@krutai/auth 0.2.3 → 0.4.2

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/client.ts","../src/index.ts"],"names":["validateApiKeyFormat","validateApiKeyWithService","betterAuth"],"mappings":";;;;;;AAiCO,IAAM,WAAN,MAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUlB,YAAoB,MAAA,EAAwB;AAAxB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAChB,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,IAAU,OAAA,CAAQ,IAAI,cAAA,IAAkB,EAAA;AAE3D,IAAAA,2BAAA,CAAqB,GAAG,CAAA;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,GAAA;AAGd,IAAA,IAAI,MAAA,CAAO,mBAAmB,KAAA,EAAO;AACjC,MAAA,IAAA,CAAK,oBAAA,EAAqB;AAAA,IAC9B;AAAA,EACJ;AAAA,EAnBQ,MAAA;AAAA,EACA,kBAAA,GAAkC,IAAA;AAAA,EAClC,WAAA,GAAc,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBtB,MAAM,UAAA,GAA4B;AAC9B,IAAA,IAAI,KAAK,WAAA,EAAa;AAClB,MAAA;AAAA,IACJ;AAGA,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,cAAA,KAAmB,KAAA,EAAO;AACtC,MAAA,MAAMC,gCAAA,CAA0B,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,OAAO,SAAS,CAAA;AAAA,IACtE;AAEA,IAAA,IAAA,CAAK,oBAAA,EAAqB;AAC1B,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,oBAAA,GAA6B;AACjC,IAAA,IAAA,CAAK,qBAAqBC,qBAAA,CAAW;AAAA,MACjC,GAAG,KAAK,MAAA,CAAO;AAAA,KAClB,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAA,GAAsB;AAClB,IAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC1B,MAAA,MAAM,IAAI,KAAA;AAAA,QACN;AAAA,OACJ;AAAA,IACJ;AACA,IAAA,OAAO,IAAA,CAAK,kBAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA,GAAyB;AACrB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA,GAAoB;AAChB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAA,GAAwB;AAC1B,IAAA,OAAO,KAAK,aAAA,EAAc;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAA,GAAyB;AAC3B,IAAA,OAAO,KAAK,aAAA,EAAc;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,UAAA,GAA4B;AAC9B,IAAA,OAAO,KAAK,aAAA,EAAc;AAAA,EAC9B;AACJ;ACtFO,SAAS,SAAS,OAAA,EAA4B;AACjD,EAAA,OAAOA,sBAAW,OAAO,CAAA;AAC7B;AAgBO,IAAM,OAAA,GAAU","file":"index.js","sourcesContent":["import { betterAuth } from 'better-auth';\nimport type { Auth } from 'better-auth';\nimport type { KrutAuthConfig } from './types';\n// Import validation from krutai peer dependency\nimport {\n    validateApiKeyFormat,\n    validateApiKeyWithService,\n} from 'krutai';\n\n/**\n * KrutAuth - Authentication client for KrutAI\n *\n * This class wraps Better Auth and adds API key validation\n * to ensure only authorized users can access authentication features.\n *\n * @example\n * ```typescript\n * import { KrutAuth } from '@krutai/auth';\n *\n * const auth = new KrutAuth({\n *   apiKey: 'your-api-key-here',\n *   betterAuthOptions: {\n *     // Better Auth configuration\n *   }\n * });\n *\n * // Initialize the client (validates API key)\n * await auth.initialize();\n *\n * // Use authentication features\n * const betterAuth = auth.getBetterAuth();\n * ```\n */\nexport class KrutAuth {\n    private apiKey: string;\n    private betterAuthInstance: Auth | null = null;\n    private initialized = false;\n\n    /**\n     * Creates a new KrutAuth instance\n     * @param config - Configuration options\n     * @throws {ApiKeyValidationError} If API key is invalid\n     */\n    constructor(private config: KrutAuthConfig) {\n        const key = config.apiKey || process.env.KRUTAI_API_KEY || '';\n        // Validate API key format immediately\n        validateApiKeyFormat(key);\n        this.apiKey = key;\n\n        // Initialize if validation is not required on init\n        if (config.validateOnInit === false) {\n            this.initializeBetterAuth();\n        }\n    }\n\n    /**\n     * Initialize the authentication client\n     * Validates the API key and sets up Better Auth\n     * @throws {ApiKeyValidationError} If API key validation fails\n     */\n    async initialize(): Promise<void> {\n        if (this.initialized) {\n            return;\n        }\n\n        // Validate API key with service if needed\n        if (this.config.validateOnInit !== false) {\n            await validateApiKeyWithService(this.apiKey, this.config.serverUrl);\n        }\n\n        this.initializeBetterAuth();\n        this.initialized = true;\n    }\n\n    /**\n     * Initialize Better Auth instance\n     * @private\n     */\n    private initializeBetterAuth(): void {\n        this.betterAuthInstance = betterAuth({\n            ...this.config.betterAuthOptions,\n        });\n    }\n\n    /**\n     * Get the Better Auth instance\n     * @throws {Error} If not initialized\n     */\n    getBetterAuth(): Auth {\n        if (!this.betterAuthInstance) {\n            throw new Error(\n                'KrutAuth not initialized. Call initialize() first or set validateOnInit to false.'\n            );\n        }\n        return this.betterAuthInstance;\n    }\n\n    /**\n     * Check if the client is initialized\n     */\n    isInitialized(): boolean {\n        return this.initialized;\n    }\n\n    /**\n     * Get the API key (useful for making authenticated requests)\n     * @returns The API key\n     */\n    getApiKey(): string {\n        return this.apiKey;\n    }\n\n    /**\n     * Sign in a user\n     * This is a convenience method that wraps Better Auth\n     * You can access the full Better Auth API via getBetterAuth()\n     */\n    async signIn(): Promise<Auth> {\n        return this.getBetterAuth();\n    }\n\n    /**\n     * Sign out the current user\n     * You can access the full Better Auth API via getBetterAuth()\n     */\n    async signOut(): Promise<Auth> {\n        return this.getBetterAuth();\n    }\n\n    /**\n     * Get the current session\n     * You can access the full Better Auth API via getBetterAuth()\n     */\n    async getSession(): Promise<Auth> {\n        return this.getBetterAuth();\n    }\n}\n","/**\n * @krutai/auth - Authentication package for KrutAI\n *\n * Requires `krutai` as a peer dependency (installed automatically).\n *\n * @example Server-side (Next.js API route / server component)\n * ```typescript\n * import { krutAuth } from \"@krutai/auth\";\n * import Database from \"better-sqlite3\";\n *\n * export const auth = krutAuth({\n *   database: new Database(\"./sqlite.db\"),\n *   emailAndPassword: { enabled: true },\n *   baseURL: process.env.BETTER_AUTH_BASE_URL ?? \"http://localhost:3000\",\n * });\n * ```\n *\n * @example Client-side (React / Next.js client component)\n * ```typescript\n * import { createAuthClient } from \"@krutai/auth/react\";\n *\n * export const authClient = createAuthClient({\n *   baseURL: process.env.NEXT_PUBLIC_APP_URL ?? \"http://localhost:3000\",\n * });\n *\n * export const { signIn, signUp, signOut, useSession } = authClient;\n * ```\n *\n * @packageDocumentation\n */\n\nimport { betterAuth } from 'better-auth';\nimport type { BetterAuthOptions } from 'better-auth';\n\n/**\n * krutAuth — drop-in replacement for betterAuth.\n *\n * Use this instead of importing betterAuth directly.\n *\n * @example\n * ```typescript\n * import { krutAuth } from \"@krutai/auth\";\n * import Database from \"better-sqlite3\";\n *\n * export const auth = krutAuth({\n *   database: new Database(\"./sqlite.db\"),\n *   emailAndPassword: { enabled: true },\n * });\n * ```\n */\nexport function krutAuth(options: BetterAuthOptions) {\n    return betterAuth(options);\n}\n\n// Export main KrutAuth class (API-key-protected wrapper)\nexport { KrutAuth } from './client';\n\n// Export types\nexport type { KrutAuthConfig, AuthSession, BetterAuthOptions } from './types';\n\n// Re-export minimal validator utilities (format/length check only)\nexport {\n    validateApiKeyFormat,\n    validateApiKeyWithService,\n    ApiKeyValidationError,\n} from 'krutai';\n\n// Package metadata\nexport const VERSION = '0.1.9';\n"]}
+{"version":3,"sources":["../src/types.ts","../src/client.ts","../src/index.ts"],"names":["validateApiKeyFormat","validateApiKey"],"mappings":";;;;;AAUO,IAAM,kBAAA,GAAqB;AAM3B,IAAM,mBAAA,GAAsB;ACkC5B,IAAM,WAAN,MAAe;AAAA,EACD,MAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EAET,WAAA,GAAc,KAAA;AAAA,EAEtB,YAAY,MAAA,EAAwB;AAChC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA,CAAO,MAAA,IAAU,OAAA,CAAQ,IAAI,cAAA,IAAkB,EAAA;AAC7D,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,SAAA,IAAa,kBAAA,EAAoB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC3E,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,UAAA,IAAc,mBAAA,EAAqB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAG9E,IAAAA,2BAAA,CAAqB,KAAK,MAAM,CAAA;AAGhC,IAAA,IAAI,MAAA,CAAO,mBAAmB,KAAA,EAAO;AACjC,MAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,IACvB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAA,GAA4B;AAC9B,IAAA,IAAI,KAAK,WAAA,EAAa;AAEtB,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,cAAA,KAAmB,KAAA,EAAO;AACtC,MAAA,MAAMC,qBAAA,CAAe,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,SAAS,CAAA;AAAA,IACpD;AAEA,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA,GAAyB;AACrB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAMQ,iBAAA,GAA0B;AAC9B,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACnB,MAAA,MAAM,IAAI,KAAA;AAAA,QACN;AAAA,OACJ;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA,EAGQ,WAAA,GAAsC;AAC1C,IAAA,OAAO;AAAA,MACH,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,MAAM,CAAA,CAAA;AAAA,MACpC,aAAa,IAAA,CAAK;AAAA,KACtB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,IAAI,IAAA,EAAsB;AAC9B,IAAA,MAAM,YAAY,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AACxD,IAAA,OAAO,GAAG,IAAA,CAAK,SAAS,GAAG,IAAA,CAAK,UAAU,GAAG,SAAS,CAAA,CAAA;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OAAA,CACF,MAAA,EACA,IAAA,EACA,IAAA,EACU;AACV,IAAA,IAAA,CAAK,iBAAA,EAAkB;AAEvB,IAAA,MAAM,OAAA,GAAuB;AAAA,MACzB,MAAA;AAAA,MACA,OAAA,EAAS,KAAK,WAAA;AAAY,KAC9B;AAEA,IAAA,IAAI,IAAA,IAAQ,WAAW,KAAA,EAAO;AAC1B,MAAA,OAAA,CAAQ,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACtC;AAEA,IAAA,MAAM,WAAW,MAAM,KAAA,CAAM,KAAK,GAAA,CAAI,IAAI,GAAG,OAAO,CAAA;AAEpD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AACd,MAAA,IAAI,YAAA,GAAe,CAAA,0BAAA,EAA6B,QAAA,CAAS,MAAM,QAAQ,IAAI,CAAA,CAAA;AAC3E,MAAA,IAAI;AACA,QAAA,MAAM,SAAA,GAAa,MAAM,QAAA,CAAS,IAAA,EAAK;AACvC,QAAA,IAAI,SAAA,EAAW,KAAA,EAAO,YAAA,GAAe,SAAA,CAAU,KAAA;AAAA,aAAA,IACtC,SAAA,EAAW,OAAA,EAAS,YAAA,GAAe,SAAA,CAAU,OAAA;AAAA,MAC1D,CAAA,CAAA,MAAQ;AAAA,MAAE;AACV,MAAA,MAAM,IAAI,MAAM,YAAY,CAAA;AAAA,IAChC;AAEA,IAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,YAAY,MAAA,EAAkD;AAChE,IAAA,OAAO,IAAA,CAAK,OAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,MAAM,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,YAAY,MAAA,EAAkD;AAChE,IAAA,OAAO,IAAA,CAAK,OAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,MAAM,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,WAAW,YAAA,EAA4C;AACzD,IAAA,IAAA,CAAK,iBAAA,EAAkB;AAEvB,IAAA,MAAM,WAAW,MAAM,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,uBAAuB,CAAA,EAAG;AAAA,MAC5D,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACL,GAAG,KAAK,WAAA,EAAY;AAAA,QACpB,MAAA,EAAQ,6BAA6B,YAAY,CAAA;AAAA;AACrD,KACH,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AACd,MAAA,IAAI,YAAA,GAAe,CAAA,0BAAA,EAA6B,QAAA,CAAS,MAAM,CAAA,0BAAA,CAAA;AAC/D,MAAA,IAAI;AACA,QAAA,MAAM,SAAA,GAAa,MAAM,QAAA,CAAS,IAAA,EAAK;AACvC,QAAA,IAAI,SAAA,EAAW,KAAA,EAAO,YAAA,GAAe,SAAA,CAAU,KAAA;AAAA,aAAA,IACtC,SAAA,EAAW,OAAA,EAAS,YAAA,GAAe,SAAA,CAAU,OAAA;AAAA,MAC1D,CAAA,CAAA,MAAQ;AAAA,MAAE;AACV,MAAA,MAAM,IAAI,MAAM,YAAY,CAAA;AAAA,IAChC;AAEA,IAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,QAAQ,YAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,iBAAA,EAAkB;AAEvB,IAAA,MAAM,WAAW,MAAM,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,oBAAoB,CAAA,EAAG;AAAA,MACzD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACL,GAAG,KAAK,WAAA,EAAY;AAAA,QACpB,MAAA,EAAQ,6BAA6B,YAAY,CAAA;AAAA;AACrD,KACH,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AACd,MAAA,IAAI,YAAA,GAAe,CAAA,0BAAA,EAA6B,QAAA,CAAS,MAAM,CAAA,uBAAA,CAAA;AAC/D,MAAA,IAAI;AACA,QAAA,MAAM,SAAA,GAAa,MAAM,QAAA,CAAS,IAAA,EAAK;AACvC,QAAA,IAAI,SAAA,EAAW,KAAA,EAAO,YAAA,GAAe,SAAA,CAAU,KAAA;AAAA,aAAA,IACtC,SAAA,EAAW,OAAA,EAAS,YAAA,GAAe,SAAA,CAAU,OAAA;AAAA,MAC1D,CAAA,CAAA,MAAQ;AAAA,MAAE;AACV,MAAA,MAAM,IAAI,MAAM,YAAY,CAAA;AAAA,IAChC;AAAA,EACJ;AACJ;AC1KO,SAAS,SAAS,MAAA,EAAkC;AACvD,EAAA,OAAO,IAAI,SAAS,MAAM,CAAA;AAC9B;AAGO,IAAM,OAAA,GAAU","file":"index.js","sourcesContent":["/**\n * Types for @krutai/auth\n *\n * Pure fetch-based auth client — no local better-auth dependency.\n */\n\n/**\n * Default base URL for the KrutAI server.\n * Used when no serverUrl is provided in the config.\n */\nexport const DEFAULT_SERVER_URL = 'http://localhost:8000' as const;\n\n/**\n * Default path prefix for the auth routes on the server.\n * The server mounts better-auth under this prefix.\n */\nexport const DEFAULT_AUTH_PREFIX = '/lib-auth' as const;\n\n/**\n * Configuration options for KrutAuth\n */\nexport interface KrutAuthConfig {\n    /**\n     * KrutAI API key.\n     * Validated against the server before use.\n     * Optional: defaults to process.env.KRUTAI_API_KEY\n     */\n    apiKey?: string;\n\n    /**\n     * Base URL of your deployed KrutAI server.\n     * @default \"http://localhost:8000\"\n     * @example \"https://krut.ai\"\n     */\n    serverUrl?: string;\n\n    /**\n     * Path prefix for the auth routes on the server.\n     * @default \"/lib-auth\"\n     */\n    authPrefix?: string;\n\n    /**\n     * Whether to validate the API key against the server on initialization.\n     * Set to false to skip the validation round-trip (e.g. in tests).\n     * @default true\n     */\n    validateOnInit?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// Auth method parameter types\n// ---------------------------------------------------------------------------\n\n/**\n * Parameters for email/password sign-up\n */\nexport interface SignUpEmailParams {\n    /** User email */\n    email: string;\n    /** User password */\n    password: string;\n    /** Display name */\n    name: string;\n}\n\n/**\n * Parameters for email/password sign-in\n */\nexport interface SignInEmailParams {\n    /** User email */\n    email: string;\n    /** User password */\n    password: string;\n}\n\n// ---------------------------------------------------------------------------\n// Auth response types\n// ---------------------------------------------------------------------------\n\n/**\n * A user record returned by the auth server\n */\nexport interface AuthUser {\n    id: string;\n    email: string;\n    name?: string;\n    emailVerified: boolean;\n    createdAt: string;\n    updatedAt: string;\n    [key: string]: unknown;\n}\n\n/**\n * A session record returned by the auth server\n */\nexport interface AuthSessionRecord {\n    id: string;\n    userId: string;\n    token: string;\n    expiresAt: string;\n    [key: string]: unknown;\n}\n\n/**\n * Combined session + user response\n */\nexport interface AuthSession {\n    user: AuthUser;\n    session: AuthSessionRecord;\n}\n\n/**\n * Sign-up / sign-in response (contains token + user)\n */\nexport interface AuthResponse {\n    token: string;\n    user: AuthUser;\n    [key: string]: unknown;\n}\n","import type {\n    KrutAuthConfig,\n    SignUpEmailParams,\n    SignInEmailParams,\n    AuthSession,\n    AuthResponse,\n} from './types';\nimport { DEFAULT_SERVER_URL, DEFAULT_AUTH_PREFIX } from './types';\nimport {\n    validateApiKey,\n    validateApiKeyFormat,\n    KrutAIKeyValidationError,\n} from 'krutai';\n\nexport { KrutAIKeyValidationError };\n\n/**\n * KrutAuth — fetch-based authentication client for KrutAI\n *\n * Calls your deployed server's `/lib-auth` routes for all auth operations.\n * The API key is validated against the server before use.\n *\n * @example\n * ```typescript\n * import { KrutAuth } from '@krutai/auth';\n *\n * const auth = new KrutAuth({\n *   apiKey: process.env.KRUTAI_API_KEY!,\n *   serverUrl: 'https://krut.ai',\n * });\n *\n * await auth.initialize(); // validates key against server\n *\n * // Sign up\n * const { token, user } = await auth.signUpEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n *   name: 'Alice',\n * });\n *\n * // Sign in\n * const result = await auth.signInEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n * });\n *\n * // Get session\n * const session = await auth.getSession(result.token);\n * ```\n */\nexport class KrutAuth {\n    private readonly apiKey: string;\n    private readonly serverUrl: string;\n    private readonly authPrefix: string;\n    private readonly config: KrutAuthConfig;\n\n    private initialized = false;\n\n    constructor(config: KrutAuthConfig) {\n        this.config = config;\n        this.apiKey = config.apiKey || process.env.KRUTAI_API_KEY || '';\n        this.serverUrl = (config.serverUrl ?? DEFAULT_SERVER_URL).replace(/\\/$/, '');\n        this.authPrefix = (config.authPrefix ?? DEFAULT_AUTH_PREFIX).replace(/\\/$/, '');\n\n        // Basic format check immediately on construction\n        validateApiKeyFormat(this.apiKey);\n\n        // If validation is disabled, mark as ready immediately\n        if (config.validateOnInit === false) {\n            this.initialized = true;\n        }\n    }\n\n    /**\n     * Initialize the auth client.\n     * Validates the API key against the server, then marks client as ready.\n     *\n     * @throws {KrutAuthKeyValidationError} if the key is rejected or the server is unreachable\n     */\n    async initialize(): Promise<void> {\n        if (this.initialized) return;\n\n        if (this.config.validateOnInit !== false) {\n            await validateApiKey(this.apiKey, this.serverUrl);\n        }\n\n        this.initialized = true;\n    }\n\n    /**\n     * Returns whether the client has been initialized.\n     */\n    isInitialized(): boolean {\n        return this.initialized;\n    }\n\n    // ---------------------------------------------------------------------------\n    // Private helpers\n    // ---------------------------------------------------------------------------\n\n    private assertInitialized(): void {\n        if (!this.initialized) {\n            throw new Error(\n                'KrutAuth not initialized. Call initialize() first or set validateOnInit to false.'\n            );\n        }\n    }\n\n    /** Common request headers sent to the server on every auth call. */\n    private authHeaders(): Record<string, string> {\n        return {\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${this.apiKey}`,\n            'x-api-key': this.apiKey,\n        };\n    }\n\n    /**\n     * Build the full URL for an auth endpoint.\n     * @param path - The better-auth sub-path, e.g. `/api/auth/sign-up/email`\n     */\n    private url(path: string): string {\n        const cleanPath = path.startsWith('/') ? path : `/${path}`;\n        return `${this.serverUrl}${this.authPrefix}${cleanPath}`;\n    }\n\n    // ---------------------------------------------------------------------------\n    // Public Auth Methods\n    // ---------------------------------------------------------------------------\n\n    /**\n     * Generic request helper for any better-auth endpoint.\n     *\n     * Use this to call endpoints not covered by the convenience methods.\n     *\n     * @param method - HTTP method (GET, POST, etc.)\n     * @param path - The better-auth endpoint path (e.g. `/api/auth/sign-up/email`)\n     * @param body - Optional JSON body\n     * @returns The parsed JSON response\n     */\n    async request<T = unknown>(\n        method: string,\n        path: string,\n        body?: Record<string, unknown> | object\n    ): Promise<T> {\n        this.assertInitialized();\n\n        const options: RequestInit = {\n            method,\n            headers: this.authHeaders(),\n        };\n\n        if (body && method !== 'GET') {\n            options.body = JSON.stringify(body);\n        }\n\n        const response = await fetch(this.url(path), options);\n\n        if (!response.ok) {\n            let errorMessage = `Auth server returned HTTP ${response.status} for ${path}`;\n            try {\n                const errorData = (await response.json()) as { message?: string; error?: string };\n                if (errorData?.error) errorMessage = errorData.error;\n                else if (errorData?.message) errorMessage = errorData.message;\n            } catch { }\n            throw new Error(errorMessage);\n        }\n\n        return (await response.json()) as T;\n    }\n\n    /**\n     * Sign up a new user with email and password.\n     *\n     * Calls: POST {serverUrl}/lib-auth/api/auth/sign-up/email\n     *\n     * @param params - Sign-up parameters (email, password, name)\n     * @returns The auth response containing token and user\n     */\n    async signUpEmail(params: SignUpEmailParams): Promise<AuthResponse> {\n        return this.request<AuthResponse>('POST', '/api/auth/sign-up/email', params);\n    }\n\n    /**\n     * Sign in with email and password.\n     *\n     * Calls: POST {serverUrl}/lib-auth/api/auth/sign-in/email\n     *\n     * @param params - Sign-in parameters (email, password)\n     * @returns The auth response containing token and user\n     */\n    async signInEmail(params: SignInEmailParams): Promise<AuthResponse> {\n        return this.request<AuthResponse>('POST', '/api/auth/sign-in/email', params);\n    }\n\n    /**\n     * Get the current session for a user.\n     *\n     * Calls: GET {serverUrl}/lib-auth/api/auth/get-session\n     *\n     * @param sessionToken - The session token (Bearer token from sign-in)\n     * @returns The session containing user and session data\n     */\n    async getSession(sessionToken: string): Promise<AuthSession> {\n        this.assertInitialized();\n\n        const response = await fetch(this.url('/api/auth/get-session'), {\n            method: 'GET',\n            headers: {\n                ...this.authHeaders(),\n                Cookie: `better-auth.session_token=${sessionToken}`,\n            },\n        });\n\n        if (!response.ok) {\n            let errorMessage = `Auth server returned HTTP ${response.status} for /api/auth/get-session`;\n            try {\n                const errorData = (await response.json()) as { message?: string; error?: string };\n                if (errorData?.error) errorMessage = errorData.error;\n                else if (errorData?.message) errorMessage = errorData.message;\n            } catch { }\n            throw new Error(errorMessage);\n        }\n\n        return (await response.json()) as AuthSession;\n    }\n\n    /**\n     * Sign out the current user.\n     *\n     * Calls: POST {serverUrl}/lib-auth/api/auth/sign-out\n     *\n     * @param sessionToken - The session token to invalidate\n     */\n    async signOut(sessionToken: string): Promise<void> {\n        this.assertInitialized();\n\n        const response = await fetch(this.url('/api/auth/sign-out'), {\n            method: 'POST',\n            headers: {\n                ...this.authHeaders(),\n                Cookie: `better-auth.session_token=${sessionToken}`,\n            },\n        });\n\n        if (!response.ok) {\n            let errorMessage = `Auth server returned HTTP ${response.status} for /api/auth/sign-out`;\n            try {\n                const errorData = (await response.json()) as { message?: string; error?: string };\n                if (errorData?.error) errorMessage = errorData.error;\n                else if (errorData?.message) errorMessage = errorData.message;\n            } catch { }\n            throw new Error(errorMessage);\n        }\n    }\n}\n","/**\n * @krutai/auth — Authentication package for KrutAI\n *\n * A fetch-based wrapper that calls your deployed server's `/lib-auth` routes.\n * The user's API key is validated against the server before any auth call is made.\n *\n * @example Basic usage\n * ```typescript\n * import { krutAuth } from '@krutai/auth';\n *\n * const auth = krutAuth({\n *   apiKey: process.env.KRUTAI_API_KEY!,\n *   serverUrl: 'https://krut.ai',\n * });\n *\n * await auth.initialize(); // validates key with server\n *\n * const { token, user } = await auth.signUpEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n *   name: 'Alice',\n * });\n * ```\n *\n * @example Sign in\n * ```typescript\n * const auth = krutAuth({\n *   apiKey: process.env.KRUTAI_API_KEY!,\n *   serverUrl: 'https://krut.ai',\n * });\n * await auth.initialize();\n *\n * const { token, user } = await auth.signInEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n * });\n * ```\n *\n * @packageDocumentation\n */\n\nimport type { KrutAuthConfig } from './types';\nimport { KrutAuth } from './client';\n\nexport { KrutAuth } from './client';\nexport { KrutAIKeyValidationError } from './client';\nexport {\n    validateApiKey,\n    validateApiKeyFormat,\n} from 'krutai';\nexport type {\n    KrutAuthConfig,\n    SignUpEmailParams,\n    SignInEmailParams,\n    AuthSession,\n    AuthSessionRecord,\n    AuthUser,\n    AuthResponse,\n} from './types';\nexport { DEFAULT_SERVER_URL, DEFAULT_AUTH_PREFIX } from './types';\n\n/**\n * krutAuth — convenience factory.\n *\n * Creates a `KrutAuth` instance configured to call your server's `/lib-auth` routes.\n *\n * @param config - Auth configuration (`apiKey` and `serverUrl` are required)\n * @returns A `KrutAuth` instance — call `.initialize()` before use\n *\n * @example\n * ```typescript\n * import { krutAuth } from '@krutai/auth';\n *\n * const auth = krutAuth({\n *   apiKey: process.env.KRUTAI_API_KEY!,\n *   serverUrl: 'https://krut.ai',\n * });\n *\n * await auth.initialize();\n * const { token, user } = await auth.signInEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n * });\n * ```\n */\nexport function krutAuth(config: KrutAuthConfig): KrutAuth {\n    return new KrutAuth(config);\n}\n\n// Package metadata\nexport const VERSION = '0.4.0';\n"]}

package/dist/index.mjs

@@ -1,103 +1,189 @@
-import { betterAuth } from 'better-auth';
-import { validateApiKeyFormat, validateApiKeyWithService } from 'krutai';
-export { ApiKeyValidationError, validateApiKeyFormat, validateApiKeyWithService } from 'krutai';
+import { validateApiKeyFormat, validateApiKey } from 'krutai';
+export { KrutAIKeyValidationError, validateApiKey, validateApiKeyFormat } from 'krutai';
 
-// src/index.ts
+// src/types.ts
+var DEFAULT_SERVER_URL = "http://localhost:8000";
+var DEFAULT_AUTH_PREFIX = "/lib-auth";
 var KrutAuth = class {
-  /**
-   * Creates a new KrutAuth instance
-   * @param config - Configuration options
-   * @throws {ApiKeyValidationError} If API key is invalid
-   */
+  apiKey;
+  serverUrl;
+  authPrefix;
+  config;
+  initialized = false;
   constructor(config) {
     this.config = config;
-    const key = config.apiKey || process.env.KRUTAI_API_KEY || "";
-    validateApiKeyFormat(key);
-    this.apiKey = key;
+    this.apiKey = config.apiKey || process.env.KRUTAI_API_KEY || "";
+    this.serverUrl = (config.serverUrl ?? DEFAULT_SERVER_URL).replace(/\/$/, "");
+    this.authPrefix = (config.authPrefix ?? DEFAULT_AUTH_PREFIX).replace(/\/$/, "");
+    validateApiKeyFormat(this.apiKey);
     if (config.validateOnInit === false) {
-      this.initializeBetterAuth();
+      this.initialized = true;
     }
   }
-  apiKey;
-  betterAuthInstance = null;
-  initialized = false;
   /**
-   * Initialize the authentication client
-   * Validates the API key and sets up Better Auth
-   * @throws {ApiKeyValidationError} If API key validation fails
+   * Initialize the auth client.
+   * Validates the API key against the server, then marks client as ready.
+   *
+   * @throws {KrutAuthKeyValidationError} if the key is rejected or the server is unreachable
    */
   async initialize() {
-    if (this.initialized) {
-      return;
-    }
+    if (this.initialized) return;
     if (this.config.validateOnInit !== false) {
-      await validateApiKeyWithService(this.apiKey, this.config.serverUrl);
+      await validateApiKey(this.apiKey, this.serverUrl);
     }
-    this.initializeBetterAuth();
     this.initialized = true;
   }
   /**
-   * Initialize Better Auth instance
-   * @private
+   * Returns whether the client has been initialized.
    */
-  initializeBetterAuth() {
-    this.betterAuthInstance = betterAuth({
-      ...this.config.betterAuthOptions
-    });
+  isInitialized() {
+    return this.initialized;
   }
-  /**
-   * Get the Better Auth instance
-   * @throws {Error} If not initialized
-   */
-  getBetterAuth() {
-    if (!this.betterAuthInstance) {
+  // ---------------------------------------------------------------------------
+  // Private helpers
+  // ---------------------------------------------------------------------------
+  assertInitialized() {
+    if (!this.initialized) {
       throw new Error(
         "KrutAuth not initialized. Call initialize() first or set validateOnInit to false."
       );
     }
-    return this.betterAuthInstance;
+  }
+  /** Common request headers sent to the server on every auth call. */
+  authHeaders() {
+    return {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${this.apiKey}`,
+      "x-api-key": this.apiKey
+    };
   }
   /**
-   * Check if the client is initialized
+   * Build the full URL for an auth endpoint.
+   * @param path - The better-auth sub-path, e.g. `/api/auth/sign-up/email`
    */
-  isInitialized() {
-    return this.initialized;
+  url(path) {
+    const cleanPath = path.startsWith("/") ? path : `/${path}`;
+    return `${this.serverUrl}${this.authPrefix}${cleanPath}`;
+  }
+  // ---------------------------------------------------------------------------
+  // Public Auth Methods
+  // ---------------------------------------------------------------------------
+  /**
+   * Generic request helper for any better-auth endpoint.
+   *
+   * Use this to call endpoints not covered by the convenience methods.
+   *
+   * @param method - HTTP method (GET, POST, etc.)
+   * @param path - The better-auth endpoint path (e.g. `/api/auth/sign-up/email`)
+   * @param body - Optional JSON body
+   * @returns The parsed JSON response
+   */
+  async request(method, path, body) {
+    this.assertInitialized();
+    const options = {
+      method,
+      headers: this.authHeaders()
+    };
+    if (body && method !== "GET") {
+      options.body = JSON.stringify(body);
+    }
+    const response = await fetch(this.url(path), options);
+    if (!response.ok) {
+      let errorMessage = `Auth server returned HTTP ${response.status} for ${path}`;
+      try {
+        const errorData = await response.json();
+        if (errorData?.error) errorMessage = errorData.error;
+        else if (errorData?.message) errorMessage = errorData.message;
+      } catch {
+      }
+      throw new Error(errorMessage);
+    }
+    return await response.json();
   }
   /**
-   * Get the API key (useful for making authenticated requests)
-   * @returns The API key
+   * Sign up a new user with email and password.
+   *
+   * Calls: POST {serverUrl}/lib-auth/api/auth/sign-up/email
+   *
+   * @param params - Sign-up parameters (email, password, name)
+   * @returns The auth response containing token and user
    */
-  getApiKey() {
-    return this.apiKey;
+  async signUpEmail(params) {
+    return this.request("POST", "/api/auth/sign-up/email", params);
   }
   /**
-   * Sign in a user
-   * This is a convenience method that wraps Better Auth
-   * You can access the full Better Auth API via getBetterAuth()
+   * Sign in with email and password.
+   *
+   * Calls: POST {serverUrl}/lib-auth/api/auth/sign-in/email
+   *
+   * @param params - Sign-in parameters (email, password)
+   * @returns The auth response containing token and user
    */
-  async signIn() {
-    return this.getBetterAuth();
+  async signInEmail(params) {
+    return this.request("POST", "/api/auth/sign-in/email", params);
   }
   /**
-   * Sign out the current user
-   * You can access the full Better Auth API via getBetterAuth()
+   * Get the current session for a user.
+   *
+   * Calls: GET {serverUrl}/lib-auth/api/auth/get-session
+   *
+   * @param sessionToken - The session token (Bearer token from sign-in)
+   * @returns The session containing user and session data
    */
-  async signOut() {
-    return this.getBetterAuth();
+  async getSession(sessionToken) {
+    this.assertInitialized();
+    const response = await fetch(this.url("/api/auth/get-session"), {
+      method: "GET",
+      headers: {
+        ...this.authHeaders(),
+        Cookie: `better-auth.session_token=${sessionToken}`
+      }
+    });
+    if (!response.ok) {
+      let errorMessage = `Auth server returned HTTP ${response.status} for /api/auth/get-session`;
+      try {
+        const errorData = await response.json();
+        if (errorData?.error) errorMessage = errorData.error;
+        else if (errorData?.message) errorMessage = errorData.message;
+      } catch {
+      }
+      throw new Error(errorMessage);
+    }
+    return await response.json();
   }
   /**
-   * Get the current session
-   * You can access the full Better Auth API via getBetterAuth()
+   * Sign out the current user.
+   *
+   * Calls: POST {serverUrl}/lib-auth/api/auth/sign-out
+   *
+   * @param sessionToken - The session token to invalidate
    */
-  async getSession() {
-    return this.getBetterAuth();
+  async signOut(sessionToken) {
+    this.assertInitialized();
+    const response = await fetch(this.url("/api/auth/sign-out"), {
+      method: "POST",
+      headers: {
+        ...this.authHeaders(),
+        Cookie: `better-auth.session_token=${sessionToken}`
+      }
+    });
+    if (!response.ok) {
+      let errorMessage = `Auth server returned HTTP ${response.status} for /api/auth/sign-out`;
+      try {
+        const errorData = await response.json();
+        if (errorData?.error) errorMessage = errorData.error;
+        else if (errorData?.message) errorMessage = errorData.message;
+      } catch {
+      }
+      throw new Error(errorMessage);
+    }
   }
 };
-function krutAuth(options) {
-  return betterAuth(options);
+function krutAuth(config) {
+  return new KrutAuth(config);
 }
-var VERSION = "0.1.9";
+var VERSION = "0.4.0";
 
-export { KrutAuth, VERSION, krutAuth };
+export { DEFAULT_AUTH_PREFIX, DEFAULT_SERVER_URL, KrutAuth, VERSION, krutAuth };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/client.ts","../src/index.ts"],"names":["betterAuth"],"mappings":";;;;;AAiCO,IAAM,WAAN,MAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUlB,YAAoB,MAAA,EAAwB;AAAxB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAChB,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,IAAU,OAAA,CAAQ,IAAI,cAAA,IAAkB,EAAA;AAE3D,IAAA,oBAAA,CAAqB,GAAG,CAAA;AACxB,IAAA,IAAA,CAAK,MAAA,GAAS,GAAA;AAGd,IAAA,IAAI,MAAA,CAAO,mBAAmB,KAAA,EAAO;AACjC,MAAA,IAAA,CAAK,oBAAA,EAAqB;AAAA,IAC9B;AAAA,EACJ;AAAA,EAnBQ,MAAA;AAAA,EACA,kBAAA,GAAkC,IAAA;AAAA,EAClC,WAAA,GAAc,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBtB,MAAM,UAAA,GAA4B;AAC9B,IAAA,IAAI,KAAK,WAAA,EAAa;AAClB,MAAA;AAAA,IACJ;AAGA,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,cAAA,KAAmB,KAAA,EAAO;AACtC,MAAA,MAAM,yBAAA,CAA0B,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,OAAO,SAAS,CAAA;AAAA,IACtE;AAEA,IAAA,IAAA,CAAK,oBAAA,EAAqB;AAC1B,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,oBAAA,GAA6B;AACjC,IAAA,IAAA,CAAK,qBAAqB,UAAA,CAAW;AAAA,MACjC,GAAG,KAAK,MAAA,CAAO;AAAA,KAClB,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAA,GAAsB;AAClB,IAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC1B,MAAA,MAAM,IAAI,KAAA;AAAA,QACN;AAAA,OACJ;AAAA,IACJ;AACA,IAAA,OAAO,IAAA,CAAK,kBAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA,GAAyB;AACrB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA,GAAoB;AAChB,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAA,GAAwB;AAC1B,IAAA,OAAO,KAAK,aAAA,EAAc;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAA,GAAyB;AAC3B,IAAA,OAAO,KAAK,aAAA,EAAc;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,UAAA,GAA4B;AAC9B,IAAA,OAAO,KAAK,aAAA,EAAc;AAAA,EAC9B;AACJ;ACtFO,SAAS,SAAS,OAAA,EAA4B;AACjD,EAAA,OAAOA,WAAW,OAAO,CAAA;AAC7B;AAgBO,IAAM,OAAA,GAAU","file":"index.mjs","sourcesContent":["import { betterAuth } from 'better-auth';\nimport type { Auth } from 'better-auth';\nimport type { KrutAuthConfig } from './types';\n// Import validation from krutai peer dependency\nimport {\n    validateApiKeyFormat,\n    validateApiKeyWithService,\n} from 'krutai';\n\n/**\n * KrutAuth - Authentication client for KrutAI\n *\n * This class wraps Better Auth and adds API key validation\n * to ensure only authorized users can access authentication features.\n *\n * @example\n * ```typescript\n * import { KrutAuth } from '@krutai/auth';\n *\n * const auth = new KrutAuth({\n *   apiKey: 'your-api-key-here',\n *   betterAuthOptions: {\n *     // Better Auth configuration\n *   }\n * });\n *\n * // Initialize the client (validates API key)\n * await auth.initialize();\n *\n * // Use authentication features\n * const betterAuth = auth.getBetterAuth();\n * ```\n */\nexport class KrutAuth {\n    private apiKey: string;\n    private betterAuthInstance: Auth | null = null;\n    private initialized = false;\n\n    /**\n     * Creates a new KrutAuth instance\n     * @param config - Configuration options\n     * @throws {ApiKeyValidationError} If API key is invalid\n     */\n    constructor(private config: KrutAuthConfig) {\n        const key = config.apiKey || process.env.KRUTAI_API_KEY || '';\n        // Validate API key format immediately\n        validateApiKeyFormat(key);\n        this.apiKey = key;\n\n        // Initialize if validation is not required on init\n        if (config.validateOnInit === false) {\n            this.initializeBetterAuth();\n        }\n    }\n\n    /**\n     * Initialize the authentication client\n     * Validates the API key and sets up Better Auth\n     * @throws {ApiKeyValidationError} If API key validation fails\n     */\n    async initialize(): Promise<void> {\n        if (this.initialized) {\n            return;\n        }\n\n        // Validate API key with service if needed\n        if (this.config.validateOnInit !== false) {\n            await validateApiKeyWithService(this.apiKey, this.config.serverUrl);\n        }\n\n        this.initializeBetterAuth();\n        this.initialized = true;\n    }\n\n    /**\n     * Initialize Better Auth instance\n     * @private\n     */\n    private initializeBetterAuth(): void {\n        this.betterAuthInstance = betterAuth({\n            ...this.config.betterAuthOptions,\n        });\n    }\n\n    /**\n     * Get the Better Auth instance\n     * @throws {Error} If not initialized\n     */\n    getBetterAuth(): Auth {\n        if (!this.betterAuthInstance) {\n            throw new Error(\n                'KrutAuth not initialized. Call initialize() first or set validateOnInit to false.'\n            );\n        }\n        return this.betterAuthInstance;\n    }\n\n    /**\n     * Check if the client is initialized\n     */\n    isInitialized(): boolean {\n        return this.initialized;\n    }\n\n    /**\n     * Get the API key (useful for making authenticated requests)\n     * @returns The API key\n     */\n    getApiKey(): string {\n        return this.apiKey;\n    }\n\n    /**\n     * Sign in a user\n     * This is a convenience method that wraps Better Auth\n     * You can access the full Better Auth API via getBetterAuth()\n     */\n    async signIn(): Promise<Auth> {\n        return this.getBetterAuth();\n    }\n\n    /**\n     * Sign out the current user\n     * You can access the full Better Auth API via getBetterAuth()\n     */\n    async signOut(): Promise<Auth> {\n        return this.getBetterAuth();\n    }\n\n    /**\n     * Get the current session\n     * You can access the full Better Auth API via getBetterAuth()\n     */\n    async getSession(): Promise<Auth> {\n        return this.getBetterAuth();\n    }\n}\n","/**\n * @krutai/auth - Authentication package for KrutAI\n *\n * Requires `krutai` as a peer dependency (installed automatically).\n *\n * @example Server-side (Next.js API route / server component)\n * ```typescript\n * import { krutAuth } from \"@krutai/auth\";\n * import Database from \"better-sqlite3\";\n *\n * export const auth = krutAuth({\n *   database: new Database(\"./sqlite.db\"),\n *   emailAndPassword: { enabled: true },\n *   baseURL: process.env.BETTER_AUTH_BASE_URL ?? \"http://localhost:3000\",\n * });\n * ```\n *\n * @example Client-side (React / Next.js client component)\n * ```typescript\n * import { createAuthClient } from \"@krutai/auth/react\";\n *\n * export const authClient = createAuthClient({\n *   baseURL: process.env.NEXT_PUBLIC_APP_URL ?? \"http://localhost:3000\",\n * });\n *\n * export const { signIn, signUp, signOut, useSession } = authClient;\n * ```\n *\n * @packageDocumentation\n */\n\nimport { betterAuth } from 'better-auth';\nimport type { BetterAuthOptions } from 'better-auth';\n\n/**\n * krutAuth — drop-in replacement for betterAuth.\n *\n * Use this instead of importing betterAuth directly.\n *\n * @example\n * ```typescript\n * import { krutAuth } from \"@krutai/auth\";\n * import Database from \"better-sqlite3\";\n *\n * export const auth = krutAuth({\n *   database: new Database(\"./sqlite.db\"),\n *   emailAndPassword: { enabled: true },\n * });\n * ```\n */\nexport function krutAuth(options: BetterAuthOptions) {\n    return betterAuth(options);\n}\n\n// Export main KrutAuth class (API-key-protected wrapper)\nexport { KrutAuth } from './client';\n\n// Export types\nexport type { KrutAuthConfig, AuthSession, BetterAuthOptions } from './types';\n\n// Re-export minimal validator utilities (format/length check only)\nexport {\n    validateApiKeyFormat,\n    validateApiKeyWithService,\n    ApiKeyValidationError,\n} from 'krutai';\n\n// Package metadata\nexport const VERSION = '0.1.9';\n"]}
+{"version":3,"sources":["../src/types.ts","../src/client.ts","../src/index.ts"],"names":[],"mappings":";;;;AAUO,IAAM,kBAAA,GAAqB;AAM3B,IAAM,mBAAA,GAAsB;ACkC5B,IAAM,WAAN,MAAe;AAAA,EACD,MAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EAET,WAAA,GAAc,KAAA;AAAA,EAEtB,YAAY,MAAA,EAAwB;AAChC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA,CAAO,MAAA,IAAU,OAAA,CAAQ,IAAI,cAAA,IAAkB,EAAA;AAC7D,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,SAAA,IAAa,kBAAA,EAAoB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC3E,IAAA,IAAA,CAAK,cAAc,MAAA,CAAO,UAAA,IAAc,mBAAA,EAAqB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAG9E,IAAA,oBAAA,CAAqB,KAAK,MAAM,CAAA;AAGhC,IAAA,IAAI,MAAA,CAAO,mBAAmB,KAAA,EAAO;AACjC,MAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,IACvB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,UAAA,GAA4B;AAC9B,IAAA,IAAI,KAAK,WAAA,EAAa;AAEtB,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,cAAA,KAAmB,KAAA,EAAO;AACtC,MAAA,MAAM,cAAA,CAAe,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,SAAS,CAAA;AAAA,IACpD;AAEA,IAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA,GAAyB;AACrB,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAMQ,iBAAA,GAA0B;AAC9B,IAAA,IAAI,CAAC,KAAK,WAAA,EAAa;AACnB,MAAA,MAAM,IAAI,KAAA;AAAA,QACN;AAAA,OACJ;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA,EAGQ,WAAA,GAAsC;AAC1C,IAAA,OAAO;AAAA,MACH,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,MAAM,CAAA,CAAA;AAAA,MACpC,aAAa,IAAA,CAAK;AAAA,KACtB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,IAAI,IAAA,EAAsB;AAC9B,IAAA,MAAM,YAAY,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AACxD,IAAA,OAAO,GAAG,IAAA,CAAK,SAAS,GAAG,IAAA,CAAK,UAAU,GAAG,SAAS,CAAA,CAAA;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OAAA,CACF,MAAA,EACA,IAAA,EACA,IAAA,EACU;AACV,IAAA,IAAA,CAAK,iBAAA,EAAkB;AAEvB,IAAA,MAAM,OAAA,GAAuB;AAAA,MACzB,MAAA;AAAA,MACA,OAAA,EAAS,KAAK,WAAA;AAAY,KAC9B;AAEA,IAAA,IAAI,IAAA,IAAQ,WAAW,KAAA,EAAO;AAC1B,MAAA,OAAA,CAAQ,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACtC;AAEA,IAAA,MAAM,WAAW,MAAM,KAAA,CAAM,KAAK,GAAA,CAAI,IAAI,GAAG,OAAO,CAAA;AAEpD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AACd,MAAA,IAAI,YAAA,GAAe,CAAA,0BAAA,EAA6B,QAAA,CAAS,MAAM,QAAQ,IAAI,CAAA,CAAA;AAC3E,MAAA,IAAI;AACA,QAAA,MAAM,SAAA,GAAa,MAAM,QAAA,CAAS,IAAA,EAAK;AACvC,QAAA,IAAI,SAAA,EAAW,KAAA,EAAO,YAAA,GAAe,SAAA,CAAU,KAAA;AAAA,aAAA,IACtC,SAAA,EAAW,OAAA,EAAS,YAAA,GAAe,SAAA,CAAU,OAAA;AAAA,MAC1D,CAAA,CAAA,MAAQ;AAAA,MAAE;AACV,MAAA,MAAM,IAAI,MAAM,YAAY,CAAA;AAAA,IAChC;AAEA,IAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,YAAY,MAAA,EAAkD;AAChE,IAAA,OAAO,IAAA,CAAK,OAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,MAAM,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,YAAY,MAAA,EAAkD;AAChE,IAAA,OAAO,IAAA,CAAK,OAAA,CAAsB,MAAA,EAAQ,yBAAA,EAA2B,MAAM,CAAA;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,WAAW,YAAA,EAA4C;AACzD,IAAA,IAAA,CAAK,iBAAA,EAAkB;AAEvB,IAAA,MAAM,WAAW,MAAM,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,uBAAuB,CAAA,EAAG;AAAA,MAC5D,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACL,GAAG,KAAK,WAAA,EAAY;AAAA,QACpB,MAAA,EAAQ,6BAA6B,YAAY,CAAA;AAAA;AACrD,KACH,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AACd,MAAA,IAAI,YAAA,GAAe,CAAA,0BAAA,EAA6B,QAAA,CAAS,MAAM,CAAA,0BAAA,CAAA;AAC/D,MAAA,IAAI;AACA,QAAA,MAAM,SAAA,GAAa,MAAM,QAAA,CAAS,IAAA,EAAK;AACvC,QAAA,IAAI,SAAA,EAAW,KAAA,EAAO,YAAA,GAAe,SAAA,CAAU,KAAA;AAAA,aAAA,IACtC,SAAA,EAAW,OAAA,EAAS,YAAA,GAAe,SAAA,CAAU,OAAA;AAAA,MAC1D,CAAA,CAAA,MAAQ;AAAA,MAAE;AACV,MAAA,MAAM,IAAI,MAAM,YAAY,CAAA;AAAA,IAChC;AAEA,IAAA,OAAQ,MAAM,SAAS,IAAA,EAAK;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,QAAQ,YAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,iBAAA,EAAkB;AAEvB,IAAA,MAAM,WAAW,MAAM,KAAA,CAAM,IAAA,CAAK,GAAA,CAAI,oBAAoB,CAAA,EAAG;AAAA,MACzD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACL,GAAG,KAAK,WAAA,EAAY;AAAA,QACpB,MAAA,EAAQ,6BAA6B,YAAY,CAAA;AAAA;AACrD,KACH,CAAA;AAED,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AACd,MAAA,IAAI,YAAA,GAAe,CAAA,0BAAA,EAA6B,QAAA,CAAS,MAAM,CAAA,uBAAA,CAAA;AAC/D,MAAA,IAAI;AACA,QAAA,MAAM,SAAA,GAAa,MAAM,QAAA,CAAS,IAAA,EAAK;AACvC,QAAA,IAAI,SAAA,EAAW,KAAA,EAAO,YAAA,GAAe,SAAA,CAAU,KAAA;AAAA,aAAA,IACtC,SAAA,EAAW,OAAA,EAAS,YAAA,GAAe,SAAA,CAAU,OAAA;AAAA,MAC1D,CAAA,CAAA,MAAQ;AAAA,MAAE;AACV,MAAA,MAAM,IAAI,MAAM,YAAY,CAAA;AAAA,IAChC;AAAA,EACJ;AACJ;AC1KO,SAAS,SAAS,MAAA,EAAkC;AACvD,EAAA,OAAO,IAAI,SAAS,MAAM,CAAA;AAC9B;AAGO,IAAM,OAAA,GAAU","file":"index.mjs","sourcesContent":["/**\n * Types for @krutai/auth\n *\n * Pure fetch-based auth client — no local better-auth dependency.\n */\n\n/**\n * Default base URL for the KrutAI server.\n * Used when no serverUrl is provided in the config.\n */\nexport const DEFAULT_SERVER_URL = 'http://localhost:8000' as const;\n\n/**\n * Default path prefix for the auth routes on the server.\n * The server mounts better-auth under this prefix.\n */\nexport const DEFAULT_AUTH_PREFIX = '/lib-auth' as const;\n\n/**\n * Configuration options for KrutAuth\n */\nexport interface KrutAuthConfig {\n    /**\n     * KrutAI API key.\n     * Validated against the server before use.\n     * Optional: defaults to process.env.KRUTAI_API_KEY\n     */\n    apiKey?: string;\n\n    /**\n     * Base URL of your deployed KrutAI server.\n     * @default \"http://localhost:8000\"\n     * @example \"https://krut.ai\"\n     */\n    serverUrl?: string;\n\n    /**\n     * Path prefix for the auth routes on the server.\n     * @default \"/lib-auth\"\n     */\n    authPrefix?: string;\n\n    /**\n     * Whether to validate the API key against the server on initialization.\n     * Set to false to skip the validation round-trip (e.g. in tests).\n     * @default true\n     */\n    validateOnInit?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// Auth method parameter types\n// ---------------------------------------------------------------------------\n\n/**\n * Parameters for email/password sign-up\n */\nexport interface SignUpEmailParams {\n    /** User email */\n    email: string;\n    /** User password */\n    password: string;\n    /** Display name */\n    name: string;\n}\n\n/**\n * Parameters for email/password sign-in\n */\nexport interface SignInEmailParams {\n    /** User email */\n    email: string;\n    /** User password */\n    password: string;\n}\n\n// ---------------------------------------------------------------------------\n// Auth response types\n// ---------------------------------------------------------------------------\n\n/**\n * A user record returned by the auth server\n */\nexport interface AuthUser {\n    id: string;\n    email: string;\n    name?: string;\n    emailVerified: boolean;\n    createdAt: string;\n    updatedAt: string;\n    [key: string]: unknown;\n}\n\n/**\n * A session record returned by the auth server\n */\nexport interface AuthSessionRecord {\n    id: string;\n    userId: string;\n    token: string;\n    expiresAt: string;\n    [key: string]: unknown;\n}\n\n/**\n * Combined session + user response\n */\nexport interface AuthSession {\n    user: AuthUser;\n    session: AuthSessionRecord;\n}\n\n/**\n * Sign-up / sign-in response (contains token + user)\n */\nexport interface AuthResponse {\n    token: string;\n    user: AuthUser;\n    [key: string]: unknown;\n}\n","import type {\n    KrutAuthConfig,\n    SignUpEmailParams,\n    SignInEmailParams,\n    AuthSession,\n    AuthResponse,\n} from './types';\nimport { DEFAULT_SERVER_URL, DEFAULT_AUTH_PREFIX } from './types';\nimport {\n    validateApiKey,\n    validateApiKeyFormat,\n    KrutAIKeyValidationError,\n} from 'krutai';\n\nexport { KrutAIKeyValidationError };\n\n/**\n * KrutAuth — fetch-based authentication client for KrutAI\n *\n * Calls your deployed server's `/lib-auth` routes for all auth operations.\n * The API key is validated against the server before use.\n *\n * @example\n * ```typescript\n * import { KrutAuth } from '@krutai/auth';\n *\n * const auth = new KrutAuth({\n *   apiKey: process.env.KRUTAI_API_KEY!,\n *   serverUrl: 'https://krut.ai',\n * });\n *\n * await auth.initialize(); // validates key against server\n *\n * // Sign up\n * const { token, user } = await auth.signUpEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n *   name: 'Alice',\n * });\n *\n * // Sign in\n * const result = await auth.signInEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n * });\n *\n * // Get session\n * const session = await auth.getSession(result.token);\n * ```\n */\nexport class KrutAuth {\n    private readonly apiKey: string;\n    private readonly serverUrl: string;\n    private readonly authPrefix: string;\n    private readonly config: KrutAuthConfig;\n\n    private initialized = false;\n\n    constructor(config: KrutAuthConfig) {\n        this.config = config;\n        this.apiKey = config.apiKey || process.env.KRUTAI_API_KEY || '';\n        this.serverUrl = (config.serverUrl ?? DEFAULT_SERVER_URL).replace(/\\/$/, '');\n        this.authPrefix = (config.authPrefix ?? DEFAULT_AUTH_PREFIX).replace(/\\/$/, '');\n\n        // Basic format check immediately on construction\n        validateApiKeyFormat(this.apiKey);\n\n        // If validation is disabled, mark as ready immediately\n        if (config.validateOnInit === false) {\n            this.initialized = true;\n        }\n    }\n\n    /**\n     * Initialize the auth client.\n     * Validates the API key against the server, then marks client as ready.\n     *\n     * @throws {KrutAuthKeyValidationError} if the key is rejected or the server is unreachable\n     */\n    async initialize(): Promise<void> {\n        if (this.initialized) return;\n\n        if (this.config.validateOnInit !== false) {\n            await validateApiKey(this.apiKey, this.serverUrl);\n        }\n\n        this.initialized = true;\n    }\n\n    /**\n     * Returns whether the client has been initialized.\n     */\n    isInitialized(): boolean {\n        return this.initialized;\n    }\n\n    // ---------------------------------------------------------------------------\n    // Private helpers\n    // ---------------------------------------------------------------------------\n\n    private assertInitialized(): void {\n        if (!this.initialized) {\n            throw new Error(\n                'KrutAuth not initialized. Call initialize() first or set validateOnInit to false.'\n            );\n        }\n    }\n\n    /** Common request headers sent to the server on every auth call. */\n    private authHeaders(): Record<string, string> {\n        return {\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${this.apiKey}`,\n            'x-api-key': this.apiKey,\n        };\n    }\n\n    /**\n     * Build the full URL for an auth endpoint.\n     * @param path - The better-auth sub-path, e.g. `/api/auth/sign-up/email`\n     */\n    private url(path: string): string {\n        const cleanPath = path.startsWith('/') ? path : `/${path}`;\n        return `${this.serverUrl}${this.authPrefix}${cleanPath}`;\n    }\n\n    // ---------------------------------------------------------------------------\n    // Public Auth Methods\n    // ---------------------------------------------------------------------------\n\n    /**\n     * Generic request helper for any better-auth endpoint.\n     *\n     * Use this to call endpoints not covered by the convenience methods.\n     *\n     * @param method - HTTP method (GET, POST, etc.)\n     * @param path - The better-auth endpoint path (e.g. `/api/auth/sign-up/email`)\n     * @param body - Optional JSON body\n     * @returns The parsed JSON response\n     */\n    async request<T = unknown>(\n        method: string,\n        path: string,\n        body?: Record<string, unknown> | object\n    ): Promise<T> {\n        this.assertInitialized();\n\n        const options: RequestInit = {\n            method,\n            headers: this.authHeaders(),\n        };\n\n        if (body && method !== 'GET') {\n            options.body = JSON.stringify(body);\n        }\n\n        const response = await fetch(this.url(path), options);\n\n        if (!response.ok) {\n            let errorMessage = `Auth server returned HTTP ${response.status} for ${path}`;\n            try {\n                const errorData = (await response.json()) as { message?: string; error?: string };\n                if (errorData?.error) errorMessage = errorData.error;\n                else if (errorData?.message) errorMessage = errorData.message;\n            } catch { }\n            throw new Error(errorMessage);\n        }\n\n        return (await response.json()) as T;\n    }\n\n    /**\n     * Sign up a new user with email and password.\n     *\n     * Calls: POST {serverUrl}/lib-auth/api/auth/sign-up/email\n     *\n     * @param params - Sign-up parameters (email, password, name)\n     * @returns The auth response containing token and user\n     */\n    async signUpEmail(params: SignUpEmailParams): Promise<AuthResponse> {\n        return this.request<AuthResponse>('POST', '/api/auth/sign-up/email', params);\n    }\n\n    /**\n     * Sign in with email and password.\n     *\n     * Calls: POST {serverUrl}/lib-auth/api/auth/sign-in/email\n     *\n     * @param params - Sign-in parameters (email, password)\n     * @returns The auth response containing token and user\n     */\n    async signInEmail(params: SignInEmailParams): Promise<AuthResponse> {\n        return this.request<AuthResponse>('POST', '/api/auth/sign-in/email', params);\n    }\n\n    /**\n     * Get the current session for a user.\n     *\n     * Calls: GET {serverUrl}/lib-auth/api/auth/get-session\n     *\n     * @param sessionToken - The session token (Bearer token from sign-in)\n     * @returns The session containing user and session data\n     */\n    async getSession(sessionToken: string): Promise<AuthSession> {\n        this.assertInitialized();\n\n        const response = await fetch(this.url('/api/auth/get-session'), {\n            method: 'GET',\n            headers: {\n                ...this.authHeaders(),\n                Cookie: `better-auth.session_token=${sessionToken}`,\n            },\n        });\n\n        if (!response.ok) {\n            let errorMessage = `Auth server returned HTTP ${response.status} for /api/auth/get-session`;\n            try {\n                const errorData = (await response.json()) as { message?: string; error?: string };\n                if (errorData?.error) errorMessage = errorData.error;\n                else if (errorData?.message) errorMessage = errorData.message;\n            } catch { }\n            throw new Error(errorMessage);\n        }\n\n        return (await response.json()) as AuthSession;\n    }\n\n    /**\n     * Sign out the current user.\n     *\n     * Calls: POST {serverUrl}/lib-auth/api/auth/sign-out\n     *\n     * @param sessionToken - The session token to invalidate\n     */\n    async signOut(sessionToken: string): Promise<void> {\n        this.assertInitialized();\n\n        const response = await fetch(this.url('/api/auth/sign-out'), {\n            method: 'POST',\n            headers: {\n                ...this.authHeaders(),\n                Cookie: `better-auth.session_token=${sessionToken}`,\n            },\n        });\n\n        if (!response.ok) {\n            let errorMessage = `Auth server returned HTTP ${response.status} for /api/auth/sign-out`;\n            try {\n                const errorData = (await response.json()) as { message?: string; error?: string };\n                if (errorData?.error) errorMessage = errorData.error;\n                else if (errorData?.message) errorMessage = errorData.message;\n            } catch { }\n            throw new Error(errorMessage);\n        }\n    }\n}\n","/**\n * @krutai/auth — Authentication package for KrutAI\n *\n * A fetch-based wrapper that calls your deployed server's `/lib-auth` routes.\n * The user's API key is validated against the server before any auth call is made.\n *\n * @example Basic usage\n * ```typescript\n * import { krutAuth } from '@krutai/auth';\n *\n * const auth = krutAuth({\n *   apiKey: process.env.KRUTAI_API_KEY!,\n *   serverUrl: 'https://krut.ai',\n * });\n *\n * await auth.initialize(); // validates key with server\n *\n * const { token, user } = await auth.signUpEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n *   name: 'Alice',\n * });\n * ```\n *\n * @example Sign in\n * ```typescript\n * const auth = krutAuth({\n *   apiKey: process.env.KRUTAI_API_KEY!,\n *   serverUrl: 'https://krut.ai',\n * });\n * await auth.initialize();\n *\n * const { token, user } = await auth.signInEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n * });\n * ```\n *\n * @packageDocumentation\n */\n\nimport type { KrutAuthConfig } from './types';\nimport { KrutAuth } from './client';\n\nexport { KrutAuth } from './client';\nexport { KrutAIKeyValidationError } from './client';\nexport {\n    validateApiKey,\n    validateApiKeyFormat,\n} from 'krutai';\nexport type {\n    KrutAuthConfig,\n    SignUpEmailParams,\n    SignInEmailParams,\n    AuthSession,\n    AuthSessionRecord,\n    AuthUser,\n    AuthResponse,\n} from './types';\nexport { DEFAULT_SERVER_URL, DEFAULT_AUTH_PREFIX } from './types';\n\n/**\n * krutAuth — convenience factory.\n *\n * Creates a `KrutAuth` instance configured to call your server's `/lib-auth` routes.\n *\n * @param config - Auth configuration (`apiKey` and `serverUrl` are required)\n * @returns A `KrutAuth` instance — call `.initialize()` before use\n *\n * @example\n * ```typescript\n * import { krutAuth } from '@krutai/auth';\n *\n * const auth = krutAuth({\n *   apiKey: process.env.KRUTAI_API_KEY!,\n *   serverUrl: 'https://krut.ai',\n * });\n *\n * await auth.initialize();\n * const { token, user } = await auth.signInEmail({\n *   email: 'user@example.com',\n *   password: 'secret123',\n * });\n * ```\n */\nexport function krutAuth(config: KrutAuthConfig): KrutAuth {\n    return new KrutAuth(config);\n}\n\n// Package metadata\nexport const VERSION = '0.4.0';\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@krutai/auth",
-    "version": "0.2.3",
-    "description": "Authentication package for KrutAI — installs krutai, better-auth, and better-sqlite3 automatically",
+    "version": "0.4.2",
+    "description": "Authentication package for KrutAI — fetch-based client for your server's auth routes with API key validation",
     "main": "./dist/index.js",
     "module": "./dist/index.mjs",
     "types": "./dist/index.d.ts",
@@ -10,47 +10,30 @@
             "types": "./dist/index.d.ts",
             "import": "./dist/index.mjs",
             "require": "./dist/index.js"
-        },
-        "./react": {
-            "types": "./dist/react.d.ts",
-            "import": "./dist/react.mjs",
-            "require": "./dist/react.js"
-        },
-        "./next-js": {
-            "types": "./dist/next-js.d.ts",
-            "import": "./dist/next-js.mjs",
-            "require": "./dist/next-js.js"
         }
     },
     "files": [
         "dist",
-        "scripts",
         "README.md",
         "AI_REFERENCE.md"
     ],
     "scripts": {
+        "prepack": "npm run build",
         "build": "tsup",
         "dev": "tsup --watch",
         "clean": "rm -rf dist *.tsbuildinfo",
-        "typecheck": "tsc --noEmit",
-        "postinstall": "node scripts/migrate.js"
+        "typecheck": "tsc --noEmit"
     },
     "keywords": [
         "krutai",
         "auth",
         "authentication",
-        "better-auth"
+        "fetch"
     ],
     "author": "",
     "license": "MIT",
     "dependencies": {
-        "better-auth": "^1.1.7",
-        "better-sqlite3": "^12.0.0",
-        "@types/better-sqlite3": "^7.6.0",
-        "krutai": ">=0.1.4"
-    },
-    "peerDependencies": {
-        "krutai": ">=0.1.4"
+        "krutai": "0.1.6"
     },
     "devDependencies": {
         "@types/node": "^20.11.0",

package/dist/next-js.d.mts

@@ -1 +0,0 @@
-export * from 'better-auth/next-js';

package/dist/next-js.d.ts

@@ -1 +0,0 @@
-export * from 'better-auth/next-js';

package/dist/next-js.js

@@ -1,14 +0,0 @@
-'use strict';
-
-var nextJs = require('better-auth/next-js');
-
-
-
-Object.keys(nextJs).forEach(function (k) {
-	if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
-		enumerable: true,
-		get: function () { return nextJs[k]; }
-	});
-});
-//# sourceMappingURL=next-js.js.map
-//# sourceMappingURL=next-js.js.map

package/dist/next-js.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"next-js.js","sourcesContent":[]}

package/dist/next-js.mjs

@@ -1,3 +0,0 @@
-export * from 'better-auth/next-js';
-//# sourceMappingURL=next-js.mjs.map
-//# sourceMappingURL=next-js.mjs.map

package/dist/next-js.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"next-js.mjs","sourcesContent":[]}

package/dist/react.d.mts

@@ -1 +0,0 @@
-export * from 'better-auth/react';

package/dist/react.d.ts

@@ -1 +0,0 @@
-export * from 'better-auth/react';

package/dist/react.js

@@ -1,14 +0,0 @@
-'use strict';
-
-var react = require('better-auth/react');
-
-
-
-Object.keys(react).forEach(function (k) {
-	if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
-		enumerable: true,
-		get: function () { return react[k]; }
-	});
-});
-//# sourceMappingURL=react.js.map
-//# sourceMappingURL=react.js.map

package/dist/react.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"react.js","sourcesContent":[]}

package/dist/react.mjs

@@ -1,3 +0,0 @@
-export * from 'better-auth/react';
-//# sourceMappingURL=react.mjs.map
-//# sourceMappingURL=react.mjs.map

package/dist/react.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"react.mjs","sourcesContent":[]}

package/scripts/migrate.js

@@ -1,53 +0,0 @@
-#!/usr/bin/env node
-/**
- * @krutai/auth — postinstall migration script
- *
- * Automatically creates (or updates) the SQLite database tables
- * required by Better Auth. Runs after `npm install @krutai/auth`.
- *
- * The database file is placed at the project root as `sqlite.db`.
- * Set BETTER_AUTH_DB_PATH to override the location.
- * Set SKIP_KRUTAI_MIGRATE=1 to skip this script entirely.
- */
-
-const { execSync } = require('child_process');
-const path = require('path');
-const fs = require('fs');
-
-// Allow opt-out
-if (process.env.SKIP_KRUTAI_MIGRATE === '1') {
-    console.log('[krutai/auth] Skipping migration (SKIP_KRUTAI_MIGRATE=1)');
-    process.exit(0);
-}
-
-// Determine project root (where the consuming project's package.json lives)
-// When postinstall runs under node_modules/@krutai/auth, we go up 3 levels.
-const projectRoot = path.resolve(__dirname, '..', '..', '..', '..');
-
-// Fallback: if we're being run from within the monorepo itself, use cwd
-const packageJson = path.join(projectRoot, 'package.json');
-const root = fs.existsSync(packageJson) ? projectRoot : process.cwd();
-
-const dbPath = process.env.BETTER_AUTH_DB_PATH ?? path.join(root, 'sqlite.db');
-
-console.log('[krutai/auth] Running Better Auth SQLite migration...');
-console.log(`[krutai/auth] Database: ${dbPath}`);
-
-try {
-    // better-auth provides a CLI via `npx better-auth migrate`
-    // Pass the db path via env so it's picked up automatically
-    execSync('npx better-auth migrate --yes', {
-        cwd: root,
-        stdio: 'inherit',
-        env: {
-            ...process.env,
-            BETTER_AUTH_DB_PATH: dbPath,
-            BETTER_AUTH_DATABASE_URL: `file:${dbPath}`,
-        },
-    });
-    console.log('[krutai/auth] Migration complete. SQLite tables are ready.');
-} catch (err) {
-    // Don't fail the install — the user may not have a lib/auth.ts yet
-    console.warn('[krutai/auth] Migration skipped or failed (this is OK if you have not created lib/auth.ts yet).');
-    console.warn('[krutai/auth] Run `npx better-auth migrate` manually after setting up your auth config.');
-}