0,0 +1,273 @@
+<img src="https://assets.withone.ai/banners/auth.png" alt="One Auth — Connect your users to every app with a drop-in auth widget." style="border-radius: 5px;">
+
+<h3 align="center">One Auth</h3>
+
+<p align="center">
+  <a href="https://withone.ai"><strong>Website</strong></a>
+  &nbsp;·&nbsp;
+  <a href="https://withone.ai/docs/auth"><strong>Docs</strong></a>
+  &nbsp;·&nbsp;
+  <a href="https://app.withone.ai"><strong>Dashboard</strong></a>
+  &nbsp;·&nbsp;
+  <a href="https://withone.ai/changelog"><strong>Changelog</strong></a>
+  &nbsp;·&nbsp;
+  <a href="https://x.com/withoneai"><strong>X</strong></a>
+  &nbsp;·&nbsp;
+  <a href="https://linkedin.com/company/withoneai"><strong>LinkedIn</strong></a>
+</p>
+
+<p align="center">
+  <a href="https://npmjs.com/package/@withone/auth"><img src="https://img.shields.io/npm/v/%40withone%2Fauth" alt="npm version"></a>
+</p>
+
+One Auth is a pre-built, embeddable authentication UI that makes it easy for your users to securely connect their third-party accounts (Gmail, Slack, Salesforce, QuickBooks, etc.) directly within your application.
+
+Fully compatible with popular frameworks such as React, Next.js, Vue, Svelte, and more.
+
+## Install
+
+With npm:
+
+```bash
+npm i @withone/auth
+```
+
+With yarn:
+
+```bash
+yarn add @withone/auth
+```
+
+## Getting Started with the Skill
+
+The easiest way to integrate One Auth is by installing the skill for your AI coding agent. The skill provides step-by-step guidance for setting up the backend token endpoint, frontend component, and connection handling.
+
+```bash
+npx skills add withoneai/auth
+```
+
+Once installed, your AI coding agent will have full context on how to set up and work with One Auth in your project.
+
+## Using the Auth component
+
+Replace the `token URL` with your backend token endpoint URL.
+
+> ⚠️ **Must be a full URL** — relative paths like `/api/one-auth` won't work because the Auth widget runs in an iframe on a different domain. Use the complete URL (e.g., `https://your-domain.com/api/one-auth`).
+
+```tsx
+"use client";
+
+import { useOneAuth } from "@withone/auth";
+
+const USER_ID = "your-user-uuid";
+
+export function ConnectIntegrationButton() {
+  const { open } = useOneAuth({
+    token: {
+      url: "https://your-domain.com/api/one-auth",
+      headers: {
+        "x-user-id": USER_ID,
+      },
+    },
+    onSuccess: (connection) => {
+      console.log("Connection created:", connection);
+    },
+    onError: (error) => {
+      console.error("Connection failed:", error);
+    },
+    onClose: () => {
+      console.log("Auth modal closed");
+    },
+  });
+
+  return <button onClick={open}>Connect Integration</button>;
+}
+```
+
+### Configuration Options
+
+| Option | Type | Description |
+|---|---|---|
+| `token.url` | `string` | Full URL of your backend token endpoint |
+| `token.headers` | `object` | Headers to send with the token request (e.g., user ID) |
+| `selectedConnection` | `string` | Pre-select an integration by display name (e.g., `"Gmail"`) |
+| `appTheme` | `"dark" \| "light"` | Theme for the Auth modal |
+| `title` | `string` | Custom title for the modal |
+| `imageUrl` | `string` | Custom logo URL to display in the modal |
+| `companyName` | `string` | Your company name to display in the modal |
+| `onSuccess` | `(connection) => void` | Callback when a connection is successfully created |
+| `onError` | `(error) => void` | Callback when the connection fails |
+| `onClose` | `() => void` | Callback when the modal is closed |
+
+## Backend Token Generation
+
+To enable Auth connections, your backend needs an endpoint that generates a session token by calling the One API.
+
+### Environment Variables
+
+```env
+ONE_SECRET_KEY=sk_test_your_secret_key_here
+```
+
+| Variable | Description |
+|---|---|
+| `ONE_SECRET_KEY` | Your secret key from the [One dashboard](https://app.withone.ai/settings/api-keys) |
+
+### API Route — `POST /api/one-auth`
+
+Your backend endpoint should:
+
+1. Extract the `x-user-id` header to identify the user
+2. Handle pagination — the Auth widget sends `page` and `limit` as query parameters
+3. Call `POST https://api.withone.ai/v1/authkit/token` with your secret key and the user's identity
+4. Return the token response to the client
+
+**Request headers:**
+
+| Header | Required | Description |
+|---|---|---|
+| `x-user-id` | Yes | Unique identifier for the user (e.g., UUID from your auth system) |
+
+**Query parameters (sent automatically by the widget):**
+
+| Parameter | Description |
+|---|---|
+| `page` | Current page number for paginated integration list |
+| `limit` | Number of integrations per page |
+
+**Example implementation (Next.js):**
+
+```typescript
+import { NextRequest, NextResponse } from "next/server";
+
+const corsHeaders = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "POST, OPTIONS",
+  "Access-Control-Allow-Headers": "Content-Type, Authorization, x-user-id",
+};
+
+export async function OPTIONS() {
+  return NextResponse.json({}, { headers: corsHeaders });
+}
+
+export async function POST(req: NextRequest) {
+  try {
+    const userId = req.headers.get("x-user-id");
+
+    if (!userId) {
+      return NextResponse.json(
+        { error: "Unauthorized" },
+        { status: 401, headers: corsHeaders }
+      );
+    }
+
+    // The Auth widget sends pagination params as query parameters
+    const page = req.nextUrl.searchParams.get("page");
+    const limit = req.nextUrl.searchParams.get("limit");
+
+    const response = await fetch(
+      `https://api.withone.ai/v1/authkit/token?page=${page}&limit=${limit}`,
+      {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "X-One-Secret": process.env.ONE_SECRET_KEY!,
+        },
+        body: JSON.stringify({
+          identity: userId,
+          identityType: "user", // "user" | "team" | "organization" | "project"
+        }),
+      }
+    );
+
+    if (!response.ok) {
+      return NextResponse.json(
+        { error: "Failed to generate token" },
+        { status: response.status, headers: corsHeaders }
+      );
+    }
+
+    const token = await response.json();
+    return NextResponse.json(token, { headers: corsHeaders });
+  } catch (error) {
+    return NextResponse.json(
+      { error: "Failed to generate token" },
+      { status: 500, headers: corsHeaders }
+    );
+  }
+}
+```
+
+**Success response (200):**
+
+```json
+{
+  "rows": [
+    {
+      "id": 41596,
+      "connectionDefId": 34,
+      "type": "api",
+      "title": "ActiveCampaign",
+      "image": "https://assets.withone.ai/connectors/activecampaign.svg",
+      "environment": "test",
+      "tags": [],
+      "active": true
+    },
+    {
+      "id": 41524,
+      "connectionDefId": 109,
+      "type": "api",
+      "title": "Anthropic",
+      "image": "https://assets.withone.ai/connectors/anthropic.svg",
+      "environment": "test",
+      "tags": [],
+      "active": true
+    }
+  ],
+  "total": 247,
+  "pages": 3,
+  "page": 1,
+  "requestId": 110256
+}
+```
+
+The response includes a paginated list of available integrations. The widget handles pagination automatically by calling your token endpoint with different `page` values.
+
+## Configuration & Management
+
+All configuration for the Auth component is managed via the **[One Dashboard](https://app.withone.ai/settings/authkit)**. From the dashboard, you can:
+
+- **Choose which apps are visible** — Select which integrations appear in the Auth modal for your users
+- **Configure OAuth credentials** — Use One's default client ID and client secret, or bring your own for any integration
+- **Adjust scopes** — Customize the OAuth scopes requested for each integration
+
+AuthKit configuration is scoped at the **project level**, enabling multi-tenant architecture. Each project in your One account can have its own set of visible apps, OAuth credentials, and scopes — allowing you to serve different configurations to different products or customer segments from a single account.
+
+> **Dashboard link:** [app.withone.ai/settings/authkit](https://app.withone.ai/settings/authkit)
+
+## Diagram
+
+```mermaid
+sequenceDiagram
+    participant User
+    participant YourApp as Your Application
+    participant YourBackend as Your Backend
+    participant One as One Auth
+    participant Integration as Third-party Integration
+
+    User->>YourApp: Clicks "Connect Integration"
+    YourApp->>One: Open Auth modal
+    One->>YourBackend: Request Auth token (page=1&limit=100)
+    YourBackend->>One: Generate token with user identity
+    One->>One: Display integrations list
+    User->>One: Select integration & authenticate
+    One->>Integration: OAuth handshake
+    Integration->>One: Access token
+    One->>One: Store encrypted credentials
+    One->>YourApp: Return connection details
+    YourApp->>User: Connection successful!
+```
+
+## License
+
+This project is licensed under the GPL-3.0 license. See the [LICENSE](LICENSE) file for details.

package/dist/index.d.ts

@@ -0,0 +1 @@
+export { useEventLink as useOneAuth } from './useEventLink';

package/dist/index.esm.js

@@ -0,0 +1 @@
+function e(e,t,n){return(t=function(e){var t=function(e,t){if("object"!=typeof e||!e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var i=n.call(e,t);if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==typeof t?t:t+""}(t))in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}const t={oauthRedirect:!0},n="event-link";class i{constructor(t){e(this,"linkTokenEndpoint",void 0),e(this,"linkHeaders",void 0),e(this,"baseUrl",void 0),e(this,"onClose",void 0),e(this,"title",void 0),e(this,"imageUrl",void 0),e(this,"companyName",void 0),e(this,"selectedConnection",void 0),e(this,"showNameInput",void 0),e(this,"appTheme",void 0),e(this,"checkState",void 0),this.linkTokenEndpoint=t.token.url,this.linkHeaders=t.token.headers,this.baseUrl=t.baseUrl,this.onClose=t.onClose,this.title=t.title,this.imageUrl=t.imageUrl,this.companyName=t.companyName,this.selectedConnection=t.selectedConnection,this.showNameInput=t.showNameInput,this.appTheme=t.appTheme,this.checkState=t.checkState}_getBaseUrl(){return this.baseUrl?this.baseUrl:"https://auth.withone.ai"}_buildPayload(){return{linkTokenEndpoint:this.linkTokenEndpoint,linkHeaders:this.linkHeaders,title:this.title,imageUrl:this.imageUrl,companyName:this.companyName,selectedConnection:this.selectedConnection,showNameInput:this.showNameInput,appTheme:this.appTheme,capabilities:t,checkState:this.checkState}}openLink(){const e=document.getElementById(n);e&&e.remove();const t=document.createElement("iframe"),i=this._buildPayload(),o=JSON.stringify(i),s=btoa(o),a=new URLSearchParams({data:s}).toString(),r=`${this._getBaseUrl()}?${a}`;document.body.appendChild(t),t.style.height="100%",t.style.width="100%",t.style.position="fixed",t.style.display="hidden",t.style.visibility="hidden",t.style.zIndex="9999",t.style.backgroundColor="transparent",t.style.inset="0px",t.style.borderWidth="0px",t.id=n,t.style.overflow="hidden auto",t.src=r,t.onload=()=>{var e;setTimeout(()=>{t.style.display="block",t.style.visibility="visible"},100),null===(e=t.contentWindow)||void 0===e||e.postMessage(i,r)}}closeLink(){const e=document.getElementById(n);e&&e.remove()}}const o=new Set;let s=!1;const a="one_auth_state",r="one_auth_error";function l(e,t,n){const i=`${t}~${o=n,btoa(o).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}`;var o;try{const t=new URL(e);return t.searchParams.set("state",i),t.toString()}catch{return e.replace(`state=${encodeURIComponent(t)}`,`state=${encodeURIComponent(i)}`).replace(`state=${t}`,`state=${encodeURIComponent(i)}`)}}function c(){if("undefined"!=typeof window)try{const e=new URL(window.location.href);let t=!1;e.searchParams.has(a)&&(e.searchParams.delete(a),t=!0),e.searchParams.has(r)&&(e.searchParams.delete(r),t=!0),t&&window.history.replaceState({},document.title,e.toString())}catch{}}function d(e,t){const o=new i({...e,checkState:t});let a=!1,r=!1;const l=t=>{if("undefined"==typeof window)return;const i=document.getElementById(n);if(!i||t.source!==i.contentWindow)return;const d=t.data;if(null!=d&&d.messageType)if("LINK_SUCCESS"===d.messageType){if(!r){r=!0;try{var u;null===(u=e.onSuccess)||void 0===u||u.call(e,d.message)}catch{}c()}}else if("LINK_ERROR"===d.messageType){if(!r){r=!0;try{var h;null===(h=e.onError)||void 0===h||h.call(e,d.message)}catch{}c()}}else if("EXIT_EVENT_LINK"===d.messageType){if(!r)try{var m;null===(m=e.onClose)||void 0===m||m.call(e)}catch{}!function(){if(a)return;a=!0,"undefined"!=typeof window&&window.removeEventListener("message",l);o.closeLink(),c(),s=!1}()}};"undefined"!=typeof window&&window.addEventListener("message",l),o.openLink()}function u(e){if("undefined"==typeof window)return;if(s)return;let t;try{t=new URLSearchParams(window.location.search)}catch{return}const n=t.get(r),i=t.get(a);(n||i)&&(s=!0,n?function(e,t){setTimeout(()=>{try{var n;null===(n=e.onError)||void 0===n||n.call(e,t)}finally{c()}},0)}(e,n):i&&d(e,i))}const h=e=>{u(e);const t=(e=>new i(e))({...e});let s=null,a=!1;const r=i=>{var r,d,u,h,m;if("undefined"==typeof window)return;const p=document.getElementById(n);if(!p||"block"!==p.style.display)return;if(i.source!==p.contentWindow)return;const f=i.data;if(null==f||!f.messageType)return;const y=`${f.messageType}-${JSON.stringify(null!==(r=null!==(d=f.message)&&void 0!==d?d:f.url)&&void 0!==r?r:"")}`;if(!o.has(y))switch(o.add(y),setTimeout(()=>o.delete(y),5e3),f.messageType){case"EXIT_EVENT_LINK":null===(u=e.onClose)||void 0===u||u.call(e),setTimeout(()=>{c()},200);break;case"LINK_SUCCESS":null===(h=e.onSuccess)||void 0===h||h.call(e,f.message);break;case"LINK_ERROR":null===(m=e.onError)||void 0===m||m.call(e,f.message);break;case"OAUTH_REDIRECT":{const n=f.url,i=f.state;if(!n||!i){var w;null===(w=e.onError)||void 0===w||w.call(e,"Invalid OAuth redirect message");break}const o=l(n,i,window.location.href);s&&a&&(window.removeEventListener("message",s),a=!1,s=null),t.closeLink(),window.location.href=o;break}}},c=()=>{"undefined"!=typeof window&&s&&a&&(window.removeEventListener("message",s),a=!1,s=null);for(const e of o)e.startsWith("EXIT_EVENT_LINK")&&o.delete(e);t.closeLink()};return{open:()=>{s&&a&&window.removeEventListener("message",s),s=r,"undefined"!=typeof window&&(window.addEventListener("message",s),a=!0),t.openLink()},close:c}};export{h as useOneAuth};

package/dist/index.umd.js

@@ -0,0 +1 @@
+"use strict";function e(e,t,n){return(t=function(e){var t=function(e,t){if("object"!=typeof e||!e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var i=n.call(e,t);if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==typeof t?t:t+""}(t))in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}const t={oauthRedirect:!0},n="event-link";class i{constructor(t){e(this,"linkTokenEndpoint",void 0),e(this,"linkHeaders",void 0),e(this,"baseUrl",void 0),e(this,"onClose",void 0),e(this,"title",void 0),e(this,"imageUrl",void 0),e(this,"companyName",void 0),e(this,"selectedConnection",void 0),e(this,"showNameInput",void 0),e(this,"appTheme",void 0),e(this,"checkState",void 0),this.linkTokenEndpoint=t.token.url,this.linkHeaders=t.token.headers,this.baseUrl=t.baseUrl,this.onClose=t.onClose,this.title=t.title,this.imageUrl=t.imageUrl,this.companyName=t.companyName,this.selectedConnection=t.selectedConnection,this.showNameInput=t.showNameInput,this.appTheme=t.appTheme,this.checkState=t.checkState}_getBaseUrl(){return this.baseUrl?this.baseUrl:"https://auth.withone.ai"}_buildPayload(){return{linkTokenEndpoint:this.linkTokenEndpoint,linkHeaders:this.linkHeaders,title:this.title,imageUrl:this.imageUrl,companyName:this.companyName,selectedConnection:this.selectedConnection,showNameInput:this.showNameInput,appTheme:this.appTheme,capabilities:t,checkState:this.checkState}}openLink(){const e=document.getElementById(n);e&&e.remove();const t=document.createElement("iframe"),i=this._buildPayload(),o=JSON.stringify(i),s=btoa(o),a=new URLSearchParams({data:s}).toString(),r=`${this._getBaseUrl()}?${a}`;document.body.appendChild(t),t.style.height="100%",t.style.width="100%",t.style.position="fixed",t.style.display="hidden",t.style.visibility="hidden",t.style.zIndex="9999",t.style.backgroundColor="transparent",t.style.inset="0px",t.style.borderWidth="0px",t.id=n,t.style.overflow="hidden auto",t.src=r,t.onload=()=>{var e;setTimeout(()=>{t.style.display="block",t.style.visibility="visible"},100),null===(e=t.contentWindow)||void 0===e||e.postMessage(i,r)}}closeLink(){const e=document.getElementById(n);e&&e.remove()}}const o=new Set;let s=!1;const a="one_auth_state",r="one_auth_error";function l(e,t,n){const i=`${t}~${o=n,btoa(o).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}`;var o;try{const t=new URL(e);return t.searchParams.set("state",i),t.toString()}catch{return e.replace(`state=${encodeURIComponent(t)}`,`state=${encodeURIComponent(i)}`).replace(`state=${t}`,`state=${encodeURIComponent(i)}`)}}function c(){if("undefined"!=typeof window)try{const e=new URL(window.location.href);let t=!1;e.searchParams.has(a)&&(e.searchParams.delete(a),t=!0),e.searchParams.has(r)&&(e.searchParams.delete(r),t=!0),t&&window.history.replaceState({},document.title,e.toString())}catch{}}function d(e,t){const o=new i({...e,checkState:t});let a=!1,r=!1;const l=t=>{if("undefined"==typeof window)return;const i=document.getElementById(n);if(!i||t.source!==i.contentWindow)return;const d=t.data;if(null!=d&&d.messageType)if("LINK_SUCCESS"===d.messageType){if(!r){r=!0;try{var u;null===(u=e.onSuccess)||void 0===u||u.call(e,d.message)}catch{}c()}}else if("LINK_ERROR"===d.messageType){if(!r){r=!0;try{var h;null===(h=e.onError)||void 0===h||h.call(e,d.message)}catch{}c()}}else if("EXIT_EVENT_LINK"===d.messageType){if(!r)try{var m;null===(m=e.onClose)||void 0===m||m.call(e)}catch{}!function(){if(a)return;a=!0,"undefined"!=typeof window&&window.removeEventListener("message",l);o.closeLink(),c(),s=!1}()}};"undefined"!=typeof window&&window.addEventListener("message",l),o.openLink()}function u(e){if("undefined"==typeof window)return;if(s)return;let t;try{t=new URLSearchParams(window.location.search)}catch{return}const n=t.get(r),i=t.get(a);(n||i)&&(s=!0,n?function(e,t){setTimeout(()=>{try{var n;null===(n=e.onError)||void 0===n||n.call(e,t)}finally{c()}},0)}(e,n):i&&d(e,i))}exports.useOneAuth=e=>{u(e);const t=(e=>new i(e))({...e});let s=null,a=!1;const r=i=>{var r,d,u,h,m;if("undefined"==typeof window)return;const p=document.getElementById(n);if(!p||"block"!==p.style.display)return;if(i.source!==p.contentWindow)return;const f=i.data;if(null==f||!f.messageType)return;const y=`${f.messageType}-${JSON.stringify(null!==(r=null!==(d=f.message)&&void 0!==d?d:f.url)&&void 0!==r?r:"")}`;if(!o.has(y))switch(o.add(y),setTimeout(()=>o.delete(y),5e3),f.messageType){case"EXIT_EVENT_LINK":null===(u=e.onClose)||void 0===u||u.call(e),setTimeout(()=>{c()},200);break;case"LINK_SUCCESS":null===(h=e.onSuccess)||void 0===h||h.call(e,f.message);break;case"LINK_ERROR":null===(m=e.onError)||void 0===m||m.call(e,f.message);break;case"OAUTH_REDIRECT":{const n=f.url,i=f.state;if(!n||!i){var w;null===(w=e.onError)||void 0===w||w.call(e,"Invalid OAuth redirect message");break}const o=l(n,i,window.location.href);s&&a&&(window.removeEventListener("message",s),a=!1,s=null),t.closeLink(),window.location.href=o;break}}},c=()=>{"undefined"!=typeof window&&s&&a&&(window.removeEventListener("message",s),a=!1,s=null);for(const e of o)e.startsWith("EXIT_EVENT_LINK")&&o.delete(e);t.closeLink()};return{open:()=>{s&&a&&window.removeEventListener("message",s),s=r,"undefined"!=typeof window&&(window.addEventListener("message",s),a=!0),t.openLink()},close:c}};

package/dist/types/index.d.ts

@@ -0,0 +1,80 @@
+export interface EventLinkProps {
+  baseUrl?: string;
+  appTheme?: 'dark' | 'light';
+  title?: string;
+  imageUrl?: string;
+  companyName?: string;
+  onClose?: () => void;
+  onSuccess?: (connection: ConnectionRecord) => void;
+  onError?: (error: string) => void;
+  selectedConnection?: string;
+  showNameInput?: boolean;
+  token: {
+    url: string;
+    headers?: Record<string, unknown>;
+  }
+}
+
+// Internal type — extends EventLinkProps with implementation flags
+// not part of the public API.
+export interface EventLinkWindowProps {
+  baseUrl?: string;
+  appTheme?: 'dark' | 'light';
+  environment?: "sandbox" | "production";
+  title?: string;
+  imageUrl?: string;
+  companyName?: string;
+  onClose?: () => void;
+  selectedConnection?: string;
+  showNameInput?: boolean;
+  token: {
+    url: string;
+    headers?: Record<string, unknown>;
+  };
+  // Internal: when set, the iframe is opened in "check" mode and goes
+  // straight to polling /v1/connections/oauth/check?state=X. Used by
+  // the OAuth return flow after a same-window redirect.
+  checkState?: string;
+}
+
+export interface ConnectionRecord {
+  _id: string;
+  platformVersion: string;
+  connectionDefinitionId: string;
+  name: string;
+  key: string;
+  environment: string;
+  platform: string;
+  secretsServiceId: string;
+  identity?: string;
+  identityType?: 'user' | 'team' | 'organization' | 'project';
+  settings: {
+    parseWebhookBody: boolean;
+    showSecret: boolean;
+    allowCustomEvents: boolean;
+    oauth: boolean;
+  };
+  throughput: {
+    key: string;
+    limit: number;
+  };
+  createdAt: number;
+  updatedAt: number;
+  updated: boolean;
+  version: string;
+  lastModifiedBy: string;
+  deleted: boolean;
+  tags: string[];
+  active: boolean;
+  deprecated: boolean;
+}
+
+export interface EventProps {
+  data: {
+    messageType: string;
+    message: ConnectionRecord | string;
+    // Optional fields for OAUTH_REDIRECT messages
+    url?: string;
+    state?: string;
+  }
+}

package/dist/useEventLink.d.ts

@@ -0,0 +1,5 @@
+import { EventLinkProps } from "./types";
+export declare const useEventLink: (props: EventLinkProps) => {
+    open: () => void;
+    close: () => void;
+};

package/dist/window/index.d.ts

@@ -0,0 +1,21 @@
+import { EventLinkWindowProps } from "../types";
+export declare const VISIBLE_IFRAME_ID = "event-link";
+export declare class EventLinkWindow {
+    private linkTokenEndpoint;
+    private linkHeaders?;
+    private baseUrl?;
+    private onClose?;
+    private title?;
+    private imageUrl?;
+    private companyName?;
+    private selectedConnection?;
+    private showNameInput?;
+    private appTheme?;
+    private checkState?;
+    constructor(props: EventLinkWindowProps);
+    private _getBaseUrl;
+    private _buildPayload;
+    openLink(): void;
+    closeLink(): void;
+}
+export declare const createWindow: (props: EventLinkWindowProps) => EventLinkWindow;

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@krishp/one-auth",
+  "version": "0.0.1",
+  "description": "Frontend bindings for One Auth, a drop-in authentication widget that lets your users connect their third-party apps to your application. Supports OAuth and non-OAuth integrations across 250+ platforms with project-level multi-tenant configuration.",
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "LICENSE"
+  ],
+  "main": "dist/index.umd.js",
+  "module": "dist/index.esm.js",
+  "types": "dist/index.d.ts",
+  "devDependencies": {
+    "@babel/core": "^7.24.0",
+    "@babel/plugin-transform-class-properties": "^7.28.6",
+    "@babel/plugin-transform-nullish-coalescing-operator": "^7.28.6",
+    "@babel/plugin-transform-optional-chaining": "^7.28.6",
+    "@babel/preset-env": "^7.24.0",
+    "@babel/preset-typescript": "^7.28.5",
+    "@rollup/plugin-babel": "^6.0.4",
+    "@rollup/plugin-commonjs": "^25.0.7",
+    "@rollup/plugin-json": "^6.1.0",
+    "@rollup/plugin-node-resolve": "^15.2.3",
+    "@rollup/plugin-terser": "^0.4.4",
+    "@tsconfig/recommended": "^1.0.3",
+    "@typescript-eslint/eslint-plugin": "^7.0.0",
+    "@typescript-eslint/parser": "^7.0.0",
+    "axios": "^1.6.7",
+    "eslint": "^8.57.0",
+    "prettier": "^3.2.5",
+    "rollup": "^4.12.0",
+    "rollup-plugin-copy": "^3.5.0",
+    "rollup-plugin-typescript2": "^0.36.0",
+    "tslib": "^2.6.2",
+    "typescript": "^5.3.3"
+  },
+  "author": "@withoneai",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "rollup -c",
+    "lint": "eslint src --ext .ts,.tsx",
+    "format": "prettier --write \"src/**/*.{ts,tsx}\""
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/withoneai/auth"
+  },
+  "keywords": [
+    "withone",
+    "integrations",
+    "multi-tenant"
+  ],
+  "license": "GPL-3.0",
+  "homepage": "https://withone.ai"
+}

package/src/index.ts

@@ -0,0 +1 @@
+export { useEventLink as useOneAuth } from './useEventLink';

package/src/types/index.d.ts

@@ -0,0 +1,80 @@
+export interface EventLinkProps {
+  baseUrl?: string;
+  appTheme?: 'dark' | 'light';
+  title?: string;
+  imageUrl?: string;
+  companyName?: string;
+  onClose?: () => void;
+  onSuccess?: (connection: ConnectionRecord) => void;
+  onError?: (error: string) => void;
+  selectedConnection?: string;
+  showNameInput?: boolean;
+  token: {
+    url: string;
+    headers?: Record<string, unknown>;
+  }
+}
+
+// Internal type — extends EventLinkProps with implementation flags
+// not part of the public API.
+export interface EventLinkWindowProps {
+  baseUrl?: string;
+  appTheme?: 'dark' | 'light';
+  environment?: "sandbox" | "production";
+  title?: string;
+  imageUrl?: string;
+  companyName?: string;
+  onClose?: () => void;
+  selectedConnection?: string;
+  showNameInput?: boolean;
+  token: {
+    url: string;
+    headers?: Record<string, unknown>;
+  };
+  // Internal: when set, the iframe is opened in "check" mode and goes
+  // straight to polling /v1/connections/oauth/check?state=X. Used by
+  // the OAuth return flow after a same-window redirect.
+  checkState?: string;
+}
+
+export interface ConnectionRecord {
+  _id: string;
+  platformVersion: string;
+  connectionDefinitionId: string;
+  name: string;
+  key: string;
+  environment: string;
+  platform: string;
+  secretsServiceId: string;
+  identity?: string;
+  identityType?: 'user' | 'team' | 'organization' | 'project';
+  settings: {
+    parseWebhookBody: boolean;
+    showSecret: boolean;
+    allowCustomEvents: boolean;
+    oauth: boolean;
+  };
+  throughput: {
+    key: string;
+    limit: number;
+  };
+  createdAt: number;
+  updatedAt: number;
+  updated: boolean;
+  version: string;
+  lastModifiedBy: string;
+  deleted: boolean;
+  tags: string[];
+  active: boolean;
+  deprecated: boolean;
+}
+
+export interface EventProps {
+  data: {
+    messageType: string;
+    message: ConnectionRecord | string;
+    // Optional fields for OAUTH_REDIRECT messages
+    url?: string;
+    state?: string;
+  }
+}